Edit tour

Windows Analysis Report
https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download

Overview

General Information

Sample URL:	https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download
Analysis ID:	1406549
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for dropped file

HTML page contains suspicious onload / onerror event

Allocates memory with a write watch (potentially for evading sandboxes)

Contains functionality for read data from the clipboard

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to check if a window is minimized (may be used to check if an application is visible)

Contains functionality to dynamically determine API calls

Contains functionality to open a port and listen for incoming connection (possibly a backdoor)

Contains functionality to query CPU information (cpuid)

Contains functionality to query locales information (e.g. system language)

Contains functionality to read the PEB

Contains functionality to read the clipboard data

Contains functionality to retrieve information about pressed keystrokes

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Creates a process in suspended mode (likely to inject code)

Detected non-DNS traffic on DNS port

Detected potential crypto function

Drops PE files

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found iframes

Found inlined nop instructions (likely shell or obfuscated code)

Found large amount of non-executed APIs

HTML page contains hidden URLs or javascript code

HTML title does not match URL

May sleep (evasive loops) to hinder dynamic analysis

PE file contains more sections than normal

PE file contains sections with non-standard names

PE file overlay found

Queries the installed Java version

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: Wow6432Node CurrentVersion Autorun Keys Modification

Stores files to the Windows start menu directory

Tries to load missing DLLs

Uses cacls to modify the permissions of files

Uses code obfuscation techniques (call, push, ret)

Very long cmdline option found, this is very uncommon (may be encrypted or packed)

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6088 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6196 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=2004,i,4405816494534265162,16023283234935556524,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1992 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=8160 --field-trial-handle=2004,i,4405816494534265162,16023283234935556524,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

docfetcher_1.1.25_win32_setup.exe (PID: 2752 cmdline: "C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe" MD5: 9198C3C72789AEFB6790A60EEF7D33B0)

docfetcher-daemon-windows.exe (PID: 876 cmdline: C:\Program Files (x86)\DocFetcher\docfetcher-daemon-windows.exe MD5: 560CDB1150BB331C4571F45E51E2EADC)

DocFetcher.exe (PID: 6552 cmdline: C:\Program Files (x86)\DocFetcher\DocFetcher.exe MD5: 5D66247846EF8F577C318965D6036536)

javaw.exe (PID: 8152 cmdline: "C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe" -Xmx1024m -Djava.library.path="lib" -enableassertions -Xss2m -classpath "lib;lib\ansj_lucene6_plug-5.1.2.0.jar;lib\ansj_seg-5.1.2.jar;lib\ant-1.10.3.jar;lib\bcmail-jdk15on-160.jar;lib\bcpkix-jdk15on-160.jar;lib\bcprov-jdk15on-160.jar;lib\commons-codec-1.10.jar;lib\commons-collections4-4.1.jar;lib\commons-compress-1.4.1.jar;lib\commons-io-2.4.jar;lib\commons-logging-1.2.jar;lib\curvesapi-1.04.jar;lib\fontbox-2.0.13.jar;lib\guava-12.0.jar;lib\J7zip_4.43_alpha2.jar;lib\java-libpst-0.8.1.jar;lib\java-unrar-0.3.jar;lib\javolution-5.5.1.jar;lib\jericho-html-3.4.jar;lib\jexcelapi-2.6.12.jar;lib\jintellitype-1.3.7.jar;lib\jna-3.2.7.jar;lib\jna-platform-3.2.7.jar;lib\juniversalchardet-1.0.3.jar;lib\JXGrabKey-0.3.2.jar;lib\log4j-1.2.17.jar;lib\lucene-analyzers-common-6.6.3.jar;lib\lucene-backward-codecs-6.6.3.jar;lib\lucene-core-6.6.3.jar;lib\lucene-highlighter-6.6.3.jar;lib\lucene-join-6.6.3.jar;lib\lucene-memory-6.6.3.jar;lib\lucene-queries-6.6.3.jar;lib\lucene-queryparser-6.6.3.jar;lib\metadata-extractor-2.11.0.jar;lib\mime-util-2.1.3.jar;lib\net.sourceforge.docfetcher_1.1.25_20210525-2212.jar;lib\nlp-lang-1.7.7.jar;lib\pdfbox-2.0.13.jar;lib\poi-3.17.jar;lib\poi-ooxml-3.17.jar;lib\poi-ooxml-schemas-3.17.jar;lib\poi-scratchpad-3.17.jar;lib\py4j0.10.7-py3.jar;lib\slf4j-api-1.6.1.jar;lib\slf4j-nop-1.6.1.jar;lib\truezip-driver-file-7.7.7.jar;lib\truezip-driver-tar-7.7.7.jar;lib\truezip-driver-zip-7.7.7.jar;lib\truezip-file-7.7.7.jar;lib\truezip-kernel-7.7.7.jar;lib\truezip-swing-7.7.7.jar;lib\xmlbeans-2.6.0.jar;lib\xmpbox-2.0.13.jar;lib\xmpcore-5.1.3.jar;lib\xz-1.3.jar" net.sourceforge.docfetcher.Main MD5: 6E0F4F812AE02FBCB744A929E74A04B8)

icacls.exe (PID: 2396 cmdline: C:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M MD5: 2E49585E4E08565F52090B144062F97E)

conhost.exe (PID: 5652 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cleanup

Sigma Signatures

Sigma detected: Wow6432Node CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Program Files (x86)\DocFetcher\docfetcher-daemon-windows.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe, ProcessId: 2752, TargetObject: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\DocFetcher-Daemon

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for dropped file

Source: C:\Program Files (x86)\DocFetcher\docfetcher-daemon-windows.exe

Virustotal: Detection: 6%

Perma Link

Phishing

HTML page contains suspicious onload / onerror event

Source: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: (function(img) { window.ftclick = ""; window.ft_custom = "abajh0ied
Source: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: (function(img) { window.ftclick = ""; window.ft_custom = "abajh0ied
Source: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: (function(img) { window.ftclick = ""; window.ft_custom = "abajh0ied

Source: https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download	HTTP Parser: Iframe src: https://ads.pubmatic.com/AdServer/js/topics/topics_frame.html?bidder=pubmatic
Source: https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download	HTTP Parser: Iframe src: https://c.sf-syn.com/conversion_outbound_tracker/sf
Source: https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download	HTTP Parser: Iframe src: https://pbid.pro-market.net/engine?site=143572;size=1x1;e=0;dt=0;category=twljteyw08d;kw=ewnf2otl%205ncgmk4yea%20a%200%203d%20oznma%20kdtvx%206ee;rnd=(1710158201651)
Source: https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download	HTTP Parser: Iframe src: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=162538
Source: https://sourceforge.net/projects/docfetcher/postdownload	HTTP Parser: Iframe src: https://ads.pubmatic.com/AdServer/js/topics/topics_frame.html?bidder=pubmatic
Source: https://sourceforge.net/projects/docfetcher/postdownload	HTTP Parser: Iframe src: https://2e364cc7caa3f2e10b0fb666ab9496ef.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Source: https://sourceforge.net/projects/docfetcher/postdownload	HTTP Parser: Iframe src: https://c.sf-syn.com/conversion_outbound_tracker/sf
Source: https://sourceforge.net/projects/docfetcher/postdownload	HTTP Parser: Iframe src: https://2e364cc7caa3f2e10b0fb666ab9496ef.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Source: https://sourceforge.net/projects/docfetcher/postdownload	HTTP Parser: Iframe src: https://pbid.pro-market.net/engine?site=143572;size=1x1;e=0;dt=0;category=twljteyw08d;kw=gqe5%20od1%20enrf%20135uc%20mgbff139vr;rnd=(1710158223957)
Source: https://sourceforge.net/projects/docfetcher/postdownload	HTTP Parser: Iframe src: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Source: https://sourceforge.net/projects/docfetcher/postdownload	HTTP Parser: Iframe src: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=162538
Source: https://sourceforge.net/projects/docfetcher/postdownload	HTTP Parser: Iframe src: //csync.smartadserver.com/diff/rtb/csync/CookieSync.html?hasrtb=true&nwid=4559&dcid=10&iscname=false&cname=&gdpr=0&gdpr_consent=

Source: https://fa43ad241d35ec2179c810415c543e64.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html

HTTP Parser: Base64 decoded: ai=B3UnIffHuZe7HGMjY6tkPxN28qAKZveq0RgAAABABIOX_oS44AViAmu3WgwRgyd7ohsijkBmyAQ9zb3VyY2Vmb3JnZS5uZXS6AQlnZnBfaW1hZ2XIAQLaAW5odHRwczovL3NvdXJjZWZvcmdlLm5ldC9wcm9qZWN0cy9kb2NmZXRjaGVyL2ZpbGVzL2RvY2ZldGNoZXIvMS4xLjI1L2RvY2ZldGNoZXJfMS4xLjI1X3dpbjMyX3NldHVwLmV...

Source: https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download	HTTP Parser: Title: Download docfetcher_1.1.25_win32_setup.exe (DocFetcher) does not match URL
Source: https://sourceforge.net/projects/docfetcher/postdownload	HTTP Parser: Title: Find out more about DocFetcher \| SourceForge.net does not match URL

Source: https://pbid.pro-market.net/engine?site=143572;size=1x1;e=0;dt=0;category=twljteyw08d;kw=ewnf2otl%205ncgmk4yea%20a%200%203d%20oznma%20kdtvx%206ee;rnd=(1710158201651)	HTTP Parser: No favicon
Source: https://fa43ad241d35ec2179c810415c543e64.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://fa43ad241d35ec2179c810415c543e64.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://fa43ad241d35ec2179c810415c543e64.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://fa43ad241d35ec2179c810415c543e64.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=162538	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=162538	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=162538	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=162538	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=162538	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=9A176ADB-73F4-4BD8-A648-23F2443493B5&redir=true&gdpr=0&gdpr_consent=&dcc=t	HTTP Parser: No favicon
Source: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html	HTTP Parser: No favicon
Source: https://sync-tm.everesttech.net/ct/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=&_test=Ze7xgAAAAwa1TAAh	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAJk8EYVlWhHwN6XiilAAAAAAA&expiration=1710244611&nuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&is_secure=true&gdpr_consent=&gdpr=0	HTTP Parser: No favicon
Source: https://match.sharethrough.com/sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAJLoB_DnsBwwNPtb-EAAAAAAA&expiration=1710244611&nuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&is_secure=true&gdpr_consent=&gdpr=0	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAKjSefg7ltFQMpDsPHAAAAAAA&expiration=1710244612&nuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&is_secure=true&gdpr_consent=&gdpr=0	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AAKPDU7L3eMAABWFZYx_mg&gdpr=0	HTTP Parser: No favicon
Source: https://pbid.pro-market.net/engine?site=143572;size=1x1;e=0;dt=0;category=twljteyw08d;kw=gqe5%20od1%20enrf%20135uc%20mgbff139vr;rnd=(1710158223957)	HTTP Parser: No favicon
Source: https://2e364cc7caa3f2e10b0fb666ab9496ef.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://2e364cc7caa3f2e10b0fb666ab9496ef.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://2e364cc7caa3f2e10b0fb666ab9496ef.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://2e364cc7caa3f2e10b0fb666ab9496ef.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=	HTTP Parser: No favicon
Source: https://cm.adgrx.com/bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=7822940101119878936&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=1973209972465453479	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:rQpbF21I1RJEgU5&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=91&partneruserid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=32&partneruserid=2407834391265652961&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://csync.smartadserver.com/diff/rtb/csync/CookieSync.html?hasrtb=true&nwid=4559&dcid=10&iscname=false&cname=&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://csync.smartadserver.com/diff/rtb/csync/CookieSync.html?hasrtb=true&nwid=4559&dcid=10&iscname=false&cname=&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://tpc.googlesyndication.com/sodar/62bHydCX.html	HTTP Parser: No favicon
Source: https://ssum-sec.casalemedia.com/usermatch?s=179394&cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D33%26partneruserid%3D&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://eu-u.openx.net/w/1.0/cm?id=a547219b-814b-4e3e-8a4f-35c044fa1891&ph=ec81d0b7-c42e-4a42-b97a-9305af647d30&r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D100%26partneruserid%3D%7BOPENX_ID%7D&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://a.tribalfusion.com/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/xbbe/pixel?d=CI2VFxDq2JIBGNGSv6IBMAE&v=APEucNWR6j7Zdo_ZWHJ1BAEVA_bD2i-y6soHEJkg2uUZkLhy8PuOAjjkq5YKWSti2AeaGMblvOf8Jhitztycsp1WAo5UjRXfCQ	HTTP Parser: No favicon
Source: https://dis.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/index.html?ev=01_250	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/index.html?ev=01_250	HTTP Parser: No favicon
Source: https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=9A176ADB-73F4-4BD8-A648-23F2443493B5	HTTP Parser: No favicon
Source: https://pbid.pro-market.net/engine?site=143572;size=1x1;e=0;dt=0;category=twljteyw08d;kw=ew37vtvpnj;rnd=(1710158240574)	HTTP Parser: No favicon
Source: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=GTz-sRdlCHiHoCwUpfHuZQ	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/xbbe/pixel?d=CJfnugEQw7j0ARj888CDAjAB&v=APEucNUtRYcCTiUSaNym1risqulco6fsZINI35TLxttHiGkQZ9C38O-l2AZ3i-5nU8X5jCUabvkoQnUhZlvjaytYQqmWA5yVkA	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=9sM9r_oDVSN4eO2NU2v64poQaSY&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzMmdGw9MTI5NjAw&piggybackCookie=Q7634446451890918085	HTTP Parser: No favicon
Source: https://c1.adform.net/serving/cookie/match?party=14&cid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA=&piggybackCookie=RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005	HTTP Parser: No favicon
Source: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html	HTTP Parser: No favicon
Source: https://tag.crsspxl.com/s2.html?d=2396&r=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Fpostdownload&t=DocFetcher%20download%20%7C%20SourceForge.net&u=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2F&b2=%20CategoriesFile%20Managers%2C%20Search%2C%20Source%20Code%20Management%20LicenseEclipse%20Public%20License%20%20%20%20%20%20%20	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon

Source: https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download	HTTP Parser: No <meta name="author".. found
Source: https://sourceforge.net/projects/docfetcher/postdownload	HTTP Parser: No <meta name="author".. found

Source: https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download	HTTP Parser: No <meta name="copyright".. found
Source: https://sourceforge.net/projects/docfetcher/postdownload	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe

Registry value created: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION javaw.exe

Jump to behavior

Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe

File created: C:\Program Files (x86)\DocFetcher\Readme.txt

Jump to behavior

Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49916 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.61.214.98:443 -> 192.168.2.16:49969 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.61.214.98:443 -> 192.168.2.16:49986 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:50674 version: TLS 1.2

Source:

Binary string: C:\src\NSIS-ApplicationID\Release\ApplicationID.pdb source: docfetcher_1.1.25_win32_setup.exe, 0000000D.00000002.1599715572.000000000040A000.00000004.00000001.01000000.00000006.sdmp

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_6A3B9A8A FindFirstFileExA,		16_2_6A3B9A8A
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_6C5446C5 FindFirstFileExA,		16_2_6C5446C5

Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File opened: C:\Users\user\AppData	Jump to behavior

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe

Code function: 4x nop then cmp eax, dword ptr [ecx+04h]

16_2_02DDBC98

Source: global traffic

TCP traffic: 192.168.2.16:49808 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.159
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.159
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.159
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 216.22.16.5
Source: unknown	TCP traffic detected without corresponding DNS query: 216.22.16.5
Source: unknown	TCP traffic detected without corresponding DNS query: 216.22.16.5
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.159
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.159
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.159
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.159
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.46
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.159
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.159
Source: unknown	TCP traffic detected without corresponding DNS query: 216.22.16.5
Source: unknown	TCP traffic detected without corresponding DNS query: 216.22.16.5
Source: unknown	TCP traffic detected without corresponding DNS query: 216.22.16.5
Source: unknown	TCP traffic detected without corresponding DNS query: 216.22.16.5
Source: unknown	TCP traffic detected without corresponding DNS query: 216.22.16.5
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.159
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.159
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.159
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.159
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.159
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.159
Source: unknown	TCP traffic detected without corresponding DNS query: 216.22.16.5
Source: unknown	TCP traffic detected without corresponding DNS query: 216.22.16.5
Source: unknown	TCP traffic detected without corresponding DNS query: 216.22.16.5
Source: unknown	TCP traffic detected without corresponding DNS query: 216.22.16.5
Source: unknown	TCP traffic detected without corresponding DNS query: 216.22.16.5
Source: unknown	TCP traffic detected without corresponding DNS query: 216.22.16.5
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.159
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.159
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.159
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.159
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.159
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.159
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.159
Source: unknown	TCP traffic detected without corresponding DNS query: 216.22.16.5
Source: unknown	TCP traffic detected without corresponding DNS query: 216.22.16.5
Source: unknown	TCP traffic detected without corresponding DNS query: 216.22.16.5

Source: global traffic	HTTP traffic detected: GET /projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download HTTP/1.1Host: sourceforge.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /conversion_outbound_tracker/sf HTTP/1.1Host: c.sf-syn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /prebid/v1 HTTP/1.1Host: prg.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; pid=357523025427868812; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549986478804&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6
Source: global traffic	HTTP traffic detected: GET /rtb/bid?src=prebid_prebid_8.13.0 HTTP/1.1Host: ap.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=ITYsABZHyF-4XRyhT4uuZCmM
Source: global traffic	HTTP traffic detected: GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1Host: btlr.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b6a7905b-7647-4076-aa36-593faf81a60f
Source: global traffic	HTTP traffic detected: GET /prebid/v1 HTTP/1.1Host: prg.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=7882559758155558074; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988071309&o=1
Source: global traffic	HTTP traffic detected: GET /tag?o=5098683085881344&upapi=true HTTP/1.1Host: btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /directory/tp3/?b=69707&c=13445&z=67089&cb=79bed62052 HTTP/1.1Host: sourceforge.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/downloadAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFdTcypzJDJDIXQ0IyV8TSs2KyVLUnhDNjRCQG1NaG1ObnslVjt1eEhQVFhlfUt4Q0RZVm83JUwzdTRleEdVdGNxOzQxaF9pO1M-UEdsQyhscUh6QGRHekhJNytYIXlEMlNtVWF-dlY_cWVXSVA8aUVLR0ZRU3w4diY_cypDOEcpNmJ2NWVCJTNnODZvRXA7enw9TV5Xa2w0RnpuOzBzRGhqMTc3ZG8pU0duMT5tLWpvanloN0Z6e0VeNGpPezQ3SHojTHxDR3AhKE1SKWUhSkwzZn1NNzJsY21kSG9qJnhRMDk5PiMqNjJvQUxoMVllP2pkKFA0O2tWJGw7ZipwRHBZOzZBaUppY0FPZHxZTnlBKEhvYHhCTz92VkZSe31TPkYifQ.KgEiMfdHyRq89be7fSK-sXsSnVuiJxBAXYJndndkHVc
Source: global traffic	HTTP traffic detected: GET /ut/v3/prebid HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: icu=ChgIkPoyEAoYASABKAEw9-K7rwY4AUABSAEQ9-K7rwYYAA..; uuid2=7822940101119878936
Source: global traffic	HTTP traffic detected: GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1Host: btlr.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=c0d43d82-8e4c-4ee0-a0dc-61467e0a79fb
Source: global traffic	HTTP traffic detected: GET /directory/tp3/?b=69513&c=13409&z=66895&cb=8b302bed4f HTTP/1.1Host: sourceforge.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/downloadAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFdTcypzJDJDIXQ0IyV8TSs2KyVLUnhDNjRCQG1NaG1ObnslVjt1eEhQVFhlfUt4Q0RZVm83JUwzdTRleEdVdGNxOzQxaF9pO1M-UEdsQyhscUh6QGRHekhJNytYIXlEMlNtVWF-dlY_cWVXSVA8aUVLR0ZRU3w4diY_cypDOEcpNmJ2NWVCJTNnODZvRXA7enw9TV5Xa2w0RnpuOzBzRGhqMTc3ZG8pU0duMT5tLWpvanloN0Z6e0VeNGpPezQ3SHojTHxDR3AhKE1SKWUhSkwzZn1NNzJsY21kSG9qJnhRMDk5PiMqNjJvQUxoMVllP2pkKFA0O2tWJGw7ZipwRHBZOzZBaUppY0FPZHxZTnlBKEhvYHhCTz92VkZSe31TPkYifQ.KgEiMfdHyRq89be7fSK-sXsSnVuiJxBAXYJndndkHVc
Source: global traffic	HTTP traffic detected: GET /directory/tp3/?b=57541&c=11165&z=54863&cb=d6140d077d HTTP/1.1Host: sourceforge.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/downloadAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFdTcypzJDJDIXQ0IyV8TSs2KyVLUnhDNjRCQG1NaG1ObnslVjt1eEhQVFhlfUt4Q0RZVm83JUwzdTRleEdVdGNxOzQxaF9pO1M-UEdsQyhscUh6QGRHekhJNytYIXlEMlNtVWF-dlY_cWVXSVA8aUVLR0ZRU3w4diY_cypDOEcpNmJ2NWVCJTNnODZvRXA7enw9TV5Xa2w0RnpuOzBzRGhqMTc3ZG8pU0duMT5tLWpvanloN0Z6e0VeNGpPezQ3SHojTHxDR3AhKE1SKWUhSkwzZn1NNzJsY21kSG9qJnhRMDk5PiMqNjJvQUxoMVllP2pkKFA0O2tWJGw7ZipwRHBZOzZBaUppY0FPZHxZTnlBKEhvYHhCTz92VkZSe31TPkYifQ.KgEiMfdHyRq89be7fSK-sXsSnVuiJxBAXYJndndkHVc
Source: global traffic	HTTP traffic detected: GET /directory/tp3/?b=50727&c=9846&z=48052&cb=5a5b4d3b8a HTTP/1.1Host: sourceforge.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/downloadAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFdTcypzJDJDIXQ0IyV8TSs2KyVLUnhDNjRCQG1NaG1ObnslVjt1eEhQVFhlfUt4Q0RZVm83JUwzdTRleEdVdGNxOzQxaF9pO1M-UEdsQyhscUh6QGRHekhJNytYIXlEMlNtVWF-dlY_cWVXSVA8aUVLR0ZRU3w4diY_cypDOEcpNmJ2NWVCJTNnODZvRXA7enw9TV5Xa2w0RnpuOzBzRGhqMTc3ZG8pU0duMT5tLWpvanloN0Z6e0VeNGpPezQ3SHojTHxDR3AhKE1SKWUhSkwzZn1NNzJsY21kSG9qJnhRMDk5PiMqNjJvQUxoMVllP2pkKFA0O2tWJGw7ZipwRHBZOzZBaUppY0FPZHxZTnlBKEhvYHhCTz92VkZSe31TPkYifQ.KgEiMfdHyRq89be7fSK-sXsSnVuiJxBAXYJndndkHVc
Source: global traffic	HTTP traffic detected: GET /prebid/v1 HTTP/1.1Host: prg.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=7223250894893526090; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549987995906&o=1
Source: global traffic	HTTP traffic detected: GET /directory/tp3/?b=66907&c=12915&z=64281&cb=969ed981b1 HTTP/1.1Host: sourceforge.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/downloadAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFdTcypzJDJDIXQ0IyV8TSs2KyVLUnhDNjRCQG1NaG1ObnslVjt1eEhQVFhlfUt4Q0RZVm83JUwzdTRleEdVdGNxOzQxaF9pO1M-UEdsQyhscUh6QGRHekhJNytYIXlEMlNtVWF-dlY_cWVXSVA8aUVLR0ZRU3w4diY_cypDOEcpNmJ2NWVCJTNnODZvRXA7enw9TV5Xa2w0RnpuOzBzRGhqMTc3ZG8pU0duMT5tLWpvanloN0Z6e0VeNGpPezQ3SHojTHxDR3AhKE1SKWUhSkwzZn1NNzJsY21kSG9qJnhRMDk5PiMqNjJvQUxoMVllP2pkKFA0O2tWJGw7ZipwRHBZOzZBaUppY0FPZHxZTnlBKEhvYHhCTz92VkZSe31TPkYifQ.KgEiMfdHyRq89be7fSK-sXsSnVuiJxBAXYJndndkHVc
Source: global traffic	HTTP traffic detected: GET /directory/tp3/?b=69707&c=13445&z=67089&cb=79bed62052 HTTP/1.1Host: sourceforge.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFdTcypzJDJDIXQ0IyV8TSs2KyVLUnhDNjRCQG1NaG1ObnslVjt1eEhQVFhlfUt4Q0RZVm83JUwzdTRleEdVdGNxOzQxaF9pO1M-UEdsQyhscUh6QGRHekhJNytYIXlEMlNtVWF-dlY_cWVXSVA8aUVLR0ZRU3w4diY_cypDOEcpNmJ2NWVCJTNnODZvRXA7enw9TV5Xa2w0RnpuOzBzRGhqMTc3ZG8pU0duMT5tLWpvanloN0Z6e0VeNGpPezQ3SHojTHxDR3AhKE1SKWUhSkwzZn1NNzJsY21kSG9qJnhRMDk5PiMqNjJvQUxoMVllP2pkKFA0O2tWJGw7ZipwRHBZOzZBaUppY0FPZHxZTnlBKEhvYHhCTz92VkZSe31TPkYifQ.KgEiMfdHyRq89be7fSK-sXsSnVuiJxBAXYJndndkHVc; OAID=a0ecb9d0f3c83307d0b767b524c4f2c4
Source: global traffic	HTTP traffic detected: GET /mw/state?bt_env=prod HTTP/1.1Host: api.btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://sourceforge.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1Host: btlr.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b17a9fad-e0ae-419e-b135-bf6ad0aa70f2
Source: global traffic	HTTP traffic detected: GET /directory/tp3/?b=69513&c=13409&z=66895&cb=8b302bed4f HTTP/1.1Host: sourceforge.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFdTcypzJDJDIXQ0IyV8TSs2KyVLUnhDNjRCQG1NaG1ObnslVjt1eEhQVFhlfUt4Q0RZVm83JUwzdTRleEdVdGNxOzQxaF9pO1M-UEdsQyhscUh6QGRHekhJNytYIXlEMlNtVWF-dlY_cWVXSVA8aUVLR0ZRU3w4diY_cypDOEcpNmJ2NWVCJTNnODZvRXA7enw9TV5Xa2w0RnpuOzBzRGhqMTc3ZG8pU0duMT5tLWpvanloN0Z6e0VeNGpPezQ3SHojTHxDR3AhKE1SKWUhSkwzZn1NNzJsY21kSG9qJnhRMDk5PiMqNjJvQUxoMVllP2pkKFA0O2tWJGw7ZipwRHBZOzZBaUppY0FPZHxZTnlBKEhvYHhCTz92VkZSe31TPkYifQ.KgEiMfdHyRq89be7fSK-sXsSnVuiJxBAXYJndndkHVc; OAID=b813ccf77b02234e468ccbbbf0477be1
Source: global traffic	HTTP traffic detected: GET /directory/tp3/?b=57541&c=11165&z=54863&cb=d6140d077d HTTP/1.1Host: sourceforge.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFdTcypzJDJDIXQ0IyV8TSs2KyVLUnhDNjRCQG1NaG1ObnslVjt1eEhQVFhlfUt4Q0RZVm83JUwzdTRleEdVdGNxOzQxaF9pO1M-UEdsQyhscUh6QGRHekhJNytYIXlEMlNtVWF-dlY_cWVXSVA8aUVLR0ZRU3w4diY_cypDOEcpNmJ2NWVCJTNnODZvRXA7enw9TV5Xa2w0RnpuOzBzRGhqMTc3ZG8pU0duMT5tLWpvanloN0Z6e0VeNGpPezQ3SHojTHxDR3AhKE1SKWUhSkwzZn1NNzJsY21kSG9qJnhRMDk5PiMqNjJvQUxoMVllP2pkKFA0O2tWJGw7ZipwRHBZOzZBaUppY0FPZHxZTnlBKEhvYHhCTz92VkZSe31TPkYifQ.KgEiMfdHyRq89be7fSK-sXsSnVuiJxBAXYJndndkHVc; OAID=28ae38e612051c8477673b12cec7be62
Source: global traffic	HTTP traffic detected: GET /prebid/v1 HTTP/1.1Host: prg.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1
Source: global traffic	HTTP traffic detected: GET /directory/tp3/?b=50727&c=9846&z=48052&cb=5a5b4d3b8a HTTP/1.1Host: sourceforge.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFdTcypzJDJDIXQ0IyV8TSs2KyVLUnhDNjRCQG1NaG1ObnslVjt1eEhQVFhlfUt4Q0RZVm83JUwzdTRleEdVdGNxOzQxaF9pO1M-UEdsQyhscUh6QGRHekhJNytYIXlEMlNtVWF-dlY_cWVXSVA8aUVLR0ZRU3w4diY_cypDOEcpNmJ2NWVCJTNnODZvRXA7enw9TV5Xa2w0RnpuOzBzRGhqMTc3ZG8pU0duMT5tLWpvanloN0Z6e0VeNGpPezQ3SHojTHxDR3AhKE1SKWUhSkwzZn1NNzJsY21kSG9qJnhRMDk5PiMqNjJvQUxoMVllP2pkKFA0O2tWJGw7ZipwRHBZOzZBaUppY0FPZHxZTnlBKEhvYHhCTz92VkZSe31TPkYifQ.KgEiMfdHyRq89be7fSK-sXsSnVuiJxBAXYJndndkHVc; OAID=bd579550819d79b95b1768c142254897
Source: global traffic	HTTP traffic detected: GET /directory/tp3/?b=66907&c=12915&z=64281&cb=969ed981b1 HTTP/1.1Host: sourceforge.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFdTcypzJDJDIXQ0IyV8TSs2KyVLUnhDNjRCQG1NaG1ObnslVjt1eEhQVFhlfUt4Q0RZVm83JUwzdTRleEdVdGNxOzQxaF9pO1M-UEdsQyhscUh6QGRHekhJNytYIXlEMlNtVWF-dlY_cWVXSVA8aUVLR0ZRU3w4diY_cypDOEcpNmJ2NWVCJTNnODZvRXA7enw9TV5Xa2w0RnpuOzBzRGhqMTc3ZG8pU0duMT5tLWpvanloN0Z6e0VeNGpPezQ3SHojTHxDR3AhKE1SKWUhSkwzZn1NNzJsY21kSG9qJnhRMDk5PiMqNjJvQUxoMVllP2pkKFA0O2tWJGw7ZipwRHBZOzZBaUppY0FPZHxZTnlBKEhvYHhCTz92VkZSe31TPkYifQ.KgEiMfdHyRq89be7fSK-sXsSnVuiJxBAXYJndndkHVc; OAID=e012d283a5e1eae18062d3edb9725359
Source: global traffic	HTTP traffic detected: GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1Host: btlr.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
Source: global traffic	HTTP traffic detected: GET /tag.aspx?1122024 HTTP/1.1Host: ml314.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s1.js?d=2396&cb=1710158199598 HTTP/1.1Host: tag.crsspxl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /engine?site=143572;size=1x1;e=0;dt=0;category=twljteyw08d;kw=ewnf2otl%205ncgmk4yea%20a%200%203d%20oznma%20kdtvx%206ee;rnd=(1710158201651) HTTP/1.1Host: pbid.pro-market.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.8932098781094919 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utsync.ashx?pub=&adv=&et=0&eid=771&ct=js&pi=&fp=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f&clid=&if=0&ps=&cl=&mlt=&data=&&cp=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Ffiles%2Fdocfetcher%2F1.1.25%2Fdocfetcher_1.1.25_win32_setup.exe%2Fdownload&pv=1710158201959_nopjhvr4s&bl=en-us&cb=6793859&return=&ht=&d=&dc=&si=1710158201959_nopjhvr4s&cid=&s=1280x1024&rp=&v=2.6.1.139 HTTP/1.1Host: ml314.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2 HTTP/1.1Host: ad-delivery.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=87197809&p=162538&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usermatch?s=179394&cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D33%26partneruserid%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/shr?gdpr=0&gdpr_consent= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /country HTTP/1.1Host: api.btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://sourceforge.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.8932098781094919 HTTP/1.1Host: ad-delivery.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv?tid=aQvxlqSC&w=5483815487668224&o=5098683085881344&cv=2.1.38-1-g3a5ff56&widget=false&r=false&vr=1280x907&pageURL=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Ffiles%2Fdocfetcher%2F1.1.25%2Fdocfetcher_1.1.25_win32_setup.exe%2Fdownload&sid=nZZIdvDKz&pm=false&upapi=true HTTP/1.1Host: api.btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://sourceforge.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/smart/?cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D116%26partneruserid%3D__ZUID__&gdpr=0&gdpr_consent= HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=47&gdpr=0&gdpr_consent= HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1
Source: global traffic	HTTP traffic detected: GET /cookie-sync/shr?gdpr=0&gdpr_consent=&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /usermatch?cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D33%26partneruserid%3D&gdpr=0&gdpr_consent=&s=179394&C=1 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3371&partner_device_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xuid?mid=7976&xuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/pm?gdpr=0&gdpr_consent= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=9A176ADB-73F4-4BD8-A648-23F2443493B5&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /country HTTP/1.1Host: api.btloader.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/smart/?cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D116%26partneruserid%3D__ZUID__&gdpr=0&gdpr_consent=&s=2 HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=njquBca-QhUZqz9ypfJV
Source: global traffic	HTTP traffic detected: GET /l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx%209A176ADB-73F4-4BD8-A648-23F2443493B5&rnd=RND HTTP/1.1Host: us01.z.antigena.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=134&partneruserid=OB_OK&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmart_adserver_eb%26google_hm%3DSMART_USER_ID_B64&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1
Source: global traffic	HTTP traffic detected: GET /usermatch?cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D33%26partneruserid%3D&gdpr=0&gdpr_consent=&s=179394&C=1 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; TDCPM=CAEYBSgCMgsIpO-e36Hz4DwQBTgB
Source: global traffic	HTTP traffic detected: GET /safeframe/1-0-40/html/container.html HTTP/1.1Host: fa43ad241d35ec2179c810415c543e64.safeframe.googlesyndication.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/p-EtBqU4Lj3YbAv.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAKPDU7L3eMAABWFZYx_mg; bitoIsSecure=ok; checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive/check?partner_id=3371&partner_device_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1710158204884; TapAd_DID=3d92896e-6439-4f25-b0dc-753e207e1323
Source: global traffic	HTTP traffic detected: GET /xuid?ld=1&mid=7976&xuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&dongle=u6nf&gdpr=0&cmp_cs=&us_privacy= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=626499573555793188163; tluid=626499573555793188163
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=47&gdpr=0&gdpr_consent= HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1
Source: global traffic	HTTP traffic detected: GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=9A176ADB-73F4-4BD8-A648-23F2443493B5&redir=true&gdpr=0&gdpr_consent=&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_mD47eJIUzEqu3DVtJD2b0\|t
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=116&partneruserid=njquBca-QhUZqz9ypfJV&gdpr=0 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:B6512778B5DA4E7C942E6E491CF4A04A HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; chkChromeAb67Sec=1; pi=162538:2; DPSync3=1710720000%3A265%7C1711324800%3A263_201%7C1710201600%3A248; SyncRTB3=1711324800%3A13_104_166_71_220_21_54_250%7C1710720000%3A223_2
Source: global traffic	HTTP traffic detected: GET /redir/?partnerid=80&gdpr=0&partneruserid=VbPHRgW3lUdOvpMVAr6PFFq_wxdOsJYSBeXINTmx HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=134:OB_OK
Source: global traffic	HTTP traffic detected: GET /project/docfetcher/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe?ts=gAAAAABl7vF0arkZoBG4HgUHnaplv-d94ovZWFq7ZlRzfmtWWm532Ry1XAVcVTBIOdrz8dJsKCAe6DI9KZWMj8HTscOW04l1Ew%3D%3D&use_mirror=newcontinuum&r= HTTP/1.1Host: downloads.sourceforge.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1854926735.1710158203; _gid=GA1.2.1668299401.1710158203
Source: global traffic	HTTP traffic detected: GET /sync/pubmatic/9A176ADB-73F4-4BD8-A648-23F2443493B5?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; chkChromeAb67Sec=1; pi=162538:2; DPSync3=1710720000%3A265%7C1711324800%3A263_201%7C1710201600%3A248; SyncRTB3=1711324800%3A13_104_166_71_220_21_54_250%7C1710720000%3A223_2
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&google_error=15 HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; chkChromeAb67Sec=1; pi=162538:2; DPSync3=1710720000%3A265%7C1711324800%3A263_201%7C1710201600%3A248; SyncRTB3=1711324800%3A13_104_166_71_220_21_54_250%7C1710720000%3A223_2
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; chkChromeAb67Sec=1; pi=162538:2; DPSync3=1710720000%3A265%7C1711324800%3A263_201%7C1710201600%3A248; SyncRTB3=1711324800%3A13_104_166_71_220_21_54_250%7C1710720000%3A223_2
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=3d92896e-6439-4f25-b0dc-753e207e1323%252C%252C&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFGAUgASgCMgsIpO-e36Hz4DwQBTgB
Source: global traffic	HTTP traffic detected: GET /redir?partneruserid=AAKPDU7L3eMAABWFZYx_mg&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dsyn%252Cpp%252Cpm%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dpm%26bee_sync_hop_count%3D1%26userid%3DSMART_USER_ID&gdpr=0 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=134:OB_OK
Source: global traffic	HTTP traffic detected: GET /ups/58292/sync?_origin=1&uid=9A176ADB-73F4-4BD8-A648-23F2443493B5&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xuid?ld=1&mid=7976&xuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&dongle=u6nf&gdpr=0&cmp_cs=&us_privacy= HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=626499573555793188163
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=116&partneruserid=njquBca-QhUZqz9ypfJV&gdpr=0 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:B6512778B5DA4E7C942E6E491CF4A04A HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; chkChromeAb67Sec=1; pi=162538:2; DPSync3=1710720000%3A265%7C1711324800%3A263_201%7C1710201600%3A248; SyncRTB3=1711324800%3A13_104_166_71_220_21_54_250%7C1710720000%3A223_2; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; PugT=1710158205
Source: global traffic	HTTP traffic detected: GET /cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partners=pm%2Csas%2Cpp%2Csyn%2Cshr&bee_sync_current_partner=adx&bee_sync_initiator=shr&bee_sync_hop_count=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAKPDU7L3eMAABWFZYx_mg; bitoIsSecure=ok; checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=44963125&p=162538&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; chkChromeAb67Sec=1; DPSync3=1710720000%3A265%7C1711324800%3A263_201%7C1710201600%3A248; SyncRTB3=1711324800%3A13_104_166_71_220_21_54_250%7C1710720000%3A223_2; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; PugT=1710158205
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=1830&partner_device_id=71dcd657-b7ce-4e56-9064-0f83979f8fcb&ttd_puid=3d92896e-6439-4f25-b0dc-753e207e1323%2C%2C HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1710158204884; TapAd_DID=3d92896e-6439-4f25-b0dc-753e207e1323; TapAd_3WAY_SYNCS=
Source: global traffic	HTTP traffic detected: GET /rtv/012402262017000/amp4ads-v0.mjs HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://fa43ad241d35ec2179c810415c543e64.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&google_error=15 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; chkChromeAb67Sec=1; DPSync3=1710720000%3A265%7C1711324800%3A263_201%7C1710201600%3A248; SyncRTB3=1711324800%3A13_104_166_71_220_21_54_250%7C1710720000%3A223_2; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; PugT=1710158205
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; chkChromeAb67Sec=1; DPSync3=1710720000%3A265%7C1711324800%3A263_201%7C1710201600%3A248; SyncRTB3=1711324800%3A13_104_166_71_220_21_54_250%7C1710720000%3A223_2; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; PugT=1710158205
Source: global traffic	HTTP traffic detected: GET /rtv/012402262017000/v0/amp-ad-exit-0.1.mjs HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://fa43ad241d35ec2179c810415c543e64.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtv/012402262017000/v0/amp-analytics-0.1.mjs HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://fa43ad241d35ec2179c810415c543e64.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=162538&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: simage4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; chkChromeAb67Sec=1; DPSync3=1710720000%3A265%7C1711324800%3A263_201%7C1710201600%3A248; SyncRTB3=1711324800%3A13_104_166_71_220_21_54_250%7C1710720000%3A223_2; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; PugT=1710158205
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?p=156557&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; chkChromeAb67Sec=1; DPSync3=1710720000%3A265%7C1711324800%3A263_201%7C1710201600%3A248; SyncRTB3=1711324800%3A13_104_166_71_220_21_54_250%7C1710720000%3A223_2; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; PugT=1710158205; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb
Source: global traffic	HTTP traffic detected: GET /redir/?partnerid=80&gdpr=0&partneruserid=VbPHRgW3lUdOvpMVAr6PFFq_wxdOsJYSBeXINTmx HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=80:VbPHRgW3lUdOvpMVAr6PFFq_wxdOsJYSBeXINTmx\|134:OB_OK
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; chkChromeAb67Sec=1; DPSync3=1710720000%3A265%7C1711324800%3A263_201%7C1710201600%3A248; SyncRTB3=1711324800%3A13_104_166_71_220_21_54_250%7C1710720000%3A223_2; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; PugT=1710158205; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb
Source: global traffic	HTTP traffic detected: GET /cookie-sync?gdpr=0&gdpr_consent=&bee_sync_partners=syn%2Cpp%2Cpm&bee_sync_current_partner=sas&bee_sync_initiator=pm&bee_sync_hop_count=1&userid=1899505890594565248&gdpr=0&gdpr_consent= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAKPDU7L3eMAABWFZYx_mg; bitoIsSecure=ok; checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /sync/v1?gdpr=0&gdpr_consent= HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
Source: global traffic	HTTP traffic detected: GET /sync/pubmatic/9A176ADB-73F4-4BD8-A648-23F2443493B5?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBH7x7mUCEGYBcSpUoDGj5CIMRgqTfFUFEgEBAQFC8GX4ZQAAAAAA_eMAAA&S=AQAAAgghlgOTDQ9ivTTcCSLV0Cg
Source: global traffic	HTTP traffic detected: GET /ups/58292/sync?_origin=1&uid=9A176ADB-73F4-4BD8-A648-23F2443493B5&redir=true&gdpr=0&gdpr_consent=&verify=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo
Source: global traffic	HTTP traffic detected: GET /project/docfetcher/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe HTTP/1.1Host: newcontinuum.dl.sourceforge.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1854926735.1710158203; _gid=GA1.2.1668299401.1710158203; __gads=ID=806480862cdec327:T=1710158205:RT=1710158205:S=ALNI_MZV8ZRZt7qUr4lWaLAdyOMDfWC3Pw; __gpi=UID=00000dc711d040cf:T=1710158205:RT=1710158205:S=ALNI_MYQzLcEAv8EJ93__iIVQ9u9QC8WIg; __eoi=ID=e972aa2e3a81bcab:T=1710158205:RT=1710158205:S=AA-AfjYfakrdTZ6-TF2azSnvDeBb
Source: global traffic	HTTP traffic detected: GET /visitor/bsync?uid=627080440e659fbe0f85333c665ae1de&name=SMARTADSERVER&url=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D117%26partneruserid%3DPARTNER_USER_ID%26gdpr%3DGDPR%26gdpr_consent%3DGDPR_CONSENT&gdpr=0&gdpr_consent= HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; icu=ChgIkPoyEAoYASABKAEw9-K7rwY4AUABSAEQ9-K7rwYYAA..; receive-cookie-deprecation=1; uuid2=7822940101119878936
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AAKPDU7L3eMAABWFZYx_mg&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dsas%252Cpp%252Csyn%252Cshr%26bee_sync_current_partner%3Dpm%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2 HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; PugT=1710158206; chkChromeAb67Sec=2; pi=162538:4; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; SyncRTB3=1711324800%3A13_71_220_54_55_165_8_250_22_104_166_21_46_249_5_3_231%7C1710720000%3A2_15_223
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; PugT=1710158206; chkChromeAb67Sec=2; pi=162538:4; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; SyncRTB3=1711324800%3A13_71_220_54_55_165_8_250_22_104_166_21_46_249_5_3_231%7C1710720000%3A2_15_223; SPugT=1710158207
Source: global traffic	HTTP traffic detected: GET /rtv/012402262017000/v0/amp-fit-text-0.1.mjs HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://fa43ad241d35ec2179c810415c543e64.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtv/012402262017000/v0/amp-form-0.1.mjs HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://fa43ad241d35ec2179c810415c543e64.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=2407834391265652961&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; chkChromeAb67Sec=2; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; SPugT=1710158207; PugT=1710158207; SyncRTB3=1711324800%3A166_71_220_21_13_54_250_55_104%7C1710720000%3A223_2; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=540245193&val=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=gh3SN4NAMWbvSOw&MD=VV3cGtUY HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/141?gdpr=0&gdpr_consent= HTTP/1.1Host: match.deepintent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https://ml314.com/csync.ashx%3Ffp=$UID%26person_id=3642666937673580575%26eid=2 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; icu=ChgIkPoyEAoYASABKAEw9-K7rwY4AUABSAEQ9-K7rwYYAA..; receive-cookie-deprecation=1; uuid2=7822940101119878936
Source: global traffic	HTTP traffic detected: GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: d=EGgBDQGsK4ir0QA; mc=65eef17d-816a8-799a4-641fc
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=1830&partner_device_id=71dcd657-b7ce-4e56-9064-0f83979f8fcb&ttd_puid=3d92896e-6439-4f25-b0dc-753e207e1323%2C%2C HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1710158204884; TapAd_DID=3d92896e-6439-4f25-b0dc-753e207e1323; TapAd_3WAY_SYNCS=1!1715
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFEhQKBXRhcGFkEgsIqK7DwIvz4DwQBRgBIAEoAjILCLSkxu2h8-A8EAU4AVoFdGFwYWRgAg..
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=117&partneruserid=e14297a0dfa4790f9c33b6631995bf21&gdpr=0&gdpr_consent=0 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV
Source: global traffic	HTTP traffic detected: GET /sync?pid=187&uid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.bfmio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156078&xid=y-kkpOYpRE2uXr60n7MUr_n01xFPJAlGQ-~A&gdpr=0 HTTP/1.1Host: image4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; chkChromeAb67Sec=2; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; SPugT=1710158207; PugT=1710158207; SyncRTB3=1711324800%3A166_71_220_21_13_54_250_55_104%7C1710720000%3A223_2; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3
Source: global traffic	HTTP traffic detected: GET /services?uid=AAKPDU7L3eMAABWFZYx_mg&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26gdpr_consent%3D%26userid%3D1899505890594565248%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dpp%252Cpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dpm%26bee_sync_hop_count%3D2&gdpr=0 HTTP/1.1Host: sync.technoratimedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /insync?vxii_pid=10067&vxii_pdid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/v1?gdpr=0&gdpr_consent= HTTP/1.1Host: match.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
Source: global traffic	HTTP traffic detected: GET /api/v1/dsync/Martin?exid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1Host: crb.kargo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?pid=r8hrb20&t=gif HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=7822940101119878936&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; chkChromeAb67Sec=2; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; SPugT=1710158207; PugT=1710158207; SyncRTB3=1711324800%3A166_71_220_21_13_54_250_55_104%7C1710720000%3A223_2; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3
Source: global traffic	HTTP traffic detected: GET /pagead/drt/ui HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; chkChromeAb67Sec=2; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; SPugT=1710158207; SyncRTB3=1711324800%3A166_71_220_21_13_54_250_55_104%7C1710720000%3A223_2; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; PugT=1710158206
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=1973209972465453479 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; chkChromeAb67Sec=2; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; SPugT=1710158207; SyncRTB3=1711324800%3A166_71_220_21_13_54_250_55_104%7C1710720000%3A223_2; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; PugT=1710158206
Source: global traffic	HTTP traffic detected: GET /cookie-sync?gdpr=0&bee_sync_partners=sas%2Cpp%2Csyn%2Cshr&bee_sync_current_partner=pm&bee_sync_initiator=adx&bee_sync_hop_count=2 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAKPDU7L3eMAABWFZYx_mg; bitoIsSecure=ok; checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?cc=1&id=540245193&val=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=2a5f7fb6-27c9-488e-9168-f0298407ea3a\|1710158208
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?cookieQ=1&nid=3&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=6bbe4efa-b2b9-483b-b167-285771ce2f25#1710158208223
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; chkChromeAb67Sec=2; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; SPugT=1710158207; SyncRTB3=1711324800%3A166_71_220_21_13_54_250_55_104%7C1710720000%3A223_2; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; PugT=1710158206; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961
Source: global traffic	HTTP traffic detected: GET /csync.ashx?fp=7822940101119878936&person_id=3642666937673580575&eid=2 HTTP/1.1Host: ml314.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: u=aHR0cHM6Ly9zb3VyY2Vmb3JnZS5uZXQvcHJvamVjdHMvZG9jZmV0Y2hlci9maWxlcy9kb2NmZXRjaGVyLzEuMS4yNS9kb2NmZXRjaGVyXzEuMS4yNV93aW4zMl9zZXR1cC5leGUvZG93bmxvYWQ%3D; pi=3642666937673580575; tp=3%253B03%252F11%252F2024%2B11%253A56%253A43%253B0
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=5b286190338513af73f09c28&source_user_id=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent= HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?cookieQ=1&nid=3&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=e186753e-f558-43f2-9eb8-0f25b6de5290#1710158208299
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; chkChromeAb67Sec=2; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; SPugT=1710158207; SyncRTB3=1711324800%3A166_71_220_21_13_54_250_55_104%7C1710720000%3A223_2; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; PugT=1710158206; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?scc=1&ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1Host: pm.w55c.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=rQpbF21I1RJEgU5
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=117&partneruserid=e14297a0dfa4790f9c33b6631995bf21&gdpr=0&gdpr_consent=0 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21
Source: global traffic	HTTP traffic detected: GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=9A176ADB-73F4-4BD8-A648-23F2443493B5&vxii_pid=12&vxii_pid1=10067&vxii_rcid=5aa989e0-19fe-4ef1-8068-2d0a432b0425 HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6IjVhYTk4OWUwLTE5ZmUtNGVmMS04MDY4LTJkMGE0MzJiMDQyNSIsImwiOjE3MTAxNTgyMDg0ODIsInQiOjF9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=22052&dpuuid=3642666937673580575&redir= HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156078&xid=y-kkpOYpRE2uXr60n7MUr_n01xFPJAlGQ-~A&gdpr=0 HTTP/1.1Host: image4.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; chkChromeAb67Sec=2; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; SyncRTB3=1711324800%3A166_71_220_21_13_54_250_55_104%7C1710720000%3A223_2; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; PugT=1710158206; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208
Source: global traffic	HTTP traffic detected: GET /pixel/bounce/?pid=r8hrb20&t=gif HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=18e2d5f5e6f-1cc10000010a4999; SERVERID=18841~DM
Source: global traffic	HTTP traffic detected: GET /usermatchredir?s=191740&cb=https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26nuid%3DCDBA957564F9422CB94ECF5C311A0351%26att%3D1%26pid%3D82%26cb%3Dhttps%253A%252F%252Fmatch.prod.bidr.io%252Fcookie-sync%253Fgdpr%253D0%2526gdpr_consent%253D%2526userid%253D1899505890594565248%2526gdpr%253D0%2526gdpr_consent%253D%2526bee_sync_partners%253Dpp%25252Cpm%2526bee_sync_current_partner%253Dsyn%2526bee_sync_initiator%253Dpm%2526bee_sync_hop_count%253D2%26uid%3D HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1Host: image8.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; chkChromeAb67Sec=2; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; SyncRTB3=1711324800%3A166_71_220_21_13_54_250_55_104%7C1710720000%3A223_2; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; PugT=1710158208
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1Host: image8.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; chkChromeAb67Sec=2; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; SyncRTB3=1711324800%3A166_71_220_21_13_54_250_55_104%7C1710720000%3A223_2; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; PugT=1710158208; KRTBCOOKIE_18=22947-1973209972465453479
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1Host: image8.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; chkChromeAb67Sec=2; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; SyncRTB3=1711324800%3A166_71_220_21_13_54_250_55_104%7C1710720000%3A223_2; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; PugT=1710158208
Source: global traffic	HTTP traffic detected: GET /api/v1/dsync/Martin?exid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1Host: crb.kargo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ktcid=bfcd3a2e-d8be-0486-5e1e-5e457314cd99
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=6bbe4efa-b2b9-483b-b167-285771ce2f25-65eef180-5553&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; chkChromeAb67Sec=2; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; SyncRTB3=1711324800%3A166_71_220_21_13_54_250_55_104%7C1710720000%3A223_2; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; PugT=1710158209
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=5b286190338513af73f09c28&source_user_id=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent= HTTP/1.1Host: match.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
Source: global traffic	HTTP traffic detected: GET /redir?partneruserid=AAKPDU7L3eMAABWFZYx_mg&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fbee_sync_partners%3Dpp%252Csyn%252Cshr%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3%26userid%3DSMART_USER_ID&gdpr=0 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; PugT=1710158209; SyncRTB3=1711324800%3A250_166_71_220_21_54_13_55_104%7C1710720000%3A223_15_2; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=3
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:rQpbF21I1RJEgU5&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; PugT=1710158209; SyncRTB3=1711324800%3A250_166_71_220_21_54_13_55_104%7C1710720000%3A223_15_2; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=3
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?cc=1&id=540245193&val=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=2a5f7fb6-27c9-488e-9168-f0298407ea3a\|1710158208
Source: global traffic	HTTP traffic detected: GET /pagead/drt/si?st=NO_DATA HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlhWjE-nrLMqamcKd4HCzJGyk-lF6Y-_gdSV1_rcQ-Lc3JBzMSF3zk6wICTe0A; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=70a98560-df9e-11ee-9b1b-8fc11e983897 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; PugT=1710158209; SyncRTB3=1711324800%3A250_166_71_220_21_54_13_55_104%7C1710720000%3A223_15_2; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=3
Source: global traffic	HTTP traffic detected: GET /csync.ashx?fp=7822940101119878936&person_id=3642666937673580575&eid=2 HTTP/1.1Host: ml314.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: u=aHR0cHM6Ly9zb3VyY2Vmb3JnZS5uZXQvcHJvamVjdHMvZG9jZmV0Y2hlci9maWxlcy9kb2NmZXRjaGVyLzEuMS4yNS9kb2NmZXRjaGVyXzEuMS4yNV93aW4zMl9zZXR1cC5leGUvZG93bmxvYWQ%3D; pi=3642666937673580575; tp=3%253B03%252F11%252F2024%2B11%253A56%253A43%253B0
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=d0tro1j&ttd_tpi=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFEhQKBXRhcGFkEgsIqK7DwIvz4DwQBRIbCgxzaGFyZXRocm91Z2gSCwjWjMfSi_PgPBAFGAEgASgCMgsIlILK_6Hz4DwQBTgBWgxzaGFyZXRocm91Z2hgAg..
Source: global traffic	HTTP traffic detected: GET /demconf.jpg?et:ibs%7cdata:dpid=22052&dpuuid=3642666937673580575&redir= HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=45232011452423388812062241212727845356
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1Host: image8.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; chkChromeAb67Sec=2; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; SyncRTB3=1711324800%3A166_71_220_21_13_54_250_55_104%7C1710720000%3A223_2; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; PugT=1710158209
Source: global traffic	HTTP traffic detected: GET /utsync.ashx?eid=50052&et=0&fp=2RG0B3VBEgqU6Lfhw-rw1_Eo5qnhiAZ4NH3viKx8NrM0&gdpr=0&gdpr_consent=&return=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dr8hrb20%26uid%3Dnil%26referrer_pid%3Dr8hrb20 HTTP/1.1Host: ml314.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: u=aHR0cHM6Ly9zb3VyY2Vmb3JnZS5uZXQvcHJvamVjdHMvZG9jZmV0Y2hlci9maWxlcy9kb2NmZXRjaGVyLzEuMS4yNS9kb2NmZXRjaGVyXzEuMS4yNV93aW4zMl9zZXR1cC5leGUvZG93bmxvYWQ%3D; pi=3642666937673580575; tp=3%253B03%252F11%252F2024%2B11%253A56%253A43%253B0
Source: global traffic	HTTP traffic detected: GET /services?srv=cs&nuid=CDBA957564F9422CB94ECF5C311A0351&att=1&pid=82&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26gdpr_consent%3D%26userid%3D1899505890594565248%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dpp%252Cpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dpm%26bee_sync_hop_count%3D2&uid=Ze7xfMAoIeEAAAzaAIdO4AAA%264192 HTTP/1.1Host: sync.technoratimedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tads_uidp_73=AAKPDU7L3eMAABWFZYx_mg; tads_uid=CDBA957564F9422CB94ECF5C311A0351; tads_uid_cd=20240311115648+0000; tads_zora=2
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAKjSefg7ls1AMUGjNCAAAAAAA&expiration=1710244609&nuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; PugT=1710158209; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=3; SyncRTB3=1711324800%3A71_55_104_166_220_21_13_54_250%7C1710720000%3A2_15_223
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1Host: image8.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=3; SyncRTB3=1711324800%3A71_55_104_166_220_21_13_54_250%7C1710720000%3A2_15_223; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; PugT=1710158209
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=3; SyncRTB3=1711324800%3A71_55_104_166_220_21_13_54_250%7C1710720000%3A2_15_223; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; PugT=1710158208
Source: global traffic	HTTP traffic detected: GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=9A176ADB-73F4-4BD8-A648-23F2443493B5&vxii_pid=12&vxii_pid1=10067&vxii_rcid=5aa989e0-19fe-4ef1-8068-2d0a432b0425 HTTP/1.1Host: thrtle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6IjVhYTk4OWUwLTE5ZmUtNGVmMS04MDY4LTJkMGE0MzJiMDQyNSIsImwiOjE3MTAxNTgyMDkzNzUsInQiOjF9
Source: global traffic	HTTP traffic detected: GET /utsync.ashx?eid=53819&et=0&fp=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent= HTTP/1.1Host: ml314.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: u=aHR0cHM6Ly9zb3VyY2Vmb3JnZS5uZXQvcHJvamVjdHMvZG9jZmV0Y2hlci9maWxlcy9kb2NmZXRjaGVyLzEuMS4yNS9kb2NmZXRjaGVyXzEuMS4yNV93aW4zMl9zZXR1cC5leGUvZG93bmxvYWQ%3D; pi=3642666937673580575; tp=3%253B03%252F11%252F2024%2B11%253A56%253A43%253B0
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; PugT=1710158209; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=3; SyncRTB3=1711324800%3A71_55_104_166_220_21_13_54_250%7C1710720000%3A2_15_223; KRTBCOOKIE_188=3189-6bbe4efa-b2b9-483b-b167-285771ce2f25-65eef180-5553&KRTB&23418-6bbe4efa-b2b9-483b-b167-285771ce2f25-65eef180-5553
Source: global traffic	HTTP traffic detected: GET /cookie-sync?bee_sync_partners=pp%2Csyn%2Cshr&bee_sync_current_partner=sas&bee_sync_initiator=adx&bee_sync_hop_count=3&userid=1899505890594565248&gdpr=0&gdpr_consent= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAKPDU7L3eMAABWFZYx_mg; bitoIsSecure=ok; checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=162538&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: simage4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=3; SyncRTB3=1711324800%3A71_55_104_166_220_21_13_54_250%7C1710720000%3A2_15_223; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; PugT=1710158209
Source: global traffic	HTTP traffic detected: GET /pagead/drt/si?st=NO_DATA HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlhWjE-nrLMqamcKd4HCzJGyk-lF6Y-_gdSV1_rcQ-Lc3JBzMSF3zk6wICTe0A; test_cookie=CheckForPermission; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /demconf.jpg?et:ibs%7cdata:dpid=22052&dpuuid=3642666937673580575&redir= HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=45232011452423388812062241212727845356; dpm=45232011452423388812062241212727845356
Source: global traffic	HTTP traffic detected: GET /match?bid=r8hrb20&uid=nil&referrer_pid=r8hrb20 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=18e2d5f5e6f-1cc10000010a4999; SERVERID=18841~DM
Source: global traffic	HTTP traffic detected: GET /cookie-sync?gdpr=0&gdpr_consent=&userid=1899505890594565248&gdpr=0&gdpr_consent=&bee_sync_partners=pp%2Cpm&bee_sync_current_partner=syn&bee_sync_initiator=pm&bee_sync_hop_count=2 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAKPDU7L3eMAABWFZYx_mg; bitoIsSecure=ok; checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?gdpr=0&p=156557&pr=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DuFFr5RFBYgoUJbWMAWGEZKS3%26source_user_id%3D9A176ADB-73F4-4BD8-A648-23F2443493B5&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1Host: image4.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SyncRTB3=1711324800%3A54_250_55_71_220_21_13_104_166%7C1710720000%3A2_15_223; KRTBCOOKIE_32=11175-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&22713-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&22715-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&23519-AAAKjSefg7ls1AMUGjNCAAAAAAA; PugT=1710158210; chkChromeAb67Sec=4
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1Host: image8.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=3; SyncRTB3=1711324800%3A71_55_104_166_220_21_13_54_250%7C1710720000%3A2_15_223; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; PugT=1710158209
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAJLoB_DnsBqQNyIxdlAAAAAAA&expiration=1710244610&nuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SyncRTB3=1711324800%3A54_250_55_71_220_21_13_104_166%7C1710720000%3A2_15_223; KRTBCOOKIE_32=11175-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&22713-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&22715-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&23519-AAAKjSefg7ls1AMUGjNCAAAAAAA; PugT=1710158210; chkChromeAb67Sec=4
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=3; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SyncRTB3=1711324800%3A54_250_55_71_220_21_13_104_166%7C1710720000%3A2_15_223; KRTBCOOKIE_32=11175-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&22713-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&22715-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&23519-AAAKjSefg7ls1AMUGjNCAAAAAAA; PugT=1710158210
Source: global traffic	HTTP traffic detected: GET /utsync.ashx?eid=53819&et=0&fp=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent= HTTP/1.1Host: ml314.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pi=3642666937673580575; tp=3%253B03%252F11%252F2024%2B11%253A56%253A43%253B0; u=aHR0cHM6Ly9zb3VyY2Vmb3JnZS5uZXQv
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?gdpr=0&p=156557&pr=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DuFFr5RFBYgoUJbWMAWGEZKS3%26source_user_id%3D9A176ADB-73F4-4BD8-A648-23F2443493B5&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1Host: image4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SyncRTB3=1711324800%3A54_250_55_71_220_21_13_104_166%7C1710720000%3A2_15_223; KRTBCOOKIE_32=11175-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&22713-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&22715-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&23519-AAAKjSefg7ls1AMUGjNCAAAAAAA; PugT=1710158210; chkChromeAb67Sec=4
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?gdpr=0&p=156557&pr=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DuFFr5RFBYgoUJbWMAWGEZKS3%26source_user_id%3D9A176ADB-73F4-4BD8-A648-23F2443493B5&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1Host: image4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SyncRTB3=1711324800%3A54_250_55_71_220_21_13_104_166%7C1710720000%3A2_15_223; KRTBCOOKIE_32=11175-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&22713-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&22715-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&23519-AAAKjSefg7ls1AMUGjNCAAAAAAA; PugT=1710158210; chkChromeAb67Sec=4
Source: global traffic	HTTP traffic detected: GET /bh/rtset?ev=AAKPDU7L3eMAABWFZYx_mg&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fuserid%3D1899505890594565248%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dsyn%252Cshr%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&gdpr=0 HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAJk8EYVlWhHwN6XiilAAAAAAA&expiration=1710244611&nuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SyncRTB3=1711324800%3A54_250_55_71_220_21_13_104_166%7C1710720000%3A2_15_223; KRTBCOOKIE_32=11175-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&22713-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&22715-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&23519-AAAKjSefg7ls1AMUGjNCAAAAAAA; PugT=1710158210; chkChromeAb67Sec=4; SPugT=1710158209
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?gdpr=0&p=156557&pr=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DuFFr5RFBYgoUJbWMAWGEZKS3%26source_user_id%3D9A176ADB-73F4-4BD8-A648-23F2443493B5&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1Host: image4.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SyncRTB3=1711324800%3A54_250_55_71_220_21_13_104_166%7C1710720000%3A2_15_223; KRTBCOOKIE_32=11175-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&22713-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&22715-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&23519-AAAKjSefg7ls1AMUGjNCAAAAAAA; PugT=1710158210; chkChromeAb67Sec=4; SPugT=1710158210
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAJLoB_DnsBqQNyIxdlAAAAAAA&expiration=1710244610&nuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SyncRTB3=1711324800%3A54_250_55_71_220_21_13_104_166%7C1710720000%3A2_15_223; chkChromeAb67Sec=4; SPugT=1710158210; KRTBCOOKIE_32=11175-AAAJLoB_DnsBqQNyIxdlAAAAAAA&KRTB&22713-AAAJLoB_DnsBqQNyIxdlAAAAAAA&KRTB&22715-AAAJLoB_DnsBqQNyIxdlAAAAAAA&KRTB&23519-AAAJLoB_DnsBqQNyIxdlAAAAAAA; PugT=1710158209
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?gdpr=0&p=156557&pr=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DuFFr5RFBYgoUJbWMAWGEZKS3%26source_user_id%3D9A176ADB-73F4-4BD8-A648-23F2443493B5&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1Host: image4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SyncRTB3=1711324800%3A54_250_55_71_220_21_13_104_166%7C1710720000%3A2_15_223; chkChromeAb67Sec=4; SPugT=1710158210; KRTBCOOKIE_32=11175-AAAJLoB_DnsBqQNyIxdlAAAAAAA&KRTB&22713-AAAJLoB_DnsBqQNyIxdlAAAAAAA&KRTB&22715-AAAJLoB_DnsBqQNyIxdlAAAAAAA&KRTB&23519-AAAJLoB_DnsBqQNyIxdlAAAAAAA; PugT=1710158209
Source: global traffic	HTTP traffic detected: GET /bh/rtset?ev=AAKPDU7L3eMAABWFZYx_mg&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D1899505890594565248%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dpm%26bee_sync_hop_count%3D3&gdpr=0 HTTP/1.1Host: bh.contextweb.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAJLRSyz5tvPANVn5seAAAAAAA&expiration=1710244611&nuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SyncRTB3=1711324800%3A54_250_55_71_220_21_13_104_166%7C1710720000%3A2_15_223; chkChromeAb67Sec=4; KRTBCOOKIE_32=11175-AAAJLoB_DnsBqQNyIxdlAAAAAAA&KRTB&22713-AAAJLoB_DnsBqQNyIxdlAAAAAAA&KRTB&22715-AAAJLoB_DnsBqQNyIxdlAAAAAAA&KRTB&23519-AAAJLoB_DnsBqQNyIxdlAAAAAAA; PugT=1710158209; SPugT=1710158211
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1Host: match.sharethrough.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
Source: global traffic	HTTP traffic detected: GET /cookie-sync?userid=1899505890594565248&gdpr=0&gdpr_consent=&bee_sync_partners=syn%2Cshr&bee_sync_current_partner=pp&bee_sync_initiator=adx&bee_sync_hop_count=4&ev=AAKPDU7L3eMAABWFZYx_mg&pid=558502&do=add&gdpr=0 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAKPDU7L3eMAABWFZYx_mg; bitoIsSecure=ok; checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /match?bid=r8hrb20&uid=nil&referrer_pid=r8hrb20 HTTP/1.1Host: ps.eyeota.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=18e2d5f5e6f-1cc10000010a4999; SERVERID=18841~DM
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAJLoB_DnsBwwNPtb-EAAAAAAA&expiration=1710244611&nuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SyncRTB3=1711324800%3A54_250_55_71_220_21_13_104_166%7C1710720000%3A2_15_223; chkChromeAb67Sec=4; SPugT=1710158211; KRTBCOOKIE_32=11175-AAAJk8EYVlWhHwN6XiilAAAAAAA&KRTB&22713-AAAJk8EYVlWhHwN6XiilAAAAAAA&KRTB&22715-AAAJk8EYVlWhHwN6XiilAAAAAAA&KRTB&23519-AAAJk8EYVlWhHwN6XiilAAAAAAA; PugT=1710158210
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1Host: match.sharethrough.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1Host: match.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
Source: global traffic	HTTP traffic detected: GET /cookie-sync?gdpr=0&userid=1899505890594565248&gdpr=0&bee_sync_partners=pm&bee_sync_current_partner=pp&bee_sync_initiator=pm&bee_sync_hop_count=3&ev=AAKPDU7L3eMAABWFZYx_mg&pid=558502&do=add&gdpr=0 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAKPDU7L3eMAABWFZYx_mg; bitoIsSecure=ok; checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAKjSefg7ltFQMpDsPHAAAAAAA&expiration=1710244612&nuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SyncRTB3=1711324800%3A54_250_55_71_220_21_13_104_166%7C1710720000%3A2_15_223; chkChromeAb67Sec=4; PugT=1710158211; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAJLRSyz5tvPANVn5seAAAAAAA&KRTB&22713-AAAJLRSyz5tvPANVn5seAAAAAAA&KRTB&22715-AAAJLRSyz5tvPANVn5seAAAAAAA&KRTB&23519-AAAJLRSyz5tvPANVn5seAAAAAAA
Source: global traffic	HTTP traffic detected: GET /services?uid=AAKPDU7L3eMAABWFZYx_mg&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fuserid%3D1899505890594565248%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dshr%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D5&gdpr=0 HTTP/1.1Host: sync.technoratimedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tads_uidp_73=AAKPDU7L3eMAABWFZYx_mg; tads_uid=CDBA957564F9422CB94ECF5C311A0351; tads_uid_cd=20240311115648+0000; tads_zora=2; tads_uidp_82=Ze7xfMAoIeEAAAzaAIdO4AAA&4192
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1Host: match.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AAKPDU7L3eMAABWFZYx_mg&gdpr=0 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SyncRTB3=1711324800%3A54_250_55_71_220_21_13_104_166%7C1710720000%3A2_15_223; chkChromeAb67Sec=4; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAJLoB_DnsBwwNPtb-EAAAAAAA&KRTB&22713-AAAJLoB_DnsBwwNPtb-EAAAAAAA&KRTB&22715-AAAJLoB_DnsBwwNPtb-EAAAAAAA&KRTB&23519-AAAJLoB_DnsBwwNPtb-EAAAAAAA; PugT=1710158210
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1Host: match.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26nuid%3DCDBA957564F9422CB94ECF5C311A0351%26att%3D1%26pid%3D46%26cb%3Dhttps%253A%252F%252Fmatch.prod.bidr.io%252Fcookie-sync%253Fuserid%253D1899505890594565248%2526gdpr%253D0%2526gdpr%253D0%2526bee_sync_partners%253Dshr%2526bee_sync_current_partner%253Dsyn%2526bee_sync_initiator%253Dadx%2526bee_sync_hop_count%253D5%26uid%3D%24UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; icu=ChgIkPoyEAoYASABKAEw9-K7rwY4AUABSAEQ9-K7rwYYAA..; receive-cookie-deprecation=1; uuid2=7822940101119878936
Source: global traffic	HTTP traffic detected: GET /services?srv=cs&nuid=CDBA957564F9422CB94ECF5C311A0351&att=1&pid=46&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fuserid%3D1899505890594565248%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dshr%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D5&uid=7822940101119878936 HTTP/1.1Host: sync.technoratimedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tads_uidp_73=AAKPDU7L3eMAABWFZYx_mg; tads_uid=CDBA957564F9422CB94ECF5C311A0351; tads_uid_cd=20240311115648+0000; tads_zora=2; tads_uidp_82=Ze7xfMAoIeEAAAzaAIdO4AAA&4192
Source: global traffic	HTTP traffic detected: GET /cookie-sync?userid=1899505890594565248&gdpr=0&gdpr=0&bee_sync_partners=shr&bee_sync_current_partner=syn&bee_sync_initiator=adx&bee_sync_hop_count=5 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAKPDU7L3eMAABWFZYx_mg; bitoIsSecure=ok; checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=vyXkw8rSq3j4JmKvTgxR3x1c&source_user_id=AAKPDU7L3eMAABWFZYx_mg&gdpr=0 HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=vyXkw8rSq3j4JmKvTgxR3x1c&source_user_id=AAKPDU7L3eMAABWFZYx_mg&gdpr=0 HTTP/1.1Host: match.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
Source: global traffic	HTTP traffic detected: GET /imsync.ashx?pi=3642666937673580575&data=eyJwaCI6NDMwOSwid2giOjkwNywidGJzIjowLCJkdCI6MTUsInBpZCI6IjE3MTAxNTgyMDE5NTlfbm9wamh2cjRzIiwic2QiOjkwN30%3D HTTP/1.1Host: ml314.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pi=3642666937673580575; tp=3%253B03%252F11%252F2024%2B11%253A56%253A43%253B0; u=aHR0cHM6Ly9zb3VyY2Vmb3JnZS5uZXQv
Source: global traffic	HTTP traffic detected: GET /projects/docfetcher/postdownload HTTP/1.1Host: sourceforge.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/downloadAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFdTcypzJDJDIXQ0IyV8TSs2KyVLUnhDNjRCQG1NaG1ObnslVjt1eEhQVFhlfUt4Q0RZVm83JUwzdTRleEdVdGNxOzQxaF9pO1M-UEdsQyhscUh6QGRHekhJNytYIXlEMlNtVWF-dlY_cWVXSVA8aUVLR0ZRU3w4diY_cypDOEcpNmJ2NWVCJTNnODZvRXA7enw9TV5Xa2w0RnpuOzBzRGhqMTc3ZG8pU0duMT5tLWpvanloN0Z6e0VeNGpPezQ3SHojTHxDR3AhKE1SKWUhSkwzZn1NNzJsY21kSG9qJnhRMDk5PiMqNjJvQUxoMVllP2pkKFA0O2tWJGw7ZipwRHBZOzZBaUppY0FPZHxZTnlBKEhvYHhCTz92VkZSe31TPkYifQ.KgEiMfdHyRq89be7fSK-sXsSnVuiJxBAXYJndndkHVc; OAID=e012d283a5e1eae18062d3edb9725359; _gid=GA1.2.1668299401.1710158203; __gads=ID=ed8d538436f1b623:T=1710158205:RT=1710158205:S=ALNI_MbiYxvEWP7dZiJkctj8HGzhHyMpCg; __gpi=UID=00000dc711cb5676:T=1710158205:RT=1710158205:S=ALNI_MbtGcDgo6RHjTtG2es2mbdsN1jDSw; __eoi=ID=ccb10672a4298c0a:T=1710158205:RT=1710158205:S=AA-AfjZQQCnCz9TlsGBpH19Z0_Y8; _ga_1H226E4E4L=GS1.1.1710158208.1.0.1710158208.0.0.0; _ga=GA1.1.1854926735.1710158203
Source: global traffic	HTTP traffic detected: GET /mw/state?bt_env=prod HTTP/1.1Host: api.btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://sourceforge.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /prebid/v1 HTTP/1.1Host: prg.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; vs=575816=5885997
Source: global traffic	HTTP traffic detected: GET /rtb/bid?src=prebid_prebid_8.13.0 HTTP/1.1Host: ap.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=ITYsABZHyF-4XRyhT4uuZCmM
Source: global traffic	HTTP traffic detected: GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1Host: btlr.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "ad4b0f606e0f8465bc4c4c170b37e1a3"If-Modified-Since: Wed, 05 May 2021 19:25:32 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /directory/tp3/?b=69705&c=13445&z=67087&cb=000f291466 HTTP/1.1Host: sourceforge.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/projects/docfetcher/postdownloadAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; OAID=e012d283a5e1eae18062d3edb9725359; _gid=GA1.2.1668299401.1710158203; __gads=ID=ed8d538436f1b623:T=1710158205:RT=1710158205:S=ALNI_MbiYxvEWP7dZiJkctj8HGzhHyMpCg; __gpi=UID=00000dc711cb5676:T=1710158205:RT=1710158205:S=ALNI_MbtGcDgo6RHjTtG2es2mbdsN1jDSw; __eoi=ID=ccb10672a4298c0a:T=1710158205:RT=1710158205:S=AA-AfjZQQCnCz9TlsGBpH19Z0_Y8; _ga_1H226E4E4L=GS1.1.1710158208.1.0.1710158208.0.0.0; _ga=GA1.1.1854926735.1710158203; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFJTcypyVzE2WjwyVzRDRl4zTCY4YHhDNjRCQG1NaG1hYnowLTt1eEhQNlJfPkZtKl5jM2YqVzh7MWd2S01gKEl4KCVNMmhGTSFeWEhAQzdNfXZUMmRDYEUxY1BiS2JIdSNqd0Y7amEzRTM9dHo2bWkmPmJjekI0fCtDaGtRQT5vaTdaWndMZE5OMEl4XngtaUlGZmBjZlBNTkkpYWEqK1NST04qLT9jPDZPSDw5U2xWOSFFViVQb1FIYThRUyFlK15nZiRKV3R9Z3Beb25LdVhvQnlSYFU4RTVqIUk4JWBvR19RQDkmVGRMWTxXRzd4PDU-ZzYjQHVSdGN5a3FwS1RCQUQzeGBGP2MwZSVmQVNMTCFwKXE7fng2YiVsdzs3cSFKJSY7In0.XysH-z9DDtydQIaiX4Q_fLbH0fYGiJWBs2t2JkUMNH8
Source: global traffic	HTTP traffic detected: GET /prebid/v1 HTTP/1.1Host: prg.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; vs=575816=5885997
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.8406123646586141 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /directory/tp3/?b=69513&c=13409&z=66895&cb=8b302bed4f HTTP/1.1Host: sourceforge.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/projects/docfetcher/postdownloadAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; OAID=e012d283a5e1eae18062d3edb9725359; _gid=GA1.2.1668299401.1710158203; __gads=ID=ed8d538436f1b623:T=1710158205:RT=1710158205:S=ALNI_MbiYxvEWP7dZiJkctj8HGzhHyMpCg; __gpi=UID=00000dc711cb5676:T=1710158205:RT=1710158205:S=ALNI_MbtGcDgo6RHjTtG2es2mbdsN1jDSw; __eoi=ID=ccb10672a4298c0a:T=1710158205:RT=1710158205:S=AA-AfjZQQCnCz9TlsGBpH19Z0_Y8; _ga_1H226E4E4L=GS1.1.1710158208.1.0.1710158208.0.0.0; _ga=GA1.1.1854926735.1710158203; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFJTcypyVzE2WjwyVzRDRl4zTCY4YHhDNjRCQG1NaG1hYnowLTt1eEhQNlJfPkZtKl5jM2YqVzh7MWd2S01gKEl4KCVNMmhGTSFeWEhAQzdNfXZUMmRDYEUxY1BiS2JIdSNqd0Y7amEzRTM9dHo2bWkmPmJjekI0fCtDaGtRQT5vaTdaWndMZE5OMEl4XngtaUlGZmBjZlBNTkkpYWEqK1NST04qLT9jPDZPSDw5U2xWOSFFViVQb1FIYThRUyFlK15nZiRKV3R9Z3Beb25LdVhvQnlSYFU4RTVqIUk4JWBvR19RQDkmVGRMWTxXRzd4PDU-ZzYjQHVSdGN5a3FwS1RCQUQzeGBGP2MwZSVmQVNMTCFwKXE7fng2YiVsdzs3cSFKJSY7In0.XysH-z9DDtydQIaiX4Q_fLbH0fYGiJWBs2t2JkUMNH8
Source: global traffic	HTTP traffic detected: GET /ut/v3/prebid HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=7822940101119878936; XANDR_PANID=3nI6clyYzfbnEpT9fRyZHeeDLf-D2s87ENd4pOyw4BFTVoas2vYN3I0kAmg30iZxhJeWONbdfUtKXwuvlFOruOXDykPNWOUWZiMtJDNoxzc.; receive-cookie-deprecation=1; icu=ChgIkPoyEAoYAiACKAIwjuO7rwY4AkACSAIQjuO7rwYYAQ..
Source: global traffic	HTTP traffic detected: GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1Host: btlr.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
Source: global traffic	HTTP traffic detected: GET /directory/tp3/?b=69705&c=13445&z=67087&cb=000f291466 HTTP/1.1Host: sourceforge.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; OAID=e012d283a5e1eae18062d3edb9725359; _gid=GA1.2.1668299401.1710158203; __gads=ID=ed8d538436f1b623:T=1710158205:RT=1710158205:S=ALNI_MbiYxvEWP7dZiJkctj8HGzhHyMpCg; __gpi=UID=00000dc711cb5676:T=1710158205:RT=1710158205:S=ALNI_MbtGcDgo6RHjTtG2es2mbdsN1jDSw; __eoi=ID=ccb10672a4298c0a:T=1710158205:RT=1710158205:S=AA-AfjZQQCnCz9TlsGBpH19Z0_Y8; _ga_1H226E4E4L=GS1.1.1710158208.1.0.1710158208.0.0.0; _ga=GA1.1.1854926735.1710158203; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFJTcypyVzE2WjwyVzRDRl4zTCY4YHhDNjRCQG1NaG1hYnowLTt1eEhQNlJfPkZtKl5jM2YqVzh7MWd2S01gKEl4KCVNMmhGTSFeWEhAQzdNfXZUMmRDYEUxY1BiS2JIdSNqd0Y7amEzRTM9dHo2bWkmPmJjekI0fCtDaGtRQT5vaTdaWndMZE5OMEl4XngtaUlGZmBjZlBNTkkpYWEqK1NST04qLT9jPDZPSDw5U2xWOSFFViVQb1FIYThRUyFlK15nZiRKV3R9Z3Beb25LdVhvQnlSYFU4RTVqIUk4JWBvR19RQDkmVGRMWTxXRzd4PDU-ZzYjQHVSdGN5a3FwS1RCQUQzeGBGP2MwZSVmQVNMTCFwKXE7fng2YiVsdzs3cSFKJSY7In0.XysH-z9DDtydQIaiX4Q_fLbH0fYGiJWBs2t2JkUMNH8
Source: global traffic	HTTP traffic detected: GET /directory/tp3/?b=66709&c=12881&z=64083&cb=2daf02b8d0 HTTP/1.1Host: sourceforge.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/projects/docfetcher/postdownloadAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; OAID=e012d283a5e1eae18062d3edb9725359; _gid=GA1.2.1668299401.1710158203; __gads=ID=ed8d538436f1b623:T=1710158205:RT=1710158205:S=ALNI_MbiYxvEWP7dZiJkctj8HGzhHyMpCg; __gpi=UID=00000dc711cb5676:T=1710158205:RT=1710158205:S=ALNI_MbtGcDgo6RHjTtG2es2mbdsN1jDSw; __eoi=ID=ccb10672a4298c0a:T=1710158205:RT=1710158205:S=AA-AfjZQQCnCz9TlsGBpH19Z0_Y8; _ga_1H226E4E4L=GS1.1.1710158208.1.0.1710158208.0.0.0; _ga=GA1.1.1854926735.1710158203; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFJTcypyVzE2WjwyVzRDRl4zTCY4YHhDNjRCQG1NaG1hYnowLTt1eEhQNlJfPkZtKl5jM2YqVzh7MWd2S01gKEl4KCVNMmhGTSFeWEhAQzdNfXZUMmRDYEUxY1BiS2JIdSNqd0Y7amEzRTM9dHo2bWkmPmJjekI0fCtDaGtRQT5vaTdaWndMZE5OMEl4XngtaUlGZmBjZlBNTkkpYWEqK1NST04qLT9jPDZPSDw5U2xWOSFFViVQb1FIYThRUyFlK15nZiRKV3R9Z3Beb25LdVhvQnlSYFU4RTVqIUk4JWBvR19RQDkmVGRMWTxXRzd4PDU-ZzYjQHVSdGN5a3FwS1RCQUQzeGBGP2MwZSVmQVNMTCFwKXE7fng2YiVsdzs3cSFKJSY7In0.XysH-z9DDtydQIaiX4Q_fLbH0fYGiJWBs2t2JkUMNH8
Source: global traffic	HTTP traffic detected: GET /prebid/v1 HTTP/1.1Host: prg.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; vs=575816=5885997
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.8406123646586141 HTTP/1.1Host: ad-delivery.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /directory/tp3/?b=69513&c=13409&z=66895&cb=8b302bed4f HTTP/1.1Host: sourceforge.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; OAID=e012d283a5e1eae18062d3edb9725359; _gid=GA1.2.1668299401.1710158203; __gads=ID=ed8d538436f1b623:T=1710158205:RT=1710158205:S=ALNI_MbiYxvEWP7dZiJkctj8HGzhHyMpCg; __gpi=UID=00000dc711cb5676:T=1710158205:RT=1710158205:S=ALNI_MbtGcDgo6RHjTtG2es2mbdsN1jDSw; __eoi=ID=ccb10672a4298c0a:T=1710158205:RT=1710158205:S=AA-AfjZQQCnCz9TlsGBpH19Z0_Y8; _ga_1H226E4E4L=GS1.1.1710158208.1.0.1710158208.0.0.0; _ga=GA1.1.1854926735.1710158203; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFJTcypyVzE2WjwyVzRDRl4zTCY4YHhDNjRCQG1NaG1hYnowLTt1eEhQNlJfPkZtKl5jM2YqVzh7MWd2S01gKEl4KCVNMmhGTSFeWEhAQzdNfXZUMmRDYEUxY1BiS2JIdSNqd0Y7amEzRTM9dHo2bWkmPmJjekI0fCtDaGtRQT5vaTdaWndMZE5OMEl4XngtaUlGZmBjZlBNTkkpYWEqK1NST04qLT9jPDZPSDw5U2xWOSFFViVQb1FIYThRUyFlK15nZiRKV3R9Z3Beb25LdVhvQnlSYFU4RTVqIUk4JWBvR19RQDkmVGRMWTxXRzd4PDU-ZzYjQHVSdGN5a3FwS1RCQUQzeGBGP2MwZSVmQVNMTCFwKXE7fng2YiVsdzs3cSFKJSY7In0.XysH-z9DDtydQIaiX4Q_fLbH0fYGiJWBs2t2JkUMNH8
Source: global traffic	HTTP traffic detected: GET /pv?tid=2r5yo54xlW&w=5483815487668224&o=5098683085881344&cv=2.1.38-1-g3a5ff56&widget=false&r=false&vr=1280x907&pageURL=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Fpostdownload&sid=nZZIdvDKz&pm=false&upapi=true HTTP/1.1Host: api.btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://sourceforge.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1Host: btlr.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
Source: global traffic	HTTP traffic detected: GET /directory/tp3/?b=66709&c=12881&z=64083&cb=2daf02b8d0 HTTP/1.1Host: sourceforge.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; OAID=e012d283a5e1eae18062d3edb9725359; _gid=GA1.2.1668299401.1710158203; __gads=ID=ed8d538436f1b623:T=1710158205:RT=1710158205:S=ALNI_MbiYxvEWP7dZiJkctj8HGzhHyMpCg; __gpi=UID=00000dc711cb5676:T=1710158205:RT=1710158205:S=ALNI_MbtGcDgo6RHjTtG2es2mbdsN1jDSw; __eoi=ID=ccb10672a4298c0a:T=1710158205:RT=1710158205:S=AA-AfjZQQCnCz9TlsGBpH19Z0_Y8; _ga_1H226E4E4L=GS1.1.1710158208.1.0.1710158208.0.0.0; _ga=GA1.1.1854926735.1710158203; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFJTcypyVzE2WjwyVzRDRl4zTCY4YHhDNjRCQG1NaG1hYnowLTt1eEhQNlJfPkZtKl5jM2YqVzh7MWd2S01gKEl4KCVNMmhGTSFeWEhAQzdNfXZUMmRDYEUxY1BiS2JIdSNqd0Y7amEzRTM9dHo2bWkmPmJjekI0fCtDaGtRQT5vaTdaWndMZE5OMEl4XngtaUlGZmBjZlBNTkkpYWEqK1NST04qLT9jPDZPSDw5U2xWOSFFViVQb1FIYThRUyFlK15nZiRKV3R9Z3Beb25LdVhvQnlSYFU4RTVqIUk4JWBvR19RQDkmVGRMWTxXRzd4PDU-ZzYjQHVSdGN5a3FwS1RCQUQzeGBGP2MwZSVmQVNMTCFwKXE7fng2YiVsdzs3cSFKJSY7In0.XysH-z9DDtydQIaiX4Q_fLbH0fYGiJWBs2t2JkUMNH8
Source: global traffic	HTTP traffic detected: GET /prebid/v1 HTTP/1.1Host: prg.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; vs=575816=5885997
Source: global traffic	HTTP traffic detected: GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1Host: btlr.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
Source: global traffic	HTTP traffic detected: GET /engine?site=143572;size=1x1;e=0;dt=0;category=twljteyw08d;kw=gqe5%20od1%20enrf%20135uc%20mgbff139vr;rnd=(1710158223957) HTTP/1.1Host: pbid.pro-market.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: anProfile="0+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)"
Source: global traffic	HTTP traffic detected: GET /prebid/v1 HTTP/1.1Host: prg.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; vs=575816=5885997
Source: global traffic	HTTP traffic detected: GET /s1.js?d=2396&cb=1710158221751 HTTP/1.1Host: tag.crsspxl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=693098949688747066; uuid=c80b7ee4-92fa-4d71-9444-870d4e377528
Source: global traffic	HTTP traffic detected: GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1Host: btlr.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
Source: global traffic	HTTP traffic detected: GET /utsync.ashx?pub=&adv=&et=0&eid=771&ct=js&pi=3642666937673580575&fp=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f&clid=&if=0&ps=&cl=&mlt=&data=&&cp=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Fpostdownload&pv=1710158223965_ao5ati89k&bl=en-us&cb=3445188&return=&ht=&d=&dc=&si=1710158201959_nopjhvr4s&cid=&s=1280x1024&rp=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Ffiles%2Fdocfetcher%2F1.1.25%2Fdocfetcher_1.1.25_win32_setup.exe%2Fdownload&v=2.6.1.139 HTTP/1.1Host: ml314.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pi=3642666937673580575; tp=3%253B03%252F11%252F2024%2B11%253A56%253A43%253B0; u=aHR0cHM6Ly9zb3VyY2Vmb3JnZS5uZXQv
Source: global traffic	HTTP traffic detected: GET /prebid/v1 HTTP/1.1Host: prg.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; vs=575816=5885997
Source: global traffic	HTTP traffic detected: GET /connectors/datonics/usersync?redir=https://pbid.pro-market.net/engine?du=73%26mimetype=img%26csync={userId} HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pbid.pro-market.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=e186753e-f558-43f2-9eb8-0f25b6de5290#1710158208299; _ssuma=eyI0NSI6MTcxMDE1ODIwOTExOX0
Source: global traffic	HTTP traffic detected: GET /datonics HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pbid.pro-market.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=B6512778B5DA4E7C942E6E491CF4A04A
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&dpi=3&pcid=-2533411667653603979 HTTP/1.1Host: sync.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pbid.pro-market.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /400646.gif?partner_uid=-2533411667653603979 HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pbid.pro-market.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /safeframe/1-0-40/html/container.html HTTP/1.1Host: 2e364cc7caa3f2e10b0fb666ab9496ef.safeframe.googlesyndication.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=9hr4p8g&ttd_tpi=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pbid.pro-market.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFEhQKBXRhcGFkEgsIqK7DwIvz4DwQBRIbCgxzaGFyZXRocm91Z2gSCwjWjMfSi_PgPBAFEhYKB2QwdHJvMWoSCwj-h-Hhi_PgPBAFGAEgASgCMgsIkv7jjqLz4DwQBTgBWgdkMHRybzFqYAI.
Source: global traffic	HTTP traffic detected: GET /getuid?https://pbid.pro-market.net/engine?du=13;csync=$UID;mimetype=img HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pbid.pro-market.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; receive-cookie-deprecation=1; uuid2=7822940101119878936; icu=ChgIkPoyEAoYAiACKAIwjuO7rwY4AkACSAIQjuO7rwYYAQ..
Source: global traffic	HTTP traffic detected: GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1Host: btlr.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=55881087&p=162538&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SyncRTB3=1711324800%3A54_250_55_71_220_21_13_104_166%7C1710720000%3A2_15_223; chkChromeAb67Sec=4; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; PugT=1710158213
Source: global traffic	HTTP traffic detected: GET /engine?du=73&mimetype=img&csync=e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553 HTTP/1.1Host: pbid.pro-market.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pbid.pro-market.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)"; anTRD=20141002%7C33.143572.999998..143572%7C53.143572.999998..143572%7C73.143572.999998..143572%7C13.143572.999998..143572%7C1.143572.999998..143572%7C89.143572.999998..143572%7C85.143572.999998..143572%7C24.143572.999998..143572; anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%23
Source: global traffic	HTTP traffic detected: GET /engine?du=53&mimetype=img&google_error=15 HTTP/1.1Host: pbid.pro-market.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pbid.pro-market.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)"; anTRD=20141002%7C33.143572.999998..143572%7C53.143572.999998..143572%7C73.143572.999998..143572%7C13.143572.999998..143572%7C1.143572.999998..143572%7C89.143572.999998..143572%7C85.143572.999998..143572%7C24.143572.999998..143572; anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%23
Source: global traffic	HTTP traffic detected: GET /engine?site=161131&size=1x1&mimetype=img&du=1&csync=71dcd657-b7ce-4e56-9064-0f83979f8fcb HTTP/1.1Host: pbid.pro-market.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pbid.pro-market.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)"; anTRD=20141002%7C33.143572.999998..143572%7C53.143572.999998..143572%7C73.143572.999998..143572%7C13.143572.999998..143572%7C1.143572.999998..143572%7C89.143572.999998..143572%7C85.143572.999998..143572%7C24.143572.999998..143572; anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%23
Source: global traffic	HTTP traffic detected: GET /engine?du=13;csync=7822940101119878936;mimetype=img HTTP/1.1Host: pbid.pro-market.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pbid.pro-market.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)"; anTRD=20141002%7C33.143572.999998..143572%7C53.143572.999998..143572%7C73.143572.999998..143572%7C13.143572.999998..143572%7C1.143572.999998..143572%7C89.143572.999998..143572%7C85.143572.999998..143572%7C24.143572.999998..143572; anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%23
Source: global traffic	HTTP traffic detected: GET /engine?du=24;csync=B6512778B5DA4E7C942E6E491CF4A04A;mimetype=img; HTTP/1.1Host: pbid.pro-market.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pbid.pro-market.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)"; anTRD=20141002%7C33.143572.999998..143572%7C53.143572.999998..143572%7C73.143572.999998..143572%7C13.143572.999998..143572%7C1.143572.999998..143572%7C89.143572.999998..143572%7C85.143572.999998..143572%7C24.143572.999998..143572; anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%23
Source: global traffic	HTTP traffic detected: GET /engine?site=143572;mimetype=img;ddar;rn=257546669;mds=0-5 HTTP/1.1Host: pbid.pro-market.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pbid.pro-market.net/engine?site=143572;size=1x1;e=0;dt=0;category=twljteyw08d;kw=gqe5%20od1%20enrf%20135uc%20mgbff139vr;rnd=(1710158223957)Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)"; anTRD=20141002%7C33.143572.999998..143572%7C53.143572.999998..143572%7C73.143572.999998..143572%7C13.143572.999998..143572%7C1.143572.999998..143572%7C89.143572.999998..143572%7C85.143572.999998..143572%7C24.143572.999998..143572; anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%23
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&dpi=3&pcid=-2533411667653603979&ckls=true&ci=qrjjuwiCKK&nc=false&trid=1376010420 HTTP/1.1Host: sync1.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pbid.pro-market.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: intentIQ=qrjjuwiCKK; IQver=1.9
Source: global traffic	HTTP traffic detected: GET /400646.gif?partner_uid=-2533411667653603979 HTTP/1.1Host: idsync.rlcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=4k01LoRgMc1aOOm42RcYUFYmzAEAL4KXC73Hrxo9kEM=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; receive-cookie-deprecation=1; uuid2=7822940101119878936; icu=ChgIkPoyEAoYAiACKAIwjuO7rwY4AkACSAIQjuO7rwYYAQ..
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=rQpbF21I1RJEgU5; matchpubmatic=5
Source: global traffic	HTTP traffic detected: GET /engine?du=85&mimetype=img&csync=2407834391265652961 HTTP/1.1Host: pbid.pro-market.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pbid.pro-market.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)"; anTRD=20141002%7C33.143572.999998..143572%7C53.143572.999998..143572%7C73.143572.999998..143572%7C13.143572.999998..143572%7C1.143572.999998..143572%7C89.143572.999998..143572%7C85.143572.999998..143572%7C24.143572.999998..143572; anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%23
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?p=156557&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; PugT=1710158213; chkChromeAb67Sec=5; pi=162538:3; DPSync3=1711324800%3A201_258_256_262_261_260_259_263%7C1710201600%3A248_255%7C1710720000%3A265%7C1711152000%3A257; SyncRTB3=1710720000%3A223_15_2%7C1711324800%3A8_54_166_46_249_48_55_21_5_165_231_250_220_104_22_71_13_3%7C1710979200%3A63
Source: global traffic	HTTP traffic detected: GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=65eef17d-816a8-799a4-641fc; d=EMUBEgGsK_ijCP_8EA
Source: global traffic	HTTP traffic detected: GET /usersync/141?gdpr=0&gdpr_consent= HTTP/1.1Host: match.deepintent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDIUSER=di_5eeffdf13c334a9c86516; CDIPARTNERS=%7B%221%22%3A%2220240311%22%7D
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaRqsTio6mbrvBleuubzYc1bNiqyA0NAKCpC8DN6WFHPzJk1ZpBPjXX5quQvIC7RpU0eEik_ftf9dxTJrU4Hc9vJGYyQgw HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://2e364cc7caa3f2e10b0fb666ab9496ef.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /712188.gif?partner_uid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=4k01LoRgMc1aOOm42RcYUFYmzAEAL4KXC73Hrxo9kEM=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3203&partner_device_id=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1710158204884; TapAd_DID=3d92896e-6439-4f25-b0dc-753e207e1323; TapAd_3WAY_SYNCS=1!1715
Source: global traffic	HTTP traffic detected: GET /syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1Host: synchroscript.deliveryengine.adswizz.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /engine?du=73&mimetype=img&csync=e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553 HTTP/1.1Host: pbid.pro-market.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: anTRD=20141002%7C33.143572.999998..143572%7C53.143572.999998..143572%7C73.143572.999998..143572%7C13.143572.999998..143572%7C1.143572.999998..143572%7C89.143572.999998..143572%7C85.143572.999998..143572%7C24.143572.999998..143572; anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%23; anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=1-71dcd657-b7ce-4e56-9064-0f83979f8fcb:13-7822940101119878936:24-B6512778B5DA4E7C942E6E491CF4A04A:53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553"
Source: global traffic	HTTP traffic detected: GET /sn.ashx?&gdpr=0&gdpr_consent= HTTP/1.1Host: pmp.mxptint.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /engine?du=53&mimetype=img&google_error=15 HTTP/1.1Host: pbid.pro-market.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: anTRD=20141002%7C33.143572.999998..143572%7C53.143572.999998..143572%7C73.143572.999998..143572%7C13.143572.999998..143572%7C1.143572.999998..143572%7C89.143572.999998..143572%7C85.143572.999998..143572%7C24.143572.999998..143572; anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%23; anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=1-71dcd657-b7ce-4e56-9064-0f83979f8fcb:13-7822940101119878936:24-B6512778B5DA4E7C942E6E491CF4A04A:53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553"
Source: global traffic	HTTP traffic detected: GET /engine?site=161131&size=1x1&mimetype=img&du=1&csync=71dcd657-b7ce-4e56-9064-0f83979f8fcb HTTP/1.1Host: pbid.pro-market.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: anTRD=20141002%7C33.143572.999998..143572%7C53.143572.999998..143572%7C73.143572.999998..143572%7C13.143572.999998..143572%7C1.143572.999998..143572%7C89.143572.999998..143572%7C85.143572.999998..143572%7C24.143572.999998..143572; anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%23; anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=1-71dcd657-b7ce-4e56-9064-0f83979f8fcb:13-7822940101119878936:24-B6512778B5DA4E7C942E6E491CF4A04A:53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553"
Source: global traffic	HTTP traffic detected: GET /engine?du=13;csync=7822940101119878936;mimetype=img HTTP/1.1Host: pbid.pro-market.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: anTRD=20141002%7C33.143572.999998..143572%7C53.143572.999998..143572%7C73.143572.999998..143572%7C13.143572.999998..143572%7C1.143572.999998..143572%7C89.143572.999998..143572%7C85.143572.999998..143572%7C24.143572.999998..143572; anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%23; anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=1-71dcd657-b7ce-4e56-9064-0f83979f8fcb:13-7822940101119878936:24-B6512778B5DA4E7C942E6E491CF4A04A:53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553"
Source: global traffic	HTTP traffic detected: GET /diff/js/modules/cmp.js HTTP/1.1Host: ced-ns.sascdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /engine?du=24;csync=B6512778B5DA4E7C942E6E491CF4A04A;mimetype=img; HTTP/1.1Host: pbid.pro-market.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: anTRD=20141002%7C33.143572.999998..143572%7C53.143572.999998..143572%7C73.143572.999998..143572%7C13.143572.999998..143572%7C1.143572.999998..143572%7C89.143572.999998..143572%7C85.143572.999998..143572%7C24.143572.999998..143572; anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%23; anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=1-71dcd657-b7ce-4e56-9064-0f83979f8fcb:13-7822940101119878936:24-B6512778B5DA4E7C942E6E491CF4A04A:53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553"
Source: global traffic	HTTP traffic detected: GET /engine?site=143572;mimetype=img;ddar;rn=257546669;mds=0-5 HTTP/1.1Host: pbid.pro-market.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%23; anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=1-71dcd657-b7ce-4e56-9064-0f83979f8fcb:13-7822940101119878936:24-B6512778B5DA4E7C942E6E491CF4A04A:53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553"
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&dpi=3&pcid=-2533411667653603979&ckls=true&ci=qrjjuwiCKK&nc=false&trid=1376010420 HTTP/1.1Host: sync1.intentiq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: intentIQ=qrjjuwiCKK; IQver=1.9; IQPData=2584766758#1710158227008#0#1710158227008; intentIQCDate=1710158227010; ASDT=0; IQPending=pending; CSDT=UEQ6Ml8wJlU2aUhkWnI
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=7822940101119878936&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; PugT=1710158213; chkChromeAb67Sec=5; pi=162538:3; DPSync3=1711324800%3A201_258_256_262_261_260_259_263%7C1710201600%3A248_255%7C1710720000%3A265%7C1711152000%3A257; SyncRTB3=1710720000%3A223_15_2%7C1711324800%3A8_54_166_46_249_48_55_21_5_165_231_250_220_104_22_71_13_3%7C1710979200%3A63
Source: global traffic	HTTP traffic detected: GET /map/c=14701/tp=MTAI/tpid=9A176ADB-73F4-4BD8-A648-23F2443493B5/gdpr=0/gdpr_consent= HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=1973209972465453479 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; PugT=1710158213; chkChromeAb67Sec=5; pi=162538:3; DPSync3=1711324800%3A201_258_256_262_261_260_259_263%7C1710201600%3A248_255%7C1710720000%3A265%7C1711152000%3A257; SyncRTB3=1710720000%3A223_15_2%7C1711324800%3A8_54_166_46_249_48_55_21_5_165_231_250_220_104_22_71_13_3%7C1710979200%3A63
Source: global traffic	HTTP traffic detected: GET /bh/rtset?pid=558357&ev=1&rurl=https%3a%2f%2fmatch.sharethrough.com/sync/v1?source_id=790d3e0174b12a86f1cbebf4&source_user_id=%%VGUID%% HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pb_rtb_ev=3-1q66\|7dN.0.AAKPDU7L3eMAABWFZYx_mg; V=3ftvG5anVWUA; INGRESSCOOKIE=c74e8523d665f622
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFEhQKBXRhcGFkEgsIqK7DwIvz4DwQBRIbCgxzaGFyZXRocm91Z2gSCwjWjMfSi_PgPBAFEhYKB2QwdHJvMWoSCwj-h-Hhi_PgPBAFGAEgASgCMgsIgODmqKPz4DwQBTgBWgc5aHI0cDhnYAI.
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:rQpbF21I1RJEgU5&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; PugT=1710158213; chkChromeAb67Sec=5; pi=162538:3; DPSync3=1711324800%3A201_258_256_262_261_260_259_263%7C1710201600%3A248_255%7C1710720000%3A265%7C1711152000%3A257; SyncRTB3=1710720000%3A223_15_2%7C1711324800%3A8_54_166_46_249_48_55_21_5_165_231_250_220_104_22_71_13_3%7C1710979200%3A63
Source: global traffic	HTTP traffic detected: GET /xbbe/pixel?d=CI2VFxDq2JIBGNGSv6IBMAE&v=APEucNWR6j7Zdo_ZWHJ1BAEVA_bD2i-y6soHEJkg2uUZkLhy8PuOAjjkq5YKWSti2AeaGMblvOf8Jhitztycsp1WAo5UjRXfCQ HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://2e364cc7caa3f2e10b0fb666ab9496ef.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlhWjE-nrLMqamcKd4HCzJGyk-lF6Y-_gdSV1_rcQ-Lc3JBzMSF3zk6wICTe0A; test_cookie=CheckForPermission; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; PugT=1710158213; DPSync3=1711324800%3A201_258_256_262_261_260_259_263%7C1710201600%3A248_255%7C1710720000%3A265%7C1711152000%3A257; SyncRTB3=1711324800%3A55_5_165_231_104_8_48_21_166_249_220_22_3_54_46_250_266_71_13%7C1710720000%3A2_223_15%7C1710979200%3A63; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; chkChromeAb67Sec=6
Source: global traffic	HTTP traffic detected: GET /879366/express_html_inpage_rendering_lib_200_278.js HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://2e364cc7caa3f2e10b0fb666ab9496ef.safeframe.googlesyndication.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://2e364cc7caa3f2e10b0fb666ab9496ef.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?pid=5324&it=1&iv=3f4d01118e46a9c1da92273369e463cd275f659a1c1281b7f6700bb3da3c2691791426b5417dce21&_=2 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=58280&ovsid=b6baf5b6-3516-4c46-a708-53e0ec193a37 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3203&partner_device_id=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1710158204884; TapAd_DID=3d92896e-6439-4f25-b0dc-753e207e1323; TapAd_3WAY_SYNCS=1!1715
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaRTwsiJVQZ4bDDtRcB7kq4pFrSNQL8wOFRR0TqwbGaAazPAGtmNiZyNuS7PhZw8XVNHaB0cYHuoU6whI1TJA9W6PSo0gA HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://2e364cc7caa3f2e10b0fb666ab9496ef.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /engine?du=85&mimetype=img&csync=2407834391265652961 HTTP/1.1Host: pbid.pro-market.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%23; anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=1-71dcd657-b7ce-4e56-9064-0f83979f8fcb:13-7822940101119878936:24-B6512778B5DA4E7C942E6E491CF4A04A:53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553:85-2407834391265652961"
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzAmdGw9MTI5NjAw&piggybackCookie=di_5eeffdf13c334a9c86516 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; PugT=1710158213; DPSync3=1711324800%3A201_258_256_262_261_260_259_263%7C1710201600%3A248_255%7C1710720000%3A265%7C1711152000%3A257; SyncRTB3=1711324800%3A55_5_165_231_104_8_48_21_166_249_220_22_3_54_46_250_266_71_13%7C1710720000%3A2_223_15%7C1710979200%3A63; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; chkChromeAb67Sec=6
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R4E330_11235B51F_E079381&r=https://pmp.mxptint.net/sn.ashx?ak=1 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; PugT=1710158213; DPSync3=1711324800%3A201_258_256_262_261_260_259_263%7C1710201600%3A248_255%7C1710720000%3A265%7C1711152000%3A257; SyncRTB3=1711324800%3A55_5_165_231_104_8_48_21_166_249_220_22_3_54_46_250_266_71_13%7C1710720000%3A2_223_15%7C1710979200%3A63; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; chkChromeAb67Sec=6
Source: global traffic	HTTP traffic detected: GET /pixel?pid=r8hrb20&t=gif HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=18e2d5f5e6f-1cc10000010a4999; SERVERID=18841~DM
Source: global traffic	HTTP traffic detected: GET /map/ct=y/c=14701/tp=MTAI/tpid=9A176ADB-73F4-4BD8-A648-23F2443493B5/gdpr=0/gdpr_consent= HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_cc=ctst
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=790d3e0174b12a86f1cbebf4&ev=1&source_user_id=3ftvG5anVWUA&pid=558357 HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
Source: global traffic	HTTP traffic detected: GET /712068.gif?partner_uid=b6baf5b6-3516-4c46-a708-53e0ec193a37 HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=h4rvB4lZ2+1aOOm42RcYUFYmzAEAL4KXC73Hrxo9kEM=; pxrc=CJPju68GEgUI6EcQAA==
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1Host: synchroscript.deliveryengine.adswizz.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/UCookieSetPug?&rd=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D91%26partneruserid%3D%23PM_USER_ID%26gdpr%3DPM_GDPR%26gdpr_consent%3DPM_CONSENT&gdpr=0&gdpr_consent= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; DPSync3=1711324800%3A201_258_256_262_261_260_259_263%7C1710201600%3A248_255%7C1710720000%3A265%7C1711152000%3A257; SyncRTB3=1711324800%3A55_5_165_231_104_8_48_21_166_249_220_22_3_54_46_250_266_71_13%7C1710720000%3A2_223_15%7C1710979200%3A63; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; chkChromeAb67Sec=6; PugT=1710158
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=5b286190338513af73f09c28&source_user_id=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent= HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=76&partneruserid=GOOGLE_HOSTED_SI&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmartrtb_dbm%26google_cm%26google_sc%26google_hm%3DSMART_USER_ID_B64&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; vs=575816=5885997
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=134&partneruserid=OB_OK&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmart_adserver_eb%26google_hm%3DSMART_USER_ID_B64&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; vs=575816=5885997
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=6ec76371-3031-4b49-abb3-349fb3d7cf23; c=1710158227; tuuid_lu=1710158227
Source: global traffic	HTTP traffic detected: GET /load/?p=204&g=1170&j=0&redirect=https%3A%2F%2Fml314.com%2Fcsync.ashx%3Fperson_id%3D3642666937673580575%26eid%3D50596%26fp%3D HTTP/1.1Host: loadus.exelator.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usermatch?s=179394&cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D33%26partneruserid%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D86%26partneruserid%3D$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; receive-cookie-deprecation=1; uuid2=7822940101119878936; icu=ChgIkPoyEAoYAiACKAIwjuO7rwY4AkACSAIQjuO7rwYYAQ..
Source: global traffic	HTTP traffic detected: GET /AdServer/UCookieSetPug?oid=1&rd=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dpmeb%26google_sc%3D1%26google_hm%3D%23%23B64_16B_PM_UID%26google_redir%3Dhttps%25253A%25252F%25252Fimage8.pubmatic.com%25252FAdServer%25252FImgSync%25253Fsec%25253D1%252526p%25253D156578%252526mpc%25253D4%252526fp%25253D1%252526pu%25253Dhttps%2525253A%2525252F%2525252Fimage4.pubmatic.com%2525252FAdServer%2525252FSPug%2525253Fp%2525253D156578%25252526sc%2525253D1&google_push=AXcoOmTLLecfdkrh8XrNPYiAPAHUwxHVMhTH1d0UNuIjnx8DR10Q3My5E6JHgA0mCRvJF6fv9E6bjO0c0X7rrMgtMidlBVftkh4PIND4YZhI6BrRZvgWRtBTM2-gAzKfJnQW9vG9Jnk25EePyQMXInZH8Ug HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; DPSync3=1711324800%3A201_258_256_262_261_260_259_263%7C1710201600%3A248_255%7C1710720000%3A265%7C1711152000%3A257; SyncRTB3=1711324800%3A55_5_165_231_104_8_48_21_166_249_220_22_3_54_46_250_26
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=a547219b-814b-4e3e-8a4f-35c044fa1891&ph=ec81d0b7-c42e-4a42-b97a-9305af647d30&r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D100%26partneruserid%3D%7BOPENX_ID%7D&gdpr=0&gdpr_consent= HTTP/1.1Host: eu-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=2a5f7fb6-27c9-488e-9168-f0298407ea3a\|1710158208
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=91&partneruserid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; vs=575816=5885997
Source: global traffic	HTTP traffic detected: GET /rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
Source: global traffic	HTTP traffic detected: GET /i.match?p=b6&u=&google_push=AXcoOmRF5W8NAr6bAj2leKfOVpf5YPzmwyGOBL4Qk8UWxtsoHp0JQQY85SL4-cQeNi9_rHcFCBXE2c5C6Ay7fe1qbbggKpd9tHB6SYPy500tMuwErDYeYvmQ-SgIpoMan23eFzYDHNVE2L_UTWrHWxf4SwM&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmRF5W8NAr6bAj2leKfOVpf5YPzmwyGOBL4Qk8UWxtsoHp0JQQY85SL4-cQeNi9_rHcFCBXE2c5C6Ay7fe1qbbggKpd9tHB6SYPy500tMuwErDYeYvmQ-SgIpoMan23eFzYDHNVE2L_UTWrHWxf4SwM%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24 HTTP/1.1Host: a.tribalfusion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC} HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; receive-cookie-deprecation=1; uuid2=7822940101119878936; icu=ChgIkPoyEAoYAiACKAIwjuO7rwY4AkACSAIQjuO7rwYYAQ..
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=adxab&google_nid=rtb_house_us&google_push=AXcoOmSAJRqiKrDk695NM5A0bhR-PbKirjUMU0XPtB6Bxc1RwguQH-dmF956DAw2sVHKCv2Y4vavcXcVnIKVuw_hQgBYLNHy-IK58IbCyOEo5pB0qQik5vT4D0CWsGdjc8bVTO3Kh1KpZOphCjRZ2QEAxox5 HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/openx?oxid=f9f340ef-8e4e-7779-cbbe-38c1e020d9c7&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFEhQKBXRhcGFkEgsIqK7DwIvz4DwQBRIbCgxzaGFyZXRocm91Z2gSCwiktNqPjfPgPBAFEhYKB2QwdHJvMWoSCwj-h-Hhi_PgPBAFGAEgASgCMgsIxKndvKPz4DwQBTgBWgxzaGFyZXRocm91Z2hgAg..
Source: global traffic	HTTP traffic detected: GET /cookie/smart?r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D66%26partneruserid%3D%7Bamob_user_id%7D&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.adotmob.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=22052&dpuuid=3642666937673580575&redir= HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=45232011452423388812062241212727845356; dpm=45232011452423388812062241212727845356
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=3&google_push=AXcoOmSUHkieHzSCVAsjirmCD7B7oZRz_25e9CkaT-I-XgeAQGIsIovSy5WLakb5XIAj69xCo23uqFTpaGOL7u6IoMa1X5LGN2C7i_2yY98mEEG9SH0EkuLOEUUDYJLjD-jx0E_SN7dGH8TOpoGAi5NbhT4 HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; vs=575816=5885997
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1Host: image8.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; DPSync3=1711324800%3A201_258_256_262_261_260_259_263%7C1710201600%3A248_255%7C1710720000%3A265%7C1711152000%3A257; SyncRTB3=1711324800%3A55_5_165_231_104_8_48_21_166_249_220_22_3_54_46_250_266_71_13%7C1710720000%3A2_223_15%7C1710979200%3A63; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; chkChromeAb67Sec=6; PugT=1710158228
Source: global traffic	HTTP traffic detected: GET /395886.gif?partner_uid=3642666937673580575 HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=h4rvB4lZ2+1aOOm42RcYUFYmzAEAL4KXC73Hrxo9kEM=; pxrc=CJPju68GEgUI6EcQAA==
Source: global traffic	HTTP traffic detected: GET /sync?ssp=smartadserver&gdpr=0&gdpr_consent= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=6ec76371-3031-4b49-abb3-349fb3d7cf23; c=1710158227; tuuid_lu=1710158227
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=58280&ovsid=b6baf5b6-3516-4c46-a708-53e0ec193a37 HTTP/1.1Host: hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3531598286675836000V10; data-sht=b6baf5b6-3516-4c46-a708-53e0ec193a37~~1
Source: global traffic	HTTP traffic detected: GET /sn.ashx?ak=1 HTTP/1.1Host: pmp.mxptint.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mxpim=R4E330_11235B51F_E079381.1.000000000000000065EEF193
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=790d3e0174b12a86f1cbebf4&ev=1&source_user_id=3ftvG5anVWUA&pid=558357 HTTP/1.1Host: match.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1Host: image8.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; DPSync3=1711324800%3A201_258_256_262_261_260_259_263%7C1710201600%3A248_255%7C1710720000%3A265%7C1711152000%3A257; SyncRTB3=1711324800%3A55_5_165_231_104_8_48_21_166_249_220_22_3_54_46_250_266_71_13%7C1710720000%3A2_223_15%7C1710979200%3A63; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; chkChromeAb67Sec=6; PugT=1710158228; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516
Source: global traffic	HTTP traffic detected: GET /tum?umid=4&uid=&google_push=AXcoOmTDl7yrU__lMIcgE74og1sWQ0QATWpz7GDIG8DYmKfhVwkZGRxN4IQefreQEq53DMN4eR6l1FVe15gFW41ncSWRwP5A2A_FdH2zPoyhebZNOm6WsM7hEYUH2VNiONSskXE5HakntWRC35YB1G-3OEU HTTP/1.1Host: ums.acuityplatform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /map/ct=y/c=14701/tp=MTAI/tpid=9A176ADB-73F4-4BD8-A648-23F2443493B5/gdpr=0/gdpr_consent= HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=3; _cc_id=9d77637072f92cb5f5d20c39a1b22cb5
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=32&partneruserid=2407834391265652961&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
Source: global traffic	HTTP traffic detected: GET /pixel/p-Z8PuJEk6U7Hyq.gif?idmatch=0 HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=65eef17d-816a8-799a4-641fc; d=EMUBEgGsK_ijCP_8EA
Source: global traffic	HTTP traffic detected: GET /sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/index.html?ev=01_250 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://2e364cc7caa3f2e10b0fb666ab9496ef.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=pubmatic&gdpr=0&gdpr_consent=&tc=1 HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=2fVAwyNGZ4vWrC85UL9S_1710158228861; ts=1710158228
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=5b286190338513af73f09c28&source_user_id=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent= HTTP/1.1Host: match.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=100&partneruserid=ec7ad717-1f8c-4815-8c2c-86fdc6330201&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fidsync.rlcdn.com%2F396846.gif%3Fserved_by%3Devergreen%26partner_uid%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=2a5f7fb6-27c9-488e-9168-f0298407ea3a\|1710158208
Source: global traffic	HTTP traffic detected: GET /sync/openx/6d3426ab-1ee2-e530-fa69-2e341f77148e?gdpr=0 HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=73299430&p=162538&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; DPSync3=1711324800%3A201_258_256_262_261_260_259_263%7C1710201600%3A248_255%7C1710720000%3A265%7C1711152000%3A257; SyncRTB3=1711324800%3A55_5_165_231_104_8_48_21_166_249_220_22_3_54_46_250_266_71_13%7C1710720000%3A2_223_15%7C1710979200%3A63; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; chkChromeAb67Sec=6; PugT=1710158228; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=&google_error=15 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
Source: global traffic	HTTP traffic detected: GET /load/?p=204&g=1170&j=0&redirect=https%3A%2F%2Fml314.com%2Fcsync.ashx%3Fperson_id%3D3642666937673580575%26eid%3D50596%26fp%3D&xl8blockcheck=1 HTTP/1.1Host: loadus.exelator.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EE="ef0ee26ff141c186c8f416092ed9f16d"; ud="eJxrXxzq6XKLQSE1zSA11cgsLc3QxDDZ0MIs2SLNxNDMwNIoNcUyzdAsZXFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVywAswJcw1asCS%252FKDN9UWjw4qKUNMZFJcWngo%252BLbQAAX5snfg%253D%253D"
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssr9-mhLE0SfG-5qH3RyP1YWYQmPZqAZD-JNFW9L9ZZB624P4aaDVY1sueg4t2dCU-JyFaiv-A2-319CZSIk0BpZ_YkvHN5TLkk2xaURijKmN_lfni-dftf-oA1ghoL7g1eVc6DrytzA0bppgpqN9xghAxNs2qRJHZJDbdTUTyvGa3I_ZW61Eed_fzUUaEj1u30mN61IGPCOu03Qk_jYH37D8yPJvLehYnNsO_qgWaRjls9fKckHaF1jve_g1OlJ9Tk5nAKA8NjqpZskV4PyOoFpejrQ2BsYts-w7qABMU7abEXUTtu2iBTVjqU7gl2yy6bL3fySGF5Jvv1b2dxNbfJsjwOjj5rlKcu88XQK00Uqh2_lGXz_sV61HYY-rUrWgiMGiLPQI2vkkVQ_QthUNyU6hjUWr0dgYj4hqEX9vb61ZtBM4ZXxxlix-owVU0mlQGKGE8w9dEzSy5WefX1fI_pZLX12va6uze7P7Ceh-6dOYf9WodT_VRegF-CPdTFkKoYghuNNhYFLPI5dDE3zoUv18dqtnBoG0Rtxbo2_rp0lhzMmjAO7uSaJgY6AikEVilto2fWQnNwTpKqsG9lGKG7Z8tD9sJwpRho6iCScHtqdrMqabOPDxqHogVxN3vvJm9EHhFkm92paYCzXKNTha_7CuCDjO5eAo73VWoKSjDdMqWqiLfx6D3_KbUY_xNgmpXFKx06flMwLgRgpT5kbQpwV_vtWY5ZPMI8IZjMtXabY7O3RxzjsWXj_HeukVqg_GRs0UYG7ijSUu-k0aPRWn2hjo3Ilse5byLn0dm2Gb7jAp6inVQP4v45voC6GkBsFlnV9dvXRBjYzE5FkgByXD0udadFXuyAUSFNbhurGc5qYaJdQv7WtpyG6ahTYNrr2tKGofX2XsOB3JfTnrHXb4AUzpm4ZHsxMHW8fS8M4EBQDxL08Zf0V-j8UBXNpkx6ZN-y6byaEq2X5LUgqpbIZKiKV7j2CJl6ozJNWvPRcaScDkXO6UcE8UjgTLZOdP3un06CRMMLjJfwB87OrN7JCKjc9y2LRkBxhl7MXFVfUcz1FxGRDQXPwh-I_aeFwxe9Bf48kibTLRRQ2Y8x6IqBKEHlOAsFHkitv8tuHBy0eDRuGEdujljKmXOXeOruWnB-o0xUgolupUe_1x_0IvN5KTVzcTX3jV8OgQpnsbFBBEcsn1X9uwZfGLXM6BehsfIlwt0omg0ONDmuVOilSGNc_UxYVHfDrF6ow3Z_zhIn2Gdd5FZzEEHqznuNuolKpMCKrJwzm_TEE1dQgaxC7qFN_3Wg8CSATlsQRYWPV3TEEamVOJd0M662X9HBNWbhnSNpBhspBqufCtgjoHKvxPIKoNCC_YhQ9vrq6ZjvPsdOceNs6zwr7EYRbjP-6dyUPz0LSyeTVOjeH0hHtD2fN6Euad56QPptnGTWh_GtlJqUYv2d2oP2oiqLFw08wCqCltY0jA&sai=AMfl-YR6H9LZFZbm2QUsLKawXiZYPJ51DChZcYNZ2CLZN1Zy7HnBUZaBh8nURMgsK5Fgf4uAUKNTIXdrUwsCbLrj6_XmR2EXiTluZUMLVdYlVN_CT10rFClCR6WiGTdhDISme3YrgiUm5XFdSp93HCvtUjvL4iJwsAU1vk_qcNGa0Aeq6Oudjlza1pNANIukObfIjEmJ-GjN6lE_kcHfdX3YvyXOmWjvjPlfFZdtuZu9MRcHBJACNcvd4ZhYoRilqs5ZhvGMmI2BdmJiH5Wm7QWTKkqDN-TnCImnpd1xBijO0NI97zpVX0imZT_HTXIYbN9iwCY1vyTxGaRAwnhcsz2LKR0fGomzH6M-PZPS3AEQ9EqMAodP4H8uZJRfOZZmaAMDOB4rmcB96FldPeLnIW2bTzHfFBVVPbyPQGzQNEQBE7wB6rItRZ_F&sig=Cg0ArKJSzDZLkNT3f9qHEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9nb2RhZGR5LmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1541&cbvp=1&cstd=1537&cisv=r20240306.62815&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: not-trigger=navigation-source, event-sourceReferer: https://2e364cc7caa3f2e10b0fb666ab9
Source: global traffic	HTTP traffic detected: GET /usersync/113 HTTP/1.1Host: match.deepintent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDIUSER=di_5eeffdf13c334a9c86516; CDIPARTNERS=%7B%221%22%3A%2220240311%22%2C%22141%22%3A%2220240311%22%7D
Source: global traffic	HTTP traffic detected: GET /tum?umid=6 HTTP/1.1Host: ums.acuityplatform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=162538&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: simage4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; DPSync3=1711324800%3A201_258_256_262_261_260_259_263%7C1710201600%3A248_255%7C1710720000%3A265%7C1711152000%3A257; SyncRTB3=1711324800%3A55_5_165_231_104_8_48_21_166_249_220_22_3_54_46_250_266_71_13%7C1710720000%3A2_223_15%7C1710979200%3A63; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; chkChromeAb67Sec=6; PugT=1710158228; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=48 HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=e186753e-f558-43f2-9eb8-0f25b6de5290#1710158208299; _ssuma=eyI0NSI6MTcxMDE1ODIwOTExOSwiNTMiOjE3MTAxNTgyMjU5OTV9
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?st=bidswitch&rurl=%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D79%26user_id%3D_wfivefivec_%26expires%3D30%26ssp%3Dsmartadserver%26bsw_param%3D6ec76371-3031-4b49-abb3-349fb3d7cf23 HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=rQpbF21I1RJEgU5; matchpubmatic=5
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=22052&dpuuid=3642666937673580575&redir= HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=45232011452423388812062241212727845356; dpm=45232011452423388812062241212727845356
Source: global traffic	HTTP traffic detected: GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=a1253c92-92e4-cc83-0bb0-ba5688131227 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_mD47eJIUzEqu3DVtJD2b0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=135&partneruserid=TAM_OK&redirurl=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fdcm%3Fpid%3Df7a5db36-1d5c-4c26-81b6-b4d0807faffb%26id%3DSMART_USER_ID&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; vs=575816=5885997
Source: global traffic	HTTP traffic detected: GET /ups/55940/sync?_origin=1&redir2=true&uid=Ze7xfMAoIeEAAAzaAIdO4AAAEGAAAAAB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDSYNC=18z8~2h8b; A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo
Source: global traffic	HTTP traffic detected: GET /bsw_sync?ssp=pubmatic&bsw_user_id=6ec76371-3031-4b49-abb3-349fb3d7cf23 HTTP/1.1Host: t.pswec.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /csync.ashx?fp=40dcaaf904223ef640b08777bb7ed3da08de2c0166ccb1ed6ddd6999579dd017f4cb09cee1a4f8eb&person_id=3642666937673580575&eid=50082 HTTP/1.1Host: ml314.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pi=3642666937673580575; u=aHR0cHM6Ly9zb3VyY2Vmb3JnZS5uZXQvcHJvamVjdHMvZG9jZmV0Y2hlci9wb3N0ZG93bmxvYWQ%3D; tp=7%253B03%252F11%252F2024%2B11%253A57%253A05%253B0
Source: global traffic	HTTP traffic detected: GET /s/ix?cm_dsp_id=18&us_privacy=&gdpr=&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: s.company-target.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /z/i.match?p=b6&u=&google_push=AXcoOmRF5W8NAr6bAj2leKfOVpf5YPzmwyGOBL4Qk8UWxtsoHp0JQQY85SL4-cQeNi9_rHcFCBXE2c5C6Ay7fe1qbbggKpd9tHB6SYPy500tMuwErDYeYvmQ-SgIpoMan23eFzYDHNVE2L_UTWrHWxf4SwM&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmRF5W8NAr6bAj2leKfOVpf5YPzmwyGOBL4Qk8UWxtsoHp0JQQY85SL4-cQeNi9_rHcFCBXE2c5C6Ay7fe1qbbggKpd9tHB6SYPy500tMuwErDYeYvmQ-SgIpoMan23eFzYDHNVE2L_UTWrHWxf4SwM%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24 HTTP/1.1Host: s.tribalfusion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ANON_ID=aUnoeUON6Ju8ZbUxpciddGPZbVOBUU1hxbk1tqV4wa
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=86&partneruserid=7822940101119878936&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=76:GOOGLE_HOSTED_SI\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072971&val=71dcd657-b7ce-4e56-9064-0f83979f8fcb&ttd_puid=f9f340ef-8e4e-7779-cbbe-38c1e020d9c7&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=2a5f7fb6-27c9-488e-9168-f0298407ea3a\|1710158208; pd=v2\|1710158229\|vMgavPkWgyiK
Source: global traffic	HTTP traffic detected: GET /sync/img?mt_exid=3&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA%3D%3D%26piggybackCookie%3Duid%3A%5BMM_UUID%5D HTTP/1.1Host: sync.mathtag.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&referrer_pid=r8hrb20&google_error=15 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=18e2d5f5e6f-1cc10000010a4999; SERVERID=18841~DM
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=66&partneruserid=0a42220400c08ec15f936285&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=91:9A176ADB-73F4-4BD8-A648-23F2443493B5\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=&google_error=15 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=smart-adserver&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFEhQKBXRhcGFkEgsIqK7DwIvz4DwQBRIbCgxzaGFyZXRocm91Z2gSCwjWjMfSi_PgPBAFEhYKB2QwdHJvMWoSCwj-h-Hhi_PgPBAFGAEgASgCMgsIgODmqKPz4DwQBTgBWgc5aHI0cDhnYAI.
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537148856&val=Ze7xgAAAAwa1TAAh HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eu-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=2a5f7fb6-27c9-488e-9168-f0298407ea3a\|1710158208; pd=v2\|1710158229\|vMgavPkWgyiK
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=adxab&google_nid=rtb_house_us&google_push=AXcoOmSAJRqiKrDk695NM5A0bhR-PbKirjUMU0XPtB6Bxc1RwguQH-dmF956DAw2sVHKCv2Y4vavcXcVnIKVuw_hQgBYLNHy-IK58IbCyOEo5pB0qQik5vT4D0CWsGdjc8bVTO3Kh1KpZOphCjRZ2QEAxox5&tc=1 HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=6d5Bhd7V8Z70rO0rzoOe_1710158229627; ts=1710158229
Source: global traffic	HTTP traffic detected: GET /sn.ashx?ak=1 HTTP/1.1Host: pmp.mxptint.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mxpim=R4E330_11235B51F_E079381.1.000000000000000065EEF193
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=81&gdpr=0&external_user_id=DgrDEF4OkREVB5dDWQeLQgEGx0EVCZJEXlwabpLi HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
Source: global traffic	HTTP traffic detected: GET /pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=B6512778B5DA4E7C942E6E491CF4A04A
Source: global traffic	HTTP traffic detected: GET /396846.gif?served_by=evergreen&partner_uid=ac353f89-4309-4119-94c7-b832d9bbb81f HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=yhBJVcnL/dBaOOm42RcYUFYmzAEAL4KXC73Hrxo9kEM=; pxrc=CJPju68GEgUI6EcQABIFCNtOEAI=
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=41&external_user_id=70a98560-df9e-11ee-9b1b-8fc11e983897 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
Source: global traffic	HTTP traffic detected: GET /sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/index.js?1708393659280 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://s0.2mdn.net/sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/index.html?ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1Host: a.tribalfusion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ANON_ID=aUnoeUON6Ju8ZbUxpciddGPZbVOBUU1hxbk1tqV4wa
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=100&partneruserid=ec7ad717-1f8c-4815-8c2c-86fdc6330201&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
Source: global traffic	HTTP traffic detected: GET /sync/openx/6d3426ab-1ee2-e530-fa69-2e341f77148e?gdpr=0 HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssr9-mhLE0SfG-5qH3RyP1YWYQmPZqAZD-JNFW9L9ZZB624P4aaDVY1sueg4t2dCU-JyFaiv-A2-319CZSIk0BpZ_YkvHN5TLkk2xaURijKmN_lfni-dftf-oA1ghoL7g1eVc6DrytzA0bppgpqN9xghAxNs2qRJHZJDbdTUTyvGa3I_ZW61Eed_fzUUaEj1u30mN61IGPCOu03Qk_jYH37D8yPJvLehYnNsO_qgWaRjls9fKckHaF1jve_g1OlJ9Tk5nAKA8NjqpZskV4PyOoFpejrQ2BsYts-w7qABMU7abEXUTtu2iBTVjqU7gl2yy6bL3fySGF5Jvv1b2dxNbfJsjwOjj5rlKcu88XQK00Uqh2_lGXz_sV61HYY-rUrWgiMGiLPQI2vkkVQ_QthUNyU6hjUWr0dgYj4hqEX9vb61ZtBM4ZXxxlix-owVU0mlQGKGE8w9dEzSy5WefX1fI_pZLX12va6uze7P7Ceh-6dOYf9WodT_VRegF-CPdTFkKoYghuNNhYFLPI5dDE3zoUv18dqtnBoG0Rtxbo2_rp0lhzMmjAO7uSaJgY6AikEVilto2fWQnNwTpKqsG9lGKG7Z8tD9sJwpRho6iCScHtqdrMqabOPDxqHogVxN3vvJm9EHhFkm92paYCzXKNTha_7CuCDjO5eAo73VWoKSjDdMqWqiLfx6D3_KbUY_xNgmpXFKx06flMwLgRgpT5kbQpwV_vtWY5ZPMI8IZjMtXabY7O3RxzjsWXj_HeukVqg_GRs0UYG7ijSUu-k0aPRWn2hjo3Ilse5byLn0dm2Gb7jAp6inVQP4v45voC6GkBsFlnV9dvXRBjYzE5FkgByXD0udadFXuyAUSFNbhurGc5qYaJdQv7WtpyG6ahTYNrr2tKGofX2XsOB3JfTnrHXb4AUzpm4ZHsxMHW8fS8M4EBQDxL08Zf0V-j8UBXNpkx6ZN-y6byaEq2X5LUgqpbIZKiKV7j2CJl6ozJNWvPRcaScDkXO6UcE8UjgTLZOdP3un06CRMMLjJfwB87OrN7JCKjc9y2LRkBxhl7MXFVfUcz1FxGRDQXPwh-I_aeFwxe9Bf48kibTLRRQ2Y8x6IqBKEHlOAsFHkitv8tuHBy0eDRuGEdujljKmXOXeOruWnB-o0xUgolupUe_1x_0IvN5KTVzcTX3jV8OgQpnsbFBBEcsn1X9uwZfGLXM6BehsfIlwt0omg0ONDmuVOilSGNc_UxYVHfDrF6ow3Z_zhIn2Gdd5FZzEEHqznuNuolKpMCKrJwzm_TEE1dQgaxC7qFN_3Wg8CSATlsQRYWPV3TEEamVOJd0M662X9HBNWbhnSNpBhspBqufCtgjoHKvxPIKoNCC_YhQ9vrq6ZjvPsdOceNs6zwr7EYRbjP-6dyUPz0LSyeTVOjeH0hHtD2fN6Euad56QPptnGTWh_GtlJqUYv2d2oP2oiqLFw08wCqCltY0jA&sai=AMfl-YR6H9LZFZbm2QUsLKawXiZYPJ51DChZcYNZ2CLZN1Zy7HnBUZaBh8nURMgsK5Fgf4uAUKNTIXdrUwsCbLrj6_XmR2EXiTluZUMLVdYlVN_CT10rFClCR6WiGTdhDISme3YrgiUm5XFdSp93HCvtUjvL4iJwsAU1vk_qcNGa0Aeq6Oudjlza1pNANIukObfIjEmJ-GjN6lE_kcHfdX3YvyXOmWjvjPlfFZdtuZu9MRcHBJACNcvd4ZhYoRilqs5ZhvGMmI2BdmJiH5Wm7QWTKkqDN-TnCImnpd1xBijO0NI97zpVX0imZT_HTXIYbN9iwCY1vyTxGaRAwnhcsz2LKR0fGomzH6M-PZPS3AEQ9EqMAodP4H8uZJRfOZZmaAMDOB4rmcB96FldPeLnIW2bTzHfFBVVPbyPQGzQNEQBE7wB6rItRZ_F&sig=Cg0ArKJSzDZLkNT3f9qHEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9nb2RhZGR5LmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1541&cbvp=1&cstd=1537&cisv=r20240306.62815&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlhWjE-nrLMqamcKd4HCzJGyk-lF6Y-_gdSV1_rcQ-Lc3JBzMSF3zk6wICTe0A; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel/p-EtBqU4Lj3YbAv.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=65eef17d-816a8-799a4-641fc; d=EJsBGAGsK_ijC_vLEM-7EA
Source: global traffic	HTTP traffic detected: GET /csync.ashx?fp=40dcaaf904223ef640b08777bb7ed3da08de2c0166ccb1ed6ddd6999579dd017f4cb09cee1a4f8eb&person_id=3642666937673580575&eid=50082 HTTP/1.1Host: ml314.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pi=3642666937673580575; u=aHR0cHM6Ly9zb3VyY2Vmb3JnZS5uZXQvcHJvamVjdHMvZG9jZmV0Y2hlci9wb3N0ZG93bmxvYWQ%3D; tp=7%253B03%252F11%252F2024%2B11%253A57%253A05%253B0
Source: global traffic	HTTP traffic detected: GET /csync.ashx?person_id=3642666937673580575&eid=50596&fp=ef0ee26ff141c186c8f416092ed9f16d&gdpr=&gdpr_consent= HTTP/1.1Host: ml314.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pi=3642666937673580575; u=aHR0cHM6Ly9zb3VyY2Vmb3JnZS5uZXQvcHJvamVjdHMvZG9jZmV0Y2hlci9wb3N0ZG93bmxvYWQ%3D; tp=7%253B03%252F11%252F2024%2B11%253A57%253A05%253B0
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; PugT=1710158228; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=7; pi=162538:4; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710
Source: global traffic	HTTP traffic detected: GET /ul_cb/bsw_sync?ssp=pubmatic&bsw_user_id=6ec76371-3031-4b49-abb3-349fb3d7cf23 HTTP/1.1Host: t.pswec.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=e247a636-2303-4c44-ba6f-6f53475eec38; c=1710158230; tuuid_lu=1710158230
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/img?mt_exid=15&redir=https%3A%2F%2Fdsum-sec.casalemedia.com%2Fcrum%3Fcm_dsp_id%3D3%26external_user_id%3D%5BMM_UUID%5D&us_privacy=&gdpr=&gdpr_consent= HTTP/1.1Host: sync.mathtag.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qmap?c=240&tp=PUBM&tpid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=3; _cc_id=9d77637072f92cb5f5d20c39a1b22cb5
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=176&external_user_id=di_5eeffdf13c334a9c86516 HTTP/1.1Host: dsum.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=33&partneruserid=Ze7xfMAoIeEAAAzaAIdO4AAA%264192 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
Source: global traffic	HTTP traffic detected: GET /redir/?partnerid=76&partneruserid=&gdpr=0&gdpr_consent=&google_error=15 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
Source: global traffic	HTTP traffic detected: GET /z/i.match?p=b6&u=&google_push=AXcoOmRF5W8NAr6bAj2leKfOVpf5YPzmwyGOBL4Qk8UWxtsoHp0JQQY85SL4-cQeNi9_rHcFCBXE2c5C6Ay7fe1qbbggKpd9tHB6SYPy500tMuwErDYeYvmQ-SgIpoMan23eFzYDHNVE2L_UTWrHWxf4SwM&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmRF5W8NAr6bAj2leKfOVpf5YPzmwyGOBL4Qk8UWxtsoHp0JQQY85SL4-cQeNi9_rHcFCBXE2c5C6Ay7fe1qbbggKpd9tHB6SYPy500tMuwErDYeYvmQ-SgIpoMan23eFzYDHNVE2L_UTWrHWxf4SwM%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24 HTTP/1.1Host: s.tribalfusion.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ANON_ID=aNnseFyg6AbrA7u8PVN85SDLFaYDQAYJBbDheR4Zb71OpnZdIHc20GvxWZc7CRZdwZdgkWQEdbw5fmj33XCodR7Ad
Source: global traffic	HTTP traffic detected: GET /qmap?c=1389&tp=STSC&tpid=e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3De186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553%26partner_url%3Dhttps%253A%252F%252Fr.casalemedia.com%252Frum%253Fcm_dsp_id%253D64%2526external_user_id%253De186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553%2526gdpr%253D0%2526gdpr_consent%253D HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=3; _cc_id=9d77637072f92cb5f5d20c39a1b22cb5
Source: global traffic	HTTP traffic detected: GET /?companyId=673&id=pubmatic_id:9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1Host: io.narrative.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/75145?bidder_id=195755&bidder_uuid=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=79&user_id=rQpbF21I1RJEgU5&expires=30&ssp=smartadserver&bsw_param=6ec76371-3031-4b49-abb3-349fb3d7cf23 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=6ec76371-3031-4b49-abb3-349fb3d7cf23; c=1710158227; tuuid_lu=1710158229
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072971&val=71dcd657-b7ce-4e56-9064-0f83979f8fcb&ttd_puid=f9f340ef-8e4e-7779-cbbe-38c1e020d9c7&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=2a5f7fb6-27c9-488e-9168-f0298407ea3a\|1710158208; pd=v2\|1710158229\|vMgavPkWgyiK; univ_id=537072971\|71dcd657-b7ce-4e56-9064-0f83979f8fcb\|1710158230712525
Source: global traffic	HTTP traffic detected: GET /pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=$UID HTTP/1.1Host: beacon.lynx.cognitivlabs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537148856&val=Ze7xgAAAAwa1TAAh HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=2a5f7fb6-27c9-488e-9168-f0298407ea3a\|1710158208; pd=v2\|1710158229\|vMgavPkWgyiK; univ_id=537072971\|71dcd657-b7ce-4e56-9064-0f83979f8fcb\|1710158230712525
Source: global traffic	HTTP traffic detected: GET /?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzImdGw9MTI5NjAw&piggybackCookie={viewer_token}&gdpr=0&gdpr_consent= HTTP/1.1Host: csync.loopme.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/?id=20909&user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1Host: bpi.rtactivate.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNTQmdGw9NDMyMDA%3D&piggybackCookie=p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&pi=pubmatic&gdpr=0&gdpr_consent=&tc=1 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; PugT=1710158228; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=7; pi=162538:4; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C17113248
Source: global traffic	HTTP traffic detected: GET /pub/sync?pubid=pub8730968190912 HTTP/1.1Host: t.adx.opera.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bh/rtset?pid=560288&ev=1&rurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D92%26partneruserid%3D%25%25VGUID%25%25&gdpr=0&gdpr_consent= HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: V=3ftvG5anVWUA; INGRESSCOOKIE=c74e8523d665f622; pb_rtb_ev=3-1q66\|7bs.0.1\|7dN.0.AAKPDU7L3eMAABWFZYx_mg
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=&google_error=15 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=81&gdpr=0&external_user_id=DgrDEF4OkREVB5dDWQeLQgEGx0EVCZJEXlwabpLi HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=86&partneruserid=7822940101119878936&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=76:GOOGLE_HOSTED_SI\|86:7822940101119878936\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg
Source: global traffic	HTTP traffic detected: GET /sync/casale/Ze7xfMAoIeEAAAzaAIdO4AAAEGAAAAAB HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=18&expiration=1726055830&external_user_id=8fb517aa-a8d0-437d-988f-7084f5819e19 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
Source: global traffic	HTTP traffic detected: GET /match?gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&referrer_pid=r8hrb20&google_error=15 HTTP/1.1Host: ps.eyeota.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=18e2d5f5e6f-1cc10000010a4999; SERVERID=18841~DM
Source: global traffic	HTTP traffic detected: GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=a1253c92-92e4-cc83-0bb0-ba5688131227 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_mD47eJIUzEqu3DVtJD2b0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=22&partneruserid=396012428125075951&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=76:GOOGLE_HOSTED_SI\|86:7822940101119878936\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:B6512778B5DA4E7C942E6E491CF4A04A&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; PugT=1710158228; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=7; pi=162538:4; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1
Source: global traffic	HTTP traffic detected: GET /redir/?partnerid=75&issi=1&partneruserid=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=76:GOOGLE_HOSTED_SI\|86:7822940101119878936\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg
Source: global traffic	HTTP traffic detected: GET /s/dcm?pid=f7a5db36-1d5c-4c26-81b6-b4d0807faffb&id=1899505890594565248&gdpr=0&gdpr_consent= HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_mD47eJIUzEqu3DVtJD2b0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=66&partneruserid=0a42220400c08ec15f936285&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=66:0a42220400c08ec15f936285\|91:9A176ADB-73F4-4BD8-A648-23F2443493B5\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=41&external_user_id=70a98560-df9e-11ee-9b1b-8fc11e983897 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
Source: global traffic	HTTP traffic detected: GET /cookie/?ssp=5&gdpr=0&gdpr_consent= HTTP/1.1Host: dsp.adfarm1.adition.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /396846.gif?served_by=evergreen&partner_uid=ac353f89-4309-4119-94c7-b832d9bbb81f HTTP/1.1Host: idsync.rlcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pxrc=CJPju68GEgUI6EcQABIFCNtOEAI=; rlas3=OObdWnbiCN9aOOm42RcYUFYmzAEAL4KXC73Hrxo9kEM=
Source: global traffic	HTTP traffic detected: GET /csync.ashx?person_id=3642666937673580575&eid=50596&fp=ef0ee26ff141c186c8f416092ed9f16d&gdpr=&gdpr_consent= HTTP/1.1Host: ml314.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pi=3642666937673580575; u=aHR0cHM6Ly9zb3VyY2Vmb3JnZS5uZXQvcHJvamVjdHMvZG9jZmV0Y2hlci9wb3N0ZG93bmxvYWQ%3D; tp=7%253B03%252F11%252F2024%2B11%253A57%253A05%253B0
Source: global traffic	HTTP traffic detected: GET /?io.narrative.guid.v2=7eb19c60-df9e-11ee-88ca-0ab6e37f1c27&companyId=673&id=pubmatic_id:9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1Host: io.narrative.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: io.narrative.guid.v2=7eb19c60-df9e-11ee-88ca-0ab6e37f1c27
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1Host: image8.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=7; pi=162538:4; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_22
Source: global traffic	HTTP traffic detected: GET /redir/?partnerid=80&gdpr=0&partneruserid=VbPHRgW3lUdOvpMVAr6PFFq_wxdOsJYSBeXINTmx HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=3&external_user_id=3e9d65ee-f197-4b00-b33c-8e23896e09ac&gdpr=&gdpr_consent= HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=33&partneruserid=Ze7xfMAoIeEAAAzaAIdO4AAA%264192 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
Source: global traffic	HTTP traffic detected: GET /sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/images/CTA.png?1708393659275 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/index.html?ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/75145?bidder_id=195755&bidder_uuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&_li_chk=true&previous_uuid=0d1e68fad7fe46a8ba8fe840f06a5d57 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=0d1e68fa-d7fe-46a8-ba8f-e840f06a5d57
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssr9-mhLE0SfG-5qH3RyP1YWYQmPZqAZD-JNFW9L9ZZB624P4aaDVY1sueg4t2dCU-JyFaiv-A2-319CZSIk0BpZ_YkvHN5TLkk2xaURijKmN_lfni-dftf-oA1ghoL7g1eVc6DrytzA0bppgpqN9xghAxNs2qRJHZJDbdTUTyvGa3I_ZW61Eed_fzUUaEj1u30mN61IGPCOu03Qk_jYH37D8yPJvLehYnNsO_qgWaRjls9fKckHaF1jve_g1OlJ9Tk5nAKA8NjqpZskV4PyOoFpejrQ2BsYts-w7qABMU7abEXUTtu2iBTVjqU7gl2yy6bL3fySGF5Jvv1b2dxNbfJsjwOjj5rlKcu88XQK00Uqh2_lGXz_sV61HYY-rUrWgiMGiLPQI2vkkVQ_QthUNyU6hjUWr0dgYj4hqEX9vb61ZtBM4ZXxxlix-owVU0mlQGKGE8w9dEzSy5WefX1fI_pZLX12va6uze7P7Ceh-6dOYf9WodT_VRegF-CPdTFkKoYghuNNhYFLPI5dDE3zoUv18dqtnBoG0Rtxbo2_rp0lhzMmjAO7uSaJgY6AikEVilto2fWQnNwTpKqsG9lGKG7Z8tD9sJwpRho6iCScHtqdrMqabOPDxqHogVxN3vvJm9EHhFkm92paYCzXKNTha_7CuCDjO5eAo73VWoKSjDdMqWqiLfx6D3_KbUY_xNgmpXFKx06flMwLgRgpT5kbQpwV_vtWY5ZPMI8IZjMtXabY7O3RxzjsWXj_HeukVqg_GRs0UYG7ijSUu-k0aPRWn2hjo3Ilse5byLn0dm2Gb7jAp6inVQP4v45voC6GkBsFlnV9dvXRBjYzE5FkgByXD0udadFXuyAUSFNbhurGc5qYaJdQv7WtpyG6ahTYNrr2tKGofX2XsOB3JfTnrHXb4AUzpm4ZHsxMHW8fS8M4EBQDxL08Zf0V-j8UBXNpkx6ZN-y6byaEq2X5LUgqpbIZKiKV7j2CJl6ozJNWvPRcaScDkXO6UcE8UjgTLZOdP3un06CRMMLjJfwB87OrN7JCKjc9y2LRkBxhl7MXFVfUcz1FxGRDQXPwh-I_aeFwxe9Bf48kibTLRRQ2Y8x6IqBKEHlOAsFHkitv8tuHBy0eDRuGEdujljKmXOXeOruWnB-o0xUgolupUe_1x_0IvN5KTVzcTX3jV8OgQpnsbFBBEcsn1X9uwZfGLXM6BehsfIlwt0omg0ONDmuVOilSGNc_UxYVHfDrF6ow3Z_zhIn2Gdd5FZzEEHqznuNuolKpMCKrJwzm_TEE1dQgaxC7qFN_3Wg8CSATlsQRYWPV3TEEamVOJd0M662X9HBNWbhnSNpBhspBqufCtgjoHKvxPIKoNCC_YhQ9vrq6ZjvPsdOceNs6zwr7EYRbjP-6dyUPz0LSyeTVOjeH0hHtD2fN6Euad56QPptnGTWh_GtlJqUYv2d2oP2oiqLFw08wCqCltY0jA&sai=AMfl-YR6H9LZFZbm2QUsLKawXiZYPJ51DChZcYNZ2CLZN1Zy7HnBUZaBh8nURMgsK5Fgf4uAUKNTIXdrUwsCbLrj6_XmR2EXiTluZUMLVdYlVN_CT10rFClCR6WiGTdhDISme3YrgiUm5XFdSp93HCvtUjvL4iJwsAU1vk_qcNGa0Aeq6Oudjlza1pNANIukObfIjEmJ-GjN6lE_kcHfdX3YvyXOmWjvjPlfFZdtuZu9MRcHBJACNcvd4ZhYoRilqs5ZhvGMmI2BdmJiH5Wm7QWTKkqDN-TnCImnpd1xBijO0NI97zpVX0imZT_HTXIYbN9iwCY1vyTxGaRAwnhcsz2LKR0fGomzH6M-PZPS3AEQ9EqMAodP4H8uZJRfOZZmaAMDOB4rmcB96FldPeLnIW2bTzHfFBVVPbyPQGzQNEQBE7wB6rItRZ_F&sig=Cg0ArKJSzDZLkNT3f9qHEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9nb2RhZGR5LmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=4473&vt=11&dtpt=2932&dett=3&cstd=1537&cisv=r20240306.62815&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: event-source;triggerReferer: https://2e364cc7caa3f2e10b0fb666ab9496ef.s
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=7271851492747088692 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=7; pi=162538:4; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1
Source: global traffic	HTTP traffic detected: GET /qmap?c=240&tp=PUBM&tpid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=3; _cc_id=9d77637072f92cb5f5d20c39a1b22cb5
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=176&external_user_id=di_5eeffdf13c334a9c86516 HTTP/1.1Host: dsum.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
Source: global traffic	HTTP traffic detected: GET /redir/?partnerid=76&partneruserid=&gdpr=0&gdpr_consent=&google_error=15 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=30&p=273&cp=smartortb&cu=1&url=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D79%26partneruserid%3D%40%40CRITEO_USERID%40%40&gdpr=0&gdpr_consent= HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=6255abe4-6520-429f-aa2c-493e15bdee11&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID} HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=7; pi=162538:4; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; Sync
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=&google_error=15 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
Source: global traffic	HTTP traffic detected: GET /redir/?partnerid=31&partneruserid=6ec76371-3031-4b49-abb3-349fb3d7cf23&gdpr=&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=18&expiration=1726055830&external_user_id=8fb517aa-a8d0-437d-988f-7084f5819e19 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
Source: global traffic	HTTP traffic detected: GET /idsync/ex/push?partner_id=2499&partner_device_id=e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&partner_url=https%3A%2F%2Fr.casalemedia.com%2Frum%3Fcm_dsp_id%3D64%26external_user_id%3De186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1710158204884; TapAd_DID=3d92896e-6439-4f25-b0dc-753e207e1323; TapAd_3WAY_SYNCS=1!1715
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=7; pi=162538:4; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_220_250_234_3_13_56_240_55_231_71_264_254_165_48_7_54_5_104_249_46_176%7C1711411200%3A35; SPugT=1710158228
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=327905091701696804 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=7; pi=162538:4; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C17
Source: global traffic	HTTP traffic detected: GET /sync/casale/Ze7xfMAoIeEAAAzaAIdO4AAAEGAAAAAB HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPUc21b156e4d4f4c8381b77a05c19b0a40 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=7; pi=162538:4; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=1724005921034811649 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=7; pi=162538:4; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_220_250_234_3_13_56_240_55_231_71_264_254_165_48_7_54_5_
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=2&user_id=e247a636-2303-4c44-ba6f-6f53475eec38&expires=3&user_group=1&ssp=pubmatic HTTP/1.1Host: x.bidswitch.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=6ec76371-3031-4b49-abb3-349fb3d7cf23; c=1710158227; tuuid_lu=1710158229
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=92&partneruserid=3ftvG5anVWUA&ev=1&pid=560288&gdpr_consent=&gdpr=0 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=22&partneruserid=396012428125075951&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=22:396012428125075951\|76:GOOGLE_HOSTED_SI\|86:7822940101119878936\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg
Source: global traffic	HTTP traffic detected: GET /redir/?partnerid=75&issi=1&partneruserid=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=75:71dcd657-b7ce-4e56-9064-0f83979f8fcb\|76:GOOGLE_HOSTED_SI\|86:7822940101119878936\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg
Source: global traffic	HTTP traffic detected: GET /tag/?id=20909&user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1Host: bpi.rtactivate.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redir/?partnerid=49&partneruserid=7345073677437040781&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=75:71dcd657-b7ce-4e56-9064-0f83979f8fcb\|76:GOOGLE_HOSTED_SI\|86:7822940101119878936\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg
Source: global traffic	HTTP traffic detected: GET /i/102/9.gif?gdpr=0&gdpr_consent= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?gdpr=0&p=156557&pr=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DuFFr5RFBYgoUJbWMAWGEZKS3%26source_user_id%3D9A176ADB-73F4-4BD8-A648-23F2443493B5&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1Host: image4.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_220_250_234_3_13_56_240_55_231_71_264_254_165_48_7_54_5_104_249_46_176%7C1711411200%3A35; SPugT=1710158228; KRTBCOOKIE_2
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1Host: image8.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=7; pi=162538:4; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_22
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=3&external_user_id=3e9d65ee-f197-4b00-b33c-8e23896e09ac&gdpr=&gdpr_consent= HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
Source: global traffic	HTTP traffic detected: GET /sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/images/f1_img1_300x250.png?1708393659275 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/index.html?ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssr9-mhLE0SfG-5qH3RyP1YWYQmPZqAZD-JNFW9L9ZZB624P4aaDVY1sueg4t2dCU-JyFaiv-A2-319CZSIk0BpZ_YkvHN5TLkk2xaURijKmN_lfni-dftf-oA1ghoL7g1eVc6DrytzA0bppgpqN9xghAxNs2qRJHZJDbdTUTyvGa3I_ZW61Eed_fzUUaEj1u30mN61IGPCOu03Qk_jYH37D8yPJvLehYnNsO_qgWaRjls9fKckHaF1jve_g1OlJ9Tk5nAKA8NjqpZskV4PyOoFpejrQ2BsYts-w7qABMU7abEXUTtu2iBTVjqU7gl2yy6bL3fySGF5Jvv1b2dxNbfJsjwOjj5rlKcu88XQK00Uqh2_lGXz_sV61HYY-rUrWgiMGiLPQI2vkkVQ_QthUNyU6hjUWr0dgYj4hqEX9vb61ZtBM4ZXxxlix-owVU0mlQGKGE8w9dEzSy5WefX1fI_pZLX12va6uze7P7Ceh-6dOYf9WodT_VRegF-CPdTFkKoYghuNNhYFLPI5dDE3zoUv18dqtnBoG0Rtxbo2_rp0lhzMmjAO7uSaJgY6AikEVilto2fWQnNwTpKqsG9lGKG7Z8tD9sJwpRho6iCScHtqdrMqabOPDxqHogVxN3vvJm9EHhFkm92paYCzXKNTha_7CuCDjO5eAo73VWoKSjDdMqWqiLfx6D3_KbUY_xNgmpXFKx06flMwLgRgpT5kbQpwV_vtWY5ZPMI8IZjMtXabY7O3RxzjsWXj_HeukVqg_GRs0UYG7ijSUu-k0aPRWn2hjo3Ilse5byLn0dm2Gb7jAp6inVQP4v45voC6GkBsFlnV9dvXRBjYzE5FkgByXD0udadFXuyAUSFNbhurGc5qYaJdQv7WtpyG6ahTYNrr2tKGofX2XsOB3JfTnrHXb4AUzpm4ZHsxMHW8fS8M4EBQDxL08Zf0V-j8UBXNpkx6ZN-y6byaEq2X5LUgqpbIZKiKV7j2CJl6ozJNWvPRcaScDkXO6UcE8UjgTLZOdP3un06CRMMLjJfwB87OrN7JCKjc9y2LRkBxhl7MXFVfUcz1FxGRDQXPwh-I_aeFwxe9Bf48kibTLRRQ2Y8x6IqBKEHlOAsFHkitv8tuHBy0eDRuGEdujljKmXOXeOruWnB-o0xUgolupUe_1x_0IvN5KTVzcTX3jV8OgQpnsbFBBEcsn1X9uwZfGLXM6BehsfIlwt0omg0ONDmuVOilSGNc_UxYVHfDrF6ow3Z_zhIn2Gdd5FZzEEHqznuNuolKpMCKrJwzm_TEE1dQgaxC7qFN_3Wg8CSATlsQRYWPV3TEEamVOJd0M662X9HBNWbhnSNpBhspBqufCtgjoHKvxPIKoNCC_YhQ9vrq6ZjvPsdOceNs6zwr7EYRbjP-6dyUPz0LSyeTVOjeH0hHtD2fN6Euad56QPptnGTWh_GtlJqUYv2d2oP2oiqLFw08wCqCltY0jA&sai=AMfl-YR6H9LZFZbm2QUsLKawXiZYPJ51DChZcYNZ2CLZN1Zy7HnBUZaBh8nURMgsK5Fgf4uAUKNTIXdrUwsCbLrj6_XmR2EXiTluZUMLVdYlVN_CT10rFClCR6WiGTdhDISme3YrgiUm5XFdSp93HCvtUjvL4iJwsAU1vk_qcNGa0Aeq6Oudjlza1pNANIukObfIjEmJ-GjN6lE_kcHfdX3YvyXOmWjvjPlfFZdtuZu9MRcHBJACNcvd4ZhYoRilqs5ZhvGMmI2BdmJiH5Wm7QWTKkqDN-TnCImnpd1xBijO0NI97zpVX0imZT_HTXIYbN9iwCY1vyTxGaRAwnhcsz2LKR0fGomzH6M-PZPS3AEQ9EqMAodP4H8uZJRfOZZmaAMDOB4rmcB96FldPeLnIW2bTzHfFBVVPbyPQGzQNEQBE7wB6rItRZ_F&sig=Cg0ArKJSzDZLkNT3f9qHEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9nb2RhZGR5LmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=4473&vt=11&dtpt=2932&dett=3&cstd=1537&cisv=r20240306.62815&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlhWjE-nrLMqamcKd4HCzJGyk-lF6Y-_gdSV1_rcQ-Lc3JBzMSF3zk6wICTe0A; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /redir/?partnerid=80&gdpr=0&partneruserid=VbPHRgW3lUdOvpMVAr6PFFq_wxdOsJYSBeXINTmx HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=80:VbPHRgW3lUdOvpMVAr6PFFq_wxdOsJYSBeXINTmx\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
Source: global traffic	HTTP traffic detected: GET /usersync2/smartadserver?gdpr=0&gdpr_consent= HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pbmtc.gif?puid=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1Host: beacon.lynx.cognitivlabs.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?gdpr=0&p=156557&pr=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DuFFr5RFBYgoUJbWMAWGEZKS3%26source_user_id%3D9A176ADB-73F4-4BD8-A648-23F2443493B5&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1Host: image4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_220_250_234_3_13_56_240_55_231_71_264_254_165_48_7_54_5_104_249_46_176%7C1711411200%3A35; SPugT=1710158228; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcj
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=6ec76371-3031-4b49-abb3-349fb3d7cf23&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_220_250_234_3_13_56_240_55_231_71_264_254_165_48_7_54_5_104_249_46_176%7C1711411200%3A35; SPugT=1710158228; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f
Source: global traffic	HTTP traffic detected: GET /s/dcm?pid=f7a5db36-1d5c-4c26-81b6-b4d0807faffb&id=1899505890594565248&gdpr=0&gdpr_consent= HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A_mD47eJIUzEqu3DVtJD2b0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=79&partneruserid=fb6bf7e8-4454-41c2-9d45-dd203ebb7093&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
Source: global traffic	HTTP traffic detected: GET /sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/images/CTA.png?1708393659275 HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent= HTTP/1.1Host: image8.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_220_250_234_3_13_56_240_55_231_71_264_254_165_48_7_54_5_104_249_46_176%7C1711411200%3A35; SPugT=1710158228; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlk
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1Host: image8.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_220_250_234_3_13_56_240_55_231_71_264_254_165_48_7_54_5_104_249_46_176%7C1711411200%3A35; SPugT=1710158228; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsPwnaxxE
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_220_250_234_3_13_56_240_55_231_71_264_254_165_48_7_54_5_104_249_46_176%7C1711411200%3A35; SPugT=1710158228; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23234-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23361-p-Pap5
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=64&external_user_id=e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&gdpr=0&gdpr_consent= HTTP/1.1Host: r.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
Source: global traffic	HTTP traffic detected: GET /?redirect=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D124%26partneruserid%3D%7Bdevice_id%7D&pubid=5679&gdpr=0&gdpr_consent= HTTP/1.1Host: csync.loopme.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=liveintent&user_id=0d1e68fa-d7fe-46a8-ba8f-e840f06a5d57 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=6ec76371-3031-4b49-abb3-349fb3d7cf23; c=1710158227; tuuid_lu=1710158229
Source: global traffic	HTTP traffic detected: GET /redir/?partnerid=31&partneruserid=6ec76371-3031-4b49-abb3-349fb3d7cf23&gdpr=&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=94&partneruserid=Ze7xgAAAAwa1TAAh&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=92&partneruserid=3ftvG5anVWUA&ev=1&pid=560288&gdpr_consent=&gdpr=0 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|92:3ftvG5anVWUA\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
Source: global traffic	HTTP traffic detected: GET /c/?adExInit=sas&redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D133%26partneruserid%3D$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: s.ad.smaato.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=162538&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: simage4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_220_250_234_3_13_56_240_55_231_71_264_254_165_48_7_54_5_104_249_46_176%7C1711411200%3A35; SPugT=1710158228; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23234-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23361-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk; pi=156557:3; chkChromeAb67
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1Host: match.sharethrough.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1Host: image8.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_220_250_234_3_13_56_240_55_231_71_264_254_165_48_7_54_5_104_249_46_176%7C1711411200%3A35; SPugT=1710158228; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsP
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?gdpr=0&p=156557&pr=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DuFFr5RFBYgoUJbWMAWGEZKS3%26source_user_id%3D9A176ADB-73F4-4BD8-A648-23F2443493B5&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1Host: image4.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_220_250_234_3_13_56_240_55_231_71_264_254_165_48_7_54_5_104_249_46_176%7C1711411200%3A35; KRTBCOOKIE_27=16735-uid:3de265
Source: global traffic	HTTP traffic detected: GET /e09bad714a425a93d6dea503dcf9c528.gif?redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D130%26partneruserid%3D%5BUID%5D%26gdpr%3D%5BGDPR%5D%26gdpr_consent%3D%5BGDPR_CONSENT%5D&gdpr=0&gdpr_consent= HTTP/1.1Host: cs.admanmedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=139&partneruserid=0&redirurl=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3D98KUz37ype9D3X2sf9ovgeTt%26source_user_id%3DSMART_USER_ID&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=49:7345073677437040781\|75:71dcd657-b7ce-4e56-9064-0f83979f8fcb\|76:GOOGLE_HOSTED_SI\|86:7822940101119878936\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg
Source: global traffic	HTTP traffic detected: GET /redir/?partnerid=49&partneruserid=7345073677437040781&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=49:7345073677437040781\|75:71dcd657-b7ce-4e56-9064-0f83979f8fcb\|76:GOOGLE_HOSTED_SI\|86:7822940101119878936\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg
Source: global traffic	HTTP traffic detected: GET /cookie-sync/stv?gdpr=0&gdpr_consent= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAKPDU7L3eMAABWFZYx_mg; bitoIsSecure=ok; checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
Source: global traffic	HTTP traffic detected: GET /sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/images/f1_img2_300x250.png?1708393659275 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/index.html?ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/images/f1_img1_300x250.png?1708393659275 HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync2/smartadserver?zcc=1&cb=1710158233278 HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005%22%2C%22zdxidn%22%3A%222075%22%7D
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=79&partneruserid=fb6bf7e8-4454-41c2-9d45-dd203ebb7093&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|79:fb6bf7e8-4454-41c2-9d45-dd203ebb7093\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1Host: match.sharethrough.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=64&external_user_id=e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&gdpr=0&gdpr_consent= HTTP/1.1Host: r.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
Source: global traffic	HTTP traffic detected: GET /c/102/0/9/1.gif?gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=da35dfea-1127-79f5-8b21-8d4166047880#1710158233639#1
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=150&partneruserid=0&redirurl=https%3A%2F%2Fwt.rqtrk.eu%3Fpid%3D58a76248-f101-4e52-b8f7-c4de9362ea12%26src%3Dwww%26type%3D100%26sid%3D0%26uid%3DSMART_USER_ID%26gdpr_pd%3D0&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=94&partneruserid=Ze7xgAAAAwa1TAAh&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=133&partneruserid=27fa38a615 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|92:3ftvG5anVWUA\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
Source: global traffic	HTTP traffic detected: GET /universal/v1?supply_id=v5hJK9Sl&gdpr=0&gdpr_consent= HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=130&partneruserid=bb7cbab5-f73e-439c-a427-5018e7e027e6&gdpr=0&gdpr_consent=[GDPR_CONSENT] HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|92:3ftvG5anVWUA\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
Source: global traffic	HTTP traffic detected: GET /CookieSyncPubMatic&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb.adentifi.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /CookieSyncPubMatic&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb.adentifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=98KUz37ype9D3X2sf9ovgeTt&source_user_id=1899505890594565248&gdpr=0&gdpr_consent= HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1Host: match.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
Source: global traffic	HTTP traffic detected: GET /sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/images/f1_img2_300x250.png?1708393659275 HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/images/f2_logo_300x250.png?1708393659275 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/index.html?ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=70&user_id=1724005921034811649&ssp=liveintent HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=6ec76371-3031-4b49-abb3-349fb3d7cf23; c=1710158227; tuuid_lu=1710158229
Source: global traffic	HTTP traffic detected: GET /get?p=M501991648&r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D141%26partneruserid%3D$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: a.audrte.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /CookieSyncPubMatic&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb.adentifi.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/eqx?sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D152%26partneruserid%3DPARTNER_USER_ID&gdpr=0&gdpr_consent= HTTP/1.1Host: s.company-target.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=8fb517aa-a8d0-437d-988f-7084f5819e19; tuuid_lu=1710158230\|ix:0
Source: global traffic	HTTP traffic detected: GET /redir/?partnerid=147&partneruserid=b6baf5b6-3516-4c46-a708-53e0ec193a37&gdpr=0 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=98KUz37ype9D3X2sf9ovgeTt&source_user_id=1899505890594565248&gdpr=0&gdpr_consent= HTTP/1.1Host: match.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=133&partneruserid=27fa38a615 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|92:3ftvG5anVWUA\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|133:27fa38a615\|134:OB_OK
Source: global traffic	HTTP traffic detected: GET /redir/?issi=1&partnerid=130&partneruserid=bb7cbab5-f73e-439c-a427-5018e7e027e6&gdpr=0&gdpr_consent=[GDPR_CONSENT] HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|92:3ftvG5anVWUA\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|130:bb7cbab5-f73e-439c-a427-5018e7e027e6\|134:OB_OK
Source: global traffic	HTTP traffic detected: GET /redir/?partnerid=111&partneruserid=ID5-a710HdK4FhLRsadVx_Vfn3AaQuf2TaKe92gbJM_sOA&redirurl=https%3A%2F%2Fid5-sync.com%2Fc%2F102%2F102%2F8%2F2.gif%3Fpuid%3DSMART_USER_ID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|92:3ftvG5anVWUA\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|130:bb7cbab5-f73e-439c-a427-5018e7e027e6\|134:OB_OK
Source: global traffic	HTTP traffic detected: GET /?pid=58a76248-f101-4e52-b8f7-c4de9362ea12&src=www&type=100&sid=0&uid=1899505890594565248&gdpr_pd=0&gdpr=0&gdpr_consent= HTTP/1.1Host: wt.rqtrk.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/stickyads/1741b0c9991c7bb5fabee245b6778a40?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo
Source: global traffic	HTTP traffic detected: GET /sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/images/f2_logo_300x250.png?1708393659275 HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/52164?bidder_id=5298&licd=&bidder_uuid=6ec76371-3031-4b49-abb3-349fb3d7cf23 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CgcKBQgMEL8X; lidid=0d1e68fa-d7fe-46a8-ba8f-e840f06a5d57
Source: global traffic	HTTP traffic detected: GET /usersync/turn/2407834391265652961?dspret=1&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005%22%2C%22zdxidn%22%3A%222075%22%2C%22nxtrdr%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /CookieSyncPubMatic&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb.adentifi.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redir/?gdpr=0&gdpr_consent=&issi=1&partnerid=152&partneruserid=8fb517aa-a8d0-437d-988f-7084f5819e19 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://csync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|92:3ftvG5anVWUA\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|130:bb7cbab5-f73e-439c-a427-5018e7e027e6\|134:OB_OK
Source: global traffic	HTTP traffic detected: GET /redir/?partnerid=147&partneruserid=b6baf5b6-3516-4c46-a708-53e0ec193a37&gdpr=0 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37

Source: unknown

DNS traffic detected: queries for: sourceforge.net

Source: unknown

HTTP traffic detected: POST /prebid/v1 HTTP/1.1Host: prg.smartadserver.comConnection: keep-aliveContent-Length: 362sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: */*Origin: https://sourceforge.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sourceforge.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 11 Mar 2024 11:56:39 GMTContent-Length: 0Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 11 Mar 2024 11:56:40 GMTContent-Length: 0Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 11 Mar 2024 11:56:41 GMTContent-Length: 0Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 11 Mar 2024 11:56:42 GMTContent-Length: 0Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: Microsoft-Azure-Application-Gateway/v2Date: Mon, 11 Mar 2024 11:56:45 GMTContent-Type: text/htmlContent-Length: 581Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 11 Mar 2024 11:57:03 GMTContent-Length: 0Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 11 Mar 2024 11:57:03 GMTContent-Length: 0Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 11 Mar 2024 11:57:04 GMTContent-Length: 0Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 11 Mar 2024 11:57:05 GMTContent-Length: 0Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 11 Mar 2024 11:57:05 GMTContent-Length: 0Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 11 Mar 2024 11:57:06 GMTContent-Length: 0Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 11 Mar 2024 11:57:20 GMTContent-Length: 0Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 11 Mar 2024 11:57:21 GMTContent-Length: 0Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 11 Mar 2024 11:57:22 GMTContent-Length: 0Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 11 Mar 2024 11:57:23 GMTContent-Length: 0Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 11 Mar 2024 11:57:23 GMTContent-Length: 0Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 11 Mar 2024 11:57:24 GMTContent-Length: 0Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 11 Mar 2024 11:57:31 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Mon, 11 Mar 2024 11:57:46 GMTStrict-Transport-Security: max-age=2592000; includeSubDomains; preloadX-Content-Type-Options: nosniffServer: cloudflareCF-RAY: 862b5e12ac130ad3-LAS
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 11 Mar 2024 11:57:56 GMTContent-Length: 0Connection: close

Source: javaw.exe, 00000010.00000002.2382654249.000000001A41D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://bugreport.sun.com/bugreport/
Source: javaw.exe, 00000010.00000002.2420672413.0000000047E50000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://commons.apache.org/compress/
Source: javaw.exe, 00000010.00000002.2420672413.0000000047E61000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://commons.apache.org/io/
Source: javaw.exe, 00000010.00000002.2382654249.000000001A5C9000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2420672413.0000000047E40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://commons.apache.org/proper/commons-codec/
Source: javaw.exe, 00000010.00000002.2420672413.0000000047E50000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://commons.apache.org/proper/commons-collections/
Source: javaw.exe, 00000010.00000002.2420672413.0000000047E6B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://commons.apache.org/proper/commons-logging/
Source: docfetcher_1.1.25_win32_setup.exe, 0000000D.00000002.1599715572.0000000000439000.00000004.00000001.01000000.00000006.sdmp	String found in binary or memory: http://docfetcher.sourceforge.net
Source: javaw.exe, 00000010.00000003.1816919851.000000004927C000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2436273801.0000000048FE8000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1654854384.0000000049264000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1761653346.000000004927C000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2436273801.000000004927C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://docfetcher.sourceforge.net/wiki/doku.php
Source: javaw.exe, 00000010.00000002.2436273801.0000000048FE8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://docfetcher.sourceforge.net/wiki/doku.php)
Source: javaw.exe, 00000010.00000002.2424031740.00000000480C5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://docfetcher.sourceforge.net/wiki/doku.php?id=faq#where_does_docfetcher_put_its_index_files_how
Source: javaw.exe, 00000010.00000002.2424031740.00000000480C5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://docs.oracle.com/javase/7/docs/technotes/guides/intl/encoding.doc.html
Source: javaw.exe, 00000010.00000003.1636768163.000000004C2C5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://en.wikip
Source: javaw.exe, 00000010.00000002.2436273801.0000000048F54000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://hdf.ncsa.uiuc.edu/
Source: javaw.exe, 00000010.00000002.2382654249.000000001A423000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://java.oracle.com/
Source: docfetcher_1.1.25_win32_setup.exe, 0000000D.00000002.1599823687.0000000000458000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://javadl.oracle.com/webapps/download/AutoDL?BundleId=216432
Source: javaw.exe, 00000010.00000002.2372816529.00000000052CF000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2420672413.0000000047EDE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://javolution.org
Source: javaw.exe, 00000010.00000002.2372816529.00000000052CF000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2420672413.0000000047EDE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://javolution.org/LICENSE.txt
Source: javaw.exe, 00000010.00000002.2436273801.0000000048F54000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lists.gnupg.org/pipermail/gnupg-devel/1999-September/016052.html
Source: javaw.exe, 00000010.00000002.2420672413.0000000047F21000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://logging.apache.org/log4j/1.2
Source: docfetcher_1.1.25_win32_setup.exe, 0000000D.00000003.1579269959.00000000004D5000.00000004.00000020.00020000.00000000.sdmp, docfetcher_1.1.25_win32_setup.exe, 0000000D.00000000.1503044316.000000000040A000.00000008.00000001.01000000.00000006.sdmp, docfetcher_1.1.25_win32_setup.exe, 0000000D.00000002.1599715572.000000000040A000.00000004.00000001.01000000.00000006.sdmp	String found in binary or memory: http://nsis.sf.net/NSIS_Error
Source: docfetcher_1.1.25_win32_setup.exe, 0000000D.00000003.1579269959.00000000004D5000.00000004.00000020.00020000.00000000.sdmp, docfetcher_1.1.25_win32_setup.exe, 0000000D.00000000.1503044316.000000000040A000.00000008.00000001.01000000.00000006.sdmp, docfetcher_1.1.25_win32_setup.exe, 0000000D.00000002.1599715572.000000000040A000.00000004.00000001.01000000.00000006.sdmp	String found in binary or memory: http://nsis.sf.net/NSIS_ErrorError
Source: javaw.exe, 00000010.00000002.2420672413.0000000047E7F000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2382654249.000000001A6F5000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2424031740.00000000480C5000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1658755110.0000000047FD7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pdfbox.apache.org
Source: javaw.exe, 00000010.00000003.1654854384.0000000049264000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2436273801.000000004927C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sourceforge.net/projects/
Source: javaw.exe, 00000010.00000002.2436273801.0000000049264000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1654854384.0000000049264000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1761653346.000000004926F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sourceforge.net/projects/docfetcher/
Source: javaw.exe, 00000010.00000002.2436273801.0000000049219000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1816919851.000000004927C000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1761653346.000000004918D000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1654854384.0000000049264000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1761653346.000000004927C000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1654854384.0000000049219000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2436273801.000000004927C000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1761653346.0000000049219000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1654854384.0000000049187000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sourceforge.net/projects/docfetcher/forums/forum/702424
Source: javaw.exe, 00000010.00000002.2436273801.0000000049219000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1654854384.0000000049219000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1761653346.0000000049219000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sourceforge.net/projects/docfetcher/forums/forum/7024243
Source: javaw.exe, 00000010.00000003.1654854384.0000000049264000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2382654249.000000001A48C000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1761653346.000000004926F000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1761653346.000000004927C000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2424031740.00000000480C5000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2436273801.000000004927C000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1609586607.000000004813B000.00000004.00000020.00020000.00000000.sdmp, Resource_pt.properties.13.dr	String found in binary or memory: http://sourceforge.net/tracker/?group_id=197779&atid=962834
Source: javaw.exe, 00000010.00000003.1654854384.0000000049264000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sourceforge.net/tracker/?group_id=197779&atid=96283424etcher_Manual_files/Preferences.htmlilZ
Source: javaw.exe, 00000010.00000003.1654854384.000000004921F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sourceforge.net/tracker/?group_id=197779&atid=9628348
Source: javaw.exe, 00000010.00000002.2424031740.00000000480C5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://tukaani.org/xz/java.html
Source: javaw.exe, 00000010.00000003.1654854384.0000000049264000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1761653346.000000004927C000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2436273801.000000004927C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www-archive.mozilla.org/projects/intl/UniversalCharsetDetection.html
Source: javaw.exe, 00000010.00000003.1654854384.0000000049264000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2436273801.000000004927C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www-archive.mozilla.org/projects/intl/UniversalCharsetDetection.htmlqh
Source: javaw.exe, 00000010.00000002.2436273801.0000000048F54000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.adrift.org.uk/)
Source: javaw.exe, 00000010.00000002.2382654249.000000001A5C9000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2420672413.0000000047E50000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2382654249.000000001A350000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2420672413.0000000047E61000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2420672413.0000000047F21000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2382654249.000000001A6B9000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2420672413.0000000047F8C000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2420672413.0000000047E40000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2420672413.0000000047E6B000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2420672413.0000000047EA5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.txt
Source: javaw.exe, 00000010.00000002.2436273801.0000000048F54000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.djvuzone.org/
Source: javaw.exe, 00000010.00000002.2436273801.0000000048F54000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.inform-fiction.org/
Source: javaw.exe, 00000010.00000002.2436273801.0000000048F54000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.libpng.org/pub/mng/spec/
Source: javaw.exe, 00000010.00000002.2436273801.0000000048F54000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.lua.org/
Source: javaw.exe, 00000010.00000002.2436273801.0000000048F54000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.macromedia.com/software/flash/open/
Source: javaw.exe, 00000010.00000002.2382654249.000000001A6B9000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2420672413.0000000047F8C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.medsea.eu
Source: javaw.exe, 00000010.00000002.2382654249.000000001A6B9000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2420672413.0000000047F8C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.medsea.eu/mime-util/
Source: javaw.exe, 00000010.00000002.2420672413.0000000047EF2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.melloware.com
Source: javaw.exe, 00000010.00000002.2436273801.0000000048F54000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.namazu.org/
Source: javaw.exe, 00000010.00000002.2382654249.000000001A68A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.slf4j.org/codes.html
Source: javaw.exe, 00000010.00000002.2436273801.0000000048EE0000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1654212949.0000000048356000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2424031740.0000000048410000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1815567015.000000004840C000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2382654249.000000001A68A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.slf4j.org/codes.html#StaticLoggerBinder
Source: javaw.exe, 00000010.00000002.2436273801.0000000048EE0000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1654212949.0000000048356000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2424031740.0000000048410000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1815567015.000000004840C000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2382654249.000000001A68A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.slf4j.org/codes.html#multiple_bindings
Source: javaw.exe, 00000010.00000002.2436273801.0000000048EE0000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2382654249.000000001A68A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.slf4j.org/codes.html#null_LF
Source: javaw.exe, 00000010.00000003.1654212949.0000000048356000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1815567015.000000004840C000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2382654249.000000001A68A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.slf4j.org/codes.html#substituteLogger
Source: javaw.exe, 00000010.00000002.2382654249.000000001A68A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.slf4j.org/codes.html#unsuccessfulInit
Source: javaw.exe, 00000010.00000003.1654212949.0000000048356000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1815567015.000000004840C000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2382654249.000000001A68A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.slf4j.org/codes.html#version_mismatch
Source: javaw.exe, 00000010.00000003.1654212949.0000000048356000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1815567015.000000004840C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.slf4j.org/codes.html#version_mismatch$
Source: javaw.exe, 00000010.00000002.2436273801.0000000048EE0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.slf4j.org/codes.htmle
Source: javaw.exe, 00000010.00000002.2436273801.0000000048FE8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docfetcherpro.com/going-pro/
Source: javaw.exe, 00000010.00000002.2382654249.000000001A350000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2382654249.000000001A3F5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drewnoakes.com/code/exif/
Source: javaw.exe, 00000010.00000003.1654854384.000000004921F000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1816919851.00000000491CC000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1654854384.0000000049168000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1816919851.00000000492BC000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1654854384.00000000492B1000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2436273801.00000000492BD000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1654854384.00000000491CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_authorize.srf?client_id=00000000480728C5&scope=service::ssl.live.com:
Source: javaw.exe, 00000010.00000002.2436273801.00000000492B6000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1761653346.00000000492B6000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1654854384.00000000492B1000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1816919851.00000000492B6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_desktop.srf
Source: javaw.exe, 00000010.00000003.1654854384.00000000492B1000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2436273801.00000000491CC000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2436273801.00000000492BD000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1761653346.00000000492BC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_desktop.srf&lw=1&fl=wld2
Source: javaw.exe, 00000010.00000003.1654854384.0000000049168000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1761653346.00000000492A9000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1654854384.00000000492A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_desktop.srf?lc=1033
Source: javaw.exe, 00000010.00000003.1761653346.00000000491A1000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1654854384.0000000049168000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2436273801.000000004919A000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1816919851.00000000492BC000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1816919851.00000000491A1000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1654854384.00000000492B1000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1761653346.00000000492BC000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1654854384.0000000049187000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_logout.srf?client_id=00000000480728C5&redirect_uri=https://login.live
Source: javaw.exe, 00000010.00000002.2420672413.0000000047E7F000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2382654249.000000001A6F5000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2424031740.00000000480C5000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1658755110.0000000047FD7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.apache.org/licenses/LICENSE-2.0.txt

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50738
Source: unknown	Network traffic detected: HTTP traffic on port 50726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50731
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50745
Source: unknown	Network traffic detected: HTTP traffic on port 50853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50748
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50741
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50600 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 50738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50756
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50752
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50768
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50761
Source: unknown	Network traffic detected: HTTP traffic on port 50612 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50763
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50705
Source: unknown	Network traffic detected: HTTP traffic on port 50522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50713
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50716
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50718
Source: unknown	Network traffic detected: HTTP traffic on port 50808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 50865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 50771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50727
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50729
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 50632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 50804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 50419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 50685 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 50897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50370
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50776
Source: unknown	Network traffic detected: HTTP traffic on port 50911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50778
Source: unknown	Network traffic detected: HTTP traffic on port 50571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50774
Source: unknown	Network traffic detected: HTTP traffic on port 50697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50789
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50780
Source: unknown	Network traffic detected: HTTP traffic on port 50702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50785
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 50791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 50955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50794
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50796
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 50828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 50915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50549 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50481 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 50456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 50848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50574 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 50639 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 50836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50280
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50283
Source: unknown	Network traffic detected: HTTP traffic on port 50412 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 50964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50289
Source: unknown	Network traffic detected: HTTP traffic on port 50893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50290
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50292
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50291
Source: unknown	Network traffic detected: HTTP traffic on port 50799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50293
Source: unknown	Network traffic detected: HTTP traffic on port 50627 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50357 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50603 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50529 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50615 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50345 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50660 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50436 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 50296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50321 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50647 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50669 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 50749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50851
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50867
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50862
Source: unknown	Network traffic detected: HTTP traffic on port 50864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50543 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50878
Source: unknown	Network traffic detected: HTTP traffic on port 50416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50870
Source: unknown	Network traffic detected: HTTP traffic on port 50246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50874
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50873
Source: unknown	Network traffic detected: HTTP traffic on port 50291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 50601 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50403
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50402
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50405
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50404
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50407
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50409
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50408
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50880
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50401
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50884
Source: unknown	Network traffic detected: HTTP traffic on port 50348 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50812
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50815
Source: unknown	Network traffic detected: HTTP traffic on port 50579 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50485 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50818

Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49916 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.61.214.98:443 -> 192.168.2.16:49969 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.61.214.98:443 -> 192.168.2.16:49986 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:50674 version: TLS 1.2

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe

Code function: 16_2_6C51A669 _Java_org_eclipse_swt_internal_win32_OS_OpenClipboard@12,OpenClipboard,

16_2_6C51A669

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe

Code function: 16_2_6C515017 _Java_org_eclipse_swt_internal_win32_OS_GetClipboardData@12,GetClipboardData,

16_2_6C515017

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe

Code function: 16_2_6C51573A _Java_org_eclipse_swt_internal_win32_OS_GetKeyboardState@12,GetKeyboardState,

16_2_6C51573A

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_67546384	16_2_67546384
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_6A3BEFC8	16_2_6A3BEFC8
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_6C535CEB	16_2_6C535CEB
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_6C540DEC	16_2_6C540DEC
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_6C53FE8A	16_2_6C53FE8A
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_6C53F82D	16_2_6C53F82D
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_6C5408AC	16_2_6C5408AC
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_6C52E9A9	16_2_6C52E9A9
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_6C5423C7	16_2_6C5423C7
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_6C540393	16_2_6C540393

Source: jnotify_64bit.dll.13.dr	Static PE information: Number of sections : 18 > 10
Source: JIntellitype64.dll.13.dr	Static PE information: Number of sections : 19 > 10

Source: 6dae17d4-315e-4667-bf16-8a624e631fb2.tmp.0.dr

Static PE information: Data appended to the last section found

Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Section loaded: riched20.dll	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Section loaded: usp10.dll	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Section loaded: msls31.dll	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Program Files (x86)\DocFetcher\docfetcher-daemon-windows.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Program Files (x86)\DocFetcher\docfetcher-daemon-windows.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files (x86)\DocFetcher\docfetcher-daemon-windows.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Program Files (x86)\DocFetcher\docfetcher-daemon-windows.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files (x86)\DocFetcher\DocFetcher.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Program Files (x86)\DocFetcher\DocFetcher.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: usp10.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: dataexchange.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: msiso.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: mshtml.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: srpapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: jscript9.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: msimtf.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: d2d1.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: uiautomationcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: profext.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: thumbcache.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: msftedit.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: windows.globalization.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: bcp47mrm.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: globinputhost.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: assignedaccessruntime.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: structuredquery.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: windows.storage.search.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: samlib.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: twinapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: networkexplorer.dll	Jump to behavior
Source: C:\Windows\SysWOW64\icacls.exe	Section loaded: ntmarta.dll	Jump to behavior

Source: classification engine

Classification label: mal52.phis.evad.win@77/978@564/100

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe

Code function: 16_2_6C5124A0 _Java_org_eclipse_swt_internal_win32_OS_CoCreateInstance@28,CoCreateInstance,

16_2_6C5124A0

Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe

File created: C:\Program Files (x86)\DocFetcher

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5652:120:WilError_03
Source: C:\Program Files (x86)\DocFetcher\docfetcher-daemon-windows.exe	Mutant created: \Sessions\1\BaseNamedObjects\C:_Users_user_AppData_Roaming_DocFetcher_.indexes.txt.lock

Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe

File created: C:\Users\user\AppData\Local\Temp\nsvEB87.tmp

Jump to behavior

Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=2004,i,4405816494534265162,16023283234935556524,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=8160 --field-trial-handle=2004,i,4405816494534265162,16023283234935556524,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe "C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe"
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Process created: C:\Program Files (x86)\DocFetcher\docfetcher-daemon-windows.exe C:\Program Files (x86)\DocFetcher\docfetcher-daemon-windows.exe
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Process created: C:\Program Files (x86)\DocFetcher\DocFetcher.exe C:\Program Files (x86)\DocFetcher\DocFetcher.exe
Source: C:\Program Files (x86)\DocFetcher\DocFetcher.exe	Process created: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe "C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe" -Xmx1024m -Djava.library.path="lib" -enableassertions -Xss2m -classpath "lib;lib\ansj_lucene6_plug-5.1.2.0.jar;lib\ansj_seg-5.1.2.jar;lib\ant-1.10.3.jar;lib\bcmail-jdk15on-160.jar;lib\bcpkix-jdk15on-160.jar;lib\bcprov-jdk15on-160.jar;lib\commons-codec-1.10.jar;lib\commons-collections4-4.1.jar;lib\commons-compress-1.4.1.jar;lib\commons-io-2.4.jar;lib\commons-logging-1.2.jar;lib\curvesapi-1.04.jar;lib\fontbox-2.0.13.jar;lib\guava-12.0.jar;lib\J7zip_4.43_alpha2.jar;lib\java-libpst-0.8.1.jar;lib\java-unrar-0.3.jar;lib\javolution-5.5.1.jar;lib\jericho-html-3.4.jar;lib\jexcelapi-2.6.12.jar;lib\jintellitype-1.3.7.jar;lib\jna-3.2.7.jar;lib\jna-platform-3.2.7.jar;lib\juniversalchardet-1.0.3.jar;lib\JXGrabKey-0.3.2.jar;lib\log4j-1.2.17.jar;lib\lucene-analyzers-common-6.6.3.jar;lib\lucene-backward-codecs-6.6.3.jar;lib\lucene-core-6.6.3.jar;lib\lucene-highlighter-6.6.3.jar;lib\lucene-join-6.6.3.jar;lib\lucene-memory-6.6.3.jar;lib\lucene-queries-6.6.3.jar;lib\lucene-queryparser-6.6.3.jar;lib\metadata-extractor-2.11.0.jar;lib\mime-util-2.1.3.jar;lib\net.sourceforge.docfetcher_1.1.25_20210525-2212.jar;lib\nlp-lang-1.7.7.jar;lib\pdfbox-2.0.13.jar;lib\poi-3.17.jar;lib\poi-ooxml-3.17.jar;lib\poi-ooxml-schemas-3.17.jar;lib\poi-scratchpad-3.17.jar;lib\py4j0.10.7-py3.jar;lib\slf4j-api-1.6.1.jar;lib\slf4j-nop-1.6.1.jar;lib\truezip-driver-file-7.7.7.jar;lib\truezip-driver-tar-7.7.7.jar;lib\truezip-driver-zip-7.7.7.jar;lib\truezip-file-7.7.7.jar;lib\truezip-kernel-7.7.7.jar;lib\truezip-swing-7.7.7.jar;lib\xmlbeans-2.6.0.jar;lib\xmpbox-2.0.13.jar;lib\xmpcore-5.1.3.jar;lib\xz-1.3.jar" net.sourceforge.docfetcher.Main
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Process created: C:\Windows\SysWOW64\icacls.exe C:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M
Source: C:\Windows\SysWOW64\icacls.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=2004,i,4405816494534265162,16023283234935556524,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=8160 --field-trial-handle=2004,i,4405816494534265162,16023283234935556524,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe "C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Process created: C:\Program Files (x86)\DocFetcher\docfetcher-daemon-windows.exe C:\Program Files (x86)\DocFetcher\docfetcher-daemon-windows.exe	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Process created: C:\Program Files (x86)\DocFetcher\DocFetcher.exe C:\Program Files (x86)\DocFetcher\DocFetcher.exe	Jump to behavior
Source: C:\Program Files (x86)\DocFetcher\DocFetcher.exe	Process created: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe "C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe" -Xmx1024m -Djava.library.path="lib" -enableassertions -Xss2m -classpath "lib;lib\ansj_lucene6_plug-5.1.2.0.jar;lib\ansj_seg-5.1.2.jar;lib\ant-1.10.3.jar;lib\bcmail-jdk15on-160.jar;lib\bcpkix-jdk15on-160.jar;lib\bcprov-jdk15on-160.jar;lib\commons-codec-1.10.jar;lib\commons-collections4-4.1.jar;lib\commons-compress-1.4.1.jar;lib\commons-io-2.4.jar;lib\commons-logging-1.2.jar;lib\curvesapi-1.04.jar;lib\fontbox-2.0.13.jar;lib\guava-12.0.jar;lib\J7zip_4.43_alpha2.jar;lib\java-libpst-0.8.1.jar;lib\java-unrar-0.3.jar;lib\javolution-5.5.1.jar;lib\jericho-html-3.4.jar;lib\jexcelapi-2.6.12.jar;lib\jintellitype-1.3.7.jar;lib\jna-3.2.7.jar;lib\jna-platform-3.2.7.jar;lib\juniversalchardet-1.0.3.jar;lib\JXGrabKey-0.3.2.jar;lib\log4j-1.2.17.jar;lib\lucene-analyzers-common-6.6.3.jar;lib\lucene-backward-codecs-6.6.3.jar;lib\lucene-core-6.6.3.jar;lib\lucene-highlighter-6.6.3.jar;lib\lucene-join-6.6.3.jar;lib\lucene-memory-6.6.3.jar;lib\lucene-queries-6.6.3.jar;lib\lucene-queryparser-6.6.3.jar;lib\metadata-extractor-2.11.0.jar;lib\mime-util-2.1.3.jar;lib\net.sourceforge.docfetcher_1.1.25_20210525-2212.jar;lib\nlp-lang-1.7.7.jar;lib\pdfbox-2.0.13.jar;lib\poi-3.17.jar;lib\poi-ooxml-3.17.jar;lib\poi-ooxml-schemas-3.17.jar;lib\poi-scratchpad-3.17.jar;lib\py4j0.10.7-py3.jar;lib\slf4j-api-1.6.1.jar;lib\slf4j-nop-1.6.1.jar;lib\truezip-driver-file-7.7.7.jar;lib\truezip-driver-tar-7.7.7.jar;lib\truezip-driver-zip-7.7.7.jar;lib\truezip-file-7.7.7.jar;lib\truezip-kernel-7.7.7.jar;lib\truezip-swing-7.7.7.jar;lib\xmlbeans-2.6.0.jar;lib\xmpbox-2.0.13.jar;lib\xmpcore-5.1.3.jar;lib\xz-1.3.jar" net.sourceforge.docfetcher.Main	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Process created: C:\Windows\SysWOW64\icacls.exe C:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M	Jump to behavior

Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32

Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe

File opened: C:\Program Files (x86)\Java\jre-1.8\lib\i386\jvm.cfg

Jump to behavior

Source: C:\Program Files (x86)\DocFetcher\DocFetcher.exe

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Development Kit

Jump to behavior

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe

File opened: C:\Windows\SysWOW64\MsftEdit.dll

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Window detected: Number of UI elements: 13
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Window detected: Number of UI elements: 13
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Window detected: Number of UI elements: 13
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Window detected: Number of UI elements: 11

Source:

Binary string: C:\src\NSIS-ApplicationID\Release\ApplicationID.pdb source: docfetcher_1.1.25_win32_setup.exe, 0000000D.00000002.1599715572.000000000040A000.00000004.00000001.01000000.00000006.sdmp

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe

Code function: 16_2_6C539DC7 _Java_org_eclipse_swt_internal_ole_win32_COM_CreateStdAccessibleObject@24,LoadLibraryA,GetProcAddress,

16_2_6C539DC7

Source: JIntellitype64.dll.13.dr	Static PE information: section name: /4
Source: JIntellitype64.dll.13.dr	Static PE information: section name: /19
Source: JIntellitype64.dll.13.dr	Static PE information: section name: /35
Source: JIntellitype64.dll.13.dr	Static PE information: section name: /51
Source: JIntellitype64.dll.13.dr	Static PE information: section name: /63
Source: JIntellitype64.dll.13.dr	Static PE information: section name: /77
Source: JIntellitype64.dll.13.dr	Static PE information: section name: /89
Source: JIntellitype64.dll.13.dr	Static PE information: section name: /102
Source: JIntellitype64.dll.13.dr	Static PE information: section name: /113
Source: JIntellitype64.dll.13.dr	Static PE information: section name: /124
Source: jnotify_64bit.dll.13.dr	Static PE information: section name: /4
Source: jnotify_64bit.dll.13.dr	Static PE information: section name: /19
Source: jnotify_64bit.dll.13.dr	Static PE information: section name: /35
Source: jnotify_64bit.dll.13.dr	Static PE information: section name: /47
Source: jnotify_64bit.dll.13.dr	Static PE information: section name: /61
Source: jnotify_64bit.dll.13.dr	Static PE information: section name: /73
Source: jnotify_64bit.dll.13.dr	Static PE information: section name: /86
Source: jnotify_64bit.dll.13.dr	Static PE information: section name: /97
Source: jnotify_64bit.dll.13.dr	Static PE information: section name: /108

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_6A3B6B46 push ecx; ret	16_2_6A3B6B59
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_6C53E936 push ecx; ret	16_2_6C53E949
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_02D3D8F7 push 00000000h; mov dword ptr [esp], esp	16_2_02D3D921
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_02D3A21B push ecx; ret	16_2_02D3A225
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_02D3A20A push ecx; ret	16_2_02D3A21A
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_02D3B3B7 push 00000000h; mov dword ptr [esp], esp	16_2_02D3B3DD
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_02D3BB67 push 00000000h; mov dword ptr [esp], esp	16_2_02D3BB8D
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_02D3D8E0 push 00000000h; mov dword ptr [esp], esp	16_2_02D3D921
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_02D3B947 push 00000000h; mov dword ptr [esp], esp	16_2_02D3B96D
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_02D3C477 push 00000000h; mov dword ptr [esp], esp	16_2_02D3C49D
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_02DD4C11 push cs; retf	16_2_02DD4C31

Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File created: C:\Program Files (x86)\DocFetcher\misc\DocFetcher-2048_64-bit-Java.exe	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File created: C:\Program Files (x86)\DocFetcher\misc\DocFetcher-1024.exe	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File created: C:\Program Files (x86)\DocFetcher\DocFetcher.exe	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File created: C:\Program Files (x86)\DocFetcher\misc\DocFetcher-8192_64-bit-Java.exe	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File created: C:\Program Files (x86)\DocFetcher\lib\JIntellitype64.dll	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File created: C:\Program Files (x86)\DocFetcher\uninstaller.exe	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File created: C:\Program Files (x86)\DocFetcher\misc\DocFetcher-4096_64-bit-Java.exe	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File created: C:\Program Files (x86)\DocFetcher\lib\jnotify_64bit.dll	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File created: C:\Program Files (x86)\DocFetcher\misc\DocFetcher-12288_64-bit-Java.exe	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File created: C:\Program Files (x86)\DocFetcher\lib\jnotify.dll	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File created: C:\Program Files (x86)\DocFetcher\misc\DocFetcher-16384_64-bit-Java.exe	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File created: C:\Users\user\AppData\Local\Temp\nsgECB1.tmp\System.dll	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File created: C:\Program Files (x86)\DocFetcher\misc\DocFetcher-768.exe	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File created: C:\Users\user\AppData\Local\Temp\nsgECB1.tmp\nsDialogs.dll	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\6dae17d4-315e-4667-bf16-8a624e631fb2.tmp	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File created: C:\Program Files (x86)\DocFetcher\misc\DocFetcher-512.exe	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File created: C:\Users\user\AppData\Local\Temp\nsgECB1.tmp\ApplicationID.dll	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File created: C:\Program Files (x86)\DocFetcher\lib\JIntellitype32.dll	Jump to dropped file
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	File created: C:\Users\user\AppData\Roaming\DocFetcher\swt\windows-32\swt-win32-4919.dll	Jump to dropped file
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	File created: C:\Users\user\AppData\Roaming\DocFetcher\swt\windows-32\swt-gdip-win32-4919.dll	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe (copy)	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\Unconfirmed 882250.crdownload	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File created: C:\Users\user\AppData\Local\Temp\nsgECB1.tmp\Processes.dll	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File created: C:\Program Files (x86)\DocFetcher\docfetcher-daemon-windows.exe	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File created: C:\Program Files (x86)\DocFetcher\misc\DocFetcher-256.exe	Jump to dropped file

Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe

File created: C:\Program Files (x86)\DocFetcher\Readme.txt

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DocFetcher	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DocFetcher\DocFetcher.lnk	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DocFetcher\Uninstall DocFetcher.lnk	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DocFetcher\Readme.lnk	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DocFetcher\~ocFetcher.tmp	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DocFetcher\DocFetcher.lnk~RF4d0a3a.TMP	Jump to behavior

Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Registry value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run DocFetcher-Daemon			Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Registry value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run DocFetcher-Daemon			Jump to behavior

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe

Code function: 16_2_6C51846C _Java_org_eclipse_swt_internal_win32_OS_IsIconic@12,IsIconic,

16_2_6C51846C

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe

Process created: C:\Windows\SysWOW64\icacls.exe C:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M

Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Memory allocated: 4BF30000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Memory allocated: 4BEF0000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Memory allocated: 4C470000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Memory allocated: 4C490000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Memory allocated: 4F970000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Memory allocated: 4F990000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Memory allocated: 4F9C0000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Memory allocated: 53580000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Program Files (x86)\DocFetcher\docfetcher-daemon-windows.exe

Window / User API: threadDelayed 9843

Jump to behavior

Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Dropped PE file which has not been started: C:\Program Files (x86)\DocFetcher\misc\DocFetcher-2048_64-bit-Java.exe	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsgECB1.tmp\System.dll	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Dropped PE file which has not been started: C:\Program Files (x86)\DocFetcher\misc\DocFetcher-768.exe	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsgECB1.tmp\nsDialogs.dll	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Dropped PE file which has not been started: C:\Program Files (x86)\DocFetcher\misc\DocFetcher-8192_64-bit-Java.exe	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Dropped PE file which has not been started: C:\Program Files (x86)\DocFetcher\lib\JIntellitype64.dll	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Dropped PE file which has not been started: C:\Program Files (x86)\DocFetcher\uninstaller.exe	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Dropped PE file which has not been started: C:\Program Files (x86)\DocFetcher\misc\DocFetcher-512.exe	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsgECB1.tmp\ApplicationID.dll	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Dropped PE file which has not been started: C:\Program Files (x86)\DocFetcher\misc\DocFetcher-4096_64-bit-Java.exe	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Dropped PE file which has not been started: C:\Program Files (x86)\DocFetcher\lib\JIntellitype32.dll	Jump to dropped file
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\DocFetcher\swt\windows-32\swt-gdip-win32-4919.dll	Jump to dropped file
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\DocFetcher\swt\windows-32\swt-win32-4919.dll	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Dropped PE file which has not been started: C:\Program Files (x86)\DocFetcher\lib\jnotify_64bit.dll	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Dropped PE file which has not been started: C:\Program Files (x86)\DocFetcher\misc\DocFetcher-12288_64-bit-Java.exe	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Dropped PE file which has not been started: C:\Program Files (x86)\DocFetcher\lib\jnotify.dll	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsgECB1.tmp\Processes.dll	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Dropped PE file which has not been started: C:\Program Files (x86)\DocFetcher\misc\DocFetcher-256.exe	Jump to dropped file
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Dropped PE file which has not been started: C:\Program Files (x86)\DocFetcher\misc\DocFetcher-16384_64-bit-Java.exe	Jump to dropped file

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe

API coverage: 5.3 %

Source: C:\Program Files (x86)\DocFetcher\docfetcher-daemon-windows.exe TID: 2792	Thread sleep time: -312000s >= -30000s			Jump to behavior
Source: C:\Program Files (x86)\DocFetcher\docfetcher-daemon-windows.exe TID: 2792	Thread sleep time: -19686000s >= -30000s			Jump to behavior

Source: C:\Program Files (x86)\DocFetcher\docfetcher-daemon-windows.exe

Last function: Thread delayed

Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File Volume queried: C:\Program Files (x86) FullSizeInformation			Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File Volume queried: C:\Program Files (x86) FullSizeInformation			Jump to behavior

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_6A3B9A8A FindFirstFileExA,		16_2_6A3B9A8A
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_6C5446C5 FindFirstFileExA,		16_2_6C5446C5

Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	File opened: C:\Users\user\AppData	Jump to behavior

Source: javaw.exe, 00000010.00000002.2382654249.000000001A68A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: java.lang.VirtualMachineError8
Source: javaw.exe, 00000010.00000003.1602201685.000000004722C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: com/sun/corba/se/impl/util/SUNVMCID.classPK
Source: javaw.exe, 00000010.00000003.1602201685.000000004722C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: &com/sun/corba/se/impl/util/SUNVMCID.classPK
Source: javaw.exe, 00000010.00000003.1602201685.000000004722C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: org/omg/CORBA/OMGVMCID.classPK
Source: javaw.exe, 00000010.00000002.2392879344.0000000045170000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: cjava/lang/VirtualMachineError
Source: javaw.exe, 00000010.00000002.2436273801.00000000492DD000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\Device\CdRom0\??\Volume{a33c736e-61ca-11ee-8c18-806e6f6e6963}\DosDevices\D:+*D
Source: javaw.exe, 00000010.00000003.1602201685.000000004722C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: java/lang/VirtualMachineError.classPK
Source: javaw.exe, 00000010.00000002.2365324774.0000000000EF9000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: 2[Ljava/lang/VirtualMachineError;
Source: javaw.exe, 00000010.00000002.2424031740.0000000048289000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: #6O0Ljava/lang/VirtualMachineError;C8
Source: javaw.exe, 00000010.00000002.2365324774.0000000000EF9000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe

Code function: 16_2_6A3B6979 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

16_2_6A3B6979

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe

Code function: 16_2_6C539DC7 _Java_org_eclipse_swt_internal_ole_win32_COM_CreateStdAccessibleObject@24,LoadLibraryA,GetProcAddress,

16_2_6C539DC7

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_6A3B8397 mov eax, dword ptr fs:[00000030h]	16_2_6A3B8397
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_6A3B95CA mov eax, dword ptr fs:[00000030h]	16_2_6A3B95CA
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_6C542B55 mov eax, dword ptr fs:[00000030h]	16_2_6C542B55
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_6C54449A mov eax, dword ptr fs:[00000030h]	16_2_6C54449A

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe

Code function: 16_2_6A3BABBF GetProcessHeap,

16_2_6A3BABBF

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_6A3B5BE7 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	16_2_6A3B5BE7
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_6A3B6979 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	16_2_6A3B6979
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_6A3B95FD IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	16_2_6A3B95FD
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_6C53EC85 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	16_2_6C53EC85
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_6C53DE4B SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	16_2_6C53DE4B
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_6C543868 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	16_2_6C543868

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Program Files (x86)\DocFetcher\DocFetcher.exe	Process created: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe "C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe" -Xmx1024m -Djava.library.path="lib" -enableassertions -Xss2m -classpath "lib;lib\ansj_lucene6_plug-5.1.2.0.jar;lib\ansj_seg-5.1.2.jar;lib\ant-1.10.3.jar;lib\bcmail-jdk15on-160.jar;lib\bcpkix-jdk15on-160.jar;lib\bcprov-jdk15on-160.jar;lib\commons-codec-1.10.jar;lib\commons-collections4-4.1.jar;lib\commons-compress-1.4.1.jar;lib\commons-io-2.4.jar;lib\commons-logging-1.2.jar;lib\curvesapi-1.04.jar;lib\fontbox-2.0.13.jar;lib\guava-12.0.jar;lib\J7zip_4.43_alpha2.jar;lib\java-libpst-0.8.1.jar;lib\java-unrar-0.3.jar;lib\javolution-5.5.1.jar;lib\jericho-html-3.4.jar;lib\jexcelapi-2.6.12.jar;lib\jintellitype-1.3.7.jar;lib\jna-3.2.7.jar;lib\jna-platform-3.2.7.jar;lib\juniversalchardet-1.0.3.jar;lib\JXGrabKey-0.3.2.jar;lib\log4j-1.2.17.jar;lib\lucene-analyzers-common-6.6.3.jar;lib\lucene-backward-codecs-6.6.3.jar;lib\lucene-core-6.6.3.jar;lib\lucene-highlighter-6.6.3.jar;lib\lucene-join-6.6.3.jar;lib\lucene-memory-6.6.3.jar;lib\lucene-queries-6.6.3.jar;lib\lucene-queryparser-6.6.3.jar;lib\metadata-extractor-2.11.0.jar;lib\mime-util-2.1.3.jar;lib\net.sourceforge.docfetcher_1.1.25_20210525-2212.jar;lib\nlp-lang-1.7.7.jar;lib\pdfbox-2.0.13.jar;lib\poi-3.17.jar;lib\poi-ooxml-3.17.jar;lib\poi-ooxml-schemas-3.17.jar;lib\poi-scratchpad-3.17.jar;lib\py4j0.10.7-py3.jar;lib\slf4j-api-1.6.1.jar;lib\slf4j-nop-1.6.1.jar;lib\truezip-driver-file-7.7.7.jar;lib\truezip-driver-tar-7.7.7.jar;lib\truezip-driver-zip-7.7.7.jar;lib\truezip-file-7.7.7.jar;lib\truezip-kernel-7.7.7.jar;lib\truezip-swing-7.7.7.jar;lib\xmlbeans-2.6.0.jar;lib\xmpbox-2.0.13.jar;lib\xmpcore-5.1.3.jar;lib\xz-1.3.jar" net.sourceforge.docfetcher.Main			Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Process created: C:\Windows\SysWOW64\icacls.exe C:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M			Jump to behavior

Source: C:\Program Files (x86)\DocFetcher\DocFetcher.exe	Process created: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe "c:\program files (x86)\java\jre-1.8\bin\javaw.exe" -xmx1024m -djava.library.path="lib" -enableassertions -xss2m -classpath "lib;lib\ansj_lucene6_plug-5.1.2.0.jar;lib\ansj_seg-5.1.2.jar;lib\ant-1.10.3.jar;lib\bcmail-jdk15on-160.jar;lib\bcpkix-jdk15on-160.jar;lib\bcprov-jdk15on-160.jar;lib\commons-codec-1.10.jar;lib\commons-collections4-4.1.jar;lib\commons-compress-1.4.1.jar;lib\commons-io-2.4.jar;lib\commons-logging-1.2.jar;lib\curvesapi-1.04.jar;lib\fontbox-2.0.13.jar;lib\guava-12.0.jar;lib\j7zip_4.43_alpha2.jar;lib\java-libpst-0.8.1.jar;lib\java-unrar-0.3.jar;lib\javolution-5.5.1.jar;lib\jericho-html-3.4.jar;lib\jexcelapi-2.6.12.jar;lib\jintellitype-1.3.7.jar;lib\jna-3.2.7.jar;lib\jna-platform-3.2.7.jar;lib\juniversalchardet-1.0.3.jar;lib\jxgrabkey-0.3.2.jar;lib\log4j-1.2.17.jar;lib\lucene-analyzers-common-6.6.3.jar;lib\lucene-backward-codecs-6.6.3.jar;lib\lucene-core-6.6.3.jar;lib\lucene-highlighter-6.6.3.jar;lib\lucene-join-6.6.3.jar;lib\lucene-memory-6.6.3.jar;lib\lucene-queries-6.6.3.jar;lib\lucene-queryparser-6.6.3.jar;lib\metadata-extractor-2.11.0.jar;lib\mime-util-2.1.3.jar;lib\net.sourceforge.docfetcher_1.1.25_20210525-2212.jar;lib\nlp-lang-1.7.7.jar;lib\pdfbox-2.0.13.jar;lib\poi-3.17.jar;lib\poi-ooxml-3.17.jar;lib\poi-ooxml-schemas-3.17.jar;lib\poi-scratchpad-3.17.jar;lib\py4j0.10.7-py3.jar;lib\slf4j-api-1.6.1.jar;lib\slf4j-nop-1.6.1.jar;lib\truezip-driver-file-7.7.7.jar;lib\truezip-driver-tar-7.7.7.jar;lib\truezip-driver-zip-7.7.7.jar;lib\truezip-file-7.7.7.jar;lib\truezip-kernel-7.7.7.jar;lib\truezip-swing-7.7.7.jar;lib\xmlbeans-2.6.0.jar;lib\xmpbox-2.0.13.jar;lib\xmpcore-5.1.3.jar;lib\xz-1.3.jar" net.sourceforge.docfetcher.main
Source: C:\Program Files (x86)\DocFetcher\DocFetcher.exe	Process created: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe "c:\program files (x86)\java\jre-1.8\bin\javaw.exe" -xmx1024m -djava.library.path="lib" -enableassertions -xss2m -classpath "lib;lib\ansj_lucene6_plug-5.1.2.0.jar;lib\ansj_seg-5.1.2.jar;lib\ant-1.10.3.jar;lib\bcmail-jdk15on-160.jar;lib\bcpkix-jdk15on-160.jar;lib\bcprov-jdk15on-160.jar;lib\commons-codec-1.10.jar;lib\commons-collections4-4.1.jar;lib\commons-compress-1.4.1.jar;lib\commons-io-2.4.jar;lib\commons-logging-1.2.jar;lib\curvesapi-1.04.jar;lib\fontbox-2.0.13.jar;lib\guava-12.0.jar;lib\j7zip_4.43_alpha2.jar;lib\java-libpst-0.8.1.jar;lib\java-unrar-0.3.jar;lib\javolution-5.5.1.jar;lib\jericho-html-3.4.jar;lib\jexcelapi-2.6.12.jar;lib\jintellitype-1.3.7.jar;lib\jna-3.2.7.jar;lib\jna-platform-3.2.7.jar;lib\juniversalchardet-1.0.3.jar;lib\jxgrabkey-0.3.2.jar;lib\log4j-1.2.17.jar;lib\lucene-analyzers-common-6.6.3.jar;lib\lucene-backward-codecs-6.6.3.jar;lib\lucene-core-6.6.3.jar;lib\lucene-highlighter-6.6.3.jar;lib\lucene-join-6.6.3.jar;lib\lucene-memory-6.6.3.jar;lib\lucene-queries-6.6.3.jar;lib\lucene-queryparser-6.6.3.jar;lib\metadata-extractor-2.11.0.jar;lib\mime-util-2.1.3.jar;lib\net.sourceforge.docfetcher_1.1.25_20210525-2212.jar;lib\nlp-lang-1.7.7.jar;lib\pdfbox-2.0.13.jar;lib\poi-3.17.jar;lib\poi-ooxml-3.17.jar;lib\poi-ooxml-schemas-3.17.jar;lib\poi-scratchpad-3.17.jar;lib\py4j0.10.7-py3.jar;lib\slf4j-api-1.6.1.jar;lib\slf4j-nop-1.6.1.jar;lib\truezip-driver-file-7.7.7.jar;lib\truezip-driver-tar-7.7.7.jar;lib\truezip-driver-zip-7.7.7.jar;lib\truezip-file-7.7.7.jar;lib\truezip-kernel-7.7.7.jar;lib\truezip-swing-7.7.7.jar;lib\xmlbeans-2.6.0.jar;lib\xmpbox-2.0.13.jar;lib\xmpcore-5.1.3.jar;lib\xz-1.3.jar" net.sourceforge.docfetcher.main			Jump to behavior

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe

Code function: 16_2_6A3B6B5B cpuid

16_2_6A3B6B5B

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: _Java_org_eclipse_swt_internal_win32_OS_GetLocaleInfoW@24,GetLocaleInfoW,	16_2_6C515966
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: _Java_org_eclipse_swt_internal_win32_OS_GetLocaleInfoA@24,GetLocaleInfoA,	16_2_6C51590E
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: _Java_org_eclipse_swt_internal_win32_OS_EnumSystemLocalesA@16,EnumSystemLocalesA,	16_2_6C51411C
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: _Java_org_eclipse_swt_internal_win32_OS_EnumSystemLocalesW@16,EnumSystemLocalesW,	16_2_6C51412D

Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\JavaSoft\Java Runtime Environment CurrentVersion			Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\JavaSoft\Java Runtime Environment CurrentVersion			Jump to behavior

Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Program Files (x86)\Java\jre-1.8\bin\java.dll VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Program Files (x86)\Java\jre-1.8\bin\client\jvm.dll VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Program Files (x86)\Java\jre-1.8\bin\java.dll VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Program Files (x86)\Java\jre-1.8\bin\java.dll VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\hsperfdata_user\8152 VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Program Files (x86)\Java\jre-1.8\lib\resources.jar VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Program Files (x86)\Java\jre-1.8\lib\meta-index VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Program Files (x86)\Java\jre-1.8\lib\resources.jar VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Program Files (x86)\Java\jre-1.8\lib\jfr.jar VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Users\user\AppData\Roaming\DocFetcher\conf\settings-conf.txt VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Users\user\AppData\Roaming\DocFetcher\conf\settings-conf.txt VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Users\user\AppData\Roaming\DocFetcher\conf\settings-conf.txt VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Windows\Fonts\arial.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Windows\Fonts\arialbd.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Windows\Fonts\ariali.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Windows\Fonts\cour.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Windows\Fonts\couri.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Windows\Fonts\courbd.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Windows\Fonts\courbi.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Windows\Fonts\cour.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Windows\Fonts\couri.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Windows\Fonts\arialbi.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Users\user\AppData\Roaming\DocFetcher\conf\settings-conf.txt VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Users\user\AppData\Roaming\DocFetcher\conf\settings-conf.txt VolumeInformation	Jump to behavior

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe

Code function: 16_2_6A3B5BF7 GetSystemTimeAsFileTime,GetCurrentProcessId,GetCurrentThreadId,GetTickCount,QueryPerformanceCounter,

16_2_6A3B5BF7

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe

Code function: 16_2_6C5375FD DllGetVersion,

16_2_6C5375FD

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe

Registry value created: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION

Jump to behavior

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_6C511012 _Java_org_eclipse_swt_internal_Callback_bind@40,VirtualAlloc,		16_2_6C511012
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 16_2_6C5112A6 _Java_org_eclipse_swt_internal_Callback_unbind@12,		16_2_6C5112A6

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	1 Drive-by Compromise	1 Native API	1 Scripting	1 DLL Side-Loading	1 Disable or Modify Tools	11 Input Capture	1 System Time Discovery	Remote Services	1 Archive Collected Data	3 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Command and Scripting Interpreter	1 DLL Side-Loading	11 Process Injection	2 Obfuscated Files or Information	LSASS Memory	3 File and Directory Discovery	Remote Desktop Protocol	11 Input Capture	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	11 Registry Run Keys / Startup Folder	11 Registry Run Keys / Startup Folder	1 DLL Side-Loading	Security Account Manager	45 System Information Discovery	SMB/Windows Admin Shares	2 Clipboard Data	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	1 Services File Permissions Weakness	1 Services File Permissions Weakness	2 Masquerading	NTDS	121 Security Software Discovery	Distributed Component Object Model	Input Capture	5 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	2 Virtualization/Sandbox Evasion	LSA Secrets	2 Virtualization/Sandbox Evasion	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Modify Registry	Cached Domain Credentials	1 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	11 Process Injection	DCSync	11 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 Services File Permissions Weakness	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download	0%	Virustotal		Browse
https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download	0%	Avira URL Cloud	safe

Dropped Files

Source	Detection	Scanner	Link
C:\Program Files (x86)\DocFetcher\DocFetcher.exe	4%	ReversingLabs
C:\Program Files (x86)\DocFetcher\DocFetcher.exe	0%	Virustotal	Browse
C:\Program Files (x86)\DocFetcher\docfetcher-daemon-windows.exe	2%	ReversingLabs
C:\Program Files (x86)\DocFetcher\docfetcher-daemon-windows.exe	7%	Virustotal	Browse
C:\Program Files (x86)\DocFetcher\lib\JIntellitype32.dll	0%	ReversingLabs
C:\Program Files (x86)\DocFetcher\lib\JIntellitype32.dll	0%	Virustotal	Browse
C:\Program Files (x86)\DocFetcher\lib\JIntellitype64.dll	0%	ReversingLabs
C:\Program Files (x86)\DocFetcher\lib\JIntellitype64.dll	0%	Virustotal	Browse
C:\Program Files (x86)\DocFetcher\lib\jnotify.dll	0%	ReversingLabs
C:\Program Files (x86)\DocFetcher\lib\jnotify.dll	1%	Virustotal	Browse
C:\Program Files (x86)\DocFetcher\lib\jnotify_64bit.dll	0%	ReversingLabs
C:\Program Files (x86)\DocFetcher\lib\jnotify_64bit.dll	0%	Virustotal	Browse
C:\Program Files (x86)\DocFetcher\misc\DocFetcher-1024.exe	4%	ReversingLabs
C:\Program Files (x86)\DocFetcher\misc\DocFetcher-1024.exe	0%	Virustotal	Browse
C:\Program Files (x86)\DocFetcher\misc\DocFetcher-12288_64-bit-Java.exe	4%	ReversingLabs
C:\Program Files (x86)\DocFetcher\misc\DocFetcher-12288_64-bit-Java.exe	0%	Virustotal	Browse
C:\Program Files (x86)\DocFetcher\misc\DocFetcher-16384_64-bit-Java.exe	4%	ReversingLabs
C:\Program Files (x86)\DocFetcher\misc\DocFetcher-16384_64-bit-Java.exe	0%	Virustotal	Browse
C:\Program Files (x86)\DocFetcher\misc\DocFetcher-2048_64-bit-Java.exe	3%	ReversingLabs
C:\Program Files (x86)\DocFetcher\misc\DocFetcher-2048_64-bit-Java.exe	0%	Virustotal	Browse
C:\Program Files (x86)\DocFetcher\misc\DocFetcher-256.exe	3%	ReversingLabs
C:\Program Files (x86)\DocFetcher\misc\DocFetcher-256.exe	1%	Virustotal	Browse
C:\Program Files (x86)\DocFetcher\misc\DocFetcher-4096_64-bit-Java.exe	3%	ReversingLabs
C:\Program Files (x86)\DocFetcher\misc\DocFetcher-4096_64-bit-Java.exe	0%	Virustotal	Browse
C:\Program Files (x86)\DocFetcher\misc\DocFetcher-512.exe	4%	ReversingLabs
C:\Program Files (x86)\DocFetcher\misc\DocFetcher-512.exe	0%	Virustotal	Browse
C:\Program Files (x86)\DocFetcher\misc\DocFetcher-768.exe	3%	ReversingLabs
C:\Program Files (x86)\DocFetcher\misc\DocFetcher-768.exe	0%	Virustotal	Browse
C:\Program Files (x86)\DocFetcher\misc\DocFetcher-8192_64-bit-Java.exe	2%	ReversingLabs
C:\Program Files (x86)\DocFetcher\misc\DocFetcher-8192_64-bit-Java.exe	0%	Virustotal	Browse
C:\Program Files (x86)\DocFetcher\search.py	0%	ReversingLabs
C:\Program Files (x86)\DocFetcher\search.py	0%	Virustotal	Browse
C:\Program Files (x86)\DocFetcher\uninstaller.exe	2%	ReversingLabs
C:\Program Files (x86)\DocFetcher\uninstaller.exe	0%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\nsgECB1.tmp\ApplicationID.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\nsgECB1.tmp\ApplicationID.dll	1%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\nsgECB1.tmp\Processes.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\nsgECB1.tmp\System.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\nsgECB1.tmp\nsDialogs.dll	0%	ReversingLabs
C:\Users\user\AppData\Roaming\DocFetcher\swt\windows-32\swt-gdip-win32-4919.dll	0%	ReversingLabs
C:\Users\user\AppData\Roaming\DocFetcher\swt\windows-32\swt-win32-4919.dll	0%	ReversingLabs
C:\Users\user\Downloads\Unconfirmed 882250.crdownload	3%	ReversingLabs

Source	Detection	Scanner	Label	Link
https://cm.adgrx.com/bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent=	0%	URL Reputation	safe
https://sync.ipredictive.com/d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent=	0%	URL Reputation	safe
https://a.audrte.com/p	0%	URL Reputation	safe
http://bugreport.sun.com/bugreport/	0%	URL Reputation	safe
https://api.btloader.com/pv?tid=aQvxlqSC&w=5483815487668224&o=5098683085881344&cv=2.1.38-1-g3a5ff56&widget=false&r=false&vr=1280x907&pageURL=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Ffiles%2Fdocfetcher%2F1.1.25%2Fdocfetcher_1.1.25_win32_setup.exe%2Fdownload&sid=nZZIdvDKz&pm=false&upapi=true	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://id5-sync.com/c/102/123/4/6.gif?puid=18e2d5f5e6f-1cc10000010a4999&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://api.btloader.com/pv?tid=2r5yo54xlW&w=5483815487668224&o=5098683085881344&cv=2.1.38-1-g3a5ff56&widget=false&r=false&vr=1280x907&pageURL=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Fpostdownload&sid=nZZIdvDKz&pm=false&upapi=true	0%	Avira URL Cloud	safe
https://ad-delivery.net/px.gif?ch=2	0%	Avira URL Cloud	safe
https://a.audrte.com/ddp?red=eyJ1IjoiaHR0cHM6Ly9ydGItY3N5bmMuc21hcnRhZHNlcnZlci5jb20vcmVkaXIvP2lzc2lcdTAwM2QxXHUwMDI2cGFydG5lcmlkXHUwMDNkMTQxXHUwMDI2cGFydG5lcnVzZXJpZFx1MDAzZDlmbFN5M25KNUl2UVdpYVlUY1UxMnY3WGciLCJkIjpbeyJuYW1lIjoiYWRmb3JtIn0seyJuYW1lIjoic21hcnQifV19&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://s.company-target.com/s/eqx?sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D152%26partneruserid%3DPARTNER_USER_ID&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://sid.storygize.net/csr?r=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3Dm3k4T1aBLLPMpeMdFP9tJTiB%26source_user_id%3Dac45c3ec-c17b-4938-9811-6a9b00078f13	0%	Avira URL Cloud	safe
https://ad-delivery.net/px.gif?ch=2	0%	Virustotal		Browse
https://s.company-target.com/s/eqx?sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D152%26partneruserid%3DPARTNER_USER_ID&gdpr=0&gdpr_consent=	0%	Virustotal		Browse
https://a.audrte.com/match?uid=1899505890594565248&p=M501991648&r=https%3A%2F%2Fa.audrte.com%2Fp%3F&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://us01.z.antigena.com/l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx%209A176ADB-73F4-4BD8-A648-23F2443493B5&rnd=RND	0%	Avira URL Cloud	safe
https://ml314.com/imsync.ashx?pi=3642666937673580575&data=eyJwaCI6NDc4MSwid2giOjkwNywidGJzIjowLCJkdCI6MzAsInBpZCI6IjE3MTAxNTgyNDA1NjVfNmlxOTR0aWV3Iiwic2QiOjkwN30%3D	0%	Avira URL Cloud	safe
https://sync.technoratimedia.com/services?uid=AAKPDU7L3eMAABWFZYx_mg&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fuserid%3D1899505890594565248%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dshr%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D5&gdpr=0	0%	Avira URL Cloud	safe
https://id5-sync.com/k/155.gif?puid=AAKPDU7L3eMAABWFZYx_mg&id5AccountNum=155&numCascadesAllowed=9	0%	Avira URL Cloud	safe
https://ad-delivery.net/px.gif?ch=1&e=0.07056342703533591	0%	Avira URL Cloud	safe
https://match.prod.bidr.io/cookie-sync?gdpr=0&bee_sync_partners=sas%2Cpp%2Csyn%2Cshr&bee_sync_current_partner=pm&bee_sync_initiator=adx&bee_sync_hop_count=2	0%	Avira URL Cloud	safe
http://javolution.org	0%	Avira URL Cloud	safe
https://ml314.com/utsync.ashx?pub=&adv=&et=0&eid=771&ct=js&pi=&fp=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f&clid=&if=0&ps=&cl=&mlt=&data=&&cp=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Ffiles%2Fdocfetcher%2F1.1.25%2Fdocfetcher_1.1.25_win32_setup.exe%2Fdownload&pv=1710158201959_nopjhvr4s&bl=en-us&cb=6793859&return=&ht=&d=&dc=&si=1710158201959_nopjhvr4s&cid=&s=1280x1024&rp=&v=2.6.1.139	0%	Avira URL Cloud	safe
https://match.prod.bidr.io/cookie-sync?gdpr=0&userid=1899505890594565248&gdpr=0&bee_sync_partners=pm&bee_sync_current_partner=pp&bee_sync_initiator=pm&bee_sync_hop_count=3&ev=AAKPDU7L3eMAABWFZYx_mg&pid=558502&do=add&gdpr=0	0%	Avira URL Cloud	safe
https://bpi.rtactivate.com/tag/?id=20909&user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
http://www.inform-fiction.org/	0%	Avira URL Cloud	safe
http://javolution.org	0%	Virustotal		Browse
https://wt.rqtrk.eu/?pid=58a76248-f101-4e52-b8f7-c4de9362ea12&src=www&type=100&sid=0&uid=1899505890594565248&gdpr_pd=0&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
http://www.inform-fiction.org/	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
um.simpli.fi	35.230.38.116	true	false	high
d3f1y6rso5ozvw.cloudfront.net	18.154.144.60	true	false	high
rtb-csync-use1.smartadserver.com	23.105.12.121	true	false	high
global.px.quantserve.com	192.184.67.84	true	false	high
us-east-eb2.3lift.com	35.71.139.29	true	false	high
id5-sync.com	162.19.138.119	true	false	unknown
cs.admanmedia.com	80.77.87.163	true	false	high
pugm-sv3pairbc.pubmnet.com	192.82.242.209	true	false	unknown
ad-interactions-prod-lb-1289981577.us-west-1.elb.amazonaws.com	54.241.104.80	true	false	high
cdn.w55c.net	35.166.28.193	true	false	high
crb.kargo.com	34.192.240.196	true	false	high
downloads.sourceforge.net	204.68.111.105	true	false	high
r.casalemedia.com	104.18.36.155	true	false	high
dualstack.tls13.taboola.map.fastly.net	151.101.129.44	true	false	unknown
mwzeom.zeotap.com	104.22.51.98	true	false	high
pbid.pro-market.net	107.178.240.89	true	false	high
dsum.casalemedia.com	172.64.151.101	true	false	high
www.google.com	142.250.101.105	true	false	high
sync.intentiq.com	3.163.125.46	true	false	unknown
blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com	44.230.187.183	true	false	high
idaas6.cph.liveintent.com	3.211.2.230	true	false	high
usw1.smartadserver.com	23.83.76.35	true	false	high
bcp.crwdcntrl.net	52.8.161.245	true	false	high
sync1.intentiq.com	3.163.125.99	true	false	unknown
tag.crsspxl.com	34.232.140.51	true	false	high
match.adsrvr.org	35.71.131.137	true	false	high
rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com	3.213.0.7	true	false	high
match.prod.bidr.io	52.25.158.6	true	false	unknown
sourceforge.net	104.18.37.111	true	false	high
pagead-googlehosted.l.google.com	142.251.2.132	true	false	high
creativecdn.com	185.184.8.90	true	false	high
ats-eks.us-west-2.dcs-online-targeting-prd.aws.oath.cloud	34.214.251.32	true	false	unknown
m.deepintent.com	169.197.150.8	true	false	unknown
dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com	34.210.5.217	true	false	high
pixel-sync.sitescout.com	34.36.216.150	true	false	high
pixel.onaudience.com	141.94.171.212	true	false	unknown
sjc-direct-bgp.contextweb.com	74.214.196.131	true	false	high
ssum-sec.casalemedia.com	172.64.151.101	true	false	high
gob-sv3.pubmnet.com	204.237.133.116	true	false	unknown
googleads.g.doubleclick.net	142.250.141.156	true	false	high
d1dvhck2p605dz.cloudfront.net	13.226.210.30	true	false	high
ml314.com	34.117.77.79	true	false	unknown
hb.yahoo.net	184.28.98.113	true	false	high
api.btloader.com	130.211.23.194	true	false	unknown
user-data-us-west.bidswitch.net	35.212.133.238	true	false	unknown
idsync.rlcdn.com	35.244.154.8	true	false	high
dmp.truoptik.com	104.17.217.204	true	false	unknown
rtb.adentifi.com	35.171.70.242	true	false	unknown
ad.mrtnsvr.com	34.102.163.6	true	false	unknown
synchroscript.deliveryengine.adswizz.com	18.154.206.74	true	false	high
sync.srv.stackadapt.com	54.165.23.128	true	false	high
thrtle.com	52.204.113.215	true	false	unknown
io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com	52.73.30.136	true	false	high
pixel.tapad.com	34.111.113.62	true	false	high
sync.adotmob.com	45.137.176.88	true	false	high
match-us-west-1-ecs.sharethrough.com	54.215.97.222	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
pippio.com	107.178.254.65	true	false	high
sync.ipredictive.com	52.44.255.182	true	false	unknown
elb-aws-va-proclivity-712001148.us-east-1.elb.amazonaws.com	54.208.174.31	true	false	high
ad.doubleclick.net	142.251.2.149	true	false	high
s.amazon-adsystem.com	52.46.155.104	true	false	high
aax-eu.amazon-adsystem.com	52.94.220.185	true	false	high
aep.mxptint.net	38.99.107.14	true	false	unknown
spug33000-fpb.pubmnet.com	104.36.113.111	true	false	unknown
ad-delivery.net	104.26.2.70	true	false	unknown
outspot2-ams.adx.opera.com	82.145.213.8	true	false	high
ib.anycast.adnxs.com	104.254.151.68	true	false	high
us01.z.antigena.com	40.76.134.238	true	false	unknown
uipus.semasio.net	50.57.31.206	true	false	high
imagesync33000-fpb.pubmnet.com	104.36.113.110	true	false	unknown
eu-u.openx.net	35.244.159.8	true	false	high
btlr-us-west-1.sharethrough.com	52.8.138.210	true	false	high
s.dsp-prod.demandbase.com	34.96.71.22	true	false	high
tag.device9.com	52.9.211.225	true	false	unknown
spl.zeotap.com	104.22.51.98	true	false	high
d20qwf0wrdtevy.cloudfront.net	13.227.74.54	true	false	high
visitor-us-west-2.omnitagjs.com	34.212.76.7	true	false	high
sync.crwdcntrl.net	52.8.161.245	true	false	high
cm.g.doubleclick.net	74.125.137.157	true	false	high
ds-pr-bh.ybp.gysm.yahoodns.net	35.160.96.43	true	false	unknown
idaas-ext.cph.liveintent.com	3.218.15.224	true	false	high
sync.1rx.io	69.194.240.13	true	false	high
cdn-content.ampproject.org	142.251.2.132	true	false	high
cm127.appier.org	172.105.221.29	true	false	high
us-u.openx.net	34.98.64.218	true	false	high
securepubads46.g.doubleclick.net	142.251.2.156	true	false	high
load-usw2.exelator.com	44.238.141.43	true	false	high
cm-supply-web.gammaplatform.com	35.186.154.107	true	false	high
dsp.adfarm1.adition.com	85.114.159.93	true	false	high
sid.storygize.net	143.244.208.184	true	false	unknown
envoy-hl.envoy-csync1.core-b8mf.ov1o.com	35.214.235.183	true	false	unknown
newcontinuum.dl.sourceforge.net	64.79.96.4	true	false	high
wt.rqtrk.eu	51.222.241.106	true	false	unknown
a.tribalfusion.com	104.18.24.173	true	false	high
io.narrative.io	52.27.232.237	true	false	high
btloader.com	172.67.41.60	true	false	unknown
s0.2mdn.net	142.251.2.148	true	false	high
data.ad-score.com	130.211.115.4	true	false	high
analytics.slashdotmedia.com	216.105.38.9	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://pbid.pro-market.net/engine?site=143572;size=1x1;e=0;dt=0;category=twljteyw08d;kw=ew37vtvpnj;rnd=(1710158240574)	false		high
https://tag.crsspxl.com/s2.html?d=2396&r=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Fpostdownload&t=DocFetcher%20download%20%7C%20SourceForge.net&u=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2F&b2=%20CategoriesFile%20Managers%2C%20Search%2C%20Source%20Code%20Management%20LicenseEclipse%20Public%20License%20%20%20%20%20%20%20	false		high
https://image4.pubmatic.com/AdServer/SPug?partnerID=156078&xid=y-kkpOYpRE2uXr60n7MUr_n01xFPJAlGQ-~A&gdpr=0	false		high
https://sync.targeting.unrulymedia.com/csync/RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005?redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fpartnerid%3D113%26partneruserid%3DRX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005	false		high
https://id5-sync.com/c/102/123/4/6.gif?puid=18e2d5f5e6f-1cc10000010a4999&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://bcp.crwdcntrl.net/map/c=14750/tp=DTNC/?https://pbid.pro-market.net/engine?mimetype=img&du=19&csync=${profile_id}	false		high
https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=22&partneruserid=1724005921034811649&gdpr=0&gdpr_consent=	false		high
https://s.amazon-adsystem.com/dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=a1253c92-92e4-cc83-0bb0-ba5688131227	false		high
https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=116&partneruserid=njquBca-QhUZqz9ypfJV&gdpr=0	false		high
https://api.btloader.com/pv?tid=aQvxlqSC&w=5483815487668224&o=5098683085881344&cv=2.1.38-1-g3a5ff56&widget=false&r=false&vr=1280x907&pageURL=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Ffiles%2Fdocfetcher%2F1.1.25%2Fdocfetcher_1.1.25_win32_setup.exe%2Fdownload&sid=nZZIdvDKz&pm=false&upapi=true	false	Avira URL Cloud: safe	unknown
https://pbid.pro-market.net/engine?du=91;csync=209170804818002183636	false		high
https://api.btloader.com/pv?tid=2r5yo54xlW&w=5483815487668224&o=5098683085881344&cv=2.1.38-1-g3a5ff56&widget=false&r=false&vr=1280x907&pageURL=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Fpostdownload&sid=nZZIdvDKz&pm=false&upapi=true	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	low
https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=100&partneruserid=ec7ad717-1f8c-4815-8c2c-86fdc6330201&gdpr=0&gdpr_consent=	false		high
https://sync.mathtag.com/sync/img?mt_exid=15&redir=https%3A%2F%2Fdsum-sec.casalemedia.com%2Fcrum%3Fcm_dsp_id%3D3%26external_user_id%3D%5BMM_UUID%5D&us_privacy=&gdpr=&gdpr_consent=	false		high
https://www.google.com/ads/measurement/l?ebcid=ALh7CaRTwsiJVQZ4bDDtRcB7kq4pFrSNQL8wOFRR0TqwbGaAazPAGtmNiZyNuS7PhZw8XVNHaB0cYHuoU6whI1TJA9W6PSo0gA	false		high
https://ups.analytics.yahoo.com/ups/58292/sync?_origin=1&uid=9A176ADB-73F4-4BD8-A648-23F2443493B5&redir=true&gdpr=0&gdpr_consent=&verify=true	false		high
https://ad-delivery.net/px.gif?ch=2	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://creativecdn.com/cm-notify?pi=pubmatic&gdpr=0&gdpr_consent=&tc=1	false		high
https://s.company-target.com/s/eqx?sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D152%26partneruserid%3DPARTNER_USER_ID&gdpr=0&gdpr_consent=	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=32&partneruserid=2407834391265652961&gdpr=0&gdpr_consent=	false		high
https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=GTz-sRdlCHiHoCwUpfHuZQ	false		high
https://sync.ipredictive.com/d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent=	false	URL Reputation: safe	unknown
https://cms.analytics.yahoo.com/cms?partner_id=DATCS	false		high
https://dpm.demdex.net/ibs:dpid=22083&dpuuid=693098949688747066	false		high
https://ib.adnxs.com/getuid?https://tag.crsspxl.com/m.gif?anid=$UID	false		high
https://a.audrte.com/ddp?red=eyJ1IjoiaHR0cHM6Ly9ydGItY3N5bmMuc21hcnRhZHNlcnZlci5jb20vcmVkaXIvP2lzc2lcdTAwM2QxXHUwMDI2cGFydG5lcmlkXHUwMDNkMTQxXHUwMDI2cGFydG5lcnVzZXJpZFx1MDAzZDlmbFN5M25KNUl2UVdpYVlUY1UxMnY3WGciLCJkIjpbeyJuYW1lIjoiYWRmb3JtIn0seyJuYW1lIjoic21hcnQifV19&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://pm.w55c.net/ping_match.gif?scc=1&ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent=	false		high
https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=	false		high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNTQmdGw9NDMyMDA%3D&piggybackCookie=p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&pi=pubmatic&gdpr=0&gdpr_consent=&tc=1	false		high
https://sid.storygize.net/csr?r=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3Dm3k4T1aBLLPMpeMdFP9tJTiB%26source_user_id%3Dac45c3ec-c17b-4938-9811-6a9b00078f13	false	Avira URL Cloud: safe	unknown
https://www.google.com/ads/measurement/l?ebcid=ALh7CaRqsTio6mbrvBleuubzYc1bNiqyA0NAKCpC8DN6WFHPzJk1ZpBPjXX5quQvIC7RpU0eEik_ftf9dxTJrU4Hc9vJGYyQgw	false		high
https://a.audrte.com/match?uid=1899505890594565248&p=M501991648&r=https%3A%2F%2Fa.audrte.com%2Fp%3F&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://a.audrte.com/p	false	URL Reputation: safe	unknown
https://idsync.rlcdn.com/366518.gif?partner_uid=693098949688747066	false		high
https://us-u.openx.net/w/1.0/sd?cc=1&id=540245193&val=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent=	false		high
https://sourceforge.net/directory/tp3/?b=50727&c=9846&z=48052&cb=5a5b4d3b8a	false		high
https://us01.z.antigena.com/l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx%209A176ADB-73F4-4BD8-A648-23F2443493B5&rnd=RND	false	Avira URL Cloud: safe	unknown
https://ml314.com/imsync.ashx?pi=3642666937673580575&data=eyJwaCI6NDc4MSwid2giOjkwNywidGJzIjowLCJkdCI6MzAsInBpZCI6IjE3MTAxNTgyNDA1NjVfNmlxOTR0aWV3Iiwic2QiOjkwN30%3D	false	Avira URL Cloud: safe	unknown
https://sync.technoratimedia.com/services?uid=AAKPDU7L3eMAABWFZYx_mg&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fuserid%3D1899505890594565248%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dshr%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D5&gdpr=0	false	Avira URL Cloud: safe	unknown
https://idsync.rlcdn.com/362358.gif?google_error=15	false		high
https://pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=3&gdpr=0&gdpr_consent=	false		high
https://ad-delivery.net/px.gif?ch=1&e=0.07056342703533591	false	Avira URL Cloud: safe	unknown
https://id5-sync.com/k/155.gif?puid=AAKPDU7L3eMAABWFZYx_mg&id5AccountNum=155&numCascadesAllowed=9	false	Avira URL Cloud: safe	unknown
https://cms.analytics.yahoo.com/cms?partner_id=CROEL	false		high
https://match.adsrvr.org/track/cmf/generic?ttd_pid=crosspixel&ttd_tpi=1	false		high
https://i6.liadm.com/s/52164?bidder_id=5298&licd=&bidder_uuid=6ec76371-3031-4b49-abb3-349fb3d7cf23	false		high
https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=1973209972465453479	false		high
https://ssum-sec.casalemedia.com/usermatch?s=179394&cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D33%26partneruserid%3D&gdpr=0&gdpr_consent=	false		high
https://csync.smartadserver.com/diff/rtb/csync/CookieSync.html?hasrtb=true&nwid=4559&dcid=10&iscname=false&cname=&gdpr=0&gdpr_consent=	false		high
https://pbid.pro-market.net/engine?site=143572;mimetype=img;ddar;rn=257546669;mds=0-5	false		high
https://c.sf-syn.com/conversion_outbound_tracker/sf	false		unknown
https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=&google_error=15	false		high
https://match.prod.bidr.io/cookie-sync?gdpr=0&bee_sync_partners=sas%2Cpp%2Csyn%2Cshr&bee_sync_current_partner=pm&bee_sync_initiator=adx&bee_sync_hop_count=2	false	Avira URL Cloud: safe	unknown
https://tag.crsspxl.com/m.gif?tdid=71dcd657-b7ce-4e56-9064-0f83979f8fcb	false		high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0&gdpr=0&gdpr_consent=	false		high
https://dpm.demdex.net/ibs:dpid=575&dpuuid=-2533411667653603979	false		high
https://rtb-csync.smartadserver.com/redir/?partnerid=80&gdpr=0&partneruserid=VbPHRgW3lUdOvpMVAr6PFFq_wxdOsJYSBeXINTmx	false		high
https://match.adsrvr.org/track/cmf/generic?ttd_pid=stickyads&ttd_tpi=1	false		high
https://ml314.com/utsync.ashx?pub=&adv=&et=0&eid=771&ct=js&pi=&fp=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f&clid=&if=0&ps=&cl=&mlt=&data=&&cp=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Ffiles%2Fdocfetcher%2F1.1.25%2Fdocfetcher_1.1.25_win32_setup.exe%2Fdownload&pv=1710158201959_nopjhvr4s&bl=en-us&cb=6793859&return=&ht=&d=&dc=&si=1710158201959_nopjhvr4s&cid=&s=1280x1024&rp=&v=2.6.1.139	false	Avira URL Cloud: safe	unknown
https://bpi.rtactivate.com/tag/?id=20909&user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=6ec76371-3031-4b49-abb3-349fb3d7cf23&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy=	false		high
https://ib.adnxs.com/getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC}	false		high
https://image6.pubmatic.com/AdServer/UCookieSetPug?oid=1&rd=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dpmeb%26google_sc%3D1%26google_hm%3D%23%23B64_16B_PM_UID%26google_redir%3Dhttps%25253A%25252F%25252Fimage8.pubmatic.com%25252FAdServer%25252FImgSync%25253Fsec%25253D1%252526p%25253D156578%252526mpc%25253D4%252526fp%25253D1%252526pu%25253Dhttps%2525253A%2525252F%2525252Fimage4.pubmatic.com%2525252FAdServer%2525252FSPug%2525253Fp%2525253D156578%25252526sc%2525253D1&google_push=AXcoOmTLLecfdkrh8XrNPYiAPAHUwxHVMhTH1d0UNuIjnx8DR10Q3My5E6JHgA0mCRvJF6fv9E6bjO0c0X7rrMgtMidlBVftkh4PIND4YZhI6BrRZvgWRtBTM2-gAzKfJnQW9vG9Jnk25EePyQMXInZH8Ug	false		high
https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPUc21b156e4d4f4c8381b77a05c19b0a40	false		high
https://aa.agkn.com/adscores/g.pixel?sid=9212308278&puid=9A176ADB-73F4-4BD8-A648-23F2443493B5	false		high
https://sourceforge.net/directory/tp3/?b=69513&c=13409&z=66895&cb=8b302bed4f	false		high
https://image8.pubmatic.com/AdServer/ImgSync?p=156557&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID	false		high
https://sync.mathtag.com/sync/img?mt_exid=3&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA%3D%3D%26piggybackCookie%3Duid%3A%5BMM_UUID%5D	false		high
https://cdn.ampproject.org/rtv/012402262017000/v0/amp-form-0.1.mjs	false		high
https://match.sharethrough.com/sync/v1?source_id=vyXkw8rSq3j4JmKvTgxR3x1c&source_user_id=AAKPDU7L3eMAABWFZYx_mg&gdpr=0	false		high
https://match.sharethrough.com/sync/v1?source_id=kzFyzzqXEqukMDumpVLB6Eq3&source_user_id=212349963528473	false		high
https://hb.yahoo.net/cksync.php?cs=1&type=58280&ovsid=b6baf5b6-3516-4c46-a708-53e0ec193a37	false		high
https://match.prod.bidr.io/cookie-sync?gdpr=0&userid=1899505890594565248&gdpr=0&bee_sync_partners=pm&bee_sync_current_partner=pp&bee_sync_initiator=pm&bee_sync_hop_count=3&ev=AAKPDU7L3eMAABWFZYx_mg&pid=558502&do=add&gdpr=0	false	Avira URL Cloud: safe	unknown
https://cms.quantserve.com/dpixel?a=p-n5vvLvRdjg0ek&eid=0&qc_google_push=&google_push=AXcoOmTa_gSi2JFhTeHRn12ihR9fb9XQNVE2Lw9h-mUYB_aANnW7qavoKpGGc6iXvbxCgv1huRCHq8HwXCqD3NLMWU3bF1Ct_vzBjHA3hvBnJChYq9-wT03HN12vOWMDqfKZboLQYRaZ2tsy7JdbqhBKAUiu	false		high
https://r.casalemedia.com/rum?cm_dsp_id=64&external_user_id=e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&gdpr=0&gdpr_consent=	false		high
https://ups.analytics.yahoo.com/ups/58292/sync?_origin=1&uid=9A176ADB-73F4-4BD8-A648-23F2443493B5&redir=true&gdpr=0&gdpr_consent=	false		high
https://www.google.com/pagead/drt/ui	false		high
https://bh.contextweb.com/bh/rtset?pid=560288&ev=1&rurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D92%26partneruserid%3D%25%25VGUID%25%25&gdpr=0&gdpr_consent=	false		high
https://spl.zeotap.com/?zdid=1332&zcluid=ec1562c92b86ee97	false		high
https://ssum-sec.casalemedia.com/usermatch?cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D33%26partneruserid%3D&gdpr=0&gdpr_consent=&s=179394&C=1	false		high
https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent=	false		high
https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=55881087&p=162538&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=	false		high
https://sourceforge.net/directory/tp3/?b=69707&c=13445&z=67089&cb=79bed62052	false		high
https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=66&partneruserid=0a42220400c08ec15f936285&gdpr=0&gdpr_consent=	false		high
https://ce.lijit.com/merge?pid=5110&3pid=693098949688747066	false		high
https://wt.rqtrk.eu/?pid=58a76248-f101-4e52-b8f7-c4de9362ea12&src=www&type=100&sid=0&uid=1899505890594565248&gdpr_pd=0&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://bugreport.sun.com/bugreport/	javaw.exe, 00000010.00000002.2382654249.000000001A41D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://java.oracle.com/	javaw.exe, 00000010.00000002.2382654249.000000001A423000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.slf4j.org/codes.html#substituteLogger	javaw.exe, 00000010.00000003.1654212949.0000000048356000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1815567015.000000004840C000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2382654249.000000001A68A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.apache.org/licenses/LICENSE-2.0.txt	javaw.exe, 00000010.00000002.2420672413.0000000047E7F000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2382654249.000000001A6F5000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2424031740.00000000480C5000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1658755110.0000000047FD7000.00000004.00000020.00020000.00000000.sdmp	false		high
http://nsis.sf.net/NSIS_Error	docfetcher_1.1.25_win32_setup.exe, 0000000D.00000003.1579269959.00000000004D5000.00000004.00000020.00020000.00000000.sdmp, docfetcher_1.1.25_win32_setup.exe, 0000000D.00000000.1503044316.000000000040A000.00000008.00000001.01000000.00000006.sdmp, docfetcher_1.1.25_win32_setup.exe, 0000000D.00000002.1599715572.000000000040A000.00000004.00000001.01000000.00000006.sdmp	false		high
http://sourceforge.net/tracker/?group_id=197779&atid=9628348	javaw.exe, 00000010.00000003.1654854384.000000004921F000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www-archive.mozilla.org/projects/intl/UniversalCharsetDetection.html	javaw.exe, 00000010.00000003.1654854384.0000000049264000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1761653346.000000004927C000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2436273801.000000004927C000.00000004.00000020.00020000.00000000.sdmp	false		high
http://pdfbox.apache.org	javaw.exe, 00000010.00000002.2420672413.0000000047E7F000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2382654249.000000001A6F5000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2424031740.00000000480C5000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1658755110.0000000047FD7000.00000004.00000020.00020000.00000000.sdmp	false		high
http://sourceforge.net/tracker/?group_id=197779&atid=962834	javaw.exe, 00000010.00000003.1654854384.0000000049264000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2382654249.000000001A48C000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1761653346.000000004926F000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1761653346.000000004927C000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2424031740.00000000480C5000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2436273801.000000004927C000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1609586607.000000004813B000.00000004.00000020.00020000.00000000.sdmp, Resource_pt.properties.13.dr	false		high
http://lists.gnupg.org/pipermail/gnupg-devel/1999-September/016052.html	javaw.exe, 00000010.00000002.2436273801.0000000048F54000.00000004.00000020.00020000.00000000.sdmp	false		high
http://javolution.org	javaw.exe, 00000010.00000002.2372816529.00000000052CF000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000010.00000002.2420672413.0000000047EDE000.00000004.00000020.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://sourceforge.net/projects/docfetcher/	javaw.exe, 00000010.00000002.2436273801.0000000049264000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1654854384.0000000049264000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000010.00000003.1761653346.000000004926F000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.inform-fiction.org/	javaw.exe, 00000010.00000002.2436273801.0000000048F54000.00000004.00000020.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.24.173	a.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
216.22.16.5	unknown	United States	30633	LEASEWEB-USA-WDCUS	false
130.211.23.194	api.btloader.com	United States	15169	GOOGLEUS	false
216.22.16.8	unknown	United States	30633	LEASEWEB-USA-WDCUS	false
44.236.19.27	unknown	United States	16509	AMAZON-02US	false
23.83.76.44	unknown	United States	395954	LEASEWEB-USA-LAX-11US	false
35.71.131.137	match.adsrvr.org	United States	237	MERIT-AS-14US	false
54.215.139.244	unknown	United States	16509	AMAZON-02US	false
44.218.18.183	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
107.178.254.65	pippio.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.8.161.245	bcp.crwdcntrl.net	United States	16509	AMAZON-02US	false
54.208.174.31	elb-aws-va-proclivity-712001148.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
52.9.139.67	unknown	United States	16509	AMAZON-02US	false
34.192.240.196	crb.kargo.com	United States	14618	AMAZON-AESUS	false
141.94.171.212	pixel.onaudience.com	Germany	680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
69.90.133.51	ums.acuityplatform.com	Canada	13768	COGECO-PEER1CA	false
18.244.214.61	s.ad.smaato.net	United States	16509	AMAZON-02US	false
51.222.241.106	wt.rqtrk.eu	France	16276	OVHFR	false
64.74.236.159	unknown	United States	22075	AS-OUTBRAINUS	false
35.186.154.107	cm-supply-web.gammaplatform.com	United States	15169	GOOGLEUS	false
35.230.38.116	um.simpli.fi	United States	15169	GOOGLEUS	false
74.214.196.131	sjc-direct-bgp.contextweb.com	United States	19189	PULSEPOINTUS	false
18.154.144.60	d3f1y6rso5ozvw.cloudfront.net	United States	16509	AMAZON-02US	false
104.17.217.204	dmp.truoptik.com	United States	13335	CLOUDFLARENETUS	false
204.237.133.120	pug-sv3c.pubmnet.com	United States	62713	AS-PUBMATICUS	false
35.84.163.233	unknown	United States	237	MERIT-AS-14US	false
172.67.41.60	btloader.com	United States	13335	CLOUDFLARENETUS	false
216.22.16.53	unknown	United States	30633	LEASEWEB-USA-WDCUS	false
34.102.163.6	ad.mrtnsvr.com	United States	15169	GOOGLEUS	false
143.244.208.184	sid.storygize.net	United States	174	COGENT-174US	false
18.154.206.74	synchroscript.deliveryengine.adswizz.com	United States	16509	AMAZON-02US	false
34.255.246.57	a.audrte.com	United States	16509	AMAZON-02US	false
162.19.138.119	id5-sync.com	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
23.83.76.35	usw1.smartadserver.com	United States	395954	LEASEWEB-USA-LAX-11US	false
54.241.104.80	ad-interactions-prod-lb-1289981577.us-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
54.213.96.237	unknown	United States	16509	AMAZON-02US	false
52.34.118.204	unknown	United States	16509	AMAZON-02US	false
216.105.38.9	analytics.slashdotmedia.com	United States	6130	AIS-WESTUS	false
74.119.118.138	widget.da1.vip.prod.criteo.com	United States	19750	AS-CRITEOUS	false
52.52.237.208	unknown	United States	16509	AMAZON-02US	false
52.11.41.99	unknown	United States	16509	AMAZON-02US	false
45.137.176.88	sync.adotmob.com	Spain	60350	VPFR	false
52.9.62.96	unknown	United States	16509	AMAZON-02US	false
35.212.133.238	user-data-us-west.bidswitch.net	United States	19527	GOOGLE-2US	false
23.83.76.80	unknown	United States	395954	LEASEWEB-USA-LAX-11US	false
35.166.28.193	cdn.w55c.net	United States	16509	AMAZON-02US	false
34.117.77.79	ml314.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
18.214.54.215	unknown	United States	14618	AMAZON-AESUS	false
40.76.134.238	us01.z.antigena.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
3.211.2.230	idaas6.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
34.96.71.22	s.dsp-prod.demandbase.com	United States	15169	GOOGLEUS	false
52.94.220.185	aax-eu.amazon-adsystem.com	United States	16509	AMAZON-02US	false
104.18.36.155	r.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
82.145.213.8	outspot2-ams.adx.opera.com	United Kingdom	39832	NO-OPERANO	false
52.204.113.215	thrtle.com	United States	14618	AMAZON-AESUS	false
64.79.96.4	newcontinuum.dl.sourceforge.net	United States	53264	NCHC-603US	false
172.64.151.101	dsum.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
34.232.140.51	tag.crsspxl.com	United States	14618	AMAZON-AESUS	false
52.25.158.6	match.prod.bidr.io	United States	16509	AMAZON-02US	false
23.105.12.121	rtb-csync-use1.smartadserver.com	United States	30633	LEASEWEB-USA-WDCUS	false
204.68.111.105	downloads.sourceforge.net	United States	6130	AIS-WESTUS	false
51.222.241.145	unknown	France	16276	OVHFR	false
34.210.5.217	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
13.226.210.30	d1dvhck2p605dz.cloudfront.net	United States	16509	AMAZON-02US	false
107.178.240.89	pbid.pro-market.net	United States	15169	GOOGLEUS	false
35.171.70.242	rtb.adentifi.com	United States	14618	AMAZON-AESUS	false
104.254.151.68	ib.anycast.adnxs.com	United States	29990	ASN-APPNEXUS	false
104.254.151.69	unknown	United States	29990	ASN-APPNEXUS	false
34.111.113.62	pixel.tapad.com	United States	15169	GOOGLEUS	false
151.101.129.44	dualstack.tls13.taboola.map.fastly.net	United States	54113	FASTLYUS	false
69.194.240.13	sync.1rx.io	United States	6336	TURN-US-ASNUS	false
35.80.168.78	unknown	United States	237	MERIT-AS-14US	false
35.244.154.8	idsync.rlcdn.com	United States	15169	GOOGLEUS	false
192.184.67.84	global.px.quantserve.com	United States	27281	QUANTCASTUS	false
35.160.96.43	ds-pr-bh.ybp.gysm.yahoodns.net	United States	16509	AMAZON-02US	false
104.254.148.252	unknown	United States	29990	ASN-APPNEXUS	false
44.238.141.43	load-usw2.exelator.com	United States	16509	AMAZON-02US	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
193.122.128.135	adserver.technoratimedia.com	United States	31898	ORACLE-BMC-31898US	false
50.31.142.63	unknown	United States	22075	AS-OUTBRAINUS	false
142.250.101.105	www.google.com	United States	15169	GOOGLEUS	false
104.26.2.70	ad-delivery.net	United States	13335	CLOUDFLARENETUS	false
23.105.12.173	unknown	United States	30633	LEASEWEB-USA-WDCUS	false
52.8.138.210	btlr-us-west-1.sharethrough.com	United States	16509	AMAZON-02US	false
52.52.154.39	unknown	United States	16509	AMAZON-02US	false
192.184.67.70	unknown	United States	27281	QUANTCASTUS	false
142.251.2.147	unknown	United States	15169	GOOGLEUS	false
142.251.2.149	ad.doubleclick.net	United States	15169	GOOGLEUS	false
142.251.2.148	s0.2mdn.net	United States	15169	GOOGLEUS	false
54.201.134.102	prod-pdx-beacon-1406086907.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
67.202.105.21	pixel.33across.com	United States	32748	STEADFASTUS	false
172.64.150.145	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.141.156	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
35.214.235.183	envoy-hl.envoy-csync1.core-b8mf.ov1o.com	United States	19527	GOOGLE-2US	false
142.250.141.154	unknown	United States	15169	GOOGLEUS	false
52.27.232.237	io.narrative.io	United States	16509	AMAZON-02US	false
13.226.210.86	unknown	United States	16509	AMAZON-02US	false
54.165.23.128	sync.srv.stackadapt.com	United States	14618	AMAZON-AESUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1406549
Start date and time:	2024-03-11 12:56:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 10m 9s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	23
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.phis.evad.win@77/978@564/100
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 75% Number of executed functions: 73 Number of non-executed functions: 152

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 74.125.137.94, 142.251.2.101, 142.251.2.100, 142.251.2.102, 142.251.2.138, 142.251.2.113, 142.251.2.139, 142.251.2.84, 172.64.147.47, 104.18.40.209, 34.104.35.123, 23.61.213.14, 8.39.36.144, 8.39.36.194, 8.39.36.195, 142.251.2.95, 23.217.118.82, 23.217.118.8, 184.28.98.78, 184.28.98.98, 142.251.2.97, 13.107.42.14, 192.208.221.12, 142.250.101.132, 74.125.137.155, 74.125.137.157, 74.125.137.154, 74.125.137.156, 198.8.71.130, 151.101.194.49, 151.101.66.49, 151.101.130.49, 151.101.2.49, 35.84.154.24, 142.251.2.94, 205.180.86.204, 142.251.2.155, 142.251.2.157, 142.251.2.154, 142.251.2.156, 192.208.221.16, 23.217.118.177, 23.217.118.164, 185.167.164.39, 185.167.164.49, 198.8.71.131, 20.253.86.149, 38.71.2.235, 38.71.2.236, 184.28.98.73, 184.28.98.83, 184.28.98.69, 3.101.192.43, 3.101.192.21, 3.101.192.64, 3.101.192.53, 3.101.192.112, 3.101.192.102, 3.101.192.11, 3.101.192.74, 23.222.205.174, 96.17.208.60, 23.221.106.238, 72.21.81.240, 23.199.4.59, 142.250.101.94, 23.62.129.
Excluded domains from analysis (whitelisted): tags.bluekai.com.edgekey.net, d.turn.com.akadns.net, uipglob.trafficmanager.net, slscr.update.microsoft.com, a-us-west.rfihub.com.akadns.net, cdn-ns.cdn-prod-sas.akadns.net, usersync-geo-global.usersync-prod-sas.akadns.net, fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com, clientservices.googleapis.com, l-0005.l-msedge.net, e9126.x.akamaiedge.net, clients2.google.com, update.googleapis.com, a.fsdn.com.cdn.cloudflare.net, rtb-csync-geo.usersync-prod-sas.akadns.net, www.google-analytics.com, e9957.e4.akamaiedge.net, fonts.googleapis.com, fs.microsoft.com, content-autofill.googleapis.com, 2e364cc7caa3f2e10b0fb666ab9496ef.safeframe.googlesyndication.com, cdn.flashtalking.com.edgekey.net, a1944.d.akamai.net, pagead2.googlesyndication.com, od.linkedin.edgesuite.net, akns.sascdn.com.edgesuite.net, csync.smartadserver.com.edgesuite.net, edgedl.me.gvt1.com, servedby.flashtalking.com-v1.edgekey.net, fa43ad241d35ec2179c810415c543e64.safeframe.googlesyndicatio
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtEnumerateKey calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

Time	Type	Description
12:57:26	API Interceptor	1x Sleep call for process: javaw.exe modified
12:57:55	API Interceptor	408573x Sleep call for process: docfetcher-daemon-windows.exe modified

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	39424
Entropy (8bit):	5.590745748095932
Encrypted:	false
SSDEEP:	384:pW4/a5oD+Nn6iy58PQYQ5QRJIEnXKkm3i0tiQZq7BFSmbAyYbPODe:Pk4o1y584YQ5CR+Lq7umbAHPOi
MD5:	5D66247846EF8F577C318965D6036536
SHA1:	FFF0FFE2207E9B6826A30D8E52AAE72DB262EFBB
SHA-256:	53C4C2D690AC22238B52C816FA35E55E6BAC086E404090E06BDA3BFEA813359F
SHA-512:	EE6F4F36E6D8F784A24D287E93E1FCC59C4DA2AD1C88353FCEED5C3F74C5E352627AE2F2625413AE7A6432B6EDDC243710EE249760EBEA2AB3B5915DA8F53AED
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 4% Antivirus: Virustotal, Detection: 0%, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....5V.................@...V...............P....@..........................`............@... ..........................................@...........................................................................................................text....?.......@.................. .0`.data........P.......D..............@.0..rdata.......`.......F..............@.0@.bss.........p........................0..idata...............L..............@.0..rsrc....@.......B...X..............@.0.................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\DocFetcher\Readme.txt

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2496
Entropy (8bit):	4.847948754284904
Encrypted:	false
SSDEEP:	48:tgj7qJNNSkjnHd0srlTuIreGDApCjFUIrO+ixhUwoO8moP/WZWDeFAhOpvRVbOYR:ej7ANUkrdqejFAUw/oP/evNaYhYY
MD5:	1D593C423E2DEA8BA659BE149975938B
SHA1:	F017A0A17FF8760C913DA9FB385F118FC8178D99
SHA-256:	085F72094E0A11767E65C79E3826840F630613153D50359054B322D9716A6CA0
SHA-512:	A53F1E3B2CA38CDBF4628F8CD88C97EFD90AF7BB74F9BA5E5D1023B6CC59D3CD295590BB233CFF125E6EBED4E7C7726D13F9B7E0DD601E061512FDA7C10D27D9
Malicious:	false
Reputation:	low
Preview:	Requirements..========================================..A Java Runtime Environment (JRE), version 1.7 or higher, is required. To find..out what JRE version you have, open a command prompt and type in.."java -version". If Java 1.7 or higher is not available on your system, you..can obtain it in the following places:..- Windows: http://java.com..- Linux: In the official software repository of your distribution...- macOS: http://java.com......How to start DocFetcher..========================================..Windows:..If DocFetcher was installed (i.e. non-portable), launch it via the DocFetcher..shortcut in your start menu. If you're instead using the portable version of..DocFetcher, double-click on DocFetcher.exe...Note that portable DocFetcher may not work properly if you extract it into a..folder for which you don't have write permissions, e.g. into "C:\Program Files".....Linux:..Launch the program by double-clicking on DocFetcher-GTK2.sh or..DocFetcher-GTK3.sh. The difference between

C:\Program Files (x86)\DocFetcher\docfetcher-daemon-windows.exe

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	563621
Entropy (8bit):	6.051641503670973
Encrypted:	false
SSDEEP:	12288:bXQvQRm+JlSwDu+iVRmwsh5rkq4oSLqR6LADHPHARvdtAa7SHjJAx2RvwcEiX/3g:bXQvQRm+JlSwLkq4oSlASBwjJ3vm
MD5:	560CDB1150BB331C4571F45E51E2EADC
SHA1:	81238D25FA592E33FB7856015791E455E4D4A40B
SHA-256:	3141E92460330C645A910DC9A020E79F3E64E523814905B6E586524B439BE33C
SHA-512:	CD5B2F7A054CD2E2B21C5D5B2432C4196AB123B10C10338E3EE889AFB63388768103F091CCB2413865238C492CA54B2030A05E74E36271EED8BB549A7CA97A48
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 2% Antivirus: Virustotal, Detection: 7%, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...Z..J...."..........8.........`................@..........................`................ ..............................P.......................................................................................................................text...............................`..`.data...............................@....rdata..D9.......:..................@..@.bss....._...............................idata.......P......................@...........................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\DocFetcher\help\Chinese (China)\DocFetcher_Manual.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1165), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	14000
Entropy (8bit):	6.391908064304712
Encrypted:	false
SSDEEP:	384:C2crSW5TaBobXBh9tTiuAVqYCVqYdyC2L5qoSy89Hssk4:C2crF3rmu1YzYdF2LTvsX
MD5:	47EFFF085820D6DC8D0875B68D47276B
SHA1:	2AA54328EA02E7E7B30BF3DFB3B7AF96A48BC04C
SHA-256:	94E601120D2704C9E8AC13BCF9A4628273E52153D2222BF142AFEFD8930B41D3
SHA-512:	342F089BC5793AACD5B5AE22533DA2BD66A9F34F06CD4637C7B939259A0676E685B8E8DEF0092D69895D4787A5BBE3F0F8519931C7BD61450334EB285B1382F9
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher..</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="efeire" name="author">....<link rel="stylesheet" href="DocFetcher_Manual_files/style.css" type="text/css">...</head>...<body>....<div id="main">.....<div style="float: right; color: gray;">......DocFetcher 1.1.25<br/>.....</div>.....<h1>..</h1><p>DocFetcher..................................................Google...</p><p><strong>....</strong>: ...................DocFetcher....................Google.....................................................</p><p><stro

C:\Program Files (x86)\DocFetcher\help\Chinese (China)\DocFetcher_Manual_files\Indexing_Options.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1259), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	5256
Entropy (8bit):	6.311783978657674
Encrypted:	false
SSDEEP:	96:C81mLyjAJRERIGrcl5pzz3aRxXnGVOWMWzjmXvQEieZuDH8S:C81mLWAJK+Grypzz2XR3WzjOYEieUcS
MD5:	136C036ED032A8C699907EAEA22CF4D1
SHA1:	0CE412D6C5945CB565C7C10B4B734D6F89293FAB
SHA-256:	16A017D478B821E2073B3548564443480CB8BCFFD69CFE58ECF89D830DFF1627
SHA-512:	666418BF274533BC31ECB95EDAD7164F15C56DEE728D00B32A9329A1A98132494EC04FAC865064001055C98533FBCDBA00DA9B5E7E2B680B97F265A5FB04D88D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher.. - ....</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="efeire" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">....</a>....</div>....<div id="main">.....<h1>............</h1><p>...................................................................."+".............</p><p>.............".."..................................................</p><p>"+".....

C:\Program Files (x86)\DocFetcher\help\Chinese (China)\DocFetcher_Manual_files\Memory_Limit.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (664), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	2924
Entropy (8bit):	6.359765536727369
Encrypted:	false
SSDEEP:	48:CqTkjng0L5gk/hFLl5lZZlT1l5K/WVIPsLOKn4UpgxXu9l5BXMyyhtl5MSbzNO11:CGY3ZrXBTXgO1CBUOxCXzy1qsU7VzEJa
MD5:	628551F64B048A6F74A8E40F7EF93BF6
SHA1:	8FB73B5C5EED2AA3BAB463E0F949B696B50F573D
SHA-256:	89E9287DB7878C2CD1DEFDA393495DDB8D399014948E91C3871CB7D382997E59
SHA-512:	18498E62F6D20155AC9110C5EFF96581CBAC9A6B0D83B32AC6B3DEDC8A967F481BE504D11939E2F197494AE846C94D1C35BF6771BC674C8E21449A44D773794A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher.. - ........</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="efeire" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Caveats">....</a>....</div>....<div id="main">.....<h1>........</h1><p>DocFetcher........256MB...........................</p><h2>Windows</h2><p>Windows...DocFetcher.................................</p>.<ul>. <li>..DocFetcher...........DocFetcher.....................................DocFetcher......

C:\Program Files (x86)\DocFetcher\help\Chinese (China)\DocFetcher_Manual_files\Portable_Repositories.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1014), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	3884
Entropy (8bit):	6.38772699083753
Encrypted:	false
SSDEEP:	96:CVjS5khXQeG35Tso/3DkVp1JWRjPiaXFxN:CVjkk2eG35gowjhwX
MD5:	ECF26998F72C5A4C12F0C6F2640F7FA1
SHA1:	A0BB578378C84B6885ECDB60A666CE77D933835B
SHA-256:	CC76AB0F55068C6912D08674B0BF7573CB6C2BC8F3805BE3CC44B4525ADC6A0F
SHA-512:	E89B7E7BAE2130EA8E80851F5B7A167CCECFF5D15440C57E126CDAA34852D3639ABE4BD89FE1E8316903177DA52129E8CF8C1D3562763F5122D9299D724DBD7E
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher.. - ........</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="efeire" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">....</a>....</div>....<div id="main">.....<h1>........</h1><h2>....</h2><p>DocFetcher......................................................<a href="http://docfetcher.sourceforge.net">....</a>...</p><p>............; .............................................DocFetcher.Windows...Doc

C:\Program Files (x86)\DocFetcher\help\Chinese (China)\DocFetcher_Manual_files\Preferences.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	2755
Entropy (8bit):	6.095853870591095
Encrypted:	false
SSDEEP:	48:CqTGjnJY6Kna3aWs9a0xYqueBXlqCFQ90T6aDO4vNBDCvNBDzEo/RitIqnV:CJYFnrWdyYqhB1q4SeNVQNV8I6
MD5:	68E973123727E56DE4A964E9186EE54D
SHA1:	D376C1BD6F3037FF0BABC348F151C9B13A7FA72C
SHA-256:	E47BEF3143020E8C4B64F9624D5F4A8DFB1B4391431062D476F1B327F6E5F50A
SHA-512:	FD0E676409E22606E611C5A78BE9D99C28A1FBF7F8C398C036875378D5317E7F9451C1A8F267D84EB89F0330C0E7D0F23404A1887DA2DC8163FBE669F8B32250
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher.. - ..</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="efeire" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Subpages">....</a>....</div>....<div id="main">.....<h1>....</h1>.<table>. <thead>. <tr>. <th>.. </th>. <th>..</th>. </tr>. </thead>. <tbody>. <tr>. <td>....... </td>. <td>.DocFetcher.............</td>. </tr>. <tr>. <td>......OR............AND.</td>. <td>.....DocFetcher.............<code>OR</code>...... ......<code>AND</code>.... ..........<a href="Que

C:\Program Files (x86)\DocFetcher\help\Chinese (China)\DocFetcher_Manual_files\Query_Syntax.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1112), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	7729
Entropy (8bit):	6.185843391329085
Encrypted:	false
SSDEEP:	192:CJs+OskD3CwlMcAbXeep+HOh5sE1vJuQMmZhmK+:CJs+T2V+bbTM65s2EQMmyK+
MD5:	E6AC0B55F2D8A618F588305107C06A17
SHA1:	9B90B5231F7BB94751D8DD00B09C16701A789D68
SHA-256:	667C9AA5BB071BECC83FAD8D461431BF162B6D9E6F328A47BFCD5B556B996658
SHA-512:	09A3597B122B3EF0BB446902BEA425423E9461E87B948FC24ACABC3C396A05A1FD3BA522A6DDAA3D513989F5C3147C4219B6D079DE73FF7E87DDE9E4E79EAEEC
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher.. - ....</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="efeire" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">....</a>....</div>....<div id="main">.....<h1>....</h1><p>..............................DocFetcher......Apache Lucene.....Lucene.<a href="http://lucene.apache.org/java/3_4_0/queryparsersyntax.html">......</a>.............</p><h2>.....</h2><p>DocFetcher.......<code>OR</code>.<code>AND</code>.<code>NOT</code>.......<em>..</em>......DocFetcher........<code>OR</

C:\Program Files (x86)\DocFetcher\help\Chinese (China)\DocFetcher_Manual_files\Regular_Expressions.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2345), with CRLF line terminators
Category:	dropped
Size (bytes):	4864
Entropy (8bit):	6.319839901397192
Encrypted:	false
SSDEEP:	96:CdBX6g+9Ztas44yOUxqfOSEnCHTHF06PD5ejdKNjrhy+JIEQ:CdBX6lfIVnUbHbF06PcCj0lV
MD5:	6719DF7B80BD49AB0CAA8BECFAE2B604
SHA1:	B90606B65B11A4B9D1E082A581E321E25CBA3D1D
SHA-256:	CF8CC5B1024EE4F0859DC2ADEF2D0CDC65C5C87F2EEA90C6E4E9E78C8F1EDE94
SHA-512:	77AFB75A2663D0F3666C589B822CA617DBACA4DBA3C0599DB44FF0DFC68D0A82A2F00580C9033A4A638291727D82BFC27366C7E11264FBC161FB4B8B0621B180
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher.. - .....</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="efeire" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">....</a>....</div>....<div id="main">.....<h1>....</h1><p>........................................................................; .............................</p><h2>....Microsoft Excel...<code>.*\.xlsx?</code></h2><p>....................................<strong>

C:\Program Files (x86)\DocFetcher\help\Chinese (China)\DocFetcher_Manual_files\Release_Notification.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	dropped
Size (bytes):	827
Entropy (8bit):	5.824170718411924
Encrypted:	false
SSDEEP:	24:hMC6vyTvCztqqVQwiEsTY8loPv7o/Qwiy:CqTajnh+v/nt
MD5:	0405D2D5051529F4FF50BF7B9653F819
SHA1:	789E6E70F930E62EE67ED16A6C014AF54F966166
SHA-256:	77B70D6D9102D63C43045302F3AD6E779268931F89F599F8FBE3F53B42A54BAB
SHA-512:	9F9086FB883FECC9D7574769F905CCE499132129357B7B06B5535F9F2AF210CA3CE7D3027CAB4762012058DD4E7F87210EAB9EE68264C35E3BF758DF052C606A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher.. - ....</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="efeire" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">....</a>....</div>....<div id="main">.....<h1>....</h1><p>....DocFetcher.........<a href="http://sourceforge.net/projects/docfetcher">http://sourceforge.net/projects/docfetcher</a>............</p>....</div>....<div class="footer">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">....</a>....</div>...</body>..</html>..

C:\Program Files (x86)\DocFetcher\help\Chinese (China)\DocFetcher_Manual_files\Watch_Limit.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	1325
Entropy (8bit):	6.383175418017072
Encrypted:	false
SSDEEP:	24:hMC6vyT9dVLOCztqqVQwios9dVLHLPLhslKeK6cZALKdsn0rN8mqiyV0R38MKT+C:CqT9ddjnJSdBbLhslK84AGdsnQsedFKB
MD5:	7967E132ECB8C77F150C5D72388AFFF5
SHA1:	0D50D29840594FB59236AB51DCFA39CE4806CCC7
SHA-256:	374258BA7FB2FA14124B23E5926ECA8AFBA877D9F560CEA19278210D2F593ACD
SHA-512:	8B02E103355F226533563CF4DDE7E48009C7346F1FC08C63317ADC36932267273E4CD1C7532F8101393FF7782D586E8AEA48CF436053C079869D643EF4FC429B
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher.. - ............Linux.</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="efeire" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Subpages">....</a>....</div>....<div id="main">.....<h1>............Linux.</h1><p>.Linux...............8192........................................DocFetcher.........................................................32000.</p>.<pre><code>sudo echo 32000 > /proc/sys/fs/inotify/max_user_watches

C:\Program Files (x86)\DocFetcher\help\Chinese (China)\DocFetcher_Manual_files\bullet.png

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PNG image data, 6 x 6, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	167
Entropy (8bit):	5.440385043794193
Encrypted:	false
SSDEEP:	3:yionv//thPlHl1fMLts2m2/uDlhlbz22tdllF9R9QEC3kiHKZqH/JltB1p:6v/lhPlfMRFB/6TxltnlFaECoqfJltjp
MD5:	9DDD21AE4DE2B5F02FAF4BC4CD38E626
SHA1:	25B4A39471C1B1B8D0C606306E5E3BD3D6861DE3
SHA-256:	EFB34ABB60F2695FC30721B5FDAEEEE93908C2C386159C9B16FE397A22A171F4
SHA-512:	6A89D9CD546F4BDE33B97D61FACAB79CCDEE6840AE632708050EFFA022D45D3347494D74B8A3045EA9713E34711578A3BEC5B3C018CC490A5D9B716348A7861A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............o.x.....sRGB.........pHYs.................tIME.....+3.gX.....tEXtComment.Created with GIMPW.......IDAT..c...g@.L....B......iO.....IEND.B`.

C:\Program Files (x86)\DocFetcher\help\Chinese (China)\DocFetcher_Manual_files\style.css

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	1162
Entropy (8bit):	5.001094128497315
Encrypted:	false
SSDEEP:	24:UhuRknUSuE3ajUBEuECjwHWPi7u8Sn7T+smAe7BAlzaQlZ1H6kxLdUldFv:UoiuEqIEuEcw24VyzaQlZ1+V
MD5:	A78F0EB0A442B9D36992E1C597A4E08D
SHA1:	9451330033F306E82E06DEBFBA34849A565695AC
SHA-256:	0689C72CC66BCD159BAAB231957E1A6D1235D0D1A8E82243CA854167C7A81306
SHA-512:	880B54E996C9B38EF655570C9384759F66159EFE6EE3CDC605F59B0F31B7053E0E5382D35EB592478F23D6D7D6DAC2DC4569B0A8B33A9E5C3A21A920CF84AC1B
Malicious:	false
Reputation:	low
Preview:	body {..font:95% Helvetica;..margin-left: auto;..margin-right: auto;..padding: 10px;.}..div#main {..text-align: left;..list-style-position: outside;..margin-bottom: 20px;.}..div.header {..text-align: center;..border-bottom: medium silver solid;..padding: 10px;..margin-bottom: 20px;.}..div.footer {..text-align: center;..border-top: medium silver solid;..padding: 10px;.}..div#main, div.header, div.footer {..max-width:640px;..margin-left:auto;..margin-right:auto;..width:expression(document.body.clientWidth > 640? "640px": "auto" );.}...p-label {..font-weight: bold;.}..a {..text-decoration: none;..color: blue;.}..a:hover {..text-decoration: underline;.}..h1 {..font-size: 125%.}..h2 {..font-size: 100%.}..ul {..list-style-image: url(bullet.png);.}..ul.level2 {..margin-left: 10px;..padding-left: 10px;.}..li {..padding-top: 2px;..padding-bottom: 2px;.}..table {...padding: 0;...border: 1px solid silver;...border-collapse: collapse;...text-align: center;..width: 100%..}...table th {...padding: 8

C:\Program Files (x86)\DocFetcher\help\Chinese (Hong Kong)\DocFetcher_Manual.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (979), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	13390
Entropy (8bit):	6.404156632065406
Encrypted:	false
SSDEEP:	384:C6crSYaBoLX1t9tTiMfVqYdyC2KqoSyDcHsUg:C6crrvrmMkYdF2itH
MD5:	C4FE8B88C858FBBB0B47C13C2CFB00F7
SHA1:	F66E361243B902834B3EDCEB660BC0604D20E93F
SHA-256:	8371B18D1BB5EAA63B77B4C2229B4BE179DF733BA660B67CC450B22276DF8A54
SHA-512:	17335B884118721FBB9A2B991FBCA5B3D254E68F8F83B99D0A5FD90D6FE865206AECBDAB5A603BE2D1F01D483DE151BED723085349E1629A3A2C746F85ECE684
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher ..</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="..." name="author">....<link rel="stylesheet" href="DocFetcher_Manual_files/style.css" type="text/css">...</head>...<body>....<div id="main">.....<div style="float: right; color: gray;">......DocFetcher 1.1.25<br/>.....</div>.....<h1>..</h1><p>DocFetcher..................................................Google...</p><p><strong>....</strong>: ...................DocFetcher....................Google.....................................................</p><p><

C:\Program Files (x86)\DocFetcher\help\Chinese (Hong Kong)\DocFetcher_Manual_files\Indexing_Options.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3740), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	5964
Entropy (8bit):	4.839567476538516
Encrypted:	false
SSDEEP:	96:CuMobnjJ6b2fGNR6Zw/l9QRCinrvOXQR/yy+kIUYWqgd7NbPhBJ/5Qq4UqebEM:CuMOI2GSsCr+K/yFUKe5pPPzR
MD5:	0ABE738C9D30178C16E16C079EB48771
SHA1:	1A1341BE0B39CD3DF88F35A0026DA62557AEC83B
SHA-256:	B44F9FA0D1E71865A62DCC00E49C0A0A63D8B427C4E282E831471B410B2A814D
SHA-512:	39CE00285CE6F881548A541BA9BB61D41DCAE8A71B1560BCEA8E6F2F342B50B7741C1CBD084B5F8038082CD616B1C5B4268A8A85FEAB127EB8A93AE46091739E
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher .. - ....</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="..." name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">....</a>....</div>....<div id="main">.....<h1>Basic Idea: A Queue of Indexing Tasks</h1><p>The indexing configuration window is made up of one or more tabs, each of which represents an index to be created or updated. All the tabs together form a task queue, whose items are processed one by one. You can add more tasks to the queue via the <code>'+'</code> button on the top right.</p><p>Each tab has a <code>Run</code> button on the bottom right. By clicking it, you confirm that the task is properly configured and ready for indexing. The indexing st

C:\Program Files (x86)\DocFetcher\help\Chinese (Hong Kong)\DocFetcher_Manual_files\Memory_Limit.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1310), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	3129
Entropy (8bit):	5.088688117682296
Encrypted:	false
SSDEEP:	48:CqTk1na9smzFxOer7dv/3+h3nP0WVr1GgCA5i/r+moFfzE1/1q2Ya+PzifKMM4AY:Co1xI+vmN7XCAcjhYRz/an
MD5:	70358B4589157F2ED880983A088AA21D
SHA1:	B89CD3F3995F933EA8494444F45278B732D9A24C
SHA-256:	D8FACAE29133330CF2413496F421066E7D3711070692316FA6A9EE0C1DA812E6
SHA-512:	7305310C285D13A6790A9996BB5D373CE6169A00151D726D5ADD399CBE9E10CB45204D457136EB1F1C288A0EA59AB136A5B8265697DA1EF9791DBE5EE6E263E5
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher .. - ........</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="..." name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Caveats">....</a>....</div>....<div id="main">.....<h1>How to raise the memory limit</h1><p>DocFetcher has a default memory limit of 256 MB, which is set on startup. The limit can be raised by fiddling with the platform-specific launchers:</p><h2>Windows</h2><p>The Windows version of DocFetcher ships with ready-made alternative launchers that set different heap sizes. Follow these steps to use them:</p>.<ul>. <li>Open the DocFetcher folder. If you're using the portable version of DocFetcher, this is just the folder you downloaded and unpacked. If you'r

C:\Program Files (x86)\DocFetcher\help\Chinese (Hong Kong)\DocFetcher_Manual_files\Portable_Repositories.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1252), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	4265
Entropy (8bit):	4.964318997176346
Encrypted:	false
SSDEEP:	96:CGPl+L7ahr+68jqLeisoHXVP5FAsiSRoCCpchGk:CG96atN8jqNqai/cMk
MD5:	08000332588D68C13A52D0B43DF74F88
SHA1:	7C2EA28E3BA22C0B91D1E615564CA2A0144EA36C
SHA-256:	EDF51DADF28AB63D4CB078B7C226362F37E3BF99697ECBC276C90B39BDF19A72
SHA-512:	3FF45C05346792F088092D91B0E42EA6D6F73EFB94799C792198C1C936A4695F725E158A769C68EF84FB2D64454A6A300C5385EF82C7FC3AE15173F1EAE739BD
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher .. - .......</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="..." name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">....</a>....</div>....<div id="main">.....<h1>Portable Document Repositories</h1><h2>Basic usage</h2><p>The portable version of DocFetcher essentially allows you to carry around (and even redistribute) a fully indexed and fully searchable document repository. If you don't have the portable version yet, you can download it from the <a href="http://docfetcher.sourceforge.net/download.html">project website</a>.</p><p>The portable version does not require any installation; just extract the contents of the archive into a folder of your choice. You ca

C:\Program Files (x86)\DocFetcher\help\Chinese (Hong Kong)\DocFetcher_Manual_files\Preferences.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	2920
Entropy (8bit):	4.850639029606164
Encrypted:	false
SSDEEP:	48:CqTtL1njY7jdMnVTJ9deD2eev5M725lo15kJb0tP6HxN0DTudaCzeAoqnz:CkpYiheD2j5Uolo1Sb9HMkaLAog
MD5:	1AD6C7172B1C851CDABB434676A15145
SHA1:	E8A94EE2D0942A7C615080AC8DF52B29B8166877
SHA-256:	64458A4C0269895133F434DDA05FAC5818D7BFEDA5C605FEC8EF1C25FCF749C5
SHA-512:	7CBBCBC8621AFDC6295BE46B16F4A4138B408F49805BDAAF9BC2F5B7BF677408FC166C93948F13A98766640F106DC934A14DA8662A32374458932B7216E7F859
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher .. - ...</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="..." name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Subpages">....</a>....</div>....<div id="main">.....<h1>Preferences</h1>.<table>. <thead>. <tr>. <th>Option </th>. <th>Comment</th>. </tr>. </thead>. <tbody>. <tr>. <td>Show manual on startup </td>. <td>Whether to open the manual when DocFetcher starts up.</td>. </tr>. <tr>. <td>Use OR operator as default in queries (instead of AND) </td>. <td>If checked, DocFetcher will treat consecutive words in a query as if they were concatenated with the <code>OR</code> operator. Otherwise, the <code>AND</code> operator will be used. See

C:\Program Files (x86)\DocFetcher\help\Chinese (Hong Kong)\DocFetcher_Manual_files\Query_Syntax.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2369), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	8842
Entropy (8bit):	4.829668527292376
Encrypted:	false
SSDEEP:	96:CFqrFBapC7B/CYFQ2oOZNCnfz0KyXZ2W1w7KmVHHwuE5lOr2itPYZN9iQBm9XjSR:CFqGI/GUKytJB4qFHnNwAm9N+/
MD5:	456F57D50617870EE3E39D911123EA47
SHA1:	8458B8A3448E4B9D55E6A9769C50DCF64F8F62F5
SHA-256:	3E948693A0D49CC1F49AAF20CB0A9903B5D75FF29531A17F4FD98CD8ED2C9E4A
SHA-512:	447C9997CF7CFB49E13A1C475E38D1445298C333527422216C8D3A5CF627025115696743F6E5D4DEB3A83C8E2A3E53D5271AEEE2B74F8B41013430FDCA9373BE
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher .. - ....</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="..." name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">....</a>....</div>....<div id="main">.....<h1>Query Syntax</h1><p>This page gives an overview of the available query syntax, going from "basic" to "advanced". The query syntax is provided by Apache Lucene, DocFetcher's underlying search engine, and it's described in a more technical manner on Lucene's <a href="http://lucene.apache.org/java/3_4_0/queryparsersyntax.html">query syntax page</a>.</p><h2>Boolean Operators</h2><p>DocFetcher supports the boolean operators <code>OR</code>, <code>AND</code> and <code>NOT</code>. If words are concatenated <em>witho

C:\Program Files (x86)\DocFetcher\help\Chinese (Hong Kong)\DocFetcher_Manual_files\Regular_Expressions.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (4538), with CRLF line terminators
Category:	dropped
Size (bytes):	5157
Entropy (8bit):	4.9631565609325445
Encrypted:	false
SSDEEP:	96:C7SgMWyBxj0nfE5CvnFwMnwLFT2MeKIWZqHeNy/IfCzhJE6c7VNMQg3:C7HMWs2nrwLJ2WZly/8Cw6m9g3
MD5:	6340F34913C3A5C7F1D696EFC8492353
SHA1:	91104150EF9ECB4D7AAB8822029B4D433742D852
SHA-256:	95D4BB98EE4CD19D8E632D515F55D51862AF689E7493F14E142814C579EFDD88
SHA-512:	78267C403DC2A625C794A476631D79DB49F247C8F348275B552C3613CA11D512E2FA9BA5553DAE7F0872D1482D5C9F22DA1858120025752DEF2F880D49C9128B
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher .. - .....</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="..." name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">....</a>....</div>....<div id="main">.....<h1>Regular Expressions</h1><p>This page is meant to be a very brief introduction to regular expressions. It is by no means exhaustive, since regular expressions basically represent an entire pattern matching language. If you want to dig deeper, you can find a ton of information about it on the internet; just search for 'regular expression tutorial' or 'regular expression introduction' or something like that.</p><h2>Matching all Microsoft Excel files: <code>.*\.xlsx?</code></h2><p>In regular expressions (often

C:\Program Files (x86)\DocFetcher\help\Chinese (Hong Kong)\DocFetcher_Manual_files\Release_Notification.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (433), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	2042
Entropy (8bit):	5.1982941485703575
Encrypted:	false
SSDEEP:	48:CqTL1nrSEGwi+HKWM+lIyLsQWxRidgG4sY1XTcWOaLn7:CMSEq3UVWxEeG4sG
MD5:	23974DF9FB5D01B759CED633BDA5DD11
SHA1:	3B66388751D28A1AED43497AD501F2914467D413
SHA-256:	853727507901974269700D3520CDD5E48C7F4E80EB9A7DB27D7A66826849AD0E
SHA-512:	4649F40D97B162BF4987EA5B7C66F8A543F0D263F74913ACCCE35CEB3A74117C5979C1F92BA73D1766527408CD84E84B4DFDBF693C613FB8A2D4D723F649A150
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher .. - .....</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="..." name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">....</a>....</div>....<div id="main">.....<h1>Release Notification</h1><p>There are several ways for you to receive notification of new DocFetcher releases:</p>.<ul>. <li><strong><em>Email via sourceforge.net</em></strong>: On <a href="http://sourceforge.net/projects/docfetcher">http://sourceforge.net/projects/docfetcher</a>, there's an <code>Update Notifications</code> box, where you can enter your email address in order to receive release notifications.</li>. <li><strong><em>Email via freecode.com</em></strong>: New DocFetcher releases are usually

C:\Program Files (x86)\DocFetcher\help\Chinese (Hong Kong)\DocFetcher_Manual_files\Watch_Limit.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (416), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	1321
Entropy (8bit):	5.433741854094403
Encrypted:	false
SSDEEP:	24:hMC6vyTCUJcCztBCqVQwiSsTc4hc54oI5bSmqiCm8ZLZFOQWQwic:CqT9J11njdFWoOt2Mnz
MD5:	68A0F9E63BD2E34673C0968040B348B2
SHA1:	5925158FF4B1EE815EE35C6FCDB95D871A7D33A2
SHA-256:	128371535A49331F68B1DB2987D72CE852395A75682E616950CCE488DB74DD50
SHA-512:	B4C903DC4230354FF779D52E50DD1ED1CF147895188B7390154AAD1141DC3EE028F3F96590713037396B7E395556E77BC97D4DE291E761B0CD1DCE0590C0E7BB
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher .. - ........watch limit (Linux)</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="..." name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Subpages">....</a>....</div>....<div id="main">.....<h1>How to raise the folder watch limit (Linux)</h1><p>On Linux, processes can by default watch at most 8192 folders. You might reach this limit if you index a very deep hierarchy of folders. If that happens, DocFetcher will probably show a "No space left on device" error message. You can work around this by raising the watch limit. For example, this command will temporarily raise the watch limit to 32000:</p>.<pre><code>sudo echo 32000 > /proc/sys/fs/inotify/max_user_watches.</code></

C:\Program Files (x86)\DocFetcher\help\Chinese (Hong Kong)\DocFetcher_Manual_files\bullet.png

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PNG image data, 6 x 6, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	167
Entropy (8bit):	5.440385043794193
Encrypted:	false
SSDEEP:	3:yionv//thPlHl1fMLts2m2/uDlhlbz22tdllF9R9QEC3kiHKZqH/JltB1p:6v/lhPlfMRFB/6TxltnlFaECoqfJltjp
MD5:	9DDD21AE4DE2B5F02FAF4BC4CD38E626
SHA1:	25B4A39471C1B1B8D0C606306E5E3BD3D6861DE3
SHA-256:	EFB34ABB60F2695FC30721B5FDAEEEE93908C2C386159C9B16FE397A22A171F4
SHA-512:	6A89D9CD546F4BDE33B97D61FACAB79CCDEE6840AE632708050EFFA022D45D3347494D74B8A3045EA9713E34711578A3BEC5B3C018CC490A5D9B716348A7861A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............o.x.....sRGB.........pHYs.................tIME.....+3.gX.....tEXtComment.Created with GIMPW.......IDAT..c...g@.L....B......iO.....IEND.B`.

C:\Program Files (x86)\DocFetcher\help\Chinese (Hong Kong)\DocFetcher_Manual_files\style.css

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	1162
Entropy (8bit):	5.001094128497315
Encrypted:	false
SSDEEP:	24:UhuRknUSuE3ajUBEuECjwHWPi7u8Sn7T+smAe7BAlzaQlZ1H6kxLdUldFv:UoiuEqIEuEcw24VyzaQlZ1+V
MD5:	A78F0EB0A442B9D36992E1C597A4E08D
SHA1:	9451330033F306E82E06DEBFBA34849A565695AC
SHA-256:	0689C72CC66BCD159BAAB231957E1A6D1235D0D1A8E82243CA854167C7A81306
SHA-512:	880B54E996C9B38EF655570C9384759F66159EFE6EE3CDC605F59B0F31B7053E0E5382D35EB592478F23D6D7D6DAC2DC4569B0A8B33A9E5C3A21A920CF84AC1B
Malicious:	false
Reputation:	low
Preview:	body {..font:95% Helvetica;..margin-left: auto;..margin-right: auto;..padding: 10px;.}..div#main {..text-align: left;..list-style-position: outside;..margin-bottom: 20px;.}..div.header {..text-align: center;..border-bottom: medium silver solid;..padding: 10px;..margin-bottom: 20px;.}..div.footer {..text-align: center;..border-top: medium silver solid;..padding: 10px;.}..div#main, div.header, div.footer {..max-width:640px;..margin-left:auto;..margin-right:auto;..width:expression(document.body.clientWidth > 640? "640px": "auto" );.}...p-label {..font-weight: bold;.}..a {..text-decoration: none;..color: blue;.}..a:hover {..text-decoration: underline;.}..h1 {..font-size: 125%.}..h2 {..font-size: 100%.}..ul {..list-style-image: url(bullet.png);.}..ul.level2 {..margin-left: 10px;..padding-left: 10px;.}..li {..padding-top: 2px;..padding-bottom: 2px;.}..table {...padding: 0;...border: 1px solid silver;...border-collapse: collapse;...text-align: center;..width: 100%..}...table th {...padding: 8

C:\Program Files (x86)\DocFetcher\help\Chinese (Singapore)\DocFetcher_Manual.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1165), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	14000
Entropy (8bit):	6.391908064304712
Encrypted:	false
SSDEEP:	384:C2crSW5TaBobXBh9tTiuAVqYCVqYdyC2L5qoSy89Hssk4:C2crF3rmu1YzYdF2LTvsX
MD5:	47EFFF085820D6DC8D0875B68D47276B
SHA1:	2AA54328EA02E7E7B30BF3DFB3B7AF96A48BC04C
SHA-256:	94E601120D2704C9E8AC13BCF9A4628273E52153D2222BF142AFEFD8930B41D3
SHA-512:	342F089BC5793AACD5B5AE22533DA2BD66A9F34F06CD4637C7B939259A0676E685B8E8DEF0092D69895D4787A5BBE3F0F8519931C7BD61450334EB285B1382F9
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher..</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="efeire" name="author">....<link rel="stylesheet" href="DocFetcher_Manual_files/style.css" type="text/css">...</head>...<body>....<div id="main">.....<div style="float: right; color: gray;">......DocFetcher 1.1.25<br/>.....</div>.....<h1>..</h1><p>DocFetcher..................................................Google...</p><p><strong>....</strong>: ...................DocFetcher....................Google.....................................................</p><p><stro

C:\Program Files (x86)\DocFetcher\help\Chinese (Singapore)\DocFetcher_Manual_files\Indexing_Options.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1259), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	5256
Entropy (8bit):	6.311783978657674
Encrypted:	false
SSDEEP:	96:C81mLyjAJRERIGrcl5pzz3aRxXnGVOWMWzjmXvQEieZuDH8S:C81mLWAJK+Grypzz2XR3WzjOYEieUcS
MD5:	136C036ED032A8C699907EAEA22CF4D1
SHA1:	0CE412D6C5945CB565C7C10B4B734D6F89293FAB
SHA-256:	16A017D478B821E2073B3548564443480CB8BCFFD69CFE58ECF89D830DFF1627
SHA-512:	666418BF274533BC31ECB95EDAD7164F15C56DEE728D00B32A9329A1A98132494EC04FAC865064001055C98533FBCDBA00DA9B5E7E2B680B97F265A5FB04D88D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher.. - ....</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="efeire" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">....</a>....</div>....<div id="main">.....<h1>............</h1><p>...................................................................."+".............</p><p>.............".."..................................................</p><p>"+".....

C:\Program Files (x86)\DocFetcher\help\Chinese (Singapore)\DocFetcher_Manual_files\Memory_Limit.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (664), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	2924
Entropy (8bit):	6.359765536727369
Encrypted:	false
SSDEEP:	48:CqTkjng0L5gk/hFLl5lZZlT1l5K/WVIPsLOKn4UpgxXu9l5BXMyyhtl5MSbzNO11:CGY3ZrXBTXgO1CBUOxCXzy1qsU7VzEJa
MD5:	628551F64B048A6F74A8E40F7EF93BF6
SHA1:	8FB73B5C5EED2AA3BAB463E0F949B696B50F573D
SHA-256:	89E9287DB7878C2CD1DEFDA393495DDB8D399014948E91C3871CB7D382997E59
SHA-512:	18498E62F6D20155AC9110C5EFF96581CBAC9A6B0D83B32AC6B3DEDC8A967F481BE504D11939E2F197494AE846C94D1C35BF6771BC674C8E21449A44D773794A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher.. - ........</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="efeire" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Caveats">....</a>....</div>....<div id="main">.....<h1>........</h1><p>DocFetcher........256MB...........................</p><h2>Windows</h2><p>Windows...DocFetcher.................................</p>.<ul>. <li>..DocFetcher...........DocFetcher.....................................DocFetcher......

C:\Program Files (x86)\DocFetcher\help\Chinese (Singapore)\DocFetcher_Manual_files\Portable_Repositories.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1014), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	3884
Entropy (8bit):	6.38772699083753
Encrypted:	false
SSDEEP:	96:CVjS5khXQeG35Tso/3DkVp1JWRjPiaXFxN:CVjkk2eG35gowjhwX
MD5:	ECF26998F72C5A4C12F0C6F2640F7FA1
SHA1:	A0BB578378C84B6885ECDB60A666CE77D933835B
SHA-256:	CC76AB0F55068C6912D08674B0BF7573CB6C2BC8F3805BE3CC44B4525ADC6A0F
SHA-512:	E89B7E7BAE2130EA8E80851F5B7A167CCECFF5D15440C57E126CDAA34852D3639ABE4BD89FE1E8316903177DA52129E8CF8C1D3562763F5122D9299D724DBD7E
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher.. - ........</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="efeire" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">....</a>....</div>....<div id="main">.....<h1>........</h1><h2>....</h2><p>DocFetcher......................................................<a href="http://docfetcher.sourceforge.net">....</a>...</p><p>............; .............................................DocFetcher.Windows...Doc

C:\Program Files (x86)\DocFetcher\help\Chinese (Singapore)\DocFetcher_Manual_files\Preferences.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	2755
Entropy (8bit):	6.095853870591095
Encrypted:	false
SSDEEP:	48:CqTGjnJY6Kna3aWs9a0xYqueBXlqCFQ90T6aDO4vNBDCvNBDzEo/RitIqnV:CJYFnrWdyYqhB1q4SeNVQNV8I6
MD5:	68E973123727E56DE4A964E9186EE54D
SHA1:	D376C1BD6F3037FF0BABC348F151C9B13A7FA72C
SHA-256:	E47BEF3143020E8C4B64F9624D5F4A8DFB1B4391431062D476F1B327F6E5F50A
SHA-512:	FD0E676409E22606E611C5A78BE9D99C28A1FBF7F8C398C036875378D5317E7F9451C1A8F267D84EB89F0330C0E7D0F23404A1887DA2DC8163FBE669F8B32250
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher.. - ..</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="efeire" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Subpages">....</a>....</div>....<div id="main">.....<h1>....</h1>.<table>. <thead>. <tr>. <th>.. </th>. <th>..</th>. </tr>. </thead>. <tbody>. <tr>. <td>....... </td>. <td>.DocFetcher.............</td>. </tr>. <tr>. <td>......OR............AND.</td>. <td>.....DocFetcher.............<code>OR</code>...... ......<code>AND</code>.... ..........<a href="Que

C:\Program Files (x86)\DocFetcher\help\Chinese (Singapore)\DocFetcher_Manual_files\Query_Syntax.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1112), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	7729
Entropy (8bit):	6.185843391329085
Encrypted:	false
SSDEEP:	192:CJs+OskD3CwlMcAbXeep+HOh5sE1vJuQMmZhmK+:CJs+T2V+bbTM65s2EQMmyK+
MD5:	E6AC0B55F2D8A618F588305107C06A17
SHA1:	9B90B5231F7BB94751D8DD00B09C16701A789D68
SHA-256:	667C9AA5BB071BECC83FAD8D461431BF162B6D9E6F328A47BFCD5B556B996658
SHA-512:	09A3597B122B3EF0BB446902BEA425423E9461E87B948FC24ACABC3C396A05A1FD3BA522A6DDAA3D513989F5C3147C4219B6D079DE73FF7E87DDE9E4E79EAEEC
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher.. - ....</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="efeire" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">....</a>....</div>....<div id="main">.....<h1>....</h1><p>..............................DocFetcher......Apache Lucene.....Lucene.<a href="http://lucene.apache.org/java/3_4_0/queryparsersyntax.html">......</a>.............</p><h2>.....</h2><p>DocFetcher.......<code>OR</code>.<code>AND</code>.<code>NOT</code>.......<em>..</em>......DocFetcher........<code>OR</

C:\Program Files (x86)\DocFetcher\help\Chinese (Singapore)\DocFetcher_Manual_files\Regular_Expressions.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2345), with CRLF line terminators
Category:	dropped
Size (bytes):	4864
Entropy (8bit):	6.319839901397192
Encrypted:	false
SSDEEP:	96:CdBX6g+9Ztas44yOUxqfOSEnCHTHF06PD5ejdKNjrhy+JIEQ:CdBX6lfIVnUbHbF06PcCj0lV
MD5:	6719DF7B80BD49AB0CAA8BECFAE2B604
SHA1:	B90606B65B11A4B9D1E082A581E321E25CBA3D1D
SHA-256:	CF8CC5B1024EE4F0859DC2ADEF2D0CDC65C5C87F2EEA90C6E4E9E78C8F1EDE94
SHA-512:	77AFB75A2663D0F3666C589B822CA617DBACA4DBA3C0599DB44FF0DFC68D0A82A2F00580C9033A4A638291727D82BFC27366C7E11264FBC161FB4B8B0621B180
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher.. - .....</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="efeire" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">....</a>....</div>....<div id="main">.....<h1>....</h1><p>........................................................................; .............................</p><h2>....Microsoft Excel...<code>.*\.xlsx?</code></h2><p>....................................<strong>

C:\Program Files (x86)\DocFetcher\help\Chinese (Singapore)\DocFetcher_Manual_files\Release_Notification.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	dropped
Size (bytes):	827
Entropy (8bit):	5.824170718411924
Encrypted:	false
SSDEEP:	24:hMC6vyTvCztqqVQwiEsTY8loPv7o/Qwiy:CqTajnh+v/nt
MD5:	0405D2D5051529F4FF50BF7B9653F819
SHA1:	789E6E70F930E62EE67ED16A6C014AF54F966166
SHA-256:	77B70D6D9102D63C43045302F3AD6E779268931F89F599F8FBE3F53B42A54BAB
SHA-512:	9F9086FB883FECC9D7574769F905CCE499132129357B7B06B5535F9F2AF210CA3CE7D3027CAB4762012058DD4E7F87210EAB9EE68264C35E3BF758DF052C606A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher.. - ....</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="efeire" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">....</a>....</div>....<div id="main">.....<h1>....</h1><p>....DocFetcher.........<a href="http://sourceforge.net/projects/docfetcher">http://sourceforge.net/projects/docfetcher</a>............</p>....</div>....<div class="footer">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">....</a>....</div>...</body>..</html>..

C:\Program Files (x86)\DocFetcher\help\Chinese (Singapore)\DocFetcher_Manual_files\Watch_Limit.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	1325
Entropy (8bit):	6.383175418017072
Encrypted:	false
SSDEEP:	24:hMC6vyT9dVLOCztqqVQwios9dVLHLPLhslKeK6cZALKdsn0rN8mqiyV0R38MKT+C:CqT9ddjnJSdBbLhslK84AGdsnQsedFKB
MD5:	7967E132ECB8C77F150C5D72388AFFF5
SHA1:	0D50D29840594FB59236AB51DCFA39CE4806CCC7
SHA-256:	374258BA7FB2FA14124B23E5926ECA8AFBA877D9F560CEA19278210D2F593ACD
SHA-512:	8B02E103355F226533563CF4DDE7E48009C7346F1FC08C63317ADC36932267273E4CD1C7532F8101393FF7782D586E8AEA48CF436053C079869D643EF4FC429B
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher.. - ............Linux.</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="efeire" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Subpages">....</a>....</div>....<div id="main">.....<h1>............Linux.</h1><p>.Linux...............8192........................................DocFetcher.........................................................32000.</p>.<pre><code>sudo echo 32000 > /proc/sys/fs/inotify/max_user_watches

C:\Program Files (x86)\DocFetcher\help\Chinese (Singapore)\DocFetcher_Manual_files\bullet.png

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PNG image data, 6 x 6, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	167
Entropy (8bit):	5.440385043794193
Encrypted:	false
SSDEEP:	3:yionv//thPlHl1fMLts2m2/uDlhlbz22tdllF9R9QEC3kiHKZqH/JltB1p:6v/lhPlfMRFB/6TxltnlFaECoqfJltjp
MD5:	9DDD21AE4DE2B5F02FAF4BC4CD38E626
SHA1:	25B4A39471C1B1B8D0C606306E5E3BD3D6861DE3
SHA-256:	EFB34ABB60F2695FC30721B5FDAEEEE93908C2C386159C9B16FE397A22A171F4
SHA-512:	6A89D9CD546F4BDE33B97D61FACAB79CCDEE6840AE632708050EFFA022D45D3347494D74B8A3045EA9713E34711578A3BEC5B3C018CC490A5D9B716348A7861A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............o.x.....sRGB.........pHYs.................tIME.....+3.gX.....tEXtComment.Created with GIMPW.......IDAT..c...g@.L....B......iO.....IEND.B`.

C:\Program Files (x86)\DocFetcher\help\Chinese (Singapore)\DocFetcher_Manual_files\style.css

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	1162
Entropy (8bit):	5.001094128497315
Encrypted:	false
SSDEEP:	24:UhuRknUSuE3ajUBEuECjwHWPi7u8Sn7T+smAe7BAlzaQlZ1H6kxLdUldFv:UoiuEqIEuEcw24VyzaQlZ1+V
MD5:	A78F0EB0A442B9D36992E1C597A4E08D
SHA1:	9451330033F306E82E06DEBFBA34849A565695AC
SHA-256:	0689C72CC66BCD159BAAB231957E1A6D1235D0D1A8E82243CA854167C7A81306
SHA-512:	880B54E996C9B38EF655570C9384759F66159EFE6EE3CDC605F59B0F31B7053E0E5382D35EB592478F23D6D7D6DAC2DC4569B0A8B33A9E5C3A21A920CF84AC1B
Malicious:	false
Reputation:	low
Preview:	body {..font:95% Helvetica;..margin-left: auto;..margin-right: auto;..padding: 10px;.}..div#main {..text-align: left;..list-style-position: outside;..margin-bottom: 20px;.}..div.header {..text-align: center;..border-bottom: medium silver solid;..padding: 10px;..margin-bottom: 20px;.}..div.footer {..text-align: center;..border-top: medium silver solid;..padding: 10px;.}..div#main, div.header, div.footer {..max-width:640px;..margin-left:auto;..margin-right:auto;..width:expression(document.body.clientWidth > 640? "640px": "auto" );.}...p-label {..font-weight: bold;.}..a {..text-decoration: none;..color: blue;.}..a:hover {..text-decoration: underline;.}..h1 {..font-size: 125%.}..h2 {..font-size: 100%.}..ul {..list-style-image: url(bullet.png);.}..ul.level2 {..margin-left: 10px;..padding-left: 10px;.}..li {..padding-top: 2px;..padding-bottom: 2px;.}..table {...padding: 0;...border: 1px solid silver;...border-collapse: collapse;...text-align: center;..width: 100%..}...table th {...padding: 8

C:\Program Files (x86)\DocFetcher\help\Chinese (Taiwan)\DocFetcher_Manual.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (979), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	13390
Entropy (8bit):	6.404156632065406
Encrypted:	false
SSDEEP:	384:C6crSYaBoLX1t9tTiMfVqYdyC2KqoSyDcHsUg:C6crrvrmMkYdF2itH
MD5:	C4FE8B88C858FBBB0B47C13C2CFB00F7
SHA1:	F66E361243B902834B3EDCEB660BC0604D20E93F
SHA-256:	8371B18D1BB5EAA63B77B4C2229B4BE179DF733BA660B67CC450B22276DF8A54
SHA-512:	17335B884118721FBB9A2B991FBCA5B3D254E68F8F83B99D0A5FD90D6FE865206AECBDAB5A603BE2D1F01D483DE151BED723085349E1629A3A2C746F85ECE684
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher ..</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="..." name="author">....<link rel="stylesheet" href="DocFetcher_Manual_files/style.css" type="text/css">...</head>...<body>....<div id="main">.....<div style="float: right; color: gray;">......DocFetcher 1.1.25<br/>.....</div>.....<h1>..</h1><p>DocFetcher..................................................Google...</p><p><strong>....</strong>: ...................DocFetcher....................Google.....................................................</p><p><

C:\Program Files (x86)\DocFetcher\help\Chinese (Taiwan)\DocFetcher_Manual_files\Indexing_Options.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3740), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	5964
Entropy (8bit):	4.839567476538516
Encrypted:	false
SSDEEP:	96:CuMobnjJ6b2fGNR6Zw/l9QRCinrvOXQR/yy+kIUYWqgd7NbPhBJ/5Qq4UqebEM:CuMOI2GSsCr+K/yFUKe5pPPzR
MD5:	0ABE738C9D30178C16E16C079EB48771
SHA1:	1A1341BE0B39CD3DF88F35A0026DA62557AEC83B
SHA-256:	B44F9FA0D1E71865A62DCC00E49C0A0A63D8B427C4E282E831471B410B2A814D
SHA-512:	39CE00285CE6F881548A541BA9BB61D41DCAE8A71B1560BCEA8E6F2F342B50B7741C1CBD084B5F8038082CD616B1C5B4268A8A85FEAB127EB8A93AE46091739E
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher .. - ....</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="..." name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">....</a>....</div>....<div id="main">.....<h1>Basic Idea: A Queue of Indexing Tasks</h1><p>The indexing configuration window is made up of one or more tabs, each of which represents an index to be created or updated. All the tabs together form a task queue, whose items are processed one by one. You can add more tasks to the queue via the <code>'+'</code> button on the top right.</p><p>Each tab has a <code>Run</code> button on the bottom right. By clicking it, you confirm that the task is properly configured and ready for indexing. The indexing st

C:\Program Files (x86)\DocFetcher\help\Chinese (Taiwan)\DocFetcher_Manual_files\Memory_Limit.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1310), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	3129
Entropy (8bit):	5.088688117682296
Encrypted:	false
SSDEEP:	48:CqTk1na9smzFxOer7dv/3+h3nP0WVr1GgCA5i/r+moFfzE1/1q2Ya+PzifKMM4AY:Co1xI+vmN7XCAcjhYRz/an
MD5:	70358B4589157F2ED880983A088AA21D
SHA1:	B89CD3F3995F933EA8494444F45278B732D9A24C
SHA-256:	D8FACAE29133330CF2413496F421066E7D3711070692316FA6A9EE0C1DA812E6
SHA-512:	7305310C285D13A6790A9996BB5D373CE6169A00151D726D5ADD399CBE9E10CB45204D457136EB1F1C288A0EA59AB136A5B8265697DA1EF9791DBE5EE6E263E5
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher .. - ........</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="..." name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Caveats">....</a>....</div>....<div id="main">.....<h1>How to raise the memory limit</h1><p>DocFetcher has a default memory limit of 256 MB, which is set on startup. The limit can be raised by fiddling with the platform-specific launchers:</p><h2>Windows</h2><p>The Windows version of DocFetcher ships with ready-made alternative launchers that set different heap sizes. Follow these steps to use them:</p>.<ul>. <li>Open the DocFetcher folder. If you're using the portable version of DocFetcher, this is just the folder you downloaded and unpacked. If you'r

C:\Program Files (x86)\DocFetcher\help\Chinese (Taiwan)\DocFetcher_Manual_files\Portable_Repositories.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1252), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	4265
Entropy (8bit):	4.964318997176346
Encrypted:	false
SSDEEP:	96:CGPl+L7ahr+68jqLeisoHXVP5FAsiSRoCCpchGk:CG96atN8jqNqai/cMk
MD5:	08000332588D68C13A52D0B43DF74F88
SHA1:	7C2EA28E3BA22C0B91D1E615564CA2A0144EA36C
SHA-256:	EDF51DADF28AB63D4CB078B7C226362F37E3BF99697ECBC276C90B39BDF19A72
SHA-512:	3FF45C05346792F088092D91B0E42EA6D6F73EFB94799C792198C1C936A4695F725E158A769C68EF84FB2D64454A6A300C5385EF82C7FC3AE15173F1EAE739BD
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher .. - .......</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="..." name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">....</a>....</div>....<div id="main">.....<h1>Portable Document Repositories</h1><h2>Basic usage</h2><p>The portable version of DocFetcher essentially allows you to carry around (and even redistribute) a fully indexed and fully searchable document repository. If you don't have the portable version yet, you can download it from the <a href="http://docfetcher.sourceforge.net/download.html">project website</a>.</p><p>The portable version does not require any installation; just extract the contents of the archive into a folder of your choice. You ca

C:\Program Files (x86)\DocFetcher\help\Chinese (Taiwan)\DocFetcher_Manual_files\Preferences.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	2920
Entropy (8bit):	4.850639029606164
Encrypted:	false
SSDEEP:	48:CqTtL1njY7jdMnVTJ9deD2eev5M725lo15kJb0tP6HxN0DTudaCzeAoqnz:CkpYiheD2j5Uolo1Sb9HMkaLAog
MD5:	1AD6C7172B1C851CDABB434676A15145
SHA1:	E8A94EE2D0942A7C615080AC8DF52B29B8166877
SHA-256:	64458A4C0269895133F434DDA05FAC5818D7BFEDA5C605FEC8EF1C25FCF749C5
SHA-512:	7CBBCBC8621AFDC6295BE46B16F4A4138B408F49805BDAAF9BC2F5B7BF677408FC166C93948F13A98766640F106DC934A14DA8662A32374458932B7216E7F859
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher .. - ...</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="..." name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Subpages">....</a>....</div>....<div id="main">.....<h1>Preferences</h1>.<table>. <thead>. <tr>. <th>Option </th>. <th>Comment</th>. </tr>. </thead>. <tbody>. <tr>. <td>Show manual on startup </td>. <td>Whether to open the manual when DocFetcher starts up.</td>. </tr>. <tr>. <td>Use OR operator as default in queries (instead of AND) </td>. <td>If checked, DocFetcher will treat consecutive words in a query as if they were concatenated with the <code>OR</code> operator. Otherwise, the <code>AND</code> operator will be used. See

C:\Program Files (x86)\DocFetcher\help\Chinese (Taiwan)\DocFetcher_Manual_files\Query_Syntax.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2369), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	8842
Entropy (8bit):	4.829668527292376
Encrypted:	false
SSDEEP:	96:CFqrFBapC7B/CYFQ2oOZNCnfz0KyXZ2W1w7KmVHHwuE5lOr2itPYZN9iQBm9XjSR:CFqGI/GUKytJB4qFHnNwAm9N+/
MD5:	456F57D50617870EE3E39D911123EA47
SHA1:	8458B8A3448E4B9D55E6A9769C50DCF64F8F62F5
SHA-256:	3E948693A0D49CC1F49AAF20CB0A9903B5D75FF29531A17F4FD98CD8ED2C9E4A
SHA-512:	447C9997CF7CFB49E13A1C475E38D1445298C333527422216C8D3A5CF627025115696743F6E5D4DEB3A83C8E2A3E53D5271AEEE2B74F8B41013430FDCA9373BE
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher .. - ....</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="..." name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">....</a>....</div>....<div id="main">.....<h1>Query Syntax</h1><p>This page gives an overview of the available query syntax, going from "basic" to "advanced". The query syntax is provided by Apache Lucene, DocFetcher's underlying search engine, and it's described in a more technical manner on Lucene's <a href="http://lucene.apache.org/java/3_4_0/queryparsersyntax.html">query syntax page</a>.</p><h2>Boolean Operators</h2><p>DocFetcher supports the boolean operators <code>OR</code>, <code>AND</code> and <code>NOT</code>. If words are concatenated <em>witho

C:\Program Files (x86)\DocFetcher\help\Chinese (Taiwan)\DocFetcher_Manual_files\Regular_Expressions.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (4538), with CRLF line terminators
Category:	dropped
Size (bytes):	5157
Entropy (8bit):	4.9631565609325445
Encrypted:	false
SSDEEP:	96:C7SgMWyBxj0nfE5CvnFwMnwLFT2MeKIWZqHeNy/IfCzhJE6c7VNMQg3:C7HMWs2nrwLJ2WZly/8Cw6m9g3
MD5:	6340F34913C3A5C7F1D696EFC8492353
SHA1:	91104150EF9ECB4D7AAB8822029B4D433742D852
SHA-256:	95D4BB98EE4CD19D8E632D515F55D51862AF689E7493F14E142814C579EFDD88
SHA-512:	78267C403DC2A625C794A476631D79DB49F247C8F348275B552C3613CA11D512E2FA9BA5553DAE7F0872D1482D5C9F22DA1858120025752DEF2F880D49C9128B
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher .. - .....</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="..." name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">....</a>....</div>....<div id="main">.....<h1>Regular Expressions</h1><p>This page is meant to be a very brief introduction to regular expressions. It is by no means exhaustive, since regular expressions basically represent an entire pattern matching language. If you want to dig deeper, you can find a ton of information about it on the internet; just search for 'regular expression tutorial' or 'regular expression introduction' or something like that.</p><h2>Matching all Microsoft Excel files: <code>.*\.xlsx?</code></h2><p>In regular expressions (often

C:\Program Files (x86)\DocFetcher\help\Chinese (Taiwan)\DocFetcher_Manual_files\Release_Notification.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (433), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	2042
Entropy (8bit):	5.1982941485703575
Encrypted:	false
SSDEEP:	48:CqTL1nrSEGwi+HKWM+lIyLsQWxRidgG4sY1XTcWOaLn7:CMSEq3UVWxEeG4sG
MD5:	23974DF9FB5D01B759CED633BDA5DD11
SHA1:	3B66388751D28A1AED43497AD501F2914467D413
SHA-256:	853727507901974269700D3520CDD5E48C7F4E80EB9A7DB27D7A66826849AD0E
SHA-512:	4649F40D97B162BF4987EA5B7C66F8A543F0D263F74913ACCCE35CEB3A74117C5979C1F92BA73D1766527408CD84E84B4DFDBF693C613FB8A2D4D723F649A150
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher .. - .....</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="..." name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">....</a>....</div>....<div id="main">.....<h1>Release Notification</h1><p>There are several ways for you to receive notification of new DocFetcher releases:</p>.<ul>. <li><strong><em>Email via sourceforge.net</em></strong>: On <a href="http://sourceforge.net/projects/docfetcher">http://sourceforge.net/projects/docfetcher</a>, there's an <code>Update Notifications</code> box, where you can enter your email address in order to receive release notifications.</li>. <li><strong><em>Email via freecode.com</em></strong>: New DocFetcher releases are usually

C:\Program Files (x86)\DocFetcher\help\Chinese (Taiwan)\DocFetcher_Manual_files\Watch_Limit.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (416), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	1321
Entropy (8bit):	5.433741854094403
Encrypted:	false
SSDEEP:	24:hMC6vyTCUJcCztBCqVQwiSsTc4hc54oI5bSmqiCm8ZLZFOQWQwic:CqT9J11njdFWoOt2Mnz
MD5:	68A0F9E63BD2E34673C0968040B348B2
SHA1:	5925158FF4B1EE815EE35C6FCDB95D871A7D33A2
SHA-256:	128371535A49331F68B1DB2987D72CE852395A75682E616950CCE488DB74DD50
SHA-512:	B4C903DC4230354FF779D52E50DD1ED1CF147895188B7390154AAD1141DC3EE028F3F96590713037396B7E395556E77BC97D4DE291E761B0CD1DCE0590C0E7BB
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher .. - ........watch limit (Linux)</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="..." name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Subpages">....</a>....</div>....<div id="main">.....<h1>How to raise the folder watch limit (Linux)</h1><p>On Linux, processes can by default watch at most 8192 folders. You might reach this limit if you index a very deep hierarchy of folders. If that happens, DocFetcher will probably show a "No space left on device" error message. You can work around this by raising the watch limit. For example, this command will temporarily raise the watch limit to 32000:</p>.<pre><code>sudo echo 32000 > /proc/sys/fs/inotify/max_user_watches.</code></

C:\Program Files (x86)\DocFetcher\help\Chinese (Taiwan)\DocFetcher_Manual_files\bullet.png

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PNG image data, 6 x 6, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	167
Entropy (8bit):	5.440385043794193
Encrypted:	false
SSDEEP:	3:yionv//thPlHl1fMLts2m2/uDlhlbz22tdllF9R9QEC3kiHKZqH/JltB1p:6v/lhPlfMRFB/6TxltnlFaECoqfJltjp
MD5:	9DDD21AE4DE2B5F02FAF4BC4CD38E626
SHA1:	25B4A39471C1B1B8D0C606306E5E3BD3D6861DE3
SHA-256:	EFB34ABB60F2695FC30721B5FDAEEEE93908C2C386159C9B16FE397A22A171F4
SHA-512:	6A89D9CD546F4BDE33B97D61FACAB79CCDEE6840AE632708050EFFA022D45D3347494D74B8A3045EA9713E34711578A3BEC5B3C018CC490A5D9B716348A7861A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............o.x.....sRGB.........pHYs.................tIME.....+3.gX.....tEXtComment.Created with GIMPW.......IDAT..c...g@.L....B......iO.....IEND.B`.

C:\Program Files (x86)\DocFetcher\help\Chinese (Taiwan)\DocFetcher_Manual_files\style.css

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	1162
Entropy (8bit):	5.001094128497315
Encrypted:	false
SSDEEP:	24:UhuRknUSuE3ajUBEuECjwHWPi7u8Sn7T+smAe7BAlzaQlZ1H6kxLdUldFv:UoiuEqIEuEcw24VyzaQlZ1+V
MD5:	A78F0EB0A442B9D36992E1C597A4E08D
SHA1:	9451330033F306E82E06DEBFBA34849A565695AC
SHA-256:	0689C72CC66BCD159BAAB231957E1A6D1235D0D1A8E82243CA854167C7A81306
SHA-512:	880B54E996C9B38EF655570C9384759F66159EFE6EE3CDC605F59B0F31B7053E0E5382D35EB592478F23D6D7D6DAC2DC4569B0A8B33A9E5C3A21A920CF84AC1B
Malicious:	false
Reputation:	low
Preview:	body {..font:95% Helvetica;..margin-left: auto;..margin-right: auto;..padding: 10px;.}..div#main {..text-align: left;..list-style-position: outside;..margin-bottom: 20px;.}..div.header {..text-align: center;..border-bottom: medium silver solid;..padding: 10px;..margin-bottom: 20px;.}..div.footer {..text-align: center;..border-top: medium silver solid;..padding: 10px;.}..div#main, div.header, div.footer {..max-width:640px;..margin-left:auto;..margin-right:auto;..width:expression(document.body.clientWidth > 640? "640px": "auto" );.}...p-label {..font-weight: bold;.}..a {..text-decoration: none;..color: blue;.}..a:hover {..text-decoration: underline;.}..h1 {..font-size: 125%.}..h2 {..font-size: 100%.}..ul {..list-style-image: url(bullet.png);.}..ul.level2 {..margin-left: 10px;..padding-left: 10px;.}..li {..padding-top: 2px;..padding-bottom: 2px;.}..table {...padding: 0;...border: 1px solid silver;...border-collapse: collapse;...text-align: center;..width: 100%..}...table th {...padding: 8

C:\Program Files (x86)\DocFetcher\help\Chinese\DocFetcher_Manual.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1165), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	14000
Entropy (8bit):	6.391908064304712
Encrypted:	false
SSDEEP:	384:C2crSW5TaBobXBh9tTiuAVqYCVqYdyC2L5qoSy89Hssk4:C2crF3rmu1YzYdF2LTvsX
MD5:	47EFFF085820D6DC8D0875B68D47276B
SHA1:	2AA54328EA02E7E7B30BF3DFB3B7AF96A48BC04C
SHA-256:	94E601120D2704C9E8AC13BCF9A4628273E52153D2222BF142AFEFD8930B41D3
SHA-512:	342F089BC5793AACD5B5AE22533DA2BD66A9F34F06CD4637C7B939259A0676E685B8E8DEF0092D69895D4787A5BBE3F0F8519931C7BD61450334EB285B1382F9
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher..</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="efeire" name="author">....<link rel="stylesheet" href="DocFetcher_Manual_files/style.css" type="text/css">...</head>...<body>....<div id="main">.....<div style="float: right; color: gray;">......DocFetcher 1.1.25<br/>.....</div>.....<h1>..</h1><p>DocFetcher..................................................Google...</p><p><strong>....</strong>: ...................DocFetcher....................Google.....................................................</p><p><stro

C:\Program Files (x86)\DocFetcher\help\Chinese\DocFetcher_Manual_files\Indexing_Options.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1259), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	5256
Entropy (8bit):	6.311783978657674
Encrypted:	false
SSDEEP:	96:C81mLyjAJRERIGrcl5pzz3aRxXnGVOWMWzjmXvQEieZuDH8S:C81mLWAJK+Grypzz2XR3WzjOYEieUcS
MD5:	136C036ED032A8C699907EAEA22CF4D1
SHA1:	0CE412D6C5945CB565C7C10B4B734D6F89293FAB
SHA-256:	16A017D478B821E2073B3548564443480CB8BCFFD69CFE58ECF89D830DFF1627
SHA-512:	666418BF274533BC31ECB95EDAD7164F15C56DEE728D00B32A9329A1A98132494EC04FAC865064001055C98533FBCDBA00DA9B5E7E2B680B97F265A5FB04D88D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher.. - ....</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="efeire" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">....</a>....</div>....<div id="main">.....<h1>............</h1><p>...................................................................."+".............</p><p>.............".."..................................................</p><p>"+".....

C:\Program Files (x86)\DocFetcher\help\Chinese\DocFetcher_Manual_files\Memory_Limit.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (664), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	2924
Entropy (8bit):	6.359765536727369
Encrypted:	false
SSDEEP:	48:CqTkjng0L5gk/hFLl5lZZlT1l5K/WVIPsLOKn4UpgxXu9l5BXMyyhtl5MSbzNO11:CGY3ZrXBTXgO1CBUOxCXzy1qsU7VzEJa
MD5:	628551F64B048A6F74A8E40F7EF93BF6
SHA1:	8FB73B5C5EED2AA3BAB463E0F949B696B50F573D
SHA-256:	89E9287DB7878C2CD1DEFDA393495DDB8D399014948E91C3871CB7D382997E59
SHA-512:	18498E62F6D20155AC9110C5EFF96581CBAC9A6B0D83B32AC6B3DEDC8A967F481BE504D11939E2F197494AE846C94D1C35BF6771BC674C8E21449A44D773794A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher.. - ........</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="efeire" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Caveats">....</a>....</div>....<div id="main">.....<h1>........</h1><p>DocFetcher........256MB...........................</p><h2>Windows</h2><p>Windows...DocFetcher.................................</p>.<ul>. <li>..DocFetcher...........DocFetcher.....................................DocFetcher......

C:\Program Files (x86)\DocFetcher\help\Chinese\DocFetcher_Manual_files\Portable_Repositories.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1014), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	3884
Entropy (8bit):	6.38772699083753
Encrypted:	false
SSDEEP:	96:CVjS5khXQeG35Tso/3DkVp1JWRjPiaXFxN:CVjkk2eG35gowjhwX
MD5:	ECF26998F72C5A4C12F0C6F2640F7FA1
SHA1:	A0BB578378C84B6885ECDB60A666CE77D933835B
SHA-256:	CC76AB0F55068C6912D08674B0BF7573CB6C2BC8F3805BE3CC44B4525ADC6A0F
SHA-512:	E89B7E7BAE2130EA8E80851F5B7A167CCECFF5D15440C57E126CDAA34852D3639ABE4BD89FE1E8316903177DA52129E8CF8C1D3562763F5122D9299D724DBD7E
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher.. - ........</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="efeire" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">....</a>....</div>....<div id="main">.....<h1>........</h1><h2>....</h2><p>DocFetcher......................................................<a href="http://docfetcher.sourceforge.net">....</a>...</p><p>............; .............................................DocFetcher.Windows...Doc

C:\Program Files (x86)\DocFetcher\help\Chinese\DocFetcher_Manual_files\Preferences.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	2755
Entropy (8bit):	6.095853870591095
Encrypted:	false
SSDEEP:	48:CqTGjnJY6Kna3aWs9a0xYqueBXlqCFQ90T6aDO4vNBDCvNBDzEo/RitIqnV:CJYFnrWdyYqhB1q4SeNVQNV8I6
MD5:	68E973123727E56DE4A964E9186EE54D
SHA1:	D376C1BD6F3037FF0BABC348F151C9B13A7FA72C
SHA-256:	E47BEF3143020E8C4B64F9624D5F4A8DFB1B4391431062D476F1B327F6E5F50A
SHA-512:	FD0E676409E22606E611C5A78BE9D99C28A1FBF7F8C398C036875378D5317E7F9451C1A8F267D84EB89F0330C0E7D0F23404A1887DA2DC8163FBE669F8B32250
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher.. - ..</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="efeire" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Subpages">....</a>....</div>....<div id="main">.....<h1>....</h1>.<table>. <thead>. <tr>. <th>.. </th>. <th>..</th>. </tr>. </thead>. <tbody>. <tr>. <td>....... </td>. <td>.DocFetcher.............</td>. </tr>. <tr>. <td>......OR............AND.</td>. <td>.....DocFetcher.............<code>OR</code>...... ......<code>AND</code>.... ..........<a href="Que

C:\Program Files (x86)\DocFetcher\help\Chinese\DocFetcher_Manual_files\Query_Syntax.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1112), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	7729
Entropy (8bit):	6.185843391329085
Encrypted:	false
SSDEEP:	192:CJs+OskD3CwlMcAbXeep+HOh5sE1vJuQMmZhmK+:CJs+T2V+bbTM65s2EQMmyK+
MD5:	E6AC0B55F2D8A618F588305107C06A17
SHA1:	9B90B5231F7BB94751D8DD00B09C16701A789D68
SHA-256:	667C9AA5BB071BECC83FAD8D461431BF162B6D9E6F328A47BFCD5B556B996658
SHA-512:	09A3597B122B3EF0BB446902BEA425423E9461E87B948FC24ACABC3C396A05A1FD3BA522A6DDAA3D513989F5C3147C4219B6D079DE73FF7E87DDE9E4E79EAEEC
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher.. - ....</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="efeire" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">....</a>....</div>....<div id="main">.....<h1>....</h1><p>..............................DocFetcher......Apache Lucene.....Lucene.<a href="http://lucene.apache.org/java/3_4_0/queryparsersyntax.html">......</a>.............</p><h2>.....</h2><p>DocFetcher.......<code>OR</code>.<code>AND</code>.<code>NOT</code>.......<em>..</em>......DocFetcher........<code>OR</

C:\Program Files (x86)\DocFetcher\help\Chinese\DocFetcher_Manual_files\Regular_Expressions.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2345), with CRLF line terminators
Category:	dropped
Size (bytes):	4864
Entropy (8bit):	6.319839901397192
Encrypted:	false
SSDEEP:	96:CdBX6g+9Ztas44yOUxqfOSEnCHTHF06PD5ejdKNjrhy+JIEQ:CdBX6lfIVnUbHbF06PcCj0lV
MD5:	6719DF7B80BD49AB0CAA8BECFAE2B604
SHA1:	B90606B65B11A4B9D1E082A581E321E25CBA3D1D
SHA-256:	CF8CC5B1024EE4F0859DC2ADEF2D0CDC65C5C87F2EEA90C6E4E9E78C8F1EDE94
SHA-512:	77AFB75A2663D0F3666C589B822CA617DBACA4DBA3C0599DB44FF0DFC68D0A82A2F00580C9033A4A638291727D82BFC27366C7E11264FBC161FB4B8B0621B180
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher.. - .....</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="efeire" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">....</a>....</div>....<div id="main">.....<h1>....</h1><p>........................................................................; .............................</p><h2>....Microsoft Excel...<code>.*\.xlsx?</code></h2><p>....................................<strong>

C:\Program Files (x86)\DocFetcher\help\Chinese\DocFetcher_Manual_files\Release_Notification.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	dropped
Size (bytes):	827
Entropy (8bit):	5.824170718411924
Encrypted:	false
SSDEEP:	24:hMC6vyTvCztqqVQwiEsTY8loPv7o/Qwiy:CqTajnh+v/nt
MD5:	0405D2D5051529F4FF50BF7B9653F819
SHA1:	789E6E70F930E62EE67ED16A6C014AF54F966166
SHA-256:	77B70D6D9102D63C43045302F3AD6E779268931F89F599F8FBE3F53B42A54BAB
SHA-512:	9F9086FB883FECC9D7574769F905CCE499132129357B7B06B5535F9F2AF210CA3CE7D3027CAB4762012058DD4E7F87210EAB9EE68264C35E3BF758DF052C606A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher.. - ....</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="efeire" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">....</a>....</div>....<div id="main">.....<h1>....</h1><p>....DocFetcher.........<a href="http://sourceforge.net/projects/docfetcher">http://sourceforge.net/projects/docfetcher</a>............</p>....</div>....<div class="footer">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">....</a>....</div>...</body>..</html>..

C:\Program Files (x86)\DocFetcher\help\Chinese\DocFetcher_Manual_files\Watch_Limit.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	1325
Entropy (8bit):	6.383175418017072
Encrypted:	false
SSDEEP:	24:hMC6vyT9dVLOCztqqVQwios9dVLHLPLhslKeK6cZALKdsn0rN8mqiyV0R38MKT+C:CqT9ddjnJSdBbLhslK84AGdsnQsedFKB
MD5:	7967E132ECB8C77F150C5D72388AFFF5
SHA1:	0D50D29840594FB59236AB51DCFA39CE4806CCC7
SHA-256:	374258BA7FB2FA14124B23E5926ECA8AFBA877D9F560CEA19278210D2F593ACD
SHA-512:	8B02E103355F226533563CF4DDE7E48009C7346F1FC08C63317ADC36932267273E4CD1C7532F8101393FF7782D586E8AEA48CF436053C079869D643EF4FC429B
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher.. - ............Linux.</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="efeire" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Subpages">....</a>....</div>....<div id="main">.....<h1>............Linux.</h1><p>.Linux...............8192........................................DocFetcher.........................................................32000.</p>.<pre><code>sudo echo 32000 > /proc/sys/fs/inotify/max_user_watches

C:\Program Files (x86)\DocFetcher\help\Chinese\DocFetcher_Manual_files\bullet.png

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PNG image data, 6 x 6, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	167
Entropy (8bit):	5.440385043794193
Encrypted:	false
SSDEEP:	3:yionv//thPlHl1fMLts2m2/uDlhlbz22tdllF9R9QEC3kiHKZqH/JltB1p:6v/lhPlfMRFB/6TxltnlFaECoqfJltjp
MD5:	9DDD21AE4DE2B5F02FAF4BC4CD38E626
SHA1:	25B4A39471C1B1B8D0C606306E5E3BD3D6861DE3
SHA-256:	EFB34ABB60F2695FC30721B5FDAEEEE93908C2C386159C9B16FE397A22A171F4
SHA-512:	6A89D9CD546F4BDE33B97D61FACAB79CCDEE6840AE632708050EFFA022D45D3347494D74B8A3045EA9713E34711578A3BEC5B3C018CC490A5D9B716348A7861A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............o.x.....sRGB.........pHYs.................tIME.....+3.gX.....tEXtComment.Created with GIMPW.......IDAT..c...g@.L....B......iO.....IEND.B`.

C:\Program Files (x86)\DocFetcher\help\Chinese\DocFetcher_Manual_files\style.css

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	1162
Entropy (8bit):	5.001094128497315
Encrypted:	false
SSDEEP:	24:UhuRknUSuE3ajUBEuECjwHWPi7u8Sn7T+smAe7BAlzaQlZ1H6kxLdUldFv:UoiuEqIEuEcw24VyzaQlZ1+V
MD5:	A78F0EB0A442B9D36992E1C597A4E08D
SHA1:	9451330033F306E82E06DEBFBA34849A565695AC
SHA-256:	0689C72CC66BCD159BAAB231957E1A6D1235D0D1A8E82243CA854167C7A81306
SHA-512:	880B54E996C9B38EF655570C9384759F66159EFE6EE3CDC605F59B0F31B7053E0E5382D35EB592478F23D6D7D6DAC2DC4569B0A8B33A9E5C3A21A920CF84AC1B
Malicious:	false
Reputation:	low
Preview:	body {..font:95% Helvetica;..margin-left: auto;..margin-right: auto;..padding: 10px;.}..div#main {..text-align: left;..list-style-position: outside;..margin-bottom: 20px;.}..div.header {..text-align: center;..border-bottom: medium silver solid;..padding: 10px;..margin-bottom: 20px;.}..div.footer {..text-align: center;..border-top: medium silver solid;..padding: 10px;.}..div#main, div.header, div.footer {..max-width:640px;..margin-left:auto;..margin-right:auto;..width:expression(document.body.clientWidth > 640? "640px": "auto" );.}...p-label {..font-weight: bold;.}..a {..text-decoration: none;..color: blue;.}..a:hover {..text-decoration: underline;.}..h1 {..font-size: 125%.}..h2 {..font-size: 100%.}..ul {..list-style-image: url(bullet.png);.}..ul.level2 {..margin-left: 10px;..padding-left: 10px;.}..li {..padding-top: 2px;..padding-bottom: 2px;.}..table {...padding: 0;...border: 1px solid silver;...border-collapse: collapse;...text-align: center;..width: 100%..}...table th {...padding: 8

C:\Program Files (x86)\DocFetcher\help\English\DocFetcher_Manual.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, ASCII text, with very long lines (2451), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	15529
Entropy (8bit):	4.788047741823874
Encrypted:	false
SSDEEP:	384:CQIrnNsMfLDLWGZx1WIoZh0mG/Zrcd3WY:CQ+sMfCcmGOd3t
MD5:	52FF7808AC952941B8E357BD6826DC95
SHA1:	9DF5F6C00A6757FD221E1B02EC196D61E33FE92D
SHA-256:	68AEDD9A497BB017558B3A776AF74F8D9345ABA94FD3292891D629FD9C6839EC
SHA-512:	FF40A0684216B70AA3EC5FDCB38563D8A700CA35229C9B2A72AD68BA523569657D91D2F0AC05693F84E66636228CD2E5E2AB717D5DB5409A1F0691686CAF8CD2
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher Manual</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Tran Nam Quang" name="author">....<link rel="stylesheet" href="DocFetcher_Manual_files/style.css" type="text/css">...</head>...<body>....<div id="main">.....<div style="float: right; color: gray;">......DocFetcher 1.1.25<br/>.....</div>.....<h1>Introduction</h1><p>DocFetcher is an Open Source desktop search application: It allows you to search the contents of files on your computer. - You can think of it as Google for your local files.</p><p><strong>Index-based search</strong>: Since searching in the documents directly would be impractically slow for a larger number of documents, DocFetcher requires that you create <em>indexes</em> for the folders you want to search in. These indexes allow DocFetcher to quickly look up files by keyword, similar to how you w

C:\Program Files (x86)\DocFetcher\help\English\DocFetcher_Manual_files\Indexing_Options.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, ASCII text, with very long lines (3740), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	5983
Entropy (8bit):	4.776221162048229
Encrypted:	false
SSDEEP:	96:CzobnjJ6b2fGNR6Zw/l9QRCinrvOXQR/yy+kIUYWqgd7NbPhBJ/5Qq4UqebEN:CzOI2GSsCr+K/yFUKe5pPPzq
MD5:	A512037D9F1D9177C5DA86F55D3CB302
SHA1:	E5BFD363EFE7704CACBF1008DB70ACDDE741A483
SHA-256:	A7005FF95CDA90EF85252BAA92AD66259CFDC4411A477F72DF1D7C83BA77465F
SHA-512:	0DA1461FF1406CC0A7A6A8026C254EAF737FEF33671CF4B9D05E696EC703AE6254BAE2C98F6C99C9D23E265F8A5EDF36C3AAC95182BCF704717313267F1ECAB5
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher Manual - Indexing Options</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Tran Nam Quang" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">Back to main page</a>....</div>....<div id="main">.....<h1>Basic Idea: A Queue of Indexing Tasks</h1><p>The indexing configuration window is made up of one or more tabs, each of which represents an index to be created or updated. All the tabs together form a task queue, whose items are processed one by one. You can add more tasks to the queue via the <code>'+'</code> button on the top right.</p><p>Each tab has a <code>Run</code> button on the bottom right. By clicking it, you confirm that the task is properly configured and ready for indexing. T

C:\Program Files (x86)\DocFetcher\help\English\DocFetcher_Manual_files\Memory_Limit.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, ASCII text, with very long lines (1310), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	3149
Entropy (8bit):	4.957514283403611
Encrypted:	false
SSDEEP:	48:CqTSMnoc9smzFxOer7dv/3+h3nP0WVr1GgCA5i/r+moFfzE1/1q2Ya+PzifKMM44:C1c1xI+vmN7XCAcjhYRz/aFq
MD5:	167C1158F614100CB0D3C763F599BEEA
SHA1:	7B587956F74F827A515DD177DF2FA6501A2DF44D
SHA-256:	B933E82AECC21A0C2132E6DF055EA5AC87B29E930C11D5E36094342579D9F699
SHA-512:	34F733B3FE6EC1E66E00AF2A6007571E2330107AAAE237A7ABAA43B0A20D6E368E86689065A28847FF6E0DBD1D0589ED5D54BFF6B757B177A8C7204F42064433
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher Manual - How to raise the memory limit</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Tran Nam Quang" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Caveats">Back to main page</a>....</div>....<div id="main">.....<h1>How to raise the memory limit</h1><p>DocFetcher has a default memory limit of 256 MB, which is set on startup. The limit can be raised by fiddling with the platform-specific launchers:</p><h2>Windows</h2><p>The Windows version of DocFetcher ships with ready-made alternative launchers that set different heap sizes. Follow these steps to use them:</p>.<ul>. <li>Open the DocFetcher folder. If you're using the portable version of DocFetcher, this is just the folder you downloaded and unp

C:\Program Files (x86)\DocFetcher\help\English\DocFetcher_Manual_files\Portable_Repositories.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, ASCII text, with very long lines (1238), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	4275
Entropy (8bit):	4.865465200887608
Encrypted:	false
SSDEEP:	96:ClPl+T7ahr+68jqLeisoHXVP5FAsiSRoCCpchGl:Cl9SatN8jqNqai/cMl
MD5:	4591C22476C58F93B5127813E55DC06C
SHA1:	D8AFB3585F6AAA62AF7D35ED628A61C97E46C826
SHA-256:	31BE61718E5AB1D5CAD3809C63A5E5590FB52A57456C32E6DC22C9410420B679
SHA-512:	74386BEF280CD259D9802E76EC9E817F8C47CFFCB9055E62398ADD77C807F1FF8A776ED76D2E10C82F6B91043A61AA836B322A985E3ACC4353FDBF432EE22643
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher Manual - Portable Document Repositories</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Tran Nam Quang" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">Back to main page</a>....</div>....<div id="main">.....<h1>Portable Document Repositories</h1><h2>Basic usage</h2><p>The portable version of DocFetcher essentially allows you to carry around (and even redistribute) a fully indexed and fully searchable document repository. If you don't have the portable version yet, you can download it from the <a href="http://docfetcher.sourceforge.net">project website</a>.</p><p>The portable version does not require any installation; just extract the contents of the archive into a folder of your choice. Y

C:\Program Files (x86)\DocFetcher\help\English\DocFetcher_Manual_files\Preferences.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, ASCII text, with very long lines (343), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	3334
Entropy (8bit):	4.733921291871079
Encrypted:	false
SSDEEP:	48:CqTYMnKY7jdMnVTJ9deD2eev5M725lo15kJqxmB0tP6HxN0DTudaCzeAoqnU:CVYiheD2j5Uolo1SZB9HMkaLAoh
MD5:	38A923BD50F5557F20DE0BCE5DF7B35B
SHA1:	A3114B586AE23A1954965327483A85BC2F7F03C7
SHA-256:	7146BE43672124B9CD9D891D64458DC02FA75BC4239FBCA81B614D7921C47674
SHA-512:	A97B1F29C5A5BBB07780BD8783A7ED28C3876446ACF3235AF0FF1F890C80D0A491E298E41DF4D6297B381D37FA4FAD9F5EBE64DDCD8D00DDC32066B2D767E8A7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher Manual - Preferences</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Tran Nam Quang" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Subpages">Back to main page</a>....</div>....<div id="main">.....<h1>Preferences</h1>.<table>. <thead>. <tr>. <th>Option </th>. <th>Comment</th>. </tr>. </thead>. <tbody>. <tr>. <td>Show manual on startup </td>. <td>Whether to open the manual when DocFetcher starts up.</td>. </tr>. <tr>. <td>Use OR operator as default in queries (instead of AND) </td>. <td>If checked, DocFetcher will treat consecutive words in a query as if they were concatenated with the <code>OR</code> operator. Otherwise, the <code>AND</code> operator will

C:\Program Files (x86)\DocFetcher\help\English\DocFetcher_Manual_files\Query_Syntax.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, ASCII text, with very long lines (2369), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	8857
Entropy (8bit):	4.784705749531045
Encrypted:	false
SSDEEP:	96:CEqrFBapC7B/CYFQ2oOZNCnfz0KyXZ2W1w7KmVHHwuE5lOr2itPYZN9iQBm9XjSq:CEqGI/GUKytJB4qFHnNwAm9N+w
MD5:	B866477742A0B555995429EEE157F539
SHA1:	364B5C8B9EEA96D72BA1D339473FE6365700DF0F
SHA-256:	0CD687753914A8B81F57986CCEED7C563227AB693E96E1D8A1BBF5146D3B688B
SHA-512:	031047CCE20C019242B4D370B80CBB68C61EA7593C2EE50DCABDE98AE8960D8CB7AB68745371382F1DD8495B2FCF74075A42577ADC3104267F7F8F5ACF5AFEBA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher Manual - Query Syntax</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Tran Nam Quang" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">Back to main page</a>....</div>....<div id="main">.....<h1>Query Syntax</h1><p>This page gives an overview of the available query syntax, going from "basic" to "advanced". The query syntax is provided by Apache Lucene, DocFetcher's underlying search engine, and it's described in a more technical manner on Lucene's <a href="http://lucene.apache.org/java/3_4_0/queryparsersyntax.html">query syntax page</a>.</p><h2>Boolean Operators</h2><p>DocFetcher supports the boolean operators <code>OR</code>, <code>AND</code> and <code>NOT</code>. If words are concatenated

C:\Program Files (x86)\DocFetcher\help\English\DocFetcher_Manual_files\Regular_Expressions.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, ASCII text, with very long lines (4538), with CRLF line terminators
Category:	dropped
Size (bytes):	5176
Entropy (8bit):	4.890580991074062
Encrypted:	false
SSDEEP:	96:CmSgMWyBxj0nfE5CvnFwMnwLFT2MeKIWZqHeNy/IfCzhJE6c7VNMQgo:CmHMWs2nrwLJ2WZly/8Cw6m9go
MD5:	0CF3EF84E169F66BE6677567239C4F1B
SHA1:	D90F52C7BEB22F5C06F1F9D2163C07D73F427A35
SHA-256:	FE75AB8313B6E05FFDD5939A3DDD56AB532A6596CE07A33A4AED9A92F9A6E59C
SHA-512:	9FA23B4BC9806A7D4516F252EE1CCA9F842B5DC128EFE12B6AA4030CFB6D6F248754FD62B90760D9D75D72F5BDFEBF4F4123B2A9856EE3E7A860A08DC9ADDC41
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher Manual - Regular Expressions</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Tran Nam Quang" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">Back to main page</a>....</div>....<div id="main">.....<h1>Regular Expressions</h1><p>This page is meant to be a very brief introduction to regular expressions. It is by no means exhaustive, since regular expressions basically represent an entire pattern matching language. If you want to dig deeper, you can find a ton of information about it on the internet; just search for 'regular expression tutorial' or 'regular expression introduction' or something like that.</p><h2>Matching all Microsoft Excel files: <code>.*\.xlsx?</code></h2><p>In regular expr

C:\Program Files (x86)\DocFetcher\help\English\DocFetcher_Manual_files\Release_Notification.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	874
Entropy (8bit):	5.184403849068562
Encrypted:	false
SSDEEP:	12:hnMQtJOo9qvyA+nCf7rpUSrvuTMwQwiR8mHjs1P9AHxiGao+GaootNwQwiR8EGu:hMC6vyTnCzt9qVQwiFs1WHxv7otKQwip
MD5:	E589377D01310B423061303653AEE77E
SHA1:	66F0928CEA2E728D97D4209EB41A93D431E0F1C6
SHA-256:	FDF8136E38CCAE18ADBFAB17F5C8211B639BAD65195E303962B6435275299B25
SHA-512:	F08232AC75C550EA36B2CAD98F33FFC4C59BA3763172CFD440B7012984DF40A2EA134EF94813FFDEB91628D6FC21D366F26935F5FD84E405498D1A57D919C18E
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher Manual - Release Notification</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Tran Nam Quang" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">Back to main page</a>....</div>....<div id="main">.....<h1>Release Notification</h1><p>To receive notification of new DocFetcher releases, go to <a href="http://sourceforge.net/projects/docfetcher">http://sourceforge.net/projects/docfetcher</a> and click on the "Get Updates" button.</p>....</div>....<div class="footer">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">Back to main page</a>....</div>...</body>..</html>..

C:\Program Files (x86)\DocFetcher\help\English\DocFetcher_Manual_files\Watch_Limit.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, ASCII text, with very long lines (416), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	1336
Entropy (8bit):	5.1706889047058535
Encrypted:	false
SSDEEP:	24:hMC6vyTKccCzt9qVQwiRsTc4hc54oI5bSmqiCm8ZLZFOQWQwi9:CqTj1MnKdFWoOt2MnU
MD5:	5A854F1AC731561BFD2414D78CEF2B8D
SHA1:	24BB27A7B6C5A9640CE8496073D865383FF99D1F
SHA-256:	F45A9D7B268D94604D33C97F115ED4B60C888E320B7D195C6AD22C493B37BA01
SHA-512:	5249F482AD40EC4FFAE91F291C0594408178A612B70091E3529B9CD664E12C265F0A99573545B565545084FCC785FA064F2C8711E5703D2968EAD328C855C48C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher Manual - How to raise the folder watch limit (Linux)</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Tran Nam Quang" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Subpages">Back to main page</a>....</div>....<div id="main">.....<h1>How to raise the folder watch limit (Linux)</h1><p>On Linux, processes can by default watch at most 8192 folders. You might reach this limit if you index a very deep hierarchy of folders. If that happens, DocFetcher will probably show a "No space left on device" error message. You can work around this by raising the watch limit. For example, this command will temporarily raise the watch limit to 32000:</p>.<pre><code>sudo echo 32000 > /proc/sys/fs/inotify/max_user_watches

C:\Program Files (x86)\DocFetcher\help\English\DocFetcher_Manual_files\bullet.png

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PNG image data, 6 x 6, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	167
Entropy (8bit):	5.440385043794193
Encrypted:	false
SSDEEP:	3:yionv//thPlHl1fMLts2m2/uDlhlbz22tdllF9R9QEC3kiHKZqH/JltB1p:6v/lhPlfMRFB/6TxltnlFaECoqfJltjp
MD5:	9DDD21AE4DE2B5F02FAF4BC4CD38E626
SHA1:	25B4A39471C1B1B8D0C606306E5E3BD3D6861DE3
SHA-256:	EFB34ABB60F2695FC30721B5FDAEEEE93908C2C386159C9B16FE397A22A171F4
SHA-512:	6A89D9CD546F4BDE33B97D61FACAB79CCDEE6840AE632708050EFFA022D45D3347494D74B8A3045EA9713E34711578A3BEC5B3C018CC490A5D9B716348A7861A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............o.x.....sRGB.........pHYs.................tIME.....+3.gX.....tEXtComment.Created with GIMPW.......IDAT..c...g@.L....B......iO.....IEND.B`.

C:\Program Files (x86)\DocFetcher\help\English\DocFetcher_Manual_files\style.css

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	1162
Entropy (8bit):	5.001094128497315
Encrypted:	false
SSDEEP:	24:UhuRknUSuE3ajUBEuECjwHWPi7u8Sn7T+smAe7BAlzaQlZ1H6kxLdUldFv:UoiuEqIEuEcw24VyzaQlZ1+V
MD5:	A78F0EB0A442B9D36992E1C597A4E08D
SHA1:	9451330033F306E82E06DEBFBA34849A565695AC
SHA-256:	0689C72CC66BCD159BAAB231957E1A6D1235D0D1A8E82243CA854167C7A81306
SHA-512:	880B54E996C9B38EF655570C9384759F66159EFE6EE3CDC605F59B0F31B7053E0E5382D35EB592478F23D6D7D6DAC2DC4569B0A8B33A9E5C3A21A920CF84AC1B
Malicious:	false
Reputation:	low
Preview:	body {..font:95% Helvetica;..margin-left: auto;..margin-right: auto;..padding: 10px;.}..div#main {..text-align: left;..list-style-position: outside;..margin-bottom: 20px;.}..div.header {..text-align: center;..border-bottom: medium silver solid;..padding: 10px;..margin-bottom: 20px;.}..div.footer {..text-align: center;..border-top: medium silver solid;..padding: 10px;.}..div#main, div.header, div.footer {..max-width:640px;..margin-left:auto;..margin-right:auto;..width:expression(document.body.clientWidth > 640? "640px": "auto" );.}...p-label {..font-weight: bold;.}..a {..text-decoration: none;..color: blue;.}..a:hover {..text-decoration: underline;.}..h1 {..font-size: 125%.}..h2 {..font-size: 100%.}..ul {..list-style-image: url(bullet.png);.}..ul.level2 {..margin-left: 10px;..padding-left: 10px;.}..li {..padding-top: 2px;..padding-bottom: 2px;.}..table {...padding: 0;...border: 1px solid silver;...border-collapse: collapse;...text-align: center;..width: 100%..}...table th {...padding: 8

C:\Program Files (x86)\DocFetcher\help\German\DocFetcher_Manual.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2595), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	17942
Entropy (8bit):	4.943197361003698
Encrypted:	false
SSDEEP:	384:C0v1OiTC4SBs+fHqCq/v4ZTyA59m4DpsKWiiS19f:C09XC4SqCvyA5E4D6Kr19f
MD5:	908E1A737EA7F17FA47B6BF399D88D47
SHA1:	0464DFF75337D369F58DB217C67D210DB6718632
SHA-256:	C302F88C908D26DF25E107472E49CDCABEFCF56977345221E93EB278F956BCEE
SHA-512:	D8C5B5BB351D67AC5478F8D9E8E1EA376E90EAFCC01546D00BF7D29C636BAEFC9A914CE8164E89A2801CCA8368070609AFCEAFD569CABAE6B4D9183C5586FA4D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher Benutzerhandbuch</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Tran Nam Quang" name="author">....<link rel="stylesheet" href="DocFetcher_Manual_files/style.css" type="text/css">...</head>...<body>....<div id="main">.....<div style="float: right; color: gray;">......DocFetcher 1.1.25<br/>.....</div>.....<h1>Einf.hrung</h1><p>DocFetcher ist ein Open Source Desktop-Suchprogramm: Es erm.glicht die Volltext-Suche in Dateien auf dem Computer — eine Art Google f.r den Heimrechner.</p><p><strong>Index-basierte Suche</strong>: Da die direkte Suche in Dateien in der Praxis bei einer gr..eren Anzahl von Dateien zu langsam w.re, m.ssen Sie <em>Indizes</em> f.r die Ordner erstellen, in denen Sie suchen wollen. Diese Indizes erlauben es DocFetcher, schnell Dateien anhand von Suchbegriffen zu finden, .hnlich

C:\Program Files (x86)\DocFetcher\help\German\DocFetcher_Manual_files\Indexing_Options.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (4890), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	7662
Entropy (8bit):	4.917745093143515
Encrypted:	false
SSDEEP:	192:C7TEeRuS4rpPYwMOHoP4Lhcz1qodoYUXxcjuMrDDRcjRnm0:C7AxSwpweIP4Lq14DMrDDw
MD5:	EBC34CDE276118A911F7751148443424
SHA1:	A8943393ABD4E13F14C8CE31B8B906D8F63BABE4
SHA-256:	8C719107E3A7E90C5CA32E8BDE65739FB457B6A165C258759E190343916D2D00
SHA-512:	FE581394F18DE571E72630D36E1078336AA7E59068C32A6630D722FCB95516BE9074B3C7DC89E6BC55855F9B582ADF2211CA12AE4157699020E483B56421447A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher Benutzerhandbuch - Indizierungs-Einstellungen</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Tran Nam Quang" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">Zur.ck zur Hauptseite</a>....</div>....<div id="main">.....<h1>Grundprinzip: Eine Warteschlange von Indizierungs-Auftr.gen</h1><p>Das Indizierungs-Fenster besteht aus einem oder mehreren Tabs, von denen jedes jeweils einem zu erstellenden oder zu aktualisierenden Index entspricht. Die Gesamtheit aller Tabs bildet eine Warteschlange, dessen Eintr.ge einer nach dem anderen abgearbeitet werden. Sie k.nnen neue Eintr.ge mit dem <code>'+'</code>-Button oben rechts zur Warteschlange hinzuf.gen.</p><p>Auf jedem Tab gibt es ein

C:\Program Files (x86)\DocFetcher\help\German\DocFetcher_Manual_files\Memory_Limit.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1515), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	3588
Entropy (8bit):	5.072464020707615
Encrypted:	false
SSDEEP:	96:CjbA7P5yjkaG8mPdDTdlUKn35J8Jl+zP3GvrDOIFtJmm:Cj07xyo7PdsUXYwzP3UDp7D
MD5:	BE22206262F942C9DF322DAE45558B2F
SHA1:	0BE9AD635240AEBB347B87E27663D2E849E9F5D1
SHA-256:	4B6CEBD5B3C1707F133123707DBFBDCD15D4656B16E7C8870A897657E4835EB6
SHA-512:	402B51EE4BEFE96937F81306BFB369BC7D3F510C8E0EAB0F7AC415A6774FF86AC4B6188272EBB532F21A041C5D44FFA24090A9F94DB43DDD68FE5F8A5550A5F4
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher Benutzerhandbuch - Erh.hung des Speicherlimits</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Tran Nam Quang" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Caveats">Zur.ck zur Hauptseite</a>....</div>....<div id="main">.....<h1>Erh.hung des Speicherlimits</h1><p>F.r DocFetcher besteht standardm..ig ein Speicherlimit von 256 MB. Dies kann durch Modifikation der plattformspezifischen Startprogramme abge.ndert werden.</p><h2>Windows</h2><p>In der Windows-Version von DocFetcher sind vorgefertige alternative Startprogramme mitgeliefert, welche andere Speicherlimits setzen. Diese alternativen Startprogramme sind auf folgende Weise zu benutzen:</p>.<ul>. <li>.ffnen Sie den DocFetcher-Ordner. Fa

C:\Program Files (x86)\DocFetcher\help\German\DocFetcher_Manual_files\Portable_Repositories.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1446), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	4949
Entropy (8bit):	4.957446576273492
Encrypted:	false
SSDEEP:	48:CqTbMnnEAnsxNzFsjpGYhpTKBlm8TLL+kZAB8DEt0yqE+wc0H8lYTeLxD90pBVFS:CmAaF2uvvh2jibtKde18bGnrDsm
MD5:	7DA010B417F27D17D2472F8A3E6799C4
SHA1:	DC35A8643AE9B586EF0DF6DECAE3B7E6D3F3B82B
SHA-256:	79BACAA62ACD2D9BA5358F078913D26087D7F69EBE2ACD8F82EE071BF3798367
SHA-512:	61DEC67D534C8C940E4D98ABE87779E398FE6C17E0E1E12C072542ED50FE6FD253D7E878E23B4D01286A5BE8E1790D5069D9C151575BBCF66C48CA15A16C9FEB
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher Benutzerhandbuch - Portable Dokument-Repositories</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Tran Nam Quang" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">Zur.ck zur Hauptseite</a>....</div>....<div id="main">.....<h1>Portable Dokument-Repositories</h1><h2>Grundlegende Benutzung</h2><p>Die portable Version von DocFetcher erm.glicht es, ein voll indiziertes und durchsuchbares Dokument-Repository zu erstellen, welches Sie dann mit sich herumtragen oder an andere Menschen weitergeben k.nnen. Falls Sie die portable Version noch nicht haben, k.nnen Sie sie von der <a href="http://docfetcher.sourceforge.net">Projekt-Website</a> beziehen.</p><p>Die portable Version erfordert keine Ins

C:\Program Files (x86)\DocFetcher\help\German\DocFetcher_Manual_files\Preferences.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (417), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	3802
Entropy (8bit):	4.853554609175067
Encrypted:	false
SSDEEP:	48:CqTtDpMn/EAvDv8DgtXvgQ+/yMZ/yWyjoIoMrs5MRF+FCzBj8CooLyNZt9y4Z9y0:CSnAvq4gQ65V5MRFJzB4GkSnD/m
MD5:	BFB4E2D49EABB2E661E935EC1BD84EBA
SHA1:	A7DFC37C679E2A8A07C29F089E625B7F573681EF
SHA-256:	7AB0EF6D94C1037CB40150E90DDBF5E29F3D32DAC4E7E8868E441A8033768F82
SHA-512:	8E54128D521A1976D94ECBF20BC3E67FB8A4EF5D7A68FCAC295E5561D3AA2255D5D3AA8604F70BD39C466D44568CFA7A4EDD6F9DB96C101E24A6DEBB10E8039C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher Benutzerhandbuch - Programm-Einstellungen</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Tran Nam Quang" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Subpages">Zur.ck zur Hauptseite</a>....</div>....<div id="main">.....<h1>Programm-Einstellungen</h1>.<table>. <thead>. <tr>. <th>Einstellung </th>. <th>Anmerkungen</th>. </tr>. </thead>. <tbody>. <tr>. <td>Benutzerhandbuch bei Programmstart anzeigen </td>. <td>Stellt ein, ob das Benutzerhandbuch nach Programmstart angezeigt werden soll.</td>. </tr>. <tr>. <td>In Suchanfragen OR-Operator als Standard verwenden (anstelle von AND) </td>. <td>Stellt ein, ob DocFetcher zwei aufeinanderfolgende Suchbegriffe als

C:\Program Files (x86)\DocFetcher\help\German\DocFetcher_Manual_files\Query_Syntax.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2882), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	10281
Entropy (8bit):	4.941259615783038
Encrypted:	false
SSDEEP:	192:CBPJLpsiMhyyT5Yg6QV5atuILbaOFo8eP:CBBihBT6R25SHot
MD5:	1E304B54606C1FBB478C6EB46EA77A81
SHA1:	592EC6E622F90E5D780B6070D4BB1D0A6F96E20A
SHA-256:	42B9A20BBA5B7C0F54A146EC7FBBC2382CCDEAA2200E8A176CDA553CF0BED1E4
SHA-512:	6BEF7B6B8912E9B93BD6DE03E8D2ECF3E9D26E681A4B6275A11E31F12D89793F3523291466199E0E4793E51A074A656391B2CC59F4CA8F1799AC2227C346AD84
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher Benutzerhandbuch - Suchanfrage-Syntax</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Tran Nam Quang" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">Zur.ck zur Hauptseite</a>....</div>....<div id="main">.....<h1>Suchanfrage-Syntax</h1><p>Diese Seite gibt einen .berblick .ber die verf.gbaren Konstrukte der Suchanfrage-Syntax, wobei die Konstrukte von "einfach" nach "fortgeschritten" sortiert sind. Die Suchanfrage-Syntax wird von DocFetcher's interner Suchmaschine Apache Lucene bereitgestellt und ist auf etwas technischere Weise auf der <a href="http://lucene.apache.org/java/3_4_0/queryparsersyntax.html">Suchanfrage-Syntax-Seite von Lucene</a> erkl.rt.</p><h2>Boolesche Operatoren</h2>

C:\Program Files (x86)\DocFetcher\help\German\DocFetcher_Manual_files\Regular_Expressions.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (5490), with CRLF line terminators
Category:	dropped
Size (bytes):	6196
Entropy (8bit):	4.987035636286378
Encrypted:	false
SSDEEP:	192:C08aZtf1QMTmJtSUHB0QjsJ0ZB83/tnDs:C08a3f7UtiksMG31I
MD5:	32E46486EF2011D90713EAC444FD311B
SHA1:	8F6B7B485A2B313541081AA7FECB80804ECFF6B2
SHA-256:	73A8DF198D38802871B3A5764A7479E72749531A88E965AC663DE9286C519B5C
SHA-512:	E6E8D3CC88F82999FDD9EB4F6A81C97D7CA8E233F637C6E7703D6A3DE8972069F20C3CD960FC4F4AFD0261C485D4A79AC9A4E73DFF1CE7D59A7428B1A8BC9BA8
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher Benutzerhandbuch - Regul.re Ausdr.cke</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Tran Nam Quang" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">Zur.ck zur Hauptseite</a>....</div>....<div id="main">.....<h1>Regul.re Ausdr.cke</h1><p>Diese Seite bietet eine kurze und knappe Einf.hrung in regul.re Ausdr.cke. Das Thema kann hier in keinster Weise ersch.pfend abgedeckt werden, da es sich bei regul.ren Ausdr.cken um eine komplette Sprache f.r den Vergleich von Zeichenfolgen (Pattern Matching) handelt. Wenn Sie mehr .ber regul.re Ausdr.cke erfahren wollen, sollten Sie im Internet nach 'regul.re ausdr.cke einf.hrung' oder dergleichen suchen; damit werden Sie eine Unmenge

C:\Program Files (x86)\DocFetcher\help\German\DocFetcher_Manual_files\Release_Notification.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (302), with CRLF line terminators
Category:	dropped
Size (bytes):	991
Entropy (8bit):	5.281480172969708
Encrypted:	false
SSDEEP:	24:hMC6vyTzmtCzt9qVQwinwEAslutmc9v7XWQwinwEm:CqTyYMnnEACTcZWnnEm
MD5:	4CC96CF2C9B0283BA844FEE3366C051A
SHA1:	A211B09E3F13359633D634DA0BC4F4DA225768A6
SHA-256:	275246912859A8C3EC0F540FA7D80593887043F7081C3F1278F3E57EE73EA7C1
SHA-512:	69CCF6D0E1046666697A877BF09A0B2F532DC54CEECE2B299E988B97A713056E4491701A8051B6C62B12DC57451AA708CDB88A67D55F8D71CD71221BAA381415
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher Benutzerhandbuch - Benachrichtigung .ber neue Programm-Versionen</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Tran Nam Quang" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">Zur.ck zur Hauptseite</a>....</div>....<div id="main">.....<h1>Benachrichtigung .ber neue Programm-Versionen</h1><p>Um .ber neue DocFetcher-Versionen benachrichtigt zu werden, k.nnen Sie auf die Seite <a href="http://sourceforge.net/projects/docfetcher">http://sourceforge.net/projects/docfetcher</a> gehen und auf die "Get Updates"-Schaltfl.che klicken.</p>....</div>....<div class="footer">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">Zur.ck zur Hauptseite</a>....</div>...</body>..</html>..

C:\Program Files (x86)\DocFetcher\help\German\DocFetcher_Manual_files\Watch_Limit.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (515), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	1520
Entropy (8bit):	5.299885960848279
Encrypted:	false
SSDEEP:	24:hMC6vyTsWcCzt9qVQwiDwEAsOhJxCM/LE+pQw1A4mqiEn8Zss7aFOQWQwiDwEm:CqTsW1Mn/EA/Dk0LE+pTA+nsbn/Em
MD5:	8B4D58520E9CE6FF2C6C70452B6E0C74
SHA1:	3AF5BA118E3983F195A294081A7AE2E515AF0184
SHA-256:	1D4B53E8712420CDC337FD1DFAF0805BBF333AFF6CE1F9EA7472786E8A4CC41C
SHA-512:	EE241B5607C2315FC8C2E4102B5C2252F1520DBCF9079F25A7AE74507CEDF2A1966D34D5B2BCEC91CC362ED05E696EBBEDBA532D987B83BE2959C428B8E4EDFA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher Benutzerhandbuch - Erh.hung des Ordner-.berwachungs-Limits (Linux)</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Tran Nam Quang" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Subpages">Zur.ck zur Hauptseite</a>....</div>....<div id="main">.....<h1>Erh.hung des Ordner-.berwachungs-Limits (Linux)</h1><p>Auf Linux k.nnen Prozesse h.chstens 8192 Ordner gleichzeitig .berwachen. Sie werden m.glicherweise an dieses Limit sto.en, wenn Sie eine extrem tiefe Ordner-Hierarchie indizieren. Falls Ihnen das passiert, wird DocFetcher wahrscheinlich eine "No space left on device" Fehlermeldung anzeigen. Diese Feldermeldung wird verschwinden, sobald Sie das Ordner-.berwachungs-Limit erh.hen. Bspw. wird de

C:\Program Files (x86)\DocFetcher\help\German\DocFetcher_Manual_files\bullet.png

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PNG image data, 6 x 6, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	167
Entropy (8bit):	5.440385043794193
Encrypted:	false
SSDEEP:	3:yionv//thPlHl1fMLts2m2/uDlhlbz22tdllF9R9QEC3kiHKZqH/JltB1p:6v/lhPlfMRFB/6TxltnlFaECoqfJltjp
MD5:	9DDD21AE4DE2B5F02FAF4BC4CD38E626
SHA1:	25B4A39471C1B1B8D0C606306E5E3BD3D6861DE3
SHA-256:	EFB34ABB60F2695FC30721B5FDAEEEE93908C2C386159C9B16FE397A22A171F4
SHA-512:	6A89D9CD546F4BDE33B97D61FACAB79CCDEE6840AE632708050EFFA022D45D3347494D74B8A3045EA9713E34711578A3BEC5B3C018CC490A5D9B716348A7861A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............o.x.....sRGB.........pHYs.................tIME.....+3.gX.....tEXtComment.Created with GIMPW.......IDAT..c...g@.L....B......iO.....IEND.B`.

C:\Program Files (x86)\DocFetcher\help\German\DocFetcher_Manual_files\style.css

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	1162
Entropy (8bit):	5.001094128497315
Encrypted:	false
SSDEEP:	24:UhuRknUSuE3ajUBEuECjwHWPi7u8Sn7T+smAe7BAlzaQlZ1H6kxLdUldFv:UoiuEqIEuEcw24VyzaQlZ1+V
MD5:	A78F0EB0A442B9D36992E1C597A4E08D
SHA1:	9451330033F306E82E06DEBFBA34849A565695AC
SHA-256:	0689C72CC66BCD159BAAB231957E1A6D1235D0D1A8E82243CA854167C7A81306
SHA-512:	880B54E996C9B38EF655570C9384759F66159EFE6EE3CDC605F59B0F31B7053E0E5382D35EB592478F23D6D7D6DAC2DC4569B0A8B33A9E5C3A21A920CF84AC1B
Malicious:	false
Reputation:	low
Preview:	body {..font:95% Helvetica;..margin-left: auto;..margin-right: auto;..padding: 10px;.}..div#main {..text-align: left;..list-style-position: outside;..margin-bottom: 20px;.}..div.header {..text-align: center;..border-bottom: medium silver solid;..padding: 10px;..margin-bottom: 20px;.}..div.footer {..text-align: center;..border-top: medium silver solid;..padding: 10px;.}..div#main, div.header, div.footer {..max-width:640px;..margin-left:auto;..margin-right:auto;..width:expression(document.body.clientWidth > 640? "640px": "auto" );.}...p-label {..font-weight: bold;.}..a {..text-decoration: none;..color: blue;.}..a:hover {..text-decoration: underline;.}..h1 {..font-size: 125%.}..h2 {..font-size: 100%.}..ul {..list-style-image: url(bullet.png);.}..ul.level2 {..margin-left: 10px;..padding-left: 10px;.}..li {..padding-top: 2px;..padding-bottom: 2px;.}..table {...padding: 0;...border: 1px solid silver;...border-collapse: collapse;...text-align: center;..width: 100%..}...table th {...padding: 8

C:\Program Files (x86)\DocFetcher\help\Italian\DocFetcher_Manual.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3406), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	19769
Entropy (8bit):	4.66434054321276
Encrypted:	false
SSDEEP:	384:C1NL8lE8ujTFth3tL/BoVxrz++G28XibPDCsqRi5mA:C1NX3TFthFZoV57bOHy
MD5:	CA6821DCA6EB1BE1AE5634D053414F26
SHA1:	2A820C31ECE6159B64E7B6E8FE1B334605F5EE25
SHA-256:	A50C5AA87ED18B004AB6CF0211D534E2970098B14855713EB0BBC251058157F5
SHA-512:	1310BC2AF22CEE1C7BC01656554EB9929C44A8ADF59B3725F7A394C8D55A770083A287245D4B9944E2A5C7CE515A54377916495C0F72BA315BBEDF63E12C3C63
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>Guida di DocFetcher</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Topoldo" name="author">....<link rel="stylesheet" href="DocFetcher_Manual_files/style.css" type="text/css">...</head>...<body>....<div id="main">.....<div style="float: right; color: gray;">......DocFetcher 1.1.25<br/>.....</div>.....<h1>Introduzione</h1><p>DocFetcher . una applicazione <em>open source</em> che consente di effettuare ricerche all'interno del proprio computer riguardanti i file e il loro contenuto. Si pu. pensare a questa applicazione come al motore di ricerca <em>Google</em> applicato ai propri file louser.</p><p><strong>Ricerca basata sugli indici</strong>: poich. nella maggior parte dei casi effettuare una ricerca direttamente all'interno dei documenti stessi risulterebbe troppo lento, DocFetcher crea degli <em>indici delle cartelle<

C:\Program Files (x86)\DocFetcher\help\Italian\DocFetcher_Manual_files\Indexing_Options.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (4791), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	7642
Entropy (8bit):	4.677115356281642
Encrypted:	false
SSDEEP:	96:C7z95vlJpy/3V4gQ+UdOoCv4Z16MPQBfGP+XwpEtEdPyl8PUkHP5ZNlzo7oc6eC3:C7z/vl2RQ+uHBsMku2gpfd/WSef/Jqj
MD5:	7BAF98662F375E19DC3D4E369E11517F
SHA1:	9624C0621CA9C7617209D77AC917B7AB012EE1A6
SHA-256:	18B3FA3C26E49313D4EF6946DF61EA2DF25320D79793468586EEA79005DAEAA6
SHA-512:	2D7B97206F99D28E44E108507F413CA51BEA60BD8BDC446419398E51C6162E14042683C1B0C7656CC4E47CFB404211E0BABFC1F751666B8292646AD84F54D7E7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>Guida di DocFetcher - Opzioni di indicizzazione</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Topoldo" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">Ritorno alla pagina principale</a>....</div>....<div id="main">.....<h1>L'idea di fondo: una coda di attivit. di indicizzazione</h1><p>La finestra di configurazione dell'indicizzazione . costituita di una o pi. schede, ciascuna delle quali rappresenta un indice da creare o da aggiornare. Tutte le schede assieme costituiscono la <em>coda di attivit.</em> che deve essere eseguita, le cui voci vengono processate una ad una. A questa coda . possibile aggiungere ulteriori attivit. utilizzando il pulsante <code>'+'</code> posto in alto a des

C:\Program Files (x86)\DocFetcher\help\Italian\DocFetcher_Manual_files\Memory_Limit.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1564), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	3919
Entropy (8bit):	4.871783930822412
Encrypted:	false
SSDEEP:	96:CGz/ybzgLJKazm3hNZHajmGqUIL6RDG1PWYj5CnWp+fj:CGzqbELJKazmRNZ3/TOpGddqACj
MD5:	97C9BF433D00EE1DCD06C1CFE290407F
SHA1:	12EFB49CB7CE4390DB124D7A446F80715E774958
SHA-256:	7A085820C7719C8D52916FCC758A4B407D9226B517DA67176D985AF309EE1442
SHA-512:	19574CFA815F1F303F45D769D552D9FBB7D94D8ECC87EC9180FA4AEC0B0154D8751B54354E385FABD729F7997C1F9CACD66318642E4E453CD28C152E77F52388
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>Guida di DocFetcher - Come aumentare la quantit. di memoria</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Topoldo" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Caveats">Ritorno alla pagina principale</a>....</div>....<div id="main">.....<h1>Come aumentare la quantit. di memoria disponibile</h1><p>DocFetcher ha un limite prefissato di memoria disponibile di 256 MB. Esso viene impostato all'avvio del programma. Pu. venire aumentato giocando con i diversi programmi di avvio che vengono forniti con DocFetcher e che sono sistema operativo-specifici.</p><h2>Windows</h2><p>La versione di DocFetcher per Microsoft Windows . dotata di svariati programmi di avvio tra loro alternativi e gi. pronti all'uso i qual

C:\Program Files (x86)\DocFetcher\help\Italian\DocFetcher_Manual_files\Portable_Repositories.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1487), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	5464
Entropy (8bit):	4.775548128328682
Encrypted:	false
SSDEEP:	96:C+LzShh+1chyvpCoUiXdvu0ZmAWwKMT+tNnzctNTfj:CAzW+1cup/UiMBzMStGtNTfj
MD5:	7FC950EAE615E3D6053ADAA9CFE75C6F
SHA1:	3A9E883C3A8D3C6AC836BE480A4D783B6963FFB4
SHA-256:	1C4F19EF35C252240469C39EE15AB34EB0B90232422430D000DDF8AB23774E3C
SHA-512:	D5B3B5477055BCA4E79C8D6B078E32789C2BA0641A462BBF44B5372AD358BF12E1B9EEA706A9EDD9BFA3C21CB0503C92314CC526598D80F891D704A8F3200DFA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>Guida di DocFetcher - Raccolte di documenti portatili</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Topoldo" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">Ritorno alla pagina principale</a>....</div>....<div id="main">.....<h1>Raccolte di documenti portatili</h1><h2>Modalit. d'uso semplice</h2><p>La versione portatile di DocFetcher consente di portare con s. (e di ridistribuire) una raccolta di documenti completamente indicizzata e totatmente ricercabile. Qualora non si disponga della versione portatile la si pu. scaricare <a href="http://docfetcher.sourceforge.net">qui</a>.</p><p>La versione portatile non richiede alcuna procedura di installazione; . sufficiente estrarre il contenuto dell'a

C:\Program Files (x86)\DocFetcher\help\Italian\DocFetcher_Manual_files\Preferences.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (369), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	3627
Entropy (8bit):	4.674062053363119
Encrypted:	false
SSDEEP:	48:Cqg6AnqfzISjup/nBfTU+9GyjotclZptI4H/TMnLm1Xqnqfj:CUzIfBfTmyjotcl247vltj
MD5:	D9478067A480946D606B6328DD6CA461
SHA1:	4464233BB87C251EA7BD7D842723BE48076AF7E7
SHA-256:	85EBC72BA5A39B44665FF8F8FB6E740DB9D1ADE43FB499AC4B170D478D9C2A97
SHA-512:	D0CDC1E66858C0114C003F494AF5A7D6B8838B92EE869CB3A89B771EDCE9EEE746A61CFF2216049E4747B3A6FCD8E4FDA1A19D0C36196B4368FA41B325EBF4E3
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>Guida di DocFetcher - Preferenze</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Topoldo" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Subpages">Ritorno alla pagina principale</a>....</div>....<div id="main">.....<h1>Preferenze</h1>.<table>. <thead>. <tr>. <th>Opzione </th>. <th>Commento</th>. </tr>. </thead>. <tbody>. <tr>. <td>All'avvio visualizza la Guida </td>. <td>Apre la Guida quando DocFetcher si avvia.</td>. </tr>. <tr>. <td>Nelle interrogazioni, usa l'operatore OR come predefinito al posto di AND </td>. <td>Se questa opzione . selezionata, DocFetcher tratta le stringhe consecutive presenti in una interrogazione come se fossero concatenate con l'operatore

C:\Program Files (x86)\DocFetcher\help\Italian\DocFetcher_Manual_files\Query_Syntax.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3401), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	10213
Entropy (8bit):	4.703553671307992
Encrypted:	false
SSDEEP:	192:CszR1+lzHTKg2UW6/xRrcdZGX+6ykcaV3eXjGv672jROedSrLyxpj:CszL8Gg2f6/xyZ+yLzy6QvdKLwj
MD5:	38C802DBBDF38794D74DE01FA16E1973
SHA1:	46647085EEA7100A3CFA12389118684E20787B04
SHA-256:	D1320362AD284424DA2DD9EB3606C699EFA3E9F838BFFCC344CAD8BDDB6C7327
SHA-512:	BB8ADF8C4FFB50B43059C02852C49BDFA4D75BCA094218068498A355B60EE2EF1BD6F74137D46D4166E66A48469C7B3B0F58ECD69906BBB9DAF9BF0E50BEC19E
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>Guida di DocFetcher - Sintassi delle interrogazioni</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Topoldo" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">Ritorno alla pagina principale</a>....</div>....<div id="main">.....<h1>Sintassi delle interrogazioni</h1><p>Questa pagina fornisce una panoramica della sintassi disponibile per le interrogazioni a partire da quelle pi. semplici fino a quelle avanzate. La sintassi delle interrogazioni proviene da Apache Lucene, il motore di ricerca che sta alla base di DocFetcher e che . descritto in maniera pi. tecnica sul sito di Lucene alla pagina <a href="http://lucene.apache.org/java/3_4_0/queryparsersyntax.html">sintassi delle interrogazioni</a>.</p><h2

C:\Program Files (x86)\DocFetcher\help\Italian\DocFetcher_Manual_files\Regular_Expressions.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (5715), with CRLF line terminators
Category:	dropped
Size (bytes):	6419
Entropy (8bit):	4.813833746346719
Encrypted:	false
SSDEEP:	96:C+KzyWcoPoXr/3BBThOLWD0AT5ew7yVbKxW2i/cWCGSef2MZVk9h/Vrej:CDzM1tLOLWDhYEyVumEWCDX96j
MD5:	773AC7C78B400446213F27843EDC06D4
SHA1:	2152039613666216C22A39FF79D1C2313C1C6A04
SHA-256:	2BA2EDD4325E177659129F902DC4BD7F47250EA32250791FEA925E30AF92159F
SHA-512:	710A022BFDD97D0A205C193A0C4190AED37AB2BD2F2A431C5F739F20B2407081F12DC6B6503600AEE8811E6F594F3DFC7D3BE138DA6986A7396AFCCBB8A7E950
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>Guida di DocFetcher - Espressioni regolari (RegEx)</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Topoldo" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">Ritorno alla pagina principale</a>....</div>....<div id="main">.....<h1>Espressioni regolari (Regular Expressions, RegEx)</h1><p>Questa sezione serve a fornire una breve introduzione alle espressioni regolari. Non . di certo esaustiva, poich. le espressioni regolari rappresentano una tipologia ben definita e a se stante del linguaggio delle corrispondenze. Qualora si voglia approfondire l'argomento, . comunque possibile trovare tonnellate di informazioni in internet; . sufficiente cercare "tutorial espressioni regolari" o "introduzione alle e

C:\Program Files (x86)\DocFetcher\help\Italian\DocFetcher_Manual_files\Release_Notification.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	985
Entropy (8bit):	5.141859214812369
Encrypted:	false
SSDEEP:	24:hMC6vyNinHCztcvgqVQwihfzsgcF9v7rK2VQwihfj:CqgiAnSfzfcFdNVnSfj
MD5:	6A00AECFBD66BC812141973BE6FDDA10
SHA1:	445314F646E2D66B8A4E1162C43E88A553C8A7A8
SHA-256:	3703B718F53534173FB9D6416C55E8A5D784F31F768CC41F6D0DEB35B285DF2E
SHA-512:	6716DB2220D73EF9455EE83D64FE137A999718D2246FA96E735EC013A32933505E2A8F82216D9EDF86F8DD56E7A32F248D322F2F676E3ECD8203D4FA2810C183
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>Guida di DocFetcher - Notifica del rilascio di nuove versioni del programma</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Topoldo" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">Ritorno alla pagina principale</a>....</div>....<div id="main">.....<h1>Notifica del rilascio di nuove versioni del programma</h1><p>Per ricevere la notifica di nuove versioni di DocFetcher, andare all'URL: <a href="http://sourceforge.net/projects/docfetcher">http://sourceforge.net/projects/docfetcher</a> e fare clic sul pulsante <em>Get Updates</em>.</p>....</div>....<div class="footer">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">Ritorno alla pagina principale</a>....</div>...</body>..</html>..

C:\Program Files (x86)\DocFetcher\help\Italian\DocFetcher_Manual_files\Watch_Limit.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (563), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	1623
Entropy (8bit):	5.032431836464679
Encrypted:	false
SSDEEP:	24:hMC6vyNiNGncCztcvgqVQwi7ZfzsyGnZIZUMpgucw+SVprSm/GmqiiuIIuQlaQpw:Cqgwn1AnqfzCnqUQLc+pmoPpymnqfj
MD5:	56D5526273B5EB37304C7A96E0572223
SHA1:	138DAF6A673F2D1169E3FFDC6F0E1A38BC2E6DD7
SHA-256:	1D4FB02B1337E01505D4B252729AB06E5680C56E8D468588835AF899DF12EB74
SHA-512:	B31E83B132FC7843589100BB1877905F97C8003D7B0CBA6C19409EB3F498B6215862E1659C37F81F5013C3FD13B831F982454367C50D8432AF05496336A95AB5
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>Guida di DocFetcher - Come aumentare i limiti di sorveglianza delle cartelle (Linux)</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Topoldo" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Subpages">Ritorno alla pagina principale</a>....</div>....<div id="main">.....<h1>Come aumentare i limiti di sorveglianza delle cartelle (Linux)</h1><p>In Linux, i processi possono <em>sorvegliare</em> un massimo di 8192 cartelle. Questo limite potrebbe essere raggiunto se si indicizzassero delle cartelle fra loro altamente nidificate. Se questo limite viene superato, DocFetcher fa comparire il messaggio di errore: <em>No space left on device</em>. . possibile aggirare questo problema innalzando i limiti di sorveglianza delle c

C:\Program Files (x86)\DocFetcher\help\Italian\DocFetcher_Manual_files\bullet.png

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PNG image data, 6 x 6, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	167
Entropy (8bit):	5.440385043794193
Encrypted:	false
SSDEEP:	3:yionv//thPlHl1fMLts2m2/uDlhlbz22tdllF9R9QEC3kiHKZqH/JltB1p:6v/lhPlfMRFB/6TxltnlFaECoqfJltjp
MD5:	9DDD21AE4DE2B5F02FAF4BC4CD38E626
SHA1:	25B4A39471C1B1B8D0C606306E5E3BD3D6861DE3
SHA-256:	EFB34ABB60F2695FC30721B5FDAEEEE93908C2C386159C9B16FE397A22A171F4
SHA-512:	6A89D9CD546F4BDE33B97D61FACAB79CCDEE6840AE632708050EFFA022D45D3347494D74B8A3045EA9713E34711578A3BEC5B3C018CC490A5D9B716348A7861A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............o.x.....sRGB.........pHYs.................tIME.....+3.gX.....tEXtComment.Created with GIMPW.......IDAT..c...g@.L....B......iO.....IEND.B`.

C:\Program Files (x86)\DocFetcher\help\Italian\DocFetcher_Manual_files\style.css

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	1162
Entropy (8bit):	5.001094128497315
Encrypted:	false
SSDEEP:	24:UhuRknUSuE3ajUBEuECjwHWPi7u8Sn7T+smAe7BAlzaQlZ1H6kxLdUldFv:UoiuEqIEuEcw24VyzaQlZ1+V
MD5:	A78F0EB0A442B9D36992E1C597A4E08D
SHA1:	9451330033F306E82E06DEBFBA34849A565695AC
SHA-256:	0689C72CC66BCD159BAAB231957E1A6D1235D0D1A8E82243CA854167C7A81306
SHA-512:	880B54E996C9B38EF655570C9384759F66159EFE6EE3CDC605F59B0F31B7053E0E5382D35EB592478F23D6D7D6DAC2DC4569B0A8B33A9E5C3A21A920CF84AC1B
Malicious:	false
Reputation:	low
Preview:	body {..font:95% Helvetica;..margin-left: auto;..margin-right: auto;..padding: 10px;.}..div#main {..text-align: left;..list-style-position: outside;..margin-bottom: 20px;.}..div.header {..text-align: center;..border-bottom: medium silver solid;..padding: 10px;..margin-bottom: 20px;.}..div.footer {..text-align: center;..border-top: medium silver solid;..padding: 10px;.}..div#main, div.header, div.footer {..max-width:640px;..margin-left:auto;..margin-right:auto;..width:expression(document.body.clientWidth > 640? "640px": "auto" );.}...p-label {..font-weight: bold;.}..a {..text-decoration: none;..color: blue;.}..a:hover {..text-decoration: underline;.}..h1 {..font-size: 125%.}..h2 {..font-size: 100%.}..ul {..list-style-image: url(bullet.png);.}..ul.level2 {..margin-left: 10px;..padding-left: 10px;.}..li {..padding-top: 2px;..padding-bottom: 2px;.}..table {...padding: 0;...border: 1px solid silver;...border-collapse: collapse;...text-align: center;..width: 100%..}...table th {...padding: 8

C:\Program Files (x86)\DocFetcher\help\Japanese\DocFetcher_Manual.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1326), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	20024
Entropy (8bit):	5.60026473662204
Encrypted:	false
SSDEEP:	384:CyWQbmlDh0sTYlSA/gi6jK9F+/bO17w1ea:CyVKlDOllS/+9F6O17za
MD5:	CB6C22ECCE5C5AF33339E7FCFB146FA9
SHA1:	9219F3CD8909A717DF08B5F47CA84FA86939EB77
SHA-256:	C1ACC8E8D29E6F6953FEE8FE0E597D8CBC5EDBC2E8656F4EEB3C56852B9C0FCD
SHA-512:	6BEBB874A5E453886053DF38A8343B70D2E72B0B42D6178C2124FE5A008357A4E241F17840696BC3A7DE0076B0D6EF6584AA1F88C12827B8BC5805B3C66FD6B5
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher Manual</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Naoki Toya" name="author">....<link rel="stylesheet" href="DocFetcher_Manual_files/style.css" type="text/css">...</head>...<body>....<div id="main">.....<div style="float: right; color: gray;">......DocFetcher 1.1.25<br/>.....</div>.....<h1>....</h1><p>DocFetcher .............................................Google................</p><p><strong>...........</strong>: DocFetcher ...............................................................................

C:\Program Files (x86)\DocFetcher\help\Japanese\DocFetcher_Manual_files\Indexing_Options.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, ASCII text, with very long lines (3740), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	5979
Entropy (8bit):	4.775397602606146
Encrypted:	false
SSDEEP:	96:CFobnjJ6b2fGNR6Zw/l9QRCinrvOXQR/yy+kIUYWqgd7NbPhBJ/5Qq4UqebEN:CFOI2GSsCr+K/yFUKe5pPPzq
MD5:	BBFC553D813F46AEB9249DB8F935EB8B
SHA1:	FEED47734C31284CE94AAC31FE00B9E58C69B4B5
SHA-256:	AE500503A4C314C09936E52D38A9E74564952912C6822B359852FDA2929614E3
SHA-512:	69BD4DFE42D9FDD05C5D1AE569510D96E72B9BA54D299594C7D9851C804C9788F5276F5520ED97B45FFB1889C3923DCB9F5E9EFAD599DA2D1CB1C6859B8403E5
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher Manual - Indexing Options</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Naoki Toya" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">Back to main page</a>....</div>....<div id="main">.....<h1>Basic Idea: A Queue of Indexing Tasks</h1><p>The indexing configuration window is made up of one or more tabs, each of which represents an index to be created or updated. All the tabs together form a task queue, whose items are processed one by one. You can add more tasks to the queue via the <code>'+'</code> button on the top right.</p><p>Each tab has a <code>Run</code> button on the bottom right. By clicking it, you confirm that the task is properly configured and ready for indexing. The i

C:\Program Files (x86)\DocFetcher\help\Japanese\DocFetcher_Manual_files\Memory_Limit.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, ASCII text, with very long lines (1310), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	3145
Entropy (8bit):	4.955776735754447
Encrypted:	false
SSDEEP:	48:CqTSCnoc9smzFxOer7dv/3+h3nP0WVr1GgCA5i/r+moFfzE1/1q2Ya+PzifKMM44:CTc1xI+vmN7XCAcjhYRz/aFq
MD5:	42DD01B201A2DE2B09B370FBB602F30E
SHA1:	0F2BB9D066B0ACB01AFDB668F4388337A62E3733
SHA-256:	88B9E9208C635F61732F3218AADD6C43B13E31F2E0547AE47E02C567DDA17696
SHA-512:	F23D037E561E2D45B73DBF844B3C49B71324FA6445F5E5D00E5D40C1A1D21DA982135829DA5EA49EB7609F7AFF2A28ACF2E96D0139D665F404A726BA10D98FB8
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher Manual - How to raise the memory limit</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Naoki Toya" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Caveats">Back to main page</a>....</div>....<div id="main">.....<h1>How to raise the memory limit</h1><p>DocFetcher has a default memory limit of 256 MB, which is set on startup. The limit can be raised by fiddling with the platform-specific launchers:</p><h2>Windows</h2><p>The Windows version of DocFetcher ships with ready-made alternative launchers that set different heap sizes. Follow these steps to use them:</p>.<ul>. <li>Open the DocFetcher folder. If you're using the portable version of DocFetcher, this is just the folder you downloaded and unpacke

C:\Program Files (x86)\DocFetcher\help\Japanese\DocFetcher_Manual_files\Portable_Repositories.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, ASCII text, with very long lines (1252), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	4285
Entropy (8bit):	4.865025480312264
Encrypted:	false
SSDEEP:	96:CLPl+L7ahr+68jqLeisoHXVP5FAsiSRoCCpchGl:CL96atN8jqNqai/cMl
MD5:	937F9682A1FA50D3DA2961C92E655E72
SHA1:	15DB25127F2E136909A4BBB2B478E005432E498B
SHA-256:	CFF8FA5CE6C4420EA4BFCEC4F3460386A3E8563BC0C6E67D6BC6DEEADA942D94
SHA-512:	43086047835E0B429FAB3763F9AF3798F56C07A9A7F40DC2A5A09F92C1502F3773DE5187EE996D1CA21892E3ABFAE6D968C5181B9562003A8ED0C9980E0076E1
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher Manual - Portable Document Repositories</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Naoki Toya" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">Back to main page</a>....</div>....<div id="main">.....<h1>Portable Document Repositories</h1><h2>Basic usage</h2><p>The portable version of DocFetcher essentially allows you to carry around (and even redistribute) a fully indexed and fully searchable document repository. If you don't have the portable version yet, you can download it from the <a href="http://docfetcher.sourceforge.net/download.html">project website</a>.</p><p>The portable version does not require any installation; just extract the contents of the archive into a folder of your

C:\Program Files (x86)\DocFetcher\help\Japanese\DocFetcher_Manual_files\Preferences.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, ASCII text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	2933
Entropy (8bit):	4.746559119861607
Encrypted:	false
SSDEEP:	48:CqTYCnKY7jdMnVTJ9deD2eev5M725lo15kJb0tP6HxN0DTudaCzeAoqnU:CTYiheD2j5Uolo1Sb9HMkaLAoh
MD5:	97584331B3E17087A84DFA4BEA0924C0
SHA1:	29E51CC94BD94056A7533D40DD8F73B286E50B5F
SHA-256:	1AB5B7BDDDB8740E473B3D099DFF3EC52E447EEAB93C297CF0AF9673F2EC8219
SHA-512:	776D28C33554314944C3565E9643BAE975722E83210D671784B18E049ADE2E960B267FAAB84DECEA20F46E025C326B0F358D20B004A07AD8D930C3E29B03C66C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher Manual - Preferences</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Naoki Toya" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Subpages">Back to main page</a>....</div>....<div id="main">.....<h1>Preferences</h1>.<table>. <thead>. <tr>. <th>Option </th>. <th>Comment</th>. </tr>. </thead>. <tbody>. <tr>. <td>Show manual on startup </td>. <td>Whether to open the manual when DocFetcher starts up.</td>. </tr>. <tr>. <td>Use OR operator as default in queries (instead of AND) </td>. <td>If checked, DocFetcher will treat consecutive words in a query as if they were concatenated with the <code>OR</code> operator. Otherwise, the <code>AND</code> operator will be u

C:\Program Files (x86)\DocFetcher\help\Japanese\DocFetcher_Manual_files\Query_Syntax.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, ASCII text, with very long lines (2369), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	8853
Entropy (8bit):	4.78432170017609
Encrypted:	false
SSDEEP:	96:CGqrFBapC7B/CYFQ2oOZNCnfz0KyXZ2W1w7KmVHHwuE5lOr2itPYZN9iQBm9XjSq:CGqGI/GUKytJB4qFHnNwAm9N+w
MD5:	FEEEFA053FD4D875DAD5E7B4B7B29D99
SHA1:	EE9B8FA344115BECEEA6747161F72BD841E9F382
SHA-256:	4DA89B1B2C47DD5767FCF47B7F1B71BC63B2DDF361A8123AF70C85E8692D1A53
SHA-512:	F2FF4BB9EEAC89B1F905F02830A5968251773D0FF3CC71CDD2F1FF1D191D1F921E8467FA89E5CB72BACB7A5A5721402B356D411EF8474F338A7918E3F65D1E04
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher Manual - Query Syntax</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Naoki Toya" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">Back to main page</a>....</div>....<div id="main">.....<h1>Query Syntax</h1><p>This page gives an overview of the available query syntax, going from "basic" to "advanced". The query syntax is provided by Apache Lucene, DocFetcher's underlying search engine, and it's described in a more technical manner on Lucene's <a href="http://lucene.apache.org/java/3_4_0/queryparsersyntax.html">query syntax page</a>.</p><h2>Boolean Operators</h2><p>DocFetcher supports the boolean operators <code>OR</code>, <code>AND</code> and <code>NOT</code>. If words are concatenated <em

C:\Program Files (x86)\DocFetcher\help\Japanese\DocFetcher_Manual_files\Regular_Expressions.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, ASCII text, with very long lines (4538), with CRLF line terminators
Category:	dropped
Size (bytes):	5172
Entropy (8bit):	4.889386360828507
Encrypted:	false
SSDEEP:	96:CUSgMWyBxj0nfE5CvnFwMnwLFT2MeKIWZqHeNy/IfCzhJE6c7VNMQgo:CUHMWs2nrwLJ2WZly/8Cw6m9go
MD5:	1895F9AF552D2420E559574ABEAB473F
SHA1:	8B7ACF2ABCFA2D81C8731E2B58624CE4957B2DA7
SHA-256:	6AEBCE7CDF063C53753721A7F8693D95EAB35D9F542C8EA932737A8BC8EA17D2
SHA-512:	91E65E37D49966DF924C41AAD9B2892071CF62C0CD56AF1DA00174B82F4DA0531557D27FC8C2933B7A129A9A6C5EF79620943870F87A8C207E80FA36B790891B
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher Manual - Regular Expressions</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Naoki Toya" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">Back to main page</a>....</div>....<div id="main">.....<h1>Regular Expressions</h1><p>This page is meant to be a very brief introduction to regular expressions. It is by no means exhaustive, since regular expressions basically represent an entire pattern matching language. If you want to dig deeper, you can find a ton of information about it on the internet; just search for 'regular expression tutorial' or 'regular expression introduction' or something like that.</p><h2>Matching all Microsoft Excel files: <code>.*\.xlsx?</code></h2><p>In regular expressi

C:\Program Files (x86)\DocFetcher\help\Japanese\DocFetcher_Manual_files\Release_Notification.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, ASCII text, with very long lines (433), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	2058
Entropy (8bit):	5.037962888267697
Encrypted:	false
SSDEEP:	48:CqTCCnySEGwi+HKWM+lIyLsQWxRidgG4sY1XTcWOaLn8:C3SEq3UVWxEeG4sn
MD5:	267C74FBE098F535E89A80DEBA83BDD0
SHA1:	8D5849F22565F9904F3E6473D7069E245C709B01
SHA-256:	8BE038586E4E7201CD4BD9492A347B49AD486785BA82B7F4789F60B1E93954D3
SHA-512:	1AA962696E1C38B59266455F527AE62B3D082261D15615A08AC18D6E6026D8DD6CD90CCC9E429F241C0B6C58EA74EDB475A7AB1096C5EAFC531FB195E55C118E
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher Manual - Release Notification</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Naoki Toya" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">Back to main page</a>....</div>....<div id="main">.....<h1>Release Notification</h1><p>There are several ways for you to receive notification of new DocFetcher releases:</p>.<ul>. <li><strong><em>Email via sourceforge.net</em></strong>: On <a href="http://sourceforge.net/projects/docfetcher">http://sourceforge.net/projects/docfetcher</a>, there's an <code>Update Notifications</code> box, where you can enter your email address in order to receive release notifications.</li>. <li><strong><em>Email via freecode.com</em></strong>: New DocFetcher releases

C:\Program Files (x86)\DocFetcher\help\Japanese\DocFetcher_Manual_files\Watch_Limit.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, ASCII text, with very long lines (416), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	1332
Entropy (8bit):	5.167242323736594
Encrypted:	false
SSDEEP:	24:hMC6vyTKccCzt3qVQwiRsTc4hc54oI5bSmqiCm8ZLZFOQWQwi9:CqTj1CnKdFWoOt2MnU
MD5:	B1FCED9A9603438748A85A2E34873899
SHA1:	436ED3A88E3659A042AACBE829FA1EA0347A9D55
SHA-256:	EC198CE39F5614188E80DAAA1B0892D1BB29FE81213E26634F0E494D85678DEF
SHA-512:	65CC9BA895E2580E84AF638AE91D1CBA9B7C1B456AB92644B6D70CF33037A85C0BAC9A5FB2FF540414A2728B751155EB143FD01BA948BE4EEF5FFF3B0F3BB2E4
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher Manual - How to raise the folder watch limit (Linux)</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Naoki Toya" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Subpages">Back to main page</a>....</div>....<div id="main">.....<h1>How to raise the folder watch limit (Linux)</h1><p>On Linux, processes can by default watch at most 8192 folders. You might reach this limit if you index a very deep hierarchy of folders. If that happens, DocFetcher will probably show a "No space left on device" error message. You can work around this by raising the watch limit. For example, this command will temporarily raise the watch limit to 32000:</p>.<pre><code>sudo echo 32000 > /proc/sys/fs/inotify/max_user_watches.</c

C:\Program Files (x86)\DocFetcher\help\Japanese\DocFetcher_Manual_files\bullet.png

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PNG image data, 6 x 6, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	167
Entropy (8bit):	5.440385043794193
Encrypted:	false
SSDEEP:	3:yionv//thPlHl1fMLts2m2/uDlhlbz22tdllF9R9QEC3kiHKZqH/JltB1p:6v/lhPlfMRFB/6TxltnlFaECoqfJltjp
MD5:	9DDD21AE4DE2B5F02FAF4BC4CD38E626
SHA1:	25B4A39471C1B1B8D0C606306E5E3BD3D6861DE3
SHA-256:	EFB34ABB60F2695FC30721B5FDAEEEE93908C2C386159C9B16FE397A22A171F4
SHA-512:	6A89D9CD546F4BDE33B97D61FACAB79CCDEE6840AE632708050EFFA022D45D3347494D74B8A3045EA9713E34711578A3BEC5B3C018CC490A5D9B716348A7861A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............o.x.....sRGB.........pHYs.................tIME.....+3.gX.....tEXtComment.Created with GIMPW.......IDAT..c...g@.L....B......iO.....IEND.B`.

C:\Program Files (x86)\DocFetcher\help\Japanese\DocFetcher_Manual_files\style.css

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	1162
Entropy (8bit):	5.001094128497315
Encrypted:	false
SSDEEP:	24:UhuRknUSuE3ajUBEuECjwHWPi7u8Sn7T+smAe7BAlzaQlZ1H6kxLdUldFv:UoiuEqIEuEcw24VyzaQlZ1+V
MD5:	A78F0EB0A442B9D36992E1C597A4E08D
SHA1:	9451330033F306E82E06DEBFBA34849A565695AC
SHA-256:	0689C72CC66BCD159BAAB231957E1A6D1235D0D1A8E82243CA854167C7A81306
SHA-512:	880B54E996C9B38EF655570C9384759F66159EFE6EE3CDC605F59B0F31B7053E0E5382D35EB592478F23D6D7D6DAC2DC4569B0A8B33A9E5C3A21A920CF84AC1B
Malicious:	false
Reputation:	low
Preview:	body {..font:95% Helvetica;..margin-left: auto;..margin-right: auto;..padding: 10px;.}..div#main {..text-align: left;..list-style-position: outside;..margin-bottom: 20px;.}..div.header {..text-align: center;..border-bottom: medium silver solid;..padding: 10px;..margin-bottom: 20px;.}..div.footer {..text-align: center;..border-top: medium silver solid;..padding: 10px;.}..div#main, div.header, div.footer {..max-width:640px;..margin-left:auto;..margin-right:auto;..width:expression(document.body.clientWidth > 640? "640px": "auto" );.}...p-label {..font-weight: bold;.}..a {..text-decoration: none;..color: blue;.}..a:hover {..text-decoration: underline;.}..h1 {..font-size: 125%.}..h2 {..font-size: 100%.}..ul {..list-style-image: url(bullet.png);.}..ul.level2 {..margin-left: 10px;..padding-left: 10px;.}..li {..padding-top: 2px;..padding-bottom: 2px;.}..table {...padding: 0;...border: 1px solid silver;...border-collapse: collapse;...text-align: center;..width: 100%..}...table th {...padding: 8

C:\Program Files (x86)\DocFetcher\help\Turkish\DocFetcher_Manual.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2517), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	17208
Entropy (8bit):	5.0736038818566715
Encrypted:	false
SSDEEP:	192:CBqaVgePqMcKBgNDBLtQ3X/islx+JYbuoF4lXXLkloox7iiihrSx8D5Zvs66:CBqsPqMcKBgnLd0o8bOXLkBx6gMo
MD5:	FBFE05FA044618C9DE78E9145EFA3A49
SHA1:	2C261B825F3302202A261ACEC93C85ADED9BDD23
SHA-256:	A4E73D6884B5BB15EAEC672A9F0B9B4EA5DC309552E5516F78A3DAC0461927FB
SHA-512:	CF9270262F8034EF31EAF8C84B6B3D7DD4624EE32E7DF813E868D2C5974E558506EC87F27A35862BB2A2DDAED633D25AE2E6B155B5EC086715D89128E7EFC81B
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher K.lavuzu</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Osman .z" name="author">....<link rel="stylesheet" href="DocFetcher_Manual_files/style.css" type="text/css">...</head>...<body>....<div id="main">.....<div style="float: right; color: gray;">......DocFetcher 1.1.25<br/>.....</div>.....<h1>Giri.</h1><p>DocFetcher bir A..k Kaynak masa.st. arama uygulamas.d.r: Bilgisayar.n.zdaki dosyalar.n i.eri.ini araman.za izin verir. - Yerel dosyalar.n.z i.in Google olarak d...nebilirsiniz.</p><p><strong>Dizine dayal. arama</strong>: Do.rudan belgelerde arama yapmak, .ok say.da belge i.in pratik olmayan bir .ekilde yava. olaca..ndan, DocFetcher, arama yapmak istedi.iniz klas.rler i.in <em>dizinler</em> olu.turman.z. gerektirir. Bu dizinler, bir kitab.n arkas.ndaki dizini nas.l kulla

C:\Program Files (x86)\DocFetcher\help\Turkish\DocFetcher_Manual_files\Indexing_Options.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3899), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	6690
Entropy (8bit):	5.0956650070493525
Encrypted:	false
SSDEEP:	96:CQ8/1sZ1IQCkTMFjuFPbRtOb+4R4hCdDFmeTqAegE1Qz3j8v/Qe9E:CQ8/61PMU5bXOU89FmeTygE1Qz3j8nw
MD5:	4A93461ECFFF81C3D8E61472A2FF4E65
SHA1:	69E22462E46B3F04DEDC2693D6EEDE8E0F0C7BA1
SHA-256:	6EEEE6AB2352E0946F2C418CBB53A1243BA0554DB0CEF3FB9256E777A04C4201
SHA-512:	AEFE4B91E7CE206794D7D0E2FAADEDF1EA55DEE5A00C7F9537D7B4A83293D7C1FC94B0926BB0EA278B7D8371D7C97567F376C874732BFC7C90C03CF7E54A1E0C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher K.lavuzu - Dizin Olu.turma Se.enekleri</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Osman .z" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">Ana sayfaya d.n</a>....</div>....<div id="main">.....<h1>Temel Fikir: Dizin Olu.turma G.revlerinin S.ras.</h1><p>Dizin olu.turma yap.land.rma penceresi, her biri olu.turulacak veya g.ncellenecek bir dizini temsil eden bir veya daha fazla sekmeden olu.ur. T.m sekmeler birlikte, ..eleri birer birer i.lenen bir g.rev kuyru.u olu.turur. Sa. .stteki <code>'+'</code> d..mesiyle kuyru.a daha fazla g.rev ekleyebilirsiniz.</p><p>Her sekmenin sa. alt taraf.nda bir <code>.al..t.r</code> d..mesi vard.r. T.klayara

C:\Program Files (x86)\DocFetcher\help\Turkish\DocFetcher_Manual_files\Memory_Limit.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1315), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	3443
Entropy (8bit):	5.297123942883962
Encrypted:	false
SSDEEP:	48:CqT0t6nSCbJhH9R437GJi/rzU52TSWVGlzg2DZBK5mxsxIrQ7oG1qSE2SVsoaMGO:CNO3K38AzU5SWs2DlumG1tX8qy
MD5:	5D2ABDD0BB6AD241AE3B785C2F923C94
SHA1:	7B849A41CDD5162D18E199AF07AADFA9CC90C540
SHA-256:	4B4D926A962F601F57A8635301BEE210C698775584FED678828357674D00192A
SHA-512:	5D51187DACE4799743ABFFE416DA2536A4833F2FB7B028BA8C3528A88918BDDFCC09479A0B77BAF353BA782EC609C2DFC8304B6D381D756395652F4888EB346A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher K.lavuzu - Bellek s.n.r. nas.l y.kseltilir</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Osman .z" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Caveats">Ana sayfaya d.n</a>....</div>....<div id="main">.....<h1>Bellek s.n.r. nas.l y.kseltilir</h1><p>DocFetcher, ba.lang..ta belirlenen 256 MB'l.k bir varsay.lan bellek s.n.r.na sahiptir. Platforma .zel rampalarla oynayarak bu s.n.r y.kseltilebilir:</p><h2>Windows</h2><p>DocFetcher'in Windows s.r.m., farkl. y...n boyutlar. ayarlayan haz.r alternatif ba.lat.c.larla birlikte gelir. Bunlar. kullanmak i.in .u ad.mlar. izleyin:</p>.<ul>. <li>DocFetcher klas.r.n. a..n. DocFetcher'.n ta..nabilir s.r.m.n

C:\Program Files (x86)\DocFetcher\help\Turkish\DocFetcher_Manual_files\Portable_Repositories.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1233), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	4504
Entropy (8bit):	5.216245716140779
Encrypted:	false
SSDEEP:	96:C3ZaSNdDsPkeF0jTlw2LshzYBbgft8Th1548hpSwK:C3n5sPkoibgf211RSj
MD5:	3987944427FF1BF9AE25F84292F3D1F2
SHA1:	94D6721DA4C734BC32DC0913D05E7486F3D93AA2
SHA-256:	6F1C9BC0FFC9C7407EC63C918BB0A70743F0FAF5983E718FDCFE8E122029CE6E
SHA-512:	C4B60DCE4CCF17B1C4B28F34F794927F5DC2D9C28B8E473667AD4D6EE129549092A4C18652299A7C5646766288FF955E6013F2E4BE747AC42BA8897264B257A9
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher K.lavuzu - Ta..nabilir Belge Havuzlar.</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Osman .z" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">Ana sayfaya d.n</a>....</div>....<div id="main">.....<h1>Ta..nabilir Belge Havuzlar.</h1><h2>Temel kullan.m</h2><p>DocFetcher'.n ta..nabilir s.r.m., esasen tamamen indekslenmi. ve tamamen aranabilir bir belge havuzunu ta..man.za (ve hatta yeniden da..tman.za) izin verir. Hen.z ta..nabilir s.r.me sahip de.ilseniz, <a href="http://docfetcher.sourceforge.net">proje web sitesinden</a> indirebilirsiniz.</p><p>Ta..nabilir s.r.m herhangi bir kurulum gerektirmez; ar.ivin i.eri.ini se.ti.iniz bir klas.re ..karman.

C:\Program Files (x86)\DocFetcher\help\Turkish\DocFetcher_Manual_files\Preferences.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	3181
Entropy (8bit):	5.059793662444038
Encrypted:	false
SSDEEP:	48:CqTB6n/f9IKaLWigvEAK+y1zUQIudypWKzIgGANK3btNDQNwAV2I+0u+W9B2qnn:Czfum+wu1fOwE2F0Y9B2I
MD5:	0441FBD1A2A87F41F55AB215AA4B258B
SHA1:	B37D33C75875FD00E6B0A311188013DDC80921A2
SHA-256:	DACCBE431539FEBFCF8D6D8E9763B81DBA82FA4951EF437E1DB0FBDF4E426FA8
SHA-512:	62E155F9DB78290EA234D2AB40296B932EB02A0DE6ED15249C55058461CA9D25D8B487666A08BF157F3BA6F16628ED0063095A894BFAA524C08523D3ED4683E5
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher K.lavuzu - Tercihler</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Osman .z" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Subpages">Ana sayfaya d.n</a>....</div>....<div id="main">.....<h1>Tercihler</h1>.<table>. <thead>. <tr>. <th>Se.enek </th>. <th>Yorum</th>. </tr>. </thead>. <tbody>. <tr>. <td>Ba.lang..ta k.lavuzu g.ster </td>. <td>DocFetcher ba.lad...nda k.lavuzun a..l.p a..lmayaca...</td>. </tr>. <tr>. <td>Sorgularda varsay.lan olarak OR operat.r.n. kullan.n (AND yerine) </td>. <td>..aretliyse, DocFetcher bir sorgudaki ard...k kelimeleri <code>OR</code> operat.r.yle birle.tirilmi. gibi ele alacakt.r. Aksi takdi

C:\Program Files (x86)\DocFetcher\help\Turkish\DocFetcher_Manual_files\Query_Syntax.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2711), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	9311
Entropy (8bit):	5.053228939916683
Encrypted:	false
SSDEEP:	96:ChCTCTI7/g94QtJCr382IUzGh2e1z8Q2kYfI0QisJ+3cQLdQitPYZMOnQsprindw:Ch2CZaVOeeBvMI04a6a2HedBbg9WKh
MD5:	1BE037A9CF13C8BB931F663C3E42AAFF
SHA1:	AD31475F14AFB074989AD57C0D5F590178710DED
SHA-256:	A2574FBF2663B9FFDF850595E63516C11F63016699FC5DFBFE5B5BAA60927CC0
SHA-512:	3888CF124AC3921D9A1A84F3CE378DBB7CAD8E9C5763E14C9952898F8352CF65D839DA5F9BF65F80BA7CC9AFA552B30D59FA176286717600E7E92A5794E3ACC8
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher K.lavuzu - Sorgu S.zdizimi</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Osman .z" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">Ana sayfaya d.n</a>....</div>....<div id="main">.....<h1>Sorgu S.zdizimi</h1><p>Bu sayfa, "temel" den "geli.mi." e giden mevcut sorgu s.z dizimine genel bir bak.. sunar. Sorgu s.zdizimi, DocFetcher'.n temelindeki arama motoru olan Apache Lucene taraf.ndan sa.lan.r ve Lucene'nin <a href="http://lucene.apache.org/java/3_4_0/queryparsersyntax.html">sorgu s.zdizimi sayfas.nda</a> daha teknik bir .ekilde a..klan.r.</p><h2>Boole Operat.rleri</h2><p>DocFetcher, <code>OR</code>, <code>AND</code> ve <code>NOT</code> boole operat.rlerini destekl

C:\Program Files (x86)\DocFetcher\help\Turkish\DocFetcher_Manual_files\Regular_Expressions.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (4654), with CRLF line terminators
Category:	dropped
Size (bytes):	5537
Entropy (8bit):	5.147856696284632
Encrypted:	false
SSDEEP:	96:CJJeUM/yzqYtjWbqXdVixetSt02LeyE1qMHz4WhcSUZnR3WyWGtte:CJJel6Bj1cxetXQmk2zPcNRmP
MD5:	E1C88766A4B71DED922A9AA0658E5D89
SHA1:	74CAD41D04FAEA3A2710A946CEA821630576D6F2
SHA-256:	9F69917842E636A9D4EE167B1A9C8111FC06B7CE31C03039EC3414209287C325
SHA-512:	65BB6602A8B0DE1A8EB2EEF9D79A4A2F102E442680651DB64A69F22A3A863455D000F4EE2204108A396CB1D5284131F3ADDAC55DF83805A7F0E8831D64AC6A49
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher K.lavuzu - D.zenli .fadeler</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Osman .z" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">Ana sayfaya d.n</a>....</div>....<div id="main">.....<h1>D.zenli .fadeler</h1><p>Bu sayfa, d.zenli ifadelere .ok k.sa bir giri. niteli.indedir. D.zenli ifadeler temelde b.t.n bir kal.p e.le.tirme dilini temsil etti.inden, hi.bir .ekilde kapsaml. de.ildir. Daha derine inmek isterseniz, internette bununla ilgili bir ton bilgi bulabilirsiniz; sadece 'd.zenli ifade e.itimi' veya 'd.zenli ifade giri.i' veya bunun gibi bir .ey aray.n.</p><h2>T.m Microsoft Excel dosyalar.yla e.le.iyor: <code>.*\.xlsx?</code></h2><p>D.zenli ifadele

C:\Program Files (x86)\DocFetcher\help\Turkish\DocFetcher_Manual_files\Release_Notification.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	dropped
Size (bytes):	880
Entropy (8bit):	5.3499420092574015
Encrypted:	false
SSDEEP:	24:hMC6vyTLjCzt6iqVQwihEseXRv73Qwihy:CqT66nHZNnv
MD5:	BD2FFB3B12BC563B207DA39BD16705CF
SHA1:	FE01FF0E7B98B7C6C6857C766DA178611B721C95
SHA-256:	1B2CDD60EE630939B9038120D41939DBE0B3E2B4745839A91FECB46EFF937825
SHA-512:	349220903ECCF13DE63C0EF526E302DAC942CDA0F2EAF25A76D84DAEA56D0EDF379BA4EF2B714EA7BE4512CB32EB4CF3442C4E7A19FACA3A96243E8A515238BB
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher K.lavuzu - Yay.n Bildirimi</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Osman .z" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">Ana sayfaya d.n</a>....</div>....<div id="main">.....<h1>Yay.n Bildirimi</h1><p>Yeni DocFetcher s.r.mleri hakk.nda bildirim almak i.in <a href="http://sourceforge.net/projects/docfetcher">http://sourceforge.net/projects/docfetcher</a> adresine gidin ve "Get Updates" d..mesini t.klay.n.</p>....</div>....<div class="footer">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">Ana sayfaya d.n</a>....</div>...</body>..</html>..

C:\Program Files (x86)\DocFetcher\help\Turkish\DocFetcher_Manual_files\Watch_Limit.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (420), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	1415
Entropy (8bit):	5.43025895554448
Encrypted:	false
SSDEEP:	24:hMC6vyTLdacCzt6iqVQwi9Esjana+yC9NYk6As5Kf3RWmqid8Z8TrBFOQWQwi9y:CqT416n/pafC9n3f3LtQnn
MD5:	96242309C5505A79913D9AFDB72C9928
SHA1:	0954AC0309809DD3C6270305FE9ACA5655DE3F85
SHA-256:	E7570D4A7540FA28C1E044EB26955C297E2D8CD1A53B332A236C86D0C213D641
SHA-512:	07E0A01356F3650F411515ECE19654BC487C046FA04FA95844E4BA3E731325017026254ABE900FA77DE933447210A9054E883EB2963ED7EAF3477826F7208229
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>DocFetcher K.lavuzu - Klas.r izleme s.n.r. nas.l y.kseltilir (Linux)</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Osman .z" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Subpages">Ana sayfaya d.n</a>....</div>....<div id="main">.....<h1>Klas.r izleme s.n.r. nas.l y.kseltilir (Linux)</h1><p>Linux'ta i.lemler varsay.lan olarak en fazla 8192 klas.r izleyebilir. .ok derin bir klas.r hiyerar.isini dizinlerseniz bu s.n.ra ula.abilirsiniz. B.yle bir durumda, DocFetcher muhtemelen "Cihazda yer kalmad." hata mesaj. g.sterecektir. .zleme s.n.r.n. art.rarak bu sorunu ..zebilirsiniz. .rne.in, bu komut ge.ici olarak saat s.n.r.n. 32000'e ..karacakt.r:</p>.<pre><code>sudo echo 3

C:\Program Files (x86)\DocFetcher\help\Turkish\DocFetcher_Manual_files\bullet.png

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PNG image data, 6 x 6, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	167
Entropy (8bit):	5.440385043794193
Encrypted:	false
SSDEEP:	3:yionv//thPlHl1fMLts2m2/uDlhlbz22tdllF9R9QEC3kiHKZqH/JltB1p:6v/lhPlfMRFB/6TxltnlFaECoqfJltjp
MD5:	9DDD21AE4DE2B5F02FAF4BC4CD38E626
SHA1:	25B4A39471C1B1B8D0C606306E5E3BD3D6861DE3
SHA-256:	EFB34ABB60F2695FC30721B5FDAEEEE93908C2C386159C9B16FE397A22A171F4
SHA-512:	6A89D9CD546F4BDE33B97D61FACAB79CCDEE6840AE632708050EFFA022D45D3347494D74B8A3045EA9713E34711578A3BEC5B3C018CC490A5D9B716348A7861A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............o.x.....sRGB.........pHYs.................tIME.....+3.gX.....tEXtComment.Created with GIMPW.......IDAT..c...g@.L....B......iO.....IEND.B`.

C:\Program Files (x86)\DocFetcher\help\Turkish\DocFetcher_Manual_files\style.css

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	1162
Entropy (8bit):	5.001094128497315
Encrypted:	false
SSDEEP:	24:UhuRknUSuE3ajUBEuECjwHWPi7u8Sn7T+smAe7BAlzaQlZ1H6kxLdUldFv:UoiuEqIEuEcw24VyzaQlZ1+V
MD5:	A78F0EB0A442B9D36992E1C597A4E08D
SHA1:	9451330033F306E82E06DEBFBA34849A565695AC
SHA-256:	0689C72CC66BCD159BAAB231957E1A6D1235D0D1A8E82243CA854167C7A81306
SHA-512:	880B54E996C9B38EF655570C9384759F66159EFE6EE3CDC605F59B0F31B7053E0E5382D35EB592478F23D6D7D6DAC2DC4569B0A8B33A9E5C3A21A920CF84AC1B
Malicious:	false
Reputation:	low
Preview:	body {..font:95% Helvetica;..margin-left: auto;..margin-right: auto;..padding: 10px;.}..div#main {..text-align: left;..list-style-position: outside;..margin-bottom: 20px;.}..div.header {..text-align: center;..border-bottom: medium silver solid;..padding: 10px;..margin-bottom: 20px;.}..div.footer {..text-align: center;..border-top: medium silver solid;..padding: 10px;.}..div#main, div.header, div.footer {..max-width:640px;..margin-left:auto;..margin-right:auto;..width:expression(document.body.clientWidth > 640? "640px": "auto" );.}...p-label {..font-weight: bold;.}..a {..text-decoration: none;..color: blue;.}..a:hover {..text-decoration: underline;.}..h1 {..font-size: 125%.}..h2 {..font-size: 100%.}..ul {..list-style-image: url(bullet.png);.}..ul.level2 {..margin-left: 10px;..padding-left: 10px;.}..li {..padding-top: 2px;..padding-bottom: 2px;.}..table {...padding: 0;...border: 1px solid silver;...border-collapse: collapse;...text-align: center;..width: 100%..}...table th {...padding: 8

C:\Program Files (x86)\DocFetcher\help\Ukrainian\DocFetcher_Manual.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2563), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	25380
Entropy (8bit):	4.8252106944515365
Encrypted:	false
SSDEEP:	384:CZ3/P3Pp9uWPWaW8ad4kBwXvZjjp5B2cVv:CZviWu94DXNpL9B
MD5:	0EF785E228F50A462126FF400D0FD8AF
SHA1:	BA7528DA5CC5E0D45C7FA6DED472157F1EF39432
SHA-256:	AB6C97C2041FC91769EA40D22AFA62B903E79825B8F893B619717E4DFEB27551
SHA-512:	85A6741231B0092E22D957C484FC4C795EBD7AE76D9AAD7A8E54E0E248C938B34A561EDA047389D9F7A7437430F7873828F05505756D0698CC46B22EE3E86400
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>......... . DocFetcher</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Urko Kul" name="author">....<link rel="stylesheet" href="DocFetcher_Manual_files/style.css" type="text/css">...</head>...<body>....<div id="main">.....<div style="float: right; color: gray;">......DocFetcher 1.1.25<br/>.....</div>.....<h1>.....</h1><p>DocFetcher . ........ .......... .......... ........... ......: ... ........ ... ...... ..... ...... .. ...... ....'...... - .. ...... ...... ... ....., .. ... Google ... ..... ......... .......</p><p><strong>..... .. ...... .......</strong>: ........ ....... . .......... ............. ...

C:\Program Files (x86)\DocFetcher\help\Ukrainian\DocFetcher_Manual_files\Indexing_Options.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3757), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	9698
Entropy (8bit):	4.752933478693835
Encrypted:	false
SSDEEP:	192:CYb2Z6t+emkIHxbGBy4BTIclucrd2L3TFayYNho9OPw4EK4Y:CYb2Be6HxqIeBJATYyYNPPZP
MD5:	E41043B4E610DC7DAC2C3D45FFCB7CC7
SHA1:	C40CD61E7B73AD587F7F68B949F1668EF286537F
SHA-256:	7B4A74DCD884FE49792193D746F86381B36AE0CBF26818395102AF015237400E
SHA-512:	E1DA9E9E79C37BF8EDA2B14AB82190B3FA3C108C1A6FAD9683D8E577620B4D93C62FA6BF6F7C746275A0048ADDB6BE3380864E7405C19D61839B7B12615D70E1
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>......... . DocFetcher - ..... ............</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Urko Kul" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">..... .. ....... ........</a>....</div>....<div id="main">.....<h1>...... ....: ..... ....... ............</h1><p>..... ............ ............ ........... . ...... ... ...... ......., ..... . .... ........... ......, .. .... ......... ... .......... ... ....... ..... ........ ..... ......., ... ........ ..

C:\Program Files (x86)\DocFetcher\help\Ukrainian\DocFetcher_Manual_files\Memory_Limit.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1241), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	4680
Entropy (8bit):	5.128453107236476
Encrypted:	false
SSDEEP:	96:CvJdkq2PvcugjyMgGzvjM2A4e+cbxI/R7Ufz4ehau0:CvJdL2PvcPGV2Nn/Rwfz1UV
MD5:	E34CDD3D255B8DD87287145C78BA4EBB
SHA1:	9FF1736B0672534FCE22CA4873CFE940392F39C2
SHA-256:	4AA114B03862E433C8C9D5401B0BEB0237D985AEFC77BD8E87A60EA6056D310E
SHA-512:	53B8F988D04B11A8BE16ECDD283FE1583096703BA6B66E83FB0A97E1D0830F456B703308CAE23BE4E0CAADFD84976B9918776B6A7EA07D6089FBF5C4B845D596
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>......... . DocFetcher - .. ......... ..... ...'...</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Urko Kul" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Caveats">..... .. ....... ........</a>....</div>....<div id="main">.....<h1>.. ......... ..... ...'...</h1><p>DocFetcher ... ........... ..... ...'... . 256 MB, .... ......... ... ........ ... ..... .... .... ......... .. ......... ........ ....... ... .........:</p><h2>Windows</h2><p>Windows ...... DocFetcher'. ............ . ........ .. .

C:\Program Files (x86)\DocFetcher\help\Ukrainian\DocFetcher_Manual_files\Portable_Repositories.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1216), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	6601
Entropy (8bit):	4.9739849616822935
Encrypted:	false
SSDEEP:	96:CLRNIF1gjaXmoCPBfUZLUtzAgtJ7QmUUigHDwT4JH1wVOBK:CLR3xjhs0jK
MD5:	744AEC1167290F1914488EBCDB34EC7A
SHA1:	CBC4AFE386AAFCA6C6D6AACD6940009221DB0FA9
SHA-256:	5AEAF5E8355E58601E054B0F0C4F31373E74F89761EA5B0A34E6E593FA9CA90A
SHA-512:	F0B802E84D321D279CAFCB4EF8AD20E5FE283AE54C8F5A93EA27DE699E0895FE9CA0479AF8D37DFF67E4884B219CA01514E606D6E551732E6D69610F840D1F2F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>......... . DocFetcher - .......... ........... ..........</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Urko Kul" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">..... .. ....... ........</a>....</div>....<div id="main">.....<h1>.......... ........... ..........</h1><h2>...... ............</h2><p>.......... ...... DocFetcher'. .. .... ........ ... .......... (.. ...... ...............) ........ ............ .. ........ ....... ... ...... ........... ........

C:\Program Files (x86)\DocFetcher\help\Ukrainian\DocFetcher_Manual_files\Preferences.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	4696
Entropy (8bit):	4.908020725268021
Encrypted:	false
SSDEEP:	96:Cv2VmIj4oGm4CIjRtIj4IcIjx4GIjhfY6st1H:CvY8TksIVURo
MD5:	121BF9969651B2D0BD02B683C15A48E9
SHA1:	9F0B484250988F841127807D665383F28D32ABEF
SHA-256:	A0B58686EFCF15F25D790611195759A54DE6C5426870C6CB019F8A69316DC567
SHA-512:	5F911392FE66D7FCFF616C16651F37C5DF046EB514A71D6076475D1D08AA9D6AE3093E61BC2B3C92BA07828BA38EDF129447E80290B0A674785F6CC16B280D24
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>......... . DocFetcher - ..........</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Urko Kul" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Subpages">..... .. ....... ........</a>....</div>....<div id="main">.....<h1>..........</h1>.<table>. <thead>. <tr>. <th>..... </th>. <th>........</th>. </tr>. </thead>. <tbody>. <tr>. <td>..... .......... ... ....... </td>. <td>.. .......... ........., .... ............ DocFetcher.</td>. </tr>. <tr>. <td>...... ......... OR .. ......... . ....... (....... AND) </td>.

C:\Program Files (x86)\DocFetcher\help\Ukrainian\DocFetcher_Manual_files\Query_Syntax.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2766), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	12722
Entropy (8bit):	5.006646571708545
Encrypted:	false
SSDEEP:	192:CSPB0kNvq+vi18mu5K5xXGtNFY9sXjlKfdkr9oFH:CSplvQ8ibkNFYKzl8dkZsH
MD5:	34B889395F672B123988A618458D36AE
SHA1:	CBB01724B83764C566D529DAEAF4F1432330F363
SHA-256:	2047F5C80817B85BA0090AEE7EFD3FD5A7602A81E922C2F9063BDF8249A521D1
SHA-512:	92008B38D6ACEE795BECD5D75615DE4AE88569F46B63AF851E577E3AD89C6B706B6A8412AC493C4384F82B2AF69DB1ABEF2B132C12DA11E1CB50262FD620711D
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>......... . DocFetcher - ......... ......</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Urko Kul" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">..... .. ....... ........</a>....</div>....<div id="main">.....<h1>......... ......</h1><p>.. ........ ... ........ ..... .......... .......... ......, ... <em>........</em> .. <em>...........</em>. ......... ...... .............. Apache Lucene, .............. ...... ...... DocFetcher'., . .......... . ..... ......... ...... .. <a

C:\Program Files (x86)\DocFetcher\help\Ukrainian\DocFetcher_Manual_files\Regular_Expressions.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (4704), with CRLF line terminators
Category:	dropped
Size (bytes):	7998
Entropy (8bit):	5.041972493424143
Encrypted:	false
SSDEEP:	192:CGfr/igrflG+J7zsR37P3/HlRu0tUa0CKLjt/TGiqm:CGT/Tl3q7P3/Det/Mc
MD5:	CD390135287F02BC8FB8FAC7AE2D10A3
SHA1:	A49BCE054216F7908270C8C8F31B5068A727FEBC
SHA-256:	912A693ABABFED22ADC976B2A7314B8CE536C5AD330D18C7ED959874F6295218
SHA-512:	41B4334CBC0CFD9A94EC2F60C25D66D799BCEF39D63D5E85C992A3093A8C5E7644F04660ADCC415E73BC5063A8E1C3BB01696A9AC4CE248AFA52B02F5D7A084E
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>......... . DocFetcher - ......... ......</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Urko Kul" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">..... .. ....... ........</a>....</div>....<div id="main">.....<h1>......... ......</h1><p>.. ........ ....... .... ........ ..... . ......... ....... ... .. . ........., ........ ......... ...... ...... ............. .... .... ........ ........... ............... .... .. ...... .......... ......, .. .. ......

C:\Program Files (x86)\DocFetcher\help\Ukrainian\DocFetcher_Manual_files\Release_Notification.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	dropped
Size (bytes):	1074
Entropy (8bit):	5.581543255815409
Encrypted:	false
SSDEEP:	24:hMC6vyan/wtsmCztbqVQwi2iJshtsxcewgFwD1v79IQwi2iV:Cqan/QsfenpiJisx1FwzInpiV
MD5:	4F344E5F99E5802891370AB6358B6D65
SHA1:	03259BAEEDEF4F3CD3728370BC46E9BA95894FED
SHA-256:	4CC159A123A6E04706A222465C373BC5970405693EB93C40D6FBADC60A901029
SHA-512:	DC1B1A74A8AC8654546643043EFF91611A03D9EABCD32E3230E5D752396002A649DC6E7A445547B488D4359296ADC16048EB1620D9C049D4A5AC74B4184D5E26
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>......... . DocFetcher - ............ .... .......</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Urko Kul" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">..... .. ....... ........</a>....</div>....<div id="main">.....<h1>............ .... .......</h1><p>... ......... ............ ... .... ....... DocFetcher ......... .. <a href="http://sourceforge.net/projects/docfetcher">http://sourceforge.net/projects/docfetcher</a> .. ........ .. ...... "Get Updates".</p>....</div>....<div class="footer">.....<a href="../DocFetcher_Manual.html#Advanced_Usage">....

C:\Program Files (x86)\DocFetcher\help\Ukrainian\DocFetcher_Manual_files\Watch_Limit.html

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (430), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	1871
Entropy (8bit):	5.449048449836511
Encrypted:	false
SSDEEP:	48:Cqand1enBiJdZtM8qT35x/McNYkPER6lnBiV:CNhdZtlkJx/XVPERD
MD5:	3E2A15AC216423A6E49F89FDCF3458D0
SHA1:	1F864065B577A32D7EF548E8BE0CC1F27BE63214
SHA-256:	E449EAADD9478A8BF2F24315AB5F31DF191FD105C40FA930F884D42B7B5F311C
SHA-512:	586C82D7F6544694A267E80FE348C1D2CE29D50C069EC3886E28CE8B9627ED172D1B9F7859C85B82AFA1E0972D80561C54F56DBBB6A5A9FE0A5E5F3A27A93996
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>...<head>....<title>......... . DocFetcher - .. ......... ..... ........... ... (Linux)</title>....<meta content="text/html; charset=UTF-8" http-equiv="content-type">....<meta content="Urko Kul" name="author">....<link rel="stylesheet" href="style.css" type="text/css">...</head>...<body>....<div class="header">.....<a href="../DocFetcher_Manual.html#Subpages">..... .. ....... ........</a>....</div>....<div id="main">.....<h1>.. ......... ..... ........... ... (Linux)</h1><p>.. Linux ....... ...... .......... ............ ........ 8192 .... .. ...... ....... ..... ......, .... .. .......... .... ....... ........ .... .... .... ..........., DocFetcher .... ......

C:\Program Files (x86)\DocFetcher\help\Ukrainian\DocFetcher_Manual_files\bullet.png

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PNG image data, 6 x 6, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	167
Entropy (8bit):	5.440385043794193
Encrypted:	false
SSDEEP:	3:yionv//thPlHl1fMLts2m2/uDlhlbz22tdllF9R9QEC3kiHKZqH/JltB1p:6v/lhPlfMRFB/6TxltnlFaECoqfJltjp
MD5:	9DDD21AE4DE2B5F02FAF4BC4CD38E626
SHA1:	25B4A39471C1B1B8D0C606306E5E3BD3D6861DE3
SHA-256:	EFB34ABB60F2695FC30721B5FDAEEEE93908C2C386159C9B16FE397A22A171F4
SHA-512:	6A89D9CD546F4BDE33B97D61FACAB79CCDEE6840AE632708050EFFA022D45D3347494D74B8A3045EA9713E34711578A3BEC5B3C018CC490A5D9B716348A7861A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............o.x.....sRGB.........pHYs.................tIME.....+3.gX.....tEXtComment.Created with GIMPW.......IDAT..c...g@.L....B......iO.....IEND.B`.

C:\Program Files (x86)\DocFetcher\help\Ukrainian\DocFetcher_Manual_files\style.css

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	1162
Entropy (8bit):	5.001094128497315
Encrypted:	false
SSDEEP:	24:UhuRknUSuE3ajUBEuECjwHWPi7u8Sn7T+smAe7BAlzaQlZ1H6kxLdUldFv:UoiuEqIEuEcw24VyzaQlZ1+V
MD5:	A78F0EB0A442B9D36992E1C597A4E08D
SHA1:	9451330033F306E82E06DEBFBA34849A565695AC
SHA-256:	0689C72CC66BCD159BAAB231957E1A6D1235D0D1A8E82243CA854167C7A81306
SHA-512:	880B54E996C9B38EF655570C9384759F66159EFE6EE3CDC605F59B0F31B7053E0E5382D35EB592478F23D6D7D6DAC2DC4569B0A8B33A9E5C3A21A920CF84AC1B
Malicious:	false
Reputation:	low
Preview:	body {..font:95% Helvetica;..margin-left: auto;..margin-right: auto;..padding: 10px;.}..div#main {..text-align: left;..list-style-position: outside;..margin-bottom: 20px;.}..div.header {..text-align: center;..border-bottom: medium silver solid;..padding: 10px;..margin-bottom: 20px;.}..div.footer {..text-align: center;..border-top: medium silver solid;..padding: 10px;.}..div#main, div.header, div.footer {..max-width:640px;..margin-left:auto;..margin-right:auto;..width:expression(document.body.clientWidth > 640? "640px": "auto" );.}...p-label {..font-weight: bold;.}..a {..text-decoration: none;..color: blue;.}..a:hover {..text-decoration: underline;.}..h1 {..font-size: 125%.}..h2 {..font-size: 100%.}..ul {..list-style-image: url(bullet.png);.}..ul.level2 {..margin-left: 10px;..padding-left: 10px;.}..li {..padding-top: 2px;..padding-bottom: 2px;.}..table {...padding: 0;...border: 1px solid silver;...border-collapse: collapse;...text-align: center;..width: 100%..}...table th {...padding: 8

C:\Program Files (x86)\DocFetcher\img\add.gif

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	318
Entropy (8bit):	5.925495569440293
Encrypted:	false
SSDEEP:	6:NLWcyW54qUx/zGFGMrhjZFPjQFVDJAl6PkGlyRAZJen:l+qUlzaRdj7PjyDpllyR8Qn
MD5:	12C5B0E3A73768A4F6B84D21FD225FAE
SHA1:	CA8C639AA32D569854A45400778E53290BB2F205
SHA-256:	45C13546C3BF4BFF446171D55D79636B885A67B3565128AB6711AFDB87713687
SHA-512:	B0BBB35FCE7BA239A42D3D4842014E25B613704BBA3E2DC52CF6537CEB2A77534C2FE8F16D115182A864AEF1CD94BAEEA0F453D339330C49461CD52790775956
Malicious:	false
Reputation:	low
Preview:	GIF89a.......5vT8zW8yW;~Z<~Z@.^D.bE.cE.bE.cE.bJ.gJ.hO.lP.lT.qU.qT.pX.uU.q\.y_.{].y..S..T..U..V..X..X..Z..[..Z..Z..[..`..`..`..`..a..c..e..e..f...............................................................!.....+.,..........[..pH,..HaeYI.+*U...P..Jr. '...D>=...C$2....Ad.B..(....D............H....Z....Z...Z...Z..A.;

C:\Program Files (x86)\DocFetcher\img\arrow_down.gif

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	332
Entropy (8bit):	6.295483645463945
Encrypted:	false
SSDEEP:	6:NweKysSmDdZD1MeU4Q6fv4dOZJyVCJbRRvcxgwq9En:+rfbpHVfv4dOieiq9En
MD5:	D0556328045E3E7550AD727EF4B6385B
SHA1:	4505E92C2C06C0ED9229B0F987927CF78128B62B
SHA-256:	6E3120C4D51C48EC185575D920F29D8C5DAAD25078113381886D1D295162B112
SHA-512:	A5DD62954A61614BACFCBEBC4D0D0A0CD96371E8AA73B8B1DB6B3FA15EAE68CD3F59ADAD0DED62EBB2B43F2439B55AE952E1D13FBBDDEA320D4D7252317589AB
Malicious:	false
Reputation:	low
Preview:	GIF89a............................................................................~..\|..z..x..w..x........}..z.....n..s..p..u..r..p..w..u..l..k..............................................!.....1.,..........i..pH,.c...H......3=.&jL4...#. T8ZR.@t....P:.>..e....D..........*E(........+G).....,T'...'Z1/./.B00..A.;

C:\Program Files (x86)\DocFetcher\img\arrow_left.gif

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	541
Entropy (8bit):	5.6456229891617395
Encrypted:	false
SSDEEP:	12:XqraOCMhxYnHaOwbBpSdzgfGBhU0wKsci2xlU4otV:ardHxW6OGBpmzPhfi2cT
MD5:	9BBB6AD4B00BDE6A303436BC9A29BD5B
SHA1:	7F7EBA3BA6B8CB6869C0C43C23DBBB682F9AF99B
SHA-256:	FA23BF170C3F94FF71B8DAF3408DB3B345D7004D23E715B96FBBBCC9000DA27C
SHA-512:	8D946F98DC81222F2A0B467ECD73E5562B843BA5183223C1402B4D5A752CD365E327211F0B81B1F64299B4D66AF262F9B8B3EEA0103C8EBC9F32614EF09E8208
Malicious:	false
Reputation:	low
Preview:	GIF89a............................................................................................................................................t..r..p..v..t..v..t..j..u..v..x..u..z..l..d..c..c..d..e..f..p..k..i..i..`..b..a..e..f..h..\..............................................................................................................................................!.....R.,..........z.R........01..7Q>..2QQ5.3Q..?3688:<.4...........;.=..+!*+,#."..F.G..).&/(.' .9.@.%$-.......I.B...PACDDEH.J..K..L.M.NO....;

C:\Program Files (x86)\DocFetcher\img\arrow_right.gif

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	541
Entropy (8bit):	5.655395551967289
Encrypted:	false
SSDEEP:	6:N9qra5QagZCTUw+C0aghRkeYKlw/HaOlZTnEXimJrBpSdzgm4NpDXGQHrrkJolqu:XqraOCMhxYnHaOwbBpSdzgfG2r4mlDH
MD5:	C895F67E6B9A7F4B1F71D1C0D8577E5A
SHA1:	4944A8716406401B91E20E8A07B4ED7F77F72ACB
SHA-256:	E8C5351F86E1E5A4F0988073DF8090BF211C6628B7E87AEAD3C698A547919596
SHA-512:	257090FF6F526F401034110E0CD1C93ABE14DE3760F6C1FB29AC46BE40C65C591BD9E009070C47C192FE06C20E49D5A6AB2D99285DEEFB3F781E0F68D5658BB3
Malicious:	false
Reputation:	low
Preview:	GIF89a............................................................................................................................................t..r..p..v..t..v..t..j..u..v..x..u..z..l..d..c..c..d..e..f..p..k..i..i..`..b..a..e..f..h..\..............................................................................................................................................!.....R.,..........z.R........10..>Q7..5QQ2.<:8863?..Q3.;...........4.F..".#,+*!+..=.9. '(./&.)..G.I.......-$%.@.HEDDCAP...B.K..J.RM.L.RON.....;

C:\Program Files (x86)\DocFetcher\img\arrow_up.gif

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	323
Entropy (8bit):	5.92538474744447
Encrypted:	false
SSDEEP:	6:NwYKbpePbbBVHdgikZVnrnOTN5/tEsLPOoRFdL/:+Yqe3HdNAnTOT5POoRFdL/
MD5:	95C7C902A0B378515D904AAA25BD2657
SHA1:	9D41B2F39128C102EB239843A26CE88EC648B52E
SHA-256:	29CE91E4A26A47F598E775C497006708E4FD97614D9D06713E77C9F721CF5511
SHA-512:	64964FAD24EACC115CE6CE56E67685B5BFBB1D97E55020EECF17A7E1B5DC0F997A030B8BD2A0F5370DCE8D1BDF23713D5FFE4B36FAAE19DA9B31FF4CBAAF8080
Malicious:	false
Reputation:	low
Preview:	GIF89a.......................................................................z..x..\|..}..z..{.................n..p..p..n..u..r..u..l..k.............................................................!.....,.,..........`@.pH,.....h...K..P...QQB P...#.@F...Oq3.D$..D.!r0....h.;.G......Q,)...'.(..(.%.$.&.#...,+.+..A.;

C:\Program Files (x86)\DocFetcher\img\browser.gif

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	587
Entropy (8bit):	7.201077875721357
Encrypted:	false
SSDEEP:	12:OJmkEykSooTGD7gqAwHPUuT3dTKdfp74qbZ4bmRIEnih/FKEHFoqSs9sV:JxB7ETyPUotKmqKmRI8a/0ElolsyV
MD5:	CC962D5FC4B00E46E9FB6F48C65F134E
SHA1:	4FD9E7F9E41CC738D26F242446AEFD291E19E608
SHA-256:	3CD7BFF1DF3A30B6B1D7014BC5815FC6A6879CCC530651392696D8F496599328
SHA-512:	0F2838DDCD892D8A03D1089A2C6CFFE93701B559AF3798AFA6B6663110E05D24E2118EB4B7243A88B19E763EA3B2B8977A3439E6B7BEA36BBE21832D0CC8E852
Malicious:	false
Reputation:	low
Preview:	GIF89a.......WTrNLpOMpPNpPl.Ws.Xp.Up.Yu.Yt.Wx.Xw.Ww.Wv.Xv.Xw.Xv.Yx.Yw.Xu.Yv.Yx.V..Z..Z..W..Y..Z..Y..J..O..q..~..$..B..Q..F..I..M..O..N..P..R..Q..Q..U..S..T..K..N..Q..O..P..R..V..Y..Z..J..N.......S........T..V..U...............ox.n.........UlG........R..p..w..s..t........VvuT..q.....e.......W..q..usU..m..s..o....c..Q..kuqQ..woN........xuoxvrxupwtoyuqxur....yur.................!.....}.,............}........&(45).3%pXLE>. .0Dlg\|W;Q="..$Xw]_x\|FA.!\.1M\|^hPbn9-..f.,OG\|zISoVN..u./?KHjUTReJ.....+@<:i`Yk...v..*CB.mcZy..ta.'678#{.....P.....6T..`..Y.... .........@.D ....;

C:\Program Files (x86)\DocFetcher\img\building_blocks.gif

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	344
Entropy (8bit):	5.520515761124137
Encrypted:	false
SSDEEP:	6:NLJD9t1WnQszYqpnp4b1+1XbatDErHSeGemUJjP1J6FC+46d/:zx25/np4b1yXbatYrHSeGeLB6FJd/
MD5:	BC4448E30EC40DA2C7951101055E00C5
SHA1:	E42810E50B68D57DD17C1F6E8D74C1C616E01DCA
SHA-256:	2B1BBBBF3E03E1291F42D0C6AC3C76496066FD1CBA0E9AC4B3E801031D96C758
SHA-512:	E6E1FD47D890E021C9489677B49AA4EAE8A04A8EF692388EFB309DBD23B9F757011D45012BE3B2A86A26396EA851599ED364931FFF2E3CE2F12527EC46273AC4
Malicious:	false
Reputation:	low
Preview:	GIF89a.........9.^f.ow.=l..D..R.'^..K..W....c..x..$.O0.[.l7.p<X.]X.\j.jp.g..........t..t..m..h..m...}.g...S................................................................................................!..... .,..........u@.pH,.....p0...t..2..J......*.1)K..: ~D..........D...zF......F..F..E....D....B.....C....C... ...... ...C...D....A.;

C:\Program Files (x86)\DocFetcher\img\check.gif

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	376
Entropy (8bit):	7.20907904417978
Encrypted:	false
SSDEEP:	6:N4Ek6ILVPotZeZOfYmd1rzBnFhujc5c1MjCOkEwglzxXKX595A8dXBiraMSSsen:Gf6IhAZgyHug5cFOGI12f5TWmre
MD5:	4D3FA0844703451C654B3E78A122D790
SHA1:	E431B3E4C1267A937D02E4FBEE619F53803DC919
SHA-256:	93AB6D5B31BEBFD64ED3316B2657C27A47A2F4B21A7341D78717B8A758B65F8F
SHA-512:	2F3EFB416BA2CA66E3F7AA12FB7980E83C1B5694664E2100A37112445232955C447AA4C0E386CE9A4CF384C9597A68CF068DAFB511EE656A5C7F1BB0032A0F90
Malicious:	false
Reputation:	low
Preview:	GIF89a...........................................^v.m.._s.`s.q.................................................?.........U..F{........................x.{...a.v.r.t.z....l.o..k..R..j..g.........!.....?.,.............p(.D..Rh.p4..... ......z...A.L...8.Z....Xk/>..U#.Xw!$....+.D2..! ...2B!?4).....(4?.0.....'3.%#%!......&8C.#......7D#......9D6....;D><...>S.?A.;

C:\Program Files (x86)\DocFetcher\img\clipboard.gif

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	605
Entropy (8bit):	6.963637108538075
Encrypted:	false
SSDEEP:	12:6VVnbASNMA4T2DhfNlGY31a7nZzY10AolV/BLWuZ9sqCBKKF:6DAhNuTGOajN4EzLWs9s7Bh
MD5:	3602AD492B5CCADCC4C3EBFCAEE319E4
SHA1:	C0C536FE927463E4ED4B636528A29CBD37141504
SHA-256:	7C3A4E4911C8E0B070A66AC37811CED5F06A4C8B3846A263CDA65C7CAB9DECC3
SHA-512:	5C07DBAE29B33EDC5A82449522009C28D09E03D6D9386E7EC6A6E88D4E230D93A6161109777C469D838DD4BFBD4D6610668BFC08EA11A06E68AD3E59E96E6FAD
Malicious:	false
Reputation:	low
Preview:	GIF89a.........................^v.m.._s.`s.q.....................................................................................................................................\|..q..q..y..y.......................q..y..........................l.u.x.{.y.a.d.v.r.t.z..l.o..k..R..V..\..c..j..g...........................................................................!.....i.,............i.....i.,,..........gXX......aXg.VR.......RW.R...T.]QPEQ3..Y.UDDOD3...74.ZCN.4-...6.\LMBB5..+''.2.[AK@J1......1._?>II0#..0.^<=H...........qD...%......2S....a...)R..0...2c..XPa........;

C:\Program Files (x86)\DocFetcher\img\docfetcher128.png

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8894
Entropy (8bit):	7.956482112589868
Encrypted:	false
SSDEEP:	192:cKSiU+6STvsGTklM6MVhsA31vILga5QHDIDl5dEwoGpdD9bj:cKCkkGTISVmg1v4500x52woGpdD9bj
MD5:	041358433313D62CCD327A2BA02A70E7
SHA1:	B8A5C1D6C2A21012A89B418B85A36776B4822ABE
SHA-256:	AB9D48E3369B9F27577B26B97DB64C73F15BC513BA9C60CFD1493282112DCB0C
SHA-512:	F3554CE106D7822BFCF0CC68DE2D1544CE3C5C6EC6DE0491154D38B2656DC4FFB5E01CCB84FDF6540E9BDBEAAA2B4277B9F79C6D3D3DDDDA3F53B74BD9CFD258
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............>a.....sBIT....\|.d.....pHYs..7]..7]...F]....tEXtSoftware.www.inkscape.org..<.... tEXtTitle.DocFetcher Squirrel Mascot.vs.....tEXtAuthor.Tran Nam Quang........tEXtCreation Time.2008-04-19...[.. .IDATx..w.......3..jsR.UB..B...@ ....`c..`[?x......V.&.g...L.I..... .V...aw.]is.......3..g.......U.S...n.WP..qN]..].qN,..p.3...8..p.3..c.Y..X.....,...r.t`.........IJ_$....1.,.....7......J..\|.....1.,.....Lad..fJ.R.....$F.....p..9..Ak.80..1[.=Oo..H.b.u.u.j;N\.e!.x...n.%R.3..............i.se.......>...Y.....h\|Q..Vp:.V]NI..w...E..K..Q.</.".{...I.,...>.r]i.m.....,..A..d.....R..,.C.o\.N"dY..x.p?....,.z.).....s<.5......I.,.....V.^....F...(.MFb.o.Y....I.p.......fL..I!.k..5...PeN.Y.,..`.N-Z......9..9.v}....X.P..G.x..2&1.x.B.....=.7..?B.dYX.\|.p.6.....%IcCi ......l.< ..{..<Z...p......IJM..\.<.S..(....QW......P."hxQ.w8..~.}8.QOJ.2.u..,.:`&.)..`.0...u....1..$I.._&Y......._I..f....._.....?H........ .B..$pa......$eK...Y.*..q.u........O...zPY

C:\Program Files (x86)\DocFetcher\img\docfetcher16.png

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	895
Entropy (8bit):	7.64403114840871
Encrypted:	false
SSDEEP:	24:XZ3P9q8OZ07xEmRV+oJWEN5/e7gw+qRYU7:XZ3V5OZYxP7Ca/eP+qR/7
MD5:	6DFAEE8EEFCBA1D9D4DB491867B6E325
SHA1:	F141D3BDF07B39A9929F85F9E5297E40EFD7EA3F
SHA-256:	335B276940A40C2880E263D2478C0B8EA44C0527323CBB2E1E0D27ECB7A6C833
SHA-512:	27F018AC08C20E86DC91FAFF1F954A73F43EEF4E7746133CC4F250C4AE147536392821305AED2757069CB92493A9C4EB2F37ED739AA21B7D82C31DE87A668BEB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....sBIT....\|.d.....pHYs...5...5..V#.....tEXtSoftware.www.inkscape.org..<.....IDAT8....k\e.....N3..L.Ig.v2I:.f.4i....H....!...D0X/....29`.K,.....}).R".4..R..^46mC.4q.IN.r&..3..6^...{..b...R........J..v....].:b=WC..).......B..f..Ro.b.@<...>_..I..8Nu...=.R....D.;.@4.Z\...........]..1r.srG.7.Cm.......e....]>.k={.@_..ojBk..M.=.I..A.."..(.....Y/J..VF.Vf.@[...Y+[9....~.}.1...!4..<..f..]..v..@.i.].E..Q..+W4.{...}.s?Ms..an...\|p......M ..Z.5..\|...:...G5. v...V.ZZ..C..v.}..<.e.......w..lo...a...G.....\|qX ..BR.h.W.....8.._O...o.n...H].s.r.R.s..X.&.....EJ..j.E..'.......6.^.......kW....p....9.iKl.Z.LA[....XXLs..q._.L%.H.s'.....>J..Y&.<....Ruzv.Smzv.m.\....\|..i.x...~M...f..../.9v.=..x..l.]:1...ZfL(.8:.....M=.j..,......%5......`.TJaf...M..g.:28...@.u.a.][...E.{:....Z.../...E.+,....~c...L.R.[X....C$......K^.?...'.H^......IEND.B`.

C:\Program Files (x86)\DocFetcher\img\docfetcher24.png

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1540
Entropy (8bit):	7.776678386286542
Encrypted:	false
SSDEEP:	48:l/QbVD7NKOON7K8CUZy8PLeG/UMU8HdQLL:CVEF7R7lKqS8H2L
MD5:	BE3A4BC9E847D157BF795BBABAC06A94
SHA1:	EA185DB72F855F257EF323D0422A7AB452BDDC4C
SHA-256:	2F6BE30D86F083EE3316C0114BF6A2C1DF75351125B350FB76414AB3AA1FF8E6
SHA-512:	A63DFD509E05EB93CA5BDFCBDD25486A6EAF9C4CF34217A2B15F8E1AE838E3CE2092B4B2F4421F65C78F406E0CF7CF05A638839FF97B7994F438699423E3513B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sBIT....\|.d.....pHYs...a...a...J%....tEXtSoftware.www.inkscape.org..<.... tEXtTitle.DocFetcher Squirrel Mascot.vs.....tEXtAuthor.Tran Nam Quang........tEXtCreation Time.2008-04-19...[....IDATH...]l.U...wfv......P....".D$A.......1..O5...e.!......(....H./PD.....E...Z.@...n.........x.......9...!.....I.....ORFR....2.<A..>Oi..Q......+B0.@.u.P.1OJ.i ...&..3....m...V...%#.R..?@.`.s..yz.TE ...J.n................@@..u....mw..RX.[......ZA.....T\|xk,..=vK..O..G..m......E..TUS...qX........Z....v.=`........y...J.&.J .nlX.Z^..B...LiTBUK.G..........Q5;.-.D.Mz23..v.)...7..i.Lnkno.Q.;....WQTk".?..6.O.ND.......<.B..y....J....a........^sEJ.]..mDJS..4[.py.&..\|....\..E.....QD...8x.......c.P...5m.b.....u......,_..6.t.7l...K.s.Bk.`..:Z[[....4M..E..BM...O.2....A..(Z....O....8...$..N.i...=.....\.\|.P(....!........#.\.NL..N.v....);CuX..`f.Dr.i..+...l..5.^.1....-.c-i#...j%.O.@...V.u.n1Z.]K...2.3..8..........{.~..@w.\.~.9T.R.......j

C:\Program Files (x86)\DocFetcher\img\docfetcher32.png

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1952
Entropy (8bit):	7.8597678491355145
Encrypted:	false
SSDEEP:	24:C0/XRAzmAbLne8cJH4/OS5n+vNBcGloUFYdXpBgzjmsAK2SJJkyyTC0l/GvzxY21:C0/Xmle8cvS5+6gc3gNBLkNT/qxVteI3
MD5:	145437E88EB217781E9B2969E24DC1ED
SHA1:	06ACB5BD2259B100E84F8CF5B2F17472CBF47811
SHA-256:	F939ED5B0D1A8F9D57841209864B1396339FBD268AC15A7F8FB9D0E1A3775D1D
SHA-512:	B1E9D59B8A80521E62BEC03705CDC6EFCFF935B96A817D5354B6DDB5479431CE044BA5397E255D1C2DC910F33380E5A9133C79D85D1C17A8995303D53FA26BEA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....sBIT....\|.d.....pHYs...k...k..D......tEXtSoftware.www.inkscape.org..<.....IDATX..kl.....wvv......^cc.0.<.....M.....D.4...A...D..J.0.."Q5A.j..i..BH...K..MH....Z.!`X.....>.....]...+m.#]...=....s.^!...i.Ed.....T].o%./.\|.@4.d..3...0.../<..!V.4....+l^{...^Z........!f.......{.....r..x....l....q.0..j......N.G.X.6.d'c...%9.+A..ZWm.b....Q.&.).....p...i.pX.M..b.j2.H..u...t......[.i...:E......a...3..HE("'m........X...a..j.YN...lo>S\....... ..'... ..L....z.h`k.....!.~)......GU..../.9YS...f.......2B4IS..p.....gr>..8..M.L...i~z.w....[,+Yc...n.o.\|.2..~...`..Pp......XKwSJ..UsJ.6..B`2Y..B.S.....I.]...'.l...{..6.......^..T.....7..,.f....+.I......S.b..........;..\|...U..9.i......q.:...{_8H{O.c]...^..............OX\|y.(&. ......(..1....(_....\...?..dfJ...{...>w..Gp..W.:.uDca.(..s.7..:s...v.....<1F..G/.e..zzz...&...\|..J.b...........8...C..o..". .h.Y..r.{7UUC...:7F...G.u+.}}}\.r%.3.6..o0%...W.5....#.0..4GF...........6n.8.J....

C:\Program Files (x86)\DocFetcher\img\docfetcher48.png

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2992
Entropy (8bit):	7.902571807530586
Encrypted:	false
SSDEEP:	48:UeEvRjoHHdvcGlOP9usYKAqs0ZEGCc5wZM7K9tq7A7efG/26DPmASEAVyBL4gTQ:dHHdUGs9ocs0ZEawZM8I7dG/9eASFVy0
MD5:	77DA97C47C9D783A265377B1D7B35436
SHA1:	236053D6D42675EED4736569A5C35FB4B4A19530
SHA-256:	FAA221CDD832DA01BCFC80C00E354F326C22FEFE3357C8B4C0891189911D3FC7
SHA-512:	5BC85205493BBEA14C691018D0190F6323557D05EFF5FD3AECACC1B24E4BA6DD6384D45D3CD8F35038A5CB2F0A05C8BFEC5B2784180C00E73BB314B942D5447E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......sBIT....\|.d.....pHYs.........n..g....tEXtSoftware.www.inkscape.org..<....-IDATh..{tT...?..gf&.w.$!.$... .).R..U..../k.j.#U.....-..Z.!.KQ..g...(.?.cY+(i)..A.Q.#.bB..L.yo..$drg .m.w..ff.....{.=g.}F...3..4.k...&p%..X......)..;.]\|P....L`.p{.3.M....n.V)..0...\|..f.;.f...........+...?.\|p.PUQ...t.....l.. ..../..../....s.6E.c.s..`)#...2..@+...Q.}.8.r`wFZn..D...........TU\|.x.fv......{\UE...{'A..'.....-..V.....d.,[..-.!....E.......QU..l....3.r.,.Xi ......V.>..^d.)_A ...}.]..o......?KA\|.....$.\|O1.iyd.rI.g!..V..}\.l.h.;..@..OZ6.+V"........^..@y.=....EM..4_h.G..?.."CQ...I....c..,g>...x3K....m..m.,....fr.^..............L.[...Ksgb6Y.o..cU.....kYAF.3..q.....T(.(E.5....;.[.:.........O4(...$s...4=...#.)^D.3.....IHB....x..k4w....w..k..b.1t..JM.....Key..e..#N~....:.Z...#.........?t1i.9n/..d...YA....,.4.4N..Ad.....;.E.(.{......WL.;)........&.$.....[..!...].8..w\8.j..>.G..z.....i.~u]GU.7.&....J..H.M.2.^...lMG.5..[.iy....'.....=.

C:\Program Files (x86)\DocFetcher\img\docfetcher64.png

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4445
Entropy (8bit):	7.937650840898349
Encrypted:	false
SSDEEP:	96:4mJ9aB8YOcyWkqgo7uQ2ADPHXIWmZMapmAt:4mbaB/OcyjroH2yXtmZMaj
MD5:	1FEF107D9D86352BF5A4150731F1A6FC
SHA1:	02261A4CDC986F7DE47B87EE7E4317FD9B42D2F6
SHA-256:	839771852068D89F85374F2129D2FA8BAC36D7DC3BBC832B1EAB2D7413182EEB
SHA-512:	AD1F0FA52977AFBD220624C9B7EA24062FF218AE80658CAAD512FC5523BA17212E0E28C17C0438DE8C709932DFED4007157D5AD7C1F3DFED9B9115D8908CE222
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....sBIT....\|.d.....pHYs.........^.......tEXtSoftware.www.inkscape.org..<.... tEXtTitle.DocFetcher Squirrel Mascot.vs.....tEXtAuthor.Tran Nam Quang........tEXtCreation Time.2008-04-19...[...iIDATx..y.T..?.....k.....@h...!.A.d.....dt.,...h\b.\|.&8...q<.u...q.%.$"$...N.........z....E....l2c....W.....w....+...=C9...k\|...i".....h...\.\|.....U^.l..~...].h......Q5!.....JA\..[....h.H.~.,.).y.S.B"y......X...WG.}!.....y....l{>.L...i.!P.BE..C........h.....e.......H.@..Q..;.6.....h.;.......Bh....D=.!b.....g..4.A#.......c5j.p....x.:....!...q4.........V.P..Ea.=..=......P./.K./......u?ci.&>.....y.W..Y#..;....rf._.PWTF.D...ci...!.k..N.{...4w7.D.G+...ed"..]+.>..I...NO..YMv...&....^5...0...o...jD't..~.....Az.............a..._.QFu.v.....M.5^..s$M...`a....i.4w7..#.u.`..kk).4q..+...4Q..Jl.M.....:.qY=8-...q"1....c1.....rf...i.=...i......ef.......=n.W.03...v. .Q.%.\>..LSw...&.{.r.+.ib.p;..P.:#.....dL..@.3..B.s..}-..4R.7..H)..s.`..b.

C:\Program Files (x86)\DocFetcher\img\email.gif

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	173
Entropy (8bit):	5.8357965119553965
Encrypted:	false
SSDEEP:	3:CsuRVadO683Sqp/wUd0JMnTpmy676VJH5J9glen:NXdO6ySqp/wUd065vHqen
MD5:	0E406041B2E2CCE62403A004B88C4C1E
SHA1:	7921F8FB25271E765992144790EBAEDF81CADF05
SHA-256:	5316AB9E8C5D47BC6786045B1154090D0230DC8FE39116B397B7F6C3845397A7
SHA-512:	5C18E21A2C345D962CF74549492E7DE276E1029A524B956FD89C7BDDFB89112A9A3AABD4FEC539A061253379C506DB1B2B29BFA63927A259144EF516C979103B
Malicious:	false
Reputation:	low
Preview:	GIF89a...........XPPXP..................P..................!.......,..........Z..I..5..;....Ei....@..*.bP....H[....0....C.7:.t.a....\Q%3...RJ...h.S.@...D<.z.......S".;

C:\Program Files (x86)\DocFetcher\img\file.gif

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	354
Entropy (8bit):	6.90878347349434
Encrypted:	false
SSDEEP:	6:NQHb9V/6mQBItNstPPjtgXcenMh4nd2wYOc0Trmte7EYPNqJW9XhgP8Bi44CRQqR:O7j5QJTtSkaNYOfT41Y4JYWYigQq+w
MD5:	57885E91FCEFA5054DE2DBE0E573F299
SHA1:	39321A1001DE24A325C741FF87E215F505F1F641
SHA-256:	9273E6EF5FC19C20094D577970527B80C1412455E1F009A6B2A814E18744A36C
SHA-512:	EC6C868D904AA2811C4DF7EF2DE3CEB0C2C90E9D43DDB5CB780D902103A7E859BBD582DE4273BB24946E430A35EA40923FF5316CD92BCD84ABFA50A4CF00162E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......................................................................................................................................................................h.i.\|.i...............!.....;.,.............pH,.k.$.(.).P\.)K...@N7-.P.H.!..n.b,.1q..8.V\|..Ix.y.[.......E,!xzb.!,E+$....+E..{..'E# ...#E...c....E........E.........L.CA.;

C:\Program Files (x86)\DocFetcher\img\folder.gif

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	216
Entropy (8bit):	6.145769210296763
Encrypted:	false
SSDEEP:	3:Cszn9NVnXdF/tdXFddvD6cFsgT0BaH+Q38R8al//rylsxlnx4hcxCfsYpo1JyXAc:N3sWYi8PXzjnx4hcFDDyXK6Ac9FIvif
MD5:	0B22411C85432B39BF7E4FDFFA6F3232
SHA1:	E5317B7ED7D4B29E19DCA753692960C90A05A6E9
SHA-256:	C2A33876D5ACDE7530A1D1642550A586DD83E2054E1107188D74D4FB8AFD880C
SHA-512:	8A75FD6659B8EF1C6308AE5864E78A8DAA56BAC1CF92FB38ABD5A98984EA18F29611E0C838DBDD740D95C8118C668781C2C7A6BA4A4A6A2E9D08169AB6E8C545
Malicious:	false
Reputation:	low
Preview:	GIF89a...........................x..x.....p..2.6..2.l$.r+..2.6.l$.f'.r/._.._ .R...................!.......,..........U.&.di.hj:..n.&kT:..1$....F`H,6H..r......B.Z7...R.z....r8X.htXtAX..8\|-.X..<.>..../..!.;

C:\Program Files (x86)\DocFetcher\img\help.gif

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	259
Entropy (8bit):	6.687476750035075
Encrypted:	false
SSDEEP:	6:NUMMPWcW0AZSQ4aTMrEOJVB2b6S3aok3LCfezSnaSv:WM9cWjDWEOPB22SxkbCfeBSv
MD5:	DA929A66522964535CF1EC03D895946E
SHA1:	18385ACB8A0C91807DE5EC32D11E5190C2EDB45F
SHA-256:	1096AFA90BEDB499087130F3FA10D7575B468AB927875BE28B528AC55A510CB3
SHA-512:	8CAD9C6FD6AE4F1CCF47BC109C7B67B824C7A69B4F312A09A3053043B71E930290FE7DABDDB0E9AEBD33EA1B429294A064993159D8D908A86ABC90884BF138C1
Malicious:	false
Reputation:	low
Preview:	GIF89a.........................(b.Dv.].._..j..l..y.......P..................................................!.......,............'.di>.a...6....Z>p...@?$..@8..D....$.....i.?.B..`.R...j.`0....D.OyC....%..Pv;..W8~.......V#B.......q.0.<..?7.0..46-(,-.%!.;

C:\Program Files (x86)\DocFetcher\img\hide.gif

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	88
Entropy (8bit):	4.782707755073231
Encrypted:	false
SSDEEP:	3:CseUUwlHrfP66/BxHhWic5hKK2/e:NjD/BxZc/Kt/e
MD5:	AF44593E7B2A10E83539A9AD246AA90F
SHA1:	E2B82B5AD3FED5D5B71CA93C022ABFA80F24A2EE
SHA-256:	F7684126FDBC778ACF90824481F6C28A42605301A76D28E028157BE5EF8F7CFA
SHA-512:	C38BDD4D8E17CD7751E9965DC6E98CE78060D1A2481B3009BF8C783E3ABC5A55DDDBDA9BA2FC30E1532DCB48211B652BF4AF70D35D1DDB12C1BCCB90CE2C2777
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,..........).......B;q...>F..ZB..T.'.zK..5.9....S..;

C:\Program Files (x86)\DocFetcher\img\highlight.gif

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	321
Entropy (8bit):	5.558570045638948
Encrypted:	false
SSDEEP:	6:NwD5JdZbRSZrXBl0frRW0JjeSN6dz8234/b/:elDZbQrXBlorY0NeSN6gz
MD5:	ED639952A15D9FE60AC4C95F8B99E06C
SHA1:	B1BC12605BF9E50424A7A07507FB646BC161C118
SHA-256:	0C47500C01E16992B62F9071F389F877E6B303DDED732E5AC450437E8301C81B
SHA-512:	EF481E3B0653C8F5925F57E9053133B1C34631C95DE21E0A0E78FA4BDC488224D6ED384B9EF3E4C9DEF99635DA9791253CF84AC7B470BA0EC32B911AC520E4B4
Malicious:	false
Reputation:	low
Preview:	GIF89a............."..#..#..E..p...................&........../..\|..&..r....f..p..t.....^..y.uM.{U..p..l..n.............................................................................................!.....!.,..........^..pH,..B..YT..C'........qx2/..b.t<..1..P....sl......2........E.....F..w...G.....D.........TPA.;

C:\Program Files (x86)\DocFetcher\img\indexing.gif

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	166
Entropy (8bit):	5.7143866528958975
Encrypted:	false
SSDEEP:	3:CslOrRa1cUazrylcrtLswp7gpG1bidSkoTjiwDWZSCq7O6xh/en:NleDzjr5swpsibiXMjX4AFe
MD5:	D04BBC8089B923FD671BB731777CCEF0
SHA1:	FFAF00BBA40A0443176C92028AAF6E032766F9C2
SHA-256:	30011D7E35C895A37664F223E8E47D5B8EBD0254BA9A47E867452C10D2792421
SHA-512:	928C81AE765897A2D3E2E5963A82878A0D7E72F6F189CFFC35B40E43DA84DFE4363CD176F9B07381C4C73351493D692D44A0102A41E1ADCEE8BDDE926BB33F69
Malicious:	false
Reputation:	low
Preview:	GIF89a.......?_.?..__?.._.................___...............!.......,..........Sp.I....=.]....YD(..v..ad.....I.....G.u.E...8...PY$Iw..3...\$Q..^...y.u..+.'m.D..;

C:\Program Files (x86)\DocFetcher\img\indexing_dialog.gif

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	360
Entropy (8bit):	6.813960951085457
Encrypted:	false
SSDEEP:	6:NwYKleHTuh2J3HIaXKgkvBhnrTg6ll7lXYoinmOuzF1QEYoNBqu+FNcizE8Sxe:+Y0P21AgkBRE6/xYJnmpx1yoy3hzEK
MD5:	F43CC2D795E54F1A9A7A1B7530F3514D
SHA1:	2FB2EA39D48B038EBB9E27B841BBBC67B7F10D09
SHA-256:	3A7071DB91A69D787448A21FC4C2BDE8563DE8C0BCB76DC363163600C38D0E5E
SHA-512:	B20556BBF987BA7A00AB3374471DDDF37922A9362E7DD577125C7D96B23DE6A36E1439006C4C1C58912C70991C5A05807B95D9ACDDDE545A5FFCFCD6120CEA09
Malicious:	false
Reputation:	low
Preview:	GIF89a......................#..#..&..y................t...........................r.t..........._..e..^.\|[..y......vW.pX.WA...dK.iO.\E.]F._HyO@_9-.uk....................................!.....4.,...........@.pH,....P6<...hR.<...`......i....!.E..Lj"`0.....@,)......D(....1....D2).1..&'3D-`b1..+E,oq.p.,E0}..~.0E/..)../E.......JBL..DA.;

C:\Program Files (x86)\DocFetcher\img\info.gif

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	252
Entropy (8bit):	6.310639892606643
Encrypted:	false
SSDEEP:	6:NinIiGIIZS/uaTCErBamZVMoLFgGbPqoAiQ:2ITT25QmMoWGbtAiQ
MD5:	856E7D6F7D7F38DD436AB0E1873E5D9D
SHA1:	25A64F338E55B9BA82108BBE04A1C26111A05AA2
SHA-256:	18272AD2B48F675F8D76CFA3AB0B1A07F93CEC6AE7BC243A7E0FCCF123AA62C6
SHA-512:	474134150F4ABC5FEAA506BD3228B4F0D85B894A39355B023DD83257E33D60912BE14D4F727476230F75BF801955B6D99668F29324CEA302199D46D052CF283E
Malicious:	false
Reputation:	low
Preview:	GIF89a.................F.....T..]..\..b.U....................................................................!.......,..........y.&.di&.0 .9..".J2..B`....Di...\|...&J$$F..(.8E.....\...$.......)..1..&.0s...S(X,z`.Ny......Wa.....K%9....C1.5L.(,..&!.;

C:\Program Files (x86)\DocFetcher\img\letters.gif

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	152
Entropy (8bit):	5.9410418222271035
Encrypted:	false
SSDEEP:	3:CsI6equeuL3w+P/rylcrtsNCMCpwLOUcBy+vw7oHkn:NxequxTwWjryNCMROUcBekkn
MD5:	2DC929F03AC7A0FA89814C13CA5AA5F2
SHA1:	5A9606AFAFF3185F23C43FEF982DA76D98D603A6
SHA-256:	09CF876CE457A2D2A78C7D8F7CB3F934CD70D323BAF7011000F5A0454B2CE8D5
SHA-512:	B4BE2D06A2CBC2F5FB8B9A65E7C807C40E6E79380AF9CA74C7BBC061677F6E0DACFD65D9C7AB978B7E5261BD57E81012CC18064A74B9D62D749C9926E173A5E7
Malicious:	false
Reputation:	low
Preview:	GIF89a..........7\.............Kn.d........?.................!.......,..........Ep.I..8.e.9.& S...d.,[.e.....5.*.0.7D.....[b@...$ ..\|"sW....l[...._".;

C:\Program Files (x86)\DocFetcher\img\list.gif

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	97
Entropy (8bit):	5.571843002878976
Encrypted:	false
SSDEEP:	3:CsSAN8yjCGJw55uz2ADJ2qDnoE:NSARjCGJwvuzDJ2IT
MD5:	E620FF87050B3FC837F10DA867A6BE0F
SHA1:	43720C55AF4F315281C75B2F248D6F61BCBBD5AD
SHA-256:	2F114FE6A1F0B43B84CE02460676121D5C9F5D1B1BF6C3F1E265FE5783B2743F
SHA-512:	225A9D8941CA451431931E1405B6BF0DCCC6244D65536F4A1169FBE269219481B620E038E9ADB9282EC4448D4D1AA62B47C0E9F5E98F9EF6757F7262F67BBE14
Malicious:	false
Reputation:	low
Preview:	GIF89a.......m..k..q..u.....z..}.....!.......,..........&x...0.@..$....@CiV)V%.q....)...u_..r_&.;

C:\Program Files (x86)\DocFetcher\img\maximize.gif

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	476
Entropy (8bit):	4.940492217033063
Encrypted:	false
SSDEEP:	6:NFW3Y+VSwpXHN1+tHtT1tNJPp5Z/bp3JcmEuJNiK8z+Nn3ne:i39kwVHN1+tNrrZ/bztEuiK8ue
MD5:	A846B8417023165C1F50FEE6528AB28C
SHA1:	75C0DF079C22FA423A4CFEBCB3F259059166307E
SHA-256:	DB35CCF1638170F1690B72ABD81C42294C561E05945E83CDB6078E5D59A67A8F
SHA-512:	520287A764CD5B3A2DBAB027810F788E09E476276A655D38DD0294122D386788CBC7F2CAC8FB5422DCBD2E7F743161F6A6432F7A873949483455A8EFD29BE93C
Malicious:	false
Reputation:	low
Preview:	GIF89a.....H..WX._f.?R.?Q...`h.........Xh......hp.................................................hpx..................pxx.............................................................................x..h..p...xxp........................................................................................................................................................................!.......,..........9...........G....G8..8G....................................;

C:\Program Files (x86)\DocFetcher\img\minimize.gif

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	73
Entropy (8bit):	4.590220712080017
Encrypted:	false
SSDEEP:	3:CsM6La8Elr0z5F9+ZH2t0ole:N7REaz5FcZWple
MD5:	0DD28F373622C9955B7F8B17A300D57C
SHA1:	B89231B5275511C68AC12CBBC6A051BA26537445
SHA-256:	86F117DA11B6F762724CF186A97882C1B237438EB219003D33C6F8610508E738
SHA-512:	871AFD36E65F21710DCA7570A5A3A505204696447F4C58F7A616C09266E5B53511A0B47ED62CF807E359E857D15D47512FE749FC1D93F64B316299AAA9162588
Malicious:	false
Reputation:	low
Preview:	GIF89a.......?_?.........!.......,................c\ ....W?)9.H...Q..;

C:\Program Files (x86)\DocFetcher\img\package.gif

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	227
Entropy (8bit):	6.350116247075393
Encrypted:	false
SSDEEP:	3:CszgBnUgZc4wyLTJ2zGlJcCJXb/uX1yllxl4KDdn3uU+YmGzU96JEN+NFhJj3yrf:N8ymJlJP/uXEDd3uU+uU96JENCFh8we
MD5:	3B185E05C36B33BBAEE4FE6613F10425
SHA1:	4C0CC4BF8918CA8724F5D0BD384367A0AD851756
SHA-256:	82577B6B416BBF65CC99BC1C249E6462AE4AC708687FE2E1428B610C049300C2
SHA-512:	A4C9F7B123F5407FE7FF599495E45EC6036F46AA729886A42BB4EBEC117907137932C44D43515B0B39953985B84F92B34A934D0947EDAF30FA0C89FBB0ADC658
Malicious:	false
Reputation:	low
Preview:	GIF89a...............1.2...z-...u.w+...m(.q...`#.U..c%.\".Y!.Y"..q<..pXyO@........................!.......,..........` &.di.(Y..`....C....X..... ......C........h(.....P=,...ly.F.^....b.Q.0.Pg.4.R,~.%........,g,.!.;

C:\Program Files (x86)\DocFetcher\img\preferences.gif

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	159
Entropy (8bit):	5.543867159341402
Encrypted:	false
SSDEEP:	3:CsyObhlrHwass8lXTylCxllJD1C5t2NtAxdinH8CSGe:NSXhjj5FNtSaH9SJ
MD5:	FF59DDAFBF4FCA9DE233083BC340D1D1
SHA1:	AE96F04DA60B914A3F95347134B3A2CF257D877A
SHA-256:	9DB506EC33EE6A5A9066349BE26F2E7F6E817DEB05862CB9B497DB4DE6DA8F6E
SHA-512:	22535676BCCE0764983385D902986D5288E44AEEE72FBA5AC19A7EC93E75A5B1B54377BAE31E4D93374C7C50A8D7A429D2436DADAA759FA89F64698CF921B3A6
Malicious:	false
Reputation:	low
Preview:	GIF89a..........OPO............yyygggIII.....................!.......,..........L0.I..&.K..@p \r.B..\&.H!h.( .".S..0.....N...R...Q....h..N.P....Y"...)6.D..;

C:\Program Files (x86)\DocFetcher\img\program.gif

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	360
Entropy (8bit):	5.818673347862746
Encrypted:	false
SSDEEP:	6:NGsecgePuXyMuJ40fJ+aGtrXiuCUuYczVDOOD:4cgemyMU4IJ+aArXmUuXZOOD
MD5:	4EA54E3220AF49251DC85410723643DA
SHA1:	B84982B4662CB7FB3B466C098D0063A6B427493F
SHA-256:	124A5D1D696BF42476ED2797078B4FA8C6F6EC82614A783BFB4C3E03B910FD74
SHA-512:	D9CA59F7EA7AB7F72BF839640D03D77BD852BE4797DFBF60A1B6ACA6164EBB6CF17827ABA15BDFC98BD1E96C904C66F8556ECCB5BEAA05B7F445510076F662AF
Malicious:	false
Reputation:	low
Preview:	GIF89a....................(P.0X.8`.@h....@h.(X.0`....P..X..h..H..`..x................a_=a_Axl6qf:.r2i_=.l2.l6aYA.y/.r/q_:.................................................................................!.....&.,...........@S..0.....Bi6M...!.L(..e.4..F.R..FM".zm..-..\|.w./.Bc ....u&#pt.#&.py{}....& ..r.....&...\|....&..........$&.....&..%.....&!....&....&A.;

C:\Program Files (x86)\DocFetcher\img\refresh.gif

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	327
Entropy (8bit):	5.645782706978631
Encrypted:	false
SSDEEP:	6:N2j33OYBWyAiCXJROFJQx67VgFyoXbiqDFw36i/:K33DBBSJROo6Rgkpee3B
MD5:	7B695E7B77EF59BF9454CB1F03E35DE6
SHA1:	DCD594739523B19788E6AE8D085BDF1327940752
SHA-256:	94ADCF62454B3A9DBE93FF17B489CC4ADABA5725C06AF27BD58F30A6731D2620
SHA-512:	2D4F392C948BD5EB8B0CE148D0FB9B37F7B203B1A9582CA4A4F29ADA456E6308C1210FDF31F98A0D026DFC6C50747E1F3A8C390D733D93B6293FD625F0FFF460
Malicious:	false
Reputation:	low
Preview:	GIF89a.........................z...........s..... ..`..x...._....x........\|..}..}.....n..r..n..n..r..s..r..s..k..................................................................................!.....%.,..........d..pH,.....H.(.CK p.l...`;Hh...a<f<..I..n.......p...D..%..OG..I...E.......K.......P! "...PC$.}.{.GA.;

C:\Program Files (x86)\DocFetcher\img\remove.gif

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	185
Entropy (8bit):	5.312160585112684
Encrypted:	false
SSDEEP:	3:CszC0Bm86RZF7iWQiybEHjhD0lylxrtYumPOZVZ3UtWhCnglS:NW0BmVRZhiWQiZjhYKmPOZzkMhkg8
MD5:	9FC97D536E9A7D5A79A9FED2085F0700
SHA1:	B8CC4108C05BA939213EBCA1BF8002731C7DD696
SHA-256:	8393F1C529C54DC3CDC1F5881DD2B31095B7D00DBB447B94FCA0D9E3E941A2DE
SHA-512:	78335007BB79A9B726FF6B37D1FD4FC945DD9E4926C6A4D46CA532241CA09CF1B7370792173533F2F2477CCE008552DD9F4F938CF2A12FDF72BB37B8BEB7610F
Malicious:	false
Reputation:	low
Preview:	GIF89a.......=.\D.bN.kX.u_.{..Y..Y..Y..Y..Z..Z..Z..`..`..a..a..a..`..a..f....................................!.......,..........6 %.di.h..,I.p...d..@...8.HC.y.H...(,..."@.X.Xkk..z....;

C:\Program Files (x86)\DocFetcher\img\restore.png

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	180
Entropy (8bit):	5.61574902851495
Encrypted:	false
SSDEEP:	3:yionv//thPl9vtJK6PtkwMLts9NJPoG9042/uDlhlbgv3HrZlHs0Jmtn5UAgmlJt:6v/lhPO6ZMR+Px07/6TI7rs0JmtnbgmZ
MD5:	282E64372DAC6F994D9BB9E5C98355B6
SHA1:	B9E44104E8D8E8FD44FEDD6B5676A48E542B293D
SHA-256:	1143ED773D0895D7E97B2C2B71417955856B087BE4FE2508872F59071D3C8E98
SHA-512:	C7C160674179A3FEA7BBAF7D235287BD31684578F2304E13F4AFE8BF15926185C77EDABC62864B53042699C2F9403AC33F2CAD92630B7B4FE5E3DE52DA18A610
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............7.....sRGB.........bKGD....#2....pHYs.................tIME....."........8IDAT(.c`.x...)..`wAe.......... ..(#........R.(......B.....)....IEND.B`.

C:\Program Files (x86)\DocFetcher\img\setup.bmp

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PC bitmap, Windows 3.x format, 96 x 200 x 32, image size 76800, resolution 2835 x 2835 px/m, cbSize 76854, bits offset 54
Category:	dropped
Size (bytes):	76854
Entropy (8bit):	2.825151728188939
Encrypted:	false
SSDEEP:	768:owURW4mXVSXrAHBqs0Tazvco5BrTDA5ELp:or84mXVSXrAhqs0Qvco5BrA5ELp
MD5:	893AA5FD427883D43B20E0D69A26734C
SHA1:	6E44B7DFBC2A1C8E3FC3B9B7C28AAE0B5D0E4D9F
SHA-256:	1D95A642D40B972395D1AFED2C0AE6F7E5D76662D3131BE9B6C9C8E5DD05F45C
SHA-512:	5DFCF0277DEC43F0510E5C9B2BA028AD1C2F98614BB5EFF0E7D264EA5C31E33CC0B83A94628B0E24CB462D12ABDC859672DB7EE30172F558141F5FA2F5C3D359
Malicious:	false
Reputation:	low
Preview:	BM6,......6...(...`......... ......,....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\DocFetcher\img\squirrel.png

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PNG image data, 200 x 230, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	32276
Entropy (8bit):	7.9811584556892985
Encrypted:	false
SSDEEP:	768:yAKpiza1asobQlCDkU9Cnv+LxJmLQ6XxyAE+MIixr0enOU0swT:csa1aso0+kvAxJmM6BPE+MlOrswT
MD5:	97123A3E1AB53BE1A31358B7EC762994
SHA1:	68E9B3C7ABB43AFD88B74C74660C4E22F9254402
SHA-256:	784CA614F97B0F232B47B4E607E2B70FE2B0A73C0544164A11CCE07FB2703D58
SHA-512:	6EC4918B2E42897A8967780BBB67276336F3E7E01B98007DE98DC87620871A69510D2F1C582681AA233E6776C901451A3CDD0E6C1E7B115D417E708E6540C208
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............].....sRGB.........bKGD..............pHYs.........k[y)....tIME......)...... .IDATx..it\.u.x.C.[....H..@J.D..%[.-[.<..8v...KV..rg.t......^w.Ng.z.K.$~.'Y.%k....g.$..0..U...;............1."k..5.........SJ..z.V<.....9.....>...~..\|...wc.;{..7..,....q...C....-..........7?.wB.1f,..........B..=`.....?.+t.!.......).n...D....np......[. L.a.`......9.s..=(..u..G.S.!......&,&.]....X{..W.R..uH.......D.L...oqqq.X{.W8.vYrf.}.?...........u..[....O.....#...=`.w...B.Q............=`....\...R.R.R...5...T..VK.P.....u...c.........5T.+T..j.3......u.K..m.~...RC..L.:.kT-.{pte...h..X7mQ]..H....Q.....S......nW....&`...e....4.S...c.R.1.s.{k...7.1..V.j..........=...v.V#.}Rf+.X.Z...@..j..:..7....c...r.\.....8n.X{k..s.Pi.`......,...%^nc.\.........u.7(C....A............_..]..\|.l./Vv.....,.......~t.5...`...7:6.p8.............~W.}....2.[..K..!-..=..<.Gn....=`.B.b..u`EK......s.,9"...3F...P..N.-....'^........$.....X.A^].6(~....h7.A{.

C:\Program Files (x86)\DocFetcher\img\star.gif

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	562
Entropy (8bit):	6.54819650789566
Encrypted:	false
SSDEEP:	12:A3nis9e7C7PZ07vmoHPJ9xCbeeBlTUnfsm0U0C7U7:A3ciR0jm+9xCbemlTUnD0U/7U7
MD5:	9BB54ADE712505C78D12B180100CC81E
SHA1:	5A82476A7463F83E327FA8F78CC72EF8A83EEE54
SHA-256:	CAD1309007535B25E57DD554F14B32241B48FA00A0D1831158CB5C1187C6CB4B
SHA-512:	F10BACA5B377ADDBF885DAA557E206DEDD0B56ADA1CB0A9B033250C62403E690930291682883A72D8D8660D49A64AE600EED9DFAC559C8CA1D40376B4B4CF0AD
Malicious:	false
Reputation:	low
Preview:	GIF89a.....^.Xbuai{aj{gnwgnxgp.eq.kt.kt.ht.suhsvhqy.o{.{\|n{\|ov~.w~...q..p..z..{}..}....r..r........V.......................d..g.....m..n..Y.4.6..Y....X.\......Y....\.......:..a..<..d.....o..q..].._..Z..B..F..p..r...........M..=..M..?..E..M..I..P..Z..\..W..X..Z..[..^.._..`..b..j..m..o..q......................................................................................................!.......,.......................6..;...,) ...@@..-.....RS.....-.&..8<CXYD=:/.&.G.$ALU\]WNB%.G...2TZ[V4....'MPQO(...>IHJK?..0.E7..9F.1...*."".+...#..3..0. ....^....;

C:\Program Files (x86)\DocFetcher\img\stop.gif

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	215
Entropy (8bit):	5.5105197681818625
Encrypted:	false
SSDEEP:	3:Csz9v3FPfPVtvtPtX1dPN9yaa1dylXxlYVM7djvB8JRPXBJflHp5xwhn636dQnrl:N2zBVM7dTB8JdRJf+dQrq+
MD5:	A26509FFEC145344058AB4AC4E4236FC
SHA1:	92AA3ED1894F3C320F1FF2485FF7333470DA7BB4
SHA-256:	4C4F34D86B6D90DA5B802FF17520E27AD7FF3085A528B89FF6D7261B97D06BDE
SHA-512:	FA1EA42CA5468A9328B7C170DA11E020BF46D3AF9E65AA772FC3D1408ECA10D9299EDB3C23C6B289A7DA437BAD7A312EDAC06F377059A9FF487F18ABC5401B8E
Malicious:	false
Reputation:	low
Preview:	GIF89a........08.8@.@H.HP.hp.. . 0.(8.`p.P@.XH....@8.88.PP.xx...............................................!.......,..........T.$.di.hjFJ.Q.,t]'2....$Fd@,."..P.l.....@...IR.`.z..F.0.R..R!.h.....B...$Da..#T...!.;

C:\Program Files (x86)\DocFetcher\img\tree.gif

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	98
Entropy (8bit):	5.715596232498329
Encrypted:	false
SSDEEP:	3:CsjfEmyiJ4baiQEGJHlotEp/tfKA9ekE:NAmxJ4+iQEGJHlotEplfb9S
MD5:	FFDA9AF611A8BF62AA2751E20438B8AC
SHA1:	4ADCF738F910B4C3EE0AADAF1C5945368C192743
SHA-256:	F7988F638173D9001DA8265E248BB6028CEDE6C406D92A9D9E4226205925368A
SHA-512:	689AA1835EDA40B671C3E6F5F2F7DFDE6D1BD2E08D238A9743B208798FD04CFD116717893C8DA5C961DC925C7CE8E22C13FC02780F823E06879717B27DD344A6
Malicious:	false
Reputation:	low
Preview:	GIF89a.......\z.`~.f.....l..r..v.....!.......,..........'x...0>@....S..Se).H2T.i..G...%.,.G2.7..;

C:\Program Files (x86)\DocFetcher\img\warning.gif

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	331
Entropy (8bit):	5.986822108199843
Encrypted:	false
SSDEEP:	6:Nw+cjpmbibVSqxgAGlsRhgwaODJ+hhcbM/0NDj5VEqvg6:+rjpY4VS6rGlehTDw3YM0xbEGg6
MD5:	CEA1949A5773DEA7A81069BDDF7AD5F4
SHA1:	7A986E800AA7192035067DA0758E3AD3677DBB1C
SHA-256:	1F80A2F5AB7043ECCFC5C8AB74F231C312BC3E871F79D46081D6120899D9AFAC
SHA-512:	DA1AB6DFF185F8085BE33DEA4B248ACCB3C44EF532337B5F1EF2537CF7EA83ED37B9F5144F311A589DF85CAA76D92D9F7A5096E0129BF3A01A65C3FF2EFE39C9
Malicious:	false
Reputation:	low
Preview:	GIF89a.........s...................L..M..O..[..k..k..l..t...m..M.]7..$.,..I..K..J..J..N..M..O..R..Q..\..\._..^.`.o..M..Q._...................................................................!.....+.,..........h..pH,..H..DR%.(.B.\.F....!$.D(Y. *..........t.....$.(........E.....h....&D....`....D.).....).E....U..A.;

C:\Program Files (x86)\DocFetcher\img\warning_big.gif

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	592
Entropy (8bit):	6.65696729060884
Encrypted:	false
SSDEEP:	12:tTPm3KI6ajNs0/Ame0flpFcc+AsqtFw3SwUq10dLGQkYIb:tTPeK3tolLCAsq4KA0dV7Ib
MD5:	A24A5D9BCA8AA062EF7B64BB6F13CD10
SHA1:	736DE0D0907733304E040F01EE17E9C1BC8AAA83
SHA-256:	D89325938D8713B1820DD300F1787902BD9BFA7DB5BADDF6D53E9BB16FA3EDD0
SHA-512:	BD2F4398B3FF5E5AC9BF47776B284E73D73752F4C83F515304FB3CB6FB26071ACE43F9D82D727BD77990956C76D5EDF7FA5BAB8F57A9511A74D74936C3B02B83
Malicious:	false
Reputation:	low
Preview:	GIF89a.........s..t..v....................................d......................a..a..b..b..........<..<..=.=..I..J..J..T..X..X..Y..Y..b..w..x..x.............{Q.~S..X..V.~T..X..]..\..]..`..a..e..d..h..c.b.`.`.`.g.f.d.c.b.a.`.h.h.h.g.f.f.e.d.c.b.b.a.o.e.f.a....................................................................................!.....f.,............f..eSSe...U..S..eL..T...V.57.M..dM.99.Wd.X.8:=".a._`.!>;6.Y_.N.3@?4.N._G.&2BC2&.Z..O.#$1ED0%%.[._P.)'..)(.H.\.-.,.?F.+-+.].Q..6t..#....^$.".....0.8q..1I.)..D.....H.....@.;

C:\Program Files (x86)\DocFetcher\lang\Resource_de.properties

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (454), with CRLF line terminators
Category:	dropped
Size (bytes):	30696
Entropy (8bit):	4.776091995971122
Encrypted:	false
SSDEEP:	384:dPAUsIi0Q2Psct/voYgtHFQsxuS5npaS87WJ5JIn/oQGr/UyQ/BWRv5fq2VLMKuE:IY83X2neEz6VQ4KyReKHydTlfGDVP3qm
MD5:	4D4A2BECCED39B01690E6BE14215F37C
SHA1:	7FDCAC438BCFC9177E33791B7AC2A6367631F6BF
SHA-256:	C6687B9F815B5B88587BAB749E343026C23822656D978255C726738120B7A388
SHA-512:	B7F454C7D8CF1E484B0F7C35C848B399C4810F7FD310C17C397EB3D9BEB1C52E4A389DC6A01376E7978EBDC7D4E8360F9F566E70F29E599A96F06D5F58389A09
Malicious:	false
Reputation:	low
Preview:	# Window title for a message box that displays an error...system_error=Systemfehler..# Window title for a message box that asks the user to confirm an operation that is about to be run...confirm_operation=Vorgang best.tigen..# Window title for a message box that informs the user that he/she is not allowed to run a certain operation...invalid_operation=Ung.ltiger Befehl..# Label for the 'OK' button of a message box. The '&' character is applied to the character after it, and in this case indicates that the user can activate the button by pressing Alt + O...ok=&OK..# Label for the 'Cancel' button of a message box. The '&' character is applied to the character after it, and in this case indicates that the user can activate the button by pressing Alt + C...cancel=&Abbrechen..# Label for the 'Close' button of a dialog. The '&' character is applied to the character after it, and in this case indicates that the user can activate the button by pressing Alt + C...close=&Schlie.en..# This messag

C:\Program Files (x86)\DocFetcher\lang\Resource_el.properties

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Non-ISO extended-ASCII text, with very long lines (2037), with CRLF line terminators
Category:	dropped
Size (bytes):	66673
Entropy (8bit):	4.522357066667612
Encrypted:	false
SSDEEP:	384:BKAR4whUsymE48zp4eiH74jOVMcRTIvjrx5BwMKZPCaHQN3tQsxuS5npaS8j8mpL:fPDI0bGeseKdABsei58T
MD5:	761A8180821BC3B05CE65212C728FC25
SHA1:	157ED5951E48FD2AB2A82CD0A163CCBEBE08A0A0
SHA-256:	129881A9092FEB401A1E3E471223A5381852D3B8A63C4B9DCD49B3100BA0472E
SHA-512:	B6EC28A2DB6D82F980EA37D3891701587993C4EA8C53DC7F347642C437DF2835BDC8B742424939464FA4CF8FB5D30C9444DDD8F72ADA67F55EB64AD182E39771
Malicious:	false
Reputation:	low
Preview:	# Window title for a message box that displays an error...system_error=\u03a3\u03c6\u03ac\u03bb\u03bc\u03b1 \u03c3\u03c5\u03c3\u03c4\u03ae\u03bc\u03b1\u03c4\u03bf\u03c2..# Window title for a message box that asks the user to confirm an operation that is about to be run...confirm_operation=\u0395\u03c0\u03b9\u03b2\u03b5\u03b2\u03b1\u03af\u03c9\u03c3\u03b7 \u03bb\u03b5\u03b9\u03c4\u03bf\u03c5\u03c1\u03b3\u03af\u03b1\u03c2..# Window title for a message box that informs the user that he/she is not allowed to run a certain operation...invalid_operation=\u039c\u03b7 \u03ad\u03b3\u03ba\u03c5\u03c1\u03b7 \u03bb\u03b5\u03b9\u03c4\u03bf\u03c5\u03c1\u03b3\u03af\u03b1..# Label for the 'OK' button of a message box. The '&' character is applied to the character after it, and in this case indicates that the user can activate the button by pressing Alt + O...ok=&\u0395\u03bd\u03c4\u03ac\u03be\u03b5\u03b9..# Label for the 'Cancel' button of a message box. The '&' character is applied to the character a

C:\Program Files (x86)\DocFetcher\lang\Resource_es.properties

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	ISO-8859 text, with very long lines (384), with CRLF line terminators
Category:	dropped
Size (bytes):	12425
Entropy (8bit):	4.9475581599104705
Encrypted:	false
SSDEEP:	192:thovs6nCRPzVI3IjA1VamAgjqMbBHL82yvrB0Cj8jPzXjkyU16nwQixJZ/:/j6nS0Ic1YmAkqkr8bvrB0CAzTkkSN
MD5:	6F49EB2CC08A188D7050A21DF1477BBB
SHA1:	195A5DA0E11A70BF35F7E0D142095F59F0EBD4AA
SHA-256:	BECAC0754368A02302914F280D267F52D56B392003CA4FB715AB4B598B22CA8D
SHA-512:	81F06AC4A7EF0C5B458C4A1F47EAF35C8DF80E053553B53B88595DB87132B3A088267360151E55864125DFA1A52104C0A2AA36FB9002F7EB5BDB8D6A07AA2215
Malicious:	false
Reputation:	low
Preview:	#..#Mon Jul 25 23:35:41 CEST 2016..# program_running_launch_another=It seems an instance of {0} was not terminated cleanly or is still running. Do you want to launch another instance?..browser_refresh=Actualizar la p.gina actual..browser_stop=Detener la carga de la p.gina actual..score=Puntuaci.n [%]..filetype_jpg=JPEG (jpg, jpeg)..invert_selection=Invertir selecci.n..home_key=Inicio..check_single=Marcar estado de selecci.n individual..pref_font_normal=Previsualizaci.n de letra (normal)\:..pattern_regex=Patr.n (regex)..filename=Nombre de Archivo..report_bug=Ooops\! Este programa acaba de morir\! Por favor ay.denos a solucionar este problema mediante la publicaci.n de la StackTrace a continuaci.n en nuestra <a href\="http\://sourceforge.net/apps/mediawiki/docfetcher/index.php?title\=Bug_Reports">bug tracker</a> (no registration required).\n\nThe stacktrace has been written to\:\n{0}...corrupted_indexes=Los siguientes .ndices parecen estar corruptos. Se recomienda Reconstruirlos...not_an

C:\Program Files (x86)\DocFetcher\lang\Resource_fr.properties

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (473), with CRLF line terminators
Category:	dropped
Size (bytes):	29067
Entropy (8bit):	4.750142007451288
Encrypted:	false
SSDEEP:	768:LGCXvtCTYld444I7KmwsXaTmZyc8ZBgoV:LG4CTYL444I6sX5YL
MD5:	894EE3452FC86B448250E9F0E31A56E7
SHA1:	49A3D5B0A66BB0B071EF491B664215EB3A166789
SHA-256:	102D6AB1F0F160737FC8754675100C80E3E4C0514AFE52A2ABB5B868E580CEC8
SHA-512:	2D59700004A5274C0525A581CC36BFECB4ABACE5C66E2A39647B9D8AFF4157587A8F320290849ED2F5BD74D8CD24A402BD6C3837AAE558DCE116F5E231EC4AD3
Malicious:	false
Reputation:	low
Preview:	# Window title for a message box that displays an error...system_error=Erreur syst.me..# Window title for a message box that asks the user to confirm an operation that is about to be run...confirm_operation=Confirmer l'op.ration..# Window title for a message box that informs the user that he/she is not allowed to run a certain operation...invalid_operation=Op.ration invalide..# Label for the 'OK' button of a message box. The '&' character is applied to the character after it, and in this case indicates that the user can activate the button by pressing Alt + O...ok=&OK..# Label for the 'Cancel' button of a message box. The '&' character is applied to the character after it, and in this case indicates that the user can activate the button by pressing Alt + C...cancel=&Annuler..# Label for the 'Close' button of a dialog. The '&' character is applied to the character after it, and in this case indicates that the user can activate the button by pressing Alt + C...close=&Fermer..# This messa

C:\Program Files (x86)\DocFetcher\lang\Resource_hu.properties

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	ISO-8859 text, with very long lines (405), with CRLF line terminators
Category:	dropped
Size (bytes):	12191
Entropy (8bit):	5.272626086527389
Encrypted:	false
SSDEEP:	192:tIhh0Pu3BxVugJHt7LnFoQ5cxKXfrnz+QZez6M+zEBkhzrZ04dtB6Pn4lCQExrCs:Chh3vUgJBFoQYKnz+qeP+tZ04bTECq9R
MD5:	37F6A589899275B6F3674ECF5721F325
SHA1:	A18FD55B4819DF7CD2F31182CA75DE8D407E1765
SHA-256:	C1F1F69CB4AC1B56A0BAB641D2C3F70C2AE7DA905160218AA55454E3788B5E52
SHA-512:	F03AE3A36F1DB89556E47BDFD3CD89E7ACFCACDC80DC7A6A729399C8A22D3989FF270FF8803CA6C11BAA9842E8AA9D8D2D6CB9C5C1864F1AD5C74C285DDD09AC
Malicious:	false
Reputation:	low
Preview:	#..#Mon Jul 25 23:35:41 CEST 2016..# program_running_launch_another=It seems an instance of {0} was not terminated cleanly or is still running. Do you want to launch another instance?..browser_refresh=Oldal .jrat.lt.se..browser_stop=Oldal bet.lt.s.nek le.ll.t.sa..score=Pont [%]..filetype_jpg=JPEG (jpg, jpeg)..invert_selection=Kijel.l.s megford.t.sa..home_key=Home..check_single=Egyedi kijel.l.s v.lt.sa..pref_font_normal=Bet\u0171t.pus el\u0151n.zet (norm.l)\:..pattern_regex=S.ma (regex)..filename=.llom.nyn.v..report_bug=Ooops\! A program lefagyott\! K.rem seg.tsen a hiba jav.t.s.nak el\u0151seg.t.s.ben a stack trace publik.l.s.val a <a href\="http\://sourceforge.net/tracker/?group_id\=197779&atid\=962834">hibakezel\u0151</a> rendszer.nkben. (Nem sz.ks.ges regisztr.ci.).\n\nA stack trace r.gz.t.sre ker.lt\:\n{0}...corrupted_indexes=Az al.bbi indexek s.r.ltek lehetnek. .jj..p.t.se aj.nlott...not_an_archive=Nem arch.vum...pref_hotkey=Billenty\u0171kombin.ci.\:..create_index_from=Index k.sz

C:\Program Files (x86)\DocFetcher\lang\Resource_it.properties

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (495), with CRLF line terminators
Category:	dropped
Size (bytes):	31307
Entropy (8bit):	4.7198354126716255
Encrypted:	false
SSDEEP:	768:fZxQ6JonFn1y4gO3ChKL7cu7Yz6o3GY+r:honFnQ4gOSE7cCYYYG
MD5:	6A43410BAB6430C6D0B15CDB4236669C
SHA1:	8E8E2465CB8A596F78257D14DADC25AFD937DB8F
SHA-256:	EEB3D21B809EAC466562F8BE1982B2EC88DD2C73565BEF3219920F13780492A2
SHA-512:	FEA431AF759C19254BB09B1A74D149BF417F692E84E392B35DD2578521567EB7919516F9DC6AE6A9CB1989D42A82A5296704A9BFD5786613F73B517A6556D1A3
Malicious:	false
Reputation:	low
Preview:	# Window title for a message box that displays an error...system_error=Errore di sistema..# Window title for a message box that asks the user to confirm an operation that is about to be run...confirm_operation=Conferma dell'operazione..# Window title for a message box that informs the user that he/she is not allowed to run a certain operation...invalid_operation=Operazione non valida..# Label for the 'OK' button of a message box. The '&' character is applied to the character after it, and in this case indicates that the user can activate the button by pressing Alt + O...ok=&OK..# Label for the 'Cancel' button of a message box. The '&' character is applied to the character after it, and in this case indicates that the user can activate the button by pressing Alt + C...cancel=&Annulla..# Label for the 'Close' button of a dialog. The '&' character is applied to the character after it, and in this case indicates that the user can activate the button by pressing Alt + C...close=&Chiudi..# T

C:\Program Files (x86)\DocFetcher\lang\Resource_ja.properties

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	ISO-8859 text, with very long lines (887), with CRLF line terminators
Category:	dropped
Size (bytes):	22492
Entropy (8bit):	4.618735642620812
Encrypted:	false
SSDEEP:	384:/pgY7EdEQ8OTMd5OQ41xHbs4AJGz9l8kP0tLXzM7aMt7:/iYr4Md5L4zs4AUzb8M0FzpMt7
MD5:	E57373FAB080218D6EC124F3B71DC26C
SHA1:	4E6337EE8D94B8A41DA95266A8D192AB0ABE115A
SHA-256:	7858C56EB086DF0E20995D1C4A83E837E2F1CB8393F6225AE95BD4D339F2EBA2
SHA-512:	9563DCFA0986974A359250DF8AB75E52D433E3964DB06FFE9192B3F77C17F5DA62DB99C8E12068C2539A37A13A0B25033CBB03EA9812D280C1F4D2C682BE13BB
Malicious:	false
Reputation:	low
Preview:	#..#Mon Jul 25 23:35:41 CEST 2016..# program_running_launch_another=It seems an instance of {0} was not terminated cleanly or is still running. Do you want to launch another instance?..browser_refresh=\u30da\u30fc\u30b8\u3092\u518d\u8868\u793a..browser_stop=\u30da\u30fc\u30b8\u306e\u8aad\u307f\u8fbc\u307f\u3092\u505c\u6b62..score=\u30b9\u30b3\u30a2 [%]..filetype_jpg=JPEG (jpg, jpeg)..invert_selection=\u9006\u9806\u306b\u9078\u629e..home_key=Home..check_single=\u9078\u629e\u3057\u305f\u30c1\u30a7\u30c3\u30af\u72b6\u614b\u3092\u53cd\u8ee2..pref_font_normal=\u30d5\u30a9\u30f3\u30c8\u306e\u898b\u672c(\u901a\u5e38\u6642)\:..pattern_regex=\u30d1\u30bf\u30fc\u30f3(\u6b63\u898f\u8868\u73fe)..filename=\u30d5\u30a1\u30a4\u30eb\u540d..report_bug=\u304a\u3063\u3068\u30d7\u30ed\u30b0\u30e9\u30e0\u306f\u6b7b\u3093\u3067\u3057\u307e\u3063\u305f\uff01\u4e0b\u8a18\u306e\u30b9\u30bf\u30c3\u30af\u30c8\u30ec\u30fc\u30b9\u3092 <a href\="http\://sourceforge.net/tracker/?group_id\=197779&atid\=962834">bug tr

C:\Program Files (x86)\DocFetcher\lang\Resource_nl.properties

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	ISO-8859 text, with very long lines (445), with CRLF line terminators
Category:	dropped
Size (bytes):	11899
Entropy (8bit):	4.9383557619967196
Encrypted:	false
SSDEEP:	192:twAp6wnLMEO6aVGXax5LA4PuE96cw3r6odpqxOx1rNtUwmO+390usndTy:6AvLC6aQ8LNP1DGr6o4M1rdBuL
MD5:	A78D2CCD29C46D6653C691ABD97175B1
SHA1:	CCDDB28B92080108CA39956454FE4D41D5E67A34
SHA-256:	ACA2B0A4C0375EBEA5BE739D778D7D37A3315F893CBA513D192CC89B5060CB37
SHA-512:	C7548CCE3D576EE2A358B860DCFFE5A6D6D9D4AFF1DD9C09470E3B0628E62E66BE068BDF087A32CA0580AD89BE14E5E253A2B2DB2C2063E8E7B2A6EA02B8FDBD
Malicious:	false
Reputation:	low
Preview:	#..#Mon Jul 25 23:35:41 CEST 2016..# program_running_launch_another=It seems an instance of {0} was not terminated cleanly or is still running. Do you want to launch another instance?..browser_refresh=Vernieuwen huidige pagina..browser_stop=Stop laden huidige pagina..score=Score [%]..filetype_jpg=JPEG (jpg, jpeg)..invert_selection=Selectie omkeren..home_key=Home..check_single=Toggle afzonderlijke Vinkjes..pref_font_normal=Voorbeeld lettertype (normaal)..pattern_regex=Patroon (regex)..filename=Filename..report_bug=Oeps\! Dit programma is zojuist overleden\! Help ons alstublieft dit probleem te verhelpen door de onderstaande "stacktrace" te plaatsen op onze <a href\="http\://sourceforge.net/tracker/?group_id\=197779&atid\=962834">bug tracker</a> (Registratie niet nodig).\n\nDe "stacktrace" is opgeslagen in\:\n{0}...corrupted_indexes=De volgende indexen lijken te zijn beschadigd. Herbouw deze indexen wordt aanbevolen...not_an_archive=Not an archive...pref_hotkey=Algemene sneltoets\:..crea

C:\Program Files (x86)\DocFetcher\lang\Resource_pl.properties

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	ISO-8859 text, with very long lines (456), with CRLF line terminators
Category:	dropped
Size (bytes):	13353
Entropy (8bit):	5.268490271022699
Encrypted:	false
SSDEEP:	192:y0bLRVsxz1pZ5MIUc8wVhwszQhn7zEKlVt1foKbSGWNwSSol9ScyOFgo25bbi4pK:v/RV+zzUcBDws4J1oK6NwT6gx5CqK
MD5:	F75B7407F26A2B39392A8151C948566E
SHA1:	6FBD165330569C53F81DC23F7233C7ED4B08C09F
SHA-256:	C9C803C55E7C62F8601533DDC6411859215473B95B0BDD9CF6EE85C23A2AE057
SHA-512:	4066102837F4212169A376F65BF230C169867B6E9C6D3D5850FC34C7127A0181C5FA8F0BEC586105A4122206ADF1B901785C61E4A5546A272505DF709AA36BDB
Malicious:	false
Reputation:	low
Preview:	#..#Mon Jul 25 23:35:41 CEST 2016..program_running_launch_another=Wydaje si\u0119, \u017ce instancja {0} nie zosta\u0142a w\u0142a\u015bciwie zako\u0144czona lub nadal dzia\u0142a. Czy chcesz uruchomi\u0107 now\u0105?..browser_refresh=Od\u015bwie\u017c aktualn\u0105 stron\u0119..browser_stop=Zatrzymaj wczytywanie aktualnej strony..score=Rezultat [%]..filetype_jpg=JPEG (jpg, jpeg)..invert_selection=Odwr.\u0107 zaznaczenie..home_key=Home..check_single=Prze\u0142\u0105cz wyb.r..pref_font_normal=Czcionka podgl\u0105du (normalna)\:..pattern_regex=Wzorzec (wyr. reg.)..filename=Nazwa pliku..report_bug=Program uleg\u0142 awarii\! Prosimy o wsparcie w rozwi\u0105zaniu tego problemu przez wys\u0142anie \u015bladu stosu do naszej <a href\="http\://sourceforge.net/tracker/?group_id\=197779&atid\=962834">bazy b\u0142\u0119d.w</a> (rejestracja niekonieczna).\n\n\u015alad stosu zosta\u0142 zapisany w\:\n{0}...corrupted_indexes=Nast\u0119puj\u0105ce indeksy wydaj\u0105 si\u0119 uszkodzone. Zalecane je

C:\Program Files (x86)\DocFetcher\lang\Resource_pt.properties

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (454), with CRLF line terminators
Category:	dropped
Size (bytes):	30205
Entropy (8bit):	4.78707198409373
Encrypted:	false
SSDEEP:	384:+CwUsMNirWYV7SYYQsxuS5npaS87WJ5dn/oQGF/b/RQs5KTv5QJ/+Etwg6g3g3Dz:ARZrlwy3WDP/nKOWdLh/9jJF4TXN
MD5:	440CD6E04CD68FAB367C92463F2BC2AB
SHA1:	39B8DFFE890C10B2F4CB603DBE265C5C4476A1E3
SHA-256:	8FF64D041D352069948392B602983D2FB730946D8CC28EF5FB86DA47CBEAEC86
SHA-512:	0FF9BC6C6EB9815A195C583A7E25FFFFDFB56CE14D02EB3F97B28FF538270A81794FACDCC9CF61C5E3E1C717F14718A70F177FED5EF7DB3C34DDD38C84E54225
Malicious:	false
Reputation:	low
Preview:	# Window title for a message box that displays an error...system_error=Erro de Sistema..# Window title for a message box that asks the user to confirm an operation that is about to be run...confirm_operation=Confirmar Opera..o..# Window title for a message box that informs the user that he/she is not allowed to run a certain operation...invalid_operation=Opera..o Inv.lida..# Label for the 'OK' button of a message box. The '&' character is applied to the character after it, and in this case indicates that the user can activate the button by pressing Alt + O...ok=&OK..# Label for the 'Cancel' button of a message box. The '&' character is applied to the character after it, and in this case indicates that the user can activate the button by pressing Alt + C...cancel=Cancelar..# Label for the 'Close' button of a dialog. The '&' character is applied to the character after it, and in this case indicates that the user can activate the button by pressing Alt + C...close=&Fechar..# This message

C:\Program Files (x86)\DocFetcher\lang\Resource_ru.properties

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	ISO-8859 text, with very long lines (1832), with CRLF line terminators
Category:	dropped
Size (bytes):	39072
Entropy (8bit):	3.868858803737234
Encrypted:	false
SSDEEP:	768:f8TSZnOuO8zVkQT8PlBlwlSuL8tt2kqY9ilkYQ+Q:f8TSZnOuO8zV5gPlBlASugqDY9i6YDQ
MD5:	512B47B58F3B0237EA320DAA075F3C7C
SHA1:	9A1E605372C979D2E52CFCAC3BF55E58F66285C8
SHA-256:	8151E03F1DC56B67093067A80BE6AA7CCE5BB5F7BC1FB3F0FF6DF8CAD00A17FD
SHA-512:	2B67D01687759503A60E6EE99753311B9E8D9C09302DBF75BB45C80FF5D91D53826F25C28309982D1590BC6FB5B5F9961AB678EA7A07C10B957D341C888CB7BC
Malicious:	false
Reputation:	low
Preview:	#..#Mon Jul 25 23:35:41 CEST 2016..# program_running_launch_another=It seems an instance of {0} was not terminated cleanly or is still running. Do you want to launch another instance?..browser_refresh=\u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0442\u0435\u043a\u0443\u0449\u0443\u044e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443..browser_stop=\u041e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0442\u0435\u043a\u0443\u0449\u0435\u0439 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b..score=\u041f\u043e\u043f\u0430\u0434\u0430\u043d\u0438\u0435 [%]..filetype_jpg=JPEG (jpg, jpeg)..invert_selection=\u0418\u043d\u0432\u0435\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u0438\u0435..home_key=Home..check_single=\u041f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0438\u0442\u044c..pref_font_normal=\u0428\u0440\u0438\u0444\u0442 \u043f\u0440\u0435\u0434\u043f\u0440\u043e\u0441

C:\Program Files (x86)\DocFetcher\lang\Resource_tr.properties

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (567), with CRLF line terminators
Category:	dropped
Size (bytes):	31749
Entropy (8bit):	4.975565020422446
Encrypted:	false
SSDEEP:	768:aEMPSG+A0ihoJL4M0fmiaNKTwt5At8H4s/X:oPS8oAfmiaft5MUf
MD5:	29928926AD299FD3EFC99C65CD917DAA
SHA1:	CEB5DA946F71FA3D414E7E6581A368C571B5B57F
SHA-256:	FDA37C58D68C703A722588B20C655A09AD9FE03FFD3C313DE2F7566F8AB9C942
SHA-512:	404B11F61F092916B251AB5B870AE5461CCC8786D15D2D78CC7EA07EB4DA5741319617205F1E62AA155F487C5E8DA765EB4CC99853F76CD3228BB8406B6BCD11
Malicious:	false
Reputation:	low
Preview:	# Window title for a message box that displays an error...system_error=Sistem Hatas\u0131..# Window title for a message box that asks the user to confirm an operation that is about to be run...confirm_operation=\u0130\u015flemi Onaylay\u0131n..# Window title for a message box that informs the user that he/she is not allowed to run a certain operation...invalid_operation=Ge.ersiz \u0130\u015flem..# Label for the 'OK' button of a message box. The '&' character is applied to the character after it, and in this case indicates that the user can activate the button by pressing Alt + O...ok=&Tamam..# Label for the 'Cancel' button of a message box. The '&' character is applied to the character after it, and in this case indicates that the user can activate the button by pressing Alt + C...cancel=&\u0130ptal..# Label for the 'Close' button of a dialog. The '&' character is applied to the character after it, and in this case indicates that the user can activate the button by pressing Alt + C...c

C:\Program Files (x86)\DocFetcher\lang\Resource_uk.properties

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (1693), with CRLF line terminators
Category:	dropped
Size (bytes):	60013
Entropy (8bit):	4.53677923980574
Encrypted:	false
SSDEEP:	1536:XoJAmPDiwR10pxg5Kn5t60pofUvvD1Z0Eh1Nzunr9kr4Op:XoJAmPDiwR10px0Kn5t6ScUvvD1Z0EvD
MD5:	CAF1887409175DC60FD4F1F04F2EE309
SHA1:	FFC2AE278E2BDA664D640CC8E91048A98AB495F0
SHA-256:	C203CB4A7CCBA8D126F677D29C6D675A9F5FD9D2503ECA336E1D2170BCC88220
SHA-512:	D74920607D2B90012D9CEF0CCB8AAB2D97D08FBA06884ADEEB800355987DE9B727747C5C0CC7C20ED71B8B80EA9BB9FD475E23BC8499A2BAAA83040EA4F68066
Malicious:	false
Reputation:	low
Preview:	# Window title for a message box that displays an error...system_error=\u041f\u043e\u043c\u0438\u043b\u043a\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0438..# Window title for a message box that asks the user to confirm an operation that is about to be run...confirm_operation=\u041f\u0456\u0434\u0442\u0432\u0435\u0440\u0434\u0436\u0435\u043d\u043d\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0456\u0457..# Window title for a message box that informs the user that he/she is not allowed to run a certain operation...invalid_operation=\u041d\u0435\u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0456\u044f..# Label for the 'OK' button of a message box. The '&' character is applied to the character after it, and in this case indicates that the user can activate the button by pressing Alt + O...ok=&OK..# Label for the 'Cancel' button of a message box. The '&' character is applied to the character after it, and in this case indicates that the user can

C:\Program Files (x86)\DocFetcher\lang\Resource_zh.properties

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (620), with CRLF line terminators
Category:	dropped
Size (bytes):	34185
Entropy (8bit):	5.110394598498119
Encrypted:	false
SSDEEP:	384:9elUs3iWigDVrBtNl1iKm07UGtbM8wXRZGBvAZRXcJitXmQZV9v59QPi3euT3uma:spvHlVwiuDumdCZKdaGM4Q1MqkL1dm42
MD5:	88BAC2265A38DE524173A0E4508A3AF1
SHA1:	26C24C61BEA3626EBBC774F27D88A11F6C498F4E
SHA-256:	15E94A56CE371063D20F98AA9BE721B5D2EBA1FDBABE1D40A05FB4EE1A31CD61
SHA-512:	E46C46CBA392AFE8DDEF724B1C8B37ECB5245E5DA2842B234ECAE9AD8EB2C9BAB03B30231F192C0DFAC83270115D42F8B82170B820003DBB07E992E92B600E12
Malicious:	false
Reputation:	low
Preview:	# Window title for a message box that displays an error...system_error=\u7cfb\u7edf\u9519\u8bef..# Window title for a message box that asks the user to confirm an operation that is about to be run...confirm_operation=\u786e\u8ba4\u64cd\u4f5c..# Window title for a message box that informs the user that he/she is not allowed to run a certain operation...invalid_operation=\u64cd\u4f5c\u65e0\u6548..# Label for the 'OK' button of a message box. The '&' character is applied to the character after it, and in this case indicates that the user can activate the button by pressing Alt + O...ok=&\u786e\u5b9a..# Label for the 'Cancel' button of a message box. The '&' character is applied to the character after it, and in this case indicates that the user can activate the button by pressing Alt + C...cancel=\uff06\u53d6\u6d88..# Label for the 'Close' button of a dialog. The '&' character is applied to the character after it, and in this case indicates that the user can activate the button by pressin

C:\Program Files (x86)\DocFetcher\lang\Resource_zh_CN.properties

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (620), with CRLF line terminators
Category:	dropped
Size (bytes):	34185
Entropy (8bit):	5.110394598498119
Encrypted:	false
SSDEEP:	384:9elUs3iWigDVrBtNl1iKm07UGtbM8wXRZGBvAZRXcJitXmQZV9v59QPi3euT3uma:spvHlVwiuDumdCZKdaGM4Q1MqkL1dm42
MD5:	88BAC2265A38DE524173A0E4508A3AF1
SHA1:	26C24C61BEA3626EBBC774F27D88A11F6C498F4E
SHA-256:	15E94A56CE371063D20F98AA9BE721B5D2EBA1FDBABE1D40A05FB4EE1A31CD61
SHA-512:	E46C46CBA392AFE8DDEF724B1C8B37ECB5245E5DA2842B234ECAE9AD8EB2C9BAB03B30231F192C0DFAC83270115D42F8B82170B820003DBB07E992E92B600E12
Malicious:	false
Reputation:	low
Preview:	# Window title for a message box that displays an error...system_error=\u7cfb\u7edf\u9519\u8bef..# Window title for a message box that asks the user to confirm an operation that is about to be run...confirm_operation=\u786e\u8ba4\u64cd\u4f5c..# Window title for a message box that informs the user that he/she is not allowed to run a certain operation...invalid_operation=\u64cd\u4f5c\u65e0\u6548..# Label for the 'OK' button of a message box. The '&' character is applied to the character after it, and in this case indicates that the user can activate the button by pressing Alt + O...ok=&\u786e\u5b9a..# Label for the 'Cancel' button of a message box. The '&' character is applied to the character after it, and in this case indicates that the user can activate the button by pressing Alt + C...cancel=\uff06\u53d6\u6d88..# Label for the 'Close' button of a dialog. The '&' character is applied to the character after it, and in this case indicates that the user can activate the button by pressin

C:\Program Files (x86)\DocFetcher\lang\Resource_zh_HK.properties

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Non-ISO extended-ASCII text, with very long lines (662), with CRLF line terminators
Category:	dropped
Size (bytes):	33072
Entropy (8bit):	5.134479370320064
Encrypted:	false
SSDEEP:	768:l4SYA6iHXhF7b5qxM2xCtCgKdrrRemtIZcLMkL:+/ziRtb5iM2xCtcrRemGqI4
MD5:	1528718560A91ECAB11CC0E16EF2EBA5
SHA1:	DAF9C75272FF9570AC4E4D47EA38A933B8AE6330
SHA-256:	63E72BCCBB1D4AEA0CC9F4C0A5D13A0376517B53C110CABBDCDD7E20A68F5E26
SHA-512:	6C948F66E46C3B179AC1435A00D9B7512F3523AD9F696330C800836E0D2566DF712E021B6136727106A4404E9929F534DCFBAA8C82887A6C5C6970E8D28580D5
Malicious:	false
Reputation:	low
Preview:	# Window title for a message box that displays an error...system_error=\u7cfb\u7d71\u932f\u8aa4..# Window title for a message box that asks the user to confirm an operation that is about to be run...confirm_operation=\u78ba\u5b9a\u57f7\u884c..# Window title for a message box that informs the user that he/she is not allowed to run a certain operation...invalid_operation=\u7121\u6548\u64cd\u4f5c..# Label for the 'OK' button of a message box. The '&' character is applied to the character after it, and in this case indicates that the user can activate the button by pressing Alt + O...ok=\u78ba\u5b9a(&O)..# Label for the 'Cancel' button of a message box. The '&' character is applied to the character after it, and in this case indicates that the user can activate the button by pressing Alt + C...cancel=\u53d6\u6d88(&C)..# Label for the 'Close' button of a dialog. The '&' character is applied to the character after it, and in this case indicates that the user can activate the button by pressi

C:\Program Files (x86)\DocFetcher\lang\Resource_zh_SG.properties

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	HTML document, Non-ISO extended-ASCII text, with very long lines (620), with CRLF line terminators
Category:	dropped
Size (bytes):	34185
Entropy (8bit):	5.110394598498119
Encrypted:	false
SSDEEP:	384:9elUs3iWigDVrBtNl1iKm07UGtbM8wXRZGBvAZRXcJitXmQZV9v59QPi3euT3uma:spvHlVwiuDumdCZKdaGM4Q1MqkL1dm42
MD5:	88BAC2265A38DE524173A0E4508A3AF1
SHA1:	26C24C61BEA3626EBBC774F27D88A11F6C498F4E
SHA-256:	15E94A56CE371063D20F98AA9BE721B5D2EBA1FDBABE1D40A05FB4EE1A31CD61
SHA-512:	E46C46CBA392AFE8DDEF724B1C8B37ECB5245E5DA2842B234ECAE9AD8EB2C9BAB03B30231F192C0DFAC83270115D42F8B82170B820003DBB07E992E92B600E12
Malicious:	false
Reputation:	low
Preview:	# Window title for a message box that displays an error...system_error=\u7cfb\u7edf\u9519\u8bef..# Window title for a message box that asks the user to confirm an operation that is about to be run...confirm_operation=\u786e\u8ba4\u64cd\u4f5c..# Window title for a message box that informs the user that he/she is not allowed to run a certain operation...invalid_operation=\u64cd\u4f5c\u65e0\u6548..# Label for the 'OK' button of a message box. The '&' character is applied to the character after it, and in this case indicates that the user can activate the button by pressing Alt + O...ok=&\u786e\u5b9a..# Label for the 'Cancel' button of a message box. The '&' character is applied to the character after it, and in this case indicates that the user can activate the button by pressing Alt + C...cancel=\uff06\u53d6\u6d88..# Label for the 'Close' button of a dialog. The '&' character is applied to the character after it, and in this case indicates that the user can activate the button by pressin

C:\Program Files (x86)\DocFetcher\lang\Resource_zh_TW.properties

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Non-ISO extended-ASCII text, with very long lines (662), with CRLF line terminators
Category:	dropped
Size (bytes):	33072
Entropy (8bit):	5.134479370320064
Encrypted:	false
SSDEEP:	768:l4SYA6iHXhF7b5qxM2xCtCgKdrrRemtIZcLMkL:+/ziRtb5iM2xCtcrRemGqI4
MD5:	1528718560A91ECAB11CC0E16EF2EBA5
SHA1:	DAF9C75272FF9570AC4E4D47EA38A933B8AE6330
SHA-256:	63E72BCCBB1D4AEA0CC9F4C0A5D13A0376517B53C110CABBDCDD7E20A68F5E26
SHA-512:	6C948F66E46C3B179AC1435A00D9B7512F3523AD9F696330C800836E0D2566DF712E021B6136727106A4404E9929F534DCFBAA8C82887A6C5C6970E8D28580D5
Malicious:	false
Reputation:	low
Preview:	# Window title for a message box that displays an error...system_error=\u7cfb\u7d71\u932f\u8aa4..# Window title for a message box that asks the user to confirm an operation that is about to be run...confirm_operation=\u78ba\u5b9a\u57f7\u884c..# Window title for a message box that informs the user that he/she is not allowed to run a certain operation...invalid_operation=\u7121\u6548\u64cd\u4f5c..# Label for the 'OK' button of a message box. The '&' character is applied to the character after it, and in this case indicates that the user can activate the button by pressing Alt + O...ok=\u78ba\u5b9a(&O)..# Label for the 'Cancel' button of a message box. The '&' character is applied to the character after it, and in this case indicates that the user can activate the button by pressing Alt + C...cancel=\u53d6\u6d88(&C)..# Label for the 'Close' button of a dialog. The '&' character is applied to the character after it, and in this case indicates that the user can activate the button by pressi

C:\Program Files (x86)\DocFetcher\lib\J7zip_4.43_alpha2.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	97840
Entropy (8bit):	7.856599917651739
Encrypted:	false
SSDEEP:	1536:9fV5EwVmBZEkADit9X5ynPQGR+dIZNziVBO1GdhOoEAeLmmEukukJOVXeyU:hHE2YyoK+dN77dhOoEAeL3Ve
MD5:	4C61FCC191B07AB894BD426BF2634820
SHA1:	D3393266D8566C52BABBD6156777C7995FE5BBE6
SHA-256:	00702F869A669A5F1488F1A2EB45094773ADD1A4DB9CCB376B9D1C73302A2E40
SHA-512:	F3317F2DC5ED7EEBCB251D71CA7F17E951914C525F5CDE674A6797F877C608A9A089FAC30D9051F4C4FAED2AB32120C4072E2FA552A48917767ABE14F0C50EF4
Malicious:	false
Reputation:	low
Preview:	PK........+.A=................META-INF/....PK........*.A=9..Kv...........META-INF/MANIFEST.MFM...0.... .p......n..B...[.'..5.P......(\|'..LEy.......'c..A...y.S.X.f.k....W.........Vz).%....Y.....!.pv......PK..........A=................Common/PK..........A=................SevenZip/PK..........A=................SevenZip/Archive/PK..........A=................SevenZip/Archive/Common/PK..........A=................SevenZip/Archive/SevenZip/PK..........A=................SevenZip/Common/PK..........A=................SevenZip/Compression/PK..........A=................SevenZip/Compression/Branch/PK..........A=................SevenZip/Compression/Copy/PK..........A=................SevenZip/Compression/LZ/PK..........A=................SevenZip/Compression/LZMA/PK..........A=............ ...SevenZip/Compression/RangeCoder/PK..........A=.\|.2...h.......Common/BoolVector.classmQ.O.P..n{.R`L.h....T..M..?.....$B0.].+.n....).iL\|........\|!.S...69..\|...sN..}?.p.e......:.......-...X......l...u.(.

C:\Program Files (x86)\DocFetcher\lib\JIntellitype32.dll

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	30208
Entropy (8bit):	5.9841542348253345
Encrypted:	false
SSDEEP:	768:aTrPebm0ShbanF0Xp67m8pmMta7EPAFFb:aHPebmAniUpqEPAFFb
MD5:	2F03F2AD54574EC900F1A8C91475071F
SHA1:	88B8AC5D161927BA62DC31DD6BD2264D95F9FA07
SHA-256:	46C9CE774190C1C98E9A8E3B225D4399A602902CEE4DEC652F71C6B2DC0534D8
SHA-512:	24F882F739264A60B7605E34EF7B78F8C05669FDCE91417D5D808B5EE8D57877AF891A61698785C43ECCBD87AACF7C689F9CA15B2D932875DD60B16FCF3D172E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....:.G...........#...8.N...r...B...........`.....d.......................................... .........................}.......$...............................H....................................................................................text...tM.......N..................`..`.data...@....`.......R..............@....rdata.......p.......T..............@..@.bss....@A...............................edata..}............Z..............@..@.idata..$............`..............@....rsrc................h..............@....reloc..H............l..............@..B................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\DocFetcher\lib\JIntellitype64.dll

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	468704
Entropy (8bit):	5.087839104280107
Encrypted:	false
SSDEEP:	6144:p+P1fCBSUALF5h+++wT81IEhkhvc0Qrlc0DLWq3ukGUdIjaohc9Sq8NjOfNZqFMW:pM1KcusK7bLcWI
MD5:	956C2705F122A079DBFC23D11FA3FB39
SHA1:	283E55FC967D4A4CEB75D5A3C248AE2D8DC451D4
SHA-256:	9AA9BAC20341C3913FDB8E6DCB204374536D331F1D0A6CFEC511CED5ABA21E5E
SHA-512:	592B938E1F58BA823F2CE8F0B81D847EAE7C49FA92D210DC734C8C624D8BD978B3B6071F7DA07DEEB80FE0D36BAEBAF399C98575E59BB690B8DAD1252702630E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d...3.\K..........& .........X.................i..................................../......... ......................................p..........$...............................X....................................................................................text...4...........................`.P`.data...`].......^..................@.`..rdata..p....@.......2..............@.`@.bss.........`........................`..edata.......p.......F..............@.0@.idata..$............H..............@.0..CRT....X............V..............@.@..tls....H............X..............@.`..reloc..X............Z..............@.0B/4......@............^................PB/19.....c............j.................B/35....................................B/51.....q..............................B/63......E.......F.....................B/77.....8r...`...t.....................B/89.....

C:\Program Files (x86)\DocFetcher\lib\JXGrabKey-0.3.2.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	28701
Entropy (8bit):	5.405456947652625
Encrypted:	false
SSDEEP:	384:m+zchTVuHL1VTyGx5DT64cRUW3mjHl0GnbT9bM3b+bzrhEzRLaikk+nr2mQm9o/V:m+4hT6FnvT64PUmjHiG1ccrudLainVJ
MD5:	61EB6323B7C4E24FA1E61E01340F6525
SHA1:	DD8207F8722CD70E0C131F1A94B1F89677B53FD8
SHA-256:	D4989DB8B9031C42A219C7F3388FF1B4DB22CE9FE529EA75F5993F6B906921EF
SHA-512:	B7373588946210B94EDA6DAA84E45A02054C25E373CD7153359266309A129A45FDF0EB9198FAF375E8DE9137A2AF3BD6C0D7BB9D65AA8FE126ECC5E91A45BA17
Malicious:	false
Reputation:	low
Preview:	PK..........\<................META-INF/....PK..........\<$[.............META-INF/MANIFEST.MFManifest-Version: 1.0..Ant-Version: Apache Ant 1.7.1..Created-By: 14.0-b16 (Sun Microsystems Inc.)..Built-By: subes (28.02.2010)..Implementation-Title: JXGrabKey..Implementation-Version: 0.3.2..Implementation-Vendor: http://jxgrabkey.sourceforge.net....PK..........\<................jxgrabkey/PK..........\<...........'...jxgrabkey/HotkeyConflictException.class.......1...............................<init>...()V...Code...LineNumberTable...LocalVariableTable...this..#Ljxgrabkey/HotkeyConflictException;...(Ljava/lang/String;)V...message...Ljava/lang/String;..(Ljava/lang/String;Ljava/lang/Throwable;)V...cause...Ljava/lang/Throwable;...(Ljava/lang/Throwable;)V...SourceFile...HotkeyConflictException.java......................!jxgrabkey/HotkeyConflictException...java/lang/Exception.!.......................3...........................$...%...............................>........*+...................(.

C:\Program Files (x86)\DocFetcher\lib\ansj_lucene6_plug-5.1.2.0.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	9726
Entropy (8bit):	7.670778668584147
Encrypted:	false
SSDEEP:	192:m6uV7ZpOA4p4y7rjKOnZRe33vPOm6W9I0e3OfWbv:mZVlpOAA4yvijWv3tv
MD5:	2B6EDCB8F86D7272A3049AA460A804E0
SHA1:	E41FFC76174475DCCB562244F838587BB2847E18
SHA-256:	48240C3CCAA03CE251D8141BB8470604EA22850A363ED5D7FA616E20B7665499
SHA-512:	979C30B9BEA25A37D3ADA810EAE8B4DC88C4536C1DBE52B379361ED67C44A7D0B283F4A2709EE127DF69D139B8BEA3DF6A1A3D0D73737444D01369C14CC78BCB
Malicious:	false
Reputation:	low
Preview:	PK...........J................META-INF/PK...........J....l...........META-INF/MANIFEST.MF.M..LK-...K-...R0.3..r,J..,K-B...V..+.$x..J3sJt......Kx...R.KRS.".........e.y..z`#A.St.R.AVX.......r.r..PK...........J................org/PK...........J................org/ansj/PK...........J................org/ansj/lucene6/PK...........J................org/ansj/lucene/PK...........J................org/ansj/lucene/util/PK...........J...........%...org/ansj/lucene6/AnsjAnalyzer$1.class.SmO.P.~.V....m..Be....\|.....q..!....7[g..vE...YM.1f?..e<..L..$..s..{......o...gb..y...u].Y.7..S0.....:n1...~..6...F...g..+..k$j..'.Ed..3d.....n.K...![..0h..'.&...;...y; O...<8.....9..s..UL5...l.I.-_.....j..sJ].n...4E..z:.t.-Tq..q.w.la........8;a+q.[...z....Gm..`M.:...sGu..;w..\|...RD...c.3.F.v.=...f....pv....R....S.T....\|..o.X.T.....a...K.HS5}.w....C.\|...._.G.Y..{v...+.......1A\ 5@.,..W..w.32....M....is$.FR'..I..>.y.F*?b.y\.5....D\.a.'.@.O...C.8.I:F.=L.E...K.f`>.)K..@aW.W...Q...U$.I..A

C:\Program Files (x86)\DocFetcher\lib\ansj_seg-5.1.2.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	20678031
Entropy (8bit):	7.997080505362605
Encrypted:	true
SSDEEP:	393216:FWLvdw4D/4u2Puo3SdAREGXwtFwtaC9NSL2IwscyXJSJL3tcF44aEXm/ue:upDguqkyPXCwtaCeL2VscyXkJL9UMEX2
MD5:	4050BFC3750E9E7B1D6E768B39D8C0B5
SHA1:	A6297D12425A91FDFDF67BDD1444129FA4927691
SHA-256:	05DB50F1457EF656B66E913D30742D3D3A0570BE282F8883F020C492C79F2790
SHA-512:	9F2F18959401C6A26BB6AE94A461E01C47B50E0BB9C454B16047611327A79B9FFE509C2E349BB2320ED2BC01AACDACAEEE7AEA2C628DA31D6FCDC345BBAA4870
Malicious:	false
Reputation:	low
Preview:	PK........=0.J................META-INF/PK........<0.J....l...........META-INF/MANIFEST.MF.M..LK-...K-...R0.3..r,J..,K-B...V..+.$x..J3sJt......Kx...R.KRS.".........e.y..z`#A.St.R.AVX.......r.r..PK........:0.J................person/PK........:0.J................org/PK........;0.J................org/ansj/PK........;0.J................org/ansj/recognition/PK........;0.J................org/ansj/recognition/arrimpl/PK........;0.J................org/ansj/recognition/impl/PK........;0.J................org/ansj/util/PK........;0.J................org/ansj/app/PK........;0.J................org/ansj/app/summary/PK........;0.J................org/ansj/app/summary/pojo/PK........;0.J................org/ansj/app/keyword/PK........;0.J................org/ansj/app/crf/PK........;0.J................org/ansj/app/crf/pojo/PK........;0.J................org/ansj/app/crf/model/PK........;0.J................org/ansj/splitWord/PK........;0.J................org/ansj/splitWord/impl/PK........;0.J.............

C:\Program Files (x86)\DocFetcher\lib\ant-1.10.3.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	2206442
Entropy (8bit):	7.942628849682895
Encrypted:	false
SSDEEP:	49152:4wAFKBTP7mxq+2ifGA57NgRylk9Tkglt2:4wAUTPWBOO74ylkZkh
MD5:	A0FE02E5870B21BC62A035CD21ABF864
SHA1:	88BECDEB77CDD2457757B7268E1A10666C03D382
SHA-256:	2DFA006AE90696E3EF8C8191B2F846053A33310B9418955760A23BA3160F96B7
SHA-512:	1BB40E5CF10FC0D8D47F24308ABC10FA49EE73C50327075CB486657323E14D43E1927994AD43233A633266573C998081254D425883D8436F37CCA416C870AFF9
Malicious:	false
Reputation:	low
Preview:	PK.........lxL................META-INF/....PK.........lxL.L.............META-INF/MANIFEST.MF...N.0.D.+..\|l.v."!.[....P..-..,9..6*.=.+U!A.:.vf.l[.I.P...V.]...D..X.....4...P..D......t.jn.z3..z.X;...........ZV.....w.9R'.]..I....G.(#..)2R.H!..+..?.+.H.p...s.z...t.....l....p.8.6.1...On2"...u..W.....E....^..PK........\|lxL................org/PK........\|lxL................org/apache/PK.........lxL................org/apache/tools/PK.........lxL................org/apache/tools/ant/PK.........lxL................org/apache/tools/ant/attribute/PK.........lxL................org/apache/tools/ant/dispatch/PK.........lxL................org/apache/tools/ant/filters/PK.........lxL............"...org/apache/tools/ant/filters/util/PK.........lxL................org/apache/tools/ant/helper/PK.........lxL................org/apache/tools/ant/input/PK.........lxL................org/apache/tools/ant/listener/PK.........lxL................org/apache/tools/ant/loader/PK.........lxL................org/apache

C:\Program Files (x86)\DocFetcher\lib\bcmail-jdk15on-160.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	108233
Entropy (8bit):	7.8903964219164795
Encrypted:	false
SSDEEP:	1536:Em8YD1OeEz+1MqDxCuec6yQvQal39hTYQmNQANqOmUhC6avl5Q9YtNFyegd:by6CqNIQaNhT1mDqOYQ9Yj1C
MD5:	43955F9F9B98389D316D4CD0BBFF07D0
SHA1:	DF0250131A6E85E546EC5B1BF964F7F2FF3A42FC
SHA-256:	E5A4CA074046D0E0E1F3FA550DA16C7B9616C12FEF5A2416E953804F28444E35
SHA-512:	79B43DF17AB209A1026FC3CDA644B2611A72E861D3673CE846E078CED93A0991E16C91667FA854FEE7E92F5553338D1C9783BB2FBF426EB6FD19C8CE3582B26E
Malicious:	false
Reputation:	low
Preview:	PK..........L................META-INF/MANIFEST.MF.....Z[w..~.1.?d....9...k..@P.D..}Y..(...?.M..$..u.b.f.7kV}U5U6".u..q.d..G?..'..7..Y.83...9?...{2.2.j...y..?x.C?t...+...}".?.s'....{.2..{8=YY......O.eo>>.Q.d.S....#..'+..7@./-'.d.t....)...2q.dF.g..@....[<o.:'#L.'...w.....h......P......+......[....\?..+#...@...r......}.d.Q..#.@..q...G..{B.0..!.2xD.>.'..c....'-....c......8.....0.T..}....79A'..s..3..D.ZhO.]s.8...8......j#...8.B...%.05...P.(...\|.6s...[....#.....^......u.jZ.3.p.V.....<.$A ..).$.././..>x.8.A.eA.......8..Hw........1..~d..<.......Q..A..,..p..A.......!N.H.A\|4L...m.4r...A.de..\|332...J..<.......... .$..p.`..86..!...1r@....g.}]..]}.r[F\|.V......s~){.<.s....=]+"?/n....T.!...k...z........F$.....Z.p..hC.[9..v. !.6$-]..lK..a.K.m).Bm).R...W.Z<g.e....S..T..u..[5.,.S.."....."_....<.(.\|...... ..!{......s].].......eN..^\|8W....I..x..9(o._.OFY...y^.t.B.....[........_.....'..c.8.~+..\|......A.)...@.......B.....Q2....3@.g.m.yK....J..9..v.3..j

C:\Program Files (x86)\DocFetcher\lib\bcpkix-jdk15on-160.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	796532
Entropy (8bit):	7.833900059328625
Encrypted:	false
SSDEEP:	24576:aBE3TSpTNNkLr1kVjdeqOVZ7sQ5Rxb4gJh1:aG3TSpnlgqOVqQtl71
MD5:	EDC6F012C19CF74D70964187A4AB32BA
SHA1:	D0C46320FBC07BE3A24EB13A56CEE4E3D38E0C75
SHA-256:	A82AC5BC24BCBF6BA9EB70F334D6782E25245C8DA36D9848AD553B5B7B68EFD1
SHA-512:	D44CDAC998A0D804AC452725C9E84B7D517C838CC6770CECDB214E1DF50EFC5EC2D067A91A5009F1316A5635CF7A1D213F2EE2A4E7497C66E1C7BBD5D2D4445F
Malicious:	false
Reputation:	low
Preview:	PK..........L................META-INF/MANIFEST.MF......Y..J....f......... @.}l?0... !.r.1.1.B........R...K..e......CxHN..~.....:........?....O.qc'.....:.m..\.n../....}.............._........{s.....['._..1....~......_9M^..].D....>.N..<...s...yz......V4._.S9i...c?..ij.nZL.}.....O.D......{.[.....?].......3l4.V....4...Z.n......s.D....ot..\|\|'._....~^c...w9.....u..?.#..s..j.m.......3.....VU...)~.&..>....='.Z...c?/..._.....yn....+....W.Lp.g~...N........].}..~..\.uv.}.B..w...Rs............6.{O....9.<\.s.....\|f.....)...}X8...D..y.,......uuN.yN3.^.mU.I/....s.\|H..O\|w$..f7........'d.>.Yv.....x...~}......3..U..Q?...-:>..yMrL../K.......D\|a.c?S.kf.....}...~...~.....~....2.....u'..".}n..q.....)B.....,....."......#.}.....:.....yU..2..u..%.?p.,..,.w>......e..a??....[... ..4.....?...I.Ko.z...~}Q.$}......]..,..^.;.;..o..-:...A.%.]/...L...'...C.$...~.(...Nm^.._......@c?.....Geu.......f...._.s.o..'..W4.G?.^...p.g.z.h...\..........6.Y..._.q.O.w:.q.

C:\Program Files (x86)\DocFetcher\lib\bcprov-jdk15on-160.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	4189874
Entropy (8bit):	7.856493048903261
Encrypted:	false
SSDEEP:	98304:/TWRD2llQfWwFd6tyhvpgB2a5a+1WhQZNmW:/m2rQfayIEgGW
MD5:	435FF931AF9ED4430D2A27456B0386B2
SHA1:	BD47AD3BD14B8E82595C7ADAA143501E60842A84
SHA-256:	7F1A0E6BADAB38666F8467A9A0EE96656B2F8EC8623867ED34F3CDC173B7EE07
SHA-512:	1C08D82349E333720C08FC467FF6489B14B8633A09019BF8BB5E6A3C426DFAE6DCC415648FE1FB4A2DA8631548F4947AB6CA1BC90B3190A05040F4D2EB271A10
Malicious:	false
Reputation:	low
Preview:	PK...........L................META-INF/MANIFEST.MF......W....7z...;t.....$1.]....A...f...$I...p.9...>............w..{kg........../..&Y.d.G...g....I...i.Eh.O.......k..............???.?en.......xY.a.(....'...yp..G..j..u...s0......._...{..`...W.8...pw..8...7...o...sl....E........8...n..=c...o......a..S...S...A;....6?.`G.?\..l.y\|.....D;.SKH{.......y]...].i..Yrsk.8O_...W.z...J....X.....}G\|=...<)...C:..O..#._....'.....mv..........5L..8......n_.j.o.7.4G;....y.....gD.........../~..q...6.......G.......x..J..!.q.1.vk........9....AI\|..;..}-O..u.N.~....ORQ/n.\|3K..y.U;.0x..?.6?.......>./.h<.....Q...<...a....{...?..wN\|....c.?..~.1.q.4.S.....o.)/..2..(j.\|r.a...~n.~.1.....M.......,.z...vh.Y..4.4.7<..b..o..O.....P..Oo .p...DF.VU..Z....n.O.P......_CC.........6..~.%./.G.../q.v..o;N.._...}...*....8...wo.v..x._.....8N?!.0....c..~o..mGv.]H../?...S.....+H..-i.}....2....u.n.8.......y.<{..........L../.y.P@w...?..W=X<.-.i.......=.........9L.......c._.U.&...O.

C:\Program Files (x86)\DocFetcher\lib\commons-codec-1.10.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	284184
Entropy (8bit):	7.8811339410238
Encrypted:	false
SSDEEP:	6144:+J+dN6A+hCs9rRzuGTaFx+mjIZCLtCdLIh4Jtk2N/NbQZnME4k7ELOU:+J+3+hCsVRNTxmKoFiJt5nbqME4k49
MD5:	353CF6A2BDBA09595CCFA073B78C7FCB
SHA1:	4B95F4897FA13F2CD904AEE711AEAFC0C5295CD8
SHA-256:	4241DFA94E711D435F29A4604A3E2DE5C4AA3C165E23BD066BE6FC1FC4309569
SHA-512:	8EDECC0FAF38E8620460909D8191837F34E2BB2CE853677C486C5E79BB79E88D043C3AED69C11F1365C4884827052EE4E1C18CA56E38D1A5BC0CE15C57DAEEE3
Malicious:	false
Reputation:	low
Preview:	PK.........IfE................META-INF/PK.........IfE.S......M......META-INF/MANIFEST.MF.\[o.:.~7..@.a.bc.N.H.`..l.M.h...V(.ck#KZJ.....n.D)..A.&....p....$..y....<J.3..6...S..b......=#).y~..{....&9.?...J.....n^...[.Hw.w.%>{........%..8:....JNw...gJ.=h3K...\.\\....hR...yu..1..'.@.T.....\\|...X}~>#.....=/.7i....I.:..z..x.=..n6.....O..2bt..S....i..<J?.q0..._..........}..u.r.y3f..M......z....>....LBq...2.Mc...h..E....0..oQ@.._./..l.~\|\|l...q.v..v......W..+..V...p.....3]......".q..-V_.............IW]5...Z._.....#.....hBY.#.wQ"3.NK.P.y}.}RQ..... ....z..0.....v....4.O.BoO..?.=>}...I+xU;...}.7..,...D....U>..)_....G. ...I`....K...................9.....D...>.!.....=B...a..H..bOs.......iHhR.I....6G.@S&..yJ..vE..`A..4.7I.H.O.ZDA..%;.C...pDs..V....v#4.+m....e.;+.d-....w.....H..?.<..L.....'.A.m.....+..;.o.k?...3...<s.....kx.5...5...T....K...D.9.5....Uc..<.(...P.^9...H.hJ4..Q......z.8....;...c>........V....q...OgOo.}th?".i0.t.d..,<....`.He)....\8 ..b..a)_

C:\Program Files (x86)\DocFetcher\lib\commons-collections4-4.1.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	751238
Entropy (8bit):	7.867951197388113
Encrypted:	false
SSDEEP:	12288:wjkbMs/GkT4sOutdpiPcwauVnRh5GLrGPf36jBw6bNn6/JknQK:nZ+kTJOkaPzaVLr8v6Vw6x6Rsn
MD5:	45AF6A8E5B51D5945DE6C7411E290BD1
SHA1:	A4CF4688FE1C7E3A63AA636CC96D013AF537768E
SHA-256:	B1FE8B5968B57D8465425357ED2D9DC695504518BED2DF5B565C4B8E68C1C8A5
SHA-512:	1553751F9126B24F8C893B169DF881052483CCF1586EFEED4215B6EF013E115E001B96A09D348055DF6D1BE338A0FA1B14B28FEDCA3F1663273931A7D17E1363
Malicious:	false
Reputation:	low
Preview:	PK.........yG................META-INF/PK.........yG................META-INF/MANIFEST.MF..]o.@...I...^l.lAP.X...&v.6.6{g.p.#C.....{PTZ.+......\|...4`c....2b"p.mZ..Z.B.z3:...91iH.)....E..s..2.S_l..c.W...F...7:..:A...b>...rpC..P'7;...J.(C..%.8..O.G,.9I2.G/=.F..3X/(.!g..E..:../..:....:.d.gn..C.D..C.e0..<.".B.T>w.NB... &.(_..y.w]k.C.s..M.c...)p.Q$."^...v.3....K...Bp....Q4K.e.-..eU......L..........&....Q.....v..5...Z7. m.rss..+.....b.i..1VK.<.8..v......s.6..cc..@.s0:. .S.B.PX...V.\|.o..B..l..-,.e......M..............C'...._.....3......]Z.4.ml..@...C..t......OX... b.A&..]...o<.......#.qH=..%...Hu..5...85.Vs.Z%.u../.. .$..f9..j$.0...0.^0\P.dD..L.".R.#../.$..u ..?.<J,.R.y.Bx.....v...-."...12.)l.r.._.<.OfT;.x..h...t[.;..{,..........~;..f...<.....O..t....D..s..j.......~..S.U.R.[u..l.Q,."....k..[8pt.NzS.......8"..]..PK..............PK..........yG................org/PK..........yG................org/apache/PK..........yG................org/apa

C:\Program Files (x86)\DocFetcher\lib\commons-compress-1.4.1.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	241367
Entropy (8bit):	7.910739983529896
Encrypted:	false
SSDEEP:	3072:hOqnMoqaJvCg00hDEzW2ur8Iy1fuz3EPXyiGaOr/49Phn/piUWui/Gq761:oivBdVFO5NPysOr/41iIi/Gj1
MD5:	7F7FF9255A831325F38A170992B70073
SHA1:	B02E84A993D88568417536240E970C4B809126FD
SHA-256:	28A00D80716F073D644B9DA76E94B5E8FF94DE8E9323F06F558FBA653FCF5F86
SHA-512:	AC314AF8E0D402A002B71797D0A96760F114C43873956D9650D2039FD6E2C0A9B48E2D4B1BFFB9EC26094226D680C332D82C4BC23FC06AE4A9777A23DB432070
Malicious:	false
Reputation:	low
Preview:	PK.........7.@................META-INF/PK.........7.@.J.;....v.......META-INF/MANIFEST.MF..]o.0...#.?X...I(LKUi.R.......&.\.;..B..w.B....!.>...'........TL..y.k[.U..#....H.CR....$.\.g......Y..{....W.s.xW...s.gT....:G1".93...b...9d_/.+d.g..).....(.......A.b...'...y8...............tv.>..-gt....L.x.=.tI..d.zI..rM4....1...Z.<s..2.k\|.. ..p.....G.s..9.{Z.GB.h2....Dc1.K")z.......E.Sn[.l.....QLq...+..k....r..$.D..zZ...Nw8.b.q...%?~O^.D.Ir...A.. .76V..0!rF5~..aZ\.H........_..b;kg...HJ4...Z.....h.Q.......L..b.X.rC,..c.0x.q..nEcw...D.`....k4..Z~..~....Aqg.._N.S.J..\|....6F#:e.*D8j.zhj....B....%.._. .E..E.+.....W.1..Y.)..L...9~5T.G5..(..2-..^.6?y..l.v.".../.ySW......tpW.lA K.t`~m.?Q.......6...6......{.................{.WA........^.m. ..\|.6..#..4.....B.lk@...(u...^.}...:m...Z..t.)...-...PK.........6.@................org/PK.........6.@................org/apache/PK.........6.@................org/apache/commons/PK.........6.@................org/apache/commons/co

C:\Program Files (x86)\DocFetcher\lib\commons-io-2.4.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	185140
Entropy (8bit):	7.9216858474735306
Encrypted:	false
SSDEEP:	3072:pF6mb9NczTyPXoTt75AQ6oBoEfDmwFHb/1Vd23l/ODoxb7DcKK:pYmb9iz2W75JLKEfDmwTVdilnxb7DTK
MD5:	7F97854DC04C119D461FED14F5D8BB96
SHA1:	B1B6EA3B7E4AA4F492509A4952029CD8E48019AD
SHA-256:	CC6A41DC3EAACC9E440A6BD0D2890B20D36B4EE408FE2D67122F328BB6E01581
SHA-512:	957A438894A196E534AF9AE1E61FB21E16F273952B55A81ABB8FAF0B139FC031EA940CF477F81704DB417D1CE6FF2D9DDD4A2CBF316903B0E2DC1AEAEF24F292
Malicious:	false
Reputation:	low
Preview:	PK........v..@................META-INF/PK........u..@z../............META-INF/MANIFEST.MF.Tao.@..N........4&.Z..S.T..o..2.K......Th.k.`....73o.2).....:.J..s\....J...... JG.K._..U.(.9B].V....t.>~.Z...Ev..2.._............Lss..y.3TnNP..1O....)!.jn.1.....x.e.............5N........01.cX=...m.:G..z..(..)....Rq@.eH=..-..)...P.,V@.J9d..f.4.[......q.t.m.S.b).?4.0.:..d.g+c..^..f`.v\.g..x8..G.w\..=..I...f,9.#....S.+]0...w7..-...f.....E\|.A[e..f.C..@X.f.`.^A..A..<..)w.r.!w...RD...;....Q.Z...ef.B..p.^..?.....\.y.....n .Z.......I,.5.....Z`,7"...1.p.-.....(!..P..IR-..^l.`;...f2[.;...Z'g2$I.W$Q..Z...'{..L.p.P....m..aQ......S{.n...$.....Q.'.E...R..~jzm,y..@.!+....hqE........[{..~..j/.yw..J...~.C.oyFv..e[.PK........M..@................org/PK........M..@................org/apache/PK........M..@................org/apache/commons/PK........N..@................org/apache/commons/io/PK........N..@............!...org/apache/commons/io/comparator/PK........N..@............!..

C:\Program Files (x86)\DocFetcher\lib\commons-logging-1.2.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	61829
Entropy (8bit):	7.924448014410102
Encrypted:	false
SSDEEP:	1536:TWvDr5xeO4G9Q7+VCfSqguGukQYvFABhbHoneHz:6BxeO4CQSoRglukQTrjoeHz
MD5:	040B4B4D8EAC886F6B4A2A3BD2F31B00
SHA1:	4BFC12ADFE4842BF07B657F0369C4CB522955686
SHA-256:	DADDEA1EA0BE0F56978AB3006B8AC92834AFEEFBD9B7E4E6316FCA57DF0FA636
SHA-512:	ED00DBFABD9AE00EFA26DD400983601D076FE36408B7D6520084B447E5D1FA527CE65BD6AFDCB58506C3A808323D28E88F26CB99C6F5DB9FF64F6525ECDFA557
Malicious:	false
Reputation:	low
Preview:	PK........\|..D................META-INF/PK........{..D' F.............META-INF/MANIFEST.MF.T.o.@..N........A..Zk.[.M..K....[.].,b.....m{...2...}.#"...?S.2)\|.X.i..T.?.`I".#.".$$XP+.q,Ejq.ELD.......^.i..\...........M4\|.S.9..,9PoS..7..q.1.....0....GW"...-.v:...c.u].....P.M...0.s..E..DX.}...9..$4`s.\|S..9.C.P.B.B..o..<.....\|.N..A.?.../..k..O..W.Yc...XL.........j\|w}_...I{..w.....y.Y_..(.4,.......h.F.<....T@..:..x...e.?..Y.....<_.hHR=.!.O.......3..95nT..._..i.X...O......L ..DS...2/B./..s.e...<^..K..H..U-...r..B..U....T.8.j!2..4.lk....%....\1.Ks...Y...R..T.....V..i.8:W4.<+...0.hE.....p).....R-K.R.......x.......7.../....S...G.Mu[..=.p...x.R....>....x0.i......^..]...2.z..?n]s#...4..$.k...v0..93w..s.)..>...s.W....lw..w..z.O...X0.....:K.6`....PK........z..D................org/PK........z..D................org/apache/PK........z..D................org/apache/commons/PK........z..D................org/apache/commons/logging/PK........z..D............ ...o

C:\Program Files (x86)\DocFetcher\lib\curvesapi-1.04.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	98365
Entropy (8bit):	7.86512154286757
Encrypted:	false
SSDEEP:	1536:UKQAZVLKMwzeUUjivRlDFu4q4lmIlln/yCxQ7CpFrj9RbjH//36h1unBq6k:VxXUUji5lkmmIlln/yCx5TphB+
MD5:	0DCBD9B7E498D1118C920D1D55046743
SHA1:	3386ABF821719BC89C7685F9EAAFAF4A842F0199
SHA-256:	FF71BD27B36816889324DE58ECF642532E5C9934C1DCA2CFEA0CBB2F393EC2CB
SHA-512:	F4A2B3F7F0A253ACFB5E1166A0AA1655555271105C05574DCCD1C494AA0787C3574F506561A793EDFD93FB3D643238E5DB18B33F1D2700C351149CECB77E2944
Malicious:	false
Reputation:	low
Preview:	PK........K..H................META-INF/PK........J..HH.`.o...........META-INF/MANIFEST.MF.M..LK-...K-...R0.3..r,J..,K-B...V..+.$x..J3sJt...R..2.K..x...R.KRS...........e.y..z.z..=).^). k,....Ly.x..PK........J..H................com/PK........J..H................com/graphbuilder/PK........J..H................com/graphbuilder/curve/PK........J..H................com/graphbuilder/geom/PK........J..H................com/graphbuilder/math/PK........J..H................com/graphbuilder/math/func/PK........J..H................com/graphbuilder/org/PK........J..H................com/graphbuilder/org/apache/PK........J..H............$...com/graphbuilder/org/apache/harmony/PK........J..H............(...com/graphbuilder/org/apache/harmony/awt/PK........J..H............+...com/graphbuilder/org/apache/harmony/awt/gl/PK........J..H................com/graphbuilder/struc/PK........J..H(+....."...(...com/graphbuilder/curve/BezierCurve.class.Vms.W.~.Zy..F.n.....Yn..S.ib.E`;...&ki+o,..q.........ia

C:\Program Files (x86)\DocFetcher\lib\fontbox-2.0.13.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	1557864
Entropy (8bit):	7.990503977793604
Encrypted:	true
SSDEEP:	24576:rnaUlNopcqa6QH6wTDuOyKzxqTqbG5O+tdf7Fj8hXkEFVOk+uclXXWVY4ZSiH/Qj:mBpdGawTDu1KzxB2OkVN8BJQNuCXmpS1
MD5:	F6DD2DBE55EA47062F7AC0543F7E29C6
SHA1:	A1361ADACFE9BEBF262A5E05A97F1ADD9AF1CC05
SHA-256:	E37F809231C8C71276A87BB08272D007A0B4BFE857ADD208906D51DA731A0104
SHA-512:	FBE0D0ED72C26B7A1D6E231C68A398DAC865E3163E9311BEB1CC77335B89A62AC94BEA044E1FD917CA0827B4EB4ACEC8949AFC2A280175169698A106CF368551
Malicious:	false
Reputation:	low
Preview:	PK........w.\|M................META-INF/MANIFEST.MF.....UMO.0..W...zX.D.&P.ZqX.H..!.r...I...cg....~.M[h..n/.<o.yS.GL....^..B...i..V.7d...Xp.1.w.N.n..................._.....=".-..@...[.##2.(....G."..ie...H..f.D.).3P$...<..#V7.DK...Z&..z.%& .P\..9j.?ntJ8...$.t].Q....)3..D.h...t{....WG?..=.fm.k.....f.0.&Y.."..C...:.N?.........q<...vf.....k..u.H...:8...F....VU.Z...'.+.X.....)3..1..?.WrP...l..`...l..#6.9...I.....,..zO,zg.......j..~....Z.P...MAE..T....-.......B..rUx;...R.2}.T.D..S..C....R...."S...[+..j....E]w...7`.....b<.U.L.n.S..6.2.b)+....v.jp..L3..p..l.....]\K.EXY...P....4.>..#.......4..R'..2.m..ip..c.......L.......A....-.......{.....O...8....h.]..C......Ek.#......:~.....e...PK........._...PK........w.\|M................META-INF/..PK..............PK........u.\|M................META-INF/DEPENDENCIES..1O.0..w...J$bC.lP..R...$..Usg.).z.M.P...v.{O~gc ..(c`.,E....F.T#U.#p..s.\|.=VI`..;.....@..="...Ck.}..}......}.PV=x[u.....'..F....xa[n.`.hz.....n..\|a.0..}Z..L

C:\Program Files (x86)\DocFetcher\lib\guava-12.0.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	1795936
Entropy (8bit):	7.900680054152489
Encrypted:	false
SSDEEP:	49152:CrhKJcO26sAmtlb8e80w03nxFVvD89WtJc:ShKJc4en8HUn3V44u
MD5:	E0FF5D37FC3FA67B7FDD51A74C4BB88C
SHA1:	5BC66DD95B79DB1E437EB08ADBA124A3E4088DC0
SHA-256:	1B5A500B3017A65D6B99FB92DBC9047684D7FFB937C1E53A86C22B6977F7DA4E
SHA-512:	FBB0BE1FCA97CC17CE7E7F622C8CEE620C31F656B05FE4BD9E719A66C35C0C43F0ED5CC7FB10D72E165CC02502702628C06048B3DD8AF6129974875767450DB1
Malicious:	false
Reputation:	low
Preview:	PK........)u.@................META-INF/PK........(u.@..d.............META-INF/MANIFEST.MF.VMS.0..{..A.K/.I..N...2...aJ.wE.....GH.}W2....6..v.}.+eA%_...o.+9%.t.G..Ri.<R.L.0%L..Z...._.%S....0.A{sI....qD6t.R)....O.95y.2Wo..g.^j^p.7`:......\n.d....t.......a.i.....i.!...........A.....\..`.^.....8u..0.e9..D......r..9.A......y..j.:x#N..6.t.L..[.....#..t..:...F....h...8...... N=.M.G1..C>=.....Q\|4.PM..Ocokx>........=Y...7.8...G3.Mf;<.K...9.~)%.d&.d.....1s2..<../.....#.!7J.....!+..=....j!.......8...#.....d.}...t.T.$..C.....q..........w&..o........q.z.....`....!%....8n....#.....m...8dis.~Z.%.....?......`%OH...C^....W....}.X.......UQ.)....~..a..J@6..HB..}[5.w.A#G .O?....XzH}..H...-.....KJC.R..CQm........6......._.fG^j0J.....Rq....H......X*.^..^^..Q..8..G.[g.~#.../PK........%u.@................com/PK........%u.@................com/google/PK........%u.@................com/google/common/PK........&u.@................com/google/common/collect/PK........%u.@..

C:\Program Files (x86)\DocFetcher\lib\java-libpst-0.8.1.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	96144
Entropy (8bit):	7.9636917770706965
Encrypted:	false
SSDEEP:	1536:1hpUUYp7qEJ2UOzh6B6qhKb6s5Aj9mkFp57N9fQwWNHWXWVxlFk3s:+PpWLUOpqoGswhX57NGwWNHXVpr
MD5:	EBD417BB6B8E14B99B17E1796E6ADFFD
SHA1:	47F63836191E9E0C95E65B9822EF9D83E41D5B0B
SHA-256:	8B0AF998F179E1F19E94B3E2592FE717CC38A17F51E6E899EE8AC6DDC9F879AC
SHA-512:	350FBA61995D167B9ED8266296D7ECB35689EF299D5A720A2607FBB9978C5EE443218C6B1B991C59506B766CCE952EEACAF36772139013BAAF85C2DFD6AD42E9
Malicious:	false
Reputation:	low
Preview:	PK..........9E................META-INF/PK..........9E..._n...........META-INF/MANIFEST.MF.M..LK-...K-...R0.3..r..).u..R(L./JN....z.d.T......r9..&.....:.$&g..&...)......r9.%gd...!L..I.(-V.I.r.r..PK..........9E................example/PK..........9E................com/PK..........9E................com/pff/PK..........9EFM.3............example/TestGui$3.class.U[o.E..6q........4...n...RH].M..41).r.'..n..)...<!!^x.[%$j.xA.....N...D.7.U...3g...3.93..o.8.Z?v.)9...Q.O.i.9....N..rxN..Oj.G^.).T..0...3..r>.!......%....bV.9..k...u...-...5c=.]....L..).......Q.d.LYx..UK..[..P.JuX...[T...n.-Z..]./.F..P.5.{.hXr.#r{.P.O;.h.m...5..7LN2!..Z........,.p.L....a..\. UA^..:.a....g.-/g.....6'S1.7%.m.2Ur...p.....+.F.!S.g......y..:.y4(<...I...I.m!.N[.(=..Bz..i..C.._u+.t..y...a...A..XPQ....U\.."^..2^.q.....,.x...x...%.&.qt..,M...Z...C.....v..l..dl.4sn.&d}F.A.\...s...%H.Zk.i..K....;{wlSS.!%..M..:...[....2.^...V...0..%.`..)?.H....;#...f..N(.u.i].......v..t..n.

C:\Program Files (x86)\DocFetcher\lib\java-unrar-0.3.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	132819
Entropy (8bit):	7.917542667158521
Encrypted:	false
SSDEEP:	3072:OmCgOEifb0PBs9OLRRxQUMw3CQhmqJSydpeoxQ27vWjuFUZ:dubeGELRRxQZmLLhpeoZ7mZ
MD5:	2B18C67BE0DF35E2B8641BE310DC1509
SHA1:	BCE51F76274C41DDAC3CA8E99378FF2893108049
SHA-256:	4100F4E706042854EB3D873C8CDBCE0529BBA0AC530D3472B054F1568B624C83
SHA-512:	EBBC66A9D087FA6E2C87125D32E13126F56CD2DFF1E639B2310AFA718309A842E557F45F7FA00293DA5E3F0B43E3399470693C21C8BEC0A6BF387C06FF4701A7
Malicious:	false
Reputation:	low
Preview:	PK...........:................META-INF/PK..........:;...f...~.......META-INF/MANIFEST.MF.M..LK-...K-...R0.3..r,J..,K-B...V..+.$x...R.KRSt.......3R.\|..R.x..J3sJ.. ~:H1H(E.+%.d...A..1/./..PK..........:................de/PK..........:................de/innosystec/PK..........:................de/innosystec/unrar/PK..........:................de/innosystec/unrar/crc/PK..........:................de/innosystec/unrar/rarfile/PK..........:................de/innosystec/unrar/unpack/PK..........:................de/innosystec/unrar/unpack/vm/PK..........:................de/innosystec/unrar/unpack/ppm/PK..........:............"...de/innosystec/unrar/unpack/decode/PK..........:................de/innosystec/unrar/io/PK..........:................de/innosystec/unrar/exception/PK..........:................de/innosystec/unrar/crypt/PK..........:................de/innosystec/unrar/unsigned/PK..........:..W........$...de/innosystec/unrar/crc/RarCRC.class}.KO.Q....3CK).<.c....C....*.jL..$

C:\Program Files (x86)\DocFetcher\lib\javolution-5.5.1.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	395195
Entropy (8bit):	7.8768928778517076
Encrypted:	false
SSDEEP:	6144:IBIXPPIh1XRLo1rlkh2iC67czQg1BR21h6icmjL6/HhP03nN894rfQ:3P4q1pkhPY1S6ivHkhP03na94jQ
MD5:	1B7257DA4690BADA3CAC7293985F8588
SHA1:	3FCBA819CDB7861728405963DDC4B2755AB182E5
SHA-256:	6DE167427FB5AD34FE533CB36A8B3427FA6052A2B99781874396ED5CCA9F8ED1
SHA-512:	847F503A9CB1EA6076BE51C8F81325916BA78C25C54651E03C5DB88162A12E0203922679F8AC52B68D35BE331F5D842017C482519C149BD6198E327F8F8C1FB8
Malicious:	false
Reputation:	low
Preview:	PK.........J.<................META-INF/MANIFEST.MF.....UQo.0.~G.?.xj5...ec.......t}.Ll...l..~..!...Z........yJ.Xpc....Pr.].i6F.Ti.<...F\|..t.......kf..~kU.C%-_.6n.5..V4...v.(.2...I\]:.V.........(.a....-..p..~%.-..h!.B{...8.......1..j...I .?/..:.c..O]B=[...(...R.n...zV..G\|G..m...8..JG..{..(N....by...c....6_.<.+Qk\|..3.\.O.>J..(w...m.......n6n2...f3.G......J.C..,.....8+.b.<...."...,g9....K.S.......g..%...L.C...c....5.......>..6..Pc......]z........~.b.......4(cim:...d.;.jr.;z...]....7......!p....z.4<af.gL-P.`..9.R1.`.1.'.@.=/..T.W.ZpE.<NcL'.15....K.q...jQ...y...Be.V[.f...`..97......8...{.Q.q0..pw;n..%A2.I.h.[H...I..q.o.e.......Vv%vT.X....R..K,../...\.....Bz..Q.qk.q._-l..f.......0`Bc..M!..,_{8...F..49Q..j.I......>9z.O.o.U....p+....`Nx..g..~..M;..;.f....PK..y.%.........PK.........J.<................META-INF/..PK..............PK.........J.<................META-INF/maven/..PK..............PK.........J.<................META-INF/maven/javolution/..PK.....

C:\Program Files (x86)\DocFetcher\lib\jericho-html-3.4.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	269606
Entropy (8bit):	7.9138794556694965
Encrypted:	false
SSDEEP:	6144:Xv4s1g8mBvaR0ffzpWZAlVmvBEePiXyepi9cbuf0ObdU9u:Ase8m1HVWZAFXfpPS0mU8
MD5:	2C65B7D12508FD6171CD6EC957A6A9EB
SHA1:	71C6A6D10D66C381D6567996D2ABED04674D49CA
SHA-256:	82BC14C468042B45EFEB04ABBCE2466C0FE4AADE97D06422F78BEE949B143500
SHA-512:	643316DCEBC16DE5B5D6E310E734FF7B8CAC88D22924242F2A858C4590601DFEB1546495C209C3B322298D61D199F492ECD7775896A5EB8E91CFFF7B0FE3C740
Malicious:	false
Reputation:	low
Preview:	PK..........XG................META-INF/......PK..............PK..........XG................META-INF/MANIFEST.MF.M..LK-...K-...R0.3..r.JM,IM.u.........h..%&.8.....%...k.r.r..PK..Sq.$C...D...PK..........XG................net/PK..........XG................net/htmlparser/PK..........XG................net/htmlparser/jericho/PK..........XG............&...net/htmlparser/jericho/Attribute.class.WktTW...d2.......B(4....>.@l2I.Ix..J...%.0.I.AA[...UT..V-".J1$Pm}.....u.K.\.G]...{.{ss..b...9g.}.{...Ko<{..z...>..../...a/.....>...xy..Gxy.Y...q\|..'\|..>....>....>.....$/.e..8....<......x._R.eF.+.W.4/'T\|..8.%A.z._c....:..b......%.........Ds..l..Fzp.@Y:1....a=......\|.P~85....l.~=k$.2....h......'.I'S..R.....9.5.Od.......-...7w..tv...g.$....z...(.G.b1..ImG$.....P.m.W.....kg4....T.].ww[.A..=..............b..m#.,.{.;.\|P...H..V.xCQ.3.lR.pc:..^c...g.t........z6..O.\.L2..Id..-.;?dP..in...B^..yr./..s8.p.....z..G..<....+...1.f.mP.o..^..8[.+t.M.,PnAv...M..%r...44.".....S..r....m.

C:\Program Files (x86)\DocFetcher\lib\jexcelapi-2.6.12.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	725735
Entropy (8bit):	7.9335698458082495
Encrypted:	false
SSDEEP:	12288:mMjV9YC7QyKliqithupeGA9bYbyMt/V4i3WXkMCenipL+rGhPH9P2Lhw9teJC+:mMjNQyKlnbpWgX/lHJn9tk
MD5:	62F8A643EBD1FFCF891B51778DC37565
SHA1:	7FAF62E0697F7A88954622DFE8C8DE33ED142AC7
SHA-256:	C5C53645AB751288398F30ADAEC5551879C5EE334D4862EA77B25A386646621C
SHA-512:	FAA2BD94C5AD0139F9C01175DA34B34C3AEA84D3741B5A3AD95FA348F52200696133AB92E2D9BFF2415CA7803C381A2321BE2E6B8B7E5867E84C3B14512A4DC6
Malicious:	false
Reputation:	low
Preview:	PK........cqX;................META-INF/....PK........bqX;.N.t...........META-INF/MANIFEST.MF.M..LK-...K-...R0.3..r.C.q,HL.HU...%...y...R.KRSt....t..M.4.K..\|3...+.KRs..<..4y.\|.3.t.s......r.RRs..\.././..PK........bqX;................jxl/PK........bqX;................jxl/biff/PK........bqX;................jxl/biff/drawing/PK........bqX;................jxl/biff/formula/PK........bqX;................jxl/common/PK........aqX;................jxl/common/log/PK........aqX;................jxl/demo/PK........aqX;................jxl/format/PK........`qX;................jxl/read/PK........bqX;................jxl/read/biff/PK........bqX;................jxl/write/PK........bqX;................jxl/write/biff/PK........`qX;.Gp~...........jxl/BooleanCell.class;.o.>...#.nv..v.Nv..F.......TF.f..(F......T......S~~Njb.sjN.^VbY"#..VE.>.0P.HB?'1/].?)+5..hH.H..........63.02.0..X.l@.....PK........aqX;>...y...........jxl/BooleanFormulaCell.class;.o.>...#.nv.vv..v.Nv..F......T..TF.q......<.....D..

C:\Program Files (x86)\DocFetcher\lib\jintellitype-1.3.7.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	16058
Entropy (8bit):	7.821439266309405
Encrypted:	false
SSDEEP:	384:iLgpENfXaLaDAy8EwnmGAMBDHf/B4Au/Lma:0gpcKGDsfmaxUKa
MD5:	31C855187BF89DAE3B3D9A0501A6A741
SHA1:	8568ADBCCDBBA1DAC4CACF39910B1A3E8A76F8B6
SHA-256:	244C26F0EF4DC25D91B691940B8B0FF5DF4737E98936B14B14D0F2FCF651E163
SHA-512:	704B76EFA4383D02211350C9E54BBEBE5FACFC745C78390854A7FF19BE36EA97804C7DD90769EB52A503BCB6CD5EA5B1E0D5E1885848E83016742DAAFE9E5E33
Malicious:	false
Reputation:	low
Preview:	PK........ib.?................META-INF/PK........hb.?.E.............META-INF/MANIFEST.MF}..N.0...#.......@..6q.N.....4......iAe.....g......e{.../.J,9[G...Y~.x<$...m#..$.[...Ru.9....o.DkC."..UVT....\|.^qV.U)I...7...x..C...qvw$...l..J.#......y6d.....dP.r(T..-......F.BM0...D.~..U..v..W!..F...7....Emj.....x/.!j.b...,...g.}.PK........hb.?................com/PK........hb.?................com/melloware/PK........hb.?................com/melloware/jintellitype/PK........hb.?............/...com/melloware/jintellitype/HotkeyListener.classU.A..0.D...VW...../!....}..IL..Q..\x..%6Kg1.cx....`.I..BM.._...D..Ms$L...k^...p^8..-..........T=Kk\|...te./.fY.N...,.X...rH.F.ya<t...PK........hb.?<&-.........4...com/melloware/jintellitype/IntellitypeListener.class;.o.>...C.Nv.vv..F...<......TF...O.0F......T............."...DF....\.\.d~ybQ.~V&B.>.]... }.9.y...IY..%l....L. ........b1..I&.6.PK........hb.?L:........../...com/melloware/jintellitype/JIntellitype$1.class.RQO.A...w...m.

C:\Program Files (x86)\DocFetcher\lib\jna-3.2.7.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	948100
Entropy (8bit):	7.99090709324712
Encrypted:	true
SSDEEP:	12288:RhH1UXTBLc4lja/B91dTt6nFzSidsJxjuuliuYW8R0aTyVvbW5E15m2n1C1psfSi:LH6V1MB9rcnFzSidkduW2T2ycks3UYl
MD5:	56C4D32D08C89A93159259E0DA38D9DB
SHA1:	4F25AA7292F70E721A9B96A6ED49365BA6E03EAB
SHA-256:	722B31D0C8B14A7E7E24F332C88E7DC658C1703F7E03813670B9CC89CE795606
SHA-512:	08D4D66AAF6FA31CE6B531FC98B4C3AB904F783ADBDC9320AFE5F9E363D7818D7285DDC22DC61FBD28DE5727323BBB4DD8F04CB246868055F73A8C5C686C461A
Malicious:	false
Reputation:	low
Preview:	PK........y..<................META-INF/....PK........x..<Q...............META-INF/MANIFEST.MF}..n.0.E.....L.v....].......`...G......C..v..w.d."IfO......L...\... .2\Lx9.&:..k.s...Pl/..wC..$..kv.I..=.e."....\.3....I+.Z.......J...(..lE6;.:..?({.c..5.h......a.C....>....Y^.....ww....>.B...@.+..........7PK........y..<................com/PK........y..<................com/sun/PK........y..<................com/sun/jna/PK........y..<................com/sun/jna/examples/PK........y..<................com/sun/jna/examples/dnd/PK........y..<................com/sun/jna/examples/unix/PK........y..<................com/sun/jna/examples/win32/PK........y..<................com/sun/jna/ptr/PK........y..<................com/sun/jna/win32/PK........y..<................com/sun/jna/win32-x86/PK........q..<%{.Nm.......&...com/sun/jna/AltCallingConvention.class;.o.>.....vv.Vv.6F......T..TF.I......t........<...DF....\...<...D}l....@.s.......R.K..3201@.#.3.db`..PK........q..<0..T....'...3...com/su

C:\Program Files (x86)\DocFetcher\lib\jna-platform-3.2.7.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	794779
Entropy (8bit):	5.894712596998704
Encrypted:	false
SSDEEP:	6144:h1rzFiIyHyCINY64NEAK2gcl7TugAaELJIAFXg/iHLwwuURWAageluOoGqXCkEPv:hihD64NzK2gclfJAu3u2u3i
MD5:	1B2CF0DD64557D43356DC577BBD45ED9
SHA1:	AF109BEA46056EF1D09172A96E968ADFA8CE74F1
SHA-256:	DA23F528DA0295C34AEB28F52EC99BEC9430782BA4FFA53F7905E0C78EF01EF1
SHA-512:	13E0B4A00C954897CEB5538138898BFA65FD2642C3F04879766BFC66B1E39CD12246E6BF44D4987F0BD4E43BE3436B3D65AB931FBCEF8144DE017490FFCD3917
Malicious:	false
Reputation:	low
Preview:	PK...........<................META-INF/....PK...........<....f...f.......META-INF/MANIFEST.MFManifest-Version: 1.0..Ant-Version: Apache Ant 1.7.0..Created-By: 11.0-b16 (Sun Microsystems Inc.)....PK...........<................com/PK...........<................com/sun/PK...........<................com/sun/jna/PK...........<................com/sun/jna/platform/PK...........<................com/sun/jna/platform/dnd/PK...........<................com/sun/jna/platform/mac/PK...........<................com/sun/jna/platform/unix/PK...........<................com/sun/jna/platform/win32/PK...........<..U........0...com/sun/jna/platform/FileMonitor$FileEvent.class.......1.<....&....'....(....)..*....+..,....-......./....0....1..3..4...file...Ljava/io/File;...type...I...this$0.."Lcom/sun/jna/platform/FileMonitor;...<init>..4(Lcom/sun/jna/platform/FileMonitor;Ljava/io/File;I)V...Code...LineNumberTable...LocalVariableTable...this...FileEvent...InnerClasses..,Lcom/sun/jna/platform/FileMonitor$FileEve

C:\Program Files (x86)\DocFetcher\lib\jnotify.dll

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	95685
Entropy (8bit):	5.6934868438914386
Encrypted:	false
SSDEEP:	1536:KYBPNrnDnnmAbvTOMbUqU6oUitoCr+PGGMBLQTr/7yuABZh6Pr1FvIKEdTzFVuhH:KYXz9bqJtsitoCr+P7MBLq9yh6Pr1Fv3
MD5:	6FF92493EDCFF2DACFFD506CF2046001
SHA1:	76A0226FDDD18A7E896098C1B46C0645804CB490
SHA-256:	CF27D075631190E8713F7F84264032DBC460A272C28512626717411267A12EF1
SHA-512:	DAA0C41B6F321C2B306B2B007912ED7260535874DD38AFFDC71CCCBEA7C2A502018AFEE52099E1274CA70596ED0A2DE6485B3E95628F04171CF5753A1A12ED19
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 1%, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....+.K...........#...8.........J................Tg.........................@......$-........ .........................~.... ...............................0.......................................................................................text...............................`.P`.data...4...........................@.0..rdata..............................@.@@.bss....xI............................@..edata..~...........................@.0@.idata....... ......................@.0..reloc.......0......................@.0B........................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\DocFetcher\lib\jnotify_64bit.dll

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	863294
Entropy (8bit):	5.340868613698279
Encrypted:	false
SSDEEP:	6144:1X6k6nflQUllcllllllroS8ljx23jHohKh1hyClC0Chxky+J+A+Qc5cgT0SpMcJt:n6flQIpXaEmlW0O2AhB
MD5:	93EC47BC4468B014DF33E2D57465939A
SHA1:	A725FB71963F6A92C31503D4799F644D74A71F77
SHA-256:	94AA51587344F9A6DB9C2F3D3096421BE5E2784F22B1FA17BADC380672BED681
SHA-512:	B679583A662288390146D0BC07218683A4C3CFBF63C9D55E10EB7DF33FB86F5BCEF4581C64DAF93B6507EEE83283D745B0FA84A3E79A87A4409B114EFF2BE5EC
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d....+.K.6........& .....>.....................o....................................E......... .................................................0............................@...............................0.......................................................text....<.......>..................`.P`.data....l...P...n...D..............@.`..rdata..0...........................@.`@.bss.... .............................`..edata..............................@.0@.idata..0...........................@.0..CRT....X.... ......................@.@..tls....H....0......................@.`..reloc.......@......................@.0B/4....... ...P..."....................PB/19......k.......l.....................B/35..................t.................B/47......y.......z.....................B/61..................v.................B/73.....8O.......P...:................@B/86.....

C:\Program Files (x86)\DocFetcher\lib\juniversalchardet-1.0.3.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	206373
Entropy (8bit):	7.856343265704331
Encrypted:	false
SSDEEP:	6144:xVDlkyzGKHgLK1anJe/S+MBbec7ZDcA2L0vG:xVDiIKrnBJbeguA2CG
MD5:	B3814E2F6FA353B4D39BA97BC9C2BDDD
SHA1:	591D72211ACC0B909B79C840E0B3ED9A0982D807
SHA-256:	0DCF1E17511B31EB1036FD0DF9EB9B5EF936A0BE36D68F4A6473AFAFB72EA665
SHA-512:	90234E0C122F70895C2D91EA903C92C126103F89DF61BE312BD4C6C3837D270232DCCA7044C4DEA3923F9DEAAD8AF6353CBE8178EB947F9CA60FB36E2B0FD1A2
Malicious:	false
Reputation:	low
Preview:	PK...........8................META-INF/....PK...........8&.\.Y...f.......META-INF/MANIFEST.MF.M..LK-...K-*...R0.3..r.C.q,HL.HU...%.A..E..%.).N.@..z..IF.....y....E...%.....y.z..\.\.PK...........8................org/PK...........8................org/mozilla/PK...........8................org/mozilla/universalchardet/PK...........8............$...org/mozilla/universalchardet/prober/PK...........8............4...org/mozilla/universalchardet/prober/contextanalysis/PK...........8............9...org/mozilla/universalchardet/prober/distributionanalysis/PK...........8............-...org/mozilla/universalchardet/prober/sequence/PK...........8............1...org/mozilla/universalchardet/prober/statemachine/PK...........8<$,:\|.......2...org/mozilla/universalchardet/CharsetListener.class;.o.>...C.vv.Vv.6F.......F.Q....D...t.....tk.0F....t......D...........}g ].Z.Y\...Z.. .0.?)+5..h.#....0.0203....PK...........8&u..........,...org/mozilla/universalchardet/Constants.class..iwZE....m.0I.K

C:\Program Files (x86)\DocFetcher\lib\log4j-1.2.17.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	489884
Entropy (8bit):	7.890344528679299
Encrypted:	false
SSDEEP:	6144:fvXQjW63KUDImkDjZ7okiboGwgTBdptMsBcc83mh+kMKagih6qQkrPgr2emk4iDs:fvcIUg15WoGhTBzBUWhNixQkr6M1
MD5:	04A41F0A068986F0F73485CF507C0F40
SHA1:	5AF35056B4D257E4B64B9E8069C0746E8B08629F
SHA-256:	1D31696445697720527091754369082A6651BD49781B6005DEB94E56753406F9
SHA-512:	3F12937A69BA60D0F5E86265168D6A0D069CE20D95B99A3ACE463987655E7C63053F4D7E36E32F2B53F86992B888CA477BF81253AD04C721896B397F94EE57FC
Malicious:	false
Reputation:	low
Preview:	PK.........k.@................META-INF/MANIFEST.MF.....V.n.0....?.>.1..MZ.94K..v.4i..-.....H...Cm.j+Eo.9....j...5Qz.J.........>.R......2s......FP(.....o.Q..A..8.-'.W......#....E...p.6L...Y.Y0L..rM$.J.b.C.`....`.38I.......Ic.........,.p.G..$..e....._y..=..N.....\|M..d...N.O6.....#....p.....=2......^E.b....K.3..'.0}.]..HM...)=..W..8...U.!9.;g)....U1..=...g..[.f.V5M.Z...../....a%I,.&iH....uId.\|g.......@..}.q..`.8.#..\.t0L.EX.<P.'....F..B..O..K...;,)......s.........I.?rO0...~1...`./R..SF..u.`%.O.....$.lvaP..!-D...x.........=m.fKC=.9...m......p....re.....#f..{...0Y..$X.?..n..`...y......+...X..K...p.5...?.w..]..[./6$#.....Vz)\|.....t....&.q..v..`Z\-.G.....f.Q..yi..0.V........p.......$.t.[V.I......_.".4M`JP.d\|Fe...[.......?..ZXZ..(.n.&."a...\|m......N!T6...=...rV.8.^..g.k.}._o.J...m..L....D.0!.tX.....4.^..+E.".....PK....R.........PK.........k.@................META-INF/..PK..............PK.........h.@................META-INF/LICENSE.Z[...~..@5.

C:\Program Files (x86)\DocFetcher\lib\lucene-analyzers-common-6.6.3.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	1513804
Entropy (8bit):	7.956782072235817
Encrypted:	false
SSDEEP:	24576:1SJ1f7PS2u8DAu7rYzKfogVvO7ZIfRiJrtg7WXh+qq8zwZrN8pARNbmB:k7DFJrtQtrLbh+6zkipgNY
MD5:	1CE9EAA78FE7BE3A39F7BEC4D8B46CC3
SHA1:	5416AEFB968D763DFA750375EB2E418CEEAEFFA3
SHA-256:	2E627CEB9573CE590D02F03E5EB8D8C42765550F69A2E4FAC732C1890370EAC9
SHA-512:	85355259CD06795634C5B1D9C71EE55BE55378C50B95537C8D2CBD6431B16176CD1ED66B3D538EC448564FB795C52FFD26BDB22E06F7C315F936DBCDBFF47FE3
Malicious:	false
Reputation:	low
Preview:	PK.........xbL................META-INF/....PK.........xbL...6...+.......META-INF/MANIFEST.MF.O.N.0..G.?.....y7.R.....qC.g.FJ..uT......jK.\...........e.d..V.....\. ...`..r..0..Jv.9.S...@....B.&..N.W...^..`.M......,?,..>{.2.f..d.5.$E..w$...[..t...9...X.u....6._C`&u.ju....{...eU.M....o.\Wv...V...d.s.v....Q.3.O...P...E...a....L.2....c.S.%.$Q.:...h..."e<`...e<.xt...M..B.]...uo$......Cb.fMvO...PK.........xbL................META-INF/services/PK.........xbL................org/PK.........xbL................org/apache/PK.........xbL................org/apache/lucene/PK.........xbL................org/apache/lucene/analysis/PK.........xbL................org/apache/lucene/analysis/ar/PK.........xbL................org/apache/lucene/analysis/bg/PK.........xbL................org/apache/lucene/analysis/br/PK.........xbL................org/apache/lucene/analysis/ca/PK.........xbL............&...org/apache/lucene/analysis/charfilter/PK.........xbL................org/apache/lucene/analysis/cjk/

C:\Program Files (x86)\DocFetcher\lib\lucene-backward-codecs-6.6.3.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	87424
Entropy (8bit):	7.8893606571354535
Encrypted:	false
SSDEEP:	1536:G/pUDGi6vVkuL9rc2NoADD9J5CBtwYruRJ/U1Y1XRjjQJuyiN/ELjuE:CUDGxvVkQrnoADxgtwNRZUq1XVCxQa5
MD5:	51671F2AD0A21BEA9F74B4A5E4AE1343
SHA1:	A80563DF6FBBA89C0E84754D38BA50094EA2A95D
SHA-256:	678BB6065353FE00A3AF0F2E7321C6C6E9F999FF489E88E3AB872402A0D003BD
SHA-512:	3EDF9E1BEC57B6911BD2EA02645D309D419AEC42195623B8B1921A1785C0F1EDDBF409FBB12E3379B8B06970FCC8628EA9934525FAE26B4E1DDF0E71B0B7B706
Malicious:	false
Reputation:	low
Preview:	PK.........xbL................META-INF/....PK.........xbL.WK.5..........META-INF/MANIFEST.MF.O.N.0..G.?.....y7.R.....qC..I#.;r...\|;I......Z....<qU..[....y.u...Yv\l.Fl$.^.:+..$._.>..;..I..-.#..tz5....p. ....v..t...E5..g.b..T....f...u..E].b^!..6..q&!Gn......\\|.Dh..?..W......Jj..f..5....n...,s...k.Ee..:s...8.$.EQ. ..G.(9.I$.?..0.1.Q.$*\..@...8..........&.M.$....Y..$...@r..AzHl........PK.........xbL................META-INF/services/PK.........xbL................org/PK.........xbL................org/apache/PK.........xbL................org/apache/lucene/PK.........xbL................org/apache/lucene/codecs/PK.........xbL............"...org/apache/lucene/codecs/lucene50/PK.........xbL............"...org/apache/lucene/codecs/lucene53/PK.........xbL............"...org/apache/lucene/codecs/lucene54/PK.........xbL............"...org/apache/lucene/codecs/lucene60/PK.........xbL..aB........0...META-INF/services/org.apache.lucene.codecs.Codec.R...0...+F.eWJ...C{..DE.@..rt..V...

C:\Program Files (x86)\DocFetcher\lib\lucene-core-6.6.3.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	2783591
Entropy (8bit):	7.92610088042217
Encrypted:	false
SSDEEP:	49152:TUHxoh8K+gJp1nT+vHnm4tmFfpgepdlQVgLMKTDdTaheGzWdrcHbRD7:wWhR14Hnm4YFxgc2+D9EWK9D7
MD5:	A4B99517BD38E47A8A2EBC94D316A7C5
SHA1:	8F38F8A8CC6EBD3338F361D91A0D853569427278
SHA-256:	F2ED4B162B1A11678B6299983341BFA6A66A6F47B05A75A801B29057D457E53A
SHA-512:	66AC2B6915D53930ECE1D56EAC06E49CD0579E55D7F5527673D854424AF711369DBC685F86C7294E67672B8E35C271F323AC130877E8164AFA8B4B457CA4CC98
Malicious:	false
Reputation:	low
Preview:	PK.........xbL................META-INF/....PK.........xbL...y-...........META-INF/MANIFEST.MF.O.j.0.....{l)...W\|K...>8..,...-.E&..^..49."V3.;3/R..n.yG....S.{s}..;.6..6.3....tX...Q.R...'i?......Io..\.Y.........7.}o..P...l1.c.TNF...j...CUW..V.v.{.H.QZ...^.z@..g...1..8guil....`n*........d...v....I..i..O..8+.R..2.T%.J.R.a..1.1...$Q.{......C.xJ. ,..e,.Bq...M>..]. .Mo......cb%...._PK.........xbL................META-INF/services/PK.........xbL................org/PK.........xbL................org/apache/PK.........xbL................org/apache/lucene/PK.........xbL................org/apache/lucene/analysis/PK.........xbL............$...org/apache/lucene/analysis/standard/PK.........xbL............+...org/apache/lucene/analysis/tokenattributes/PK.........xbL................org/apache/lucene/codecs/PK.........xbL............#...org/apache/lucene/codecs/blocktree/PK.........xbL............%...org/apache/lucene/codecs/compressing/PK.........xbL............"...org/apache/lucene/code

C:\Program Files (x86)\DocFetcher\lib\lucene-highlighter-6.6.3.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	230601
Entropy (8bit):	7.906064376794247
Encrypted:	false
SSDEEP:	6144:H735tnLvknZSPyuPnsvwWuMsO4v65BdgMyujOwlPXWpnsfI:b3veSP3cuMsH6sujTVo
MD5:	DD1A1F23EE82AFD3D50096246501D18F
SHA1:	17119BDAF8DD9EA5C0620FF3D51EA413BA7CAE6C
SHA-256:	AC796222037D9A888C593EF3160CADD0D40532EF0316A8DD79F06C5A4E1A5AF7
SHA-512:	F00C448E85B45E8045856DF2B2DDBF951C96735265E14216FC023157E98B2E1E9BF92914BB302EC7D45826ED600A2764181AF485307C299DCD2993C9A44B36C1
Malicious:	false
Reputation:	low
Preview:	PK.........xbL................META-INF/....PK.........xbLd.Q.2...&.......META-INF/MANIFEST.MF.O.j.0.....{l)2...-MS...Pz+.....d....~{m.B..........W..%.h.R...G]g...e.E.0b#..B.Y...Kr.=.S.~...t.j..a?E.....7.E.....q..,.i?y..f.M....k...]'.Q.J.y.l.mG..LB.....jD.Y7..,..C..../.Jm2.L..9s]..7..zP.,s...o.CeO..p.....J...(. @.E..T$Q..a.1.1...$Q.:............P.X..$c....\|...z."..`......cb.M..@../PK.........xbL................org/PK.........xbL................org/apache/PK.........xbL................org/apache/lucene/PK.........xbL................org/apache/lucene/search/PK.........xbL............#...org/apache/lucene/search/highlight/PK.........xbL............+...org/apache/lucene/search/postingshighlight/PK.........xbL............$...org/apache/lucene/search/uhighlight/PK.........xbL............)...org/apache/lucene/search/vectorhighlight/PK.........xbL....8...%...7...org/apache/lucene/search/highlight/DefaultEncoder.class.Q=O.0.}.W .ZZ.```A-HX......)..Uw..q.. ~.LH...~..F ....ww~..

C:\Program Files (x86)\DocFetcher\lib\lucene-join-6.6.3.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	146633
Entropy (8bit):	7.888804387244223
Encrypted:	false
SSDEEP:	3072:x71oS4X0QOBfASUISLacpuUVyUoZHZHK8oW+QaAZ:xpl4X/OxuLpX0lZ57L
MD5:	33B2DD594B9AFCCE6E7829BFA400C106
SHA1:	8419E4A5A4A8383640161C555F50DF21AD366CE8
SHA-256:	ABBA4A0322510E0674D37B953445B5CE901F0010F9BB8ED40D717D31F0E90A99
SHA-512:	AC182DD06F03070CA48210217E70E9751FC922487DE9FF5AD0B3B61902C5F43781BEA42578C071C97D6FEE4DC5B84D421469E7BDC2461726B2ACA895AB8E1BEB
Malicious:	false
Reputation:	low
Preview:	PK.........xbL................META-INF/....PK.........xbL.,v.............META-INF/MANIFEST.MF.O.N.0..G.?...l.y7.R.....qC..i..;r...\|;I......Z....<..j.:.v...S.{s}..;!7..6.3....pX..Q.Q..CN.~\|K....;.]M..x.B6..c;c..n^......g.b.....h.K..{E.R.JN+d.\3..'...Vn`..J..Q.ta.?......26....`aj........d.w.v....Q.3iO...Pq..e..!.8..`2..0.. JX.Y..4.K.. ....p...3.B...q...3N.k.F...T..0..H.o.r.....kt{..~.PK.........xbL................org/PK.........xbL................org/apache/PK.........xbL................org/apache/lucene/PK.........xbL................org/apache/lucene/search/PK.........xbL................org/apache/lucene/search/join/PK.........xbL..).........;...org/apache/lucene/search/join/BaseGlobalOrdinalScorer.class.TkO.P.~..[-2......V.U."b. .YB.d..zh......`?..M......(.{.J.c\l.7..}.......?..aI..r.y..LH3.a....L...X.fT..c..s.)...u?.1y.[5a.MKx.t<[.....^...(t......r.x.....)...U3.V..".."...:..@0.5J...p..U...V8;.p...^........TN....m.l.m.<.u.........JXsh\.....g.............lZ..=.

C:\Program Files (x86)\DocFetcher\lib\lucene-memory-6.6.3.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	46556
Entropy (8bit):	7.922816095531125
Encrypted:	false
SSDEEP:	768:t7xt4K5zjeHGogwmclrg0Vx4nQUX6vI+8SjQd0grN/EIAIsju3W:t7ofBRgKvbiN/ELjum
MD5:	3896BB471641EC7717C955730B3F7A71
SHA1:	6A5503AB90CDE6B4BF5927A5AC60268FF8A49D7C
SHA-256:	4BCB8B3CDC52097967AB3C73A43332FB025A464747CAD0CAFBC7838222ADB5D9
SHA-512:	15B7D568E951B0B32F1A93699DA10970DC121FF2FA64FA7FA79C15E0F4C0F6DD3DF76D77509053E705E6DED3263F0F6E14DA6CAD3288BF8A2822555A3D1BD40E
Malicious:	false
Reputation:	low
Preview:	PK.........xbL................META-INF/....PK.........xbL..../...!.......META-INF/MANIFEST.MF.O.j.0.....{l)....-MS...Pz+..N..d..4.~{m.B....;3..."u]...w.........#d.I.A......x...aIo..>e.S....X.!...:..L.\.Y.........7....r....U....k&'#...5./.P.U.....]3.'.r.Vm`.....[c..+..1.Y......l..sS........$#.C.5.v'.\..Lx....YQ.A..."UI.....0...F.L.. .....f.C.s.R.P.2.d._p._...0mW7Hs.[....)...XI.Fw ...PK.........xbL................org/PK.........xbL................org/apache/PK.........xbL................org/apache/lucene/PK.........xbL................org/apache/lucene/index/PK.........xbL................org/apache/lucene/index/memory/PK.........xbL...3W...9...2...org/apache/lucene/index/memory/MemoryIndex$1.class.V.S.E..l.8....Rj.....+j.. ..j4PKR*..6.%9.....O.......C..Q.s.?..q\|...42.&s.....yo.{...../...N...%....a>... .e...v..O$...?K.s.d..a..w.......\[LBCI6.d..D........4\|...C.3.....7...y....s..]uy.....KfJ..,...B..,..\}>$j...U.7.U....+L.rg/..3.....}...E`.._j.l..zos3...6s.aw.....w.

C:\Program Files (x86)\DocFetcher\lib\lucene-queries-6.6.3.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	237905
Entropy (8bit):	7.858768742317116
Encrypted:	false
SSDEEP:	6144:L6T5s1UVz75A1XAyI8jLHBH8NJyrtRvFJleQ/X:L6T5sGddA13vVKJqtR7QA
MD5:	76C6F30FF4A4BA895EB762E54C51E52E
SHA1:	4E7939D8F6360E144993E6CC0FA62376BD89990E
SHA-256:	88AC65A9692C24ACD394653C7516E684D7123548D5AFEF6109CEF25B3E6BA0E7
SHA-512:	2C0286EA23FDAFE25EE0C1621C8E4BF7F02A5B2DF3A77E3CF8E8B7AE1AC407E0A4238EB63A0DE5EBE7659585EB06538980F41EF5389CCED34446DA2916BFB38A
Malicious:	false
Reputation:	low
Preview:	PK.........xbL................META-INF/....PK.........xbL.j..0...".......META-INF/MANIFEST.MF.O.N.0..G.?.....y7.R.....qC..I-%vp...\|;I.....e.;3.........M/..y.u...Yv\l.Fl$.^.:+..bI..&}..w.0..S-.#..tz5.p.b.h.V.t.p;.t...E5.'.....=>.y. P.....YI1.....{.I.............tg.!.b/..R..6S.......[=.r...].5..G..y.Dx..%.EQ.A. ."Qq*....0...F.O..p...=7z.c.S.......2.d..q._.7..m'.$...@r..AzHl........PK.........xbL................org/PK.........xbL................org/apache/PK.........xbL................org/apache/lucene/PK.........xbL................org/apache/lucene/queries/PK.........xbL............#...org/apache/lucene/queries/function/PK.........xbL............-...org/apache/lucene/queries/function/docvalues/PK.........xbL............/...org/apache/lucene/queries/function/valuesource/PK.........xbL................org/apache/lucene/queries/mlt/PK.........xbL............#...org/apache/lucene/queries/payloads/PK.........xbLs]..........1...org/apache/lucene/queries/BoostingQuery$1$1.class.U]

C:\Program Files (x86)\DocFetcher\lib\lucene-queryparser-6.6.3.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	405560
Entropy (8bit):	7.865514589952801
Encrypted:	false
SSDEEP:	12288:RbOQpCBiBdKfMFgWq0RQE6Wk+KuHltNrpF:keBdKBl0+E6FbuZD
MD5:	D036361116B83F5CCBDE83CBC4E49533
SHA1:	8DDE5F08816E0089FA73169FD198BC1FB940D703
SHA-256:	29859314C14D4E74A806BCB5B7259315C47CF21DC5C18C652DBB9BCC8371DCFA
SHA-512:	A387FD259C27166AD3FF53CE4ADB4377B61FD3BA544F63CAF6F9CE612798805A6C12694778BBEC83F856527F191B3E5DA662B009304A9FD54131895F3C7B89FF
Malicious:	false
Reputation:	low
Preview:	PK.........xbL................META-INF/....PK.........xbL.E..4...&.......META-INF/MANIFEST.MF.O.n.@..#..>.......[..R......,&A.].,J{....%i..X....yBU..Y.J...JAx.u...Y.(...6.s/t..!.T..Q.x.]..%.Xs!...[.\M.\...5.R.V....K.Y}ZR.}..........{I.\'kIVe%....l=..'.2B#..R.J..GO.E.9...y3/..B...c..........U1.\.ikjH.g.<}"<v.B.<. ...H..e.....~8.3J...8.]..A.F.hh\|.....}.Q..T.3N.K...i..X.{#...<....k4..{.u~.PK.........xbL................org/PK.........xbL................org/apache/PK.........xbL................org/apache/lucene/PK.........xbL................org/apache/lucene/queryparser/PK.........xbL............(...org/apache/lucene/queryparser/analyzing/PK.........xbL............&...org/apache/lucene/queryparser/classic/PK.........xbL............,...org/apache/lucene/queryparser/complexPhrase/PK.........xbL............"...org/apache/lucene/queryparser/ext/PK.........xbL............'...org/apache/lucene/queryparser/flexible/PK.........xbL............,...org/apache/lucene/queryparser/flexible/co

C:\Program Files (x86)\DocFetcher\lib\metadata-extractor-2.11.0.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	672656
Entropy (8bit):	7.9296603585502865
Encrypted:	false
SSDEEP:	12288:+o7NNjNgnKzbopOQctGDAxWHT8NPGmcecgIq+L6j1mVnM9/4WgTIWTA:+ynjNDv0OQctGcxJO/LQ1Fnr
MD5:	E95F394E786C0C7F22E61BFF2E54FF8D
SHA1:	5F11883F6D06A16CA5FB8A9EDF7C6C1237A92DA0
SHA-256:	F5EC56C6B01AFBFD7019E2DA73BDEC5D22C60D620C0E8043E6A85ADB554D0DF7
SHA-512:	0F973B0BE4E67B2404B77D2FC9BA5AD1B29F969D7DC49C84BAAFF66C99F0600276D3B454812A6554E9DCA3BF1AA1AD7297692D2A7A9DEC9368F3A30577039EE0
Malicious:	false
Reputation:	low
Preview:	PK.........XxK.s......~.......META-INF/MANIFEST.MFu..N.0.....y..+.......V.&....[..J...'l.v..,..}r...(.\|..l.J.0+...=9..y.M.Jl"}..'J7.g.=).. ...#j..k.....i.1J...d......\}_T...[s..^..m.,.u.).'.N...:D..P...1.#!.9_y.Pw$Z.$/.9...y........Y...PE.=Te...j.ux...M..N....."e..PK...s......~...PK.........XxK................META-INF/PK.........XxK................com/PK.........XxK................com/drew/PK.........XxK................com/drew/imaging/PK.........XxK................com/drew/imaging/avi/PK.........XxK................com/drew/imaging/bmp/PK.........XxK................com/drew/imaging/eps/PK.........XxK................com/drew/imaging/gif/PK.........XxK................com/drew/imaging/ico/PK.........XxK................com/drew/imaging/jpeg/PK.........XxK................com/drew/imaging/mp4/PK.........XxK................com/drew/imaging/pcx/PK.........XxK................com/drew/imaging/png/PK.........XxK................com/drew/imaging/psd/PK.........XxK................com

C:\Program Files (x86)\DocFetcher\lib\mime-util-2.1.3.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	119169
Entropy (8bit):	7.960561347286593
Encrypted:	false
SSDEEP:	3072:SjAHmo6ySee9N3mPlELuEh0AbAscWoN0Cj9/JsvWwf/BFeyRI:SMGo6HN3mPqLuEh0AbXEN0CjVJsvWi6
MD5:	A89705BF6C99398AD60E3AEE0A6FD8C7
SHA1:	F266500AB6B9CC71BF7A143F1147AA9D352A4202
SHA-256:	3BF744335B55E361998CD44605C043A8BCDA64D39B9764F7BA932AE33C11D8C3
SHA-512:	D153720A52041EEFB6ADA122AEE3763C070D6D6C1B0B976E5427DC25E680A5963801E4D6A9EEAD6C69F5213A80DF272831836D53AD5B892B7D0193C02DE2B452
Malicious:	false
Reputation:	low
Preview:	PK.........;%<................META-INF/MANIFEST.MF....}TMS.0.=.3..;...+N...p(..LL.R.v..N....#..=+..(iO.....r.(.....Z.`..8.okm\r.......g...9.D...y.-...p....O.q.m.+.a..i.dV.....l.U!........W.w...!..I8{...8....$..a.5.../.K.....(4q.Kk9..U$)K...I..G....InyE....U;-9...!\.G......^.\|...5..N..Pq..q...g..f.ygC?..I`..Q...p.R..*.w...h........>tDol.....x.Ks.......:M...1I...e.....J....tr....u..>....B.,~...20.b,..././...dJ..n.+....ka{%@X.`EU..N..<.[q)G .r.`..L.m....]..V{.#<.5..yD.O....;..ni...:..kj.......B...P.w`..[.....7.2=5........+...tj.t.p.....p[.r..&.....SBC.-..........0.M..&..C..J....%...I.......qt]}.....l..}>..#.Iq..PK.....#R.......PK..........:................LICENSE.txt.Zmo....^ .aK....e'M....Xr...I.......#.>.2.w.._.gf_..e..V!h.....<........J.....wO...e.6....E%.&.Q.....?.j=....v....]..z...../~.K.o.....+..fq5...,...[......ooo......u5.........-...W... ...O.3.7....]'6J.b...e7N......N...JX....kz\...F....H....NU.X....._..k..Z\|+L._4.3..Q.p,..G

C:\Program Files (x86)\DocFetcher\lib\net.sourceforge.docfetcher_1.1.25_20210525-2212.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	3643262
Entropy (8bit):	7.942939793806878
Encrypted:	false
SSDEEP:	49152:dLvJolxlkCdJML9PEjdE9U6WZJjQZ9AnhzA4vA87lOJ/aP3VFmanHRiSgh57j+Eg:dDWOfJEJi9Wr4m9dWsSaxfatydDhXD
MD5:	6B5C4A8713C36467E824AD59F80A1916
SHA1:	2353DF7F5E608178361F520F592E58EF80ACB00B
SHA-256:	421DE6A09F3433598AF75EDB535AF3A8E9BDF51995327F2D00E95BD3CC86183D
SHA-512:	4798603724AFC6FBE2643F228AAE014A2E281B2597F9268FEF1267C0F77BD19D1D6D7FE100F91F1904D229F4E7749FE7C5364CC30965588D36B3136BE1A1E374
Malicious:	false
Reputation:	low
Preview:	PK...........R................META-INF/....PK...........R...~...........META-INF/MANIFEST.MFM.... .Ew..........u.i.\........{..z.g1.<.*.K.4...g...N.P4..^...)...........a.Ou..v1.[B./..g..$..)e...J.d.>...E.v.M..PK...........R................net/PK...........R................net/contentobjects/PK...........R................net/contentobjects/jnotify/PK...........R............!...net/contentobjects/jnotify/linux/PK...........R............"...net/contentobjects/jnotify/macosx/PK...........R............!...net/contentobjects/jnotify/win32/PK...........R................net/sourceforge/PK...........R................net/sourceforge/docfetcher/PK...........R............!...net/sourceforge/docfetcher/build/PK...........R............!...net/sourceforge/docfetcher/enums/PK...........R................net/sourceforge/docfetcher/gui/PK...........R............&...net/sourceforge/docfetcher/gui/filter/PK...........R............(...net/sourceforge/docfetcher/gui/indexing/PK...........R.........

C:\Program Files (x86)\DocFetcher\lib\nlp-lang-1.7.7.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	8102465
Entropy (8bit):	7.998628539229693
Encrypted:	true
SSDEEP:	196608:zffh++B4S5l1bWzQc+cL4kSlrXxsC+LTz/+VINOjqC0oTKG:1+mt5l1Wt9SiHNNOMw
MD5:	00150E03AA6C198DB39BF218D8286548
SHA1:	D664CC70F9D166D9341B410CDCDDAB57F1A4F3CE
SHA-256:	4C42DBBB80F247848DEB7B0531A3B904F32BB9FAAC39FE816DF0AD5489BA1B39
SHA-512:	F4A936434A8FC1434A7D8B5D14DFD790A6EB98059FCA7810A7D0B3E252228C4EAD8EE099D940A4759116EB4F5B49782ED59F81255BA6BA653CA0C551C05981D2
Malicious:	false
Reputation:	low
Preview:	PK........}..K................META-INF/PK........\|..K..^.k...........META-INF/MANIFEST.MF.M..LK-...K-...R0.3..r,J..,K-B...V..+.$x..J3sJt......Kx...R.KRS.".........e.y..z`#A.St.R.AVX.....r.r..PK........z..K................org/PK........z..K................org/nlpcn/PK........z..K................org/nlpcn/commons/PK........\|..K................org/nlpcn/commons/lang/PK........\|..K................org/nlpcn/commons/lang/util/PK........\|..K............$...org/nlpcn/commons/lang/util/logging/PK........\|..K............#...org/nlpcn/commons/lang/util/tuples/PK........\|..K............-...org/nlpcn/commons/lang/util/tuples/valueintf/PK........\|..K................org/nlpcn/commons/lang/viterbi/PK........\|..K............(...org/nlpcn/commons/lang/viterbi/function/PK........\|..K................org/nlpcn/commons/lang/index/PK........\|..K................org/nlpcn/commons/lang/dic/PK........\|..K............"...org/nlpcn/commons/lang/occurrence/PK........\|..K................org/nlpcn/commons/lang/f

C:\Program Files (x86)\DocFetcher\lib\pdfbox-2.0.13.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	2544500
Entropy (8bit):	7.970207397071309
Encrypted:	false
SSDEEP:	49152:mh+hd5BPPniISwUlonTdQveK9jNyo7G+1IF:mwBXnizkQvb9MlF
MD5:	91D98C9A48CB6E89A3A1EEB4294F2665
SHA1:	389ABCA354E682D65E500C57856B75130D015E77
SHA-256:	A373578F0EFE7411E1C63181512BBB93F9EB528DD9C05655986CA5E372FE3634
SHA-512:	1B4D3D1276CD74FB4B3CE623B10D447758094C24C9585A5E9EEF5A0606195F6638D6D01D0EECEA05075E127CB354B832D52EC6F5B0BBB9DD2D01FFD8FE94F7CA
Malicious:	false
Reputation:	low
Preview:	PK..........\|M................META-INF/MANIFEST.MF.....[.o.8.....!.........x8.H..!.....M.[.I.K.....3....v&...RE2.y<...f........Y.dr.-....$..f.."C..<../...O_.>[.>_..FD..........,.O.......X..$.....L.JO..{..,.?.>\|\|'w^$n2.=z".X..'^.7Y.......G^.d.mev/.......{..61OT..g....?_x.J../^...F.\|...e...?..'9/$s..n....Q.>........W.S........wZ...b.n..~w...H./d`.j.B.Z.'OB..,v-Wj.2.}. ....J.Psyv\|.>.L.PoH9..{.....o.f-`.......c.=[.4..._>..oO..........^.v....G...$..a..2..L..29..~.tH.n..U..m.q....eLI.v.N.z..;.V.D......."..+2....$8.1ET..vA.Z6e.v..Z4W.b-A@j..0~..%...D*.........O..<....b\|.....k#..h...E....."...p+..D$...yA...]k.H1..yX..fmD.s7lM.R...+.G:T._..X........u)..m.:.a..QJ...e6..N.l....-...)......T....fN."[p.5.#.....a..M.....j8...r.p...cj..-.K8..n.A...~B.,5%'...^..,5l.R....d.,.j9:.O.1....U..?.&I...X...'....Y.6.t.=...........&...D..^@rc.0..hqZ8.a......)8.^?s.4.{.\|.4.+.......{.9.e.j...^]./...yj.tk......C!.;7W..m..........4......2...S~.3....,b.Cs..X.....C#R..d..

C:\Program Files (x86)\DocFetcher\lib\poi-3.17.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	2701171
Entropy (8bit):	7.929883363867002
Encrypted:	false
SSDEEP:	49152:HxUOS1YCFnUDqAi6NncymFXCUJtVMAY5U6lSertPCR/BIAtbciM8:RhS1YCFHb65i0U+pWDertPCR/Lt4G
MD5:	243BC3D431E4FADB79738719504C64F7
SHA1:	0AE92292A2043888B40D418DA97DC0B669FDE326
SHA-256:	30181821DD2E849727B638B9E329AEFF4A64F3445C4142B13CF7A18BB3552EDD
SHA-512:	A0C018D8999356000B1077B343AAC1A2E9050F84E3097E28B77869BE9FC23475D4AC59BF375A2C96B6D824F06BA2D1873EE8D4495FB9BB412F848379AC7D11FB
Malicious:	false
Reputation:	low
Preview:	PK........,.(K................META-INF/....PK........+.(K..@.............META-INF/MANIFEST.MF..Ak.@.........vQ...[.(x...^.f..:+.+!..j@.....}.......8..R....=.}..6? ..............'.~y..(...'..q._}....z...c.&../...sVt`.F....%..f..G...A.~[.TY..r\z.(l...x.=U..Y.v..@.tA,..t..J.ug....Y\|@.?..?PK........'.(K................org/PK........'.(K................org/apache/PK........,.(K................org/apache/poi/PK........'.(K................org/apache/poi/common/PK........'.(K............ ...org/apache/poi/common/usermodel/PK........'.(K............&...org/apache/poi/common/usermodel/fonts/PK........(.(K................org/apache/poi/ddf/PK........(.(K................org/apache/poi/dev/PK........(.(K................org/apache/poi/extractor/PK........).(K................org/apache/poi/hpsf/PK........).(K................org/apache/poi/hpsf/extractor/PK........(.(K................org/apache/poi/hpsf/wellknown/PK........).(K................org/apache/poi/hssf/PK........(.(K...............

C:\Program Files (x86)\DocFetcher\lib\poi-ooxml-3.17.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	1479023
Entropy (8bit):	7.956770241141475
Encrypted:	false
SSDEEP:	24576:PG5eUVdHpCk9hJFirXpSn3Wo8R1QfVCwdjpHwmO6cuMGtgoPNP6s6b6:PGMUrHpCWXFirXpk3Woc0CwNpHwmO6cs
MD5:	16D7C8CCFC6DDEFD890194F46BA4C66B
SHA1:	07D8C44407178B73246462842BF1E206E99C8E0A
SHA-256:	AC915547EA3B775A810CC26149711682A23404E3D6D0B239915AC0C9305EE3C3
SHA-512:	D378E8E3DB6E56BA80BAD0CDD7AFF4362142088AD102681496656050C2CE25FD3D8B091CAD98A5892E505529BF3D2B87D41EBF840E83E680B39C814BA0AFD224
Malicious:	false
Reputation:	low
Preview:	PK........,.(K................META-INF/....PK........+.(K..@.............META-INF/MANIFEST.MF..Ak.@.........vQ...[.(x...^.f..:+.+!..j@.....}.......8..R....=.}..6? ..............'.~y..(...'..q._}....z...c.&../...sVt`.F....%..f..G...A.~[.TY..r\z.(l...x.=U..Y.v..@.tA,..t..J.ug....Y\|@.?..?PK........a.(K................org/PK........a.(K................org/apache/PK........b.(K................org/apache/poi/PK........a.(K................org/apache/poi/dev/PK........a.(K................org/apache/poi/extractor/PK........a.(K................org/apache/poi/openxml4j/PK........b.(K............$...org/apache/poi/openxml4j/exceptions/PK........a.(K................org/apache/poi/openxml4j/opc/PK........b.(K............&...org/apache/poi/openxml4j/opc/internal/PK........b.(K............2...org/apache/poi/openxml4j/opc/internal/marshallers/PK........b.(K............4...org/apache/poi/openxml4j/opc/internal/unmarshallers/PK........b.(K................org/apache/poi/openxml4j/util/PK........

C:\Program Files (x86)\DocFetcher\lib\poi-ooxml-schemas-3.17.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	5924600
Entropy (8bit):	7.816085571663569
Encrypted:	false
SSDEEP:	98304:o2jb2NSmGwmEm4EbfkPo4H2ShYqX7Qg5UyfC+69CxIVMaA5C2l4r:vWUmGwmEiAXnfP6X6bA2lY
MD5:	DADBC17356F315E5A753D4641DB26BA9
SHA1:	890114BFA82F5B6380EA0E9B0BF49B0AF797B414
SHA-256:	A2070FBA24D38BA13F37FB391631C2BCABC65F576A911DFFA83DCA5CEB3AFF1F
SHA-512:	11D5CCC8D0B6785A1608AD15B531364FCB8853DFF2FCECF38B5B011AA213A40E3B3A29694D16A64158ADB84830CBB9E10B7E33A4686C71F094F09E561C699830
Malicious:	false
Reputation:	low
Preview:	PK........-.(K................META-INF/....PK........,.(K..@.............META-INF/MANIFEST.MF..Ak.@.........vQ...[.(x...^.f..:+.+!..j@.....}.......8..R....=.}..6? ..............'.~y..(...'..q._}....z...c.&../...sVt`.F....%..f..G...A.~[.TY..r\z.(l...x.=U..Y.v..@.tA,..t..J.ug....Y\|@.?..?PK..........(K................com/PK..........(K................com/microsoft/PK..........(K................com/microsoft/schemas/PK..........(K................com/microsoft/schemas/office/PK..........(K............#...com/microsoft/schemas/office/excel/PK..........(K............(...com/microsoft/schemas/office/excel/impl/PK..........(K............$...com/microsoft/schemas/office/office/PK..........(K............)...com/microsoft/schemas/office/office/impl/PK..........(K............#...com/microsoft/schemas/office/visio/PK..........(K............)...com/microsoft/schemas/office/visio/x2012/PK..........(K................com/microsoft/schemas/office/visio/x2012/main/PK..........(K............3...c

C:\Program Files (x86)\DocFetcher\lib\poi-scratchpad-3.17.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	1390360
Entropy (8bit):	7.950389987835768
Encrypted:	false
SSDEEP:	24576:KhMnkQM9ngBvuNOaJOp0nKyITbPamaQeflhop8uFvkCLz0xFpA8rupzFHoj:/kQM9ngYNOYOcKyiPamaQeflhopDv9Yr
MD5:	09933911F486037EE405E9F7EA0B04D0
SHA1:	85D86A0E26C7F5C0DB4EE63E8C7728E51C5D64CE
SHA-256:	ED08661FFA557A69930BC6222334802DC76614F98ED9F7E16AB05B85005AD955
SHA-512:	CA3F5F781725E20A8BE4EABA2AB34155E0882C249F4502B3893DBE4DA8E50A5B7A3224EFE743CFFED1A1A8D596A00FE61F88B0F538F315B0EE12F150EA78EB71
Malicious:	false
Reputation:	low
Preview:	PK........,.(K................META-INF/....PK........+.(K..@.............META-INF/MANIFEST.MF..Ak.@.........vQ...[.(x...^.f..:+.+!..j@.....}.......8..R....=.}..6? ..............'.~y..(...'..q._}....z...c.&../...sVt`.F....%..f..G...A.~[.TY..r\z.(l...x.=U..Y.v..@.tA,..t..J.ug....Y\|@.?..?PK........B.(K................org/PK........B.(K................org/apache/PK........D.(K................org/apache/poi/PK........B.(K................org/apache/poi/extractor/PK........G.(K................org/apache/poi/hdgf/PK........E.(K................org/apache/poi/hdgf/chunks/PK........B.(K................org/apache/poi/hdgf/dev/PK........B.(K................org/apache/poi/hdgf/exceptions/PK........B.(K................org/apache/poi/hdgf/extractor/PK........B.(K................org/apache/poi/hdgf/pointers/PK........E.(K................org/apache/poi/hdgf/streams/PK........B.(K................org/apache/poi/hemf/PK........B.(K................org/apache/poi/hemf/extractor/PK........B.(K......

C:\Program Files (x86)\DocFetcher\lib\py4j0.10.7-py3.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	121088
Entropy (8bit):	7.956848858096715
Encrypted:	false
SSDEEP:	3072:dm7VKHeE+R4pXwnF8f2cBTBu2wHdTv+tAl:dvL+R4pgnq2Cu9Dam
MD5:	7C55B42F8EE1E997D72D48459D7D9A01
SHA1:	5C8191939C13F1DB1E4908BE4E18E59F1BD9B1AB
SHA-256:	5566BA49D64CB88F735F2E4DE3B496ABC5E6B8C9A9BEB9EA0DE1ACDB455F8368
SHA-512:	577B49758A2738ADCC344D4780C5F97D77881F68ECE646440A6A0ABF9EF619C591087094951056563D7A73B32EC34E1E3D0530D84155137D8989F79D5C00AA0F
Malicious:	false
Reputation:	low
Preview:	PK..........L................META-INF/..PK..........L................META-INF/MANIFEST.MF.M..LK-...K-...R0.3......PK..........L................py4j/..PK..........L....C...,.......py4j/Py4JPythonClient.classm..N.@..g.).E<.......p.!h0..1....NJI.K..d_.....2nWb.v/.....gf..?>.....h:pJ.."g..$.3..n.F..)...........UN.(...N....'..z.F...~.......{&.1&1M.=.?.....c..T.N.!W.."J..........v9..........T6......){....#W.I..]/..33..(.(.\I..........U.....qz'....3..3.d.W.b!'x..H..}.u.a....4..K... {..9......%p,.P..B.r..-.k.@.......c..p..PK..........L.?..V...(.......py4j/DefaultApplication.classuP]K.A.=.......}AoZ.V.f.Q..R.!HO.M6...:...^.........Y.p...s.\|}.\|.8...(.&J&6,DP.a...C.LzR.3D+...q.?...#=q;.D..[.U....n..R..^....].J<...}W....W.....C...t.....:v]....BC.tH".G....`$.....+.....J}.......z.....L........Y.......v.;.Q...B..M............/...)&(...al.....-..X...l.p.0...s.=....SD.SD..1....#..J..6....q.Y...:a.....C^..PK..........L...............py4j/Protocol.class.X.\|T...d2w2.y

C:\Program Files (x86)\DocFetcher\lib\slf4j-api-1.6.1.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	25496
Entropy (8bit):	7.8088982021573585
Encrypted:	false
SSDEEP:	384:OLqFUJrl1T6gYHEEADOHX/ROX42u4UwQuTFwCc+w4sUIbev7agclYPLdezk:OKUJrjTJYH7aOHX8r3OXJQaNYPLdeQ
MD5:	4D619911EB06809A9B924860161C6E18
SHA1:	37EC7B9F4640C525A3B00B6FCAC9CCC99F361ED3
SHA-256:	92231F4B446CCE485A3FD2241C387518E42AF1A2E0584EDF44D55C159D88FFC3
SHA-512:	62E477DF6193BFFE0EE5583CEA142E69F2E960048CFEB9090B43587690F7DC24FE1A093FC1EF15CAC0C1A51F23050DD9AECE971B240581FBF0D629CA2F4428AC
Malicious:	false
Reputation:	low
Preview:	PK........'..<................META-INF/PK........&..<.,......).......META-INF/MANIFEST.MF.R]O.0.}o....`......@.... ...]..]...w.2.1....qo...w.{...cfB...%...X...K.."gg.....C...M.T.`.Y..dZ.... ....y...c1x..5hb...r...&cSy.z7.d....5....Yj5.`..U.......K....g.N?..)..4.W..../..W.[0q.B.~y.....cV.U..8:..^.).e.....p..@.R..m.<_J..}....hr...}.......$%=...V..Ls....V......%.PK...........<................org/PK........'..<................org/slf4j/PK...........<................org/slf4j/helpers/PK...........<................org/slf4j/spi/PK...........<..1.....&...#...org/slf4j/helpers/BasicMarker.class.VYs.U..z..d.a..@"..ff.h.......'.L...:...;..D.wq_.5...FiQ..$F\P...7....'....N.0..\|.{O.>...;.9......@;fB.c4.5...<.T".. ....1!V....!..LB..!...u..&r...x... .......+a...a...xqX...x8.&d...8.Qa=V......kG..x.t....l....\|./H....d.T3....=.%H.$T'.=g).5.d.!...g..I...*!..P.....g.S...[%.:..jZMj9...>yK...z.....$....T..o.{@B.FM....5_.5:.].c.g^..t./?9....H.Fa..]!.>;.>k\.IX.4.L{.;.9.>.f.H

C:\Program Files (x86)\DocFetcher\lib\slf4j-nop-1.6.1.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	4812
Entropy (8bit):	7.393614297654762
Encrypted:	false
SSDEEP:	96:VPQXOCOHzTul7dWxkK2hO6L3t27IQvCWVxJyARao1:NQUfIIx+O42MQ/cin1
MD5:	996F5AE2EB2F3D2218FFBAE50E22A9FF
SHA1:	065E922FB8EEBDC9A94650C52BAFA1AEC7E85FA1
SHA-256:	486029A5E68014D27B15062365960163352B5E13EC759A925A847C10E1F80D57
SHA-512:	CC5510BBFDF3874E6C8079639FC84AF7C1417B386BD68D136F15015906D2888A6092F5D068AF657016839D3D4EBA2400EF81C77F73671F34500E27E3F5C306DC
Malicious:	false
Reputation:	low
Preview:	PK........'..<................META-INF/PK........&..<.E..+...K.......META-INF/MANIFEST.MF.Q.n.0..[.?...P.!U....<..ke.%lql.v"..&.B@.z...c...q..5..J.4.;...x...+<.p.-...y1..$lx..@.x.t......(...a..;a.d_....W.@..`.`c..2V.....7...t.2A.6...}?..G..d .....+t...I.........P.c.Q..)..R.-m.7.k..2!]~.zc..xk....h ....U.H.h..z.t.]F,..=...2..y..i..L...X..T.]....=};.....I.....]..I#..+{W.]N.u.....PK...........<................org/PK...........<................org/slf4j/PK...........<................org/slf4j/impl/PK...........<J./,&...+...'...org/slf4j/impl/StaticLoggerBinder.class.T.R.P.]...`.r...(...^.(......<1...&$L..."_.(02....Q........Cv..k..:'....?..(b.......Q.."j....hF\...?..3._...d.~...)...c.;gy.....9..l=''V3i.'.i.c.}{d7......ZN6.y..-.3..$.?&........Zb%....\|Vb.b.hiF..u..Tr.i...J.@1...?CgY.\..$.9...". B;...Z.P:.$W.i*k...#....J.0Hy..Rk.j..C_.....1.T....j.`oS.V.M.<.q...I....5...S.5..x..x.....H....(.c..j.~..En_Q)>....-....3<...M;i..[...ok.. ....9..X..VNMj\|...EyN...R.d

C:\Program Files (x86)\DocFetcher\lib\swt\swt-4.19-win32-win32-x86_64.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	2418710
Entropy (8bit):	7.97978552580058
Encrypted:	false
SSDEEP:	49152:v6IgXkdmzKicpuL23I6ezmBCCld9YFLw3W0VJDGJNqDmblcC8IL4BOtHT7:ngvKicwL23leCbn9YFLsGqki8L4BOZ
MD5:	E310523FB3DA8633254299B4F17B3FA9
SHA1:	88344DE97B7C4BDF3EEEE94A8F5046D5525C16B1
SHA-256:	AE230518CC93E299D2897E7A62D8D830B3096AC8B3439DBFC389714A9FD1ECF5
SHA-512:	8A0511CC6AA6BBCA5030793C5B1EC09E288874A9932FB16A213A4A92BE2F78CAA2CECD4B3CF029F7586AE8DB7FB4B584A71594FFFA95C9A0A604A89A9CB63276
Malicious:	false
Reputation:	low
Preview:	PK..........cR................META-INF/....PK..........cR.#..............META-INF/MANIFEST.MFU....0.E.@.!.".M[......t..QB\|.@.....F...s9G.....g;9..O)Q.Q^..X..(R^QR#...d..@$x...Am.`..~B."....NI.Jv.......M/.c[^..........b.s!......,..Q...PK........8.cR...fc...........WebView2Loader.dll.}{`....Lv7..Y....U..Fm >..t.v..J........R..(.8Ier.....~Z[..i[....I .....i%._.....c~..;...V.....df...{.=...w..T.. .v.....w.W..._....f..+....+.-.....<....<..=..#...{.G....aO`.T.C..... ...a.O3.3.4.K......K./...G..b..b.k...=M...G.}.... ..l.29Y)....l....,...<L,M..8..H.@x..._]..4.tA..E..]../o..c.E.@.M..".k.kEo.....w.v........C8..&....x.}.}...%D...ox.....o..g............dcD......+((.x@....G.).-\......qa......`v.e.V../.o........D....^.......878G...._Pn.......u...].f(.Q.b.Q..g.S.d.N.r..R..5. .(.1.:&.;]...WEA.6....}.....3.r0.+..-v........T...b...R.f4.1.x.3.o.....".-...J..U..*5..A.J....l,v.2A..K.M.7.@~...>G.2..Jw.c.f.Kv..;........P...(....b\|K..~.m.M...6)i.z....z.}N.#

C:\Program Files (x86)\DocFetcher\lib\swt\swt-4.9-win32-win32-x86.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	2383248
Entropy (8bit):	7.976728006137126
Encrypted:	false
SSDEEP:	49152:FlLdYb9zx60037YJqqFS26ypbcxKl+dOrbV5VZCbJ:DLihzxY3M62PixKFa1
MD5:	1709FC07EC500859D3EE58557C94F24B
SHA1:	272B9918A7468AC705C6F8F205AC80B0CC86F33F
SHA-256:	0DD32F179A0DC16443C1ABE7D705E79F102196F155FD230B20D37EB724CA4303
SHA-512:	36C708DDAF8CB1FDD60C4B33B6EB0BB81A9FE660063D804EA2629DC28237995BCDE244F9436C9DB9440171D2C1295158F6FC0A69308FAE8967C977577FEC26B6
Malicious:	false
Reputation:	low
Preview:	PK.........A&M................META-INF/....PK.........A&M...<x...........META-INF/MANIFEST.MF.M..LK-...K-...R0.3..r.C.q,HL.HU...%-.Lx...R.KRSt.A.-.....t....4....sR......K..h.r......[).g...A..\...+...3^.^..PK.........@.M...............swt-awt-win32-4919.dll.}`..8<.;.....@.A..........`@6.6..#.DL.V.t..a..J ..h&.m....Z[(.Zm...V.e1..G...!.....@.....y..n..........3.<.9_...-.....q.....q{8._>.....8n..7Fs.&....Pth.]U?^..v.O....3~x.O~.S1...3.I?...O2.~.4....zvrrR..c....y$.........4....E...}A.Zv.m..{.k;Y...6J..~.c!...Z(.#v.....v..=....Va{....."...<...X^7g.6.0.....6kyt.......`i#.Y.:.;w...........]...u00.<..?..-d.`....2.n..H....\....$..9.<..o/>[\.I....t.....2.....O...Nx.....?.,.....q..`EhX........_.CH...kc.Y.W.[.z.O. .......rK........[Nz..4..E.]...8...UM... ~.Jv.R...H}.x.G../...p....b .T...R<..H.i^E>-.g.<D...Un..!..F...8.X..BV.&.x=..u..*f...nx,Y+...g...]...........G./.k.U.....H.G.E......]#..L9.!S....1x1;.......Z.L...J <U.(M..ea.\m.lO......,.N..U...;..V....P...

C:\Program Files (x86)\DocFetcher\lib\truezip-driver-file-7.7.7.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	46331
Entropy (8bit):	7.823720652221897
Encrypted:	false
SSDEEP:	768:5oPrQL0MV0Cvda7Fzk68gLdTsTeiAwXEtEdZIYCEWHDzo84zV/4w:ycX6Cla7FzkJaT2eiHXEtEdZJ0zo84BH
MD5:	B643E926E54F417DD75512384A6C2325
SHA1:	19F6177EE564448CB609CA61D21F47CC17ADE552
SHA-256:	FF520E4A26277643E0B17382BB39E286C82DD1527BF7C770CEA38704F59B383C
SHA-512:	4D5DD8F9290E0784D30C03D2FF9DCAE94C6657F514DCCCD531EC95C4E1A10F5AC359BCF95D4FF4BC1B709B4E005BF22EBF86BAFDBB5B9C548EB74E4164FF131F
Malicious:	false
Reputation:	low
Preview:	PK.........xE................META-INF/PK.........xE................META-INF/MANIFEST.MF.M..LK-...K-...R0.3..r..).u..RH.(.,..L....z.d........r9..&.....:.$&g..&...)......r9.%gd...!,..I.(-V.I.r.r..PK...B.+q.......PK.........xE................de/PK.........xE................de/schlichtherle/PK.........xE................de/schlichtherle/truezip/PK.........xE................de/schlichtherle/truezip/fs/PK.........xE............!...de/schlichtherle/truezip/fs/file/PK.........xE............ ...de/schlichtherle/truezip/fs/nio/PK.........xE............%...de/schlichtherle/truezip/fs/nio/file/PK.........xE................META-INF/services/PK.........xE............7...de/schlichtherle/truezip/fs/file/FileController$1.class.RMo.@.}.q.\j..i).5m.B."n ...)"i.&B=m.m....).....g@B....~.b.T@..Z..7...ig~..~......X(..b..k..Y.....7-.ax...D............0......D....3u.r;<...c..Pz..(..'..Z}..l&...t.XlN^.....l7...*..8i...K.}~.=..=o3.L.......J.#..A..W$..!...A2Q.hG.cN.fB..).jh2..}..Q...Y..

C:\Program Files (x86)\DocFetcher\lib\truezip-driver-tar-7.7.7.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	32943
Entropy (8bit):	7.773488461752346
Encrypted:	false
SSDEEP:	768:cMFQlO3pl6A6yUuR6f0NEy/Ks1ExysHqL0ydWxX:cxlO3f3Uby/KssC0ywX
MD5:	9C4057A0CD712DBA7D2F8FADF2127048
SHA1:	A5B40C403E7391D93E1D1B1175F8AB3721F4903A
SHA-256:	C82C81857B78F0318C8F0EE9188A3DC6464BAE851112CA4561A18F812FDE4705
SHA-512:	641ED3648BDF9E6F5FE0BE7AFF84D002D51F1480DD6CC31768D6F2D0B32B7EA931BD1553BD3896F19CA9069BD83C85A39068154EE9285B13F22E6DEA6FF6F6F8
Malicious:	false
Reputation:	low
Preview:	PK........ .xE................META-INF/PK..........xE................META-INF/MANIFEST.MF.M..LK-...K-...R0.3..r..).u..RH.(.,..L....z.d........r9..&.....:.$&g..&...)......r9.%gd...!,..I.(-V.I.r.r..PK...B.+q.......PK..........xE................de/PK..........xE................de/schlichtherle/PK..........xE................de/schlichtherle/truezip/PK..........xE................de/schlichtherle/truezip/fs/PK..........xE............$...de/schlichtherle/truezip/fs/archive/PK..........xE............(...de/schlichtherle/truezip/fs/archive/tar/PK..........xE................META-INF/services/PK..........xE............G...de/schlichtherle/truezip/fs/archive/tar/FixedBufferedOutputStream.class.Q.J.@.=cZ.m..k.<z.#....B........l6E.).. .>..~.8.VQ.'..93s..........V..4...-.Xr.L(..V.e%..I.K...j).O(..nDG...R.NM.h).v....\%n....j....J.sq.qe..."..Z._.P%.J.!.$.#..&.:.....L\|..Pu.$....e.0m6......N......xV..v.!...r.....h.M.....6n%.V8......?.l...0.a...)L............v...9..E.....n...`

C:\Program Files (x86)\DocFetcher\lib\truezip-driver-zip-7.7.7.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	252851
Entropy (8bit):	7.807867617137484
Encrypted:	false
SSDEEP:	6144:bquyGr3XLgcHn+VmtIBIWH5OOw2m58tTebuonZnSgveuC:bqu1XLVH+VhIEOOptCbuoRSgWP
MD5:	9295C6F431E41FCEEE1CFB0E0CAD44A0
SHA1:	90E311405890368C9A1FFB5A6B59F2714115C61E
SHA-256:	62E80EFC497FF94ADD205558FB7BF5F4E019D37DB4BD83A289AB0316E7BEF904
SHA-512:	CF4A3D102C52A16E727AAACA58503F437666008AC3131E17BF48362F4C31B1A83A4CB3932BC891151CC5C449265E10615FAAA3A35E355C6F2211C633722DBAFB
Malicious:	false
Reputation:	low
Preview:	PK........<.xE................META-INF/PK........;.xE................META-INF/MANIFEST.MF.M..LK-...K-...R0.3..r..).u..RH.(.,..L....z.d........r9..&.....:.$&g.*.&...)......r9.%gd...!,..I.(-V.I.r.r..PK...B.+q.......PK........3.xE................de/PK........3.xE................de/schlichtherle/PK........3.xE................de/schlichtherle/truezip/PK........4.xE............ ...de/schlichtherle/truezip/crypto/PK........3.xE............&...de/schlichtherle/truezip/crypto/param/PK........3.xE................de/schlichtherle/truezip/fs/PK........3.xE............$...de/schlichtherle/truezip/fs/archive/PK........4.xE............(...de/schlichtherle/truezip/fs/archive/zip/PK........4.xE................de/schlichtherle/truezip/key/PK........4.xE............!...de/schlichtherle/truezip/key/pbe/PK........4.xE............)...de/schlichtherle/truezip/key/pbe/console/PK........4.xE............'...de/schlichtherle/truezip/key/pbe/swing/PK........4.xE............ ...de/schlichtherle/truezip/key/sl

C:\Program Files (x86)\DocFetcher\lib\truezip-file-7.7.7.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	66380
Entropy (8bit):	7.902648131390611
Encrypted:	false
SSDEEP:	1536:9bmafL3IW/o/A8GY5xXnTJ6xq1OV0Yp4EBUdenGg:9b90RP5xXncxqwut+yg
MD5:	957DAC9D4FB427C2D277A4F127FDB244
SHA1:	9FE545D9DD3540196D0044090CB03584F954434B
SHA-256:	97F66644721071E255CCDD94291C2822CC800441F56B7141D71698FDF2689176
SHA-512:	7566B985FDE78529885AAC1C43920F04B5EBC91041677769C5A7DEDFC4B9D5E66436DBD3BE78C7AE355976D528CCA671A6351971D3C9E7CEEBF3496E3DC272C5
Malicious:	false
Reputation:	low
Preview:	PK.........xE................META-INF/PK.........xE................META-INF/MANIFEST.MF.M..LK-...K-...R0.3..r..).u..RH.(.,..L....z.d........r9..&.....:.$&g..&...)......r9.%gd...!,..I.(-V.I.r.r..PK...B.+q.......PK.........xE................de/PK.........xE................de/schlichtherle/PK.........xE................de/schlichtherle/truezip/PK.........xE................de/schlichtherle/truezip/file/PK.........xE............$...de/schlichtherle/truezip/file/swing/PK.........xE............7...de/schlichtherle/truezip/file/ExpertFeature$Level.class.TkO.Q.=W..pU.W....`..W.P.E.4(.P....^e..e.M.U...6m....t.J.(i"....33wf.......#.'><ED..g>.....<.^,b.e<.........z....q...%.Y.lmdV..b....'..f..V.P+.^aX...hE+..V.K.2x....~...I.\|9..U.j.i.#...*.9.<...}....?v.t..UQ.r0......q...n........A....3..s...5T. Z.-.<..:J..5..V-].h$.L....$._B7u{.a.M...6E.%.......I......._.....v.f4.3M..Y=Jt...Q....5]4.hAED..#b+G....7..['R0.....R...2R.."-cUA.k........a.1...G...e._....!.ljd..e1,5

C:\Program Files (x86)\DocFetcher\lib\truezip-kernel-7.7.7.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	496506
Entropy (8bit):	7.822031997568288
Encrypted:	false
SSDEEP:	6144:DpgSN0t5Y/dy8JiZxqrtSlFV7kbHHfeIgKgF1q0Cnxc62sU26uwA9W3Gv2Ew4w94:DjAYDJiZxetoFefdg7OObjukS2E8+gAX
MD5:	5A0E6D83C73E3594D06FD620BD1A5903
SHA1:	889F270D18C2CC8F30AAEC5F0EA40132EDB4AC31
SHA-256:	30AC8963309981C5BE2E74EFE7EEA9CB04065D36C2293759772606CF2A9F3BCB
SHA-512:	9049F86A085CD5DDDAF6C5EBC8FE1CBAA047CBADBBCBFDCC88A81B24F7D423B2D709A9E21EB2D94D66AFA345DC3CD1388D77E0DBCA9B3E45D5FE2016A89952BD
Malicious:	false
Reputation:	low
Preview:	PK..........xE................META-INF/PK..........xE................META-INF/MANIFEST.MF.M..LK-...K-...R0.3..r..).u..RH.(.,..L....z.d........r9..&.....:.$&g.*.&...)......r9.%gd...!,..I.(-V.I.r.r..PK...B.+q.......PK..........xE................de/PK..........xE................de/schlichtherle/PK..........xE................de/schlichtherle/truezip/PK..........xE................de/schlichtherle/truezip/entry/PK..........xE................de/schlichtherle/truezip/fs/PK..........xE................de/schlichtherle/truezip/fs/sl/PK..........xE............ ...de/schlichtherle/truezip/fs/spi/PK..........xE................de/schlichtherle/truezip/io/PK..........xE................de/schlichtherle/truezip/rof/PK..........xE............ ...de/schlichtherle/truezip/socket/PK..........xE............#...de/schlichtherle/truezip/socket/sl/PK..........xE............$...de/schlichtherle/truezip/socket/spi/PK..........xE................de/schlichtherle/truezip/util/PK..........xE............4...de/sc

C:\Program Files (x86)\DocFetcher\lib\truezip-swing-7.7.7.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	21837
Entropy (8bit):	7.70073885121996
Encrypted:	false
SSDEEP:	384:ctzR30BI6izFOmu2KImx5UPOjMsQj03KNdmoozJ6DmmR6kEYtIE/7M:ctFkBbmFq2KImx5UGgB0aNdmjzJqmmg9
MD5:	6C887C6A7710714AACD2BBCB092D9070
SHA1:	C553403D6AE5D7D2EC4DBD4368341336B73B379C
SHA-256:	0679D5E643D2F46F388115BB2417FE4610F688478CB6B4726C10BAE260C1945E
SHA-512:	60624A48CE9987305D9D0CE364C30F3B28FF369E5C322DC5E24C0E39A820010783020C684ED3451C6FD13D9441F97C7EFC9D8D60E66FBF2000296B831DDA10AB
Malicious:	false
Reputation:	low
Preview:	PK........).xE................META-INF/PK........(.xE................META-INF/MANIFEST.MF.M..LK-...K-...R0.3..r..).u..RH.(.,..L....z.d........r9..&.....:.$&g..&...)......r9.%gd...!,..I.(-V.I.r.r..PK...B.+q.......PK........).xE................de/PK........).xE................de/schlichtherle/PK........).xE................de/schlichtherle/truezip/PK........).xE................de/schlichtherle/truezip/awt/PK........).xE................de/schlichtherle/truezip/io/PK........).xE............"...de/schlichtherle/truezip/io/swing/PK........).xE................de/schlichtherle/truezip/swing/PK........).xE............/...de/schlichtherle/truezip/awt/package-info.class...J.A.DkN...D.....m..H.A..44....sn..Y.O3...(q...l.................f.!.Vn....3wr...gK....!..+...F..\y..'.>.\.I.)....Z.M..H.9.ki9......#.\....../.s..7B..Nm.z..P.....%..........^.M....3......AIv..'.../PK.....%...."...PK........).xE............,...de/schlichtherle/truezip/awt/Windows$1.class.R]k.A.=.I.u..Zk...M.F...V\|..

C:\Program Files (x86)\DocFetcher\lib\xmlbeans-2.6.0.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	2730866
Entropy (8bit):	7.87827005728747
Encrypted:	false
SSDEEP:	49152:77+0Marx+xAXPG8HJeUEFBFP9CqydOlInReVFIDtn:77BMarx+K+8EUsBR9CqFrVFUd
MD5:	6591C08682D613194DACB01E95C78C2C
SHA1:	29E80D2DD51F9DCDEF8F9FFAEE0D4DC1C9BBFC87
SHA-256:	C77974359688B2823B48FA9A33DA68559D64F8474441480D9DF4F9E254332A96
SHA-512:	E1E4B80961018BBC596C2D0FB20825856268C052AE71AAEC75EB8FBFEBD145CA2B10B7028D75918A0AB1803E8D523759380556D04BC09166861ED705745CAFBF
Malicious:	false
Reputation:	low
Preview:	PK........M}.@................META-INF/....PK........L}.@ .......p.......META-INF/MANIFEST.MF..1o.0..wK..7.......R%.......(..sd.m.....1..{..{.2T.0......F:.bN.&..G.n.S.I...0Vjq..\..,W.t...........h.,..RH.f,...Wb....6{4....E....6.(.w...xD..8..LgR,m.`\1..............r.T9?$Z.......NT],7+......"..]......PK........G}.@................org/PK........G}.@................org/apache/PK........G}.@................org/apache/xmlbeans/PK........G}.@................org/apache/xmlbeans/xml/PK........G}.@................org/apache/xmlbeans/xml/stream/PK........G}.@............%...org/apache/xmlbeans/xml/stream/utils/PK........G}.@N...v.......'...org/apache/xmlbeans/BindingConfig.class.VmS.@..k..,.......!........)...et.s.k.......%...g.......).6...m....gwoo...?....6h....o../....`#...l.@!.l%..L,..h8.d..j&.J....>.M+/.S.=b..~..Q.c....2..fFA3.U...N2.$..j9.7J.bI.`.ct;..i%.Q...G@.Qo.....o....v..-E.. 1....(....^d~..!.....n).U..&......D.tz;.Q..?.~.}....b.....4.i.f.!......".!#.....(.. Mz

C:\Program Files (x86)\DocFetcher\lib\xmpbox-2.0.13.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	132083
Entropy (8bit):	7.904346654308041
Encrypted:	false
SSDEEP:	1536:aquCaQRicKQDgsg8hw0iHhKOPB91Kujd49DcjPoXC199XWHlRkAd8kVbfMokuIsH:aFCf4lDdPI0OC199WHl+KDzlkuQI
MD5:	C2C3FD1A3012DB8ECCAC946E26E66F3B
SHA1:	017ACEB2CE42A49A8222F203DD6386A5498F8A6B
SHA-256:	4A8CE875CA0179106420250206772F3E0FC9D091AAC9ABE0C3D56C027B134B50
SHA-512:	7B46AA14F80DF7B13048E2CD77C80BC4D39ACF80EC724FF092D670FFFF506A3F4C7B30F8F0E22DFD5980A93CDB55C01999C2859AB8C59F88D2559C4C5392B0C6
Malicious:	false
Reputation:	low
Preview:	PK..........\|M................META-INF/MANIFEST.MF.....UMo.0..#..,.. .@.e[....JTP..V...x.n.8k.....@.T-...7..M.1.y..8..4.q.xn.Z...3..%.!.....E.......%..yb.6..m....,j..m..XD..b&.y..(....l.......E....}E.pMhLd.1.r.. OtE...Z!...5.G...b....>...m<.....?.@....r....} K...H.LTih....Q.X..@.}.D..dl,.k.....(..6..D/.D.wd...DA(.\|a..s]...+e.5Zmy.M+..)...%.?/.>Y...[...>....J5..G<.XC...]...\Kd.5.>......].1{.........3......t....3.V..Z.A...+.L.#.24k.....I...f.[.[.<...t.v.c..5...D,.....D.Lh.A..e....#z..*......V.ok..4..<g1..j.....@...l.#....1..YJxm....._i9..D..K.f?.`_..E..F.X.RE_.D.B....u7p..j..0....qf..}=.}w.K.!+.........V....5...K.m....i..d.v<.qm.5J.@.\|..P-NS.....\...}....N.9w.nB..A.....].....A..o......fZ..?....]gN.Nf=.R..\|u...s;m..y=....PK..............PK..........\|M................META-INF/..PK..............PK..........\|M................META-INF/DEPENDENCIES..1O.0..w...J$b...j.J.K+.j.K..Y...~=..A...n...'..R..y.R...E....F..FW..@...D...X%...5.kh.Y.8.>.....V;....}Zt2...

C:\Program Files (x86)\DocFetcher\lib\xmpcore-5.1.3.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	91822
Entropy (8bit):	7.932022486720296
Encrypted:	false
SSDEEP:	1536:y8J9l/TY/q4aqEQ6a4SCUd8TPHeCayeCLnfArdh4Ag2A7CMJungu4qftNdtx4Wk5:l9TYXapQ6a4SlgGsFLASRKF7VNJK
MD5:	08D154CF297E87471637DF85172F93E6
SHA1:	57E70C3B10FF269FFF9ADFA7A31D61AF0DF30757
SHA-256:	821BE907F1E514EBB50F0CA04B2C098370A3CB5E5F9DDCC2ECF81E73EB265DAA
SHA-512:	02F3B52A0433DA5BB243C6E1EC2DB849E3F6DCB70F8D002130544D7847AD15FABA8EDA04525EEB43E8A01C1C8C5A934D65F7D4A8F60E015025A93EB40326F6C9
Malicious:	false
Reputation:	low
Preview:	PK........."I................META-INF/....PK........."I..Hr............META-INF/MANIFEST.MFManifest-Version: 1.0..Ant-Version: Apache Ant 1.8.4..Created-By: 1.6.0_65-b14-468-11M4833 (Apple Inc.)..Implementation-Title: Adobe XMP Core..Implementation-Vendor: Copyright 2006-2009 Adobe Systems Incorporated... All rights reserved..Implementation-Major: 5..Implementation-Minor: 1..Implementation-Micro: 3..Implementation-Debug: false..Implementation-EngBuild: 003..BuildDate: 2016 Sep 02 16:31:16-CEST..AdobeIP: <AdobeIP#0000856>....PK........."I................com/PK........."I................com/adobe/PK........."I................com/adobe/xmp/PK........."I................com/adobe/xmp/impl/PK........."I................com/adobe/xmp/impl/xpath/PK........."I................com/adobe/xmp/options/PK........."I................com/adobe/xmp/properties/PK........w}.H}zn.Y...........META-INF/LICENSE...j.0...~.=@...v...(.v..y.....;.JK.~j...,.`K...<[l.0.nV..rsX.>....yj:.S%..<.>...f>...]

C:\Program Files (x86)\DocFetcher\lib\xz-1.3.jar

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Java archive data (JAR)
Category:	dropped
Size (bytes):	97853
Entropy (8bit):	7.80204743807627
Encrypted:	false
SSDEEP:	1536:MvTfolDcP9765gNvzpz7YWwnQU15gIS9DF7XO0Salghdst:MrfolDy97JvlzKnQU15gF9vS3Mt
MD5:	DEFCD2F48221BF812FADCEFA362CA0FD
SHA1:	66DB21C8484120CB6A51B5B3EA47B6F383942BEC
SHA-256:	B686D752B78D15604BE20F490D3B6C941CF3BAF195FB8FD8E842DD6A24D51A4D
SHA-512:	38BC25FEA825E8B5783E89E79631E95AC114759EE5FD5E0097C0EF55DCCBE8323F49819B07B9B0CFB46706E63C16A5068BFD9052EF50C876CEF0052D6BFADD5B
Malicious:	false
Reputation:	low
Preview:	PK...........B................META-INF/....PK...........B................META-INF/MANIFEST.MF.......................N.@..{K..WBq.c..uI.@".. D.6.%6.?.....s.`..Higfg...!....\|..,...e.AU.......RL.}.<...X..?...4.....x..k.5...-..4J...K ........EwV..O.7.WD^f..+.(....d...iEF.d.....B.,....(f[.....,...-.82.....f...u.EX...V.<\|.../.6q..qP,..PK...........B................org/PK...........B................org/tukaani/PK...........B................org/tukaani/xz/PK...........B................org/tukaani/xz/check/PK...........B................org/tukaani/xz/common/PK...........B................org/tukaani/xz/delta/PK...........B................org/tukaani/xz/index/PK...........B................org/tukaani/xz/lz/PK...........B................org/tukaani/xz/lzma/PK...........B................org/tukaani/xz/rangecoder/PK...........B................org/tukaani/xz/simple/PK...........B..Zu............org/tukaani/xz/ARMOptions.class......................]O.P.....TD.o]w........K.`......Z.X

C:\Program Files (x86)\DocFetcher\misc\DocFetcher-1024.exe

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	39424
Entropy (8bit):	5.590745748095932
Encrypted:	false
SSDEEP:	384:pW4/a5oD+Nn6iy58PQYQ5QRJIEnXKkm3i0tiQZq7BFSmbAyYbPODe:Pk4o1y584YQ5CR+Lq7umbAHPOi
MD5:	5D66247846EF8F577C318965D6036536
SHA1:	FFF0FFE2207E9B6826A30D8E52AAE72DB262EFBB
SHA-256:	53C4C2D690AC22238B52C816FA35E55E6BAC086E404090E06BDA3BFEA813359F
SHA-512:	EE6F4F36E6D8F784A24D287E93E1FCC59C4DA2AD1C88353FCEED5C3F74C5E352627AE2F2625413AE7A6432B6EDDC243710EE249760EBEA2AB3B5915DA8F53AED
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 4% Antivirus: Virustotal, Detection: 0%, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....5V.................@...V...............P....@..........................`............@... ..........................................@...........................................................................................................text....?.......@.................. .0`.data........P.......D..............@.0..rdata.......`.......F..............@.0@.bss.........p........................0..idata...............L..............@.0..rsrc....@.......B...X..............@.0.................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\DocFetcher\misc\DocFetcher-12288_64-bit-Java.exe

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	39424
Entropy (8bit):	5.594546853636389
Encrypted:	false
SSDEEP:	384:fW4/a5oD+Nn6iy58PQYQ5QRJIEnXKkm3i0n7QZq7BFSmbAyYbPODe:Bk4o1y584YQ5CRUkq7umbAHPOi
MD5:	1EBFEF5F11BEF2D6EB5E64D6E28D5A97
SHA1:	F8A911988E127BE3FBF4475B0792EE0716F3546D
SHA-256:	1D456C994724987F8E8DECC63E509E47D4B4AD25CF7DCC46FB7398514B730E66
SHA-512:	1CAD8AA1756EC4529E79545DD5ED24EAE8E16956C48BED8F89F206B92D11D4BBA9FFF83962FA598C11CB1CCCC45937C7F1B83B2B4731EF8CECDE9425BB710E55
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 4% Antivirus: Virustotal, Detection: 0%, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....ed[.................@...V...............P....@..........................`...........@... ..........................................@...........................................................................................................text....?.......@.................. .0`.data........P.......D..............@.0..rdata.......`.......F..............@.0@.bss.........p........................0..idata...............L..............@.0..rsrc....@.......B...X..............@.0.................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\DocFetcher\misc\DocFetcher-16384_64-bit-Java.exe

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	39424
Entropy (8bit):	5.5943326684133385
Encrypted:	false
SSDEEP:	384:RW4/a5oD+Nn6iy58PQYQ5QRJIEnXKkm3i0u7QZq7BFSmbAyYbPODe:3k4o1y584YQ5CRtkq7umbAHPOi
MD5:	EAF44539DA338BEF453CA3487FE6C81D
SHA1:	FE9A5A99FFA0E555C98B488A013F951783A7E344
SHA-256:	30A59F0DADB8FDA9140C1F02014889AEC9FADECA9481B66A60D39DF53CFA996B
SHA-512:	EB12E28F0EAC9F6D9DBE1D63C27434E1AE8BD41F536F8FAB7F7132FCDD0894EE41FF8C7069C00FCDB6EAC0590AF7A096315AA00955297108600562777D731FBB
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 4% Antivirus: Virustotal, Detection: 0%, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...1ed[.................@...V...............P....@..........................`......^.....@... ..........................................@...........................................................................................................text....?.......@.................. .0`.data........P.......D..............@.0..rdata.......`.......F..............@.0@.bss.........p........................0..idata...............L..............@.0..rsrc....@.......B...X..............@.0.................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\DocFetcher\misc\DocFetcher-2048_64-bit-Java.exe

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	39424
Entropy (8bit):	5.598773003009515
Encrypted:	false
SSDEEP:	384:BW4/a5oD+Nn6iy58PQYQ5QRJIEnXKkm3i0ZiQZq7BFSmbAyYbPODe:nk4o1y584YQ5CRaLq7umbAHPOi
MD5:	575F44923628064DB4D431721279F86D
SHA1:	F04CDFB178C43E20AB33F00FE439453EF249DFEE
SHA-256:	B5EEFA475783D7D33249E98CFFD661BCC07A56E3CFFE4AC7EB93F00A5284CB53
SHA-512:	EF504D3B873AF6C405F334A889EB728F8821A3D366D578B9F611D48922E3E2F841893DB404A49A5DD87A430D68265E0B11098BAD4D4321BDD3B3F9625219C143
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 3% Antivirus: Virustotal, Detection: 0%, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L..."..X.................@...V...............P....@..........................`............@... ..........................................@...........................................................................................................text....?.......@.................. .0`.data........P.......D..............@.0..rdata.......`.......F..............@.0@.bss.........p........................0..idata...............L..............@.0..rsrc....@.......B...X..............@.0.................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\DocFetcher\misc\DocFetcher-256.exe

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	39424
Entropy (8bit):	5.593975692993362
Encrypted:	false
SSDEEP:	384:kW4/a5oD+Nn6iy58PQYQ5QRJIEnXKkm3i0cOZq7BFSmbAyYbPODe:0k4o1y584YQ5CR/mq7umbAHPOi
MD5:	F8341A63CBE201B44349D9653BAF6C31
SHA1:	3DF5A9CC18A382A525AFC0835664BAA34EDF4DD3
SHA-256:	68E89DF519B8D38FA5525A14E3A4AB618BA0232AB8B6DA25CABA78097386E6D1
SHA-512:	C72EE2B29CA557DA972A7A59C6E5483194C7075D35BB3BD5A65784A1C2B85CFDD90C0F4EDED72DF0A51A0AEBC253CA9895A9B134296FC7AAB6573D794BC2FEC0
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 3% Antivirus: Virustotal, Detection: 1%, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....5V.................@...V...............P....@..........................`......v}....@... ..........................................@...........................................................................................................text....?.......@.................. .0`.data........P.......D..............@.0..rdata.......`.......F..............@.0@.bss.........p........................0..idata...............L..............@.0..rsrc....@.......B...X..............@.0.................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\DocFetcher\misc\DocFetcher-4096_64-bit-Java.exe

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	39424
Entropy (8bit):	5.599019653657464
Encrypted:	false
SSDEEP:	384:dW4/a5oD+Nn6iy58PQYQ5QRJIEnXKkm3i0YiQZq7BFSmbAyYbPODe:7k4o1y584YQ5CRrLq7umbAHPOi
MD5:	2DE4393C1DD9E9C980E6FEF7D05614B0
SHA1:	BE5C98606C4B4C9F73CE944ED5E65DFD354821A1
SHA-256:	90E3BBC285DE802EEB3A14E36E08DFD339932F91F116EC072DE96C488EC07D09
SHA-512:	98FCEDE28177A551A5AFC9300E1A2E0641649CFB963609114AACCBC8405EA3FB70F96FCDA048F5036A1E29230CC626A30592A0DE3FDF2B5812944D29F7BD3927
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 3% Antivirus: Virustotal, Detection: 0%, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...?..X.................@...V...............P....@..........................`............@... ..........................................@...........................................................................................................text....?.......@.................. .0`.data........P.......D..............@.0..rdata.......`.......F..............@.0@.bss.........p........................0..idata...............L..............@.0..rsrc....@.......B...X..............@.0.................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\DocFetcher\misc\DocFetcher-512.exe

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	39424
Entropy (8bit):	5.594862263632739
Encrypted:	false
SSDEEP:	384:mW4/a5oD+Nn6iy58PQYQ5QRJIEnXKkm3i0aOZq7BFSmbAyYbPODe:Sk4o1y584YQ5CRhmq7umbAHPOi
MD5:	D3203E4B1238592ABA9AC0D3F6815EC6
SHA1:	BCA02743047115C99DF0241A700D2E66534F4EB3
SHA-256:	2BD8948E5F5AE30B49BA4C3F37B25D6F8D63E0CDADA0301AA42AA123E6F65EC5
SHA-512:	16DB18D76301B0554BDF656C82E8A03F63F4D6858C39D5C19E3640B9E73C32BA8C2E24CEC837BBCA084FA2617A779AE3686CE37A24935EED5C08E948CCD9D04B
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 4% Antivirus: Virustotal, Detection: 0%, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....5V.................@...V...............P....@..........................`.......\|....@... ..........................................@...........................................................................................................text....?.......@.................. .0`.data........P.......D..............@.0..rdata.......`.......F..............@.0@.bss.........p........................0..idata...............L..............@.0..rsrc....@.......B...X..............@.0.................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\DocFetcher\misc\DocFetcher-768.exe

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	39424
Entropy (8bit):	5.594115526472318
Encrypted:	false
SSDEEP:	384:JW4/a5oD+Nn6iy58PQYQ5QRJIEnXKkm3i0OOZq7BFSmbAyYbPODe:vk4o1y584YQ5CRtmq7umbAHPOi
MD5:	485277F3CFC2531C1CA2863D0FA5B117
SHA1:	9A74050C9776ACF845368D89E3B43FF27898AE30
SHA-256:	C6CA68FF513FF4BA53D35E771C4DDEEEBE43DB015BD85817EDB90A047B4ADF20
SHA-512:	0F02E34299879DA15330A3CA0DD6A5571F7FC5DCF929A1857FE19F92845B76688D5A10B1F9F6B0AD5D6208FBA42A822B15E2284278DA3EFF0E10034A42AF18E7
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 3% Antivirus: Virustotal, Detection: 0%, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....5V.................@...V...............P....@..........................`............@... ..........................................@...........................................................................................................text....?.......@.................. .0`.data........P.......D..............@.0..rdata.......`.......F..............@.0@.bss.........p........................0..idata...............L..............@.0..rsrc....@.......B...X..............@.0.................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\DocFetcher\misc\DocFetcher-8192_64-bit-Java.exe

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	39424
Entropy (8bit):	5.596301700083722
Encrypted:	false
SSDEEP:	384:pW4/a5oD+Nn6iy58PQYQ5QRJIEnXKkm3i0viQZq7BFSmbAyYbPODe:Pk4o1y584YQ5CRELq7umbAHPOi
MD5:	D4A4F5B0FEF68210BE97505F2C74AA7F
SHA1:	0310DA3DF6047D628772EAC8E29ED068C2C441BB
SHA-256:	9B2B71AD5D7C366817E1818C3014021D3202CCB34119B9FCB96976D81F06AD27
SHA-512:	AA266FFDE33068E8B9956268073563BE429807A782568203B2DD65473B5F57B711ADD89A6DDD4CFC8653623C8F470CFB140769BDFDC6817E58B1724EBA2A1E3B
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 2% Antivirus: Virustotal, Detection: 0%, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...d..X.................@...V...............P....@..........................`......P.....@... ..........................................@...........................................................................................................text....?.......@.................. .0`.data........P.......D..............@.0..rdata.......`.......F..............@.0@.bss.........p........................0..idata...............L..............@.0..rsrc....@.......B...X..............@.0.................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\DocFetcher\misc\DocFetcher.bat

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	DOS batch file, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2362
Entropy (8bit):	4.7572498921263895
Encrypted:	false
SSDEEP:	48:QASjwPH7DAxrEvL54eiExESgNBpas5rxFs123PSMbB4RVhS2N/EOFXDoDTU:ajs7wgz544xESgLpp5rxK123PSgB4RV3
MD5:	FEE86D0DC45A11FAAC26936F432815ED
SHA1:	E3BA31513933D2997AE616AE1F39400F0A368DE4
SHA-256:	D13295099371D8EFC78BD90B4420E2DEE447C960A286CE96489F3072DCBBD7AF
SHA-512:	BC2782F726A6885514186A8C67C743DDF1142994D47673B149F8890FF0B42CFC37B995161FFBF40AD891EDB7D29D9E510E92CAF3A1DB04A0589D9FBE787C3882
Malicious:	false
Reputation:	low
Preview:	@echo off....rem This file is an alternative launcher for the program, provided for easy..rem customization. How to use it:..rem 1) Move this file one level up into the DocFetcher folder...rem 2) Modify this file as needed...rem 3) Double-click on this file to launch DocFetcher...rem ..rem Common modifications of this file:..rem ..rem 1) You can adjust the maximum amount of memory available to the program..rem with the setting -Xmx... in the last line. For example, -Xmx512m will..rem give the program up to 512 MB of memory, whereas -Xmx8g will give it up..rem to 8 GB of memory. The latter only works if your machine has at least 8..rem GB of RAM. Also note that using more memory than about 1 GB requires a..rem 64-bit Java runtime...rem ..rem 2) You can replace the "java" keyword in the last line with an absolute or..rem relative path to the Java executable. If the path contains spaces, put..rem the entire path in quotes, e.g.:..rem "C:\Program

C:\Program Files (x86)\DocFetcher\misc\licenses.zip

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	215601
Entropy (8bit):	7.972567773328805
Encrypted:	false
SSDEEP:	6144:r7fF6g2FVfnlPyTPofptsPSFF/i7K0nhEQs/:PF6g+V5swbsqynKQs/
MD5:	D8957AFA030FAD010219EB3576359C0D
SHA1:	C138412E1F9BA0C9EF6AEC91FEC08E81E14841F0
SHA-256:	AD5BAB945837C2CEE7F983241CF7AA28E764CF16EAFF8B06FF4C2E0216582B58
SHA-512:	F11C6AE75756807C41A494F3CC68790C82D930BBDA156B7067E9301A28CBDB6F88AD9ACC19589E852CD707049C163188FE85E230974E81358F528A67A003D7BA
Malicious:	false
Reputation:	low
Preview:	PK...........R................J7zip/PK...........R................ansj/PK...........R................ant/PK...........R................commons-codec/PK...........R................commons-compress/PK...........R................commons-logging/PK...........R................docfetcher/PK...........R................guava/PK...........R................java-libpst/PK...........R................javolution/PK...........R................jericho-html/PK...........R................jexcelapi/PK...........R................jintellitype/PK...........R................jna/PK...........R................jnotify/PK...........R................junit/PK...........R................juniversalchardet/PK...........R................junrar/PK...........R................jxgrabkey/PK...........R................log4j/PK...........R................lucene/PK...........R................metadata-extractor/PK...........R................mime-util/PK...........R................misc/PK...........R................misc/Alphanu

C:\Program Files (x86)\DocFetcher\misc\paths.txt

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	dropped
Size (bytes):	1758
Entropy (8bit):	4.76330231001258
Encrypted:	false
SSDEEP:	48:x+40ZsLPCL1tEH90WPCQDeVfg/kDdFtWIC2o2mGSJ:xrCsbcgOTNT8b2o/J
MD5:	4C53E1826E06597F9EFD46A24519DE76
SHA1:	F44E7B6C3828B9903A8F16347E7BFEB8C838ECFD
SHA-256:	3115BA4EE8BCA9DCEBA844B68D034F8146F5CEDCFC5DBE54375634CEB3343148
SHA-512:	73122F832E1E0B8EE9B8C418933D6DA7ACE9B43D47B9442855ADDDAEA21BB0BFBE8FBB0EAE531DF695752B5C20B7FE97ACD7E0E64C66880CBA52244DA56916B0
Malicious:	false
Reputation:	low
Preview:	# In this configuration file you can customize the paths where DocFetcher will..# look for its settings and index files...# ..# This file follows the conventions of the Java Properties format. In..# particular, the following rules apply:..# * Lines starting with '#' are considered comments and will be ignored. Remove..# the '#' characters in front of the "key=value" lines below to enable the..# respective settings...# * Backslashes must be escaped, i.e. whenever you want to write down a '\'..# character, insert '\\' instead...# * Other characters to be escaped with a backslash include ' and ". Thus, you..# have to enter \' and \" instead...# * You can use forward slashes instead of backslashes in file paths. Forward..# slashes don't need to be escaped...# * The expected encoding is ISO-8859-1, aka Latin-1. All non-Latin-1 characters..# must be entered as Unicode escapes, e.g. '\u00F6' instead of '.'...# ..# You can specify relative paths with ".." (two dots), which means "

C:\Program Files (x86)\DocFetcher\search.py

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	Python script, ASCII text executable, with CRLF line terminators
Category:	dropped
Size (bytes):	2619
Entropy (8bit):	4.942884541704893
Encrypted:	false
SSDEEP:	48:bt4Gu7P6A1us4GuMkyh5kKIC/MTA4wMGVVGnx833FDIwM4GErwEm9FXzrpDZtdrp:bMD6A1u5mh+CWApGnxyDHHrwdbHp
MD5:	FC4FE84C4A01F2EE09886FF257FAD47B
SHA1:	3C855923EB85A6CF2182620F4C6CC59BDD4A0C77
SHA-256:	97B7E613DC55555AA96AE4E27C025CCA6F2E4641AD3B4227EEA0313FEE866C81
SHA-512:	DE35AB59C285C3A604EFFD5FB05F7825F0AA75E47CA10101EF8498EC3E96CEFEEDF20A72FB11A5E9266620ED9708E02FDC1C3E9AC8B5AE7F9E6566AEF08A10E7
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Reputation:	low
Preview:	#!/usr/bin/env python..# -- coding: utf-8 --...."""..This script sends the given command-line arguments as a query to the running..DocFetcher instance. The results returned by the latter are printed as filename-..filepath pairs on the standard output.....For more advanced processing of the results, call the search function below..directly. In principle, you can also reuse the code in the search function for..arbitrarily scripting the DocFetcher instance.....By default, DocFetcher's scripting support is disabled due to security reasons..and must be enabled by setting the variable "PythonApiEnabled" in the advanced..settings file (program-conf.txt) to "true".....Running this script requires Py4J (https://www.py4j.org/). DocFetcher already..ships with a Py4J distribution, but it only works if the py4j folder is in the..same folder as this script. To script DocFetcher from a different location, move..the py4j folder there, or install Py4J separately.....Note that only the main DocFetcher

C:\Program Files (x86)\DocFetcher\uninstaller.exe

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Category:	dropped
Size (bytes):	68512
Entropy (8bit):	7.079341584035373
Encrypted:	false
SSDEEP:	1536:D04f1SMHjZ0k/tB1g//I0DuoxbxAHscvYWaPxsbq2yiEP9b3uJxANIL:xf1BDZ0kVB67Duw9AMcvYWaPEnEP9b3Q
MD5:	59144974AFC4B7D15D246C88B55EE9B0
SHA1:	5152DB6946E8E82C6EBFC2022D666F4CCCF2102D
SHA-256:	CA6B3DF4DCA7C4CEBACE1FBE35A7510C7320EF5EDBB7E41908793D26290DDB8B
SHA-512:	40FDD7E57B06D117E8FD609FD273B7F8E0DE2E6DCF062F0B1D480CA5DF36A00DC2BC50EFED25410F6E02A29C4424A64199A6C6C1D6F5883D1E4E06FA2A22D3B6
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 2% Antivirus: Virustotal, Detection: 0%, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1)..PG..PG..PG._...PG..PF.IPG._...PG.sw..PG..VA..PG.Rich.PG.........PE..L...".$_.................f...\|......H3............@.......................................@.................................D...........P............................................................................................................text...Wd.......f.................. ..`.rdata...............j..............@..@.data...8U...........~..............@....ndata...................................rsrc...P...........................@..@................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Oracle\Java\.oracle_jre_usage\b5820291038aa69c.timestamp

Download File

Process:	C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	52
Entropy (8bit):	4.880647593466272
Encrypted:	false
SSDEEP:	3:oFj4I5vpm4USg:oJ5bg
MD5:	3313010599A0BB722C1F6BAB39126C92
SHA1:	D1DC9F54F56E353821C0492D131F03A8365B79C3
SHA-256:	5FAA9F087B2829203AD63709FE28A3F62075160B047EF69CA168F1F7D42F0256
SHA-512:	1FE73AEEE7B44EE314D595FDF50245C3263B3C7D6BCB7FA3D67DC061107CCA7135DC4327830E09FCFABC562699EFC0840792B96C80447FB1950AB9D00A126B59
Malicious:	false
Reputation:	low
Preview:	C:\Program Files (x86)\Java\jre-1.8..1710158243134..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT

Download File

Process:	C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe
File Type:	data
Category:	dropped
Size (bytes):	49120
Entropy (8bit):	0.0017331682157558962
Encrypted:	false
SSDEEP:	3:Ztt:T
MD5:	0392ADA071EB68355BED625D8F9695F3
SHA1:	777253141235B6C6AC92E17E297A1482E82252CC
SHA-256:	B1313DD95EAF63F33F86F72F09E2ECD700D11159A8693210C37470FCB84038F7
SHA-512:	EF659EEFCAB16221783ECB258D19801A1FF063478698CF4FCE3C9F98059CA7B1D060B0449E6FD89D3B70439D9735FA1D50088568FF46C9927DE45808250AEC2E
Malicious:	false
Reputation:	low
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\hsperfdata_user\8152

Download File

Process:	C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe
File Type:	data
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	1.3696406037276263
Encrypted:	false
SSDEEP:	96:PK0TorkRI8GWcifCadqq61UD9fPAqpcH9LH/H/HEHfHMHwHOHaHaLHaHJHaH7HiA:S0TtI8GefTdqq6KPA8TjD8IHGdOBq
MD5:	D715DA8CA6401A9A4EF8DD0AF64A379E
SHA1:	EA409D725EA912C03203A25A228A59B279D66D2C
SHA-256:	79072560992427D92460EC0660ED83DDACD0E8FDDA7CF7DC5A6CC3E8A13CFC4E
SHA-512:	230A1EB3E54F435C4B0355BC0032FECFEFEA8E1F57D45233DED8CB2A1DF12147227FDB5264BECC80EA13D1F0A21BD9FC3A62421340545C68CC45981297D40D59
Malicious:	false
Reputation:	low
Preview:	.........;...... *+..... .......8...........J...0...sun.rt._sync_Inflations.............8...........J...0...sun.rt._sync_Deflations.............@...........J...8...sun.rt._sync_ContendedLockAttempts..$.......8...........J...0...sun.rt._sync_FutileWakeups..........0...........J...(...sun.rt._sync_Parks..E.......@...........J...8...sun.rt._sync_EmptyNotifications.............8...........J...0...sun.rt._sync_Notifications..!.......8...........J...0...sun.rt._sync_SlowEnter..............8...........J...0...sun.rt._sync_SlowExit...............8...........J...0...sun.rt._sync_SlowNotify.............8...........J...0...sun.rt._sync_SlowNotifyAll..........8...........J...0...sun.rt._sync_FailedSpins............@...........J...8...sun.rt._sync_SuccessfulSpins................8...........J...0...sun.rt._sync_PrivateA...............8...........J...0...sun.rt._sync_PrivateB...............@...........J...8...sun.rt._sync_MonInCirculation...............8...........J...0...sun.rt._sync_MonScavenged...

C:\Users\user\AppData\Local\Temp\nsgECB1.tmp\ApplicationID.dll

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	200704
Entropy (8bit):	6.552977186185562
Encrypted:	false
SSDEEP:	3072:2pBNN6AmU9cDlKd3P6V9nSm49WTgKg4Fa1V3FuXRAuAg0FubA9cVsL+73:2pzxmQ3yL+9MgKbxAOEXY
MD5:	A858C1A57E32485505B1977CF0A125BE
SHA1:	25D86C4B51F7CC10FC70E3A0493A39C4460CC350
SHA-256:	1462A072345E86318B981089B08B613A34027DDF527BFB66606C683F218FC3B4
SHA-512:	32B597FC2412A9407FD12AC77C556FF9740F1DD0D2055426D11A7BAF21B09C536A84CFB97865B4E94168656514E7CE71EB2BC4122AA340100F4CE483BAD1722D
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 1%, Browse
Reputation:	low
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......;.....Q..Q..Q.@SQs.Q.@QQ..Q.@PQb.QD..Pj.QD..PN.QD..P_.Q.#lQ~.Q.#iQv.Q..Q..Q.P~.Q.P~.Q.]Q~.Q..5Q~.Q.P~.QRich..Q........................PE..L.....sX...........!.........2...............................................p............@.................................d...d....0..P....................@..\| ......p...........................`...@...............X............................text...c........................... ..`.rdata..<...........................@..@.data...(...........................@....gfids..............................@..@.tls......... ......................@....rsrc...P....0......................@..@.reloc..\| ...@..."..................@..B........................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\nsgECB1.tmp\Processes.dll

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	36352
Entropy (8bit):	6.10802976098059
Encrypted:	false
SSDEEP:	768:uxEiycFoaj/+WSiJfmjvab7L/cUf7IIlMLRF:uxEm7sgfmjy//cgdlM/
MD5:	2CFBA79D485CF441C646DD40D82490FC
SHA1:	83E51AC1115A50986ED456BD18729653018B9619
SHA-256:	86B302FA9C85DFA0C1C03BA000864A928365DAB571F3355347DBA02DA22949B7
SHA-512:	CCA186A7F9C5CFF3F4ECA410FBE8CC13DAD2514A7E36AEC9B1ADDFBCB239ACE9B9B2D8427771858E3FD11783ABCE7E24D43C286F98DA9F8B17562CA095A4C043
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..............,...,...,..,...,..,.,u..,...,...,..,..,.,.,...,..,..,..,.,..,...,...,...,..,...,Rich...,........PE..L......B...........!.....\...D...............p.........................................................................w...H~..<....................................................................}..H............p...............................text...sZ.......\.................. ..`.rdata..G....p.......`..............@..@.data................v..............@....rsrc................~..............@..@.reloc..............................@..B................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\nsgECB1.tmp\System.dll

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	11776
Entropy (8bit):	5.855045165595541
Encrypted:	false
SSDEEP:	192:xPtkiQJr7V9r3HcU17S8g1w5xzWxy6j2V7i77blbTc4v:g7VpNo8gmOyRsVc4
MD5:	FCCFF8CB7A1067E23FD2E2B63971A8E1
SHA1:	30E2A9E137C1223A78A0F7B0BF96A1C361976D91
SHA-256:	6FCEA34C8666B06368379C6C402B5321202C11B00889401C743FB96C516C679E
SHA-512:	F4335E84E6F8D70E462A22F1C93D2998673A7616C868177CAC3E8784A3BE1D7D0BB96F2583FA0ED82F4F2B6B8F5D9B33521C279A42E055D80A94B4F3F1791E0C
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......ir.-.D.-.D.-.D...J..D.-.E.>.D......D.y0t.).D.N1n.,.D..3@.,.D.Rich-.D.........PE..L.....$_...........!..... ..........!).......0...............................`............@..........................2.......0..P............................P.......................................................0..X............................text............ .................. ..`.rdata..c....0.......$..............@..@.data...h....@.......(..............@....reloc..\|....P.....................@..B................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\nsgECB1.tmp\nsDialogs.dll

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	9728
Entropy (8bit):	5.127987026925379
Encrypted:	false
SSDEEP:	96:o2DlD3cd51V1zL7xqEscxM2DjDf3GEst+Nt+jvcx4T8qndYv0PLE:o2p34z/x3sREskpx4dO0PLE
MD5:	1C8B2B40C642E8B5A5B3FF102796FB37
SHA1:	3245F55AFAC50F775EB53FD6D14ABB7FE523393D
SHA-256:	8780095AA2F49725388CDDF00D79A74E85C9C4863B366F55C39C606A5FB8440C
SHA-512:	4FF2DC83F640933162EC8818BB1BF3B3BE1183264750946A3D949D2E7068EE606277B6C840193EF2B4663952387F07F6AB12C84C4A11CAE9A8DE7BD4E7971C57
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......\|..c8O`08O`08O`08Oa0.O`0.@=05O`0llP0=O`0.If09O`0.od09O`0Rich8O`0........PE..L.....$_...........!......... ......Y........0............................................@..........................6..k....0.......`.......................p.......................................................0...............................text............................... ..`.rdata..{....0......................@..@.data........@......................@....rsrc........`....... ..............@..@.reloc..t....p......."..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DF5DAF9E72BAB6344F.TMP

Download File

Process:	C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.5323658399276656
Encrypted:	false
SSDEEP:	6:rl91bxc+CFZtlzgCOXd9Xh9X86y/QyM9xtu:rl3baFhzgCuv72QBY
MD5:	A28F5204F80C13D9614E128F60042DC5
SHA1:	67CAF3BB500C63A6A21F7B4EC20B8A0100DB8CF8
SHA-256:	C695F61BF5E9E131B220FE15AFA0AF2CDFD326EA576FAACF917A2435528C492C
SHA-512:	A1576B12855DE9DE1EE7078DCB2834FBF20F1C72243CF09BE36FCA722AC1B47A80E4BDA79BCE2640A6496FDCC943BB0A35661C1EE3181C11757AAE46BC777E41
Malicious:	false
Reputation:	low
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\DocFetcher\conf\program-conf.txt

Download File

Process:	C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	10705
Entropy (8bit):	4.701064320043636
Encrypted:	false
SSDEEP:	192:E0wTvxpUh5L+lM3oDbat5sJviZHBd5b3nP64AKwgz:2rliYDbQdtS4AZS
MD5:	A9CCE5136A45FD6A781BC661EC00B20D
SHA1:	C7F2CA8EB83843E0A438D014C7A2539B9C9B56FC
SHA-256:	6C81D33815185A3FC026F23D13DC5FD8C2AAE3E48778EB50EF1430A26358456B
SHA-512:	9673424F7540CCF907B45CEEEF0F96AA31201010F5801295C0397B38B573D985EA498D473E4FA4C163A3CA705B5315FB58F70CEF485AFA8571A90B306EACB7AF
Malicious:	false
Reputation:	low
Preview:	#===============================================================================..#.ADVANCED SETTINGS..#===============================================================================..#..# Notes on editing this file:..# * Use the '#' character at the beginning of a line to comment it out...# * Changes will take effect after the program is restarted...# * To restore the defaults, simply delete this file. It will be recreated the..# next time the program is started.......#===============================================================================..#.General..#===============================================================================....# The text to display in the title bar of the main window and in the task bar...# This setting might be useful for rebranding and for using multiple instances..# of DocFetcher...# You can also rename the main help files (by default "DocFetcher_Manual.html")..# and their associated HTML folders if you want. If you do the latter, you'll..# have t

C:\Users\user\AppData\Roaming\DocFetcher\conf\settings-conf.txt

Download File

Process:	C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2669
Entropy (8bit):	4.997954269500336
Encrypted:	false
SSDEEP:	48:+RgCyVyIczX3hVQiVTXpx369aijowa+2Y5v3dHoJwqbwBwZtmUT:+OzV6HNVTXpx+Do7s5vMZI8
MD5:	6F0C478ADFF8524C071F31D97F5B7028
SHA1:	20A2EA6FBDF5FF240491CE4AEA2B588DD08C748D
SHA-256:	73D9676154E80276C19F697AC49A67476FEDC3D5BB691090C10DE1C465D87E13
SHA-512:	3394A0F586AB6F8A5AD26993F84814891FC7A5BB2872D43ADA095C5179BA5FF53F6A11DAF9D4B246D6F722B1206140644FD2FEAE23DA1B546E1E68B421F20DB1
Malicious:	false
Reputation:	low
Preview:	# The internal program settings are stored here...# Only modify this file if you know what you're doing...# ..# How to edit this file:..# * The program loads this file on startup and overwrites it..# on closing. Thus, remember to close the program..# before editing this file, otherwise all your changes..# will get overwritten...# * To restore the default value of an entry, close the..# program, delete the entry, then restart the program. The..# program will now use the default value and write it to..# disk when it closes...# * Clear or delete the entire file to restore all default..# values...#..# Mon Mar 11 12:58:10 CET 2024....# Font entries, consisting of font name, height and style...PreviewWindows = Lucida Sans Unicode, 11, 0..PreviewLinux = Sans, 10, 0..PreviewMacOsX = Helvetica, 12, 0..PreviewMonoWindows = Courier New, 10, 0..PreviewMonoLinux = Monospace, 10, 0..PreviewMonoMacOsX = Monaco, 10, 0....# Comma-separated lists of sash weights...ProgressPanel = 2, 1....#

C:\Users\user\AppData\Roaming\DocFetcher\swt\windows-32\swt-gdip-win32-4919.dll

Download File

Process:	C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	116736
Entropy (8bit):	6.461728909816356
Encrypted:	false
SSDEEP:	1536:2oM8fmi288ybgyiwbzzHFLQNV3+66sVsuLzsWO1cd2A4PsXmf+0fcfjmddR2uZW4:SebPHF+V3HjkE2S2nf5ZW81geSWbt
MD5:	726BC9AA7F941AFBC7C53ED31F49E8E8
SHA1:	90CDA5FDD13F4C6FD9036D2C74C12DE95289BA3E
SHA-256:	852E881C36818C18C8E402AC8C97DF44EEC358B4EDB1F07596B6BEBB0DBB6210
SHA-512:	7EE39314CECC76FEE9E2416C62FE651FF6B014915E1585F83411CF0578E1EE5C9CC683ECBDA36E7FC409EF667262F0460A8E033AB093198A05B7A2DE9C758F74
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......as.m%..>%..>%..>Vp.?,..>Vp.?Z..>.v.?4..>.v.?9..>.v.?/..>Vp.?3..>Vp.?"..>%..>...>.v.?!..>.v.?$..>.vT>$..>.v.?$..>Rich%..>........................PE..L...(.{[...........!.................d..............................................v.....@......................... j...:..(...P....................................]...............................^..@............................................text...W........................... ..`.rdata..............................@..@.data...............................@....rsrc...............................@..@.reloc..............................@..B........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\DocFetcher\swt\windows-32\swt-win32-4919.dll

Download File

Process:	C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	407040
Entropy (8bit):	6.647355503340309
Encrypted:	false
SSDEEP:	6144:1UqJ6TTXGftWUHiENm2eK7mnoUSgpAY8ODcDcm7cIs3FDyRfi/R1jqlyifxS7GLB:1Uq4stWUH6FeYyLB
MD5:	D4AEB5C2BCB531375CAF626F9F174802
SHA1:	623A16FB8E2982F1C8B187D118BD02DE845EE821
SHA-256:	6A06BF061B5CAE3256054154DEE050EDF5FDF5E320C3F2BF21C1B93F19588D88
SHA-512:	E52AD857F6FC0BE04915BCB0B634E0ED294E75123EEC1642C7EE97749FFFF013A4362AD11FCFD817CF18817E7F957A2FC2FDB56E7B58D8C92885599FDA3E5E81
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$............u..u..u......u...... u..s...u..s...u..s...u......u......u..u...w..F...u..F...u..F.$.u..F...u..Rich.u..................PE..L...#.{[...........!.................................................................;....@..........................=..di......@....0.......................@...P..p6...............................6..@............................................text...w........................... ..`.rdata...*.......,..................@..@.data...<J..........................@....rsrc........0......................@..@.reloc...P...@...R..................@..B................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Mar 11 10:56:37 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9803656911404732
Encrypted:	false
SSDEEP:	48:8VdTTb7SHQcidAKZdA1FehwiZUklqehgy+3:8bL5C/y
MD5:	D97E535FB5837C01413751A0551EACCA
SHA1:	79B16B1CF344FD7DE5BD61CDBED01A3AF8C30BAA
SHA-256:	BC5C695D6FBF83DB9EB54DF7ECE24BCC2FFDE05B249CD889E14A494A09BDE59E
SHA-512:	5AA638EDA07A2ED77145FA6CE2D3AA6B57842BA149C3A0B334291E59FAF3A53D312B514D8F2D06A8EE045B2F5841C6E45FD5C64F0032A1C4C030668BFED40B36
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......+.s..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IkX._....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VkX._....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VkX._....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VkX._..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VkX._...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........f.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Mar 11 10:56:37 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.994245439328333
Encrypted:	false
SSDEEP:	48:8IdTTb7SHQcidAKZdA1seh/iZUkAQkqehvy+2:8YL5c9QWy
MD5:	8F00E4F3FE14F28AC222F6CC27A81165
SHA1:	96AC627E394355C22E3F29409F4BA7B2278D0036
SHA-256:	9C277EC090310E10804283310E3D7F68872F30F445D6718F01137D7A3ED2BFF3
SHA-512:	CB94A9A6B79CB62337735F6C05F7EF31F8E34D6B7A9B5800C8676B80ED73112A6C21B7422E0CC9104388FBC06BAEF02C1FFE3533732D86124CB28CD8E829C15B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....P..+.s..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IkX._....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VkX._....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VkX._....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VkX._..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VkX._...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........f.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.003791516400682
Encrypted:	false
SSDEEP:	48:83dTTb7AHQcidAKZdA14meh7sFiZUkmgqeh7sly+BX:8hLLAnLy
MD5:	DC9721334C75F4676D88955417D4CAEF
SHA1:	58BA7E8B1591A040BF789C9808E0DE4EEDC1AF4E
SHA-256:	1322DBF732F5901B886B819B8E31058C459019FB75E6AA0D768C0ADE4597EC6F
SHA-512:	6DE574D26738ECEBEDB4C52745E1144175158B82359374E2D3C867CE02A9DA53B9D4FB459C61600071A665E3BF2C6855EC071A604FD046823A99779B6130A61B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IkX._....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VkX._....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VkX._....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VkX._..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........f.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Mar 11 10:56:37 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.992929153234726
Encrypted:	false
SSDEEP:	48:82dTTb7SHQcidAKZdA1TehDiZUkwqehTy+R:8aL53Ny
MD5:	9CC339D97BC18D1FC4BB0C7C7FEE3053
SHA1:	484D41AF62F4BBE42BC1D5BFBEC5A17E2B1DCCC0
SHA-256:	8CBDE8F08A07DB3D9012037731E2F662AAE74BE807DAC674BE08777D7156B534
SHA-512:	E3100AE79CB963D299C67F505B4CE3761D64318C4655B332A53995DC8B5DDA070EA086DEEDCCAE834CF6A12CD042C7BBCDEC517F4EBBC03936F5685DDF43BF40
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......+.s..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IkX._....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VkX._....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VkX._....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VkX._..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VkX._...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........f.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Mar 11 10:56:37 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.982816733064995
Encrypted:	false
SSDEEP:	48:8adTTb7SHQcidAKZdA1dehBiZUk1W1qehBy+C:8GL5n9hy
MD5:	A4FE53414F82BDED622C538FCFFE764C
SHA1:	9B66C173D4BECD78620B8C683E1092DEFB65E94D
SHA-256:	446BA64A1C2077E4D63ABCF47477D2E8408477D332159A0EE19A412BBAC7DA31
SHA-512:	32DB2E2D3D0AC13A8D6FBB807782DB0CDD2FE45A26418A4539554A830685F75ED84A4CB95FE0765D5A0AEF5445527DCF97DA169E1ADD25162BF7B062E4E39CDD
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......+.s..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IkX._....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VkX._....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VkX._....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VkX._..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VkX._...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........f.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Mar 11 10:56:37 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9932553481339874
Encrypted:	false
SSDEEP:	48:8gdTTb7SHQcidAKZdA1duTeehOuTbbiZUk5OjqehOuTbLy+yT+:8wL5LTfTbxWOvTbLy7T
MD5:	FA66CFC6E8AFFB4A224496CD95CF6428
SHA1:	9C31641267AAFE56C8EF23590DCD54346F5A6752
SHA-256:	59B397F03D25C14B41B5E69B3CC428D96325665F8CEC9066E3663113FF9F1F57
SHA-512:	89E186C5CE35D782E9B88C481F76138276D355C217C31462543DA3117A2741F50233A18C2FC9B7BDA0A99DC53E4C0BCEC6466D9C3B96043A5F9EF46C5A95E19A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......+.s..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IkX._....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VkX._....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VkX._....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VkX._..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VkX._...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........f.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DocFetcher\DocFetcher.lnk

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Tue May 25 19:13:22 2021, mtime=Mon Mar 11 10:57:16 2024, atime=Tue May 25 19:13:22 2021, length=39424, window=hide
Category:	dropped
Size (bytes):	1148
Entropy (8bit):	4.5736703028209
Encrypted:	false
SSDEEP:	24:8mAj1IEndOEry3/ayAtAwmudNdJUUfjqygm:8mAj1bndO04/CtAwmudNdChyg
MD5:	A2411AC25EC4F9D07F0CD3F44C180BC5
SHA1:	891DF97C89F4F6CB0B11B71F827293209C679CD2
SHA-256:	80157F69D032E1C583E3B25FDFFA3D9E1AE73021E8C82FA9FED8109A680A0994
SHA-512:	A889CDCA0ACAA1271AB7C568BE83F866059C4C2BCB6890693D559F8EC0E6791C81DF91F13BE6F5007228570B2CA7598E0AF581A8B660C4BEC3EAEF706F5D95D4
Malicious:	false
Reputation:	low
Preview:	L..................F.... ......i.Q.....C.s.....i.Q...............................P.O. .:i.....+00.../C:\.....................1.....kX)_..PROGRA~2.........O.IkX)_....................V......f..P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.)...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.8.1.7.....^.1.....kX)_..DOCFET~1..F......kX)_kX)_....Q.....................-&0.D.o.c.F.e.t.c.h.e.r.....j.2......R.. .DOCFET~1.EXE..N......R..kX)_....k.........................D.o.c.F.e.t.c.h.e.r...e.x.e......._...............-.......^...........f.......C:\Program Files (x86)\DocFetcher\DocFetcher.exe..H.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.D.o.c.F.e.t.c.h.e.r.\.D.o.c.F.e.t.c.h.e.r...e.x.e.%.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.D.o.c.F.e.t.c.h.e.r.\.l.i.b.........*................@Z\|...K.J.........`.......X.......888683...........hT..CrF.f4... ...............%..hT..CrF.f4... ...............%.............1SPS.XF.L8C....&.m.q............/...S.-.1.-.5.-.2.1.-

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DocFetcher\DocFetcher.lnk~RF4d0a3a.TMP (copy)

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Tue May 25 19:13:22 2021, mtime=Mon Mar 11 10:57:16 2024, atime=Tue May 25 19:13:22 2021, length=39424, window=hide
Category:	dropped
Size (bytes):	1148
Entropy (8bit):	4.5736703028209
Encrypted:	false
SSDEEP:	24:8mAj1IEndOEry3/ayAtAwmudNdJUUfjqygm:8mAj1bndO04/CtAwmudNdChyg
MD5:	A2411AC25EC4F9D07F0CD3F44C180BC5
SHA1:	891DF97C89F4F6CB0B11B71F827293209C679CD2
SHA-256:	80157F69D032E1C583E3B25FDFFA3D9E1AE73021E8C82FA9FED8109A680A0994
SHA-512:	A889CDCA0ACAA1271AB7C568BE83F866059C4C2BCB6890693D559F8EC0E6791C81DF91F13BE6F5007228570B2CA7598E0AF581A8B660C4BEC3EAEF706F5D95D4
Malicious:	false
Reputation:	low
Preview:	L..................F.... ......i.Q.....C.s.....i.Q...............................P.O. .:i.....+00.../C:\.....................1.....kX)_..PROGRA~2.........O.IkX)_....................V......f..P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.)...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.8.1.7.....^.1.....kX)_..DOCFET~1..F......kX)_kX)_....Q.....................-&0.D.o.c.F.e.t.c.h.e.r.....j.2......R.. .DOCFET~1.EXE..N......R..kX)_....k.........................D.o.c.F.e.t.c.h.e.r...e.x.e......._...............-.......^...........f.......C:\Program Files (x86)\DocFetcher\DocFetcher.exe..H.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.D.o.c.F.e.t.c.h.e.r.\.D.o.c.F.e.t.c.h.e.r...e.x.e.%.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.D.o.c.F.e.t.c.h.e.r.\.l.i.b.........*................@Z\|...K.J.........`.......X.......888683...........hT..CrF.f4... ...............%..hT..CrF.f4... ...............%.............1SPS.XF.L8C....&.m.q............/...S.-.1.-.5.-.2.1.-

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DocFetcher\Readme.lnk

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Tue May 25 19:13:22 2021, mtime=Mon Mar 11 10:57:16 2024, atime=Tue May 25 19:13:22 2021, length=2496, window=hide
Category:	dropped
Size (bytes):	1126
Entropy (8bit):	4.5968335664908775
Encrypted:	false
SSDEEP:	24:8mF1IEndOE10PnwAJAwWdHQxdJUUfLqygm:8mF1bndOCanHJAwWdwxdCxyg
MD5:	3A4F67E263880528D72F5ADE8CA972A2
SHA1:	52C4F42E4B846C499389EE1B2DC81E17D1C74328
SHA-256:	B6EE7E8905368DC94DF0C470DD8154C5D38BC82A8C06F336C07D9345B7252B7D
SHA-512:	194D37DCB24DAAC9271196B67BAE50D0964FA35A98258B75BD7A64FBD1AF6936F2F833C95080BEA700BDB1B9822EFB772A0C7A3FF88129BFB01950502FF36EE9
Malicious:	false
Reputation:	low
Preview:	L..................F.... ......i.Q.....C.s.....i.Q...............................P.O. .:i.....+00.../C:\.....................1.....kX)_..PROGRA~2.........O.IkX)_....................V......f..P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.)...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.8.1.7.....^.1.....kX+_..DOCFET~1..F......kX)_kX+_....Q.....................z...D.o.c.F.e.t.c.h.e.r.....`.2......R.. .Readme.txt..F......R..kX)_....m.........................R.e.a.d.m.e...t.x.t.......[...............-.......Z...........f.......C:\Program Files (x86)\DocFetcher\Readme.txt..D.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.D.o.c.F.e.t.c.h.e.r.\.R.e.a.d.m.e...t.x.t.%.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.D.o.c.F.e.t.c.h.e.r.\.l.i.b.........*................@Z\|...K.J.........`.......X.......888683...........hT..CrF.f4... ...............%..hT..CrF.f4... ...............%.............1SPS.XF.L8C....&.m.q............/...S.-.1.-.5.-.2.1.-.2.2.4.6.1.2.2.6.5.8.-

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DocFetcher\Uninstall DocFetcher.lnk

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Mon Mar 11 10:57:20 2024, mtime=Mon Mar 11 10:57:20 2024, atime=Mon Mar 11 10:57:20 2024, length=68512, window=hide
Category:	dropped
Size (bytes):	1153
Entropy (8bit):	4.652995802795144
Encrypted:	false
SSDEEP:	24:8mn21IEndOE1H5sZhSAWAwOh3dmCdJUUfTqygm:8m21bndOCHmZhxWAwk3dmCdCpyg
MD5:	F011D1596A5B914AD33960FB59F0C7BF
SHA1:	5F5E2BBDE8BFF7029F2CBD334AA58BF371650A6C
SHA-256:	ABD23BB650023F17BADE2B204B8394387114A16062788DD7D2BC818D79033354
SHA-512:	437BD28CB6A6CCA5E60226BE23B54D808BD3D748A6B71E35DA6BB19B1EE232CDA07DBFA403A37A9DFA028EACDE1FD4D1C6031C8E252EC3B00BB32F5283A36C1C
Malicious:	false
Reputation:	low
Preview:	L..................F.... ......E.s...2.E.s...2.E.s...............................P.O. .:i.....+00.../C:\.....................1.....kX)_..PROGRA~2.........O.IkX)_....................V......f..P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.)...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.8.1.7.....^.1.....kX+_..DOCFET~1..F......kX)_kX+_....Q.....................z...D.o.c.F.e.t.c.h.e.r.....l.2.....kX+_ .UNINST~1.EXE..P......kX+_kX+_....S.........................u.n.i.n.s.t.a.l.l.e.r...e.x.e.......`...............-......._...........f.......C:\Program Files (x86)\DocFetcher\uninstaller.exe..I.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.D.o.c.F.e.t.c.h.e.r.\.u.n.i.n.s.t.a.l.l.e.r...e.x.e.%.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.D.o.c.F.e.t.c.h.e.r.\.l.i.b.........*................@Z\|...K.J.........`.......X.......888683...........hT..CrF.f4... ...............%..hT..CrF.f4... ...............%.............1SPS.XF.L8C....&.m.q............/...S.-.1.-.5.-.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DocFetcher\~ocFetcher.tmp

Download File

Process:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Tue May 25 19:13:22 2021, mtime=Mon Mar 11 10:57:16 2024, atime=Tue May 25 19:13:22 2021, length=39424, window=hide
Category:	dropped
Size (bytes):	1217
Entropy (8bit):	4.593410078537703
Encrypted:	false
SSDEEP:	24:8mAj1IEndOEry3/ayAtAwmudNdJUUf5qyPLtMm:8mAj1bndO04/CtAwmudNdC/yPL+
MD5:	9A321006B8A7582DC57F9E88E7C6CC8E
SHA1:	9D69C0C758FF706A9CF03E66087BB50A6621FEFE
SHA-256:	211C6B4C99E883C2D12E5348DE700D7EBECDCE2003F2FEFF17D4843A95B5D7EF
SHA-512:	048207694009633BBCC5B0909BE482A081E3B11469C68798A6F52ECFC2B50BA7EDCDFA64E3F08F314D5B3217B07558A401EA7FB44E5A6FF2790654F42E29593B
Malicious:	false
Reputation:	low
Preview:	L..................F.... ......i.Q.....C.s.....i.Q...............................P.O. .:i.....+00.../C:\.....................1.....kX)_..PROGRA~2.........O.IkX)_....................V......f..P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.)...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.8.1.7.....^.1.....kX)_..DOCFET~1..F......kX)_kX)_....Q.....................-&0.D.o.c.F.e.t.c.h.e.r.....j.2......R.. .DOCFET~1.EXE..N......R..kX)_....k.........................D.o.c.F.e.t.c.h.e.r...e.x.e......._...............-.......^...........f.......C:\Program Files (x86)\DocFetcher\DocFetcher.exe..H.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.D.o.c.F.e.t.c.h.e.r.\.D.o.c.F.e.t.c.h.e.r...e.x.e.%.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.D.o.c.F.e.t.c.h.e.r.\.l.i.b.........*................@Z\|...K.J.........`.......X.......888683...........hT..CrF.f4... ...............%..hT..CrF.f4... ...............%.............1SPS.XF.L8C....&.m.q............/...S.-.1.-.5.-.2.1.-

C:\Users\user\Downloads\6dae17d4-315e-4667-bf16-8a624e631fb2.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	6.388866180590102
Encrypted:	false
SSDEEP:	768:rn04RNfdSXe28HjPxWlk0CoCzXtBi4PY//I0D3fmoxbxAuauIRde:D04f1SMHjZ0k/tB1g//I0DuoxbxAHE
MD5:	DD0ADFD29BCCFAF4F80A5ADEDF757B5F
SHA1:	FDBD1F52735150A000D795700AAD72A5DEB5A92B
SHA-256:	F2B9FBD1364DDB83377C4DF4A1798EAB3F7ABCE5A0BDA73D91ABD6E1AFB650A9
SHA-512:	45891392E1EC624C4F806A6C76E056BF815FB55E14F33E420743EC720246C66DA846B894F19467B41B7D0CEFBF104A684E2DFF2F49034CC69FD5661E09F33138
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1)..PG..PG..PG._...PG..PF.IPG._...PG.sw..PG..VA..PG.Rich.PG.........PE..L...".$_.................f...\|......H3............@.......................................@.................................D...........P............................................................................................................text...Wd.......f.................. ..`.rdata...............j..............@..@.data...8U...........~..............@....ndata...................................rsrc...P...........................@..@................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Downloads\Unconfirmed 882250.crdownload

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Category:	dropped
Size (bytes):	73856445
Entropy (8bit):	7.999640050015359
Encrypted:	true
SSDEEP:	1572864:+/iVw6goMU/X82Ob5EEzDql6uye9LMZ6OkgrblTjCnBTZ4w:Gi1go3ha5EEvql649LMZ6OHrblTj8R
MD5:	9198C3C72789AEFB6790A60EEF7D33B0
SHA1:	05B686FD25BA21C8049DA79BF115F191D12212ED
SHA-256:	7C2AEE6BC3498363767274271B0C14C5288184F3A5FD27FD904F2B4315B53BF5
SHA-512:	A4A863ACB7F3FA9FA43AE7F205F2831002AD37C220223C99D0C24F8C2EEC68249FF9E6E6DA0E57A8598C0A837325C0F574B6E7FE854271503F3B1532B5F6CD9E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 3%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1)..PG..PG..PG._...PG..PF.IPG._...PG.sw..PG..VA..PG.Rich.PG.........PE..L...".$_.................f...\|......H3............@.......................................@.................................D...........P............................................................................................................text...Wd.......f.................. ..`.rdata...............j..............@..@.data...8U...........~..............@....ndata...................................rsrc...P...........................@..@................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Category:	dropped
Size (bytes):	73856445
Entropy (8bit):	7.999640050015359
Encrypted:	true
SSDEEP:	1572864:+/iVw6goMU/X82Ob5EEzDql6uye9LMZ6OkgrblTjCnBTZ4w:Gi1go3ha5EEvql649LMZ6OHrblTj8R
MD5:	9198C3C72789AEFB6790A60EEF7D33B0
SHA1:	05B686FD25BA21C8049DA79BF115F191D12212ED
SHA-256:	7C2AEE6BC3498363767274271B0C14C5288184F3A5FD27FD904F2B4315B53BF5
SHA-512:	A4A863ACB7F3FA9FA43AE7F205F2831002AD37C220223C99D0C24F8C2EEC68249FF9E6E6DA0E57A8598C0A837325C0F574B6E7FE854271503F3B1532B5F6CD9E
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1)..PG..PG..PG._...PG..PF.IPG._...PG.sw..PG..VA..PG.Rich.PG.........PE..L...".$_.................f...\|......H3............@.......................................@.................................D...........P............................................................................................................text...Wd.......f.................. ..`.rdata...............j..............@..@.data...8U...........~..............@....ndata...................................rsrc...P...........................@..@................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2237
Entropy (8bit):	7.904510778065072
Encrypted:	false
SSDEEP:	48:z8trj3eRE5ff330eC+X3XMDk1zyb6b9RpRNc6:CbaE5n330EXxybMpHb
MD5:	EA39C07D3F0F7DF1E328FDB8C2BCE42E
SHA1:	9825245F13C07B495E3F1F03B793BAA1D8BD0639
SHA-256:	83D17A6D91EAD57195A54DAA4BDADE775C1B8693A1632358BF0F4D2D035E5583
SHA-512:	F37A2C4F636B864A07B60ADC096A153621670F50D9E71E2D0D880341013B5E65BD56CCCD282F37FAA1EC5626D6048D588373A2A68C876AD8A8625A476EDF84E7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......IDATx..ZkPT....=KH!......L.s.cR)E+..!.Z+.. .E.. ..UD$XV....rQ.+..@]a..F\...J..%.E.2.y..g..,.B&#....g.eg.y.....}..O.....A.:.^...$..Y".V.f./[.).kq...ql....L.?.$.S.EDZ......!...8.v.........`.7.P.=...sqd-.&.Y!".......M.".C..%..[";h<.D....7.....5...\|.J4..."....Dd3...C^'......:N..Q.>.....Co.^6.......\[..h..u[P.1.y.-..M"..!o._.,.<..[.......Z.T..._-.jVi.4..w..}%...)..C.z./.3.}U....Y.P..WPK...y(?.F...i..-1hS........<-.ry......R.Q..........y.9....L....@..\|W.._%Y...p.wc.......hF.2.Qsd*..p.J.!....=.K\P.i.Z[....,..-"..q5....f.H.&K...........p..v."..C..4..H.f...w...R4zU..G.........,.#..P.._.>....T{.....{..v.O.d.5..s._..<#....9.....4..F.3Z.\p7s...L....v.cB.._...'.}.>.dq....X!;h...O...o.d....;.n.G..z1..Q..........Jn.Uu.P.........p...A.E...".Oc......'.0l&T...$D.a.+...1+.l..MAZ.H..i.~p.b.l......4.u.>..']..Tw....xB.Fz...7...8O...U..(..kL.-rB^Ek.."rClH.\|...^....A.1....IP.....:t...rf1.....G(...x.....?........[(....7..A...

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=9A176ADB-73F4-4BD8-A648-23F2443493B5&vxii_pid=12&vxii_pid1=10067&vxii_rcid=5aa989e0-19fe-4ef1-8068-2d0a432b0425
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	126874
Entropy (8bit):	5.290530951829999
Encrypted:	false
SSDEEP:	3072:WVo5++Ih8GgP3hujzwbhd3XvSiDQ47GKA1/:/y8G6RujcHX6MQ47GKe/
MD5:	709DB2FEFA31F6B418ED10B6402D44B8
SHA1:	DA1414210E5DD8295289068D60ADFE5B04284673
SHA-256:	FCAB068242FF8A9127D94610B2EE3C997F26555E660DC6DB957339EC7FF3A006
SHA-512:	7D071872E0A44051A37486C498E47A945CF57397018766F9EB0604589F3281F9EADBC523857A7F05A5C44D567A91D4A26DCC5FDCA36B23239C77B430EA70B1AD
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/js/min/sf.sandiego-head.js?1709827391
Preview:	if(!Function.prototype.bind){Function.prototype.bind=function(a){if(typeof this!=="function"){throw new TypeError("Function.prototype.bind - what is trying to be bound is not callable")}var e=Array.prototype.slice.call(arguments,1),d=this,b=function(){},c=function(){return d.apply(this instanceof b?this:a,e.concat(Array.prototype.slice.call(arguments)))};if(this.prototype){b.prototype=this.prototype}c.prototype=new b();return c}}function isPassiveEventListenerSupported(){var c=false;try{var a=Object.defineProperty({},"passive",{get:function(){c=true}});window.addEventListener("",null,a)}catch(b){}return c}SF.FancyStickify=(function(){var b={};function a(d,c){if(!d\|\|d.length===0\|\|!$("body.sandiego, body.sandiego_chrome").length){return}this.o=$.extend({},b,c);this.$els=d;this.$header=this.$els.filter(".l-header-nav");this.$viewabilityRequirementAd=$(".draper",this.$header);this.viewabilityReached=false}a.prototype.init=function(){if(!this.$els){return}this.$window=$(window);this.sticky_

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	29506
Entropy (8bit):	7.9863383216363655
Encrypted:	false
SSDEEP:	768:lArFOCNAFH/0J/Ki1fAxUaNZieow4iqSIU9:liF9fJZ1fAxU2yw4iT
MD5:	399C97623980BB4FBDCD7D6B347B4356
SHA1:	A9F53015AEB74FD751FF9B34539F3BB41C4827BE
SHA-256:	99700A519CF2DE80C309CFCC37F1DE064A4D89F077AD9ADDBDECC5145023D62F
SHA-512:	4C1161FF9804DD553D4EFB99B81089E9BE25F8F3FBB1E0F4BE1F61817EF7B56750AB239962A8D8E2644115B77DE008A4604BDBD61175650BE4B816987FEC6EF7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,..........mz.....pHYs............... .IDATx..y..U....z.}&.%.L...$..... .......A}.E..H.WVA......((....7$.@.&.....3I&..^...G-].]......\|z...,..~.9.9..X.h.........n.........R.;.@.h!<x..!Sx........ay...GX.<x8l........x.......... .w.q.@..#xGC<.'....!..:.......n.;.6.E....USPXD~~>........_@ ..h...9GX....h...E...-..A.M.."2.....N..h...o.O^{..........y~.J.p..m.......J.i).b.q.....C..+.N~A.Eb..:.....t..BN...........Iww.._'.p[3.q...... ..@^..J...+(.W9..z...(.C...RU..\|TU....E..Z.o.Ci...upp3l].....PQ..%..,."T\E.l...Z....Z....#DnY.<.....a.....L.M....(jo.".E..L'..Q(.f...G...S!.BQ.%...J..P..EQ.B.(.E......F;...a....u..!B..t.T.\\M...Hy-....!...........;....;.*.IS-R.%..!z..IL&9.../F.9.1jjB\|.....Ck.v`..W..u....O).D......<i..L.J.;i\|....1....@)..].....En-P=x..)RRJ..9K.4..i.uM.4"...VJ....=....F...4M..$.h4j...N4.%......2..<...C..D...X.t)....3....TTT.......[o.....N{{;...tuu..........RV.\..S...\...^z...:..O?...............UW].......Omm-.>.(UUU.

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	12216
Entropy (8bit):	7.9762489667721495
Encrypted:	false
SSDEEP:	192:LVjvpmS47Chk61IpdCl1Dun7bvH0XNwlkCggwVIYD:L1hTlhIdi1SnE9vhqK
MD5:	BCD83A321DE06BD692174A5E154E1F26
SHA1:	E02573270B263B1151AE4111E0FD4627EA2EA3D9
SHA-256:	898BE16971F9F6091813EDCE768BE5859BE447CA0EBAFB17D75353BA4EA213C5
SHA-512:	D4D8FE50DB8C2CC5AB9AF7188C5C5C605C0866639601EC2A1F8E59FCD152ABF46E02806813E3276F9ECF41B3A4CB33A2D22DA2326066EAD17756D994F660AD14
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/app/nel_img/17569
Preview:	RIFF./..WEBPVP8L./../w...M0l.6R....?.=3D......;I...c.f........\|...?..BU.J...0.....d.).L%J....5.R..\.$9..9'~.....i...m..F......m...A.N$.v.........E.../Qn$Ir......@.1.&.......D...%D]Sr.;.\|#D.P.a.......)V..^....2M%s./!)..Vi.\.<K.\..S...q..M.x^..I.~>u..~G.}.U.M......WkZ.c".o.....9s>'.....hbW........75....f0y..e..BA...#....2...m.AM.....CDL...n..N.)..m...;..u...V.T..b\.U..<<...^:b.tkm[$9.[-ff....-W.(.. W.\...bff...9...W]3".+..m..........(,P......nm..e........5C).....)..k!..>g...m..{.n{w..x...k....dT%.m.5m.s...s...m..6.m.""3p.....9{.....H..I.>..c.Ex)N...)...`:...j......O....S5%...9...{....$.Y.....P...<.[.....mc.e.......m...v.}.c.}....]..@..4..r..?.E..F...$..0.....L...ff.bff..+fff.Nf.`...l.l=.....1.....,..v.u...~?..:S.....m.m...).v.I:m.6,~\|..<~.mS$i...y_3.....,.jffffn..DK4.yN.....Sc...y~T\..IAnfo(p.F9.o......;.2E.]I.....eH..u..R.b.%b.d"..``.V.*...8w...{..Il;X.....n......L.1{...........M.?=..............<...9......f.M.0l;.H.......[.0....&Y

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/openx/6d3426ab-1ee2-e530-fa69-2e341f77148e?gdpr=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1662
Entropy (8bit):	5.019887540191818
Encrypted:	false
SSDEEP:	24:hYkCn0Xi5rXW9jgFi5GtZYAWnyfdWiaM/Njv3igeHa/UfbJijCV6/MBggE4NkIM:BnSxmBAsfM/N7JZ/UfdijCY/MB53N5M
MD5:	B47E18B9602901B4442894ACF9EFA708
SHA1:	7BDC44B5C2D6ED73405A512A0D25D096C6F6068B
SHA-256:	C16A536E9381A97C5D473A2B70AA9057BCEEBE38F05BB7D90360C96BFF579033
SHA-512:	4C58D58D21E66682EF6B9DEB3821BEB89834F69EDA4CD7471AD132B698A6E11E8E6B2D04620DFDD6B6B9A06CA6DFAC36C96AD12233A359CF1F02329CDEA917DD
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/topics/topics_frame.html?bidder=pubmatic
Preview:	<!DOCTYPE html>.<html lang="en">..<head>. <title>Topics demo</title>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1">. <meta http-equiv="origin-trial". content="AseYc2DtZGb//W5XVWgcoP6UF3L+dzpvN5W30ZfyW0aY9GPRVT9CgZXlFz8KHt25ohltfnkuImnAY3JETFGc+AgAAABfeyJvcmlnaW4iOiJodHRwczovL2Fkcy5wdWJtYXRpYy5jb206NDQzIiwiZmVhdHVyZSI6IlByaXZhY3lTYW5kYm94QWRzQVBJcyIsImV4cGlyeSI6MTY4ODA4MzE5OX0=">. <link href="favicon.ico" rel="shortcut icon">. <script>. async function getTopics() {. try {. if (. "browsingTopics" in document &&. document.featurePolicy.allowsFeature("browsing-topics"). ) {. const topics = await document.browsingTopics();. console.log(. "Called iframe:",. window.location.hostname,. topics,. "\nNumber of topics: ",. topics.length. );. return Promise.re

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2020)
Category:	downloaded
Size (bytes):	12817
Entropy (8bit):	5.34459161517544
Encrypted:	false
SSDEEP:	192:Gq6KPV24ZKs86O/DfVcOfFmI46coWCTGdhFKdbsWkzY:GkxI603wI46xWSGdhUr
MD5:	1D3D22DF067F5219073F9C0FABB74FDD
SHA1:	D5C226022639323D93946DF3571404116041E588
SHA-256:	55A119C0394F901A8A297E109C17B5E5402689708B999AB10691C16179F32A4A
SHA-512:	0B6B13B576E8CC05BD85B275631879875A5DBCB70FD78E6C93B259317ED6FD5D886F37D0CC6E099C3D3A8B66FEA2A4C2C631EB5548C1AB2CD7CB5FA4D41EA769
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function m(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};.function aa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");}var r=aa(this),u="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),v={},w={};function x(a,b){var d=w[b];if(null==d)return a[b];d=a[d];return void 0!==d?d:a[b]}.function y(a,b,d){if(b)a:{var e=a.split(".");a=1===e.length;var g=e[0],k;!a&&g in v?k=v:k=r;for(g=0;g<e.length-1;g++){var c=e[g];if(!(c in k))break a;k=k[c]}e=e[

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2549
Entropy (8bit):	4.540747775000225
Encrypted:	false
SSDEEP:	48:cfkAvf3R7DSRcZBV0wyyCq7QmEC1VIJUTA8hTD:uvfVSMqfq7QmECVwUTHD
MD5:	0EC28A189B84FCD3EC2EE7A376BC929C
SHA1:	029CE2F231778EF4228A33206FA84E4118E44569
SHA-256:	67285130C9EA896794BD451295DB6A03A4F5B7941CB9EFD5D5088D06F63208D7
SHA-512:	A82967AA1E05D493A95F1C57B5792B6C414953494FA9C093D2BBCF74CD7047654E05572A001272A7D4BC8D877D27DD4ED8F22B51CE3453A2C2955C9BBDEC2CDC
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 21.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 300 249.4" style="enable-background:new 0 0 300 249.4;" xml:space="preserve">.<g>..<path d="M138.5,112.8c0-39.6-14-57.6-21.4-64.4c-1.5-1.3-3.7-0.1-3.6,1.8c1.5,22.4-26.6,27.9-26.6,62.9h0c0,0.1,0,0.1,0,0.2...c0,21.4,16.2,38.8,36.1,38.8c19.9,0,36.1-17.4,36.1-38.8c0-0.1,0-0.1,0-0.2h0c0-9.9-3.7-19.4-7.5-26.5c-0.7-1.4-2.9-0.9-2.6,0.4...C155.5,117.3,138.5,136.1,138.5,112.8z"/>..<g>...<path d="M95.6,196.2c-0.9,0-1.8-0.4-2.4-1L1,103.2c-1.3-1.3-1.3-3.5,0-4.9L98.3,1c0.7-0.7,1.5-1,2.4-1h27.9c1.7,0,2.8,1.1,3.2,2.1....c0.4,1,0.5,2.6-0.7,3.8L39.6,97.4c-1.8,1.8-1.8,4.8,0,6.7l72.3,72.3c1.3,1.3,1.3,3.5,0,4.9l-13.8,14....C97.4,195.9,96.5,196.2,95.6,196.2z"/>..</g>..<g>...<path d="M114.1,212.4c-1.7,0-2.8-1.1-3.2-2.1c-0.4-1-0.5-2.6,0.7-

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=9A176ADB-73F4-4BD8-A648-23F2443493B5
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	17
Entropy (8bit):	3.734521664779752
Encrypted:	false
SSDEEP:	3:gCtwn:l2
MD5:	A54A440C7EED0A7B3E78E6B985E12FEE
SHA1:	92EF2F2008EBBC5635B71F5D6C9831C5F2F4514F
SHA-256:	62CE950AD0D7F664B316B4253BBC993BF0BF8310970F64B150FDA6F1FA59DFEA
SHA-512:	F82E417DFAA9DAAE2A74DE3564D9DF703E4A2849D60752F6A9C4C2C5053CD72D3F5ED036EF683CA586CE17D7A2DA3E9D3DA6311560296929C70B23BC05A57631
Malicious:	false
Reputation:	low
URL:	https://ml314.com/imsync.ashx?pi=3642666937673580575&data=eyJwaCI6NDk0MSwid2giOjkwNywidGJzIjo1Mi4wMSwiZHQiOjYwLCJwaWQiOiIxNzEwMTU4MjQwNTY1XzZpcTk0dGlldyIsInNkIjoxMzA3LCJzZHMiOjgwMH0%3D
Preview:	_ml.setIM(false);

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39252)
Category:	downloaded
Size (bytes):	40304
Entropy (8bit):	5.684113257776958
Encrypted:	false
SSDEEP:	768:jGrUzPpKVYqq+vqvqleTOXYOJvha+8LSatubae6M2C0MlqsjE8o:jGrUEVlZSqQuBISUM71lJjEz
MD5:	33BE91404F572D93194AC7E714A01EE5
SHA1:	F77CC948E287B5A76A82EAAED8033D5FBF79855C
SHA-256:	3BC4F52A6D3C3A14B9FD3CF9F2329E6A3AC5CA7A7E2327C9949C0ABF5DBAF127
SHA-512:	F44DD3DFD75CB9F1200CE8B4F5B06002AB0F6673D72FAD961845F05AB247C5849B9F9381D23E2B3AF3D397B48CFE5F379E27074FFD6426213A048681316E7D63
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/O8T1Km08OhS5_Tz58jKeajrFynp-IyfJlJwKv1268Sc.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==. (function(){function M(C){return C}var n=function(C){return M.call(this,C)},r=function(C,l,z,m,v){if((m=(v=q.trustedTypes,C),!v)\|\|!v.createPolicy)return m;try{m=v.createPolicy(z,{createHTML:n,createScript:n,createScriptURL:n})}catch(A){if(q.console)q.console[l](A.message)}return m},q=this\|\|self;(0,eval)(function(C,l){return(l=r(null,"error","bg"))&&1===C.eval(l.createScript("1"))?function(z){return l.createScript(z)}:function(z){return""+z}}(q)(Array(7824Math.random()\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==',.'(function(){/'

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Category:	downloaded
Size (bytes):	15744
Entropy (8bit):	7.986588355476176
Encrypted:	false
SSDEEP:	384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/
MD5:	15D9F621C3BD1599F0169DCF0BD5E63E
SHA1:	7CA9C5967F3BB8BFFEAB24B639B49C1E7D03FA52
SHA-256:	F6734F8177112C0839B961F96D813FCB189D81B60E96C33278C1983B6F419615
SHA-512:	D35A47162FC160CD5F806C3BB7FEB50EC96FDFC81753660EAD22EF33F89BE6B1BFD63D1135F6B479D35C2E9D30F2360FFC8819EFCA672270E230635BCB206C82
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......=........t..=..........................d..d..^.`.. .T..<.....\|..{........6.$.... ..t. ..I.3.%.....8..&....4Z.\|t .8.........D...$.uNE.P.E.Ak...=.x.9Xz.`.I..R....#F+B`..}.RP\|E...Z\.W[.............C...QB....m...cm.?.F.g.......Q....3......p...L2.[......!+@U..^~.......D.?.......j...U...c..U.l.6{...m.CD].h.t.....Q8.....@P...L.c.....+...ZD..2.K...:..4{g..:..~....v......<..H^.R.'....8....?.;...uy.VW..8=.".F..*.....@E....c....=..Ib.....y8$.a){.......KiIW.&..~.}..1..w.M..{.4......!..{..F.H.5#K...t..5.w...ve;. '......NJ......'(%;...?...D...M.Cq,<.=?.f......._...V..bA.(..37..v....+.uY.C.b.w8AF..3.n.-..'..U%.2....o.l."...^bj..aoF.!`....A....j...'.:Z.u...[..p.GW:U%.Ejq...:I...C........S.C...sJe.6D...<.UM,..&h..z}.y\|..9...D..j...n..B.$..T....?../.Q..=B...C._.f.#.:Bo.@]T.(..v..F..+d...". ......R..R..R....!..~A....X............>!`p..,08. 9.../.....r..Q.......Qpg.\ko...C..3..Y.y..t'.d9..>#\|..3..?.#..$....i........g5.z....S....{3..Sp..S2..w.6........

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1321)
Category:	downloaded
Size (bytes):	17314
Entropy (8bit):	5.342134706855769
Encrypted:	false
SSDEEP:	384:cCDFzlR6exHAiyyrYuy9ckdnfczIk7LcuNP/p:DlsexHAlii9NmIeLcE
MD5:	2CC87E9764AEBCBBF36FF2061E6A2793
SHA1:	B4F2FFDF4C695AA79F0E63651C18A88729C2407B
SHA-256:	61C32059A5E94075A7ECFF678B33907966FC9CFA384DAA01AA057F872DA14DBB
SHA-512:	4ED31BF4F54EB0666539D6426C851503E15079601A2B7EC7410EBF0F3D1EEC6A09F9D79F5CF40106249A710037A36DE58105A72D8A909E0CFCE872C736CB5E48
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var l="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),r={},u={};function w(a,b){var c=u[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}.function x(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var g=d[0],h;!a&&g in r?h=r:h=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in h))break a;h=h[e]}d=d[d.length-1];c=p&&"es6"===c?h[d]:null;b=b(c);

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-BJack-8IHJRr_cK62dAORs1Ohijtuxn4GjZVO8gjcVvDCrDXX5GCvy2M0c_ucziaoldad2VlD9Th1xMK8nhptdeG8fu-R1EL3CRZx6Fdb71PM_7vg
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMIxPng7JPshAMVzK46BR32sgbXEAEYACCb4Llk;dc_eps=AHas8cAUgSMRtDekeN72pWOckMV6MVYTJvb0gXngSXKDXkZ4zP9ioNxqTtnPWLvgM0hxu-zo9R_CxsvMB-gEkNgA;met=1;&timestamp=1710158238986;eid1=871060;ecn1=1;etm1=0;eid2=2;ecn2=1;etm2=7;
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	113980
Entropy (8bit):	5.964225218474032
Encrypted:	false
SSDEEP:	1536:aw/ljaRKh+XvuHgaFBywbLjTZnmpLtq6Svw+Ry686o021f4aqi1okuqaHZFRr3i0:nOwh+aZI+I+G3Y5CveXx0i
MD5:	4AF2DCE7E31B9AB37DA62998F9E11E59
SHA1:	EE6F8CA23DB07C4E6C07DF4318804197B01CF986
SHA-256:	0E597186DA6320F39D61C42BEB9A25466AD5B21B94855529AF3B07C5EA6FD0F3
SHA-512:	48491A88723D21D66D398768A7846D3690A60D56330D839627387186A5E9AC131B0E3E3044D1E8630BC3E35040FB69C0099931E350E83CE3A1BB50B508846F63
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1576841476053997&correlator=2994132923330260&eid=31081518%2C31081716%2C31081566%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403050101&ptt=17&impl=fif&iu_parts=41014381%2CSourceforge%2CSF_TYP_300x250_B&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=300x250&ifi=2&sfv=1-0-40&fsfs=1&fsbs=1&sc=1&cookie=ID%3Ded8d538436f1b623%3AT%3D1710158205%3ART%3D1710158205%3AS%3DALNI_MbiYxvEWP7dZiJkctj8HGzhHyMpCg&gpic=UID%3D00000dc711cb5676%3AT%3D1710158205%3ART%3D1710158205%3AS%3DALNI_MbtGcDgo6RHjTtG2es2mbdsN1jDSw&abxe=1&dt=1710158224773&lmt=1710158224&adxs=963&adys=491&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=2&oid=2&u_his=2&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Fpostdownload&ref=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Ffiles%2Fdocfetcher%2F1.1.25%2Fdocfetcher_1.1.25_win32_setup.exe%2Fdownload&vis=1&psz=299x275&msz=299x0&fws=0&ohw=0&ga_vid=1854926735.1710158203&ga_sid=1710158225&ga_hid=2052868623&ga_fc=true&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFsyLFtbIi80MTAxNDM4MS9Tb3VyY2Vmb3JnZS9TRl9UWVBfMzAweDI1MF9CIixbXV1dXSxudWxsLDNd&dlt=1710158220699&idt=4016&prev_scp=oss_tpc%3DFile%2520Managers%2CSearch%2CSoftware%2520Development%2CSource%2520Code%2520Management%2CStorage%2CSystem%26shortname%3Ddocfetcher%26dc_ref%3Dhttps%253A%252F%252Fsourceforge.net%252Fprojects%252Fdocfetcher%252Fpostdownload%26sz%3D300x250%26page_type%3Dpg_postdownload%26hb_format_appnexus%3Dbanner%26hb_size_appnexus%3D300x250%26hb_pb_appnexus%3D0.26%26hb_adid_appnexus%3D47a5976e91a471b%26hb_bidder_appnexus%3Dappnexus%26hb_format%3Dbanner%26hb_size%3D300x250%26hb_pb%3D0.26%26hb_adid%3D47a5976e91a471b%26hb_bidder%3Dappnexus&cust_params=usingSafeFrame%3D1&adks=3574710162&frm=20&eo_id_str=ID%3Dccb10672a4298c0a%3AT%3D1710158205%3ART%3D1710158205%3AS%3DAA-AfjZQQCnCz9TlsGBpH19Z0_Y8
Preview:	{"/41014381/Sourceforge/SF_TYP_300x250_B":["html",0,null,null,1,250,300,0,1,null,null,1,1,null,[138416297042],[6180654644],[2036965341],[1511469861],[151821],null,null,null,null,null,null,1,null,null,null,null,null,null,null,"CMT54OyT7IQDFcyuOgUd9rIG1w",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"2",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html><head><script>var jscVersion = 'r20240306';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><div class="GoogleActiveViewInnerContainer"style="left:0px;top:0px;width:100%;height:100%;position:fixed;pointer-events:none;z-index:-9999;"></div><div style="display:inline"class="GoogleActiveViewElement"data-google-av-cxn="https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjstMom1EWzGCxcHw7f4o0_1G33ntOw_fTsHSosef3PxzF3TtP7eBFlipym6iabjD4XqNupK81s-hWFH6jewyf25oajQOFd2CVyKZAMh5w

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=&google_error=15
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	60735
Entropy (8bit):	5.970030383702069
Encrypted:	false
SSDEEP:	384:lW0A3XwkXYFyBN8qBLcILBgUy664p/AMY0IT2fAI0iyO4EoooT2VPt74RmXxxPCX:lWYkXYFyBN8oHBl/J3tzj74Rm1MCttC
MD5:	A8DA6B184D796370714F1DDF6C9FD162
SHA1:	E17535915233CDEDF2BB7967A4A9049D281E83F7
SHA-256:	E042D4878D2BECA7E65230530643BC69F892A177D661F17093E49CEB53369761
SHA-512:	69B32E3DBECFCBF60BF4CD3C1B13C6C0EEE0C0762A90D2CDE9EBB13CAF979794758929B6CA19C7EF775B1A1F2545A75F67CFE306C05EEEB741CDF014E35E437F
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1576841476053997&correlator=2994132923330260&eid=31081518%2C31081716%2C31081566%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403050101&ptt=17&impl=fif&iu_parts=41014381%2CSourceforge%2CSF_TYP_728x90_A&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=728x90%7C970x250&ifi=3&sfv=1-0-40&fsfs=1&fsbs=1&sc=1&cookie=ID%3Ded8d538436f1b623%3AT%3D1710158205%3ART%3D1710158205%3AS%3DALNI_MbiYxvEWP7dZiJkctj8HGzhHyMpCg&gpic=UID%3D00000dc711cb5676%3AT%3D1710158205%3ART%3D1710158205%3AS%3DALNI_MbtGcDgo6RHjTtG2es2mbdsN1jDSw&abxe=1&dt=1710158224778&lmt=1710158224&adxs=268&adys=86&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=3&oid=2&u_his=2&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Fpostdownload&ref=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Ffiles%2Fdocfetcher%2F1.1.25%2Fdocfetcher_1.1.25_win32_setup.exe%2Fdownload&vis=1&psz=728x115&msz=728x0&fws=512&ohw=0&ga_vid=1854926735.1710158203&ga_sid=1710158225&ga_hid=2052868623&ga_fc=true&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFsyLFtbIi80MTAxNDM4MS9Tb3VyY2Vmb3JnZS9TRl9UWVBfNzI4eDkwX0EiLFtdXV1dLG51bGwsM10.&dlt=1710158220699&idt=4016&prev_scp=oss_tpc%3DFile%2520Managers%2CSearch%2CSoftware%2520Development%2CSource%2520Code%2520Management%2CStorage%2CSystem%26shortname%3Ddocfetcher%26dc_ref%3Dhttps%253A%252F%252Fsourceforge.net%252Fprojects%252Fdocfetcher%252Fpostdownload%26page_type%3Dpg_postdownload%26hb_format_appnexus%3Dbanner%26hb_size_appnexus%3D728x90%26hb_pb_appnexus%3D0.82%26hb_adid_appnexus%3D44b7f32f40b5ff7%26hb_bidder_appnexus%3Dappnexus%26hb_format%3Dbanner%26hb_size%3D728x90%26hb_pb%3D0.82%26hb_adid%3D44b7f32f40b5ff7%26hb_bidder%3Dappnexus&cust_params=usingSafeFrame%3D1&adks=3705235419&frm=20&eo_id_str=ID%3Dccb10672a4298c0a%3AT%3D1710158205%3ART%3D1710158205%3AS%3DAA-AfjZQQCnCz9TlsGBpH19Z0_Y8
Preview:	{"/41014381/Sourceforge/SF_TYP_728x90_A":["html",0,null,null,1,250,970,0,1,null,null,null,1,null,[115763391621],[2168334381],[2036965341],[1511469861],[151821],null,null,null,null,null,null,1,null,null,null,null,null,null,null,"CPG2-OyT7IQDFQZACAQdI1gLqw",null,null,null,null,null,null,null,null,["012402262017000"],null,null,null,null,null,"3",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012402262017000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}html:not([amp4ads]),html:not([amp4ads]) body{height:auto!important}html:not([amp4ads]) body{margin:0!important}body{-webkit-text-size-adjust:100%;-moz-text-size-adjust:100%;-ms-text-size-adjust:100%;te

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	31342
Entropy (8bit):	6.211712072327236
Encrypted:	false
SSDEEP:	768:Z9bz8gEz8gtbpR/ovEkW0QrAjZHTmomRz4II+dmY:QAE3o8kxFdHTmwY
MD5:	F78D5DB4F695247D26B80F3DBDBFB935
SHA1:	D8A8C8816DC1A671FA7DAB9949EBCD2EAE6FFAC0
SHA-256:	463577C87598E8C5686D938615172D1829B6DA35477106ED2A5771A248BFFD6C
SHA-512:	A6B1D708B81F4A9B0B6F3CE44A36906ABF03060B2EE8F1FFA1E8FDA9BF44340B8E7839D1FB916AE8EEC2F96D95C6B6E73566015BD6715F5586915713ECAA2571
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1401323213163731&correlator=4054193226133307&eid=31079957%2C31080983%2C31081725%2C31081566%2C44807746%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403050101&ptt=17&impl=fif&iu_parts=41014381%2CSourceforge%2CSF_ProjectSum_300x250_B&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=300x250&ifi=2&sfv=1-0-40&fsfs=1&fsbs=1&sc=1&cookie=ID%3Ded8d538436f1b623%3AT%3D1710158205%3ART%3D1710158205%3AS%3DALNI_MbiYxvEWP7dZiJkctj8HGzhHyMpCg&gpic=UID%3D00000dc711cb5676%3AT%3D1710158205%3ART%3D1710158205%3AS%3DALNI_MbtGcDgo6RHjTtG2es2mbdsN1jDSw&abxe=1&dt=1710158241392&lmt=1710158241&adxs=963&adys=491&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=2&oid=2&u_his=2&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2F&ref=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Fpostdownload&vis=1&psz=299x275&msz=299x0&fws=0&ohw=0&ga_vid=1854926735.1710158203&ga_sid=1710158241&ga_hid=98602124&ga_fc=true&ga_cid=1668299401.1710158203&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFsyLFtbIi80MTAxNDM4MS9Tb3VyY2Vmb3JnZS9TRl9Qcm9qZWN0U3VtXzMwMHgyNTBfQiIsW11dXV0sbnVsbCwzXQ..&dlt=1710158238737&idt=2612&prev_scp=oss_tpc%3DFile%2520Managers%2CSearch%2CSoftware%2520Development%2CSource%2520Code%2520Management%2CStorage%2CSystem%26shortname%3Ddocfetcher%26dc_ref%3Dhttps%253A%252F%252Fsourceforge.net%252Fprojects%252Fdocfetcher%252F%26sz%3D300x250%26page_type%3Dpg_project%26hb_format_appnexus%3Dbanner%26hb_size_appnexus%3D300x250%26hb_pb_appnexus%3D0.86%26hb_adid_appnexus%3D468a9342a0f65ec%26hb_bidder_appnexus%3Dappnexus%26hb_format%3Dbanner%26hb_size%3D300x250%26hb_pb%3D0.86%26hb_adid%3D468a9342a0f65ec%26hb_bidder%3Dappnexus&cust_params=usingSafeFrame%3D1&adks=4208950979&frm=20&eo_id_str=ID%3Dccb10672a4298c0a%3AT%3D1710158205%3ART%3D1710158205%3AS%3DAA-AfjZQQCnCz9TlsGBpH19Z0_Y8
Preview:	{"/41014381/Sourceforge/SF_ProjectSum_300x250_B":["html",0,null,null,1,250,300,0,1,null,null,1,1,null,[138416297042],[6180654644],[2036965341],[1511469861],[151821],null,null,null,null,null,null,1,null,null,null,null,null,null,null,"CMHy1vST7IQDFcRXCAQdzywOFg",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"2",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html><head><script>var jscVersion = 'r20240306';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><div class="GoogleActiveViewInnerContainer"style="left:0px;top:0px;width:100%;height:100%;position:fixed;pointer-events:none;z-index:-9999;"></div><div style="display:inline"class="GoogleActiveViewElement"data-google-av-cxn="https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsu25naHevyHZ8Pojur391HwD9BLjzPVhKeAXsXDXc9EX8kp5iwb3EvXGg5LpOjPXmJfneZOlFxDn3jXuzGCLFw2LrWzglWRf2

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	6030
Entropy (8bit):	5.137474253513321
Encrypted:	false
SSDEEP:	96:aFQP3ljG41BTtF1G4Wg6YBhuzDmCG4og6MBhuzDbCG49FQ8r7G4Z:a2VGwF71GXLYizxGVLMizyGc283GA
MD5:	0BE36B9D6512B84EAB456939576C16CC
SHA1:	23AAA99A92A63DF693EE3BCF7678A3E969233A05
SHA-256:	574FE1AB5EDEA6AD3C054599A02F9A7EB2AC36760856F73291C83A2E3F939B0A
SHA-512:	6674582B07F0958EA1DB6DFBC3C39BC169F07DC04ACE16497FDFBAA42CACC0C48C9541DBBA6A7986939948EC80E98CA559C1AF7149F62F1BF7D8A9DF88C1DFCB
Malicious:	false
Reputation:	low
URL:	https://sourceforge.net/rest/p/docfetcher/activity?limit=5
Preview:	{"following": false, "followee": {"activity_name": "DocFetcher", "activity_url": "/p/docfetcher/", "activity_extras": {}}, "timeline": [{"published": 1709640928000, "actor": {"activity_extras": {"allura_id": "User:4cf1a861b9363c0d500005d6", "icon_url": "https://a.fsdn.com/allura/u/qforce/user_icon"}, "activity_name": "Nam-Quang Tran", "node_id": "User:4cf1a861b9363c0d500005d6", "activity_url": "/u/qforce/profile/"}, "verb": "posted", "obj": {"activity_extras": {"allura_id": "ForumPost:5b6a758c9fb5191c0bba81d244a1675fc3ee99a8.discussion@docfetcher.p.sourceforge.net", "summary": "Hi, 1) Have you checked the filter settings in the Document Types pane? 2) In the Search Scope pane, are there any folders or subfolders where the checkbox is not ticked? 3) If you want, you can post one of those files that DocFetcher can't find here in this thread, for further investigation. Or you can send me the file by email. Regards q:-) \u003C= Quang"}, "activity_name": "a comment", "activity_url": "/p/doc

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	16446
Entropy (8bit):	6.018806530370542
Encrypted:	false
SSDEEP:	384:GJjV+8275vEqLrGY1pbVK5MbvbUaBtC1CHM468n4:GI75vtKY1p+MbvQa0m5Tn4
MD5:	6EC822AAAC457D0C48550A530F5FC04D
SHA1:	3EC2EE8A8C4537D9019F83812FF1A01E8BF0CAA9
SHA-256:	CF6454E746FE0909995EDF4B90250AFCB517E6421DC47BB2046639CA995FA558
SHA-512:	7B0A4212A365EFB74CD89308A9E161D898461C844DEE0BFF0F6B6629F5B57BD5DC2DD7215EF7AC85F4430DE35A9D8693CEB8C6E240F6625BC4FC2AA93A0D35AC
Malicious:	false
Reputation:	low
Preview:	{"sodar_query_id":"tvHuZbX7PI-yodAP7NCjsA4","injector_basename":"sodar2","bg_hash_basename":"O8T1Km08OhS5_Tz58jKeajrFynp-IyfJlJwKv1268Sc","bg_binary":"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

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
URL:	https://match.sharethrough.com/sync/v1?source_id=m3k4T1aBLLPMpeMdFP9tJTiB&source_user_id=ac45c3ec-c17b-4938-9811-6a9b00078f13
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 245x183, components 3
Category:	dropped
Size (bytes):	14744
Entropy (8bit):	7.956770944533209
Encrypted:	false
SSDEEP:	384:OLGyibppmg2HeQ0T3G0D1zzxptvOEctcKR:ki9pmNeRpFtTceKR
MD5:	B9079EA76A66CEEB243E2B80110930D4
SHA1:	DE4E745D2116E352D85BD63110DD685A1CA734D1
SHA-256:	738733EBD83D1D8977A34B5029B5AAA4A48BB7D9B708D712123F676010DC02F3
SHA-512:	D79F1F0677EE79158BB0482AB22BA8DE3005263B78C12F0017D53549AB7550D8BE87F210868B1B50747F9791EABAA08F6086574EED6961DEE722A4CE6701D43F
Malicious:	false
Reputation:	low
Preview:	......JFIF............................................................!........."$".$................................................................................"..........3.................................................................=K..;)..#.4.K.E.~X..U.W.!\X.qb.......K..>&^.x....gL.B..7..JvMr....!....ef.zPS.s,..0.Td....Y.NiQ.M#...8Z......H.+.u.......".r..u:..z..%.(W..P.z...0..I.h.4J../9..^.:.....0.A..,.f\.i...a./.Z.5J2...M..V59.k&.1%....G..W..w.....=.z..,.\|s.E~..5..4[.l...AD...A/r..Oz..4G...F.D<.J..}...w........A..9f..K\........7'...U.g3.5).h..2..v..-...fY....Ji...u..z..v..\.........$J..+^..[i..S.M...N..&F..I .-T[..n.f..k...&..G...n.Y..h$6..>.1ygG\kL.F..F?7{#..~~.fK.E.\e.4.m&.....#....l..}G......].Q....uvM..E.{B..N.&y:W..M[e/.f^.]..\|....z.=F_Q..f...YgP).4.b.+..g.Z.......+.zW\|.G..z..3.7..h.LT....Cc..+>Sw..../......Gu..b..q.rV1..D..A[-.%T.(#&K.2J..k.V.l.m...j......................../........................!"#.12A..03Ba 4@$CDQb............+..

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1143)
Category:	downloaded
Size (bytes):	116811
Entropy (8bit):	5.254862324118938
Encrypted:	false
SSDEEP:	3072:uKmU19YnxpdS+cHOBIDCTWBNw/9zysFoJW97D5ltdE+5O/0:HOj5ysFoJWt
MD5:	32D6DBEB48481106C3FB3BE6EB856254
SHA1:	CAD25E1889EC1E4841E4E6E7E45B45B752BC3CB8
SHA-256:	78E2BEE9A4F62128CEC370AFAE1E00F41A8A549F1EA11C377A9AA223088B6638
SHA-512:	C9B996DF2E64A2124B89EB1759BA7272E2AE614ED9E7304FCDB8C6FAC709217E7CC16A5BB278963D2806F654CB0C5A41D028322DCD8EEF6005D92B2015792534
Malicious:	false
Reputation:	low
URL:	https://sourceforge.net/projects/docfetcher/
Preview:	<!doctype html>..<html class="no-js" lang="en">.<head>.<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />.<meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=no" />.<script src="//a.fsdn.com/con/js/min/sf.sandiego-cmp-top.js?1709827391"></script>.<script type="text/javascript">.bizx.cmp.ifConsent('', ['all'], function () {. var bt = 'https://btloader.com/tag?o=5098683085881344&upapi=true';. bizx.cmp.embedScript(bt, true);. window.addEventListener('AcceptableAdsInit', function (e) {. if(e.detail) {. console.log('acceptable ads on');. SF.Ads.acceptable_ads_active = true;. } else {. console.log('acceptable ads off');. SF.Ads.acceptable_ads_active = false;. }. });.});.</script>.<script>. /global unescape, window, SF/. // Setup our namespace. if (!window.SF) { window.SF = {}; }. if (!window.net) { window.net = {}; }. if (!window.n

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://r.casalemedia.com/rum?cm_dsp_id=64&external_user_id=e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
URL:	https://match.sharethrough.com/sync/v1?gdpr=0&gdpr_consent=
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://id5-sync.com/c/102/163/2/8.gif?puid=rQpbF21I1RJEgU5&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 15, 16-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	295
Entropy (8bit):	6.975307958372994
Encrypted:	false
SSDEEP:	6:6v/lhPLOzLMMDaUMir+kRaAotDyhKmqcw4tGS3Q4wu4Dy+lbp:6v/7DTka4r+kRadA4cw3S3Q4n4Dr
MD5:	D848A2953307AA510BDAD31F5BF84671
SHA1:	E9D6D8DAA9255F99E4E778FF4C4B47806BDB18C1
SHA-256:	7FD59024B6CA83F11F7A3448EC148309A13B705725716DF134F699E60A96EB1B
SHA-512:	338B5E0E93084FE0BE5A46E437AD6E7E3CD600444B26A62CD2908C01409D739FFDCD8C3DF5C4C948BE59C93866B5DEF5C4759636F149377385BC59F7C7684B3D
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/images/adchoices/icon.png
Preview:	.PNG........IHDR.............kFI.....IDAT8.c8.....f.t.W(.tv....-;.....?'..Y_:X..n.s..a....X.....e.I...4...S.E......,.>...3oh`1.<L.&g..9 -..a.9`.X.,=.G..a..,D.W..Tv......-..rq;.d.aA..bt}. ....Y.r\......1.Q...)..f ....q%:.-.....Z..u...o.>...,1...qZ.K..8...^..Z ..J...2..^.......IEND.B`.

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65438)
Category:	downloaded
Size (bytes):	306860
Entropy (8bit):	5.74034199332833
Encrypted:	false
SSDEEP:	3072:4r6FwjZOdnV1sR2lHQGlFfnGJP7wUgBV22q9Ym5e2xRA+MpnBSmbcs8Ds2StZDrU:4ljZ9MlnlFfnSPodUPZTISmpQs2StVU
MD5:	C1EB32D2CBBDAF775186816555C07290
SHA1:	5F5BE7BF5DDF3E3FA289B006153BFCC04E334019
SHA-256:	E454808C6C60C6B7129129562C75CADC730DBFFCFE8C36B39695D9B3EEB65914
SHA-512:	05961ED8486A4BAA0C35B72B96B8B73D7835633311420509D2E3DA3E84331E09E73EB0B9C9C0C660FD12BA64BAD29CC4B962803C6E0C106186D0B2DDD3C886AC
Malicious:	false
Reputation:	low
URL:	https://js.ad-score.com/nlp-bp.min.js?pid=1000925&tt=g
Preview:	/* open sources licenses can be found in https://ui.protected.media/licenses/nlp-bp.min.js.txt */.(function(){var l='abcdefghijklmnopqrstuvwxyz',u='ABCDEFGHIJKLMNOPQRSTUVWXYZ',rl=/[a-z]/,ru=/[A-Z]/,_e=function(e,r){if(null==r&&(r=13),r=Number(r),e=String(e),0==r)return e;0>r&&(r+=26);for(var a,c,t,s=e.length,p=-1,n='';++p<s;)a=e.charAt(p),rl.test(a)?(c=l.indexOf(a),t=(c+r)%26,n+=l.charAt(t)):ru.test(a)?(c=u.indexOf(a),t=(c+r)%26,n+=u.charAt(t)):n+=a;return n};(function(_p){!function(){var L={542:function(c,n,U){c[_p[0]]={'labels':U(621),'scoringStrategy':U(6)}},6:function(c,n,U){var O=U(623);c[_p[0]]={'apply':function(m,K,x){if(K>0){var o=m[K-1];O[o]&&(x=-x)}return x}}},76:function(c,n,U){var O={};O[_p[1]]=542;var m=O;function K(o){var G=x(o);return U(G)}function x(o){if(!U[_p[2]](m,o)){var G=new Error(_p[3]+o+_p[4]);throw G[_p[5]]=_p[6],G}return m[o]}K[_p[7]]=function(){return Object[_p[7]](m)},K[_p[8]]=x,c[_p[0]]=K,K[_p[9]]=76},286:function(c,n,U){var O=U(862),m=U(91),K=function(x){t

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
URL:	https://match.sharethrough.com/sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 500, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4552
Entropy (8bit):	6.836498745080143
Encrypted:	false
SSDEEP:	96:D258t1zRmIawtlLI8SpD7yMlVthN3vjXPd+91BzTMyb:RVtJALtvb8nBzTbb
MD5:	0162A746E164D87492F410A9A2AFAEA3
SHA1:	0C006F8B673F178D79AC4EAAA1244F96790DE0DE
SHA-256:	E8FB76F0DD927C970C25FBFEDBFC332420590EA5A2CBF1425F875650E8857C0F
SHA-512:	7C7567F7901157F32B1D236711C6A0EF9993D37A4F1733CBD6D1E63DA90EEB6F8401DFF8F73CD0EC7EFA38B451F6B413F1F1A9611F50E51F58B17B5EA8A09941
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X..........PS.....IDATx...kp.e.....I.M[K.(fXZ..).`w..A.....,.e.r.w......e../.28..PA..Ua..: .. "..D..-X!HI[.M..$..YBK.\z.7...>.}.{..o.y..<O......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsu25naHevyHZ8Pojur391HwD9BLjzPVhKeAXsXDXc9EX8kp5iwb3EvXGg5LpOjPXmJfneZOlFxDn3jXuzGCLFw2LrWzglWRf2z02mG0r4fwBUbFPC3F9cmbw6oHs43rw3yWpOtMacxsTgI0DAcX7SNbxjCr9qjmApY&sai=AMfl-YTK3wbHn4Q2bYKL-8TDtgWlX-8kjpf7YK_Qhse6xgOVsb3K7dBbUxDDJlIJcbtnve0A6uHVO1GP7xXOuuE5CtLL0oR9-a1uap3-hRHpdHMdC7_r8neJbHCuHMsr&sig=Cg0ArKJSzD20Yc60XnU-EAE&cid=CAQSPAB7FLtq5LxsBGvZWfh1Tl8IzwfVNO-aQwqnnAPLWYqT-JXWSS3jHCvOvCEuCHssK8u09e8huT6ed6Z7iBgB&id=lidar2&mcvt=1002&p=1008,963,1258,1263&mtos=939,970,1002,1017,1059&tos=939,52,31,16,56&v=20240306&bin=7&avms=nio&bs=0,0&mc=1&if=1&app=0&itpl=20&adk=4208950979&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=609104500&rst=1710158243246&rpt=2392&isd=0&lsd=0&met=ce&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 245x183, components 3
Category:	downloaded
Size (bytes):	12845
Entropy (8bit):	7.96043302063584
Encrypted:	false
SSDEEP:	384:sfEDIYegZJSjOfs2QICYYr7cNMyOrOcCKlZoknqoQFyLg3:EgvpE2QtYYr7cMNl0Dr
MD5:	C1B5A7C7264004C66D68623BD7E0F684
SHA1:	55C4AFF7CE433A8303E267869A72147AD37B6878
SHA-256:	97A8BBB9BDC1800FED5B2B668A44EEA3F4194D875422F53AAB5CA8AEFB12B3FF
SHA-512:	9E5D0C5A417ED806A0568097AC9EF37BA8453AFC790A932D5229D3B5331BD74F049839CB0933686D7D29EFFA348546DA2E72F85040D456801080D27B4538B2B4
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/app/proj/docfetcher/screenshots/189589.jpg/245/183/1
Preview:	......JFIF............................................................!........."$".$................................................................................"..........2...............................................................<.......h~.....}...)62f............m...oy0~.\|0f....s.....s{.7A.....r..o..K.>.o.._G....8.7...E-3.p....2Fu...J.....7.d.../..Z..^.%.^..x..........b[.......?8..37.T..sIW..;.\..^V....S.......H-.4u..WWo,../X..G?.:N..<.R..kJ{5...x.D.I.O..5M=.=dx..<.1\.h.B..n=.nT$.R.f ......an..f..O=Z..&u...T+.U...(?...R..$7....m.sL.<.mU.n.....lx.....Kr..m...f.zO=<...<...../j.:_.jt.s$..TC...C.iQ.KV.5i..,.Wq.c.....(.....#...F.=..aG.P/+Ys..g.^.u.c.M+B..&..........r,.<\..q.4..m.rs.......qV.Z.*.z.3..3C...B......fE.&.sWm.)u..u40....9..c4vZ.=.i.h&...4B..7q-.i..;..t....5$...../..\|Z.....=r....D.........0.{.~.,Q...\|..I..A.?4{/v.B..e6.l4.l4..CG.n.{v.......B.....j...........P....................9.............................1S.!4."%QRc #$3A025.B

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	762
Entropy (8bit):	7.689726268058559
Encrypted:	false
SSDEEP:	12:bWc5l3Pqj9ah1dl12GyKBYFv/q2gYg9ivG29f7LMBpUV6Mu+gt8rvtzygHr9Pl+T:bV5lP+e12GdBYFa2BDGaf7+pt/ETtegO
MD5:	DED0229FC7226E7794D5E059D7448E6A
SHA1:	010B4B734FD62C963B4EA99B670062D7B138E90D
SHA-256:	D989F5DCD421E74472A32FB5DC7564685876FDB4B2D32C7760706375D9E4C717
SHA-512:	902A2DE35800C1CA969835F53B2ACAB4C9964DB4F616601E8B4928844B133EFB6505BE380097D8D112D48706AE5CD76142CC3E175BC5C9FE819CF64042841E10
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/images/sandiego/icons/default-avatar.png
Preview:	RIFF....WEBPVP8L..../_......m#...^.....P........d5.m...C...5!....1O..wk...te:R..I..]e....L..k..HQWN.N%....=.X..H.....vV..].v8}z...p.....NhdfZ2..Tn...]F...F...\..6...^.d.p.+xU.<..-.\|^.}....u..8e.(..jE...>....N.J.1...'.X!b.g#3...w.6b..ST.\....]..........^.u...3..v..C.t..^<.oTB...H:;... ..dI.t..N^P97...p~..T.VL..x...C.\.A..%...A...7.TLp.... hz]Q&..4.h..hZv..2.#j5jr..7.Dm..T.F.=...:.T.E..1...eu.at.s....Xe[.Cc..]u......6#.[...4.FQ....To..@............T.."F].F.P......4.l ...f.O..m.u.2.W./9A.}.L..>....I. ..z.....` &..Vp/'...........@f....j\|uFQ....Yx..=....H...........)2.u...H..t.....D.dv. ..Z.k......:..L%3.Z....(.d.[..:.O!....Y.,{SSE#\|#i.H~..&.Y.E..$....V.&v.......9D....y..$.-.\....(.8!.k^....NZ.xD...fRH..L;'-......W.........(..

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	7582
Entropy (8bit):	7.964505189898774
Encrypted:	false
SSDEEP:	192:oppDXRJVEXUdAUz3oSn6uAtG/Y35uemB7nWWg:oppDhJSEKUz3j6BtG/Yf0Dm
MD5:	04409F51198BD5F33F3CE07FFBE71742
SHA1:	32CEBD13DAC8F9A3C2B6F8A68998D9EEFDD34F60
SHA-256:	2413A10F17AAE85F9D53AEB537121BC63EE7027FECB24C952DE09653FBBDF53E
SHA-512:	CACF977417059106E693DAC405D488A1E57D00D5E5E270284ECADBDACF53D220FF35080CB14C4F3F96A8613EDACD4BB4276A1EBF38B61D5A9341CF1E730FF050
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.............sRGB...,....XIDATx..XkL.W....M....h..A.S.0.:..;.\VQ...K4DaN....".......B:..)C.).z.Z..&.g...rY....p._...\|.h..'oO.....<}...=.Y..FFF..t....K.......NJJ..........hp".$$$xyym....a.J.055MKKKMMuuu].r.5k(:...DDDl............Z....q.E..........v.J.011....sqq.R.~~~......._..Hrr.a.;R.b..(.....].E.z.....z....B100.G.w..2<<,.>5b1.X..a.....,.]>..\|.)..R.M...s.W..i4.....3..D..>.....9...QQ..2i..{w.].}.3u.;..1.l....&,zmS#..!.f...........K.RI...&.Dr.......n..HGG.H$BK.~E.h..t:tH..a.R.+-...iFl .tqXh..~k?.Ia..L7..3..'Z=..L..;;;.l6....b..T....s......x<.@......~.UUU.%.,'.w[.....Uwea...4nB..^h..g........3.....!ztt...a022.V..&.C...Z.+.../_..C.h..%..g....(...._.~.y....`....+.O}7.....g.H..QF..G&.K...'...9.....h_D.....+..#E.Z}...$JJJ.....]z.F...S..=...c.E;c.O0....a"..3._HVtfF....7.` [....z.n+...vv.......f.....w....\....C..........."....[QQQ.....C.-T.8...p.........%...y./_...l.2777...(B../...[.d.........:u\u...Oy...U6.....@...

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsshm0LPVips-w7LJ-9cf6PyU-sdXozU5jW6SUNmJoQ6YE30UhIRf-Dz_CtUn0FfkAeYbVX2JnviosAk3uA4hzlzyFFh90tN87iU0DLvmGGpl4u2JWNFQt6LsrX_Hjqkrg61KSOhXX-y1B6ffcodLlK_SDb0U-qmhAw&sai=AMfl-YTpV_43m91iA689BscFvDm7ylvlEc-YVymU-NMrDm0f5YxCbzKJNM9KRa8yWS4bwzRpkS-CiqSoc1ZlFIHDiqGF65uOT58nkPi634-WK4QwLCNEvDSifIkXoqFe&sig=Cg0ArKJSzNDfT41YTUS2EAE&cid=CAQSPAB7FLtq-5sXtZDv0iN0bEzAggm_2eFe_bR7QYABvAI6CK2s7HDUXYZ7Cg9VmVoDpfJk2quaCYBqXLArSRgB&id=ampim&o=0,601&d=300,600&ss=1280,1024&bs=300,600&mcvt=1009&mtos=0,0,1009,1009,1009&tos=0,0,1009,0,0&tfs=100&tls=1109&g=88.66666555404663&h=100&tt=1109&r=v&avms=ampa&uap=Windows&uapv=10.0.0&uaa=x86&uam=&uafv=117.0.5938.132&uab=64&uafvl=%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D&uaw=false&adk=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x250, components 3
Category:	downloaded
Size (bytes):	43136
Entropy (8bit):	7.974293314767043
Encrypted:	false
SSDEEP:	768:3mYEOTJNdJNJNxkWPXNFxozkdVqBFz8wU/b937UFTubYG/AaNt3E:3mYpTJNdJNJNxHPXNFsB1sbRgFTi/AQa
MD5:	15080DA1D41E7905BB5AE237B7ED1E44
SHA1:	8AD829690CEF84B4CA612FDA0CC2DFF5C08E843A
SHA-256:	FEF53F2A2E7A77BE0D40D1595906CB4D9321BF0E20E8C333E72CF67CD5F9E197
SHA-512:	195147F3250B173A28A32A479DEB2838E42489C299F9409A455ADD324F47ABF6D8C61BDBA45DBBC0337C1C3C740805ACF031249F01D3D65DC66AE0DA3E9E7E48
Malicious:	false
Reputation:	low
URL:	https://cdn.flashtalking.com/116264/4362981/FY23Q3_DC_AcrobatDC_AcrobatDC_us_en_Daddy-DIY-eSignatures-ACQ_ST_300x250.jpg?652470631
Preview:	......JFIF.............C....................................................................C.........................................................................,.."...........................................q.........................!...1AQa.."q...BRb............SU....#%VW.....&'257ETfw.....$(36Fdgruv.....4Hcetx.89X.....................................d............................!a.1AQ.."bq..........#Se.......$25RTUVr..%36BDcg.....&4Cs..7EFWXu.................?..} Cop..G....@...w..6].I....\|}.<S.....6x.......s..?'..........{..<0.wD..6...4xa..N................d..;...y....N...h.H........&.!..].....tRs.w._.f.......>.+%.......\|~F.w...Gz@...w..6].4........l........6x.?.w...l.Y/>...G>.k..6..\|=.;..6...4xa...m..~h..e...........9..;....g..y.w.9.._.........!..].....tM Cop..G.........>.)....\|}.<VK.........._.v.........l..i..{..<0.wE'?.w...l.N........^}...}....l'z.{.w..m..~h..e..H........)9..;....g.s.w._.f.......s..?#a;.... Cop..G....@...w..6].I....\|}.<S.....6

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	65033
Entropy (8bit):	5.967785289773921
Encrypted:	false
SSDEEP:	768:i8dQ+9Kh+Clpxixm7yhemwuaSyqCH8CxthFPR2kTtWhrJT/TruEKgc0w089A971x:N97m52N7ruEYHYVYC5x0+cBewY
MD5:	624DF080496EE934CFFC5AA729E14EE5
SHA1:	B1EBB6FFFDB4BFDB43DC728938E469E4B2D364AA
SHA-256:	86AACAE71F07E47403A3724439E3F7886C61576CA1980893E141034E22525E23
SHA-512:	966F836271740D8B75572EFA4CB799C69123E921F32D1A053B072B24FB8B56965261E52FA38E681111D38796781CCD9A1593D545AAB19E8308E0CCD01FF1EFFD
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=4280401622278687&correlator=1402022865632457&eid=31080983%2C95326466%2C31081566%2C21065725%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403050101&ptt=17&impl=fif&iu_parts=41014381%2CSourceforge%2CSF_Temp5_300x250_B&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=300x250&ifi=3&sfv=1-0-40&fsfs=1&fsbs=1&sc=1&cookie_enabled=1&abxe=1&dt=1710158204250&lmt=1710158204&adxs=963&adys=775&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=3&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Ffiles%2Fdocfetcher%2F1.1.25%2Fdocfetcher_1.1.25_win32_setup.exe%2Fdownload&vis=1&psz=299x275&msz=299x0&fws=0&ohw=0&ga_vid=1854926735.1710158203&ga_sid=1710158204&ga_hid=223921665&ga_fc=true&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFsyLFtbIi80MTAxNDM4MS9Tb3VyY2Vmb3JnZS9TRl9UZW1wNV8zMDB4MjUwX0IiLFtdXV1dLG51bGwsM10.&dlt=1710158195863&idt=8318&prev_scp=oss_tpc%3DFile%2520Managers%2CSearch%2CSoftware%2520Development%2CSource%2520Code%2520Management%2CStorage%2CSystem%26shortname%3Ddocfetcher%26dc_ref%3Dhttps%253A%252F%252Fsourceforge.net%252Fprojects%252Fdocfetcher%252Ffiles%252Fdocfetcher%252F1.1.25%252Fdocfetcher_1.1.25_win32_setup.exe%252Fdownload%26sz%3D300x250%26page_type%3Dpg_download&cust_params=usingSafeFrame%3D1&adks=277815714&frm=20
Preview:	{"/41014381/Sourceforge/SF_Temp5_300x250_B":["html",0,null,null,0,250,300,0,0,null,null,1,1,[["ID=806480862cdec327:T=1710158205:RT=1710158205:S=ALNI_MZV8ZRZt7qUr4lWaLAdyOMDfWC3Pw",1743854205,"/","sourceforge.net",1],["UID=00000dc711d040cf:T=1710158205:RT=1710158205:S=ALNI_MYQzLcEAv8EJ93__iIVQ9u9QC8WIg",1743854205,"/","sourceforge.net",2]],[138465645576],[6306859174],[1329521181],[710037621],null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGsnl3j-xXzuzlaGJecX0dFrkO_RkEcCRA8z7AJTm355AzXcoF-x1FJoebkH6wmMr6JoWJJUYvTc3JkEktC6nQ2U","CJ7F3-KT7IQDFQxACAQdggoL1w",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"3",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,[["ID=e972aa2e3a81bcab:T=1710158205:RT=1710158205:S=AA-AfjYfakrdTZ6-TF2azSnvDeBb",1725710205,"/","sourceforge.net"]],[]]}.<!doctype html><html><head><script>var jscVersion = 'r20240306';</script><script>var google_casm=[];</script><style>a { color: #00000

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	49441
Entropy (8bit):	5.944338288171565
Encrypted:	false
SSDEEP:	768:nWNkXYFyBN8urloGXYKX9bMeNlbbMeNlLXzXF746bMeNljzeFjyXjM:nkkljbMKlbbMKll46bMKlHe1
MD5:	FC21DA14B6E8764A9F22AD87B0F3A4E7
SHA1:	29EFCC9D8E6F3854FCDE715000FCAD6ED51A6AE1
SHA-256:	C402E46743A22BAA841464030E6422954D3FA6A1A77366888F2AD86479442B1F
SHA-512:	0D2624A30C308D8D2EF1F31E03AE4D6FDA4CE234EFA4FD6CFDA5E9E6CE8FBD8BCA7588620B6AAFFE4C8DD1F36784722C423FD53AAB2AC519A2ACCE0A6D40C704
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1401323213163731&correlator=4054193226133307&eid=31079957%2C31080983%2C31081725%2C31081566%2C44807746%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403050101&ptt=17&impl=fif&iu_parts=41014381%2CSourceforge%2CSF_ProjectSum_300x250_A&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=300x250%7C300x600&ifi=1&sfv=1-0-40&fsfs=1&fsbs=1&sc=1&cookie=ID%3Ded8d538436f1b623%3AT%3D1710158205%3ART%3D1710158205%3AS%3DALNI_MbiYxvEWP7dZiJkctj8HGzhHyMpCg&gpic=UID%3D00000dc711cb5676%3AT%3D1710158205%3ART%3D1710158205%3AS%3DALNI_MbtGcDgo6RHjTtG2es2mbdsN1jDSw&abxe=1&dt=1710158241380&lmt=1710158241&adxs=963&adys=216&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=1&oid=2&u_his=2&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2F&ref=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Fpostdownload&vis=1&psz=299x275&msz=299x0&fws=0&ohw=0&ga_vid=1854926735.1710158203&ga_sid=1710158241&ga_hid=98602124&ga_fc=true&ga_cid=1668299401.1710158203&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFsyLFtbIi80MTAxNDM4MS9Tb3VyY2Vmb3JnZS9TRl9Qcm9qZWN0U3VtXzMwMHgyNTBfQSIsW11dXV0sbnVsbCwzXQ..&dlt=1710158238737&idt=2612&prev_scp=oss_tpc%3DFile%2520Managers%2CSearch%2CSoftware%2520Development%2CSource%2520Code%2520Management%2CStorage%2CSystem%26shortname%3Ddocfetcher%26dc_ref%3Dhttps%253A%252F%252Fsourceforge.net%252Fprojects%252Fdocfetcher%252F%26sz%3D300x250%252C300x600%26page_type%3Dpg_project%26hb_format_appnexus%3Dbanner%26hb_size_appnexus%3D300x250%26hb_pb_appnexus%3D0.95%26hb_adid_appnexus%3D4502d698561e196%26hb_bidder_appnexus%3Dappnexus%26hb_format%3Dbanner%26hb_size%3D300x250%26hb_pb%3D0.95%26hb_adid%3D4502d698561e196%26hb_bidder%3Dappnexus&cust_params=usingSafeFrame%3D1&adks=2750022012&frm=20&eo_id_str=ID%3Dccb10672a4298c0a%3AT%3D1710158205%3ART%3D1710158205%3AS%3DAA-AfjZQQCnCz9TlsGBpH19Z0_Y8
Preview:	{"/41014381/Sourceforge/SF_ProjectSum_300x250_A":["html",0,null,null,0,600,300,0,1,null,null,null,1,null,[115763391621],[2168334381],[2036965341],[1511469861],[151821],null,null,null,null,null,null,0,null,null,null,null,null,null,null,"CKzLu_ST7IQDFWVXCAQd8P0LNw",null,null,null,null,null,null,null,null,["012402262017000"],null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012402262017000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}html:not([amp4ads]),html:not([amp4ads]) body{height:auto!important}html:not([amp4ads]) body{margin:0!important}body{-webkit-text-size-adjust:100%;-moz-text-size-adjust:100%;-ms-text-size-adjust

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	17
Entropy (8bit):	3.734521664779752
Encrypted:	false
SSDEEP:	3:gCtwn:l2
MD5:	A54A440C7EED0A7B3E78E6B985E12FEE
SHA1:	92EF2F2008EBBC5635B71F5D6C9831C5F2F4514F
SHA-256:	62CE950AD0D7F664B316B4253BBC993BF0BF8310970F64B150FDA6F1FA59DFEA
SHA-512:	F82E417DFAA9DAAE2A74DE3564D9DF703E4A2849D60752F6A9C4C2C5053CD72D3F5ED036EF683CA586CE17D7A2DA3E9D3DA6311560296929C70B23BC05A57631
Malicious:	false
Reputation:	low
URL:	https://ml314.com/imsync.ashx?pi=3642666937673580575&data=eyJwaCI6NDc4MSwid2giOjkwNywidGJzIjowLCJkdCI6NDUsInBpZCI6IjE3MTAxNTgyNDA1NjVfNmlxOTR0aWV3Iiwic2QiOjkwN30%3D
Preview:	_ml.setIM(false);

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://tag.crsspxl.com/m.gif?oxid=9aedcb31-c781-4a91-8b53-8f3fa4a08ab8
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x250, components 3
Category:	dropped
Size (bytes):	43136
Entropy (8bit):	7.974293314767043
Encrypted:	false
SSDEEP:	768:3mYEOTJNdJNJNxkWPXNFxozkdVqBFz8wU/b937UFTubYG/AaNt3E:3mYpTJNdJNJNxHPXNFsB1sbRgFTi/AQa
MD5:	15080DA1D41E7905BB5AE237B7ED1E44
SHA1:	8AD829690CEF84B4CA612FDA0CC2DFF5C08E843A
SHA-256:	FEF53F2A2E7A77BE0D40D1595906CB4D9321BF0E20E8C333E72CF67CD5F9E197
SHA-512:	195147F3250B173A28A32A479DEB2838E42489C299F9409A455ADD324F47ABF6D8C61BDBA45DBBC0337C1C3C740805ACF031249F01D3D65DC66AE0DA3E9E7E48
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................,.."...........................................q.........................!...1AQa.."q...BRb............SU....#%VW.....&'257ETfw.....$(36Fdgruv.....4Hcetx.89X.....................................d............................!a.1AQ.."bq..........#Se.......$25RTUVr..%36BDcg.....&4Cs..7EFWXu.................?..} Cop..G....@...w..6].I....\|}.<S.....6x.......s..?'..........{..<0.wD..6...4xa..N................d..;...y....N...h.H........&.!..].....tRs.w._.f.......>.+%.......\|~F.w...Gz@...w..6].4........l........6x.?.w...l.Y/>...G>.k..6..\|=.;..6...4xa...m..~h..e...........9..;....g..y.w.9.._.........!..].....tM Cop..G.........>.)....\|}.<VK.........._.v.........l..i..{..<0.wE'?.w...l.N........^}...}....l'z.{.w..m..~h..e..H........)9..;....g.s.w._.f.......s..?#a;.... Cop..G....@...w..6].I....\|}.<S.....6

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 245x183, components 3
Category:	dropped
Size (bytes):	13029
Entropy (8bit):	7.9596078219755295
Encrypted:	false
SSDEEP:	384:8Whnda3uCqrwlJBEL/mgk3hbahw4YcLNmQ:f2uCgwlJUmg6Ew4B
MD5:	08194EDEC6CB046B328A4CA991EEDA1D
SHA1:	1A57A2E51DE67AF1C023BCD04D3D9B75B9AD5C82
SHA-256:	06858A82C27A0DDC4CFEC6493B39AC61E7AC3AC888F1F0C63BD7734F751055A8
SHA-512:	153FB8E77C1449CC762278BE7F4485E90DEA9C449A383125F79222057FB2C3930AE60303A7CD6BA68E5EE5E97C0D460422D93DAAB6B806E87F9F5C1D4F0D921E
Malicious:	false
Reputation:	low
Preview:	......JFIF............................................................!........."$".$................................................................................"..........1..............................................................-]S.....L.4...h.Z...Ef.1...+.y!."..!."..!."...q..:...u.}T....{..s-...%w........#f.....yA..3..2A)..3..m...X.(.u......r.?9s..s..;s.oG...R.9.NY[z....CdH..1.WO.)..d.M..OF,..4.J...P=<.b.o:v.\|.5v.R.F.9G...........'...}...f>Cr.'#IS6=...!U..Jk.[f\|...IoC.........'.e...9...]O.M...Y.L.:e....qk..'...B...2.k...{]\.Qd.v..~.....;..r.........m...V+p..[m!..s..N...2OH.B"P.;0.1..2..8.......8.].......~....jW..}1Z.Z.zA..J..+..z@...'......t.].f...o.9.~B...(..\V...../-.*..,...Hy...t.....A<..@.gO.........k...8.X....G-.l.R...0...nuBl.........vi!.;>r..:}vG]...o..C_...~.:..ed.}F7...V'..-....Y'.7.J.J.gWt9.B\|...O...Nwjb.f...?.[.Y.Z..E...6.k.......R...d.1....6.........L.fO@.P..."....z.x..............:r...9............................

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	29506
Entropy (8bit):	7.9863383216363655
Encrypted:	false
SSDEEP:	768:lArFOCNAFH/0J/Ki1fAxUaNZieow4iqSIU9:liF9fJZ1fAxU2yw4iT
MD5:	399C97623980BB4FBDCD7D6B347B4356
SHA1:	A9F53015AEB74FD751FF9B34539F3BB41C4827BE
SHA-256:	99700A519CF2DE80C309CFCC37F1DE064A4D89F077AD9ADDBDECC5145023D62F
SHA-512:	4C1161FF9804DD553D4EFB99B81089E9BE25F8F3FBB1E0F4BE1F61817EF7B56750AB239962A8D8E2644115B77DE008A4604BDBD61175650BE4B816987FEC6EF7
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/3861650559196799772
Preview:	.PNG........IHDR...,..........mz.....pHYs............... .IDATx..y..U....z.}&.%.L...$..... .......A}.E..H.WVA......((....7$.@.&.....3I&..^...G-].]......\|z...,..~.9.9..X.h.........n.........R.;.@.h!<x..!Sx........ay...GX.<x8l........x.......... .w.q.@..#xGC<.'....!..:.......n.;.6.E....USPXD~~>........_@ ..h...9GX....h...E...-..A.M.."2.....N..h...o.O^{..........y~.J.p..m.......J.i).b.q.....C..+.N~A.Eb..:.....t..BN...........Iww.._'.p[3.q...... ..@^..J...+(.W9..z...(.C...RU..\|TU....E..Z.o.Ci...upp3l].....PQ..%..,."T\E.l...Z....Z....#DnY.<.....a.....L.M....(jo.".E..L'..Q(.f...G...S!.BQ.%...J..P..EQ.B.(.E......F;...a....u..!B..t.T.\\M...Hy-....!...........;....;.*.IS-R.%..!z..IL&9.../F.9.1jjB\|.....Ck.v`..W..u....O).D......<i..L.J.;i\|....1....@)..].....En-P=x..)RRJ..9K.4..i.uM.4"...VJ....=....F...4M..$.h4j...N4.%......2..<...C..D...X.t)....3....TTT.......[o.....N{{;...tuu..........RV.\..S...\...^z...:..O?...............UW].......Omm-.>.(UUU.

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	49955
Entropy (8bit):	5.9495963182725236
Encrypted:	false
SSDEEP:	768:BW1kXYFyBN8Prlo7oCS87CS8UtM74YCS8tzuM:B8kUkoCFCZ4YCzuM
MD5:	E3A48704B1EFF9B476DB05575AB6423E
SHA1:	580EA113BFD82FF96ECF0884870FAF4053152207
SHA-256:	379AA574F007221BA9260F3F3E1FFE1F4EAAEA93E63A2172354F222EE5C60F2D
SHA-512:	C4BFC9FE4188D3ED56A6C6981F7C69F57FFC0DE107202FC0CBDBD536330D59A477C59F03DDC8F0D2EAE55F6436C3C9A3972495994CF1F057F49C7A076F98F64A
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1576841476053997&correlator=2994132923330260&eid=31081518%2C31081716%2C31081566%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403050101&ptt=17&impl=fif&iu_parts=41014381%2CSourceforge%2CSF_TYP_300x250_A&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=300x250%7C300x600&ifi=1&sfv=1-0-40&fsfs=1&fsbs=1&sc=1&cookie=ID%3Ded8d538436f1b623%3AT%3D1710158205%3ART%3D1710158205%3AS%3DALNI_MbiYxvEWP7dZiJkctj8HGzhHyMpCg&gpic=UID%3D00000dc711cb5676%3AT%3D1710158205%3ART%3D1710158205%3AS%3DALNI_MbtGcDgo6RHjTtG2es2mbdsN1jDSw&abxe=1&dt=1710158224754&lmt=1710158224&adxs=963&adys=216&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=1&oid=2&u_his=2&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Fpostdownload&ref=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Ffiles%2Fdocfetcher%2F1.1.25%2Fdocfetcher_1.1.25_win32_setup.exe%2Fdownload&vis=1&psz=299x275&msz=299x0&fws=0&ohw=0&ga_vid=1854926735.1710158203&ga_sid=1710158225&ga_hid=2052868623&ga_fc=true&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFsyLFtbIi80MTAxNDM4MS9Tb3VyY2Vmb3JnZS9TRl9UWVBfMzAweDI1MF9BIixbXV1dXSxudWxsLDNd&dlt=1710158220699&idt=4016&prev_scp=oss_tpc%3DFile%2520Managers%2CSearch%2CSoftware%2520Development%2CSource%2520Code%2520Management%2CStorage%2CSystem%26shortname%3Ddocfetcher%26dc_ref%3Dhttps%253A%252F%252Fsourceforge.net%252Fprojects%252Fdocfetcher%252Fpostdownload%26sz%3D300x250%252C300x600%26page_type%3Dpg_postdownload%26hb_format_appnexus%3Dbanner%26hb_size_appnexus%3D300x250%26hb_pb_appnexus%3D0.32%26hb_adid_appnexus%3D464375acb56c06e%26hb_bidder_appnexus%3Dappnexus%26hb_format%3Dbanner%26hb_size%3D300x250%26hb_pb%3D0.32%26hb_adid%3D464375acb56c06e%26hb_bidder%3Dappnexus&cust_params=usingSafeFrame%3D1&adks=1333199680&frm=20&eo_id_str=ID%3Dccb10672a4298c0a%3AT%3D1710158205%3ART%3D1710158205%3AS%3DAA-AfjZQQCnCz9TlsGBpH19Z0_Y8
Preview:	{"/41014381/Sourceforge/SF_TYP_300x250_A":["html",0,null,null,0,600,300,0,1,null,null,null,1,null,[138416297042],[6180654644],[2036965341],[1511469861],[151821],null,null,null,null,null,null,0,null,null,null,null,null,null,null,"CKr1xeyT7IQDFRiWOgUdvMEDIA",null,null,null,null,null,null,null,null,["012402262017000"],null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012402262017000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}html:not([amp4ads]),html:not([amp4ads]) body{height:auto!important}html:not([amp4ads]) body{margin:0!important}body{-webkit-text-size-adjust:100%;-moz-text-size-adjust:100%;-ms-text-size-adjust:100%;t

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=bdsw&google_push=AXcoOmR3BXt5aaoQFuLH-riyAqoMHU2Ts3U5EEyQaPjVZSz3LaYDK7-tkeZRP_6rKrGlZpICVDQefSeA2PbyS7u3aRT7HuISMzmkI1iPlw6nAq7SsSJO90nU9y7SeZc5yTGoiqMsMaPQ6i8Wwi1nxg7MkTs&google_hm=bsdjcTAxS0mrszSfs9fPIw==&gdpr=&gdpr_consent=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	dropped
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsun6cSBAEbDh9rhZm-N9eWsgYLytxh8wdaT1UCzqt8Tdwpl7sywmPfcm6wAPgNUHlxNAujuIjJtxpmqsLUpb59IpLLUOgSM-8F8ESLQQk6Ogsx0FunBVgCRb2mTAvDWnVh2m5GQoTfvfZfOlSeYq0sCEBc7VCFzxtk&sig=Cg0ArKJSzJKQNP16BMKrEAE&id=lidartos&mcvt=12689&p=659,963,909,1263&mtos=0,12689,12689,12689,12689&tos=0,12689,0,0,0&v=20240306&bin=7&avms=nio&bs=0,0&mc=0.99&if=1&vu=1&app=0&itpl=3&adk=256309498&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=b&co=609100801&rst=1710158206363&rpt=1655&isd=0&lsd=0&ec=1&met=mue&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65386)
Category:	downloaded
Size (bytes):	442681
Entropy (8bit):	5.502372899307184
Encrypted:	false
SSDEEP:	6144:lIcpc9lju9ffhPyx4Sd6zxBaFaWxtTnfDtwBhwzy8Tre:ecqGC6baFaWDbRwBuzfG
MD5:	E086549B879D974FA3D2F1E3C1F56E14
SHA1:	8FA7A4DAAB63F49136124CF73BFFB7F2F827F93F
SHA-256:	8990AA15EAC245AF6C6E1659E307D87319E360DFB7841984E17AAC14BC583C11
SHA-512:	2093F50456A1284ED3870A3264A48A503916D4C65B720679DF976FCE9237D5A10D13F8B9201F84E97FB26CF32E9DDB8219AA4F4D6CB667B50187F91223DA2BE0
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202403050101/pubads_impl.js
Preview:	(function(_){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ ./ . . SPDX-License-Identifier: Apache-2.0 .*/ .var ca,ea,ia,la,na,pa,ta,sa,ua,va,xa,ya,za,Ba,Ca,Ga,Ha,Ia,Ja,Ka,Ma,Va,bb,cb,jb,lb,mb,nb,ob,qb,ub,xb,Fb,Gb,Kb,Mb,Ob,Sb,Ub,Yb,ac,$b,bc,ec,Vb,fc,gc,hc,kc,lc,nc,pc,qc,sc,tc,wc,yc,zc,Bc,Cc,Gc,Ic,Kc,Lc,Nc,Tc,Uc,Wc,Xc,Yc,$c,ed,fd,gd,hd,cd,id,bd,ad,nd,od,pd,sd,td,wd,vd,yd,zd,Bd,Ed,Fd,Hd,Rd,Sd,Wd,Yd,Xd,ae,ce,be,ee,de,fe,he,Gd,me,ne,qe,Ce,re,te,ue,De,Ee,Ge,He,Ie,Le,Me,Ne,se,Oe,Pe,Qe,Se,Te,Ue,Ve,Ze,$e,af,Xe,hf,Ye,jf,xf,Af,Cf,Gf,Hf,If,Mf,Nf,Of,Qf,Rf,Sf,Tf,Uf,Xf,ag,cg,bg,gg,ig,jg,mg,Eg,Gg,Hg,Mg,Og,Qg,Sg,Tg,Wg,Xg,Yg,Zg,$g,bh,ch,eh,fh,hh,ih,jh,kh,lh,mh,ph,rh,vh,th,Kh,Lh,Mh,Ih,Jh,Nh,Oh,Yh,Wh,ai,ii,Ph,ri,Ci,Di,Hi,Ii,Oi,Qi,Ri,Ui,Xi,bj,mj,pj,rj,tj,uj,vj,wj,xj,yj,zj,Aj,Cj,Fj,Dj,Gj,Ej,Hj,Jj,Oj,Qj,Rj,Uj,Sj,Xj,Yj,Zj,dk,ek,kk,lk,xk,Dk,Bk,Ck,Ik,Mk,Ok,Pk,Qk,Sk,Wk,cl,Zk,Tk,kl,il,jl,ml,nl,ql,wl,zl,Al,M,Bl,Hl,Fl,Sl,N,Ul,Vl,Wl,Yl,$l,am,hm,im,km,lm,qm,xm,zm,Bm,Cm,Dm,Em

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x314, components 3
Category:	downloaded
Size (bytes):	37913
Entropy (8bit):	7.96935547645897
Encrypted:	false
SSDEEP:	768:pFpx64Vtxx12GJE0+qEP4DLEAo/lvOlC0/Rl16UkyMnuY16z4X2UemCeRqk:pFy4j/r+2wJ8ldRLvEX2NeQk
MD5:	2FF4A932A4780984F21B751B49815F7F
SHA1:	1A3E2697128632219C5B0C8CEC75289FD1880F07
SHA-256:	A9AC60FF2061FD4BD302D5A06FB7642F42E8EEC5FA0D54E3933965B71EAA9CA9
SHA-512:	E7CC007DE6774F97A6DFDFA9C4E541C69B6CDDB0E3E15AEF6954199F4DF89A95510FAEE0B982D80FEE4CCDC884388A37F650269EAB62E4AA2C437FE4F624C100
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/8874463053594247161/14763004658117789537?w=600&h=314&tw=1&q=75
Preview:	......JFIF..................................................."... ....+. $%(((..-1-&0"'(&...........'"..'&'&''''/'-'&&''&'&'&''&-&'''''&'''&&&&&&&'&&'&&&......:.X...........................................W.........................!.1AQ.aq..."2B...#3Rr......4b..$5CSst.....c...%U........TVd.................................J.......................!..1Aq..2Qa...."4....3Br...R.#5Sb.....C...$s.D..c............?../dxq!..H.H......@$..J@..@$ J@..@% H.... ..).@....H..(.T. ....... ............P..! .E. ..@$$......$$.....@.H... ..........@...j.....R....@%$.@$.@.@.....@$.@.H..!.RH. H......R..D.......H..........@$$... 1{..;M..7...@...'.9..Tu`.....-....w.....{Uy..L..5.h.A)p.igQ ..D.a.Kc....7..N.5c4 H....$.z......p;........:.....6I..wH......Nm...)..t...m..`g5x..O......!...F.....j.d..U0.....}...Q..0.....!"@g..y.c\...h.>.D...'dJM.,.]..;,..#.9...\.i.Ex4..(J..M>..r.... ..BA.....C...@$ ...$..H...R.......(.P.H..(.......... ...I"(@..H..P.. .@.H... ..BDP..S.O s@x....X...R.Q....1.Wj.

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 275 x 150, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2189
Entropy (8bit):	7.863449576984961
Encrypted:	false
SSDEEP:	24:WLLahnBxwSnUv6YChlMqEHn6/WZLwTfJKZiPfFQ4+bzdxs0mu6QCjRWg6D+T9yUa:06nBwD1ZHnDIhe48gPjYwsUzjKB0LKn
MD5:	D88611FF8D1E0C51AEB30DACFF84F938
SHA1:	4EC6AB0459FC6D7E44976BF9B8AEF89FF3AD6EEC
SHA-256:	7ACFF3E9371C5B5E9F5F403A35DFD29CDE2A94334A6BA6D2776C56A04F08847B
SHA-512:	38FB5DDD475D1C386FC98AD435AF4717398998C727CF9CD26C7FBB824E7A53AF1CEE453FD0C719AFEEE410A614046E4E08AA5B81093861F6C93599C737A2592F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............}.U....gAMA......a.....sRGB........`PLTE.......K.`v.......+W..N......X..Y%._....W.v;.hs.............Vx......Gf......................IDATx..r.<...@ H..m.O............;.}....:.<nvC...A..A..A..A..A..A..A..A.D8h..e.F.z..C..$.....sQ....j.QTI.F2}.$..!......E..V..4.>.=V..C.......0Q.3.8.R.\....h.c.\|28...aB....>............O.n_...]N.f...CG.....D1..gV0c....X.....~<..)..LT...~h.K..9m.b.EqtF.......Q...(.HI...).._..6.....s>...5....>..@\.k....\..<.r.;N..S.....;N........~.e.w...R@../\|..".....\|.a..w"...UI.F.j....t.-9<@.s.X'..i..~..3v....fl....N..../:).3zb..-..qo/....n....N...J..[........Z..=".B.&L..bg@.7S.^......!K...\...M..qr...o..x'.[.N+B..D......N.Z\l...I.&r.i.....K.aN.#.c3"..A\%.&).f..'..Pi1j...Mk..e'......R...:.q9.r=.i....(..u.{.#je..E'p....7.:....F72..L......0..`......l.C..N.....".1..g.$...B....C..Ib.%.Ii..{...('h...D.`....q.......J.<.0...e.1Nl.m....x-N......G.;.HY...Q..('v...X...`......4MQ.N..pr.a^z...)..*E..R x..;=,

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	85
Entropy (8bit):	4.292908596521779
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+DtjyREWqWv+ndp:6v/lhPfkCDtmDV+dp
MD5:	5BEC6606B8392065F9DA9898CA6F7B14
SHA1:	73AC5B01B5E3293FB792179626E7F8369CDB944D
SHA-256:	ACCCC501AA6AFA3CFAC15E8DDCCF1561DEED2ED08C2F7D652ABBDBE9AA71609A
SHA-512:	36FEC10F71295203E59BCC52042EE2691E5DB51D26F6D76D4B19BFEDF4429FDE898C87ABC77CA29F6BB58E6217FF380F0650115C06395CB1DA270BD028C2CF80
Malicious:	false
Reputation:	low
URL:	https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=
Preview:	.PNG........IHDR.............%.V.....PLTE......U..~....IDATx.c`.......'......IEND.B`.

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3880
Entropy (8bit):	7.929639768941527
Encrypted:	false
SSDEEP:	96:tkQCOi8oO3c+QJweaLesfRzHycrTin59uuCNOv/ILlnBwl:tkr5owJw9L/RbyEi/Xvclnu
MD5:	E2A4EC2AC3C9D1B6946BC4A0BE29813E
SHA1:	F17A47034B66F34E6F42EE1CCEB439E5665CA4FE
SHA-256:	C7D0DF09CB4C9C5DEF9D69B92F2DF167143972A3125C4E3D7228ADDAB6445E4B
SHA-512:	A6F09EDE48201EFE51DE043F9A5A648580DA684D463A16B425F66E6E9A5465C73046ACF61466A583487C16C607273C372725685CEC6EF602F01C1D615D989F7A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Z{.].y.}s....}.k...u..&)..i....uJ"..B...Z.T.iZ.U..cjB......&.......`g1~..o.....{.3_.....\[F...4s.....qf.^.H...~.c.....pbn!b$.&..........E0....Z.K./...2...>;:..If..9N^.)....>.o...L...$X.....0k......]......V13.L.P.[..C.3.m.`..y.u\.g[O.k....i.~$Q....On.]nl......?.....K.............T..P..J%.@...J$./.K..fRP2.....9...v~"o>s....i;2r....{.8...+.'.......Z.h(.r.0..J2).K.WP@.(.`..K..R5.I.h..S....Z.pe9<.,.../.. _..].g.....de.Ei.H..... .....v....Ap....).c\..~M.....o.b..l.q....B...t....D."E.8..=..R~..H\.$L._k.Z."..n...T..9.^..;zl........)..yWw'2...f...h.9...#(.....A^.r..6.XJ\K.2...iT......V.s.Rt.......9.Z...o.s.w.(........\|.r9+.....V.b..TD..0&.......vW...<w-....b.%..Xs.n......-.vv.....X.I.X...h..\...(.2T..(.A....B:.F..O`.......~.E...GWW.Q..?.p".....]...~.+4g.j....5..".f`..j4 .(....D0.4.....k...;...K.hd.V>....m+....u....!.K..\|..X../S.FP...S....8`..e#.$jna.U-.B/Z.B(....../<.s.:".JDW..Q......'q.c.G$..OB...

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=97055&time=1710158201672&url=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Ffiles%2Fdocfetcher%2F1.1.25%2Fdocfetcher_1.1.25_win32_setup.exe%2Fdownload
Preview:	{}

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65534)
Category:	downloaded
Size (bytes):	96795
Entropy (8bit):	5.289280173366596
Encrypted:	false
SSDEEP:	768:LcnJL1fv/k1Ut0QVSPFVfxuOCJywJPgVEzQ8CTx03pqvXGXQNtxldim8Ku/Otx04:LU31uKVcf0QY6jpLOusGNcBPrw2K
MD5:	E19D230C0C4F663FE269201BB1E6B0CA
SHA1:	5A054202A81126BDD3406DE96F6BDE1B349FA5BD
SHA-256:	6A6187838CC4AF1FD500F6DE6C5DC5B10AF97A8DB371FFD1FECA4981E28A149A
SHA-512:	E6D92B4463851DA7A947FC84A177795524D3ADD177D62C8261A749E2713EF6CE2FC2B9340A97B984E4B18B8BC3BF715A9F374E84EF9640456B589ADE125215A1
Malicious:	false
Reputation:	low
URL:	https://cdn.ampproject.org/rtv/012402262017000/v0/amp-analytics-0.1.mjs
Preview:	;.(self.AMP=self.AMP\|\|[]).push({m:1,v:"2402262017000",n:"amp-analytics",ev:"0.1",l:!0,f:function(t,i){(()=>{var i;function s(){return i\|\|(i=Promise.resolve(void 0))}var e=class{constructor(){this.promise=new Promise(((t,i)=>{this.resolve=t,this.reject=i}))}},{isArray:n}=Array;function r(t,i){for(let s=0;s<t.length;s++)if(i(t[s],s,t))return s;return-1}function o(t,i){const s=t.length-i.length;return s>=0&&t.indexOf(i,s)==s}function h(t,i,s){const e=s\|\|1;for(let s=0;s<e;s++){let s=0;if(t=t.replace(/\${([^{}]*)}/g,((t,e)=>(s++,i(e)))),!s)break}return t}var{hasOwnProperty:u,toString:c}=Object.prototype;function a(t){return"[object Object]"===c.call(t)}function l(t){const i=Object.create(null);return t&&Object.assign(i,t),i}function f(t,i){return u.call(t,i)}function d(t,i,s=10){const e=[],n=[];for(n.push({t:t,s:i,d:0});n.length>0;){const{d:t,s:i,t:r}=n.shift();if(e.includes(i))throw new Error("Source object has a circular reference.");if(e.push(i),r!==i)if(t>s)Object.assign(r,i);else for(c

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1763)
Category:	downloaded
Size (bytes):	39038
Entropy (8bit):	5.430664050428052
Encrypted:	false
SSDEEP:	768:a5/nVk+G9hMlWTSwx832cQyHaSaSmAjiT:a1Vk+G6lWuwx8fLabSNU
MD5:	E073798C657A0FC59453B8B6ADEDCEBA
SHA1:	401AB66A92A6716CD4C981894D47F679FC1AE9AB
SHA-256:	EB66C7C9D097D5BA414230F422484C17FA6F37157D30E1DED2CC5F65A9667987
SHA-512:	866345625C19C0256BE9BF9F383291E645C6B64124A43BDD1C02F92FC2AE0F0AD985A15FF39319456B679B73B058290C0A0FE10C073D76F2C5976D8ED8D84A49
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/62bHydCX.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},p="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},r=ba(this),t=function(a,b){if(b)a:{var c=r;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&p(c,a,{configurable:!0,writable:!0,value:b})}};.t("Symbol",function(a){if(a)return a;var b=function(h,f){this.Ca=h;p(this,"description",{configurable:!0,writable:!0,

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=18&expiration=1726055830&external_user_id=8fb517aa-a8d0-437d-988f-7084f5819e19
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2487)
Category:	downloaded
Size (bytes):	23094
Entropy (8bit):	5.49319712411738
Encrypted:	false
SSDEEP:	384:k5SYT18ljxDQ92dnZNaaYMSkT3yHI7YybBosxsM/TSOLmfmKzy4zl9WylRiRrAN4:+S81UxDQodnZNaThkT3yHI7toQ/TSOau
MD5:	C09B306B19B1F0FAF7E86C43181A9274
SHA1:	F937B42F7F9CE6A8B21AD5311B591A7F83DD0B8E
SHA-256:	8A33861CDC370B2DB8442132658B06069640881BC90F369FECA9B30C77E5F460
SHA-512:	6F7616126F5CE9821C1D178DFD9512BDACB0FF2515E5B5AEBA63C2EEF8B4165F2DB8015B9ABCD2AC03ADCAD33B577BCE92B176D58CC220E2480F728E423D630F
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240306/r20110914/abg_lite_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=m,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1}function ba(a){return a};var ca=aa(610401301),ea=aa(188588736);var n;const fa=m.navigator;n=fa?fa.userAgentData\|\|null:null;function ha(a){return ca?n?n.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function q(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function r(){return ca?!!n&&0<n.brands.length:!1}function ia(){return r()?ha("Chromium"):(q("Chrome")\|\|q("CriOS"))&&!(r()?0:q("Edge"))\|\|q("Silk")};function ja(a,b){return Array.prototype.indexOf.call(a,b,void 0)};function ka(a){ka[" "](a);return a}ka[" "]=function(){};!q("Android")\|\|ia();ia();q("Safari")&&(ia()\|\|(r()?0:q("Coast"))\|\|(r()?0:q("Opera"))\|\|(r()?0:q("Edge"))\|\|(r()?ha("Microsoft Edge"):q("Edg/"))\|\|r()&&ha("Opera")

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
URL:	https://match.sharethrough.com/sync/v1?source_id=BVbSRuzbUWjBEF6bQrmLHKkX&source_user_id=y-o7eUixNE2oMWn2w9DoaTRVJhEsb6JNCG6wAd2Og7t_Z.~A
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	65278
Entropy (8bit):	5.969152133549589
Encrypted:	false
SSDEEP:	768:DD8dQ+9Kh+Clpxixm7yhemwuaSyqCH8CxthFPR2kTtWhrJT/TruEKgc0w089A97i:E97m52N7ruEYNckVJOPC5x34bgO18pwY
MD5:	AA3EA1055EBA0DDEF01C857E5115DBB7
SHA1:	72567214593A89564B0F722B408DACFE84B941C0
SHA-256:	6ACEF66A3A8358EF6EF9828A4DA318BF79A85C53E2B61AFE7D12446345532B34
SHA-512:	37AF7BDC2518D85E432CDA21C6FB8850FB26D8F4F631BC716F604FAF0C3FF6D7C850908C5DA57279A72D16573BECC8C6D8BE330C67F44E7E9A08EA65ED8587AA
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=4280401622278687&correlator=1402022865632457&eid=31080983%2C95326466%2C31081566%2C21065725%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403050101&ptt=17&impl=fif&iu_parts=41014381%2CSourceforge%2CSF_Temp5_300x250_A&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=300x250%7C300x600&ifi=2&sfv=1-0-40&fsfs=1&fsbs=1&sc=1&cookie_enabled=1&abxe=1&dt=1710158204245&lmt=1710158204&adxs=963&adys=500&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=2&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Ffiles%2Fdocfetcher%2F1.1.25%2Fdocfetcher_1.1.25_win32_setup.exe%2Fdownload&vis=1&psz=299x275&msz=299x0&fws=0&ohw=0&ga_vid=1854926735.1710158203&ga_sid=1710158204&ga_hid=223921665&ga_fc=true&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFsyLFtbIi80MTAxNDM4MS9Tb3VyY2Vmb3JnZS9TRl9UZW1wNV8zMDB4MjUwX0EiLFtdXV1dLG51bGwsM10.&dlt=1710158195863&idt=8318&prev_scp=oss_tpc%3DFile%2520Managers%2CSearch%2CSoftware%2520Development%2CSource%2520Code%2520Management%2CStorage%2CSystem%26shortname%3Ddocfetcher%26dc_ref%3Dhttps%253A%252F%252Fsourceforge.net%252Fprojects%252Fdocfetcher%252Ffiles%252Fdocfetcher%252F1.1.25%252Fdocfetcher_1.1.25_win32_setup.exe%252Fdownload%26sz%3D300x250%252C300x600%26page_type%3Dpg_download&cust_params=usingSafeFrame%3D1&adks=256309498&frm=20
Preview:	{"/41014381/Sourceforge/SF_Temp5_300x250_A":["html",0,null,null,0,250,300,0,0,null,null,1,1,[["ID=ed8d538436f1b623:T=1710158205:RT=1710158205:S=ALNI_MbiYxvEWP7dZiJkctj8HGzhHyMpCg",1743854205,"/","sourceforge.net",1],["UID=00000dc711cb5676:T=1710158205:RT=1710158205:S=ALNI_MbtGcDgo6RHjTtG2es2mbdsN1jDSw",1743854205,"/","sourceforge.net",2]],[138426404096],[6251030770],[1329521181],[3165027971],null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGsnbz-k7MovmpbRoiHHCeG2NQT7m2Je2GqmVMhYqbgDe18j6lZQQIPF05MUplZb_S1E9pQ0L-m5xxl-RKx2OTgs","CK763uKT7IQDFUisOgUdxC4PJQ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"2",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,[["ID=ccb10672a4298c0a:T=1710158205:RT=1710158205:S=AA-AfjZQQCnCz9TlsGBpH19Z0_Y8",1725710205,"/","sourceforge.net"]],[]]}.<!doctype html><html><head><script>var jscVersion = 'r20240306';</script><script>var google_casm=[];</script><style>a { color: #0000

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	49438
Entropy (8bit):	5.933003129455464
Encrypted:	false
SSDEEP:	384:/W0A3XsLkXYFyBN8q2Bremky6YQ3NxiheqZ5FheqZbEAnzAnv2VPj74uheqZ7Xxy:/W8kXYFyBN8PrloBqSqL74LqZzA
MD5:	331444604014EB30534BA6B45F42614B
SHA1:	F84B48E9A29DE72FE24EAED92D92D753EDD6FCB4
SHA-256:	02DCC210A47EABE3F66B916DD5242BDA5F2336A6D38B6B1DDD2A300EFBB563DD
SHA-512:	A741AA3DFDA5057F7DBBD0FE807CA06A2880CB6F3D62688E680DAB555F4905691D00475D7F0FDDD2EC71F8EA8D61D0B25851698E9DD2FF5FF839D8250C03E6A7
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1401323213163731&correlator=3107826260999058&eid=31079957%2C31080983%2C31081725%2C31081566%2C44807746%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403050101&ptt=17&impl=fif&iu_parts=41014381%2CSourceforge%2CSF_ProjectSum_300x250_A&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=300x250%7C300x600&ifi=4&sfv=1-0-40&fsfs=1&fsbs=1&rcs=1&eri=1&sc=1&cookie=ID%3Ded8d538436f1b623%3AT%3D1710158205%3ART%3D1710158205%3AS%3DALNI_MbiYxvEWP7dZiJkctj8HGzhHyMpCg&gpic=UID%3D00000dc711cb5676%3AT%3D1710158205%3ART%3D1710158205%3AS%3DALNI_MbtGcDgo6RHjTtG2es2mbdsN1jDSw&abxe=1&dt=1710158274032&lmt=1710158274&adxs=963&adys=376&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=1&oid=2&u_his=2&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2F&ref=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Fpostdownload&vis=1&psz=300x612&msz=300x600&fws=0&ohw=0&ga_vid=1854926735.1710158203&ga_sid=1710158241&ga_hid=98602124&ga_fc=true&ga_cid=1668299401.1710158203&td=1&topics=3&tps=3&htps=10&nt=1&psd=WzE1LFsyLFtbIi80MTAxNDM4MS9Tb3VyY2Vmb3JnZS9TRl9Qcm9qZWN0U3VtXzMwMHgyNTBfQSIsW11dXV0sbnVsbCwzXQ..&dlt=1710158238737&idt=2612&prev_scp=oss_tpc%3DFile%2520Managers%2CSearch%2CSoftware%2520Development%2CSource%2520Code%2520Management%2CStorage%2CSystem%26shortname%3Ddocfetcher%26dc_ref%3Dhttps%253A%252F%252Fsourceforge.net%252Fprojects%252Fdocfetcher%252F%26sz%3D300x250%252C300x600%26page_type%3Dpg_project&cust_params=usingSafeFrame%3D1&adks=2750022012&frm=20&eo_id_str=ID%3Dccb10672a4298c0a%3AT%3D1710158205%3ART%3D1710158205%3AS%3DAA-AfjZQQCnCz9TlsGBpH19Z0_Y8
Preview:	{"/41014381/Sourceforge/SF_ProjectSum_300x250_A":["html",0,null,null,0,600,300,0,1,null,null,null,1,null,[138416297042],[6180654644],[2036965341],[1511469861],[151821],null,null,null,null,null,null,0,null,null,null,null,null,null,null,"CKixjoSU7IQDFWKuOgUd8cILRw",null,null,null,null,null,null,null,null,["012402262017000"],null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012402262017000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}html:not([amp4ads]),html:not([amp4ads]) body{height:auto!important}html:not([amp4ads]) body{margin:0!important}body{-webkit-text-size-adjust:100%;-moz-text-size-adjust:100%;-ms-text-size-adjust

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	232
Entropy (8bit):	5.17859394233945
Encrypted:	false
SSDEEP:	6:qATlmiDIYMCOLDyxvihq/Ur3Kas/StT0Fa5ruFLNuK:qAT8Z7qZi7r3NSSWF6ULsK
MD5:	53F92B209DF4229FF3698407EC89EDF1
SHA1:	1A3B602C123489418BAA0F7B32E4EBAAB75B0391
SHA-256:	A41DF308CCF81BAA8690B85C1654D56E490F3AD840A7C94CE62C52C8C6A3B8F7
SHA-512:	FD03A2F298103C7CCE6B0A1DB0313C67BE5B7CEB52B1A5C69F3B9398DBC2A66D7995B6A435AD72FCCF3C03B6658907FB651C40F9C5D3874A9D0DA82D6752AB2F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlEMULOjL0Q9RIFDT0fUzwSTwnlH7YLhO9yXhIFDYOoWz0SBQ2gedmmEgUNVbv1bxIFDZRU-s8SBQ10y4ycEgUNU_J1YRIFDWdXYzwSBQ0vahE1EgUNkgVUzhIFDbpzzqUSLAlhdQocfv09PRIFDWV6PCMSBQ24XIowEgUNofyCJhIFDcGA2W4SBQ1A8MEl?alt=proto
Preview:	CgkKBw09H1M8GgAKcgoLDYOoWz0aBAgJGAEKCw2gedmmGgQIJBgBCgcNVbv1bxoACgsNlFT6zxoECAcYAQoLDXTLjJwaBAgNGAEKCw1T8nVhGgQIDRgBCgcNZ1djPBoACgcNL2oRNRoACgsNkgVUzhoECDwYAQoHDbpzzqUaAAotCgcNZXo8IxoACgcNuFyKMBoACgcNofyCJhoACgcNwYDZbhoACgcNQPDBJRoA

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	4442
Entropy (8bit):	7.938323890237402
Encrypted:	false
SSDEEP:	96:EdNPCtYgv+kVYRb91rTpdO34nFlpByjktFRSnJKSlYDiAi2Y9:EXiWketPvpV+MFmJKSVAiN9
MD5:	80585686F51732649BB10D27FA36B4D4
SHA1:	FE402884D196C6B753B19A96781B2F6050AEC855
SHA-256:	A2253929300FEB2E7EA4E1949C00C156BE40B7A02BC1C37535BDAC586C9ED040
SHA-512:	949980817926A3C7B9A4E0FB2AFB3AED5DBCBF168802949D7D6C1EC39752DDFA32692CDAD3669D8CB425E0FA0CAF59196B1AE5884E2062FDA0B20CF152A33C19
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/app/nel_img/17613
Preview:	RIFFR...WEBPVP8LE.../w......m.i..S..#b.8Wm.aP..K.#.O.6;m.g.........x.Y..;;.$......q$.s8...i...k+d.#5....72C#U...@../RN.}...Z.4(..qm....l.=.._qw[...X....Y...........[...H........k..<.2f..2. ....d.mv.'.........[.j.,Rz...............}....}........HF.'.J .....f6o..l.L.m.m..m.n.m...c..A.d.d.L..R;.r..Q....x.YO...m..jwg....B..R.d).@...[".,.H.Z..Y/+..I#UVJ..Y...L..4.G...e^Y@.QU..U[E.}F.c10-.."...Nh..p7..$]....U.@....D-h...9..@. ..z..........-....Z.l....E..,.V.{K.Y.....*.V..u...0.L..@ ..!b]..... 6.Z.....J!....?(...G.eB.........-...!.)...e......w.........s.b..p.[..7%.F.....J"fq.f}1.3.w....F)0.JZ+...&...qg......r.#k(.g.....4. $..)".......l..(....UR....>.&..2]&[}.A....U..C..@=...J.x...9.;...;??O.6..'.;....[a.qx.............h7\h.....u.}.\|..u,........+w6.....o..9...!. w-....iM.,R=..#.......Wn...V....=...G-.mw......U..v{......o...\| <..C[qw}.l}.+..KK]L.!.@..&..WW.HC........n...7S...d.."]oRW.....H.......+K.&..T.......CP.o.Wj<F.P.9A^..(+.6.pf...M..uz_...../(.0.

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	114698
Entropy (8bit):	5.9584991885182195
Encrypted:	false
SSDEEP:	1536:BcaRKh+XvW4NCnafRCl+RCLAFe0FJ6cN+xmpEqj6Svw+Ry686o021f4aqi1okuqs:hwh+hbZI+I+G3YeuGD5GP6kkaYDu
MD5:	3EB3D7B938A0F60B5C8091F14731CA47
SHA1:	96137BB0DCB5FEF80C2E5B112CD8EDB0A865D69E
SHA-256:	F219D275FA5FDA224F5C8F22F56B66BE020E85DCCF145218FDED813959BBB26D
SHA-512:	AB5D6B5F5DDFC5AA01E39A84AC2F55B770B5FBE37585724C09A89A09665213E9F0E2B7D18920421AD6676B2F1562E316DA21E2804BEAE98D65A7D00268220A44
Malicious:	false
Reputation:	low
Preview:	{"/41014381/Sourceforge/SF_Temp5_300x250_B":["html",0,null,null,1,250,300,0,1,null,null,1,1,[["ID=0bb59a556cc80196:T=1710158207:RT=1710158207:S=ALNI_MYQ7RCc8g2FNEa4DK8gGPsY3C9YqQ",1743854207,"/","sourceforge.net",1],["UID=00000dc71200934c:T=1710158207:RT=1710158207:S=ALNI_MZND9jBOyz0PF7a4ssqj-wUnHBQ8A",1743854207,"/","sourceforge.net",2]],[115763391621],[2168334381],[2036965341],[1511469861],[151821],null,null,null,null,null,null,1,null,null,null,null,null,null,null,"CK233-OT7IQDFfGvOgUdZj8KHg",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"3",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,[["ID=437e44f75fbf2673:T=1710158207:RT=1710158207:S=AA-AfjaY1Mbh_mwiBjLtveMyO6GU",1725710207,"/","sourceforge.net"]],[]]}.<!doctype html><html><head><script>var jscVersion = 'r20240306';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><div class="GoogleActiveViewInner

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	9379
Entropy (8bit):	7.975580797032009
Encrypted:	false
SSDEEP:	192:oU3fwWTvLNPa5MYFMv9m5RRZH4R+IatoVkz3oOMVnKowVrVG6qjf81:osfXvcutlurH4c/oazFcnKourcjf81
MD5:	DC6AE5B4781BB0A3B5322690F4880B3A
SHA1:	811B736154B98F979DBC40A7FC97555BF319A475
SHA-256:	3F18A9141213EC4320A23872D8E90D3860D7AC7ADF03BE387C7389572F246733
SHA-512:	F19FFF77BFE42A9B0914504563FB9B80B222CADE1386E979D294C0915365F3AC4862D65169D5631C0D6D9C20354554D891DC034ED7F7ADD686B7398171562902
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.............sRGB...,...$]IDATx..Y.t[.v.&.!....LI..$$.P....PB)KH)...p:g..2s`.vz.M.K.,...4....8^e.l.e[.$.d[..KO...$.Y/...q......?.....w.......O%.\...%K..-{}^y...v..9K..,......LN..q^.F.......6...:/]9.nq3.'e..0.U.9..I.....w...{)'..qGe.^..Bn.:\.!.1L?...P..k.B.a\^M-...t.UC_~..._.i..b.s.3..R"Q.n`!..)'l......{....v.T).==.6...+6..4..F...EJ>oxl.4*.s.C\..n...#\..l.....cz......'km.....1.T'.M..d..-.....d.M~...P(Lxl.{`b....V.%...'O6L7..j..E".p$..$.>.K......n..w.;.t..e....i..H.H...=u...%1..N...=.d.\|D....-9..V.bu.....f....n.56.Fe.6[....Mm...50.0WU5.....E......czb\|...&Z.W]......M..^..Ric0.x...<..Lg.[H...]...F....y.................iC..s.-,....>S..'e...1.3........I..l...G\|.D5Z....p@a...h.M.....O.Q;..c@........O....^..WQ.8(..h...f.tu...\^.D.r6.a.zG......66`-.u..R..aP...........#'..h..........i'..G..>.)@....b..P...9;.tA.EF.6....\p2.G....!.......v..........i..W.......K+.)..Xo.[..O....^.Z.0>.Z.eK..).3g...w...G.WV..d.......T~.....W..

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	58472
Entropy (8bit):	5.956233189461722
Encrypted:	false
SSDEEP:	768:MW9kXYFyBN8FBT5o4ztoN6oNZXoNvoNDCP3mCP3boo8Boo8174GCP3M1+MgoJsS:MckCIRH0GNCP3mCP38k74GCP3s5n
MD5:	209CDE757ED5BF317E4C689BEFEE71C6
SHA1:	F6804143FFFF18C314D667B4F399D52E316EFCA0
SHA-256:	5D3815782F9FB8592C5210D3E2440F0082DC82351F97AA9499220B1F4878B4EF
SHA-512:	3C236DAA31C05B604D1A311161FD8733F0052994C702011CE6792E14EDC6468094B4C3FD9AA4B66A1A2654422AD69520F1E84D1989FFA103233C12DAF8BF477F
Malicious:	false
Reputation:	low
Preview:	{"/41014381/Sourceforge/SF_TYP_728x90_A":["html",0,null,null,0,250,970,0,1,null,null,null,1,null,[115763391621],[2168334381],[2036965341],[1511469861],[151821],null,null,null,null,null,null,0,null,null,null,null,null,null,null,"COX38O2T7IQDFQyxOgUdPGYBbA",null,null,null,null,null,null,null,null,["012402262017000"],null,null,null,null,null,"3",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012402262017000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}html:not([amp4ads]),html:not([amp4ads]) body{height:auto!important}html:not([amp4ads]) body{margin:0!important}body{-webkit-text-size-adjust:100%;-moz-text-size-adjust:100%;-ms-text-size-adjust:100%;te

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (511)
Category:	downloaded
Size (bytes):	137374
Entropy (8bit):	5.32238434356114
Encrypted:	false
SSDEEP:	3072:uKwU1XfxxNmSTvBXDCTWBNw/9nCCvO2L8a3O78Fb7Eo927reN7RRA2jD5td7d+u7:FEjtCgL8a3O78Fb7Eo927reN7Rzr
MD5:	281A1E845650D9FF23E34D93B5076BCA
SHA1:	BE5B21131C5F6F6DD55DB849BD90E4339B347081
SHA-256:	B96B047B0EFB5CB65E26DBA7938C6D90D4B3307B3AD97CD316A305D36EC4BD3C
SHA-512:	3B829B168A039B3109796929ABE273846DFF954F205B52423E170117B8191DC5D9FC2C93661491EFBED46A1FF9A7E8975CF3ADFE3C15A5A2F7B4BEB6BD86A312
Malicious:	false
Reputation:	low
URL:	https://sourceforge.net/projects/docfetcher/postdownload
Preview:	<!doctype html>..<html class="no-js" lang="en">.<head>.<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />.<meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=no" />.<script src="//a.fsdn.com/con/js/min/sf.sandiego-cmp-top.js?1709827391"></script>.<script type="text/javascript">.bizx.cmp.ifConsent('', ['all'], function () {. var bt = 'https://btloader.com/tag?o=5098683085881344&upapi=true';. bizx.cmp.embedScript(bt, true);. window.addEventListener('AcceptableAdsInit', function (e) {. if(e.detail) {. console.log('acceptable ads on');. SF.Ads.acceptable_ads_active = true;. } else {. console.log('acceptable ads off');. SF.Ads.acceptable_ads_active = false;. }. });.});.</script>.<script>. /global unescape, window, SF/. // Setup our namespace. if (!window.SF) { window.SF = {}; }. if (!window.net) { window.net = {}; }. if (!window.n

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	7256
Entropy (8bit):	7.958642377829449
Encrypted:	false
SSDEEP:	192:o1GMuZLy41ge5Y3f14M5NQ4xGMvqV6wLrRz:o1GjLy452v14QQzMvqtl
MD5:	E5698614F2DD65B5AD12725AF8EFFC01
SHA1:	7850E0DBC1F6AE8DBB4326D1A2A7D90101B23442
SHA-256:	DB89011E018EAC801F7D26E40CBBDAAAB1DEF267E4C43CCE08BD92DF70B91F52
SHA-512:	C86C3456E83AC099BD553E5D37B63BB7A53A48F625980EAF23E8C71B6FE6E79946F291396108801D31E4A7E3E7D83ED8DE3BC0C0E746E8EE325CA2D381F4405A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.............sRGB...,.....IDATx..3.Y...1.;...v.[..S.vJ.R..m.%.n..u.$%7in....."a.M....$BQ[.!:....J.+_+m.dm.:....'.<s.....b.ui4.1s.XY.V.......355.frr....)A...?..,.....3r..1fX...Ot....`&&&..I...d~.O.$.u0..O(.2..: .A.. B.FB.........eBd.p0.4.H...D.../^.+...!._...+.&.........uF.J...Nh...g..5s.2R..4..7T.9.F..H..SG=KD..1...~F..[...........x.....q.8.P.9.?.(...2."FW..............."(b..A....s.!.p...=M..Vt.J[.N...;g..r.....\...%......7.-0.....>{...6K....\|...A.q...d........f\|.7.#...K....G'1...d.Y.G....x.....k....4..2..3..=.?...`t..X...Q$.......!....&..O...>@#a.h...h~..*A.y.4....mW..m..h$.f..h...S'.v...3.qd."N...C\|...,.T..T.@h).U,.9...........r..r.e\.G:.V..u!..hFa. ..K.=...F...b....q.3Y@....}$../.^..._....?..).V.%.....;.h."N(.7..&sQd~By_,.."....M.}r+......<..1..P\o4.{,..-..).....q1..f..#..w...d....0.x.=.^p..'.,......l..p....-.v..'.u6...&.;0.l.K..5....;1..Lh....Sj.$...np;`.9.......>..n.L..[l.[.n.M$..'.m$.x(..J.U...F.V.7

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2315
Entropy (8bit):	7.884660545576727
Encrypted:	false
SSDEEP:	48:XPvenA4H0JmZBE/Me3S6OYfNqZL0boA7m0g4niEekRrJ1P22:/veA4Ugc/M56Ok60tgjQP22
MD5:	3BAC7D835445BF6826E6F6B37C1D294B
SHA1:	0653E1038B9EADC38933460122D8B5F31EEB0CBF
SHA-256:	3F94556383D59F95E5EB9DBD5F8BAC0B678EAE2763634D2528F8D2A8715A5930
SHA-512:	10D35586FF354EFE4882F00E17FB58998C704F8B34DF5FDC9C009F0403F8BA815B2F5DD497FC9E5F06612D9644B444EDADAE14430528F70E8C97C51916C57406
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......IDATx...TT...`0.4.f....h.j.i0..mS...9i....Q..VS..E.A..[D#:.(;.&0.. ......lR.....S.a&.4..;.w.0.~.....u..=.g1\|..<...%B.I.$......n.......[.._...D....=.!.b.!?...N....].l.Y...r"......5..8'...8D..P.A.S..b.aM...D8.L..!.#aN....'.x.....L. ...e..C..H.8..Ug......G..Ah1!...a.<...}.......p....9>.."=.xL.....-F9q.x.h`}=7./...3..&...~.......q..oY.~b.0...D.....E...h.T.'....T"=.S..,...d..O......./.r...).91oP..A...F....PN.0!r..!.1..GL...I.&..ea.'f8.@;..%../......'f.....t.......m.....l\|.jC..N...L....n\.y......a.?Q.c...nI.........QXab.....>?=...w..q..DC.!d`........x.Tf...M1..N....p..m=.g.&..W.2...>......$d..^.........A...Ni......Y..^...s.....(.v......m...j.A}~............$^...-...3.....D..o....I.z{.[.(.......H..abb.KKK...A8.Q!s...y.d.2.5e&..S.XH..v..B(...`nn.ccc.F..O....i.&O..j.......P.7....~.#vc..'..h...............SSS&J../i"?.?..6.Acc.S.L......}.....,b.:.....v82....K.h...5...===.000.'.b.v^.3t.amm....2...RY....g.WG.6"^..

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2682
Entropy (8bit):	7.931952405507648
Encrypted:	false
SSDEEP:	48:ghjjBVsS49WwF1TCpwXa/DMsNRIucWdJ1tE/l9BuNiM+ArVsDKdKhQECCNlQfSQv:ghjjAS49Ww/Tm7MsNquc+1QDs+SV9Khk
MD5:	9AC8CAA210BBACCB9052363B3A6A1BEE
SHA1:	F97A9ABA1E4489747E00B4A76B0840954A746A61
SHA-256:	6047BFC099185F1F630CFAD11B2D714D12985100ABDA3AEE83C8EE6B714C0E7E
SHA-512:	F0C1DC4A692F0762B3AF3D31E56AA0A3CD29DEEDDF1A2347BF464A9966F91A6DDCF2A9CFE52122252D4D9612C9DCE40D3C6D201028FB577BE9FACEC16A816978
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W......AIDATx..Y.PVU....4'...v..j..Y.k.].Yw.,......P..<.4.A...#.M C."....E>1P.........s.o.{.....M.5'~3..3.....~..9.Om.../....J..cL..r.....4.h<.}xax..........LI=.z.7...khyL.Q......."...u.....E."v-11x_...x..9X.{...bW.#Z.\^.{..:..wW.4>SXT6.Bu....=.koo.&.......\|>...........Tf.".u.......t..%1..,-k3..z..uX..J....ut.bk.4.'......m..q.\.0\..p..Jc.(0..2y....tJ......wl...s.6..rwu..i).+.b.3..)Boc..=...@'.f.'..}..'ww.RO?....o.....k0.RJ........P.h.Wz.........$.`.)..&.<!c.....b..T.......2...e..}...H..K...FkM.S.....p.....U .0..u....h....M..B1.ZJZ.[v&.nt..C.,c.0.1....U.P...3f..a..v..U....3..tLe.I!...5.Z.{....Y..{bc.X..'ZY.....1....9Qtz....}.R..6....P.3...}....)..>e1............2.;.1".S.djc....:.E....c..\s..V....Ao...6&.j.O.."Fvb0Pd..y....a.T.......d.=w..Y.....3.FF.Q\|..zn.3..@'.z8....$.........rs3.........t.mp\Y&......"v......Z...:..+8.........'d.0.....IB.SJD.&..\|d.'........8....T..f.I.fl..`...."..G\|\.++.....%BLiR....

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64980)
Category:	downloaded
Size (bytes):	200736
Entropy (8bit):	5.245883235404999
Encrypted:	false
SSDEEP:	1536:8a5CcqjWwy/46xL4Iuec6jdySRV7n/iPRCmicxgmWnGSn+VlBNuTBUWoBq+nbZQu:Uc7/4yHuGdl1qPnWGtCEQ48s3
MD5:	B7A93CAB3B9C6E93E96C1DA1F7C0A14C
SHA1:	A6895C2D107CD5D29648D4DC443629DC114B28EF
SHA-256:	1EC3F51275E9591ECC8A2CC293DE405E036B86192CEF5C919C1AE19A9B5FB3C7
SHA-512:	08C32DC4A371A68FBBBE6502FE49C912A077A06867BBFC6F2FDDC3E0AA49B7964E39A1AAB1DB828D1D409CE60B1D10183CC74CF5094E0D65CEA073785D45CFA0
Malicious:	false
Reputation:	low
URL:	https://cdn.ampproject.org/rtv/012402262017000/amp4ads-v0.mjs
Preview:	self.AMP_CONFIG={"v":"012402262017000","type":"production","allow-doc-opt-in":["amp-next-page"],"allow-url-opt-in":[],"canary":0,"a4aProfilingRate":0.01,"doubleclickSraExp":0.01,"doubleclickSraReportExcludedBlock":0.1,"flexAdSlots":0.05,"flexible-bitrate":0.1,"ios-fixed-no-transfer":0,"story-ad-placements":0.01,"story-disable-animations-first-page":1,"story-load-inactive-outside-viewport":1,"amp-sticky-ad-to-amp-ad-v4":0,"story-video-cache-apply-audio":0,"amp-story-subscriptions":1,"interaction-to-next-paint":1,"esm":1};/AMP_CONFIG/;.(()=>{var t,i=class{constructor(){this.nt=new e}abort(){if(!this.nt.ot&&(this.nt.ot=!0,this.nt.rt)){const t={"type":"abort","bubbles":!1,"cancelable":!1,"target":this.nt,"currentTarget":this.nt};this.nt.rt(t)}}get signal(){return this.nt}},e=class{constructor(){this.ot=!1,this.rt=null}get aborted(){return this.ot}get onabort(){return this.rt}set onabort(t){this.rt=t}};function s(){return t\|\|(t=Promise.resolve(void 0))}var n=class{constructor(){this.promi

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	17
Entropy (8bit):	3.734521664779752
Encrypted:	false
SSDEEP:	3:gCtwn:l2
MD5:	A54A440C7EED0A7B3E78E6B985E12FEE
SHA1:	92EF2F2008EBBC5635B71F5D6C9831C5F2F4514F
SHA-256:	62CE950AD0D7F664B316B4253BBC993BF0BF8310970F64B150FDA6F1FA59DFEA
SHA-512:	F82E417DFAA9DAAE2A74DE3564D9DF703E4A2849D60752F6A9C4C2C5053CD72D3F5ED036EF683CA586CE17D7A2DA3E9D3DA6311560296929C70B23BC05A57631
Malicious:	false
Reputation:	low
URL:	https://ml314.com/imsync.ashx?pi=3642666937673580575&data=eyJwaCI6NDc4MSwid2giOjkwNywidGJzIjowLCJkdCI6MzAsInBpZCI6IjE3MTAxNTgyNDA1NjVfNmlxOTR0aWV3Iiwic2QiOjkwN30%3D
Preview:	_ml.setIM(false);

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51435)
Category:	downloaded
Size (bytes):	52680
Entropy (8bit):	5.718324360291073
Encrypted:	false
SSDEEP:	1536:jfLPnBeCZ1xfDSmezIK3XQ1KJUXo7rYnBWnYF8ZE/:7LnBN1JFmR3A1g26GQn/K
MD5:	CC778868998DD3A888F4320346584FC7
SHA1:	0F96C8A839C9EEB8DEA04E63322EA46ABFC17A04
SHA-256:	D7380722FECF4601BE898B31E0CA788104B2B737E023671DD2187C5B1757D9BB
SHA-512:	9B4A4BB5F1F67527383588564B5247B5514EAD99DC55DEF44589D815E9F6237501739CAC09F9E7B77A4D8CFDFCF20CFF3E848D35A4AF96D7E2B5E8B8D1739378
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/1zgHIv7PRgG-iYsx4Mp4gQSytzfgI2cd0hh8WxdX2bs.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function d(b){return b}var D=function(b){return d.call(this,b)},g=function(b,x,X,Z,v,R,G,h,W,U,u,K){for(K=(u=Z,x);;)try{if(26==u)break;else{if(56==u)return W;if(8==u)K=55,W=h.createPolicy(R,{createHTML:D,createScript:D,createScriptURL:D}),u=35;else{if(35==u)return K=x,W;u==X?(K=x,u=73):u==Z?(h=y.trustedTypes,W=G,u=x):73==u?u=y.console?b:35:u==x?u=h&&h.createPolicy?8:56:u==b&&(y.console[v](U.message),u=35)}}}catch(l){if(K==x)throw l;55==K&&(U=l,u=X)}},y=this\|\|self;(0,eval)(function(b,x){return(x=g(37,0,67,47,"error","bg",null))&&1===b.eval(x.createScript("1"))?function(X){return x.createScript(X)}:function(X){return""+X}}(y)(Array(7824*Math.random()\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZX

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	64357
Entropy (8bit):	5.961049838411982
Encrypted:	false
SSDEEP:	768:GWpkXYFyBN8bDABqncr0Ze0K0b0N0FLJCvtLJCvR0J0y7UrLJCvfTWEuuacx0t:GckN2ZBdouFLUtLUCaiUrLU7dbacit
MD5:	FF319CCE77B891C1C0646605BBDFF0D0
SHA1:	5A6EE8FA930912FE9E45F83EEE0F291AB7C243E5
SHA-256:	B262DEC79B032372EA5D47FB444F99BAF9D53F913A35DD299A8445C76DE3C556
SHA-512:	9C494506B35A86D0F0F3512F30166897F2ED67A02B689866B178A505C2762B6B580219F02043ACA290E297320E701E08AB05EEF7F580B14C4D5A8B42BD494CBB
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=4280401622278687&correlator=1402022865632457&eid=31080983%2C95326466%2C31081566%2C21065725%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403050101&ptt=17&impl=fif&iu_parts=41014381%2CSourceforge%2CSF_Temp5_728x90_A&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=728x90%7C970x250&ifi=1&sfv=1-0-40&fsfs=1&fsbs=1&sc=1&cookie_enabled=1&abxe=1&dt=1710158204226&lmt=1710158204&adxs=268&adys=86&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=1&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Ffiles%2Fdocfetcher%2F1.1.25%2Fdocfetcher_1.1.25_win32_setup.exe%2Fdownload&vis=1&psz=728x115&msz=728x0&fws=512&ohw=0&ga_vid=1854926735.1710158203&ga_sid=1710158204&ga_hid=223921665&ga_fc=true&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFsyLFtbIi80MTAxNDM4MS9Tb3VyY2Vmb3JnZS9TRl9UZW1wNV83Mjh4OTBfQSIsW11dXV0sbnVsbCwzXQ..&dlt=1710158195863&idt=8318&prev_scp=oss_tpc%3DFile%2520Managers%2CSearch%2CSoftware%2520Development%2CSource%2520Code%2520Management%2CStorage%2CSystem%26shortname%3Ddocfetcher%26dc_ref%3Dhttps%253A%252F%252Fsourceforge.net%252Fprojects%252Fdocfetcher%252Ffiles%252Fdocfetcher%252F1.1.25%252Fdocfetcher_1.1.25_win32_setup.exe%252Fdownload%26page_type%3Dpg_download&cust_params=usingSafeFrame%3D1&adks=1588563051&frm=20
Preview:	{"/41014381/Sourceforge/SF_Temp5_728x90_A":["html",0,null,null,0,250,970,0,1,null,null,null,1,[["ID=c48d4c4e2744e51b:T=1710158205:RT=1710158205:S=ALNI_MaG1vCdxBCrMtVwoaQDoLSNNeH9QA",1743854205,"/","sourceforge.net",1],["UID=00000dc7119de8b6:T=1710158205:RT=1710158205:S=ALNI_MYSkX99MtGu8ZaGBz6IOyd33q2r1A",1743854205,"/","sourceforge.net",2]],[115763391621],[2168334381],[2036965341],[1511469861],[151821],null,null,null,null,null,null,0,null,null,null,null,null,null,null,"CJWJ4OKT7IQDFeWsOgUdfH4BKg",null,null,null,null,null,null,null,null,["012402262017000"],null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,[["ID=6e8e0b3f1eb99fb8:T=1710158205:RT=1710158205:S=AA-AfjbVtv6DiWMzWCG9VMXJRqOP",1725710205,"/","sourceforge.net"]],[]]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=zemanta&google_push=AXcoOmQnJfnHGRaXWFt7mthQepyDR2C5ms77cxecwp7TL5wbOgMAhSSwP2sATJFXbkWREVPO2rt290j7ZChbbkVsJgRQrzH_qasa-4XTzN9lrdp9ijDCRjWTKHsUpNy8SUOzesPqpMYHDNhpFg3DyCm1Cdm_&google_hm=bmpxdUJjYS1RaFVacXo5eXBmSlY=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2222)
Category:	downloaded
Size (bytes):	42217
Entropy (8bit):	5.396200966239423
Encrypted:	false
SSDEEP:	384:/xEVUMByh/fa6cSOUkxHT72sDWB75/0D0PmfDpl2yk/Z7SNJQ0Wu3PI3Prx/ttoI:hRS6cbHTi7iFkOvLbAN9gzRON1Rxwi
MD5:	1C33A4D6D63C7E6E38CC72E6245FC107
SHA1:	19EA40DED1698EC0617604DC3E09897F7A8FF640
SHA-256:	435DB380C9936C0970DCD3D9941EAB6AEC2FCF2A38C3E2B4E02D957E8E76BD1F
SHA-512:	CA55321C3C847819553238850525E59C6ED5C37BCA116358D5080971037E56A3407D256B6A78DBE38F4B91CC97E62D899296C620F80701598983BA0624E086E7
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/Q12zgMmT.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Aa=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Aa};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://tag.crsspxl.com/m.gif?id=&google_error=15
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd7SelTlxSv8up:6v/lhPfZMys+llxm8up
MD5:	4E73E94AF1A1A5436C2DA7F12C0123BB
SHA1:	58058BC52693124388C9F647411A047C9C0C8658
SHA-256:	F3CA3118D9ECEB4028FB8B62693E34913BADAEDFC8D62EED83ED744697BF12F9
SHA-512:	C92DD5B6B53B682B10AB3873C032FC08EAE6757077FE5A7E79DF608D2826251DA48683793610D51C3E973E021594BF2E720A00F5D4FFA8E77C95FF21088910A3
Malicious:	false
Reputation:	low
URL:	https://d9.flashtalking.com/img/img.png?cnx=5229deeef87486e0390412aad88930d1
Preview:	.PNG........IHDR....................IDATx^c``.........w......IEND.B`.

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUmExltxlSle:JAle
MD5:	55FADE2068E7503EAE8D7DDF5EB6BD09
SHA1:	317496A096D6C86486A71D4521994BCD171A6BB3
SHA-256:	E586A84D8523747F42E510D78E141015B6424CF67D612854E892A7BCEDC8EC9E
SHA-512:	A9ADB9FEEA4BC14B9C34ED17CD30F8CB36DC686E9F69A292FE65BEBC195BE4714391FD98EC7B67BFD363FBBB6089C41A0B7CAB5130B50B461748E668CAC75621
Malicious:	false
Reputation:	low
URL:	https://a.tribalfusion.com/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 584

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/map/c=3602/tp=CPPB/tpid=693098949688747066/gdpr=0&gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvQY1tuXPs3tZ4Vpu0NmLFNDnITlf73cEoMRTZxjaMWB8NvIPLZJIr7wq3WG8QLuFGdPpybmLCX5rdozr0Lwl4dKzC7obD6KgV9bnDo0pvdn43PcmWerdma4qbkZEoOacHcoGmtACgvGJb3jmUmJkBGZ7uKKpNFqY8&sai=AMfl-YRERFQqutn5xvyEdhFz4qVWhTnPH1T0Zoz3Nvimvs3MFrULrG_IWfnIqvoKTSrE5jz23_ml-mFiIecGs9gtCtuNzGxCrpV-cuKeJ3cou5YqOXZaI0hX5jaimzbR&sig=Cg0ArKJSzCW0_kchHb0DEAE&cid=CAQSPAB7FLtqiQszWaOy_xuo55k8Pq0JjRcZgj2jStsHo5olCn9s-f6qy6VQmQ-QowFa9AAa_72MNLQIcqAE0hgB&id=ampim&o=0,601&d=300,600&ss=1280,1024&bs=300,600&mcvt=1002&mtos=0,0,1002,1002,1002&tos=0,0,1002,0,0&tfs=71&tls=1073&g=88.66666555404663&h=100&tt=1073&r=v&avms=ampa&uap=Windows&uapv=10.0.0&uaa=x86&uam=&uafv=117.0.5938.132&uab=64&uafvl=%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D&uaw=false&adk=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 586

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 587

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 40, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4942
Entropy (8bit):	7.951993832212307
Encrypted:	false
SSDEEP:	96:1bo9Ay0427G9SBPzST6aoHtmXCjDG9fSIfEZfoZXQ5Dg3SeeyZkq:1MF044LzUo0OGBpIwS8ZJ
MD5:	AD8C76EC127D994308CF6496749A86D9
SHA1:	172E4232AE8676A84F277835A9B186E089022320
SHA-256:	1FCBADBD83677E6BA21D3827E9A10F3DEDEDB337A4769EDB48FB9D9FF20A7E47
SHA-512:	0781581390A60105BC487172A43413347700D004DA157005F1BAA1FFBAEA9847E50999C30FC4F2409E63C794D3F8199A36DA9D1EA9F7753C56DB530A7ACFD6E4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......(.............IDATx..ylU.../....$Q+5).........x...fc.76..lCbRv....6.l..5....T..8...lHY.....p.R^q.T....1.c=.-..Q....3g..;g......?...,x.bn..{Mf..gm..m.%.o.p.d.?.e...fE..\.Z...d.?..l......f.+.;.M.O...J6...-..2Q..3....6.^6.!.j. .WM......F..P....H..g../~Q.P%..3j....F..A.o\|B5.G..1.Z.Z.".........../~.-dC..T........1...;3...g.Q...F8.@.....f.,.Q5...J.>..4i.lN..~...O!3......"..nC...Z...;9;.~G...BfB.;.LcQ5np.@..........k..../ev........~.i.Z).KGZm6.-...v./.N.GD..>..>...>-.;..7../.......m}q!;.mah.z.......G.o<....eS...B6.U...._#.e....n..:.AIKOG......01..6mONIA......G..$.'%'cJt....f.v.............3f m....O....."n..v....9;)I....f...3.C....w...-..l...uX..f..>UV...HLs[..q7.5D+..#.......hllD}}=.;...k...v..P\|...]W.....lSlJ.c...q..u455.z.......\sK...AXx8._..(....PY...;...P..S._RR.v.u.o.m.T~......>o.............Wk.)=..}...m}..{..........^....n...O.X#..G.KW..8.B.PQ.;VL}......Io....."......q>up..-C...N.........2.....a....7.;-6

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://ml314.com/csync.ashx?person_id=3642666937673580575&eid=50596&fp=ef0ee26ff141c186c8f416092ed9f16d&gdpr=&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1318
Entropy (8bit):	5.019609726546588
Encrypted:	false
SSDEEP:	24:2dfkATLf3jsbxgjAPeye7ZM785bEHUYf5Oswzjx3P:cfkAvf3WgjA5F785I0Y8zjx3P
MD5:	A061491324BF4177E4E90CA41AC4B124
SHA1:	2B637218A7BC69579F51804AEECB23C7FFDD1634
SHA-256:	00EEFF3E588D0A9C0B458014C53CECF6FF1F1BD0CC3ACC52C273CDC67B491758
SHA-512:	7ABCD3E41A27FE394B3FB1763EB959B07D692049E08A4C2715BA7D2DECFF3242E5EB6DC9620B51300BBFAADD3FA97BF48B50A87DCD2358AD50DE461F90A8D7BE
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 21.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 299.6 263.2" style="enable-background:new 0 0 299.6 263.2;" xml:space="preserve">.<style type="text/css">...st0{fill:#F37C20;}.</style>.<path class="st0" d="M171.2,139.8c0-49.1-17.4-71.4-26.6-79.8c-1.8-1.6-4.6-0.2-4.5,2.3c1.8,27.7-33,34.5-33,78h0c0,0.1,0,0.2,0,0.3..c0,26.5,20,48,44.7,48c24.7,0,44.7-21.5,44.7-48c0-0.1,0-0.2,0-0.3h0c0-12.3-4.6-24-9.3-32.8c-0.9-1.7-3.6-1.1-3.3,0.5..C192.3,145.4,171.2,168.6,171.2,139.8z"/>.<g>..<path class="st0" d="M118.5,243.2c-1.1,0-2.2-0.4-3-1.3L1.2,127.8c-1.7-1.7-1.7-4.4,0-6L121.8,1.3c0.8-0.8,1.9-1.3,3-1.3h34.6...c2.1,0,3.4,1.4,3.9,2.6c0.5,1.3,0.6,3.2-0.9,4.7L49,120.7c-2.3,2.3-2.3,6,0,8.3l89.6,89.6c1.7,1.7,1.7,4.4,0,6l-17.1,17.3...C120.7,242.7,119.6,243.2,118.5,243.2z"/>.</g>.<g>..<

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3381)
Category:	downloaded
Size (bytes):	212259
Entropy (8bit):	5.404759879772437
Encrypted:	false
SSDEEP:	3072:Nlmjtmld/nZFcK4qqPrQrSrH8iTVAYQ83bDK3pSsd5Q0qy:NIjtmDxFJAWAH8kiv8/K3pSsd5Lqy
MD5:	B512FEE0E4DCCF7FA085558FB0E9F823
SHA1:	B270CB175C6DF595668ED1C9232C9E4E1155668D
SHA-256:	6AFEE967915E87F217A98C38C9D5ED411A339EAC603C3F25364FEA36CFF27B9A
SHA-512:	D47E6954CA5BC384AE6A1C124D1EA2EBDF0F56AB088286A539328574192BE15CD86E62D40AC5A17A163BAE74A487C08D1722921CC58B0D66E9C44A1CC9D80BF3
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),q=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.q("Symbol",function(a){if(a)return a;var b=function(f,g){this.Ng=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Ng};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?cc=1&id=540245193&val=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 245x183, components 3
Category:	dropped
Size (bytes):	12845
Entropy (8bit):	7.96043302063584
Encrypted:	false
SSDEEP:	384:sfEDIYegZJSjOfs2QICYYr7cNMyOrOcCKlZoknqoQFyLg3:EgvpE2QtYYr7cMNl0Dr
MD5:	C1B5A7C7264004C66D68623BD7E0F684
SHA1:	55C4AFF7CE433A8303E267869A72147AD37B6878
SHA-256:	97A8BBB9BDC1800FED5B2B668A44EEA3F4194D875422F53AAB5CA8AEFB12B3FF
SHA-512:	9E5D0C5A417ED806A0568097AC9EF37BA8453AFC790A932D5229D3B5331BD74F049839CB0933686D7D29EFFA348546DA2E72F85040D456801080D27B4538B2B4
Malicious:	false
Reputation:	low
Preview:	......JFIF............................................................!........."$".$................................................................................"..........2...............................................................<.......h~.....}...)62f............m...oy0~.\|0f....s.....s{.7A.....r..o..K.>.o.._G....8.7...E-3.p....2Fu...J.....7.d.../..Z..^.%.^..x..........b[.......?8..37.T..sIW..;.\..^V....S.......H-.4u..WWo,../X..G?.:N..<.R..kJ{5...x.D.I.O..5M=.=dx..<.1\.h.B..n=.nT$.R.f ......an..f..O=Z..&u...T+.U...(?...R..$7....m.sL.<.mU.n.....lx.....Kr..m...f.zO=<...<...../j.:_.jt.s$..TC...C.iQ.KV.5i..,.Wq.c.....(.....#...F.=..aG.P/+Ys..g.^.u.c.M+B..&..........r,.<\..q.4..m.rs.......qV.Z.*.z.3..3C...B......fE.&.sWm.)u..u40....9..c4vZ.=.i.h&...4B..7q-.i..;..t....5$...../..\|Z.....=r....D.........0.{.~.,Q...\|..I..A.?4{/v.B..e6.l4.l4..CG.n.{v.......B.....j...........P....................9.............................1S.!4."%QRc #$3A025.B

Chrome Cache Entry: 596

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	7354
Entropy (8bit):	7.888532108796023
Encrypted:	false
SSDEEP:	192:G2dAaNm6ruC2pSJct6Z/jqBvEmpKMn3XMFzGD82nyV:G2dAaQlvt6Z/jqCmwMnM682nyV
MD5:	D3E4702C9E710740097D8B24B6C50F65
SHA1:	20E350A5FC821595AAE4612015E78719122BBD7B
SHA-256:	94E7E05D2EDB0845448DA8D31BB33F6053D4A5BEE0B22BFBBAD1BD9DB048C4BD
SHA-512:	DF7B738E6492A3E2995C5FD313BE4D2F054DF93A39B71BDEEDBD88DCF30F60E8802F45D0D5B6A209C9DB9D09A687D630744F50A0FE6F1838772EE7D75BB5FF93
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/app/nel_img/16351
Preview:	RIFF....WEBPVP8L..../w...M0n.6..>...Nr7BD.'@i...A.Ht!....%dj..Qv....x.l..%0.De.4.mWY... Q._.% ..gP.\|...7.m...C.L'.._."U...<......#..?:c...!.....Q..h.Xi._..@....>....k.h......=.7.9kf.(...c.F......Gf.. ..#W..2..x....2.JN.I2H...^&...22B..~.@..@$.D..~..b..e............+].K...?....+.... .+.`..w.. Lf..p.0..m..?..t..1.}..vtBSe.........x..(.U0a..8.......x..h.e........uw...............+..".R...oAR.:w...e....~?}....v...JGcH..0.{..I0L.:3;.._...9...Z....}....3..4..Xc&.z.=....-(.IgffH. .o....@..4..}........i'...g.....m.?.[R. "&.<y.....i........>.M....zQ{.^.-...@.2......T.L...p..9R......niS'... ( .M=....?..M.l..x...%=..D..G~e..?..]..7.....N.\.-.HA.Mu..i.7d..M...}....nR.].'...}..%nNR.......;..5.ML.F).E..~...m.t.7k....GM.\\..h...7>.{...6.:.....@.....-.>.W;.....3o.Jk...~{.[...............Us..s.^j..z.Y....... ...JO.r....+...;...T....N.....r.v.l....].....Z.t.e..n.n...v.<+m......J?U... ......#2..CN....e.....o.Q."..mO.....3vM..L..I7.z*..z..#.."..Y......... .2q.

Chrome Cache Entry: 597

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 322 x 81, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5930
Entropy (8bit):	7.91934715489586
Encrypted:	false
SSDEEP:	96:5llcHitlIxv9vk7C1+I4wWHLihk/xZSc2fmSzc1B5JsuJG3UudVkYIo/i2CJVTve:aIIHUCD4wa3Sc2fZzc1B5J9ujWo/i9bS
MD5:	2B8247DA3377A209E0EEDBD5F91C4935
SHA1:	30AE8541F31527ABF017912F402FE84B227E3E6C
SHA-256:	6277E6ADD56A41350D809100D9D1F56AA0C9CF57D24154849572E1BED959965F
SHA-512:	0C7A0A1CA924FF8B0711603C3691BD852D92320A1AD20D3219926063CF5406821471911AE15B929AD5BB776E3A128105164A543BFF718CE8F7BA36D0DD1CB28E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...B...Q.............gAMA......a....IiCCPsRGB IEC61966-2.1..H..SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O.

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 30, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2502
Entropy (8bit):	7.885521295962446
Encrypted:	false
SSDEEP:	48:kfcMDcv54meKZVcvTOodUWfYKESWX7OI40t+34oXROODmtnt31tN+kniLDX9:kRwRPVsqCUctWX6IHg3jEODmtntl+Fh
MD5:	FF862C0E7A4755ADF3682DA543BCE1E4
SHA1:	9DB9B9C9BB176AEE7F639F5F4A4CD702105358B6
SHA-256:	36133CA07927C88A7CC578FDDBAED3C668AB75087834D0CA13DCA5DE4EC856C1
SHA-512:	F7BD41F50C64D5DFC88989D0DDEE4C2CE816A08DC7410E5176C9386052791C04991022D406ED15BD0B6CA8C1E1ED83CD2E3B37C0F601DE26646F0FC49FCA0E6F
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/images/adchoices/en.png
Preview:	.PNG........IHDR................W....IDATh..go.I....&s..g....I.8...6Yd0".(..#.."..d.t&.x.q6.8.7...'...u......wX.!.C........O.>.e....I....2.,.,....A.....,tV....m...6..SR....'.JKKi..l..<0=.={x........::}.4M.0....C.;w.......)==]y..Ky..?6..\.z..r..w...r'C5.:....a..z.....k.}....6y.d...1..x...5.........H...EDD....p.i..}...\|....Y.....<..{.;.V.9..t...\.hm..Z.y..]........C.u..#F......,x..-[.5x.....5..I.N.....&Xx...6....;......z..?.....n..N.u}...>}..7..\|:~.8..q...U[[K.z..v..@.^.t...k.*++..X..........\...L;..t.........%%%Qyy9{..]...n7......u.X....,x#.....m...F}...[.n).....G..U.x\\|.(l..r..IZ.f..'._UU._?h..g.RZZ..5<..3.z.jZ.v-.C.D...799..........TQQ...r.....u.VZ.b..:t..4...!.A......5..k.5;X....:p.......y..E.=...,v.Vj....=z4..;...1c.p..;.}....Pc.......i...Ba..;v.....}.v.4...yn.c`....C.xO.......4./l.....5..f.a.]n.]....=...8(.....X..Bs...a..z+P...........>.\..".mX(3.(/...W.......S.......<..jYY...U+.1;;...._..F...D.~....y.fo.QSS.}.......

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum.casalemedia.com/crum?cm_dsp_id=176&external_user_id=di_5eeffdf13c334a9c86516
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (34856), with no line terminators
Category:	downloaded
Size (bytes):	34860
Entropy (8bit):	6.1255473405820124
Encrypted:	false
SSDEEP:	768:PN3BofrbP+xx8HRgqcbUhjoor0bPuonedDi6ukSoUsIo2Ur0/0DANgLvRXsu3B7c:V3inP+x+xgHohkor0b2onedDi6ukSons
MD5:	060E5D8F16D29118BFE0784FCAC7F588
SHA1:	88DA7D537A54E5AA832B1C391AADDAB846A6F267
SHA-256:	CC47D084A3ACEEA6443F8D18A9EDA7EAB97E866468B63384C01CD0D9ACC65340
SHA-512:	995E3CA43976F189C8EE1D90DD40A34699B9D1F9826C4C92AFC20B8A52912F9749500364B74997943C59066942E1A7D57158DFBA4E174233B6698CB1021C8623
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-AD6Jo0HzhMu1X7BaFWGwfmmuA9iHBSiGG-c4n64ngPHw4q2BtjRsGQ_zovC-KjAzzKkSFhC_Tj2Xx6aku5H7vW0yh1Gu6nK5ohKpRpILWi1QOXptVB3dbKxWbSGpAnawEB16I-oBgAKFVz45f8d_iEEoGVjSs_qcZvKd_mPTzRojmRR6-UensKFH3_TlsNVmQ2_YfFnnOi9fhrpkG_aHuVvniJug&cry=1&dbm_d=AKAmf-CHK7qOhF9cGNuZSQeaIezpRwwmlH_SdlRPz75hZv7urGWH5XjPlHR0XeJCqWfeJ4Yjocl-awkO4pt3JDdEXJfTpFncjtpJWbiLDX6KaSHJ-E2GPQC4cqbVIGVyB79AAdO9myNknqozSIGGDoQnXB3dI0jW4GI0YnCYXN3K3a2xOZOywyvnmJg-RP81wUoQZSeu1uypHgXqXNn_8YhidGKle4tkypsfke7jhw7fAthovjJXRd-iFMXKjFblTACWPZLxvA4GeauuMtYbtQQ8xqmzasDdPy5AxwbV37oRoxrtoNo1htR2IFd5ZQ_-Lj-Fi8P3O_4QgYlEytfUUWycg3dBbpn-OcCCs_IAobQrsNSnBlWRX18IBqSeja3mWhyPwGOmOpblYbBldRDf--KpVWwFbf_h62jMGUl0Ui6qaofrRcLucoFApuPnBlYnbaBvtdM2gAG1pTfu70xmvMjcCIfemzm-q4WqpGeIKqr6IWoaZGefJPJRkIceIfe-bMTlMBuyYl0VFyupglGV357c0FKpkph6-UiGzYSYvi7wOmNihaXrTBxGzY9UA6x3uQFFfEdb3UrxtSLollUu4TjdFAgsQV1ViJaQUjYwsfcVBOyL1M901Xr2nZBMvgB6QV3oP-9yR1bqOLhbCqmLY2xobBIXFvBnam86VpA30CD-7tBx03S-oJHbqtgHDLI0EXcYzNj5bdpxPLG09kgB2esE0H9CDmlw6mZTaCn-vGpcLZtVnPauK7EPz77Qd-osShdyo9vNjoksjHqI5dQ9EFMvhkdh2am-rNo8oqtQl-Ebw_HgRlGLA_jZoHF1xdjjzGvk8XUSZkcz9uAMMZdPDz3W5YjxoNy2q1EVNIZfD3y_mEZ-_1FnZn3rzy-pEj2ZCEY044ALTiOaF416Ib0EYVatW3RQMcH0YuwQ8zom2UJdu3lTYy1qrbXYDe5n8USMhVbt4kAw9uHuZ47sq3nViZ4w66u2D_zZBFHe2pOBqvAY02OYkhL6UP6qyozcZvzIq32Gr2aoGLF3Ig7-UoprbjT4s9g_K9BmeUuRBnWxdRbGcTvXJA6wXwP9uM5BeY2gYDhyAn9Ue4nakJXm6FrENvM3k7CLwmgjtdsTwf36w8hoPp2iXe8Bg5pK6dFNslnpqvhH4QtnbkDOcIrHpjockE3C0orTHAfKBiy5WEVBjwZXFN27ctgBfBlj_wzW9ldwxm2msv7AHnRWSqvGqxr3cKJOanjjTY1YilzsUeIQQHkRdD5rxVd5MsRzTOd0nAqMhiZwp8GxVxmyG56EfpNL6C4c8yFYag_oKtxBm3pDMFhoewnlO9M_NmCga-7s78sttG3t3L93rb9TQQTy0Ntzil1EfxJWXvcAbgtHrLHJEKhgd0VSDMAIgnAxoWW2j9DvStWkyk4co1eIeVexmbwduchtvRzGoUQmSwQKvgXTXUiah3RhkplOiQAhKK1YM22ss9oIPnzegon-or2RZx_5_VAQGGoStiEpqi01Focl3VCINg7FZoixkF-FWMZUHqpth61FNzYfgyOdRZyr7oO-Fr4vOATXYgOYEjRnnzavprSIJl_pxBFqHBhA3Qe34hyQvWRKDTNRUo0X3gBgVWrhjKNTjNWGhzYM5Bd3KothczcBKgDc54ITgtIkq88cQntUnWgzntYNsfJJ5UvnIZE6QbqLM8l5lTuMhWJJfW0jorZB1P5eD2txGyCybVFSPtc1lfYvK6IYK0oBEZNlo0vnj84cvRVO-BqtSNbVMDL3nRYr7PV9XWaOmsq_LnL4PTByd482cre7vieUkKxd_zqKwz6Ef01ctAns-U_EmQ06okboziFMH-UK7cU18pK7dtcfUdJjQFcyT0_HzT7URlFFR7SWCWs1n-0ka7BvP7dmdljcoLM5KmJ8wv0iYDMqOv26ghHFih4n3DYhN03bNVCo7CR0MVkODP7JgP7KtlcP90EN8iFt6SG0RiXw7rJp8XAzaKdAEtlt6acJbDgUflcdanDhCa4SXq40dykNPcX8ZQcFYFytF44tlqJI8E0jBBKrPo_pPRem0YzgOAb-5vt3MrADgdpoxyqlzREEQPbjsIuv7GgySoljl3c_5A2gdkzR2ToZBENPUklTvHA2V4HffRu3ZPfFwoqtokgi5JSDEV3x9f6OEeb9pB8sx2AV5rnRL8XzWb_F_OyZuruOuTO-xymq86_6lJNSc-LmFxrX22uJPqCkUdNdDyJIWmIFBQxUVtmvrXz-qxYTcwqM6Zzho9xbsnVX9L95JAVcGy3Fqb9AF0VyOvFUex9S0kOoT0C_YLKpPtj3LO18FmI2qPR2wcxC6GHefMhmyyIsDxm5PbDoZ8siYwGjBv3bn5P_vjPomjLdlNs1fs9kpmxSs6Myh42TwvR-27Foc3j6hSqNeZzBF23wALLFBPbn623WhGIJQq2SzQ2Pm48uICfamhivFCnnJUDvO034kyCqi3Y7EtsKQt-sMBZQlub54VxdtTF_kAwSUlOKhwb98g9cfIW-YCj57B4vLz2rwXjAd8xpwtAv31nsX17_Ci0bVbd_l-gRh4ezw6VhfqFaomOa9BDVR3w1t2ELcT4fPtobvw43h2QQkf8ZN1IOL2NkixyZlgzFjoDZDwcin1Reh9aCzWk2-8q_ZJFyocfRu97_PX3Oebqh70d6T2UO7BJ4lwEd5ft2vSdabARB0m6NmuBvklh2xDfbYR9LS67K_ShNnfpzhL9itVz6Wt2gseMbNX_G-3KEgYW1OgtHTpjs-rUSgnV29PXWAjzV32vWvv8YxjGDMlWtzbW-_UZQ6PJVJwvX_JsHjxOsWiuf_188AkcoxMmizgAssExHpviECsvtnJwyp_craMBx0I_IW-tpRPxmWEO-M2ia98cVE2F-WoWKVG0dQbVTYTJ_-PnpcEAlXEcrl26B7Y8b8RlVsNVxQoCoWDbWysKFLuvLrmkK6rCvwC5khzEicuCZh-xPoSsYkAD0QRAodnDJ2BM3yvhlIEVu2J5HmnMgJNtvvaQS0WrSidYwUPv8cogtqLeK7yHTHwQyVFEZbpEvAKbfpawH4gt3GirQvZQLvRKnird913z7u9ja0F2xjK0ob4O_xjl-FAdP5CwgzrQVO4fBw3zqmkPn_AP8ODFVkc6oZ-_uHKVCtfJK9WWZxLAIHTLvFWHT4bkLPBeyfp_bBezPP4Ko3zPu8FtjYB2q6AwyLT7fWRMp0oSiei9r__DBya4-7Rp0ug-m0gB8I2k69szYJYwU-ywNvjDBXd-zUry2KqJz-IyN5W9gk8sNQjdAIG6W-MSg0rgsOd-TAeLk8ADXai0StgGOGRzzm8WtKdkde0e_xfHq6wJk5XqgWyI1A-_OyLoI4weWK3rtu5xDYpgy3V4HJ13TjJP5as048r-AMuA4D_TV_QUsWrqlhulSo-78Qxu-qg2nin7En5LXE4Vok20InXuvgsvA4Fdk2_XSMcU8XLcCoAn8yF5NaLjej7zZN_hCPgqq2xa9daq3e6GzF1wpv189qTge1kalhDeTaRC-89EB9YF74ebZP-6y3RMFdhsu9dKtiy5WZZPbfbDKNZs2FiOTw0aH2SQRD0HR7_rZ7FZiimfsKqsQM5tuduQwJpZ7_sdrC_bNEOnzcPCrxJWd1WMPYPTyvKa3WXp0xVqz4xwq6GiGQLliQJajn-KKNMcH6FhQGYWkmPqkkcprzJdQqSx3Zdba-p6YBTJzPfPKTVOMnRY_jJoFTqgX7o61BbBeYVgIuwcfyXhpP3IHBqon9xZORLga_sRZxXQ75UBbRMVQHQ9SFpA7ej1BvEPcup0oahNwsMDhidd81tkCBAuuLBtxajMt7cyacrzXLpuY_DpTigBRq1WjkDp7zCWBrN1DbEAv_PRDfyF4SyP5qBxQuwfQqsqYmPaC05DS4X0uXtcr2GNv7Ke1AAHlX_4K_g&cid=CAQSPAB7FLtq5LxsBGvZWfh1Tl8IzwfVNO-aQwqnnAPLWYqT-JXWSS3jHCvOvCEuCHssK8u09e8huT6ed6Z7iBgB&dv3_ver=m202402290101&nel=1&rfl=https%3A%2F%2Fsourceforge.net%2F&ds=l&xdt=1&iif=1&cor=15792798227289076000&adk=3047537734&idt=1275&cac=0&dtd=30
Preview:	if (!window.mraid) {document.write('\x3cdiv id="ad_unit"\x3e');}document.write('\x3cstyle\x3ediv{margin:0;padding:0;}.abgcp{height:15px;padding-right:1px;padding-top:1px;padding-left:9px;padding-bottom:13px;right:0px;top:0px;position:absolute;width:31px;z-index:2147483646;}.abgc{display:block;height:15px;position:absolute;right:1px;top:1px;text-rendering:geometricPrecision;z-index:2147483646;}.abgb{display:inline-block;height:15px;}.abgc,.abgcp,.jar .abgc,.jar .abgcp,.jar .cbb{opacity:1;}.abgc{cursor:pointer;}.cbb{cursor:pointer;height:15px;width:15px;z-index:2147483646;background-color:#ffffff;opacity:0;}.cbb svg{position:absolute;top:0;right:0;height:15px;width:15px;stroke:#00aecd;fill:#00aecd;stroke-width:1.25;}.abgb{position:absolute;right:16px;top:0px;}.cbb{position:absolute;right:0px;top:0px;}.abgs{display:none;height:100%;}.abgl{text-decoration:none;}.abgs svg,.abgb svg{display:inline-block;height:15px;width:auto;vertical-align:top;}.abgc .il-wrap{background-color:#ffffff;height

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	63219
Entropy (8bit):	5.946261441485808
Encrypted:	false
SSDEEP:	768:Pu8dQ+9Kh+Clpxixm7yhemwuaSyqCH8CxthFPR2kTtWhrJT/TruEKgc0w089A97v:P597m52N7ruEY4uVWC5xsGjKWSwY
MD5:	E80D5070B255002E6E7F867EAEE34CEA
SHA1:	F5ACA178DCB0723851AAB25C6C96BD524ED435AA
SHA-256:	6D4E57972C8E76FF6CF5AB42958C4182DAF028313F103D5C05DAA0EE9D40E183
SHA-512:	5B08DF9018377630615089E5150774FE1B535EA1658B15119A3B28ECD82D2B26E6453369A2B04253C59E0A97825DA76D5524E99E6A65D680EFCB3E8D0CD4E307
Malicious:	false
Reputation:	low
Preview:	{"/41014381/Sourceforge/SF_TYP_300x250_B":["html",0,null,null,0,250,300,0,0,null,null,1,1,null,[138465645576],[6306859174],[1329521181],[710037621],null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGsmMUGBZGlguA5CK22lKpoGcvJX5NgX-a2A0uMaKIIq2MTY5JB_AZ1sbFWxDDQv3vjEqyxYLJa27ia40yna9DTs","COPLyO2T7IQDFZmsOgUdle8MEw",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"2",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html><head><script>var jscVersion = 'r20240306';</script><script>var google_casm=[];</script><style>a { color: #000000 }</style><script>function su(id) {var a = document.getElementById(id);var b = (new Date()).getTime();if (a && a.myt && b) {var t = b - a.myt;if (window.css) {css(id,'clkt',t);return;}var bi = a.href.indexOf("&clkt=");if (bi > 0) {var c = a.href.substring(0, bi+6); var d = a.href.substring(bi+6, a.href.length);var ei = d.indexOf("&");var r = '';if (ei >=

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1710), with no line terminators
Category:	downloaded
Size (bytes):	1710
Entropy (8bit):	5.234680378422962
Encrypted:	false
SSDEEP:	24:kRYDSYNXZZvreqSY52iZ/5eqSYmSYAb1NSYHObSYN/RnSYKfwSYgI5NSYt:kUNXTzJ5hN5Jcq9uRfVemgyTt
MD5:	05F3418D228086B2344B356940983526
SHA1:	9BF499743BA09A6957C86FF90A3807937B40AC8B
SHA-256:	62AF519D4ABDEB3465382D6B8800A30DC8AD01E47D68AA6E021F67A9266ADBE0
SHA-512:	692B02EB786D85947255383E11A228DA7DBB562F14AD6842C391C656FFE418B80B6672E572B6620CB0458B5823FB31A4866E7232F8291359FBC6C2494A78B732
Malicious:	false
Reputation:	low
URL:	https://ssum-sec.casalemedia.com/usermatch?s=179394&cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D33%26partneruserid%3D&gdpr=0&gdpr_consent=
Preview:	<html><head><title></title></head><body><img src="https://cms.quantserve.com/pixel/p-Z8PuJEk6U7Hyq.gif?idmatch=0" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://ads.stickyadstv.com/user-registering?dataProviderId=1025&userId=Ze7xfMAoIeEAAAzaAIdO4AAAEGAAAAAB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://ups.analytics.yahoo.com/ups/55940/sync?_origin=1&redir2=true&uid=Ze7xfMAoIeEAAAzaAIdO4AAAEGAAAAAB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://s.company-target.com/s/ix?cm_dsp_id=18&us_privacy=&gdpr=&gdpr_consent=&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://pixel-sync.sitescout.com/dmp/pixelSync?nid=48" style="display:none" width="0" height="0" alt="" border="0" /><img src="

Chrome Cache Entry: 603

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15920, version 1.0
Category:	downloaded
Size (bytes):	15920
Entropy (8bit):	7.987786667472439
Encrypted:	false
SSDEEP:	384:sShqOXQlaSchOwK0uFvRqq3xR/xb5OY3aU/lHS9WE2YeK1os:sShJKaScJK0uFvRvxb5OY3aU/lHkmK
MD5:	3A44E06EB954B96AA043227F3534189D
SHA1:	23CEF6993DDB2B2979E8E7647FC3763694E2BA7D
SHA-256:	B019538234514166EC7665359D097403358F8A4C991901983922FB4D56989F1E
SHA-512:	FAB970B250DD88064730BD2603C530F3503ABB0AF4E4095786877F9660A159BF4AD98C5ABEA2E95EB39AE8C13417736B5772FCB9F87941FF5E0F383CB172997F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......>0.......T..=..........................d.....^.`.. .\..<.................6.$.... .... ..S.!.%c.......\|y...6..;.s#.....x_<..o..........l...J.`p.m..6...h....U.pD...R.J.$...W..`7w...[..qD....<P......J.x.+J-^....va...:.KW..Ph...."....{.W4C....p..1..........CH.....P.............Q%.=.F.....1.%J....d..X..J.<AU..b.N...<l...d...f..^Y..]..&...VQ.<.....F..{.....&{.+J;.... .2P.:.5..?.o.\|....V[t..M..#..d.fv...........4..`.).h..h......@u........4......~.....r.B...p1.P.T..<....r....Y..8...GQ1.t.....%..-Wh..:W.....1l-...@..hL}...lN.._.j...D`..sn.=(...W..?.Z..p.52..H...X...)..CJ...V..7.....<\|..i...{...R.M+[..\|..x-..M3...~!\.l6}.T.o.R'$.)..-.W.T....A...5?.{.2.bR.../....*l..;...{..I>.n..MJ.2........U&. ..(L]].%P.$..p59.LD.f.........V.....z.5~.2\......#.4....9_....%wp.OU.0.....CK..../.x. ..A2e...@...(.i..f./.....`1.......!......@....0 vbt.e v./!...N=>:..A...(...f....?.....iH.F..!k.6.O6S..54.^c..2.G.?6....)b......lv.,h....Y.}.?..uk....L.4d.g..6.\.1u..

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 605

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://wt.rqtrk.eu/?pid=58a76248-f101-4e52-b8f7-c4de9362ea12&src=www&type=100&sid=0&uid=1899505890594565248&gdpr_pd=0&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 607

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
URL:	https://match.sharethrough.com/sync/v1?source_id=kzFyzzqXEqukMDumpVLB6Eq3&source_user_id=212349963528473
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 608

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://fa43ad241d35ec2179c810415c543e64.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 609

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16182
Entropy (8bit):	6.016559819497517
Encrypted:	false
SSDEEP:	384:R+nBI37PpxatcGeXm/CKGNvLVfHnF+Ntet0wAhyR:cnYiROY0NJfHnF+vetr
MD5:	A1EE8CFBEDF349F2393A455A62BA919D
SHA1:	17EF88A70168937229B9CA0B36C9D27FBE1A90B0
SHA-256:	37C35A8F836B77CFC68674E09D21044A6C7D2869681A1B02F52D74F7EAC704A4
SHA-512:	A4EAAF4BBD7E98D7D9CAC5D898A15B310404CF37B89E65711FF57EE99BDD8534E06D1656E35D91651DD05729D08D8B57676A3C924F97B77523BE3A1D0E2B2DC7
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=m202403050101&st=env
Preview:	{"sodar_query_id":"tvHuZfHhDJyrodAPjdyx8A8","injector_basename":"sodar2","bg_hash_basename":"O8T1Km08OhS5_Tz58jKeajrFynp-IyfJlJwKv1268Sc","bg_binary":"bCtHi8kdnrYgHjCRYW/lKOeCoIr2JLiVIS6SwOVrfc1abX8cMmKtlnDrMoTnj/2BbbYBCzrDJCxLsa4lDsN+MEXexrdPu1UxhwJ9mZ7T4vDIf/eFdb42zPmMEJDO5u023kJg+CJ35sZliQ6Tf6JQBV86mcZkWGi5WLoRRCKRAzeKoe1oUkUGSNI6vZXl3MuQUvJVp6Utv8aWw7XXg/gUsvtmZ7vQZE0xHAFQvUP9eKjQ7q6AE/dcYuekiRFuVY86dXQf91HWzdxet06yzUkeIKc75UDb82ytlelUWh+M+v++AK8b02bj4952RLNucOA/8I3zW6c66EySVfhjKzcs5ekdp0pildPLxwKHiG9HM7RkzwExDt/U/SYZyyeV6A25rTZEN3s8ApOHoSjEsvKxdptw2P1zVN6x7VHpuHw+0ylzzo2VSCauKAZTQPOSjfyoOM5iA8r9BBryLwcYTpnWNC1P8a6A08bEKsTorfJxV1qEAg6NKrnhkMore8GuC5jC27x5YWsSQenb3KBLomSj4/SK2p1+VACoiu6R1I0vS1KuFL2sPNAx1wxbQ959luBnML2KFGp3Oi2EFHn/V64opkuIW8okPzZpsJ4QmywjAW39b2vAcfuoO5JXc6jbQpNs9ZtNIwxkpHCsxTslt9TZuB/bWKWeWaYP52DkHexS93vm7hs+Ql9cyQcuXFQ4zZK22/B00ePIAk1cbiE+Mzf0R5YlXMZIf1VFdOv6oaNfawWlyROU24xGxNxYldVp4POBP+RUojQbsLmV1IZMfccq/1qyL1na9suIEprChW+I1J1AAJufwglaSPKoiL2VbI3xrQl7Q73XBipgBORME

Chrome Cache Entry: 610

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=pf8b3zh4kyw&google_push=AXcoOmTft9RzgwcXGqYQKF5bYx_6K5MNK0ONLnfYMVYUYD4N0ZTrutDDWlu3c1pBlebGzSuRtfApf4MChFeLYF1PYVHCDq87e-_aqeLMSCH9SHVX8vIO7W0YWfstVHhW68VO7P11HGxs3Xa26kw3O-9erjV7&google_hm=UjRFMzMwXzExMjM1QjUxRl9FMDc5Mzgx
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 611

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://ad-delivery.net/px.gif?ch=1&e=0.8406123646586141
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 612

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537148856&val=Ze7xgAAAAwa1TAAh
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 613

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 614

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 615

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4216
Entropy (8bit):	5.65912452648511
Encrypted:	false
SSDEEP:	96:8OwTjD4MSw9Ccr/CQZ81tcpZRFWJbb4qpRVmnEA:8OwTH4MSw9L/ze1tcpYJbb/rmnEA
MD5:	DA09F652813942217A9E3D4F95EDDDB7
SHA1:	2044586D0B72921DD93D7EA73A2C3ECFB2CDA6E0
SHA-256:	43384E0AB44F21AF4AAFC350FD1C9C2CD67A14108D0C747D2EF3E9FE43FC1334
SHA-512:	66FFDF30FF200F156F7C2EAA8B1655C04C66E1A57AA8717945F7FA9F9408B5C25922FCADD242CD06AEB93072F75D9A6584E6A622B629DC229CA4988816D6A753
Malicious:	false
Reputation:	low
Preview:	{"id":37220607,"timeStamp":"2024-02-13T20:31:15+0000","altImageUrl":"https://servedby.flashtalking.com/click/8/225291;8065398;4362981;210;[FT_CONFID]/?g=[FT_GUID]&random=181239.11554942574&ft_width=300&ft_height=250&url=https://www.adobe.com/acrobat/free-trial-download.html?sdid=XFWLHCQF&mv=display&mv2=display","encodeClickCount":0,"loadMethod":"quickload","baggyFrameLimit":15,"zIndex":77000,"pushdownIncrement":0,"isAttachToBody":false,"isCenterAd":false,"isPoliteLoad":false,"isForceBackup":false,"isIframeBusting":false,"creative":{"id":4362981,"name":"FY23Q3_DC_AcrobatDC_AcrobatDC_us_en_Daddy-DIY-eSignatures-ACQ_ST_300x250.jpg","width":300,"height":250,"expandedWidth":0,"expandedHeight":0,"adType":"altimage","isInstantAd":false,"apiVersion":null,"htmlFile":null,"creativeLibrary":{"id":116264},"blockBrowsers":null,"baseAsset":{"host":"https://cdn.flashtalking.com","path":"/116264/4362981/","file":"FY23Q3_DC_AcrobatDC_AcrobatDC_us_en_Daddy-DIY-eSignatures-ACQ_ST_300x250.jpg"}},"placemen

Chrome Cache Entry: 616

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 500, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1671
Entropy (8bit):	7.474439674899562
Encrypted:	false
SSDEEP:	24:LbRfV9dGMfcoKfLrtLomlQ9flIX+1LIiKPCUsvRkz6KU6+mxstyCWdT4T1:ZfVXGloKHtLomYfaKU/svR+1CmmyFsR
MD5:	D5044847BA35B96ADC123BC48C02FA86
SHA1:	1B7A4EFAD478CA417A811DA192D23233DAA5F523
SHA-256:	C71ABCE283EF9489314FF5ADD2D34535A5D6798C4AE32DBA8CB8EC47F2C251DD
SHA-512:	9348F8666E67E5B2174B35453D5AEEA4C8AC30B61B860990FC02E6F91371EBB859B864679A4374E729B77E4E0493A298669D96C8DC4B696985E6C41EEA9E801D
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/images/f2_logo_300x250.png?1708393659275
Preview:	.PNG........IHDR...X..........~N.....PLTEGpL.........................tRNS.%V.....a....IDATx..KW.H.F...v ....5O.....DZ.....'LU?e......$R..RN....V;.................N...qf.'wu.c.....(.Y......Uv.[.....1A.{.x.`.s..v..&....f+Q...=.\|/.M..).im.T..`.2..B.{.][o\..{.L.sW7K.....\.St.uJd.{(C.N\..8l...&..I.[.....N=...`j.......vW.".f...../.gj].6...;\.....K$.<b-....)..".Q..~...'..=Da..../...b...F...I>\..#%Q.n.{...]]..>.Xe.....q.. .or.....JE.<b.k.\|..2gN.........<o.y..S..:.g.1..~..OO.^,w....z..s..Nz8k!M..].N....b5..kT....\|........^W.9.......7.D.z&W.8f...xm.XP.aP..&..$Vn4...\.XK...}.m:..r.._.X.../M.^.0.$.e(P..+...E.^.}&..Y.M..=....:MBMU.T_.......0.3+V\'.&.5Ob-.XS.{..5f....z...s29..,.2..x...K.k)b-.......b5...R... ......B0.v...?.a..ki%...X..]Z.BC....~.O.=.kd.)..W..........jn.....uS..UEJ..!sM{.Z....v.T..4}.\|{%R...........M.w6.\.0u]J....r......W...p..).C?..qw...WV.wg........r...U..Dd.(.2..g...b....~).^9.U..SyM%j...5.b.C..m.X6..gM.0.{...7...Q.-..,.7.5)g

Chrome Cache Entry: 617

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	60251
Entropy (8bit):	5.960756711542785
Encrypted:	false
SSDEEP:	768:4WpkXYFyBN83ZBThP5WgP5UP5VP5TP5ZyyP5hP5W74MODvU2:40kkrr+n1Zn04jv5
MD5:	93042C43685B17FC56A764D5DDC320A2
SHA1:	828E19147D154FC58C61CB69440158035437B959
SHA-256:	6306D6B67AA04DB5312E3F8B605BF3D78DD68B11A1508DE7A2DCE32BF5BE08AA
SHA-512:	E804D3B3C90600464A4DF6121799866FA65ED174864EB5C07DBB966BB107DC7CDEF93595BB0DAF0FF58CD76AA4213D6C0BC818B9AD334BD4F110A22D8752867B
Malicious:	false
Reputation:	low
Preview:	{"/41014381/Sourceforge/SF_Temp5_728x90_A":["html",0,null,null,0,250,970,0,1,null,null,null,1,[["ID=987e90a5bddf0804:T=1710158207:RT=1710158207:S=ALNI_MYMUzAlTZ29DwWNB_t03YDwAyB5zA",1743854207,"/","sourceforge.net",1],["UID=00000dc71196f241:T=1710158207:RT=1710158207:S=ALNI_MYFupJQjXHyC-bfldxW2MUaH2llyA",1743854207,"/","sourceforge.net",2]],[138416297042],[6180654644],[2036965341],[1511469861],[151821],null,null,null,null,null,null,0,null,null,null,null,null,null,null,"CO_zyOOT7IQDFS2sOgUdbowFLw",null,null,null,null,null,null,null,null,["012402262017000"],null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,[["ID=d12770245c808307:T=1710158207:RT=1710158207:S=AA-AfjZoIN4dzKOBbJWsZhEaa-q2",1725710207,"/","sourceforge.net"]],[]]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=

Chrome Cache Entry: 618

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?gdpr=0&google_nid=B765081F39B1F7&google_push=AXcoOmTa_gSi2JFhTeHRn12ihR9fb9XQNVE2Lw9h-mUYB_aANnW7qavoKpGGc6iXvbxCgv1huRCHq8HwXCqD3NLMWU3bF1Ct_vzBjHA3hvBnJChYq9-wT03HN12vOWMDqfKZboLQYRaZ2tsy7JdbqhBKAUiu&google_hm=i1PBKxUbhkVXS2_AdP3HUA
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 619

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=sovrn&google_push=AXcoOmTF44p9nh_0y-tI2KYaLEc-K5FYZkUEcUdYZ5hKxSLU5cqgTuxuPRUqvxDw1cynRSzSfboYqkAaD7bLeCga--FyHfzhbbzLFqJ-mDBgPH-Gv80DJXI1_1BhnTgT_-H0N89UbyaRoAKhLYLIsdVVkf8&google_hm=ITYsABZHyF-4XRyhT4uuZCmM
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 620

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	22033
Entropy (8bit):	4.14277387110403
Encrypted:	false
SSDEEP:	384:Oxs2xR6cUE3JUNG3Doc5kVphQdWJ1PMnf4PGSFCfCu:GVr8phIa1knf4PGSHu
MD5:	7C54A1F9588A932B97596893B2D6A9EE
SHA1:	09F47B629273FCF8848E55FB69A0DE61099CF31D
SHA-256:	35DD635DCCECD06E23AD30078011248A211964A0E245F5664FBC8B6EA6433E4C
SHA-512:	07286B4E60AF57A52E99C30301839C1ABCEE3A32BA0B18460225F09451A9D716F869016755D22D3C318892857F8BF2E99E8590A520D8400D02DC402DC49FFFE7
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/app/syndication/badge_img_direct/oss-open-source-excellence/oss-open-source-excellence/?variant_id=sf
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 1500 1500"><defs><style>.cls-1{fill:#161616;}.cls-2{fill:#ff6700;}.cls-3{fill:#303030;}.cls-4{fill:url(#linear-gradient);}.cls-5{fill:#fff;}</style><linearGradient id="linear-gradient" x1="117.03" y1="967.86" x2="1382.97" y2="967.86" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#414042"/><stop offset="1" stop-color="#231f20"/></linearGradient></defs><polygon class="cls-1" points="305.42 1193.77 13.18 1193.77 75.36 1052.92 13.18 900.34 305.42 900.34 305.42 1193.77"/><polygon class="cls-1" points="1194.58 912.07 1486.82 912.07 1424.64 1052.92 1486.82 1205.51 1194.58 1205.51 1194.58 912.07"/><polygon class="cls-2" points="1338.36 117.6 1338.36 1382.4 749.98 1140.8 161.68 1382.4 161.68 117.6 1338.36 117.6"/><path class="cls-3" d="M1287.92,157.32V1320.66l-517-185.33-20.9-7.49-20.9,7.49-517,185.33V157.32H1287.92m50.45-39.72H161.67V1382.39L750,1171.48

Chrome Cache Entry: 621

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (609), with CRLF line terminators
Category:	downloaded
Size (bytes):	2970
Entropy (8bit):	5.475065465773276
Encrypted:	false
SSDEEP:	48:O5ZC+TWx3b+TNk+IdPRJmVr7JBXtC1/Sj8xwl3jxaWKNPW4NBQKMmVtWog58YLQQ:wZltNUPRIZH9CJ4Bjg35Jvi58YV
MD5:	91216658EDDEC6DEA19D95D0157DBC66
SHA1:	F25739883B8B6D8D4B491239959A954E3B10E26C
SHA-256:	ECB5046B2CA4C3B92315C106D56993515E776762953DCACDE5ED6AFDB0E83D7F
SHA-512:	3842A2065787C28E227D31FA553E54B5049E3EA1FF394EFAB71579CB967CFDE9516BFE4BD5D498BE69EB54D3A0C93702F0C3BA4CB92AF4D70CD2F1E48FD48ABA
Malicious:	false
Reputation:	low
URL:	https://ads.pro-market.net/ads/scripts/site-143572.js
Preview:	var dt=0;function encode(b){var a="",e=null;b=b.toLowerCase();for(var c=0;c<b.length;++c)e="0123456789abcdefghijklmnopqrstuvwxyz".indexOf(b.charAt(c)),a=0>e?a+b.charAt(c):a+"0123456789abcdefghijklmnopqrstuvwxyz".charAt((e+Math.pow(c+1,3))%36);return a}function gup(b,a){a\|\|(a=window.location.href);b=b.replace(/[\[]/,"\\[").replace(/[\]]/,"\\]");var e=(new RegExp("[\\?&]"+b+"=([^&#])")).exec(a);if(null==e)return null;dt=1;return decodeURIComponent(e[1].replace(/\+/g," "))}..function anMain(){var b="",a="",e="";try{var c=window.location.href,d=document.title,h=/^(?:https?:\/\/)?(?:www\.)?(.?)\.(?:com\|net\|org)(?:\/(.?)(?:\?(.?))?(?:\#(.))?)?$/.exec(c);if(h){var k=h[1],m=k.split(/\./);1<m.length&&(k=m[m.length-1]);a=(a=gup("q",c))&&a.replace(/^\d+\|\d+$/g,"")\|\|null;if(!h[2]\|\|/(auth\|user\|support\|about\|sitestatus\|terms\|privacy\|statement\|opt-out-choices)/ig.test(h[2]))a="it professionals community - tips for open source software",b=k;b=k;a\|\|(d&&(a=d.replace(/(download)?\s(free)?\s*(open)?

Chrome Cache Entry: 622

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1902
Entropy (8bit):	7.869973450093734
Encrypted:	false
SSDEEP:	48:2cq2NdZzdys/Zc7SikmunYHtzZ3lJSeN9l:2cq2/zdys/q7Wmu2Z1JSeN9l
MD5:	2264CC433EC2183DF3953A32D4591B7E
SHA1:	0955C4427DB0C7EFEA7ECAE6507ED4497A9EFCC2
SHA-256:	639DF52649A00BCDB77EE7DF5F429D11AFE7D2E9BD7DD2B4C69E5465FC84CBA4
SHA-512:	61A17D0A42E5485EA32417009907C6E3E6B60061D5FF2DD87E3E12339BF9C1FE52CA767F34099B1F52D785F706AB5FD77B799CD71272AF9EF4D8461109183AE0
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/allura/u/qforce/user_icon
Preview:	RIFFf...WEBPVP8LY...//.......m..?....1....r.m;.'._....?.m...M.a..;<..}..6.l.T....T..Ti...Fp Ir...$.E.A.. ...>...l.n.m.nmK.d.m...m.me?.m.m.m3........=....m;.6.m.mT.m.m;.......w.Q..d.T.Re.....X....`...Uv..L.....L...$.6m..'r..m....Y.\m(n.6........b#.......'H.. .I........ ?<.)#..f-.aM...&.7..>F.)...UMH......?..p/..ZC...S`.l.#p...8..eD.r..:......:T.S"...OH..(..:Tr.1Ps..2;CCDD.....JJ..}...Bb.m2BB.....J..:.!.RkJ_n...k......f@....l...EP.//g.Wyv.....=.s..:.DU..y.....,"p3}....K=...$......w.K...ho...m...@q...UU..f..v@N8n.~9.w...)..vYS.x.XD.tj_...{...?.N)?..-..?..%0\D.....-=...ut^6.G..j...2..@-Ss...w.2c}.c.sm{<..`.Vy....b.Hxq.M.wR.<...e....s..@u..c.c.Vy0...Yf#.5..[a.6..S..3..7....;...y.lC.).5U..<()..e.....S...y....e..['q.R......d...c...8..N..=..s..a+JW.....^b&.#.Al....z@.R....O`......K.XMU7..P:...@.92/."E...<...<...c.f.5.+d....\.....^..'.@2...0.".L.5.....DW.kHS....`....T...........`&...>.5...@W.fS..D...g..L..A..;.[.[....R..!..&P..r.S...p.",0#<.j.w.?

Chrome Cache Entry: 623

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	17
Entropy (8bit):	3.734521664779752
Encrypted:	false
SSDEEP:	3:gCtwn:l2
MD5:	A54A440C7EED0A7B3E78E6B985E12FEE
SHA1:	92EF2F2008EBBC5635B71F5D6C9831C5F2F4514F
SHA-256:	62CE950AD0D7F664B316B4253BBC993BF0BF8310970F64B150FDA6F1FA59DFEA
SHA-512:	F82E417DFAA9DAAE2A74DE3564D9DF703E4A2849D60752F6A9C4C2C5053CD72D3F5ED036EF683CA586CE17D7A2DA3E9D3DA6311560296929C70B23BC05A57631
Malicious:	false
Reputation:	low
URL:	https://ml314.com/imsync.ashx?pi=3642666937673580575&data=eyJwaCI6NDMwOSwid2giOjkwNywidGJzIjowLCJkdCI6MTUsInBpZCI6IjE3MTAxNTgyMDE5NTlfbm9wamh2cjRzIiwic2QiOjkwN30%3D
Preview:	_ml.setIM(false);

Chrome Cache Entry: 624

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2488
Entropy (8bit):	7.785387034658463
Encrypted:	false
SSDEEP:	48:CHoYv5EK2Nyus2V+7iOnlrw6feM4EQtiVd4Q0FyS7mL2lcJZVX4WQPjCaz:XYvaq2V6l8Y4EQ0Vd58L7ZyP4PWaz
MD5:	8344C6C96248501ED1C8B61F289098EF
SHA1:	3AFD2BEF5AB05C8E0B0AD4973A30BEA42BFF639E
SHA-256:	DCDE2E47656DEAECD3F8F95E9283FC2D3C97924567594E800E391658C8C97FAB
SHA-512:	C5FC665431A35D4B80B32A672C2B6E564430DC37AD9CEF7941E0B0821438368C8CB2B04458F34F6DF090EEAE0280EF1E04AE7829824C2916B7F61B7F4D940BE5
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/10307301828943198359/14763004658117789537?w=100&h=100&tw=1&q=75
Preview:	.PNG........IHDR...d...d.....p.T....IDATx..}.....?.N:Q...g.....2]yY.b2*S.fL.......k..u&.eI...$J..)G..U..u.).......{~.9...................8..8..8..8..8..8..8..8..8..8..8..8..8..8..8u)...l.J.....=kJ....G7>0.....N..= ..jKu.\...P..Od>...X..&...Q7..omi..i....d.8..Yo....sV.8..U....%..~.../]~..C...0vK..("..H81.n)..n.....}EB?.p..(W&...7q.q%s..\|`.]......./m.1#.xx.=W.,...k.._!...E..)<..$.6......].=?G.2.....^.{...{.^.Q.......JZ..yo..G7I.M@i........\....[...0.8G$....\..U.........T....0.......8[$.....P.w.5.oT.f.$Y-...U.+"a..+.>.m`<PH.G...........px........t...w........ .B.........e......b..\|.....Q.....8..!.N..7a.=....U$.......&....:.Q.0_$tO.......&......j.t...x.8..L`.]Zu.q..``.H....-.;....;...kB.m....5`56..b3q..#..6XW..?Y5N..y......S.K...j.p..HX.....,....&YQ5>.._.:. lE.......')n.j\|.x.(.BI/.T$LMu...rr..v.f.n.u.;.WH....S...k...?....6$H$.....;a...x..+....`..,.j...Z5...dC#z..f..DB3`X...S.l..i........g.._.vJM..g6.6'..y......CS.LlV..../.6......Up.HP..T..l;.

Chrome Cache Entry: 625

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 626

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 627

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent=
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 628

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://sourceforge.net/directory/tp3/?b=69707&c=13445&z=67089&cb=79bed62052
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 629

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.5
Encrypted:	false
SSDEEP:	3:YGKeMfQ24:YGKed24
MD5:	055DE8F64447F10ED2C4C7F78E27B7CD
SHA1:	BBFCC7FBB135D3893E9BD559E44E069F57DFAB31
SHA-256:	30C714BF4216E577686D238B98561D093672CB25BF90BAAB50DD956F75CDA4B3
SHA-512:	1A726490120152235BBCE20368630EF20FAC7964BA32F846FAC2C1F1A58EE9722356AD94FA6342685E8CEB5015CE2E944EDD739B901D3D9B0A22A5238118142B
Malicious:	false
Reputation:	low
Preview:	{"country":"US"}

Chrome Cache Entry: 630

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2173), with no line terminators
Category:	downloaded
Size (bytes):	2173
Entropy (8bit):	5.648883876830006
Encrypted:	false
SSDEEP:	48:Cc7ucj3ucVucDuBh53kedCKAHVTpGBlUusyufTd/kEuBOq:CM3D3V3DoJ3dCbn7fwErq
MD5:	E3E88E80DEDA43E64A636F5FB6761574
SHA1:	BED2E380DE4FF2211382BD2721279F0EF6A94141
SHA-256:	7767C00CE14AE8901F1C08E31D03AED1E99528BAE1244CA38D08D93B0DB2E961
SHA-512:	22CDC1A8DA93826D44CE50F8D44915192DCA68EF08F993E5A81AC6040610A67D09F776C71DB19ED5E6A2C645AC39F05D40981CEC7C44360C7758026F69F9C114
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=44963125&p=162538&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://crb.kargo.com/api/v1/dsync/Martin?exid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://sync.bfmio.com/sync?pid=187&uid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://ib.adnxs.com/getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel-sync.sitescout.com/dmp/pixelSync?nid=3&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://p.rfihub.com/cm?pub=224&in=1&getuid=https%3A//image2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI3Mzk

Chrome Cache Entry: 631

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8443)
Category:	downloaded
Size (bytes):	8640
Entropy (8bit):	5.218106892835956
Encrypted:	false
SSDEEP:	192:7D3IGDZTFSMpNaGAqjUWfy3pj6ZdRaDrfX4WUboyeBiF/o:7bbBFSiEqjUWfy3B6/RaDrfIF68/o
MD5:	5B7AE6549E7A03195B2E61DBA3207785
SHA1:	701976BFC93B6E8FA9C5922123F6D7F654276B67
SHA-256:	929784212A0B115FCF4EF00A70F62B62C50C1EBF1E2E13DC83C517D063FC68A0
SHA-512:	6594D411B321FD5C2C52131C68C3302DF334E71841717DB44B5CFDF7F6F81110401DC9D57D3BC9DA5211701FAA048724BC450055CCA17C229AB68EC643937A37
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/js/sandiego/vendor/featherlight.min.js?1709827391
Preview:	/*. Featherlight - ultra slim jQuery lightbox. * Version 1.7.1 - http://noelboss.github.io/featherlight/. . Copyright 2017, No.l Raoul Bossart (http://www.noelboss.com). * MIT Licensed..*/.!function(a){"use strict";function b(a,c){if(!(this instanceof b)){var d=new b(a,c);return d.open(),d}this.id=b.id++,this.setup(a,c),this.chainCallbacks(b._callbackChain)}function c(a,b){var c={};for(var d in a)d in b&&(c[d]=a[d],delete a[d]);return c}function d(a,b){var c={},d=new RegExp("^"+b+"([A-Z])(.)");for(var e in a){var f=e.match(d);if(f){var g=(f[1]+f[2].replace(/([A-Z])/g,"-$1")).toLowerCase();c[g]=a[e]}}return c}if("undefined"==typeof a)return void("console"in window&&window.console.info("Too much lightness, Featherlight needs jQuery."));var e=[],f=function(b){return e=a.grep(e,function(a){return a!==b&&a.$instance.closest("body").length>0})},g={allowfullscreen:1,frameborder:1,height:1,longdesc:1,marginheight:1,marginwidth:1,name:1,referrerpolicy:1,scrolling:1,sandbox:1,src:1,srcd

Chrome Cache Entry: 632

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 633

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
URL:	https://match.sharethrough.com/sync/v1?source_id=98KUz37ype9D3X2sf9ovgeTt&source_user_id=1899505890594565248&gdpr=0&gdpr_consent=
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 634

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 635

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10186), with no line terminators
Category:	downloaded
Size (bytes):	10186
Entropy (8bit):	5.174159117915718
Encrypted:	false
SSDEEP:	192:UIj58+QNcNwUKTEAr9q6/ryHQFcDLCYN3rE84dQ:1aHNcNwCArF/UPLCi3rD4G
MD5:	C7FD4195B568021979DF433D733BF4A9
SHA1:	3EE143B1B6FA5EF481E9C06A9037E583C2F2E880
SHA-256:	40EB83374C6B3B6497B6EB6D7FA61A7B822AC9036F027B0988C14BD094571ED1
SHA-512:	D499DC60070EC2E410E6C5E8EEDF4B8AE595E853D6EF55065F814FC2A30DD915C441E28B1FA923BC30EF294538AB8BD544D07B544654640840AABED4D8C3FA38
Malicious:	false
Reputation:	low
URL:	https://ced-ns.sascdn.com/diff/js/modules/cmp.js
Preview:	var sas=window.sas\|\|{};sas.utils=sas.utils\|\|{},sas.events=sas.events\|\|{},sas.cmp=sas.cmp\|\|{},sas.consent=sas.consent\|\|{},sas.debugMode=sas.debugMode\|\|{},sas.debugMode.logsQueue=sas.debugMode.logsQueue\|\|[],sas.debugMode.bannersQueue=sas.debugMode.bannersQueue\|\|[],function(){var e=window.sas;Date.now\|\|(Date.now=function(){return(new Date).getTime()}),e.utils.extend=function(t){for(var s=1;s<arguments.length;s++){var n=arguments[s];if(n&&"object"==typeof n)for(var a in n)void 0!==n[a]&&(Array.isArray(n[a])?t[a]=n[a]:"object"==typeof n[a]?t[a]=e.utils.extend({},t[a],n[a]):t[a]=n[a])}return t},e.utils.Latch=function(e){for(var t=[],s={},n=e=e\|\|[],a=!1,i=0;i<n.length;i++)s[e[i]]={};var o=function(){if(!a){for(var e in s)if(!s[e].status)return;a=!0;for(var n=r(),i=0;i<t.length;i++)t[i].apply(this,n)}},r=function(){for(var e=[],t=0;t<n.length;t++)e.push(s[n[t]].result);return e};this.isComplete=function(){return a},this.notify=function(e,t){s[e]&&(s[e].status=!0,s[e].result=t,o())},this.addLis

Chrome Cache Entry: 636

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.200601260429725
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM09/Woz59tVp:6v/lhPfZM09tzjTp
MD5:	C4A2B870062C2BB98C500BC1526C0498
SHA1:	528666CCDB12997358077BC8FCDBFB6B825C7788
SHA-256:	2AA4FA20701CDD6D8D56046069001186B5267E3EE7D0EF618AD2F4A683723E11
SHA-512:	2F1A3ABCD12125F7EF18D61A960901C0FD6F82DD02EA2B8041859E6D5F0A7F08DB17CC110DC6D8A3F7D0D1BA790C4BCCA2506D3C60EDFEB5CB29433E9F4F762E
Malicious:	false
Reputation:	low
URL:	https://a.audrte.com/p?
Preview:	.PNG........IHDR....................IDATx.c`...............IEND.B`.

Chrome Cache Entry: 637

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 638

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	22033
Entropy (8bit):	4.14277387110403
Encrypted:	false
SSDEEP:	384:Oxs2xR6cUE3JUNG3Doc5kVphQdWJ1PMnf4PGSFCfCu:GVr8phIa1knf4PGSHu
MD5:	7C54A1F9588A932B97596893B2D6A9EE
SHA1:	09F47B629273FCF8848E55FB69A0DE61099CF31D
SHA-256:	35DD635DCCECD06E23AD30078011248A211964A0E245F5664FBC8B6EA6433E4C
SHA-512:	07286B4E60AF57A52E99C30301839C1ABCEE3A32BA0B18460225F09451A9D716F869016755D22D3C318892857F8BF2E99E8590A520D8400D02DC402DC49FFFE7
Malicious:	false
Reputation:	low
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 1500 1500"><defs><style>.cls-1{fill:#161616;}.cls-2{fill:#ff6700;}.cls-3{fill:#303030;}.cls-4{fill:url(#linear-gradient);}.cls-5{fill:#fff;}</style><linearGradient id="linear-gradient" x1="117.03" y1="967.86" x2="1382.97" y2="967.86" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#414042"/><stop offset="1" stop-color="#231f20"/></linearGradient></defs><polygon class="cls-1" points="305.42 1193.77 13.18 1193.77 75.36 1052.92 13.18 900.34 305.42 900.34 305.42 1193.77"/><polygon class="cls-1" points="1194.58 912.07 1486.82 912.07 1424.64 1052.92 1486.82 1205.51 1194.58 1205.51 1194.58 912.07"/><polygon class="cls-2" points="1338.36 117.6 1338.36 1382.4 749.98 1140.8 161.68 1382.4 161.68 117.6 1338.36 117.6"/><path class="cls-3" d="M1287.92,157.32V1320.66l-517-185.33-20.9-7.49-20.9,7.49-517,185.33V157.32H1287.92m50.45-39.72H161.67V1382.39L750,1171.48

Chrome Cache Entry: 639

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://sourceforge.net/directory/tp3/?b=66907&c=12915&z=64281&cb=969ed981b1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 640

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://sourceforge.net/directory/tp3/?b=69705&c=13445&z=67087&cb=000f291466
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 641

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://sourceforge.net/directory/tp3/?b=57541&c=11165&z=54863&cb=d6140d077d
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 642

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7711)
Category:	downloaded
Size (bytes):	299073
Entropy (8bit):	5.5627374829821425
Encrypted:	false
SSDEEP:	6144:G4NODkSPVZAGvinVpAdWrCs5GWlzAt2E9vTfplUf:vSlPsFllzAt2ovThY
MD5:	148E7C2DB74C337884AA00EB547959C9
SHA1:	EFE78890AD816690BADC91105F6871C1DFC16B72
SHA-256:	1E6251B48EB38B1008D35690104F8F322D2ABC4F7A40363D4B0F4814738AF744
SHA-512:	0A8B8F92854881990BB2C31819B59876777DA94F1EEDCD4C5DE275968F3046C27516820EA33DD21206B61AF4FCF61F7DECC57B7247A6FC715F07620F8270E361
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-1H226E4E4L&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":15,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_email

Chrome Cache Entry: 643

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2487)
Category:	downloaded
Size (bytes):	23094
Entropy (8bit):	5.49319712411738
Encrypted:	false
SSDEEP:	384:k5SYT18ljxDQ92dnZNaaYMSkT3yHI7YybBosxsM/TSOLmfmKzy4zl9WylRiRrAN4:+S81UxDQodnZNaThkT3yHI7toQ/TSOau
MD5:	C09B306B19B1F0FAF7E86C43181A9274
SHA1:	F937B42F7F9CE6A8B21AD5311B591A7F83DD0B8E
SHA-256:	8A33861CDC370B2DB8442132658B06069640881BC90F369FECA9B30C77E5F460
SHA-512:	6F7616126F5CE9821C1D178DFD9512BDACB0FF2515E5B5AEBA63C2EEF8B4165F2DB8015B9ABCD2AC03ADCAD33B577BCE92B176D58CC220E2480F728E423D630F
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/r20240306/r20110914/abg_lite_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=m,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1}function ba(a){return a};var ca=aa(610401301),ea=aa(188588736);var n;const fa=m.navigator;n=fa?fa.userAgentData\|\|null:null;function ha(a){return ca?n?n.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function q(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function r(){return ca?!!n&&0<n.brands.length:!1}function ia(){return r()?ha("Chromium"):(q("Chrome")\|\|q("CriOS"))&&!(r()?0:q("Edge"))\|\|q("Silk")};function ja(a,b){return Array.prototype.indexOf.call(a,b,void 0)};function ka(a){ka[" "](a);return a}ka[" "]=function(){};!q("Android")\|\|ia();ia();q("Safari")&&(ia()\|\|(r()?0:q("Coast"))\|\|(r()?0:q("Opera"))\|\|(r()?0:q("Edge"))\|\|(r()?ha("Microsoft Edge"):q("Edg/"))\|\|r()&&ha("Opera")

Chrome Cache Entry: 644

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	88138
Entropy (8bit):	5.32217999174103
Encrypted:	false
SSDEEP:	1536:LZmaNEErytMphN/Pn37xnnxWJYTFDMTkJfly:LZ7EEr5phN/PnLxnxWWZDMTefly
MD5:	FF56F311F5A69D0213D01AF94B111F42
SHA1:	6D1ECF95F835388474C4E01F4D7AAA86315529ED
SHA-256:	F7214455123E5FB1FD165F99F9A43A3C0A1311403E16701DEAC74C63A7CEF350
SHA-512:	4EC44ECB63535A34F30E4186A35C92F5F9D3AD705476EA1AA2B1D4E241A7D59F150CAD3B4F1E557202B4177F57EFC43D22EF4330C87E1C461EB924B7305D630F
Malicious:	false
Reputation:	low
URL:	https://ajs-assets.ftstatic.com/ftUtils.js
Preview:	window.ftUtils=window.ftUtils\|\|{},window.ftUtils.common={$:function(e){var t=this,i=e;return"string"==typeof(e=e\|\|t.markup.div.id)&&(i=t.w.document.getElementById(e)),new t.$Base({o:t,y:i})},$Base:function(t){var i=this;i.$=!0,i.o=t.o,t.y=t.y\|\|{},i.target=t.y.$?t.y.target:t.y,i.style=t.y.style\|\|{},i.parent=function(){return i.target.parentNode&&i.target.parentNode!==t.o.w.document?t.o.$(i.target.parentNode):i},i.hash=function(){return 1},i.alignTo=function(e){return e.$&&e.target&&(e=e.target),t.y.style.left=t.o.$(e).x()+"px",t.y.style.top=t.o.$(e).y()+"px",i},i.x=function(){return t.o.getAbsLeft(i.target)},i.y=function(){return t.o.getAbsTop(i.target)},i.getStyle=function(e){var t=window.getComputedStyle(i.target,"");if(null==t)return t;try{return t[e]}catch(e){return"auto"}}},addEventListener:function(e,t){var i=this;void 0===i.eventListeners[e]&&(i.eventListeners[e]=[]),"function"==typeof t&&i.eventListeners[e].unshift(t),("adonpage"===e&&i.adDisplayed\|\|"adready"===e&&i.adReady)&&t.

Chrome Cache Entry: 645

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://tag.crsspxl.com/m.gif?yahoo_id=y-0U3P02xE2pMszjbZP.8FC7RHe6zD7YBA60w-~A
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 646

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=3&external_user_id=3e9d65ee-f197-4b00-b33c-8e23896e09ac&gdpr=&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 647

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 648

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvArPoQtruVQCt8wlAJosJF2ONg6popE9aI_d04kvqrE2LmMK1OFWcuQAHQwSaCSHgYUmzgr4W2j2H220YM451P1STVWRgKwWHdnjL6m7OdvQ3lsLqAr4dLtV3CR7OWpltM0WCoxFO2OGrYqMqMos_ADc06yOG9sFw&sai=AMfl-YSZlLwcbR5mnTdSH44C8jnt-iGYWKTM2TYsCF_xcqD7MgCpermlsaHzgI4K7kc5ZIH5a4I7liUOTpL2oOc9trtamvovEK2pf_TuFRYaVEqX1CyJ1X1SUPgcdCDJ&sig=Cg0ArKJSzFCURXLaOQb_EAE&cid=CAQSPAB7FLtqEAmz-IAgNrAmYKDEtZ8Vg41PLs_We3MeOvbi7CHQGZrPCYKQt-ewcR5P6heSHG2Gj-bn_InceBgB&id=ampim&o=0,251&d=970,250&ss=1280,1024&bs=970,250&mcvt=1002&mtos=0,0,0,1002,1002&tos=0,0,0,1002,0&tfs=67&tls=1069&g=100&h=100&tt=1069&r=v&avms=ampa&uap=Windows&uapv=10.0.0&uaa=x86&uam=&uafv=117.0.5938.132&uab=64&uafvl=%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D&uaw=false&adk=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 649

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32043)
Category:	downloaded
Size (bytes):	242057
Entropy (8bit):	5.386392436569304
Encrypted:	false
SSDEEP:	3072:URDNWAw1kQMqBNmpOHNxBjEYpf+hD5IJ3ui30V:6WAukHOHlEuf+hD5y3ui3y
MD5:	C71464532C0FC2020D8E8667ECFD9A3F
SHA1:	45F5CBAA3881797FD241F040838D495EE8170655
SHA-256:	E439BEBF8DE2DF0582273906D2C1DCEFF2387C661EFB2152EF1C28420CE4E7E5
SHA-512:	0D4A413DA493FE9D97D2533F896577652B3EE88927FD244E374AFDC46C669C287DF210A5C6E6E0C826CF74553C293966BB18285EED8DD98EDA4ACC504BC0D1B0
Malicious:	false
Reputation:	low
URL:	https://code.createjs.com/1.0.0/createjs.min.js
Preview:	/!. @license createjs.* Visit http://createjs.com/ for documentation, updates and examples... Copyright (c) 2011-2015 gskinner.com, inc... Distributed under the terms of the MIT license..* http://www.opensource.org/licenses/mit-license.html.. This notice shall be included in all copies or substantial portions of the Software..*/.this.createjs=this.createjs\|\|{},createjs.extend=function(a,b){"use strict";function c(){this.constructor=a}return c.prototype=b.prototype,a.prototype=new c},this.createjs=this.createjs\|\|{},createjs.promote=function(a,b){"use strict";var c=a.prototype,d=Object.getPrototypeOf&&Object.getPrototypeOf(c)\|\|c.__proto__;if(d){c[(b+="_")+"constructor"]=d.constructor;for(var e in d)c.hasOwnProperty(e)&&"function"==typeof d[e]&&(c[b+e]=d[e])}return a},this.createjs=this.createjs\|\|{},createjs.indexOf=function(a,b){"use strict";for(var c=0,d=a.length;d>c;c++)if(b===a[c])return c;return-1},this.createjs=this.createjs\|\|{},function(){"use strict";function a(){throw"UID

Chrome Cache Entry: 650

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2466), with no line terminators
Category:	downloaded
Size (bytes):	2466
Entropy (8bit):	5.726846567731242
Encrypted:	false
SSDEEP:	48:CzcucjOSCIulVPrucevulTBsGJdjN2mAeSsN77+NmC8t5nMJOB0a0BBQecq:CA3j5CIGj30osyhN2xW7I8tsoycq
MD5:	6106E5847AB44B8A7430EEF4D587F70F
SHA1:	980FCC07C0A206E82974429D420922A10B906798
SHA-256:	A4C0ED84122EF7C075CC62D2919A325454D02334A1F6700DD05E513E3B311C9D
SHA-512:	E9627E500240F86CE56D38226F18FF427334E49DEEB9389B8411996C9688710796156CC5F49E883764F1238A87DF6D828899E026A2E5A17F4078F0AAC87BCE77
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=73299430&p=162538&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://bpi.rtactivate.com/tag/?id=20909&user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://i.liadm.com/s/75145?bidder_id=195755&bidder_uuid=9A176ADB-73F4-4BD8-A648-23F2443493B5');PubMatic.loadAsyncImagePixel('https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://io.narrative.io/?companyId=673&id=pubmatic_id:9A176ADB-73F4-4BD8-A648-23F2443493B5.');PubMatic.loadAsyncIframePixel('https://dis.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@');PubMatic.loadAsyncImagePixel('https://c1.adform.net/serving/cookie/match?party=14&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&piggybackCookie=[PLACE YOUR PIGGYBAC

Chrome Cache Entry: 651

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 652

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3190)
Category:	downloaded
Size (bytes):	113329
Entropy (8bit):	5.5425534745301075
Encrypted:	false
SSDEEP:	1536:sEo6wmPpFI51aHP0/+MzVnks85XU3GkwE+nprJd0x5qFtSR37LyT/mCm:sIBFaAMm2ks85k3iEqw/R3/yHm
MD5:	B96023064158A454A208A49620C0734C
SHA1:	E3C1CC046EFDFABF65D41A8A3CB4EFC63E3C6C46
SHA-256:	1642DD5DC126DF4FEFF2255CBA0988528507973D842D0A73331A5873F6B9D4E5
SHA-512:	44F33B8D6FFFABBFC6FEF7AF60DC2D7A07EF59B6969F828C177AC5814C5D07C2C103ADFC165F07CE4B6D9B55928A913BEB5BFCD854BE09596E401A41B884585F
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/879366/express_html_inpage_rendering_lib_200_278.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var h,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ea=da(this),fa=function(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}};.fa("Symbol",function(a){if(a)return a;var b=function(f,g){this.j=f;ca(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=functio

Chrome Cache Entry: 653

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=zeta_interactive&google_push=AXcoOmThR0qU_v9WB_KoRuitsDoGWY9snAo7tjsSG6TAmotdCKbfMBqhRRuGVhduX3skfIGKnxc9pnnWown7jwZkOUasrQ7EXMTatKayC1yfkKsYNiETQzRLzqbOdfdmnN_wcsbHxCZ6tWIfelki-7_peYP_&google_hm=MTk3MzIwOTk3MjQ2NTQ1MzQ3OQ==
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 654

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
URL:	https://match.sharethrough.com/sync/v1?source_id=790d3e0174b12a86f1cbebf4&ev=1&source_user_id=3ftvG5anVWUA&pid=558357
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 655

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=ZDU5YzkzMjUtNDczOS0yOWRkLWRlNWUtNjI3ODJhYzIxN2E3
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 656

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	12325
Entropy (8bit):	7.9839574395112995
Encrypted:	false
SSDEEP:	384:oS1V+NW83qt78qeT8to7OraYbfMaPkyz9B:oS1VEatgfT85bUGkyBB
MD5:	7BD35166F7ABAAA60FD5D75A8C5FB3E6
SHA1:	5F0E31EFADF2C69CF2AE8FE12EFD89C3981ADCB3
SHA-256:	50DDB770B5C3781C1CF73D58ED4109DF5C381ABFF4892A106DAD6C661E07947B
SHA-512:	55635FF3183A193F9DC57B7E7BD81EF315584B01B68E43DDDBE28F1FB5C0E21D9784B18F916FF5C09FDE606FF6784F76C6E12330AD494146AA47B3F7003F52ED
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.............sRGB...,.../.IDATx..[n.6..e..X.n....&...}..AZ.@......8.-.I...[..u.-.....JUUS....0...0......E+;N.,.oFw....0..Q........z.R...J.a.QD.0L.q.=><...<.L..9..G.uFW..yA:....(x+..........,M...p.!rA.wy.zE~....(f....[....4w..v.$U.....,..G.f...7...>......N.uR..4.u].>.L.!....M..0D.=.e9.....eYu.+.$..._~...k......ht}}.\....f3.....u>.{.wss.`<.#....%T>^.{.f......h.f....M!.p8.\|.....H.t6..Y.......!.3..P..Z.=.....N...SI.......]Q.{L..Gv.-,...p.eA.8.!14..OOOH..f..!.V....A.....:.a..G..Z.e...m:....q.......e..(.D.4M..4C..S{...4L<...i...\|HHp\...-M.ci.>.`..Q.....(.y. \..."...~.t.^c.r......u=\-.cG.....q.#Q0.:.Z.RAb.Z.8q.^X...y..m..F. L.Us.(.HD.4.......]bN.WZ.{J..........D...V.(X..z].c......7k.K....m....p...z..~F)t...2../.E..........4.A4P:.e...*.....8da.J...i.o%.(...bN.E%)."...b.s.7...^.r....z..,..b...Z#..A...X.%.0?.G\..8...r...`:....C.X..L....x)..d.?1..S.9J.....V.#\|./y.D.3(.8.[..!.#0.NX.R"....^'....%.N....H'.y.-.m.KK`.X.s.H`.~......x.,..PJs.wF%

Chrome Cache Entry: 657

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1699), with no line terminators
Category:	dropped
Size (bytes):	1699
Entropy (8bit):	5.247138987991348
Encrypted:	false
SSDEEP:	24:kRoBfiveqSYMVubSYRuLhrSYRpKSY4SY3/gUFI5NSYQjIESYKfwSYgI5NSYt:koBfivJzR6RWOPgUFyTAnemgyTt
MD5:	B0FBDF75A956BB022DE633D05EF04674
SHA1:	22FF33E0C0C5C28103168D7FEFB5A65552F9C14C
SHA-256:	4C0FD4BF34D97F9972F0E8EBC06F848830E657FCADEA5AD1B3380F5372C0D978
SHA-512:	D9C01A1A5493F9CDDE2C7D4F17626EB0D896854668565DD4A5345F8F5E03C036441A944EB596863EEDD6587BB77FB37BB24A40141D325A36906CC2BB14726C5D
Malicious:	false
Reputation:	low
Preview:	<html><head><title></title></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=index&google_cm&google_hm=Ze7xfMAoIeEAAAzaAIdO4AAAEGAAAAAB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://pr-bh.ybp.yahoo.com/sync/casale/Ze7xfMAoIeEAAAzaAIdO4AAAEGAAAAAB?gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://secure.adnxs.com/getuid?https://dsum-sec.casalemedia.com/crum?cm_dsp_id=46&external_user_id=$UID" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://match.prod.bidr.io/cookie-sync/ie" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://d.adroll.com/cm/index/tp_out?advertisable=3GMDZMBFQREVBC75SYYKWH" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://creativecdn.com/cm-notify?pi=index&

Chrome Cache Entry: 658

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.224854887153215
Encrypted:	false
SSDEEP:	3:9ulxUjG3XasszcjBDGi3wOfZLlU2SCL3Ca/MmKX2kB9OSNkKtZUgYrsPdQGdvR:9u4iXpsYDGUTZ1pyaU9XlLOotZUgY/GD
MD5:	248E8BFF27B5C599D80E7F728CD86F54
SHA1:	99D44072FB50916BF09BEEA053075A78F3C3B78C
SHA-256:	67850FB01AC4B08867991374786C3A025C992D91C5485D2EBB9B82229B9F9226
SHA-512:	1D6AE8E3791CE65F9D96039412301DD2238A13EF05A4E486BFBEB43BA4DFB584B1F13247470E6D9039AC12F2E7585B88039F54C0921E5929BD52344767531DA4
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISTwnlH7YLhO9yXhIFDYOoWz0SBQ2gedmmEgUNVbv1bxIFDZRU-s8SBQ10y4ycEgUNU_J1YRIFDWdXYzwSBQ0vahE1EgUNkgVUzhIFDbpzzqU=?alt=proto
Preview:	CnIKCw2DqFs9GgQICRgBCgsNoHnZphoECCQYAQoHDVW79W8aAAoLDZRU+s8aBAgHGAEKCw10y4ycGgQIDRgBCgsNU/J1YRoECA0YAQoHDWdXYzwaAAoHDS9qETUaAAoLDZIFVM4aBAg8GAEKBw26c86lGgA=

Chrome Cache Entry: 659

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2312), with no line terminators
Category:	downloaded
Size (bytes):	2312
Entropy (8bit):	5.7283627530818775
Encrypted:	false
SSDEEP:	48:C2BqYPGulVnd6uWPluh2Bqm2Bqhybj/5CSauXiuZS5vuXydNn3VGEq:C2BqYPGGnobl22Bqm2Bqhybj5PaSiqSg
MD5:	9A7822C6EDF6A98502DCC3AB735A4207
SHA1:	9A0C29BC4C0F187C116E316AE99494502E34E5D4
SHA-256:	B178C9D03CF461E7EA09B5F047297EB39987FF387310A3B2592C95D28AD3778D
SHA-512:	570414AB6F600B7A80773F8A3B8809413BD3C68F76249E5F2FBD609305D335C27E9A17BF32A9F3CCBE3979721E82F6C48A73CCD8BE9DE24AE77F6A15D63B7371
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=87197809&p=162538&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=mhdq23P0S9imSCPyRDSTtQ%3D%3D&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner_device_id=9A176ADB-73F4-4BD8-A648-23F2443493B5');PubMatic.loadAsyncImagePixel('https://us01.z.antigena.com/l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx 9A176ADB-73F4-4BD8-A648-23F2443493B5&rnd=RND');PubMatic.loadAsyncImagePixel('https://eb2.3lift.com/xuid?mid=7976&xuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&dongle=u6nf&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=OUExNzZBREItNzNGNC00QkQ4LUE2NDgtMjNGMjQ0MzQ5M0I1&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pu

Chrome Cache Entry: 660

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (49170)
Category:	downloaded
Size (bytes):	49173
Entropy (8bit):	5.458555540597788
Encrypted:	false
SSDEEP:	768:TCoEqoinIC7qSgu0CKUx/4WUwcvXWP6Ta8vHKPPSvCC1anVD//B/ZX8RNIB8cxKg:TPJH0LUx/vyv0StEZ/Bd8RNITxZ
MD5:	04A3FE39EDD742DF6181A32A2199A7EC
SHA1:	3053F85953448AD626628BDDC7CD671B4C3A1376
SHA-256:	5CD16F5174D4F1EAF208272602CE6316DDF308953DB343D03F9B5D0EA273351F
SHA-512:	09F4A393A68E2B1456F7D292C0E4E52F2F0ECD6648F252B1BBD2399DDB6C65924C4D711161E73904F68FDF0F82A19C6EE58C176D3F1103D1743EF16A494E4C9A
Malicious:	false
Reputation:	low
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function t(t,n,e){return n in t?Object.defineProperty(t,n,{value:e,enumerable:!0,configurable:!0,writable:!0}):t[n]=e,t}var n,e,r,o,i={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,s=2,f=(t(n={},a,"li_gc"),t(n,u,"li_mc"),n),d=function ar(){var t=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,n=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var o in function(t,n){if(!(t instanceof n))throw new TypeError("Cannot call a class as a function")}(this,ar),t=t\|\|{},this.consentAvailable=!1,this.issuedAt=n,this.userMode=e,this.optedInConsentMap={},i)t[o]=t[o]\|\|c,t[o]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[o]=t[o]===l\|\|t[o]===c&&r===l},v=(e=[i.ADVERTISING,i.ANALYTICS_AND_RESEARCH,i.FUNCTIONAL],r=[c,l,s,c],o=new R

Chrome Cache Entry: 661

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://sourceforge.net/directory/tp3/?b=50727&c=9846&z=48052&cb=5a5b4d3b8a
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 662

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 663

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	2474
Entropy (8bit):	7.8886518701543205
Encrypted:	false
SSDEEP:	48:SC+CdE1g//86/rhaoUJ3cqk4jcXFVepWkTaJZF81hqdyQZEd2utr:gzus6//MRk4SFjYwZOqdyQSIq
MD5:	6D84B89B9DBE2FDB80E9865C0B83A6E7
SHA1:	5F124818BE1D1FD079CA3EB7808F2EB3DF9F289F
SHA-256:	1D0781DF1470DEBEFCD7FCFFF11485FBB599681D988C1F982053E304B0EB8293
SHA-512:	1AB262C258EA42195B77FE92D27C8A87ED42B76A8E244F7834D6F0EADF1A9C4F79DCBA3C5F7A1DFD9C922D669619526F56D69E7EAF774A2825CEEE406AF6380E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0......`n....qIDATx..Yi.eG..N...M.^f.....L....EM.`.&..D.bP.......?.#J00.....gp.b..Yf2(1.N.g2.:.=..._...[u...r...7Y....{...K.W.9......y.....~..> "E......6.\|......W.g..D.I.J.......jpx...K... ....C.f..(.E.!1+.........x.bY.% E,B@;.o?65..)....p.Dl'.. .#Dj..A..........B,D.].~...1lX ..A...T0R....}w...*.kH..,..5d..b .$?.#..'.P.............,D.......\.%.@........r...'A).T...1.?..Gd.<...W:I@9Q..........>?.G...\...RB...l.+Ph..$pi.q.....].n%GEX....6..!.Hp.ov.H...g.............fc..."..n<.l..:]z..#...'vj..[...k....dN.fP.@....b`kOn..m7.....3...... .-.../)..lM........q...^B.I.<Ef[.....G.a......qy...q. ..-....ZG.[........U...M..c.j5..Fb..d.Z..1..&io.:..B P.6.......).F.....>.9....N.\..X..-A.pa!.,;Iz6../.....M..;.......3...6.F.a.k.. .../~j.2..+..g.Z.p..T.)".\|...0.".]..l....uB6.<..4\|......$...v.D6L..8.Lm6.-....@{...,...CW....X...0..Uz....({P..3...o/...g0G.K.rM.P...l..-3>.\|..o:........&..-<...k...5"q5.7...QRP..uA.Q.....T.D.m......k..B3.3.+.3

Chrome Cache Entry: 664

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	75977
Entropy (8bit):	5.29012154608858
Encrypted:	false
SSDEEP:	768:x40jXiQelUFqaLN80uCV4tJoYIFA3Ekea0C3BAPoS+wOfZyQr7M6Hrx6:pjBg0r43AmIiUoSdOJrtY
MD5:	2008F61543A14BC0893A126F7C9736B6
SHA1:	1F796E95FDE22349D6226AEAD8D661B652D1310A
SHA-256:	291F515583A6C387346D142CAED7EFDA8F0630866C7FC9D0F026FD95AED50081
SHA-512:	EF5B000CB7C1EC306B6A39670054E6F78E159D1FBE7D34A71AACF801D1D7D7520F93DCC7214F83B5F122D585F9EE55E4DA76461DABC6BABC9DD317526D81589D
Malicious:	false
Reputation:	low
URL:	https://csync.smartadserver.com/diff/rtb/csync/CookieSync.min.js
Preview:	!function r(e,n,t){function o(i,f){if(!n[i]){if(!e[i]){var c="function"==typeof require&&require;if(!f&&c)return c(i,!0);if(u)return u(i,!0);throw(f=new Error("Cannot find module '"+i+"'")).code="MODULE_NOT_FOUND",f}c=n[i]={exports:{}},e[i][0].call(c.exports,function(r){return o(e[i][1][r]\|\|r)},c,c.exports,r,e,n,t)}return n[i].exports}for(var u="function"==typeof require&&require,i=0;i<t.length;i++)o(t[i]);return o}({1:[function(require,module,exports){"use strict";var __values=this&&this.__values\|\|function(e){var r="function"==typeof Symbol&&Symbol.iterator,t=r&&e[r],n=0;if(t)return t.call(e);if(e&&"number"==typeof e.length)return{next:function(){return{value:(e=e&&n>=e.length?void 0:e)&&e[n++],done:!e}}};throw new TypeError(r?"Object is not iterable.":"Symbol.iterator is not defined.")},Cloneable=(Object.defineProperty(exports,"__esModule",{value:!0}),exports.Cloneable=void 0,e.prototype.clone=function(){var e=this,r=new this.constructor;return Object.keys(this).forEach(function(t){v

Chrome Cache Entry: 665

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5953
Entropy (8bit):	7.888402967533403
Encrypted:	false
SSDEEP:	96:LtI7OgIDY/Ecznxu1nfzJfPddu2B4wP/AtpMfanfVJTNEY709PkfsTvXw2k2R5jR:RI7moEGxAfz/dhlXAtpAwfND709Pbw23
MD5:	D675694AB4D4D2EB56CCA854C25D9C36
SHA1:	34174B9397A3CB289F892F1F98CCC51A63698360
SHA-256:	49B19F7F2D3D0FC9D2270CD1EBD79D468CA86CF308F33B063595863E3F392E98
SHA-512:	9E70CBA14997AA8DB5BA3F5B1FDC7572E37660BD0F16A9B631159E0C974C017EB2DBEAC83EC9A2969AD14DE9F5A27DE041CF0DCECFF29596A401D0C94C1EA422
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....tEXtSoftware.Adobe ImageReadyq.e<...uiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:f41ac723-a694-47c7-9df0-dfae7a91a527" xmpMM:DocumentID="xmp.did:AC4CB3765F4311EBA942D2676CB01564" xmpMM:InstanceID="xmp.iid:AC4CB3755F4311EBA942D2676CB01564" xmp:CreatorTool="Adobe Photoshop 22.0 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4e3f69f5-bc93-4be8-b90a-b6fa44013720" stRef:documentID="xmp.did:f41ac723-a694-47c7-9df0-dfae7a91a527"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......bIDATx..[.T......CG@.D.E..B4*

Chrome Cache Entry: 666

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
URL:	https://match.sharethrough.com/sync/v1?source_id=vyXkw8rSq3j4JmKvTgxR3x1c&source_user_id=AAKPDU7L3eMAABWFZYx_mg&gdpr=0
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 667

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 668

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=smart_adserver_eb&google_hm=MTg5OTUwNTg5MDU5NDU2NTI0OA==&gdpr=0&gdpr_consent=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 669

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	782
Entropy (8bit):	5.399810351189745
Encrypted:	false
SSDEEP:	12:TMHdPcWi/nzVW/KYf3nWEBOslgH7e33Ysig+cdWaq6Nfs4MwUSJVgd5I:2dTA0Lf3FBveq3n2C26Nf7UAgw
MD5:	3660DA43BF86990C79FB622C09869A7A
SHA1:	547BDAA0204A7978379980A27088A33F0A3A8BAB
SHA-256:	50E6EE581E5A0238E1D38389566520921D8F00157B67A1294D60F621C09606E6
SHA-512:	62D38DC3735099AABD6C0DA888E0E6B8A39A35FD5A3C238DE6AA458D0379A1346CCB35C304C60F3DF75F0431F5BAC0E0DFEEEBE86EFAAAEA3C45C034A310EC01
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/img/sandiego/svg/originals/carousel-next.svg?1709827399
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 21.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 300 300" style="enable-background:new 0 0 300 300;" xml:space="preserve">.<style type="text/css">...st0{display:none;}...st1{display:inline;fill:#333333;}...st2{display:inline;fill:#00CCFF;}...st3{fill:#333333;}.</style>.<g id="Play_Button" class="st0">..<circle class="st1" cx="150" cy="150" r="149.6"/>..<polygon class="st2" points="100.4,237.1 100.4,62.9 249,150.1 ."/>.</g>.<g id="Hover_State">..<g>...<polygon class="st3" points="81.1,300 69.1,288 206.9,150.2 69.1,12.4 81.1,0.4 230.9,150.2 .."/>..</g>.</g>.</svg>.

Chrome Cache Entry: 670

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
URL:	https://match.sharethrough.com/sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 671

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36914)
Category:	downloaded
Size (bytes):	90606
Entropy (8bit):	5.592904952286161
Encrypted:	false
SSDEEP:	1536:3Bw7WftFEMGIRgcrNP7dckoquxFxdt3Yzh:CWfwqZcLqB
MD5:	A8CDFCFF86C6F54B8B06AFC22C547850
SHA1:	B0EC1F1E752483E3903DC4F7059797E257C37CD2
SHA-256:	5A52C848BCFFD0EAC3DF480817F000718FC2D59DD086BF277E24DE1FF8F6E11C
SHA-512:	AD7AE60914CE34E8E576A4BBD9CB28DCF5216BCDC3E9DC8AB569E9BFF1FFF058ECD3FDE607FFCB81B6B2788F48289C17477B9973AC52069DD65CF14D5480D2D4
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/tag/js/gpt.js
Preview:	(function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),ea="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),t={},fa={},u=function(a,b,c){if(!c\|\|null!=a){c=fa[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}},v=function(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in t?f=t:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))brea

Chrome Cache Entry: 672

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 673

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjssEtbGc6xq-Nj8wu0_IQ6wpHVMHdftCqkg-xy7UhIj0JJhdSid1wbFeJ94AEqTs8dSrb3sSJyMzUUT0nubvQetLrBa93BQwwVVjHirjhWKokKbAZyjCjCFUCbzRS3Uybx434Y3RG0SHpoOLtU5hJNkIR8llARX8qCg&sai=AMfl-YS96G3CFC_sAOCvuhoqJH-T6mg5tvxZ5-hkhqQTFdygTFy9Ti62h9Cszwz4NWx8H5YiUt_Qeipyl1rqjx1FIejIMnjy-nSo_FdsOfdkm0KhPjZclAn647BSIoyT&sig=Cg0ArKJSzPTm1oj5BRkpEAE&cid=CAQSPAB7FLtqft65N9w3wDfiYvKA8od4VARdY04M8dNYmTqpZau1W3-mFHrLhlFdagnDtE45_G53AxH9EHDpVxgB&id=ampim&o=0,251&d=970,250&ss=1280,1024&bs=970,250&mcvt=1009&mtos=0,0,0,1009,1009&tos=0,0,0,1009,0&tfs=79&tls=1088&g=100&h=100&tt=1088&r=v&avms=ampa&uap=Windows&uapv=10.0.0&uaa=x86&uam=&uafv=117.0.5938.132&uab=64&uafvl=%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D&uaw=false&adk=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 674

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	566
Entropy (8bit):	5.3730814583564905
Encrypted:	false
SSDEEP:	12:TMHdPcWi/nzVJ/KYf3nWnQmvQWdPHfbNgvRI/DRhVn5Xn:2dTATLf30QKQWdPTNgvRI5Xn
MD5:	14CE57370667EF07588664BD3840A977
SHA1:	85DF546BF9D9AB09CBDA10922628B851CABDD231
SHA-256:	5020A647CCD61A045F2C1FBECBD95D11DA38706EA8ADEA6F7DAA44E6FBD57ED3
SHA-512:	4E7CD053E4A6C2E0A88AB251858B8350F1E1730BFA92F3DB41C34DE78633E3F46407BC6DF8040866585CD9D08857B7C1849ABAE47F16BD281D4C8791823AF51F
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/img/sandiego/svg/originals/sf_star_yellow.svg?1709827399
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 21.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 300 285.8" style="enable-background:new 0 0 300 285.8;" xml:space="preserve">.<style type="text/css">...st0{fill:#ffcc00;}.</style>.<polygon class="st0" fill="#ffcc00" points="150,0 185.4,109.2 300,109.2 207.3,176.6 242.7,285.8 150,218.3 57.3,285.8 92.7,176.6 0,109.2 114.6,109.2 "/>.</svg>.

Chrome Cache Entry: 675

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4352
Entropy (8bit):	5.395033645981567
Encrypted:	false
SSDEEP:	96:1OLNFlOLNTFZKOLNZOLNW3yOLNwOLN8Vc+umOLN+1N1OgNUlOgNXFZKOgN5OgNsY:ANFQNDN8NW3XNtNGqN+rNU7N8NHNs3sb
MD5:	181ECEF1D086455EB9F56BF245CA4204
SHA1:	4548BD77FEF6191DEB5398CD43B57C2EE64622CB
SHA-256:	8753541A3A44842CD815D81C4F8C589E0A0D763112D622F3088CD6F064E825FD
SHA-512:	0ABB1EDE05A76CC10BB44A72841D9F04C3C31F611CA7508F32EB814DED72846E6BCD2B63138A121265AD9ADB6DAF87B6E604F10E6CCE394642029356E127C722
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Roboto%3A400%2C500
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2) format('woff2');. unicode-range: U+0370-0377

Chrome Cache Entry: 676

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (311), with no line terminators
Category:	downloaded
Size (bytes):	311
Entropy (8bit):	5.467708376179196
Encrypted:	false
SSDEEP:	6:jjxc0AQGo+65UjuZRI7pr1KYZpGUiCATjuZRIcrHv8UsDpn:jjxcDUWu/I13mvu/FHvkDp
MD5:	1F8F7842B3FA5CA757583F86E42AA4D5
SHA1:	387E3B299BA520BD07BF1E2DF58760DB51B26158
SHA-256:	98C506F53ADCBD2AB05E7C8A715CA4761D694730B5EC81F861E40B7A593AD736
SHA-512:	8377A3263CB470E6D434CA8A4823FBE71043EC1558FE518E8BE7E46D11A621D908F5C02D21DA3349ED2F73852246BB6D34FCEA60C6C7DE1B1BD38EC5FC5D287A
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=85471405&p=162538&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncIframePixel('https://c1.adform.net/serving/cookie/match?party=14&cid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn.com/420486.gif?partner_uid=9A176ADB-73F4-4BD8-A648-23F2443493B5');PubMatic.PugMasterCallback(false, false, true);

Chrome Cache Entry: 677

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1143)
Category:	downloaded
Size (bytes):	118820
Entropy (8bit):	5.343430194807582
Encrypted:	false
SSDEEP:	3072:uKaU1Ur9xp1SiScuIsds/LwN18L8a3O78FOIWYmwdqQ7D5/td4+JVH8k:8UULM18L8a3O78FOIWYmwdqo
MD5:	117B0F9BC0F31558EACF1661716FF122
SHA1:	7A6B6A415D06AFD13A299E0D23D663B069A36C45
SHA-256:	079671EF6886610C3885D65124C29D8B2241B963B55E6DE7EDEDEE03B5A4E4A3
SHA-512:	06A1E1DDAFAB9221DE4E6FEC0706508B82A5AC04AF3A14458D5E06B7409E4457D8F7DF96D04B0824404167C1FA09A8D0408CDCD50CA0A940BCF750DB69C77E9F
Malicious:	false
Reputation:	low
URL:	https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download
Preview:	<!doctype html>..<html class="no-js" lang="en">.<head>.<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />.<meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=no" />.<script src="//a.fsdn.com/con/js/min/sf.sandiego-cmp-top.js?1709827391"></script>.<script type="text/javascript">.bizx.cmp.ifConsent('', ['all'], function () {. var bt = 'https://btloader.com/tag?o=5098683085881344&upapi=true';. bizx.cmp.embedScript(bt, true);. window.addEventListener('AcceptableAdsInit', function (e) {. if(e.detail) {. console.log('acceptable ads on');. SF.Ads.acceptable_ads_active = true;. } else {. console.log('acceptable ads off');. SF.Ads.acceptable_ads_active = false;. }. });.});.</script>.<script>. /global unescape, window, SF/. // Setup our namespace. if (!window.SF) { window.SF = {}; }. if (!window.net) { window.net = {}; }. if (!window.n

Chrome Cache Entry: 678

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 679

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 680

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	49914
Entropy (8bit):	5.945302532251039
Encrypted:	false
SSDEEP:	768:fWgkXYFyBN8mrloILtVUVM74uVqzoLgWaO:fRkR5VUV44uVwoLV
MD5:	07EF86CC5CA3BA512164001C58F2E4CB
SHA1:	3929BC1268BC7034F1C6B4176813971C452A9F9D
SHA-256:	DCB200FEE20BE04874119E299A244009E10537CBB8A0517AC1DEADB3AB2E26F8
SHA-512:	BCB55E8236118B481F44665C101DFE86A37F8A0E6B0C5947DA5172FB6BDAF3F5393C5C1FCE0451785ADC8E0CCF4038A74C9274CA1BAE15A5BF35A9905E706864
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1401323213163731&correlator=3472666447687727&eid=31079957%2C31080983%2C31081725%2C31081566%2C44807746%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403050101&ptt=17&impl=fif&iu_parts=41014381%2CSourceforge%2CSF_ProjectSum_300x250_A&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=300x250%7C300x600&ifi=6&sfv=1-0-40&fsfs=1&fsbs=1&rcs=2&eri=1&sc=1&cookie=ID%3Ded8d538436f1b623%3AT%3D1710158205%3ART%3D1710158205%3AS%3DALNI_MbiYxvEWP7dZiJkctj8HGzhHyMpCg&gpic=UID%3D00000dc711cb5676%3AT%3D1710158205%3ART%3D1710158205%3AS%3DALNI_MbtGcDgo6RHjTtG2es2mbdsN1jDSw&abxe=1&dt=1710158307028&lmt=1710158307&adxs=963&adys=376&biw=1263&bih=907&scr_x=0&scr_y=400&btvi=0&ucis=1&oid=2&u_his=2&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2F&ref=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Fpostdownload&vis=1&psz=300x612&msz=300x600&fws=0&ohw=0&ga_vid=1854926735.1710158203&ga_sid=1710158241&ga_hid=98602124&ga_fc=true&ga_cid=1668299401.1710158203&td=1&topics=3&tps=3&htps=10&nt=1&psd=WzE1LFsyLFtbIi80MTAxNDM4MS9Tb3VyY2Vmb3JnZS9TRl9Qcm9qZWN0U3VtXzMwMHgyNTBfQSIsW11dXV0sbnVsbCwzXQ..&dlt=1710158238737&idt=2612&prev_scp=oss_tpc%3DFile%2520Managers%2CSearch%2CSoftware%2520Development%2CSource%2520Code%2520Management%2CStorage%2CSystem%26shortname%3Ddocfetcher%26dc_ref%3Dhttps%253A%252F%252Fsourceforge.net%252Fprojects%252Fdocfetcher%252F%26sz%3D300x250%252C300x600%26page_type%3Dpg_project&cust_params=usingSafeFrame%3D1&adks=2750022012&frm=20&eo_id_str=ID%3Dccb10672a4298c0a%3AT%3D1710158205%3ART%3D1710158205%3AS%3DAA-AfjZQQCnCz9TlsGBpH19Z0_Y8
Preview:	{"/41014381/Sourceforge/SF_ProjectSum_300x250_A":["html",0,null,null,0,600,300,0,1,null,null,null,1,null,[138416297042],[6180654644],[2036965341],[1511469861],[151821],null,null,null,null,null,null,0,null,null,null,null,null,null,null,"CNHi4pOU7IQDFR2wOgUdQm4AKA",null,null,null,null,null,null,null,null,["012402262017000"],null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012402262017000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}html:not([amp4ads]),html:not([amp4ads]) body{height:auto!important}html:not([amp4ads]) body{margin:0!important}body{-webkit-text-size-adjust:100%;-moz-text-size-adjust:100%;-ms-text-size-adjust

Chrome Cache Entry: 681

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 682

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 683

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	65537
Entropy (8bit):	5.982084634246555
Encrypted:	false
SSDEEP:	768:EWrkXYFyBN85BTeDwFBttkvijXah7jXahpKM74+jXahj1G:EWkQ4DwFBttkviaJa3K44+aPG
MD5:	C2EBFC2C8A1C7727F2701005E2403079
SHA1:	0B566431C445765BF310345A2560EF16BB0E0847
SHA-256:	2F21A787ADDB7813CA2A976F5E00E23FAD598D2CCF41254069D63A3EA2B02CDF
SHA-512:	A6DB9B723691BBBFB5F882A9780D6409E36B7F03D150A09CAE668B6D7634C17ABE176C8A5FA786830B8EB1DE974B9D72230814CFF33302CFD4B2640643B4D6C2
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1401323213163731&correlator=3224526063827943&eid=31079957%2C31080983%2C31081725%2C31081566%2C44807746%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403050101&ptt=17&impl=fif&iu_parts=41014381%2CSourceforge%2CSF_ProjectSum_728x90_A&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=728x90%7C970x250&ifi=5&sfv=1-0-40&fsfs=1&fsbs=1&rcs=1&eri=1&sc=1&cookie=ID%3Ded8d538436f1b623%3AT%3D1710158205%3ART%3D1710158205%3AS%3DALNI_MbiYxvEWP7dZiJkctj8HGzhHyMpCg&gpic=UID%3D00000dc711cb5676%3AT%3D1710158205%3ART%3D1710158205%3AS%3DALNI_MbtGcDgo6RHjTtG2es2mbdsN1jDSw&abxe=1&dt=1710158275048&lmt=1710158275&adxs=147&adys=92&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=3&oid=2&u_his=2&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2F&ref=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Fpostdownload&vis=1&psz=970x274&msz=970x250&fws=0&ohw=0&ga_vid=1854926735.1710158203&ga_sid=1710158241&ga_hid=98602124&ga_fc=true&ga_cid=1668299401.1710158203&td=1&topics=3&tps=3&htps=10&nt=1&psd=WzE1LFsyLFtbIi80MTAxNDM4MS9Tb3VyY2Vmb3JnZS9TRl9Qcm9qZWN0U3VtXzcyOHg5MF9BIixbXV1dXSxudWxsLDNd&dlt=1710158238737&idt=2612&prev_scp=oss_tpc%3DFile%2520Managers%2CSearch%2CSoftware%2520Development%2CSource%2520Code%2520Management%2CStorage%2CSystem%26shortname%3Ddocfetcher%26dc_ref%3Dhttps%253A%252F%252Fsourceforge.net%252Fprojects%252Fdocfetcher%252F%26page_type%3Dpg_project&cust_params=usingSafeFrame%3D1&adks=3189691995&frm=20&eo_id_str=ID%3Dccb10672a4298c0a%3AT%3D1710158205%3ART%3D1710158205%3AS%3DAA-AfjZQQCnCz9TlsGBpH19Z0_Y8
Preview:	{"/41014381/Sourceforge/SF_ProjectSum_728x90_A":["html",0,null,null,1,250,970,0,1,null,null,null,1,null,[138416297042],[6180654644],[2036965341],[1511469861],[151821],null,null,null,null,null,null,1,null,null,null,null,null,null,null,"CJGlwoSU7IQDFXqwOgUdpzADeg",null,null,null,null,null,null,null,null,["012402262017000"],null,null,null,null,null,"3",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012402262017000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}html:not([amp4ads]),html:not([amp4ads]) body{height:auto!important}html:not([amp4ads]) body{margin:0!important}body{-webkit-text-size-adjust:100%;-moz-text-size-adjust:100%;-ms-text-size-adjust:

Chrome Cache Entry: 684

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 685

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=teadstv_dbm&google_hm=ODI1YjNmZjMtZjc1ZS00YzFiLWE1NWQtMTc4ZmU2NDg1ZGRl
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 686

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.302398258075853
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxd7SelTlxSv8up:6v/lhPfZMys+llxm8up
MD5:	4E73E94AF1A1A5436C2DA7F12C0123BB
SHA1:	58058BC52693124388C9F647411A047C9C0C8658
SHA-256:	F3CA3118D9ECEB4028FB8B62693E34913BADAEDFC8D62EED83ED744697BF12F9
SHA-512:	C92DD5B6B53B682B10AB3873C032FC08EAE6757077FE5A7E79DF608D2826251DA48683793610D51C3E973E021594BF2E720A00F5D4FFA8E77C95FF21088910A3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................IDATx^c``.........w......IEND.B`.

Chrome Cache Entry: 687

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 688

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 689

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 30, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2502
Entropy (8bit):	7.885521295962446
Encrypted:	false
SSDEEP:	48:kfcMDcv54meKZVcvTOodUWfYKESWX7OI40t+34oXROODmtnt31tN+kniLDX9:kRwRPVsqCUctWX6IHg3jEODmtntl+Fh
MD5:	FF862C0E7A4755ADF3682DA543BCE1E4
SHA1:	9DB9B9C9BB176AEE7F639F5F4A4CD702105358B6
SHA-256:	36133CA07927C88A7CC578FDDBAED3C668AB75087834D0CA13DCA5DE4EC856C1
SHA-512:	F7BD41F50C64D5DFC88989D0DDEE4C2CE816A08DC7410E5176C9386052791C04991022D406ED15BD0B6CA8C1E1ED83CD2E3B37C0F601DE26646F0FC49FCA0E6F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................W....IDATh..go.I....&s..g....I.8...6Yd0".(..#.."..d.t&.x.q6.8.7...'...u......wX.!.C........O.>.e....I....2.,.,....A.....,tV....m...6..SR....'.JKKi..l..<0=.={x........::}.4M.0....C.;w.......)==]y..Ky..?6..\.z..r..w...r'C5.:....a..z.....k.}....6y.d...1..x...5.........H...EDD....p.i..}...\|....Y.....<..{.;.V.9..t...\.hm..Z.y..]........C.u..#F......,x..-[.5x.....5..I.N.....&Xx...6....;......z..?.....n..N.u}...>}..7..\|:~.8..q...U[[K.z..v..@.^.t...k.*++..X..........\...L;..t.........%%%Qyy9{..]...n7......u.X....,x#.....m...F}...[.n).....G..U.x\\|.(l..r..IZ.f..'._UU._?h..g.RZZ..5<..3.z.jZ.v-.C.D...799..........TQQ...r.....u.VZ.b..:t..4...!.A......5..k.5;X....:p.......y..E.=...,v.Vj....=z4..;...1c.p..;.}....Pc.......i...Ba..;v.....}.v.4...yn.c`....C.xO.......4./l.....5..f.a.]n.]....=...8(.....X..Bs...a..z+P...........>.\..".mX(3.(/...W.......S.......<..jYY...U+.1;;...._..F...D.~....y.fo.QSS.}.......

Chrome Cache Entry: 690

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	16376
Entropy (8bit):	4.102601735562643
Encrypted:	false
SSDEEP:	384:mE/AqpOzZKACajiFbR7Y42R13WmxvGFfCwSVeXd6LKW2BFa2Abu:aEbR7Y8HKKtzj
MD5:	535DE5A927A8EB5A004CDC0A6B6320DD
SHA1:	AE858F2CCA92E59584B7FE9F54BB3FB90B21DADB
SHA-256:	1744FB413B91B276F5E17347382B664D6CA6C4EA4DB69825CAA97C16DD5D37C3
SHA-512:	65808C8FEC4B2A895244F892A2CFE8EC69E45A6F53BBFE48F1AA8034968F5250B9DE73B2BDB8CDF12A75B90950E1DCEB0A13137CB4C74ACDF7B094813D1EB595
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/images/sandiego/sf-logo-full.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 21.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px". viewBox="0 0 653 102.6" style="enable-background:new 0 0 653 102.6;" xml:space="preserve">.<style type="text/css">. .st0{fill:#FF6600;}. .st1{fill:#FFFFFF;}. .st2{fill:#FFFFFF;}.</style>.<path class="st0" d="M66.9,54.5c0-19.1-6.8-27.8-10.4-31.1c-0.7-0.6-1.8-0.1-1.7,0.9c0.7,10.8-12.9,13.5-12.9,30.4h0. c0,0,0,0.1,0,0.1c0,10.3,7.8,18.7,17.4,18.7c9.6,0,17.4-8.4,17.4-18.7c0,0,0-0.1,0-0.1h0c0-4.8-1.8-9.4-3.6-12.8. c-0.4-0.7-1.4-0.4-1.3,0.2C75.1,56.7,66.9,65.7,66.9,54.5z"/>.<g>. <path class="st0" d="M46.2,94.8c-0.4,0-0.9-0.2-1.2-0.5L0.5,49.8c-0.6-0.6-0.6-1.7,0-2.4l47-47C47.8,0.2,48.2,0,48.6,0h13.5. c0.8,0,1.3,0.5,1.5,1c0.2,0.5,0.2,1.2-0.4,1.8L19.1,47c-0.9,0.9-0.9,2.3,0,3.2L54,85.2c0.6,0.6,0.6,1.7,0,2.4l-6.7,

Chrome Cache Entry: 691

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 16 colors, 32x32, 16 colors
Category:	downloaded
Size (bytes):	1078
Entropy (8bit):	1.240940859118772
Encrypted:	false
SSDEEP:	3:etFEh9HYflvlNl/AXll1pe/WNN00000000000000000000000000000000000001:QNtY6+lKY6
MD5:	4123CE1E1732F202F60292941FF1487D
SHA1:	9F12B11BDE582DAE37CE8C160537D919C561C464
SHA-256:	D961B08E4321250926DE6F79087594975FE20AD1518DE8F91EB711AF5D1A6EF8
SHA-512:	11B24C2E622C408E4774FAE120B719A21A0B2ACFA53230126C35AD6CA57D33D4DE79CBE11D296CFBDE9613CAA03D66B721BD20CF4EE030CF75F5A1FD8A286DA9
Malicious:	false
Reputation:	low
URL:	https://ad.doubleclick.net/favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250
Preview:	..............(...&... ..........N...(....... ...............................................................................................................................................................................................................................................................................................(... ...@.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 692

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 693

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://2e364cc7caa3f2e10b0fb666ab9496ef.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 694

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 695

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 25320, version 1.0
Category:	downloaded
Size (bytes):	25320
Entropy (8bit):	7.992717825046205
Encrypted:	true
SSDEEP:	768:RMxowxdaCb0WaY4P8keYUej86bykBRWIsna:RM1r0NY4P80j86bHtqa
MD5:	344EE6EAAD74DF6B72DEC90B1B888AAB
SHA1:	490E2D92C7F8F3934C14E6C467D8409194BB2C9A
SHA-256:	A3CF4861C7D0C966F0ED6564F6AAD6B28CBD3421A9CA4F60E2246848D249F196
SHA-512:	2A9A9162D610376512A8FAE2CF9EB7E5146CC44C8EBDE7A12E9A3985DA1718C62AE517C25B00DE7C0269EFAB61B4850A0BECFBF04382A25730DBE9CF59825A62
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/css/fonts/sftheme/lato-v20-latin-ext_latin-regular.woff2
Preview:	wOF2......b...........b...........................H.p.`.......e........W..x..6.$..^. .....u.K...5..v.!T.$.D......Jpv .8...a...uT.0.i[... .L .d..x.K.RK...^.\..iZ.z.-D.......D%&s0!h?.......Xp!.'V.....9.tr.M.kr1.}V.b..=.\|....-g)q..&..p......4.C.l.p.o....l.]n:}x...].#j.~.q-....dp..2...+... .+t...U]...y.....H.._.%...mb....".."....q.../........f...eo..Yo.U[{...N..<\|....>r...O. ..f2..f..V.N....g.P-...O....g#2..B ....Jc4..cY...k..b....'Y..R.k.?.s....X...,.@.*.....(...0.IJ.E...~.3-G:....dEW4O.p.\."Z..\L.'.z.m+......1T.xj.NQ..1.X....2..._..,.I;.....a...[.@_.+N....5.0....p..[bN.e.X...QY...C.GE...f((.!7....{..(....O.._......7.&..I..a.r.#.........p..i....d.h.5...VRP.....k;..s.kSaF@.8i. .8.M.#.M.!.v. .!A...:.7..M.jI..y..1.aZ.5 ..A.... ....%...^S.R.v..B... .2..7..q>......F^]P.Pu..V..sU....f.z.;$.na.-.A....:..P..A...p.XaE..]S.LW.vy)."/<..\i...F.S52...)..Z .K."[....S.o....T....ngZ.J..d9.....?.5gV........HZ&.X..&....3...e...\..4..Z..V.:e=u..]...........$C...........9

Chrome Cache Entry: 696

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 697

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 698

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=NzgyMjk0MDEwMTExOTg3ODkzNg%3D%3D
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 699

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=81&gdpr=0&external_user_id=DgrDEF4OkREVB5dDWQeLQgEGx0EVCZJEXlwabpLi
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 700

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	56730
Entropy (8bit):	5.982820248186317
Encrypted:	false
SSDEEP:	768:ZWmkXYFyBN8ot+mmRBBav5GxVxlee74IxFFth:ZXkZtmBBav5GDneW4I1th
MD5:	25535EA70E712EFC6C449230915FD4EE
SHA1:	C7E60373117E3FF4CA573C65F2D15B126A1BD8A5
SHA-256:	3DED7E8C35436CEE3D0E88A8D5DD433177B8D08F70CD021F12EC0C7E21C96A96
SHA-512:	7DF1F988792D5C74B657F16E6F1A47F736956238FD1029B282FC57B6321150E9801C3C498651EF4B4B284A85D6877E96C03E91CAD485AC9844581D072FF4064E
Malicious:	false
Reputation:	low
Preview:	{"/41014381/Sourceforge/SF_ProjectSum_300x250_B":["html",0,null,null,1,250,300,0,1,null,null,null,1,null,[115763391621],[2168334381],[2036965341],[1511469861],[151821],null,null,null,null,null,null,1,null,null,null,null,null,null,null,"CKaJt_WT7IQDFdmwOgUdgbcM3g",null,null,null,null,null,null,null,null,["012402262017000"],null,null,null,null,null,"2",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012402262017000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}html:not([amp4ads]),html:not([amp4ads]) body{height:auto!important}html:not([amp4ads]) body{margin:0!important}body{-webkit-text-size-adjust:100%;-moz-text-size-adjust:100%;-ms-text-size-adjust

Chrome Cache Entry: 701

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 702

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1902
Entropy (8bit):	7.869973450093734
Encrypted:	false
SSDEEP:	48:2cq2NdZzdys/Zc7SikmunYHtzZ3lJSeN9l:2cq2/zdys/q7Wmu2Z1JSeN9l
MD5:	2264CC433EC2183DF3953A32D4591B7E
SHA1:	0955C4427DB0C7EFEA7ECAE6507ED4497A9EFCC2
SHA-256:	639DF52649A00BCDB77EE7DF5F429D11AFE7D2E9BD7DD2B4C69E5465FC84CBA4
SHA-512:	61A17D0A42E5485EA32417009907C6E3E6B60061D5FF2DD87E3E12339BF9C1FE52CA767F34099B1F52D785F706AB5FD77B799CD71272AF9EF4D8461109183AE0
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/allura/p/docfetcher/icon?1687443295
Preview:	RIFFf...WEBPVP8LY...//.......m..?....1....r.m;.'._....?.m...M.a..;<..}..6.l.T....T..Ti...Fp Ir...$.E.A.. ...>...l.n.m.nmK.d.m...m.me?.m.m.m3........=....m;.6.m.mT.m.m;.......w.Q..d.T.Re.....X....`...Uv..L.....L...$.6m..'r..m....Y.\m(n.6........b#.......'H.. .I........ ?<.)#..f-.aM...&.7..>F.)...UMH......?..p/..ZC...S`.l.#p...8..eD.r..:......:T.S"...OH..(..:Tr.1Ps..2;CCDD.....JJ..}...Bb.m2BB.....J..:.!.RkJ_n...k......f@....l...EP.//g.Wyv.....=.s..:.DU..y.....,"p3}....K=...$......w.K...ho...m...@q...UU..f..v@N8n.~9.w...)..vYS.x.XD.tj_...{...?.N)?..-..?..%0\D.....-=...ut^6.G..j...2..@-Ss...w.2c}.c.sm{<..`.Vy....b.Hxq.M.wR.<...e....s..@u..c.c.Vy0...Yf#.5..[a.6..S..3..7....;...y.lC.).5U..<()..e.....S...y....e..['q.R......d...c...8..N..=..s..a+JW.....^b&.#.Al....z@.R....O`......K.XMU7..P:...@.92/."E...<...<...c.f.5.+d....\.....^..'.@2...0.".L.5.....DW.kHS....`....T...........`&...>.5...@W.fS..D...g..L..A..;.[.[....R..!..&P..r.S...p.",0#<.j.w.?

Chrome Cache Entry: 703

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42645)
Category:	downloaded
Size (bytes):	566699
Entropy (8bit):	5.615097864692136
Encrypted:	false
SSDEEP:	6144:AKLFeFsKfPi7BvsSjH8w8Sp9kSnOuJab9TrR1imy0LS2dd4y:ApyIPqBvf8wPkyO9TG+O2dR
MD5:	496C76DD7895A9F5E6173688B42A9793
SHA1:	DBEB043F507158D7A9C3A0C950911BCA02E34B83
SHA-256:	75D7F9438199C2C08E74D951C26580C52B76A6770A1F0C60A04D22619C1881C4
SHA-512:	1BBF5F4D862CCE785767704DDD4EBC4578A8450329302B94147FEAA805E9A027C37D99374F94E71E1F99540B6604A7B791B18B85D5668B92C1F74244D798EC67
Malicious:	false
Reputation:	low
URL:	https://js.ad-score.com/score.min.js?pid=1000925&tt=g
Preview:	__pm_glbl={cfg:{"host":"data.ad-score.com","cdn":"js.ad-score.com","server_token":"DaavaeFXRkoHuNHwwBOoxWRBToRZAaAW-FE7fPshldVXiKDwY2nLOG03IOg==-E03APM1uaFDhPg==","v6":0},query:{pid:"1000925"},bp_policies:"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

Chrome Cache Entry: 704

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 322 x 81, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5930
Entropy (8bit):	7.91934715489586
Encrypted:	false
SSDEEP:	96:5llcHitlIxv9vk7C1+I4wWHLihk/xZSc2fmSzc1B5JsuJG3UudVkYIo/i2CJVTve:aIIHUCD4wa3Sc2fZzc1B5J9ujWo/i9bS
MD5:	2B8247DA3377A209E0EEDBD5F91C4935
SHA1:	30AE8541F31527ABF017912F402FE84B227E3E6C
SHA-256:	6277E6ADD56A41350D809100D9D1F56AA0C9CF57D24154849572E1BED959965F
SHA-512:	0C7A0A1CA924FF8B0711603C3691BD852D92320A1AD20D3219926063CF5406821471911AE15B929AD5BB776E3A128105164A543BFF718CE8F7BA36D0DD1CB28E
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/images/CTA.png?1708393659275
Preview:	.PNG........IHDR...B...Q.............gAMA......a....IiCCPsRGB IEC61966-2.1..H..SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O.

Chrome Cache Entry: 705

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
URL:	https://match.sharethrough.com/sync/v1?source_id=5b286190338513af73f09c28&source_user_id=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent=
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 706

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (634)
Category:	downloaded
Size (bytes):	1174
Entropy (8bit):	5.74166936214599
Encrypted:	false
SSDEEP:	24:hY6t2eJJBewfHDdUg8EcvjHODQMJXeK+C6uS/MLmeK+C6uSGymWAuDSXeMzCUtVv:9V4goLHODS1CTXT1CTVyPyCM6Nu
MD5:	2FE2B1F17888E326B010A8CDA72D48D3
SHA1:	59CBBEEDE4C472024C482BAE8529144119BBBD27
SHA-256:	9A9B7FB32E01FD70747F32EFDBD0472FD681C85EEBB0C42D10C7A514820A0062
SHA-512:	30BE2E73020EB97A67709E47DED40E999D352DA9B94EDD946D1315BDA65AD616AAA3CDFCFA675D061E4ED4AE1BAE3F0D245908D44411B2425C49B4345D2F6607
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/s/cookie_push_onload.html
Preview:	<!DOCTYPE html>.<html>.<head>. <title></title>. <script type="text/javascript">(function(){var f=null,g=null;function l(a){var b="";n(a,function(a){b+=String.fromCharCode(a)});return b}function n(a,b){function c(b){for(;e<a.length;){var c=a.charAt(e++),d=g[c];if(null!=d)return d;if(!/^[\s\xa0]*$/.test(c))throw Error("Unknown base64 encoding at char: "+c);}return b}p();for(var e=0;;){var d=c(-1),m=c(0),h=c(64),k=c(64);if(64===k&&-1===d)break;b(d<<2\|m>>4);64!=h&&(b(m<<4&240\|h>>2),64!=k&&b(h<<6&192\|k))}}.function p(){if(!f){f={};g={};for(var a=0;65>a;a++)f[a]="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".charAt(a),g[f[a]]=a,62<=a&&(g["ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_.".charAt(a)]=a)}};function q(){for(var a=window.location.hash.substring(1).split(","),b=0;b<a.length;b++){var c=l(a[b]),e=window;e.google_image_requests\|\|(e.google_image_requests=[]);var d=e.document.createElement("img");d.src=c;e.google_image_requests.push(d)}}var r=!1;

Chrome Cache Entry: 707

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 708

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1970
Entropy (8bit):	7.850098610871037
Encrypted:	false
SSDEEP:	48:7aajjhhvHjHaSxPtXDT7sJXxulAZse8vwwzOfQt7IeIOZogTyHT1S5lQ/KImP:7XjlljJlYJXxiAaC3It7XiIyxyV
MD5:	578ECA54BA2315E890F64B4D8048168A
SHA1:	49198E359B18B9C1F6A363EBF889A13256F9A92E
SHA-256:	16DC5FABFDD8B0F1FD3F8B5E499C8FE22BC0D6E85A5247162644AD463878BB02
SHA-512:	138570D8E6F7FB22538CE3E495E951FFACACF0F4D0B71BFB6A4FC04FC6B79E9AF78050D2FEE7816D598CF00D190741A3916F3A47F813FA4162A88AEF5D774C45
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/mirrorimages/sbaedge-xlarge.png
Preview:	RIFF....WEBPVP8L..../.A%.....$...{f..6..T..<"...4r./..IR..._..Y........5.9..(v3..].N....R.....<..E-.57......H%L$BvJ^.4.UFl.N....m.01..;."b.zb..:.m+..s..=..m.".H.".?..m."Y......4........5...........b.X..k:....=.....7....x...e........3I.!x....$..".$w.....b.l$..{..I&..d...SI...d..O2.d3/..H..G.=.z.`>._.'y..$..j.EMU..W..e .M.f2.._Z....{..........$m.d..d...u/.tC..lOo...._A.g...=Z.O.....y..........".C4.l..".C.. !._......$O..Z..d.6..P.Pn....{=.[....0...U..1G..)...r...G......_C......s..dn.\|F<......@}..9....!...nA.1O.cg..j.Bz.[yoeX...r...i..^...^@t..E..n.u$._....)...9..g..#.6.....6..... ..Z...Y..S.....K/../..i.4O..,..s....-wt..Eq.,`.f..L...U.........u.d..p..,)W.<M...cmj.i.gL..X.......\....Y.hk...9P%.Zb{f..fJ'..L!9...Z.."spx.......[...g......h..b..C.,&G......];i=.....i8V...j...[%.f..Z..\......-..@..;..T7 ...;-9.[pV/..kw4.W3GR..0..d...Bv>...".l.pa....Z...Vk....G..:.'\|...rZ.@w.L.....L...{.m...q'.....)@H_Y.`8..p,.w..~B..ly....C......+......

Chrome Cache Entry: 709

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 500, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4552
Entropy (8bit):	6.836498745080143
Encrypted:	false
SSDEEP:	96:D258t1zRmIawtlLI8SpD7yMlVthN3vjXPd+91BzTMyb:RVtJALtvb8nBzTbb
MD5:	0162A746E164D87492F410A9A2AFAEA3
SHA1:	0C006F8B673F178D79AC4EAAA1244F96790DE0DE
SHA-256:	E8FB76F0DD927C970C25FBFEDBFC332420590EA5A2CBF1425F875650E8857C0F
SHA-512:	7C7567F7901157F32B1D236711C6A0EF9993D37A4F1733CBD6D1E63DA90EEB6F8401DFF8F73CD0EC7EFA38B451F6B413F1F1A9611F50E51F58B17B5EA8A09941
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/images/f1_img2_300x250.png?1708393659275
Preview:	.PNG........IHDR...X..........PS.....IDATx...kp.e.....I.M[K.(fXZ..).`w..A.....,.e.r.w......e../.28..PA..Ua..: .. "..D..-X!HI[.M..$..YBK.\z.7...>.}.{..o.y..<O......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 710

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1826
Entropy (8bit):	7.877613119173195
Encrypted:	false
SSDEEP:	48:qCgU3D2ks5RIzuTlxw9IAnFUabd6dqS4LxPh9lhZ:DzW5+zilK9lnR56dMZ9x
MD5:	F64ACFFBB5171B75DC68F3C12090614C
SHA1:	A7394C810B313946AC33671BB50BB9FFCFD227DC
SHA-256:	49E135C19F4B208F3C3D66E11F66E6D9B21321F2B131967E4993CBDFB3FCB680
SHA-512:	27D2A33D9D285C50A1F4172A9351FF2F58593BB00086EBB1BC5366D4B067B4B7BA7391A65535A68AD7D89D4627DB02441463368A1D8419471460BB795D2CEDD1
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/allura/p/file-search/icon?1682537016
Preview:	RIFF....WEBPVP8L....//...5.....\.n...X..qwwwww......._C.Z\).....\...C..!........fB.[.s\.....Z..R1...........Y..........F.af.1....$K.....nm3$..{g7K...../".Q.Dsl.6v.=.i..,.A...a..!..B.!...B.!\...m$Er...uo`....O..O.0.'.....t....=....qU...p..W.cn..C. ...Ax.......d.+n.5..0.M.".I.>acA.JLs.HiN).......C..c.[..F.q$l.....B....]Sk.2...g.N=r..w&.Ul!O-.2...r..E....1-.G.l.<.[......Y0....^.y...9...)..5j+..-...mq.DzW2........#q<..h...[t..k.....{=.u.e......u(G. .Dm.....iQ@......HKN.\.&..j.H..&..B../......RTP.@$X.MuC.i3>..'u.E.DFO...D....'......%,.&.>]..Q.....Q.j.....G.fW._.....d.I.eA..1..........p..pD....Z...R./Zd-...k.$.^.<J!=w.S...x.n.]\KUQqw.F(VM..CK)GZ%0..us..WVV.n.....H../[.....B.....W..N.....VJ.....e...O..0=.ytkP.Q...K.w.D......M6.j..........q.i...#.OdhWK..PSv..:....+tB.....%...n........K..{..k,....?...KI#..!m..6v....M.%f..d,9...s"..#!......ri'..I.....5..;...d.}rt.I..1q..L..8......l.Z4.VV..5.J..C_.C..e.D...O..US...gf......H3Js.46{.[7BA6.drP...OC.[

Chrome Cache Entry: 711

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 15, 16-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	295
Entropy (8bit):	6.975307958372994
Encrypted:	false
SSDEEP:	6:6v/lhPLOzLMMDaUMir+kRaAotDyhKmqcw4tGS3Q4wu4Dy+lbp:6v/7DTka4r+kRadA4cw3S3Q4n4Dr
MD5:	D848A2953307AA510BDAD31F5BF84671
SHA1:	E9D6D8DAA9255F99E4E778FF4C4B47806BDB18C1
SHA-256:	7FD59024B6CA83F11F7A3448EC148309A13B705725716DF134F699E60A96EB1B
SHA-512:	338B5E0E93084FE0BE5A46E437AD6E7E3CD600444B26A62CD2908C01409D739FFDCD8C3DF5C4C948BE59C93866B5DEF5C4759636F149377385BC59F7C7684B3D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............kFI.....IDAT8.c8.....f.t.W(.tv....-;.....?'..Y_:X..n.s..a....X.....e.I...4...S.E......,.>...3oh`1.<L.&g..9 -..a.9`.X.,=.G..a..,D.W..Tv......-..rq;.d.aA..bt}. ....Y.r\......1.Q...)..f ....q%:.-.....Z..u...o.>...,1...qZ.K..8...^..Z ..J...2..^.......IEND.B`.

Chrome Cache Entry: 712

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	3406
Entropy (8bit):	7.9367112482669615
Encrypted:	false
SSDEEP:	96:GUWxpZIXRYhNWkhRtL5p2McK95cPuGjoMShOc:GUWxpZ+TWtLXP/cPBScc
MD5:	CF4DFED9E5BA2265269673036538FF5D
SHA1:	6D3F7802E4BC94647B38910CFFD6C698857FE3DF
SHA-256:	014CE3C0AD550D1C13E6E042F2F352C7C6BF7F28079DC04A0F6EFA7BA4BA44A8
SHA-512:	040B9E83D1930EB30DB7EF17C6E0049503C15CF65868FE350659E2E4315A1C1B50A071DA070E001200931D3B0F9DAD8B1F949FA2FD7F6EF0D5BD55568D0ADE86
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/images/sandiego/github-sync.png
Preview:	RIFFF...WEBPVP8L:.../....5...m..?..!"..mH....I._..!...EV.w).]....\|ww.]So.:(...q2..>.Mq...!.\..p.`.@H..q.....(..g.HiAcw..!).Fh.....k...i.& ..@H.l.m.m.m..u..&.....2R....c.m..x&;..&S.....#...#.X!...Ve..k..Y.....%..\|O.4..i[.+j.m.m.m.mw..{W.}..~.L.m.Yl^...}.(U+S.....jw.6..u..'.s....gd{.0vr5Z.Y..c'....6....].s...+......v.>..}..;.7..N..........6R.c....$QsL`.?..o.....Ex.....<.;....^....f...c.............~2..l6sl...Q.v.).....Ll...\|n.k..<A..m.D..........E.......D.e.X......c....6i.L..Qq......d..%.......H..).!.Q....Y..(OCO.w....d.....P..r^o.s..GS...B.....LT,Cf..T..o.$K...9..B...(..<.........]w.X..!.@;....!.H........s.s....S..4.D.C,(#.F....p.V.-.".D.......!+@.. .o......@.FuX.... .0M-F...-(Z> ....@.y...0%LJ..s.<.6qP./.vv.)......-;...G.\.B....=T....O!.1-...........5p..eH..H..D.@...80.T,A.#S..A.k6mp5.F-.%.-j....,.d.D..KYR...........B......l...U+MIpIx^h..cy.G.R.v...0..`.PPfVx...#.e}..+\|C...Q...7..../...;..T.(@.........-7..C.a...`...Bu.*P...>..Rku..\......

Chrome Cache Entry: 713

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (624), with no line terminators
Category:	downloaded
Size (bytes):	624
Entropy (8bit):	5.08357937709973
Encrypted:	false
SSDEEP:	12:kxP4L8BM4FoCpbWWGYsz8KBG6FkKOWGQL8BM4ZpbWWGZc+L8BM4ZeDWQ:kDB7Fo6Gf4KBG6FkKNGVBjGZqBtQ
MD5:	2D2E748FF881CF40A786D54F8D590552
SHA1:	FFF24FFE121DD664F42164CC466BF15045686703
SHA-256:	9FF367082BE1D94ABC86AD1E75FF921CC5D53846E860267372FADE66305F9120
SHA-512:	294D54527856E1E394889C217F5E6414069ADE375FA4007385C1048F020A2046333733FBFBE613C353179C835A5F4835475AABFE0F92A69DF2F588916653DE29
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/xbbe/pixel?d=CI2VFxDq2JIBGNGSv6IBMAE&v=APEucNWR6j7Zdo_ZWHJ1BAEVA_bD2i-y6soHEJkg2uUZkLhy8PuOAjjkq5YKWSti2AeaGMblvOf8Jhitztycsp1WAo5UjRXfCQ
Preview:	<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm" style="display:none;"/><img src="https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D" style="display:none;"/><img src="https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm&google_dbm" style="display:none;"/><img src="https://ib.adnxs.com/getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC}" style="display:none;"/></body></html>

Chrome Cache Entry: 714

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 715

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=ZDU5YzkzMjUtNDczOS0yOWRkLWRlNWUtNjI3ODJhYzIxN2E3
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 716

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 717

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	847
Entropy (8bit):	7.618655632754876
Encrypted:	false
SSDEEP:	12:6v/7gZLGWPXdx61RIobHARWNBA8SB/PLjNWg6W7BGT++8xIPrDttDtuSP74HJlod:tZyIXfYerQNBNqHos7QT7rcSaJlod
MD5:	AF73EBFFBC100E462657CD34741B9EEF
SHA1:	6B4FC4086551CA08E62DE97A1EE34DD2033D0794
SHA-256:	503EA224B8DEC3FAD3CD30A091DD5402DF4728E2D44F33A6F98155843D17B3A4
SHA-512:	1E35466278D5E37239889F02D4D793F3F5F6D95C8EA676D7999569A4B4A646322E7DEBEBCD5169BAA1C4A962D65FD24A161396F380D3B751D8A820BC10342CD5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`.......j....0PLTE..........................rrs__`NNN>>>333$$#...).\....tRNS..[z....IDATx...=o.@...J\|..n...C......,....E..k.0..."!.K......K.... V..2<.DA..lM..b.7?M..=..........#.q.(6r........f..?[......~.f...M....L&.........X......1..l....#..cS..oB.K.<+!..q"...1X#N`....l94P..p\.....4./.I;e....S.T=.2-(4..y...xD..{....wJ$`.s..M..pV...&.l5.S...x....,#q..e.fB...-o,.q%(...~..u....`.....5....l[j.4.:.....eeW.6.AN.;J.....oR4]=...h.M._..K?.[..8.o....}.~..)...~k...@.2.......Qno\0U..........[...A.V.<.<..p..`..NY[..=[;.e"...#...pu.eq=.......Fy..7B.q.\|ns.{...(jE..iN..L..nl.<LOSw3...Ri......SCK.....{O....Q.....G_.....J._.\|.M$`hA..g......Z..\|...=..X..........?%. .h#8.j:(....R...d......7.<".1!.M....q.$.....9 .m!X.....A..N...@i&.....j..$.....H-'`\|e...g..S..W....3..k._.^..`.......IEND.B`.

Chrome Cache Entry: 718

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 719

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34108, version 1.0
Category:	downloaded
Size (bytes):	34108
Entropy (8bit):	7.993096562158293
Encrypted:	true
SSDEEP:	768:xDa3S2Rdcc3/k1/3Sr8dgfqHwQGMIto3/fIpos4GbtJzxn:xu3SQ3e/3S43TUtoP4Ftn
MD5:	C15D33A9508923BE839D315A999AB9C7
SHA1:	D17F6E786A1464E13D4EC8E842F4EB121B103842
SHA-256:	65C99D3B9F1A1B905046E30D00A97F2D4D605E565C32917E7A89A35926E04B98
SHA-512:	959490E7AE26D4821170482D302E8772DD641FFBBE08CFEE47F3AA2D7B1126DCCD6DEC5F1448CA71A4A8602981966EF8790AE0077429857367A33718B5097D06
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
Preview:	wOF2.......<..........................................\..4?HVAR.t.`?STAT..'...J/<.....`..(..Z.0..,.6.$.... ..B..K..[.h...c.....nC .../.V.v..6>nT.R...b.8.@.......ON.ch.......k..."..".9..\D...JBJ."T%5...Z2..Q.)wJ...sA.h..m....n..F.....t..ig.=..y.s@............t..j.....n.h(...........N..)9.....v`\|z....8.7..kTq....^.......[.K.O..1ZP.....;.HP.......>..+..j:.V.......A......[.f.l..v`x....F_..vo...e....n...H..X.2.v}...(.1J...x.....}.....5.3.....?..?..7...S..0.9..C.0.M..M9..e.b....bc..b4.0"e.G.....XT....z............E'c.(."...x`].]..e.rQ..ye.z........kFh;....Y.yPt.._Q.._-q..mi.Og.W.-qUI...m5..r.mvA~o....S.f........s..ql.aXD...H..wy.P..k...f$.V^.2...8U{...f.....]]..G..cf.......D.c&B'S.2~..N..........R;..).5...../... 6....b....]d6."C..T..........OI\+V'...E.[.g.u.E....,!F.....*U.q. :x.s..1..C....H..S%..)....h......K..........pw.f...f.......an3....9....@......%.2.c.+........cXD..F...B.....0'...O.z8.B....4...\..&c...H....;..p....@.l...:........L..`...5..xo&.

Chrome Cache Entry: 720

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2226
Entropy (8bit):	4.422895719304049
Encrypted:	false
SSDEEP:	48:70tGd/QCQ3QeAOe6xR6PGfi2f5yESaosreaYNbPC3:7HQC/e6q6PMic5yEEaYNbPC3
MD5:	31967BF2C38D673D89E9E732EF8901E1
SHA1:	CA31DED33731D55A5B1A4F8CE57BA652D430E341
SHA-256:	B6DB7B821C2B32F9019A8B7C9D9B105BD558F5762873F25A94227E2B1F8B595B
SHA-512:	A8DAC1B01FE715526067CB0C9A46397AC609957B0E64DF24C2F120251A997D9AF2093C4C5BA3317BF7639F75ECC12675EC0551996C123F37977B6F3671FAACC1
Malicious:	false
Reputation:	low
URL:	https://c.sf-syn.com/conversion_outbound_tracker/sf
Preview:	<!DOCTYPE html>.<html>. <head>. <title>iframe</title>. <meta name="robots" content="noindex, follow"/>. .<script>. function getCookie(name) {. var v = document.cookie.match('(^\|;) ?' + name + '=([^;]*)(;\|$)');. result = v ? v[2] : null;.. if (!result) { // no cookie, look in localstorage. var rawLSObject = localStorage.getItem(name);. if (rawLSObject) {. var resObject = JSON.parse(rawLSObject);.. // enforce expiry. if (new Date().getTime() < Date.parse(resObject.expires)) {. result = resObject;. }. }. } else {. try { // maybe it's JSON, otherwise its an older string based cookie.. var parsed = JSON.parse(result);. result = parsed;. } catch (ex) {}. }.. return result;. }.. function setCookie(name, value, days, opts) {. var d = new Date;.

Chrome Cache Entry: 721

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=693098949688747066&google_hm=MjY4LTU2MS0zNzM2
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 722

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14814)
Category:	downloaded
Size (bytes):	14931
Entropy (8bit):	5.310369686474537
Encrypted:	false
SSDEEP:	384:ucJ8mveR3b1IFYLVjih7hqzMk55Zlh45mJdMF/RQiQzOZr:m2Wb1FL0h7hqzR55ZA5m3EyiQyZ
MD5:	DDA1C2D32F09EFA9F2A3CDD40D47BCF1
SHA1:	1A58C03E401ADEF7E69D3A8CDF2E8807E7C0B58F
SHA-256:	57C1D1B1B0B9057E20276BEAD208FA9C95048BFCE328B24C73C15D0C0E158E5D
SHA-512:	929D8EE1B2EDFE6D2A87D9FDE21E18EF4A57239F7BDA0DCB087161991436A63B49F4E04A193C0317A3D680B446DCB551F426744B9807CD7A6DD4AD7CED5F6802
Malicious:	false
Reputation:	low
URL:	https://cdn.ampproject.org/rtv/012402262017000/v0/amp-ad-exit-0.1.mjs
Preview:	;.(self.AMP=self.AMP\|\|[]).push({m:1,v:"2402262017000",n:"amp-ad-exit",ev:"0.1",l:!0,f:function(t,n){(()=>{var n,{isArray:e}=Array,{hasOwnProperty:i,toString:r}=Object.prototype;function s(t){const n=Object.getOwnPropertyDescriptor(t,"message");if(null!=n&&n.writable)return t;const{message:e,stack:i}=t,r=new Error(e);for(const n in t)r[n]=t[n];return r.stack=i,r}function o(t){let n=null,e="";for(const t of arguments)t instanceof Error&&!n?n=s(t):(e&&(e+=" "),e+=t);return n?e&&(n.message=e+": "+n.message):n=new Error(e),n}function c(t){var n,e;null===(n=(e=self).__AMP_REPORT_ERROR)\|\|void 0===n\|\|n.call(e,t)}function u(t){return JSON.parse(t)}var l=/(?:^[#?]?\|&)([^=&]+)(?:=([^&]*))?/g;function a(t,n=""){try{return decodeURIComponent(t)}catch(t){return n}}function f(t){const{location:n}=t\|\|self;return function(t){const n=function(t){const n=Object.create(null);return n}();if(!t)return n;let e;for(;e=l.exec(t);){const t=a(e[1],e[1]),i=e[2]?a(e[2].replace(/\+/g," "),e[2]):"";n[t]=i}return n}(

Chrome Cache Entry: 723

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9544
Entropy (8bit):	7.855943733952077
Encrypted:	false
SSDEEP:	192:olv8UXx4i9buSrvE+sa/1ndw4cPsrFaHmQ0aiBvPpsSFA8GXt:wRXx4abuoqWu6imQzmvJFA8G9
MD5:	88D76034ED6663F9D677252BC193B1A1
SHA1:	5185894038D3A786347CF50A54C9F3A5DECFE806
SHA-256:	1388305607BCA986530BF99122522E4D6F3DE33E6227DB0977F9018181CC9669
SHA-512:	2FDB8B5092B44E3E6AFB6353E093D3D07C2DCEA9090B69D63CF3CFF1B3BDB945154F2EC75EF41C7C04380950F27B280D6E7DF9C6525C0C9B00DD5AD38ECC0541
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/app/nel_img/17111
Preview:	RIFF@%..WEBPVP8L3%../w...M.m.6.3..?..7D..........._.Kh4@E..M.......%~N...j[{Q.......x..."IR..w.5..X...(.$9.\|...`.L.....C."I...x.<./..%`/.........@\|)...x...C......`.`..a.W.%..........%`........'....X.........O?@...}G..@.^`ccA..(.....(@2..B.+;xW.`..O.,L<..P...B1..m..?.m?.....Y..4....WJ...c..............m[.F..T...;..0.033...,233..4s..8fQU].$w..{.m[.mI.j.soa.1..(....K&$.,.....=G.-I.%I.m!.........q....S..O.......Hf............8;8ks.....?'.8.}OA...g.....m[1.>..$...!3...\.6`...-..k.$I.l.$!....:......w......&ZPDj@..L...!A....C.n.h..q....Mns3~2..w...Bk..0/~......A<..7..M..:o2".....1..c.......Z.z.O.).........L...............L..^..K<...x.u......6.l..&wy..o...nA.o./~...~...g....{..7x...P#f..1.<d.{.@...n.............7.....E.05#...6.(=v.0^P.)....@Y.[....R...VJY)...%.m.i;....Yb../....W.=...s..........b...FL.@.(ak...(...J...#.z..a.......82.`.V....UP'....@w2-.0......6(M.OWR.&.k.a=3T..M......9.P.$..L....r..F4t^.FlH.6JQ43*.{\..q>.....b...N9.......O..}.3.<..

Chrome Cache Entry: 724

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072971&val=71dcd657-b7ce-4e56-9064-0f83979f8fcb&ttd_puid=f9f340ef-8e4e-7779-cbbe-38c1e020d9c7&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 725

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (640), with no line terminators
Category:	downloaded
Size (bytes):	640
Entropy (8bit):	5.262670628246078
Encrypted:	false
SSDEEP:	12:kxP4L8BMnupbWWGBfJHJK8KBGmUSaOWGQL8BMHXVpbWWGeSHAg8KBGzOzyWQ:kDBtGlxKBGmUjNGVBQVGhmKBGy9Q
MD5:	55447927D3FFB85B3BB272439D5193B5
SHA1:	F6E7F405D56EE6F5CE5ECB53CF20561C18AA4C03
SHA-256:	D0E8821E889280C3B745B859E6B3971924723A4562BAC65BA8AA0FE44BFC83B2
SHA-512:	08FF6B68FFB0B869EBED5FC7ADEF5AAC38C6080E9D2710F55CEF5528DCF64289349573293B35EE6AEBA710DA9BECB1602E2C5552D9098AEAB14F08AC10FDDFD5
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/xbbe/pixel?d=CJfnugEQw7j0ARj888CDAjAB&v=APEucNUtRYcCTiUSaNym1risqulco6fsZINI35TLxttHiGkQZ9C38O-l2AZ3i-5nU8X5jCUabvkoQnUhZlvjaytYQqmWA5yVkA
Preview:	<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_dbm" style="display:none;"/><img src="https://us-u.openx.net/w/1.0/cm?id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&r=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dopenx%26google_hm%3D%7Bopenx_uuid_base64%7D" style="display:none;"/><img src="https://cm.g.doubleclick.net/pixel?google_nid=teadstv_dbm&google_cm&google_dbm" style="display:none;"/><img src="https://sync.teads.tv/um?eid=3&uid=&fb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dteadstv_dbm%26google_hm%3D%5BVID_B64%5D" style="display:none;"/></body></html>

Chrome Cache Entry: 726

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	33291
Entropy (8bit):	6.219867622987678
Encrypted:	false
SSDEEP:	768:bdDVSiizVSiiKbpR/pRmWrmcr1abtIK1mtCan12omRz4II+dmY:9VSZVSU33miv76W2wY
MD5:	99974CD272B5AF76809CBA03B21F5775
SHA1:	D0745DA07AB2574B26ED43C04845E3F95C3B9E16
SHA-256:	85F74524AAD765E4848897FFEF0D9E300DAFC39836C4C1BF2F56C6B4148EE224
SHA-512:	61D658BEF7A61451035AA00AB9313D1609F5AB82D636B94B5A08D490A52125FDABF514780DCDD75A80C5A2C5B7D602489D0B7D2A1542DDBE58688DDEFCBFD4A7
Malicious:	false
Reputation:	low
Preview:	{"/41014381/Sourceforge/SF_Temp5_300x250_A":["html",0,null,null,1,600,300,0,1,null,null,1,1,[["ID=2724af84f8bfb58b:T=1710158207:RT=1710158207:S=ALNI_MaxW7NgthkDtUlwPUPHKffHiGkgnw",1743854207,"/","sourceforge.net",1],["UID=00000dc71196e4e0:T=1710158207:RT=1710158207:S=ALNI_Ma7bWBepTm0Ik5Wr7Arq6uQ16XrFQ",1743854207,"/","sourceforge.net",2]],[138416297042],[6180654644],[2036965341],[1511469861],[151821],null,null,null,null,null,null,1,null,null,null,null,null,null,null,"CMr79OOT7IQDFUtPCAQdC28BQA",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"2",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,[["ID=8468e03910ab0fc5:T=1710158207:RT=1710158207:S=AA-AfjbobPCFpJDLr2Gq_mFt8gc3",1725710207,"/","sourceforge.net"]],[]]}.<!doctype html><html><head><script>var jscVersion = 'r20240306';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><div class="GoogleActiveViewInner

Chrome Cache Entry: 727

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsun6cSBAEbDh9rhZm-N9eWsgYLytxh8wdaT1UCzqt8Tdwpl7sywmPfcm6wAPgNUHlxNAujuIjJtxpmqsLUpb59IpLLUOgSM-8F8ESLQQk6Ogsx0FunBVgCRb2mTAvDWnVh2m5GQoTfvfZfOlSeYq0sCEBc7VCFzxtk&sig=Cg0ArKJSzJKQNP16BMKrEAE&id=lidar2&mcvt=1004&p=659,963,909,1263&mtos=0,1004,1004,1004,1004&tos=0,1004,0,0,0&v=20240306&bin=7&avms=nio&bs=0,0&mc=0.99&if=1&vu=1&app=0&itpl=3&adk=256309498&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=609100800&rst=1710158206363&rpt=1655&isd=0&lsd=0&met=mue&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 728

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34016)
Category:	downloaded
Size (bytes):	34175
Entropy (8bit):	5.431955415251275
Encrypted:	false
SSDEEP:	384:M4Kl6MxDt4MA5ENzwBHzbb/6VTzOjF9QwhrtE7cS/CRMzNajTv+i7EfSuKZDsLGY:bKlZNnJYrtE7cS/CRMzNaj/gKVspas
MD5:	DDFA4D854BC74E9334864C610A6B7F50
SHA1:	63F2C77069566087854350B42C78CC1B5BC6CD10
SHA-256:	825F6B61F96BC43809ABD30CAB948309377449C379A6F973C582F5D28BF267AB
SHA-512:	7948A1CAD7F88C2F6D59500BB6A0C719EE92A3B505E5E41A7945EE00AE8FFC7053BB6EA2E69F1113A8BC4A0920D57A3FBC0BEE5D4F7C1100CE34ED2E073E28A9
Malicious:	false
Reputation:	low
URL:	https://ml314.com/tag.aspx?1122024
Preview:	/! For license information please see tag.js.LICENSE.txt /./* Version: 2.6.1.139-ce78944 */.!function(){"use strict";var t={262:function(t,i,n){var e=n(158),u=n(553);e.Browser.prototype.createVisitation=function(t,i){var n=this;return new u.Visitation(t,i,(function(t,i){return n.storage.setItem(t,i)}),(function(t){return n.storage.getItem(t)}))}},334:function(t,i){Object.defineProperty(i,"t",{value:!0}),i.utSyncUrlLw=i.informerTag=i.delayTimer=i.mL314Tag=i.mL314EmailSync=i.iMBlackList=i.iMWhiteList=i.iMSyncUrl=i.eventCachePingPeriod=i.sessionExpiration=i.version=void 0,i.version="2.6.1.139",i.sessionExpiration=9e4,i.eventCachePingPeriod=15,i.iMSyncUrl="https://ml314.com/imsync.ashx?pi={pi}&data={data}",i.iMWhiteList="all",i.iMBlackList="",i.mL314EmailSync="https://ml314.com/etsync.ashx?eid={eid}&pub={pub}&adv={adv}&pi={pi}&clid={clid}&he={he}&dm={dm}&cb={random}",i.mL314Tag="https://ml314.com/utsync.ashx?pub={pub}&adv={adv}&et={et}&eid={eid}&ct=js&pi={pi}&fp={fp}&clid={clid}{consent}

Chrome Cache Entry: 729

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 730

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 731

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 360x720, components 3
Category:	downloaded
Size (bytes):	28779
Entropy (8bit):	7.968274695930844
Encrypted:	false
SSDEEP:	768:a/8zkalU7P6y9W7Z+URWHYjR+F5WecuLqGYvL9Sn2yv:a/8zLa7P6ysZdRmaR+Sho0Lwb
MD5:	593A808486F7316FF89139BC07BA5238
SHA1:	26CEEFB7AE289F55B6975E0D13A10351909C0195
SHA-256:	F89BFF9AA74E983B1547F9AC4CC3CBB0B984DBBF0B092F7D30D0414D68B5C33D
SHA-512:	CDF994EC9737CB724E903473F38567FA856394D7134DF6EA43F6B8BEF7146E347AB160D955BE781F8635F8DC03195797AEB3A9CC3636005E373AA6BEB1D7580A
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/daca_images/simgad/9050992702658218795?w=360&h=720&tw=1&q=75
Preview:	......JFIF..................................................."... ....+. $%(((..-1-&0"'(&...........'...'&&'(''&&&'&&'&&&''&&&&'&&&&&&&&'''&'&&&&&&&&&&&&&........h.."........................................S.........................!..1AQ"aq..2R..#3BTr......Sb......$s..5CUt.....46Dc...%................................8........................!.1AQ...."2Raq......#3..Bbr$S.............?...!...!...B.B.... .!...B.B.... .!...B.B.... .!...\........b..]Ho.55.......b..i.=.9.....=........`.>.J.......\|.]w..79U/f..).O.#n.....8...qP..[(..X.Z.m~.+j~....f.}..cW.{..z.H..7.gqN.^..L.OfN...O..[U......o.../..[..a..!.(.....}f.......n.#(,..T$D%H.D%B.P. .!....@.B,.,."...J..!.@.B.... ..l...!..%.VH....6..:....@.E.B.?]...+'a6.i=..*.../.K..\m...HT..h#t.I=...op.Y.]B1\.o...`.+i[f...yO$h....W..pN..]......4${....../..a.....M.^.....+Fb. ..t...QT.b..n<.`.6.P...sZ.......r.'..q..F.rxk._?..B..<..\|F&4..k@.H...g..s9.vX.4.s..>..H\^.cF.^$..tod.......,-..e..]o.A.u........Ou./rB..Fk......

Chrome Cache Entry: 732

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
URL:	https://ps.eyeota.net/match?gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&referrer_pid=r8hrb20&google_error=15
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 733

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	5802
Entropy (8bit):	7.867563310379998
Encrypted:	false
SSDEEP:	96:j/kCRnwHKO9javdI3PFCTeGN5mlJAbKiAdI56CMIbZYx8+Fw3BgiOhOM0bcvs1n4:jv1jO9jalqFsOjiAiZE8ow30OP4
MD5:	E2B1456664A5A75EA10D767CE3D4AB3E
SHA1:	9CAF5E347D53EF84977EDE82ECBBFD9971B5D4F9
SHA-256:	34834FD72209335CD4DBFFE5FB0FC5E934A3E438FD88C33C688FC205C059A3CC
SHA-512:	60BF05E16641470FCCF37DE4A2F268031541027A877AFB70CD4313E486601C84A8419BCB1EC41CDA1573844FE0B25E24A07DDC395E569038BA21348D50508BCD
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/app/nel_img/17615
Preview:	RIFF....WEBPVP8L..../w...M0h...e...?.k.".?..n8.Ez.^.P..Q...........I&..@.........l.IrT..G....h...$)R...q...[wO>1.$+V......GC.+Q_.G.....FG..+.P....^..o....0..+.g....).Pp...a.......N..d"VJ..$..f..b..P_4.5.....I....IA..)......L.P,...m..?.v.ADL.........4.{qtn.........I1.03.n~p.....+P.6..g!.qlyhEG.$G...=3....w....M.Sl#I.$.jw.._..t...x.m..m.J.}.K..s.....w.......5....q_.$..m.y.Zk...df..I...X.`..j...p?.m..m..R[....H.....0.C....t....s...\|z[..5Rb.vg%K...=.{.`.MN....(...Yb~...W.;....S...0?...m....00O..i....,...(...........`.........4.....9.5.....u..............;l..^.u>.#^.5.b.=>..xK.8.8..M>e.....A...y..4HH.Xb....1u."2....#.K...8...q..S.G.s+.cn'..'9..rd....[...MfJ.............E.8 .....1............Pl.....f...>=...\..(#.=LA.j6 .......?..,.32.a;.+2-.d@c\.FD.(.q.m.O....."...0\91"...89.(...u.......di`....X];....j1-O.].g=..GG...)..s..o=]......-{..o.o..[4(...}.t..{..~..\|....q.1......`...W,.S.w..g9....1.....Z.].fq..w...............\|OG..\|..c`J...q.p..Ax..S.h3

Chrome Cache Entry: 734

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2406)
Category:	downloaded
Size (bytes):	4204
Entropy (8bit):	5.403810384847462
Encrypted:	false
SSDEEP:	96:BdvzQY9V6QVWlP/Or3VazeP9WTBxj6kDxx1vbysf39O84UakyeUZlHjv:BdvMtlpW0eFWTflDBeslB4UakCjHjv
MD5:	F11E6C975BCBE61A9F6C220E243DE1F0
SHA1:	0CBAE8B4D775AAED9124E1AA4ED2D80B9860292A
SHA-256:	8C6B51A8608447AE95F811432FAB1D82A09415F8969365A02ABC851F74552553
SHA-512:	1E8208A665904953AAFDFB2DFE40ED256FFD2A7526CA749C9F0CB3690E67FF2EBF3FF379D1FB3B6F68CB99BBE25228A975AC089B21843861627F29B343DFFC07
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/js/car.js
Preview:	/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var e=this\|\|self,f=function(a){return a};/ . . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a){return Object.isFrozen(a)&&Object.isFrozen(a.raw)}function h(a){return-1===a.toString().indexOf("`")}const k=h(a=>a``)\|\|h(a=>a`\0`)\|\|h(a=>a`\n`)\|\|h(a=>a`\u0000`),l=g``&&g`\0`&&g`\n`&&g`\u0000`;var m;var p=class{constructor(a){if(n!==n)throw Error("TrustedResourceUrl is not meant to be built directly");this.l=a}toString(){return this.l+""}},n={},q=function(a){if(void 0===m){var d=null;var b=e.trustedTypes;if(b&&b.createPolicy)try{d=b.createPolicy("goog#html",{createHTML:f,createScript:f,createScriptURL:f})}catch(c){e.console&&e.console.error(c.message)}m=d}a=(d=m)?d.createScriptURL(a):a;return new p(a)};var t=class{constructor(a){if(r!==r)throw Error("SafeUrl is not meant to be built directly");this.j=a}toString(){return this.j.toString()}},r={};new t("about:invalid#zClosurez");new t("about:blank")

Chrome Cache Entry: 735

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://ml314.com/csync.ashx?fp=40dcaaf904223ef640b08777bb7ed3da08de2c0166ccb1ed6ddd6999579dd017f4cb09cee1a4f8eb&person_id=3642666937673580575&eid=50082
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 736

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 245x183, components 3
Category:	downloaded
Size (bytes):	13029
Entropy (8bit):	7.9596078219755295
Encrypted:	false
SSDEEP:	384:8Whnda3uCqrwlJBEL/mgk3hbahw4YcLNmQ:f2uCgwlJUmg6Ew4B
MD5:	08194EDEC6CB046B328A4CA991EEDA1D
SHA1:	1A57A2E51DE67AF1C023BCD04D3D9B75B9AD5C82
SHA-256:	06858A82C27A0DDC4CFEC6493B39AC61E7AC3AC888F1F0C63BD7734F751055A8
SHA-512:	153FB8E77C1449CC762278BE7F4485E90DEA9C449A383125F79222057FB2C3930AE60303A7CD6BA68E5EE5E97C0D460422D93DAAB6B806E87F9F5C1D4F0D921E
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/app/proj/docfetcher/screenshots/189585.jpg/245/183/1
Preview:	......JFIF............................................................!........."$".$................................................................................"..........1..............................................................-]S.....L.4...h.Z...Ef.1...+.y!."..!."..!."...q..:...u.}T....{..s-...%w........#f.....yA..3..2A)..3..m...X.(.u......r.?9s..s..;s.oG...R.9.NY[z....CdH..1.WO.)..d.M..OF,..4.J...P=<.b.o:v.\|.5v.R.F.9G...........'...}...f>Cr.'#IS6=...!U..Jk.[f\|...IoC.........'.e...9...]O.M...Y.L.:e....qk..'...B...2.k...{]\.Qd.v..~.....;..r.........m...V+p..[m!..s..N...2OH.B"P.;0.1..2..8.......8.].......~....jW..}1Z.Z.zA..J..+..z@...'......t.].f...o.9.~B...(..\V...../-.*..,...Hy...t.....A<..@.gO.........k...8.X....G-.l.R...0...nuBl.........vi!.;>r..:}vG]...o..C_...~.:..ed.}F7...V'..-....Y'.7.J.J.gWt9.B\|...O...Nwjb.f...?.[.Y.Z..E...6.k.......R...d.1....6.........L.fO@.P..."....z.x..............:r...9............................

Chrome Cache Entry: 737

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUmExltxlSle:JAle
MD5:	55FADE2068E7503EAE8D7DDF5EB6BD09
SHA1:	317496A096D6C86486A71D4521994BCD171A6BB3
SHA-256:	E586A84D8523747F42E510D78E141015B6424CF67D612854E892A7BCEDC8EC9E
SHA-512:	A9ADB9FEEA4BC14B9C34ED17CD30F8CB36DC686E9F69A292FE65BEBC195BE4714391FD98EC7B67BFD363FBBB6089C41A0B7CAB5130B50B461748E668CAC75621
Malicious:	false
Reputation:	low
URL:	https://s.tribalfusion.com/z/i.match?p=b6&u=&google_push=AXcoOmRF5W8NAr6bAj2leKfOVpf5YPzmwyGOBL4Qk8UWxtsoHp0JQQY85SL4-cQeNi9_rHcFCBXE2c5C6Ay7fe1qbbggKpd9tHB6SYPy500tMuwErDYeYvmQ-SgIpoMan23eFzYDHNVE2L_UTWrHWxf4SwM&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmRF5W8NAr6bAj2leKfOVpf5YPzmwyGOBL4Qk8UWxtsoHp0JQQY85SL4-cQeNi9_rHcFCBXE2c5C6Ay7fe1qbbggKpd9tHB6SYPy500tMuwErDYeYvmQ-SgIpoMan23eFzYDHNVE2L_UTWrHWxf4SwM%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 738

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	80
Entropy (8bit):	4.66845395770192
Encrypted:	false
SSDEEP:	3:HKAdsm2g5eETOwJetn:qAdOGeETfwt
MD5:	A3A73FB753E49BEE187AF1772D218358
SHA1:	936F6A02961D392C6C46041388FF24A569118E0C
SHA-256:	A3CF54F362FE526B1A100D761652A10963DDC469FDC032F0543F45A2FD499353
SHA-512:	6F675B9B759353A49DAAFB0DDCC4477E70A66099B9376300888B69A457B6568C028B51CEA3F23E49AF6A124A352642FFA7FB2838F34609F0F768E911C2D8B3DC
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlEMULOjL0Q9RIFDT0fUzwSLAnxm9dnyfhOJBIFDRGgIoISBQ0H9L0dEgUNHV7FvxIFDVcPUfASBQ1EukzS?alt=proto
Preview:	CgkKBw09H1M8GgAKLQoHDRGgIoIaAAoHDQf0vR0aAAoHDR1exb8aAAoHDVcPUfAaAAoHDUS6TNIaAA==

Chrome Cache Entry: 739

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	85
Entropy (8bit):	4.292908596521779
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+DtjyREWqWv+ndp:6v/lhPfkCDtmDV+dp
MD5:	5BEC6606B8392065F9DA9898CA6F7B14
SHA1:	73AC5B01B5E3293FB792179626E7F8369CDB944D
SHA-256:	ACCCC501AA6AFA3CFAC15E8DDCCF1561DEED2ED08C2F7D652ABBDBE9AA71609A
SHA-512:	36FEC10F71295203E59BCC52042EE2691E5DB51D26F6D76D4B19BFEDF4429FDE898C87ABC77CA29F6BB58E6217FF380F0650115C06395CB1DA270BD028C2CF80
Malicious:	false
Reputation:	low
URL:	https://sync-tm.everesttech.net/ct/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=&_test=Ze7xgAAAAwa1TAAh
Preview:	.PNG........IHDR.............%.V.....PLTE......U..~....IDATx.c`.......'......IEND.B`.

Chrome Cache Entry: 740

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://ads.stickyadstv.com/user-registering?dataProviderId=1025&userId=Ze7xfMAoIeEAAAzaAIdO4AAAEGAAAAAB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 741

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (30102), with no line terminators
Category:	downloaded
Size (bytes):	30102
Entropy (8bit):	5.329233569829746
Encrypted:	false
SSDEEP:	768:u3Uh0NEm1Wv8lKML3h8lKMLnWP1TCvu61Phq:CEmK8lKMLR8lKMLC1TCvVY
MD5:	C78AA89170DF3326C790C2E97DCAB5ED
SHA1:	115CF79E1BAA5DFFDF9020B9560EE13485488FA6
SHA-256:	55256BFAF64C963C998D6563FD535793838AC77229A4BA81DA8B5D818AF28EF4
SHA-512:	4F073F3856BE38C102313B10CC71CBAFDBF0DA3C084AEEB3A1C7886046F60C7FE8798E06A8C67EF3478788100E5FD37175D82350A52B74A821EBF0368D3D3C76
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/js/min/sf.sandiego-cmp-top.js?1709827391
Preview:	var bizx=window.bizx\|\|{};bizx.cmp={};bizx.cmp.ccpaInterstitialContent='<h2>YOUR PRIVACY CHOICES (DO NOT SELL/SHARE/TARGET)</h2><p>Under some U.S. Privacy Laws, consumers have the right to opt-out of processing of personal info for "targeted advertising," and activities that are classified as "sale" and/or "sharing." To submit an opt-out request that will apply to personal information collected by cookies and other tracking technologies ("cookie PI"), move the toggle below to the left and click "Confirm My Cookie PI Choice."<p>We will apply the opt-out to cookies that may implicate "sale", "sharing," or "targeted advertising." There are other cookies, such as essential cookies and other cookies operated by "service providers" or "processors" to which we do not apply the opt-out. You must exercise your preferences on each of our websites you visit, from each browser you use, and on each device that you use. If you clear or block cookies, your preferences will no longer be effective, and

Chrome Cache Entry: 742

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
URL:	https://rtb-csync.smartadserver.com/redir/?partnerid=76&partneruserid=&gdpr=0&gdpr_consent=&google_error=15
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 743

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://ml314.com/csync.ashx?fp=7822940101119878936&person_id=3642666937673580575&eid=2
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 744

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 745

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	163371
Entropy (8bit):	5.340762774200023
Encrypted:	false
SSDEEP:	768:O3Y3h3m3/3U3t3y393A3b3u3J3c30hHeH/H4HBHqHrH2HNH0HLHiHZHQHVL+LXLk:AK
MD5:	6E73E7E60FBFE6DCF0D40789DAB7BBF7
SHA1:	57BE761EBD5906BD83CFB48F5DAADA68B41B3F4B
SHA-256:	DACB8F5A6E0CC0C8B33CCBFB66E4C8B8DA6672076C3A1A911206D4781AAAB866
SHA-512:	46E25A567018819375F0A4FBCD0D2C5FEE459575D9B9D4ACA45989BA85C50B4356E9739ACF425693EE7F414A22A40C00EEC3F67421F99492C413C120297AF6C7
Malicious:	false
Reputation:	low
URL:	https://csync.smartadserver.com/diff/rtb/csync/TemplatePool.min.js
Preview:	var poolData={76:{2:{type:0,http:"https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=76&partneruserid=GOOGLE_HOSTED_SI&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmartrtb_dbm%26google_cm%26google_sc%26google_hm%3DSMART_USER_ID_B64",https:"https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=76&partneruserid=GOOGLE_HOSTED_SI&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmartrtb_dbm%26google_cm%26google_sc%26google_hm%3DSMART_USER_ID_B64",priority:150,isGdprSupported:true,gdprRule:1,vendorId:755},3:{type:0,http:"https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=76&partneruserid=GOOGLE_HOSTED_SI&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmartrtb_dbm%26google_cm%26google_sc%26google_hm%3DSMART_USER_ID_B64",https:"https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=76&partneruserid=GOOGLE_HOSTED_SI&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmartrtb_dbm%26google_c

Chrome Cache Entry: 746

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 747

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1982)
Category:	downloaded
Size (bytes):	30883
Entropy (8bit):	5.457473680885561
Encrypted:	false
SSDEEP:	768:wl3gja6nuEgyKdTZNQpoRGOpX/8Qkcm1fVa:wlQja6u7dTZNLWQkcm1fc
MD5:	55DA0AB2FD9D507257D0BA3918CA5017
SHA1:	77C4C2984815F03B1267840A44A4081B279FBE14
SHA-256:	A7D7CCD1B1B1900C730B760FA8B3B5748A073ECDEDBD7710E04FBF03CD42AFD8
SHA-512:	D435872517BB1FE77B5C0898A087219782EF07F2D52C59BE278058E9D18F0717D7DFFBE03B748E0EF8B0E02970EF7C3C6E09DFF34FEE659AD390CA56C0D82ACB
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/r20240306/r20110914/abg_lite.js
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var p=ca(this);function r(a,b){if(b)a:{var c=p;a=a.split(".");for(var d=0;d<a.length-1;d++){var f=a[d];if(!(f in c))break a;c=c[f]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}} .function da(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}var ea="function"==typeof Obj

Chrome Cache Entry: 748

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2811
Entropy (8bit):	7.915752719566875
Encrypted:	false
SSDEEP:	48:QGvpswGTelpeXSurJ1H/+TXg3CNLBWMmC84S56FYxcw4OcwyqWuFaSs3A8nebeS:fswurJ1G7g3yYW84GMwfcp8abQ8ebeS
MD5:	30BBF9121A74EBF43A13B9BA11910761
SHA1:	8FA6CF2A4EA001846F0B22C2E697AB2627117AE6
SHA-256:	D7374E64B274AD7F4BA2E6D37D487797C444D57CE58CC7ADE20A2ADB170DB47E
SHA-512:	0B2DDEA766DD5B6666862515D95714453B49B35B638785495DABB5F877E1E0021E924449C801F6DA8D747A5DC1867B1D621319C0949C80D859062574E76BD981
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......IDATx....]E.....{......Zj.E..-.....1....A.D!...D.%.A.>..\|C!.E). ..."...Z.RJ..Z.v...qf.gr3....[...d...ff.......9Y.....H...u...^...o.r.0.0.3..k..}.....?..........p.w.,..X...e..C9v._;^.,.`X29.[.........[q...@...4.(:.....K..K.\|...U...y....?..?.y..>...\|.......]....#..(.u.&v.Pe.......'..1w.h.kZ.S[.s.'..Rai.;...+..@.!.Z.ek)..R.n`<..'..y.....YN.6......f.q.g.s...%..V^y1.8.GH..3..v..4.sT...........J.[...,_.:.m..'.s.39...9y.....J.#...8+T...l.`s..../'...5zz..C.j7.......oJ3........R..-..a.`.(.J.H.r..A.jb.....A.b9...<.N..97oa...Z.S.....p.L..?].]`'P9$..g..v....R.ngc..:.0J....V.:..%k)y....T...\.e..h4/.vG...iZ.S.?a......2...7]...+...x..&.~:7.z..k...?>.+..P......#N\|../.W.....#-..}..=...i...FO.........[.Y..s....2Pz[.h-..2=...\...{.....`..(..j`E...@....pW.>..c.......O.].s;...............g.....;.......(.......^Ga...u.w(...Y.J.6.AD...P..q..$.)(...w.7.q.#.....s...~......aB..F..q.......7.x.Y......W)

Chrome Cache Entry: 749

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (33509)
Category:	downloaded
Size (bytes):	114481
Entropy (8bit):	5.322164754748963
Encrypted:	false
SSDEEP:	1536:GLaBb25snILR334D+wmke/IuzmtfVH+/0MfXhM5YD8rsNMKBtNquE6LbEaDfgu4R:Th0ie33A+Rmtf1ZmxM2tvE6CB3
MD5:	80F2419F055A74A6B18626ACA93E971F
SHA1:	4553C6B2DEB733BC2D53785591DBD1F8C97DEFA4
SHA-256:	B7547012DE798D3F335199320469E3D42C57BA965D790E62BBC6FA223230DD0F
SHA-512:	541CC26A3D00186567DCD0457F78D520AE90748A786B9BE64222C8D78E8A72BC030894958070913CF291EDC78950848739452A59DF7B3B002D47C96425C3D0B3
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/js/min/sf.sandiego-base.js?1709827391
Preview:	function initFancyStickify(){$(function(){SF.Ads.fancyStickify=new SF.FancyStickify($(".sticky"),{waitForGoneEls:".project-masthead .buttons, .popular-cards .projects-inner "});SF.Ads.fancyStickify.init();if(SF.Ads.acceptable_ads_active){SF.Ads.fancyStickify.unstickLeaderAd()}})}bizx.cmp.ifConsent("",["all","google-ads"],function(){initFancyStickify()});document.addEventListener("touchstart",function(){},false);$(".search-toggle").on("click",function(){$(".search").toggleClass("sticky-search-open");$(".search-toggle-when-stuck").toggleClass("sticky-search-open");$(".search input").trigger("focus")});$("select.use-placeholder-color").on("change",function(){$(this).toggleClass("first-option-selected",this.value==="")}).trigger("change");function escape_html(a){return $("<i></i>").text(a).html()}$(function(){var c="directory_fixed_suggestions"+(SF.variant==="sd"?"_slash":"");var i=SF.cdn+"/app/"+c+"/?v2&"+(new Date()).toISOString().slice(0,10);var l=$(".typeahead__container input[name=q]"

Chrome Cache Entry: 750

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5953
Entropy (8bit):	7.888402967533403
Encrypted:	false
SSDEEP:	96:LtI7OgIDY/Ecznxu1nfzJfPddu2B4wP/AtpMfanfVJTNEY709PkfsTvXw2k2R5jR:RI7moEGxAfz/dhlXAtpAwfND709Pbw23
MD5:	D675694AB4D4D2EB56CCA854C25D9C36
SHA1:	34174B9397A3CB289F892F1F98CCC51A63698360
SHA-256:	49B19F7F2D3D0FC9D2270CD1EBD79D468CA86CF308F33B063595863E3F392E98
SHA-512:	9E70CBA14997AA8DB5BA3F5B1FDC7572E37660BD0F16A9B631159E0C974C017EB2DBEAC83EC9A2969AD14DE9F5A27DE041CF0DCECFF29596A401D0C94C1EA422
Malicious:	false
Reputation:	low
URL:	https://secure.flashtalking.com/oba/icon/consumer-privacy-logo.png
Preview:	.PNG........IHDR...@...@......iq.....tEXtSoftware.Adobe ImageReadyq.e<...uiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:f41ac723-a694-47c7-9df0-dfae7a91a527" xmpMM:DocumentID="xmp.did:AC4CB3765F4311EBA942D2676CB01564" xmpMM:InstanceID="xmp.iid:AC4CB3755F4311EBA942D2676CB01564" xmp:CreatorTool="Adobe Photoshop 22.0 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4e3f69f5-bc93-4be8-b90a-b6fa44013720" stRef:documentID="xmp.did:f41ac723-a694-47c7-9df0-dfae7a91a527"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......bIDATx..[.T......CG@.D.E..B4*

Chrome Cache Entry: 751

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjstwkA5mA4enir79K5InlbZoYPUrC5szq-A0TIs2yDsGWp13MvItIdwuRLPf-9Ub9zioIlGpBcZ04OVxVX6bPBYXYc2LXTGLCiaB37QWjPSagTETIIOkfGPhTrKkYv-AK9jIZC2whV5nlCWU_S7FDP8bfbmf7PrtZy4&sai=AMfl-YQyvIuNrmD_OMDJimmze3JJ4S4p3Pvd8HprQnWStGYxSKXJAJFcp1_ZsyvcCqMO5FS3DStwp2u4uNqpwTr1EYSFeYjYziiIPF4NCi4hoyB_n06r_W9-nBIzSi2mqWB6vbBJblpxlYBcgdtFrWpSDQ&sig=Cg0ArKJSzHWmQaCGA6qnEAE&cid=CAQSTwB7FLtqPhA9c5YZoZClQyaBB5lM3ds9MV3kUSsfFgOtCEycw1VafubZ34hGZdbkA2eljCz1rdBycOj5pT02WHyYUgd-0CWOmX1aor4ElHUYAQ&id=ampim&o=0,251&d=970,250&ss=1280,1024&bs=970,250&mcvt=1010&mtos=0,0,0,1010,1010&tos=0,0,0,1010,0&tfs=2071&tls=3081&g=100&h=100&tt=3081&r=v&avms=ampa&uap=Windows&uapv=10.0.0&uaa=x86&uam=&uafv=117.0.5938.132&uab=64&uafvl=%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D&uaw=false&adk=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 752

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 753

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://ad-delivery.net/px.gif?ch=2
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 754

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	17
Entropy (8bit):	3.734521664779752
Encrypted:	false
SSDEEP:	3:gCtwn:l2
MD5:	A54A440C7EED0A7B3E78E6B985E12FEE
SHA1:	92EF2F2008EBBC5635B71F5D6C9831C5F2F4514F
SHA-256:	62CE950AD0D7F664B316B4253BBC993BF0BF8310970F64B150FDA6F1FA59DFEA
SHA-512:	F82E417DFAA9DAAE2A74DE3564D9DF703E4A2849D60752F6A9C4C2C5053CD72D3F5ED036EF683CA586CE17D7A2DA3E9D3DA6311560296929C70B23BC05A57631
Malicious:	false
Reputation:	low
URL:	https://ml314.com/imsync.ashx?pi=3642666937673580575&data=eyJwaCI6NDc4MSwid2giOjkwNywidGJzIjowLCJkdCI6MTUsInBpZCI6IjE3MTAxNTgyNDA1NjVfNmlxOTR0aWV3Iiwic2QiOjkwN30%3D
Preview:	_ml.setIM(false);

Chrome Cache Entry: 755

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65531), with no line terminators
Category:	downloaded
Size (bytes):	400886
Entropy (8bit):	5.058847786917861
Encrypted:	false
SSDEEP:	3072:4SbUcyJAdhJFKareOlk1wZmgd22uAre9QL5anIz:DKareOlk1CuAre9QL5SIz
MD5:	406825E8338256F85F3F1AB9DED2C7B9
SHA1:	3251AF16E499CB84D51F174816AB223D75F569B0
SHA-256:	3ADC837D28469A99F2A7E8031DA8851A2EDBBD88F5597099852EB1429488177D
SHA-512:	E8FC8CA90B7BAADC5B352820C9DAB718557117D62B47DDEAF7BF76C0017F0C7ABC1AF0DDF64BB15BFE6B67AC22EFE8269164B90DF7D1661DA8910029F0B5A5AB
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/css/sandiego.css?1709827391
Preview:	.@media print, screen and (min-width: 40em){.reveal,.reveal.tiny,.reveal.small,.reveal.large{right:auto;left:auto;margin:0 auto}}/! normalize-scss \| MIT/GPLv2 License \| bit.ly/normalize-scss /html{font-family:sans-serif;line-height:1.15;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,footer,header,.as-header,nav,section{display:block}h1{font-size:2em;margin:0.67em 0}figcaption,figure{display:block}figure{margin:1em 40px}hr{box-sizing:content-box;height:0;overflow:visible}main{display:block}pre{font-family:monospace, monospace;font-size:1em}a{background-color:transparent;-webkit-text-decoration-skip:objects}a:active,a:hover{outline-width:0}abbr[title]{border-bottom:none;text-decoration:underline;text-decoration:underline dotted}b,strong{font-weight:inherit}b,strong{font-weight:bolder}code,kbd,samp{font-family:monospace, monospace;font-size:1em}dfn{font-style:italic}mark{background-color:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;lin

Chrome Cache Entry: 756

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 245x183, components 3
Category:	dropped
Size (bytes):	13399
Entropy (8bit):	7.946841236815784
Encrypted:	false
SSDEEP:	192:Y0jjGrXllcYC1kb8UogYIn3Mfno1gFUJkB9ddZ+xDMWZxbChc7RjRypjEDlyQD4:dar1Hakb8UogYI3Mfnods+xAo9yV6lTM
MD5:	B3985BA70C15EF4E59FA8DBA76939996
SHA1:	91F35957C1D97B6D6DCEF2148FD5BFF818489A52
SHA-256:	3A96BD7CBB48F459527B80C1206DC9438D66FC48AA0FBCBCDD3E2D2C57C7EC65
SHA-512:	FB383F5282B4364DCA002E524C3899E3FD575EDE96B66855EFA84A5A0340E78CE939624EB00F0F5B15F9B44EE46F4F2C34C77C394A10D5E2BE0CA33EDF11F4CF
Malicious:	false
Reputation:	low
Preview:	......JFIF............................................................!........."$".$................................................................................"..........2...............................................................R.;.jS.U+"Z2U.2...I.....zY....7..pi7..[.Y.uO:.*.n...7..W..e.r..?.c2..N.3R.fjAl.H-....ug.XO..j6.64&.`..\...K..3G..eD.....x.vNm.v.s.Y.C.>-.....n....}9..Rb.h.....V1A...P..r34..R.=v...U..\.E.SF4.Vf....".%.}B.M.Rp9.M.Xc..[../C....Y..,....KU#..2u?L.'..~...L.5.....4.'.D.g."..V..&.I....c!...d...KUS....>r..zlS..k..&j...T.....7]~p.".#...}......JZ.@..q...l....d.k...E....N.6.......9....oJ.]...@.g...V... ....l.7...cU3.H..)..2.Q].&...........g.m.....0...w..GkxL.H..k...yU.SI~.F;A.h.........=..g..A.6..-...#I...m6Ec.dSZ.inU.\U..i..9.1c.2%.........O.`j.85+..w..\|c.V.[.;\|if....&.e..=.ezk@L.........HA4...d&..I.^dR.`.l.7.<..................(`^....-...........................!4.."13B 0#A%2@b...........V$..eUq.B4.L'$(..I.F.2.. .]..B.VR.a

Chrome Cache Entry: 757

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 758

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=71dcd657-b7ce-4e56-9064-0f83979f8fcb&ttd_puid=3d92896e-6439-4f25-b0dc-753e207e1323%2C%2C
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 759

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 760

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1731)
Category:	downloaded
Size (bytes):	1780
Entropy (8bit):	5.51054249360988
Encrypted:	false
SSDEEP:	48:Z/2aPJsjw+edBaVfZzmtubdyeqFIBuz12r5Uw:tFJcZoapOubQecB2P
MD5:	D1C35163DD934DFC7D51A5662EA52222
SHA1:	0482A5D9AF7B84A933092CB70649B114604E11AA
SHA-256:	B94AE01BA7AB0A782315780FCBFB70FE987F46CE5183674FDC8E7168042B8021
SHA-512:	056C0A1873ED6CDB3D84C142A6840B00A69E2E68E73B242EF1B6D32F3D9902D04A182425ACB263CEFD95E08AB40D4C1BA38CE1BFC32B87F4952A8DD178494269
Malicious:	false
Reputation:	low
URL:	https://tag.crsspxl.com/s1.js?d=2396&cb=1710158221751
Preview:	var cp_C4w1ldN2d9PmVrkN=cp_C4w1ldN2d9PmVrkN\|\|{};.try{(function(){var d;try{d=top.document}catch(e0){try{d=document}catch(e){}}function _e(c,m){}function crsspxl(z){if(d.body==null\|\|typeof d.body=="undefined"){if(z<2500){var rec=function(){crsspxl(z*2)};setTimeout(rec,z)}}else{var l="https://tag.crsspxl.com/s2.html?d=2396",i,j;try{var r=d?d.referrer:false;r=encodeURIComponent(r);var a,f,q,e;if(r)l+="&r="+r}catch(e1){_e(0,e1);}var t=encodeURIComponent(d.title);l+="&t="+t;var u=encodeURIComponent(d.URL);l+="&u="+u;try{var s=d.querySelectorAll(".small-12.medium-5.columns");var b2="";for(j in s)b2+=" "+(s[j].innerText\|\|s[j].textContent?s[j].innerText?s[j].innerText.substring(0,400):s[j].textContent.substring(0,400):"");b2=b2.replace(/[\t\r\n]/g,"");b2=encodeURIComponent(b2+" ");l+="&b2="+b2}catch(e3){_e(2,e3);}try{if(cp_C4w1ldN2d9PmVrkN.dg1\|\|cp_C4w1ldN2d9PmVrkN.dg2){l+=cp_C4w1ldN2d9PmVrkN.dg1?"&dg1="+cp_C4w1ldN2d9PmVrkN.dg1:"";l+=cp_C4w1ldN2d9PmVrkN.dg2?"&dg2="+cp_C4w1ldN2d9PmVrkN.dg2:""}}c

Chrome Cache Entry: 761

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	232
Entropy (8bit):	5.213835238881004
Encrypted:	false
SSDEEP:	6:qATlmiDIYMCOLDyxvihq/Ur3Kas/StT0Fs54WZmFrn1GBSnKvW:qAT8Z7qZi7r3NSSWFrS2nnKvW
MD5:	86BAF1E428A03FBD229AE1C0F8FFE0F3
SHA1:	9680B948697580090B7F8E9CBCE7579FA4041B24
SHA-256:	9686C71DD70F3D092DA559A7266873D82F5D34DFDE5129938DAA4580C4216BFC
SHA-512:	1EBBD79CAC55BD952648BDCFE40AAFA2CC54F725680D50317E51EB02D5247035EBA8DD44476DD2377CEF4E66017F1F8844F4C5E1A5ED106338B9AED9A5224A10
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlEMULOjL0Q9RIFDT0fUzwSTwnlH7YLhO9yXhIFDYOoWz0SBQ2gedmmEgUNVbv1bxIFDZRU-s8SBQ10y4ycEgUNU_J1YRIFDWdXYzwSBQ0vahE1EgUNkgVUzhIFDbpzzqUSLAm-cF-e-KWj6xIFDQdpPHESBQ0ow9bfEgUNzJUGzBIFDWCxGewSBQ2neK9L?alt=proto
Preview:	CgkKBw09H1M8GgAKcgoLDYOoWz0aBAgJGAEKCw2gedmmGgQIJBgBCgcNVbv1bxoACgsNlFT6zxoECAcYAQoLDXTLjJwaBAgNGAEKCw1T8nVhGgQIDRgBCgcNZ1djPBoACgcNL2oRNRoACgsNkgVUzhoECDwYAQoHDbpzzqUaAAotCgcNB2k8cRoACgcNKMPW3xoACgcNzJUGzBoACgcNYLEZ7BoACgcNp3ivSxoA

Chrome Cache Entry: 762

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	8112
Entropy (8bit):	5.109122662174101
Encrypted:	false
SSDEEP:	192:TCYatteasi3Bhy5VBA5gtgq/ILBYce7nalVMaFnYI2mk7qs/ztO9QX:TCYaq6/QVeoc3f59A
MD5:	31F462DDB36CD66D4B23BF0453883FD2
SHA1:	0BA378A4C0BB1973627FE17ED5DDCF5C35BB63D3
SHA-256:	2C7424696C9AC1192A8CEA836A7FAAAAEC38BFA539B23DEF9A340E22821EB5E6
SHA-512:	93AAF2EAA77B5F6E5A56E9346529ECE1B3ACBACB4A4665490A7A12B0BE3C90680D0E50C0CFDB75DCBB54FABBDD8844C987B117B22712FB66C77E806CEA320BE9
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/index.html?ev=01_250
Preview:	<!DOCTYPE html>.<html>..<head>...<meta charset="UTF-8">...<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">...<meta name="authoring-tool" content="Adobe_Animate_CC">...<title>index - 300 x 250</title>...<meta name="ad.size" content="width=300,height=250">...<meta name="viewport" content="width=device-width,initial-scale=1,user-scalable=no">...<script type="text/javascript">var clickTag = "https://www.godaddy.com/";</script>. write your code here -->.<script src="https://code.createjs.com/1.0.0/createjs.min.js"></script>.<script src="index.js?1708393659280"></script>...<script>..// start script *******...var canvas, stage, exportRoot, anim_container, dom_overlay_container, fnStartAnimation;...function init() {....canvas = document.getElementById("canvas");....anim_container = document.getElementById("animation_container");....dom_overlay_container = document.getElementById("dom_overlay_container");..var comp=AdobeAn.getComposition("C617512025DE43EF9BA8B74025A6BF5F");..v

Chrome Cache Entry: 763

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.200601260429725
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM09/Woz59tVp:6v/lhPfZM09tzjTp
MD5:	C4A2B870062C2BB98C500BC1526C0498
SHA1:	528666CCDB12997358077BC8FCDBFB6B825C7788
SHA-256:	2AA4FA20701CDD6D8D56046069001186B5267E3EE7D0EF618AD2F4A683723E11
SHA-512:	2F1A3ABCD12125F7EF18D61A960901C0FD6F82DD02EA2B8041859E6D5F0A7F08DB17CC110DC6D8A3F7D0D1BA790C4BCCA2506D3C60EDFEB5CB29433E9F4F762E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................IDATx.c`...............IEND.B`.

Chrome Cache Entry: 764

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 765

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://ad-delivery.net/px.gif?ch=1&e=0.8932098781094919
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 766

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUmExltxlSle:JAle
MD5:	55FADE2068E7503EAE8D7DDF5EB6BD09
SHA1:	317496A096D6C86486A71D4521994BCD171A6BB3
SHA-256:	E586A84D8523747F42E510D78E141015B6424CF67D612854E892A7BCEDC8EC9E
SHA-512:	A9ADB9FEEA4BC14B9C34ED17CD30F8CB36DC686E9F69A292FE65BEBC195BE4714391FD98EC7B67BFD363FBBB6089C41A0B7CAB5130B50B461748E668CAC75621
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 767

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=smart_adserver_eb&google_hm=MTg5OTUwNTg5MDU5NDU2NTI0OA==&gdpr=0&gdpr_consent=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 768

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=41&external_user_id=70a98560-df9e-11ee-9b1b-8fc11e983897
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 769

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	15070
Entropy (8bit):	7.982343741819736
Encrypted:	false
SSDEEP:	384:oObfOPbwR6VjIJ1TNAaSL++VJKJdWS2UTbQ9BXWQTkL86IbL:o6mPbwqIXTOaS/KuS2UQzW4W86QL
MD5:	FED6936F4F6C8ED19AEF7F5FDA4D10C0
SHA1:	8A1F022C03CCBE91AFECD8328E1DD31BAEBB95A9
SHA-256:	CDA118114B8D37A33E26D8865001AF7A7D5BADED23D359CBBD69ECB20F9E3383
SHA-512:	3C63093D4AAB429D911B12054F4C39320DBD50D22AE43A6E43E65C4322EDF12E8D3D1A09BC0A8AB95A73E617B5DE18469B69F84C333B493B51C819994AFEED94
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x...........:.IDATx..XiS#......q2..$..g......T.I.aq`<...C..f.w.b.;b................y.]j!..\|....:}.}...{oKsO..;.....;.............A$.5r....h.P..CW.09....w........bp..f...A.\.0..u."^.Sn..0H.H\.o.$.U.M........M...a.....f..8.d.E.}..h.8p..%...(W...1Fk....(...f..9.C/8.D.'R........#.......^jbt...%Z1.t...\.O-.+`.%..c.L.Mc.3.~.e.X....s.x.$......o.h..h.XL..C3......F\.......".q.=....p.<.J...>.t.$.....4.,..+k.###ccc...$n....@`bb..&r...F..uxxH..8.N&&......,.x.......l.Z.H.........n..a.Ya{&2.1..w.....B...W;......x:X.../..^.o...SU..\|%BA../..CQ.3.l.8..U...s..3..El.c,.S../.....2..."S...........G.h..U.bsB.xL...o.j.t....i....0??.\|\|\UU...9....s.......B.....NNN.-.Kkk.S.....\SA....L&.......knn.z.<..]]...-......S..r..KS......sX.....=...cp...>..#....S...`..\.......I....{.S........2.P....U ...i#.D....m.1.h4TD.Z....f.K....hM...H.......#..........---.V......2.VW........xI.+*.T..\|.533CC5N...g..l6..G ....^G..q... .O.<...#..g8.5..J.........6c8..lL......

Chrome Cache Entry: 770

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=inmobi_pte_limited&google_hm=MmQ1ZmE4NTctZmI4OS00OTMxLTg4YjAtZTk0Y2NmYWJlNWYz&google_push=AXcoOmQny6gEmUwwlXEmKdtKfIyWGhNI6n3SRys3-BbkXIgyrILVnTvpg25qg3NJ89B8eCcMX3P_yEXuJzMsLBFFELaQ1UYMLaoto6md2GxB2gDdVn809OjgPMPS8Iqao_7l5EdgIfc8s6WrBNWUj00eli0
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 771

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4216
Entropy (8bit):	5.65912452648511
Encrypted:	false
SSDEEP:	96:8OwTjD4MSw9Ccr/CQZ81tcpZRFWJbb4qpRVmnEA:8OwTH4MSw9L/ze1tcpYJbb/rmnEA
MD5:	DA09F652813942217A9E3D4F95EDDDB7
SHA1:	2044586D0B72921DD93D7EA73A2C3ECFB2CDA6E0
SHA-256:	43384E0AB44F21AF4AAFC350FD1C9C2CD67A14108D0C747D2EF3E9FE43FC1334
SHA-512:	66FFDF30FF200F156F7C2EAA8B1655C04C66E1A57AA8717945F7FA9F9408B5C25922FCADD242CD06AEB93072F75D9A6584E6A622B629DC229CA4988816D6A753
Malicious:	false
Reputation:	low
URL:	https://agen-assets.ftstatic.com/display/8065398/4362981.json
Preview:	{"id":37220607,"timeStamp":"2024-02-13T20:31:15+0000","altImageUrl":"https://servedby.flashtalking.com/click/8/225291;8065398;4362981;210;[FT_CONFID]/?g=[FT_GUID]&random=181239.11554942574&ft_width=300&ft_height=250&url=https://www.adobe.com/acrobat/free-trial-download.html?sdid=XFWLHCQF&mv=display&mv2=display","encodeClickCount":0,"loadMethod":"quickload","baggyFrameLimit":15,"zIndex":77000,"pushdownIncrement":0,"isAttachToBody":false,"isCenterAd":false,"isPoliteLoad":false,"isForceBackup":false,"isIframeBusting":false,"creative":{"id":4362981,"name":"FY23Q3_DC_AcrobatDC_AcrobatDC_us_en_Daddy-DIY-eSignatures-ACQ_ST_300x250.jpg","width":300,"height":250,"expandedWidth":0,"expandedHeight":0,"adType":"altimage","isInstantAd":false,"apiVersion":null,"htmlFile":null,"creativeLibrary":{"id":116264},"blockBrowsers":null,"baseAsset":{"host":"https://cdn.flashtalking.com","path":"/116264/4362981/","file":"FY23Q3_DC_AcrobatDC_AcrobatDC_us_en_Daddy-DIY-eSignatures-ACQ_ST_300x250.jpg"}},"placemen

Chrome Cache Entry: 772

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 48x48, components 3
Category:	downloaded
Size (bytes):	1010
Entropy (8bit):	7.181958704387731
Encrypted:	false
SSDEEP:	24:a9YM9vf3qAZYABWEE5mD0oozbjxa96qjmvRS:a9YM1aCnWEX0ZTK68mvE
MD5:	5F025065D88AA2530207ACA47493EDB3
SHA1:	1F8C7C44F239D3F0D866E0C13B6A6D24A4E17502
SHA-256:	BA4AC5814B0132366B4F64FEB1F033739010166C7A26176E2B1190D021752FB2
SHA-512:	207F3DADCE06408DB0FC869B423246DC7D200E5F9B917810C0DE8C29041A0A5248DAFF0224CD218CAC019585212BBC6B96448BF2DFE84BA8F24BC2A988B22281
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/allura/p/nikkhokkho/icon?1623177380
Preview:	......JFIF................................................. $.' ",#..(7),01444.'9=82<.342...........2!.!22222222222222222222222222222222222222222222222222......0.0.."........../...........................................................U..i..._9&..'.l...=i8R.R\|DT....r>Vh....]5......6.........................!1A.."Qa..q..23b....#$BS...........?.V..+..?z.k.*.X@^..W. m.d.&.._i..=.c.........=.o."..L..4..%...}.....S...d..m.t.O...9.Q.W.>..Bg......8.....We.....S..X.X..r..,.-..<}......u.4.F.G7X.o.{;..]kS..[K.\.6..s..y..:.u~{......l.Ll..v..".[.r..e.]...9..=.ueh..l.h...(....r.~uw...G...[h..v.....V.h.~.n...$.@...b....R.Ep.....^..g..?.?...Lf..i.PA.yzp.w.{,.Z....._.[,.,.......PZ-.i.J.cX.dg89.j..I_:...a.a..B...~1 .MY\Iez.<y0....Z}.?.Ub3..Z..@..!A......s4.w. ..n<^u. 7....~.=.?.%.>6B..C.[....;..,4b5\.9....^6...)tc+...tHch....v.82./.k:5....4!....W...........................!1........?...Z+.o..,m-..iN..(.[1..J.............................!"1........?..=.H.....F.0iu."h..-..

Chrome Cache Entry: 773

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=162538
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 774

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 775

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 776

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	49503
Entropy (8bit):	5.941353707590405
Encrypted:	false
SSDEEP:	768:/WPkXYFyBN8vrlouON1XxN1Xg74zN1XezT:/yk0MlPlk4xlcT
MD5:	137D7CF92C86EAB092508757E39265FD
SHA1:	F628D8B85760065B2E4FAAB2CE5E36459AA333BA
SHA-256:	FAFC26A4B942FDA6909B31787FE6C75D9215C21324EA0606F8136B35191DF31B
SHA-512:	49EEB050AFEBFA20091827C53A2B9A0520E619CB29E6518A3435B46EE8D6B1484E87DDDC1531E866999F2627F653859A15815431C6D82930313A38E98A8622EB
Malicious:	false
Reputation:	low
Preview:	{"/41014381/Sourceforge/SF_TYP_300x250_A":["html",0,null,null,0,600,300,0,1,null,null,null,1,null,[138416297042],[6180654644],[2036965341],[1511469861],[151821],null,null,null,null,null,null,0,null,null,null,null,null,null,null,"CLKVse2T7IQDFYdXCAQdsgUBfg",null,null,null,null,null,null,null,null,["012402262017000"],null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012402262017000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}html:not([amp4ads]),html:not([amp4ads]) body{height:auto!important}html:not([amp4ads]) body{margin:0!important}body{-webkit-text-size-adjust:100%;-moz-text-size-adjust:100%;-ms-text-size-adjust:100%;t

Chrome Cache Entry: 777

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 778

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	49904
Entropy (8bit):	5.941365900762714
Encrypted:	false
SSDEEP:	768:6WXkXYFyBN87rlo1x4pDx4pD774k4pDJzy7cB:6ikI8x4pDx4pDX4k4pDly72
MD5:	E83CF7A7DC15BF86EE3B0D9F468A4659
SHA1:	BB68E9ED9A1857E0462FE6C6BBC26D95E3589DB6
SHA-256:	12301F92C4EE9243A28FA5EC2443C58A1590A19CF2C36143B4F3570A592E9A24
SHA-512:	25B2489BC34F8DECCE2FCE31B1213A0187F2F7F50D9F81D7923E4B2C83C94548045DB2228CC6AA5AF953BCB743D2A6E30A308BE459181E8F21AC6DB35B08D4FE
Malicious:	false
Reputation:	low
Preview:	{"/41014381/Sourceforge/SF_ProjectSum_300x250_A":["html",0,null,null,0,600,300,0,1,null,null,null,1,null,[138416297042],[6180654644],[2036965341],[1511469861],[151821],null,null,null,null,null,null,0,null,null,null,null,null,null,null,"CPqnv5SU7IQDFaJWCAQdU10AzA",null,null,null,null,null,null,null,null,["012402262017000"],null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012402262017000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}html:not([amp4ads]),html:not([amp4ads]) body{height:auto!important}html:not([amp4ads]) body{margin:0!important}body{-webkit-text-size-adjust:100%;-moz-text-size-adjust:100%;-ms-text-size-adjust

Chrome Cache Entry: 779

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32000)
Category:	downloaded
Size (bytes):	42766
Entropy (8bit):	5.082749850320046
Encrypted:	false
SSDEEP:	768:JBA7PMMFA0tdlXKNSR4vlGRep2lcwJeL+C2jQdc7/CORUQuFBt33:HAIMFFdYMxAcLQDV
MD5:	B7B9C97CD68EC336D01A79D5BE48C58D
SHA1:	1A99890B57C9859A622337ED0B2F989D6E30CC0E
SHA-256:	B394D33B2A7EC654A6B037EBFDA6618341B3F897A362BE624C923C2711B54A43
SHA-512:	968E18822C24C6C54827999EC766FE54750A9489D22B6A45B641854731EC00BEB8FD93B9BDA8823E67463F7A99AB587D333673821AE90CFDF7E92716BA050C4E
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/js/sandiego/vendor/owl.carousel.min.js?1709827391
Preview:	/*. Owl Carousel v2.2.1. * Copyright 2013-2017 David Deutsch. * Licensed under (). */.!function(a,b,c,d){function e(b,c){this.settings=null,this.options=a.extend({},e.Defaults,c),this.$element=a(b),this._handlers={},this._plugins={},this._supress={},this._current=null,this._speed=null,this._coordinates=[],this._breakpoint=null,this._width=null,this._items=[],this._clones=[],this._mergers=[],this._widths=[],this._invalidated={},this._pipe=[],this._drag={time:null,target:null,pointer:null,stage:{start:null,current:null},direction:null},this._states={current:{},tags:{initializing:["busy"],animating:["busy"],dragging:["interacting"]}},a.each(["onResize","onThrottledResize"],a.proxy(function(b,c){this._handlers[c]=a.proxy(this[c],this)},this)),a.each(e.Plugins,a.proxy(function(a,b){this._plugins[a.charAt(0).toLowerCase()+a.slice(1)]=new b(this)},this)),a.each(e.Workers,a.proxy(function(b,c){this._pipe.push({filter:c.filter,run:a.proxy(c.run,this)})},this)),this.setup(),this.initialize()

Chrome Cache Entry: 780

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://tag.crsspxl.com/m.gif?anid=7822940101119878936
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 781

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	17
Entropy (8bit):	3.8521687236032816
Encrypted:	false
SSDEEP:	3:nxJuen:xJR
MD5:	1A9F5B5D41007226049E6EF054C9F935
SHA1:	A87BDD1B9261B669E5867E6E84D6D2F388D51431
SHA-256:	E3E69CC01AD15179EB67E1F90E1774ED5A5DA075F85420A1D9B01029B28B14DC
SHA-512:	B938038E58F171F8945826D85B8EAB604693AECBCDB33659BE2671A0B8BC814F35066A9446E2235C20FC132F8AB2697F44E7CD6074B397A485B8ADF8611D5C40
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/js/adsbanner.js?1709827391
Preview:	SF.adblock=false;

Chrome Cache Entry: 782

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1483)
Category:	downloaded
Size (bytes):	5259
Entropy (8bit):	5.054088709874482
Encrypted:	false
SSDEEP:	96:XTD2FCeUnhwQHHvg9AJKXHRCTBpK9IwSHT+8z2T+07m3xf28ALNk9ruH2kHbQmeC:jIUhwQHHikK9jSHT+8z2T+em3N2JLG90
MD5:	1EFE96815B4872E7A589DAB93C4DEC2D
SHA1:	728E16F890FA09C51850F7E5BCF48CC570F3DB04
SHA-256:	FB5BA491486CED00A48C2FD57A6F164230BDCB67B91519620C1029138862F4BA
SHA-512:	7C79C987FDEAFB9C26F089BE9E7B7E59FE25EFE113E5F3526AFA70D212FD370FD3AED0DE7D12E8BA3E25BED2DCB9073D83EB39EFC5D87B7195ECA1C477AD9973
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/js/lib/big-text.js?1709827391
Preview:	function _calculateInnerDimensions(computedStyle){var innerWidth;var innerHeight;var width=parseInt(computedStyle.getPropertyValue("width"));var height=parseInt(computedStyle.getPropertyValue("height"));var paddingLeft=parseInt(computedStyle.getPropertyValue("padding-left"));var paddingRight=parseInt(computedStyle.getPropertyValue("padding-right"));var paddingTop=parseInt(computedStyle.getPropertyValue("padding-top"));var paddingBottom=parseInt(computedStyle.getPropertyValue("padding-bottom"));var borderLeft=parseInt(computedStyle.getPropertyValue("border-left-width"));var borderRight=parseInt(computedStyle.getPropertyValue("border-right-width"));var borderTop=parseInt(computedStyle.getPropertyValue("border-top-width"));var borderBottom=parseInt(computedStyle.getPropertyValue("border-bottom-width"));var parentBoxSizing=computedStyle.getPropertyValue("box-sizing");if(parentBoxSizing=="border-box"){innerWidth=width-(paddingLeft+paddingRight+borderLeft+borderRight);innerHeight=height-(pad

Chrome Cache Entry: 783

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 784

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6030
Entropy (8bit):	5.137474253513321
Encrypted:	false
SSDEEP:	96:aFQP3ljG41BTtF1G4Wg6YBhuzDmCG4og6MBhuzDbCG49FQ8r7G4Z:a2VGwF71GXLYizxGVLMizyGc283GA
MD5:	0BE36B9D6512B84EAB456939576C16CC
SHA1:	23AAA99A92A63DF693EE3BCF7678A3E969233A05
SHA-256:	574FE1AB5EDEA6AD3C054599A02F9A7EB2AC36760856F73291C83A2E3F939B0A
SHA-512:	6674582B07F0958EA1DB6DFBC3C39BC169F07DC04ACE16497FDFBAA42CACC0C48C9541DBBA6A7986939948EC80E98CA559C1AF7149F62F1BF7D8A9DF88C1DFCB
Malicious:	false
Reputation:	low
Preview:	{"following": false, "followee": {"activity_name": "DocFetcher", "activity_url": "/p/docfetcher/", "activity_extras": {}}, "timeline": [{"published": 1709640928000, "actor": {"activity_extras": {"allura_id": "User:4cf1a861b9363c0d500005d6", "icon_url": "https://a.fsdn.com/allura/u/qforce/user_icon"}, "activity_name": "Nam-Quang Tran", "node_id": "User:4cf1a861b9363c0d500005d6", "activity_url": "/u/qforce/profile/"}, "verb": "posted", "obj": {"activity_extras": {"allura_id": "ForumPost:5b6a758c9fb5191c0bba81d244a1675fc3ee99a8.discussion@docfetcher.p.sourceforge.net", "summary": "Hi, 1) Have you checked the filter settings in the Document Types pane? 2) In the Search Scope pane, are there any folders or subfolders where the checkbox is not ticked? 3) If you want, you can post one of those files that DocFetcher can't find here in this thread, for further investigation. Or you can send me the file by email. Regards q:-) \u003C= Quang"}, "activity_name": "a comment", "activity_url": "/p/doc

Chrome Cache Entry: 785

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-BqIGeTOs_ZRpnghSx6JGJneHnqqm1ywMzOsW-MTEh9Yq8pr7DTff6QBfbQnEx45WnW1g6SuN_jq7FPhE17Tr0yCLyJECDKJGZgLvl8GwMjSoHBaEY
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 786

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 787

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	135204
Entropy (8bit):	5.54597500838603
Encrypted:	false
SSDEEP:	1536:qDO3/mkbnMI1ptetNvWOMmVX0tvUIP07KHzeQo4j4INa140jREUOfGoJWoP9IDQC:wkUIM7GnmEUOLN9I3sXbRgk4X
MD5:	37F55EECF11E80178D5054B6A61A9419
SHA1:	CBA3E4B16004C8BEF3A992D9A6745CCB3700CECF
SHA-256:	4D61495B984491C5C9F01734D10BBD675038D78D3E29D9355366E81892CE7E3C
SHA-512:	99921879B89D3A2E7C2404D933D2FB8B282AF926FA74AEB986D08261D5926FCE735DC0595532CF283A51010202833179367F44380D5C8FD0686F8068E62E8442
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/js/min/sf.sandiego-project.js?1709827391
Preview:	if(window.jQuery){(function(a){if((!a.support.opacity&&!a.support.style)){try{document.execCommand("BackgroundImageCache",false,true)}catch(b){}}a.fn.rating=function(e){if(this.length===0){return this}if(typeof arguments[0]=="string"){if(this.length>1){var d=arguments;return this.each(function(){a.fn.rating.apply(a(this),d)})}a.fn.rating[arguments[0]].apply(this,a.makeArray(arguments).slice(1)\|\|[]);return this}var c=a.extend({},a.fn.rating.options,e\|\|{});a.fn.rating.calls++;this.not(".star-rating-applied").addClass("star-rating-applied").each(function(){var h,m=a(this);var f=(this.name\|\|"unnamed-rating").replace(/\[\|\]/g,"_").replace(/^\_+\|\_+$/g,"");var g=a(this.form\|\|document.body);var l=g.data("rating");if(!l\|\|l.call!=a.fn.rating.calls){l={count:0,call:a.fn.rating.calls}}var o=l[f]\|\|g.data("rating"+f);if(o){h=o.data("rating")}if(o&&h){h.count++}else{h=a.extend({},c\|\|{},(a.metadata?m.metadata():(a.meta?m.data():null))\|\|{},{count:0,stars:[],inputs:[]});h.serial=l.count++;o=a('<span cl

Chrome Cache Entry: 788

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 789

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 790

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_sc
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 791

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 792

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	17
Entropy (8bit):	3.734521664779752
Encrypted:	false
SSDEEP:	3:gCtwn:l2
MD5:	A54A440C7EED0A7B3E78E6B985E12FEE
SHA1:	92EF2F2008EBBC5635B71F5D6C9831C5F2F4514F
SHA-256:	62CE950AD0D7F664B316B4253BBC993BF0BF8310970F64B150FDA6F1FA59DFEA
SHA-512:	F82E417DFAA9DAAE2A74DE3564D9DF703E4A2849D60752F6A9C4C2C5053CD72D3F5ED036EF683CA586CE17D7A2DA3E9D3DA6311560296929C70B23BC05A57631
Malicious:	false
Reputation:	low
URL:	https://ml314.com/imsync.ashx?pi=3642666937673580575&data=eyJwaCI6NDk0MSwid2giOjkwNywidGJzIjo1Mi4wMSwiZHQiOjc1LCJwaWQiOiIxNzEwMTU4MjQwNTY1XzZpcTk0dGlldyIsInNkIjoxMzA3LCJzZHMiOjgwMH0%3D
Preview:	_ml.setIM(false);

Chrome Cache Entry: 793

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 794

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	14579
Entropy (8bit):	5.61070345998479
Encrypted:	false
SSDEEP:	192:o/K/XMymiG3+Ul5mEYkpRhKZqxydFUt/s31Zi53x/iGZEjP2ehtZN+y64:LPGaYj6XR
MD5:	1645C7E7BC7FEFF6E6AAE044BB82AC1B
SHA1:	FFD3C8ABFEBA7955C29614600AB20C45FBB3771C
SHA-256:	A6EE58F60C407B083623FDC4586AE66D10F4586920A825A74E26762BC262EEFD
SHA-512:	36083A8368A564568D8A69778AEB25BA849374606018C6186DC785B9F9609F14A0B2C89AEF06725A9FBC1285D8F05F4DDEDEF01D6AD24CBCC1B568C4BAA4AB6E
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Google%20Sans%3A400%2C500
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ armenian /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiIUvaYr.woff2) format('woff2');. unicode-range: U+0308, U+0530-058F, U+2010, U+2024, U+25CC, U+FB13-FB17;.}./ bengali /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiAUvaYr.woff2) format('woff2');. unicode-range: U+0951-0952, U+0964-0965, U+0980-09FE, U+1CD0, U+1CD2, U+1CD5-1CD6, U+1CD8, U+1CE1, U+1CEA, U+1CED, U+1CF2, U+1CF5-1CF7, U+200C-200D, U+20B9, U+25CC, U+A8F1;.}./ cyrillic-ext */.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_I

Chrome Cache Entry: 795

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
URL:	https://tags.bluekai.com/site/18282?phint=id%3D693098949688747066
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 796

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10814), with no line terminators
Category:	downloaded
Size (bytes):	10814
Entropy (8bit):	5.5092749202305225
Encrypted:	false
SSDEEP:	192:KrTlC9bD6UD2VPtSKsBe5pZMGmPmsMYePJ6T0asTfih3nMU:UUD2iAP4yYePJ6oHTqh3nZ
MD5:	FC80B1A953C791470B2F0463B3BD9EE6
SHA1:	748764FE3A80EB7EAF4BDE6BDE4EE76429EF0E0E
SHA-256:	D6C5F52BF12890B45C17CF616155C6B81045B9CDB9218B31A023EA15D6A7B545
SHA-512:	64541AA37A610ABF1BEDED80EA345FFB72DE726461A5ED314CCB820D283C7F3C0E02FF3FCA2066BF88FC4A70FFE39DCA2D0F3DD7D226A183B01F32A1BACEC065
Malicious:	false
Reputation:	low
URL:	https://d9.flashtalking.com/d9core
Preview:	(function(){const coreElementId="d9-core-3f4f3476-b53a-4039-b585-9ac99c6a1f31";var container=document.currentScript\|\|document.getElementById(coreElementId);var isApi=container&&container.id===coreElementId;var d9d=collectSignals();if(!isApi){d9legacy(window.D9v,window.D9r,"d9.flashtalking.com",d9d)}else{window.d9api=d9api;if(window.d9registry){window.d9registry.run()}}function collectSignals(){var s={};var ft=initFt(s);var d=new Date();s.D9_101=window.screen?window.screen.width:undefined;s.D9_102=window.screen?window.screen.height:undefined;s.D9_103=window.devicePixelRatio;s.D9_110=d.getTime();s.D9_111=d.getTimezoneOffset();s.D9_120=navigator.platform;s.D9_121=navigator.language\|\|navigator.browserLanguage;s.D9_122=navigator.appCodeName;s.D9_123=navigator.maxTouchPoints\|\|0;var m=ft.isM(s.D9_120,s.D9_123);s.D9_130=ft.flashVersion(m);s.D9_131=ft.acrobatVersion(m);s.D9_132=ft.silverlightVersion(m);s.D9_133=ft.getMimeTypes(m);s.D9_134=ft.getPlugins(m);s.D9_140=ft.encodeURIComponent(ft.locat

Chrome Cache Entry: 797

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjstMom1EWzGCxcHw7f4o0_1G33ntOw_fTsHSosef3PxzF3TtP7eBFlipym6iabjD4XqNupK81s-hWFH6jewyf25oajQOFd2CVyKZAMh5wcKq_m_L348c-LcwAkIrL8WYuV9_adfE-xwoGXzcd8VeJMjAxYTTtWRNIRE&sai=AMfl-YQSMenOOq9HTKLDrSEtZxiLPcDd25wOLbsPvofRd1k8J2a1ZxA4KgOuEfg-PIvd9Rf4fUkQMBIyolYZC08xhA8IQpPqol4vrYg6sh01NauszjecwN06mYGkMC5v&sig=Cg0ArKJSzGBVxclINpfGEAE&cid=CAQSPAB7FLtqahOj24YQgXnuivVTB4GGOyOozq3P7FUrKoGQ9AWnMaRGzcYoBCxlf5JMWPoiXgkJkznNjktbDBgB&id=lidartos&mcvt=0&p=1008,963,1258,1263&mtos=0,0,0,0,0&tos=0,0,0,0,0&v=20240306&bin=7&avms=nio&bs=0,0&mc=0&if=1&vu=1&app=0&itpl=20&adk=3574710162&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=3&r=b&co=609102700&rst=1710158226945&rpt=1058&isd=0&lsd=0&ec=1&met=ce&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 798

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 245x183, components 3
Category:	downloaded
Size (bytes):	13399
Entropy (8bit):	7.946841236815784
Encrypted:	false
SSDEEP:	192:Y0jjGrXllcYC1kb8UogYIn3Mfno1gFUJkB9ddZ+xDMWZxbChc7RjRypjEDlyQD4:dar1Hakb8UogYI3Mfnods+xAo9yV6lTM
MD5:	B3985BA70C15EF4E59FA8DBA76939996
SHA1:	91F35957C1D97B6D6DCEF2148FD5BFF818489A52
SHA-256:	3A96BD7CBB48F459527B80C1206DC9438D66FC48AA0FBCBCDD3E2D2C57C7EC65
SHA-512:	FB383F5282B4364DCA002E524C3899E3FD575EDE96B66855EFA84A5A0340E78CE939624EB00F0F5B15F9B44EE46F4F2C34C77C394A10D5E2BE0CA33EDF11F4CF
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/app/proj/docfetcher/screenshots/188430.jpg/245/183/1
Preview:	......JFIF............................................................!........."$".$................................................................................"..........2...............................................................R.;.jS.U+"Z2U.2...I.....zY....7..pi7..[.Y.uO:.*.n...7..W..e.r..?.c2..N.3R.fjAl.H-....ug.XO..j6.64&.`..\...K..3G..eD.....x.vNm.v.s.Y.C.>-.....n....}9..Rb.h.....V1A...P..r34..R.=v...U..\.E.SF4.Vf....".%.}B.M.Rp9.M.Xc..[../C....Y..,....KU#..2u?L.'..~...L.5.....4.'.D.g."..V..&.I....c!...d...KUS....>r..zlS..k..&j...T.....7]~p.".#...}......JZ.@..q...l....d.k...E....N.6.......9....oJ.]...@.g...V... ....l.7...cU3.H..)..2.Q].&...........g.m.....0...w..GkxL.H..k...yU.SI~.F;A.h.........=..g..A.6..-...#I...m6Ec.dSZ.inU.\U..i..9.1c.2%.........O.`j.85+..w..\|c.V.[.;\|if....&.e..=.ezk@L.........HA4...d&..I.^dR.`.l.7.<..................(`^....-...........................!4.."13B 0#A%2@b...........V$..eUq.B4.L'$(..I.F.2.. .]..B.VR.a

Chrome Cache Entry: 799

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
URL:	https://match.sharethrough.com/sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 800

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2272
Entropy (8bit):	7.902250778224029
Encrypted:	false
SSDEEP:	48:UNPowS4fA6UdwKfQn//aMtbAPTMo0y+PiEIjrVkQ+puJ3:kPt9fnswEO/aMtyN0y+PiEIjrVkO3
MD5:	807EA857F8F1CF42470B0A40C1D80660
SHA1:	5EF649785A197EA872A87ACF96CD9128062100CE
SHA-256:	24430943486C728F555FEBD2F3486AC79E0622A4E295D4431AD92CDA19E095C1
SHA-512:	0344691FAE13D185E60164E175C6817D63428367A64DEBB6151A26E4DD4BD3C18A827D31872BDE380B65873E1D15304DBB07DE1F876F624968EBAA7C20F98644
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/allura/p/puggle/icon?1367512637
Preview:	RIFF....WEBPVP8L....//......m..L..;.h.X2...l.Yffffffffff.......`.t..gV.,...9...."kPg..j/ .....U.N.Y.V....Jvm...}?..._...w....4.#U.L.V..@..A..{..H.U..p..N........r.........9....P.m.m...g..{.F.m.m.m.V.meD.9.x1.@..$41......A...)....H@G3K..d.\|3}..&.&R..W...Hm...-^#y...;....h...x'...Y.:.N.".s0#.[..t.&.z$.@.^..?kno....a0......dg.v..Nk.@..V.5.x...]..\|.=s.<...s<l!......f6.._...d.diB..A%ZY...\|!K#}v..i..Z..-.Y<.p...0.4q..._Xc...n......u.. H..I...E..i.....FN.(.#........<q.T....C.....Z..'%.K..-F{2;S..E/b3..A..(.......".#.[aD......wD..p.`v}......c..o...10...C.........b.o.$8p.......m.O..w.I._.....GCj..}.f..G...........M.-.....3...:..=,...n..:..~Eo.o.....=E......bO..k...E.$..o..9Y:....\..;k...Z...x...&.W....vK..m...~....bS.@...p.O9.....1.......R.......ia.afl.Y.;..BT2q.E.*[..F_<.>.......l^JI.,..F...KP.Ae..:.p.d......;.J..9!..#.D'o..~.3..>a.D..AI...........L.#.....p$l.K.......@..l......{...:Ir.........$..(...z..(#.m.k......I..!<...z:V....3.......H......

Chrome Cache Entry: 801

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm&google_dbm
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 802

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1054)
Category:	downloaded
Size (bytes):	2689
Entropy (8bit):	5.40021492400263
Encrypted:	false
SSDEEP:	48:Otg7xBo1IN7Qa69Fa9FKYPCfmY/bZyf2jcju8m5I0zRHkFRvEJG:/N7QaaiC+Y/jcju8WhRHMxEJG
MD5:	9EF158292B617D358506529B02C73629
SHA1:	843852D8ADDBF1A7F96C5607179E1C9423ED8A4C
SHA-256:	3164DB7EF9EFC7121CE85192340A653C6CB87E34CAA05849C8FD47B7872F9FC5
SHA-512:	D4B0E6E8900043C9C4EE010ABFD00A51D891FE4B4F424418DC1A75075E3DF931D0558BFB3E983190079EDDD0BF11D7604E70CEAF119351690812EBC21D7EAEB8
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240306/r20110914/client/window_focus_fy2021.js
Preview:	(function(){'use strict';function f(a,b,e){a.addEventListener&&a.addEventListener(b,e,!1)};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a,b,e){if(Array.isArray(b))for(var c=0;c<b.length;c++)g(a,String(b[c]),e);else null!=b&&e.push(a+(""===b?"":"="+encodeURIComponent(String(b))))};function l(a=document){return a.createElement("img")};function m(a,b,e=null,c=!1){n(a,b,e,c)}function n(a,b,e,c){a.google_image_requests\|\|(a.google_image_requests=[]);const d=l(a.document);if(e\|\|c){const k=h=>{e&&e(h);if(c){h=a.google_image_requests;const v=Array.prototype.indexOf.call(h,d,void 0);0<=v&&Array.prototype.splice.call(h,v,1)}d.removeEventListener&&d.removeEventListener("load",k,!1);d.removeEventListener&&d.removeEventListener("error",k,!1)};f(d,"load",k);f(d,"error",k)}d.src=b;a.google_image_requests.push(d)};function p(a=null){return a&&"22"===a.getAttribute("data-jc")?a:document.querySelector('[data-jc="22"]')};var q=document,r=window;functi

Chrome Cache Entry: 803

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.200601260429725
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM09/Woz59tVp:6v/lhPfZM09tzjTp
MD5:	C4A2B870062C2BB98C500BC1526C0498
SHA1:	528666CCDB12997358077BC8FCDBFB6B825C7788
SHA-256:	2AA4FA20701CDD6D8D56046069001186B5267E3EE7D0EF618AD2F4A683723E11
SHA-512:	2F1A3ABCD12125F7EF18D61A960901C0FD6F82DD02EA2B8041859E6D5F0A7F08DB17CC110DC6D8A3F7D0D1BA790C4BCCA2506D3C60EDFEB5CB29433E9F4F762E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................IDATx.c`...............IEND.B`.

Chrome Cache Entry: 804

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 805

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 806

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 807

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 808

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1461)
Category:	dropped
Size (bytes):	5975
Entropy (8bit):	5.252812165598163
Encrypted:	false
SSDEEP:	96:1j9jwIjYj5jDK/D5DMF+C8WZqXKHvpIkdN6rR49PaQxJbrq0yTMQr+CfLnq/8:1j9jhjYj9K/Vo+nXaHvFdN6rq9ieJrqP
MD5:	F1D2B275458DEEE128CF2D64CE37C425
SHA1:	5E9488175C790C4C77EE6BA9D27B77E52BA39282
SHA-256:	1D40FA23EE70E08484B6D527B0DAA003CD0A391152966766143EAB00C6F57A93
SHA-512:	D03738629DD60B6F764B5190A7D7E260CFD224BF7549760C278F39AF43CC568C39F9D0A359ED0DC793ED92E721ED95E71C6CC95A297D529515003875582E72EB
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>. [if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->. [if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->. [if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->. [if gt IE 8]> > <html class="no-js" lang="en-US"> <![endif]-->.<head>.<title>Attention Required! \| Cloudflare</title>.<meta charset="UTF-8" />.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.<meta http-equiv="X-UA-Compatible" content="IE=Edge" />.<meta name="robots" content="noindex, nofollow" />.<meta name="viewport" content="width=device-width,initial-scale=1" />.<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />. [if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->.<style>body{margin:0;padding:0}</style>... [if gte IE 10]> >.<script>. if (!navigator.cookieEnabled) {. window.addEventListener('DOMContentLoaded', f

Chrome Cache Entry: 809

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	664
Entropy (8bit):	5.376715835929542
Encrypted:	false
SSDEEP:	12:kxPm05xLAczPbFqH7Boyl72U/a+sUVy90w0kKBuEk:kIWANh/wWy9XFL
MD5:	DE7F31C54CB79B2D47FB2E302E6ACDB2
SHA1:	37681FB313F3BA305888C311EED9311E1621BBCC
SHA-256:	DB8E7192774C615D5C8980F6A1FDEFD405A7E34CD9300FE9A21847F7D241BC73
SHA-512:	A0C4DAB4CD1E6A8AC585925124B789479DAFAE4C15B942D5A49A30921636261AE9C065FBD078132C1D4EC18D821EB8FD435CC60F4D0FC4D3380BC4BC854C0A7D
Malicious:	false
Reputation:	low
Preview:	<html><head></head><body><img src="//match.sharethrough.com/sync/v1?source_id=98KUz37ype9D3X2sf9ovgeTt&gdpr=0&gdpr_consent=&source_user_id=1899505890594565248" />.<img src="https://cms.quantserve.com/pixel/p-EtBqU4Lj3YbAv.gif?idmatch=0&gdpr=0&gdpr_consent=" />.<img src="https://bh.contextweb.com/bh/rtset?pid=560288&ev=1&rurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D92%26partneruserid%3D%25%25VGUID%25%25&gdpr=0&gdpr_consent=" />.<img src="https://match.sharethrough.com/universal/v1?supply_id=v5hJK9Sl&gdpr=0&gdpr_consent=" />.<img src="https://x.bidswitch.net/sync?ssp=smartadserver&gdpr=0&gdpr_consent=" />.</body></html>.

Chrome Cache Entry: 810

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	6320
Entropy (8bit):	7.950435995135625
Encrypted:	false
SSDEEP:	96:WWcSYNgS0Db7sGcBJr54q0RFdSOVBw1TbJ362qebzofGolLdLO5bkfhk09P+b:wNT03QBJr54qmFdSnbJqk2LaAfhk0k
MD5:	5FA8B48087F01F9C4C9E6C8EE771BAD9
SHA1:	2BF87EBD37F44E4445DE47B7997F68C41DB986C0
SHA-256:	0F22263DCF8CF4824F9DBB1A978107CC91C035D0ED64777A74B813C303C15D5D
SHA-512:	C761E4902527D59CD5194C0BE11FE6A2158B512B382B221B7F0016DB74B76D3533AF53DE828216C1E694C54BA1D79A38E1E6BD649ACA52262EE11B9E66135016
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/app/nel_img/17063
Preview:	RIFF....WEBPVP8L..../w...M(n.6...._8...".?..DV..i..$.U&2....`....2.r.....qbI.]..#.VU5...G....;<...l.....h....!.g...N9n$I.b..w.[v&..Y.O...J.0....w#S....z7..8.$.J...X..U...7.u.Ti.........nM5V........ .S...6K..J......M...Q.>..S.dd`.......O...'Q..^...T..b....K..q..2@eqet.0..S...}.?...tI..f...1iL.I..y..'.jO...b.M.....P.....b..~S.W.}.....q.....>}..t=p=..._..)N.._U......fG.....}....?...9sww..gfm\p.I....ZhI.kO.l3..].O.d..m.z...>..C..g.d....I.a....&..{..x.$[.m..Km}.9.Z...!.[v.vh.8I;.;..x..k.. Ir.f..+X...@./..]...-....b......J..8:.p.q".....B".0..g......I..p.......m<..#.8.....R.!Xd.~`;.v...ib.......hDo....&.4.m?.........}.....~.M?......g_.qo\|\|1.W....I..Y.....O.W.......l..]..0.y...t...#..t...`..;..h.....[:Y.k_.M...^.Mz.....=.....\:.1.+{....!.....+.4\|.V.4Q.............."..:G..$.Q.dw.C$...\|....'..c$8.....W"`R....~..D....$.K.DYr.GQ.&..cF.I...W. ..........d.!..H.!..qz(. 3Hy..8f..."..2Z.L-.OvWYq].w...zC...alf.&.t.hc..Y.B...SY,g..F...U..:..s...[...\|....9..c...

Chrome Cache Entry: 811

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2488
Entropy (8bit):	7.785387034658463
Encrypted:	false
SSDEEP:	48:CHoYv5EK2Nyus2V+7iOnlrw6feM4EQtiVd4Q0FyS7mL2lcJZVX4WQPjCaz:XYvaq2V6l8Y4EQ0Vd58L7ZyP4PWaz
MD5:	8344C6C96248501ED1C8B61F289098EF
SHA1:	3AFD2BEF5AB05C8E0B0AD4973A30BEA42BFF639E
SHA-256:	DCDE2E47656DEAECD3F8F95E9283FC2D3C97924567594E800E391658C8C97FAB
SHA-512:	C5FC665431A35D4B80B32A672C2B6E564430DC37AD9CEF7941E0B0821438368C8CB2B04458F34F6DF090EEAE0280EF1E04AE7829824C2916B7F61B7F4D940BE5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...d.....p.T....IDATx..}.....?.N:Q...g.....2]yY.b2*S.fL.......k..u&.eI...$J..)G..U..u.).......{~.9...................8..8..8..8..8..8..8..8..8..8..8..8..8..8..8u)...l.J.....=kJ....G7>0.....N..= ..jKu.\...P..Od>...X..&...Q7..omi..i....d.8..Yo....sV.8..U....%..~.../]~..C...0vK..("..H81.n)..n.....}EB?.p..(W&...7q.q%s..\|`.]......./m.1#.xx.=W.,...k.._!...E..)<..$.6......].=?G.2.....^.{...{.^.Q.......JZ..yo..G7I.M@i........\....[...0.8G$....\..U.........T....0.......8[$.....P.w.5.oT.f.$Y-...U.+"a..+.>.m`<PH.G...........px........t...w........ .B.........e......b..\|.....Q.....8..!.N..7a.=....U$.......&....:.Q.0_$tO.......&......j.t...x.8..L`.]Zu.q..``.H....-.;....;...kB.m....5`56..b3q..#..6XW..?Y5N..y......S.K...j.p..HX.....,....&YQ5>.._.:. lE.......')n.j\|.x.(.BI/.T$LMu...rr..v.f.n.u.;.WH....S...k...?....6$H$.....;a...x..+....`..,.j...Z5...dC#z..f..DB3`X...S.l..i........g.._.vJM..g6.6'..y......CS.LlV..../.6......Up.HP..T..l;.

Chrome Cache Entry: 812

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (424), with no line terminators
Category:	downloaded
Size (bytes):	424
Entropy (8bit):	4.694987148129467
Encrypted:	false
SSDEEP:	12:s+owNV0D/NVoBA2/NVoBu5Ed+ow5/NVoVl2/NVoV9H:stF858ddtOWsWd
MD5:	8F61F228AD51184B5F8BBBF14B436DF9
SHA1:	8E94473045719C0E51F579C8137FFEC2B004355B
SHA-256:	DA04907546EDDC4640039BB9EFBBB483D220B1E4EC553F9830A9510B7FF14899
SHA-512:	29CB07B2AA813124C583F06DB8AE63FE5B52527C2151C2BA64C311F4EF774D5BE579947D023E98A478592895892E39AB34C7D920524721A086E851B77AAFA71C
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/css/lato.css?1709827391
Preview:	@font-face{font-family:lato;font-style:normal;font-weight:400;src:url(./fonts/sftheme/lato-v20-latin-ext_latin-regular.woff2) format('woff2'),url(./fonts/sftheme/lato-v20-latin-ext_latin-regular.woff) format('woff')}@font-face{font-family:lato;font-style:normal;font-weight:700;src:url(./fonts/sftheme/lato-v20-latin-ext_latin-700.woff2) format('woff2'),url(./fonts/sftheme/lato-v20-latin-ext_latin-700.woff) format('woff')}

Chrome Cache Entry: 813

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_ula=5153224&google_hm=FhKEXQMH1DSzhfuBW22XwTUCQXVh4MujT2xDVlUE1ZQ&pi=adx&tdc=ams&pi=adxab&google_nid=rtb_house_us&google_push=AXcoOmSAJRqiKrDk695NM5A0bhR-PbKirjUMU0XPtB6Bxc1RwguQH-dmF956DAw2sVHKCv2Y4vavcXcVnIKVuw_hQgBYLNHy-IK58IbCyOEo5pB0qQik5vT4D0CWsGdjc8bVTO3Kh1KpZOphCjRZ2QEAxox5&tc=1
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 814

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1731)
Category:	downloaded
Size (bytes):	1780
Entropy (8bit):	5.51054249360988
Encrypted:	false
SSDEEP:	48:Z/2aPJsjw+edBaVfZzmtubdyeqFIBuz12r5Uw:tFJcZoapOubQecB2P
MD5:	D1C35163DD934DFC7D51A5662EA52222
SHA1:	0482A5D9AF7B84A933092CB70649B114604E11AA
SHA-256:	B94AE01BA7AB0A782315780FCBFB70FE987F46CE5183674FDC8E7168042B8021
SHA-512:	056C0A1873ED6CDB3D84C142A6840B00A69E2E68E73B242EF1B6D32F3D9902D04A182425ACB263CEFD95E08AB40D4C1BA38CE1BFC32B87F4952A8DD178494269
Malicious:	false
Reputation:	low
URL:	https://tag.crsspxl.com/s1.js?d=2396&cb=1710158239756
Preview:	var cp_C4w1ldN2d9PmVrkN=cp_C4w1ldN2d9PmVrkN\|\|{};.try{(function(){var d;try{d=top.document}catch(e0){try{d=document}catch(e){}}function _e(c,m){}function crsspxl(z){if(d.body==null\|\|typeof d.body=="undefined"){if(z<2500){var rec=function(){crsspxl(z*2)};setTimeout(rec,z)}}else{var l="https://tag.crsspxl.com/s2.html?d=2396",i,j;try{var r=d?d.referrer:false;r=encodeURIComponent(r);var a,f,q,e;if(r)l+="&r="+r}catch(e1){_e(0,e1);}var t=encodeURIComponent(d.title);l+="&t="+t;var u=encodeURIComponent(d.URL);l+="&u="+u;try{var s=d.querySelectorAll(".small-12.medium-5.columns");var b2="";for(j in s)b2+=" "+(s[j].innerText\|\|s[j].textContent?s[j].innerText?s[j].innerText.substring(0,400):s[j].textContent.substring(0,400):"");b2=b2.replace(/[\t\r\n]/g,"");b2=encodeURIComponent(b2+" ");l+="&b2="+b2}catch(e3){_e(2,e3);}try{if(cp_C4w1ldN2d9PmVrkN.dg1\|\|cp_C4w1ldN2d9PmVrkN.dg2){l+=cp_C4w1ldN2d9PmVrkN.dg1?"&dg1="+cp_C4w1ldN2d9PmVrkN.dg1:"";l+=cp_C4w1ldN2d9PmVrkN.dg2?"&dg2="+cp_C4w1ldN2d9PmVrkN.dg2:""}}c

Chrome Cache Entry: 815

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 816

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://bpi.rtactivate.com/tag/?id=20909&user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 817

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 245x183, components 3
Category:	downloaded
Size (bytes):	14744
Entropy (8bit):	7.956770944533209
Encrypted:	false
SSDEEP:	384:OLGyibppmg2HeQ0T3G0D1zzxptvOEctcKR:ki9pmNeRpFtTceKR
MD5:	B9079EA76A66CEEB243E2B80110930D4
SHA1:	DE4E745D2116E352D85BD63110DD685A1CA734D1
SHA-256:	738733EBD83D1D8977A34B5029B5AAA4A48BB7D9B708D712123F676010DC02F3
SHA-512:	D79F1F0677EE79158BB0482AB22BA8DE3005263B78C12F0017D53549AB7550D8BE87F210868B1B50747F9791EABAA08F6086574EED6961DEE722A4CE6701D43F
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/app/proj/docfetcher/screenshots/188428.jpg/245/183/1
Preview:	......JFIF............................................................!........."$".$................................................................................"..........3.................................................................=K..;)..#.4.K.E.~X..U.W.!\X.qb.......K..>&^.x....gL.B..7..JvMr....!....ef.zPS.s,..0.Td....Y.NiQ.M#...8Z......H.+.u.......".r..u:..z..%.(W..P.z...0..I.h.4J../9..^.:.....0.A..,.f\.i...a./.Z.5J2...M..V59.k&.1%....G..W..w.....=.z..,.\|s.E~..5..4[.l...AD...A/r..Oz..4G...F.D<.J..}...w........A..9f..K\........7'...U.g3.5).h..2..v..-...fY....Ji...u..z..v..\.........$J..+^..[i..S.M...N..&F..I .-T[..n.f..k...&..G...n.Y..h$6..>.1ygG\kL.F..F?7{#..~~.fK.E.\e.4.m&.....#....l..}G......].Q....uvM..E.{B..N.&y:W..M[e/.f^.]..\|....z.=F_Q..f...YgP).4.b.+..g.Z.......+.zW\|.G..z..3.7..h.LT....Cc..+>Sw..../......Gu..b..q.rV1..D..A[-.%T.(#&K.2J..k.V.l.m...j......................../........................!"#.12A..03Ba 4@$CDQb............+..

Chrome Cache Entry: 818

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	5813
Entropy (8bit):	7.956106210233955
Encrypted:	false
SSDEEP:	96:oKAHtVLKOy3GwGKm+Jogya1phQDMmDk9yNIf/egR/I9TgjKZsIUZWPp/CNc8Oty:oKgtNycaKnaDhmhDkk2f/eO/IVMKZsI0
MD5:	EE965EED4E78D56881FB24C4D6C03E70
SHA1:	78058EC3089054E9D4C32252824334E75C629D0A
SHA-256:	4BEC53597745072C2D23C54F149FF8F91264E5D82F7F2B05223E993FF63BFEDA
SHA-512:	8F41841B3FEF5ADC553B861AE1D9861C07ED947E6F1768B26AA7800215F953164D19605DD89CFDDD0177D73EBD0C24E3FD0E3BCFC585556EF78AB435712AB871
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.............sRGB...,....oIDATx...S[.....:.vR.v3..t:m._..u....v.......`H......~?$..@ .2.!..xJ....@ $....Ke..P.Bn.......ew.w..s.....LNOOLN..Tc..&.Y.V+....z.^?<::...T..,.~<c2.F..$....1...F.F...t...4-,-.h4...>..[......uK${>.._5..b. ....=....H..z.......f@s..dDr.......D......H$....^.!..P.....a....~...@ @M.X..&..e.....n .b.....H$.......h.w..P.gg......o.<........6......,..5.....JF$....%$...},...(.X`..W^2..c.......M..7y.......A.7.TvI$R.\|X..04:J.H8...y..z........u...q....f.B1:>..f%r.bx.._\.6....h.@@482.p.^.4~.n.....6..>..8...}\|...kA....K.. .O9....ng.8W49]. .Y1..GKS.....Q.j.7..........:.nbjJ73C.b.f#...p..Nb...+.j...ba..a.j...Q...k.&..E.w.........E......:....f.1.sRv.^...)i..kE%...........x, ..3..,.....0~...xgUuu..)7...UU..Q^..WTt.9[.mhx\^...?.....eg...c0.3....w.V...}H.....>...o..yB.g.V.}.f:.(...%2.e....TY[.O....~dD>/-....nNvp.X.......7......7%...e.J..;y.P..Rk.&.'...9}.Yr.e&&.^^]._\\Q[.#.B..g...,..55.s<...w.....A_...A{....tW.

Chrome Cache Entry: 819

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 820

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	566
Entropy (8bit):	5.3730814583564905
Encrypted:	false
SSDEEP:	12:TMHdPcWi/nzVJ/KYf3nWnQmvQWdPHfbNgvRI/DRhVn5Xn:2dTATLf30QKQWdPTNgvRI5Xn
MD5:	14CE57370667EF07588664BD3840A977
SHA1:	85DF546BF9D9AB09CBDA10922628B851CABDD231
SHA-256:	5020A647CCD61A045F2C1FBECBD95D11DA38706EA8ADEA6F7DAA44E6FBD57ED3
SHA-512:	4E7CD053E4A6C2E0A88AB251858B8350F1E1730BFA92F3DB41C34DE78633E3F46407BC6DF8040866585CD9D08857B7C1849ABAE47F16BD281D4C8791823AF51F
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 21.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 300 285.8" style="enable-background:new 0 0 300 285.8;" xml:space="preserve">.<style type="text/css">...st0{fill:#ffcc00;}.</style>.<polygon class="st0" fill="#ffcc00" points="150,0 185.4,109.2 300,109.2 207.3,176.6 242.7,285.8 150,218.3 57.3,285.8 92.7,176.6 0,109.2 114.6,109.2 "/>.</svg>.

Chrome Cache Entry: 821

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (53935)
Category:	downloaded
Size (bytes):	53936
Entropy (8bit):	5.401008180364147
Encrypted:	false
SSDEEP:	768:bemBuCcWQyjYgnrZK0eHkwImvBPQyWqCB/k/mvvNz0mMGaNFXmo6nBBkdqa5jOqY:zur/RmdRwIqYXA8PnBBkgaEF
MD5:	8301FADF304DE3781FF11D6186AECFDB
SHA1:	B6F5A569C9018E9611EA96CF844F6107CC44C377
SHA-256:	D7698015877C46142ED84AA258F0F197C6CD30838DACF5BEA81A06790D189A57
SHA-512:	64112B9947028B9C7EBA52B4C68302DE48A5F78B8665BCFA18C7F1821A2BF9BD3E3BF00798AC17A07753BAA91F58C8F9EDAE17E65627105CB0660909D87D2D41
Malicious:	false
Reputation:	low
URL:	https://btloader.com/tag?o=5098683085881344&upapi=true
Preview:	!function(){"use strict";var e=function(){return e=Object.assign\|\|function(e){for(var t,n=1,s=arguments.length;n<s;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e},e.apply(this,arguments)};function t(e,t,n,s){return new(n\|\|(n=Promise))((function(r,i){function o(e){try{c(s.next(e))}catch(e){i(e)}}function a(e){try{c(s.throw(e))}catch(e){i(e)}}function c(e){var t;e.done?r(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(o,a)}c((s=s.apply(e,t\|\|[])).next())}))}function n(e,t){var n,s,r,i,o={label:0,sent:function(){if(1&r[0])throw r[1];return r[1]},trys:[],ops:[]};return i={next:a(0),throw:a(1),return:a(2)},"function"==typeof Symbol&&(i[Symbol.iterator]=function(){return this}),i;function a(i){return function(a){return function(i){if(n)throw new TypeError("Generator is already executing.");for(;o;)try{if(n=1,s&&(r=2&i[0]?s.return:i[0]?s.throw\|\|((r=s.return)&&r.call(s),0):s.next)&&!(r=r.call(s,i[1])).done)return r;switch(s=

Chrome Cache Entry: 822

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	65565
Entropy (8bit):	5.982612647651802
Encrypted:	false
SSDEEP:	768:NWJkXYFyBN8PBTIYgmT7Jsthc0c74Dq11:NYkmaYgmT7Jsc0I4u1
MD5:	8FA4136AF16132E0C1C2CEF1B49EEB83
SHA1:	4D13B6EAD8B8C45EACD4C9C18434A1E3A90262DB
SHA-256:	433E895DB13E33F4A4EEA28380FA4E3C03418BEC924A3A8021216A8433037B59
SHA-512:	7612D62E66E3B5750E11D015983E04DBF88503DC55AF5C127E972616C73545E979EAB9EA0CB809853FAC883A43C49F9490BEDA30F59342BE9ED613743E8C6C3A
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1401323213163731&correlator=4054193226133307&eid=31079957%2C31080983%2C31081725%2C31081566%2C44807746%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202403050101&ptt=17&impl=fif&iu_parts=41014381%2CSourceforge%2CSF_ProjectSum_728x90_A&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=728x90%7C970x250&ifi=3&sfv=1-0-40&fsfs=1&fsbs=1&sc=1&cookie=ID%3Ded8d538436f1b623%3AT%3D1710158205%3ART%3D1710158205%3AS%3DALNI_MbiYxvEWP7dZiJkctj8HGzhHyMpCg&gpic=UID%3D00000dc711cb5676%3AT%3D1710158205%3ART%3D1710158205%3AS%3DALNI_MbtGcDgo6RHjTtG2es2mbdsN1jDSw&abxe=1&dt=1710158241395&lmt=1710158241&adxs=268&adys=86&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=3&oid=2&u_his=2&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2F&ref=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Fpostdownload&vis=1&psz=728x115&msz=728x0&fws=512&ohw=0&ga_vid=1854926735.1710158203&ga_sid=1710158241&ga_hid=98602124&ga_fc=true&ga_cid=1668299401.1710158203&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFsyLFtbIi80MTAxNDM4MS9Tb3VyY2Vmb3JnZS9TRl9Qcm9qZWN0U3VtXzcyOHg5MF9BIixbXV1dXSxudWxsLDNd&dlt=1710158238737&idt=2612&prev_scp=oss_tpc%3DFile%2520Managers%2CSearch%2CSoftware%2520Development%2CSource%2520Code%2520Management%2CStorage%2CSystem%26shortname%3Ddocfetcher%26dc_ref%3Dhttps%253A%252F%252Fsourceforge.net%252Fprojects%252Fdocfetcher%252F%26page_type%3Dpg_project%26hb_format_appnexus%3Dbanner%26hb_size_appnexus%3D728x90%26hb_pb_appnexus%3D1.47%26hb_adid_appnexus%3D44d83e98e1af002%26hb_bidder_appnexus%3Dappnexus%26hb_format%3Dbanner%26hb_size%3D728x90%26hb_pb%3D1.47%26hb_adid%3D44d83e98e1af002%26hb_bidder%3Dappnexus&cust_params=usingSafeFrame%3D1&adks=3189691995&frm=20&eo_id_str=ID%3Dccb10672a4298c0a%3AT%3D1710158205%3ART%3D1710158205%3AS%3DAA-AfjZQQCnCz9TlsGBpH19Z0_Y8
Preview:	{"/41014381/Sourceforge/SF_ProjectSum_728x90_A":["html",0,null,null,1,250,970,0,1,null,null,null,1,null,[115763391621],[2168334381],[2036965341],[1511469861],[151821],null,null,null,null,null,null,1,null,null,null,null,null,null,null,"COnM7vST7IQDFYCvOgUd7CsP2w",null,null,null,null,null,null,null,null,["012402262017000"],null,null,null,null,null,"3",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012402262017000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}html:not([amp4ads]),html:not([amp4ads]) body{height:auto!important}html:not([amp4ads]) body{margin:0!important}body{-webkit-text-size-adjust:100%;-moz-text-size-adjust:100%;-ms-text-size-adjust:

Chrome Cache Entry: 823

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1598)
Category:	downloaded
Size (bytes):	68827
Entropy (8bit):	5.618448778720114
Encrypted:	false
SSDEEP:	1536:Go42ndM3Vbt8vrMzjnuS3DPsKXAZ2c2nDDoyDIN8Am05EBPe91SxMxfOnTG6GN:L42ndM0SzumEKXO2c2nyiAm05EBW9DfD
MD5:	5F7AE81D8CC09E3D72306E51D90C3CF6
SHA1:	E6024FDBA1E4C2EE0100B61E17958FCA93DB3664
SHA-256:	6DFFC25609794F4ED7D2D88B3639F823DB69C8301CB05ABC9D71550878F90A62
SHA-512:	8B1018129A38F2F819B65FDB502DD1A40419FD633AFE1CF7CD31A5AB8BE8AB40337ACA669A90E467EB2A5D2532B372D1512F8CE0E28DAD359F76E36BCA4EA1C4
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/index.js?1708393659280
Preview:	(function (cjs, an) {..var p; // shortcut to reference prototypes.var lib={};var ss={};var img={};.lib.ssMetadata = [];...(lib.AnMovieClip = function(){..this.actionFrames = [];..this.ignorePause = false;..this.gotoAndPlay = function(positionOrLabel){...cjs.MovieClip.prototype.gotoAndPlay.call(this,positionOrLabel);..}..this.play = function(){...cjs.MovieClip.prototype.play.call(this);..}..this.gotoAndStop = function(positionOrLabel){...cjs.MovieClip.prototype.gotoAndStop.call(this,positionOrLabel);..}..this.stop = function(){...cjs.MovieClip.prototype.stop.call(this);..}.}).prototype = p = new cjs.MovieClip();.// symbols:....(lib.CTA = function() {..this.initialize(img.CTA);.}).prototype = p = new cjs.Bitmap();.p.nominalBounds = new cjs.Rectangle(0,0,322,81);...(lib.f1_img1_300x250 = function() {..this.initialize(img.f1_img1_300x250);.}).prototype = p = new cjs.Bitmap();.p.nominalBounds = new cjs.Rectangle(0,0,600,500);...(lib.f1_img2_300x250 = function() {..this.initialize(img.f1_img

Chrome Cache Entry: 824

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 500, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1671
Entropy (8bit):	7.474439674899562
Encrypted:	false
SSDEEP:	24:LbRfV9dGMfcoKfLrtLomlQ9flIX+1LIiKPCUsvRkz6KU6+mxstyCWdT4T1:ZfVXGloKHtLomYfaKU/svR+1CmmyFsR
MD5:	D5044847BA35B96ADC123BC48C02FA86
SHA1:	1B7A4EFAD478CA417A811DA192D23233DAA5F523
SHA-256:	C71ABCE283EF9489314FF5ADD2D34535A5D6798C4AE32DBA8CB8EC47F2C251DD
SHA-512:	9348F8666E67E5B2174B35453D5AEEA4C8AC30B61B860990FC02E6F91371EBB859B864679A4374E729B77E4E0493A298669D96C8DC4B696985E6C41EEA9E801D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X..........~N.....PLTEGpL.........................tRNS.%V.....a....IDATx..KW.H.F...v ....5O.....DZ.....'LU?e......$R..RN....V;.................N...qf.'wu.c.....(.Y......Uv.[.....1A.{.x.`.s..v..&....f+Q...=.\|/.M..).im.T..`.2..B.{.][o\..{.L.sW7K.....\.St.uJd.{(C.N\..8l...&..I.[.....N=...`j.......vW.".f...../.gj].6...;\.....K$.<b-....)..".Q..~...'..=Da..../...b...F...I>\..#%Q.n.{...]]..>.Xe.....q.. .or.....JE.<b.k.\|..2gN.........<o.y..S..:.g.1..~..OO.^,w....z..s..Nz8k!M..].N....b5..kT....\|........^W.9.......7.D.z&W.8f...xm.XP.aP..&..$Vn4...\.XK...}.m:..r.._.X.../M.^.0.$.e(P..+...E.^.}&..Y.M..=....:MBMU.T_.......0.3+V\'.&.5Ob-.XS.{..5f....z...s29..,.2..x...K.k)b-.......b5...R... ......B0.v...?.a..ki%...X..]Z.BC....~.O.=.kd.)..W..........jn.....uS..UEJ..!sM{.Z....v.T..4}.\|{%R...........M.w6.\.0u]J....r......W...p..).C?..qw...WV.wg........r...U..Dd.(.2..g...b....~).^9.U..SyM%j...5.b.C..m.X6..gM.0.{...7...Q.-..,.7.5)g

Chrome Cache Entry: 825

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsuGGoiCMwj0IdVpA4R4bl5y4gdfAhnhLfyY_f04rnDS41g3hRu-4gbV2N6mpauAYsDJhbFnsZL2PYsJ6QectxoNAedPlpDwqtEg_DqDEXJNtU4bWw4q6j4wdgRe5NVn3LD1JdoN8A6oLcRjWusJ0CojEaTD8-rskGQ&sai=AMfl-YRbIEEYyBlLbTJSE1u1HqjdDc8DxpDcrF5zOLfVKOnDDAnNGVnqBy9Xvdh2QmbG-FQAGfKDHADyR8ppeRqKqKhZ8b9nDDramQugdAwaClEEQenilVSHEvFStejt&sig=Cg0ArKJSzPfG0X47wfmNEAE&cid=CAQSPAB7FLtqkcCwOxgiXR3dWzLBYdIIdFDmtF2rXcdrDWmW5D0r-z0A9jR1__Ll-xJckalByeAbEGUMt4_dTxgB&id=ampim&o=0,601&d=300,600&ss=1280,1024&bs=300,600&mcvt=1001&mtos=0,0,1001,1001,1001&tos=0,0,1001,0,0&tfs=68&tls=1069&g=88.66666555404663&h=100&tt=1069&r=v&avms=ampa&uap=Windows&uapv=10.0.0&uaa=x86&uam=&uafv=117.0.5938.132&uab=64&uafvl=%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D&uaw=false&adk=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 826

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=yahoo&google_push=AXcoOmQ64B5RVuCMirdD3az4OZFjRLYWsP1zngU4sr9Q8KwPFsiH2bMlZrkaHdaElmDLIbNAmNw0yBCculqWm_S2d8UuRLe0AdOXrqJaa1VNAnuzIAmjNz2hb1YefOxl6KP9t2TM2ATZ_rCklyb34jQVBAUk&google_hm=eS01TUxVbmJwRTJwSHhKOTBocUlycFBJRndmRkxkWUw2bX5B
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 827

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	49435
Entropy (8bit):	5.938120671816196
Encrypted:	false
SSDEEP:	768:uWWkXYFyBN88rlo8x2a8RCM8RCM2h74Z8RCBzQZ1:uzk3N8d8E4Z8WQL
MD5:	E72046E16E08907AA47A79B5D0654605
SHA1:	5B4BCD5130F0986F7BBB38E3806D10CA2266D41F
SHA-256:	DCC1A118DCAF6D037E3AC1F224C1A5BE7CB5113F7BEC611E0C2DDCEB9ED390B9
SHA-512:	FA58FD611D937CAFF5EE2C09039347463B95BA853316E76151873BB3F9DD35DD947F18492B702C381EF055EF7E34FBF8C07E347B1B0DA956CDDBF676AB154A4F
Malicious:	false
Reputation:	low
Preview:	{"/41014381/Sourceforge/SF_ProjectSum_300x250_A":["html",0,null,null,0,600,300,0,1,null,null,null,1,null,[115763391621],[2168334381],[2036965341],[1511469861],[151821],null,null,null,null,null,null,0,null,null,null,null,null,null,null,"CKDnnvWT7IQDFc2tOgUdw6EMHQ",null,null,null,null,null,null,null,null,["012402262017000"],null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012402262017000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}html:not([amp4ads]),html:not([amp4ads]) body{height:auto!important}html:not([amp4ads]) body{margin:0!important}body{-webkit-text-size-adjust:100%;-moz-text-size-adjust:100%;-ms-text-size-adjust

Chrome Cache Entry: 828

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://mwzeom.zeotap.com/mw?google_gid=&google_cver=&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=98b0bf49-7792-48ef-6725-eedef40ec42e&reqId=47445c2f-d6f2-4f5e-456b-e1e02d8cb77a&zcluid=ec1562c92b86ee97&zdid=1332&google_error=15
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 829

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2709)
Category:	downloaded
Size (bytes):	96160
Entropy (8bit):	5.518629584665947
Encrypted:	false
SSDEEP:	1536:NGutnTqYCDzPzJeUAU3zSy8PFu+3sgUD1LL6WfQg:nnTq7zkUAwzS9L3sgWLLLfN
MD5:	E5DB9525F3D7EFD966AE63ABA86669E0
SHA1:	EF9DADB1023BAC903273F17E8DDE163D0FD7CF1E
SHA-256:	CDB7911DD984DC9B0840A0A94E711600B05DD72D612465FDB18ECFB67EA9E66C
SHA-512:	988E944410D6700C1265A5F2BF315F5B4A9051DE79ADEB38D43B38F0B0E43326D2CB3F87C750C9C5F0C8175BEE4625BA4F3FF6234A8D05CEB83AB4471ECF76FC
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/dv3.js
Preview:	(function(stc){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object"); .},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}; .p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Mb=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Mb};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=fun

Chrome Cache Entry: 830

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 831

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://ad-delivery.net/px.gif?ch=1&e=0.07056342703533591
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 832

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 833

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 834

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 835

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 836

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x314, components 3
Category:	dropped
Size (bytes):	37913
Entropy (8bit):	7.96935547645897
Encrypted:	false
SSDEEP:	768:pFpx64Vtxx12GJE0+qEP4DLEAo/lvOlC0/Rl16UkyMnuY16z4X2UemCeRqk:pFy4j/r+2wJ8ldRLvEX2NeQk
MD5:	2FF4A932A4780984F21B751B49815F7F
SHA1:	1A3E2697128632219C5B0C8CEC75289FD1880F07
SHA-256:	A9AC60FF2061FD4BD302D5A06FB7642F42E8EEC5FA0D54E3933965B71EAA9CA9
SHA-512:	E7CC007DE6774F97A6DFDFA9C4E541C69B6CDDB0E3E15AEF6954199F4DF89A95510FAEE0B982D80FEE4CCDC884388A37F650269EAB62E4AA2C437FE4F624C100
Malicious:	false
Reputation:	low
Preview:	......JFIF..................................................."... ....+. $%(((..-1-&0"'(&...........'"..'&'&''''/'-'&&''&'&'&''&-&'''''&'''&&&&&&&'&&'&&&......:.X...........................................W.........................!.1AQ.aq..."2B...#3Rr......4b..$5CSst.....c...%U........TVd.................................J.......................!..1Aq..2Qa...."4....3Br...R.#5Sb.....C...$s.D..c............?../dxq!..H.H......@$..J@..@$ J@..@% H.... ..).@....H..(.T. ....... ............P..! .E. ..@$$......$$.....@.H... ..........@...j.....R....@%$.@$.@.@.....@$.@.H..!.RH. H......R..D.......H..........@$$... 1{..;M..7...@...'.9..Tu`.....-....w.....{Uy..L..5.h.A)p.igQ ..D.a.Kc....7..N.5c4 H....$.z......p;........:.....6I..wH......Nm...)..t...m..`g5x..O......!...F.....j.d..U0.....}...Q..0.....!"@g..y.c\...h.>.D...'dJM.,.]..;,..#.9...\.i.Ex4..(J..M>..r.... ..BA.....C...@$ ...$..H...R.......(.P.H..(.......... ...I"(@..H..P.. .@.H... ..BDP..S.O s@x....X...R.Q....1.Wj.

Chrome Cache Entry: 837

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	3138
Entropy (8bit):	7.914834306692324
Encrypted:	false
SSDEEP:	96:CUfKMTcpZ5cNgvxHhQnrn5UKFDXxvG6hz:9fKiiZmG/Wrn5UsD5Gm
MD5:	33A1EA709CEB308F9CE03BDF553E0B5D
SHA1:	FBB8952EA0FFEA650432F8BDCC7403D0EE2870CB
SHA-256:	00C93E7BF7FF43B0140C8F353AEC8A8D4707BD570A17851724B61886356BA66E
SHA-512:	B289F6897C1F7B467DD6FF6398AD59CF0B252FD4CAE8EFFB72912406169349E9AD331C03265D4AF07053351EAEDF4B439FFBFDA21E7552D887017C64FAE4FF7F
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/allura/p/doublecmd/icon?f88577ee440fbc093ac55a75cf4888f9be00fd04249eb43421bd9f40303138a8?&w=48
Preview:	RIFF:...WEBPVP8L-...//...M.i.6.f.....e...P....Z.#....O...(r(m.I2>t.W.h..E.$)._...........!.H..g...."'.......!.l.P.%.......m.$I.._0..m......>...}>.m....YH........R.....WQ.N.-...~...afmw.Fr.$.._`g...HN&Q....%..sS.m......?.H.(..W.BA.e$.x.Ytn.:.=s...9v.......Vk..K........ $,.}..,\|j~..3.0.....}...gu..Gk...Z./.)g.K..x..h.%9.P^..X..z.....O....o.......(..K.......7.h..z...^/J...f\.....JDk.....Zr...e.1P.E.h......x.,.6......<=...F.G.#@..[....e..7...GW6.u..(.Z..P.XEW......./Q........8..@...U......>...t..;<"..\...;...GW..?.m..,....3....(.c..0gN...EK..7.m...=.\:1{..r........-.6B.X......0+.AR..n Q.N..t.o.......L.s..:.....faiI..U.....(.i....H.e.I;..T.LzW[.....x..O>.....{.z.I...m.gw..>.3.,.....H. .T9...\.on.g\..I/..i.21..............3."...6O....H.....$.5...ky{..+O..i....@.Z..,S..<F..?[m..^.L.V......r..HWGHD.gME.K7yV#w.@$.....R.M.=...+bN.P... .....%-.Z1.enNt}.k.u.@d."q..$7D.PQSC....A.H:..".Xg......\.B.t...FS.I..@E..f.li..`Ukl...*.(1..a.

Chrome Cache Entry: 838

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.200601260429725
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM09/Woz59tVp:6v/lhPfZM09tzjTp
MD5:	C4A2B870062C2BB98C500BC1526C0498
SHA1:	528666CCDB12997358077BC8FCDBFB6B825C7788
SHA-256:	2AA4FA20701CDD6D8D56046069001186B5267E3EE7D0EF618AD2F4A683723E11
SHA-512:	2F1A3ABCD12125F7EF18D61A960901C0FD6F82DD02EA2B8041859E6D5F0A7F08DB17CC110DC6D8A3F7D0D1BA790C4BCCA2506D3C60EDFEB5CB29433E9F4F762E
Malicious:	false
Reputation:	low
URL:	https://a.audrte.com/p
Preview:	.PNG........IHDR....................IDATx.c`...............IEND.B`.

Chrome Cache Entry: 839

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.5
Encrypted:	false
SSDEEP:	3:YGKeMfQ24:YGKed24
MD5:	055DE8F64447F10ED2C4C7F78E27B7CD
SHA1:	BBFCC7FBB135D3893E9BD559E44E069F57DFAB31
SHA-256:	30C714BF4216E577686D238B98561D093672CB25BF90BAAB50DD956F75CDA4B3
SHA-512:	1A726490120152235BBCE20368630EF20FAC7964BA32F846FAC2C1F1A58EE9722356AD94FA6342685E8CEB5015CE2E944EDD739B901D3D9B0A22A5238118142B
Malicious:	false
Reputation:	low
URL:	https://api.btloader.com/country
Preview:	{"country":"US"}

Chrome Cache Entry: 840

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41069)
Category:	downloaded
Size (bytes):	41185
Entropy (8bit):	5.238842632724679
Encrypted:	false
SSDEEP:	768:ynMWFZFzBNzl/p2fVhECdCmgrwwfMTCaDES/JuS+U2r5qvTWcJSD5IyPrQtipreS:yn1lEfJ1EU2rcvyIyP9xAa1ZkwIjZA+G
MD5:	4BDD1A585F7527E3BE320FC6B492DE71
SHA1:	0453AB31B14DB900F6FF18F09D555FA9E2C1CF68
SHA-256:	2770E2403192A7B11AFE55D92FCDA866CA008FF7E05E08EA98E8DA20ECE4B6D7
SHA-512:	34F25C9230BF9DBE292B545C88683E9F72C9F33C8F50ECBB91DD711AB8742602230FE6C7DE47D1A455962FBE71C3084DB78ECB2DFB15088823E2238BA448CD68
Malicious:	false
Reputation:	low
URL:	https://cdn.ampproject.org/rtv/012402262017000/v0/amp-form-0.1.mjs
Preview:	;.(self.AMP=self.AMP\|\|[]).push({m:1,v:"2402262017000",n:"amp-form",ev:"0.1",l:!0,f:function(t,i){(()=>{var i;function e(){return i\|\|(i=Promise.resolve(void 0))}var s=class{constructor(){this.promise=new Promise(((t,i)=>{this.resolve=t,this.reject=i}))}};function n(t){return new Promise((i=>{i(t())}))}function r(t){return t?Array.prototype.slice.call(t):[]}var{isArray:o}=Array,{hasOwnProperty:c,toString:u}=Object.prototype;function a(t){return"[object Object]"===u.call(t)}function h(t){const i=Object.create(null);return t&&Object.assign(i,t),i}function l(t,i){return c.call(t,i)}function f(t,i,e,s,n,r,o,c,u,a,h){return t}var d="amp:dom-update",m="amp:form-value-change",p="name";function _(t){return(t.ownerDocument\|\|t).defaultView}function b(t){return CSS.escape(t)}function A(t){f(/^[\w-]+$/.test(t))}function P(t,i){return A(i),i=i.toUpperCase(),function(t,e){const s=[];for(let e=t.parentElement;e;e=e.parentElement)e.tagName==i&&s.push(e);return s}(t)}function v(t){var i;null===(i=t.paren

Chrome Cache Entry: 841

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (3013)
Category:	downloaded
Size (bytes):	3237
Entropy (8bit):	5.156320363882298
Encrypted:	false
SSDEEP:	96:2uSZBdmUBx8nAcxE53WIKjjwc7P6GQKsSCoY8:WZBdmUBx8nAcxEpWIojw+PgmTY8
MD5:	07F2C67835028B4C9612C88181631965
SHA1:	027CD5DFBBDDCE69CD3772C1F717A3C6005CDA13
SHA-256:	6CD626A6A0D39AA8C19F8F7203305033E755C100073927611DF9CE447314899A
SHA-512:	DF7362E541E34B0E2F8A0AE8BDF7C05E884F7DFADD86245D32F29063B1E85E4B825215ADB10409ADB644CA4C625387C5DC3378D9B37530ED5591CF46BD2A669F
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/js/sandiego/vendor/featherlight.gallery.min.js?1709827391
Preview:	/*. Featherlight Gallery . an extension for the ultra slim jQuery lightbox. * Version 1.7.1 - http://noelboss.github.io/featherlight/. . Copyright 2017, No.l Raoul Bossart (http://www.noelboss.com). * MIT Licensed..**/!function(a){"use strict";function b(c,d){if(!(this instanceof b)){var e=new b(a.extend({$source:c,$currentTarget:c.first()},d));return e.open(),e}a.featherlight.apply(this,arguments),this.chainCallbacks(h)}var c=function(a){window.console&&window.console.warn&&window.console.warn("FeatherlightGallery: "+a)};if("undefined"==typeof a)return c("Too much lightness, Featherlight needs jQuery.");if(!a.featherlight)return c("Load the featherlight plugin before the gallery plugin");var d="ontouchstart"in window\|\|window.DocumentTouch&&document instanceof DocumentTouch,e=a.event&&a.event.special.swipeleft&&a,f=window.Hammer&&function(a){var b=new window.Hammer.Manager(a[0]);return b.add(new window.Hammer.Swipe),b},g=d&&(e\|\|f);d&&!g&&c("No compatible swipe library detected

Chrome Cache Entry: 842

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	88089
Entropy (8bit):	5.123411105950699
Encrypted:	false
SSDEEP:	1536:PdS9QMXTbgYJGWvyjtPEx24yZoHPVTCi7b:PdSb0YJGcyZEx24yCHPVTCi7b
MD5:	F23FBD469BB0D9569486B62E2C50D996
SHA1:	357CD77F34E36682BA6FDEAAD6550227CD30644B
SHA-256:	D30C030593AEE31E4BDD1A458E6739DF804F6D50012D2E3141D585B4ACF91A08
SHA-512:	8B134947CE1A05D41CAA05E58E4DEA213236D9919C728C560615033FCD5A24C19C3AB4C1A7712C15A35220D6A947DFEE2FAFCE02B877849BB6D02F631A04E0A8
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/js/min/sf.sandiego-foundation-base.js?1709827391
Preview:	!function(t){function n(i){if(e[i])return e[i].exports;var r=e[i]={i:i,l:!1,exports:{}};return t[i].call(r.exports,r,r.exports,n),r.l=!0,r.exports}var e={};n.m=t,n.c=e,n.i=function(t){return t},n.d=function(t,e,i){n.o(t,e)\|\|Object.defineProperty(t,e,{configurable:!1,enumerable:!0,get:i})},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,n){return Object.prototype.hasOwnProperty.call(t,n)},n.p="",n(n.s=6)}([function(t,n){t.exports=jQuery},function(t,n,e){"use strict";function i(){return"rtl"===u()("html").attr("dir")}function r(t,n){return t=t\|\|6,Math.round(Math.pow(36,t+1)-Math.random()*Math.pow(36,t)).toString(36).slice(1)+(n?"-"+n:"")}function o(t){var n,e={transition:"transitionend",WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"otransitionend"},i=document.createElement("div");for(var r in e)void 0!==i.style[r]&&(n=e[r]);return n\|\|(n=setTimeout(function(){t.triggerHandler(

Chrome Cache Entry: 843

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 844

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://pmp.mxptint.net/sn.ashx?ak=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 845

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=smart_adserver_eb&google_push=AXcoOmSUHkieHzSCVAsjirmCD7B7oZRz_25e9CkaT-I-XgeAQGIsIovSy5WLakb5XIAj69xCo23uqFTpaGOL7u6IoMa1X5LGN2C7i_2yY98mEEG9SH0EkuLOEUUDYJLjD-jx0E_SN7dGH8TOpoGAi5NbhT4&google_hm=MTg5OTUwNTg5MDU5NDU2NTI0OA%3D%3D&gdpr=0&gdpr_consent=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 846

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 847

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 848

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/pubmatic/9A176ADB-73F4-4BD8-A648-23F2443493B5?gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 849

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=mhdq23P0S9imSCPyRDSTtQ%3D%3D&google_redir=https%3A%2F%2Fimage8.pubmatic.com%2FAdServer%2FImgSync%3Fsec%3D1%26p%3D156578%26mpc%3D4%26fp%3D1%26pu%3Dhttps%253A%252F%252Fimage4.pubmatic.com%252FAdServer%252FSPug%253Fp%253D156578%2526sc%253D1&google_push=AXcoOmTLLecfdkrh8XrNPYiAPAHUwxHVMhTH1d0UNuIjnx8DR10Q3My5E6JHgA0mCRvJF6fv9E6bjO0c0X7rrMgtMidlBVftkh4PIND4YZhI6BrRZvgWRtBTM2-gAzKfJnQW9vG9Jnk25EePyQMXInZH8Ug
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 850

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 851

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 245x183, components 3
Category:	downloaded
Size (bytes):	15739
Entropy (8bit):	7.932390487158774
Encrypted:	false
SSDEEP:	384:Uoj4HGYv7BFo6ImPR6KZqptZblc7OuFn4FtcVJ/uGFq:UoK7BbPCptZR/uOEV3Fq
MD5:	60DA8B1B267987FA21FE69B142C21555
SHA1:	71BB698915C97F0DC2EED9CF667899CC6C5832AF
SHA-256:	8661BE3143CCFB88CBFF93D61F1327D72588714EF3008F8106CECE87E83BD18C
SHA-512:	DBEC106248A6A05867DAC8CD3F2977F5168CE7BF43ACC6B44B858AB41FF9C87FB25BC10C19C809927531ED08C532098687E46FC53F876775A3C84B4DD00972BC
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/app/proj/docfetcher/screenshots/188432.jpg/245/183/1
Preview:	......JFIF............................................................!........."$".$................................................................................"..........2...............................................................V....>da.....l.J6..^.x.!^4JW....D..D.#<U..........D..8>.X../.....m.....O$w.@...W...!.._.....#.PD.../...[.<.....O.9y..~..cZ{3..qU....-...d.b..p..A. ....9....?JL..7.y.L....0+s.h..i.9.. 4...\|..e.A......r.p.........p....8......j.O'VX...9.m..:+.......cS$6...S.V.`..[....W(9.0....a.M..o.T../....jnK.7.j...n...<%....a..w.`.Yz.&.!.Y.I.....3......X+N.....:(s..u.,...i..id..C.yX....\.i.\p.+4...P4....@;K...X.=Y..S.7.^.4.`[...\otH.}N...}.J........f........QX....:....!.i..2.HoK.M..h.`6.*...?U..H...R.u..A..f..a.W..!...2.;.6 ...B....W(..2....N.1.'.5...ZC......n.aM. ..C...`..).~{.5 -.+.j%.zs+.:4.K=.A`...i...<..............c..C.#...iclQ....A../)#$...d..!$...HI!$...HI!$...HI!$....+........................!."#1A..$B 23C@QR.........

Chrome Cache Entry: 852

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1731)
Category:	downloaded
Size (bytes):	1780
Entropy (8bit):	5.51054249360988
Encrypted:	false
SSDEEP:	48:Z/2aPJsjw+edBaVfZzmtubdyeqFIBuz12r5Uw:tFJcZoapOubQecB2P
MD5:	D1C35163DD934DFC7D51A5662EA52222
SHA1:	0482A5D9AF7B84A933092CB70649B114604E11AA
SHA-256:	B94AE01BA7AB0A782315780FCBFB70FE987F46CE5183674FDC8E7168042B8021
SHA-512:	056C0A1873ED6CDB3D84C142A6840B00A69E2E68E73B242EF1B6D32F3D9902D04A182425ACB263CEFD95E08AB40D4C1BA38CE1BFC32B87F4952A8DD178494269
Malicious:	false
Reputation:	low
URL:	https://tag.crsspxl.com/s1.js?d=2396&cb=1710158199598
Preview:	var cp_C4w1ldN2d9PmVrkN=cp_C4w1ldN2d9PmVrkN\|\|{};.try{(function(){var d;try{d=top.document}catch(e0){try{d=document}catch(e){}}function _e(c,m){}function crsspxl(z){if(d.body==null\|\|typeof d.body=="undefined"){if(z<2500){var rec=function(){crsspxl(z*2)};setTimeout(rec,z)}}else{var l="https://tag.crsspxl.com/s2.html?d=2396",i,j;try{var r=d?d.referrer:false;r=encodeURIComponent(r);var a,f,q,e;if(r)l+="&r="+r}catch(e1){_e(0,e1);}var t=encodeURIComponent(d.title);l+="&t="+t;var u=encodeURIComponent(d.URL);l+="&u="+u;try{var s=d.querySelectorAll(".small-12.medium-5.columns");var b2="";for(j in s)b2+=" "+(s[j].innerText\|\|s[j].textContent?s[j].innerText?s[j].innerText.substring(0,400):s[j].textContent.substring(0,400):"");b2=b2.replace(/[\t\r\n]/g,"");b2=encodeURIComponent(b2+" ");l+="&b2="+b2}catch(e3){_e(2,e3);}try{if(cp_C4w1ldN2d9PmVrkN.dg1\|\|cp_C4w1ldN2d9PmVrkN.dg2){l+=cp_C4w1ldN2d9PmVrkN.dg1?"&dg1="+cp_C4w1ldN2d9PmVrkN.dg1:"";l+=cp_C4w1ldN2d9PmVrkN.dg2?"&dg2="+cp_C4w1ldN2d9PmVrkN.dg2:""}}c

Chrome Cache Entry: 853

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 500, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	24134
Entropy (8bit):	7.887285757757514
Encrypted:	false
SSDEEP:	384:+BtmU4FKd2/ZtnHTgrUqttM7muOeIZHSWTpJtXnEBMq4ePYQ/ziL/bAIPb3j:+/b4FdPTg7tiAeCyAJtXn8MpwziTZPbj
MD5:	0A3D1BC617DB85B840128295E9965FF9
SHA1:	EC4A97DE670F1CC161E393CB20277239E25152AA
SHA-256:	725885B013838531DEB49B8B0D005B2A69104E9AA3D4207E98DC72917A5D7B44
SHA-512:	67B2B3888AB5F172C6E51E5B8A004C61C2DE549162E64133DB6F7FD12144199061B9EF31F61193805B7992D62DAF43CEF18545649A3EA5E789F051B5D07F0DB2
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/images/f1_img1_300x250.png?1708393659275
Preview:	.PNG........IHDR...X..........PS... .IDATx...{\|.w}....^...l..K$'v..-.H.. .....~.4......i. ...w.!=.=.J.S..Z.=..).d .@....X..7Y..V.....C..J^I+ie.V.....fgg.;...~...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................3...(...........]....rC.Gi.^..........Pd....B..uE}...)FKS!.E......

Chrome Cache Entry: 854

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15735), with no line terminators
Category:	downloaded
Size (bytes):	15735
Entropy (8bit):	5.079095600548159
Encrypted:	false
SSDEEP:	192:j4pyHmmEHAl6dBlUz/rkUsSDfkcJDc08yLrcZucudk/tevOEBL7mYPsX7dt/fUhU:Bmly2UjrWcZckc4c4OhYEXnSzClIg
MD5:	4A124B39D226B45BD81EBE53D6F2E404
SHA1:	3D8A411F4B213A65E186A7B728543A55094E1FFF
SHA-256:	E71F9ED65E086AB36B4243D164B94D967AF8C2D646D8D892BF6AE91CF5DDF28B
SHA-512:	95B83AD9B30C571C224AB5CAE168D0F8AA03DC05C154CA884A8E340D8D9E947642F3719CA6B546DD6687FE6BA56B4348D8CB4A4D151D8A4E3259F5B2E0FD2820
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/js/min/sf.sandiego-foundation-tooltip.js?1709827391
Preview:	!function(t){function e(o){if(i[o])return i[o].exports;var n=i[o]={i:o,l:!1,exports:{}};return t[o].call(n.exports,n,n.exports,e),n.l=!0,n.exports}var i={};e.m=t,e.c=i,e.i=function(t){return t},e.d=function(t,i,o){e.o(t,i)\|\|Object.defineProperty(t,i,{configurable:!1,enumerable:!0,get:o})},e.n=function(t){var i=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(i,"a",i),i},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="",e(e.s=99)}({0:function(t,e){t.exports=jQuery},1:function(t,e){t.exports={Foundation:window.Foundation}},11:function(t,e,i){"use strict";function o(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}function n(t,e){if(!t)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return!e\|\|"object"!=typeof e&&"function"!=typeof e?t:e}function s(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Super expression must either be null or a function, not "+ty

Chrome Cache Entry: 855

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 245x183, components 3
Category:	dropped
Size (bytes):	15739
Entropy (8bit):	7.932390487158774
Encrypted:	false
SSDEEP:	384:Uoj4HGYv7BFo6ImPR6KZqptZblc7OuFn4FtcVJ/uGFq:UoK7BbPCptZR/uOEV3Fq
MD5:	60DA8B1B267987FA21FE69B142C21555
SHA1:	71BB698915C97F0DC2EED9CF667899CC6C5832AF
SHA-256:	8661BE3143CCFB88CBFF93D61F1327D72588714EF3008F8106CECE87E83BD18C
SHA-512:	DBEC106248A6A05867DAC8CD3F2977F5168CE7BF43ACC6B44B858AB41FF9C87FB25BC10C19C809927531ED08C532098687E46FC53F876775A3C84B4DD00972BC
Malicious:	false
Reputation:	low
Preview:	......JFIF............................................................!........."$".$................................................................................"..........2...............................................................V....>da.....l.J6..^.x.!^4JW....D..D.#<U..........D..8>.X../.....m.....O$w.@...W...!.._.....#.PD.../...[.<.....O.9y..~..cZ{3..qU....-...d.b..p..A. ....9....?JL..7.y.L....0+s.h..i.9.. 4...\|..e.A......r.p.........p....8......j.O'VX...9.m..:+.......cS$6...S.V.`..[....W(9.0....a.M..o.T../....jnK.7.j...n...<%....a..w.`.Yz.&.!.Y.I.....3......X+N.....:(s..u.,...i..id..C.yX....\.i.\p.+4...P4....@;K...X.=Y..S.7.^.4.`[...\otH.}N...}.J........f........QX....:....!.i..2.HoK.M..h.`6.*...?U..H...R.u..A..f..a.W..!...2.;.6 ...B....W(..2....N.1.'.5...ZC......n.aM. ..C...`..).~{.5 -.+.j%.zs+.:4.K=.A`...i...<..............c..C.#...iclQ....A../)#$...d..!$...HI!$...HI!$...HI!$....+........................!."#1A..$B 23C@QR.........

Chrome Cache Entry: 856

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2281)
Category:	downloaded
Size (bytes):	121259
Entropy (8bit):	5.5520173329177
Encrypted:	false
SSDEEP:	3072:y54Ya3rKvF0OA3SKs/5a11zD1AhElsu6XlF7p:n3urKs/uAhElsdvV
MD5:	85AF181698B846FC79BF922B451336A5
SHA1:	5055B9593B67A31F5D0A9515A5EAD0495F4D4AA2
SHA-256:	781A314BC5CD9A7CF06C5AABCD42A6A35E0B7D7823D00253E3FB6D251FA4F395
SHA-512:	9FFAD8F1D106FA4C7619E9AE3D8A8434F5EBB8539C43EC00571C0F3951BBE11366E0E817B2E5C3402C46B3524DCB07A1B254A2FE40309C4CCA3F69E82D4DAE95
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[],. "tags":[],. "predicates":[],. "rules":[].},."runtime":[ .]..........};...var ba,da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},fa=function(a){return a.raw=a},ha=function(a,b){a.raw=b;return a},ia=function(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:da(a)};throw Error(String(a)+" is not an iterable or ArrayLike");},ja=function(a){for(var b,c=[];!(b=a.next()).done;)c.push(b.value);return c},ka=function(a){return a instanceof Array?a:.ja(ia(a))},la="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b},ma;if("function"==typeof Object.setPrototypeOf)ma=Object.setPrototypeOf;else{var na;a:{var oa={a:!0},pa={};try{pa.__proto__=oa;na=pa.a;break a}catch(a){}na=!1}ma=na?functi

Chrome Cache Entry: 857

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (828)
Category:	downloaded
Size (bytes):	1027
Entropy (8bit):	5.567986003798838
Encrypted:	false
SSDEEP:	24:2e2C6hHfhiVIBUiWfwp4YgAKzN94KoONBVNTgBf:2e2C6lIni69Acn46BVlgBf
MD5:	6A92EDFAE1DB824561C589EBC44A57E0
SHA1:	2A464E455420B1C104069AB39814E19D3DDA0B1E
SHA-256:	2D2D16500D6EAA53C33D7F41386B58623EC53A5FFC6A917DC4AC96850F8EEE69
SHA-512:	59DF35CFB466FE4ACB80EF2069231D042ADF717C0FF9856F7BFDAB2C5107D895249E416F5B639CCF035A4698A55F73AE59CD973EF19AF00E88D112A5919B98E3
Malicious:	false
Reputation:	low
URL:	https://eu-u.openx.net/w/1.0/cm?id=a547219b-814b-4e3e-8a4f-35c044fa1891&ph=ec81d0b7-c42e-4a42-b97a-9305af647d30&r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D100%26partneruserid%3D%7BOPENX_ID%7D&gdpr=0&gdpr_consent=
Preview:	<html>.<head><title>Pixels</title></head>.<body>.<script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script>..<img src="https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=100&partneruserid=ec7ad717-1f8c-4815-8c2c-86fdc6330201&gdpr=0&gdpr_consent="><img src="https://sync-tm.everesttech.net/upi/pid/ny75r2x0?redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537148856%26val%3D%24%7BTM_USER_ID%7D"><img src="https://pr-bh.ybp.yahoo.com/sync/openx/6d3426ab-1ee2-e530-fa69-2e341f77148e?gdpr=0"><img src="https://s.amazon-adsystem.com/dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=a1253c92-92e4-cc83-0bb0-ba5688131227"><img src="https://match.adsrvr.org/track/cmf/openx?oxid=f9f340ef-8e4e-7779-cbbe-38c1e020d9c7&gdpr=0"><img src="https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=ZDU5YzkzMjUtNDczOS0yOWRkLWRlNWUtNjI3ODJhYzIxN2E3"><img src="https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&go

Chrome Cache Entry: 858

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 859

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&gdpr_consent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 860

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 861

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	301115
Entropy (8bit):	5.362832649188443
Encrypted:	false
SSDEEP:	6144:zo6WAJ8gpnpsGVp9MuRxmPO1NECu03I8c3P:zrWAbVpm6j3ne
MD5:	6845FD4002202F5A3EDA82F9D56E43D1
SHA1:	65A0B3D59B33A0FB3577919EAD85582863C2682E
SHA-256:	9100678F6590B5669D52CAB7967A5BA7D6E4A9D96C89D7DE036B9C4FA8857A9B
SHA-512:	601184898E07E4E4F0A333934D2DB2D9AEF77E7E57F179D5621DDDB7DEBD68807277CED8ECD773788554748B6A4179DE7A3428959CA35B8CD1631E441FF15F9C
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/js/sftheme/vendor/bizx-prebid.js?1709827391
Preview:	!function(e){function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}var t={};n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{configurable:!1,enumerable:!0,get:r})},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,n){return Object.prototype.hasOwnProperty.call(e,n)},n.p="",n(n.s=14)}({0:function(e,n,t){"use strict";t(1),n.pbjs=window.pbjs\|\|{},n.pbjs.que=n.pbjs.que\|\|[],n.prebidOptions={showIndicators:!0},n.browserHasWindowPerformance=function(){return void 0!==window.performance&&(void 0!==window.performance.mark&&(void 0!==window.performance.measure&&void 0!==window.performance.getEntriesByName))},n.hasPerformance=n.browserHasWindowPerformance(),n.debugAdUnits=function(e){window.console.log(e)},n.prebidLog=function(){n.PREBID_DEBUG&&Function.prototype.apply.call(console.log,console,arguments)},n.getRandomKey=func

Chrome Cache Entry: 862

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=97055&time=1710158240563&url=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2F
Preview:	{}

Chrome Cache Entry: 863

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (829), with no line terminators
Category:	downloaded
Size (bytes):	829
Entropy (8bit):	5.393669588607764
Encrypted:	false
SSDEEP:	24:4HksvI8q5/Jz2pRNrBZJuvu8goqc0ioNhc+Fe4+mI:2+z2bNrVENtmN+Q+j
MD5:	82F6CCACA438EA9BB4F6C8E338A62198
SHA1:	32BEF44063ABC2E06FFB5AA5257BF0C913C35E1B
SHA-256:	F3F5E75C35D4E6A87FA360F6FF5DC470A671D52A2A06A2F027F006998333D844
SHA-512:	898CE756ED2A61E8687662259BF2C099203158380CE66E8E4C9B5C429429FCC8C670E0A1549DB41103F021F09B1EFF5421A0DF12702A05A70BE8B5DBC203DB62
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/aframe
Preview:	<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="ieZUcO504DUnLZ7UluBs6A">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha / try{var clients={'sodar':'https://pagead2.googlesyndication.com/pagead/sodar?'};window.addEventListener("message",function(a){try{if(a.source===window.parent){var b=JSON.parse(a.data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("rc::a")?sessionStorage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorage.getItem("rc::e")\|\|0)+1);localStorage.setItem("rc::h",'1710158264077');}}}catch(b){}});window.parent.postMessage("_grecaptcha_ready", "");}catch(b){}</script></body></html>

Chrome Cache Entry: 864

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://tag.crsspxl.com/m.gif?tdid=71dcd657-b7ce-4e56-9064-0f83979f8fcb
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 865

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 24712, version 1.0
Category:	downloaded
Size (bytes):	24712
Entropy (8bit):	7.991204058436397
Encrypted:	true
SSDEEP:	768:ZfRLYs8uBykIQZ6yXBeQOS9JUmBgKYTbgVec:vsbmrDXwEfUmBgKYTc4c
MD5:	5366C57B20A86F1956780DA5E26AAC90
SHA1:	927DCA34817D3C42D9647A846854DAD3CBCDB533
SHA-256:	F254EB93B015455A3C89AAF970631BC989FE2BD387F79E871B514992359651AA
SHA-512:	15D7127970436F2510344600F3ACECC19C39A05F8E82C8A7950095386382B2E2DA55883A5A9FAA97B84452E67315B9AC1693B6592274C8C1C35C813DFEB543A2
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/css/fonts/sftheme/lato-v20-latin-ext_latin-700.woff2
Preview:	wOF2......`...........`(..........................X.p.`.......e.....\|.....x..6.$..^. .....u.K...%l\-.q....'.u..D..3......w....:rT.I.m....,L...F.....}.....3.B.uPb..&,W.[...2Y..y.N..,......\r;.s....ir^....n.o.....m..[W......rx...!...H..0..@..~)../.......95.N.......Nf2yy..DV.%...wM.............P.iI..DD..+...s......97..[..\|.._..s...$.@)M....&...jJ...}?I.........f#<T.J...-....\..........h.eseo5.jLu.Z]ug.!]...8x:!>.m........uy....[. S...rY..s...$ .......c.g../V.o../...}Q...<...3n...5.&\..I..PAz....{.z..R.]$..{}.@y ?.7s'...i..+)...I%..<c....Fj..x@.=..2...'.Y6..X1...@..G.U...........<......Z.P/...f.h..k..g>..A4.l.l..s.<.....I...v....RU.z....O.T"zsAn..[..o]..]......r.L..@.d../..P..&.i..^)................H./"..MD.....!KRL..`.41s.t,.......U..}..5.....<..).J.7....\<...AR iI.g$SN..$:.......h....d...-O..R...PT.s..hr....n.......?Y"..T...[.3?.Brq.Gnr9B..dK$FJ..2;.aG..NFx..q..;...0.....@$.=.p@....YH...[..?...N_....p...&."..0\|'.....}3....S'NTUDl....^..!.....MB

Chrome Cache Entry: 866

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://sourceforge.net/directory/tp3/?b=69513&c=13409&z=66895&cb=8b302bed4f
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 867

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://sourceforge.net/directory/tp3/?b=66709&c=12881&z=64083&cb=2daf02b8d0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 868

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 245x183, components 3
Category:	dropped
Size (bytes):	10679
Entropy (8bit):	7.935038261366606
Encrypted:	false
SSDEEP:	192:Bvi71BQBquOH4jQTvs5ykq1Y0WbZFJJ6pEp2Fr6CifC6TKgzyv:BaJBQBq4QTvs5ykq1Y/brJ8pV6b7Keyv
MD5:	D6C6F9228F4952917F78938A8FF54E9E
SHA1:	60056F3F042F5C0074E51EB9109F15B13146381E
SHA-256:	E18B6CA17C6C7ADC0F0184A8E3F2C990EFD485CE6FD8239CFA39AA65D5634A0E
SHA-512:	9C5D5F8F03815051296072A8F45CD2E6266BE141C750B05C89D2088951E80816C4A10F9058890960E20B9C22F4FB2571E0244FD87A67FF71CB55A537182E6AAA
Malicious:	false
Reputation:	low
Preview:	......JFIF............................................................!........."$".$................................................................................"..........5..................................................................}..._..L_R..?$.m......s-<b..[...Z..%.({^..............x........4...x\|.w._..y...m...f.<..iS.g..K.W.W3....KcR.Kl=......g.\.Ma..W]aL+.ID..).Mfy...lx\../..z....e[7.z..b...u...c.....-.... ....!..)...\?...'.zy.Y.....:..w..v.j........).../R....O.t....;.m~....5b...`.......!M..%..G....m\|..L........]&..).,.\fi.Y..a...s.]..k.s.e..Q...cfk....H.z......\D..n.{..~m.{...v...D.mk@.J.~(..~(..~(..[...5..J..6.]3....x.\|.G.........#.sd..X.b../,.....k........w.........Yq.k........}'.{...5..[...mR...Oeg~i./......i....S...a..%^Lr.>....o...`0....kyZV....h..@....kK....Q..A.e......[..\...q.....h.>..7..........q@6...~m$j.t...7.Z..F..q.Cw.G].i.6...F..z.OM.k...Lytz..p.8.L.1..8.O<.r$..H...<..}......./.........................

Chrome Cache Entry: 869

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 360x720, components 3
Category:	dropped
Size (bytes):	28779
Entropy (8bit):	7.968274695930844
Encrypted:	false
SSDEEP:	768:a/8zkalU7P6y9W7Z+URWHYjR+F5WecuLqGYvL9Sn2yv:a/8zLa7P6ysZdRmaR+Sho0Lwb
MD5:	593A808486F7316FF89139BC07BA5238
SHA1:	26CEEFB7AE289F55B6975E0D13A10351909C0195
SHA-256:	F89BFF9AA74E983B1547F9AC4CC3CBB0B984DBBF0B092F7D30D0414D68B5C33D
SHA-512:	CDF994EC9737CB724E903473F38567FA856394D7134DF6EA43F6B8BEF7146E347AB160D955BE781F8635F8DC03195797AEB3A9CC3636005E373AA6BEB1D7580A
Malicious:	false
Reputation:	low
Preview:	......JFIF..................................................."... ....+. $%(((..-1-&0"'(&...........'...'&&'(''&&&'&&'&&&''&&&&'&&&&&&&&'''&'&&&&&&&&&&&&&........h.."........................................S.........................!..1AQ"aq..2R..#3BTr......Sb......$s..5CUt.....46Dc...%................................8........................!.1AQ...."2Raq......#3..Bbr$S.............?...!...!...B.B.... .!...B.B.... .!...B.B.... .!...\........b..]Ho.55.......b..i.=.9.....=........`.>.J.......\|.]w..79U/f..).O.#n.....8...qP..[(..X.Z.m~.+j~....f.}..cW.{..z.H..7.gqN.^..L.OfN...O..[U......o.../..[..a..!.(.....}f.......n.#(,..T$D%H.D%B.P. .!....@.B,.,."...J..!.@.B.... ..l...!..%.VH....6..:....@.E.B.?]...+'a6.i=..*.../.K..\m...HT..h#t.I=...op.Y.]B1\.o...`.+i[f...yO$h....W..pN..]......4${....../..a.....M.^.....+Fb. ..t...QT.b..n<.`.6.P...sZ.......r.'..q..F.rxk._?..B..<..\|F&4..k@.H...g..s9.vX.4.s..>..H\^.cF.^$..tod.......,-..e..]o.A.u........Ou./rB..Fk......

Chrome Cache Entry: 870

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2194), with no line terminators
Category:	downloaded
Size (bytes):	2194
Entropy (8bit):	5.615132538666539
Encrypted:	false
SSDEEP:	48:C2ucOAuca9uO4uBAedCKAHVTpGBlUusyufTd/Z0uuCq:C23F3a9F4kdCbn7fFBq
MD5:	4EACC3C440716181E3E1CCCFB5818338
SHA1:	9593F12066ED443CF418C45994CAA2570147D210
SHA-256:	CDC842ABF12E90F2844FD55600BB1790F92CF79F082251315801FBC6BAF5BAD3
SHA-512:	62AD44A669F48E61045A5F25055BE507543C6F14FCE38EF6D0BF0645B144D22641849121DC4F949A1E787472685E2387E0B531A9106A051D83DC0E900441FB15
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=55881087&p=162538&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn.com/712188.gif?partner_uid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=9A176ADB-73F4-4BD8-A648-23F2443493B5/gdpr=0/gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://ib.adnxs.com/getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://p.rfihub.com/cm?pub=224&in=1&getuid=https%3A//image2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI

Chrome Cache Entry: 871

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 245x183, components 3
Category:	downloaded
Size (bytes):	10679
Entropy (8bit):	7.935038261366606
Encrypted:	false
SSDEEP:	192:Bvi71BQBquOH4jQTvs5ykq1Y0WbZFJJ6pEp2Fr6CifC6TKgzyv:BaJBQBq4QTvs5ykq1Y/brJ8pV6b7Keyv
MD5:	D6C6F9228F4952917F78938A8FF54E9E
SHA1:	60056F3F042F5C0074E51EB9109F15B13146381E
SHA-256:	E18B6CA17C6C7ADC0F0184A8E3F2C990EFD485CE6FD8239CFA39AA65D5634A0E
SHA-512:	9C5D5F8F03815051296072A8F45CD2E6266BE141C750B05C89D2088951E80816C4A10F9058890960E20B9C22F4FB2571E0244FD87A67FF71CB55A537182E6AAA
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/app/proj/docfetcher/screenshots/279961.jpg/245/183/1
Preview:	......JFIF............................................................!........."$".$................................................................................"..........5..................................................................}..._..L_R..?$.m......s-<b..[...Z..%.({^..............x........4...x\|.w._..y...m...f.<..iS.g..K.W.W3....KcR.Kl=......g.\.Ma..W]aL+.ID..).Mfy...lx\../..z....e[7.z..b...u...c.....-.... ....!..)...\?...'.zy.Y.....:..w..v.j........).../R....O.t....;.m~....5b...`.......!M..%..G....m\|..L........]&..).,.\fi.Y..a...s.]..k.s.e..Q...cfk....H.z......\D..n.{..~m.{...v...D.mk@.J.~(..~(..~(..[...5..J..6.]3....x.\|.G.........#.sd..X.b../,.....k........w.........Yq.k........}'.{...5..[...mR...Oeg~i./......i....S...a..%^Lr.>....o...`0....kyZV....h..@....kK....Q..A.e......[..\...q.....h.>..7..........q@6...~m$j.t...7.Z..F..q.Cw.G].i.6...F..z.OM.k...Lytz..p.8.L.1..8.O<.r$..H...<..}......./.........................

Chrome Cache Entry: 872

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://tag.crsspxl.com/m.gif?mmid=3e9d65ee-f197-4b00-b33c-8e23896e09ac
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 873

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2549
Entropy (8bit):	4.540747775000225
Encrypted:	false
SSDEEP:	48:cfkAvf3R7DSRcZBV0wyyCq7QmEC1VIJUTA8hTD:uvfVSMqfq7QmECVwUTHD
MD5:	0EC28A189B84FCD3EC2EE7A376BC929C
SHA1:	029CE2F231778EF4228A33206FA84E4118E44569
SHA-256:	67285130C9EA896794BD451295DB6A03A4F5B7941CB9EFD5D5088D06F63208D7
SHA-512:	A82967AA1E05D493A95F1C57B5792B6C414953494FA9C093D2BBCF74CD7047654E05572A001272A7D4BC8D877D27DD4ED8F22B51CE3453A2C2955C9BBDEC2CDC
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/images/sandiego/sf-icon-black.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 21.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 300 249.4" style="enable-background:new 0 0 300 249.4;" xml:space="preserve">.<g>..<path d="M138.5,112.8c0-39.6-14-57.6-21.4-64.4c-1.5-1.3-3.7-0.1-3.6,1.8c1.5,22.4-26.6,27.9-26.6,62.9h0c0,0.1,0,0.1,0,0.2...c0,21.4,16.2,38.8,36.1,38.8c19.9,0,36.1-17.4,36.1-38.8c0-0.1,0-0.1,0-0.2h0c0-9.9-3.7-19.4-7.5-26.5c-0.7-1.4-2.9-0.9-2.6,0.4...C155.5,117.3,138.5,136.1,138.5,112.8z"/>..<g>...<path d="M95.6,196.2c-0.9,0-1.8-0.4-2.4-1L1,103.2c-1.3-1.3-1.3-3.5,0-4.9L98.3,1c0.7-0.7,1.5-1,2.4-1h27.9c1.7,0,2.8,1.1,3.2,2.1....c0.4,1,0.5,2.6-0.7,3.8L39.6,97.4c-1.8,1.8-1.8,4.8,0,6.7l72.3,72.3c1.3,1.3,1.3,3.5,0,4.9l-13.8,14....C97.4,195.9,96.5,196.2,95.6,196.2z"/>..</g>..<g>...<path d="M114.1,212.4c-1.7,0-2.8-1.1-3.2-2.1c-0.4-1-0.5-2.6,0.7-

Chrome Cache Entry: 874

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	124191
Entropy (8bit):	5.563204071326525
Encrypted:	false
SSDEEP:	1536:htvUIP0QQo4j4INaJ0jREUOfGoJWoP9IDQpBznwsXbs5tIgsqUqkRE4X:3UIMF1EUOLN9I3sXbRglR4X
MD5:	2499F052BEB239E04C34FF35F6066A0E
SHA1:	F3DA4DDC4F0ED740ACD46B46FCDA857F773805B4
SHA-256:	A010E9A1F194667C4FC3E057B88F83A5E6866D34B0B8214134CA232CEEB262A8
SHA-512:	D3F2CB6E4B75B1133310B5A36246D859BA168DC719751D22856D6BC8CB20D4D64E4A9E6470B4433C7934C2DA2A81799ECC11CE156399BA4C5EE49A4A184F1373
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/js/min/sf.sandiego-dwnld.js?1709827391
Preview:	var __extends=(this&&this.__extends)\|\|(function(){var a=function(e,c){a=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array&&function(g,f){g.__proto__=f})\|\|function(h,f){for(var g in f){if(Object.prototype.hasOwnProperty.call(f,g)){h[g]=f[g]}}};return a(e,c)};return function(f,c){if(typeof c!=="function"&&c!==null){throw new TypeError("Class extends value "+String(c)+" is not a constructor or null")}a(f,c);function e(){this.constructor=f}f.prototype=c===null?Object.create(c):(e.prototype=c.prototype,new e())}})();SF.Widgets=SF.Widgets\|\|{};var SendLinkWidget=(function(){function a(b,c){this.defaults={modalID:null};this.settings=$.extend(this.defaults,c);this.$form=b;b.on("submit",this.submit.bind(this))}a.prototype.submit=function(b){b.preventDefault();SF.doRecaptcha(b,$(".g-recaptcha",this.$form),this.realSubmit.bind(this))};a.prototype.realSubmit=function(b){var c=this.$form.attr("action");$.ajax({url:c,type:"post",data:this.$form.serialize()}).done(this.handleAjaxSuccess.bind(this

Chrome Cache Entry: 875

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjst0CHs8PE5661DlzJpA6JqQDlhVXEDqbXdw1OaA80IzTGnEmNzLNhRCW4JmhISfKmwyDjUebMssp9WYPmXJJCZbl3DBknlyK6m_Q80ctxfosH2FeaKHhqBOusrkfcxI0xfUpnes0qLRSD_cbrem6HFYzwBwlw2uUFA&sai=AMfl-YQ17HjU6EBc3wtdrDbLk9hOjZZ8quaMGbu0KMlQMoBN4Ng8iHta1HjQ4pDZP4dB83MXGWLJYSV4eBO11MFmiI_oGfYUhYjbMUMLDgyvWkTMOGd7F8gE2xZ0cF_S&sig=Cg0ArKJSzHR6aWyOrD77EAE&cid=CAQSPAB7FLtqAmft7K1mHHUIv2XQPb4fGOrTyvGVGq8MIYM10hv-08mSXhDFo6ZEwvyrj6BTw_B2OVYnhIk68RgB&id=ampim&o=0,251&d=970,250&ss=1280,1024&bs=970,250&mcvt=1000&mtos=0,0,0,1000,1000&tos=0,0,0,1000,0&tfs=82&tls=1082&g=100&h=100&tt=1082&r=v&avms=ampa&uap=Windows&uapv=10.0.0&uaa=x86&uam=&uafv=117.0.5938.132&uab=64&uafvl=%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D&uaw=false&adk=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 876

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 877

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17729), with no line terminators
Category:	downloaded
Size (bytes):	17729
Entropy (8bit):	5.344189706071749
Encrypted:	false
SSDEEP:	384:KFVvdUoAN5wQpJry6zK0OYaWO4g8yCFf6h8zyBio3oipkPcGRabEviSGxC+upj3v:Cl0z/g8VVKoGkkQ
MD5:	41E1DE2061B5162671C94AAF53E51CC1
SHA1:	2D46EE513332C26FC7FC99A7CF2E7BF48F65CDA0
SHA-256:	04A4EC051482DBEAC84BF68C61FE3ABC1CD91A21D49527E14521723BD7606D94
SHA-512:	688E2CCED220508A48A299FDE4C1755720A228AA9853F949672F77B3BDC736188816084BA75BD0AAF41C11557E83A6D4DE2D5D732AD4DEDEDEB05632B4AA31BC
Malicious:	false
Reputation:	low
URL:	https://cdn.flashtalking.com/pageFold/ftpagefold_v4.7.2.js
Preview:	var ftPID,TEST_MODE=!1,LEGACY_EVENTS=!0,TICK_INTERVAL=100,DEV_MODE=!1,VIEWABLE_IMPRESSION=!0,TESTING=!0;!function(){function a(i,e){e=e\|\|window;function t(){s\|\|(s=!0,n.initAdVisibility(i))}var n=this,o=(n.placementId=i.pID\|\|i.placement&&i.placement.id\|\|"",n.creativeId=i.creativeID\|\|i.creative&&i.creative.id\|\|"",n.creativeWidth=i.width\|\|i.creative&&i.creative.width\|\|"",n.creativeHeight=i.height\|\|i.creative&&i.creative.height\|\|"",e.navigator.userAgent),r=e.navigator.platform,s=!1;if(n.window=e,n.document=e.document,n.FF=/fox/.test(o),n.IE=/MSIE/.test(o)\|\|/\(Windows NT [0-9]{1,2}\.[0-9]\; Trident\/[0-9]\.[0-9];/.test(o),n.edgeVersion=+(/edge.(\d+)/i.exec(o)\|\|["","0"]).pop(),n.ios=/iP(ad\|od\|hone)/.test(o),n.safari=n.ios\|\|/safari/i.test(o)&&!/chrome/i.test(o)&&!/android/i.test(o)&&!/edge/i.test(o),n.safariVersion=n.safari?(/Version.(\d+)/.exec(o)\|\|["0"]).pop():0,n.isMobile=function(){function e(e){return(RegExp(e+"[/ ](\\d+(?:[\\._]\\d+)*)").exec(o)\|\|[""]).pop().replace(/_/g,".")\|\|!1}var t=

Chrome Cache Entry: 878

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2060
Entropy (8bit):	7.896446775979364
Encrypted:	false
SSDEEP:	48:+2yUy+h6ty4aLPe7TJYate31Xfn8LP9hx/KYw17NvG4TnrZ:+2Rwtf7De31v8LP9hx/5ENvtLrZ
MD5:	AFBD51DF4F0430087DD5029D53FE2121
SHA1:	4796207E2D317A4D5A1A8E5E7BEA0CB16A0DFE4E
SHA-256:	943CD7049E353963289329AC1F1385ADC6D305492A7E62DAE8E967547BB73F4A
SHA-512:	CDF5B2D9B3091FEC48BB1FE1E13B807CB30F4DA03F022F52627EFE199D421DA0138B5CF83A8CBCA5786E3C6F0EB0F360EB24F5CE70C1F16613CF2AEE5661A0F0
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/allura/mirror/amaze-file-manager/icon?1708208065?&w=48
Preview:	RIFF....WEBPVP8L....//...M(h..Q...G\|$".?.R%!...F0...m#I.....7.?..m#9b.e.....Gl.IR......Xc>......6a..f...".TDbg?..M..~>;...{.q.g.mH.....@H...../r..ff.f.2C..cN.T...S.....h.=...../......H.6.hty...~J....GZ.9...r..EG.l.vU..>O...6./.Ds.4.2..".>..w...$I.d...33....m..CgxL....Z...Y<'..pFC0..3.KN^.L..v.sy..]>.../MV..[.HY.)..b=_T....4.Y..1(......u....E...l..`#..>..k.q...JEuAK.J.......b...h..6..d+W.f......>q....9. .@!..j.6Aj..9'...x......U.[..6.[#b]g.o.~.../...k...U....oj..k.T..\YI....9....T}..{......w..>.k-08im.&.....J.\.....U...e(..... .\..#.B.JefA...k..W_...Tz......~^8A.Jr....~..K..=.E.s%8...T.n!...~..A.(.$A....IN..i.)...........T.#y.f...3..N...B@......B./...\|H.........B(.2P........#......g.g.~p..M.P..D........X...`....z..._.]0.....(...b.U6..B^.......gq..V?..l..-L.A.....8!...l....\|7.60..bo...u[..;s....@..Z...IWUU%./.._.....k&l....>t.o.m.;...[.G..{n#h.fK.\|.2I...k..+..Y.V<.S..}.).:l..;..xH3.k.......wX.../.0.s. +...;..6.$....~z.~.0.7....{..

Chrome Cache Entry: 879

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	16376
Entropy (8bit):	4.102601735562643
Encrypted:	false
SSDEEP:	384:mE/AqpOzZKACajiFbR7Y42R13WmxvGFfCwSVeXd6LKW2BFa2Abu:aEbR7Y8HKKtzj
MD5:	535DE5A927A8EB5A004CDC0A6B6320DD
SHA1:	AE858F2CCA92E59584B7FE9F54BB3FB90B21DADB
SHA-256:	1744FB413B91B276F5E17347382B664D6CA6C4EA4DB69825CAA97C16DD5D37C3
SHA-512:	65808C8FEC4B2A895244F892A2CFE8EC69E45A6F53BBFE48F1AA8034968F5250B9DE73B2BDB8CDF12A75B90950E1DCEB0A13137CB4C74ACDF7B094813D1EB595
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 21.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px". viewBox="0 0 653 102.6" style="enable-background:new 0 0 653 102.6;" xml:space="preserve">.<style type="text/css">. .st0{fill:#FF6600;}. .st1{fill:#FFFFFF;}. .st2{fill:#FFFFFF;}.</style>.<path class="st0" d="M66.9,54.5c0-19.1-6.8-27.8-10.4-31.1c-0.7-0.6-1.8-0.1-1.7,0.9c0.7,10.8-12.9,13.5-12.9,30.4h0. c0,0,0,0.1,0,0.1c0,10.3,7.8,18.7,17.4,18.7c9.6,0,17.4-8.4,17.4-18.7c0,0,0-0.1,0-0.1h0c0-4.8-1.8-9.4-3.6-12.8. c-0.4-0.7-1.4-0.4-1.3,0.2C75.1,56.7,66.9,65.7,66.9,54.5z"/>.<g>. <path class="st0" d="M46.2,94.8c-0.4,0-0.9-0.2-1.2-0.5L0.5,49.8c-0.6-0.6-0.6-1.7,0-2.4l47-47C47.8,0.2,48.2,0,48.6,0h13.5. c0.8,0,1.3,0.5,1.5,1c0.2,0.5,0.2,1.2-0.4,1.8L19.1,47c-0.9,0.9-0.9,2.3,0,3.2L54,85.2c0.6,0.6,0.6,1.7,0,2.4l-6.7,

Chrome Cache Entry: 880

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	65995
Entropy (8bit):	5.981930388714979
Encrypted:	false
SSDEEP:	768:IWWkXYFyBN8NBTO6EQ6E6k6u6o6j6u616r6J74r1nfHA:Ibk0nk7bR/2RsOh4xfg
MD5:	EF25C05F8A3F88CAC88943F8ECEBF023
SHA1:	F070B482D26A03E7744DB8E057073D4D668E1937
SHA-256:	2CF86C18381642490DDEC93F693228C1FDA860255B5FE557B150A4A3D464C449
SHA-512:	5D03DBC7F4931BA573832891A1421F02ED4C1B5779F0FD36A6E1D318E347E06C90A074C562689BEB18B9899582FAB25B2D150B487D5DE6C89ED98C52A6A1E6F9
Malicious:	false
Reputation:	low
Preview:	{"/41014381/Sourceforge/SF_ProjectSum_728x90_A":["html",0,null,null,1,250,970,0,1,null,null,null,1,null,[115763391621],[2168334381],[2036965341],[1511469861],[151821],null,null,null,null,null,null,1,null,null,null,null,null,null,null,"CMbmnYWU7IQDFfqvOgUdjkwG1w",null,null,null,null,null,null,null,null,["012402262017000"],null,null,null,null,null,"3",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012402262017000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}html:not([amp4ads]),html:not([amp4ads]) body{height:auto!important}html:not([amp4ads]) body{margin:0!important}body{-webkit-text-size-adjust:100%;-moz-text-size-adjust:100%;-ms-text-size-adjust:

Chrome Cache Entry: 881

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2610)
Category:	downloaded
Size (bytes):	8011
Entropy (8bit):	5.330612921426486
Encrypted:	false
SSDEEP:	192:gqCQ4U2eLQepy4c49fAhBE5ghSv0/M0K/qAfzQ5/5E98Ma:e1Fneph799ghSv0reLQ5/5EeMa
MD5:	C149381926845FC48B227D79CA5E0F4D
SHA1:	680B342B5F6ECD1067AEB794EAE1C135AFCAF7BA
SHA-256:	EF34301455784E8A56ECC7A80985D6FD317DDD8328B6232DC0BC3223D79C91C2
SHA-512:	FD127F8CDCD8AA75A91A4040B4FAABD86CF3F321EF408B3B1D1ADDB96B7414ADCE47F03ECC1C268C1FD66F8039FECD59DB5420D4BA62A808C3166FAC1C945A4C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/r20240306/r20110914/elements/html/omrhp_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var g=this\|\|self;function h(a){h[" "](a);return a}h[" "]=function(){};function l(a){let b=g,c=0;for(;b&&40>c++;){var d=!1;try{var e;if(e=!!b&&null!=b.location.href)b:{try{h(b.foo);e=!0;break b}catch(f){}e=!1}d=e}catch{d=!1}if(d&&a(b))break;a:{try{const f=b.parent;if(f&&f!=b){b=f;break a}}catch{}b=null}}}function n(a,b){if(a)for(const c in a)Object.prototype.hasOwnProperty.call(a,c)&&b(a[c],c,a)}function p(a=document){return a.createElement("img")};function q(){return new r(a=>a(void 0))}function t(a,b){if(!a.h)if(b instanceof r)b.then(c=>{t(a,c)});else{a.h=!0;a.i=b;for(b=0;b<a.g.length;++b)u(a,a.g[b]);a.g=[]}}function u(a,b){a.h?b(a.i):a.g.push(b)}class r{constructor(a){this.h=!1;this.g=[];a(b=>{t(this,b)})}then(a){return new r(b=>{u(this,c=>{b(a(c))})})}};var w=a=>{let b="https://pagead2.googlesyndication.com/pagead/gen_204?id=rhmss";n(a,(c,d)=>{if(c\|\|0===c)b+=`&${d}=${enc

Chrome Cache Entry: 882

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (30967)
Category:	downloaded
Size (bytes):	104248
Entropy (8bit):	5.474929457591932
Encrypted:	false
SSDEEP:	1536:tYagKkecz5KA3Rwcoct0xqK3jnLkV9YHBTdDeigsFBqPYXxxh8ITTOt+:B3uMc1tRK3Hg9YHB/gsFYQ2QN
MD5:	BAA03D905793A8F5DC2AD7A8606E11F1
SHA1:	D90B9D8D0D80CFA8791FE509C13434573E631BE0
SHA-256:	DECC3A196EA1BC3F8B09BE68541DC09C8CEEFCD39CE29F02D67504FA6954E2EC
SHA-512:	8787E76A92CBFAE1D48E1D0BEED6562C799D0249AD0476D29160EC93DCB01943D76FE849601B746770467AFD2CD050E0370C3BA9933FCE9ABF7B7F2013AE2F22
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8" />. <title>Topics Frame</title>. <meta. http-equiv="origin-trial". content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=". />. <script>. ./.. Copyright 2022 Google LLC. SPDX-License-Identifier: Apache-2.0./.var m,aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find

Chrome Cache Entry: 883

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 884

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	49888
Entropy (8bit):	5.9446829134045664
Encrypted:	false
SSDEEP:	768:UWdkXYFyBN8crloaKhTqhTk74ohTezK9r:UQkrvKQq4oqK1
MD5:	539DA8E39F1166026B2FB9F05FEF7543
SHA1:	1589554BF5706FE197FA73AFD651C823B967C7FE
SHA-256:	F5D94809D05147CB90AA231BE4ADD02B7BA157B489B24E4D3A616CD30B8A2C5B
SHA-512:	982FB04F66F16212091D565F1BE7EA2DBFC262C43013442602F0A0A295F469D87559A9966F203EB2CA6CA9256123D1B29245794C79DF3C6D3BADB04823622346
Malicious:	false
Reputation:	low
Preview:	{"/41014381/Sourceforge/SF_ProjectSum_300x250_A":["html",0,null,null,0,600,300,0,1,null,null,null,1,null,[138416297042],[6180654644],[2036965341],[1511469861],[151821],null,null,null,null,null,null,0,null,null,null,null,null,null,null,"CPz294SU7IQDFV5WCAQd2psOjw",null,null,null,null,null,null,null,null,["012402262017000"],null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012402262017000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}html:not([amp4ads]),html:not([amp4ads]) body{height:auto!important}html:not([amp4ads]) body{margin:0!important}body{-webkit-text-size-adjust:100%;-moz-text-size-adjust:100%;-ms-text-size-adjust

Chrome Cache Entry: 885

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 500, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	24134
Entropy (8bit):	7.887285757757514
Encrypted:	false
SSDEEP:	384:+BtmU4FKd2/ZtnHTgrUqttM7muOeIZHSWTpJtXnEBMq4ePYQ/ziL/bAIPb3j:+/b4FdPTg7tiAeCyAJtXn8MpwziTZPbj
MD5:	0A3D1BC617DB85B840128295E9965FF9
SHA1:	EC4A97DE670F1CC161E393CB20277239E25152AA
SHA-256:	725885B013838531DEB49B8B0D005B2A69104E9AA3D4207E98DC72917A5D7B44
SHA-512:	67B2B3888AB5F172C6E51E5B8A004C61C2DE549162E64133DB6F7FD12144199061B9EF31F61193805B7992D62DAF43CEF18545649A3EA5E789F051B5D07F0DB2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X..........PS... .IDATx...{\|.w}....^...l..K$'v..-.H.. .....~.4......i. ...w.!=.=.J.S..Z.=..).d .@....X..7Y..V.....C..J^I+ie.V.....fgg.;...~...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................3...(...........]....rC.Gi.^..........Pd....B..uE}...)FKS!.E......

Chrome Cache Entry: 886

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 887

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1556), with no line terminators
Category:	downloaded
Size (bytes):	1556
Entropy (8bit):	5.412602092977492
Encrypted:	false
SSDEEP:	24:keh2BGh3IVlhNUnuhEnwuhmGhwrMhDh72CpAhthxjxw99hXBhYKqhZc8h2BQPO22:MBzEiYhhFoczB72+xL
MD5:	0FBD08ACEE46D9175D7F1EFA2719CB8C
SHA1:	B0DA28ABF511561DB22A6B1636A9DA8BD1F494BA
SHA-256:	7326B300FD789C06A091201F0B5843DAAFD658CF675A468C9D404DCC407D5F17
SHA-512:	3C0C02F6ECBCE2425C2A3954ECF6517D5CCD5BF6A37001262B031AF07CEEC8E3ADA2EB666C23856288634DF5CA8A546EAF3E5454A10A5D58267E88A186F9E61B
Malicious:	false
Reputation:	low
URL:	https://tag.crsspxl.com/s2.html?d=2396&r=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Fpostdownload&t=DocFetcher%20download%20%7C%20SourceForge.net&u=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2F&b2=%20CategoriesFile%20Managers%2C%20Search%2C%20Source%20Code%20Management%20LicenseEclipse%20Public%20License%20%20%20%20%20%20%20
Preview:	<html><body><img width='1' height='1' src="https://cm.g.doubleclick.net/pixel?google_nid=CPX12&google_cm&google_hm=NjkzMDk4OTQ5Njg4NzQ3MDY2"><img width='1' height='1' src="https://sync.mathtag.com/sync/img?mt_exid=10012&redir=https://tag.crsspxl.com/m.gif?mmid=[MM_UUID]"><img width='1' height='1' src="https://match.adsrvr.org/track/cmf/generic?ttd_pid=crosspixel&ttd_tpi=1"><img width='1' height='1' src="https://ib.adnxs.com/getuid?https://tag.crsspxl.com/m.gif?anid=$UID"><img width='1' height='1' src="https://idsync.rlcdn.com/366518.gif?partner_uid=693098949688747066"><img width='1' height='1' src="https://tags.bluekai.com/site/18282?phint=id%3D693098949688747066"><img width='1' height='1' src="https://cms.analytics.yahoo.com/cms?partner_id=CROEL"><img width='1' height='1' src="https://dpm.demdex.net/ibs:dpid=22083&dpuuid=693098949688747066"><img width='1' height='1' src="https://dmp.truoptik.com/417381ab8bee90f7/sync.gif?dm=&fck=693098949688747066"><img width='1' height='1' src="https

Chrome Cache Entry: 888

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2496
Entropy (8bit):	7.895647668854735
Encrypted:	false
SSDEEP:	48:Mo5BVYDqia1qpnr901ZoxWabVvVL38l9fSm6rgksPsA:MiLYDZa1ynZ0b209fSmtksPz
MD5:	7A735AB1FCC5913268CF59CF57E5DEA4
SHA1:	6F187A0972EDEA3C3758455737AF4F1ED3976F40
SHA-256:	345C131D9683CD7564BE8851158F214BCB0875F7A33FEB2D192372D75B588628
SHA-512:	F420ECAE461D43896FAC33D901D818E87935B78464B88119A6C6C7C339978D6661EA67E4684C6AAE32783BBEF844E80818A44740E8E9E9744018CE437FD6462A
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/allura/p/winmerge/icon?1517804950
Preview:	RIFF....WEBPVP8L....//...M.i.F..u..o.".O0ISm.(.Av.C..Bq$I. .Ghg...Ci$)RK....!..8..F.m...h.._....Uz....?..E.1..Q.<......K.OY..do.....V@ .t.s. ..H. .f...!"b.J..#...m.$.y.m.m.X.6..1.m.m.3......d.~.[.9mH..x..~.....i.....p.....m.m%.#..mU[.>.=..........@1.......;O..P.m[...E.;........Hd.6..M...r.a.y..$.v.8.=.9.8..yG.r..<.<.....v.K..(...b.kEk.s.C#..M..(d..KEI.[n$...Z_..). ...'.W....6R.e.W."R.b....f...!..._....3@...Kn.pO.X..i(F..>..d.......6.R.u....6..X....+3.(.."..yac...E...\<B.BN.... c....L^.(.2..Z...C..T.).L......X..E..Jz=K.C.k.....M[.K.Y r1.<G4.Y!'.T.B.....J$....h.......r..:.8)..PVZ.m..\b.(..t..2..`..k]^..t...QbN..)"r......M.s..U...n).../..ThhB....[.....N..(....T......LK....B.C,)..9N.[..ov3.... .....q..cn.""..5.kB9.r.......Z.....".pGN.Mz[g...........NuV.U......K%s..J.{..j..%....;..<m..)..U;..f.&m.b#.../.....#E..[..rY..;......S.O..:.o...d'C...GI...0...p".I.0Q.u{...}.'.{.?.9. .....Nu..VK....:vU..7..X....\|S...-..K.k.._.6......L.....:

Chrome Cache Entry: 889

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=97055&time=1710158223949&url=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Fpostdownload
Preview:	{}

Chrome Cache Entry: 890

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 891

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5046)
Category:	downloaded
Size (bytes):	5164
Entropy (8bit):	5.162589578573027
Encrypted:	false
SSDEEP:	96:ovllJxvYaYpoVGeLQYqMvs5PPm2nrH8q7aU9ixhPMURVnKNRxk5REbS:QbvApkGyQnymPmsH39ixSUznb5REbS
MD5:	AEE8B860CA506438D93A305FC3978D1E
SHA1:	D816109132644C6D8F2574820335F09AB0009080
SHA-256:	CBF6EE11B4DC9FCE4E7A0E68C509A883AD3DC18779ED25D8C22EB7F2CEC45EA4
SHA-512:	F22E97713C8FD3C1B3B1C07EBDF55B2BDC489AECD0283BE52F4ABF58AC29B6608B54FD4D94E4C32C06D1AC68B81737786B0B7A979E801A786C46D3902ECD5B15
Malicious:	false
Reputation:	low
URL:	https://cdn.ampproject.org/rtv/012402262017000/v0/amp-fit-text-0.1.mjs
Preview:	;.(self.AMP=self.AMP\|\|[]).push({m:1,v:"2402262017000",n:"amp-fit-text",ev:"0.1",l:!0,f:function(t,n){(()=>{var n,{isArray:i}=Array,{hasOwnProperty:e,toString:o}=Object.prototype;function r(t){const n=parseFloat(t);return"number"==typeof(i=n)&&isFinite(i)?n:void 0;var i}var s=["Webkit","webkit","Moz","moz","ms","O","o"];function l(t){const n=t.replace(/[A-Z]/g,(t=>"-"+t.toLowerCase()));return s.some((t=>n.startsWith(t+"-")))?`-${n}`:n}function c(t,i,e){if(i.startsWith("--"))return i;n\|\|(n=Object.create(null));let o=n[i];if(!o\|\|e){if(o=i,void 0===t[i]){const n=function(t){return t.charAt(0).toUpperCase()+t.slice(1)}(i),e=function(t,n){for(let i=0;i<s.length;i++){const e=s[i]+n;if(void 0!==t[e])return e}return""}(t,n);void 0!==t[e]&&(o=e)}e\|\|(n[i]=o)}return o}function f(t,n,i,e,o){const r=c(t.style,n,o);if(!r)return;const s=e?i+e:i;t.style.setProperty(l(r),s)}function u(t){return`${t}px`}function a(t){return CSS.escape(t)}var h="i-amphtml-fit-text-measurer",m="i-amphtml-fit-text-content",

Chrome Cache Entry: 892

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 893

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://dis.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 894

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1318
Entropy (8bit):	5.019609726546588
Encrypted:	false
SSDEEP:	24:2dfkATLf3jsbxgjAPeye7ZM785bEHUYf5Oswzjx3P:cfkAvf3WgjA5F785I0Y8zjx3P
MD5:	A061491324BF4177E4E90CA41AC4B124
SHA1:	2B637218A7BC69579F51804AEECB23C7FFDD1634
SHA-256:	00EEFF3E588D0A9C0B458014C53CECF6FF1F1BD0CC3ACC52C273CDC67B491758
SHA-512:	7ABCD3E41A27FE394B3FB1763EB959B07D692049E08A4C2715BA7D2DECFF3242E5EB6DC9620B51300BBFAADD3FA97BF48B50A87DCD2358AD50DE461F90A8D7BE
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/img/sandiego/svg/originals/sf-icon-orange-no_sf.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 21.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 299.6 263.2" style="enable-background:new 0 0 299.6 263.2;" xml:space="preserve">.<style type="text/css">...st0{fill:#F37C20;}.</style>.<path class="st0" d="M171.2,139.8c0-49.1-17.4-71.4-26.6-79.8c-1.8-1.6-4.6-0.2-4.5,2.3c1.8,27.7-33,34.5-33,78h0c0,0.1,0,0.2,0,0.3..c0,26.5,20,48,44.7,48c24.7,0,44.7-21.5,44.7-48c0-0.1,0-0.2,0-0.3h0c0-12.3-4.6-24-9.3-32.8c-0.9-1.7-3.6-1.1-3.3,0.5..C192.3,145.4,171.2,168.6,171.2,139.8z"/>.<g>..<path class="st0" d="M118.5,243.2c-1.1,0-2.2-0.4-3-1.3L1.2,127.8c-1.7-1.7-1.7-4.4,0-6L121.8,1.3c0.8-0.8,1.9-1.3,3-1.3h34.6...c2.1,0,3.4,1.4,3.9,2.6c0.5,1.3,0.6,3.2-0.9,4.7L49,120.7c-2.3,2.3-2.3,6,0,8.3l89.6,89.6c1.7,1.7,1.7,4.4,0,6l-17.1,17.3...C120.7,242.7,119.6,243.2,118.5,243.2z"/>.</g>.<g>..<

Chrome Cache Entry: 895

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 896

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1053), with no line terminators
Category:	downloaded
Size (bytes):	1053
Entropy (8bit):	5.5434485727777
Encrypted:	false
SSDEEP:	24:C04hulVaRioulVNxuE1JauwMSMqB0TaMCNmlg:CvulVawoulVNxuocuBSMqB0TjCsq
MD5:	1BE37C71C8B8682954397B7C7E229014
SHA1:	791AB1400B2C90BBFBD1FA634AC44F5CF206662D
SHA-256:	D51ECEB02279B55E5BA359ADB65AD33C94F91C4BCD10DC971183A07F0205C399
SHA-512:	A7A4646DE8FBB3310027CECFEA633B132D9E7B1339AD1C003B9E8343178FD435B1A53C63E430D2C5260819EF0481CB5CE5EC816DDE56B8B124F5D82321F5FBBB
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=48534641&p=162538&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://a.audrte.com/match?gdpr=0&gdpr_consent=&p=M1717054901&uid=9A176ADB-73F4-4BD8-A648-23F2443493B5');PubMatic.loadAsyncImagePixel('https://aa.agkn.com/adscores/g.pixel?sid=9212308278&puid=9A176ADB-73F4-4BD8-A648-23F2443493B5');PubMatic.loadAsyncImagePixel('https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=9A176ADB-73F4-4BD8-A648-23F2443493B5&sInitiator=external&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.onaudience.com/?partner=214&mapped=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://px.owneriq.net/epm?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzMmdGw9MTI5NjAw&piggybackCookie=$UID');PubMatic.loadAsyncIframePixel('https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://gocm.c.appier.net/pubmatic');PubMatic.loadAsyncIframePixel('https://sync.srv.stackadapt.com/sync?nid=11&gdpr=0&gdpr_cons

Chrome Cache Entry: 897

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/casale/Ze7xfMAoIeEAAAzaAIdO4AAAEGAAAAAB
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 898

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 48x48, components 3
Category:	dropped
Size (bytes):	1010
Entropy (8bit):	7.181958704387731
Encrypted:	false
SSDEEP:	24:a9YM9vf3qAZYABWEE5mD0oozbjxa96qjmvRS:a9YM1aCnWEX0ZTK68mvE
MD5:	5F025065D88AA2530207ACA47493EDB3
SHA1:	1F8C7C44F239D3F0D866E0C13B6A6D24A4E17502
SHA-256:	BA4AC5814B0132366B4F64FEB1F033739010166C7A26176E2B1190D021752FB2
SHA-512:	207F3DADCE06408DB0FC869B423246DC7D200E5F9B917810C0DE8C29041A0A5248DAFF0224CD218CAC019585212BBC6B96448BF2DFE84BA8F24BC2A988B22281
Malicious:	false
Reputation:	low
Preview:	......JFIF................................................. $.' ",#..(7),01444.'9=82<.342...........2!.!22222222222222222222222222222222222222222222222222......0.0.."........../...........................................................U..i..._9&..'.l...=i8R.R\|DT....r>Vh....]5......6.........................!1A.."Qa..q..23b....#$BS...........?.V..+..?z.k.*.X@^..W. m.d.&.._i..=.c.........=.o."..L..4..%...}.....S...d..m.t.O...9.Q.W.>..Bg......8.....We.....S..X.X..r..,.-..<}......u.4.F.G7X.o.{;..]kS..[K.\.6..s..y..:.u~{......l.Ll..v..".[.r..e.]...9..=.ueh..l.h...(....r.~uw...G...[h..v.....V.h.~.n...$.@...b....R.Ep.....^..g..?.?...Lf..i.PA.yzp.w.{,.Z....._.[,.,.......PZ-.i.J.cX.dg89.j..I_:...a.a..B...~1 .MY\Iez.<y0....Z}.?.Ub3..Z..@..!A......s4.w. ..n<^u. 7....~.=.?.%.>6B..C.[....;..,4b5\.9....^6...)tc+...tHch....v.82./.k:5....4!....W...........................!1........?...Z+.o..,m-..iN..(.[1..J.............................!"1........?..=.H.....F.0iu."h..-..

Chrome Cache Entry: 899

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	6884
Entropy (8bit):	7.944771386938706
Encrypted:	false
SSDEEP:	192:o5vY3oSpaLwEli2SiWkmel9XxEnD2wYR/AYJgq:o5g3paNli2TWvEI6pi+
MD5:	06C6CF825B1CB4063E6FCBA46F32DFF4
SHA1:	8FCFC644FA80858F2F670B10C5420824282D69F8
SHA-256:	2AAA4D35DD4389D47B00B3515259F0503B5D695D92522D1E8F30E265D52B7646
SHA-512:	09277E9883538C29432C92C95E76D227EFC3D001E0A30EA35554200A85B32802F0E325932402DFD775378731699FD387E3F6C3E76736FEDC4B816160161D218B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.............sRGB...,.....IDATx..].w#7.._.w?.....w...u.....(......s...W.-r(..mM0.."X..@...(....^...#..;.v@.........@.Q....@.q.C.........p....&. (2....X.m................../.?..O.z..W..}....../K;.~#...?.....T....x0.[....CY.~..F...z7.}.>z....7.U....w)@.=......^....._.._.....`o\|../......V..t.z..e..wx...5.'/_..h.......<..8..\|s~..!..y....DP.,...+.?.....b..vY....$.........^^B..7.0..X_U+.n.2.p....@.F...e....`GC.....u........zMT..<6.%M..V....f........L..}.B..^....P.D..Bk.&.B......h4..z...;pym..........#.4~.@.uQ.fQSxE.T.d.Q...O..+.".x.OX...w.G....^....d....h7......{.......\o.\......5m....."o...tv?..1%a....".....f.2.9.:c9....h .Do...}GY..B?....8N........>..A........a..R..y.^z..K]..u]..*..x21M.a..FQ..q....F!&D.%n.i....../...).......>z..-..@.q.6L...b.....\U..wtr...N..O/o.....]ntvy.........9...w..Zm.M...`....I.....]..;x..?....e..r?6.P...a...j..g...^.z...h.r..M.=..W.&..gW/^........z._.p..w..I.4-.z.E....4...V..M...Z...._....{...B.

Chrome Cache Entry: 900

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://bcp.crwdcntrl.net/map/ct=y/c=14701/tp=MTAI/tpid=9A176ADB-73F4-4BD8-A648-23F2443493B5/gdpr=0/gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 901

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 16 colors, 32x32, 16 colors
Category:	dropped
Size (bytes):	1078
Entropy (8bit):	1.240940859118772
Encrypted:	false
SSDEEP:	3:etFEh9HYflvlNl/AXll1pe/WNN00000000000000000000000000000000000001:QNtY6+lKY6
MD5:	4123CE1E1732F202F60292941FF1487D
SHA1:	9F12B11BDE582DAE37CE8C160537D919C561C464
SHA-256:	D961B08E4321250926DE6F79087594975FE20AD1518DE8F91EB711AF5D1A6EF8
SHA-512:	11B24C2E622C408E4774FAE120B719A21A0B2ACFA53230126C35AD6CA57D33D4DE79CBE11D296CFBDE9613CAA03D66B721BD20CF4EE030CF75F5A1FD8A286DA9
Malicious:	false
Reputation:	low
Preview:	..............(...&... ..........N...(....... ...............................................................................................................................................................................................................................................................................................(... ...@.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 902

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 903

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
URL:	https://ps.eyeota.net/match?bid=r8hrb20&uid=nil&referrer_pid=r8hrb20
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 904

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2315
Entropy (8bit):	7.884660545576727
Encrypted:	false
SSDEEP:	48:XPvenA4H0JmZBE/Me3S6OYfNqZL0boA7m0g4niEekRrJ1P22:/veA4Ugc/M56Ok60tgjQP22
MD5:	3BAC7D835445BF6826E6F6B37C1D294B
SHA1:	0653E1038B9EADC38933460122D8B5F31EEB0CBF
SHA-256:	3F94556383D59F95E5EB9DBD5F8BAC0B678EAE2763634D2528F8D2A8715A5930
SHA-512:	10D35586FF354EFE4882F00E17FB58998C704F8B34DF5FDC9C009F0403F8BA815B2F5DD497FC9E5F06612D9644B444EDADAE14430528F70E8C97C51916C57406
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......IDATx...TT...`0.4.f....h.j.i0..mS...9i....Q..VS..E.A..[D#:.(;.&0.. ......lR.....S.a&.4..;.w.0.~.....u..=.g1\|..<...%B.I.$......n.......[.._...D....=.!.b.!?...N....].l.Y...r"......5..8'...8D..P.A.S..b.aM...D8.L..!.#aN....'.x.....L. ...e..C..H.8..Ug......G..Ah1!...a.<...}.......p....9>.."=.xL.....-F9q.x.h`}=7./...3..&...~.......q..oY.~b.0...D.....E...h.T.'....T"=.S..,...d..O......./.r...).91oP..A...F....PN.0!r..!.1..GL...I.&..ea.'f8.@;..%../......'f.....t.......m.....l\|.jC..N...L....n\.y......a.?Q.c...nI.........QXab.....>?=...w..q..DC.!d`........x.Tf...M1..N....p..m=.g.&..W.2...>......$d..^.........A...Ni......Y..^...s.....(.v......m...j.A}~............$^...-...3.....D..o....I.z{.[.(.......H..abb.KKK...A8.Q!s...y.d.2.5e&..S.XH..v..B(...`nn.ccc.F..O....i.&O..j.......P.7....~.#vc..'..h...............SSS&J../i"?.?..6.Acc.S.L......}.....,b.:.....v82....K.h...5...===.000.'.b.v^.3t.amm....2...RY....g.WG.6"^..

Chrome Cache Entry: 905

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 906

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 907

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2854)
Category:	downloaded
Size (bytes):	20032
Entropy (8bit):	5.522365536861701
Encrypted:	false
SSDEEP:	384:8ArQ8Iu5bYFSzRxx+4wVCBfjGnibDUJ0k9rBSzicqwQRQPX7uS6aRxSQXanNVY3D:zrQDuFYFSz/xGEBbGnibgJ53kicqwQ6t
MD5:	493EB3EE0AF5360E26E591993C7239DF
SHA1:	F3B476B485A4CE205FCAA1316B176AD4FE18FDBA
SHA-256:	535487D55C5CBF22BF933588A42E38EFDC60BCBD42591420ED217DB20CF423C6
SHA-512:	62EAFB39F224860B6B53EE86F01936DB3DA5C37444C8AC607050CAC45467CE2040459858F3FFDF0073C4F9D56F2146D2600A3A931A7FE31F2D820832FFF1A07C
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240306/r20110914/client/qs_click_protection_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var q=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=q,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1}function ba(a,b,c){return a.call.apply(a.bind,arguments)}function ca(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}} .function r(a,b,c){r=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?ba:ca;return r.apply(null,arguments)}function ia(a,b){function c(){}c.prototype=b.prototype;a.O=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.P=function(d,e,g){for(var f=Array(arguments.length-2),k=2;k<arguments.length;k++)f[k-2]=arguments[k];return b.prototype[e].apply(d,f

Chrome Cache Entry: 908

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	5506
Entropy (8bit):	7.9415931229978165
Encrypted:	false
SSDEEP:	96:dJCWLk5bHtd03UqdNuQtc7iQ/05wbrIiT4ZSLbm8ngoB9WCEI+o+0mf718s/t:OWL2pq1tAiQ85wbrLT2z2go6lN0w18s
MD5:	98656BECE6DCEB3E8EDABBDC989DA46C
SHA1:	6D1448219CC70E9E0183DBC01D5C191A38D57D7C
SHA-256:	9777B9E5FDD3CE55F46D3E64357C0B25F0D80D146E124514A382DE1870A7EB6F
SHA-512:	1ED049F40D017162D2E936C7A9BB60C76D4DB96494CFA2290ACDF01CE9AB42DB8B397E44EE37F62B8A7833905638F333A08BA91879559DB8B2E5F370F3EE5426
Malicious:	false
Reputation:	low
URL:	https://a.fsdn.com/con/app/nel_img/15411
Preview:	RIFFz...WEBPVP8Ln.../w...M8h#.T..?.x.".?.......\|..>...P:S1@..>.,."c..."..R.X..\.N.,......'.._...B...p{R..F..)...tg..o.1c.md.j.b......T...C.......j.~.v...x.V....7/.-...<A....zx...p............Y..t.r....2....`......@..%...g.+_$g..(S.......z.>-.[.^....6U..4.(....V_..9;-........@.6...... "&.tY.X..T...c........m4.f..c....~..e.m.m.gk.l.m{...Wu......A...'...m+?._km....m[.i..4.V.m..m...{-a.v.t....A....m....i.m.v.....}b..l.Fv.O2.z`y.3s.fN.2U....NN.Iw..i.ffw..b....G...N...$..<.i.X.&.X.Z..`.'............Na.A..-ld3UjTy.]Y.2....N..;eRx.?..@I.......Zz.'Q.\|@....Ju..j.....\|.s(H.h#.Ay.)..F.G.$..[...^....%...I...~.]&.^3.....W.^...WG.$8..C5x...FQ4`.;.a..r..\.}.6j..I*.....gL..{..g.,..........?..B....#.P.,...w......w........e..\|..Kf~............4.lW.aR.d....'..A(C..R..%.%ZL)._..G.DWvot..ioM....2....7....e ..8.>..;.;.O......\{.....[....H....,.x0Cp..V..A7.#.....[..x.C..v....L.o....?.!.....{...........G..b...M.3{..s.P.Q....D..\...b.....(

Chrome Cache Entry: 909

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	435
Entropy (8bit):	4.945463188829931
Encrypted:	false
SSDEEP:	12:hYeBx//A4xTDNDUnJmIOTB4JmIOTpNJmIO1yMu4IQL:hYeBxwu2wwwFwYMu4j
MD5:	4B81E967DF07D41C24270CCF669F7336
SHA1:	FD711B797D234F508E766F999235EFF0AA409E8F
SHA-256:	4A842D3295B35D0FDBAED094D22F5926F2BCAA2D892EC7EA9A9A89C1F84B33BF
SHA-512:	10FA559F1132F93DD803ECA540198E9A41DAAE95DDA1659766484A213D0D3AA9F1514D0A422DD86F6BD61E8D4F62A0867A50C42B3391EE8CEF70EDFBED697F99
Malicious:	false
Reputation:	low
URL:	https://csync.smartadserver.com/diff/rtb/csync/CookieSync.html?hasrtb=true&nwid=4559&dcid=10&iscname=false&cname=&gdpr=0&gdpr_consent=
Preview:	<!DOCTYPE html>.<html xmlns="http://www.w3.org/1999/xhtml">.<head>. <title>CookieSync Page</title>.</head>.<body>. <script src="https://ced-ns.sascdn.com/diff/js/modules/cmp.js" type="text/javascript"></script>. <script src="CookieSync.min.js" type="text/javascript"></script>. <script src="TemplatePool.min.js" type="text/javascript"></script>. <script>. sasCookieSync.fireCSync();. </script>.</body>.</html>.

Chrome Cache Entry: 910

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_dbm
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 911

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 912

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	58870
Entropy (8bit):	5.960756751921081
Encrypted:	false
SSDEEP:	768:CWOkXYFyBN8VBTgasM8KWD2ZGHD2ZGjiT74oD2ZG31/lv0:CHkSKasnKBpAiP4z+t0
MD5:	6CE5F1FC54721DA6B37F31042916602B
SHA1:	D3D2920C18F3D2554F97E5F686981C40F3973789
SHA-256:	30C5F2140BF36742D8C2B2F62D5FCB23251238A385EA6D34AE48C1FD1EB308E8
SHA-512:	4660AEE2FEE0DC1141318E05BA0452FA2D02794B25993E931C887E2F1924CBA9B3A8BF8F05A4AD461AD56C5A0E8FA607723765BBFC0188CFAB307D8179C32F50
Malicious:	false
Reputation:	low
Preview:	{"/41014381/Sourceforge/SF_ProjectSum_728x90_A":["html",0,null,null,0,250,970,0,1,null,null,null,1,null,[115763391621],[2168334381],[2036965341],[1511469861],[151821],null,null,null,null,null,null,0,null,null,null,null,null,null,null,"CN2a1PWT7IQDFfiUOgUdObcErw",null,null,null,null,null,null,null,null,["012402262017000"],null,null,null,null,null,"3",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012402262017000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}html:not([amp4ads]),html:not([amp4ads]) body{height:auto!important}html:not([amp4ads]) body{margin:0!important}body{-webkit-text-size-adjust:100%;-moz-text-size-adjust:100%;-ms-text-size-adjust:

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 11, 2024 12:56:35.390120029 CET	192.168.2.16	1.1.1.1	0x8af8	Standard query (0)	sourceforge.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:35.390415907 CET	192.168.2.16	1.1.1.1	0x65ba	Standard query (0)	sourceforge.net	65	IN (0x0001)	false
Mar 11, 2024 12:56:36.384201050 CET	192.168.2.16	1.1.1.1	0x4900	Standard query (0)	a.fsdn.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:36.384746075 CET	192.168.2.16	1.1.1.1	0x1fb5	Standard query (0)	a.fsdn.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:37.891509056 CET	192.168.2.16	1.1.1.1	0x700f	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:37.891700983 CET	192.168.2.16	1.1.1.1	0x56b7	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:37.898859978 CET	192.168.2.16	1.1.1.1	0xfafa	Standard query (0)	btlr.sharethrough.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:37.899143934 CET	192.168.2.16	1.1.1.1	0x3569	Standard query (0)	btlr.sharethrough.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:37.905756950 CET	192.168.2.16	1.1.1.1	0xc08d	Standard query (0)	fastlane.rubiconproject.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:37.905922890 CET	192.168.2.16	1.1.1.1	0x949b	Standard query (0)	fastlane.rubiconproject.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:37.906965017 CET	192.168.2.16	1.1.1.1	0xca75	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:37.907119989 CET	192.168.2.16	1.1.1.1	0x7423	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:37.911128998 CET	192.168.2.16	1.1.1.1	0x4b5b	Standard query (0)	hbopenbid.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:37.911504984 CET	192.168.2.16	1.1.1.1	0x7185	Standard query (0)	hbopenbid.pubmatic.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:37.912134886 CET	192.168.2.16	1.1.1.1	0x53ca	Standard query (0)	prg.smartadserver.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:37.912305117 CET	192.168.2.16	1.1.1.1	0xbbc9	Standard query (0)	prg.smartadserver.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:37.917165041 CET	192.168.2.16	1.1.1.1	0xcff1	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:37.917378902 CET	192.168.2.16	1.1.1.1	0xfd5c	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:37.958077908 CET	192.168.2.16	1.1.1.1	0x2aff	Standard query (0)	c.sf-syn.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:37.958276987 CET	192.168.2.16	1.1.1.1	0xe725	Standard query (0)	c.sf-syn.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:38.429821968 CET	192.168.2.16	1.1.1.1	0xb02f	Standard query (0)	a.fsdn.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.430285931 CET	192.168.2.16	1.1.1.1	0xef14	Standard query (0)	a.fsdn.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:38.846019030 CET	192.168.2.16	1.1.1.1	0xadc3	Standard query (0)	prg.smartadserver.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.846180916 CET	192.168.2.16	1.1.1.1	0xe692	Standard query (0)	prg.smartadserver.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:38.957537889 CET	192.168.2.16	1.1.1.1	0x2b52	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.957914114 CET	192.168.2.16	1.1.1.1	0x5e1f	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:39.041343927 CET	192.168.2.16	1.1.1.1	0x790f	Standard query (0)	fastlane.rubiconproject.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.041531086 CET	192.168.2.16	1.1.1.1	0x251e	Standard query (0)	fastlane.rubiconproject.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:39.192579031 CET	192.168.2.16	1.1.1.1	0xeac9	Standard query (0)	btlr.sharethrough.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.192804098 CET	192.168.2.16	1.1.1.1	0xf4c3	Standard query (0)	btlr.sharethrough.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:39.510319948 CET	192.168.2.16	1.1.1.1	0xcaf5	Standard query (0)	btloader.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.510516882 CET	192.168.2.16	1.1.1.1	0xbc98	Standard query (0)	btloader.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:39.514341116 CET	192.168.2.16	1.1.1.1	0x703f	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.514559984 CET	192.168.2.16	1.1.1.1	0x97c2	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:39.984797955 CET	192.168.2.16	1.1.1.1	0xe6e3	Standard query (0)	analytics.slashdotmedia.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.985049009 CET	192.168.2.16	1.1.1.1	0x7cb6	Standard query (0)	analytics.slashdotmedia.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:40.181047916 CET	192.168.2.16	1.1.1.1	0x681d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:40.181201935 CET	192.168.2.16	1.1.1.1	0xee50	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:40.298815966 CET	192.168.2.16	1.1.1.1	0x1e34	Standard query (0)	sourceforge.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:40.299024105 CET	192.168.2.16	1.1.1.1	0x3e97	Standard query (0)	sourceforge.net	65	IN (0x0001)	false
Mar 11, 2024 12:56:40.370594978 CET	192.168.2.16	1.1.1.1	0x98b3	Standard query (0)	api.btloader.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:40.370995998 CET	192.168.2.16	1.1.1.1	0x7c71	Standard query (0)	api.btloader.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:41.112199068 CET	192.168.2.16	1.1.1.1	0xdbb0	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:41.112709999 CET	192.168.2.16	1.1.1.1	0x8d68	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Mar 11, 2024 12:56:41.278399944 CET	192.168.2.16	1.1.1.1	0x5351	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:41.278573036 CET	192.168.2.16	1.1.1.1	0xdc00	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:41.278860092 CET	192.168.2.16	1.1.1.1	0xb099	Standard query (0)	ml314.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:41.279006004 CET	192.168.2.16	1.1.1.1	0xc8e5	Standard query (0)	ml314.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:41.279257059 CET	192.168.2.16	1.1.1.1	0x5034	Standard query (0)	ads.pro-market.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:41.279397964 CET	192.168.2.16	1.1.1.1	0xc1c2	Standard query (0)	ads.pro-market.net	65	IN (0x0001)	false
Mar 11, 2024 12:56:41.710445881 CET	192.168.2.16	1.1.1.1	0x928e	Standard query (0)	tag.crsspxl.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:41.710542917 CET	192.168.2.16	1.1.1.1	0xe2f5	Standard query (0)	tag.crsspxl.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:42.155016899 CET	192.168.2.16	1.1.1.1	0x7b90	Standard query (0)	ad-delivery.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:42.155230999 CET	192.168.2.16	1.1.1.1	0xadd6	Standard query (0)	ad-delivery.net	65	IN (0x0001)	false
Mar 11, 2024 12:56:42.166626930 CET	192.168.2.16	1.1.1.1	0xc10a	Standard query (0)	pbid.pro-market.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:42.166856050 CET	192.168.2.16	1.1.1.1	0x9efa	Standard query (0)	pbid.pro-market.net	65	IN (0x0001)	false
Mar 11, 2024 12:56:42.183113098 CET	192.168.2.16	1.1.1.1	0x90eb	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:42.183278084 CET	192.168.2.16	1.1.1.1	0xb4a2	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 11, 2024 12:56:42.185388088 CET	192.168.2.16	1.1.1.1	0x624f	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:42.185544014 CET	192.168.2.16	1.1.1.1	0xab96	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:43.006921053 CET	192.168.2.16	1.1.1.1	0x965f	Standard query (0)	ad-delivery.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:43.007086039 CET	192.168.2.16	1.1.1.1	0x6f3e	Standard query (0)	ad-delivery.net	65	IN (0x0001)	false
Mar 11, 2024 12:56:43.049710035 CET	192.168.2.16	1.1.1.1	0x3353	Standard query (0)	b1sync.zemanta.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:43.049860954 CET	192.168.2.16	1.1.1.1	0xc6d1	Standard query (0)	b1sync.zemanta.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:43.050705910 CET	192.168.2.16	1.1.1.1	0xe11f	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:43.050873041 CET	192.168.2.16	1.1.1.1	0x752a	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:43.066368103 CET	192.168.2.16	1.1.1.1	0xf732	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:43.066768885 CET	192.168.2.16	1.1.1.1	0x9ed1	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Mar 11, 2024 12:56:43.067774057 CET	192.168.2.16	1.1.1.1	0xbd7d	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:43.068104029 CET	192.168.2.16	1.1.1.1	0x1505	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 11, 2024 12:56:43.102197886 CET	192.168.2.16	1.1.1.1	0x15a8	Standard query (0)	ads.pro-market.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:43.102495909 CET	192.168.2.16	1.1.1.1	0x81dc	Standard query (0)	ads.pro-market.net	65	IN (0x0001)	false
Mar 11, 2024 12:56:43.186263084 CET	192.168.2.16	1.1.1.1	0xb5fd	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:43.186402082 CET	192.168.2.16	1.1.1.1	0x7fd3	Standard query (0)	image6.pubmatic.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:43.277431965 CET	192.168.2.16	1.1.1.1	0x96bd	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:43.277708054 CET	192.168.2.16	1.1.1.1	0x3e03	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:43.681323051 CET	192.168.2.16	1.1.1.1	0x2eb0	Standard query (0)	ssbsync.smartadserver.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:43.681538105 CET	192.168.2.16	1.1.1.1	0xbb2a	Standard query (0)	ssbsync.smartadserver.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:44.058928967 CET	192.168.2.16	1.1.1.1	0x4919	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.059164047 CET	192.168.2.16	1.1.1.1	0xd0b8	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:44.062299013 CET	192.168.2.16	1.1.1.1	0xb247	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.062494993 CET	192.168.2.16	1.1.1.1	0x270c	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Mar 11, 2024 12:56:44.065435886 CET	192.168.2.16	1.1.1.1	0xfdd5	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.065598011 CET	192.168.2.16	1.1.1.1	0x379c	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Mar 11, 2024 12:56:44.066695929 CET	192.168.2.16	1.1.1.1	0x7e60	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.066915989 CET	192.168.2.16	1.1.1.1	0xc62	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:44.067430019 CET	192.168.2.16	1.1.1.1	0xc3fe	Standard query (0)	us01.z.antigena.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.067703962 CET	192.168.2.16	1.1.1.1	0x36af	Standard query (0)	us01.z.antigena.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:44.068084002 CET	192.168.2.16	1.1.1.1	0x6a3a	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.068295002 CET	192.168.2.16	1.1.1.1	0xd135	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:44.071954966 CET	192.168.2.16	1.1.1.1	0xc4ba	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.072240114 CET	192.168.2.16	1.1.1.1	0x8bd9	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
Mar 11, 2024 12:56:44.073498964 CET	192.168.2.16	1.1.1.1	0xeabc	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.073824883 CET	192.168.2.16	1.1.1.1	0xc82d	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Mar 11, 2024 12:56:44.438272953 CET	192.168.2.16	1.1.1.1	0x58c7	Standard query (0)	api.btloader.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.438438892 CET	192.168.2.16	1.1.1.1	0x6a6d	Standard query (0)	api.btloader.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:44.481182098 CET	192.168.2.16	1.1.1.1	0xc2b4	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.481406927 CET	192.168.2.16	1.1.1.1	0xdd0e	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:44.683522940 CET	192.168.2.16	1.1.1.1	0x4e	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.683685064 CET	192.168.2.16	1.1.1.1	0x8dfa	Standard query (0)	cms.quantserve.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:44.725344896 CET	192.168.2.16	1.1.1.1	0x5321	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.725449085 CET	192.168.2.16	1.1.1.1	0xf092	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Mar 11, 2024 12:56:44.731462955 CET	192.168.2.16	1.1.1.1	0x4e74	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.731646061 CET	192.168.2.16	1.1.1.1	0x2d73	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Mar 11, 2024 12:56:44.733022928 CET	192.168.2.16	1.1.1.1	0xca2c	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.733207941 CET	192.168.2.16	1.1.1.1	0x73e3	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:44.735620975 CET	192.168.2.16	1.1.1.1	0x1d91	Standard query (0)	ssbsync.smartadserver.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.735781908 CET	192.168.2.16	1.1.1.1	0x715d	Standard query (0)	ssbsync.smartadserver.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:44.830440044 CET	192.168.2.16	1.1.1.1	0x8219	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.830646992 CET	192.168.2.16	1.1.1.1	0x9e69	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:44.831588984 CET	192.168.2.16	1.1.1.1	0x134	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.831748009 CET	192.168.2.16	1.1.1.1	0x7cef	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:45.129376888 CET	192.168.2.16	1.1.1.1	0xd503	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:45.129542112 CET	192.168.2.16	1.1.1.1	0x313d	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:45.217402935 CET	192.168.2.16	1.1.1.1	0x718b	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:45.217689037 CET	192.168.2.16	1.1.1.1	0x4a30	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:45.368561029 CET	192.168.2.16	1.1.1.1	0x342	Standard query (0)	downloads.sourceforge.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:45.368926048 CET	192.168.2.16	1.1.1.1	0xbcd4	Standard query (0)	downloads.sourceforge.net	65	IN (0x0001)	false
Mar 11, 2024 12:56:45.731019974 CET	192.168.2.16	1.1.1.1	0xf23c	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:45.731197119 CET	192.168.2.16	1.1.1.1	0xf7db	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:45.804611921 CET	192.168.2.16	1.1.1.1	0xe906	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:45.804856062 CET	192.168.2.16	1.1.1.1	0x290	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:45.891045094 CET	192.168.2.16	1.1.1.1	0x1920	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:45.891223907 CET	192.168.2.16	1.1.1.1	0xcfd	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:45.893142939 CET	192.168.2.16	1.1.1.1	0xe0e7	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:45.893377066 CET	192.168.2.16	1.1.1.1	0x56fd	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:46.019233942 CET	192.168.2.16	1.1.1.1	0xa738	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.019418001 CET	192.168.2.16	1.1.1.1	0x6bbf	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:46.020864964 CET	192.168.2.16	1.1.1.1	0xba2d	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.021045923 CET	192.168.2.16	1.1.1.1	0x6e67	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:46.062397003 CET	192.168.2.16	1.1.1.1	0x5163	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.062653065 CET	192.168.2.16	1.1.1.1	0x4c1b	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:46.293266058 CET	192.168.2.16	1.1.1.1	0x5354	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.293446064 CET	192.168.2.16	1.1.1.1	0xdcc7	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Mar 11, 2024 12:56:46.305634022 CET	192.168.2.16	1.1.1.1	0x994a	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.305872917 CET	192.168.2.16	1.1.1.1	0xfc6f	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Mar 11, 2024 12:56:46.338882923 CET	192.168.2.16	1.1.1.1	0x3b52	Standard query (0)	cdn.ampproject.org	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.339294910 CET	192.168.2.16	1.1.1.1	0x4926	Standard query (0)	cdn.ampproject.org	65	IN (0x0001)	false
Mar 11, 2024 12:56:46.359519958 CET	192.168.2.16	1.1.1.1	0xaf42	Standard query (0)	ad.turn.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.359699011 CET	192.168.2.16	1.1.1.1	0x28b9	Standard query (0)	ad.turn.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:46.362102032 CET	192.168.2.16	1.1.1.1	0x2178	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.362301111 CET	192.168.2.16	1.1.1.1	0xa7d6	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:46.396440983 CET	192.168.2.16	1.1.1.1	0xc496	Standard query (0)	simage4.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.396620989 CET	192.168.2.16	1.1.1.1	0xaa5f	Standard query (0)	simage4.pubmatic.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:46.398250103 CET	192.168.2.16	1.1.1.1	0xdeaf	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.398931026 CET	192.168.2.16	1.1.1.1	0xb7f0	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:46.400188923 CET	192.168.2.16	1.1.1.1	0xa147	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.400381088 CET	192.168.2.16	1.1.1.1	0xded3	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:46.525661945 CET	192.168.2.16	1.1.1.1	0x5ab	Standard query (0)	visitor.omnitagjs.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.525821924 CET	192.168.2.16	1.1.1.1	0x8b6d	Standard query (0)	visitor.omnitagjs.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:46.539592981 CET	192.168.2.16	1.1.1.1	0xa136	Standard query (0)	newcontinuum.dl.sourceforge.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.539841890 CET	192.168.2.16	1.1.1.1	0x7d	Standard query (0)	newcontinuum.dl.sourceforge.net	65	IN (0x0001)	false
Mar 11, 2024 12:56:46.608581066 CET	192.168.2.16	1.1.1.1	0xa0f9	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.608751059 CET	192.168.2.16	1.1.1.1	0xdce6	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:46.639223099 CET	192.168.2.16	1.1.1.1	0x1534	Standard query (0)	image8.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.639409065 CET	192.168.2.16	1.1.1.1	0x29b3	Standard query (0)	image8.pubmatic.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:47.204946041 CET	192.168.2.16	1.1.1.1	0x59d7	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.205323935 CET	192.168.2.16	1.1.1.1	0x6424	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:47.207637072 CET	192.168.2.16	1.1.1.1	0xfd12	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.207829952 CET	192.168.2.16	1.1.1.1	0x4ed2	Standard query (0)	p.rfihub.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:47.216577053 CET	192.168.2.16	1.1.1.1	0xb28f	Standard query (0)	ad.mrtnsvr.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.216766119 CET	192.168.2.16	1.1.1.1	0xcae4	Standard query (0)	ad.mrtnsvr.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:47.227868080 CET	192.168.2.16	1.1.1.1	0x3254	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.228368998 CET	192.168.2.16	1.1.1.1	0xb745	Standard query (0)	pm.w55c.net	65	IN (0x0001)	false
Mar 11, 2024 12:56:47.235409975 CET	192.168.2.16	1.1.1.1	0x677f	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.235743999 CET	192.168.2.16	1.1.1.1	0xd13b	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:47.255863905 CET	192.168.2.16	1.1.1.1	0xce84	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.256062031 CET	192.168.2.16	1.1.1.1	0x14ed	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Mar 11, 2024 12:56:47.334906101 CET	192.168.2.16	1.1.1.1	0x5469	Standard query (0)	cm.adgrx.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.335129976 CET	192.168.2.16	1.1.1.1	0x320c	Standard query (0)	cm.adgrx.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:47.348463058 CET	192.168.2.16	1.1.1.1	0x2585	Standard query (0)	match.deepintent.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.348647118 CET	192.168.2.16	1.1.1.1	0xf026	Standard query (0)	match.deepintent.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:47.377784967 CET	192.168.2.16	1.1.1.1	0x6e99	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.377968073 CET	192.168.2.16	1.1.1.1	0x2b5a	Standard query (0)	cms.quantserve.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:47.380353928 CET	192.168.2.16	1.1.1.1	0x29ab	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.380703926 CET	192.168.2.16	1.1.1.1	0x2bcc	Standard query (0)	thrtle.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:47.382328987 CET	192.168.2.16	1.1.1.1	0xf2f3	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.382523060 CET	192.168.2.16	1.1.1.1	0x512e	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Mar 11, 2024 12:56:47.392091036 CET	192.168.2.16	1.1.1.1	0xdaeb	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.392694950 CET	192.168.2.16	1.1.1.1	0x1d0f	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:47.396960020 CET	192.168.2.16	1.1.1.1	0x140b	Standard query (0)	sync.bfmio.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.397272110 CET	192.168.2.16	1.1.1.1	0x63b0	Standard query (0)	sync.bfmio.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:47.428714037 CET	192.168.2.16	1.1.1.1	0x27ad	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.428900003 CET	192.168.2.16	1.1.1.1	0x4747	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Mar 11, 2024 12:56:47.441355944 CET	192.168.2.16	1.1.1.1	0x51a6	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.441613913 CET	192.168.2.16	1.1.1.1	0xbfea	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:47.515469074 CET	192.168.2.16	1.1.1.1	0x3d0e	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.515870094 CET	192.168.2.16	1.1.1.1	0x6e7e	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:47.520884037 CET	192.168.2.16	1.1.1.1	0x4085	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.521064043 CET	192.168.2.16	1.1.1.1	0x1dd2	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:47.532059908 CET	192.168.2.16	1.1.1.1	0x3680	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.532311916 CET	192.168.2.16	1.1.1.1	0x8016	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:47.626557112 CET	192.168.2.16	1.1.1.1	0x18af	Standard query (0)	ps.eyeota.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.626557112 CET	192.168.2.16	1.1.1.1	0x9394	Standard query (0)	ps.eyeota.net	65	IN (0x0001)	false
Mar 11, 2024 12:56:47.643243074 CET	192.168.2.16	1.1.1.1	0xd3f7	Standard query (0)	sync.technoratimedia.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.643650055 CET	192.168.2.16	1.1.1.1	0x36e2	Standard query (0)	sync.technoratimedia.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:47.721659899 CET	192.168.2.16	1.1.1.1	0xb343	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.721906900 CET	192.168.2.16	1.1.1.1	0x21da	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:47.928664923 CET	192.168.2.16	1.1.1.1	0x567c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.928837061 CET	192.168.2.16	1.1.1.1	0x3ef4	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:48.200206041 CET	192.168.2.16	1.1.1.1	0xd5a8	Standard query (0)	pubmatic-match.dotomi.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:48.200552940 CET	192.168.2.16	1.1.1.1	0x9710	Standard query (0)	pubmatic-match.dotomi.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:48.223984957 CET	192.168.2.16	1.1.1.1	0x9f16	Standard query (0)	image8.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:48.224272966 CET	192.168.2.16	1.1.1.1	0x25af	Standard query (0)	image8.pubmatic.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:48.510751963 CET	192.168.2.16	1.1.1.1	0x8f4e	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:48.510922909 CET	192.168.2.16	1.1.1.1	0x1bc9	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Mar 11, 2024 12:56:48.609318018 CET	192.168.2.16	1.1.1.1	0x8f93	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:48.609472990 CET	192.168.2.16	1.1.1.1	0x56b9	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:48.625260115 CET	192.168.2.16	1.1.1.1	0x7236	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:48.625488997 CET	192.168.2.16	1.1.1.1	0x43d1	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:48.720355988 CET	192.168.2.16	1.1.1.1	0xff8	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:48.720529079 CET	192.168.2.16	1.1.1.1	0xa787	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:48.930541992 CET	192.168.2.16	1.1.1.1	0xf574	Standard query (0)	image8.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:48.930866957 CET	192.168.2.16	1.1.1.1	0xcfff	Standard query (0)	image8.pubmatic.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:49.114155054 CET	192.168.2.16	1.1.1.1	0xba9	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:49.114337921 CET	192.168.2.16	1.1.1.1	0x1a9d	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Mar 11, 2024 12:56:49.144854069 CET	192.168.2.16	1.1.1.1	0xc7a5	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:49.145034075 CET	192.168.2.16	1.1.1.1	0x6619	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Mar 11, 2024 12:56:49.256846905 CET	192.168.2.16	1.1.1.1	0x336c	Standard query (0)	ml314.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:49.257091045 CET	192.168.2.16	1.1.1.1	0xaad7	Standard query (0)	ml314.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:49.502667904 CET	192.168.2.16	1.1.1.1	0x872c	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:49.502965927 CET	192.168.2.16	1.1.1.1	0x817	Standard query (0)	thrtle.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:49.852413893 CET	192.168.2.16	1.1.1.1	0xad9d	Standard query (0)	pubmatic-match.dotomi.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:49.852653980 CET	192.168.2.16	1.1.1.1	0x7ba7	Standard query (0)	pubmatic-match.dotomi.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:50.256340027 CET	192.168.2.16	1.1.1.1	0x4609	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:50.256673098 CET	192.168.2.16	1.1.1.1	0xd78d	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Mar 11, 2024 12:56:50.299432993 CET	192.168.2.16	1.1.1.1	0x9708	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:50.299622059 CET	192.168.2.16	1.1.1.1	0xc6d1	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Mar 11, 2024 12:56:50.688405037 CET	192.168.2.16	1.1.1.1	0x7803	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:50.688714027 CET	192.168.2.16	1.1.1.1	0x2e22	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:50.880239964 CET	192.168.2.16	1.1.1.1	0xd55c	Standard query (0)	bh.contextweb.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:50.881401062 CET	192.168.2.16	1.1.1.1	0x3129	Standard query (0)	bh.contextweb.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:51.320832014 CET	192.168.2.16	1.1.1.1	0x9394	Standard query (0)	bh.contextweb.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:51.321053982 CET	192.168.2.16	1.1.1.1	0xa469	Standard query (0)	bh.contextweb.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:51.337445021 CET	192.168.2.16	1.1.1.1	0xa773	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:51.337605953 CET	192.168.2.16	1.1.1.1	0xdea9	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:51.354207993 CET	192.168.2.16	1.1.1.1	0x8eac	Standard query (0)	ps.eyeota.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:51.354456902 CET	192.168.2.16	1.1.1.1	0x4d75	Standard query (0)	ps.eyeota.net	65	IN (0x0001)	false
Mar 11, 2024 12:56:52.564986944 CET	192.168.2.16	1.1.1.1	0x76b1	Standard query (0)	sync.technoratimedia.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:52.565237999 CET	192.168.2.16	1.1.1.1	0xd2a4	Standard query (0)	sync.technoratimedia.com	65	IN (0x0001)	false
Mar 11, 2024 12:56:53.591532946 CET	192.168.2.16	1.1.1.1	0xb6b3	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:53.591737032 CET	192.168.2.16	1.1.1.1	0x197d	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:05.345432043 CET	192.168.2.16	1.1.1.1	0x7cf0	Standard query (0)	sync.intentiq.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:05.345762014 CET	192.168.2.16	1.1.1.1	0x7b9b	Standard query (0)	sync.intentiq.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:05.346986055 CET	192.168.2.16	1.1.1.1	0x60f8	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:05.347176075 CET	192.168.2.16	1.1.1.1	0x1b5e	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:05.348901987 CET	192.168.2.16	1.1.1.1	0x92f9	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:05.349093914 CET	192.168.2.16	1.1.1.1	0x9f98	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:05.349431038 CET	192.168.2.16	1.1.1.1	0x56e5	Standard query (0)	d.turn.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:05.349657059 CET	192.168.2.16	1.1.1.1	0x39d7	Standard query (0)	d.turn.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:05.959054947 CET	192.168.2.16	1.1.1.1	0xf16b	Standard query (0)	csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:05.959738016 CET	192.168.2.16	1.1.1.1	0xe03d	Standard query (0)	csync.smartadserver.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:06.244059086 CET	192.168.2.16	1.1.1.1	0xce51	Standard query (0)	sync1.intentiq.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:06.244415998 CET	192.168.2.16	1.1.1.1	0xbffc	Standard query (0)	sync1.intentiq.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:06.307640076 CET	192.168.2.16	1.1.1.1	0xd582	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:06.307800055 CET	192.168.2.16	1.1.1.1	0x2a52	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:06.970561028 CET	192.168.2.16	1.1.1.1	0x359b	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:06.970797062 CET	192.168.2.16	1.1.1.1	0x6d54	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:06.983294010 CET	192.168.2.16	1.1.1.1	0x8b84	Standard query (0)	synchroscript.deliveryengine.adswizz.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:06.983463049 CET	192.168.2.16	1.1.1.1	0xcfe6	Standard query (0)	synchroscript.deliveryengine.adswizz.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:06.999408960 CET	192.168.2.16	1.1.1.1	0xb1ca	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:06.999591112 CET	192.168.2.16	1.1.1.1	0x5b07	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:07.000533104 CET	192.168.2.16	1.1.1.1	0x1b4	Standard query (0)	pmp.mxptint.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.000771046 CET	192.168.2.16	1.1.1.1	0x9824	Standard query (0)	pmp.mxptint.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:07.001029015 CET	192.168.2.16	1.1.1.1	0xd444	Standard query (0)	ced-ns.sascdn.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.001205921 CET	192.168.2.16	1.1.1.1	0x7496	Standard query (0)	ced-ns.sascdn.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:07.023520947 CET	192.168.2.16	1.1.1.1	0xcbb	Standard query (0)	pbid.pro-market.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.023880959 CET	192.168.2.16	1.1.1.1	0x7d4b	Standard query (0)	pbid.pro-market.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:07.135869026 CET	192.168.2.16	1.1.1.1	0xb3ae	Standard query (0)	sync1.intentiq.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.136075974 CET	192.168.2.16	1.1.1.1	0x6335	Standard query (0)	sync1.intentiq.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:07.447331905 CET	192.168.2.16	1.1.1.1	0xb2da	Standard query (0)	hb.yahoo.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.447535038 CET	192.168.2.16	1.1.1.1	0x3f3	Standard query (0)	hb.yahoo.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:07.488347054 CET	192.168.2.16	1.1.1.1	0x2cc2	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.488542080 CET	192.168.2.16	1.1.1.1	0x22d9	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:07.603745937 CET	192.168.2.16	1.1.1.1	0x5f73	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.604389906 CET	192.168.2.16	1.1.1.1	0x23	Standard query (0)	creativecdn.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:07.731005907 CET	192.168.2.16	1.1.1.1	0x2ce7	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.731255054 CET	192.168.2.16	1.1.1.1	0x4f53	Standard query (0)	pippio.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:07.765348911 CET	192.168.2.16	1.1.1.1	0xcb0f	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.765510082 CET	192.168.2.16	1.1.1.1	0x89a1	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:07.766283989 CET	192.168.2.16	1.1.1.1	0x12ff	Standard query (0)	loadus.exelator.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.766820908 CET	192.168.2.16	1.1.1.1	0x2f40	Standard query (0)	loadus.exelator.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:07.814145088 CET	192.168.2.16	1.1.1.1	0x10ba	Standard query (0)	synchroscript.deliveryengine.adswizz.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.814543009 CET	192.168.2.16	1.1.1.1	0x7579	Standard query (0)	synchroscript.deliveryengine.adswizz.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:08.116069078 CET	192.168.2.16	1.1.1.1	0xb58b	Standard query (0)	eu-u.openx.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:08.116252899 CET	192.168.2.16	1.1.1.1	0x2f0f	Standard query (0)	eu-u.openx.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:08.203283072 CET	192.168.2.16	1.1.1.1	0x54b0	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:08.203620911 CET	192.168.2.16	1.1.1.1	0xf382	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:08.208832026 CET	192.168.2.16	1.1.1.1	0xa723	Standard query (0)	sync.adotmob.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:08.209079981 CET	192.168.2.16	1.1.1.1	0xc5ef	Standard query (0)	sync.adotmob.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:08.237205982 CET	192.168.2.16	1.1.1.1	0x42d1	Standard query (0)	a.tribalfusion.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:08.237854004 CET	192.168.2.16	1.1.1.1	0x80b6	Standard query (0)	a.tribalfusion.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:08.238595009 CET	192.168.2.16	1.1.1.1	0x1c80	Standard query (0)	mweb.ck.inmobi.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:08.238847971 CET	192.168.2.16	1.1.1.1	0xb1a0	Standard query (0)	mweb.ck.inmobi.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:08.239700079 CET	192.168.2.16	1.1.1.1	0x685b	Standard query (0)	ums.acuityplatform.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:08.239936113 CET	192.168.2.16	1.1.1.1	0xe455	Standard query (0)	ums.acuityplatform.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:08.241904974 CET	192.168.2.16	1.1.1.1	0x3088	Standard query (0)	ssbsync.smartadserver.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:08.242094040 CET	192.168.2.16	1.1.1.1	0x3c8	Standard query (0)	ssbsync.smartadserver.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:08.242646933 CET	192.168.2.16	1.1.1.1	0x3df5	Standard query (0)	a.rfihub.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:08.242871046 CET	192.168.2.16	1.1.1.1	0x5912	Standard query (0)	a.rfihub.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:08.243715048 CET	192.168.2.16	1.1.1.1	0xca65	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:08.243925095 CET	192.168.2.16	1.1.1.1	0x7a28	Standard query (0)	creativecdn.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:08.408529043 CET	192.168.2.16	1.1.1.1	0x3628	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:08.408972979 CET	192.168.2.16	1.1.1.1	0x2165	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:08.551980019 CET	192.168.2.16	1.1.1.1	0x2f50	Standard query (0)	hb.yahoo.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:08.552197933 CET	192.168.2.16	1.1.1.1	0x786c	Standard query (0)	hb.yahoo.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:08.695059061 CET	192.168.2.16	1.1.1.1	0xa0d2	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:08.695218086 CET	192.168.2.16	1.1.1.1	0x56d7	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:08.858145952 CET	192.168.2.16	1.1.1.1	0xaeaf	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:08.858566046 CET	192.168.2.16	1.1.1.1	0xe21b	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:08.926568031 CET	192.168.2.16	1.1.1.1	0xee34	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:08.926736116 CET	192.168.2.16	1.1.1.1	0xda5	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:09.042104006 CET	192.168.2.16	1.1.1.1	0xf0d6	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:09.042349100 CET	192.168.2.16	1.1.1.1	0x3eab	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:09.145935059 CET	192.168.2.16	1.1.1.1	0xa778	Standard query (0)	t.pswec.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:09.146125078 CET	192.168.2.16	1.1.1.1	0xb396	Standard query (0)	t.pswec.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:09.223134041 CET	192.168.2.16	1.1.1.1	0xa08a	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:09.223321915 CET	192.168.2.16	1.1.1.1	0xe69	Standard query (0)	ads.stickyadstv.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:09.224914074 CET	192.168.2.16	1.1.1.1	0xdce4	Standard query (0)	s.company-target.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:09.225092888 CET	192.168.2.16	1.1.1.1	0xa4ad	Standard query (0)	s.company-target.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:09.227159023 CET	192.168.2.16	1.1.1.1	0x231b	Standard query (0)	sync.mathtag.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:09.227351904 CET	192.168.2.16	1.1.1.1	0xc434	Standard query (0)	sync.mathtag.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:09.608994961 CET	192.168.2.16	1.1.1.1	0x56f0	Standard query (0)	s.tribalfusion.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:09.609363079 CET	192.168.2.16	1.1.1.1	0x6927	Standard query (0)	s.tribalfusion.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:09.965255976 CET	192.168.2.16	1.1.1.1	0xdda0	Standard query (0)	pmp.mxptint.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:09.965445995 CET	192.168.2.16	1.1.1.1	0x3ca2	Standard query (0)	pmp.mxptint.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:10.374458075 CET	192.168.2.16	1.1.1.1	0xe6e6	Standard query (0)	code.createjs.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.374794960 CET	192.168.2.16	1.1.1.1	0x301a	Standard query (0)	code.createjs.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:10.396475077 CET	192.168.2.16	1.1.1.1	0xd02e	Standard query (0)	dis.criteo.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.396651983 CET	192.168.2.16	1.1.1.1	0xfff1	Standard query (0)	dis.criteo.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:10.430356026 CET	192.168.2.16	1.1.1.1	0x7d02	Standard query (0)	t.adx.opera.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.430762053 CET	192.168.2.16	1.1.1.1	0x5815	Standard query (0)	t.adx.opera.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:10.447362900 CET	192.168.2.16	1.1.1.1	0xad4	Standard query (0)	cm-supply-web.gammaplatform.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.447537899 CET	192.168.2.16	1.1.1.1	0x5533	Standard query (0)	cm-supply-web.gammaplatform.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:10.524172068 CET	192.168.2.16	1.1.1.1	0x9f65	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.524365902 CET	192.168.2.16	1.1.1.1	0xcb27	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:10.558976889 CET	192.168.2.16	1.1.1.1	0x5c97	Standard query (0)	beacon.lynx.cognitivlabs.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.559406996 CET	192.168.2.16	1.1.1.1	0x88df	Standard query (0)	beacon.lynx.cognitivlabs.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:10.560312986 CET	192.168.2.16	1.1.1.1	0x44d5	Standard query (0)	csync.loopme.me	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.560672998 CET	192.168.2.16	1.1.1.1	0x1363	Standard query (0)	csync.loopme.me	65	IN (0x0001)	false
Mar 11, 2024 12:57:10.636990070 CET	192.168.2.16	1.1.1.1	0xf224	Standard query (0)	dsp.adfarm1.adition.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.637439966 CET	192.168.2.16	1.1.1.1	0x3812	Standard query (0)	dsp.adfarm1.adition.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:10.639281034 CET	192.168.2.16	1.1.1.1	0xa63d	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.639456987 CET	192.168.2.16	1.1.1.1	0xb2af	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:10.642574072 CET	192.168.2.16	1.1.1.1	0x29c8	Standard query (0)	bpi.rtactivate.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.642745018 CET	192.168.2.16	1.1.1.1	0xdcd6	Standard query (0)	bpi.rtactivate.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:10.643765926 CET	192.168.2.16	1.1.1.1	0xaa3e	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.644191027 CET	192.168.2.16	1.1.1.1	0x7c9e	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:10.645827055 CET	192.168.2.16	1.1.1.1	0xeb2e	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.646048069 CET	192.168.2.16	1.1.1.1	0xb38d	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:10.646509886 CET	192.168.2.16	1.1.1.1	0x89f5	Standard query (0)	io.narrative.io	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.646851063 CET	192.168.2.16	1.1.1.1	0x999	Standard query (0)	io.narrative.io	65	IN (0x0001)	false
Mar 11, 2024 12:57:10.665169954 CET	192.168.2.16	1.1.1.1	0xc7b4	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.665348053 CET	192.168.2.16	1.1.1.1	0xa14	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:10.670825005 CET	192.168.2.16	1.1.1.1	0xfe81	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.671252966 CET	192.168.2.16	1.1.1.1	0xb23b	Standard query (0)	ads.stickyadstv.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:10.750511885 CET	192.168.2.16	1.1.1.1	0x36ca	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.750680923 CET	192.168.2.16	1.1.1.1	0x56f6	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:10.752568960 CET	192.168.2.16	1.1.1.1	0x68b4	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.752765894 CET	192.168.2.16	1.1.1.1	0xf92	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:10.784070969 CET	192.168.2.16	1.1.1.1	0xfe44	Standard query (0)	dsum.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.784383059 CET	192.168.2.16	1.1.1.1	0x9c80	Standard query (0)	dsum.casalemedia.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:10.945765018 CET	192.168.2.16	1.1.1.1	0xfd21	Standard query (0)	s.tribalfusion.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.946065903 CET	192.168.2.16	1.1.1.1	0x67ce	Standard query (0)	s.tribalfusion.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:11.840986013 CET	192.168.2.16	1.1.1.1	0xae58	Standard query (0)	1f2e7.v.fwmrm.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:11.841204882 CET	192.168.2.16	1.1.1.1	0xbece	Standard query (0)	1f2e7.v.fwmrm.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:11.843558073 CET	192.168.2.16	1.1.1.1	0x3380	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:11.843986034 CET	192.168.2.16	1.1.1.1	0x48ab	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:11.979988098 CET	192.168.2.16	1.1.1.1	0x7a7a	Standard query (0)	dsum.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:11.980165005 CET	192.168.2.16	1.1.1.1	0x27	Standard query (0)	dsum.casalemedia.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:12.220369101 CET	192.168.2.16	1.1.1.1	0xadf0	Standard query (0)	bpi.rtactivate.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:12.220542908 CET	192.168.2.16	1.1.1.1	0x43c4	Standard query (0)	bpi.rtactivate.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:12.360394001 CET	192.168.2.16	1.1.1.1	0xa023	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:12.360574961 CET	192.168.2.16	1.1.1.1	0x638f	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:12.572036028 CET	192.168.2.16	1.1.1.1	0xcc9a	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:12.572201967 CET	192.168.2.16	1.1.1.1	0x47c2	Standard query (0)	sync.1rx.io	65	IN (0x0001)	false
Mar 11, 2024 12:57:12.615818977 CET	192.168.2.16	1.1.1.1	0x76d9	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:12.615994930 CET	192.168.2.16	1.1.1.1	0xdf5b	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:12.893533945 CET	192.168.2.16	1.1.1.1	0x7d7	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:12.893743038 CET	192.168.2.16	1.1.1.1	0x3496	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:12.929164886 CET	192.168.2.16	1.1.1.1	0xc9cd	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:12.929491043 CET	192.168.2.16	1.1.1.1	0x2d4e	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:13.040534973 CET	192.168.2.16	1.1.1.1	0x4a13	Standard query (0)	r.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:13.040750980 CET	192.168.2.16	1.1.1.1	0x149e	Standard query (0)	r.casalemedia.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:13.081702948 CET	192.168.2.16	1.1.1.1	0x52eb	Standard query (0)	cs.admanmedia.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:13.081902027 CET	192.168.2.16	1.1.1.1	0xbe94	Standard query (0)	cs.admanmedia.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:13.199661016 CET	192.168.2.16	1.1.1.1	0x37a3	Standard query (0)	s.ad.smaato.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:13.199882030 CET	192.168.2.16	1.1.1.1	0xa59c	Standard query (0)	s.ad.smaato.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:13.507797003 CET	192.168.2.16	1.1.1.1	0x2c83	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:13.507960081 CET	192.168.2.16	1.1.1.1	0x5264	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Mar 11, 2024 12:57:13.819370031 CET	192.168.2.16	1.1.1.1	0x5b95	Standard query (0)	rtb.adentifi.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:13.819585085 CET	192.168.2.16	1.1.1.1	0x3e7d	Standard query (0)	rtb.adentifi.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:13.893786907 CET	192.168.2.16	1.1.1.1	0x3168	Standard query (0)	a.audrte.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:13.894033909 CET	192.168.2.16	1.1.1.1	0x4818	Standard query (0)	a.audrte.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:13.901959896 CET	192.168.2.16	1.1.1.1	0x1204	Standard query (0)	r.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:13.902122021 CET	192.168.2.16	1.1.1.1	0xcf13	Standard query (0)	r.casalemedia.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:14.890357971 CET	192.168.2.16	1.1.1.1	0x4a26	Standard query (0)	wt.rqtrk.eu	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:14.890580893 CET	192.168.2.16	1.1.1.1	0xfc32	Standard query (0)	wt.rqtrk.eu	65	IN (0x0001)	false
Mar 11, 2024 12:57:15.985359907 CET	192.168.2.16	1.1.1.1	0xc1d4	Standard query (0)	wt.rqtrk.eu	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:15.985533953 CET	192.168.2.16	1.1.1.1	0x818d	Standard query (0)	wt.rqtrk.eu	65	IN (0x0001)	false
Mar 11, 2024 12:57:16.160639048 CET	192.168.2.16	1.1.1.1	0xd725	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:16.160854101 CET	192.168.2.16	1.1.1.1	0xa977	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:16.289905071 CET	192.168.2.16	1.1.1.1	0xc304	Standard query (0)	i6.liadm.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:16.290126085 CET	192.168.2.16	1.1.1.1	0x92ef	Standard query (0)	i6.liadm.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:16.552891970 CET	192.168.2.16	1.1.1.1	0xa2f1	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:16.553066015 CET	192.168.2.16	1.1.1.1	0x955e	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Mar 11, 2024 12:57:17.324523926 CET	192.168.2.16	1.1.1.1	0x278	Standard query (0)	i6.liadm.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:17.324711084 CET	192.168.2.16	1.1.1.1	0xa489	Standard query (0)	i6.liadm.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:17.536689997 CET	192.168.2.16	1.1.1.1	0x6fa3	Standard query (0)	dmp.adform.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:17.536854029 CET	192.168.2.16	1.1.1.1	0x9231	Standard query (0)	dmp.adform.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:20.852235079 CET	192.168.2.16	1.1.1.1	0xa237	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:20.852394104 CET	192.168.2.16	1.1.1.1	0x5b8	Standard query (0)	pm.w55c.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:21.975485086 CET	192.168.2.16	1.1.1.1	0xc193	Standard query (0)	cms.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:21.975677967 CET	192.168.2.16	1.1.1.1	0x2ab9	Standard query (0)	cms.analytics.yahoo.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:21.976144075 CET	192.168.2.16	1.1.1.1	0x7350	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:21.976416111 CET	192.168.2.16	1.1.1.1	0x7d20	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:21.980492115 CET	192.168.2.16	1.1.1.1	0x1ac2	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:21.980747938 CET	192.168.2.16	1.1.1.1	0xca6a	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:21.982017994 CET	192.168.2.16	1.1.1.1	0xba21	Standard query (0)	beacon.krxd.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:21.982266903 CET	192.168.2.16	1.1.1.1	0xfb3f	Standard query (0)	beacon.krxd.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:22.452275991 CET	192.168.2.16	1.1.1.1	0x41bd	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:22.452467918 CET	192.168.2.16	1.1.1.1	0x5086	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:24.080343962 CET	192.168.2.16	1.1.1.1	0xb345	Standard query (0)	ssc-cms.33across.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:24.080554962 CET	192.168.2.16	1.1.1.1	0xead9	Standard query (0)	ssc-cms.33across.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:24.081264973 CET	192.168.2.16	1.1.1.1	0x9c66	Standard query (0)	sid.storygize.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:24.081541061 CET	192.168.2.16	1.1.1.1	0xb9d8	Standard query (0)	sid.storygize.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:24.276612997 CET	192.168.2.16	1.1.1.1	0x1bbe	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:24.276803017 CET	192.168.2.16	1.1.1.1	0xd222	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:24.382574081 CET	192.168.2.16	1.1.1.1	0x8a2	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:24.382756948 CET	192.168.2.16	1.1.1.1	0xcd70	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:24.383120060 CET	192.168.2.16	1.1.1.1	0x5d1c	Standard query (0)	trc.taboola.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:24.383270979 CET	192.168.2.16	1.1.1.1	0xdabe	Standard query (0)	trc.taboola.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:24.562254906 CET	192.168.2.16	1.1.1.1	0xd8db	Standard query (0)	sync.teads.tv	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:24.562413931 CET	192.168.2.16	1.1.1.1	0x1134	Standard query (0)	sync.teads.tv	65	IN (0x0001)	false
Mar 11, 2024 12:57:24.860308886 CET	192.168.2.16	1.1.1.1	0xe086	Standard query (0)	px.owneriq.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:24.860925913 CET	192.168.2.16	1.1.1.1	0x1806	Standard query (0)	px.owneriq.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:24.871730089 CET	192.168.2.16	1.1.1.1	0x60ed	Standard query (0)	gocm.c.appier.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:24.872068882 CET	192.168.2.16	1.1.1.1	0xc539	Standard query (0)	gocm.c.appier.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:24.873250008 CET	192.168.2.16	1.1.1.1	0x2356	Standard query (0)	uipglob.semasio.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:24.873486042 CET	192.168.2.16	1.1.1.1	0x6a37	Standard query (0)	uipglob.semasio.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:24.873965979 CET	192.168.2.16	1.1.1.1	0xb2ae	Standard query (0)	pixel.onaudience.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:24.874172926 CET	192.168.2.16	1.1.1.1	0x239b	Standard query (0)	pixel.onaudience.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:24.874532938 CET	192.168.2.16	1.1.1.1	0x1ed8	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:24.874684095 CET	192.168.2.16	1.1.1.1	0x6586	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:25.224596024 CET	192.168.2.16	1.1.1.1	0xe660	Standard query (0)	trc.taboola.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:25.224884033 CET	192.168.2.16	1.1.1.1	0x98eb	Standard query (0)	trc.taboola.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:25.664077997 CET	192.168.2.16	1.1.1.1	0xf8ac	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:25.664275885 CET	192.168.2.16	1.1.1.1	0xc8e8	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:26.132695913 CET	192.168.2.16	1.1.1.1	0x2d39	Standard query (0)	servedby.flashtalking.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:26.132989883 CET	192.168.2.16	1.1.1.1	0x6ec9	Standard query (0)	servedby.flashtalking.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:26.170497894 CET	192.168.2.16	1.1.1.1	0xfd31	Standard query (0)	aep.mxptint.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:26.170741081 CET	192.168.2.16	1.1.1.1	0x5ac5	Standard query (0)	aep.mxptint.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:26.175484896 CET	192.168.2.16	1.1.1.1	0x4311	Standard query (0)	b1sync.zemanta.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:26.175642967 CET	192.168.2.16	1.1.1.1	0x67f	Standard query (0)	b1sync.zemanta.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:26.176073074 CET	192.168.2.16	1.1.1.1	0xc1ad	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:26.176490068 CET	192.168.2.16	1.1.1.1	0x228	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:26.260368109 CET	192.168.2.16	1.1.1.1	0xe87a	Standard query (0)	sync.teads.tv	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:26.260541916 CET	192.168.2.16	1.1.1.1	0x4854	Standard query (0)	sync.teads.tv	65	IN (0x0001)	false
Mar 11, 2024 12:57:26.736742020 CET	192.168.2.16	1.1.1.1	0x607b	Standard query (0)	uipglob.semasio.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:26.736913919 CET	192.168.2.16	1.1.1.1	0xad75	Standard query (0)	uipglob.semasio.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:26.882299900 CET	192.168.2.16	1.1.1.1	0x3088	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:26.882664919 CET	192.168.2.16	1.1.1.1	0x5fdc	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:27.122642994 CET	192.168.2.16	1.1.1.1	0x1871	Standard query (0)	ajs-assets.ftstatic.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:27.122823954 CET	192.168.2.16	1.1.1.1	0xbf2e	Standard query (0)	ajs-assets.ftstatic.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:28.328917980 CET	192.168.2.16	1.1.1.1	0xb905	Standard query (0)	agen-assets.ftstatic.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:28.329173088 CET	192.168.2.16	1.1.1.1	0x69be	Standard query (0)	agen-assets.ftstatic.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:28.429415941 CET	192.168.2.16	1.1.1.1	0x5f70	Standard query (0)	spl.zeotap.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:28.429624081 CET	192.168.2.16	1.1.1.1	0xb4aa	Standard query (0)	spl.zeotap.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:29.247761011 CET	192.168.2.16	1.1.1.1	0xe1c7	Standard query (0)	agen-assets.ftstatic.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:29.247997046 CET	192.168.2.16	1.1.1.1	0x569f	Standard query (0)	agen-assets.ftstatic.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:29.367247105 CET	192.168.2.16	1.1.1.1	0xed8c	Standard query (0)	d9.flashtalking.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:29.368952990 CET	192.168.2.16	1.1.1.1	0x3f73	Standard query (0)	d9.flashtalking.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:29.373158932 CET	192.168.2.16	1.1.1.1	0xebad	Standard query (0)	js.ad-score.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:29.373413086 CET	192.168.2.16	1.1.1.1	0x2a31	Standard query (0)	js.ad-score.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:29.374119997 CET	192.168.2.16	1.1.1.1	0x4c96	Standard query (0)	cdn.flashtalking.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:29.374259949 CET	192.168.2.16	1.1.1.1	0xcb45	Standard query (0)	cdn.flashtalking.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:29.554228067 CET	192.168.2.16	1.1.1.1	0x5163	Standard query (0)	a.audrte.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:29.554457903 CET	192.168.2.16	1.1.1.1	0xbb3f	Standard query (0)	a.audrte.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:30.203732014 CET	192.168.2.16	1.1.1.1	0x2df3	Standard query (0)	mwzeom.zeotap.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:30.203882933 CET	192.168.2.16	1.1.1.1	0x46be	Standard query (0)	mwzeom.zeotap.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:30.246793032 CET	192.168.2.16	1.1.1.1	0x496c	Standard query (0)	ad-events.flashtalking.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:30.247034073 CET	192.168.2.16	1.1.1.1	0xae6a	Standard query (0)	ad-events.flashtalking.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:30.459320068 CET	192.168.2.16	1.1.1.1	0xf515	Standard query (0)	stat.flashtalking.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:30.459583998 CET	192.168.2.16	1.1.1.1	0x8cff	Standard query (0)	stat.flashtalking.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:30.460092068 CET	192.168.2.16	1.1.1.1	0xcee	Standard query (0)	cdn.flashtalking.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:30.460371017 CET	192.168.2.16	1.1.1.1	0x24e1	Standard query (0)	cdn.flashtalking.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:30.967259884 CET	192.168.2.16	1.1.1.1	0x2c91	Standard query (0)	data.ad-score.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:30.967617035 CET	192.168.2.16	1.1.1.1	0x7944	Standard query (0)	data.ad-score.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:30.995662928 CET	192.168.2.16	1.1.1.1	0xfda9	Standard query (0)	d9.flashtalking.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:30.995781898 CET	192.168.2.16	1.1.1.1	0x898e	Standard query (0)	d9.flashtalking.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:31.112121105 CET	192.168.2.16	1.1.1.1	0xcabe	Standard query (0)	ad-events.flashtalking.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:31.112287998 CET	192.168.2.16	1.1.1.1	0x2c5f	Standard query (0)	ad-events.flashtalking.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:31.193742037 CET	192.168.2.16	1.1.1.1	0x1002	Standard query (0)	mwzeom.zeotap.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:31.194055080 CET	192.168.2.16	1.1.1.1	0x4ae4	Standard query (0)	mwzeom.zeotap.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:31.272058010 CET	192.168.2.16	1.1.1.1	0xbb34	Standard query (0)	stat.flashtalking.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:31.272213936 CET	192.168.2.16	1.1.1.1	0x50d3	Standard query (0)	stat.flashtalking.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:31.330400944 CET	192.168.2.16	1.1.1.1	0xa421	Standard query (0)	secure.flashtalking.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:31.330570936 CET	192.168.2.16	1.1.1.1	0xb7ec	Standard query (0)	secure.flashtalking.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:31.791050911 CET	192.168.2.16	1.1.1.1	0xb487	Standard query (0)	servedby.flashtalking.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:31.791230917 CET	192.168.2.16	1.1.1.1	0xcd83	Standard query (0)	servedby.flashtalking.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:32.143841028 CET	192.168.2.16	1.1.1.1	0x5364	Standard query (0)	secure.flashtalking.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:32.144015074 CET	192.168.2.16	1.1.1.1	0xe619	Standard query (0)	secure.flashtalking.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:32.321598053 CET	192.168.2.16	1.1.1.1	0x14ea	Standard query (0)	data.ad-score.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:32.321883917 CET	192.168.2.16	1.1.1.1	0x2e50	Standard query (0)	data.ad-score.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:35.117386103 CET	192.168.2.16	1.1.1.1	0x488e	Standard query (0)	ps.eyeota.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:35.117914915 CET	192.168.2.16	1.1.1.1	0x2dbc	Standard query (0)	ps.eyeota.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:41.581957102 CET	192.168.2.16	1.1.1.1	0xfe47	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:41.582035065 CET	192.168.2.16	1.1.1.1	0x8962	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:41.590081930 CET	192.168.2.16	1.1.1.1	0xe15c	Standard query (0)	a.fsdn.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:41.590356112 CET	192.168.2.16	1.1.1.1	0x979	Standard query (0)	a.fsdn.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:41.601730108 CET	192.168.2.16	1.1.1.1	0x874d	Standard query (0)	tag.crsspxl.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:41.601864100 CET	192.168.2.16	1.1.1.1	0x5ef9	Standard query (0)	tag.crsspxl.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:42.433288097 CET	192.168.2.16	1.1.1.1	0xd16e	Standard query (0)	a.fsdn.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:42.433605909 CET	192.168.2.16	1.1.1.1	0x46a8	Standard query (0)	a.fsdn.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:42.910825014 CET	192.168.2.16	1.1.1.1	0x4ae3	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:42.911000967 CET	192.168.2.16	1.1.1.1	0x32cd	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:43.765260935 CET	192.168.2.16	1.1.1.1	0x68f	Standard query (0)	dmp.truoptik.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:43.765512943 CET	192.168.2.16	1.1.1.1	0xf5d5	Standard query (0)	dmp.truoptik.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:43.766832113 CET	192.168.2.16	1.1.1.1	0xe7e0	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:43.766982079 CET	192.168.2.16	1.1.1.1	0x9e09	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:43.781054020 CET	192.168.2.16	1.1.1.1	0xaa54	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:43.781254053 CET	192.168.2.16	1.1.1.1	0xfd49	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:44.579804897 CET	192.168.2.16	1.1.1.1	0x491a	Standard query (0)	tag.crsspxl.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:44.580220938 CET	192.168.2.16	1.1.1.1	0xd4aa	Standard query (0)	tag.crsspxl.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:44.594744921 CET	192.168.2.16	1.1.1.1	0x5976	Standard query (0)	u.openx.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:44.595006943 CET	192.168.2.16	1.1.1.1	0x4d1	Standard query (0)	u.openx.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:44.630717993 CET	192.168.2.16	1.1.1.1	0x23d	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:44.630875111 CET	192.168.2.16	1.1.1.1	0x6e6	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:44.663284063 CET	192.168.2.16	1.1.1.1	0x9616	Standard query (0)	rtd.tubemogul.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:44.663510084 CET	192.168.2.16	1.1.1.1	0xcc9d	Standard query (0)	rtd.tubemogul.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:44.706101894 CET	192.168.2.16	1.1.1.1	0x413d	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:44.706365108 CET	192.168.2.16	1.1.1.1	0xcca3	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:45.502679110 CET	192.168.2.16	1.1.1.1	0x4fa8	Standard query (0)	rtd-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:45.502847910 CET	192.168.2.16	1.1.1.1	0x6d5	Standard query (0)	rtd-tm.everesttech.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:46.380176067 CET	192.168.2.16	1.1.1.1	0x5bf7	Standard query (0)	rtd-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:46.380347967 CET	192.168.2.16	1.1.1.1	0x6195	Standard query (0)	rtd-tm.everesttech.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:51.094784975 CET	192.168.2.16	1.1.1.1	0x27a8	Standard query (0)	ml314.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:51.094979048 CET	192.168.2.16	1.1.1.1	0x10e6	Standard query (0)	ml314.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:53.885718107 CET	192.168.2.16	1.1.1.1	0xb208	Standard query (0)	btlr.sharethrough.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:53.886208057 CET	192.168.2.16	1.1.1.1	0x1050	Standard query (0)	btlr.sharethrough.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:53.887764931 CET	192.168.2.16	1.1.1.1	0x6add	Standard query (0)	hbopenbid.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:53.887923956 CET	192.168.2.16	1.1.1.1	0x8d01	Standard query (0)	hbopenbid.pubmatic.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:53.889306068 CET	192.168.2.16	1.1.1.1	0xb07a	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:53.889523029 CET	192.168.2.16	1.1.1.1	0xe6d1	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:53.889940023 CET	192.168.2.16	1.1.1.1	0x3ee2	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:53.890099049 CET	192.168.2.16	1.1.1.1	0x3cd	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:54.547907114 CET	192.168.2.16	1.1.1.1	0x962b	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:54.548245907 CET	192.168.2.16	1.1.1.1	0x5531	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:55.350383043 CET	192.168.2.16	1.1.1.1	0x71ef	Standard query (0)	btlr.sharethrough.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:55.350558043 CET	192.168.2.16	1.1.1.1	0x5f99	Standard query (0)	btlr.sharethrough.com	65	IN (0x0001)	false
Mar 11, 2024 12:57:56.275377989 CET	192.168.2.16	1.1.1.1	0x7347	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:56.275938034 CET	192.168.2.16	1.1.1.1	0xc89d	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Mar 11, 2024 12:57:56.360138893 CET	192.168.2.16	1.1.1.1	0xa55f	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:56.360467911 CET	192.168.2.16	1.1.1.1	0x601a	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Mar 11, 2024 12:58:26.878582001 CET	192.168.2.16	1.1.1.1	0x35a8	Standard query (0)	prg.smartadserver.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:58:26.878635883 CET	192.168.2.16	1.1.1.1	0x9128	Standard query (0)	prg.smartadserver.com	65	IN (0x0001)	false
Mar 11, 2024 12:58:35.053766012 CET	192.168.2.16	1.1.1.1	0x5dd7	Standard query (0)	stat.flashtalking.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:58:35.053976059 CET	192.168.2.16	1.1.1.1	0xe986	Standard query (0)	stat.flashtalking.com	65	IN (0x0001)	false
Mar 11, 2024 12:58:35.876786947 CET	192.168.2.16	1.1.1.1	0xe767	Standard query (0)	stat.flashtalking.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:58:35.877075911 CET	192.168.2.16	1.1.1.1	0x5f3	Standard query (0)	stat.flashtalking.com	65	IN (0x0001)	false
Mar 11, 2024 12:58:40.303278923 CET	192.168.2.16	1.1.1.1	0xf970	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:58:40.303456068 CET	192.168.2.16	1.1.1.1	0xd9ed	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 11, 2024 12:58:45.115287066 CET	192.168.2.16	1.1.1.1	0xe296	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:58:45.115287066 CET	192.168.2.16	1.1.1.1	0xfe2e	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 11, 2024 12:56:35.544747114 CET	1.1.1.1	192.168.2.16	0x8af8	No error (0)	sourceforge.net		104.18.37.111	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:35.544747114 CET	1.1.1.1	192.168.2.16	0x8af8	No error (0)	sourceforge.net		172.64.150.145	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:36.539315939 CET	1.1.1.1	192.168.2.16	0x4900	No error (0)	a.fsdn.com	a.fsdn.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:36.539623022 CET	1.1.1.1	192.168.2.16	0x1fb5	No error (0)	a.fsdn.com	a.fsdn.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:38.046200991 CET	1.1.1.1	192.168.2.16	0x56b7	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:38.046258926 CET	1.1.1.1	192.168.2.16	0x700f	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:38.053939104 CET	1.1.1.1	192.168.2.16	0x3569	No error (0)	btlr.sharethrough.com	btlr-us-west-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:38.060607910 CET	1.1.1.1	192.168.2.16	0xc08d	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:38.061208963 CET	1.1.1.1	192.168.2.16	0x949b	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:38.061688900 CET	1.1.1.1	192.168.2.16	0xca75	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:38.061688900 CET	1.1.1.1	192.168.2.16	0xca75	No error (0)	vap.lijit.com	naw.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:38.061688900 CET	1.1.1.1	192.168.2.16	0xca75	No error (0)	naw.vap.lijit.com	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:38.061688900 CET	1.1.1.1	192.168.2.16	0xca75	No error (0)	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		44.230.187.183	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.061688900 CET	1.1.1.1	192.168.2.16	0xca75	No error (0)	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		44.233.51.215	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.061688900 CET	1.1.1.1	192.168.2.16	0xca75	No error (0)	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		35.81.128.132	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.061688900 CET	1.1.1.1	192.168.2.16	0xca75	No error (0)	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		44.237.100.219	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.061688900 CET	1.1.1.1	192.168.2.16	0xca75	No error (0)	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		35.163.202.19	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.061688900 CET	1.1.1.1	192.168.2.16	0xca75	No error (0)	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		54.70.27.34	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.061688900 CET	1.1.1.1	192.168.2.16	0xca75	No error (0)	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		52.27.166.248	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.061688900 CET	1.1.1.1	192.168.2.16	0xca75	No error (0)	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		35.166.29.60	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.061728001 CET	1.1.1.1	192.168.2.16	0x7423	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:38.061728001 CET	1.1.1.1	192.168.2.16	0x7423	No error (0)	vap.lijit.com	naw.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:38.061728001 CET	1.1.1.1	192.168.2.16	0x7423	No error (0)	naw.vap.lijit.com	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:38.065504074 CET	1.1.1.1	192.168.2.16	0x4b5b	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:38.065504074 CET	1.1.1.1	192.168.2.16	0x4b5b	No error (0)	hbprebid-v3.pubmnet.com	gob-sv3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:38.065504074 CET	1.1.1.1	192.168.2.16	0x4b5b	No error (0)	gob-sv3.pubmnet.com		204.237.133.116	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.066091061 CET	1.1.1.1	192.168.2.16	0x7185	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:38.066091061 CET	1.1.1.1	192.168.2.16	0x7185	No error (0)	hbprebid-v3.pubmnet.com	gob-sv3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:38.067128897 CET	1.1.1.1	192.168.2.16	0x53ca	No error (0)	prg.smartadserver.com	prga.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:38.067128897 CET	1.1.1.1	192.168.2.16	0x53ca	No error (0)	prga.smartadserver.com	hb-geo.delivery-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:38.067128897 CET	1.1.1.1	192.168.2.16	0x53ca	No error (0)	usw1.smartadserver.com		23.83.76.35	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.067128897 CET	1.1.1.1	192.168.2.16	0x53ca	No error (0)	usw1.smartadserver.com		23.83.76.81	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.067128897 CET	1.1.1.1	192.168.2.16	0x53ca	No error (0)	usw1.smartadserver.com		23.83.76.97	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.067128897 CET	1.1.1.1	192.168.2.16	0x53ca	No error (0)	usw1.smartadserver.com		23.83.76.64	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.067128897 CET	1.1.1.1	192.168.2.16	0x53ca	No error (0)	usw1.smartadserver.com		23.83.76.48	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.067128897 CET	1.1.1.1	192.168.2.16	0x53ca	No error (0)	usw1.smartadserver.com		23.83.76.65	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.067128897 CET	1.1.1.1	192.168.2.16	0x53ca	No error (0)	usw1.smartadserver.com		23.83.76.49	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.067128897 CET	1.1.1.1	192.168.2.16	0x53ca	No error (0)	usw1.smartadserver.com		23.83.76.44	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.067128897 CET	1.1.1.1	192.168.2.16	0x53ca	No error (0)	usw1.smartadserver.com		23.83.76.96	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.067128897 CET	1.1.1.1	192.168.2.16	0x53ca	No error (0)	usw1.smartadserver.com		23.83.76.80	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.067287922 CET	1.1.1.1	192.168.2.16	0xbbc9	No error (0)	prg.smartadserver.com	prga.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:38.067287922 CET	1.1.1.1	192.168.2.16	0xbbc9	No error (0)	prga.smartadserver.com	hb-geo.delivery-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:38.068409920 CET	1.1.1.1	192.168.2.16	0xfafa	No error (0)	btlr.sharethrough.com	btlr-us-west-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:38.068409920 CET	1.1.1.1	192.168.2.16	0xfafa	No error (0)	btlr-us-west-1.sharethrough.com		52.8.138.210	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.068409920 CET	1.1.1.1	192.168.2.16	0xfafa	No error (0)	btlr-us-west-1.sharethrough.com		54.219.51.27	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.068409920 CET	1.1.1.1	192.168.2.16	0xfafa	No error (0)	btlr-us-west-1.sharethrough.com		50.18.147.72	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.068409920 CET	1.1.1.1	192.168.2.16	0xfafa	No error (0)	btlr-us-west-1.sharethrough.com		54.176.168.59	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.068409920 CET	1.1.1.1	192.168.2.16	0xfafa	No error (0)	btlr-us-west-1.sharethrough.com		54.183.35.117	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.068409920 CET	1.1.1.1	192.168.2.16	0xfafa	No error (0)	btlr-us-west-1.sharethrough.com		54.183.100.47	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.068409920 CET	1.1.1.1	192.168.2.16	0xfafa	No error (0)	btlr-us-west-1.sharethrough.com		52.8.222.242	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.068409920 CET	1.1.1.1	192.168.2.16	0xfafa	No error (0)	btlr-us-west-1.sharethrough.com		54.219.158.22	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.071897984 CET	1.1.1.1	192.168.2.16	0xcff1	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:38.071897984 CET	1.1.1.1	192.168.2.16	0xcff1	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:38.071897984 CET	1.1.1.1	192.168.2.16	0xcff1	No error (0)	ib.anycast.adnxs.com		104.254.151.68	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.071897984 CET	1.1.1.1	192.168.2.16	0xcff1	No error (0)	ib.anycast.adnxs.com		104.254.148.252	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.071897984 CET	1.1.1.1	192.168.2.16	0xcff1	No error (0)	ib.anycast.adnxs.com		104.254.151.60	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.071897984 CET	1.1.1.1	192.168.2.16	0xcff1	No error (0)	ib.anycast.adnxs.com		104.254.151.36	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.071897984 CET	1.1.1.1	192.168.2.16	0xcff1	No error (0)	ib.anycast.adnxs.com		104.254.148.251	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.071897984 CET	1.1.1.1	192.168.2.16	0xcff1	No error (0)	ib.anycast.adnxs.com		104.254.151.69	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.071897984 CET	1.1.1.1	192.168.2.16	0xcff1	No error (0)	ib.anycast.adnxs.com		104.254.150.241	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.114211082 CET	1.1.1.1	192.168.2.16	0x2aff	No error (0)	c.sf-syn.com		172.64.154.159	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.114211082 CET	1.1.1.1	192.168.2.16	0x2aff	No error (0)	c.sf-syn.com		104.18.33.97	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:38.585309029 CET	1.1.1.1	192.168.2.16	0xb02f	No error (0)	a.fsdn.com	a.fsdn.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:38.585342884 CET	1.1.1.1	192.168.2.16	0xef14	No error (0)	a.fsdn.com	a.fsdn.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:39.000792027 CET	1.1.1.1	192.168.2.16	0xadc3	No error (0)	prg.smartadserver.com	prga.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:39.000792027 CET	1.1.1.1	192.168.2.16	0xadc3	No error (0)	prga.smartadserver.com	hb-geo.delivery-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:39.000792027 CET	1.1.1.1	192.168.2.16	0xadc3	No error (0)	usw1.smartadserver.com		23.83.76.44	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.000792027 CET	1.1.1.1	192.168.2.16	0xadc3	No error (0)	usw1.smartadserver.com		23.83.76.65	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.000792027 CET	1.1.1.1	192.168.2.16	0xadc3	No error (0)	usw1.smartadserver.com		23.83.76.96	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.000792027 CET	1.1.1.1	192.168.2.16	0xadc3	No error (0)	usw1.smartadserver.com		23.83.76.48	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.000792027 CET	1.1.1.1	192.168.2.16	0xadc3	No error (0)	usw1.smartadserver.com		23.83.76.35	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.000792027 CET	1.1.1.1	192.168.2.16	0xadc3	No error (0)	usw1.smartadserver.com		23.83.76.80	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.000792027 CET	1.1.1.1	192.168.2.16	0xadc3	No error (0)	usw1.smartadserver.com		23.83.76.49	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.000792027 CET	1.1.1.1	192.168.2.16	0xadc3	No error (0)	usw1.smartadserver.com		23.83.76.64	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.000792027 CET	1.1.1.1	192.168.2.16	0xadc3	No error (0)	usw1.smartadserver.com		23.83.76.81	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.000792027 CET	1.1.1.1	192.168.2.16	0xadc3	No error (0)	usw1.smartadserver.com		23.83.76.97	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.001076937 CET	1.1.1.1	192.168.2.16	0xe692	No error (0)	prg.smartadserver.com	prga.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:39.001076937 CET	1.1.1.1	192.168.2.16	0xe692	No error (0)	prga.smartadserver.com	hb-geo.delivery-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:39.112653971 CET	1.1.1.1	192.168.2.16	0x2b52	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:39.112653971 CET	1.1.1.1	192.168.2.16	0x2b52	No error (0)	vap.lijit.com	naw.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:39.112653971 CET	1.1.1.1	192.168.2.16	0x2b52	No error (0)	naw.vap.lijit.com	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:39.112653971 CET	1.1.1.1	192.168.2.16	0x2b52	No error (0)	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		52.27.166.248	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.112653971 CET	1.1.1.1	192.168.2.16	0x2b52	No error (0)	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		44.233.51.215	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.112653971 CET	1.1.1.1	192.168.2.16	0x2b52	No error (0)	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		35.81.128.132	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.112653971 CET	1.1.1.1	192.168.2.16	0x2b52	No error (0)	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		35.166.29.60	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.112653971 CET	1.1.1.1	192.168.2.16	0x2b52	No error (0)	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		44.237.100.219	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.112653971 CET	1.1.1.1	192.168.2.16	0x2b52	No error (0)	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		54.70.27.34	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.112653971 CET	1.1.1.1	192.168.2.16	0x2b52	No error (0)	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		44.230.187.183	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.112653971 CET	1.1.1.1	192.168.2.16	0x2b52	No error (0)	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		35.163.202.19	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.113121033 CET	1.1.1.1	192.168.2.16	0x5e1f	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:39.113121033 CET	1.1.1.1	192.168.2.16	0x5e1f	No error (0)	vap.lijit.com	naw.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:39.113121033 CET	1.1.1.1	192.168.2.16	0x5e1f	No error (0)	naw.vap.lijit.com	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:39.195954084 CET	1.1.1.1	192.168.2.16	0x790f	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:39.196813107 CET	1.1.1.1	192.168.2.16	0x251e	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:39.347445011 CET	1.1.1.1	192.168.2.16	0xf4c3	No error (0)	btlr.sharethrough.com	btlr-us-west-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:39.348157883 CET	1.1.1.1	192.168.2.16	0xeac9	No error (0)	btlr.sharethrough.com	btlr-us-west-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:39.348157883 CET	1.1.1.1	192.168.2.16	0xeac9	No error (0)	btlr-us-west-1.sharethrough.com		52.9.62.96	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.348157883 CET	1.1.1.1	192.168.2.16	0xeac9	No error (0)	btlr-us-west-1.sharethrough.com		54.219.158.22	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.348157883 CET	1.1.1.1	192.168.2.16	0xeac9	No error (0)	btlr-us-west-1.sharethrough.com		52.52.237.208	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.348157883 CET	1.1.1.1	192.168.2.16	0xeac9	No error (0)	btlr-us-west-1.sharethrough.com		54.215.139.244	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.348157883 CET	1.1.1.1	192.168.2.16	0xeac9	No error (0)	btlr-us-west-1.sharethrough.com		54.241.185.160	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.348157883 CET	1.1.1.1	192.168.2.16	0xeac9	No error (0)	btlr-us-west-1.sharethrough.com		54.193.160.210	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.348157883 CET	1.1.1.1	192.168.2.16	0xeac9	No error (0)	btlr-us-west-1.sharethrough.com		54.176.236.254	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.348157883 CET	1.1.1.1	192.168.2.16	0xeac9	No error (0)	btlr-us-west-1.sharethrough.com		52.8.138.210	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.665211916 CET	1.1.1.1	192.168.2.16	0xbc98	No error (0)	btloader.com			65	IN (0x0001)	false
Mar 11, 2024 12:56:39.665250063 CET	1.1.1.1	192.168.2.16	0xcaf5	No error (0)	btloader.com		172.67.41.60	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.665250063 CET	1.1.1.1	192.168.2.16	0xcaf5	No error (0)	btloader.com		104.22.74.216	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.665250063 CET	1.1.1.1	192.168.2.16	0xcaf5	No error (0)	btloader.com		104.22.75.216	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.669262886 CET	1.1.1.1	192.168.2.16	0x703f	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:39.669262886 CET	1.1.1.1	192.168.2.16	0x703f	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:39.669262886 CET	1.1.1.1	192.168.2.16	0x703f	No error (0)	ib.anycast.adnxs.com		104.254.148.252	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.669262886 CET	1.1.1.1	192.168.2.16	0x703f	No error (0)	ib.anycast.adnxs.com		104.254.151.60	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.669262886 CET	1.1.1.1	192.168.2.16	0x703f	No error (0)	ib.anycast.adnxs.com		104.254.148.251	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.669262886 CET	1.1.1.1	192.168.2.16	0x703f	No error (0)	ib.anycast.adnxs.com		104.254.151.69	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.669262886 CET	1.1.1.1	192.168.2.16	0x703f	No error (0)	ib.anycast.adnxs.com		104.254.151.68	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.669262886 CET	1.1.1.1	192.168.2.16	0x703f	No error (0)	ib.anycast.adnxs.com		104.254.150.241	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:39.669262886 CET	1.1.1.1	192.168.2.16	0x703f	No error (0)	ib.anycast.adnxs.com		104.254.151.36	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:40.140145063 CET	1.1.1.1	192.168.2.16	0xe6e3	No error (0)	analytics.slashdotmedia.com		216.105.38.9	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:40.335577011 CET	1.1.1.1	192.168.2.16	0x681d	No error (0)	www.google.com		142.250.101.105	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:40.335577011 CET	1.1.1.1	192.168.2.16	0x681d	No error (0)	www.google.com		142.250.101.99	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:40.335577011 CET	1.1.1.1	192.168.2.16	0x681d	No error (0)	www.google.com		142.250.101.147	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:40.335577011 CET	1.1.1.1	192.168.2.16	0x681d	No error (0)	www.google.com		142.250.101.103	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:40.335577011 CET	1.1.1.1	192.168.2.16	0x681d	No error (0)	www.google.com		142.250.101.104	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:40.335577011 CET	1.1.1.1	192.168.2.16	0x681d	No error (0)	www.google.com		142.250.101.106	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:40.335988998 CET	1.1.1.1	192.168.2.16	0xee50	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 11, 2024 12:56:40.453874111 CET	1.1.1.1	192.168.2.16	0x1e34	No error (0)	sourceforge.net		172.64.150.145	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:40.453874111 CET	1.1.1.1	192.168.2.16	0x1e34	No error (0)	sourceforge.net		104.18.37.111	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:40.525383949 CET	1.1.1.1	192.168.2.16	0x98b3	No error (0)	api.btloader.com		130.211.23.194	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:41.267043114 CET	1.1.1.1	192.168.2.16	0xdbb0	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:41.267043114 CET	1.1.1.1	192.168.2.16	0xdbb0	No error (0)	securepubads46.g.doubleclick.net		142.251.2.156	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:41.267043114 CET	1.1.1.1	192.168.2.16	0xdbb0	No error (0)	securepubads46.g.doubleclick.net		142.251.2.155	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:41.267043114 CET	1.1.1.1	192.168.2.16	0xdbb0	No error (0)	securepubads46.g.doubleclick.net		142.251.2.154	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:41.267043114 CET	1.1.1.1	192.168.2.16	0xdbb0	No error (0)	securepubads46.g.doubleclick.net		142.251.2.157	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:41.267478943 CET	1.1.1.1	192.168.2.16	0x8d68	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:41.433104992 CET	1.1.1.1	192.168.2.16	0x5351	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:41.433327913 CET	1.1.1.1	192.168.2.16	0xdc00	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:41.433384895 CET	1.1.1.1	192.168.2.16	0xb099	No error (0)	ml314.com		34.117.77.79	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:41.441135883 CET	1.1.1.1	192.168.2.16	0xc1c2	No error (0)	ads.pro-market.net	ads.pro-market.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:41.449961901 CET	1.1.1.1	192.168.2.16	0x5034	No error (0)	ads.pro-market.net	ads.pro-market.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:41.866055012 CET	1.1.1.1	192.168.2.16	0x928e	No error (0)	tag.crsspxl.com		34.232.140.51	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:42.309603930 CET	1.1.1.1	192.168.2.16	0x7b90	No error (0)	ad-delivery.net		104.26.2.70	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:42.309603930 CET	1.1.1.1	192.168.2.16	0x7b90	No error (0)	ad-delivery.net		104.26.3.70	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:42.309603930 CET	1.1.1.1	192.168.2.16	0x7b90	No error (0)	ad-delivery.net		172.67.69.19	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:42.310137033 CET	1.1.1.1	192.168.2.16	0xadd6	No error (0)	ad-delivery.net			65	IN (0x0001)	false
Mar 11, 2024 12:56:42.321865082 CET	1.1.1.1	192.168.2.16	0xc10a	No error (0)	pbid.pro-market.net		107.178.240.89	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:42.338001966 CET	1.1.1.1	192.168.2.16	0x90eb	No error (0)	ad.doubleclick.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:42.338001966 CET	1.1.1.1	192.168.2.16	0x90eb	No error (0)	ad.doubleclick.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:42.338042974 CET	1.1.1.1	192.168.2.16	0xb4a2	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 11, 2024 12:56:42.339973927 CET	1.1.1.1	192.168.2.16	0x624f	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:42.339973927 CET	1.1.1.1	192.168.2.16	0x624f	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:42.340570927 CET	1.1.1.1	192.168.2.16	0xab96	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:42.340570927 CET	1.1.1.1	192.168.2.16	0xab96	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:43.161587000 CET	1.1.1.1	192.168.2.16	0x965f	No error (0)	ad-delivery.net		104.26.2.70	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:43.161587000 CET	1.1.1.1	192.168.2.16	0x965f	No error (0)	ad-delivery.net		172.67.69.19	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:43.161587000 CET	1.1.1.1	192.168.2.16	0x965f	No error (0)	ad-delivery.net		104.26.3.70	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:43.161602020 CET	1.1.1.1	192.168.2.16	0x6f3e	No error (0)	ad-delivery.net			65	IN (0x0001)	false
Mar 11, 2024 12:56:43.205190897 CET	1.1.1.1	192.168.2.16	0x752a	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:43.205190897 CET	1.1.1.1	192.168.2.16	0x752a	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:43.205475092 CET	1.1.1.1	192.168.2.16	0xe11f	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:43.205475092 CET	1.1.1.1	192.168.2.16	0xe11f	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:43.221189976 CET	1.1.1.1	192.168.2.16	0xf732	No error (0)	match.prod.bidr.io		52.25.158.6	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:43.221189976 CET	1.1.1.1	192.168.2.16	0xf732	No error (0)	match.prod.bidr.io		52.10.200.37	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:43.221189976 CET	1.1.1.1	192.168.2.16	0xf732	No error (0)	match.prod.bidr.io		52.13.34.103	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:43.221189976 CET	1.1.1.1	192.168.2.16	0xf732	No error (0)	match.prod.bidr.io		52.11.41.99	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:43.221189976 CET	1.1.1.1	192.168.2.16	0xf732	No error (0)	match.prod.bidr.io		52.24.195.72	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:43.222579002 CET	1.1.1.1	192.168.2.16	0xbd7d	No error (0)	ad.doubleclick.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:43.222579002 CET	1.1.1.1	192.168.2.16	0xbd7d	No error (0)	ad.doubleclick.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:43.222944975 CET	1.1.1.1	192.168.2.16	0x1505	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 11, 2024 12:56:43.257457018 CET	1.1.1.1	192.168.2.16	0x81dc	No error (0)	ads.pro-market.net	ads.pro-market.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:43.257508039 CET	1.1.1.1	192.168.2.16	0x15a8	No error (0)	ads.pro-market.net	ads.pro-market.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:43.340929031 CET	1.1.1.1	192.168.2.16	0xb5fd	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:43.340929031 CET	1.1.1.1	192.168.2.16	0xb5fd	No error (0)	image6v2.pubmnet.com	pugm-sv3pairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:43.340929031 CET	1.1.1.1	192.168.2.16	0xb5fd	No error (0)	pugm-sv3pairbc.pubmnet.com		192.82.242.209	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:43.340950966 CET	1.1.1.1	192.168.2.16	0x7fd3	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:43.340950966 CET	1.1.1.1	192.168.2.16	0x7fd3	No error (0)	image6v2.pubmnet.com	pugm-sv3pairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:43.432472944 CET	1.1.1.1	192.168.2.16	0x3e03	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
Mar 11, 2024 12:56:43.432492971 CET	1.1.1.1	192.168.2.16	0x96bd	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:43.432492971 CET	1.1.1.1	192.168.2.16	0x96bd	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:43.836360931 CET	1.1.1.1	192.168.2.16	0xbb2a	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:43.836360931 CET	1.1.1.1	192.168.2.16	0xbb2a	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:44.213886023 CET	1.1.1.1	192.168.2.16	0x4919	No error (0)	s.amazon-adsystem.com		52.46.155.104	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.217072010 CET	1.1.1.1	192.168.2.16	0xb247	No error (0)	match.prod.bidr.io		52.11.41.99	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.217072010 CET	1.1.1.1	192.168.2.16	0xb247	No error (0)	match.prod.bidr.io		52.10.200.37	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.217072010 CET	1.1.1.1	192.168.2.16	0xb247	No error (0)	match.prod.bidr.io		52.13.34.103	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.217072010 CET	1.1.1.1	192.168.2.16	0xb247	No error (0)	match.prod.bidr.io		52.25.158.6	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.217072010 CET	1.1.1.1	192.168.2.16	0xb247	No error (0)	match.prod.bidr.io		52.24.195.72	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.219887018 CET	1.1.1.1	192.168.2.16	0xfdd5	No error (0)	cm.g.doubleclick.net		74.125.137.157	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.219887018 CET	1.1.1.1	192.168.2.16	0xfdd5	No error (0)	cm.g.doubleclick.net		74.125.137.155	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.219887018 CET	1.1.1.1	192.168.2.16	0xfdd5	No error (0)	cm.g.doubleclick.net		74.125.137.156	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.219887018 CET	1.1.1.1	192.168.2.16	0xfdd5	No error (0)	cm.g.doubleclick.net		74.125.137.154	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.221560955 CET	1.1.1.1	192.168.2.16	0x7e60	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.222477913 CET	1.1.1.1	192.168.2.16	0xc3fe	No error (0)	us01.z.antigena.com		40.76.134.238	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.222731113 CET	1.1.1.1	192.168.2.16	0x6a3a	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:44.222731113 CET	1.1.1.1	192.168.2.16	0x6a3a	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:44.222731113 CET	1.1.1.1	192.168.2.16	0x6a3a	No error (0)	us-east-eb2.3lift.com		35.71.139.29	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.222731113 CET	1.1.1.1	192.168.2.16	0x6a3a	No error (0)	us-east-eb2.3lift.com		52.223.22.214	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.222922087 CET	1.1.1.1	192.168.2.16	0xd135	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:44.222922087 CET	1.1.1.1	192.168.2.16	0xd135	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:44.227124929 CET	1.1.1.1	192.168.2.16	0xc4ba	No error (0)	um.simpli.fi		35.230.38.116	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.227124929 CET	1.1.1.1	192.168.2.16	0xc4ba	No error (0)	um.simpli.fi		34.83.125.63	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.227124929 CET	1.1.1.1	192.168.2.16	0xc4ba	No error (0)	um.simpli.fi		35.247.47.28	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.228128910 CET	1.1.1.1	192.168.2.16	0xeabc	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.228128910 CET	1.1.1.1	192.168.2.16	0xeabc	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.228128910 CET	1.1.1.1	192.168.2.16	0xeabc	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.228128910 CET	1.1.1.1	192.168.2.16	0xeabc	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.592950106 CET	1.1.1.1	192.168.2.16	0x58c7	No error (0)	api.btloader.com		130.211.23.194	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.636553049 CET	1.1.1.1	192.168.2.16	0xdd0e	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:44.636594057 CET	1.1.1.1	192.168.2.16	0xc2b4	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:44.636594057 CET	1.1.1.1	192.168.2.16	0xc2b4	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.121	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.636594057 CET	1.1.1.1	192.168.2.16	0xc2b4	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.9	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.636594057 CET	1.1.1.1	192.168.2.16	0xc2b4	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.151	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.636594057 CET	1.1.1.1	192.168.2.16	0xc2b4	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.120	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.636594057 CET	1.1.1.1	192.168.2.16	0xc2b4	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.136	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.636594057 CET	1.1.1.1	192.168.2.16	0xc2b4	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.40	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.636594057 CET	1.1.1.1	192.168.2.16	0xc2b4	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.56	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.636594057 CET	1.1.1.1	192.168.2.16	0xc2b4	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.173	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.636594057 CET	1.1.1.1	192.168.2.16	0xc2b4	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.105	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.636594057 CET	1.1.1.1	192.168.2.16	0xc2b4	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.73	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.636594057 CET	1.1.1.1	192.168.2.16	0xc2b4	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.172	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.636594057 CET	1.1.1.1	192.168.2.16	0xc2b4	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.57	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.636594057 CET	1.1.1.1	192.168.2.16	0xc2b4	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.106	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.636594057 CET	1.1.1.1	192.168.2.16	0xc2b4	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.137	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.636594057 CET	1.1.1.1	192.168.2.16	0xc2b4	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.8	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.636594057 CET	1.1.1.1	192.168.2.16	0xc2b4	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.72	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.636594057 CET	1.1.1.1	192.168.2.16	0xc2b4	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.150	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.636594057 CET	1.1.1.1	192.168.2.16	0xc2b4	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.41	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.837956905 CET	1.1.1.1	192.168.2.16	0x4e	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:44.837956905 CET	1.1.1.1	192.168.2.16	0x4e	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:44.837956905 CET	1.1.1.1	192.168.2.16	0x4e	No error (0)	global.px.quantserve.com		192.184.67.84	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.837956905 CET	1.1.1.1	192.168.2.16	0x4e	No error (0)	global.px.quantserve.com		192.184.67.143	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.837956905 CET	1.1.1.1	192.168.2.16	0x4e	No error (0)	global.px.quantserve.com		192.184.67.40	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.837956905 CET	1.1.1.1	192.168.2.16	0x4e	No error (0)	global.px.quantserve.com		192.184.67.18	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.837956905 CET	1.1.1.1	192.168.2.16	0x4e	No error (0)	global.px.quantserve.com		192.184.67.70	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.838229895 CET	1.1.1.1	192.168.2.16	0x8dfa	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:44.838229895 CET	1.1.1.1	192.168.2.16	0x8dfa	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:44.880033970 CET	1.1.1.1	192.168.2.16	0x5321	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:44.880033970 CET	1.1.1.1	192.168.2.16	0x5321	No error (0)	securepubads46.g.doubleclick.net		142.251.2.154	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.880033970 CET	1.1.1.1	192.168.2.16	0x5321	No error (0)	securepubads46.g.doubleclick.net		142.251.2.155	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.880033970 CET	1.1.1.1	192.168.2.16	0x5321	No error (0)	securepubads46.g.doubleclick.net		142.251.2.156	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.880033970 CET	1.1.1.1	192.168.2.16	0x5321	No error (0)	securepubads46.g.doubleclick.net		142.251.2.157	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.880383968 CET	1.1.1.1	192.168.2.16	0xf092	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:44.886288881 CET	1.1.1.1	192.168.2.16	0x4e74	No error (0)	cm.g.doubleclick.net		74.125.137.156	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.886288881 CET	1.1.1.1	192.168.2.16	0x4e74	No error (0)	cm.g.doubleclick.net		74.125.137.155	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.886288881 CET	1.1.1.1	192.168.2.16	0x4e74	No error (0)	cm.g.doubleclick.net		74.125.137.157	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.886288881 CET	1.1.1.1	192.168.2.16	0x4e74	No error (0)	cm.g.doubleclick.net		74.125.137.154	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.887612104 CET	1.1.1.1	192.168.2.16	0xca2c	No error (0)	www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:44.887988091 CET	1.1.1.1	192.168.2.16	0x73e3	No error (0)	www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:44.891014099 CET	1.1.1.1	192.168.2.16	0x715d	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:44.891014099 CET	1.1.1.1	192.168.2.16	0x715d	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:44.951423883 CET	1.1.1.1	192.168.2.16	0xd403	No error (0)	pagead-googlehosted.l.google.com		142.251.2.132	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.984883070 CET	1.1.1.1	192.168.2.16	0x8219	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.986265898 CET	1.1.1.1	192.168.2.16	0x134	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.986265898 CET	1.1.1.1	192.168.2.16	0x134	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:44.986471891 CET	1.1.1.1	192.168.2.16	0x7cef	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
Mar 11, 2024 12:56:45.090764999 CET	1.1.1.1	192.168.2.16	0x70a7	No error (0)	pagead-googlehosted.l.google.com		142.251.2.132	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:45.284207106 CET	1.1.1.1	192.168.2.16	0xd503	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:45.284207106 CET	1.1.1.1	192.168.2.16	0xd503	No error (0)	image2v2.pubmnet.com	pug-sv3c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:45.284207106 CET	1.1.1.1	192.168.2.16	0xd503	No error (0)	pug-sv3c.pubmnet.com		204.237.133.120	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:45.299885988 CET	1.1.1.1	192.168.2.16	0x313d	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:45.299885988 CET	1.1.1.1	192.168.2.16	0x313d	No error (0)	image2v2.pubmnet.com	pug-sfo-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:45.372183084 CET	1.1.1.1	192.168.2.16	0x718b	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:45.372183084 CET	1.1.1.1	192.168.2.16	0x718b	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		35.160.96.43	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:45.372183084 CET	1.1.1.1	192.168.2.16	0x718b	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.36.3.219	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:45.372183084 CET	1.1.1.1	192.168.2.16	0x718b	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		35.80.168.78	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:45.372183084 CET	1.1.1.1	192.168.2.16	0x718b	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		44.230.132.82	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:45.372272968 CET	1.1.1.1	192.168.2.16	0x4a30	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:45.530165911 CET	1.1.1.1	192.168.2.16	0x342	No error (0)	downloads.sourceforge.net		204.68.111.105	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:45.885795116 CET	1.1.1.1	192.168.2.16	0xf23c	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:45.885795116 CET	1.1.1.1	192.168.2.16	0xf23c	No error (0)	simage2v2.pubmnet.com	pug-sfo-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:45.885795116 CET	1.1.1.1	192.168.2.16	0xf23c	No error (0)	pug-sfo-bc.pubmnet.com		104.36.113.107	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:45.886502028 CET	1.1.1.1	192.168.2.16	0xf7db	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:45.886502028 CET	1.1.1.1	192.168.2.16	0xf7db	No error (0)	simage2v2.pubmnet.com	pug-sv3c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:45.959161043 CET	1.1.1.1	192.168.2.16	0xe906	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:45.959161043 CET	1.1.1.1	192.168.2.16	0xe906	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.173	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:45.959161043 CET	1.1.1.1	192.168.2.16	0xe906	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.121	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:45.959161043 CET	1.1.1.1	192.168.2.16	0xe906	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.8	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:45.959161043 CET	1.1.1.1	192.168.2.16	0xe906	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.106	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:45.959161043 CET	1.1.1.1	192.168.2.16	0xe906	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.172	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:45.959161043 CET	1.1.1.1	192.168.2.16	0xe906	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.150	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:45.959161043 CET	1.1.1.1	192.168.2.16	0xe906	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.151	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:45.959161043 CET	1.1.1.1	192.168.2.16	0xe906	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.9	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:45.959161043 CET	1.1.1.1	192.168.2.16	0xe906	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.105	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:45.959161043 CET	1.1.1.1	192.168.2.16	0xe906	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.56	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:45.959161043 CET	1.1.1.1	192.168.2.16	0xe906	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.136	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:45.959161043 CET	1.1.1.1	192.168.2.16	0xe906	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.57	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:45.959161043 CET	1.1.1.1	192.168.2.16	0xe906	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.40	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:45.959161043 CET	1.1.1.1	192.168.2.16	0xe906	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.120	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:45.959161043 CET	1.1.1.1	192.168.2.16	0xe906	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.73	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:45.959161043 CET	1.1.1.1	192.168.2.16	0xe906	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.72	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:45.959161043 CET	1.1.1.1	192.168.2.16	0xe906	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.137	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:45.959161043 CET	1.1.1.1	192.168.2.16	0xe906	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.41	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:45.959374905 CET	1.1.1.1	192.168.2.16	0x290	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.045845032 CET	1.1.1.1	192.168.2.16	0xcfd	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.045845032 CET	1.1.1.1	192.168.2.16	0xcfd	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-west-2.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.045845032 CET	1.1.1.1	192.168.2.16	0xcfd	No error (0)	prod.ups-ats.us-west-2.aolp-ds-prd.aws.oath.cloud	ats-eks.us-west-2.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.045941114 CET	1.1.1.1	192.168.2.16	0x1920	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.045941114 CET	1.1.1.1	192.168.2.16	0x1920	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-west-2.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.045941114 CET	1.1.1.1	192.168.2.16	0x1920	No error (0)	prod.ups-ats.us-west-2.aolp-ds-prd.aws.oath.cloud	ats-eks.us-west-2.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.045941114 CET	1.1.1.1	192.168.2.16	0x1920	No error (0)	ats-eks.us-west-2.dcs-online-targeting-prd.aws.oath.cloud		34.214.251.32	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.045941114 CET	1.1.1.1	192.168.2.16	0x1920	No error (0)	ats-eks.us-west-2.dcs-online-targeting-prd.aws.oath.cloud		35.84.163.233	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.047595978 CET	1.1.1.1	192.168.2.16	0x56fd	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.047595978 CET	1.1.1.1	192.168.2.16	0x56fd	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.047908068 CET	1.1.1.1	192.168.2.16	0xe0e7	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.047908068 CET	1.1.1.1	192.168.2.16	0xe0e7	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.047908068 CET	1.1.1.1	192.168.2.16	0xe0e7	No error (0)	us-east-eb2.3lift.com		52.223.22.214	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.047908068 CET	1.1.1.1	192.168.2.16	0xe0e7	No error (0)	us-east-eb2.3lift.com		35.71.139.29	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.174114943 CET	1.1.1.1	192.168.2.16	0xa738	No error (0)	sync.ipredictive.com		52.44.255.182	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.174114943 CET	1.1.1.1	192.168.2.16	0xa738	No error (0)	sync.ipredictive.com		52.87.49.60	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.174114943 CET	1.1.1.1	192.168.2.16	0xa738	No error (0)	sync.ipredictive.com		54.144.130.108	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.174114943 CET	1.1.1.1	192.168.2.16	0xa738	No error (0)	sync.ipredictive.com		52.44.19.224	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.174114943 CET	1.1.1.1	192.168.2.16	0xa738	No error (0)	sync.ipredictive.com		52.71.44.145	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.174114943 CET	1.1.1.1	192.168.2.16	0xa738	No error (0)	sync.ipredictive.com		54.158.64.147	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.174114943 CET	1.1.1.1	192.168.2.16	0xa738	No error (0)	sync.ipredictive.com		54.159.66.10	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.174114943 CET	1.1.1.1	192.168.2.16	0xa738	No error (0)	sync.ipredictive.com		52.7.247.141	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.175508976 CET	1.1.1.1	192.168.2.16	0xba2d	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.175508976 CET	1.1.1.1	192.168.2.16	0xba2d	No error (0)	image2v2.pubmnet.com	pug-sv3c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.175508976 CET	1.1.1.1	192.168.2.16	0xba2d	No error (0)	pug-sv3c.pubmnet.com		204.237.133.120	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.176079988 CET	1.1.1.1	192.168.2.16	0x6e67	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.176079988 CET	1.1.1.1	192.168.2.16	0x6e67	No error (0)	image2v2.pubmnet.com	pug-sfo-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.217478991 CET	1.1.1.1	192.168.2.16	0x5163	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.217478991 CET	1.1.1.1	192.168.2.16	0x5163	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.8	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.217478991 CET	1.1.1.1	192.168.2.16	0x5163	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.172	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.217478991 CET	1.1.1.1	192.168.2.16	0x5163	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.173	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.217478991 CET	1.1.1.1	192.168.2.16	0x5163	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.56	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.217478991 CET	1.1.1.1	192.168.2.16	0x5163	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.137	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.217478991 CET	1.1.1.1	192.168.2.16	0x5163	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.150	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.217478991 CET	1.1.1.1	192.168.2.16	0x5163	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.105	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.217478991 CET	1.1.1.1	192.168.2.16	0x5163	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.151	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.217478991 CET	1.1.1.1	192.168.2.16	0x5163	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.106	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.217478991 CET	1.1.1.1	192.168.2.16	0x5163	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.120	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.217478991 CET	1.1.1.1	192.168.2.16	0x5163	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.136	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.217478991 CET	1.1.1.1	192.168.2.16	0x5163	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.57	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.217478991 CET	1.1.1.1	192.168.2.16	0x5163	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.41	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.217478991 CET	1.1.1.1	192.168.2.16	0x5163	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.73	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.217478991 CET	1.1.1.1	192.168.2.16	0x5163	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.121	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.217478991 CET	1.1.1.1	192.168.2.16	0x5163	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.72	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.217478991 CET	1.1.1.1	192.168.2.16	0x5163	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.40	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.217478991 CET	1.1.1.1	192.168.2.16	0x5163	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.9	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.218415976 CET	1.1.1.1	192.168.2.16	0x4c1b	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.448097944 CET	1.1.1.1	192.168.2.16	0x5354	No error (0)	cm.g.doubleclick.net		74.125.137.157	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.448097944 CET	1.1.1.1	192.168.2.16	0x5354	No error (0)	cm.g.doubleclick.net		74.125.137.155	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.448097944 CET	1.1.1.1	192.168.2.16	0x5354	No error (0)	cm.g.doubleclick.net		74.125.137.156	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.448097944 CET	1.1.1.1	192.168.2.16	0x5354	No error (0)	cm.g.doubleclick.net		74.125.137.154	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.460612059 CET	1.1.1.1	192.168.2.16	0x994a	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.460612059 CET	1.1.1.1	192.168.2.16	0x994a	No error (0)	securepubads46.g.doubleclick.net		142.251.2.154	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.460612059 CET	1.1.1.1	192.168.2.16	0x994a	No error (0)	securepubads46.g.doubleclick.net		142.251.2.155	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.460612059 CET	1.1.1.1	192.168.2.16	0x994a	No error (0)	securepubads46.g.doubleclick.net		142.251.2.156	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.460612059 CET	1.1.1.1	192.168.2.16	0x994a	No error (0)	securepubads46.g.doubleclick.net		142.251.2.157	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.460988045 CET	1.1.1.1	192.168.2.16	0xfc6f	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.493690014 CET	1.1.1.1	192.168.2.16	0x3b52	No error (0)	cdn.ampproject.org	cdn-content.ampproject.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.493690014 CET	1.1.1.1	192.168.2.16	0x3b52	No error (0)	cdn-content.ampproject.org		142.251.2.132	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.493818045 CET	1.1.1.1	192.168.2.16	0x4926	No error (0)	cdn.ampproject.org	cdn-content.ampproject.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.513926983 CET	1.1.1.1	192.168.2.16	0xaf42	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.514919043 CET	1.1.1.1	192.168.2.16	0x28b9	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.516697884 CET	1.1.1.1	192.168.2.16	0x2178	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.517664909 CET	1.1.1.1	192.168.2.16	0xa7d6	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.550899029 CET	1.1.1.1	192.168.2.16	0xaa5f	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.550899029 CET	1.1.1.1	192.168.2.16	0xaa5f	No error (0)	image4-v2.pubmnet.com	spug-sv3-pairb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.551103115 CET	1.1.1.1	192.168.2.16	0xc496	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.551103115 CET	1.1.1.1	192.168.2.16	0xc496	No error (0)	image4-v2.pubmnet.com	spug33000-fpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.551103115 CET	1.1.1.1	192.168.2.16	0xc496	No error (0)	spug33000-fpb.pubmnet.com		104.36.113.111	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.552647114 CET	1.1.1.1	192.168.2.16	0xdeaf	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.552647114 CET	1.1.1.1	192.168.2.16	0xdeaf	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		35.80.168.78	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.552647114 CET	1.1.1.1	192.168.2.16	0xdeaf	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.36.3.219	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.552647114 CET	1.1.1.1	192.168.2.16	0xdeaf	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		44.230.132.82	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.552647114 CET	1.1.1.1	192.168.2.16	0xdeaf	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		35.160.96.43	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.553432941 CET	1.1.1.1	192.168.2.16	0xb7f0	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.554577112 CET	1.1.1.1	192.168.2.16	0xa147	No error (0)	match.sharethrough.com	match-us-west-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.554577112 CET	1.1.1.1	192.168.2.16	0xa147	No error (0)	match-us-west-1-ecs.sharethrough.com		54.215.97.222	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.554577112 CET	1.1.1.1	192.168.2.16	0xa147	No error (0)	match-us-west-1-ecs.sharethrough.com		52.9.139.67	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.554577112 CET	1.1.1.1	192.168.2.16	0xa147	No error (0)	match-us-west-1-ecs.sharethrough.com		52.52.154.39	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.554577112 CET	1.1.1.1	192.168.2.16	0xa147	No error (0)	match-us-west-1-ecs.sharethrough.com		54.193.243.178	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.555365086 CET	1.1.1.1	192.168.2.16	0xded3	No error (0)	match.sharethrough.com	match-us-west-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.680455923 CET	1.1.1.1	192.168.2.16	0x5ab	No error (0)	visitor.omnitagjs.com	visitor-us-west-2.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.680455923 CET	1.1.1.1	192.168.2.16	0x5ab	No error (0)	visitor-us-west-2.omnitagjs.com		34.212.76.7	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.680455923 CET	1.1.1.1	192.168.2.16	0x5ab	No error (0)	visitor-us-west-2.omnitagjs.com		44.236.219.81	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.680455923 CET	1.1.1.1	192.168.2.16	0x5ab	No error (0)	visitor-us-west-2.omnitagjs.com		54.71.243.50	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.680455923 CET	1.1.1.1	192.168.2.16	0x5ab	No error (0)	visitor-us-west-2.omnitagjs.com		35.167.202.243	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.680455923 CET	1.1.1.1	192.168.2.16	0x5ab	No error (0)	visitor-us-west-2.omnitagjs.com		54.202.95.37	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.680455923 CET	1.1.1.1	192.168.2.16	0x5ab	No error (0)	visitor-us-west-2.omnitagjs.com		35.82.8.22	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.680455923 CET	1.1.1.1	192.168.2.16	0x5ab	No error (0)	visitor-us-west-2.omnitagjs.com		54.149.245.0	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.680455923 CET	1.1.1.1	192.168.2.16	0x5ab	No error (0)	visitor-us-west-2.omnitagjs.com		52.25.230.144	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.681080103 CET	1.1.1.1	192.168.2.16	0x8b6d	No error (0)	visitor.omnitagjs.com	visitor-us-west-2.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.694998980 CET	1.1.1.1	192.168.2.16	0xa136	No error (0)	newcontinuum.dl.sourceforge.net		64.79.96.4	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.763289928 CET	1.1.1.1	192.168.2.16	0xdce6	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.763289928 CET	1.1.1.1	192.168.2.16	0xdce6	No error (0)	simage2v2.pubmnet.com	pug-sv3c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.763314009 CET	1.1.1.1	192.168.2.16	0xa0f9	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.763314009 CET	1.1.1.1	192.168.2.16	0xa0f9	No error (0)	simage2v2.pubmnet.com	pug-sfo-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.763314009 CET	1.1.1.1	192.168.2.16	0xa0f9	No error (0)	pug-sfo-bc.pubmnet.com		104.36.113.107	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.793992043 CET	1.1.1.1	192.168.2.16	0x1534	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.793992043 CET	1.1.1.1	192.168.2.16	0x1534	No error (0)	image8-v2.pubmnet.com	imagesync33000-fpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.793992043 CET	1.1.1.1	192.168.2.16	0x1534	No error (0)	imagesync33000-fpb.pubmnet.com		104.36.113.110	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:46.794078112 CET	1.1.1.1	192.168.2.16	0x29b3	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:46.794078112 CET	1.1.1.1	192.168.2.16	0x29b3	No error (0)	image8-v2.pubmnet.com	imgsync-sv3pairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.359664917 CET	1.1.1.1	192.168.2.16	0x59d7	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.359664917 CET	1.1.1.1	192.168.2.16	0x59d7	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.359664917 CET	1.1.1.1	192.168.2.16	0x59d7	No error (0)	ib.anycast.adnxs.com		104.254.148.252	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.359664917 CET	1.1.1.1	192.168.2.16	0x59d7	No error (0)	ib.anycast.adnxs.com		104.254.151.69	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.359664917 CET	1.1.1.1	192.168.2.16	0x59d7	No error (0)	ib.anycast.adnxs.com		104.254.148.251	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.359664917 CET	1.1.1.1	192.168.2.16	0x59d7	No error (0)	ib.anycast.adnxs.com		104.254.150.241	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.359664917 CET	1.1.1.1	192.168.2.16	0x59d7	No error (0)	ib.anycast.adnxs.com		104.254.151.60	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.359664917 CET	1.1.1.1	192.168.2.16	0x59d7	No error (0)	ib.anycast.adnxs.com		104.254.151.36	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.359664917 CET	1.1.1.1	192.168.2.16	0x59d7	No error (0)	ib.anycast.adnxs.com		104.254.151.68	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.362442017 CET	1.1.1.1	192.168.2.16	0xfd12	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.362442017 CET	1.1.1.1	192.168.2.16	0xfd12	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.363089085 CET	1.1.1.1	192.168.2.16	0x4ed2	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.363089085 CET	1.1.1.1	192.168.2.16	0x4ed2	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.371622086 CET	1.1.1.1	192.168.2.16	0xb28f	No error (0)	ad.mrtnsvr.com		34.102.163.6	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.382492065 CET	1.1.1.1	192.168.2.16	0x3254	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.382492065 CET	1.1.1.1	192.168.2.16	0x3254	No error (0)	cdn.w55c.net		35.166.28.193	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.382492065 CET	1.1.1.1	192.168.2.16	0x3254	No error (0)	cdn.w55c.net		52.11.39.206	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.382492065 CET	1.1.1.1	192.168.2.16	0x3254	No error (0)	cdn.w55c.net		44.239.254.221	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.383152962 CET	1.1.1.1	192.168.2.16	0xb745	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.390250921 CET	1.1.1.1	192.168.2.16	0x677f	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.390250921 CET	1.1.1.1	192.168.2.16	0x677f	No error (0)	image2v2.pubmnet.com	pug-sv3c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.390250921 CET	1.1.1.1	192.168.2.16	0x677f	No error (0)	pug-sv3c.pubmnet.com		204.237.133.120	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.390863895 CET	1.1.1.1	192.168.2.16	0xd13b	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.390863895 CET	1.1.1.1	192.168.2.16	0xd13b	No error (0)	image2v2.pubmnet.com	pug-sfo-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.410094023 CET	1.1.1.1	192.168.2.16	0xce84	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.410094023 CET	1.1.1.1	192.168.2.16	0xce84	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.410094023 CET	1.1.1.1	192.168.2.16	0xce84	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.410880089 CET	1.1.1.1	192.168.2.16	0x14ed	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.410880089 CET	1.1.1.1	192.168.2.16	0x14ed	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.410880089 CET	1.1.1.1	192.168.2.16	0x14ed	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.490187883 CET	1.1.1.1	192.168.2.16	0x5469	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.490187883 CET	1.1.1.1	192.168.2.16	0x5469	No error (0)	rtb.adgrx.com	rtb.adgrx.com.tech.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.490252972 CET	1.1.1.1	192.168.2.16	0x320c	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.490252972 CET	1.1.1.1	192.168.2.16	0x320c	No error (0)	rtb.adgrx.com	rtb.adgrx.com.tech.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.503045082 CET	1.1.1.1	192.168.2.16	0x2585	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.503045082 CET	1.1.1.1	192.168.2.16	0x2585	No error (0)	m.deepintent.com		169.197.150.8	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.503045082 CET	1.1.1.1	192.168.2.16	0x2585	No error (0)	m.deepintent.com		169.197.150.7	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.503045082 CET	1.1.1.1	192.168.2.16	0x2585	No error (0)	m.deepintent.com		38.91.45.7	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.503045082 CET	1.1.1.1	192.168.2.16	0x2585	No error (0)	m.deepintent.com		8.18.47.7	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.532366991 CET	1.1.1.1	192.168.2.16	0x6e99	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.532366991 CET	1.1.1.1	192.168.2.16	0x6e99	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.532366991 CET	1.1.1.1	192.168.2.16	0x6e99	No error (0)	global.px.quantserve.com		192.184.67.70	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.532366991 CET	1.1.1.1	192.168.2.16	0x6e99	No error (0)	global.px.quantserve.com		192.184.67.40	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.532366991 CET	1.1.1.1	192.168.2.16	0x6e99	No error (0)	global.px.quantserve.com		192.184.67.143	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.532366991 CET	1.1.1.1	192.168.2.16	0x6e99	No error (0)	global.px.quantserve.com		192.184.67.84	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.532366991 CET	1.1.1.1	192.168.2.16	0x6e99	No error (0)	global.px.quantserve.com		192.184.67.18	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.532531977 CET	1.1.1.1	192.168.2.16	0x2b5a	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.532531977 CET	1.1.1.1	192.168.2.16	0x2b5a	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.535120964 CET	1.1.1.1	192.168.2.16	0x29ab	No error (0)	thrtle.com		52.204.113.215	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.535120964 CET	1.1.1.1	192.168.2.16	0x29ab	No error (0)	thrtle.com		34.224.160.74	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.535120964 CET	1.1.1.1	192.168.2.16	0x29ab	No error (0)	thrtle.com		3.222.237.51	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.535120964 CET	1.1.1.1	192.168.2.16	0x29ab	No error (0)	thrtle.com		35.173.73.21	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.536843061 CET	1.1.1.1	192.168.2.16	0xf2f3	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.536843061 CET	1.1.1.1	192.168.2.16	0xf2f3	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.551954031 CET	1.1.1.1	192.168.2.16	0x140b	No error (0)	sync.bfmio.com	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.551954031 CET	1.1.1.1	192.168.2.16	0x140b	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.73.30.136	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.551954031 CET	1.1.1.1	192.168.2.16	0x140b	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.4.209.223	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.551954031 CET	1.1.1.1	192.168.2.16	0x140b	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.55.248.114	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.551954031 CET	1.1.1.1	192.168.2.16	0x140b	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.6.51.10	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.551954031 CET	1.1.1.1	192.168.2.16	0x140b	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.71.77.34	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.551954031 CET	1.1.1.1	192.168.2.16	0x140b	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.71.140.242	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.551954031 CET	1.1.1.1	192.168.2.16	0x140b	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.22.88.168	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.551954031 CET	1.1.1.1	192.168.2.16	0x140b	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.70.146.159	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.552194118 CET	1.1.1.1	192.168.2.16	0x63b0	No error (0)	sync.bfmio.com	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.554012060 CET	1.1.1.1	192.168.2.16	0xdaeb	No error (0)	crb.kargo.com		34.192.240.196	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.554012060 CET	1.1.1.1	192.168.2.16	0xdaeb	No error (0)	crb.kargo.com		34.196.130.100	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.554012060 CET	1.1.1.1	192.168.2.16	0xdaeb	No error (0)	crb.kargo.com		34.237.39.192	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.554012060 CET	1.1.1.1	192.168.2.16	0xdaeb	No error (0)	crb.kargo.com		52.207.53.229	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.554012060 CET	1.1.1.1	192.168.2.16	0xdaeb	No error (0)	crb.kargo.com		52.200.154.160	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.554012060 CET	1.1.1.1	192.168.2.16	0xdaeb	No error (0)	crb.kargo.com		100.24.145.252	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.583467007 CET	1.1.1.1	192.168.2.16	0x27ad	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.583467007 CET	1.1.1.1	192.168.2.16	0x27ad	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.583467007 CET	1.1.1.1	192.168.2.16	0x27ad	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.583467007 CET	1.1.1.1	192.168.2.16	0x27ad	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.595927954 CET	1.1.1.1	192.168.2.16	0x51a6	No error (0)	pixel-sync.sitescout.com		34.36.216.150	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.669598103 CET	1.1.1.1	192.168.2.16	0x3d0e	No error (0)	pixel-sync.sitescout.com		34.36.216.150	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.675457954 CET	1.1.1.1	192.168.2.16	0x4085	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.686892033 CET	1.1.1.1	192.168.2.16	0x8016	No error (0)	match.sharethrough.com	match-us-west-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.687578917 CET	1.1.1.1	192.168.2.16	0x3680	No error (0)	match.sharethrough.com	match-us-west-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.687578917 CET	1.1.1.1	192.168.2.16	0x3680	No error (0)	match-us-west-1-ecs.sharethrough.com		52.9.139.67	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.687578917 CET	1.1.1.1	192.168.2.16	0x3680	No error (0)	match-us-west-1-ecs.sharethrough.com		54.215.97.222	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.687578917 CET	1.1.1.1	192.168.2.16	0x3680	No error (0)	match-us-west-1-ecs.sharethrough.com		52.52.154.39	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.687578917 CET	1.1.1.1	192.168.2.16	0x3680	No error (0)	match-us-west-1-ecs.sharethrough.com		54.193.243.178	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.781188965 CET	1.1.1.1	192.168.2.16	0x18af	No error (0)	ps.eyeota.net		3.232.64.79	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.798562050 CET	1.1.1.1	192.168.2.16	0xd3f7	No error (0)	sync.technoratimedia.com	adserver.technoratimedia.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.798562050 CET	1.1.1.1	192.168.2.16	0xd3f7	No error (0)	adserver.technoratimedia.com		193.122.128.135	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.799632072 CET	1.1.1.1	192.168.2.16	0x36e2	No error (0)	sync.technoratimedia.com	adserver.technoratimedia.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.876480103 CET	1.1.1.1	192.168.2.16	0xb343	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.876480103 CET	1.1.1.1	192.168.2.16	0xb343	No error (0)	image4-v2.pubmnet.com	spug-sv3-pairb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.876480103 CET	1.1.1.1	192.168.2.16	0xb343	No error (0)	spug-sv3-pairb.pubmnet.com		192.82.242.213	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:47.876673937 CET	1.1.1.1	192.168.2.16	0x21da	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:47.876673937 CET	1.1.1.1	192.168.2.16	0x21da	No error (0)	image4-v2.pubmnet.com	spug33000-fpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:48.083437920 CET	1.1.1.1	192.168.2.16	0x3ef4	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 11, 2024 12:56:48.084175110 CET	1.1.1.1	192.168.2.16	0x567c	No error (0)	www.google.com		142.251.2.147	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:48.084175110 CET	1.1.1.1	192.168.2.16	0x567c	No error (0)	www.google.com		142.251.2.106	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:48.084175110 CET	1.1.1.1	192.168.2.16	0x567c	No error (0)	www.google.com		142.251.2.99	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:48.084175110 CET	1.1.1.1	192.168.2.16	0x567c	No error (0)	www.google.com		142.251.2.104	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:48.084175110 CET	1.1.1.1	192.168.2.16	0x567c	No error (0)	www.google.com		142.251.2.105	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:48.084175110 CET	1.1.1.1	192.168.2.16	0x567c	No error (0)	www.google.com		142.251.2.103	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:48.355959892 CET	1.1.1.1	192.168.2.16	0x9710	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:48.362138033 CET	1.1.1.1	192.168.2.16	0xd5a8	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:48.378504992 CET	1.1.1.1	192.168.2.16	0x9f16	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:48.378504992 CET	1.1.1.1	192.168.2.16	0x9f16	No error (0)	image8-v2.pubmnet.com	imagesync33000-fpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:48.378504992 CET	1.1.1.1	192.168.2.16	0x9f16	No error (0)	imagesync33000-fpb.pubmnet.com		104.36.113.110	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:48.378889084 CET	1.1.1.1	192.168.2.16	0x25af	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:48.378889084 CET	1.1.1.1	192.168.2.16	0x25af	No error (0)	image8-v2.pubmnet.com	imgsync-sv3pairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:48.665568113 CET	1.1.1.1	192.168.2.16	0x8f4e	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:48.665568113 CET	1.1.1.1	192.168.2.16	0x8f4e	No error (0)	gslb-2.demdex.net	edge-usw2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:48.665568113 CET	1.1.1.1	192.168.2.16	0x8f4e	No error (0)	edge-usw2.demdex.net	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:48.665568113 CET	1.1.1.1	192.168.2.16	0x8f4e	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		34.210.5.217	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:48.665568113 CET	1.1.1.1	192.168.2.16	0x8f4e	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		34.216.246.92	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:48.665568113 CET	1.1.1.1	192.168.2.16	0x8f4e	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		34.215.13.170	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:48.665568113 CET	1.1.1.1	192.168.2.16	0x8f4e	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		34.210.228.249	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:48.665568113 CET	1.1.1.1	192.168.2.16	0x8f4e	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.39.241.116	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:48.665568113 CET	1.1.1.1	192.168.2.16	0x8f4e	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		54.69.221.139	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:48.665568113 CET	1.1.1.1	192.168.2.16	0x8f4e	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		44.226.65.51	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:48.665568113 CET	1.1.1.1	192.168.2.16	0x8f4e	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.41.168.67	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:48.665599108 CET	1.1.1.1	192.168.2.16	0x1bc9	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:48.665599108 CET	1.1.1.1	192.168.2.16	0x1bc9	No error (0)	gslb-2.demdex.net	edge-usw2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:48.665599108 CET	1.1.1.1	192.168.2.16	0x1bc9	No error (0)	edge-usw2.demdex.net	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:48.763767004 CET	1.1.1.1	192.168.2.16	0x8f93	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:48.763767004 CET	1.1.1.1	192.168.2.16	0x8f93	No error (0)	image4-v2.pubmnet.com	spug-sv3-pairb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:48.763767004 CET	1.1.1.1	192.168.2.16	0x8f93	No error (0)	spug-sv3-pairb.pubmnet.com		192.82.242.213	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:48.764290094 CET	1.1.1.1	192.168.2.16	0x56b9	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:48.764290094 CET	1.1.1.1	192.168.2.16	0x56b9	No error (0)	image4-v2.pubmnet.com	spug33000-fpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:48.780220985 CET	1.1.1.1	192.168.2.16	0x7236	No error (0)	crb.kargo.com		52.200.154.160	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:48.780220985 CET	1.1.1.1	192.168.2.16	0x7236	No error (0)	crb.kargo.com		34.196.130.100	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:48.780220985 CET	1.1.1.1	192.168.2.16	0x7236	No error (0)	crb.kargo.com		34.237.39.192	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:48.780220985 CET	1.1.1.1	192.168.2.16	0x7236	No error (0)	crb.kargo.com		52.207.53.229	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:48.780220985 CET	1.1.1.1	192.168.2.16	0x7236	No error (0)	crb.kargo.com		100.24.145.252	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:48.780220985 CET	1.1.1.1	192.168.2.16	0x7236	No error (0)	crb.kargo.com		34.192.240.196	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:48.874741077 CET	1.1.1.1	192.168.2.16	0xff8	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:48.874741077 CET	1.1.1.1	192.168.2.16	0xff8	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:48.875494957 CET	1.1.1.1	192.168.2.16	0xa787	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
Mar 11, 2024 12:56:49.085329056 CET	1.1.1.1	192.168.2.16	0xf574	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:49.085329056 CET	1.1.1.1	192.168.2.16	0xf574	No error (0)	image8-v2.pubmnet.com	imagesync33000-fpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:49.085329056 CET	1.1.1.1	192.168.2.16	0xf574	No error (0)	imagesync33000-fpb.pubmnet.com		104.36.113.110	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:49.085344076 CET	1.1.1.1	192.168.2.16	0xcfff	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:49.085344076 CET	1.1.1.1	192.168.2.16	0xcfff	No error (0)	image8-v2.pubmnet.com	imgsync-sv3pairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:49.268876076 CET	1.1.1.1	192.168.2.16	0x1a9d	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Mar 11, 2024 12:56:49.268892050 CET	1.1.1.1	192.168.2.16	0xba9	No error (0)	googleads.g.doubleclick.net		142.250.141.156	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:49.268892050 CET	1.1.1.1	192.168.2.16	0xba9	No error (0)	googleads.g.doubleclick.net		142.250.141.155	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:49.268892050 CET	1.1.1.1	192.168.2.16	0xba9	No error (0)	googleads.g.doubleclick.net		142.250.141.154	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:49.268892050 CET	1.1.1.1	192.168.2.16	0xba9	No error (0)	googleads.g.doubleclick.net		142.250.141.157	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:49.299185038 CET	1.1.1.1	192.168.2.16	0xc7a5	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:49.299185038 CET	1.1.1.1	192.168.2.16	0xc7a5	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:49.422287941 CET	1.1.1.1	192.168.2.16	0x336c	No error (0)	ml314.com		34.117.77.79	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:49.658195972 CET	1.1.1.1	192.168.2.16	0x872c	No error (0)	thrtle.com		3.222.237.51	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:49.658195972 CET	1.1.1.1	192.168.2.16	0x872c	No error (0)	thrtle.com		52.204.113.215	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:49.658195972 CET	1.1.1.1	192.168.2.16	0x872c	No error (0)	thrtle.com		35.173.73.21	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:49.658195972 CET	1.1.1.1	192.168.2.16	0x872c	No error (0)	thrtle.com		34.224.160.74	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:50.007195950 CET	1.1.1.1	192.168.2.16	0x7ba7	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:50.014960051 CET	1.1.1.1	192.168.2.16	0xad9d	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:50.410939932 CET	1.1.1.1	192.168.2.16	0xd78d	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Mar 11, 2024 12:56:50.410953045 CET	1.1.1.1	192.168.2.16	0x4609	No error (0)	googleads.g.doubleclick.net		142.250.141.154	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:50.410953045 CET	1.1.1.1	192.168.2.16	0x4609	No error (0)	googleads.g.doubleclick.net		142.250.141.157	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:50.410953045 CET	1.1.1.1	192.168.2.16	0x4609	No error (0)	googleads.g.doubleclick.net		142.250.141.156	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:50.410953045 CET	1.1.1.1	192.168.2.16	0x4609	No error (0)	googleads.g.doubleclick.net		142.250.141.155	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:50.454395056 CET	1.1.1.1	192.168.2.16	0x9708	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:50.454395056 CET	1.1.1.1	192.168.2.16	0x9708	No error (0)	gslb-2.demdex.net	edge-usw2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:50.454395056 CET	1.1.1.1	192.168.2.16	0x9708	No error (0)	edge-usw2.demdex.net	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:50.454395056 CET	1.1.1.1	192.168.2.16	0x9708	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		54.69.221.139	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:50.454395056 CET	1.1.1.1	192.168.2.16	0x9708	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		34.215.13.170	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:50.454395056 CET	1.1.1.1	192.168.2.16	0x9708	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		34.210.228.249	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:50.454395056 CET	1.1.1.1	192.168.2.16	0x9708	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.39.241.116	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:50.454395056 CET	1.1.1.1	192.168.2.16	0x9708	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.41.168.67	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:50.454395056 CET	1.1.1.1	192.168.2.16	0x9708	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		34.210.5.217	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:50.454395056 CET	1.1.1.1	192.168.2.16	0x9708	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		44.226.65.51	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:50.454395056 CET	1.1.1.1	192.168.2.16	0x9708	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		34.216.246.92	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:50.454416990 CET	1.1.1.1	192.168.2.16	0xc6d1	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:50.454416990 CET	1.1.1.1	192.168.2.16	0xc6d1	No error (0)	gslb-2.demdex.net	edge-usw2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:50.454416990 CET	1.1.1.1	192.168.2.16	0xc6d1	No error (0)	edge-usw2.demdex.net	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:50.843183041 CET	1.1.1.1	192.168.2.16	0x7803	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:50.843183041 CET	1.1.1.1	192.168.2.16	0x7803	No error (0)	image4-v2.pubmnet.com	spug-sv3-pairb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:50.843183041 CET	1.1.1.1	192.168.2.16	0x7803	No error (0)	spug-sv3-pairb.pubmnet.com		192.82.242.213	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:50.844675064 CET	1.1.1.1	192.168.2.16	0x2e22	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:50.844675064 CET	1.1.1.1	192.168.2.16	0x2e22	No error (0)	image4-v2.pubmnet.com	spug33000-fpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:51.035109043 CET	1.1.1.1	192.168.2.16	0xd55c	No error (0)	bh.contextweb.com	sjc-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:51.035109043 CET	1.1.1.1	192.168.2.16	0xd55c	No error (0)	sjc-bh.contextweb.com	sjc-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:51.035109043 CET	1.1.1.1	192.168.2.16	0xd55c	No error (0)	sjc-direct-bgp.contextweb.com		74.214.196.131	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:51.036175013 CET	1.1.1.1	192.168.2.16	0x3129	No error (0)	bh.contextweb.com	sjc-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:51.036175013 CET	1.1.1.1	192.168.2.16	0x3129	No error (0)	sjc-bh.contextweb.com	sjc-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:51.475456953 CET	1.1.1.1	192.168.2.16	0x9394	No error (0)	bh.contextweb.com	sjc-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:51.475456953 CET	1.1.1.1	192.168.2.16	0x9394	No error (0)	sjc-bh.contextweb.com	sjc-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:51.475456953 CET	1.1.1.1	192.168.2.16	0x9394	No error (0)	sjc-direct-bgp.contextweb.com		74.214.196.131	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:51.475568056 CET	1.1.1.1	192.168.2.16	0xa469	No error (0)	bh.contextweb.com	sjc-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:51.475568056 CET	1.1.1.1	192.168.2.16	0xa469	No error (0)	sjc-bh.contextweb.com	sjc-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:51.492587090 CET	1.1.1.1	192.168.2.16	0xa773	No error (0)	match.sharethrough.com	match-us-west-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:51.492587090 CET	1.1.1.1	192.168.2.16	0xa773	No error (0)	match-us-west-1-ecs.sharethrough.com		52.52.154.39	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:51.492587090 CET	1.1.1.1	192.168.2.16	0xa773	No error (0)	match-us-west-1-ecs.sharethrough.com		54.215.97.222	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:51.492587090 CET	1.1.1.1	192.168.2.16	0xa773	No error (0)	match-us-west-1-ecs.sharethrough.com		54.193.243.178	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:51.492587090 CET	1.1.1.1	192.168.2.16	0xa773	No error (0)	match-us-west-1-ecs.sharethrough.com		52.9.139.67	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:51.492942095 CET	1.1.1.1	192.168.2.16	0xdea9	No error (0)	match.sharethrough.com	match-us-west-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:51.529942989 CET	1.1.1.1	192.168.2.16	0x8eac	No error (0)	ps.eyeota.net		18.214.54.215	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:52.720043898 CET	1.1.1.1	192.168.2.16	0x76b1	No error (0)	sync.technoratimedia.com	adserver.technoratimedia.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:52.720043898 CET	1.1.1.1	192.168.2.16	0x76b1	No error (0)	adserver.technoratimedia.com		193.122.128.135	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:52.720118999 CET	1.1.1.1	192.168.2.16	0xd2a4	No error (0)	sync.technoratimedia.com	adserver.technoratimedia.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:53.746381998 CET	1.1.1.1	192.168.2.16	0xb6b3	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:53.746381998 CET	1.1.1.1	192.168.2.16	0xb6b3	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:56:53.746381998 CET	1.1.1.1	192.168.2.16	0xb6b3	No error (0)	ib.anycast.adnxs.com		104.254.151.68	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:53.746381998 CET	1.1.1.1	192.168.2.16	0xb6b3	No error (0)	ib.anycast.adnxs.com		104.254.148.251	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:53.746381998 CET	1.1.1.1	192.168.2.16	0xb6b3	No error (0)	ib.anycast.adnxs.com		104.254.150.241	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:53.746381998 CET	1.1.1.1	192.168.2.16	0xb6b3	No error (0)	ib.anycast.adnxs.com		104.254.151.69	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:53.746381998 CET	1.1.1.1	192.168.2.16	0xb6b3	No error (0)	ib.anycast.adnxs.com		104.254.151.60	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:53.746381998 CET	1.1.1.1	192.168.2.16	0xb6b3	No error (0)	ib.anycast.adnxs.com		104.254.151.36	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:56:53.746381998 CET	1.1.1.1	192.168.2.16	0xb6b3	No error (0)	ib.anycast.adnxs.com		104.254.148.252	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:05.480046988 CET	1.1.1.1	192.168.2.16	0x5a5b	No error (0)	pagead-googlehosted.l.google.com		142.251.2.132	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:05.500000000 CET	1.1.1.1	192.168.2.16	0x7cf0	No error (0)	sync.intentiq.com		3.163.125.46	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:05.500000000 CET	1.1.1.1	192.168.2.16	0x7cf0	No error (0)	sync.intentiq.com		3.163.125.94	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:05.500000000 CET	1.1.1.1	192.168.2.16	0x7cf0	No error (0)	sync.intentiq.com		3.163.125.35	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:05.500000000 CET	1.1.1.1	192.168.2.16	0x7cf0	No error (0)	sync.intentiq.com		3.163.125.99	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:05.501755953 CET	1.1.1.1	192.168.2.16	0x60f8	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:05.501755953 CET	1.1.1.1	192.168.2.16	0x60f8	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:05.501755953 CET	1.1.1.1	192.168.2.16	0x60f8	No error (0)	ib.anycast.adnxs.com		104.254.148.251	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:05.501755953 CET	1.1.1.1	192.168.2.16	0x60f8	No error (0)	ib.anycast.adnxs.com		104.254.151.68	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:05.501755953 CET	1.1.1.1	192.168.2.16	0x60f8	No error (0)	ib.anycast.adnxs.com		104.254.151.69	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:05.501755953 CET	1.1.1.1	192.168.2.16	0x60f8	No error (0)	ib.anycast.adnxs.com		104.254.150.241	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:05.501755953 CET	1.1.1.1	192.168.2.16	0x60f8	No error (0)	ib.anycast.adnxs.com		104.254.151.36	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:05.501755953 CET	1.1.1.1	192.168.2.16	0x60f8	No error (0)	ib.anycast.adnxs.com		104.254.148.252	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:05.501755953 CET	1.1.1.1	192.168.2.16	0x60f8	No error (0)	ib.anycast.adnxs.com		104.254.151.60	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:05.503684044 CET	1.1.1.1	192.168.2.16	0x92f9	No error (0)	idsync.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:05.503910065 CET	1.1.1.1	192.168.2.16	0x56e5	No error (0)	d.turn.com	d.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:05.504446983 CET	1.1.1.1	192.168.2.16	0x39d7	No error (0)	d.turn.com	d.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:06.118711948 CET	1.1.1.1	192.168.2.16	0xe03d	No error (0)	csync.smartadserver.com	csync.smartadserver.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:06.122432947 CET	1.1.1.1	192.168.2.16	0xf16b	No error (0)	csync.smartadserver.com	csync.smartadserver.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:06.398847103 CET	1.1.1.1	192.168.2.16	0xce51	No error (0)	sync1.intentiq.com		3.163.125.99	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:06.398847103 CET	1.1.1.1	192.168.2.16	0xce51	No error (0)	sync1.intentiq.com		3.163.125.35	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:06.398847103 CET	1.1.1.1	192.168.2.16	0xce51	No error (0)	sync1.intentiq.com		3.163.125.46	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:06.398847103 CET	1.1.1.1	192.168.2.16	0xce51	No error (0)	sync1.intentiq.com		3.163.125.94	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:06.462199926 CET	1.1.1.1	192.168.2.16	0xd582	No error (0)	idsync.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.125279903 CET	1.1.1.1	192.168.2.16	0x6d54	No error (0)	x.bidswitch.net	user-data-us-west.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:07.125935078 CET	1.1.1.1	192.168.2.16	0x359b	No error (0)	x.bidswitch.net	user-data-us-west.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:07.125935078 CET	1.1.1.1	192.168.2.16	0x359b	No error (0)	user-data-us-west.bidswitch.net		35.212.133.238	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.146342039 CET	1.1.1.1	192.168.2.16	0x8b84	No error (0)	synchroscript.deliveryengine.adswizz.com		18.154.206.74	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.146342039 CET	1.1.1.1	192.168.2.16	0x8b84	No error (0)	synchroscript.deliveryengine.adswizz.com		18.154.206.104	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.146342039 CET	1.1.1.1	192.168.2.16	0x8b84	No error (0)	synchroscript.deliveryengine.adswizz.com		18.154.206.58	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.146342039 CET	1.1.1.1	192.168.2.16	0x8b84	No error (0)	synchroscript.deliveryengine.adswizz.com		18.154.206.64	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.153887987 CET	1.1.1.1	192.168.2.16	0xb1ca	No error (0)	bcp.crwdcntrl.net		52.8.161.245	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.153887987 CET	1.1.1.1	192.168.2.16	0xb1ca	No error (0)	bcp.crwdcntrl.net		54.215.170.251	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.156063080 CET	1.1.1.1	192.168.2.16	0xd444	No error (0)	ced-ns.sascdn.com	cdn-ns.cdn-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:07.156063080 CET	1.1.1.1	192.168.2.16	0xd444	No error (0)	cs410.wac.edgecastcdn.net		93.184.216.16	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.156152964 CET	1.1.1.1	192.168.2.16	0x7496	No error (0)	ced-ns.sascdn.com	cdn-ns.cdn-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:07.157324076 CET	1.1.1.1	192.168.2.16	0x1b4	No error (0)	pmp.mxptint.net		38.99.107.14	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.178806067 CET	1.1.1.1	192.168.2.16	0xcbb	No error (0)	pbid.pro-market.net		107.178.240.89	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.291316032 CET	1.1.1.1	192.168.2.16	0xb3ae	No error (0)	sync1.intentiq.com		3.163.125.99	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.291316032 CET	1.1.1.1	192.168.2.16	0xb3ae	No error (0)	sync1.intentiq.com		3.163.125.35	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.291316032 CET	1.1.1.1	192.168.2.16	0xb3ae	No error (0)	sync1.intentiq.com		3.163.125.46	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.291316032 CET	1.1.1.1	192.168.2.16	0xb3ae	No error (0)	sync1.intentiq.com		3.163.125.94	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.602615118 CET	1.1.1.1	192.168.2.16	0xb2da	No error (0)	hb.yahoo.net		184.28.98.113	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.602615118 CET	1.1.1.1	192.168.2.16	0xb2da	No error (0)	hb.yahoo.net		184.28.98.115	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.602615118 CET	1.1.1.1	192.168.2.16	0xb2da	No error (0)	hb.yahoo.net		184.28.98.112	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.602615118 CET	1.1.1.1	192.168.2.16	0xb2da	No error (0)	hb.yahoo.net		184.28.98.116	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.602615118 CET	1.1.1.1	192.168.2.16	0xb2da	No error (0)	hb.yahoo.net		184.28.98.108	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.602615118 CET	1.1.1.1	192.168.2.16	0xb2da	No error (0)	hb.yahoo.net		184.28.98.107	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.602615118 CET	1.1.1.1	192.168.2.16	0xb2da	No error (0)	hb.yahoo.net		184.28.98.111	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.602615118 CET	1.1.1.1	192.168.2.16	0xb2da	No error (0)	hb.yahoo.net		184.28.98.114	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.643125057 CET	1.1.1.1	192.168.2.16	0x2cc2	No error (0)	s0.2mdn.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.643125057 CET	1.1.1.1	192.168.2.16	0x2cc2	No error (0)	s0.2mdn.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.758323908 CET	1.1.1.1	192.168.2.16	0x5f73	No error (0)	creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.885965109 CET	1.1.1.1	192.168.2.16	0x2ce7	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.920413017 CET	1.1.1.1	192.168.2.16	0xcb0f	No error (0)	idsync.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.922132969 CET	1.1.1.1	192.168.2.16	0x12ff	No error (0)	loadus.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:07.922132969 CET	1.1.1.1	192.168.2.16	0x12ff	No error (0)	loadus.tm.ssl.exelator.com	us-west.load.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:07.922132969 CET	1.1.1.1	192.168.2.16	0x12ff	No error (0)	us-west.load.exelator.com	load-usw2.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:07.922132969 CET	1.1.1.1	192.168.2.16	0x12ff	No error (0)	load-usw2.exelator.com		44.238.141.43	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.923368931 CET	1.1.1.1	192.168.2.16	0x2f40	No error (0)	loadus.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:07.923368931 CET	1.1.1.1	192.168.2.16	0x2f40	No error (0)	loadus.tm.ssl.exelator.com	us-west.load.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:07.923368931 CET	1.1.1.1	192.168.2.16	0x2f40	No error (0)	us-west.load.exelator.com	load-usw2.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:07.969072104 CET	1.1.1.1	192.168.2.16	0x10ba	No error (0)	synchroscript.deliveryengine.adswizz.com		18.154.206.74	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.969072104 CET	1.1.1.1	192.168.2.16	0x10ba	No error (0)	synchroscript.deliveryengine.adswizz.com		18.154.206.58	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.969072104 CET	1.1.1.1	192.168.2.16	0x10ba	No error (0)	synchroscript.deliveryengine.adswizz.com		18.154.206.104	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:07.969072104 CET	1.1.1.1	192.168.2.16	0x10ba	No error (0)	synchroscript.deliveryengine.adswizz.com		18.154.206.64	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:08.271282911 CET	1.1.1.1	192.168.2.16	0xb58b	No error (0)	eu-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:08.271282911 CET	1.1.1.1	192.168.2.16	0xb58b	No error (0)	eu-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:08.357829094 CET	1.1.1.1	192.168.2.16	0x54b0	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:08.358087063 CET	1.1.1.1	192.168.2.16	0xf382	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:08.363286018 CET	1.1.1.1	192.168.2.16	0xa723	No error (0)	sync.adotmob.com		45.137.176.88	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:08.391613007 CET	1.1.1.1	192.168.2.16	0x42d1	No error (0)	a.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:08.391613007 CET	1.1.1.1	192.168.2.16	0x42d1	No error (0)	a.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:08.393359900 CET	1.1.1.1	192.168.2.16	0x80b6	No error (0)	a.tribalfusion.com			65	IN (0x0001)	false
Mar 11, 2024 12:57:08.394181013 CET	1.1.1.1	192.168.2.16	0x685b	No error (0)	ums.acuityplatform.com		69.90.133.51	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:08.397602081 CET	1.1.1.1	192.168.2.16	0x5912	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:08.397922993 CET	1.1.1.1	192.168.2.16	0x3df5	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:08.398701906 CET	1.1.1.1	192.168.2.16	0xca65	No error (0)	creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:08.425973892 CET	1.1.1.1	192.168.2.16	0xb1a0	No error (0)	mweb.ck.inmobi.com	dsp-cookie.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:08.426321983 CET	1.1.1.1	192.168.2.16	0x1c80	No error (0)	mweb.ck.inmobi.com	dsp-cookie.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:08.454149961 CET	1.1.1.1	192.168.2.16	0x3c8	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:08.454149961 CET	1.1.1.1	192.168.2.16	0x3c8	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:08.562905073 CET	1.1.1.1	192.168.2.16	0x3628	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:08.562905073 CET	1.1.1.1	192.168.2.16	0x3628	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:08.563867092 CET	1.1.1.1	192.168.2.16	0x2165	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Mar 11, 2024 12:57:08.707062006 CET	1.1.1.1	192.168.2.16	0x2f50	No error (0)	hb.yahoo.net		184.28.98.116	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:08.707062006 CET	1.1.1.1	192.168.2.16	0x2f50	No error (0)	hb.yahoo.net		184.28.98.114	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:08.707062006 CET	1.1.1.1	192.168.2.16	0x2f50	No error (0)	hb.yahoo.net		184.28.98.111	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:08.707062006 CET	1.1.1.1	192.168.2.16	0x2f50	No error (0)	hb.yahoo.net		184.28.98.107	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:08.707062006 CET	1.1.1.1	192.168.2.16	0x2f50	No error (0)	hb.yahoo.net		184.28.98.108	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:08.707062006 CET	1.1.1.1	192.168.2.16	0x2f50	No error (0)	hb.yahoo.net		184.28.98.115	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:08.707062006 CET	1.1.1.1	192.168.2.16	0x2f50	No error (0)	hb.yahoo.net		184.28.98.113	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:08.707062006 CET	1.1.1.1	192.168.2.16	0x2f50	No error (0)	hb.yahoo.net		184.28.98.112	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:08.849477053 CET	1.1.1.1	192.168.2.16	0xa0d2	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:08.849477053 CET	1.1.1.1	192.168.2.16	0xa0d2	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:08.850369930 CET	1.1.1.1	192.168.2.16	0x56d7	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:08.850369930 CET	1.1.1.1	192.168.2.16	0x56d7	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:09.013076067 CET	1.1.1.1	192.168.2.16	0xaeaf	No error (0)	bcp.crwdcntrl.net		52.8.161.245	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:09.013076067 CET	1.1.1.1	192.168.2.16	0xaeaf	No error (0)	bcp.crwdcntrl.net		54.215.170.251	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:09.081079960 CET	1.1.1.1	192.168.2.16	0xee34	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:09.081079960 CET	1.1.1.1	192.168.2.16	0xee34	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:09.196748972 CET	1.1.1.1	192.168.2.16	0xf0d6	No error (0)	ad.doubleclick.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:09.196748972 CET	1.1.1.1	192.168.2.16	0xf0d6	No error (0)	ad.doubleclick.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:09.197153091 CET	1.1.1.1	192.168.2.16	0x3eab	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 11, 2024 12:57:09.314100027 CET	1.1.1.1	192.168.2.16	0xb396	No error (0)	t.pswec.com	pool.proclivity.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:09.314100027 CET	1.1.1.1	192.168.2.16	0xb396	No error (0)	pool.proclivity.iponweb.net	elb-aws-va-proclivity-712001148.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:09.314215899 CET	1.1.1.1	192.168.2.16	0xa778	No error (0)	t.pswec.com	pool.proclivity.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:09.314215899 CET	1.1.1.1	192.168.2.16	0xa778	No error (0)	pool.proclivity.iponweb.net	elb-aws-va-proclivity-712001148.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:09.314215899 CET	1.1.1.1	192.168.2.16	0xa778	No error (0)	elb-aws-va-proclivity-712001148.us-east-1.elb.amazonaws.com		54.208.174.31	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:09.314215899 CET	1.1.1.1	192.168.2.16	0xa778	No error (0)	elb-aws-va-proclivity-712001148.us-east-1.elb.amazonaws.com		52.23.53.237	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:09.378139973 CET	1.1.1.1	192.168.2.16	0xe69	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:09.378180027 CET	1.1.1.1	192.168.2.16	0xa08a	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:09.379753113 CET	1.1.1.1	192.168.2.16	0xa4ad	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:09.380352020 CET	1.1.1.1	192.168.2.16	0xdce4	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:09.380352020 CET	1.1.1.1	192.168.2.16	0xdce4	No error (0)	s.dsp-prod.demandbase.com		34.96.71.22	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:09.381738901 CET	1.1.1.1	192.168.2.16	0x231b	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:09.381738901 CET	1.1.1.1	192.168.2.16	0x231b	No error (0)	pixel-origin.mathtag.com		74.121.140.211	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:09.381738901 CET	1.1.1.1	192.168.2.16	0x231b	No error (0)	pixel-origin.mathtag.com		216.200.232.249	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:09.381738901 CET	1.1.1.1	192.168.2.16	0x231b	No error (0)	pixel-origin.mathtag.com		216.200.232.253	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:09.382261992 CET	1.1.1.1	192.168.2.16	0xc434	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:09.763963938 CET	1.1.1.1	192.168.2.16	0x56f0	No error (0)	s.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:09.763963938 CET	1.1.1.1	192.168.2.16	0x56f0	No error (0)	s.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:09.764245987 CET	1.1.1.1	192.168.2.16	0x6927	No error (0)	s.tribalfusion.com			65	IN (0x0001)	false
Mar 11, 2024 12:57:10.120191097 CET	1.1.1.1	192.168.2.16	0xdda0	No error (0)	pmp.mxptint.net		38.99.107.14	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.530209064 CET	1.1.1.1	192.168.2.16	0xe6e6	No error (0)	code.createjs.com	san-download-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:10.530244112 CET	1.1.1.1	192.168.2.16	0x301a	No error (0)	code.createjs.com	san-download-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:10.550930023 CET	1.1.1.1	192.168.2.16	0xfff1	No error (0)	dis.criteo.com	widget.da1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:10.550961971 CET	1.1.1.1	192.168.2.16	0xd02e	No error (0)	dis.criteo.com	widget.da1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:10.550961971 CET	1.1.1.1	192.168.2.16	0xd02e	No error (0)	widget.da1.vip.prod.criteo.com		74.119.118.138	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.585057974 CET	1.1.1.1	192.168.2.16	0x7d02	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:10.585057974 CET	1.1.1.1	192.168.2.16	0x7d02	No error (0)	outspot2-ams.adx.opera.com		82.145.213.8	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.585406065 CET	1.1.1.1	192.168.2.16	0x5815	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:10.602287054 CET	1.1.1.1	192.168.2.16	0xad4	No error (0)	cm-supply-web.gammaplatform.com		35.186.154.107	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.679022074 CET	1.1.1.1	192.168.2.16	0x9f65	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:10.679022074 CET	1.1.1.1	192.168.2.16	0x9f65	No error (0)	simage2v2.pubmnet.com	pug-sfo-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:10.679022074 CET	1.1.1.1	192.168.2.16	0x9f65	No error (0)	pug-sfo-bc.pubmnet.com		104.36.113.107	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.679583073 CET	1.1.1.1	192.168.2.16	0xcb27	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:10.679583073 CET	1.1.1.1	192.168.2.16	0xcb27	No error (0)	simage2v2.pubmnet.com	pug-sv3c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:10.714289904 CET	1.1.1.1	192.168.2.16	0x5c97	No error (0)	beacon.lynx.cognitivlabs.com	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:10.714289904 CET	1.1.1.1	192.168.2.16	0x5c97	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		44.218.18.183	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.714289904 CET	1.1.1.1	192.168.2.16	0x5c97	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		54.87.217.118	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.714289904 CET	1.1.1.1	192.168.2.16	0x5c97	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		107.21.65.70	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.714289904 CET	1.1.1.1	192.168.2.16	0x5c97	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		44.195.157.207	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.714839935 CET	1.1.1.1	192.168.2.16	0x44d5	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:10.714839935 CET	1.1.1.1	192.168.2.16	0x44d5	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.235.183	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.714839935 CET	1.1.1.1	192.168.2.16	0x44d5	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.144.175	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.714839935 CET	1.1.1.1	192.168.2.16	0x44d5	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.155.117	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.714839935 CET	1.1.1.1	192.168.2.16	0x44d5	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.192.127	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.714839935 CET	1.1.1.1	192.168.2.16	0x44d5	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.246.89	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.714839935 CET	1.1.1.1	192.168.2.16	0x44d5	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.213.48	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.714839935 CET	1.1.1.1	192.168.2.16	0x44d5	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.157.56	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.714839935 CET	1.1.1.1	192.168.2.16	0x44d5	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.138.53	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.714839935 CET	1.1.1.1	192.168.2.16	0x44d5	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.131.111	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.714911938 CET	1.1.1.1	192.168.2.16	0x88df	No error (0)	beacon.lynx.cognitivlabs.com	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:10.716445923 CET	1.1.1.1	192.168.2.16	0x1363	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:10.791755915 CET	1.1.1.1	192.168.2.16	0xf224	No error (0)	dsp.adfarm1.adition.com		85.114.159.93	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.791755915 CET	1.1.1.1	192.168.2.16	0xf224	No error (0)	dsp.adfarm1.adition.com		85.114.159.118	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.793826103 CET	1.1.1.1	192.168.2.16	0xa63d	No error (0)	ad.doubleclick.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.793826103 CET	1.1.1.1	192.168.2.16	0xa63d	No error (0)	ad.doubleclick.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.794557095 CET	1.1.1.1	192.168.2.16	0xb2af	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 11, 2024 12:57:10.797662973 CET	1.1.1.1	192.168.2.16	0xdcd6	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:10.797704935 CET	1.1.1.1	192.168.2.16	0x29c8	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:10.797704935 CET	1.1.1.1	192.168.2.16	0x29c8	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		3.213.0.7	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.797704935 CET	1.1.1.1	192.168.2.16	0x29c8	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		18.204.113.12	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.797704935 CET	1.1.1.1	192.168.2.16	0x29c8	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		3.224.131.173	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.797704935 CET	1.1.1.1	192.168.2.16	0x29c8	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		34.195.193.82	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.798369884 CET	1.1.1.1	192.168.2.16	0xaa3e	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:10.798369884 CET	1.1.1.1	192.168.2.16	0xaa3e	No error (0)	idaas-ext.cph.liveintent.com		3.218.15.224	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.798369884 CET	1.1.1.1	192.168.2.16	0xaa3e	No error (0)	idaas-ext.cph.liveintent.com		107.20.242.188	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.798369884 CET	1.1.1.1	192.168.2.16	0xaa3e	No error (0)	idaas-ext.cph.liveintent.com		52.202.23.212	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.798369884 CET	1.1.1.1	192.168.2.16	0xaa3e	No error (0)	idaas-ext.cph.liveintent.com		34.203.39.242	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.798369884 CET	1.1.1.1	192.168.2.16	0xaa3e	No error (0)	idaas-ext.cph.liveintent.com		35.168.75.56	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.798369884 CET	1.1.1.1	192.168.2.16	0xaa3e	No error (0)	idaas-ext.cph.liveintent.com		54.235.155.213	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.798369884 CET	1.1.1.1	192.168.2.16	0xaa3e	No error (0)	idaas-ext.cph.liveintent.com		52.86.42.47	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.798369884 CET	1.1.1.1	192.168.2.16	0xaa3e	No error (0)	idaas-ext.cph.liveintent.com		3.215.84.99	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.798904896 CET	1.1.1.1	192.168.2.16	0x7c9e	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:10.801671982 CET	1.1.1.1	192.168.2.16	0x89f5	No error (0)	io.narrative.io		52.27.232.237	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.801671982 CET	1.1.1.1	192.168.2.16	0x89f5	No error (0)	io.narrative.io		34.212.202.37	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.805063963 CET	1.1.1.1	192.168.2.16	0xeb2e	No error (0)	sync.crwdcntrl.net		52.8.161.245	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.805063963 CET	1.1.1.1	192.168.2.16	0xeb2e	No error (0)	sync.crwdcntrl.net		54.215.170.251	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.819660902 CET	1.1.1.1	192.168.2.16	0xc7b4	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.819660902 CET	1.1.1.1	192.168.2.16	0xc7b4	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.820950031 CET	1.1.1.1	192.168.2.16	0xa14	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Mar 11, 2024 12:57:10.825720072 CET	1.1.1.1	192.168.2.16	0xfe81	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:10.825742006 CET	1.1.1.1	192.168.2.16	0xb23b	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:10.905373096 CET	1.1.1.1	192.168.2.16	0x36ca	No error (0)	s.amazon-adsystem.com		52.46.155.104	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.907269955 CET	1.1.1.1	192.168.2.16	0x68b4	No error (0)	aax-eu.amazon-adsystem.com		52.94.220.185	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.938961983 CET	1.1.1.1	192.168.2.16	0xfe44	No error (0)	dsum.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.938961983 CET	1.1.1.1	192.168.2.16	0xfe44	No error (0)	dsum.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:10.939006090 CET	1.1.1.1	192.168.2.16	0x9c80	No error (0)	dsum.casalemedia.com			65	IN (0x0001)	false
Mar 11, 2024 12:57:11.101165056 CET	1.1.1.1	192.168.2.16	0x67ce	No error (0)	s.tribalfusion.com			65	IN (0x0001)	false
Mar 11, 2024 12:57:11.101181030 CET	1.1.1.1	192.168.2.16	0xfd21	No error (0)	s.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:11.101181030 CET	1.1.1.1	192.168.2.16	0xfd21	No error (0)	s.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:11.996988058 CET	1.1.1.1	192.168.2.16	0xbece	No error (0)	1f2e7.v.fwmrm.net	g11v.fwgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:11.998209953 CET	1.1.1.1	192.168.2.16	0x3380	No error (0)	sync.crwdcntrl.net		52.8.161.245	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:11.998209953 CET	1.1.1.1	192.168.2.16	0x3380	No error (0)	sync.crwdcntrl.net		54.215.170.251	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:12.002974033 CET	1.1.1.1	192.168.2.16	0xae58	No error (0)	1f2e7.v.fwmrm.net	g11v.fwgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:12.136164904 CET	1.1.1.1	192.168.2.16	0x27	No error (0)	dsum.casalemedia.com			65	IN (0x0001)	false
Mar 11, 2024 12:57:12.136322975 CET	1.1.1.1	192.168.2.16	0x7a7a	No error (0)	dsum.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:12.136322975 CET	1.1.1.1	192.168.2.16	0x7a7a	No error (0)	dsum.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:12.375989914 CET	1.1.1.1	192.168.2.16	0x43c4	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:12.376035929 CET	1.1.1.1	192.168.2.16	0xadf0	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:12.376035929 CET	1.1.1.1	192.168.2.16	0xadf0	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		3.213.0.7	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:12.376035929 CET	1.1.1.1	192.168.2.16	0xadf0	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		3.224.131.173	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:12.376035929 CET	1.1.1.1	192.168.2.16	0xadf0	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		18.204.113.12	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:12.376035929 CET	1.1.1.1	192.168.2.16	0xadf0	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		34.195.193.82	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:12.514624119 CET	1.1.1.1	192.168.2.16	0xa023	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:12.514624119 CET	1.1.1.1	192.168.2.16	0xa023	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:12.514624119 CET	1.1.1.1	192.168.2.16	0xa023	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:12.514624119 CET	1.1.1.1	192.168.2.16	0xa023	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:12.514624119 CET	1.1.1.1	192.168.2.16	0xa023	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:12.514624119 CET	1.1.1.1	192.168.2.16	0xa023	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:12.514624119 CET	1.1.1.1	192.168.2.16	0xa023	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:12.514624119 CET	1.1.1.1	192.168.2.16	0xa023	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:12.514624119 CET	1.1.1.1	192.168.2.16	0xa023	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:12.514624119 CET	1.1.1.1	192.168.2.16	0xa023	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:12.726377010 CET	1.1.1.1	192.168.2.16	0xcc9a	No error (0)	sync.1rx.io		69.194.240.13	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:12.770621061 CET	1.1.1.1	192.168.2.16	0x76d9	No error (0)	aax-eu.amazon-adsystem.com		52.94.220.185	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:13.049503088 CET	1.1.1.1	192.168.2.16	0x7d7	No error (0)	s0.2mdn.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:13.049503088 CET	1.1.1.1	192.168.2.16	0x7d7	No error (0)	s0.2mdn.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:13.083852053 CET	1.1.1.1	192.168.2.16	0x2d4e	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 11, 2024 12:57:13.083903074 CET	1.1.1.1	192.168.2.16	0xc9cd	No error (0)	ad.doubleclick.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:13.083903074 CET	1.1.1.1	192.168.2.16	0xc9cd	No error (0)	ad.doubleclick.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:13.195278883 CET	1.1.1.1	192.168.2.16	0x4a13	No error (0)	r.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:13.195278883 CET	1.1.1.1	192.168.2.16	0x4a13	No error (0)	r.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:13.195446014 CET	1.1.1.1	192.168.2.16	0x149e	No error (0)	r.casalemedia.com			65	IN (0x0001)	false
Mar 11, 2024 12:57:13.236298084 CET	1.1.1.1	192.168.2.16	0x52eb	No error (0)	cs.admanmedia.com		80.77.87.163	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:13.354600906 CET	1.1.1.1	192.168.2.16	0x37a3	No error (0)	s.ad.smaato.net		18.244.214.61	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:13.354600906 CET	1.1.1.1	192.168.2.16	0x37a3	No error (0)	s.ad.smaato.net		18.244.214.27	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:13.354600906 CET	1.1.1.1	192.168.2.16	0x37a3	No error (0)	s.ad.smaato.net		18.244.214.102	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:13.354600906 CET	1.1.1.1	192.168.2.16	0x37a3	No error (0)	s.ad.smaato.net		18.244.214.91	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:13.662343025 CET	1.1.1.1	192.168.2.16	0x2c83	No error (0)	match.prod.bidr.io		52.11.41.99	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:13.662343025 CET	1.1.1.1	192.168.2.16	0x2c83	No error (0)	match.prod.bidr.io		52.25.158.6	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:13.662343025 CET	1.1.1.1	192.168.2.16	0x2c83	No error (0)	match.prod.bidr.io		52.24.195.72	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:13.662343025 CET	1.1.1.1	192.168.2.16	0x2c83	No error (0)	match.prod.bidr.io		52.10.200.37	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:13.662343025 CET	1.1.1.1	192.168.2.16	0x2c83	No error (0)	match.prod.bidr.io		52.13.34.103	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:13.974756002 CET	1.1.1.1	192.168.2.16	0x5b95	No error (0)	rtb.adentifi.com		35.171.70.242	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:13.974756002 CET	1.1.1.1	192.168.2.16	0x5b95	No error (0)	rtb.adentifi.com		54.83.86.193	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:13.974756002 CET	1.1.1.1	192.168.2.16	0x5b95	No error (0)	rtb.adentifi.com		34.197.235.192	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:13.974756002 CET	1.1.1.1	192.168.2.16	0x5b95	No error (0)	rtb.adentifi.com		3.229.57.120	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:13.974756002 CET	1.1.1.1	192.168.2.16	0x5b95	No error (0)	rtb.adentifi.com		44.216.123.11	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:13.974756002 CET	1.1.1.1	192.168.2.16	0x5b95	No error (0)	rtb.adentifi.com		44.197.3.66	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:14.049076080 CET	1.1.1.1	192.168.2.16	0x3168	No error (0)	a.audrte.com		34.255.246.57	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:14.049076080 CET	1.1.1.1	192.168.2.16	0x3168	No error (0)	a.audrte.com		63.33.13.151	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:14.049076080 CET	1.1.1.1	192.168.2.16	0x3168	No error (0)	a.audrte.com		52.49.253.210	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:14.049076080 CET	1.1.1.1	192.168.2.16	0x3168	No error (0)	a.audrte.com		34.251.192.134	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:14.049076080 CET	1.1.1.1	192.168.2.16	0x3168	No error (0)	a.audrte.com		52.30.18.244	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:14.049076080 CET	1.1.1.1	192.168.2.16	0x3168	No error (0)	a.audrte.com		52.209.135.120	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:14.057060957 CET	1.1.1.1	192.168.2.16	0xcf13	No error (0)	r.casalemedia.com			65	IN (0x0001)	false
Mar 11, 2024 12:57:14.057080984 CET	1.1.1.1	192.168.2.16	0x1204	No error (0)	r.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:14.057080984 CET	1.1.1.1	192.168.2.16	0x1204	No error (0)	r.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:15.045583010 CET	1.1.1.1	192.168.2.16	0x4a26	No error (0)	wt.rqtrk.eu		51.222.241.106	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:15.045583010 CET	1.1.1.1	192.168.2.16	0x4a26	No error (0)	wt.rqtrk.eu		51.222.241.145	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:15.045583010 CET	1.1.1.1	192.168.2.16	0x4a26	No error (0)	wt.rqtrk.eu		51.222.241.100	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:16.140872002 CET	1.1.1.1	192.168.2.16	0xc1d4	No error (0)	wt.rqtrk.eu		51.222.241.145	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:16.140872002 CET	1.1.1.1	192.168.2.16	0xc1d4	No error (0)	wt.rqtrk.eu		51.222.241.100	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:16.140872002 CET	1.1.1.1	192.168.2.16	0xc1d4	No error (0)	wt.rqtrk.eu		51.222.241.106	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:16.315329075 CET	1.1.1.1	192.168.2.16	0xd725	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:16.315329075 CET	1.1.1.1	192.168.2.16	0xd725	No error (0)	sync.1rx.io		69.194.240.13	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:16.315478086 CET	1.1.1.1	192.168.2.16	0xa977	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:16.444458961 CET	1.1.1.1	192.168.2.16	0x92ef	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:16.444480896 CET	1.1.1.1	192.168.2.16	0xc304	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:16.444480896 CET	1.1.1.1	192.168.2.16	0xc304	No error (0)	idaas6.cph.liveintent.com		3.211.2.230	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:16.444480896 CET	1.1.1.1	192.168.2.16	0xc304	No error (0)	idaas6.cph.liveintent.com		3.226.195.51	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:16.444480896 CET	1.1.1.1	192.168.2.16	0xc304	No error (0)	idaas6.cph.liveintent.com		44.193.47.6	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:16.707791090 CET	1.1.1.1	192.168.2.16	0xa2f1	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:16.707791090 CET	1.1.1.1	192.168.2.16	0xa2f1	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:16.707791090 CET	1.1.1.1	192.168.2.16	0xa2f1	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:16.707791090 CET	1.1.1.1	192.168.2.16	0xa2f1	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:17.479931116 CET	1.1.1.1	192.168.2.16	0x278	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:17.479931116 CET	1.1.1.1	192.168.2.16	0x278	No error (0)	idaas6.cph.liveintent.com		3.211.2.230	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:17.479931116 CET	1.1.1.1	192.168.2.16	0x278	No error (0)	idaas6.cph.liveintent.com		3.226.195.51	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:17.479931116 CET	1.1.1.1	192.168.2.16	0x278	No error (0)	idaas6.cph.liveintent.com		44.193.47.6	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:17.479948044 CET	1.1.1.1	192.168.2.16	0xa489	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:17.691437960 CET	1.1.1.1	192.168.2.16	0x6fa3	No error (0)	dmp.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:17.691917896 CET	1.1.1.1	192.168.2.16	0x9231	No error (0)	dmp.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:21.006882906 CET	1.1.1.1	192.168.2.16	0x5b8	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:21.006970882 CET	1.1.1.1	192.168.2.16	0xa237	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:21.006970882 CET	1.1.1.1	192.168.2.16	0xa237	No error (0)	cdn.w55c.net		52.11.39.206	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:21.006970882 CET	1.1.1.1	192.168.2.16	0xa237	No error (0)	cdn.w55c.net		35.166.28.193	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:21.006970882 CET	1.1.1.1	192.168.2.16	0xa237	No error (0)	cdn.w55c.net		44.239.254.221	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:22.122047901 CET	1.1.1.1	192.168.2.16	0xf3ac	No error (0)	pagead-googlehosted.l.google.com		142.251.2.132	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:22.129834890 CET	1.1.1.1	192.168.2.16	0xc193	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:22.129834890 CET	1.1.1.1	192.168.2.16	0xc193	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-west-2.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:22.129834890 CET	1.1.1.1	192.168.2.16	0xc193	No error (0)	prod.ups-ats.us-west-2.aolp-ds-prd.aws.oath.cloud	ats-eks.us-west-2.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:22.129834890 CET	1.1.1.1	192.168.2.16	0xc193	No error (0)	ats-eks.us-west-2.dcs-online-targeting-prd.aws.oath.cloud		35.84.163.233	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:22.129834890 CET	1.1.1.1	192.168.2.16	0xc193	No error (0)	ats-eks.us-west-2.dcs-online-targeting-prd.aws.oath.cloud		34.214.251.32	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:22.130747080 CET	1.1.1.1	192.168.2.16	0x7d20	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:22.130917072 CET	1.1.1.1	192.168.2.16	0x7350	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:22.130917072 CET	1.1.1.1	192.168.2.16	0x7350	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.227.74.54	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:22.130917072 CET	1.1.1.1	192.168.2.16	0x7350	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.227.74.49	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:22.130917072 CET	1.1.1.1	192.168.2.16	0x7350	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.227.74.65	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:22.130917072 CET	1.1.1.1	192.168.2.16	0x7350	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.227.74.48	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:22.131009102 CET	1.1.1.1	192.168.2.16	0x2ab9	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:22.131009102 CET	1.1.1.1	192.168.2.16	0x2ab9	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-west-2.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:22.131009102 CET	1.1.1.1	192.168.2.16	0x2ab9	No error (0)	prod.ups-ats.us-west-2.aolp-ds-prd.aws.oath.cloud	ats-eks.us-west-2.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:22.135077953 CET	1.1.1.1	192.168.2.16	0x1ac2	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:22.135077953 CET	1.1.1.1	192.168.2.16	0x1ac2	No error (0)	gslb-2.demdex.net	edge-usw2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:22.135077953 CET	1.1.1.1	192.168.2.16	0x1ac2	No error (0)	edge-usw2.demdex.net	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:22.135077953 CET	1.1.1.1	192.168.2.16	0x1ac2	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		54.213.96.237	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:22.135077953 CET	1.1.1.1	192.168.2.16	0x1ac2	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.42.104.131	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:22.135077953 CET	1.1.1.1	192.168.2.16	0x1ac2	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		44.239.96.24	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:22.135077953 CET	1.1.1.1	192.168.2.16	0x1ac2	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.88.22.80	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:22.135077953 CET	1.1.1.1	192.168.2.16	0x1ac2	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		35.167.242.34	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:22.135077953 CET	1.1.1.1	192.168.2.16	0x1ac2	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		34.210.5.217	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:22.135077953 CET	1.1.1.1	192.168.2.16	0x1ac2	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.32.251.146	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:22.135077953 CET	1.1.1.1	192.168.2.16	0x1ac2	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		35.85.116.115	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:22.135554075 CET	1.1.1.1	192.168.2.16	0xca6a	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:22.135554075 CET	1.1.1.1	192.168.2.16	0xca6a	No error (0)	gslb-2.demdex.net	edge-usw2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:22.135554075 CET	1.1.1.1	192.168.2.16	0xca6a	No error (0)	edge-usw2.demdex.net	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:22.136385918 CET	1.1.1.1	192.168.2.16	0xba21	No error (0)	beacon.krxd.net	prod-pdx-beacon-1406086907.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:22.136385918 CET	1.1.1.1	192.168.2.16	0xba21	No error (0)	prod-pdx-beacon-1406086907.us-west-2.elb.amazonaws.com		54.201.134.102	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:22.136385918 CET	1.1.1.1	192.168.2.16	0xba21	No error (0)	prod-pdx-beacon-1406086907.us-west-2.elb.amazonaws.com		52.34.26.46	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:22.136385918 CET	1.1.1.1	192.168.2.16	0xba21	No error (0)	prod-pdx-beacon-1406086907.us-west-2.elb.amazonaws.com		54.70.241.122	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:22.136385918 CET	1.1.1.1	192.168.2.16	0xba21	No error (0)	prod-pdx-beacon-1406086907.us-west-2.elb.amazonaws.com		35.83.110.131	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:22.137362003 CET	1.1.1.1	192.168.2.16	0xfb3f	No error (0)	beacon.krxd.net	prod-pdx-beacon-1406086907.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:22.261719942 CET	1.1.1.1	192.168.2.16	0xd095	No error (0)	pagead-googlehosted.l.google.com		142.251.2.132	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:22.607168913 CET	1.1.1.1	192.168.2.16	0x41bd	No error (0)	sync.ipredictive.com		52.44.255.182	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:22.607168913 CET	1.1.1.1	192.168.2.16	0x41bd	No error (0)	sync.ipredictive.com		52.87.49.60	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:22.607168913 CET	1.1.1.1	192.168.2.16	0x41bd	No error (0)	sync.ipredictive.com		52.7.247.141	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:22.607168913 CET	1.1.1.1	192.168.2.16	0x41bd	No error (0)	sync.ipredictive.com		54.167.240.199	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:22.607168913 CET	1.1.1.1	192.168.2.16	0x41bd	No error (0)	sync.ipredictive.com		54.159.66.10	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:22.607168913 CET	1.1.1.1	192.168.2.16	0x41bd	No error (0)	sync.ipredictive.com		54.158.64.147	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:22.607168913 CET	1.1.1.1	192.168.2.16	0x41bd	No error (0)	sync.ipredictive.com		54.158.243.155	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:22.607168913 CET	1.1.1.1	192.168.2.16	0x41bd	No error (0)	sync.ipredictive.com		54.144.130.108	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:24.234981060 CET	1.1.1.1	192.168.2.16	0xead9	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:24.235176086 CET	1.1.1.1	192.168.2.16	0xb345	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:24.235176086 CET	1.1.1.1	192.168.2.16	0xb345	No error (0)	pixel.33across.com		67.202.105.21	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:24.235176086 CET	1.1.1.1	192.168.2.16	0xb345	No error (0)	pixel.33across.com		67.202.105.22	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:24.235873938 CET	1.1.1.1	192.168.2.16	0x9c66	No error (0)	sid.storygize.net		143.244.208.184	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:24.431078911 CET	1.1.1.1	192.168.2.16	0x1bbe	No error (0)	pixel-sync.sitescout.com		34.36.216.150	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:24.537014961 CET	1.1.1.1	192.168.2.16	0x8a2	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:24.537014961 CET	1.1.1.1	192.168.2.16	0x8a2	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		35.160.96.43	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:24.537014961 CET	1.1.1.1	192.168.2.16	0x8a2	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		44.230.132.82	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:24.537014961 CET	1.1.1.1	192.168.2.16	0x8a2	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		35.80.168.78	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:24.537014961 CET	1.1.1.1	192.168.2.16	0x8a2	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.36.3.219	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:24.537637949 CET	1.1.1.1	192.168.2.16	0x5d1c	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:24.537637949 CET	1.1.1.1	192.168.2.16	0x5d1c	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:24.537637949 CET	1.1.1.1	192.168.2.16	0x5d1c	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:24.537637949 CET	1.1.1.1	192.168.2.16	0x5d1c	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:24.537637949 CET	1.1.1.1	192.168.2.16	0x5d1c	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:24.537648916 CET	1.1.1.1	192.168.2.16	0xcd70	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:24.538491964 CET	1.1.1.1	192.168.2.16	0xdabe	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:24.716813087 CET	1.1.1.1	192.168.2.16	0xd8db	No error (0)	sync.teads.tv	sync.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:24.717441082 CET	1.1.1.1	192.168.2.16	0x1134	No error (0)	sync.teads.tv	sync.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:25.015459061 CET	1.1.1.1	192.168.2.16	0xe086	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:25.015619993 CET	1.1.1.1	192.168.2.16	0x1806	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:25.026489973 CET	1.1.1.1	192.168.2.16	0x60ed	No error (0)	gocm.c.appier.net	cm127.appier.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:25.026489973 CET	1.1.1.1	192.168.2.16	0x60ed	No error (0)	cm127.appier.org		172.105.221.29	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:25.027184010 CET	1.1.1.1	192.168.2.16	0xc539	No error (0)	gocm.c.appier.net	cm123.appier.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:25.027733088 CET	1.1.1.1	192.168.2.16	0x2356	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:25.027733088 CET	1.1.1.1	192.168.2.16	0x2356	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:25.028146029 CET	1.1.1.1	192.168.2.16	0x6a37	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:25.028819084 CET	1.1.1.1	192.168.2.16	0xb2ae	No error (0)	pixel.onaudience.com		141.94.171.212	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:25.028819084 CET	1.1.1.1	192.168.2.16	0xb2ae	No error (0)	pixel.onaudience.com		15.235.15.221	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:25.028819084 CET	1.1.1.1	192.168.2.16	0xb2ae	No error (0)	pixel.onaudience.com		51.222.80.231	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:25.028819084 CET	1.1.1.1	192.168.2.16	0xb2ae	No error (0)	pixel.onaudience.com		141.94.170.64	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:25.028819084 CET	1.1.1.1	192.168.2.16	0xb2ae	No error (0)	pixel.onaudience.com		141.94.171.214	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:25.028819084 CET	1.1.1.1	192.168.2.16	0xb2ae	No error (0)	pixel.onaudience.com		141.94.170.77	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:25.028819084 CET	1.1.1.1	192.168.2.16	0xb2ae	No error (0)	pixel.onaudience.com		141.94.171.216	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:25.028819084 CET	1.1.1.1	192.168.2.16	0xb2ae	No error (0)	pixel.onaudience.com		146.59.148.16	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:25.028819084 CET	1.1.1.1	192.168.2.16	0xb2ae	No error (0)	pixel.onaudience.com		141.94.171.215	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:25.028819084 CET	1.1.1.1	192.168.2.16	0xb2ae	No error (0)	pixel.onaudience.com		141.94.171.213	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:25.029170036 CET	1.1.1.1	192.168.2.16	0x1ed8	No error (0)	sync.srv.stackadapt.com		54.165.23.128	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:25.029170036 CET	1.1.1.1	192.168.2.16	0x1ed8	No error (0)	sync.srv.stackadapt.com		54.205.171.153	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:25.029170036 CET	1.1.1.1	192.168.2.16	0x1ed8	No error (0)	sync.srv.stackadapt.com		52.86.255.225	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:25.029170036 CET	1.1.1.1	192.168.2.16	0x1ed8	No error (0)	sync.srv.stackadapt.com		54.165.180.24	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:25.029170036 CET	1.1.1.1	192.168.2.16	0x1ed8	No error (0)	sync.srv.stackadapt.com		54.157.187.91	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:25.029170036 CET	1.1.1.1	192.168.2.16	0x1ed8	No error (0)	sync.srv.stackadapt.com		54.210.219.80	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:25.029170036 CET	1.1.1.1	192.168.2.16	0x1ed8	No error (0)	sync.srv.stackadapt.com		54.205.227.51	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:25.029170036 CET	1.1.1.1	192.168.2.16	0x1ed8	No error (0)	sync.srv.stackadapt.com		54.164.152.245	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:25.379240990 CET	1.1.1.1	192.168.2.16	0xe660	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:25.379240990 CET	1.1.1.1	192.168.2.16	0xe660	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:25.379240990 CET	1.1.1.1	192.168.2.16	0xe660	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:25.379240990 CET	1.1.1.1	192.168.2.16	0xe660	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:25.379240990 CET	1.1.1.1	192.168.2.16	0xe660	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:25.380099058 CET	1.1.1.1	192.168.2.16	0x98eb	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:25.818871021 CET	1.1.1.1	192.168.2.16	0xf8ac	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:25.818871021 CET	1.1.1.1	192.168.2.16	0xf8ac	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.227.74.48	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:25.818871021 CET	1.1.1.1	192.168.2.16	0xf8ac	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.227.74.54	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:25.818871021 CET	1.1.1.1	192.168.2.16	0xf8ac	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.227.74.65	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:25.818871021 CET	1.1.1.1	192.168.2.16	0xf8ac	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.227.74.49	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:25.819025993 CET	1.1.1.1	192.168.2.16	0xc8e8	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:26.287379026 CET	1.1.1.1	192.168.2.16	0x6ec9	No error (0)	servedby.flashtalking.com	servedby.flashtalking.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:26.287448883 CET	1.1.1.1	192.168.2.16	0x2d39	No error (0)	servedby.flashtalking.com	servedby.flashtalking.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:26.327326059 CET	1.1.1.1	192.168.2.16	0xfd31	No error (0)	aep.mxptint.net		38.99.107.14	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:26.331321001 CET	1.1.1.1	192.168.2.16	0xc1ad	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:26.331321001 CET	1.1.1.1	192.168.2.16	0xc1ad	No error (0)	vap.lijit.com	naw.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:26.331321001 CET	1.1.1.1	192.168.2.16	0xc1ad	No error (0)	naw.vap.lijit.com	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:26.331321001 CET	1.1.1.1	192.168.2.16	0xc1ad	No error (0)	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		44.230.187.183	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:26.331321001 CET	1.1.1.1	192.168.2.16	0xc1ad	No error (0)	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		35.162.5.216	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:26.331321001 CET	1.1.1.1	192.168.2.16	0xc1ad	No error (0)	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		52.39.6.96	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:26.331321001 CET	1.1.1.1	192.168.2.16	0xc1ad	No error (0)	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		44.239.81.26	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:26.331321001 CET	1.1.1.1	192.168.2.16	0xc1ad	No error (0)	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		52.37.135.208	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:26.331321001 CET	1.1.1.1	192.168.2.16	0xc1ad	No error (0)	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		35.163.202.19	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:26.331321001 CET	1.1.1.1	192.168.2.16	0xc1ad	No error (0)	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		44.233.38.236	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:26.331321001 CET	1.1.1.1	192.168.2.16	0xc1ad	No error (0)	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		35.161.12.218	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:26.332195997 CET	1.1.1.1	192.168.2.16	0x228	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:26.332195997 CET	1.1.1.1	192.168.2.16	0x228	No error (0)	vap.lijit.com	naw.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:26.332195997 CET	1.1.1.1	192.168.2.16	0x228	No error (0)	naw.vap.lijit.com	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:26.415345907 CET	1.1.1.1	192.168.2.16	0xe87a	No error (0)	sync.teads.tv	sync.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:26.415360928 CET	1.1.1.1	192.168.2.16	0x4854	No error (0)	sync.teads.tv	sync.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:26.891463041 CET	1.1.1.1	192.168.2.16	0x607b	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:26.891463041 CET	1.1.1.1	192.168.2.16	0x607b	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:26.892265081 CET	1.1.1.1	192.168.2.16	0xad75	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:27.037286043 CET	1.1.1.1	192.168.2.16	0x5fdc	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 11, 2024 12:57:27.037318945 CET	1.1.1.1	192.168.2.16	0x3088	No error (0)	ad.doubleclick.net		142.251.2.148	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:27.037318945 CET	1.1.1.1	192.168.2.16	0x3088	No error (0)	ad.doubleclick.net		142.251.2.149	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:27.278105974 CET	1.1.1.1	192.168.2.16	0x1871	No error (0)	ajs-assets.ftstatic.com	d3f1y6rso5ozvw.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:27.278105974 CET	1.1.1.1	192.168.2.16	0x1871	No error (0)	d3f1y6rso5ozvw.cloudfront.net		18.154.144.60	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:27.278105974 CET	1.1.1.1	192.168.2.16	0x1871	No error (0)	d3f1y6rso5ozvw.cloudfront.net		18.154.144.56	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:27.278105974 CET	1.1.1.1	192.168.2.16	0x1871	No error (0)	d3f1y6rso5ozvw.cloudfront.net		18.154.144.115	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:27.278105974 CET	1.1.1.1	192.168.2.16	0x1871	No error (0)	d3f1y6rso5ozvw.cloudfront.net		18.154.144.80	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:27.278151035 CET	1.1.1.1	192.168.2.16	0xbf2e	No error (0)	ajs-assets.ftstatic.com	ajs-assets.ftstatic.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:28.483848095 CET	1.1.1.1	192.168.2.16	0xb905	No error (0)	agen-assets.ftstatic.com	d1dvhck2p605dz.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:28.483848095 CET	1.1.1.1	192.168.2.16	0xb905	No error (0)	d1dvhck2p605dz.cloudfront.net		13.226.210.30	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:28.483848095 CET	1.1.1.1	192.168.2.16	0xb905	No error (0)	d1dvhck2p605dz.cloudfront.net		13.226.210.62	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:28.483848095 CET	1.1.1.1	192.168.2.16	0xb905	No error (0)	d1dvhck2p605dz.cloudfront.net		13.226.210.86	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:28.483848095 CET	1.1.1.1	192.168.2.16	0xb905	No error (0)	d1dvhck2p605dz.cloudfront.net		13.226.210.107	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:28.484291077 CET	1.1.1.1	192.168.2.16	0x69be	No error (0)	agen-assets.ftstatic.com	d1dvhck2p605dz.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:28.584600925 CET	1.1.1.1	192.168.2.16	0x5f70	No error (0)	spl.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:28.584600925 CET	1.1.1.1	192.168.2.16	0x5f70	No error (0)	spl.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:28.584600925 CET	1.1.1.1	192.168.2.16	0x5f70	No error (0)	spl.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:28.584671021 CET	1.1.1.1	192.168.2.16	0xb4aa	No error (0)	spl.zeotap.com			65	IN (0x0001)	false
Mar 11, 2024 12:57:29.402450085 CET	1.1.1.1	192.168.2.16	0xe1c7	No error (0)	agen-assets.ftstatic.com	d1dvhck2p605dz.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:29.402450085 CET	1.1.1.1	192.168.2.16	0xe1c7	No error (0)	d1dvhck2p605dz.cloudfront.net		13.226.210.86	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:29.402450085 CET	1.1.1.1	192.168.2.16	0xe1c7	No error (0)	d1dvhck2p605dz.cloudfront.net		13.226.210.30	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:29.402450085 CET	1.1.1.1	192.168.2.16	0xe1c7	No error (0)	d1dvhck2p605dz.cloudfront.net		13.226.210.62	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:29.402450085 CET	1.1.1.1	192.168.2.16	0xe1c7	No error (0)	d1dvhck2p605dz.cloudfront.net		13.226.210.107	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:29.412642956 CET	1.1.1.1	192.168.2.16	0x569f	No error (0)	agen-assets.ftstatic.com	d1dvhck2p605dz.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:29.522346973 CET	1.1.1.1	192.168.2.16	0xed8c	No error (0)	d9.flashtalking.com	ft.device9.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:29.522346973 CET	1.1.1.1	192.168.2.16	0xed8c	No error (0)	ft.device9.com	tag.device9.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:29.522346973 CET	1.1.1.1	192.168.2.16	0xed8c	No error (0)	tag.device9.com		52.9.211.225	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:29.522346973 CET	1.1.1.1	192.168.2.16	0xed8c	No error (0)	tag.device9.com		54.183.96.152	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:29.524871111 CET	1.1.1.1	192.168.2.16	0x3f73	No error (0)	d9.flashtalking.com	ft.device9.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:29.524871111 CET	1.1.1.1	192.168.2.16	0x3f73	No error (0)	ft.device9.com	tag.device9.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:29.529335976 CET	1.1.1.1	192.168.2.16	0x2a31	No error (0)	js.ad-score.com	d30hfjcp71s79q.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:29.529422045 CET	1.1.1.1	192.168.2.16	0xebad	No error (0)	js.ad-score.com	d30hfjcp71s79q.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:29.529422045 CET	1.1.1.1	192.168.2.16	0xebad	No error (0)	d30hfjcp71s79q.cloudfront.net		18.164.154.15	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:29.529422045 CET	1.1.1.1	192.168.2.16	0xebad	No error (0)	d30hfjcp71s79q.cloudfront.net		18.164.154.31	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:29.529422045 CET	1.1.1.1	192.168.2.16	0xebad	No error (0)	d30hfjcp71s79q.cloudfront.net		18.164.154.93	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:29.529422045 CET	1.1.1.1	192.168.2.16	0xebad	No error (0)	d30hfjcp71s79q.cloudfront.net		18.164.154.116	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:29.529745102 CET	1.1.1.1	192.168.2.16	0x4c96	No error (0)	cdn.flashtalking.com	cdn.flashtalking.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:29.529925108 CET	1.1.1.1	192.168.2.16	0xcb45	No error (0)	cdn.flashtalking.com	cdn.flashtalking.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:29.708715916 CET	1.1.1.1	192.168.2.16	0x5163	No error (0)	a.audrte.com		34.255.246.57	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:29.708715916 CET	1.1.1.1	192.168.2.16	0x5163	No error (0)	a.audrte.com		63.33.13.151	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:29.708715916 CET	1.1.1.1	192.168.2.16	0x5163	No error (0)	a.audrte.com		52.49.253.210	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:29.708715916 CET	1.1.1.1	192.168.2.16	0x5163	No error (0)	a.audrte.com		34.251.192.134	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:29.708715916 CET	1.1.1.1	192.168.2.16	0x5163	No error (0)	a.audrte.com		52.209.135.120	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:29.708715916 CET	1.1.1.1	192.168.2.16	0x5163	No error (0)	a.audrte.com		52.30.18.244	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:30.358326912 CET	1.1.1.1	192.168.2.16	0x2df3	No error (0)	mwzeom.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:30.358326912 CET	1.1.1.1	192.168.2.16	0x2df3	No error (0)	mwzeom.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:30.358326912 CET	1.1.1.1	192.168.2.16	0x2df3	No error (0)	mwzeom.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:30.359762907 CET	1.1.1.1	192.168.2.16	0x46be	No error (0)	mwzeom.zeotap.com			65	IN (0x0001)	false
Mar 11, 2024 12:57:30.401984930 CET	1.1.1.1	192.168.2.16	0x496c	No error (0)	ad-events.flashtalking.com	in.ftadsrv.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:30.401984930 CET	1.1.1.1	192.168.2.16	0x496c	No error (0)	in.ftadsrv.com	in-sjc11.g.ftadsrv.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:30.401984930 CET	1.1.1.1	192.168.2.16	0x496c	No error (0)	in-sjc11.g.ftadsrv.com	ad-interactions-prod-lb-1289981577.us-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:30.401984930 CET	1.1.1.1	192.168.2.16	0x496c	No error (0)	ad-interactions-prod-lb-1289981577.us-west-1.elb.amazonaws.com		54.241.104.80	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:30.401984930 CET	1.1.1.1	192.168.2.16	0x496c	No error (0)	ad-interactions-prod-lb-1289981577.us-west-1.elb.amazonaws.com		52.52.139.145	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:30.402000904 CET	1.1.1.1	192.168.2.16	0xae6a	No error (0)	ad-events.flashtalking.com	in.ftadsrv.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:30.402000904 CET	1.1.1.1	192.168.2.16	0xae6a	No error (0)	in.ftadsrv.com	in-sjc11.g.ftadsrv.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:30.402000904 CET	1.1.1.1	192.168.2.16	0xae6a	No error (0)	in-sjc11.g.ftadsrv.com	ad-interactions-prod-lb-1289981577.us-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:30.614151955 CET	1.1.1.1	192.168.2.16	0x8cff	No error (0)	stat.flashtalking.com	stat.flashtalking.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:30.614166021 CET	1.1.1.1	192.168.2.16	0xf515	No error (0)	stat.flashtalking.com	stat.flashtalking.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:30.614928961 CET	1.1.1.1	192.168.2.16	0xcee	No error (0)	cdn.flashtalking.com	cdn.flashtalking.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:30.615011930 CET	1.1.1.1	192.168.2.16	0x24e1	No error (0)	cdn.flashtalking.com	cdn.flashtalking.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:31.122133970 CET	1.1.1.1	192.168.2.16	0x2c91	No error (0)	data.ad-score.com		130.211.115.4	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:31.150207043 CET	1.1.1.1	192.168.2.16	0xfda9	No error (0)	d9.flashtalking.com	ft.device9.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:31.150207043 CET	1.1.1.1	192.168.2.16	0xfda9	No error (0)	ft.device9.com	tag.device9.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:31.150207043 CET	1.1.1.1	192.168.2.16	0xfda9	No error (0)	tag.device9.com		52.9.211.225	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:31.150207043 CET	1.1.1.1	192.168.2.16	0xfda9	No error (0)	tag.device9.com		54.183.96.152	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:31.150250912 CET	1.1.1.1	192.168.2.16	0x898e	No error (0)	d9.flashtalking.com	ft.device9.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:31.150250912 CET	1.1.1.1	192.168.2.16	0x898e	No error (0)	ft.device9.com	tag.device9.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:31.267347097 CET	1.1.1.1	192.168.2.16	0xcabe	No error (0)	ad-events.flashtalking.com	in.ftadsrv.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:31.267347097 CET	1.1.1.1	192.168.2.16	0xcabe	No error (0)	in.ftadsrv.com	in-sjc11.g.ftadsrv.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:31.267347097 CET	1.1.1.1	192.168.2.16	0xcabe	No error (0)	in-sjc11.g.ftadsrv.com	ad-interactions-prod-lb-1289981577.us-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:31.267347097 CET	1.1.1.1	192.168.2.16	0xcabe	No error (0)	ad-interactions-prod-lb-1289981577.us-west-1.elb.amazonaws.com		54.241.104.80	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:31.267347097 CET	1.1.1.1	192.168.2.16	0xcabe	No error (0)	ad-interactions-prod-lb-1289981577.us-west-1.elb.amazonaws.com		52.52.139.145	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:31.267821074 CET	1.1.1.1	192.168.2.16	0x2c5f	No error (0)	ad-events.flashtalking.com	in.ftadsrv.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:31.267821074 CET	1.1.1.1	192.168.2.16	0x2c5f	No error (0)	in.ftadsrv.com	in-sjc11.g.ftadsrv.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:31.267821074 CET	1.1.1.1	192.168.2.16	0x2c5f	No error (0)	in-sjc11.g.ftadsrv.com	ad-interactions-prod-lb-1289981577.us-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:31.348769903 CET	1.1.1.1	192.168.2.16	0x1002	No error (0)	mwzeom.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:31.348769903 CET	1.1.1.1	192.168.2.16	0x1002	No error (0)	mwzeom.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:31.348769903 CET	1.1.1.1	192.168.2.16	0x1002	No error (0)	mwzeom.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:31.349315882 CET	1.1.1.1	192.168.2.16	0x4ae4	No error (0)	mwzeom.zeotap.com			65	IN (0x0001)	false
Mar 11, 2024 12:57:31.428018093 CET	1.1.1.1	192.168.2.16	0xbb34	No error (0)	stat.flashtalking.com	stat.flashtalking.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:31.428087950 CET	1.1.1.1	192.168.2.16	0x50d3	No error (0)	stat.flashtalking.com	stat.flashtalking.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:31.484973907 CET	1.1.1.1	192.168.2.16	0xb7ec	No error (0)	secure.flashtalking.com	secure.flashtalking.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:31.485454082 CET	1.1.1.1	192.168.2.16	0xa421	No error (0)	secure.flashtalking.com	secure.flashtalking.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:31.946007013 CET	1.1.1.1	192.168.2.16	0xcd83	No error (0)	servedby.flashtalking.com	servedby.flashtalking.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:31.946371078 CET	1.1.1.1	192.168.2.16	0xb487	No error (0)	servedby.flashtalking.com	servedby.flashtalking.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:32.298880100 CET	1.1.1.1	192.168.2.16	0x5364	No error (0)	secure.flashtalking.com	secure.flashtalking.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:32.306829929 CET	1.1.1.1	192.168.2.16	0xe619	No error (0)	secure.flashtalking.com	secure.flashtalking.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:32.476560116 CET	1.1.1.1	192.168.2.16	0x14ea	No error (0)	data.ad-score.com		130.211.115.4	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:35.272202015 CET	1.1.1.1	192.168.2.16	0x488e	No error (0)	ps.eyeota.net		18.214.54.215	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:41.736608028 CET	1.1.1.1	192.168.2.16	0xfe47	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:41.736608028 CET	1.1.1.1	192.168.2.16	0xfe47	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:41.736608028 CET	1.1.1.1	192.168.2.16	0xfe47	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:41.736608028 CET	1.1.1.1	192.168.2.16	0xfe47	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:41.736608028 CET	1.1.1.1	192.168.2.16	0xfe47	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:41.736608028 CET	1.1.1.1	192.168.2.16	0xfe47	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:41.736608028 CET	1.1.1.1	192.168.2.16	0xfe47	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:41.736608028 CET	1.1.1.1	192.168.2.16	0xfe47	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:41.736608028 CET	1.1.1.1	192.168.2.16	0xfe47	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:41.736608028 CET	1.1.1.1	192.168.2.16	0xfe47	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:41.745515108 CET	1.1.1.1	192.168.2.16	0x979	No error (0)	a.fsdn.com	a.fsdn.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:41.746189117 CET	1.1.1.1	192.168.2.16	0xe15c	No error (0)	a.fsdn.com	a.fsdn.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:41.757152081 CET	1.1.1.1	192.168.2.16	0x874d	No error (0)	tag.crsspxl.com		34.232.140.51	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:42.588741064 CET	1.1.1.1	192.168.2.16	0x46a8	No error (0)	a.fsdn.com	a.fsdn.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:42.588777065 CET	1.1.1.1	192.168.2.16	0xd16e	No error (0)	a.fsdn.com	a.fsdn.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:43.066032887 CET	1.1.1.1	192.168.2.16	0x4ae3	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:43.114902020 CET	1.1.1.1	192.168.2.16	0x32cd	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:43.920380116 CET	1.1.1.1	192.168.2.16	0x68f	No error (0)	dmp.truoptik.com		104.17.217.204	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:43.920380116 CET	1.1.1.1	192.168.2.16	0x68f	No error (0)	dmp.truoptik.com		104.17.215.204	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:43.920380116 CET	1.1.1.1	192.168.2.16	0x68f	No error (0)	dmp.truoptik.com		104.17.219.204	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:43.920380116 CET	1.1.1.1	192.168.2.16	0x68f	No error (0)	dmp.truoptik.com		104.17.216.204	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:43.920380116 CET	1.1.1.1	192.168.2.16	0x68f	No error (0)	dmp.truoptik.com		104.17.218.204	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:43.921104908 CET	1.1.1.1	192.168.2.16	0xf5d5	No error (0)	dmp.truoptik.com			65	IN (0x0001)	false
Mar 11, 2024 12:57:43.921967030 CET	1.1.1.1	192.168.2.16	0x9e09	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:43.922337055 CET	1.1.1.1	192.168.2.16	0xe7e0	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:43.935779095 CET	1.1.1.1	192.168.2.16	0xaa54	No error (0)	ce.lijit.com	ce-uw2.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:43.935779095 CET	1.1.1.1	192.168.2.16	0xaa54	No error (0)	ce-uw2.lijit.com	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:43.935779095 CET	1.1.1.1	192.168.2.16	0xaa54	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		35.167.0.196	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:43.935779095 CET	1.1.1.1	192.168.2.16	0xaa54	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		44.237.63.251	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:43.935779095 CET	1.1.1.1	192.168.2.16	0xaa54	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		54.188.69.73	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:43.935779095 CET	1.1.1.1	192.168.2.16	0xaa54	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		52.39.99.148	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:43.935779095 CET	1.1.1.1	192.168.2.16	0xaa54	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		52.34.118.204	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:43.935779095 CET	1.1.1.1	192.168.2.16	0xaa54	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		52.32.41.9	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:43.936463118 CET	1.1.1.1	192.168.2.16	0xfd49	No error (0)	ce.lijit.com	ce-uw2.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:43.936463118 CET	1.1.1.1	192.168.2.16	0xfd49	No error (0)	ce-uw2.lijit.com	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:44.735603094 CET	1.1.1.1	192.168.2.16	0x491a	No error (0)	tag.crsspxl.com		34.232.140.51	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:44.749398947 CET	1.1.1.1	192.168.2.16	0x5976	No error (0)	u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:44.749398947 CET	1.1.1.1	192.168.2.16	0x5976	No error (0)	u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:44.785687923 CET	1.1.1.1	192.168.2.16	0x23d	No error (0)	cm.g.doubleclick.net		74.125.137.154	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:44.785687923 CET	1.1.1.1	192.168.2.16	0x23d	No error (0)	cm.g.doubleclick.net		74.125.137.155	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:44.785687923 CET	1.1.1.1	192.168.2.16	0x23d	No error (0)	cm.g.doubleclick.net		74.125.137.156	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:44.785687923 CET	1.1.1.1	192.168.2.16	0x23d	No error (0)	cm.g.doubleclick.net		74.125.137.157	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:44.825093985 CET	1.1.1.1	192.168.2.16	0xcc9d	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:44.830805063 CET	1.1.1.1	192.168.2.16	0x9616	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:44.861064911 CET	1.1.1.1	192.168.2.16	0x413d	No error (0)	ce.lijit.com	ce-uw2.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:44.861064911 CET	1.1.1.1	192.168.2.16	0x413d	No error (0)	ce-uw2.lijit.com	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:44.861064911 CET	1.1.1.1	192.168.2.16	0x413d	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		52.34.118.204	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:44.861064911 CET	1.1.1.1	192.168.2.16	0x413d	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		52.39.99.148	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:44.861064911 CET	1.1.1.1	192.168.2.16	0x413d	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		44.237.63.251	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:44.861064911 CET	1.1.1.1	192.168.2.16	0x413d	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		54.188.69.73	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:44.861064911 CET	1.1.1.1	192.168.2.16	0x413d	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		35.167.0.196	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:44.861064911 CET	1.1.1.1	192.168.2.16	0x413d	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		52.32.41.9	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:44.861404896 CET	1.1.1.1	192.168.2.16	0xcca3	No error (0)	ce.lijit.com	ce-uw2.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:44.861404896 CET	1.1.1.1	192.168.2.16	0xcca3	No error (0)	ce-uw2.lijit.com	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:45.657691002 CET	1.1.1.1	192.168.2.16	0x6d5	No error (0)	rtd-tm.everesttech.net	rtd.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:45.657691002 CET	1.1.1.1	192.168.2.16	0x6d5	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:45.658420086 CET	1.1.1.1	192.168.2.16	0x4fa8	No error (0)	rtd-tm.everesttech.net	rtd.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:45.658420086 CET	1.1.1.1	192.168.2.16	0x4fa8	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:46.535363913 CET	1.1.1.1	192.168.2.16	0x5bf7	No error (0)	rtd-tm.everesttech.net	rtd.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:46.535363913 CET	1.1.1.1	192.168.2.16	0x5bf7	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:46.535455942 CET	1.1.1.1	192.168.2.16	0x6195	No error (0)	rtd-tm.everesttech.net	rtd.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:46.535455942 CET	1.1.1.1	192.168.2.16	0x6195	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:51.250123024 CET	1.1.1.1	192.168.2.16	0x27a8	No error (0)	ml314.com		34.117.77.79	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:54.040569067 CET	1.1.1.1	192.168.2.16	0xb208	No error (0)	btlr.sharethrough.com	btlr-us-west-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:54.040569067 CET	1.1.1.1	192.168.2.16	0xb208	No error (0)	btlr-us-west-1.sharethrough.com		54.215.139.244	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:54.040569067 CET	1.1.1.1	192.168.2.16	0xb208	No error (0)	btlr-us-west-1.sharethrough.com		52.52.237.208	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:54.040569067 CET	1.1.1.1	192.168.2.16	0xb208	No error (0)	btlr-us-west-1.sharethrough.com		54.176.168.59	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:54.040569067 CET	1.1.1.1	192.168.2.16	0xb208	No error (0)	btlr-us-west-1.sharethrough.com		52.52.163.17	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:54.040569067 CET	1.1.1.1	192.168.2.16	0xb208	No error (0)	btlr-us-west-1.sharethrough.com		54.183.10.3	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:54.040569067 CET	1.1.1.1	192.168.2.16	0xb208	No error (0)	btlr-us-west-1.sharethrough.com		54.241.185.160	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:54.040569067 CET	1.1.1.1	192.168.2.16	0xb208	No error (0)	btlr-us-west-1.sharethrough.com		52.9.62.96	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:54.040569067 CET	1.1.1.1	192.168.2.16	0xb208	No error (0)	btlr-us-west-1.sharethrough.com		54.67.20.65	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:54.040592909 CET	1.1.1.1	192.168.2.16	0x1050	No error (0)	btlr.sharethrough.com	btlr-us-west-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:54.042416096 CET	1.1.1.1	192.168.2.16	0x8d01	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:54.042416096 CET	1.1.1.1	192.168.2.16	0x8d01	No error (0)	hbprebid-v3.pubmnet.com	gob-sv3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:54.042643070 CET	1.1.1.1	192.168.2.16	0x6add	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:54.042643070 CET	1.1.1.1	192.168.2.16	0x6add	No error (0)	hbprebid-v3.pubmnet.com	gob-sv3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:54.042643070 CET	1.1.1.1	192.168.2.16	0x6add	No error (0)	gob-sv3.pubmnet.com		204.237.133.116	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:54.043869972 CET	1.1.1.1	192.168.2.16	0xb07a	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:54.043869972 CET	1.1.1.1	192.168.2.16	0xb07a	No error (0)	vap.lijit.com	naw.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:54.043869972 CET	1.1.1.1	192.168.2.16	0xb07a	No error (0)	naw.vap.lijit.com	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:54.043869972 CET	1.1.1.1	192.168.2.16	0xb07a	No error (0)	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		44.236.19.27	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:54.043869972 CET	1.1.1.1	192.168.2.16	0xb07a	No error (0)	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		35.161.69.237	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:54.043869972 CET	1.1.1.1	192.168.2.16	0xb07a	No error (0)	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		35.162.5.216	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:54.043869972 CET	1.1.1.1	192.168.2.16	0xb07a	No error (0)	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		52.27.166.248	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:54.043869972 CET	1.1.1.1	192.168.2.16	0xb07a	No error (0)	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		44.237.100.219	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:54.043869972 CET	1.1.1.1	192.168.2.16	0xb07a	No error (0)	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		35.161.96.217	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:54.043869972 CET	1.1.1.1	192.168.2.16	0xb07a	No error (0)	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		54.68.199.168	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:54.043869972 CET	1.1.1.1	192.168.2.16	0xb07a	No error (0)	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		52.37.135.208	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:54.044374943 CET	1.1.1.1	192.168.2.16	0xe6d1	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:54.044374943 CET	1.1.1.1	192.168.2.16	0xe6d1	No error (0)	vap.lijit.com	naw.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:54.044374943 CET	1.1.1.1	192.168.2.16	0xe6d1	No error (0)	naw.vap.lijit.com	blackbird-prd-uw2-alb-137217764.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:54.044548988 CET	1.1.1.1	192.168.2.16	0x3ee2	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:54.044548988 CET	1.1.1.1	192.168.2.16	0x3ee2	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:54.044548988 CET	1.1.1.1	192.168.2.16	0x3ee2	No error (0)	ib.anycast.adnxs.com		104.254.151.69	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:54.044548988 CET	1.1.1.1	192.168.2.16	0x3ee2	No error (0)	ib.anycast.adnxs.com		104.254.150.241	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:54.044548988 CET	1.1.1.1	192.168.2.16	0x3ee2	No error (0)	ib.anycast.adnxs.com		104.254.148.252	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:54.044548988 CET	1.1.1.1	192.168.2.16	0x3ee2	No error (0)	ib.anycast.adnxs.com		104.254.151.60	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:54.044548988 CET	1.1.1.1	192.168.2.16	0x3ee2	No error (0)	ib.anycast.adnxs.com		104.254.151.68	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:54.044548988 CET	1.1.1.1	192.168.2.16	0x3ee2	No error (0)	ib.anycast.adnxs.com		104.254.148.251	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:54.044548988 CET	1.1.1.1	192.168.2.16	0x3ee2	No error (0)	ib.anycast.adnxs.com		104.254.151.36	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:54.702991009 CET	1.1.1.1	192.168.2.16	0x962b	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:54.702991009 CET	1.1.1.1	192.168.2.16	0x962b	No error (0)	securepubads46.g.doubleclick.net		142.251.2.154	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:54.702991009 CET	1.1.1.1	192.168.2.16	0x962b	No error (0)	securepubads46.g.doubleclick.net		142.251.2.157	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:54.702991009 CET	1.1.1.1	192.168.2.16	0x962b	No error (0)	securepubads46.g.doubleclick.net		142.251.2.156	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:54.702991009 CET	1.1.1.1	192.168.2.16	0x962b	No error (0)	securepubads46.g.doubleclick.net		142.251.2.155	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:54.703691959 CET	1.1.1.1	192.168.2.16	0x5531	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:55.505067110 CET	1.1.1.1	192.168.2.16	0x5f99	No error (0)	btlr.sharethrough.com	btlr-us-west-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:55.505218029 CET	1.1.1.1	192.168.2.16	0x71ef	No error (0)	btlr.sharethrough.com	btlr-us-west-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:55.505218029 CET	1.1.1.1	192.168.2.16	0x71ef	No error (0)	btlr-us-west-1.sharethrough.com		52.52.237.208	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:55.505218029 CET	1.1.1.1	192.168.2.16	0x71ef	No error (0)	btlr-us-west-1.sharethrough.com		54.241.185.160	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:55.505218029 CET	1.1.1.1	192.168.2.16	0x71ef	No error (0)	btlr-us-west-1.sharethrough.com		52.52.163.17	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:55.505218029 CET	1.1.1.1	192.168.2.16	0x71ef	No error (0)	btlr-us-west-1.sharethrough.com		54.215.139.244	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:55.505218029 CET	1.1.1.1	192.168.2.16	0x71ef	No error (0)	btlr-us-west-1.sharethrough.com		54.183.10.3	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:55.505218029 CET	1.1.1.1	192.168.2.16	0x71ef	No error (0)	btlr-us-west-1.sharethrough.com		54.67.20.65	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:55.505218029 CET	1.1.1.1	192.168.2.16	0x71ef	No error (0)	btlr-us-west-1.sharethrough.com		54.176.168.59	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:55.505218029 CET	1.1.1.1	192.168.2.16	0x71ef	No error (0)	btlr-us-west-1.sharethrough.com		52.9.62.96	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:56.429982901 CET	1.1.1.1	192.168.2.16	0x7347	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:56.429982901 CET	1.1.1.1	192.168.2.16	0x7347	No error (0)	securepubads46.g.doubleclick.net		142.251.2.154	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:56.429982901 CET	1.1.1.1	192.168.2.16	0x7347	No error (0)	securepubads46.g.doubleclick.net		142.251.2.155	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:56.429982901 CET	1.1.1.1	192.168.2.16	0x7347	No error (0)	securepubads46.g.doubleclick.net		142.251.2.157	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:56.429982901 CET	1.1.1.1	192.168.2.16	0x7347	No error (0)	securepubads46.g.doubleclick.net		142.251.2.156	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:56.430633068 CET	1.1.1.1	192.168.2.16	0xc89d	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:56.514534950 CET	1.1.1.1	192.168.2.16	0xa55f	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:57:56.514534950 CET	1.1.1.1	192.168.2.16	0xa55f	No error (0)	securepubads46.g.doubleclick.net		142.251.2.154	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:56.514534950 CET	1.1.1.1	192.168.2.16	0xa55f	No error (0)	securepubads46.g.doubleclick.net		142.251.2.155	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:56.514534950 CET	1.1.1.1	192.168.2.16	0xa55f	No error (0)	securepubads46.g.doubleclick.net		142.251.2.156	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:56.514534950 CET	1.1.1.1	192.168.2.16	0xa55f	No error (0)	securepubads46.g.doubleclick.net		142.251.2.157	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:57:56.515206099 CET	1.1.1.1	192.168.2.16	0x601a	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:58:27.033771038 CET	1.1.1.1	192.168.2.16	0x35a8	No error (0)	prg.smartadserver.com	prga.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:58:27.033771038 CET	1.1.1.1	192.168.2.16	0x35a8	No error (0)	prga.smartadserver.com	hb-geo.delivery-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:58:27.033771038 CET	1.1.1.1	192.168.2.16	0x35a8	No error (0)	usw1.smartadserver.com		23.83.76.80	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:58:27.033771038 CET	1.1.1.1	192.168.2.16	0x35a8	No error (0)	usw1.smartadserver.com		23.83.76.97	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:58:27.033771038 CET	1.1.1.1	192.168.2.16	0x35a8	No error (0)	usw1.smartadserver.com		23.83.76.64	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:58:27.033771038 CET	1.1.1.1	192.168.2.16	0x35a8	No error (0)	usw1.smartadserver.com		23.83.76.44	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:58:27.033771038 CET	1.1.1.1	192.168.2.16	0x35a8	No error (0)	usw1.smartadserver.com		23.83.76.35	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:58:27.033771038 CET	1.1.1.1	192.168.2.16	0x35a8	No error (0)	usw1.smartadserver.com		23.83.76.49	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:58:27.033771038 CET	1.1.1.1	192.168.2.16	0x35a8	No error (0)	usw1.smartadserver.com		23.83.76.96	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:58:27.033771038 CET	1.1.1.1	192.168.2.16	0x35a8	No error (0)	usw1.smartadserver.com		23.83.76.65	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:58:27.033771038 CET	1.1.1.1	192.168.2.16	0x35a8	No error (0)	usw1.smartadserver.com		23.83.76.48	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:58:27.033771038 CET	1.1.1.1	192.168.2.16	0x35a8	No error (0)	usw1.smartadserver.com		23.83.76.81	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:58:27.033797979 CET	1.1.1.1	192.168.2.16	0x9128	No error (0)	prg.smartadserver.com	prga.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:58:27.033797979 CET	1.1.1.1	192.168.2.16	0x9128	No error (0)	prga.smartadserver.com	hb-geo.delivery-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:58:35.208667994 CET	1.1.1.1	192.168.2.16	0xe986	No error (0)	stat.flashtalking.com	stat.flashtalking.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:58:35.208693027 CET	1.1.1.1	192.168.2.16	0x5dd7	No error (0)	stat.flashtalking.com	stat.flashtalking.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:58:36.031923056 CET	1.1.1.1	192.168.2.16	0x5f3	No error (0)	stat.flashtalking.com	stat.flashtalking.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:58:36.031958103 CET	1.1.1.1	192.168.2.16	0xe767	No error (0)	stat.flashtalking.com	stat.flashtalking.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 12:58:40.458112955 CET	1.1.1.1	192.168.2.16	0xd9ed	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 11, 2024 12:58:40.458132982 CET	1.1.1.1	192.168.2.16	0xf970	No error (0)	www.google.com		142.251.2.147	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:58:40.458132982 CET	1.1.1.1	192.168.2.16	0xf970	No error (0)	www.google.com		142.251.2.104	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:58:40.458132982 CET	1.1.1.1	192.168.2.16	0xf970	No error (0)	www.google.com		142.251.2.99	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:58:40.458132982 CET	1.1.1.1	192.168.2.16	0xf970	No error (0)	www.google.com		142.251.2.103	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:58:40.458132982 CET	1.1.1.1	192.168.2.16	0xf970	No error (0)	www.google.com		142.251.2.106	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:58:40.458132982 CET	1.1.1.1	192.168.2.16	0xf970	No error (0)	www.google.com		142.251.2.105	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:58:45.269995928 CET	1.1.1.1	192.168.2.16	0xe296	No error (0)	www.google.com		142.251.2.106	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:58:45.269995928 CET	1.1.1.1	192.168.2.16	0xe296	No error (0)	www.google.com		142.251.2.99	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:58:45.269995928 CET	1.1.1.1	192.168.2.16	0xe296	No error (0)	www.google.com		142.251.2.147	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:58:45.269995928 CET	1.1.1.1	192.168.2.16	0xe296	No error (0)	www.google.com		142.251.2.103	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:58:45.269995928 CET	1.1.1.1	192.168.2.16	0xe296	No error (0)	www.google.com		142.251.2.104	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:58:45.269995928 CET	1.1.1.1	192.168.2.16	0xe296	No error (0)	www.google.com		142.251.2.105	A (IP address)	IN (0x0001)	false
Mar 11, 2024 12:58:45.270160913 CET	1.1.1.1	192.168.2.16	0xfe2e	No error (0)	www.google.com			65	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49701	104.18.37.111	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:35 UTC	744	OUT	GET /projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download HTTP/1.1 Host: sourceforge.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:36 UTC	1187	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:36 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache pragma: no-cache link: <https://a.fsdn.com/con/js/sftheme/vendor/bizx-prebid.js?1709827391>; rel=preload; as=script, <https://a.fsdn.com/con/js/min/sf.sandiego-cmp-top.js?1709827391>; rel=preload; as=script, <https://a.fsdn.com/con/css/fonts/sftheme/lato-v20-latin-ext_latin-regular.woff2>; rel=preload; as=font; crossorigin, <https://a.fsdn.com/con/css/fonts/sftheme/lato-v20-latin-ext_latin-700.woff2>; rel=preload; as=font; crossorigin, <https://a.fsdn.com/con/css/lato.css?1709827391>; rel=preload; as=style, <https://a.fsdn.com/con/css/sandiego.css?1709827391>; rel=preload; as=style, <https://a.fsdn.com/con/js/min/sf.sandiego-head.js?1709827391>; rel=preload; as=script x-ua-compatible: IE=edge,chrome=1 permissions-policy: geolocation=(), microphone=(), camera=(), payment=(), document-domain=(), display-capture=(), autoplay=() feature-policy: geolocation 'none'; microphone 'none'; camera 'none'; payment 'none'; document-domain 'none'; display-capture 'none'; autoplay 'none' x-frame-options: SAMEORIGIN
2024-03-11 11:56:36 UTC	6129	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 73 63 72 69 70 74 2d 73 72 63 2d 61 74 74 72 20 27 6e 6f 6e 65 27 20 27 72 65 70 6f 72 74 2d 73 61 6d 70 6c 65 27 3b 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 3b 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 66 6f 72 6d 2d 61 63 74 69 6f 6e 20 27 73 65 6c 66 27 20 6c 69 73 74 73 2e 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 3b 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 73 65 6c 66 27 20 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 67 72 20 2a 2e 6c 69 6a 69 74 2e 63 6f 6d 20 2a 2e 61 64 6e 78 73 2e 63 6f 6d 20 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 Data Ascii: content-security-policy: script-src-attr 'none' 'report-sample'; frame-ancestors 'self'; object-src 'none'; form-action 'self' lists.sourceforge.net; upgrade-insecure-requests; script-src 'self' adservice.google.gr .lijit.com .adnxs.com adservice.google
2024-03-11 11:56:36 UTC	1369	IN	Data Raw: 32 39 30 66 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 61 2e 66 73 64 6e 2e 63 6f 6d 2f 63 6f 6e 2f 6a 73 2f Data Ascii: 290f<!doctype html><html class="no-js" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=no" /><script src="//a.fsdn.com/con/js/
2024-03-11 11:56:36 UTC	1369	IN	Data Raw: 20 37 34 33 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 69 6c 6c 62 6f 61 72 64 3a 20 39 38 35 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 61 72 67 65 3a 20 31 30 35 33 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 78 6c 61 72 67 65 3a 20 31 32 39 35 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 78 78 6c 61 72 67 65 3a 20 31 33 36 36 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 53 46 2e 69 6e 69 74 69 61 6c 5f 62 72 65 61 6b 70 6f 69 6e 74 73 5f 76 69 73 69 62 6c 65 20 3d 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 62 70 20 69 6e 20 53 46 2e 42 72 65 61 6b 70 6f 69 6e 74 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 53 46 2e 42 72 65 Data Ascii: 743, billboard: 985, large: 1053, xlarge: 1295, xxlarge: 1366 }; SF.initial_breakpoints_visible = {}; for (var bp in SF.Breakpoints) { if (!SF.Bre
2024-03-11 11:56:36 UTC	1369	IN	Data Raw: 5b 7b 22 62 69 64 64 65 72 22 3a 22 73 6f 76 72 6e 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 74 61 67 69 64 22 3a 22 33 36 34 36 36 38 22 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 22 62 69 64 64 65 72 22 3a 22 72 75 62 69 63 6f 6e 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 7a 6f 6e 65 49 64 22 3a 22 34 38 36 30 30 32 22 2c 22 73 69 7a 65 73 22 3a 5b 32 5d 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 22 61 74 66 22 2c 22 61 63 63 6f 75 6e 74 49 64 22 3a 22 31 35 36 38 30 22 2c 22 73 69 74 65 49 64 22 3a 22 31 30 33 32 34 30 22 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 22 62 69 64 64 65 72 22 3a 22 61 70 70 6e 65 78 75 73 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 Data Ascii: [{"bidder":"sovrn","params":{"tagid":"364668"}}, {"bidder":"rubicon","params":{"zoneId":"486002","sizes":[2],"position":"atf","accountId":"15680","siteId":"103240"}}, {"bidder":"appnexus","params":{"
2024-03-11 11:56:36 UTC	1369	IN	Data Raw: 64 65 72 22 3a 22 73 6f 76 72 6e 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 74 61 67 69 64 22 3a 22 35 34 32 33 31 36 22 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 22 62 69 64 64 65 72 22 3a 22 72 75 62 69 63 6f 6e 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 7a 6f 6e 65 49 64 22 3a 22 36 31 30 38 34 38 22 2c 22 73 69 7a 65 73 22 3a 5b 34 33 5d 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 22 61 74 66 22 2c 22 61 63 63 6f 75 6e 74 49 64 22 3a 22 31 35 36 38 30 22 2c 22 73 69 74 65 49 64 22 3a 22 31 30 33 32 34 30 22 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 22 62 69 64 64 65 72 22 3a 22 61 70 70 6e 65 78 75 73 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 70 6c 61 63 65 Data Ascii: der":"sovrn","params":{"tagid":"542316"}}, {"bidder":"rubicon","params":{"zoneId":"610848","sizes":[43],"position":"atf","accountId":"15680","siteId":"103240"}}, {"bidder":"appnexus","params":{"place
2024-03-11 11:56:36 UTC	1369	IN	Data Raw: 69 51 53 54 6d 5a 48 30 77 73 7a 54 50 75 51 71 50 4b 44 53 58 59 74 74 22 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 22 62 69 64 64 65 72 22 3a 22 70 75 62 6d 61 74 69 63 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 61 64 53 6c 6f 74 22 3a 22 34 37 34 31 35 39 31 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 31 36 32 35 33 38 22 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 22 62 69 64 64 65 72 22 3a 22 73 6d 61 72 74 61 64 73 65 72 76 65 72 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 70 61 67 65 49 64 22 3a 31 39 31 31 34 39 35 2c 22 6e 65 74 77 6f 72 6b 49 64 22 3a 34 35 35 39 2c 22 73 69 74 65 49 64 22 3a 35 37 35 38 31 36 2c 22 66 6f 72 6d 61 74 49 Data Ascii: iQSTmZH0wszTPuQqPKDSXYtt"}}, {"bidder":"pubmatic","params":{"adSlot":"4741591","publisherId":"162538"}}, {"bidder":"smartadserver","params":{"pageId":1911495,"networkId":4559,"siteId":575816,"formatI
2024-03-11 11:56:36 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 61 67 3a 20 27 53 46 5f 54 65 6d 70 35 5f 33 30 30 78 32 35 30 5f 42 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 65 64 69 61 54 79 70 65 73 3a 20 7b 20 62 61 6e 6e 65 72 3a 20 7b 20 73 69 7a 65 73 3a 20 5b 5b 33 30 30 2c 32 35 30 5d 5d 20 7d 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 46 2e 41 64 73 2e 70 72 65 62 69 64 55 6e 69 74 73 2e 70 75 73 68 28 74 68 69 73 55 6e 69 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 53 46 2e 69 6e 69 74 69 61 6c 5f 62 72 65 61 6b 70 6f 69 6e 74 73 5f 76 69 73 69 62 6c 65 2e 6c 61 72 67 65 29 20 7b 0a Data Ascii: tag: 'SF_Temp5_300x250_B', mediaTypes: { banner: { sizes: [[300,250]] } } }; SF.Ads.prebidUnits.push(thisUnit); } if (SF.initial_breakpoints_visible.large) {
2024-03-11 11:56:36 UTC	1369	IN	Data Raw: 37 22 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 22 62 69 64 64 65 72 22 3a 22 72 75 62 69 63 6f 6e 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 7a 6f 6e 65 49 64 22 3a 22 37 39 38 32 36 30 22 2c 22 73 69 7a 65 73 22 3a 5b 34 33 5d 2c 22 61 63 63 6f 75 6e 74 49 64 22 3a 22 31 35 36 38 30 22 2c 22 73 69 74 65 49 64 22 3a 22 31 30 33 32 34 30 22 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 22 62 69 64 64 65 72 22 3a 22 61 70 70 6e 65 78 75 73 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 70 6c 61 63 65 6d 65 6e 74 49 64 22 3a 31 32 35 35 39 30 38 34 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 22 62 69 64 64 Data Ascii: 7"}}, {"bidder":"rubicon","params":{"zoneId":"798260","sizes":[43],"accountId":"15680","siteId":"103240"}}, {"bidder":"appnexus","params":{"placementId":12559084}}, {"bidd
2024-03-11 11:56:36 UTC	936	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 22 62 69 64 64 65 72 22 3a 22 70 75 62 6d 61 74 69 63 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 61 64 53 6c 6f 74 22 3a 22 34 38 34 35 30 37 35 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 31 36 32 35 33 38 22 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 22 62 69 64 64 65 72 22 3a 22 73 6d 61 72 74 61 64 73 65 72 76 65 72 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 70 61 67 65 49 64 22 3a 31 38 38 37 31 38 35 2c 22 6e 65 74 77 6f 72 6b 49 64 22 3a 34 35 35 39 2c 22 73 69 74 65 49 64 22 3a 35 37 35 38 31 36 2c 22 66 6f 72 6d 61 74 49 64 22 3a 31 31 39 35 38 33 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: {"bidder":"pubmatic","params":{"adSlot":"4845075","publisherId":"162538"}}, {"bidder":"smartadserver","params":{"pageId":1887185,"networkId":4559,"siteId":575816,"formatId":119583}},
2024-03-11 11:56:36 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 72 69 6e 67 73 65 72 76 65 22 3a 30 2e 30 30 31 7d 2c 22 69 6e 66 6c 61 74 69 6f 6e 22 3a 31 2c 22 66 6c 6f 6f 72 22 3a 30 2e 30 32 7d 3b 0a 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 69 64 3d 22 70 62 6a 73 5f 73 63 72 69 70 74 22 20 64 61 74 61 2d 64 6f 6d 3d 22 68 74 74 70 73 3a 2f 2f 64 33 74 67 6c 69 66 70 64 38 77 68 73 36 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 22 20 73 72 63 3d 22 2f 2f 61 2e 66 73 64 6e 2e 63 6f 6d 2f 63 6f 6e 2f 6a 73 2f 73 66 74 68 65 6d 65 2f 76 65 6e 64 6f 72 2f 62 69 7a 78 2d 70 72 65 62 69 64 2e 6a 73 3f 31 37 30 39 38 32 37 33 39 31 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 69 7a 78 2e 63 6d 70 2e 69 66 43 Data Ascii: 7ff9ringserve":0.001},"inflation":1,"floor":0.02}; </script><script id="pbjs_script" data-dom="https://d3tglifpd8whs6.cloudfront.net" src="//a.fsdn.com/con/js/sftheme/vendor/bizx-prebid.js?1709827391"></script><script> bizx.cmp.ifC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49724	23.83.76.35	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:38 UTC	606	OUT	POST /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive Content-Length: 362 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:38 UTC	362	OUT	Data Raw: 7b 22 73 69 74 65 69 64 22 3a 35 37 35 38 31 36 2c 22 70 61 67 65 69 64 22 3a 31 38 38 37 37 39 37 2c 22 66 6f 72 6d 61 74 69 64 22 3a 31 31 39 35 38 33 2c 22 63 6b 69 64 22 3a 30 2c 22 74 61 67 49 64 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 33 39 32 31 34 38 34 33 32 35 39 31 2d 30 22 2c 22 70 61 67 65 44 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 66 69 6c 65 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 31 2e 31 2e 32 35 2f 64 6f 63 66 65 74 63 68 65 72 5f 31 2e 31 2e 32 35 5f 77 69 6e 33 32 5f 73 65 74 75 70 2e 65 78 65 2f 64 6f 77 6e 6c 6f 61 64 22 2c 22 74 69 6d 65 6f 75 74 22 3a 33 30 30 30 2c 22 62 69 64 49 64 22 3a 22 32 32 64 32 35 34 38 Data Ascii: {"siteid":575816,"pageid":1887797,"formatid":119583,"ckid":0,"tagId":"div-gpt-ad-1392148432591-0","pageDomain":"https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download","timeout":3000,"bidId":"22d2548
2024-03-11 11:56:38 UTC	1417	IN	HTTP/1.1 200 OK content-type: application/json; charset=UTF-8 date: Mon, 11 Mar 2024 11:56:38 GMT access-control-allow-credentials: true access-control-allow-origin: https://sourceforge.net cache-control: no-cache,no-store pragma: no-cache set-cookie: pbw=%24b%3d16999%3b%24o%3d11100; expires=Tue, 11 Mar 2025 11:56:38 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: vs=575816=5885996; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: TestIfCookie=ok; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: TestIfCookieP=ok; expires=Tue, 11 Mar 2025 11:56:38 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: pid=357523025427868812; expires=Tue, 11 Mar 2025 11:56:38 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549986478804&o=1; expires=Tue, 12 Mar 2024 11:56:38 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; expires=Tue, 12 Mar 2024 11:56:38 GMT; domain=.smartadserver.com; path=/; secure; samesite=none transfer-encoding: chunked vary: Origin p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:56:38 UTC	1150	IN	Data Raw: 34 37 32 0d 0a 7b 22 63 70 6d 22 3a 30 2e 30 2c 22 63 75 72 72 65 6e 63 79 22 3a 22 55 53 44 22 2c 22 77 69 64 74 68 22 3a 30 2c 22 68 65 69 67 68 74 22 3a 30 2c 22 61 64 22 3a 6e 75 6c 6c 2c 22 61 64 55 72 6c 22 3a 6e 75 6c 6c 2c 22 64 65 61 6c 49 64 22 3a 6e 75 6c 6c 2c 22 74 74 6c 22 3a 30 2c 22 69 73 4e 65 74 43 70 6d 22 3a 66 61 6c 73 65 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 30 2c 22 63 53 79 6e 63 55 72 6c 22 3a 6e 75 6c 6c 2c 22 69 73 4e 6f 41 64 22 3a 74 72 75 65 2c 22 64 73 70 50 69 78 65 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 63 6d 73 2e 71 75 61 6e 74 73 65 72 76 65 2e 63 6f 6d 2f 70 69 78 65 6c 2f 70 2d 45 74 42 71 55 34 4c 6a 33 59 62 41 76 2e 67 69 66 3f 69 64 6d 61 74 63 68 3d 30 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 Data Ascii: 472{"cpm":0.0,"currency":"USD","width":0,"height":0,"ad":null,"adUrl":null,"dealId":null,"ttl":0,"isNetCpm":false,"creativeId":0,"cSyncUrl":null,"isNoAd":true,"dspPixels":["https://cms.quantserve.com/pixel/p-EtBqU4Lj3YbAv.gif?idmatch=0&gdpr=0&gdpr_conse

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49722	204.237.133.116	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:38 UTC	630	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 1364 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:38 UTC	1364	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 31 30 31 35 38 31 39 37 33 39 37 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 31 37 66 38 63 62 35 30 63 63 32 63 33 33 37 22 2c 22 74 61 67 69 64 22 3a 22 34 37 34 31 35 39 34 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 7d 2c 22 62 69 64 66 6c 6f 6f 72 63 75 72 22 3a 22 55 53 44 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 39 37 30 2c 22 68 22 3a 32 35 30 7d 5d 2c 22 70 6f 73 22 3a 30 2c 22 74 6f 70 66 72 61 6d 65 22 3a 31 7d 7d 2c 7b 22 69 64 22 3a 22 31 38 35 62 31 33 34 30 35 38 38 37 30 37 32 22 2c 22 74 61 67 69 64 22 3a 22 34 37 34 31 35 39 31 22 2c 22 73 65 63 Data Ascii: {"id":"1710158197397","at":1,"cur":["USD"],"imp":[{"id":"17f8cb50cc2c337","tagid":"4741594","secure":1,"ext":{},"bidfloorcur":"USD","banner":{"w":728,"h":90,"format":[{"w":970,"h":250}],"pos":0,"topframe":1}},{"id":"185b13405887072","tagid":"4741591","sec
2024-03-11 11:56:38 UTC	229	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://sourceforge.net Cache-Control: no-cache, no-store, must-revalidate Date: Mon, 11 Mar 2024 11:56:38 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49721	44.230.187.183	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:38 UTC	620	OUT	POST /rtb/bid?src=prebid_prebid_8.13.0 HTTP/1.1 Host: ap.lijit.com Connection: keep-alive Content-Length: 922 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:38 UTC	922	OUT	Data Raw: 7b 22 69 64 22 3a 22 33 31 34 65 35 35 39 63 30 31 63 34 31 31 37 22 2c 22 69 6d 70 22 3a 5b 7b 22 61 64 75 6e 69 74 63 6f 64 65 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 33 39 32 31 34 38 34 33 32 35 39 31 2d 30 22 2c 22 69 64 22 3a 22 31 32 65 61 61 30 65 66 64 64 34 39 62 30 61 22 2c 22 74 61 67 69 64 22 3a 22 33 36 34 36 36 38 22 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 22 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 39 37 30 2c 22 68 22 3a 32 35 30 7d 5d 2c 22 77 22 3a 31 2c 22 68 22 3a 31 7d 2c 22 65 78 74 22 3a 7b 7d 7d 2c 7b 22 61 64 75 6e 69 74 63 6f 64 65 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 33 39 32 31 34 38 34 33 32 35 39 33 2d 30 22 2c 22 69 64 22 3a Data Ascii: {"id":"314e559c01c4117","imp":[{"adunitcode":"div-gpt-ad-1392148432591-0","id":"12eaa0efdd49b0a","tagid":"364668","bidfloor":"","banner":{"format":[{"w":728,"h":90},{"w":970,"h":250}],"w":1,"h":1},"ext":{}},{"adunitcode":"div-gpt-ad-1392148432593-0","id":
2024-03-11 11:56:38 UTC	496	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:38 GMT Content-Type: application/json Content-Length: 94 Connection: close Set-Cookie: ljt_reader=ITYsABZHyF-4XRyhT4uuZCmM;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: https://sourceforge.net Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type Vary: Accept-Encoding, User-Agent
2024-03-11 11:56:38 UTC	94	IN	Data Raw: 7b 22 69 64 22 3a 22 33 31 34 65 35 35 39 63 30 31 63 34 31 31 37 22 2c 22 62 69 64 69 64 22 3a 22 66 33 61 65 30 65 36 63 2d 33 65 31 37 2d 34 35 38 37 2d 38 37 64 30 2d 36 66 33 38 31 63 37 32 65 35 31 37 22 2c 22 65 78 74 22 3a 7b 22 69 69 64 22 3a 31 32 37 38 30 33 34 30 7d 7d Data Ascii: {"id":"314e559c01c4117","bidid":"f3ae0e6c-3e17-4587-87d0-6f381c72e517","ext":{"iid":12780340}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49725	23.83.76.35	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:38 UTC	606	OUT	POST /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive Content-Length: 363 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:38 UTC	363	OUT	Data Raw: 7b 22 73 69 74 65 69 64 22 3a 35 37 35 38 31 36 2c 22 70 61 67 65 69 64 22 3a 31 39 31 31 34 39 35 2c 22 66 6f 72 6d 61 74 69 64 22 3a 31 31 39 35 38 33 2c 22 63 6b 69 64 22 3a 30 2c 22 74 61 67 49 64 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 33 39 32 31 34 38 34 33 32 35 39 33 2d 30 22 2c 22 70 61 67 65 44 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 66 69 6c 65 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 31 2e 31 2e 32 35 2f 64 6f 63 66 65 74 63 68 65 72 5f 31 2e 31 2e 32 35 5f 77 69 6e 33 32 5f 73 65 74 75 70 2e 65 78 65 2f 64 6f 77 6e 6c 6f 61 64 22 2c 22 74 69 6d 65 6f 75 74 22 3a 33 30 30 30 2c 22 62 69 64 49 64 22 3a 22 32 33 38 30 36 33 35 Data Ascii: {"siteid":575816,"pageid":1911495,"formatid":119583,"ckid":0,"tagId":"div-gpt-ad-1392148432593-0","pageDomain":"https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download","timeout":3000,"bidId":"2380635
2024-03-11 11:56:38 UTC	1418	IN	HTTP/1.1 200 OK content-type: application/json; charset=UTF-8 date: Mon, 11 Mar 2024 11:56:38 GMT access-control-allow-credentials: true access-control-allow-origin: https://sourceforge.net cache-control: no-cache,no-store pragma: no-cache set-cookie: pbw=%24b%3d16999%3b%24o%3d11100; expires=Tue, 11 Mar 2025 11:56:38 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: vs=575816=5885996; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: TestIfCookie=ok; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: TestIfCookieP=ok; expires=Tue, 11 Mar 2025 11:56:38 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: pid=7223250894893526090; expires=Tue, 11 Mar 2025 11:56:38 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549987995906&o=1; expires=Tue, 12 Mar 2024 11:56:38 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; expires=Tue, 12 Mar 2024 11:56:38 GMT; domain=.smartadserver.com; path=/; secure; samesite=none transfer-encoding: chunked vary: Origin p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:56:38 UTC	1151	IN	Data Raw: 34 37 33 0d 0a 7b 22 63 70 6d 22 3a 30 2e 30 2c 22 63 75 72 72 65 6e 63 79 22 3a 22 55 53 44 22 2c 22 77 69 64 74 68 22 3a 30 2c 22 68 65 69 67 68 74 22 3a 30 2c 22 61 64 22 3a 6e 75 6c 6c 2c 22 61 64 55 72 6c 22 3a 6e 75 6c 6c 2c 22 64 65 61 6c 49 64 22 3a 6e 75 6c 6c 2c 22 74 74 6c 22 3a 30 2c 22 69 73 4e 65 74 43 70 6d 22 3a 66 61 6c 73 65 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 30 2c 22 63 53 79 6e 63 55 72 6c 22 3a 6e 75 6c 6c 2c 22 69 73 4e 6f 41 64 22 3a 74 72 75 65 2c 22 64 73 70 50 69 78 65 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 36 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 55 43 6f 6f 6b 69 65 53 65 74 50 75 67 3f 26 72 64 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 74 62 2d 63 73 79 6e 63 2e 73 Data Ascii: 473{"cpm":0.0,"currency":"USD","width":0,"height":0,"ad":null,"adUrl":null,"dealId":null,"ttl":0,"isNetCpm":false,"creativeId":0,"cSyncUrl":null,"isNoAd":true,"dspPixels":["https://image6.pubmatic.com/AdServer/UCookieSetPug?&rd=https%3A%2F%2Frtb-csync.s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49726	23.83.76.35	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:38 UTC	606	OUT	POST /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive Content-Length: 345 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:38 UTC	345	OUT	Data Raw: 7b 22 73 69 74 65 69 64 22 3a 35 37 35 38 31 36 2c 22 70 61 67 65 69 64 22 3a 31 39 31 31 34 39 35 2c 22 66 6f 72 6d 61 74 69 64 22 3a 31 31 39 35 38 33 2c 22 63 6b 69 64 22 3a 30 2c 22 74 61 67 49 64 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 33 39 32 31 34 38 34 33 32 35 39 34 2d 30 22 2c 22 70 61 67 65 44 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 66 69 6c 65 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 31 2e 31 2e 32 35 2f 64 6f 63 66 65 74 63 68 65 72 5f 31 2e 31 2e 32 35 5f 77 69 6e 33 32 5f 73 65 74 75 70 2e 65 78 65 2f 64 6f 77 6e 6c 6f 61 64 22 2c 22 74 69 6d 65 6f 75 74 22 3a 33 30 30 30 2c 22 62 69 64 49 64 22 3a 22 32 34 61 62 62 62 62 Data Ascii: {"siteid":575816,"pageid":1911495,"formatid":119583,"ckid":0,"tagId":"div-gpt-ad-1392148432594-0","pageDomain":"https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download","timeout":3000,"bidId":"24abbbb
2024-03-11 11:56:38 UTC	1418	IN	HTTP/1.1 200 OK content-type: application/json; charset=UTF-8 date: Mon, 11 Mar 2024 11:56:38 GMT access-control-allow-credentials: true access-control-allow-origin: https://sourceforge.net cache-control: no-cache,no-store pragma: no-cache set-cookie: pbw=%24b%3d16999%3b%24o%3d11100; expires=Tue, 11 Mar 2025 11:56:38 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: vs=575816=5885996; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: TestIfCookie=ok; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: TestIfCookieP=ok; expires=Tue, 11 Mar 2025 11:56:38 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: pid=7882559758155558074; expires=Tue, 11 Mar 2025 11:56:38 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988071309&o=1; expires=Tue, 12 Mar 2024 11:56:38 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; expires=Tue, 12 Mar 2024 11:56:38 GMT; domain=.smartadserver.com; path=/; secure; samesite=none transfer-encoding: chunked vary: Origin p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:56:38 UTC	728	IN	Data Raw: 32 43 43 0d 0a 7b 22 63 70 6d 22 3a 30 2e 30 2c 22 63 75 72 72 65 6e 63 79 22 3a 22 55 53 44 22 2c 22 77 69 64 74 68 22 3a 30 2c 22 68 65 69 67 68 74 22 3a 30 2c 22 61 64 22 3a 6e 75 6c 6c 2c 22 61 64 55 72 6c 22 3a 6e 75 6c 6c 2c 22 64 65 61 6c 49 64 22 3a 6e 75 6c 6c 2c 22 74 74 6c 22 3a 30 2c 22 69 73 4e 65 74 43 70 6d 22 3a 66 61 6c 73 65 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 30 2c 22 63 53 79 6e 63 55 72 6c 22 3a 6e 75 6c 6c 2c 22 69 73 4e 6f 41 64 22 3a 74 72 75 65 2c 22 64 73 70 50 69 78 65 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 2f 75 6e 69 76 65 72 73 61 6c 2f 76 31 3f 73 75 70 70 6c 79 5f 69 64 3d 76 35 68 4a 4b 39 53 6c 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 Data Ascii: 2CC{"cpm":0.0,"currency":"USD","width":0,"height":0,"ad":null,"adUrl":null,"dealId":null,"ttl":0,"isNetCpm":false,"creativeId":0,"cSyncUrl":null,"isNoAd":true,"dspPixels":["https://match.sharethrough.com/universal/v1?supply_id=v5hJK9Sl&gdpr=0&gdpr_conse

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49732	172.64.154.159	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:38 UTC	704	OUT	GET /conversion_outbound_tracker/sf HTTP/1.1 Host: c.sf-syn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:38 UTC	454	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:38 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-UA-Compatible: IE=edge,chrome=1 Permissions-Policy: geolocation=(), microphone=(), camera=(), payment=(), document-domain=(), display-capture=(), autoplay=() Feature-Policy: geolocation 'none'; microphone 'none'; camera 'none'; payment 'none'; document-domain 'none'; display-capture 'none'; autoplay 'none'
2024-03-11 11:56:38 UTC	5417	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 66 6f 72 6d 2d 61 63 74 69 6f 6e 20 27 73 65 6c 66 27 20 6c 69 73 74 73 2e 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 73 65 6c 66 27 20 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 6c 74 20 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2e 67 69 20 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 2e 63 72 20 68 74 74 70 3a 2f 2f 62 2e 73 66 2d 73 79 6e 2e 63 6f 6d 20 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 67 72 20 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 67 20 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2e 68 6b 20 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6c Data Ascii: Content-Security-Policy: form-action 'self' lists.sourceforge.net; script-src 'self' adservice.google.lt adservice.google.com.gi adservice.google.co.cr http://b.sf-syn.com adservice.google.gr adservice.google.cg adservice.google.com.hk adservice.google.cl
2024-03-11 11:56:38 UTC	1369	IN	Data Raw: 38 62 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 69 66 72 61 6d 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 22 2f 3e 0a 20 20 20 20 20 20 20 20 0a 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 65 74 43 6f 6f 6b 69 65 28 6e 61 6d 65 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 76 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 6d 61 74 63 68 28 27 28 5e 7c 3b 29 20 3f 27 20 2b 20 6e 61 6d 65 20 2b 20 27 3d 28 5b 5e 3b 5d 2a 29 28 3b 7c 24 29 27 29 3b 0a 20 20 20 20 20 20 Data Ascii: 8b2<!DOCTYPE html><html> <head> <title>iframe</title> <meta name="robots" content="noindex, follow"/> <script> function getCookie(name) { var v = document.cookie.match('(^\|;) ?' + name + '=([^;]*)(;\|$)');
2024-03-11 11:56:38 UTC	864	IN	Data Raw: 63 6f 6f 6b 69 65 53 74 72 20 2b 3d 20 27 3b 53 61 6d 65 53 69 74 65 3d 27 20 2b 20 6f 70 74 73 2e 73 61 6d 65 73 69 74 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6f 70 74 73 2e 73 61 6d 65 73 69 74 65 20 3d 3d 3d 20 27 4e 6f 6e 65 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6f 6b 69 65 53 74 72 20 2b 3d 20 27 3b 53 65 63 75 72 65 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 63 6f 6f 6b 69 65 53 74 72 3b 0a 0a 20 20 20 20 20 20 20 20 70 61 79 6c 6f 61 64 2e 65 78 70 69 72 65 73 20 3d 20 64 3b 0a 0a 20 20 20 20 20 20 20 20 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 6e 61 6d 65 2c 20 4a Data Ascii: cookieStr += ';SameSite=' + opts.samesite; if (opts.samesite === 'None') { cookieStr += ';Secure'; } } document.cookie = cookieStr; payload.expires = d; localStorage.setItem(name, J
2024-03-11 11:56:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49723	23.83.76.35	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:38 UTC	606	OUT	POST /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive Content-Length: 345 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:38 UTC	345	OUT	Data Raw: 7b 22 73 69 74 65 69 64 22 3a 35 37 35 38 31 36 2c 22 70 61 67 65 69 64 22 3a 31 39 31 31 34 39 35 2c 22 66 6f 72 6d 61 74 69 64 22 3a 31 31 39 35 38 33 2c 22 63 6b 69 64 22 3a 30 2c 22 74 61 67 49 64 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 33 39 32 31 34 38 34 33 32 35 39 38 2d 30 22 2c 22 70 61 67 65 44 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 66 69 6c 65 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 31 2e 31 2e 32 35 2f 64 6f 63 66 65 74 63 68 65 72 5f 31 2e 31 2e 32 35 5f 77 69 6e 33 32 5f 73 65 74 75 70 2e 65 78 65 2f 64 6f 77 6e 6c 6f 61 64 22 2c 22 74 69 6d 65 6f 75 74 22 3a 33 30 30 30 2c 22 62 69 64 49 64 22 3a 22 32 35 38 37 62 63 61 Data Ascii: {"siteid":575816,"pageid":1911495,"formatid":119583,"ckid":0,"tagId":"div-gpt-ad-1392148432598-0","pageDomain":"https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download","timeout":3000,"bidId":"2587bca
2024-03-11 11:56:39 UTC	1418	IN	HTTP/1.1 200 OK content-type: application/json; charset=UTF-8 date: Mon, 11 Mar 2024 11:56:38 GMT access-control-allow-credentials: true access-control-allow-origin: https://sourceforge.net cache-control: no-cache,no-store pragma: no-cache set-cookie: pbw=%24b%3d16999%3b%24o%3d11100; expires=Tue, 11 Mar 2025 11:56:38 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: vs=575816=5885996; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: TestIfCookie=ok; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: TestIfCookieP=ok; expires=Tue, 11 Mar 2025 11:56:38 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: pid=1899505890594565248; expires=Tue, 11 Mar 2025 11:56:38 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; expires=Tue, 12 Mar 2024 11:56:38 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; expires=Tue, 12 Mar 2024 11:56:38 GMT; domain=.smartadserver.com; path=/; secure; samesite=none transfer-encoding: chunked vary: Origin p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:56:39 UTC	874	IN	Data Raw: 33 35 45 0d 0a 7b 22 63 70 6d 22 3a 30 2e 30 2c 22 63 75 72 72 65 6e 63 79 22 3a 22 55 53 44 22 2c 22 77 69 64 74 68 22 3a 30 2c 22 68 65 69 67 68 74 22 3a 30 2c 22 61 64 22 3a 6e 75 6c 6c 2c 22 61 64 55 72 6c 22 3a 6e 75 6c 6c 2c 22 64 65 61 6c 49 64 22 3a 6e 75 6c 6c 2c 22 74 74 6c 22 3a 30 2c 22 69 73 4e 65 74 43 70 6d 22 3a 66 61 6c 73 65 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 30 2c 22 63 53 79 6e 63 55 72 6c 22 3a 6e 75 6c 6c 2c 22 69 73 4e 6f 41 64 22 3a 74 72 75 65 2c 22 64 73 70 50 69 78 65 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 2e 61 75 64 72 74 65 2e 63 6f 6d 2f 67 65 74 3f 70 3d 4d 35 30 31 39 39 31 36 34 38 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 74 62 2d 63 73 79 6e 63 2e 73 6d 61 72 74 61 64 73 65 72 76 65 72 2e 63 6f Data Ascii: 35E{"cpm":0.0,"currency":"USD","width":0,"height":0,"ad":null,"adUrl":null,"dealId":null,"ttl":0,"isNetCpm":false,"creativeId":0,"cSyncUrl":null,"isNoAd":true,"dspPixels":["https://a.audrte.com/get?p=M501991648&r=https%3A%2F%2Frtb-csync.smartadserver.co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49728	52.8.138.210	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:38 UTC	628	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 769 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:38 UTC	769	OUT	Data Raw: 7b 22 69 64 22 3a 22 37 35 35 36 34 35 66 62 2d 30 66 39 34 2d 34 30 64 31 2d 62 64 37 34 2d 31 31 31 31 64 36 61 37 37 33 39 66 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 33 30 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 66 69 6c 65 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 31 2e 31 2e 32 35 2f 64 6f 63 66 65 74 63 68 65 72 5f 31 2e 31 2e 32 35 5f 77 69 6e 33 32 5f 73 65 74 75 70 2e 65 78 65 2f 64 6f 77 6e 6c 6f 61 64 22 2c 22 72 65 66 22 3a 6e 75 6c 6c 2c 22 70 75 62 6c 69 73 68 65 72 22 Data Ascii: {"id":"755645fb-0f94-40d1-bd74-1111d6a7739f","at":1,"cur":["USD"],"tmax":3000,"site":{"domain":"sourceforge.net","page":"https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download","ref":null,"publisher"
2024-03-11 11:56:39 UTC	497	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:39 GMT Content-Type: application/json; charset=utf-8 Content-Length: 693 Connection: close Set-Cookie: stx_user_id=b6a7905b-7647-4076-aa36-593faf81a60f; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:56:39 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate x-openrtb-version: 2.5 Access-Control-Allow-Origin: https://sourceforge.net Access-Control-Allow-Credentials: true
2024-03-11 11:56:39 UTC	693	IN	Data Raw: 7b 22 63 6f 6f 6b 69 65 53 79 6e 63 55 72 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 68 61 72 65 74 68 72 6f 75 67 68 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 38 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 49 6d 67 53 79 6e 63 3f 70 3d 31 35 36 35 35 37 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 70 75 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 69 6d 61 67 65 34 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 25 32 46 41 64 53 65 72 76 65 72 25 32 46 53 50 75 67 25 33 46 70 25 33 44 31 35 Data Ascii: {"cookieSyncUrls":["https://match.adsrvr.org/track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent=","https://image8.pubmatic.com/AdServer/ImgSync?p=156557&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D15

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49729	52.8.138.210	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:38 UTC	628	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 770 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:38 UTC	770	OUT	Data Raw: 7b 22 69 64 22 3a 22 37 35 35 36 34 35 66 62 2d 30 66 39 34 2d 34 30 64 31 2d 62 64 37 34 2d 31 31 31 31 64 36 61 37 37 33 39 66 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 33 30 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 66 69 6c 65 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 31 2e 31 2e 32 35 2f 64 6f 63 66 65 74 63 68 65 72 5f 31 2e 31 2e 32 35 5f 77 69 6e 33 32 5f 73 65 74 75 70 2e 65 78 65 2f 64 6f 77 6e 6c 6f 61 64 22 2c 22 72 65 66 22 3a 6e 75 6c 6c 2c 22 70 75 62 6c 69 73 68 65 72 22 Data Ascii: {"id":"755645fb-0f94-40d1-bd74-1111d6a7739f","at":1,"cur":["USD"],"tmax":3000,"site":{"domain":"sourceforge.net","page":"https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download","ref":null,"publisher"
2024-03-11 11:56:39 UTC	497	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:39 GMT Content-Type: application/json; charset=utf-8 Content-Length: 613 Connection: close Set-Cookie: stx_user_id=c0d43d82-8e4c-4ee0-a0dc-61467e0a79fb; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:56:39 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate x-openrtb-version: 2.5 Access-Control-Allow-Origin: https://sourceforge.net Access-Control-Allow-Credentials: true
2024-03-11 11:56:39 UTC	613	IN	Data Raw: 7b 22 63 6f 6f 6b 69 65 53 79 6e 63 55 72 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 68 61 72 65 74 68 72 6f 75 67 68 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 73 74 78 2d 6d 61 74 63 68 2e 64 6f 74 6f 6d 69 2e 63 6f 6d 2f 6d 61 74 63 68 2f 62 6f 75 6e 63 65 2f 63 75 72 72 65 6e 74 3f 6e 65 74 77 6f 72 6b 49 64 3d 34 34 34 31 30 26 76 65 72 73 69 6f 6e 3d 31 26 6e 75 69 64 3d 63 30 64 34 33 64 38 32 2d 38 65 34 63 2d 34 65 65 30 2d 61 30 64 63 2d 36 31 34 36 37 65 30 61 37 39 66 62 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d Data Ascii: {"cookieSyncUrls":["https://match.adsrvr.org/track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent=","https://stx-match.dotomi.com/match/bounce/current?networkId=44410&version=1&nuid=c0d43d82-8e4c-4ee0-a0dc-61467e0a79fb&gdpr=0&gdpr_consent=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49730	52.8.138.210	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:38 UTC	628	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 752 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:38 UTC	752	OUT	Data Raw: 7b 22 69 64 22 3a 22 37 35 35 36 34 35 66 62 2d 30 66 39 34 2d 34 30 64 31 2d 62 64 37 34 2d 31 31 31 31 64 36 61 37 37 33 39 66 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 33 30 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 66 69 6c 65 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 31 2e 31 2e 32 35 2f 64 6f 63 66 65 74 63 68 65 72 5f 31 2e 31 2e 32 35 5f 77 69 6e 33 32 5f 73 65 74 75 70 2e 65 78 65 2f 64 6f 77 6e 6c 6f 61 64 22 2c 22 72 65 66 22 3a 6e 75 6c 6c 2c 22 70 75 62 6c 69 73 68 65 72 22 Data Ascii: {"id":"755645fb-0f94-40d1-bd74-1111d6a7739f","at":1,"cur":["USD"],"tmax":3000,"site":{"domain":"sourceforge.net","page":"https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download","ref":null,"publisher"
2024-03-11 11:56:39 UTC	497	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:39 GMT Content-Type: application/json; charset=utf-8 Content-Length: 788 Connection: close Set-Cookie: stx_user_id=b17a9fad-e0ae-419e-b135-bf6ad0aa70f2; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:56:39 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate x-openrtb-version: 2.5 Access-Control-Allow-Origin: https://sourceforge.net Access-Control-Allow-Credentials: true
2024-03-11 11:56:39 UTC	788	IN	Data Raw: 7b 22 63 6f 6f 6b 69 65 53 79 6e 63 55 72 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 68 61 72 65 74 68 72 6f 75 67 68 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 73 2e 61 64 2e 73 6d 61 61 74 6f 2e 6e 65 74 2f 63 2f 3f 61 64 45 78 49 6e 69 74 3d 73 26 72 65 64 69 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 74 63 68 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 25 32 46 73 79 6e 63 25 32 46 76 31 25 33 46 73 6f 75 72 63 65 5f 69 64 25 33 44 78 54 46 4a 62 4c 62 73 33 37 74 79 68 62 4b 73 50 50 39 56 43 32 63 6d 25 32 36 73 6f 75 72 Data Ascii: {"cookieSyncUrls":["https://match.adsrvr.org/track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent=","https://s.ad.smaato.net/c/?adExInit=s&redir=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DxTFJbLbs37tyhbKsPP9VC2cm%26sour

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49731	104.254.151.68	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:38 UTC	601	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 1393 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:38 UTC	1393	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 7b 22 77 69 64 74 68 22 3a 39 37 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 5d 2c 22 70 72 69 6d 61 72 79 5f 73 69 7a 65 22 3a 7b 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 22 61 64 5f 74 79 70 65 73 22 3a 5b 22 62 61 6e 6e 65 72 22 5d 2c 22 75 75 69 64 22 3a 22 32 37 33 66 32 37 66 38 32 34 34 63 64 64 62 22 2c 22 69 64 22 3a 39 32 36 35 30 39 36 2c 22 61 6c 6c 6f 77 5f 73 6d 61 6c 6c 65 72 5f 73 69 7a 65 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 5f 70 6d 74 5f 72 75 6c 65 22 3a 66 61 6c 73 65 2c 22 70 72 65 62 69 64 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 70 73 61 22 3a 74 72 75 65 Data Ascii: {"tags":[{"sizes":[{"width":728,"height":90},{"width":970,"height":250}],"primary_size":{"width":728,"height":90},"ad_types":["banner"],"uuid":"273f27f8244cddb","id":9265096,"allow_smaller_sizes":false,"use_pmt_rule":false,"prebid":true,"disable_psa":true
2024-03-11 11:56:39 UTC	1565	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Mon, 11 Mar 2024 11:56:39 GMT Content-Type: application/json; charset=utf-8 Content-Length: 484 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://sourceforge.net Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 1bf57967-1a4c-41e3-9ec7-5befa5140f51 Set-Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:56:39 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: icu=ChgIkPoyEAoYASABKAEw9-K7rwY4AUABSAEQ9-K7rwYYAA..; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:56:39 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 27-Feb-2034 11:56:39 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=7822940101119878936; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:56:39 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.105.38; 154.16.105.38; 904.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com
2024-03-11 11:56:39 UTC	484	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 61 67 73 22 3a 5b 7b 22 75 75 69 64 22 3a 22 32 37 33 66 32 37 66 38 32 34 34 63 64 64 62 22 2c 22 74 61 67 5f 69 64 22 3a 39 32 36 35 30 39 36 2c 22 61 75 63 74 69 6f 6e 5f 69 64 22 3a 22 32 32 32 35 39 37 30 31 39 37 31 38 32 37 32 31 32 33 30 22 2c 22 6e 6f 62 69 64 22 3a 74 72 75 65 2c 22 61 64 5f 70 72 6f 66 69 6c 65 5f 69 64 22 3a 38 37 35 31 30 31 7d 2c 7b 22 75 75 69 64 22 3a 22 32 38 33 61 64 66 31 33 35 65 38 62 30 64 36 22 2c 22 74 61 67 5f 69 64 22 3a 39 32 36 35 30 39 39 2c 22 61 75 63 74 69 6f 6e 5f 69 64 22 3a 22 36 39 39 32 31 33 39 34 37 35 38 35 39 38 35 37 32 30 22 2c 22 6e 6f 62 69 64 22 3a 74 72 75 65 2c 22 61 64 5f 70 72 6f 66 69 6c 65 5f 69 64 22 3a 38 37 35 31 30 31 7d Data Ascii: {"version":"3.0.0","tags":[{"uuid":"273f27f8244cddb","tag_id":9265096,"auction_id":"2225970197182721230","nobid":true,"ad_profile_id":875101},{"uuid":"283adf135e8b0d6","tag_id":9265099,"auction_id":"699213947585985720","nobid":true,"ad_profile_id":875101}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49727	52.8.138.210	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:38 UTC	628	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 752 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:38 UTC	752	OUT	Data Raw: 7b 22 69 64 22 3a 22 37 35 35 36 34 35 66 62 2d 30 66 39 34 2d 34 30 64 31 2d 62 64 37 34 2d 31 31 31 31 64 36 61 37 37 33 39 66 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 33 30 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 66 69 6c 65 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 31 2e 31 2e 32 35 2f 64 6f 63 66 65 74 63 68 65 72 5f 31 2e 31 2e 32 35 5f 77 69 6e 33 32 5f 73 65 74 75 70 2e 65 78 65 2f 64 6f 77 6e 6c 6f 61 64 22 2c 22 72 65 66 22 3a 6e 75 6c 6c 2c 22 70 75 62 6c 69 73 68 65 72 22 Data Ascii: {"id":"755645fb-0f94-40d1-bd74-1111d6a7739f","at":1,"cur":["USD"],"tmax":3000,"site":{"domain":"sourceforge.net","page":"https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download","ref":null,"publisher"
2024-03-11 11:56:39 UTC	497	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:39 GMT Content-Type: application/json; charset=utf-8 Content-Length: 541 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:56:39 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate x-openrtb-version: 2.5 Access-Control-Allow-Origin: https://sourceforge.net Access-Control-Allow-Credentials: true
2024-03-11 11:56:39 UTC	541	IN	Data Raw: 7b 22 63 6f 6f 6b 69 65 53 79 6e 63 55 72 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 68 61 72 65 74 68 72 6f 75 67 68 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 65 78 63 68 61 6e 67 65 2f 73 79 6e 63 2e 70 68 70 3f 70 3d 31 38 36 39 34 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 70 6d 2e 77 35 35 63 2e 6e 65 74 2f 70 69 6e 67 5f 6d 61 74 63 68 2e 67 69 66 3f 73 74 3d 53 68 61 72 65 54 68 72 6f 75 67 68 26 72 75 72 6c 3d Data Ascii: {"cookieSyncUrls":["https://match.adsrvr.org/track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent=","https://pixel.rubiconproject.com/exchange/sync.php?p=18694&gdpr=0&gdpr_consent=","https://pm.w55c.net/ping_match.gif?st=ShareThrough&rurl=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49739	23.83.76.44	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:39 UTC	729	OUT	GET /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; pid=357523025427868812; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549986478804&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6
2024-03-11 11:56:39 UTC	123	IN	HTTP/1.1 405 Method Not Allowed content-length: 0 date: Mon, 11 Mar 2024 11:56:38 GMT allow: POST connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49740	52.27.166.248	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:39 UTC	413	OUT	GET /rtb/bid?src=prebid_prebid_8.13.0 HTTP/1.1 Host: ap.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=ITYsABZHyF-4XRyhT4uuZCmM
2024-03-11 11:56:39 UTC	271	IN	HTTP/1.1 204 No Content Date: Mon, 11 Mar 2024 11:56:39 GMT Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49746	52.9.62.96	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:39 UTC	434	OUT	GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6a7905b-7647-4076-aa36-593faf81a60f
2024-03-11 11:56:40 UTC	101	IN	HTTP/1.1 404 Not Found Date: Mon, 11 Mar 2024 11:56:39 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49751	23.83.76.44	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:39 UTC	730	OUT	GET /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=7882559758155558074; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988071309&o=1
2024-03-11 11:56:40 UTC	123	IN	HTTP/1.1 405 Method Not Allowed content-length: 0 date: Mon, 11 Mar 2024 11:56:39 GMT allow: POST connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49752	172.67.41.60	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:40 UTC	544	OUT	GET /tag?o=5098683085881344&upapi=true HTTP/1.1 Host: btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:40 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:40 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=300, must-revalidate, stale-if-error=3600, stale-while-revalidate=300 Etag: W/"97ace0f7d442746183b9e2ffdfb6dfbd" Last-Modified: Mon, 11 Mar 2024 11:56:09 GMT Vary: Origin Via: 1.1 google CF-Cache-Status: HIT Age: 18 Server: cloudflare CF-RAY: 862b5ccfaddd09fb-LAS
2024-03-11 11:56:40 UTC	924	IN	Data Raw: 37 64 65 34 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 73 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 73 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 2c 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 Data Ascii: 7de4!function(){"use strict";var e=function(){return e=Object.assign\|\|function(e){for(var t,n=1,s=arguments.length;n<s;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e},e.apply(this,arguments)};function t(e
2024-03-11 11:56:40 UTC	1369	IN	Data Raw: 7c 7c 28 28 72 3d 73 2e 72 65 74 75 72 6e 29 26 26 72 2e 63 61 6c 6c 28 73 29 2c 30 29 3a 73 2e 6e 65 78 74 29 26 26 21 28 72 3d 72 2e 63 61 6c 6c 28 73 2c 69 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 72 3b 73 77 69 74 63 68 28 73 3d 30 2c 72 26 26 28 69 3d 5b 32 26 69 5b 30 5d 2c 72 2e 76 61 6c 75 65 5d 29 2c 69 5b 30 5d 29 7b 63 61 73 65 20 30 3a 63 61 73 65 20 31 3a 72 3d 69 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 20 6f 2e 6c 61 62 65 6c 2b 2b 2c 7b 76 61 6c 75 65 3a 69 5b 31 5d 2c 64 6f 6e 65 3a 21 31 7d 3b 63 61 73 65 20 35 3a 6f 2e 6c 61 62 65 6c 2b 2b 2c 73 3d 69 5b 31 5d 2c 69 3d 5b 30 5d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 20 37 3a 69 3d 6f 2e 6f 70 73 2e 70 6f 70 28 29 2c 6f 2e 74 72 79 73 2e 70 6f 70 28 29 Data Ascii: \|\|((r=s.return)&&r.call(s),0):s.next)&&!(r=r.call(s,i[1])).done)return r;switch(s=0,r&&(i=[2&i[0],r.value]),i[0]){case 0:case 1:r=i;break;case 4:return o.label++,{value:i[1],done:!1};case 5:o.label++,s=i[1],i=[0];continue;case 7:i=o.ops.pop(),o.trys.pop()
2024-03-11 11:56:40 UTC	1369	IN	Data Raw: 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 69 2c 61 2c 63 3b 72 65 74 75 72 6e 20 6e 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 73 77 69 74 63 68 28 6e 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 6e 2e 74 72 79 73 2e 70 75 73 68 28 5b 30 2c 33 2c 2c 34 5d 29 2c 77 69 6e 64 6f 77 2e 5f 5f 62 74 3d 77 69 6e 64 6f 77 2e 5f 5f 62 74 7c 7c 7b 7d 2c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 5f 5f 62 74 2e 63 75 73 74 6f 6d 44 65 74 65 63 74 41 64 42 6c 6f 63 6b 3f 5b 33 2c 32 5d 3a 5b 34 2c 77 69 6e 64 6f 77 2e 5f 5f 62 74 2e 63 75 73 74 6f 6d 44 65 74 65 63 74 41 64 42 6c 6f 63 6b 28 29 5d 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 5b 32 2c 6e 2e 73 65 6e 74 Data Ascii: id 0,(function(){var e,t,i,a,c;return n(this,(function(n){switch(n.label){case 0:return n.trys.push([0,3,,4]),window.__bt=window.__bt\|\|{},"function"!=typeof window.__bt.customDetectAdBlock?[3,2]:[4,window.__bt.customDetectAdBlock()];case 1:return[2,n.sent
2024-03-11 11:56:40 UTC	1369	IN	Data Raw: 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 28 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 7c 7c 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 7d 76 61 72 20 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 77 69 6e 64 6f 77 3b 74 72 79 7b 69 66 28 74 6f 70 2e 64 6f 63 75 6d 65 6e 74 29 72 65 74 75 72 6e 20 74 6f 70 7d 63 61 74 63 68 28 65 29 7b 7d 74 72 79 7b 66 6f 72 28 3b 65 2e 70 61 72 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 3b 29 65 3d 65 2e 70 61 72 65 6e 74 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 65 7d 28 29 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 22 22 21 3d 3d 64 6f Data Ascii: }))}function l(e){(window.document.body\|\|window.document.documentElement).removeChild(e)}var u=function(){var e=window;try{if(top.document)return top}catch(e){}try{for(;e.parent.document;)e=e.parent}catch(e){}return e}();var d=function(){try{return""!==do
2024-03-11 11:56:40 UTC	1369	IN	Data Raw: 3b 66 6f 72 28 76 61 72 20 73 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 28 6e 2b 31 2d 74 29 29 2b 74 2c 72 3d 22 22 2c 69 3d 30 3b 69 3c 73 3b 69 2b 2b 29 72 2b 3d 65 2e 63 68 61 72 41 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 65 2e 6c 65 6e 67 74 68 29 29 3b 72 65 74 75 72 6e 20 72 7d 28 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 22 2c 65 2c 74 29 7d 79 3d 22 35 30 39 38 36 38 33 30 38 35 38 38 31 33 34 34 22 2c 49 3d 22 62 74 6c 6f 61 64 65 72 2e 63 6f 6d 22 2c 5f 3d 22 61 70 69 2e 62 74 6c 6f 61 64 65 72 2e 63 6f 6d 22 2c 45 3d 22 32 Data Ascii: ;for(var s=Math.floor(Math.random()(n+1-t))+t,r="",i=0;i<s;i++)r+=e.charAt(Math.floor(Math.random()e.length));return r}("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",e,t)}y="5098683085881344",I="btloader.com",_="api.btloader.com",E="2
2024-03-11 11:56:40 UTC	1369	IN	Data Raw: 5b 32 5d 2e 72 65 70 6c 61 63 65 28 2f 5c 2b 2f 67 2c 22 20 22 29 29 3a 22 22 3a 6e 75 6c 6c 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 69 66 28 77 69 6e 64 6f 77 2e 5f 5f 62 74 3d 77 69 6e 64 6f 77 2e 5f 5f 62 74 7c 7c 7b 7d 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 5f 5f 62 74 2e 63 75 73 74 6f 6d 44 65 74 65 63 74 44 6f 6d 61 69 6e 29 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 5f 5f 62 74 2e 63 75 73 74 6f 6d 44 65 74 65 63 74 44 6f 6d 61 69 6e 28 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 28 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 70 2e 68 6f 73 74 6e 61 6d 65 3b 74 72 79 7b 69 66 28 22 64 69 73 71 75 73 73 65 72 76 69 63 65 2e 63 6f 6d 22 3d 3d 3d 74 29 7b 76 61 72 20 6e 3d 75 Data Ascii: [2].replace(/\+/g," ")):"":null},g=function(){try{if(window.__bt=window.__bt\|\|{},"function"==typeof window.__bt.customDetectDomain)return window.__bt.customDetectDomain()}catch(e){}}()\|\|function(){var e,t=p.hostname;try{if("disqusservice.com"===t){var n=u
2024-03-11 11:56:40 UTC	1369	IN	Data Raw: 3e 2d 31 7c 7c 75 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 49 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3e 2d 31 29 26 26 28 6d 3d 21 30 2c 53 3d 4c 5b 49 5d 2c 74 2e 77 65 62 73 69 74 65 49 44 3d 6e 75 6c 6c 21 3d 3d 28 61 3d 53 2e 77 29 26 26 76 6f 69 64 20 30 21 3d 3d 61 3f 61 3a 53 2e 77 65 62 73 69 74 65 5f 69 64 2c 74 2e 63 6f 6e 74 65 6e 74 45 6e 61 62 6c 65 64 3d 6e 75 6c 6c 21 3d 3d 28 63 3d 53 2e 63 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 63 3f 63 3a 53 2e 63 6f 6e 74 65 6e 74 5f 65 6e 61 62 6c 65 64 2c 74 2e 6d 6f 62 69 6c 65 43 6f 6e 74 65 6e 74 45 6e 61 62 6c 65 64 3d 6e 75 6c 6c 21 3d 3d 28 6c 3d 53 2e 6d 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 6c 3f 6c 3a 53 2e 6d 6f 62 69 6c 65 5f 63 6f 6e 74 65 6e Data Ascii: >-1\|\|u.location.hostname.indexOf(I.toLowerCase())>-1)&&(m=!0,S=L[I],t.websiteID=null!==(a=S.w)&&void 0!==a?a:S.website_id,t.contentEnabled=null!==(c=S.ce)&&void 0!==c?c:S.content_enabled,t.mobileContentEnabled=null!==(l=S.me)&&void 0!==l?l:S.mobile_conten
2024-03-11 11:56:40 UTC	1369	IN	Data Raw: 70 61 73 73 65 64 20 66 6f 72 20 24 7b 65 7d 20 24 7b 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 22 22 7d 60 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 22 54 43 4d 6f 64 65 6c 45 72 72 6f 72 22 7d 7d 63 6c 61 73 73 20 42 7b 73 74 61 74 69 63 20 44 49 43 54 3d 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2d 5f 22 3b 73 74 61 74 69 63 20 52 45 56 45 52 53 45 5f 44 49 43 54 3d 6e 65 77 20 4d 61 70 28 5b 5b 22 41 22 2c 30 5d 2c 5b 22 42 22 2c 31 5d 2c 5b 22 43 22 2c 32 5d 2c 5b 22 44 22 2c 33 5d 2c 5b 22 Data Ascii: passed for ${e} ${arguments.length>2&&void 0!==arguments[2]?arguments[2]:""}`),this.name="TCModelError"}}class B{static DICT="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";static REVERSE_DICT=new Map([["A",0],["B",1],["C",2],["D",3],["
2024-03-11 11:56:40 UTC	1369	IN	Data Raw: 74 20 6e 3d 74 68 69 73 2e 64 65 65 70 43 6c 6f 6e 65 28 74 68 69 73 5b 74 5d 29 3b 76 6f 69 64 20 30 21 3d 3d 6e 26 26 28 65 5b 74 5d 3d 6e 29 7d 29 29 2c 65 7d 64 65 65 70 43 6c 6f 6e 65 28 65 29 7b 63 6f 6e 73 74 20 74 3d 74 79 70 65 6f 66 20 65 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 7c 7c 22 73 74 72 69 6e 67 22 3d 3d 3d 74 7c 7c 22 62 6f 6f 6c 65 61 6e 22 3d 3d 3d 74 29 72 65 74 75 72 6e 20 65 3b 69 66 28 6e 75 6c 6c 21 3d 3d 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 63 6c 6f 6e 65 29 72 65 74 75 72 6e 20 65 2e 63 6c 6f 6e 65 28 29 3b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 61 74 65 29 72 65 74 75 72 6e 20 6e 65 77 20 44 61 74 65 28 65 2e 67 65 74 54 Data Ascii: t n=this.deepClone(this[t]);void 0!==n&&(e[t]=n)})),e}deepClone(e){const t=typeof e;if("number"===t\|\|"string"===t\|\|"boolean"===t)return e;if(null!==e&&"object"===t){if("function"==typeof e.clone)return e.clone();if(e instanceof Date)return new Date(e.getT
2024-03-11 11:56:40 UTC	1369	IN	Data Raw: 67 68 74 3a 28 65 3d 74 2e 76 61 6c 75 65 2c 74 3d 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 65 7d 72 65 6d 6f 76 65 28 65 29 7b 6c 65 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 74 68 69 73 2e 72 6f 6f 74 2c 6e 3d 6e 75 6c 6c 2c 73 3d 22 6c 65 66 74 22 3b 66 6f 72 28 3b 74 3b 29 69 66 28 65 3c 74 2e 76 61 6c 75 65 29 6e 3d 74 2c 74 3d 74 2e 6c 65 66 74 2c 73 3d 22 6c 65 66 74 22 3b 65 6c 73 65 20 69 66 28 65 3e 74 2e 76 61 6c 75 65 29 6e 3d 74 2c 74 3d 74 2e 72 69 67 68 74 2c 73 3d 22 72 69 67 68 74 22 3b 65 6c 73 65 7b 69 66 28 74 2e 6c 65 66 74 7c 7c 74 2e 72 69 67 68 74 29 69 66 28 74 2e 6c 65 66 74 29 69 66 28 74 2e 72 69 Data Ascii: ght:(e=t.value,t=null);return e}remove(e){let t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:this.root,n=null,s="left";for(;t;)if(e<t.value)n=t,t=t.left,s="left";else if(e>t.value)n=t,t=t.right,s="right";else{if(t.left\|\|t.right)if(t.left)if(t.ri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49700	104.18.37.111	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:40 UTC	1280	OUT	GET /directory/tp3/?b=69707&c=13445&z=67089&cb=79bed62052 HTTP/1.1 Host: sourceforge.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFdTcypzJDJDIXQ0IyV8TSs2KyVLUnhDNjRCQG1NaG1ObnslVjt1eEhQVFhlfUt4Q0RZVm83JUwzdTRleEdVdGNxOzQxaF9pO1M-UEdsQyhscUh6QGRHekhJNytYIXlEMlNtVWF-dlY_cWVXSVA8aUVLR0ZRU3w4diY_cypDOEcpNmJ2NWVCJTNnODZvRXA7enw9TV5Xa2w0RnpuOzBzRGhqMTc3ZG8pU0duMT5tLWpvanloN0Z6e0VeNGpPezQ3SHojTHxDR3AhKE1SKWUhSkwzZn1NNzJsY21kSG9qJnhRMDk5PiMqNjJvQUxoMVllP2pkKFA0O2tWJGw7ZipwRHBZOzZBaUppY0FPZHxZTnlBKEhvYHhCTz92VkZSe31TPkYifQ.KgEiMfdHyRq89be7fSK-sXsSnVuiJxBAXYJndndkHVc
2024-03-11 11:56:40 UTC	649	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:40 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-powered-by: PHP/5.3.29 pragma: no-cache Cache-Control: private, max-age=0, no-cache expires: Mon, 26 Jul 1997 05:00:00 GMT p3p: CP="CUR ADM OUR NOR STA NID" set-cookie: OAID=a0ecb9d0f3c83307d0b767b524c4f2c4; expires=Tue, 11-Mar-2025 11:56:40 GMT; path=/ x-frame-options: SameOrigin x-content-type-options: nosniff content-security-policy: frame-ancestors 'self'; upgrade-insecure-requests x-robots-tag: noindex CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 862b5ccf089d0adb-LAS alt-svc: h3=":443"; ma=86400
2024-03-11 11:56:40 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49753	104.254.148.252	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:40 UTC	437	OUT	GET /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: icu=ChgIkPoyEAoYASABKAEw9-K7rwY4AUABSAEQ9-K7rwYYAA..; uuid2=7822940101119878936
2024-03-11 11:56:40 UTC	1360	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Mon, 11 Mar 2024 11:56:40 GMT Content-Type: application/json; charset=utf-8 Content-Length: 57 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 0ca92771-22fa-4bcf-a358-e2bd75d35d7d Set-Cookie: XANDR_PANID=3nI6clyYzfbnEpT9fRyZHeeDLf-D2s87ENd4pOyw4BFTVoas2vYN3I0kAmg30iZxhJeWONbdfUtKXwuvlFOruOXDykPNWOUWZiMtJDNoxzc.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:56:40 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 27-Feb-2034 11:56:40 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=7822940101119878936; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:56:40 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.105.38; 154.16.105.38; 894.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com
2024-03-11 11:56:40 UTC	57	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6a 73 6f 6e 70 20 72 65 71 75 69 72 65 73 20 61 20 75 72 69 65 6e 63 6f 64 65 64 20 71 75 65 72 79 73 74 72 69 6e 67 20 70 61 72 61 6d 22 7d Data Ascii: {"error":"jsonp requires a uriencoded querystring param"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49755	52.9.62.96	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:40 UTC	434	OUT	GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=c0d43d82-8e4c-4ee0-a0dc-61467e0a79fb
2024-03-11 11:56:40 UTC	101	IN	HTTP/1.1 404 Not Found Date: Mon, 11 Mar 2024 11:56:40 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49756	104.18.37.111	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:40 UTC	1280	OUT	GET /directory/tp3/?b=69513&c=13409&z=66895&cb=8b302bed4f HTTP/1.1 Host: sourceforge.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFdTcypzJDJDIXQ0IyV8TSs2KyVLUnhDNjRCQG1NaG1ObnslVjt1eEhQVFhlfUt4Q0RZVm83JUwzdTRleEdVdGNxOzQxaF9pO1M-UEdsQyhscUh6QGRHekhJNytYIXlEMlNtVWF-dlY_cWVXSVA8aUVLR0ZRU3w4diY_cypDOEcpNmJ2NWVCJTNnODZvRXA7enw9TV5Xa2w0RnpuOzBzRGhqMTc3ZG8pU0duMT5tLWpvanloN0Z6e0VeNGpPezQ3SHojTHxDR3AhKE1SKWUhSkwzZn1NNzJsY21kSG9qJnhRMDk5PiMqNjJvQUxoMVllP2pkKFA0O2tWJGw7ZipwRHBZOzZBaUppY0FPZHxZTnlBKEhvYHhCTz92VkZSe31TPkYifQ.KgEiMfdHyRq89be7fSK-sXsSnVuiJxBAXYJndndkHVc
2024-03-11 11:56:40 UTC	649	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:40 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-powered-by: PHP/5.3.29 pragma: no-cache Cache-Control: private, max-age=0, no-cache expires: Mon, 26 Jul 1997 05:00:00 GMT p3p: CP="CUR ADM OUR NOR STA NID" set-cookie: OAID=b813ccf77b02234e468ccbbbf0477be1; expires=Tue, 11-Mar-2025 11:56:40 GMT; path=/ x-frame-options: SameOrigin x-content-type-options: nosniff content-security-policy: frame-ancestors 'self'; upgrade-insecure-requests x-robots-tag: noindex CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 862b5cd25f480ad9-LAS alt-svc: h3=":443"; ma=86400
2024-03-11 11:56:40 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49757	104.18.37.111	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:40 UTC	1280	OUT	GET /directory/tp3/?b=57541&c=11165&z=54863&cb=d6140d077d HTTP/1.1 Host: sourceforge.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFdTcypzJDJDIXQ0IyV8TSs2KyVLUnhDNjRCQG1NaG1ObnslVjt1eEhQVFhlfUt4Q0RZVm83JUwzdTRleEdVdGNxOzQxaF9pO1M-UEdsQyhscUh6QGRHekhJNytYIXlEMlNtVWF-dlY_cWVXSVA8aUVLR0ZRU3w4diY_cypDOEcpNmJ2NWVCJTNnODZvRXA7enw9TV5Xa2w0RnpuOzBzRGhqMTc3ZG8pU0duMT5tLWpvanloN0Z6e0VeNGpPezQ3SHojTHxDR3AhKE1SKWUhSkwzZn1NNzJsY21kSG9qJnhRMDk5PiMqNjJvQUxoMVllP2pkKFA0O2tWJGw7ZipwRHBZOzZBaUppY0FPZHxZTnlBKEhvYHhCTz92VkZSe31TPkYifQ.KgEiMfdHyRq89be7fSK-sXsSnVuiJxBAXYJndndkHVc
2024-03-11 11:56:40 UTC	649	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:40 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-powered-by: PHP/5.3.29 pragma: no-cache Cache-Control: private, max-age=0, no-cache expires: Mon, 26 Jul 1997 05:00:00 GMT p3p: CP="CUR ADM OUR NOR STA NID" set-cookie: OAID=28ae38e612051c8477673b12cec7be62; expires=Tue, 11-Mar-2025 11:56:40 GMT; path=/ x-frame-options: SameOrigin x-content-type-options: nosniff content-security-policy: frame-ancestors 'self'; upgrade-insecure-requests x-robots-tag: noindex CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 862b5cd26ed909ff-LAS alt-svc: h3=":443"; ma=86400
2024-03-11 11:56:40 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49762	104.18.37.111	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:40 UTC	1279	OUT	GET /directory/tp3/?b=50727&c=9846&z=48052&cb=5a5b4d3b8a HTTP/1.1 Host: sourceforge.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFdTcypzJDJDIXQ0IyV8TSs2KyVLUnhDNjRCQG1NaG1ObnslVjt1eEhQVFhlfUt4Q0RZVm83JUwzdTRleEdVdGNxOzQxaF9pO1M-UEdsQyhscUh6QGRHekhJNytYIXlEMlNtVWF-dlY_cWVXSVA8aUVLR0ZRU3w4diY_cypDOEcpNmJ2NWVCJTNnODZvRXA7enw9TV5Xa2w0RnpuOzBzRGhqMTc3ZG8pU0duMT5tLWpvanloN0Z6e0VeNGpPezQ3SHojTHxDR3AhKE1SKWUhSkwzZn1NNzJsY21kSG9qJnhRMDk5PiMqNjJvQUxoMVllP2pkKFA0O2tWJGw7ZipwRHBZOzZBaUppY0FPZHxZTnlBKEhvYHhCTz92VkZSe31TPkYifQ.KgEiMfdHyRq89be7fSK-sXsSnVuiJxBAXYJndndkHVc
2024-03-11 11:56:41 UTC	649	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:40 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-powered-by: PHP/5.3.29 pragma: no-cache Cache-Control: private, max-age=0, no-cache expires: Mon, 26 Jul 1997 05:00:00 GMT p3p: CP="CUR ADM OUR NOR STA NID" set-cookie: OAID=bd579550819d79b95b1768c142254897; expires=Tue, 11-Mar-2025 11:56:40 GMT; path=/ x-frame-options: SameOrigin x-content-type-options: nosniff content-security-policy: frame-ancestors 'self'; upgrade-insecure-requests x-robots-tag: noindex CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 862b5cd38e9f0add-LAS alt-svc: h3=":443"; ma=86400
2024-03-11 11:56:41 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49765	23.83.76.44	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:40 UTC	730	OUT	GET /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=7223250894893526090; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549987995906&o=1
2024-03-11 11:56:40 UTC	123	IN	HTTP/1.1 405 Method Not Allowed content-length: 0 date: Mon, 11 Mar 2024 11:56:40 GMT allow: POST connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49761	104.18.37.111	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:40 UTC	1280	OUT	GET /directory/tp3/?b=66907&c=12915&z=64281&cb=969ed981b1 HTTP/1.1 Host: sourceforge.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFdTcypzJDJDIXQ0IyV8TSs2KyVLUnhDNjRCQG1NaG1ObnslVjt1eEhQVFhlfUt4Q0RZVm83JUwzdTRleEdVdGNxOzQxaF9pO1M-UEdsQyhscUh6QGRHekhJNytYIXlEMlNtVWF-dlY_cWVXSVA8aUVLR0ZRU3w4diY_cypDOEcpNmJ2NWVCJTNnODZvRXA7enw9TV5Xa2w0RnpuOzBzRGhqMTc3ZG8pU0duMT5tLWpvanloN0Z6e0VeNGpPezQ3SHojTHxDR3AhKE1SKWUhSkwzZn1NNzJsY21kSG9qJnhRMDk5PiMqNjJvQUxoMVllP2pkKFA0O2tWJGw7ZipwRHBZOzZBaUppY0FPZHxZTnlBKEhvYHhCTz92VkZSe31TPkYifQ.KgEiMfdHyRq89be7fSK-sXsSnVuiJxBAXYJndndkHVc
2024-03-11 11:56:41 UTC	649	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:41 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-powered-by: PHP/5.3.29 pragma: no-cache Cache-Control: private, max-age=0, no-cache expires: Mon, 26 Jul 1997 05:00:00 GMT p3p: CP="CUR ADM OUR NOR STA NID" set-cookie: OAID=e012d283a5e1eae18062d3edb9725359; expires=Tue, 11-Mar-2025 11:56:40 GMT; path=/ x-frame-options: SameOrigin x-content-type-options: nosniff content-security-policy: frame-ancestors 'self'; upgrade-insecure-requests x-robots-tag: noindex CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 862b5cd40f5d0a03-LAS alt-svc: h3=":443"; ma=86400
2024-03-11 11:56:41 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49769	172.64.150.145	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:40 UTC	997	OUT	GET /directory/tp3/?b=69707&c=13445&z=67089&cb=79bed62052 HTTP/1.1 Host: sourceforge.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFdTcypzJDJDIXQ0IyV8TSs2KyVLUnhDNjRCQG1NaG1ObnslVjt1eEhQVFhlfUt4Q0RZVm83JUwzdTRleEdVdGNxOzQxaF9pO1M-UEdsQyhscUh6QGRHekhJNytYIXlEMlNtVWF-dlY_cWVXSVA8aUVLR0ZRU3w4diY_cypDOEcpNmJ2NWVCJTNnODZvRXA7enw9TV5Xa2w0RnpuOzBzRGhqMTc3ZG8pU0duMT5tLWpvanloN0Z6e0VeNGpPezQ3SHojTHxDR3AhKE1SKWUhSkwzZn1NNzJsY21kSG9qJnhRMDk5PiMqNjJvQUxoMVllP2pkKFA0O2tWJGw7ZipwRHBZOzZBaUppY0FPZHxZTnlBKEhvYHhCTz92VkZSe31TPkYifQ.KgEiMfdHyRq89be7fSK-sXsSnVuiJxBAXYJndndkHVc; OAID=a0ecb9d0f3c83307d0b767b524c4f2c4
2024-03-11 11:56:41 UTC	649	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:41 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-powered-by: PHP/5.3.29 pragma: no-cache Cache-Control: private, max-age=0, no-cache expires: Mon, 26 Jul 1997 05:00:00 GMT p3p: CP="CUR ADM OUR NOR STA NID" set-cookie: OAID=a0ecb9d0f3c83307d0b767b524c4f2c4; expires=Tue, 11-Mar-2025 11:56:41 GMT; path=/ x-frame-options: SameOrigin x-content-type-options: nosniff content-security-policy: frame-ancestors 'self'; upgrade-insecure-requests x-robots-tag: noindex CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 862b5cd48cfc09f1-LAS alt-svc: h3=":443"; ma=86400
2024-03-11 11:56:41 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49772	130.211.23.194	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:40 UTC	564	OUT	GET /mw/state?bt_env=prod HTTP/1.1 Host: api.btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:41 UTC	203	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Vary: Origin Date: Mon, 11 Mar 2024 11:56:41 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49774	52.9.62.96	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:41 UTC	434	OUT	GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b17a9fad-e0ae-419e-b135-bf6ad0aa70f2
2024-03-11 11:56:41 UTC	101	IN	HTTP/1.1 404 Not Found Date: Mon, 11 Mar 2024 11:56:41 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49775	172.64.150.145	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:41 UTC	997	OUT	GET /directory/tp3/?b=69513&c=13409&z=66895&cb=8b302bed4f HTTP/1.1 Host: sourceforge.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFdTcypzJDJDIXQ0IyV8TSs2KyVLUnhDNjRCQG1NaG1ObnslVjt1eEhQVFhlfUt4Q0RZVm83JUwzdTRleEdVdGNxOzQxaF9pO1M-UEdsQyhscUh6QGRHekhJNytYIXlEMlNtVWF-dlY_cWVXSVA8aUVLR0ZRU3w4diY_cypDOEcpNmJ2NWVCJTNnODZvRXA7enw9TV5Xa2w0RnpuOzBzRGhqMTc3ZG8pU0duMT5tLWpvanloN0Z6e0VeNGpPezQ3SHojTHxDR3AhKE1SKWUhSkwzZn1NNzJsY21kSG9qJnhRMDk5PiMqNjJvQUxoMVllP2pkKFA0O2tWJGw7ZipwRHBZOzZBaUppY0FPZHxZTnlBKEhvYHhCTz92VkZSe31TPkYifQ.KgEiMfdHyRq89be7fSK-sXsSnVuiJxBAXYJndndkHVc; OAID=b813ccf77b02234e468ccbbbf0477be1
2024-03-11 11:56:41 UTC	649	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:41 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-powered-by: PHP/5.3.29 pragma: no-cache Cache-Control: private, max-age=0, no-cache expires: Mon, 26 Jul 1997 05:00:00 GMT p3p: CP="CUR ADM OUR NOR STA NID" set-cookie: OAID=b813ccf77b02234e468ccbbbf0477be1; expires=Tue, 11-Mar-2025 11:56:41 GMT; path=/ x-frame-options: SameOrigin x-content-type-options: nosniff content-security-policy: frame-ancestors 'self'; upgrade-insecure-requests x-robots-tag: noindex CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 862b5cd6d95c0ad3-LAS alt-svc: h3=":443"; ma=86400
2024-03-11 11:56:41 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49776	172.64.150.145	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:41 UTC	997	OUT	GET /directory/tp3/?b=57541&c=11165&z=54863&cb=d6140d077d HTTP/1.1 Host: sourceforge.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFdTcypzJDJDIXQ0IyV8TSs2KyVLUnhDNjRCQG1NaG1ObnslVjt1eEhQVFhlfUt4Q0RZVm83JUwzdTRleEdVdGNxOzQxaF9pO1M-UEdsQyhscUh6QGRHekhJNytYIXlEMlNtVWF-dlY_cWVXSVA8aUVLR0ZRU3w4diY_cypDOEcpNmJ2NWVCJTNnODZvRXA7enw9TV5Xa2w0RnpuOzBzRGhqMTc3ZG8pU0duMT5tLWpvanloN0Z6e0VeNGpPezQ3SHojTHxDR3AhKE1SKWUhSkwzZn1NNzJsY21kSG9qJnhRMDk5PiMqNjJvQUxoMVllP2pkKFA0O2tWJGw7ZipwRHBZOzZBaUppY0FPZHxZTnlBKEhvYHhCTz92VkZSe31TPkYifQ.KgEiMfdHyRq89be7fSK-sXsSnVuiJxBAXYJndndkHVc; OAID=28ae38e612051c8477673b12cec7be62
2024-03-11 11:56:41 UTC	649	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:41 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-powered-by: PHP/5.3.29 pragma: no-cache Cache-Control: private, max-age=0, no-cache expires: Mon, 26 Jul 1997 05:00:00 GMT p3p: CP="CUR ADM OUR NOR STA NID" set-cookie: OAID=28ae38e612051c8477673b12cec7be62; expires=Tue, 11-Mar-2025 11:56:41 GMT; path=/ x-frame-options: SameOrigin x-content-type-options: nosniff content-security-policy: frame-ancestors 'self'; upgrade-insecure-requests x-robots-tag: noindex CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 862b5cd7384509f3-LAS alt-svc: h3=":443"; ma=86400
2024-03-11 11:56:41 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49778	23.83.76.44	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:41 UTC	730	OUT	GET /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1
2024-03-11 11:56:41 UTC	123	IN	HTTP/1.1 405 Method Not Allowed content-length: 0 date: Mon, 11 Mar 2024 11:56:41 GMT allow: POST connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49779	172.64.150.145	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:41 UTC	996	OUT	GET /directory/tp3/?b=50727&c=9846&z=48052&cb=5a5b4d3b8a HTTP/1.1 Host: sourceforge.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFdTcypzJDJDIXQ0IyV8TSs2KyVLUnhDNjRCQG1NaG1ObnslVjt1eEhQVFhlfUt4Q0RZVm83JUwzdTRleEdVdGNxOzQxaF9pO1M-UEdsQyhscUh6QGRHekhJNytYIXlEMlNtVWF-dlY_cWVXSVA8aUVLR0ZRU3w4diY_cypDOEcpNmJ2NWVCJTNnODZvRXA7enw9TV5Xa2w0RnpuOzBzRGhqMTc3ZG8pU0duMT5tLWpvanloN0Z6e0VeNGpPezQ3SHojTHxDR3AhKE1SKWUhSkwzZn1NNzJsY21kSG9qJnhRMDk5PiMqNjJvQUxoMVllP2pkKFA0O2tWJGw7ZipwRHBZOzZBaUppY0FPZHxZTnlBKEhvYHhCTz92VkZSe31TPkYifQ.KgEiMfdHyRq89be7fSK-sXsSnVuiJxBAXYJndndkHVc; OAID=bd579550819d79b95b1768c142254897
2024-03-11 11:56:41 UTC	649	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:41 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-powered-by: PHP/5.3.29 pragma: no-cache Cache-Control: private, max-age=0, no-cache expires: Mon, 26 Jul 1997 05:00:00 GMT p3p: CP="CUR ADM OUR NOR STA NID" set-cookie: OAID=bd579550819d79b95b1768c142254897; expires=Tue, 11-Mar-2025 11:56:41 GMT; path=/ x-frame-options: SameOrigin x-content-type-options: nosniff content-security-policy: frame-ancestors 'self'; upgrade-insecure-requests x-robots-tag: noindex CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 862b5cd7fa150acd-LAS alt-svc: h3=":443"; ma=86400
2024-03-11 11:56:41 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49785	172.64.150.145	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:41 UTC	997	OUT	GET /directory/tp3/?b=66907&c=12915&z=64281&cb=969ed981b1 HTTP/1.1 Host: sourceforge.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFdTcypzJDJDIXQ0IyV8TSs2KyVLUnhDNjRCQG1NaG1ObnslVjt1eEhQVFhlfUt4Q0RZVm83JUwzdTRleEdVdGNxOzQxaF9pO1M-UEdsQyhscUh6QGRHekhJNytYIXlEMlNtVWF-dlY_cWVXSVA8aUVLR0ZRU3w4diY_cypDOEcpNmJ2NWVCJTNnODZvRXA7enw9TV5Xa2w0RnpuOzBzRGhqMTc3ZG8pU0duMT5tLWpvanloN0Z6e0VeNGpPezQ3SHojTHxDR3AhKE1SKWUhSkwzZn1NNzJsY21kSG9qJnhRMDk5PiMqNjJvQUxoMVllP2pkKFA0O2tWJGw7ZipwRHBZOzZBaUppY0FPZHxZTnlBKEhvYHhCTz92VkZSe31TPkYifQ.KgEiMfdHyRq89be7fSK-sXsSnVuiJxBAXYJndndkHVc; OAID=e012d283a5e1eae18062d3edb9725359
2024-03-11 11:56:41 UTC	649	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:41 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-powered-by: PHP/5.3.29 pragma: no-cache Cache-Control: private, max-age=0, no-cache expires: Mon, 26 Jul 1997 05:00:00 GMT p3p: CP="CUR ADM OUR NOR STA NID" set-cookie: OAID=e012d283a5e1eae18062d3edb9725359; expires=Tue, 11-Mar-2025 11:56:41 GMT; path=/ x-frame-options: SameOrigin x-content-type-options: nosniff content-security-policy: frame-ancestors 'self'; upgrade-insecure-requests x-robots-tag: noindex CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 862b5cd8bac10acd-LAS alt-svc: h3=":443"; ma=86400
2024-03-11 11:56:41 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49790	52.9.62.96	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:41 UTC	434	OUT	GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:56:42 UTC	101	IN	HTTP/1.1 404 Not Found Date: Mon, 11 Mar 2024 11:56:42 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49789	34.117.77.79	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:41 UTC	524	OUT	GET /tag.aspx?1122024 HTTP/1.1 Host: ml314.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:42 UTC	805	IN	HTTP/1.1 200 OK x-guploader-uploadid: ABPtcPrdTm5PBS7q0TALNFTg8w_aWVPYsUcOXR6Q7BJUHRjKJ6ZtzALWbi9QApIlh3HqPII9mZ4 x-goog-generation: 1708558296436903 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 34175 x-goog-hash: crc32c=srF/gg== x-goog-hash: md5=3fpNhUvHTpM0hkxhCmt/UA== x-goog-storage-class: STANDARD accept-ranges: bytes Content-Length: 34175 server: UploadServer via: 1.1 google date: Mon, 11 Mar 2024 11:56:42 GMT Last-Modified: Wed, 21 Feb 2024 23:31:36 GMT ETag: "ddfa4d854bc74e9334864c610a6b7f50" Content-Type: application/javascript Vary: Accept-Encoding Age: 0 Cache-Control: public,max-age=3600 X-Cache-Hit: revalidated Cache-ID: LAX-ba56a406 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:56:42 UTC	447	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 74 61 67 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 2f 2a 20 56 65 72 73 69 6f 6e 3a 20 32 2e 36 2e 31 2e 31 33 39 2d 63 65 37 38 39 34 34 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 32 36 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 6e 29 7b 76 61 72 20 65 3d 6e 28 31 35 38 29 2c 75 3d 6e 28 35 35 33 29 3b 65 2e 42 72 6f 77 73 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 63 72 65 61 74 65 56 69 73 69 74 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 75 2e 56 69 73 69 74 61 74 69 6f 6e 28 74 Data Ascii: /! For license information please see tag.js.LICENSE.txt //* Version: 2.6.1.139-ce78944 */!function(){"use strict";var t={262:function(t,i,n){var e=n(158),u=n(553);e.Browser.prototype.createVisitation=function(t,i){var n=this;return new u.Visitation(t
2024-03-11 11:56:42 UTC	1252	IN	Data Raw: 65 72 3d 69 2e 6d 4c 33 31 34 54 61 67 3d 69 2e 6d 4c 33 31 34 45 6d 61 69 6c 53 79 6e 63 3d 69 2e 69 4d 42 6c 61 63 6b 4c 69 73 74 3d 69 2e 69 4d 57 68 69 74 65 4c 69 73 74 3d 69 2e 69 4d 53 79 6e 63 55 72 6c 3d 69 2e 65 76 65 6e 74 43 61 63 68 65 50 69 6e 67 50 65 72 69 6f 64 3d 69 2e 73 65 73 73 69 6f 6e 45 78 70 69 72 61 74 69 6f 6e 3d 69 2e 76 65 72 73 69 6f 6e 3d 76 6f 69 64 20 30 2c 69 2e 76 65 72 73 69 6f 6e 3d 22 32 2e 36 2e 31 2e 31 33 39 22 2c 69 2e 73 65 73 73 69 6f 6e 45 78 70 69 72 61 74 69 6f 6e 3d 39 65 34 2c 69 2e 65 76 65 6e 74 43 61 63 68 65 50 69 6e 67 50 65 72 69 6f 64 3d 31 35 2c 69 2e 69 4d 53 79 6e 63 55 72 6c 3d 22 68 74 74 70 73 3a 2f 2f 6d 6c 33 31 34 2e 63 6f 6d 2f 69 6d 73 79 6e 63 2e 61 73 68 78 3f 70 69 3d 7b 70 69 7d 26 64 Data Ascii: er=i.mL314Tag=i.mL314EmailSync=i.iMBlackList=i.iMWhiteList=i.iMSyncUrl=i.eventCachePingPeriod=i.sessionExpiration=i.version=void 0,i.version="2.6.1.139",i.sessionExpiration=9e4,i.eventCachePingPeriod=15,i.iMSyncUrl="https://ml314.com/imsync.ashx?pi={pi}&d
2024-03-11 11:56:42 UTC	1252	IN	Data Raw: 43 6d 70 3d 6e 7d 2c 36 38 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 69 2c 22 74 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 69 2e 43 6f 6e 73 65 6e 74 46 72 61 6d 65 77 6f 72 6b 3d 76 6f 69 64 20 30 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 69 3d 74 7d 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 72 61 6d 65 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 75 7c 7c 28 74 68 69 73 2e 75 3d 74 68 69 73 2e 69 2e 66 69 6e 64 46 72 61 6d 65 28 74 68 69 73 2e 68 29 29 2c 74 68 69 73 2e 75 7d 2c 65 6e Data Ascii: Cmp=n},682:function(t,i){Object.defineProperty(i,"t",{value:!0}),i.ConsentFramework=void 0;var n=function(){function t(t){this.i=t}return Object.defineProperty(t.prototype,"frame",{get:function(){return this.u\|\|(this.u=this.i.findFrame(this.h)),this.u},en
2024-03-11 11:56:42 UTC	1252	IN	Data Raw: 22 2c 31 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 69 2e 75 73 70 41 70 69 43 61 6c 6c 62 61 63 6b 28 74 2c 6e 29 7d 29 29 2c 74 68 69 73 2e 70 3d 21 30 2c 74 68 69 73 2e 49 2e 65 78 65 63 75 74 65 41 70 69 43 6f 6d 6d 61 6e 64 28 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 2c 32 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 69 2e 74 63 66 41 70 69 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 43 61 6c 6c 62 61 63 6b 28 74 2c 6e 29 7d 29 29 7c 7c 28 74 68 69 73 2e 70 3d 21 31 29 2c 74 68 69 73 2e 5f 26 26 74 68 69 73 2e 44 26 26 28 74 68 69 73 2e 43 7c 7c 74 68 69 73 2e 70 29 29 72 65 74 75 72 6e 3b 74 68 69 73 2e 69 2e 69 6e 49 66 72 61 6d 65 3f 28 74 68 69 73 2e 44 7c 7c 74 68 69 73 2e 63 68 65 63 6b Data Ascii: ",1,(function(t,n){return i.uspApiCallback(t,n)})),this.p=!0,this.I.executeApiCommand("addEventListener",2,(function(t,n){return i.tcfApiEventListenerCallback(t,n)}))\|\|(this.p=!1),this._&&this.D&&(this.C\|\|this.p))return;this.i.inIframe?(this.D\|\|this.check
2024-03-11 11:56:42 UTC	1252	IN	Data Raw: 69 6e 67 22 2c 63 61 6c 6c 49 64 3a 22 69 66 72 61 6d 65 22 2e 63 6f 6e 63 61 74 28 2b 2b 74 68 69 73 2e 46 29 7d 7d 3b 74 68 69 73 2e 24 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 74 69 6d 65 4f 75 74 54 72 61 63 6b 28 29 7d 29 2c 33 65 33 29 2c 74 68 69 73 2e 69 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 74 2e 68 61 6e 64 6c 65 47 70 70 49 46 72 61 6d 65 43 61 6c 6c 62 61 63 6b 4d 65 73 73 61 67 65 28 69 29 7d 29 29 2c 74 68 69 73 2e 4d 2e 66 72 61 6d 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 69 2c 22 2a 22 29 2c 74 68 69 73 2e 43 3d 21 30 2c 74 68 69 73 2e 5f 3d 21 30 7d 7d 2c 74 2e 70 72 6f 74 6f Data Ascii: ing",callId:"iframe".concat(++this.F)}};this.$=setTimeout((function(){return t.timeOutTrack()}),3e3),this.i.addEventListener("message",(function(i){return t.handleGppIFrameCallbackMessage(i)})),this.M.frame.postMessage(i,"*"),this.C=!0,this._=!0}},t.proto
2024-03-11 11:56:42 UTC	1252	IN	Data Raw: 69 73 2e 43 29 72 65 74 75 72 6e 3b 74 68 69 73 2e 43 3d 21 30 2c 74 68 69 73 2e 70 3d 21 31 7d 74 68 69 73 2e 5f 26 26 74 68 69 73 2e 43 26 26 21 74 68 69 73 2e 70 26 26 74 68 69 73 2e 73 74 61 72 74 54 72 61 63 6b 28 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 54 72 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3b 74 68 69 73 2e 4f 7c 7c 28 74 68 69 73 2e 4c 2e 62 6f 6d 62 6f 72 61 43 6f 6e 73 65 6e 74 3d 74 68 69 73 2e 61 67 67 72 65 67 61 74 65 42 6f 6d 62 6f 72 61 43 6f 6e 73 65 6e 74 28 29 2c 74 68 69 73 2e 4f 3d 21 30 2c 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 54 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 2e 63 61 6c 6c 28 74 68 69 73 2c 74 68 69 73 2e 4c 29 2c 74 68 69 73 2e 44 3d 21 30 29 7d 2c 74 2e 70 72 Data Ascii: is.C)return;this.C=!0,this.p=!1}this._&&this.C&&!this.p&&this.startTrack()},t.prototype.startTrack=function(){var t;this.O\|\|(this.L.bomboraConsent=this.aggregateBomboraConsent(),this.O=!0,null===(t=this.T)\|\|void 0===t\|\|t.call(this,this.L),this.D=!0)},t.pr
2024-03-11 11:56:42 UTC	1252	IN	Data Raw: 4e 75 6d 62 65 72 28 74 68 69 73 2e 52 29 29 3b 76 61 72 20 63 3d 7b 50 3a 7b 63 6f 6d 6d 61 6e 64 3a 22 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 2c 70 61 72 61 6d 65 74 65 72 3a 74 68 69 73 2e 59 2c 76 65 72 73 69 6f 6e 3a 32 2c 63 61 6c 6c 49 64 3a 22 69 66 72 61 6d 65 3a 22 2e 63 6f 6e 63 61 74 28 2b 2b 74 68 69 73 2e 46 29 7d 7d 3b 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 49 2e 66 72 61 6d 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 63 2c 22 2a 22 29 2c 74 68 69 73 2e 61 74 74 65 6d 70 74 54 6f 53 74 61 72 74 54 72 61 63 6b 28 22 47 44 50 52 22 29 7d 7d 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 6e 64 6c 65 55 73 70 49 46 72 61 6d 65 43 61 6c 6c 62 61 63 6b 4d 65 73 73 61 67 65 Data Ascii: Number(this.R));var c={P:{command:"removeEventListener",parameter:this.Y,version:2,callId:"iframe:".concat(++this.F)}};null===(e=this.I.frame)\|\|void 0===e\|\|e.postMessage(c,"*"),this.attemptToStartTrack("GDPR")}}},t.prototype.handleUspIFrameCallbackMessage
2024-03-11 11:56:42 UTC	1252	IN	Data Raw: 3d 69 2e 67 70 70 53 74 72 69 6e 67 2c 74 68 69 73 2e 4c 2e 67 70 70 5f 73 69 64 3d 6e 75 6c 6c 3d 3d 3d 28 75 3d 69 2e 61 70 70 6c 69 63 61 62 6c 65 53 65 63 74 69 6f 6e 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 75 3f 76 6f 69 64 20 30 3a 75 2e 6a 6f 69 6e 28 22 2c 22 29 7d 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 43 6f 6e 73 65 6e 74 50 61 72 61 6d 73 54 63 66 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 6e 3b 69 26 26 69 2e 67 64 70 72 41 70 70 6c 69 65 73 26 26 28 74 68 69 73 2e 52 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 4e 75 6d 62 65 72 28 74 68 69 73 2e 52 29 29 2c 74 68 69 73 2e 4c 2e 67 64 70 72 3d 69 2e 67 64 70 72 41 70 70 6c 69 65 73 2c 74 68 69 73 2e 6d 2e 67 64 70 72 3d 74 2e 67 65 74 54 63 66 42 6f 6d 62 6f 72 61 43 6f 6e Data Ascii: =i.gppString,this.L.gpp_sid=null===(u=i.applicableSections)\|\|void 0===u?void 0:u.join(",")}},t.prototype.setConsentParamsTcf=function(i){var n;i&&i.gdprApplies&&(this.R&&clearTimeout(Number(this.R)),this.L.gdpr=i.gdprApplies,this.m.gdpr=t.getTcfBomboraCon
2024-03-11 11:56:42 UTC	1252	IN	Data Raw: 66 72 61 6d 65 29 7b 76 61 72 20 74 3d 7b 50 3a 7b 63 6f 6d 6d 61 6e 64 3a 22 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 2c 70 61 72 61 6d 65 74 65 72 3a 74 68 69 73 2e 59 2c 76 65 72 73 69 6f 6e 3a 32 2c 63 61 6c 6c 49 64 3a 22 69 66 72 61 6d 65 3a 22 2e 63 6f 6e 63 61 74 28 2b 2b 74 68 69 73 2e 46 29 7d 7d 3b 74 68 69 73 2e 49 2e 66 72 61 6d 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 74 2c 22 2a 22 29 7d 65 6c 73 65 20 6e 75 6c 6c 21 3d 74 68 69 73 2e 59 26 26 74 68 69 73 2e 49 2e 65 78 65 63 75 74 65 41 70 69 43 6f 6d 6d 61 6e 64 28 22 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 2c 32 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 74 68 69 73 2e 59 29 3b 74 68 69 73 2e 73 74 61 72 74 54 72 61 63 6b 28 29 7d 2c 74 7d 28 Data Ascii: frame){var t={P:{command:"removeEventListener",parameter:this.Y,version:2,callId:"iframe:".concat(++this.F)}};this.I.frame.postMessage(t,"*")}else null!=this.Y&&this.I.executeApiCommand("removeEventListener",2,(function(){}),this.Y);this.startTrack()},t}(
2024-03-11 11:56:42 UTC	1252	IN	Data Raw: 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 69 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 69 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 69 2c 6e 29 26 26 28 74 5b 6e 5d 3d 69 5b 6e 5d 29 7d 2c 65 28 74 2c 69 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 69 26 26 6e 75 6c 6c 21 3d 3d 69 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 6c 61 73 73 20 65 78 74 65 6e 64 73 20 76 61 6c 75 65 20 22 2b 53 74 72 69 Data Ascii: eOf\|\|{__proto__:[]}instanceof Array&&function(t,i){t.__proto__=i}\|\|function(t,i){for(var n in i)Object.prototype.hasOwnProperty.call(i,n)&&(t[n]=i[n])},e(t,i)},function(t,i){if("function"!=typeof i&&null!==i)throw new TypeError("Class extends value "+Stri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49795	34.232.140.51	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:42 UTC	543	OUT	GET /s1.js?d=2396&cb=1710158199598 HTTP/1.1 Host: tag.crsspxl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:42 UTC	574	IN	HTTP/1.1 200 Set-Cookie: uid=693098949688747066; Domain=.crsspxl.com; Expires=Fri, 10-May-2024 11:56:42 UTC; Path=/; SameSite=None; Secure P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Set-Cookie: uuid=c80b7ee4-92fa-4d71-9444-870d4e377528; Domain=.crsspxl.com; Expires=Fri, 10-May-2024 11:56:42 UTC; Path=/; SameSite=None; Secure P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Content-Type: text/javascript Content-Length: 1780 Vary: Accept-Encoding Date: Mon, 11 Mar 2024 11:56:42 GMT Connection: close
2024-03-11 11:56:42 UTC	1780	IN	Data Raw: 76 61 72 20 63 70 5f 43 34 77 31 6c 64 4e 32 64 39 50 6d 56 72 6b 4e 3d 63 70 5f 43 34 77 31 6c 64 4e 32 64 39 50 6d 56 72 6b 4e 7c 7c 7b 7d 3b 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 3b 74 72 79 7b 64 3d 74 6f 70 2e 64 6f 63 75 6d 65 6e 74 7d 63 61 74 63 68 28 65 30 29 7b 74 72 79 7b 64 3d 64 6f 63 75 6d 65 6e 74 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 5f 65 28 63 2c 6d 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 63 72 73 73 70 78 6c 28 7a 29 7b 69 66 28 64 2e 62 6f 64 79 3d 3d 6e 75 6c 6c 7c 7c 74 79 70 65 6f 66 20 64 2e 62 6f 64 79 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 69 66 28 7a 3c 32 35 30 30 29 7b 76 61 72 20 72 65 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 72 73 73 70 78 6c 28 7a 2a 32 29 7d 3b 73 65 Data Ascii: var cp_C4w1ldN2d9PmVrkN=cp_C4w1ldN2d9PmVrkN\|\|{};try{(function(){var d;try{d=top.document}catch(e0){try{d=document}catch(e){}}function _e(c,m){}function crsspxl(z){if(d.body==null\|\|typeof d.body=="undefined"){if(z<2500){var rec=function(){crsspxl(z*2)};se

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49798	104.26.2.70	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:42 UTC	585	OUT	GET /px.gif?ch=2 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:42 UTC	1144	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:42 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPpGGNTgZsoRij7ebx0tkB7iGg9XbLdoonjCwCI4eplpM45CJtOkYxgyWfcdATXohbGZkEDdQqwQmA x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Expires: Fri, 01 Mar 2024 20:35:25 GMT Cache-Control: public, max-age=86400 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" Age: 836477 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CfUc3%2BEZukifVBIX%2FqfhnDIdXrPTJAAInF9ZaxPITZTFVaqJo7TkynTZ%2BExJyv7VCzUl5t2YAUVcEjsEA%2F9YBbDSlHgzsZeLDjkHYoEep4qhvkhzVtV7rtoM24t5ZzglrQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 862b5ce04bff09f1-LAS
2024-03-11 11:56:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49799	107.178.240.89	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:42 UTC	818	OUT	GET /engine?site=143572;size=1x1;e=0;dt=0;category=twljteyw08d;kw=ewnf2otl%205ncgmk4yea%20a%200%203d%20oznma%20kdtvx%206ee;rnd=(1710158201651) HTTP/1.1 Host: pbid.pro-market.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:43 UTC	675	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" ANServer: gapp2 Set-Cookie: anProfile="0+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)"; Domain=.pro-market.net; Max-Age=15552000; Path=/; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 1 Jan 1990 0:0:0 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html Vary: Accept-Encoding Date: Mon, 11 Mar 2024 11:56:41 GMT Via: 1.1 google Alt-Svc: clear Connection: close Transfer-Encoding: chunked
2024-03-11 11:56:43 UTC	440	IN	Data Raw: 31 61 63 0d 0a 20 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 72 69 67 68 74 6d 61 72 67 69 6e 3d 30 20 6c 65 66 74 6d 61 72 67 69 6e 3d 30 20 74 6f 70 6d 61 72 67 69 6e 3d 30 20 62 6f 74 74 6f 6d 6d 61 72 67 69 6e 3d 30 3e 3c 21 2d 2d 20 2d 2d 3e 3c 21 2d 2d 20 2d 2d 3e 3c 21 2d 2d 20 2d 2d 3e 3c 53 43 52 49 50 54 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 74 72 79 20 7b 0d 0a 76 61 72 20 47 5f 50 55 42 4c 49 53 48 45 52 5f 49 44 20 3d 22 31 34 33 35 37 32 22 3b 0d 0a 76 61 72 20 47 5f 44 55 5f 44 49 53 20 3d 20 22 39 38 2c 31 30 2c 32 35 22 3b 0d 0a 76 61 72 20 47 5f 56 49 53 49 54 4f 52 5f 49 44 20 3d 20 22 30 22 3b 0d 0a 76 61 72 20 47 5f 56 49 53 49 54 4f 52 5f 49 44 5f 45 36 34 20 3d 20 22 4d 41 3d 3d 22 3b 0d 0a 76 61 72 Data Ascii: 1ac <html><body rightmargin=0 leftmargin=0 topmargin=0 bottommargin=0>... -->... -->... --><SCRIPT type="text/javascript">try {var G_PUBLISHER_ID ="143572";var G_DU_DIS = "98,10,25";var G_VISITOR_ID = "0";var G_VISITOR_ID_E64 = "MA==";var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49800	142.251.2.149	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:42 UTC	732	OUT	GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:43 UTC	734	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: image/x-icon Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Content-Length: 1078 Date: Mon, 11 Mar 2024 11:56:42 GMT Expires: Tue, 12 Mar 2024 11:56:42 GMT Cache-Control: public, max-age=86400 Last-Modified: Tue, 08 May 2012 13:08:06 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:56:43 UTC	518	IN	Data Raw: 00 00 01 00 02 00 10 10 10 00 00 00 00 00 28 01 00 00 26 00 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 4e 01 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 04 00 00 00 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii: (& N(
2024-03-11 11:56:43 UTC	560	IN	Data Raw: 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49803	104.26.2.70	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:43 UTC	606	OUT	GET /px.gif?ch=1&e=0.8932098781094919 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:43 UTC	1136	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:43 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPpGGNTgZsoRij7ebx0tkB7iGg9XbLdoonjCwCI4eplpM45CJtOkYxgyWfcdATXohbGZkEDdQqwQmA x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Expires: Fri, 01 Mar 2024 20:35:25 GMT Cache-Control: public, max-age=86400 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" Age: 836478 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A4240IbFFSwadx9AxCcjutVQlMteOfWILJ6lWXVgpQHB5MF1fWONRlBZqxy0rXRElgpDiqQZKTRGLSQx2Sv5VUMT00SyP2jKMSpYVFjx2IR9m9PbfHFopeIKcJefWHSTNQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 862b5ce47ed309f1-LAS
2024-03-11 11:56:43 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49805	34.117.77.79	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:43 UTC	883	OUT	GET /utsync.ashx?pub=&adv=&et=0&eid=771&ct=js&pi=&fp=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f&clid=&if=0&ps=&cl=&mlt=&data=&&cp=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Ffiles%2Fdocfetcher%2F1.1.25%2Fdocfetcher_1.1.25_win32_setup.exe%2Fdownload&pv=1710158201959_nopjhvr4s&bl=en-us&cb=6793859&return=&ht=&d=&dc=&si=1710158201959_nopjhvr4s&cid=&s=1280x1024&rp=&v=2.6.1.139 HTTP/1.1 Host: ml314.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:43 UTC	936	IN	HTTP/1.1 200 OK content-type: application/javascript cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache set-cookie: u=aHR0cHM6Ly9zb3VyY2Vmb3JnZS5uZXQvcHJvamVjdHMvZG9jZmV0Y2hlci9maWxlcy9kb2NmZXRjaGVyLzEuMS4yNS9kb2NmZXRjaGVyXzEuMS4yNV93aW4zMl9zZXR1cC5leGUvZG93bmxvYWQ%3D; expires=Mon, 11 Mar 2024 11:56:58 GMT; domain=ml314.com; path=/;SameSite=None; secure set-cookie: pi=3642666937673580575; expires=Tue, 11 Mar 2025 11:56:43 GMT; domain=ml314.com; path=/; secure; samesite=none; httponly set-cookie: tp=3%253B03%252F11%252F2024%2B11%253A56%253A43%253B0; expires=Mon, 25 Mar 2024 11:56:43 GMT; domain=ml314.com; path=/;SameSite=None; secure p3p: CP="NON DSP COR ADMo PSAo DEVo BUS COM UNI NAV DEM STA" date: Mon, 11 Mar 2024 11:56:43 GMT server: Google Frontend via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-11 11:56:43 UTC	316	IN	Data Raw: 31 65 63 0d 0a 5f 6d 6c 2e 73 65 74 46 50 49 28 27 33 36 34 32 36 36 36 39 33 37 36 37 33 35 38 30 35 37 35 27 29 3b 5f 6d 6c 2e 70 72 6f 63 65 73 73 54 61 67 28 7b 20 75 72 6c 3a 20 27 68 74 74 70 73 3a 2f 2f 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 3a 2f 2f 6d 6c 33 31 34 2e 63 6f 6d 2f 63 73 79 6e 63 2e 61 73 68 78 25 33 46 66 70 3d 24 55 49 44 25 32 36 70 65 72 73 6f 6e 5f 69 64 3d 33 36 34 32 36 36 36 39 33 37 36 37 33 35 38 30 35 37 35 25 32 36 65 69 64 3d 32 27 2c 20 74 79 70 65 3a 20 27 69 6d 67 27 20 7d 29 3b 0a 5f 6d 6c 2e 70 72 6f 63 65 73 73 54 61 67 28 7b 20 75 72 6c 3a 20 27 68 74 74 70 73 3a 2f 2f 70 73 2e 65 79 65 6f 74 61 2e 6e 65 74 2f 70 69 78 65 6c 3f 70 69 64 3d 72 38 68 72 62 32 30 26 74 3d 67 69 66 Data Ascii: 1ec_ml.setFPI('3642666937673580575');_ml.processTag({ url: 'https://ib.adnxs.com/getuid?https://ml314.com/csync.ashx%3Ffp=$UID%26person_id=3642666937673580575%26eid=2', type: 'img' });_ml.processTag({ url: 'https://ps.eyeota.net/pixel?pid=r8hrb20&t=gif
2024-03-11 11:56:43 UTC	188	IN	Data Raw: 6e 65 74 2f 69 62 73 3a 64 70 69 64 3d 32 32 30 35 32 26 64 70 75 75 69 64 3d 33 36 34 32 36 36 36 39 33 37 36 37 33 35 38 30 35 37 35 26 72 65 64 69 72 3d 27 2c 20 74 79 70 65 3a 20 27 69 6d 67 27 20 7d 29 3b 0a 5f 6d 6c 2e 70 72 6f 63 65 73 73 54 61 67 28 7b 20 75 72 6c 3a 20 27 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 64 30 74 72 6f 31 6a 26 74 74 64 5f 74 70 69 3d 31 27 2c 20 74 79 70 65 3a 20 27 69 6d 67 27 20 7d 29 3b 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: net/ibs:dpid=22052&dpuuid=3642666937673580575&redir=', type: 'img' });_ml.processTag({ url: 'https://match.adsrvr.org/track/cmf/generic?ttd_pid=d0tro1j&ttd_tpi=1', type: 'img' });0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49807	104.26.2.70	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:43 UTC	350	OUT	GET /px.gif?ch=2 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:43 UTC	1138	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:43 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPpGGNTgZsoRij7ebx0tkB7iGg9XbLdoonjCwCI4eplpM45CJtOkYxgyWfcdATXohbGZkEDdQqwQmA x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Expires: Fri, 01 Mar 2024 20:35:25 GMT Cache-Control: public, max-age=86400 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" Age: 836478 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r3eZ8jK3rqyPcp2TOxXKfilla3MBUQSijlVeYH4WE70UQl5Z0tVlPAOEwsBNDs0cFFC9S6OL6iniTiW%2FQQNLrTcaRE2ksfmS7FewprQNd6W0sLui74rAO9xyTwKlS1Af1w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 862b5ce57b4f0acd-LAS
2024-03-11 11:56:43 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49811	142.251.2.149	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:43 UTC	497	OUT	GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:43 UTC	742	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Content-Length: 1078 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 11 Mar 2024 11:56:42 GMT Expires: Tue, 12 Mar 2024 11:56:42 GMT Cache-Control: public, max-age=86400 Last-Modified: Tue, 08 May 2012 13:08:06 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:56:43 UTC	510	IN	Data Raw: 00 00 01 00 02 00 10 10 10 00 00 00 00 00 28 01 00 00 26 00 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 4e 01 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 04 00 00 00 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii: (& N(
2024-03-11 11:56:43 UTC	568	IN	Data Raw: 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49813	192.82.242.209	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:43 UTC	669	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=87197809&p=162538&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:44 UTC	902	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=1; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=162538:2; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1710720000%3A265%7C1711324800%3A263_201%7C1710201600%3A248; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1711324800%3A13_104_166_71_220_21_54_250%7C1710720000%3A223_2; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Mon, 11 Mar 2024 11:56:43 GMT Transfer-Encoding: chunked Connection: close
2024-03-11 11:56:44 UTC	2324	IN	Data Raw: 39 30 38 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 70 6d 65 62 26 67 6f 6f 67 6c 65 5f 73 63 3d 31 26 67 6f 6f 67 6c 65 5f 68 6d 3d 6d 68 64 71 32 33 50 30 53 39 69 6d 53 43 50 79 52 44 53 54 74 51 25 33 44 25 33 44 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 33 33 37 31 26 70 61 72 74 6e 65 72 Data Ascii: 908PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=mhdq23P0S9imSCPyRDSTtQ%3D%3D&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49814	172.64.151.101	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:43 UTC	725	OUT	GET /usermatch?s=179394&cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D33%26partneruserid%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:44 UTC	1258	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:56:44 GMT Content-Length: 0 Connection: close Location: /usermatch?cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D33%26partneruserid%3D&gdpr=0&gdpr_consent=&s=179394&C=1 CF-Ray: 862b5ce72b270add-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; Path=/; Domain=casalemedia.com; Expires=Tue, 11 Mar 2025 11:56:44 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=4192; Path=/; Domain=casalemedia.com; Expires=Sun, 09 Jun 2024 11:56:44 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=4192; Path=/; Domain=casalemedia.com; Expires=Sun, 09 Jun 2024 11:56:44 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FhohS219XEtt0zayLORbT2%2Fr%2Fa13FoQGgzoVF4EgiV5RrVqh9EeSf0AbgCEdDkGpfBH%2B670PDyNd2R8EyUKTCOYvt9e%2BJbt7felp7WozLQmvgZ1nJlRoQr14j8xeuiFGmpczVDU5ve8AwA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49810	52.25.158.6	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:43 UTC	613	OUT	GET /cookie-sync/shr?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:43 UTC	389	IN	HTTP/1.1 303 See Other Date: Mon, 11 Mar 2024 11:56:43 GMT location: https://match.prod.bidr.io/cookie-sync/shr?gdpr=0&gdpr_consent=&_bee_ppp=1 Server: gunicorn set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Mon, 11 Mar 2024 12:06:43 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49816	130.211.23.194	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:44 UTC	551	OUT	GET /country HTTP/1.1 Host: api.btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:44 UTC	332	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Cache-Control: private, max-age=300, stale-while-revalidate=600, stale-if-error=600 Content-Type: application/json Vary: Origin Date: Mon, 11 Mar 2024 11:56:44 GMT Content-Length: 16 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:56:44 UTC	16	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d Data Ascii: {"country":"US"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49818	104.26.2.70	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:44 UTC	371	OUT	GET /px.gif?ch=1&e=0.8932098781094919 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:44 UTC	1148	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:44 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPpGGNTgZsoRij7ebx0tkB7iGg9XbLdoonjCwCI4eplpM45CJtOkYxgyWfcdATXohbGZkEDdQqwQmA x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Expires: Fri, 01 Mar 2024 20:35:25 GMT Cache-Control: public, max-age=86400 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" Age: 836479 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O3%2Fs8ZMFeyJrmOKw%2BGfZ2O6y0ZELs%2B5CsvuCRG10jHved2Zgkznh%2BMArgRtPVO7ibS%2BJTCRyig98PA21h61J03%2FL2hrGxbd6CmtB4urzYo0AFDBzIIsbISOXsDZDKix7og%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 862b5ce9186369e6-LAS
2024-03-11 11:56:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49817	130.211.23.194	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:44 UTC	824	OUT	GET /pv?tid=aQvxlqSC&w=5483815487668224&o=5098683085881344&cv=2.1.38-1-g3a5ff56&widget=false&r=false&vr=1280x907&pageURL=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Ffiles%2Fdocfetcher%2F1.1.25%2Fdocfetcher_1.1.25_win32_setup.exe%2Fdownload&sid=nZZIdvDKz&pm=false&upapi=true HTTP/1.1 Host: api.btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:44 UTC	255	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Vary: Origin Date: Mon, 11 Mar 2024 11:56:44 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49815	64.74.236.159	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:44 UTC	725	OUT	GET /usersync/smart/?cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D116%26partneruserid%3D__ZUID__&gdpr=0&gdpr_consent= HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:44 UTC	675	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 188 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: /usersync/smart/?cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D116%26partneruserid%3D__ZUID__&gdpr=0&gdpr_consent=&s=2 P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=njquBca-QhUZqz9ypfJV; Path=/; Domain=zemanta.com; Expires=Tue, 11 Mar 2025 11:56:44 GMT; Max-Age=31536000; Secure; SameSite=None Date: Mon, 11 Mar 2024 11:56:44 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-03-11 11:56:44 UTC	188	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 2f 75 73 65 72 73 79 6e 63 2f 73 6d 61 72 74 2f 3f 63 62 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 74 62 2d 63 73 79 6e 63 2e 73 6d 61 72 74 61 64 73 65 72 76 65 72 2e 63 6f 6d 25 32 46 72 65 64 69 72 25 32 46 25 33 46 69 73 73 69 25 33 44 31 25 32 36 70 61 72 74 6e 65 72 69 64 25 33 44 31 31 36 25 32 36 70 61 72 74 6e 65 72 75 73 65 72 69 64 25 33 44 5f 5f 5a 55 49 44 5f 5f 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 73 3d 32 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="/usersync/smart/?cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D116%26partneruserid%3D__ZUID__&gdpr=0&gdpr_consent=&s=2">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49820	216.22.16.5	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:44 UTC	1001	OUT	GET /api/sync?callerId=47&gdpr=0&gdpr_consent= HTTP/1.1 Host: ssbsync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1
2024-03-11 11:56:44 UTC	122	IN	HTTP/1.1 200 OK content-length: 1080 content-type: text/html date: Mon, 11 Mar 2024 11:56:44 GMT connection: close
2024-03-11 11:56:44 UTC	1080	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 2f 6d 61 74 63 68 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 2f 73 79 6e 63 2f 76 31 3f 73 6f 75 72 63 65 5f 69 64 3d 39 38 4b 55 7a 33 37 79 70 65 39 44 33 58 32 73 66 39 6f 76 67 65 54 74 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 73 6f 75 72 63 65 5f 75 73 65 72 5f 69 64 3d 31 38 39 39 35 30 35 38 39 30 35 39 34 35 36 35 32 34 38 22 20 2f 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 69 73 2e 63 72 69 74 65 6f 2e 63 6f 6d 2f 64 69 73 2f 75 73 65 72 73 79 6e 63 2e 61 73 70 78 3f 72 3d 33 30 26 70 3d 32 37 33 26 63 70 3d 73 6d 61 72 74 6f 72 74 62 26 63 75 3d 31 26 75 72 6c 3d 68 74 74 70 73 25 33 41 Data Ascii: <html><head></head><body><img src="//match.sharethrough.com/sync/v1?source_id=98KUz37ype9D3X2sf9ovgeTt&gdpr=0&gdpr_consent=&source_user_id=1899505890594565248" /><img src="https://dis.criteo.com/dis/usersync.aspx?r=30&p=273&cp=smartortb&cu=1&url=https%3A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49823	52.25.158.6	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:44 UTC	655	OUT	GET /cookie-sync/shr?gdpr=0&gdpr_consent=&_bee_ppp=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: checkForPermission=ok
2024-03-11 11:56:44 UTC	802	IN	HTTP/1.1 303 See Other Date: Mon, 11 Mar 2024 11:56:44 GMT location: https://cm.g.doubleclick.net/pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFLUERVN0wzZU1BQUJXRlpZeF9tZw&gdpr=0&gdpr_consent=&bee_sync_partners=pm%2Csas%2Cpp%2Csyn%2Cshr&bee_sync_current_partner=adx&bee_sync_initiator=shr&bee_sync_hop_count=1 Server: gunicorn set-cookie: bito=AAKPDU7L3eMAABWFZYx_mg; Domain=bidr.io; expires=Thu, 10 Apr 2025 07:56:44 GMT; Path=/; SameSite=None; Secure set-cookie: bitoIsSecure=ok; Domain=bidr.io; expires=Thu, 10 Apr 2025 07:56:44 GMT; Path=/; SameSite=None; Secure set-cookie: checkForPermission=""; Domain=bidr.io; expires=Thu, 01 May 2008 00:00:00 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49824	172.64.151.101	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:44 UTC	791	OUT	GET /usermatch?cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D33%26partneruserid%3D&gdpr=0&gdpr_consent=&s=179394&C=1 HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
2024-03-11 11:56:44 UTC	988	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:44 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 862b5ceb8f080a01-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; Path=/; Domain=casalemedia.com; Expires=Tue, 11 Mar 2025 11:56:44 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=4192; Path=/; Domain=casalemedia.com; Expires=Sun, 09 Jun 2024 11:56:44 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9osDsD0KECxM30sW%2BMfXPezVzYJvhqZmlIRs1WKAqgkRBpu3Sae8lx3bYLeiPxaCGDMW67M9V4jiEjqWinR7zXMGBGS3ZaJfHnfiKBPEYdxDm5990mhn38qyuWvCVsFOjoksAI4vvqCMWg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-11 11:56:44 UTC	381	IN	Data Raw: 36 35 36 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 64 63 6d 3f 70 69 64 3d 37 38 61 66 39 31 34 63 2d 65 37 35 35 2d 34 62 39 30 2d 62 64 65 64 2d 31 62 31 37 32 61 65 64 63 37 36 33 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 26 61 6d 70 3b 67 64 70 72 3d 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 69 64 3d 5a 65 37 78 66 4d 41 6f 49 65 45 41 41 41 7a 61 41 49 64 4f 34 41 41 41 45 47 41 41 41 41 41 42 26 61 6d 70 3b 67 70 70 3d 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e Data Ascii: 656<html><head><title></title></head><body><img src="https://s.amazon-adsystem.com/dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=Ze7xfMAoIeEAAAzaAIdO4AAAEGAAAAAB&gpp=&gpp_sid=" style="display:non
2024-03-11 11:56:44 UTC	1248	IN	Data Raw: 41 41 7a 61 41 49 64 4f 34 41 41 41 25 32 36 34 31 39 32 26 61 6d 70 3b 67 70 64 72 3d 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 26 61 6d 70 3b 67 70 70 3d 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 63 61 73 61 6c 65 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 Data Ascii: AAzaAIdO4AAA%264192&gpdr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://match.adsrvr.org/track/cmf/casale" style="display:none" width="0" height="0" alt="" bord
2024-03-11 11:56:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	49830	34.111.113.62	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:44 UTC	663	OUT	GET /idsync/ex/receive?partner_id=3371&partner_device_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:44 UTC	1087	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:56:44 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1710158204884;Expires=Fri, 10 May 2024 11:56:44 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=3d92896e-6439-4f25-b0dc-753e207e1323;Expires=Fri, 10 May 2024 11:56:44 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://pixel.tapad.com/idsync/ex/receive/check?partner_id=3371&partner_device_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.16	49831	35.71.139.29	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:44 UTC	661	OUT	GET /xuid?mid=7976&xuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:45 UTC	699	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:56:44 GMT Content-Length: 0 Connection: close Location: /xuid?ld=1&mid=7976&xuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&dongle=u6nf&gdpr=0&cmp_cs=&us_privacy= Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=626499573555793188163; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Sun, 09 Jun 2024 11:56:44 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=626499573555793188163; Max-Age=7776000; Expires=Sun, 09 Jun 2024 11:56:44 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.16	49826	52.11.41.99	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:44 UTC	747	OUT	GET /cookie-sync/pm?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: checkForPermission=ok
2024-03-11 11:56:44 UTC	388	IN	HTTP/1.1 303 See Other Date: Mon, 11 Mar 2024 11:56:44 GMT location: https://match.prod.bidr.io/cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 Server: gunicorn set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Mon, 11 Mar 2024 12:06:44 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.16	49834	35.71.131.137	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:44 UTC	641	OUT	GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:45 UTC	501	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:56:44 GMT Content-Length: 211 Connection: close server: Kestrel location: https://match.adsrvr.org/track/cmb/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= set-cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; expires=Tue, 11 Mar 2025 11:56:44 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSgCMgsIpO-e36Hz4DwQBTgB; expires=Tue, 11 Mar 2025 11:56:44 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-11 11:56:45 UTC	211	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 70 75 62 6d 61 74 69 63 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 70 75 62 6d 61 74 69 63 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://match.adsrvr.org/track/cmb/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent=">https://match.adsrvr.org/track/cmb/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.16	49825	52.46.155.104	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:44 UTC	800	OUT	GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=9A176ADB-73F4-4BD8-A648-23F2443493B5&redir=true&gdpr=0&gdpr_consent= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:45 UTC	815	IN	HTTP/1.1 302 Found Server: Server Date: Mon, 11 Mar 2024 11:56:44 GMT Content-Length: 0 Connection: close x-amz-rid: SWCXK851WP6TYF49JG76 Set-Cookie: ad-id=A_mD47eJIUzEqu3DVtJD2b0\|t; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 11:56:44 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=9A176ADB-73F4-4BD8-A648-23F2443493B5&redir=true&gdpr=0&gdpr_consent=&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.16	49833	35.230.38.116	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:44 UTC	723	OUT	GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:45 UTC	961	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Mon, 11 Mar 2024 11:56:45 GMT Content-Type: text/html Content-Length: 142 Connection: close Set-Cookie: suid=B6512778B5DA4E7C942E6E491CF4A04A; Path=/; domain=simpli.fi; Expires=Wed, 12-Mar-25 11:56:45 GMT; SameSite=none; Secure; Set-Cookie: suid_legacy=B6512778B5DA4E7C942E6E491CF4A04A; Path=/; domain=simpli.fi; Expires=Wed, 12-Mar-25 11:56:45 GMT; Secure; Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:B6512778B5DA4E7C942E6E491CF4A04A Expires: Sun, 10 Mar 2024 11:56:45 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-03-11 11:56:45 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.16	49836	130.211.23.194	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:44 UTC	347	OUT	GET /country HTTP/1.1 Host: api.btloader.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:45 UTC	300	IN	HTTP/1.1 200 OK Cache-Control: private, max-age=300, stale-while-revalidate=600, stale-if-error=600 Content-Type: application/json Vary: Origin Date: Mon, 11 Mar 2024 11:56:45 GMT Content-Length: 16 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:56:45 UTC	16	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d Data Ascii: {"country":"US"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.16	49835	64.74.236.159	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:44 UTC	764	OUT	GET /usersync/smart/?cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D116%26partneruserid%3D__ZUID__&gdpr=0&gdpr_consent=&s=2 HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=njquBca-QhUZqz9ypfJV
2024-03-11 11:56:45 UTC	627	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 140 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=116&partneruserid=njquBca-QhUZqz9ypfJV&gdpr=0 P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=njquBca-QhUZqz9ypfJV; Path=/; Domain=zemanta.com; Expires=Tue, 11 Mar 2025 11:56:45 GMT; Max-Age=31536000; Secure; SameSite=None Date: Mon, 11 Mar 2024 11:56:45 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-03-11 11:56:45 UTC	140	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 74 62 2d 63 73 79 6e 63 2e 73 6d 61 72 74 61 64 73 65 72 76 65 72 2e 63 6f 6d 2f 72 65 64 69 72 2f 3f 69 73 73 69 3d 31 26 61 6d 70 3b 70 61 72 74 6e 65 72 69 64 3d 31 31 36 26 61 6d 70 3b 70 61 72 74 6e 65 72 75 73 65 72 69 64 3d 6e 6a 71 75 42 63 61 2d 51 68 55 5a 71 7a 39 79 70 66 4a 56 26 61 6d 70 3b 67 64 70 72 3d 30 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=116&partneruserid=njquBca-QhUZqz9ypfJV&gdpr=0">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.16	49832	40.76.134.238	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:44 UTC	832	OUT	GET /l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx%209A176ADB-73F4-4BD8-A648-23F2443493B5&rnd=RND HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:45 UTC	176	IN	HTTP/1.1 403 Forbidden Server: Microsoft-Azure-Application-Gateway/v2 Date: Mon, 11 Mar 2024 11:56:45 GMT Content-Type: text/html Content-Length: 581 Connection: close
2024-03-11 11:56:45 UTC	581	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 4d 69 63 72 6f 73 6f 66 74 2d 41 7a 75 72 65 2d 41 70 70 6c 69 63 61 74 69 6f 6e 2d 47 61 74 65 77 61 79 2f 76 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>Microsoft-Azure-Application-Gateway/v2</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a pa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.16	49837	23.105.12.121	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:45 UTC	1147	OUT	GET /redir/?issi=1&partnerid=134&partneruserid=OB_OK&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmart_adserver_eb%26google_hm%3DSMART_USER_ID_B64&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1
2024-03-11 11:56:45 UTC	464	IN	HTTP/1.1 302 Found content-length: 0 date: Mon, 11 Mar 2024 11:56:45 GMT cache-control: no-cache,no-store location: https://cm.g.doubleclick.net/pixel?google_nid=smart_adserver_eb&google_hm=MTg5OTUwNTg5MDU5NDU2NTI0OA==&gdpr=0&gdpr_consent= pragma: no-cache set-cookie: csync=134:OB_OK; expires=Tue, 11 Mar 2025 11:56:45 GMT; domain=smartadserver.com; path=/; SameSite=None; secure p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.16	49850	172.64.151.101	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:45 UTC	556	OUT	GET /usermatch?cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D33%26partneruserid%3D&gdpr=0&gdpr_consent=&s=179394&C=1 HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
2024-03-11 11:56:45 UTC	996	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:45 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 862b5cf0f81a09ed-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; Path=/; Domain=casalemedia.com; Expires=Tue, 11 Mar 2025 11:56:45 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=4192; Path=/; Domain=casalemedia.com; Expires=Sun, 09 Jun 2024 11:56:45 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GbAp6fv7aQyV5iWUvBTLhCEVhkYWTTrd%2BfscTTV%2F0Yf20s0TTnYC50b7ZzB%2BWGOkPD6JNZpxyBQGM0MFzp8VkolmQO59wYhzQseXlrcod22kha8grfb2PPDKpfh%2B8Ttwr2MMzEbuTL%2FBMg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-11 11:56:45 UTC	373	IN	Data Raw: 36 61 33 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 69 6e 64 65 78 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 6d 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 5a 65 37 78 66 4d 41 6f 49 65 45 41 41 41 7a 61 41 49 64 4f 34 41 41 41 45 47 41 41 41 41 41 42 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 26 61 6d 70 3b 67 64 70 72 3d 26 61 6d 70 3b 67 70 70 3d 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 Data Ascii: 6a3<html><head><title></title></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=index&google_cm&google_hm=Ze7xfMAoIeEAAAzaAIdO4AAAEGAAAAAB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=" style="display:none"
2024-03-11 11:56:45 UTC	1333	IN	Data Raw: 41 41 41 41 41 42 3f 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 26 61 6d 70 3b 67 64 70 72 3d 26 61 6d 70 3b 67 70 70 3d 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 63 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 34 36 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 24 55 49 44 22 20 73 74 79 Data Ascii: AAAAAB?gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://secure.adnxs.com/getuid?https://dsum-sec.casalemedia.com/crum?cm_dsp_id=46&external_user_id=$UID" sty
2024-03-11 11:56:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.16	49854	35.71.131.137	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:45 UTC	728	OUT	GET /track/cmb/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; TDCPM=CAEYBSgCMgsIpO-e36Hz4DwQBTgB
2024-03-11 11:56:45 UTC	609	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:56:45 GMT Content-Length: 355 Connection: close server: Kestrel location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent= set-cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; expires=Tue, 11 Mar 2025 11:56:45 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFGAUgASgCMgsIpO-e36Hz4DwQBTgB; expires=Tue, 11 Mar 2025 11:56:45 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-11 11:56:45 UTC	355	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 49 34 4e 44 6b 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 37 31 64 63 64 36 35 37 2d 62 37 63 65 2d 34 65 35 36 2d 39 30 36 34 2d 30 66 38 33 39 37 39 66 38 66 63 62 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 Data Ascii: Redirecting to: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent=">https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.16	49847	142.251.2.132	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:45 UTC	855	OUT	GET /safeframe/1-0-40/html/container.html HTTP/1.1 Host: fa43ad241d35ec2179c810415c543e64.safeframe.googlesyndication.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:45 UTC	707	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-gpt-scs" Report-To: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} Timing-Allow-Origin: * Content-Length: 6162 Date: Mon, 11 Mar 2024 11:56:45 GMT Expires: Tue, 11 Mar 2025 11:56:45 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Thu, 03 Nov 2022 19:10:08 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:56:45 UTC	545	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 61 66 65 46 72 61 6d 65 20 43 6f 6e 74 61 69 6e 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 6e 3d 66 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8"> <title>SafeFrame Container</title> <script>(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var f=this\|\|self,h=function(a){return a};var n=f
2024-03-11 11:56:45 UTC	1252	IN	Data Raw: 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 6f 6f 67 23 68 74 6d 6c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 68 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 68 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 68 7d 29 7d 63 61 74 63 68 28 63 29 7b 66 2e 63 6f 6e 73 6f 6c 65 26 26 66 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 63 2e 6d 65 73 73 61 67 65 29 7d 74 3d 61 7d 65 6c 73 65 20 74 3d 61 7d 72 65 74 75 72 6e 20 74 7d 3b 76 61 72 20 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 67 3d 62 61 3d 3d 3d 62 61 3f 61 3a 22 22 7d 3b 63 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2b 22 22 7d 3b 76 61 72 20 62 61 3d 7b 7d 2c 64 61 3d 66 75 6e 63 74 69 Data Ascii: .createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=functi
2024-03-11 11:56:45 UTC	1252	IN	Data Raw: 74 68 69 73 2e 69 3d 22 26 22 3b 74 68 69 73 2e 68 3d 7b 7d 3b 74 68 69 73 2e 6f 3d 30 3b 74 68 69 73 2e 67 3d 5b 5d 7d 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 3b 63 5b 61 5d 3d 62 3b 72 65 74 75 72 6e 5b 63 5d 7d 2c 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 6b 3d 5b 5d 3b 6a 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 67 2c 41 29 7b 28 67 3d 70 61 28 67 2c 62 2c 63 2c 64 2c 65 29 29 26 26 6b 2e 70 75 73 68 28 41 2b 22 3d 22 2b 67 29 7d 29 3b 72 65 74 75 72 6e 20 6b 2e 6a 6f 69 6e 28 62 29 7d 2c 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 72 65 74 75 72 6e 22 22 3b 62 3d 62 7c 7c 22 26 22 3b 63 3d 63 7c 7c 22 2c 24 22 3b 22 73 74 Data Ascii: this.i="&";this.h={};this.o=0;this.g=[]},z=function(a,b){var c={};c[a]=b;return[c]},qa=function(a,b,c,d,e){var k=[];ja(a,function(g,A){(g=pa(g,b,c,d,e))&&k.push(A+"="+g)});return k.join(b)},pa=function(a,b,c,d,e){if(null==a)return"";b=b\|\|"&";c=c\|\|",$";"st
2024-03-11 11:56:45 UTC	1252	IN	Data Raw: 28 29 3b 61 2e 6e 61 6d 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6e 61 6d 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6e 61 6d 65 29 3b 61 2e 6d 65 73 73 61 67 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6d 65 73 73 61 67 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6d 65 73 73 61 67 65 29 3b 69 66 28 61 2e 73 74 61 63 6b 29 7b 61 3d 61 2e 73 74 61 63 6b 3b 76 61 72 20 63 3d 62 3b 74 72 79 7b 2d 31 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 63 29 26 26 28 61 3d 63 2b 22 5c 6e 22 2b 61 29 3b 66 6f 72 28 76 61 72 20 64 3b 61 21 3d 64 3b 29 64 3d 61 2c 61 3d 61 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 28 28 68 74 74 70 73 3f 3a 2f 2e 2e 2a 2f 29 5b 5e 2f 3a 5d 2a 3a 5c 5c 64 2b 28 3f 3a 2e 7c 5c 6e 29 2a 29 5c 5c 32 22 29 2c Data Ascii: ();a.name&&-1==b.indexOf(a.name)&&(b+=": "+a.name);a.message&&-1==b.indexOf(a.message)&&(b+=": "+a.message);if(a.stack){a=a.stack;var c=b;try{-1==a.indexOf(c)&&(a=c+"\n"+a);for(var d;a!=d;)d=a,a=a.replace(RegExp("((https?:/../)[^/:]:\\d+(?:.\|\n)*)\\2"),
2024-03-11 11:56:45 UTC	1252	IN	Data Raw: 5b 32 5d 2c 45 3d 43 5b 33 5d 3b 69 66 28 44 3e 45 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 50 61 72 73 65 64 20 63 6f 6e 74 65 6e 74 20 73 69 7a 65 20 64 6f 65 73 6e 27 74 20 6d 61 74 63 68 2e 20 22 2b 44 2b 22 3a 22 2b 45 2e 6c 65 6e 67 74 68 29 3b 42 3d 7b 6d 3a 43 5b 31 5d 2c 63 6f 6e 74 65 6e 74 3a 45 2e 73 75 62 73 74 72 28 30 2c 44 29 2c 6c 3a 45 2e 73 75 62 73 74 72 28 44 29 7d 3b 76 61 72 20 46 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 42 2e 6c 29 3b 77 69 6e 64 6f 77 2e 6e 61 6d 65 3d 22 22 3b 76 61 72 20 42 61 3d 42 2e 63 6f 6e 74 65 6e 74 3b 46 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c 74 26 26 28 66 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c 74 3d 46 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c Data Ascii: [2],E=C[3];if(D>E.length)throw Error("Parsed content size doesn't match. "+D+":"+E.length);B={m:C[1],content:E.substr(0,D),l:E.substr(D)};var F=JSON.parse(B.l);window.name="";var Ba=B.content;F.goog_safeframe_hlt&&(f.goog_safeframe_hlt=F.goog_safeframe_hl
2024-03-11 11:56:45 UTC	609	IN	Data Raw: 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 21 31 29 2c 46 61 3d 6e 75 6c 6c 2c 55 3d 4b 2e 6c 65 6e 67 74 68 2d 31 2c 56 3d 55 3b 30 3c 3d 56 3b 2d 2d 56 29 7b 76 61 72 20 57 3d 4b 5b 56 5d 3b 21 46 61 26 26 6b 61 2e 74 65 73 74 28 57 2e 75 72 6c 29 26 26 28 46 61 3d 57 29 3b 69 66 28 57 2e 75 72 6c 26 26 21 57 2e 6a 29 7b 78 3d 57 3b 62 72 65 61 6b 7d 7d 76 61 72 20 6c 61 3d 6e 75 6c 6c 2c 47 61 3d 4b 2e 6c 65 6e 67 74 68 26 26 4b 5b 55 5d 2e 75 72 6c 3b 30 21 3d 78 2e 64 65 70 74 68 26 26 47 61 26 26 28 6c 61 3d 4b 5b 55 5d 29 3b 48 3d 6e 65 77 20 6d 61 3b 69 66 28 48 2e 68 29 7b 76 61 72 20 48 61 3d 48 2e 68 2e 75 72 6c 7c 7c 22 22 3b 49 2e 67 2e 70 75 73 68 28 34 29 3b 49 2e 68 5b 34 5d 3d 7a 28 22 74 6f 70 22 2c 48 61 29 7d 76 61 72 20 49 61 3d 7b Data Ascii: .location.href,!1),Fa=null,U=K.length-1,V=U;0<=V;--V){var W=K[V];!Fa&&ka.test(W.url)&&(Fa=W);if(W.url&&!W.j){x=W;break}}var la=null,Ga=K.length&&K[U].url;0!=x.depth&&Ga&&(la=K[U]);H=new ma;if(H.h){var Ha=H.h.url\|\|"";I.g.push(4);I.h[4]=z("top",Ha)}var Ia={

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.16	49841	192.184.67.84	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:45 UTC	633	OUT	GET /pixel/p-EtBqU4Lj3YbAv.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:45 UTC	723	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:56:45 GMT Content-Length: 0 Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://rtb-csync.smartadserver.com/redir/?partnerid=80&gdpr=0&partneruserid=VbPHRgW3lUdOvpMVAr6PFFq_wxdOsJYSBeXINTmx P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=EGgBDQGsK4ir0QA; expires=Sun, 09-Jun-2024 11:56:45 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Set-Cookie: mc=65eef17d-816a8-799a4-641fc; expires=Fri, 11-Apr-2025 11:56:45 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.16	49849	35.190.80.1	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:45 UTC	555	OUT	OPTIONS /report/v3?s=9osDsD0KECxM30sW%2BMfXPezVzYJvhqZmlIRs1WKAqgkRBpu3Sae8lx3bYLeiPxaCGDMW67M9V4jiEjqWinR7zXMGBGS3ZaJfHnfiKBPEYdxDm5990mhn38qyuWvCVsFOjoksAI4vvqCMWg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://ssum-sec.casalemedia.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:45 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Mon, 11 Mar 2024 11:56:45 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.16	49852	52.11.41.99	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:45 UTC	804	OUT	GET /cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAKPDU7L3eMAABWFZYx_mg; bitoIsSecure=ok; checkForPermission=ok
2024-03-11 11:56:45 UTC	654	IN	HTTP/1.1 303 See Other Date: Mon, 11 Mar 2024 11:56:45 GMT location: https://rtb-csync.smartadserver.com/redir?partneruserid=AAKPDU7L3eMAABWFZYx_mg&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dsyn%252Cpp%252Cpm%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dpm%26bee_sync_hop_count%3D1%26userid%3DSMART_USER_ID&gdpr=0 Server: gunicorn set-cookie: bito=AAKPDU7L3eMAABWFZYx_mg; Domain=bidr.io; expires=Thu, 10 Apr 2025 07:56:45 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.16	49851	34.111.113.62	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:45 UTC	749	OUT	GET /idsync/ex/receive/check?partner_id=3371&partner_device_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1710158204884; TapAd_DID=3d92896e-6439-4f25-b0dc-753e207e1323
2024-03-11 11:56:45 UTC	1227	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:56:45 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1710158204884;Expires=Fri, 10 May 2024 11:56:45 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=3d92896e-6439-4f25-b0dc-753e207e1323;Expires=Fri, 10 May 2024 11:56:45 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Fri, 10 May 2024 11:56:45 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=3d92896e-6439-4f25-b0dc-753e207e1323%252C%252C&gdpr=0&gdpr_consent= Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.16	49856	35.71.139.29	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:45 UTC	739	OUT	GET /xuid?ld=1&mid=7976&xuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&dongle=u6nf&gdpr=0&cmp_cs=&us_privacy= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=626499573555793188163; tluid=626499573555793188163
2024-03-11 11:56:45 UTC	610	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:45 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=626499573555793188163; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Sun, 09 Jun 2024 11:56:45 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=626499573555793188163; Max-Age=7776000; Expires=Sun, 09 Jun 2024 11:56:45 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-03-11 11:56:45 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.16	49846	216.22.16.5	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:45 UTC	766	OUT	GET /api/sync?callerId=47&gdpr=0&gdpr_consent= HTTP/1.1 Host: ssbsync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1
2024-03-11 11:56:45 UTC	121	IN	HTTP/1.1 200 OK content-length: 664 content-type: text/html date: Mon, 11 Mar 2024 11:56:45 GMT connection: close
2024-03-11 11:56:45 UTC	664	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 2f 6d 61 74 63 68 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 2f 73 79 6e 63 2f 76 31 3f 73 6f 75 72 63 65 5f 69 64 3d 39 38 4b 55 7a 33 37 79 70 65 39 44 33 58 32 73 66 39 6f 76 67 65 54 74 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 73 6f 75 72 63 65 5f 75 73 65 72 5f 69 64 3d 31 38 39 39 35 30 35 38 39 30 35 39 34 35 36 35 32 34 38 22 20 2f 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 73 2e 71 75 61 6e 74 73 65 72 76 65 2e 63 6f 6d 2f 70 69 78 65 6c 2f 70 2d 45 74 42 71 55 34 4c 6a 33 59 62 41 76 2e 67 69 66 3f 69 64 6d 61 74 63 68 3d 30 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 Data Ascii: <html><head></head><body><img src="//match.sharethrough.com/sync/v1?source_id=98KUz37ype9D3X2sf9ovgeTt&gdpr=0&gdpr_consent=&source_user_id=1899505890594565248" /><img src="https://cms.quantserve.com/pixel/p-EtBqU4Lj3YbAv.gif?idmatch=0&gdpr=0&gdpr_consent

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.16	49857	52.46.155.104	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:45 UTC	847	OUT	GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=9A176ADB-73F4-4BD8-A648-23F2443493B5&redir=true&gdpr=0&gdpr_consent=&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_mD47eJIUzEqu3DVtJD2b0\|t
2024-03-11 11:56:46 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 11 Mar 2024 11:56:45 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: WERHWY2HAMVC04H3YJG4 Set-Cookie: ad-id=A_mD47eJIUzEqu3DVtJD2b0; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 11:56:45 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 11:56:45 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-11 11:56:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.16	49858	23.105.12.121	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:45 UTC	1031	OUT	GET /redir/?issi=1&partnerid=116&partneruserid=njquBca-QhUZqz9ypfJV&gdpr=0 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1
2024-03-11 11:56:46 UTC	375	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:56:45 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=116:njquBca-QhUZqz9ypfJV; expires=Tue, 11 Mar 2025 11:56:45 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:56:46 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.16	49859	204.237.133.120	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:45 UTC	924	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:B6512778B5DA4E7C942E6E491CF4A04A HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; chkChromeAb67Sec=1; pi=162538:2; DPSync3=1710720000%3A265%7C1711324800%3A263_201%7C1710201600%3A248; SyncRTB3=1711324800%3A13_104_166_71_220_21_54_250%7C1710720000%3A223_2
2024-03-11 11:56:46 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 11 Mar 2024 11:56:45 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:45 GMT; path=/ Set-Cookie: PugT=1710158205; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:45 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:46 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.16	49864	23.105.12.121	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:46 UTC	1060	OUT	GET /redir/?partnerid=80&gdpr=0&partneruserid=VbPHRgW3lUdOvpMVAr6PFFq_wxdOsJYSBeXINTmx HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=134:OB_OK
2024-03-11 11:56:46 UTC	404	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:56:45 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=80:VbPHRgW3lUdOvpMVAr6PFFq_wxdOsJYSBeXINTmx\|134:OB_OK; expires=Wed, 12 Mar 2025 11:56:46 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:56:46 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.16	49863	204.68.111.105	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:46 UTC	968	OUT	GET /project/docfetcher/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe?ts=gAAAAABl7vF0arkZoBG4HgUHnaplv-d94ovZWFq7ZlRzfmtWWm532Ry1XAVcVTBIOdrz8dJsKCAe6DI9KZWMj8HTscOW04l1Ew%3D%3D&use_mirror=newcontinuum&r= HTTP/1.1 Host: downloads.sourceforge.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1854926735.1710158203; _gid=GA1.2.1668299401.1710158203
2024-03-11 11:56:46 UTC	522	IN	HTTP/1.1 302 Found Server: nginx Date: Mon, 11 Mar 2024 11:56:46 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 403 Connection: close Location: https://newcontinuum.dl.sourceforge.net/project/docfetcher/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe Content-Disposition: attachment; filename="docfetcher_1.1.25_win32_setup.exe" Set-Cookie: sf_mirror_attempt=docfetcher:newcontinuum:docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe; Max-Age=120; Path=/; expires=Mon, 11-Mar-2024 11:58:46 GMT
2024-03-11 11:56:46 UTC	403	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 20 20 54 68 65 20 72 65 73 6f 75 72 63 65 20 77 61 73 20 66 6f 75 6e 64 20 61 74 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6e 65 77 63 6f 6e 74 69 6e 75 75 6d 2e 64 6c 2e 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 2f 64 6f 63 66 65 74 63 68 65 72 2f 64 6f 63 66 65 74 63 68 65 72 2f 31 2e 31 2e 32 35 2f 64 6f 63 66 65 74 63 68 65 72 5f 31 2e 31 2e 32 35 5f 77 69 6e 33 32 5f 73 65 74 75 70 2e 65 78 65 22 3e 68 74 74 70 73 3a 2f 2f 6e 65 77 63 6f 6e 74 69 6e 75 75 6d 2e 64 6c 2e 73 6f Data Ascii: <html> <head> <title>302 Found</title> </head> <body> <h1>302 Found</h1> The resource was found at <a href="https://newcontinuum.dl.sourceforge.net/project/docfetcher/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe">https://newcontinuum.dl.so

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.16	49868	35.190.80.1	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:46 UTC	488	OUT	POST /report/v3?s=9osDsD0KECxM30sW%2BMfXPezVzYJvhqZmlIRs1WKAqgkRBpu3Sae8lx3bYLeiPxaCGDMW67M9V4jiEjqWinR7zXMGBGS3ZaJfHnfiKBPEYdxDm5990mhn38qyuWvCVsFOjoksAI4vvqCMWg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 564 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:46 UTC	564	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 36 39 36 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 34 2e 31 35 31 2e 31 30 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 61 62 61 6e 64 6f 6e 65 64 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 Data Ascii: [{"age":1,"body":{"elapsed_time":696,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://sourceforge.net/","sampling_fraction":1.0,"server_ip":"172.64.151.101","status_code":200,"type":"abandoned"},"type":"network-error","url":"
2024-03-11 11:56:46 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Mon, 11 Mar 2024 11:56:45 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.16	49860	35.160.96.43	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:46 UTC	650	OUT	GET /sync/pubmatic/9A176ADB-73F4-4BD8-A648-23F2443493B5?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:46 UTC	778	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:46 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBH7x7mUCEGYBcSpUoDGj5CIMRgqTfFUFEgEBAQFC8GX4ZQAAAAAA_eMAAA&S=AQAAAgghlgOTDQ9ivTTcCSLV0Cg; Expires=Tue, 11 Mar 2025 17:56:46 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-11 11:56:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.16	49871	204.237.133.120	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:46 UTC	892	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; chkChromeAb67Sec=1; pi=162538:2; DPSync3=1710720000%3A265%7C1711324800%3A263_201%7C1710201600%3A248; SyncRTB3=1711324800%3A13_104_166_71_220_21_54_250%7C1710720000%3A223_2
2024-03-11 11:56:46 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 11 Mar 2024 11:56:46 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:46 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.16	49870	204.237.133.120	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:46 UTC	908	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&google_error=15 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; chkChromeAb67Sec=1; pi=162538:2; DPSync3=1710720000%3A265%7C1711324800%3A263_201%7C1710201600%3A248; SyncRTB3=1711324800%3A13_104_166_71_220_21_54_250%7C1710720000%3A223_2
2024-03-11 11:56:46 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 11 Mar 2024 11:56:46 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:46 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.16	49873	104.36.113.107	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:46 UTC	946	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; chkChromeAb67Sec=1; pi=162538:2; DPSync3=1710720000%3A265%7C1711324800%3A263_201%7C1710201600%3A248; SyncRTB3=1711324800%3A13_104_166_71_220_21_54_250%7C1710720000%3A223_2
2024-03-11 11:56:46 UTC	744	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 11 Mar 2024 11:56:45 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 09-Jun-2024 11:56:45 GMT; path=/ Set-Cookie: PugT=1710158205; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:45 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:46 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.16	49869	35.71.131.137	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:46 UTC	817	OUT	GET /track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=3d92896e-6439-4f25-b0dc-753e207e1323%252C%252C&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFGAUgASgCMgsIpO-e36Hz4DwQBTgB
2024-03-11 11:56:46 UTC	655	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:56:46 GMT Content-Length: 359 Connection: close server: Kestrel location: https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=71dcd657-b7ce-4e56-9064-0f83979f8fcb&ttd_puid=3d92896e-6439-4f25-b0dc-753e207e1323%2C%2C set-cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; expires=Tue, 11 Mar 2025 11:56:46 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFEhQKBXRhcGFkEgsIqK7DwIvz4DwQBRgBIAEoAjILCLSkxu2h8-A8EAU4AVoFdGFwYWRgAg..; expires=Tue, 11 Mar 2025 11:56:46 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-11 11:56:46 UTC	359	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 31 38 33 30 26 70 61 72 74 6e 65 72 5f 64 65 76 69 63 65 5f 69 64 3d 37 31 64 63 64 36 35 37 2d 62 37 63 65 2d 34 65 35 36 2d 39 30 36 34 2d 30 66 38 33 39 37 39 66 38 66 63 62 26 74 74 64 5f 70 75 69 64 3d 33 64 39 32 38 39 36 65 2d 36 34 33 39 2d 34 66 32 35 2d 62 30 64 63 2d 37 35 33 65 32 30 37 65 31 33 32 33 25 32 43 25 32 43 22 3e 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 31 38 33 30 26 70 61 72 74 6e 65 Data Ascii: Redirecting to: <a href="https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=71dcd657-b7ce-4e56-9064-0f83979f8fcb&ttd_puid=3d92896e-6439-4f25-b0dc-753e207e1323%2C%2C">https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.16	49875	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:46 UTC	1380	OUT	GET /redir?partneruserid=AAKPDU7L3eMAABWFZYx_mg&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dsyn%252Cpp%252Cpm%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dpm%26bee_sync_hop_count%3D1%26userid%3DSMART_USER_ID&gdpr=0 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=134:OB_OK
2024-03-11 11:56:46 UTC	579	IN	HTTP/1.1 302 Found content-length: 0 date: Mon, 11 Mar 2024 11:56:46 GMT cache-control: no-cache,no-store location: https://match.prod.bidr.io/cookie-sync?gdpr=0&gdpr_consent=&bee_sync_partners=syn%2Cpp%2Cpm&bee_sync_current_partner=sas&bee_sync_initiator=pm&bee_sync_hop_count=1&userid=1899505890594565248&gdpr=0&gdpr_consent= pragma: no-cache set-cookie: csync=127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK; expires=Wed, 12 Mar 2025 11:56:46 GMT; domain=smartadserver.com; path=/; SameSite=None; secure p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.16	49876	34.214.251.32	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:46 UTC	680	OUT	GET /ups/58292/sync?_origin=1&uid=9A176ADB-73F4-4BD8-A648-23F2443493B5&redir=true&gdpr=0&gdpr_consent= HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:46 UTC	624	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:56:46 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://ups.analytics.yahoo.com/ups/58292/sync?_origin=1&uid=9A176ADB-73F4-4BD8-A648-23F2443493B5&redir=true&gdpr=0&gdpr_consent=&verify=true Age: 0 Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo; Expires=Tue, 11 Mar 2025 17:56:46 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.16	49877	52.223.22.214	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:46 UTC	473	OUT	GET /xuid?ld=1&mid=7976&xuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&dongle=u6nf&gdpr=0&cmp_cs=&us_privacy= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=626499573555793188163
2024-03-11 11:56:47 UTC	610	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:46 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=626499573555793188163; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Sun, 09 Jun 2024 11:56:46 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=626499573555793188163; Max-Age=7776000; Expires=Sun, 09 Jun 2024 11:56:46 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-03-11 11:56:47 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.16	49881	216.22.16.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:46 UTC	828	OUT	GET /redir/?issi=1&partnerid=116&partneruserid=njquBca-QhUZqz9ypfJV&gdpr=0 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV
2024-03-11 11:56:47 UTC	375	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:56:46 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=116:njquBca-QhUZqz9ypfJV; expires=Tue, 11 Mar 2025 11:56:47 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:56:47 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.16	49880	204.237.133.120	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:46 UTC	908	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:B6512778B5DA4E7C942E6E491CF4A04A HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; chkChromeAb67Sec=1; pi=162538:2; DPSync3=1710720000%3A265%7C1711324800%3A263_201%7C1710201600%3A248; SyncRTB3=1711324800%3A13_104_166_71_220_21_54_250%7C1710720000%3A223_2; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; PugT=1710158205
2024-03-11 11:56:47 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 11 Mar 2024 11:56:46 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:46 GMT; path=/ Set-Cookie: PugT=1710158206; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:46 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:47 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.16	49882	52.25.158.6	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:46 UTC	807	OUT	GET /cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partners=pm%2Csas%2Cpp%2Csyn%2Cshr&bee_sync_current_partner=adx&bee_sync_initiator=shr&bee_sync_hop_count=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAKPDU7L3eMAABWFZYx_mg; bitoIsSecure=ok; checkForPermission=ok
2024-03-11 11:56:47 UTC	661	IN	HTTP/1.1 303 See Other Date: Mon, 11 Mar 2024 11:56:47 GMT location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AAKPDU7L3eMAABWFZYx_mg&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dsas%252Cpp%252Csyn%252Cshr%26bee_sync_current_partner%3Dpm%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2 Server: gunicorn set-cookie: bito=AAKPDU7L3eMAABWFZYx_mg; Domain=bidr.io; expires=Thu, 10 Apr 2025 07:56:47 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.16	49885	192.82.242.209	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:46 UTC	1109	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=44963125&p=162538&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; chkChromeAb67Sec=1; DPSync3=1710720000%3A265%7C1711324800%3A263_201%7C1710201600%3A248; SyncRTB3=1711324800%3A13_104_166_71_220_21_54_250%7C1710720000%3A223_2; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; PugT=1710158205
2024-03-11 11:56:47 UTC	948	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=2; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=162538:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1711324800%3A13_71_220_54_55_165_8_250_22_104_166_21_46_249_5_3_231%7C1710720000%3A2_15_223; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Mon, 11 Mar 2024 11:56:46 GMT Transfer-Encoding: chunked Connection: close
2024-03-11 11:56:47 UTC	2185	IN	Data Raw: 38 37 64 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 74 68 72 74 6c 65 2e 63 6f 6d 2f 69 6e 73 79 6e 63 3f 76 78 69 69 5f 70 69 64 3d 31 30 30 36 37 26 76 78 69 69 5f 70 64 69 64 3d 39 41 31 37 36 41 44 42 2d 37 33 46 34 2d 34 42 44 38 2d 41 36 34 38 2d 32 33 46 32 34 34 33 34 39 33 42 35 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 34 30 32 34 35 31 39 33 26 76 61 6c 3d 39 41 31 37 36 41 44 42 2d 37 33 46 34 2d 34 42 44 38 2d 41 36 34 38 2d 32 33 46 32 34 34 Data Ascii: 87dPubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=9A176ADB-73F4-4BD8-A648-23F244

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.16	49892	34.111.113.62	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:46 UTC	814	OUT	GET /idsync/ex/receive?partner_id=1830&partner_device_id=71dcd657-b7ce-4e56-9064-0f83979f8fcb&ttd_puid=3d92896e-6439-4f25-b0dc-753e207e1323%2C%2C HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1710158204884; TapAd_DID=3d92896e-6439-4f25-b0dc-753e207e1323; TapAd_3WAY_SYNCS=
2024-03-11 11:56:47 UTC	1101	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:47 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1710158204884;Expires=Fri, 10 May 2024 11:56:47 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=3d92896e-6439-4f25-b0dc-753e207e1323;Expires=Fri, 10 May 2024 11:56:47 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!1715;Expires=Fri, 10 May 2024 11:56:47 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:56:47 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.16	49888	142.251.2.132	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:46 UTC	600	OUT	GET /rtv/012402262017000/amp4ads-v0.mjs HTTP/1.1 Host: cdn.ampproject.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fa43ad241d35ec2179c810415c543e64.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:47 UTC	1580	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="amphtml-china-available" Report-To: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]} Timing-Allow-Origin: * Content-Length: 200736 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 06 Mar 2024 14:07:25 GMT Expires: Thu, 06 Mar 2025 14:07:25 GMT Cache-Control: public, max-age=31536000 ETag: "28cb2d39d2a36ad8" Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 424162 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:56:47 UTC	1580	IN	Data Raw: 73 65 6c 66 2e 41 4d 50 5f 43 4f 4e 46 49 47 3d 7b 22 76 22 3a 22 30 31 32 34 30 32 32 36 32 30 31 37 30 30 30 22 2c 22 74 79 70 65 22 3a 22 70 72 6f 64 75 63 74 69 6f 6e 22 2c 22 61 6c 6c 6f 77 2d 64 6f 63 2d 6f 70 74 2d 69 6e 22 3a 5b 22 61 6d 70 2d 6e 65 78 74 2d 70 61 67 65 22 5d 2c 22 61 6c 6c 6f 77 2d 75 72 6c 2d 6f 70 74 2d 69 6e 22 3a 5b 5d 2c 22 63 61 6e 61 72 79 22 3a 30 2c 22 61 34 61 50 72 6f 66 69 6c 69 6e 67 52 61 74 65 22 3a 30 2e 30 31 2c 22 64 6f 75 62 6c 65 63 6c 69 63 6b 53 72 61 45 78 70 22 3a 30 2e 30 31 2c 22 64 6f 75 62 6c 65 63 6c 69 63 6b 53 72 61 52 65 70 6f 72 74 45 78 63 6c 75 64 65 64 42 6c 6f 63 6b 22 3a 30 2e 31 2c 22 66 6c 65 78 41 64 53 6c 6f 74 73 22 3a 30 2e 30 35 2c 22 66 6c 65 78 69 62 6c 65 2d 62 69 74 72 61 74 65 22 Data Ascii: self.AMP_CONFIG={"v":"012402262017000","type":"production","allow-doc-opt-in":["amp-next-page"],"allow-url-opt-in":[],"canary":0,"a4aProfilingRate":0.01,"doubleclickSraExp":0.01,"doubleclickSraReportExcludedBlock":0.1,"flexAdSlots":0.05,"flexible-bitrate"
2024-03-11 11:56:47 UTC	1580	IN	Data Raw: 6d 65 6e 74 73 29 3b 73 65 74 54 69 6d 65 6f 75 74 28 28 28 29 3d 3e 7b 74 68 72 6f 77 20 6c 28 69 29 2c 69 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 29 7b 63 6f 6e 73 74 20 69 3d 68 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 69 2e 65 78 70 65 63 74 65 64 3d 21 30 2c 69 7d 76 61 72 7b 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3a 63 2c 74 6f 53 74 72 69 6e 67 3a 64 7d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 3b 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 3d 3d 3d 64 2e 63 61 6c 6c 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 29 7b 63 6f 6e 73 74 20 69 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 72 65 74 75 Data Ascii: ments);setTimeout((()=>{throw l(i),i}))}function u(t){const i=h.apply(null,arguments);return i.expected=!0,i}var{hasOwnProperty:c,toString:d}=Object.prototype;function f(t){return"[object Object]"===d.call(t)}function p(t){const i=Object.create(null);retu
2024-03-11 11:56:47 UTC	1580	IN	Data Raw: 64 7d 60 3a 22 22 29 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 56 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 69 6e 64 65 78 4f 66 28 77 29 3e 3d 30 7d 66 75 6e 63 74 69 6f 6e 20 53 28 74 2c 69 2c 65 3d 22 41 73 73 65 72 74 69 6f 6e 20 66 61 69 6c 65 64 22 2c 73 29 7b 76 61 72 20 6e 2c 72 3b 69 66 28 69 29 72 65 74 75 72 6e 20 69 3b 74 26 26 2d 31 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 74 29 26 26 28 65 2b 3d 74 29 3b 6c 65 74 20 6f 3d 33 3b 63 6f 6e 73 74 20 68 3d 65 2e 73 70 6c 69 74 28 22 25 73 22 29 3b 6c 65 74 20 6c 3d 68 2e 73 68 69 66 74 28 29 3b 63 6f 6e 73 74 20 61 3d 5b 6c 5d 3b 66 6f 72 28 3b 68 2e 6c 65 6e 67 74 68 3b 29 7b 63 6f 6e 73 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 2b 2b 5d 2c 69 3d 68 2e 73 68 69 66 74 28 29 3b 6c 2b 3d 78 28 74 29 2b 69 2c Data Ascii: d}`:""):t}function V(t){return t.indexOf(w)>=0}function S(t,i,e="Assertion failed",s){var n,r;if(i)return i;t&&-1==e.indexOf(t)&&(e+=t);let o=3;const h=e.split("%s");let l=h.shift();const a=[l];for(;h.length;){const t=arguments[o++],i=h.shift();l+=x(t)+i,
2024-03-11 11:56:47 UTC	1580	IN	Data Raw: 28 65 5b 32 5d 2e 72 65 70 6c 61 63 65 28 2f 5c 2b 2f 67 2c 22 20 22 29 2c 65 5b 32 5d 29 3a 22 22 3b 69 5b 74 5d 3d 73 7d 72 65 74 75 72 6e 20 69 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 74 29 7b 63 6f 6e 73 74 7b 6c 6f 63 61 74 69 6f 6e 3a 69 7d 3d 74 7c 7c 73 65 6c 66 3b 72 65 74 75 72 6e 20 57 28 69 2e 6f 72 69 67 69 6e 61 6c 48 61 73 68 7c 7c 69 2e 68 61 73 68 29 7d 76 61 72 20 59 3d 74 3d 3e 73 65 6c 66 2e 41 4d 50 5f 43 4f 4e 46 49 47 3f 73 65 6c 66 2e 41 4d 50 5f 43 4f 4e 46 49 47 5b 74 5d 3a 6e 75 6c 6c 2c 51 3d 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 59 28 22 63 64 6e 50 72 6f 78 79 52 65 67 65 78 22 29 3f 6e 65 77 20 52 65 67 45 78 70 28 59 28 22 63 64 6e 50 72 6f 78 79 52 65 67 65 78 22 29 29 3a 59 28 22 63 64 6e 50 72 6f 78 79 52 65 Data Ascii: (e[2].replace(/\+/g," "),e[2]):"";i[t]=s}return i}function K(t){const{location:i}=t\|\|self;return W(i.originalHash\|\|i.hash)}var Y=t=>self.AMP_CONFIG?self.AMP_CONFIG[t]:null,Q=("string"==typeof Y("cdnProxyRegex")?new RegExp(Y("cdnProxyRegex")):Y("cdnProxyRe
2024-03-11 11:56:47 UTC	1580	IN	Data Raw: 34 65 6d 61 69 6c 22 5d 2e 69 6e 63 6c 75 64 65 73 28 65 2e 64 65 76 65 6c 6f 70 6d 65 6e 74 29 7c 7c 21 21 74 2e 41 4d 50 5f 44 45 56 5f 4d 4f 44 45 7d 76 61 72 20 64 74 3d 28 29 3d 3e 7b 7d 2c 66 74 3d 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 70 74 28 74 29 7b 66 74 3d 74 7d 76 61 72 20 6d 74 3d 28 74 2c 69 29 3d 3e 69 2e 72 65 64 75 63 65 28 28 28 74 2c 69 29 3d 3e 60 24 7b 74 7d 26 73 5b 5d 3d 24 7b 67 74 28 69 29 7d 60 29 2c 60 68 74 74 70 73 3a 2f 2f 6c 6f 67 2e 61 6d 70 2e 64 65 76 2f 3f 76 3d 30 31 32 34 30 32 32 36 32 30 31 37 30 30 30 26 69 64 3d 24 7b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 7d 60 29 2c 67 74 3d 74 3d 3e 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 53 74 72 69 6e 67 28 78 28 74 29 29 29 Data Ascii: 4email"].includes(e.development)\|\|!!t.AMP_DEV_MODE}var dt=()=>{},ft=void 0;function pt(t){ft=t}var mt=(t,i)=>i.reduce(((t,i)=>`${t}&s[]=${gt(i)}`),`https://log.amp.dev/?v=012402262017000&id=${encodeURIComponent(t)}`),gt=t=>encodeURIComponent(String(x(t)))
2024-03-11 11:56:47 UTC	1580	IN	Data Raw: 6c 65 3a 21 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 4e 74 28 74 2c 69 2c 65 29 7b 69 66 28 69 28 74 29 29 65 28 29 3b 65 6c 73 65 7b 63 6f 6e 73 74 20 73 3d 6e 65 77 28 4d 74 28 74 29 2e 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 29 28 28 28 29 3d 3e 7b 69 28 74 29 26 26 28 73 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 65 28 29 29 7d 29 29 3b 73 2e 6f 62 73 65 72 76 65 28 74 2c 7b 63 68 69 6c 64 4c 69 73 74 3a 21 30 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 44 74 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 69 3d 3e 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 4e 74 28 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 28 28 29 3d 3e 21 21 74 2e 62 6f 64 79 29 2c 69 29 7d 28 74 2c 69 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 55 74 28 Data Ascii: le:!0};function Nt(t,i,e){if(i(t))e();else{const s=new(Mt(t).MutationObserver)((()=>{i(t)&&(s.disconnect(),e())}));s.observe(t,{childList:!0})}}function Dt(t){return new Promise((i=>function(t,i){Nt(t.documentElement,(()=>!!t.body),i)}(t,i)))}function Ut(
2024-03-11 11:56:47 UTC	1580	IN	Data Raw: 29 7d 66 75 6e 63 74 69 6f 6e 20 58 74 28 74 2c 69 2c 65 29 7b 72 65 74 75 72 6e 20 30 3d 3d 69 26 26 30 3d 3d 65 7c 7c 30 3d 3d 74 2e 77 69 64 74 68 26 26 30 3d 3d 74 2e 68 65 69 67 68 74 3f 74 3a 59 74 28 74 2e 6c 65 66 74 2b 69 2c 74 2e 74 6f 70 2b 65 2c 74 2e 77 69 64 74 68 2c 74 2e 68 65 69 67 68 74 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 74 28 74 29 7b 72 65 74 75 72 6e 21 74 2e 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 7c 7c 21 74 2e 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 45 6e 74 72 79 7c 7c 21 21 74 2e 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 2e 5f 73 74 75 62 7c 7c 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 2e 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f Data Ascii: )}function Xt(t,i,e){return 0==i&&0==e\|\|0==t.width&&0==t.height?t:Yt(t.left+i,t.top+e,t.width,t.height)}function Jt(t){return!t.IntersectionObserver\|\|!t.IntersectionObserverEntry\|\|!!t.IntersectionObserver._stub\|\|!function(t){try{return new t.IntersectionO
2024-03-11 11:56:47 UTC	1580	IN	Data Raw: 29 3b 2d 31 21 3d 69 26 26 74 68 69 73 2e 63 74 2e 73 70 6c 69 63 65 28 69 2c 31 29 7d 7d 6c 74 28 74 29 7b 63 6f 6e 73 74 20 69 3d 6e 65 77 20 74 28 74 68 69 73 2e 73 74 29 3b 74 68 69 73 2e 75 74 3d 69 3b 66 6f 72 28 63 6f 6e 73 74 20 74 20 6f 66 20 74 68 69 73 2e 63 74 29 69 2e 6f 62 73 65 72 76 65 28 74 29 3b 74 68 69 73 2e 63 74 2e 6c 65 6e 67 74 68 3d 30 7d 7d 3b 73 69 2e 5f 75 70 67 72 61 64 65 72 73 3d 5b 5d 2c 73 65 6c 66 2e 64 6f 63 75 6d 65 6e 74 26 26 28 4a 74 28 65 69 3d 73 65 6c 66 29 26 26 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 2e 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 29 72 65 74 75 72 6e 20 74 2e 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 3d 5a 74 2c 76 6f 69 64 28 74 2e 49 6e 74 65 72 73 Data Ascii: );-1!=i&&this.ct.splice(i,1)}}lt(t){const i=new t(this.st);this.ut=i;for(const t of this.ct)i.observe(t);this.ct.length=0}};si._upgraders=[],self.document&&(Jt(ei=self)&&function(t){if(!t.IntersectionObserver)return t.IntersectionObserver=Zt,void(t.Inters
2024-03-11 11:56:47 UTC	1580	IN	Data Raw: 3d 22 22 3a 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 61 69 2e 69 6e 64 65 78 4f 66 28 69 29 3e 3d 30 3f 22 63 75 73 74 6f 6d 2d 74 65 6d 70 6c 61 74 65 22 3a 22 63 75 73 74 6f 6d 2d 65 6c 65 6d 65 6e 74 22 2c 69 29 2c 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 63 72 69 70 74 22 2c 69 29 2c 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 2d 61 6d 70 68 74 6d 6c 2d 69 6e 73 65 72 74 65 64 22 2c 22 22 29 2c 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 6d 6f 64 75 6c 65 22 29 2c 4b 74 28 74 2e 64 6f 63 75 6d 65 6e 74 2c 73 29 2c 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 72 6f 73 73 6f 72 69 67 69 6e 22 2c 22 61 6e 6f 6e 79 6d 6f 75 73 22 29 3b 63 6f 6e 73 74 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: ="":s.setAttribute(ai.indexOf(i)>=0?"custom-template":"custom-element",i),s.setAttribute("data-script",i),s.setAttribute("i-amphtml-inserted",""),s.setAttribute("type","module"),Kt(t.document,s),s.setAttribute("crossorigin","anonymous");const n=function(t
2024-03-11 11:56:47 UTC	1580	IN	Data Raw: 74 75 72 6e 20 74 2e 6e 6f 64 65 54 79 70 65 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 5f 69 28 74 2c 22 61 6d 70 64 6f 63 22 29 7d 28 4d 74 28 74 29 29 2e 67 65 74 41 6d 70 44 6f 63 28 74 29 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 4d 69 28 74 29 7b 63 6f 6e 73 74 20 69 3d 52 69 28 74 29 3b 72 65 74 75 72 6e 20 69 2e 69 73 53 69 6e 67 6c 65 44 6f 63 28 29 3f 69 2e 77 69 6e 3a 69 7d 66 75 6e 63 74 69 6f 6e 20 77 69 28 74 2c 69 29 7b 54 74 28 43 69 28 74 2c 69 29 29 3b 63 6f 6e 73 74 20 65 3d 53 69 28 74 29 5b 69 5d 3b 72 65 74 75 72 6e 20 65 2e 6f 62 6a 7c 7c 28 54 74 28 65 2e 63 74 6f 72 29 2c 54 74 28 65 2e 63 6f 6e 74 65 78 74 29 2c 65 2e 6f 62 6a 3d 6e 65 77 20 65 2e 63 74 6f 72 28 65 2e 63 6f 6e 74 65 78 74 29 2c 54 74 28 65 2e 6f 62 6a Data Ascii: turn t.nodeType?function(t){return _i(t,"ampdoc")}(Mt(t)).getAmpDoc(t):t}function Mi(t){const i=Ri(t);return i.isSingleDoc()?i.win:i}function wi(t,i){Tt(Ci(t,i));const e=Si(t)[i];return e.obj\|\|(Tt(e.ctor),Tt(e.context),e.obj=new e.ctor(e.context),Tt(e.obj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.16	49890	204.237.133.120	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:46 UTC	879	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&google_error=15 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; chkChromeAb67Sec=1; DPSync3=1710720000%3A265%7C1711324800%3A263_201%7C1710201600%3A248; SyncRTB3=1711324800%3A13_104_166_71_220_21_54_250%7C1710720000%3A223_2; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; PugT=1710158205
2024-03-11 11:56:47 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 11 Mar 2024 11:56:47 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:47 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.16	49898	204.237.133.120	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:46 UTC	863	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; chkChromeAb67Sec=1; DPSync3=1710720000%3A265%7C1711324800%3A263_201%7C1710201600%3A248; SyncRTB3=1711324800%3A13_104_166_71_220_21_54_250%7C1710720000%3A223_2; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; PugT=1710158205
2024-03-11 11:56:47 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 11 Mar 2024 11:56:47 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:47 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.16	49886	142.251.2.132	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:46 UTC	608	OUT	GET /rtv/012402262017000/v0/amp-ad-exit-0.1.mjs HTTP/1.1 Host: cdn.ampproject.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fa43ad241d35ec2179c810415c543e64.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:47 UTC	1579	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="amphtml-china-available" Report-To: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]} Timing-Allow-Origin: * Content-Length: 14931 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 06 Mar 2024 14:07:25 GMT Expires: Thu, 06 Mar 2025 14:07:25 GMT Cache-Control: public, max-age=31536000 ETag: "49cab81f34612748" Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 424162 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:56:47 UTC	1579	IN	Data Raw: 3b 0a 28 73 65 6c 66 2e 41 4d 50 3d 73 65 6c 66 2e 41 4d 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 7b 6d 3a 31 2c 76 3a 22 32 34 30 32 32 36 32 30 31 37 30 30 30 22 2c 6e 3a 22 61 6d 70 2d 61 64 2d 65 78 69 74 22 2c 65 76 3a 22 30 2e 31 22 2c 6c 3a 21 30 2c 66 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 28 28 29 3d 3e 7b 76 61 72 20 6e 2c 7b 69 73 41 72 72 61 79 3a 65 7d 3d 41 72 72 61 79 2c 7b 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3a 69 2c 74 6f 53 74 72 69 6e 67 3a 72 7d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 3b 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 63 6f 6e 73 74 20 6e 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 22 6d 65 73 73 61 67 65 22 29 3b 69 66 28 6e 75 6c 6c 21 3d 6e 26 Data Ascii: ;(self.AMP=self.AMP\|\|[]).push({m:1,v:"2402262017000",n:"amp-ad-exit",ev:"0.1",l:!0,f:function(t,n){(()=>{var n,{isArray:e}=Array,{hasOwnProperty:i,toString:r}=Object.prototype;function s(t){const n=Object.getOwnPropertyDescriptor(t,"message");if(null!=n&
2024-03-11 11:56:47 UTC	1579	IN	Data Raw: 6e 63 74 69 6f 6e 20 67 28 74 29 7b 72 65 74 75 72 6e 20 6d 28 29 7d 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 72 65 74 75 72 6e 20 64 2e 64 65 76 7c 7c 28 64 2e 64 65 76 3d 6d 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 74 2c 6e 2c 65 2c 69 2c 72 2c 73 2c 6f 2c 63 2c 75 2c 6c 2c 61 29 7b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 6e 2c 65 2c 69 2c 72 2c 73 2c 6f 2c 63 2c 75 2c 6c 2c 61 29 7b 72 65 74 75 72 6e 20 62 28 29 2e 61 73 73 65 72 74 28 74 2c 6e 2c 65 2c 69 2c 72 2c 73 2c 6f 2c 63 2c 75 2c 6c 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 74 2c 6e 2c 65 2c 69 29 7b 63 6f 6e 73 74 20 72 3d 6a 28 74 29 2c 73 3d 53 28 72 29 3b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 2c 69 2c 72 2c 73 29 7b 63 6f 6e 73 74 20 6f 3d 50 28 74 29 Data Ascii: nction g(t){return m()}function y(){return d.dev\|\|(d.dev=m())}function _(t,n,e,i,r,s,o,c,u,l,a){return t}function A(t,n,e,i,r,s,o,c,u,l,a){return b().assert(t,n,e,i,r,s,o,c,u,l,a)}function I(t,n,e,i){const r=j(t),s=S(r);!function(t,n,e,i,r,s){const o=P(t)
2024-03-11 11:56:47 UTC	1579	IN	Data Raw: 2c 63 6f 6e 74 65 78 74 3a 6e 75 6c 6c 2c 63 74 6f 72 3a 6e 75 6c 6c 7d 7d 76 61 72 20 43 3d 22 68 6f 73 74 2d 76 69 73 69 62 69 6c 69 74 79 22 2c 44 3d 22 68 6f 73 74 2d 66 75 6c 6c 73 63 72 65 65 6e 22 2c 46 3d 22 68 6f 73 74 2d 65 78 69 74 22 2c 4d 3d 63 6c 61 73 73 7b 73 74 61 74 69 63 20 69 73 41 76 61 69 6c 61 62 6c 65 28 74 29 7b 72 65 74 75 72 6e 21 21 28 6e 3d 74 2c 6a 28 6e 29 29 2e 67 65 74 48 65 61 64 4e 6f 64 65 28 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 73 63 72 69 70 74 5b 68 6f 73 74 2d 73 65 72 76 69 63 65 5d 22 29 3b 76 61 72 20 6e 7d 73 74 61 74 69 63 20 76 69 73 69 62 69 6c 69 74 79 46 6f 72 44 6f 63 28 74 29 7b 72 65 74 75 72 6e 20 54 28 74 2c 43 29 7d 73 74 61 74 69 63 20 69 6e 73 74 61 6c 6c 56 69 73 69 62 69 6c 69 74 79 Data Ascii: ,context:null,ctor:null}}var C="host-visibility",D="host-fullscreen",F="host-exit",M=class{static isAvailable(t){return!!(n=t,j(n)).getHeadNode().querySelector("script[host-service]");var n}static visibilityForDoc(t){return T(t,C)}static installVisibility
2024-03-11 11:56:47 UTC	1579	IN	Data Raw: 28 47 28 7b 7d 2c 42 29 2c 7b 7d 2c 7b 22 62 67 22 3a 22 68 74 74 70 73 3a 2f 2f 74 70 63 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 62 34 61 2f 65 78 70 65 72 69 6d 65 6e 74 61 6c 2f 62 34 61 2d 72 75 6e 6e 65 72 2e 68 74 6d 6c 22 7d 29 2c 42 29 3b 66 75 6e 63 74 69 6f 6e 20 4a 28 74 2c 6e 2c 65 29 7b 69 66 28 41 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 2e 66 69 6e 61 6c 55 72 6c 2c 22 66 69 6e 61 6c 55 72 6c 20 6f 66 20 74 61 72 67 65 74 20 27 25 73 27 20 6d 75 73 74 20 62 65 20 61 20 73 74 72 69 6e 67 22 2c 74 29 2c 6e 2e 66 69 6c 74 65 72 73 26 26 6e 2e 66 69 6c 74 65 72 73 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 41 28 65 2e 66 69 6c 74 65 72 73 5b 74 5d 2c 22 66 69 6c 74 65 72 20 27 25 73 27 20 6e 6f 74 20 Data Ascii: (G({},B),{},{"bg":"https://tpc.googlesyndication.com/b4a/experimental/b4a-runner.html"}),B);function J(t,n,e){if(A("string"==typeof n.finalUrl,"finalUrl of target '%s' must be a string",t),n.filters&&n.filters.forEach((t=>{A(e.filters[t],"filter '%s' not
2024-03-11 11:56:47 UTC	1579	IN	Data Raw: 74 74 6f 6d 7d 6f 6e 4c 61 79 6f 75 74 4d 65 61 73 75 72 65 28 29 7b 74 68 69 73 2e 5a 4f 2e 67 65 74 56 73 79 6e 63 28 29 2e 6d 65 61 73 75 72 65 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 7b 77 69 6e 3a 74 7d 3d 74 68 69 73 2e 5a 4f 3b 69 66 28 74 68 69 73 2e 48 4f 29 7b 63 6f 6e 73 74 20 6e 3d 74 2e 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 74 68 69 73 2e 48 4f 29 3b 41 28 6e 2c 60 72 65 6c 61 74 69 76 65 54 6f 20 65 6c 65 6d 65 6e 74 20 24 7b 74 68 69 73 2e 48 4f 7d 20 6e 6f 74 20 66 6f 75 6e 64 2e 60 29 3b 63 6f 6e 73 74 20 65 3d 6e 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 3b 74 68 69 73 2e 51 4f 2e 6c 65 66 74 3d 65 2e 6c 65 66 74 2c 74 68 69 73 2e 51 4f 2e 74 6f 70 3d 65 2e 74 6f 70 2c 74 68 69 73 Data Ascii: ttom}onLayoutMeasure(){this.ZO.getVsync().measure((()=>{const{win:t}=this.ZO;if(this.HO){const n=t.document.querySelector(this.HO);A(n,`relativeTo element ${this.HO} not found.`);const e=n.getBoundingClientRect();this.QO.left=e.left,this.QO.top=e.top,this
2024-03-11 11:56:47 UTC	1579	IN	Data Raw: 65 78 69 74 28 74 29 7b 63 6f 6e 73 74 7b 61 72 67 73 3a 6e 7d 3d 74 3b 6c 65 74 20 65 2c 7b 65 76 65 6e 74 3a 69 7d 3d 74 3b 41 28 22 76 61 72 69 61 62 6c 65 22 69 6e 20 6e 21 3d 22 74 61 72 67 65 74 22 69 6e 20 6e 2c 22 4f 6e 65 20 61 6e 64 20 6f 6e 6c 79 20 6f 6e 65 20 6f 66 20 27 74 61 72 67 65 74 27 20 61 6e 64 20 27 76 61 72 69 61 62 6c 65 27 20 6d 75 73 74 20 62 65 20 73 70 65 63 69 66 69 65 64 22 29 2c 22 76 61 72 69 61 62 6c 65 22 69 6e 20 6e 3f 28 65 3d 74 68 69 73 2e 6e 6a 5b 6e 2e 76 61 72 69 61 62 6c 65 5d 2c 65 7c 7c 28 65 3d 6e 2e 64 65 66 61 75 6c 74 29 2c 41 28 65 2c 60 56 61 72 69 61 62 6c 65 20 74 61 72 67 65 74 20 6e 6f 74 20 66 6f 75 6e 64 2c 20 76 61 72 69 61 62 6c 65 3a 27 24 7b 6e 2e 76 61 72 69 61 62 6c 65 7d 27 2c 20 64 65 66 61 Data Ascii: exit(t){const{args:n}=t;let e,{event:i}=t;A("variable"in n!="target"in n,"One and only one of 'target' and 'variable' must be specified"),"variable"in n?(e=this.nj[n.variable],e\|\|(e=n.default),A(e,`Variable target not found, variable:'${n.variable}', defa
2024-03-11 11:56:47 UTC	1579	IN	Data Raw: 53 69 67 6e 61 6c 29 7b 63 6f 6e 73 74 20 74 3d 72 2e 65 78 70 61 6e 64 53 74 72 69 6e 67 53 79 6e 63 28 6f 2e 69 66 72 61 6d 65 54 72 61 6e 73 70 6f 72 74 53 69 67 6e 61 6c 2c 7b 22 49 46 52 41 4d 45 5f 54 52 41 4e 53 50 4f 52 54 5f 53 49 47 4e 41 4c 22 3a 28 74 2c 6e 29 3d 3e 7b 69 66 28 21 74 7c 7c 21 6e 29 72 65 74 75 72 6e 22 22 3b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 73 6a 5b 74 5d 3b 72 65 74 75 72 6e 20 65 26 26 6e 20 69 6e 20 65 3f 65 5b 6e 5d 3a 76 6f 69 64 20 30 7d 7d 29 3b 69 66 28 6f 2e 69 66 72 61 6d 65 54 72 61 6e 73 70 6f 72 74 53 69 67 6e 61 6c 3d 3d 60 49 46 52 41 4d 45 5f 54 52 41 4e 53 50 4f 52 54 5f 53 49 47 4e 41 4c 24 7b 74 7d 60 29 79 28 29 2e 65 72 72 6f 72 28 6e 74 2c 22 49 6e 76 61 6c 69 64 20 49 46 52 41 4d 45 5f 54 52 41 4e Data Ascii: Signal){const t=r.expandStringSync(o.iframeTransportSignal,{"IFRAME_TRANSPORT_SIGNAL":(t,n)=>{if(!t\|\|!n)return"";const e=this.sj[t];return e&&n in e?e[n]:void 0}});if(o.iframeTransportSignal==`IFRAME_TRANSPORT_SIGNAL${t}`)y().error(nt,"Invalid IFRAME_TRAN
2024-03-11 11:56:47 UTC	1579	IN	Data Raw: 6f 66 20 74 2c 22 27 74 61 72 67 65 74 73 27 20 6d 75 73 74 20 62 65 20 61 6e 20 6f 62 6a 65 63 74 22 29 3b 66 6f 72 28 63 6f 6e 73 74 20 65 20 69 6e 20 74 29 4a 28 65 2c 74 5b 65 5d 2c 6e 29 7d 28 74 2e 74 61 72 67 65 74 73 2c 74 29 2c 74 7d 28 75 28 6e 2e 74 65 78 74 43 6f 6e 74 65 6e 74 29 29 3b 6c 65 74 20 65 3b 73 3d 74 2e 6f 70 74 69 6f 6e 73 2c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 3d 3d 3d 72 2e 63 61 6c 6c 28 73 29 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 2e 6f 70 74 69 6f 6e 73 2e 73 74 61 72 74 54 69 6d 69 6e 67 45 76 65 6e 74 26 26 28 65 3d 74 2e 6f 70 74 69 6f 6e 73 2e 73 74 61 72 74 54 69 6d 69 6e 67 45 76 65 6e 74 2c 74 68 69 73 2e 65 6a 2e 73 70 6c 69 63 65 28 30 2c 31 2c 5f 28 51 28 22 6d 69 6e 44 65 6c 61 Data Ascii: of t,"'targets' must be an object");for(const e in t)J(e,t[e],n)}(t.targets,t),t}(u(n.textContent));let e;s=t.options,"[object Object]"===r.call(s)&&"string"==typeof t.options.startTimingEvent&&(e=t.options.startTimingEvent,this.ej.splice(0,1,_(Q("minDela
2024-03-11 11:56:47 UTC	1579	IN	Data Raw: 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 74 72 79 7b 63 6f 6e 73 74 20 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 63 6f 6e 73 74 20 65 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 2e 64 65 66 61 75 6c 74 56 69 65 77 2c 69 3d 6e 7c 7c 4f 28 65 29 3b 69 66 28 65 26 26 65 21 3d 69 26 26 4f 28 65 29 3d 3d 69 29 74 72 79 7b 72 65 74 75 72 6e 20 65 2e 66 72 61 6d 65 45 6c 65 6d 65 6e 74 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 28 74 2c 6e 29 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 3b 69 66 28 22 41 4d 50 2d 41 44 22 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 29 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 65 2e 67 65 74 52 65 73 6f 75 72 63 65 49 64 28 29 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 Data Ascii: urn function(t,n){try{const e=function(t,n){const e=(t.ownerDocument\|\|t).defaultView,i=n\|\|O(e);if(e&&e!=i&&O(e)==i)try{return e.frameElement}catch(t){}return null}(t,n).parentElement;if("AMP-AD"==e.nodeName)return String(e.getResourceId())}catch(t){}retur
2024-03-11 11:56:47 UTC	720	IN	Data Raw: 65 74 75 72 6e 20 74 2e 64 61 74 61 7d 28 74 29 29 3b 6e 26 26 22 69 66 72 61 6d 65 2d 74 72 61 6e 73 70 6f 72 74 2d 72 65 73 70 6f 6e 73 65 22 3d 3d 6e 2e 74 79 70 65 26 26 28 74 68 69 73 2e 64 6a 28 6e 2c 74 2e 6f 72 69 67 69 6e 29 2c 6e 2e 63 72 65 61 74 69 76 65 49 64 3d 3d 74 68 69 73 2e 6f 6a 26 26 28 74 68 69 73 2e 73 6a 5b 6e 2e 76 65 6e 64 6f 72 5d 3d 6e 2e 6d 65 73 73 61 67 65 29 29 7d 29 2c 76 6f 69 64 20 30 29 29 29 7d 64 6a 28 74 2c 6e 29 7b 41 28 74 2e 6d 65 73 73 61 67 65 2c 22 52 65 63 65 69 76 65 64 20 65 6d 70 74 79 20 72 65 73 70 6f 6e 73 65 20 66 72 6f 6d 20 33 70 20 61 6e 61 6c 79 74 69 63 73 20 66 72 61 6d 65 22 29 2c 41 28 74 2e 63 72 65 61 74 69 76 65 49 64 2c 22 52 65 63 65 69 76 65 64 20 6d 61 6c 66 6f 72 6d 65 64 20 6d 65 73 73 Data Ascii: eturn t.data}(t));n&&"iframe-transport-response"==n.type&&(this.dj(n,t.origin),n.creativeId==this.oj&&(this.sj[n.vendor]=n.message))}),void 0)))}dj(t,n){A(t.message,"Received empty response from 3p analytics frame"),A(t.creativeId,"Received malformed mess

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.16	49887	142.251.2.132	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:46 UTC	610	OUT	GET /rtv/012402262017000/v0/amp-analytics-0.1.mjs HTTP/1.1 Host: cdn.ampproject.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fa43ad241d35ec2179c810415c543e64.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:47 UTC	1579	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="amphtml-china-available" Report-To: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]} Timing-Allow-Origin: * Content-Length: 96795 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 06 Mar 2024 14:07:25 GMT Expires: Thu, 06 Mar 2025 14:07:25 GMT Cache-Control: public, max-age=31536000 ETag: "d87e4eaec13170fc" Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 424162 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:56:47 UTC	1579	IN	Data Raw: 3b 0a 28 73 65 6c 66 2e 41 4d 50 3d 73 65 6c 66 2e 41 4d 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 7b 6d 3a 31 2c 76 3a 22 32 34 30 32 32 36 32 30 31 37 30 30 30 22 2c 6e 3a 22 61 6d 70 2d 61 6e 61 6c 79 74 69 63 73 22 2c 65 76 3a 22 30 2e 31 22 2c 6c 3a 21 30 2c 66 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 28 28 29 3d 3e 7b 76 61 72 20 69 3b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 72 65 74 75 72 6e 20 69 7c 7c 28 69 3d 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 76 6f 69 64 20 30 29 29 7d 76 61 72 20 65 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 70 72 6f 6d 69 73 65 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 74 2c 69 29 3d 3e 7b 74 68 69 73 2e 72 65 73 6f 6c 76 65 3d 74 2c 74 68 69 73 2e 72 65 6a 65 63 74 3d 69 7d 29 Data Ascii: ;(self.AMP=self.AMP\|\|[]).push({m:1,v:"2402262017000",n:"amp-analytics",ev:"0.1",l:!0,f:function(t,i){(()=>{var i;function s(){return i\|\|(i=Promise.resolve(void 0))}var e=class{constructor(){this.promise=new Promise(((t,i)=>{this.resolve=t,this.reject=i})
2024-03-11 11:56:47 UTC	1579	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 49 28 74 2c 69 2c 73 29 7b 63 6f 6e 73 74 20 65 3d 69 7c 7c 28 74 3d 3e 74 29 2c 7b 64 61 74 61 73 65 74 3a 6e 7d 3d 74 2c 72 3d 7b 7d 2c 6f 3d 73 7c 7c 2f 5e 70 61 72 61 6d 28 2e 2b 29 2f 3b 66 6f 72 28 63 6f 6e 73 74 20 74 20 69 6e 20 6e 29 7b 63 6f 6e 73 74 20 69 3d 74 2e 6d 61 74 63 68 28 6f 29 3b 69 26 26 28 72 5b 65 28 69 5b 31 5d 5b 30 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2b 69 5b 31 5d 2e 73 75 62 73 74 72 28 31 29 29 5d 3d 6e 5b 74 5d 29 7d 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 76 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 70 61 72 65 6e 74 26 26 74 2e 70 61 72 65 6e 74 21 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 52 28 74 29 7b 63 6f 6e 73 74 20 69 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 Data Ascii: unction I(t,i,s){const e=i\|\|(t=>t),{dataset:n}=t,r={},o=s\|\|/^param(.+)/;for(const t in n){const i=t.match(o);i&&(r[e(i[1][0].toLowerCase()+i[1].substr(1))]=n[t])}return r}function v(t){return t.parent&&t.parent!=t}function R(t){const i=Object.getOwnProper
2024-03-11 11:56:47 UTC	1579	IN	Data Raw: 76 61 72 20 78 3d 73 65 6c 66 2e 5f 5f 41 4d 50 5f 4c 4f 47 3b 66 75 6e 63 74 69 6f 6e 20 55 28 74 2c 69 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 66 61 69 6c 65 64 20 74 6f 20 63 61 6c 6c 20 69 6e 69 74 4c 6f 67 43 6f 6e 73 74 72 75 63 74 6f 72 22 29 7d 66 75 6e 63 74 69 6f 6e 20 48 28 74 29 7b 72 65 74 75 72 6e 20 78 2e 75 73 65 72 7c 7c 28 78 2e 75 73 65 72 3d 6a 28 29 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 26 69 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 21 3d 74 7d 28 78 2e 75 73 65 72 2e 77 69 6e 2c 74 29 3f 78 2e 75 73 65 72 46 6f 72 45 6d 62 65 64 7c 7c 28 78 2e 75 73 65 72 46 6f 72 45 6d 62 65 64 3d 6a 28 29 29 3a 78 2e 75 73 65 72 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: var x=self.__AMP_LOG;function U(t,i){throw new Error("failed to call initLogConstructor")}function H(t){return x.user\|\|(x.user=j()),function(t,i){return i&&i.ownerDocument.defaultView!=t}(x.user.win,t)?x.userForEmbed\|\|(x.userForEmbed=j()):x.user}function
2024-03-11 11:56:47 UTC	1579	IN	Data Raw: 74 69 6f 6e 20 69 74 28 74 2c 69 29 7b 63 6f 6e 73 74 20 73 3d 73 74 28 74 29 5b 69 5d 3b 72 65 74 75 72 6e 20 73 3f 73 2e 70 72 6f 6d 69 73 65 3f 73 2e 70 72 6f 6d 69 73 65 3a 28 51 28 74 2c 69 29 2c 73 2e 70 72 6f 6d 69 73 65 3d 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 2e 6f 62 6a 29 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 73 74 28 74 29 7b 6c 65 74 20 69 3d 74 2e 5f 5f 41 4d 50 5f 53 45 52 56 49 43 45 53 3b 72 65 74 75 72 6e 20 69 7c 7c 28 69 3d 74 2e 5f 5f 41 4d 50 5f 53 45 52 56 49 43 45 53 3d 7b 7d 29 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 65 74 28 74 2c 69 29 7b 63 6f 6e 73 74 20 73 3d 74 2e 5f 5f 41 4d 50 5f 53 45 52 56 49 43 45 53 26 26 74 2e 5f 5f 41 4d 50 5f 53 45 52 56 49 43 45 53 5b 69 5d 3b 72 65 74 75 72 6e 21 28 21 73 7c 7c Data Ascii: tion it(t,i){const s=st(t)[i];return s?s.promise?s.promise:(Q(t,i),s.promise=Promise.resolve(s.obj)):null}function st(t){let i=t.__AMP_SERVICES;return i\|\|(i=t.__AMP_SERVICES={}),i}function et(t,i){const s=t.__AMP_SERVICES&&t.__AMP_SERVICES[i];return!(!s\|\|
2024-03-11 11:56:47 UTC	1579	IN	Data Raw: 6f 77 6e 22 2c 22 6b 65 79 75 70 22 5d 2c 52 74 3d 5b 22 6d 6f 75 73 65 6c 65 61 76 65 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 4d 74 28 74 2c 69 2c 73 29 7b 72 65 74 75 72 6e 20 69 20 69 6e 20 74 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2c 7b 76 61 6c 75 65 3a 73 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 74 5b 69 5d 3d 73 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 62 74 28 74 2c 69 29 7b 76 61 72 20 73 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 65 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 Data Ascii: own","keyup"],Rt=["mouseleave"];function Mt(t,i,s){return i in t?Object.defineProperty(t,i,{value:s,enumerable:!0,configurable:!0,writable:!0}):t[i]=s,t}function bt(t,i){var s=Object.keys(t);if(Object.getOwnPropertySymbols){var e=Object.getOwnPropertySymb
2024-03-11 11:56:47 UTC	1579	IN	Data Raw: 53 68 69 66 74 22 3a 22 43 55 4d 55 4c 41 54 49 56 45 5f 4c 41 59 4f 55 54 5f 53 48 49 46 54 22 2c 22 64 6f 63 75 6d 65 6e 74 43 68 61 72 73 65 74 22 3a 22 44 4f 43 55 4d 45 4e 54 5f 43 48 41 52 53 45 54 22 2c 22 64 6f 63 75 6d 65 6e 74 52 65 66 65 72 72 65 72 22 3a 22 44 4f 43 55 4d 45 4e 54 5f 52 45 46 45 52 52 45 52 22 2c 22 64 6f 6d 49 6e 74 65 72 61 63 74 69 76 65 54 69 6d 65 22 3a 22 44 4f 4d 5f 49 4e 54 45 52 41 43 54 49 56 45 5f 54 49 4d 45 22 2c 22 64 6f 6d 61 69 6e 4c 6f 6f 6b 75 70 54 69 6d 65 22 3a 22 44 4f 4d 41 49 4e 5f 4c 4f 4f 4b 55 50 5f 54 49 4d 45 22 2c 22 65 78 70 65 72 69 6d 65 6e 74 42 72 61 6e 63 68 65 73 22 3a 22 45 58 50 45 52 49 4d 45 4e 54 5f 42 52 41 4e 43 48 45 53 22 2c 22 65 78 74 65 72 6e 61 6c 52 65 66 65 72 72 65 72 22 3a Data Ascii: Shift":"CUMULATIVE_LAYOUT_SHIFT","documentCharset":"DOCUMENT_CHARSET","documentReferrer":"DOCUMENT_REFERRER","domInteractiveTime":"DOM_INTERACTIVE_TIME","domainLookupTime":"DOMAIN_LOOKUP_TIME","experimentBranches":"EXPERIMENT_BRANCHES","externalReferrer":
2024-03-11 11:56:47 UTC	1579	IN	Data Raw: 61 6d 70 22 3a 22 54 49 4d 45 53 54 41 4d 50 22 2c 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 54 49 4d 45 5a 4f 4e 45 22 2c 22 74 69 6d 65 7a 6f 6e 65 43 6f 64 65 22 3a 22 54 49 4d 45 5a 4f 4e 45 5f 43 4f 44 45 22 2c 22 74 69 74 6c 65 22 3a 22 54 49 54 4c 45 22 2c 22 74 6f 74 61 6c 45 6e 67 61 67 65 64 54 69 6d 65 22 3a 22 54 4f 54 41 4c 5f 45 4e 47 41 47 45 44 5f 54 49 4d 45 22 2c 22 75 61 63 68 22 3a 22 55 41 43 48 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 55 53 45 52 5f 41 47 45 4e 54 22 2c 22 76 69 65 77 65 72 22 3a 22 56 49 45 57 45 52 22 2c 22 76 69 65 77 70 6f 72 74 48 65 69 67 68 74 22 3a 22 56 49 45 57 50 4f 52 54 5f 48 45 49 47 48 54 22 2c 22 76 69 65 77 70 6f 72 74 57 69 64 74 68 22 3a 22 56 49 45 57 50 4f 52 54 5f 57 49 44 54 48 22 7d 7d 27 29 3b Data Ascii: amp":"TIMESTAMP","timezone":"TIMEZONE","timezoneCode":"TIMEZONE_CODE","title":"TITLE","totalEngagedTime":"TOTAL_ENGAGED_TIME","uach":"UACH","userAgent":"USER_AGENT","viewer":"VIEWER","viewportHeight":"VIEWPORT_HEIGHT","viewportWidth":"VIEWPORT_WIDTH"}}');
2024-03-11 11:56:47 UTC	1579	IN	Data Raw: 6d 65 2c 22 2e 6c 6f 63 61 6c 68 6f 73 74 22 29 7c 7c 2f 5e 5c 2f 5c 2f 2f 2e 74 65 73 74 28 74 29 2c 27 25 73 20 25 73 20 6d 75 73 74 20 73 74 61 72 74 20 77 69 74 68 20 22 68 74 74 70 73 3a 2f 2f 22 20 6f 72 20 22 2f 2f 22 20 6f 72 20 62 65 20 72 65 6c 61 74 69 76 65 20 61 6e 64 20 73 65 72 76 65 64 20 66 72 6f 6d 20 65 69 74 68 65 72 20 68 74 74 70 73 20 6f 72 20 66 72 6f 6d 20 6c 6f 63 61 6c 68 6f 73 74 2e 20 49 6e 76 61 6c 69 64 20 76 61 6c 75 65 3a 20 25 73 27 2c 69 2c 73 2c 74 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 47 74 28 74 29 7b 72 65 74 75 72 6e 20 78 74 2e 63 64 6e 50 72 6f 78 79 52 65 67 65 78 2e 74 65 73 74 28 48 74 28 74 29 2e 6f 72 69 67 69 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 57 74 28 74 2c 69 29 7b 69 66 28 21 74 7c 7c 22 3f 22 3d 3d 74 Data Ascii: me,".localhost")\|\|/^\/\//.test(t),'%s %s must start with "https://" or "//" or be relative and served from either https or from localhost. Invalid value: %s',i,s,t),t}function Gt(t){return xt.cdnProxyRegex.test(Ht(t).origin)}function Wt(t,i){if(!t\|\|"?"==t
2024-03-11 11:56:47 UTC	1579	IN	Data Raw: 2c 65 2c 22 64 65 6c 65 74 65 22 2c 44 61 74 65 2e 6e 6f 77 28 29 2d 31 65 33 2c 73 29 2c 73 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 74 28 74 2c 69 2c 73 2c 65 2c 6e 2c 72 2c 6f 29 7b 22 61 6d 70 70 72 6f 6a 65 63 74 2e 6f 72 67 22 3d 3d 6e 26 26 28 73 3d 22 64 65 6c 65 74 65 22 2c 65 3d 30 29 3b 63 6f 6e 73 74 20 68 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 69 29 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 73 29 2b 22 3b 20 70 61 74 68 3d 2f 22 2b 28 6e 3f 22 3b 20 64 6f 6d 61 69 6e 3d 22 2b 6e 3a 22 22 29 2b 22 3b 20 65 78 70 69 72 65 73 3d 22 2b 6e 65 77 20 44 61 74 65 28 65 29 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 2b 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 72 65 74 75 72 Data Ascii: ,e,"delete",Date.now()-1e3,s),s}return null}function Qt(t,i,s,e,n,r,o){"ampproject.org"==n&&(s="delete",e=0);const h=encodeURIComponent(i)+"="+encodeURIComponent(s)+"; path=/"+(n?"; domain="+n:"")+"; expires="+new Date(e).toUTCString()+function(t,i){retur
2024-03-11 11:56:47 UTC	1579	IN	Data Raw: 57 69 6e 64 6f 77 29 7b 74 2e 73 70 6c 69 63 65 28 73 2c 31 29 3b 63 6f 6e 73 74 7b 65 76 65 6e 74 73 3a 6e 7d 3d 65 3b 66 6f 72 28 63 6f 6e 73 74 20 74 20 69 6e 20 6e 29 6e 5b 74 5d 2e 73 70 6c 69 63 65 28 30 2c 31 2f 30 29 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 74 28 69 29 7d 29 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 69 28 74 2c 69 29 7b 72 65 74 75 72 6e 20 69 3f 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 61 6d 70 2d 33 70 2d 73 65 6e 74 69 6e 65 6c 22 29 3a 22 61 6d 70 22 7d 66 75 6e 63 74 69 6f 6e 20 6c 69 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 5f 5f 41 4d 50 5f 45 4d 42 45 44 5f 5f 7d 66 75 6e 63 74 69 6f 6e 20 66 69 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 69 2d 61 Data Ascii: Window){t.splice(s,1);const{events:n}=e;for(const t in n)n[t].splice(0,1/0).forEach((t=>{t(i)}))}}}function ai(t,i){return i?t.getAttribute("data-amp-3p-sentinel"):"amp"}function li(t){return t.__AMP_EMBED__}function fi(t){return t.classList.contains("i-a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.16	49899	104.36.113.111	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:47 UTC	1022	OUT	GET /AdServer/SPug?partnerID=162538&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; chkChromeAb67Sec=1; DPSync3=1710720000%3A265%7C1711324800%3A263_201%7C1710201600%3A248; SyncRTB3=1711324800%3A13_104_166_71_220_21_54_250%7C1710720000%3A223_2; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; PugT=1710158205
2024-03-11 11:56:47 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 11 Mar 2024 11:56:47 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1710158207; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:47 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.16	49879	52.44.255.182	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:47 UTC	752	OUT	GET /d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:47 UTC	549	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Mon, 11 Mar 2024 11:56:47 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&gdpr=0&gdpr_consent= Set-Cookie: cu=31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99\|1710158207259; Path=/; Domain=ipredictive.com; Expires=Tue, 11 Mar 2025 11:56:47 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: 8b8017ab-11de-4a1e-b717-d91b9d404ec3 Content-Length: 205 Connection: Close
2024-03-11 11:56:47 UTC	205	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 71 63 7a 30 78 4a 6d 4e 76 5a 47 55 39 4d 7a 49 31 4d 43 5a 30 62 44 30 78 4d 6a 6b 32 4d 44 41 3d 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 33 31 61 62 36 62 32 61 2d 35 35 32 66 2d 34 65 66 32 2d 38 66 31 62 2d 32 62 31 65 62 31 62 61 33 63 39 39 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.16	49907	104.36.113.110	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:47 UTC	1477	OUT	GET /AdServer/ImgSync?p=156557&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; chkChromeAb67Sec=1; DPSync3=1710720000%3A265%7C1711324800%3A263_201%7C1710201600%3A248; SyncRTB3=1711324800%3A13_104_166_71_220_21_54_250%7C1710720000%3A223_2; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; PugT=1710158205; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb
2024-03-11 11:56:47 UTC	1136	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: https://pixel-sync.sitescout.com/dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: SyncRTB3=1711324800%3A166_71_220_21_13_54_250_55_104%7C1710720000%3A223_2; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; domain=pubmatic.com; path=/; max-age=3; SameSite=None; secure; Set-Cookie: pi=156557:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=2; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Mon, 11 Mar 2024 11:56:46 GMT Content-Length: 104 Connection: close
2024-03-11 11:56:47 UTC	104	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2d 73 79 6e 63 2e 73 69 74 65 73 63 6f 75 74 2e 63 6f 6d 2f 64 6d 70 2f 70 69 78 65 6c 53 79 6e 63 3f 6e 69 64 3d 33 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://pixel-sync.sitescout.com/dmp/pixelSync?nid=3&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.16	49891	216.22.16.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:47 UTC	869	OUT	GET /redir/?partnerid=80&gdpr=0&partneruserid=VbPHRgW3lUdOvpMVAr6PFFq_wxdOsJYSBeXINTmx HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=80:VbPHRgW3lUdOvpMVAr6PFFq_wxdOsJYSBeXINTmx\|134:OB_OK
2024-03-11 11:56:47 UTC	404	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:56:46 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=80:VbPHRgW3lUdOvpMVAr6PFFq_wxdOsJYSBeXINTmx\|134:OB_OK; expires=Tue, 11 Mar 2025 11:56:47 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:56:47 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.16	49906	104.36.113.107	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:47 UTC	1119	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; chkChromeAb67Sec=1; DPSync3=1710720000%3A265%7C1711324800%3A263_201%7C1710201600%3A248; SyncRTB3=1711324800%3A13_104_166_71_220_21_54_250%7C1710720000%3A223_2; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; PugT=1710158205; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb
2024-03-11 11:56:47 UTC	744	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 11 Mar 2024 11:56:47 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 09-Jun-2024 11:56:47 GMT; path=/ Set-Cookie: PugT=1710158207; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:47 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:47 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.16	49908	52.11.41.99	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:47 UTC	942	OUT	GET /cookie-sync?gdpr=0&gdpr_consent=&bee_sync_partners=syn%2Cpp%2Cpm&bee_sync_current_partner=sas&bee_sync_initiator=pm&bee_sync_hop_count=1&userid=1899505890594565248&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAKPDU7L3eMAABWFZYx_mg; bitoIsSecure=ok; checkForPermission=ok
2024-03-11 11:56:47 UTC	665	IN	HTTP/1.1 303 See Other Date: Mon, 11 Mar 2024 11:56:47 GMT location: https://sync.technoratimedia.com/services?uid=AAKPDU7L3eMAABWFZYx_mg&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26gdpr_consent%3D%26userid%3D1899505890594565248%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dpp%252Cpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dpm%26bee_sync_hop_count%3D2&gdpr=0 Server: gunicorn set-cookie: bito=AAKPDU7L3eMAABWFZYx_mg; Domain=bidr.io; expires=Thu, 10 Apr 2025 07:56:47 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.16	49901	54.215.97.222	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:47 UTC	667	OUT	GET /sync/v1?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:56:47 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:47 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:56:47 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:56:47 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.16	49900	35.80.168.78	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:47 UTC	521	OUT	GET /sync/pubmatic/9A176ADB-73F4-4BD8-A648-23F2443493B5?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBH7x7mUCEGYBcSpUoDGj5CIMRgqTfFUFEgEBAQFC8GX4ZQAAAAAA_eMAAA&S=AQAAAgghlgOTDQ9ivTTcCSLV0Cg
2024-03-11 11:56:47 UTC	778	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:47 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBH7x7mUCEGYBcSpUoDGj5CIMRgqTfFUFEgEBAQFC8GX4ZQAAAAAA_eMAAA&S=AQAAAgghlgOTDQ9ivTTcCSLV0Cg; Expires=Tue, 11 Mar 2025 17:56:47 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-11 11:56:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.16	49914	34.214.251.32	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:47 UTC	799	OUT	GET /ups/58292/sync?_origin=1&uid=9A176ADB-73F4-4BD8-A648-23F2443493B5&redir=true&gdpr=0&gdpr_consent=&verify=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo
2024-03-11 11:56:47 UTC	740	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:56:47 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC=18z8~2h8b;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Tue, 11-Mar-2025 11:56:47 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://image4.pubmatic.com/AdServer/SPug?partnerID=156078&xid=y-kkpOYpRE2uXr60n7MUr_n01xFPJAlGQ-~A&gdpr=0 Age: 0 Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo; Expires=Tue, 11 Mar 2025 17:56:47 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.16	49905	64.79.96.4	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:47 UTC	1108	OUT	GET /project/docfetcher/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe HTTP/1.1 Host: newcontinuum.dl.sourceforge.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1854926735.1710158203; _gid=GA1.2.1668299401.1710158203; __gads=ID=806480862cdec327:T=1710158205:RT=1710158205:S=ALNI_MZV8ZRZt7qUr4lWaLAdyOMDfWC3Pw; __gpi=UID=00000dc711d040cf:T=1710158205:RT=1710158205:S=ALNI_MYQzLcEAv8EJ93__iIVQ9u9QC8WIg; __eoi=ID=e972aa2e3a81bcab:T=1710158205:RT=1710158205:S=AA-AfjYfakrdTZ6-TF2azSnvDeBb
2024-03-11 11:56:47 UTC	291	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:47 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips Last-Modified: Tue, 25 May 2021 20:21:10 GMT ETag: "466f5bd-5c32d44510846" Accept-Ranges: bytes Content-Length: 73856445 Connection: close Content-Type: application/octet-stream
2024-03-11 11:56:47 UTC	16384	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 ad 31 29 81 e9 50 47 d2 e9 50 47 d2 e9 50 47 d2 2a 5f 18 d2 eb 50 47 d2 e9 50 46 d2 49 50 47 d2 2a 5f 1a d2 e6 50 47 d2 bd 73 77 d2 e3 50 47 d2 2e 56 41 d2 e8 50 47 d2 52 69 63 68 e9 50 47 d2 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 22 d7 24 5f 00 00 00 00 00 00 00 00 e0 00 0f 01 0b 01 06 00 00 66 00 00 00 7c 02 00 00 04 00 00 48 33 00 00 00 10 00 00 00 80 00 00 00 00 40 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$1)PGPGPG_PGPFIPG_PGswPG.VAPGRichPGPEL"$_f\|H3@
2024-03-11 11:56:47 UTC	16384	IN	Data Raw: 88 a8 42 00 ff 35 20 f4 42 00 ff 15 4c 82 40 00 83 0d 7c a8 42 00 ff 68 92 51 40 00 6a fc 89 45 f4 ff 75 fc ff 15 48 82 40 00 53 6a 06 6a 21 57 57 a3 84 a8 42 00 ff 15 3c 80 40 00 68 ff 00 ff 00 a3 74 a8 42 00 ff 75 f4 50 ff 15 44 80 40 00 ff 35 74 a8 42 00 6a 02 68 09 11 00 00 ff 75 fc ff d6 53 53 68 1c 11 00 00 ff 75 fc ff d6 3b c7 7d 0c 53 57 68 1b 11 00 00 ff 75 fc ff d6 ff 75 f4 ff 15 60 80 40 00 33 ff 8b 45 e8 8b 04 b8 3b c3 74 27 83 ff 20 74 03 89 5d f0 50 53 e8 e8 14 00 00 50 53 68 43 01 00 00 ff 75 f8 ff d6 57 50 68 51 01 00 00 ff 75 f8 ff d6 47 83 ff 21 7c c9 8b 7d 14 8b 45 f0 ff 74 87 30 6a 15 ff 75 08 e8 a7 f4 ff ff 8b 45 f0 ff 74 87 34 6a 16 ff 75 08 e8 96 f4 ff ff 33 ff 39 1d 6c f4 42 00 89 5d f4 0f 8e c9 00 00 00 8b 45 ec 8d 50 08 89 55 e4 Data Ascii: B5 BL@\|BhQ@jEuH@Sjj!WWB<@htBuPD@5tBjhuSShu;}SWhuu`@3E;t' t]PSPShCuWPhQuG!\|}Et0juEt4ju39lB]EPU
2024-03-11 11:56:48 UTC	16384	IN	Data Raw: 6f 70 65 6e 00 00 00 00 25 75 2e 25 75 25 73 25 73 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 67 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 a3 40 00 a4 a3 40 00 c0 a3 40 00 90 a3 40 00 c0 a3 40 00 74 a3 40 00 68 a3 40 00 58 a3 40 00 68 a3 40 00 44 a3 40 00 3c a3 40 00 24 a3 40 00 3c a3 40 00 a8 02 00 00 1c a3 40 00 b5 01 00 00 1c a3 40 00 0c a3 40 00 00 a3 40 00 ec a2 40 00 e4 a2 40 00 cc a2 40 00 e4 a2 40 00 b8 a2 40 00 e4 a2 40 00 a8 a2 40 00 56 65 72 51 75 65 72 79 56 61 6c 75 65 41 00 00 47 65 74 46 69 6c 65 56 65 72 73 69 6f 6e 49 6e 66 6f 41 00 47 65 74 46 69 6c 65 56 65 72 73 69 6f 6e 49 6e 66 6f 53 69 7a 65 41 00 56 45 52 53 49 4f 4e 00 53 48 47 65 74 46 6f 6c 64 65 72 50 61 74 68 41 00 00 00 Data Ascii: open%u.%u%s%s(g@@@@@t@h@X@h@D@<@$@<@@@@@@@@@@@@VerQueryValueAGetFileVersionInfoAGetFileVersionInfoSizeAVERSIONSHGetFolderPathA
2024-03-11 11:56:48 UTC	16384	IN	Data Raw: 95 9e 5d 4b 42 3f d3 b8 c2 90 8b 2a cc 2b 9f ce b4 a1 76 d3 ae 2f 5d df 3d 72 5b 1f 32 f4 88 51 fd 64 fa 73 b1 84 cb fb 45 ce 04 8f 9f 1e 3d 48 1e 87 30 18 21 9d 4b f4 45 74 1e f6 08 39 18 fe fc 43 2e 44 f7 fd 42 53 c6 34 25 e8 f1 b7 8b e6 43 d4 74 00 8c 7d 49 3f 66 cc a1 10 67 2c 12 3a 31 c3 46 55 31 5e 67 0a b9 10 14 a7 73 b4 89 7c 9e 61 06 7e 78 6c f6 61 b2 bd 8b 77 20 38 62 d3 3e 79 de 07 e3 f1 59 d5 d1 fd d5 41 6e 53 d7 9e ac af ab ae 25 ab 4a f3 77 42 a5 33 10 5a 07 13 24 dc 68 0b e0 3e cd 25 70 c3 28 f9 c3 a0 b6 2c b5 1b be ab a2 be b9 2b 79 f7 e0 9c ef f1 a1 cd 51 5c d0 ac a3 70 33 3c 87 90 b9 f1 c8 c1 ea e0 89 50 e7 fc fc 2f d4 bb 9f 2c 77 b8 77 49 d3 b6 df c0 64 a3 6f 5e cb dc b7 c4 f5 a5 ef 86 b8 1e e0 98 74 87 6a 08 66 6c 8f c8 b3 0a 6c 51 e5 Data Ascii: ]KB?*+v/]=r[2QdsE=H0!KEt9C.DBS4%Ct}I?fg,:1FU1^gs\|a~xlaw 8b>yYAnS%JwB3Z$h>%p(,+yQ\p3<P/,wwIdo^tjfllQ
2024-03-11 11:56:48 UTC	16384	IN	Data Raw: ed d4 be 45 35 eb 53 ed 17 da af b4 5f 6b 53 75 a3 75 39 ba 1b 74 f9 3a a5 ce 0c 3a e6 d0 dd a9 ab d3 79 75 9b 74 5b 75 11 dd 83 ba 27 40 c7 76 e9 5e d3 1d d0 9d d0 7d ac fb ab ee 0c 58 15 a2 1f ab 9f a2 bf 4d 2f d7 9b f5 73 c1 b6 b8 f4 6b f4 21 fd 3d fa fb f5 8f ea 9f d4 ff 5c bf 17 f4 ed b0 fe 3d 7d b7 fe 33 7d bf fe 5b bd c8 30 c2 90 65 98 60 98 02 b6 c6 6a 28 37 2c 06 cd 7b d0 f0 88 e1 09 c3 d3 86 17 0c bf 34 74 52 cd eb a6 36 87 18 c7 1b 6f 30 4e 33 de 66 94 1b cb 8d 35 c6 65 46 b7 71 ad f1 2e d0 c0 6d c6 c7 8d 3b 8c cf 19 7f 69 7c c9 f8 9a f1 4d e3 31 e3 9f c1 1a 5d 34 5e 02 3d 1c 63 ca 35 e5 99 6e 36 dd 66 92 9b ec a6 db 4d e5 a6 65 a6 55 26 9f 29 68 6a 35 3d 64 7a dc b4 c3 f4 6b d3 2b a6 23 a6 53 a6 bf 9a be 02 ed 1c 69 96 98 27 9a 0b cc 06 b3 1d Data Ascii: E5S_kSuu9t::yut[u'@v^}XM/sk!=\=}3}[0e`j(7,{4tR6o0N3f5eFq.m;i\|M1]4^=c5n6fMeU&)hj5=dzk+#Si'
2024-03-11 11:56:48 UTC	16384	IN	Data Raw: bd 99 8d 84 65 02 7f 85 6b 6c c9 ad 5c 14 49 2d be 9a ba 20 51 73 83 b3 29 57 df 0c 78 9a 6a d8 6d 01 f5 12 54 bd c0 8a 03 35 43 ab ff 59 83 22 bf a1 41 fa 6f df a0 c8 7f d2 20 fd d7 35 08 3e ab 03 f4 8d 51 be b1 a2 a6 0e 55 b3 09 ad 43 fe b8 52 02 76 6c c9 b8 3e fd 8b 32 4a f7 38 38 0c ff 6c 2d a5 fb e5 5a 25 5c 73 1b a5 db 74 db 38 5c c6 3a 4a 97 b5 6e 3c 3e a7 8a d2 cd ab 1a 8f 7f 5e 43 e9 46 c1 19 20 9e 08 ee 7a 3b e8 df d5 55 75 75 eb 56 35 55 6c 2b a9 af c4 b4 66 c2 4f f9 44 75 cb 6f 02 a6 6a 5a 0c 8a ce 72 58 d1 91 fd 28 6b 3d b7 69 62 66 b3 c2 93 45 0d 95 5c 5d d5 04 48 84 0b 30 b7 92 d7 7c 55 1a 46 29 9b 3d d7 b6 74 51 fe b2 65 d4 97 7e 23 ec bf 2b 59 77 43 9b 76 28 67 70 8d d0 b0 5d cb bf 0a e3 9c f0 5b 5e f5 bc f2 9b 61 75 f7 8e a7 fd 19 d2 a4 Data Ascii: ekl\I- Qs)WxjmT5CY"Ao 5>QUCRvl>2J88l-Z%\st8\:Jn<>^CF z;UuuV5Ul+fODuojZrX(k=ibfE\]H0\|UF)=tQe~#+YwCv(gp][^au
2024-03-11 11:56:48 UTC	16384	IN	Data Raw: 73 66 0a 28 80 e3 ed cb f0 d6 6b ec 71 6d 16 0f c2 e5 75 41 b2 cd 02 14 a1 d6 d1 bb 3c 5b cd f9 d1 90 86 ac 8f 98 6e c6 a9 a1 e0 04 d0 0e 4e c8 56 fa 56 b4 10 c4 f9 25 5a 68 e2 19 1f 78 d5 e7 d0 ae 85 a0 59 f4 29 65 75 54 3f 21 1e 3d ef f6 3c ad 3b 7f d8 d8 c5 30 c4 d6 f8 14 36 4c 3b 01 b5 d0 8c ce 48 6f 38 03 6f a7 70 4c 17 24 71 cf df 7a 96 e8 0a bc 4b 0f 5f eb 02 58 3b cb ca a8 ea 75 f2 2e 3f 55 83 32 8f f8 ea 3b 53 34 80 b5 cb 80 36 7a 3f e7 c4 eb ae 54 de 4d e8 e5 63 79 7f 7c 03 24 71 d6 07 a1 60 33 7b b7 83 49 65 1a 81 63 72 bd 3a 40 6b d1 cd 31 8f eb 6b 7b 4a ef 35 03 39 ff cb 93 46 dd a7 b3 a0 53 6c e6 0d 6e 83 3c e9 39 28 92 98 ac b5 be 33 f2 5c f2 25 79 12 72 84 21 07 d5 42 55 7b 94 e7 a9 14 08 15 ed 00 d3 23 70 62 29 a5 37 ce 88 ae 89 71 98 34 Data Ascii: sf(kqmuA<[nNVV%ZhxY)euT?!=<;06L;Ho8opL$qzK_X;u.?U2;S46z?TMcy\|$q`3{Iecr:@k1k{J59FSln<9(3\%yr!BU{#pb)7q4
2024-03-11 11:56:48 UTC	16384	IN	Data Raw: b6 c2 2f d6 00 3f 64 1f 59 01 ff b5 56 1f 7f 3b 11 f3 d3 fd a1 bd 52 6a 8f 3a 56 bc f8 57 f6 67 b0 d2 89 f8 c5 37 4a 79 6a 94 92 6b 52 c6 5b 58 c1 6a e5 c9 f1 6c 31 4e 75 cc b9 46 c9 35 b3 1a b6 6c 3c 95 1a af 8c 32 b1 fc 75 ca 32 7a b9 3e 8f 8a ac 65 f9 db 94 65 f4 dd 5d a2 ac c7 92 e9 5f b2 9c 7d 2c 67 8b 32 ca ac 64 40 8b 35 cc bd 53 75 d7 b0 1c 1f 73 54 31 67 1d cb 6f 60 39 8d cc 71 58 f2 fc 01 38 cb 76 07 cd e9 17 4b 9e 5f 23 97 af 94 2b cd 43 1e 36 b3 2b 41 17 cd b5 28 23 41 25 98 d8 c3 16 b5 18 7d 00 36 c2 c4 c6 99 59 d7 60 9d fc 41 82 e2 45 5a 29 8b e7 20 6c a0 c5 bb c8 ad 71 ae 3e 40 9b ad 34 b4 4a 89 92 37 0f 30 1a 26 17 b3 c5 53 b1 28 a7 c0 e2 08 1d 64 ff 28 b9 22 83 2d 9e 82 4f 66 99 58 8d 32 66 14 a2 f9 88 99 ad 9f 44 18 ed 53 66 59 98 b3 41 Data Ascii: /?dYV;Rj:VWg7JyjkR[Xjl1NuF5l<2u2z>ee]_},g2d@5SusT1go`9qX8vK_#+C6+A(#A%}6Y`AEZ) lq>@4J70&S(d("-OfX2fDSfYA
2024-03-11 11:56:48 UTC	16384	IN	Data Raw: 43 e8 33 56 1a c2 bd 98 f0 1b 61 e1 5c 0b 1d 2d a7 8e 56 ae c2 f6 fb ad c5 bf 3d d7 51 5f 25 bc 9b 2d d8 4d e9 18 12 95 55 43 45 3f 54 4b c1 bb f3 aa d0 b1 5e e9 bb 4d 6f bd 0a 8b df 23 21 6d 13 86 39 30 61 60 5a 68 a5 6d 18 f6 51 66 3d 00 35 13 e9 fb 66 3b 7e 4f 82 ef 1b 89 94 be ea 2e 7d b1 f8 4a 3b fc 65 c3 06 e0 df 41 28 60 ac 1f 76 2a ee 61 59 c5 25 0e dd 77 ad c7 6a ca 22 3c 6a 18 3d 42 f3 40 fb fc 62 ec 76 0b ef 76 6b 1d c2 59 c2 7b 3e 8c df 7d f4 3d 6d ef ca 2a fa b2 11 a9 b4 b2 66 18 ef bd 94 7a df 46 bd 67 50 ef d8 32 eb 97 3d 2c dc bb e8 8a f2 9d 2d f8 2f ea dd c4 01 a2 b9 f6 01 ea 7d f6 50 de 3b e1 e7 1a 4a bd 23 b1 56 ce a1 ef 2b 0b f9 87 87 7f 14 21 41 91 2c d5 5d 9e c2 8a 2b 71 00 b1 61 d8 ac 10 5d d1 03 e5 89 ba 8c 77 3a 69 08 3d a2 05 c8 Data Ascii: C3Va\-V=Q_%-MUCE?TK^Mo#!m90a`ZhmQf=5f;~O.}J;eA(`vaY%wj"<j=B@bvvkY{>}=mfzFgP2=,-/}P;J#V+!A,]+qa]w:i=
2024-03-11 11:56:48 UTC	16384	IN	Data Raw: 8a f7 14 b9 ee 81 e6 3f 42 9f 0d f0 d9 82 e6 14 46 d1 e1 cd 66 c7 5b b0 bf 72 14 0f e8 16 66 33 87 b6 11 e9 9f 5c 0e 32 01 c8 6b ac 99 88 70 98 7d ce f6 00 15 fc 50 0d 1f 13 b1 0f 13 e1 35 62 c2 61 78 59 49 15 1a 8e 1f 67 3b 76 3c d6 cc ca 8f 7f 9d be 87 55 cf ea cd 49 0e c0 21 c9 25 4f 6f 60 f4 9d 81 9e a1 36 17 b8 10 bd 92 28 3e d1 12 a1 d7 5e a4 97 d3 e6 77 34 d3 19 da a2 b7 d0 38 87 69 fb 65 1c 01 39 4d 40 cf 6a f7 20 20 e3 6f 22 64 24 03 1e 68 98 d3 ac 38 91 af dd 8e 37 c8 f5 86 e3 7b da d8 af a2 20 d1 73 bb 4e cf c3 ee 47 a2 e9 d9 a4 d3 f3 ef 40 cf 37 3b a5 a7 06 33 13 f6 1d 64 c7 9d cd a2 37 9a 98 00 6c d4 3a c7 77 cb 3b 0c c7 f7 06 b2 68 03 f5 70 98 c2 8d 44 59 4e e1 c6 08 85 9b 88 9e 48 e1 46 a2 f0 61 a2 70 a3 a0 f0 61 9d c2 4d ed 28 dc 24 28 dc Data Ascii: ?BFf[rf3\2kp}P5baxYIg;v<UI!%Oo`6(>^w48ie9M@j o"d$h87{ sNG@7;3d7l:w;hpDYNHFapaM($(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.16	49904	34.212.76.7	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:47 UTC	834	OUT	GET /visitor/bsync?uid=627080440e659fbe0f85333c665ae1de&name=SMARTADSERVER&url=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D117%26partneruserid%3DPARTNER_USER_ID%26gdpr%3DGDPR%26gdpr_consent%3DGDPR_CONSENT&gdpr=0&gdpr_consent= HTTP/1.1 Host: visitor.omnitagjs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:47 UTC	653	IN	HTTP/1.1 307 Temporary Redirect Date: Mon, 11 Mar 2024 11:56:47 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close cache-control: no-cache, no-store, must-revalidate expires: 0 location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=117&partneruserid=e14297a0dfa4790f9c33b6631995bf21&gdpr=0&gdpr_consent=0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=e14297a0dfa4790f9c33b6631995bf21; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff X-Kong-Upstream-Latency: 5 X-Kong-Proxy-Latency: 0 Via: kong/2.8.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.16	49918	104.254.148.252	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:47 UTC	1053	OUT	GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; icu=ChgIkPoyEAoYASABKAEw9-K7rwY4AUABSAEQ9-K7rwYYAA..; receive-cookie-deprecation=1; uuid2=7822940101119878936
2024-03-11 11:56:48 UTC	1512	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Mon, 11 Mar 2024 11:56:47 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=7822940101119878936&gdpr=0&gdpr_consent= AN-X-Request-Uuid: ccbc2b8d-e3cf-42c6-a0b6-215433e6649c Set-Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:56:47 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 27-Feb-2034 11:56:47 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=7822940101119878936; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:56:47 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.105.38; 154.16.105.38; 894.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.16	49921	204.237.133.120	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:47 UTC	1591	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AAKPDU7L3eMAABWFZYx_mg&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dsas%252Cpp%252Csyn%252Cshr%26bee_sync_current_partner%3Dpm%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; PugT=1710158206; chkChromeAb67Sec=2; pi=162538:4; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; SyncRTB3=1711324800%3A13_71_220_54_55_165_8_250_22_104_166_21_46_249_5_3_231%7C1710720000%3A2_15_223
2024-03-11 11:56:48 UTC	738	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:56:48 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 09-Jun-2024 11:56:48 GMT; path=/ Set-Cookie: PugT=1710158208; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:48 GMT; path=/ Location: https://match.prod.bidr.io/cookie-sync?gdpr=0&bee_sync_partners=sas%2Cpp%2Csyn%2Cshr&bee_sync_current_partner=pm&bee_sync_initiator=adx&bee_sync_hop_count=2 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.16	49925	104.36.113.107	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:47 UTC	1440	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; PugT=1710158206; chkChromeAb67Sec=2; pi=162538:4; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; SyncRTB3=1711324800%3A13_71_220_54_55_165_8_250_22_104_166_21_46_249_5_3_231%7C1710720000%3A2_15_223; SPugT=1710158207
2024-03-11 11:56:48 UTC	696	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 11 Mar 2024 11:56:46 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:46 GMT; path=/ Set-Cookie: PugT=1710158206; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:46 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:48 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.16	49924	142.251.2.132	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:47 UTC	609	OUT	GET /rtv/012402262017000/v0/amp-fit-text-0.1.mjs HTTP/1.1 Host: cdn.ampproject.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fa43ad241d35ec2179c810415c543e64.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:48 UTC	1578	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="amphtml-china-available" Report-To: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]} Timing-Allow-Origin: * Content-Length: 5164 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 06 Mar 2024 14:07:25 GMT Expires: Thu, 06 Mar 2025 14:07:25 GMT Cache-Control: public, max-age=31536000 ETag: "92d49a70059f031a" Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 424163 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:56:48 UTC	1578	IN	Data Raw: 3b 0a 28 73 65 6c 66 2e 41 4d 50 3d 73 65 6c 66 2e 41 4d 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 7b 6d 3a 31 2c 76 3a 22 32 34 30 32 32 36 32 30 31 37 30 30 30 22 2c 6e 3a 22 61 6d 70 2d 66 69 74 2d 74 65 78 74 22 2c 65 76 3a 22 30 2e 31 22 2c 6c 3a 21 30 2c 66 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 28 28 29 3d 3e 7b 76 61 72 20 6e 2c 7b 69 73 41 72 72 61 79 3a 69 7d 3d 41 72 72 61 79 2c 7b 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3a 65 2c 74 6f 53 74 72 69 6e 67 3a 6f 7d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 63 6f 6e 73 74 20 6e 3d 70 61 72 73 65 46 6c 6f 61 74 28 74 29 3b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 28 69 3d 6e 29 26 26 69 73 46 69 6e 69 74 65 28 69 29 3f Data Ascii: ;(self.AMP=self.AMP\|\|[]).push({m:1,v:"2402262017000",n:"amp-fit-text",ev:"0.1",l:!0,f:function(t,n){(()=>{var n,{isArray:i}=Array,{hasOwnProperty:e,toString:o}=Object.prototype;function r(t){const n=parseFloat(t);return"number"==typeof(i=n)&&isFinite(i)?
2024-03-11 11:56:48 UTC	1578	IN	Data Raw: 74 7c 7c 22 66 6c 75 69 64 22 3d 3d 74 7c 7c 22 69 6e 74 72 69 6e 73 69 63 22 3d 3d 74 7d 28 74 29 7d 62 75 69 6c 64 43 61 6c 6c 62 61 63 6b 28 29 7b 63 6f 6e 73 74 7b 65 6c 65 6d 65 6e 74 3a 74 7d 3d 74 68 69 73 2c 7b 63 6f 6e 74 65 6e 74 3a 6e 2c 63 6f 6e 74 65 6e 74 57 72 61 70 70 65 72 3a 69 2c 6d 65 61 73 75 72 65 72 3a 65 7d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 69 2d 61 6d 70 68 74 6d 6c 2d 73 73 72 22 29 7d 28 74 29 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 74 20 6e 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 60 2e 24 7b 61 28 6d 29 7d 60 29 2c 69 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 Data Ascii: t\|\|"fluid"==t\|\|"intrinsic"==t}(t)}buildCallback(){const{element:t}=this,{content:n,contentWrapper:i,measurer:e}=function(t){if(function(t){return t.hasAttribute("i-amphtml-ssr")}(t))return function(t){const n=t.querySelector(`.${a(m)}`),i=t.querySelector(
2024-03-11 11:56:48 UTC	1578	IN	Data Raw: 69 6e 2e 52 65 73 69 7a 65 4f 62 73 65 72 76 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 29 7b 6c 65 74 20 65 3d 30 2c 6f 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 72 28 69 29 7b 6f 3d 6e 75 6c 6c 2c 65 3d 74 2e 73 65 74 54 69 6d 65 6f 75 74 28 73 2c 31 30 30 29 2c 6e 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 69 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 65 3d 30 2c 6f 26 26 72 28 6f 29 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 2e 2e 2e 74 29 7b 65 3f 6f 3d 74 3a 72 28 74 29 7d 7d 28 74 68 69 73 2e 77 69 6e 2c 28 28 29 3d 3e 74 68 69 73 2e 6d 75 74 61 74 65 45 6c 65 6d 65 6e 74 28 28 28 29 3d 3e 7b 74 68 69 73 2e 72 6f 74 28 29 2c 74 68 69 73 2e 4d 6d 28 29 7d 29 29 29 29 29 3b 74 2e 6f 62 73 65 72 76 65 28 74 68 69 73 2e 73 58 29 2c 74 2e Data Ascii: in.ResizeObserver(function(t,n,i){let e=0,o=null;function r(i){o=null,e=t.setTimeout(s,100),n.apply(null,i)}function s(){e=0,o&&r(o)}return function(...t){e?o=t:r(t)}}(this.win,(()=>this.mutateElement((()=>{this.rot(),this.Mm()})))));t.observe(this.sX),t.
2024-03-11 11:56:48 UTC	430	IN	Data Raw: 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 69 2d 61 6d 70 68 74 6d 6c 2d 66 69 74 2d 74 65 78 74 2d 6d 65 61 73 75 72 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 21 69 6d 70 6f 72 74 61 6e 74 3b 74 6f 70 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 65 66 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 7a 2d 69 6e 64 65 78 3a 31 21 69 6d 70 6f 72 74 61 6e 74 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 5c 6e 2f 2a 23 20 73 6f 75 72 63 Data Ascii: isplay:block;display:-webkit-box;-webkit-box-orient:vertical;overflow:hidden}.i-amphtml-fit-text-measurer{position:absolute!important;top:0!important;left:0!important;z-index:1!important;visibility:hidden!important;line-height:1.15em!important}\n/*# sourc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.16	49926	142.251.2.132	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:47 UTC	605	OUT	GET /rtv/012402262017000/v0/amp-form-0.1.mjs HTTP/1.1 Host: cdn.ampproject.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fa43ad241d35ec2179c810415c543e64.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:48 UTC	1566	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Access-Control-Allow-Origin: * Content-Security-Policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="amphtml-china-available" Report-To: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]} Timing-Allow-Origin: * Content-Length: 41185 Date: Mon, 11 Mar 2024 11:56:48 GMT Expires: Tue, 11 Mar 2025 11:56:48 GMT Cache-Control: public, max-age=31536000 ETag: "abc788b0a91a2b6d" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:56:48 UTC	1566	IN	Data Raw: 3b 0a 28 73 65 6c 66 2e 41 4d 50 3d 73 65 6c 66 2e 41 4d 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 7b 6d 3a 31 2c 76 3a 22 32 34 30 32 32 36 32 30 31 37 30 30 30 22 2c 6e 3a 22 61 6d 70 2d 66 6f 72 6d 22 2c 65 76 3a 22 30 2e 31 22 2c 6c 3a 21 30 2c 66 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 28 28 29 3d 3e 7b 76 61 72 20 69 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 20 69 7c 7c 28 69 3d 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 76 6f 69 64 20 30 29 29 7d 76 61 72 20 73 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 70 72 6f 6d 69 73 65 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 74 2c 69 29 3d 3e 7b 74 68 69 73 2e 72 65 73 6f 6c 76 65 3d 74 2c 74 68 69 73 2e 72 65 6a 65 63 74 3d 69 7d 29 29 7d 7d 3b 66 Data Ascii: ;(self.AMP=self.AMP\|\|[]).push({m:1,v:"2402262017000",n:"amp-form",ev:"0.1",l:!0,f:function(t,i){(()=>{var i;function e(){return i\|\|(i=Promise.resolve(void 0))}var s=class{constructor(){this.promise=new Promise(((t,i)=>{this.resolve=t,this.reject=i}))}};f
2024-03-11 11:56:48 UTC	1566	IN	Data Raw: 65 29 7d 29 29 3a 65 5b 61 5d 2e 70 75 73 68 28 64 29 29 7d 63 6f 6e 73 74 20 6f 3d 52 28 74 29 3b 69 66 28 6e 75 6c 6c 21 3d 6f 26 26 6f 2e 6e 61 6d 65 29 7b 63 6f 6e 73 74 7b 6e 61 6d 65 3a 74 2c 76 61 6c 75 65 3a 69 7d 3d 6f 3b 76 6f 69 64 20 30 3d 3d 3d 65 5b 74 5d 26 26 28 65 5b 74 5d 3d 5b 5d 29 2c 65 5b 74 5d 2e 70 75 73 68 28 69 29 7d 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 30 3d 3d 65 5b 74 5d 2e 6c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 74 5d 7d 29 29 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 52 28 74 29 7b 63 6f 6e 73 74 7b 65 6c 65 6d 65 6e 74 73 3a 69 7d 3d 74 2c 7b 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3a 65 7d 3d 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 73 3d 72 28 Data Ascii: e)})):e[a].push(d))}const o=R(t);if(null!=o&&o.name){const{name:t,value:i}=o;void 0===e[t]&&(e[t]=[]),e[t].push(i)}return Object.keys(e).forEach((t=>{0==e[t].length&&delete e[t]})),e}function R(t){const{elements:i}=t,{activeElement:e}=t.ownerDocument,s=r(
2024-03-11 11:56:48 UTC	1566	IN	Data Raw: 6e 63 74 69 6f 6e 20 43 28 74 2c 69 29 7b 72 65 74 75 72 6e 20 71 28 47 28 7a 28 74 29 29 2c 69 29 7d 66 75 6e 63 74 69 6f 6e 20 55 28 74 2c 69 29 7b 63 6f 6e 73 74 20 65 3d 47 28 7a 28 74 29 29 3b 72 65 74 75 72 6e 20 57 28 65 2c 69 29 3f 71 28 65 2c 69 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 48 28 74 2c 69 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 63 6f 6e 73 74 20 65 3d 42 28 74 2c 69 29 3b 69 66 28 65 29 72 65 74 75 72 6e 20 65 3b 63 6f 6e 73 74 20 6e 3d 4a 28 74 29 3b 72 65 74 75 72 6e 20 6e 5b 69 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 73 2c 7b 70 72 6f 6d 69 73 65 3a 69 2c 72 65 6a 65 63 74 3a 65 2c 72 65 73 6f 6c 76 65 3a 6e 7d 3d 74 3b 72 65 74 75 72 6e 20 69 2e 63 61 74 63 68 Data Ascii: nction C(t,i){return q(G(z(t)),i)}function U(t,i){const e=G(z(t));return W(e,i)?q(e,i):null}function H(t,i){return function(t,i){const e=B(t,i);if(e)return e;const n=J(t);return n[i]=function(){const t=new s,{promise:i,reject:e,resolve:n}=t;return i.catch
2024-03-11 11:56:48 UTC	1566	IN	Data Raw: 22 74 65 73 74 2d 6f 70 74 69 6f 6e 73 22 2c 6e 75 6c 6c 2c 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 59 7d 28 29 2c 75 3d 21 28 6e 75 6c 6c 3d 3d 73 7c 7c 21 73 2e 63 61 70 74 75 72 65 29 3b 72 65 74 75 72 6e 20 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 69 2c 6f 2c 63 3f 73 3a 75 29 2c 28 29 3d 3e 7b 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 69 2c 6f 2c 63 3f 73 3a 75 29 2c 72 3d 6e 75 6c 6c 2c 6e 3d 6e 75 6c 6c 2c 6f 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 74 28 74 2c 69 2c 65 2c 73 29 7b 63 6f 6e 73 74 20 6e 3d 7b 64 65 74 61 69 6c 3a 65 7d 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 6e 2c 73 29 2c 6e 65 77 20 74 2e 43 75 73 74 6f 6d 45 Data Ascii: "test-options",null,t)}catch(t){}return Y}(),u=!(null==s\|\|!s.capture);return n.addEventListener(i,o,c?s:u),()=>{null==n\|\|n.removeEventListener(i,o,c?s:u),r=null,n=null,o=null}}function st(t,i,e,s){const n={detail:e};return Object.assign(n,s),new t.CustomE
2024-03-11 11:56:48 UTC	1566	IN	Data Raw: 26 74 68 69 73 2e 61 70 70 65 6e 64 28 69 2e 6e 61 6d 65 2c 69 2e 76 61 6c 75 65 29 7d 61 70 70 65 6e 64 28 74 2c 69 2c 65 29 7b 74 68 69 73 2e 42 4b 2e 61 70 70 65 6e 64 28 74 2c 69 29 7d 64 65 6c 65 74 65 28 74 29 7b 74 68 69 73 2e 42 4b 2e 64 65 6c 65 74 65 28 74 29 7d 65 6e 74 72 69 65 73 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 42 4b 2e 65 6e 74 72 69 65 73 28 29 7d 67 65 74 46 6f 72 6d 44 61 74 61 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 42 4b 7d 7d 2c 66 74 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 6c 74 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 29 7b 73 75 70 65 72 28 74 29 2c 74 26 26 54 28 74 2e 65 6c 65 6d 65 6e 74 73 2c 28 74 3d 3e 7b 22 66 69 6c 65 22 3d 3d 74 2e 74 79 70 65 26 26 30 3d 3d 74 2e 66 69 6c 65 73 2e 6c 65 6e 67 74 68 Data Ascii: &this.append(i.name,i.value)}append(t,i,e){this.BK.append(t,i)}delete(t){this.BK.delete(t)}entries(){return this.BK.entries()}getFormData(){return this.BK}},ft=class extends lt{constructor(t){super(t),t&&T(t.elements,(t=>{"file"==t.type&&0==t.files.length
2024-03-11 11:56:48 UTC	1566	IN	Data Raw: 28 73 3d 69 2e 62 6f 64 79 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 2e 67 65 74 46 6f 72 6d 44 61 74 61 29 7b 63 6f 6e 73 74 20 74 3d 69 2e 62 6f 64 79 3b 65 2e 68 65 61 64 65 72 73 5b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 5d 3d 22 6d 75 6c 74 69 70 61 72 74 2f 66 6f 72 6d 2d 64 61 74 61 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2c 65 2e 62 6f 64 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 74 20 69 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 65 3d 74 2e 6e 65 78 74 28 29 3b 21 65 2e 64 6f 6e 65 3b 65 3d 74 2e 6e 65 78 74 28 29 29 69 2e 70 75 73 68 28 65 2e 76 61 6c 75 65 29 3b 72 65 74 75 72 6e 20 69 7d 28 74 2e 65 6e 74 72 69 65 73 28 29 29 7d 76 61 72 20 73 3b 72 65 74 75 72 6e 7b 69 6e 70 75 74 3a 74 2c 69 6e 69 74 Data Ascii: (s=i.body)&&"function"==typeof s.getFormData){const t=i.body;e.headers["Content-Type"]="multipart/form-data;charset=utf-8",e.body=function(t){const i=[];for(let e=t.next();!e.done;e=t.next())i.push(e.value);return i}(t.entries())}var s;return{input:t,init
2024-03-11 11:56:48 UTC	1566	IN	Data Raw: 2c 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 28 74 3d 3e 7b 69 66 28 31 21 3d 74 2e 77 68 69 63 68 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 69 3d 74 2e 74 61 72 67 65 74 3b 22 54 45 58 54 41 52 45 41 22 3d 3d 69 2e 74 61 67 4e 61 6d 65 26 26 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 74 20 69 3d 51 28 74 29 3b 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5b 69 2e 6d 65 61 73 75 72 65 45 6c 65 6d 65 6e 74 28 28 28 29 3d 3e 74 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 29 29 2c 72 74 28 74 2c 22 6d 6f 75 73 65 75 70 22 29 5d 29 2e 74 68 65 6e 28 28 65 3d 3e 7b 63 6f 6e 73 74 20 73 3d 65 5b 30 5d 3b 6c 65 74 20 6e 3d 30 3b 72 65 74 75 72 6e 20 69 2e 6d 65 61 73 75 72 65 4d 75 74 61 74 65 45 6c 65 6d 65 6e 74 28 74 2c 28 28 29 3d 3e 7b 6e 3d 74 2e 73 63 72 6f 6c 6c 48 65 Data Ascii: ,"mousedown",(t=>{if(1!=t.which)return;const i=t.target;"TEXTAREA"==i.tagName&&function(t){const i=Q(t);Promise.all([i.measureElement((()=>t.scrollHeight)),rt(t,"mouseup")]).then((e=>{const s=e[0];let n=0;return i.measureMutateElement(t,(()=>{n=t.scrollHe
2024-03-11 11:56:48 UTC	1566	IN	Data Raw: 67 68 74 3b 63 6f 6e 73 74 20 6f 3d 70 61 72 73 65 49 6e 74 28 69 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 6d 61 78 2d 68 65 69 67 68 74 22 29 2c 31 30 29 3b 72 3d 69 73 4e 61 4e 28 6f 29 3f 31 2f 30 3a 6f 2c 73 3d 22 63 6f 6e 74 65 6e 74 2d 62 6f 78 22 3d 3d 69 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 62 6f 78 2d 73 69 7a 69 6e 67 22 29 3f 2d 70 61 72 73 65 49 6e 74 28 69 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 70 61 64 64 69 6e 67 2d 74 6f 70 22 29 2c 31 30 29 2d 70 61 72 73 65 49 6e 74 28 69 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 22 29 2c 31 30 29 3a 70 61 72 73 65 49 6e 74 28 69 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 62 6f 72 Data Ascii: ght;const o=parseInt(i.getPropertyValue("max-height"),10);r=isNaN(o)?1/0:o,s="content-box"==i.getPropertyValue("box-sizing")?-parseInt(i.getPropertyValue("padding-top"),10)-parseInt(i.getPropertyValue("padding-bottom"),10):parseInt(i.getPropertyValue("bor
2024-03-11 11:56:48 UTC	1566	IN	Data Raw: 6e 74 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 74 28 74 29 7b 45 28 74 2e 62 75 62 62 6c 65 45 6c 65 6d 65 6e 74 29 3b 63 6f 6e 73 74 20 69 3d 74 2e 62 75 62 62 6c 65 45 6c 65 6d 65 6e 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 69 2e 69 64 3d 60 62 75 62 62 6c 65 2d 6d 65 73 73 61 67 65 2d 24 7b 74 2e 69 64 7d 60 2c 69 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 74 2e 6d 65 73 73 61 67 65 2c 74 2e 62 75 62 62 6c 65 45 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 6c 61 62 65 6c 65 64 62 79 22 2c 69 2e 69 64 29 2c 74 2e 62 75 62 62 6c 65 45 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 2c 22 61 6c 65 72 74 22 29 2c 74 2e 62 75 62 62 6c Data Ascii: nt)}function zt(t){E(t.bubbleElement);const i=t.bubbleElement.ownerDocument.createElement("div");i.id=`bubble-message-${t.id}`,i.textContent=t.message,t.bubbleElement.setAttribute("aria-labeledby",i.id),t.bubbleElement.setAttribute("role","alert"),t.bubbl
2024-03-11 11:56:48 UTC	3	IN	Data Raw: 72 28 74 Data Ascii: r(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.16	49929	104.36.113.107	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:47 UTC	1644	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=2407834391265652961&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; chkChromeAb67Sec=2; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; SPugT=1710158207; PugT=1710158207; SyncRTB3=1711324800%3A166_71_220_21_13_54_250_55_104%7C1710720000%3A223_2; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3
2024-03-11 11:56:48 UTC	736	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:56:46 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:19 GMT; path=/ Set-Cookie: PugT=1710158206; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:19 GMT; path=/ Location: https://image8.pubmatic.com/AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.16	49932	34.98.64.218	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:47 UTC	657	OUT	GET /w/1.0/sd?id=540245193&val=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:48 UTC	530	IN	HTTP/1.1 302 Found Set-Cookie: i=2a5f7fb6-27c9-488e-9168-f0298407ea3a\|1710158208; Version=1; Expires=Tue, 11-Mar-2025 11:56:48 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://us-u.openx.net/w/1.0/sd?cc=1&id=540245193&val=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= Date: Mon, 11 Mar 2024 11:56:48 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.16	49916	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:47 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=gh3SN4NAMWbvSOw&MD=VV3cGtUY HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-03-11 11:56:48 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 8e6cb8d3-5dea-4f7d-acb3-308da667dbd3 MS-RequestId: 04ae507b-8599-4824-82be-64a0be342602 MS-CV: s7Y7jnH42U+nGlqv.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 11 Mar 2024 11:56:47 GMT Connection: close Content-Length: 24490
2024-03-11 11:56:48 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-03-11 11:56:48 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.16	49938	34.36.216.150	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:48 UTC	624	OUT	GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:48 UTC	438	IN	HTTP/1.1 302 Found set-cookie: ssi=6bbe4efa-b2b9-483b-b167-285771ce2f25#1710158208223; Domain=.sitescout.com; Expires=Tue, 11-Mar-2025 11:56:48 GMT; Path=/; Secure; SameSite=None location: https://pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=3&gdpr=0&gdpr_consent= Content-Length: 0 date: Mon, 11 Mar 2024 11:56:48 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.16	49928	169.197.150.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:48 UTC	716	OUT	GET /usersync/141?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.deepintent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:48 UTC	526	IN	HTTP/1.1 200 OK p3p: policyref='http://cdn.deepintent.com/p3p.xml', CP='NON CUR DEV TAI' set-cookie: CDIUSER=di_5eeffdf13c334a9c86516; Max-Age=47260800; SameSite=None; Expires=Tue, 9 Sep 2025 11:56:48 GMT; Domain=deepintent.com; Secure; Path=/ set-cookie: CDIPARTNERS=%7B%221%22%3A%2220240311%22%7D; Max-Age=47260800; SameSite=None; Expires=Tue, 9 Sep 2025 11:56:48 GMT; Domain=deepintent.com; Secure; Path=/ content-type: image/gif content-length: 0 date: Mon, 11 Mar 2024 11:56:47 GMT server: b connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.16	49940	104.254.151.68	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:48 UTC	897	OUT	GET /getuid?https://ml314.com/csync.ashx%3Ffp=$UID%26person_id=3642666937673580575%26eid=2 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; icu=ChgIkPoyEAoYASABKAEw9-K7rwY4AUABSAEQ9-K7rwYYAA..; receive-cookie-deprecation=1; uuid2=7822940101119878936
2024-03-11 11:56:48 UTC	1454	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Mon, 11 Mar 2024 11:56:48 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ml314.com/csync.ashx?fp=7822940101119878936&person_id=3642666937673580575&eid=2 AN-X-Request-Uuid: 10efce41-4493-49af-8e77-6306570dd645 Set-Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:56:48 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 27-Feb-2034 11:56:48 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=7822940101119878936; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:56:48 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.105.38; 154.16.105.38; 904.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.16	49930	192.184.67.70	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:48 UTC	795	OUT	GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: d=EGgBDQGsK4ir0QA; mc=65eef17d-816a8-799a4-641fc
2024-03-11 11:56:48 UTC	695	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:56:48 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=EMUBEgGsK_ijCP_8EA; expires=Sun, 09-Jun-2024 11:56:48 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.16	49945	34.111.113.62	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:48 UTC	584	OUT	GET /idsync/ex/receive?partner_id=1830&partner_device_id=71dcd657-b7ce-4e56-9064-0f83979f8fcb&ttd_puid=3d92896e-6439-4f25-b0dc-753e207e1323%2C%2C HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1710158204884; TapAd_DID=3d92896e-6439-4f25-b0dc-753e207e1323; TapAd_3WAY_SYNCS=1!1715
2024-03-11 11:56:48 UTC	1101	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:48 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1710158204884;Expires=Fri, 10 May 2024 11:56:48 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=3d92896e-6439-4f25-b0dc-753e207e1323;Expires=Fri, 10 May 2024 11:56:48 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!1715;Expires=Fri, 10 May 2024 11:56:48 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:56:48 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.16	49942	34.36.216.150	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:48 UTC	623	OUT	GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:48 UTC	438	IN	HTTP/1.1 302 Found set-cookie: ssi=e186753e-f558-43f2-9eb8-0f25b6de5290#1710158208299; Domain=.sitescout.com; Expires=Tue, 11-Mar-2025 11:56:48 GMT; Path=/; Secure; SameSite=None location: https://pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=3&gdpr=0&gdpr_consent= Content-Length: 0 date: Mon, 11 Mar 2024 11:56:48 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.16	49920	35.166.28.193	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:48 UTC	848	OUT	GET /ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:48 UTC	711	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Mon, 11 Mar 2024 11:56:47 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://pm.w55c.net/ping_match.gif?scc=1&ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= Pragma: no-cache Server: PingMatch/v2.0.30-801-g0076fb7#rel-ec2-master i-0667b1538ac47198a@us-west-2b@dxedge-app-us-west-2-prod-asg Set-Cookie: wfivefivec=rQpbF21I1RJEgU5; Domain=.w55c.net; Expires=Thu, 10 Apr 2025 21:56:48 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.16	49936	15.197.193.217	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:48 UTC	811	OUT	GET /track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFEhQKBXRhcGFkEgsIqK7DwIvz4DwQBRgBIAEoAjILCLSkxu2h8-A8EAU4AVoFdGFwYWRgAg..
2024-03-11 11:56:48 UTC	685	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:56:48 GMT Content-Length: 323 Connection: close server: Kestrel location: https://match.sharethrough.com/sync/v1?source_id=5b286190338513af73f09c28&source_user_id=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent= set-cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; expires=Tue, 11 Mar 2025 11:56:48 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFEhQKBXRhcGFkEgsIqK7DwIvz4DwQBRIbCgxzaGFyZXRocm91Z2gSCwjWjMfSi_PgPBAFGAEgASgCMgsIlILK_6Hz4DwQBTgBWgxzaGFyZXRocm91Z2hgAg..; expires=Tue, 11 Mar 2025 11:56:48 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-11 11:56:48 UTC	323	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 2f 73 79 6e 63 2f 76 31 3f 73 6f 75 72 63 65 5f 69 64 3d 35 62 32 38 36 31 39 30 33 33 38 35 31 33 61 66 37 33 66 30 39 63 32 38 26 73 6f 75 72 63 65 5f 75 73 65 72 5f 69 64 3d 37 31 64 63 64 36 35 37 2d 62 37 63 65 2d 34 65 35 36 2d 39 30 36 34 2d 30 66 38 33 39 37 39 66 38 66 63 62 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 2f 73 79 6e 63 2f 76 31 3f 73 6f 75 72 63 65 5f 69 64 3d 35 62 32 38 36 31 39 30 33 33 38 35 31 33 61 66 37 33 66 30 39 63 32 38 26 73 6f 75 72 63 65 5f 75 Data Ascii: Redirecting to: <a href="https://match.sharethrough.com/sync/v1?source_id=5b286190338513af73f09c28&source_user_id=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent=">https://match.sharethrough.com/sync/v1?source_id=5b286190338513af73f09c28&source_u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.16	49937	23.105.12.121	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:48 UTC	1090	OUT	GET /redir/?issi=1&partnerid=117&partneruserid=e14297a0dfa4790f9c33b6631995bf21&gdpr=0&gdpr_consent=0 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV
2024-03-11 11:56:48 UTC	412	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:56:47 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21; expires=Tue, 11 Mar 2025 11:56:48 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:56:48 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.16	49933	52.73.30.136	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:48 UTC	648	OUT	GET /sync?pid=187&uid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.bfmio.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:48 UTC	420	IN	HTTP/1.1 204 Date: Mon, 11 Mar 2024 11:56:48 GMT Set-Cookie: __187_cid=9A176ADB-73F4-4BD8-A648-23F2443493B5; Domain=.bfmio.com; Max-Age=31536000; Expires=Tue, 11-Mar-2025 07:56:48 GMT-0400; Path=/; SameSite=None; Secure Set-Cookie: __io_cid=fc045648f7ef8acc496532b0102e0bdf2b2d0f42; Domain=.bfmio.com; Max-Age=31536000; Expires=Tue, 11-Mar-2025 07:56:48 GMT-0400; Path=/; SameSite=None; Secure Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.16	49949	192.82.242.213	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:48 UTC	1573	OUT	GET /AdServer/SPug?partnerID=156078&xid=y-kkpOYpRE2uXr60n7MUr_n01xFPJAlGQ-~A&gdpr=0 HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; chkChromeAb67Sec=2; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; SPugT=1710158207; PugT=1710158207; SyncRTB3=1711324800%3A166_71_220_21_13_54_250_55_104%7C1710720000%3A223_2; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3
2024-03-11 11:56:48 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 11 Mar 2024 11:56:48 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1710158208; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:48 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.16	49948	193.122.128.135	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:48 UTC	998	OUT	GET /services?uid=AAKPDU7L3eMAABWFZYx_mg&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26gdpr_consent%3D%26userid%3D1899505890594565248%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dpp%252Cpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dpm%26bee_sync_hop_count%3D2&gdpr=0 HTTP/1.1 Host: sync.technoratimedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:48 UTC	1514	IN	HTTP/1.1 307 Temporary Redirect Server: nginx Date: Mon, 11 Mar 2024 11:56:48 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: close Location: https://ssum-sec.casalemedia.com/usermatchredir?s=191740&cb=https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26nuid%3DCDBA957564F9422CB94ECF5C311A0351%26att%3D1%26pid%3D82%26cb%3Dhttps%253A%252F%252Fmatch.prod.bidr.io%252Fcookie-sync%253Fgdpr%253D0%2526gdpr_consent%253D%2526userid%253D1899505890594565248%2526gdpr%253D0%2526gdpr_consent%253D%2526bee_sync_partners%253Dpp%25252Cpm%2526bee_sync_current_partner%253Dsyn%2526bee_sync_initiator%253Dpm%2526bee_sync_hop_count%253D2%26uid%3D Set-Cookie: tads_uidp_73=AAKPDU7L3eMAABWFZYx_mg; Max-Age=63072000; Expires=Wed, 11 Mar 2026 11:56:48 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid=CDBA957564F9422CB94ECF5C311A0351; Max-Age=63072000; Expires=Wed, 11 Mar 2026 11:56:48 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid_cd=20240311115648+0000; Max-Age=63072000; Expires=Wed, 11 Mar 2026 11:56:48 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_zora=2; Max-Age=63072000; Expires=Wed, 11 Mar 2026 11:56:48 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None access-control-allow-origin: https://ads.pubmatic.com/ access-control-allow-credentials: true access-control-allow-methods: POST,GET,HEAD,OPTIONS X-Varnish: 874834275 Age: 0 Via: 1.1 varnish

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.16	49931	52.204.113.215	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:48 UTC	659	OUT	GET /insync?vxii_pid=10067&vxii_pdid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1 Host: thrtle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:48 UTC	570	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:56:48 GMT Content-Type: text/html; charset=utf-8 Content-Length: 211 Connection: close Location: https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=9A176ADB-73F4-4BD8-A648-23F2443493B5&vxii_pid=12&vxii_pid1=10067&vxii_rcid=5aa989e0-19fe-4ef1-8068-2d0a432b0425 P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6IjVhYTk4OWUwLTE5ZmUtNGVmMS04MDY4LTJkMGE0MzJiMDQyNSIsImwiOjE3MTAxNTgyMDg0ODIsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Mon, 11 Mar 2024 11:56:48 GMT; Max-Age=17280000; Secure; SameSite=None
2024-03-11 11:56:48 UTC	211	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 68 72 74 6c 65 2e 63 6f 6d 2f 69 6e 73 79 6e 63 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 76 78 69 69 5f 70 64 69 64 3d 39 41 31 37 36 41 44 42 2d 37 33 46 34 2d 34 42 44 38 2d 41 36 34 38 2d 32 33 46 32 34 34 33 34 39 33 42 35 26 61 6d 70 3b 76 78 69 69 5f 70 69 64 3d 31 32 26 61 6d 70 3b 76 78 69 69 5f 70 69 64 31 3d 31 30 30 36 37 26 61 6d 70 3b 76 78 69 69 5f 72 63 69 64 3d 35 61 61 39 38 39 65 30 2d 31 39 66 65 2d 34 65 66 31 2d 38 30 36 38 2d 32 64 30 61 34 33 32 62 30 34 32 35 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=9A176ADB-73F4-4BD8-A648-23F2443493B5&vxii_pid=12&vxii_pid1=10067&vxii_rcid=5aa989e0-19fe-4ef1-8068-2d0a432b0425">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.16	49946	52.9.139.67	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:48 UTC	432	OUT	GET /sync/v1?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:56:48 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:48 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:56:48 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:56:48 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.16	49934	34.192.240.196	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:48 UTC	655	OUT	GET /api/v1/dsync/Martin?exid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1 Host: crb.kargo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:48 UTC	456	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:48 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=bfcd3a2e-d8be-0486-5e1e-5e457314cd99; Path=/; Domain=kargo.com; Expires=Tue, 11 Mar 2025 11:56:48 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2024-03-11 11:56:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.16	49947	3.232.64.79	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:48 UTC	595	OUT	GET /pixel?pid=r8hrb20&t=gif HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:48 UTC	699	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: mako_uid=18e2d5f5e6f-1cc10000010a4999; Domain=eyeota.net; Path=/; Expires=Tue, 11 Mar 2025 11:56:48 GMT; Secure; SameSite=None; Set-Cookie: SERVERID=18841~DM; Domain=eyeota.net; Path=/; Expires=Mon, 11 Mar 2024 12:06:48 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: /pixel/bounce/?pid=r8hrb20&t=gif Content-Length: 0 Date: Mon, 11 Mar 2024 11:56:48 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.16	49951	104.36.113.107	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:48 UTC	1715	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=7822940101119878936&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; chkChromeAb67Sec=2; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; SPugT=1710158207; PugT=1710158207; SyncRTB3=1711324800%3A166_71_220_21_13_54_250_55_104%7C1710720000%3A223_2; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3
2024-03-11 11:56:48 UTC	699	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:56:48 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 09-Jun-2024 11:56:48 GMT; path=/ Set-Cookie: PugT=1710158208; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:48 GMT; path=/ Location: https://image8.pubmatic.com/AdServer/ImgSync?gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.16	49952	142.251.2.147	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:48 UTC	833	OUT	GET /pagead/drt/ui HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-03-11 11:56:49 UTC	426	IN	HTTP/1.1 302 Found Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Location: https://googleads.g.doubleclick.net/pagead/drt/si?st=NO_DATA Cache-Control: private Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 11 Mar 2024 11:56:49 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.16	49957	104.36.113.107	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:48 UTC	1601	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; chkChromeAb67Sec=2; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; SPugT=1710158207; SyncRTB3=1711324800%3A166_71_220_21_13_54_250_55_104%7C1710720000%3A223_2; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; PugT=1710158206
2024-03-11 11:56:48 UTC	788	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:56:48 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:48 GMT; path=/ Set-Cookie: PugT=1710158208; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:48 GMT; path=/ Location: https://image8.pubmatic.com/AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.16	49955	204.237.133.120	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:48 UTC	1893	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=1973209972465453479 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; chkChromeAb67Sec=2; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; SPugT=1710158207; SyncRTB3=1711324800%3A166_71_220_21_13_54_250_55_104%7C1710720000%3A223_2; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; PugT=1710158206
2024-03-11 11:56:49 UTC	674	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:56:48 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_18=22947-1973209972465453479; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 09-Jun-2024 11:56:48 GMT; path=/ Set-Cookie: PugT=1710158208; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:48 GMT; path=/ Location: https://image8.pubmatic.com/AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.16	49954	52.25.158.6	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:48 UTC	783	OUT	GET /cookie-sync?gdpr=0&bee_sync_partners=sas%2Cpp%2Csyn%2Cshr&bee_sync_current_partner=pm&bee_sync_initiator=adx&bee_sync_hop_count=2 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAKPDU7L3eMAABWFZYx_mg; bitoIsSecure=ok; checkForPermission=ok
2024-03-11 11:56:49 UTC	627	IN	HTTP/1.1 303 See Other Date: Mon, 11 Mar 2024 11:56:49 GMT location: https://rtb-csync.smartadserver.com/redir?partneruserid=AAKPDU7L3eMAABWFZYx_mg&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fbee_sync_partners%3Dpp%252Csyn%252Cshr%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3%26userid%3DSMART_USER_ID&gdpr=0 Server: gunicorn set-cookie: bito=AAKPDU7L3eMAABWFZYx_mg; Domain=bidr.io; expires=Thu, 10 Apr 2025 07:56:49 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.16	49958	34.98.64.218	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:48 UTC	721	OUT	GET /w/1.0/sd?cc=1&id=540245193&val=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=2a5f7fb6-27c9-488e-9168-f0298407ea3a\|1710158208
2024-03-11 11:56:49 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Mon, 11 Mar 2024 11:56:49 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:56:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.16	49960	34.36.216.150	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:48 UTC	698	OUT	GET /dmp/pixelSync?cookieQ=1&nid=3&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=6bbe4efa-b2b9-483b-b167-285771ce2f25#1710158208223
2024-03-11 11:56:49 UTC	840	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=6bbe4efa-b2b9-483b-b167-285771ce2f25#1710158208223; Domain=.sitescout.com; Expires=Tue, 11-Mar-2025 11:56:49 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyI0NSI6MTcxMDE1ODIwOTA3MX0; Domain=.sitescout.com; Expires=Wed, 10-Apr-2024 11:56:49 GMT; Path=/; Secure; SameSite=None location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=6bbe4efa-b2b9-483b-b167-285771ce2f25-65eef180-5553&gdpr=0&gdpr_consent= Content-Length: 0 date: Mon, 11 Mar 2024 11:56:48 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.16	49959	204.237.133.120	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:48 UTC	2024	OUT	GET /AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; chkChromeAb67Sec=2; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; SPugT=1710158207; SyncRTB3=1711324800%3A166_71_220_21_13_54_250_55_104%7C1710720000%3A223_2; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; PugT=1710158206; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961
2024-03-11 11:56:49 UTC	845	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:56:49 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 09-Jun-2024 11:56:49 GMT; path=/ Set-Cookie: PugT=1710158209; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:49 GMT; path=/ Location: https://image8.pubmatic.com/AdServer/ImgSync?gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.16	49961	34.117.77.79	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:48 UTC	877	OUT	GET /csync.ashx?fp=7822940101119878936&person_id=3642666937673580575&eid=2 HTTP/1.1 Host: ml314.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: u=aHR0cHM6Ly9zb3VyY2Vmb3JnZS5uZXQvcHJvamVjdHMvZG9jZmV0Y2hlci9maWxlcy9kb2NmZXRjaGVyLzEuMS4yNS9kb2NmZXRjaGVyXzEuMS4yNV93aW4zMl9zZXR1cC5leGUvZG93bmxvYWQ%3D; pi=3642666937673580575; tp=3%253B03%252F11%252F2024%2B11%253A56%253A43%253B0
2024-03-11 11:56:49 UTC	279	IN	HTTP/1.1 200 OK content-type: image/gif expires: Tue, 12 Mar 2024 11:56:49 GMT date: Mon, 11 Mar 2024 11:56:49 GMT server: Google Frontend via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-11 11:56:49 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-03-11 11:56:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.16	49967	54.215.97.222	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:48 UTC	754	OUT	GET /sync/v1?source_id=5b286190338513af73f09c28&source_user_id=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:56:49 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:49 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:56:49 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:56:49 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.16	49965	34.36.216.150	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:48 UTC	697	OUT	GET /dmp/pixelSync?cookieQ=1&nid=3&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=e186753e-f558-43f2-9eb8-0f25b6de5290#1710158208299
2024-03-11 11:56:49 UTC	840	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=e186753e-f558-43f2-9eb8-0f25b6de5290#1710158208299; Domain=.sitescout.com; Expires=Tue, 11-Mar-2025 11:56:49 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyI0NSI6MTcxMDE1ODIwOTExOX0; Domain=.sitescout.com; Expires=Wed, 10-Apr-2024 11:56:49 GMT; Path=/; Secure; SameSite=None location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&gdpr=0&gdpr_consent= Content-Length: 0 date: Mon, 11 Mar 2024 11:56:49 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.16	49963	104.36.113.110	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:48 UTC	1866	OUT	GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; chkChromeAb67Sec=2; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; SPugT=1710158207; SyncRTB3=1711324800%3A166_71_220_21_13_54_250_55_104%7C1710720000%3A223_2; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; PugT=1710158206; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961
2024-03-11 11:56:49 UTC	1209	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: SyncRTB3=1711324800%3A250_166_71_220_21_54_13_55_104%7C1710720000%3A223_15_2; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; domain=pubmatic.com; path=/; max-age=3; SameSite=None; secure; Set-Cookie: pi=156557:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=3; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Mon, 11 Mar 2024 11:56:49 GMT Content-Length: 182 Connection: close
2024-03-11 11:56:49 UTC	182	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 75 62 6d 61 74 69 63 2d 6d 61 74 63 68 2e 64 6f 74 6f 6d 69 2e 63 6f 6d 2f 6d 61 74 63 68 2f 62 6f 75 6e 63 65 2f 63 75 72 72 65 6e 74 3f 6e 65 74 77 6f 72 6b 49 64 3d 31 37 31 30 30 26 61 6d 70 3b 76 65 72 73 69 6f 6e 3d 31 26 61 6d 70 3b 6e 75 69 64 3d 39 41 31 37 36 41 44 42 2d 37 33 46 34 2d 34 42 44 38 2d 41 36 34 38 2d 32 33 46 32 34 34 33 34 39 33 42 35 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.16	49964	35.166.28.193	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:48 UTC	890	OUT	GET /ping_match.gif?scc=1&ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1 Host: pm.w55c.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=rQpbF21I1RJEgU5
2024-03-11 11:56:49 UTC	773	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Mon, 11 Mar 2024 11:56:48 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:rQpbF21I1RJEgU5&gdpr=0&gdpr_consent= Pragma: no-cache Server: PingMatch/v2.0.30-801-g0076fb7#rel-ec2-master i-024a6c97f3ae360d9@us-west-2b@dxedge-app-us-west-2-prod-asg Set-Cookie: wfivefivec=rQpbF21I1RJEgU5; Domain=.w55c.net; Expires=Fri, 11 Apr 2025 11:56:49 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchpubmatic=5; Domain=.w55c.net; Expires=Wed, 10 Apr 2024 11:56:49 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.16	49969	23.61.214.98	443

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:48 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-11 11:56:49 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (sac/250E) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=26925 Date: Mon, 11 Mar 2024 11:56:49 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.16	49970	216.22.16.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:48 UTC	892	OUT	GET /redir/?issi=1&partnerid=117&partneruserid=e14297a0dfa4790f9c33b6631995bf21&gdpr=0&gdpr_consent=0 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21
2024-03-11 11:56:49 UTC	412	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:56:48 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21; expires=Wed, 12 Mar 2025 11:56:49 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:56:49 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.16	49972	52.204.113.215	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:49 UTC	824	OUT	GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=9A176ADB-73F4-4BD8-A648-23F2443493B5&vxii_pid=12&vxii_pid1=10067&vxii_rcid=5aa989e0-19fe-4ef1-8068-2d0a432b0425 HTTP/1.1 Host: thrtle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=eyJpZCI6IjVhYTk4OWUwLTE5ZmUtNGVmMS04MDY4LTJkMGE0MzJiMDQyNSIsImwiOjE3MTAxNTgyMDg0ODIsInQiOjF9
2024-03-11 11:56:49 UTC	353	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:49 GMT Content-Type: image/gif Content-Length: 43 Connection: close P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6IjVhYTk4OWUwLTE5ZmUtNGVmMS04MDY4LTJkMGE0MzJiMDQyNSIsImwiOjE3MTAxNTgyMDkzNzUsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Fri, 27 Sep 2024 11:56:49 GMT; Secure; SameSite=None
2024-03-11 11:56:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.16	49973	34.210.5.217	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:49 UTC	621	OUT	GET /ibs:dpid=22052&dpuuid=3642666937673580575&redir= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:49 UTC	772	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:56:49 GMT Content-Length: 0 Connection: close X-TID: +WxNmewxRU4= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=22052&dpuuid=3642666937673580575&redir= DCS: dcs-prod-usw2-1-v054-057daa8a3.edge-usw2.demdex.com 0 ms set-cookie: demdex=45232011452423388812062241212727845356; Max-Age=15552000; Expires=Sat, 07 Sep 2024 11:56:49 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.16	49975	192.82.242.213	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:49 UTC	1640	OUT	GET /AdServer/SPug?partnerID=156078&xid=y-kkpOYpRE2uXr60n7MUr_n01xFPJAlGQ-~A&gdpr=0 HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; chkChromeAb67Sec=2; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; SyncRTB3=1711324800%3A166_71_220_21_13_54_250_55_104%7C1710720000%3A223_2; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; PugT=1710158206; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208
2024-03-11 11:56:49 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 11 Mar 2024 11:56:48 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1710158208; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:48 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.16	49974	3.232.64.79	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:49 UTC	669	OUT	GET /pixel/bounce/?pid=r8hrb20&t=gif HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=18e2d5f5e6f-1cc10000010a4999; SERVERID=18841~DM
2024-03-11 11:56:49 UTC	587	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: SERVERID=18841~DM; Domain=eyeota.net; Path=/; Expires=Mon, 11 Mar 2024 12:06:49 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: https://ml314.com/utsync.ashx?eid=50052&et=0&fp=2RG0B3VBEgqU6Lfhw-rw1_Eo5qnhiAZ4NH3viKx8NrM0&gdpr=0&gdpr_consent=&return=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dr8hrb20%26uid%3Dnil%26referrer_pid%3Dr8hrb20 Content-Length: 0 Date: Mon, 11 Mar 2024 11:56:49 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.16	49977	104.18.36.155	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:49 UTC	1213	OUT	GET /usermatchredir?s=191740&cb=https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26nuid%3DCDBA957564F9422CB94ECF5C311A0351%26att%3D1%26pid%3D82%26cb%3Dhttps%253A%252F%252Fmatch.prod.bidr.io%252Fcookie-sync%253Fgdpr%253D0%2526gdpr_consent%253D%2526userid%253D1899505890594565248%2526gdpr%253D0%2526gdpr_consent%253D%2526bee_sync_partners%253Dpp%25252Cpm%2526bee_sync_current_partner%253Dsyn%2526bee_sync_initiator%253Dpm%2526bee_sync_hop_count%253D2%26uid%3D HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
2024-03-11 11:56:49 UTC	1363	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:56:49 GMT Content-Length: 0 Connection: close Location: https://sync.technoratimedia.com/services?srv=cs&nuid=CDBA957564F9422CB94ECF5C311A0351&att=1&pid=82&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26gdpr_consent%3D%26userid%3D1899505890594565248%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dpp%252Cpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dpm%26bee_sync_hop_count%3D2&uid=Ze7xfMAoIeEAAAzaAIdO4AAA%264192 CF-Ray: 862b5d09286b09ed-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; Path=/; Domain=casalemedia.com; Expires=Tue, 11 Mar 2025 11:56:49 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=4192; Path=/; Domain=casalemedia.com; Expires=Sun, 09 Jun 2024 11:56:49 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wg6X6r%2Byf%2FAG4OWV0syna06czcTvkfp5XBEDixmA5a0aA5WHc91qGuYxUDtrqIXUPTAHUF4hoNk9vO4Gf74leQdLX94EQb4SZR%2Ft9F2p1BiDT03kmkG3Ti3Xcf0WE9SnJym2MumMHFdaCg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.16	49978	104.36.113.110	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:49 UTC	2035	OUT	GET /AdServer/ImgSync?gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; chkChromeAb67Sec=2; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; SyncRTB3=1711324800%3A166_71_220_21_13_54_250_55_104%7C1710720000%3A223_2; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; PugT=1710158208
2024-03-11 11:56:49 UTC	1209	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: SyncRTB3=1710720000%3A2_223_15%7C1711324800%3A166_71_220_13_21_54_250_55_104; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; domain=pubmatic.com; path=/; max-age=3; SameSite=None; secure; Set-Cookie: pi=156557:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=3; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Mon, 11 Mar 2024 11:56:47 GMT Content-Length: 182 Connection: close
2024-03-11 11:56:49 UTC	182	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 75 62 6d 61 74 69 63 2d 6d 61 74 63 68 2e 64 6f 74 6f 6d 69 2e 63 6f 6d 2f 6d 61 74 63 68 2f 62 6f 75 6e 63 65 2f 63 75 72 72 65 6e 74 3f 6e 65 74 77 6f 72 6b 49 64 3d 31 37 31 30 30 26 61 6d 70 3b 76 65 72 73 69 6f 6e 3d 31 26 61 6d 70 3b 6e 75 69 64 3d 39 41 31 37 36 41 44 42 2d 37 33 46 34 2d 34 42 44 38 2d 41 36 34 38 2d 32 33 46 32 34 34 33 34 39 33 42 35 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.16	49979	104.36.113.110	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:49 UTC	2082	OUT	GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; chkChromeAb67Sec=2; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; SyncRTB3=1711324800%3A166_71_220_21_13_54_250_55_104%7C1710720000%3A223_2; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; PugT=1710158208; KRTBCOOKIE_18=22947-1973209972465453479
2024-03-11 11:56:49 UTC	1209	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: SyncRTB3=1711324800%3A21_250_55_104_166_71_220_13_54%7C1710720000%3A223_2_15; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; domain=pubmatic.com; path=/; max-age=3; SameSite=None; secure; Set-Cookie: pi=156557:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=3; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Mon, 11 Mar 2024 11:56:48 GMT Content-Length: 182 Connection: close
2024-03-11 11:56:49 UTC	182	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 75 62 6d 61 74 69 63 2d 6d 61 74 63 68 2e 64 6f 74 6f 6d 69 2e 63 6f 6d 2f 6d 61 74 63 68 2f 62 6f 75 6e 63 65 2f 63 75 72 72 65 6e 74 3f 6e 65 74 77 6f 72 6b 49 64 3d 31 37 31 30 30 26 61 6d 70 3b 76 65 72 73 69 6f 6e 3d 31 26 61 6d 70 3b 6e 75 69 64 3d 39 41 31 37 36 41 44 42 2d 37 33 46 34 2d 34 42 44 38 2d 41 36 34 38 2d 32 33 46 32 34 34 33 34 39 33 42 35 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.16	49980	104.36.113.110	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:49 UTC	1702	OUT	GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; chkChromeAb67Sec=2; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; SyncRTB3=1711324800%3A166_71_220_21_13_54_250_55_104%7C1710720000%3A223_2; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; PugT=1710158208
2024-03-11 11:56:49 UTC	1209	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: SyncRTB3=1711324800%3A71_55_104_166_220_21_13_54_250%7C1710720000%3A2_15_223; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; domain=pubmatic.com; path=/; max-age=3; SameSite=None; secure; Set-Cookie: pi=156557:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=3; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Mon, 11 Mar 2024 11:56:48 GMT Content-Length: 182 Connection: close
2024-03-11 11:56:49 UTC	182	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 75 62 6d 61 74 69 63 2d 6d 61 74 63 68 2e 64 6f 74 6f 6d 69 2e 63 6f 6d 2f 6d 61 74 63 68 2f 62 6f 75 6e 63 65 2f 63 75 72 72 65 6e 74 3f 6e 65 74 77 6f 72 6b 49 64 3d 31 37 31 30 30 26 61 6d 70 3b 76 65 72 73 69 6f 6e 3d 31 26 61 6d 70 3b 6e 75 69 64 3d 39 41 31 37 36 41 44 42 2d 37 33 46 34 2d 34 42 44 38 2d 41 36 34 38 2d 32 33 46 32 34 34 33 34 39 33 42 35 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.16	49976	52.200.154.160	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:49 UTC	471	OUT	GET /api/v1/dsync/Martin?exid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1 Host: crb.kargo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=bfcd3a2e-d8be-0486-5e1e-5e457314cd99
2024-03-11 11:56:49 UTC	456	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:49 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=bfcd3a2e-d8be-0486-5e1e-5e457314cd99; Path=/; Domain=kargo.com; Expires=Tue, 11 Mar 2025 11:56:49 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2024-03-11 11:56:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.16	49983	204.237.133.120	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:49 UTC	2276	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=6bbe4efa-b2b9-483b-b167-285771ce2f25-65eef180-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; chkChromeAb67Sec=2; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; SyncRTB3=1711324800%3A166_71_220_21_13_54_250_55_104%7C1710720000%3A223_2; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; PugT=1710158209
2024-03-11 11:56:49 UTC	767	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:56:49 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_188=3189-6bbe4efa-b2b9-483b-b167-285771ce2f25-65eef180-5553&KRTB&23418-6bbe4efa-b2b9-483b-b167-285771ce2f25-65eef180-5553; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 09-Jun-2024 11:56:49 GMT; path=/ Set-Cookie: PugT=1710158209; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:49 GMT; path=/ Location: https://image8.pubmatic.com/AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.16	49986	23.61.214.98	443

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:49 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-11 11:56:49 UTC	455	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (sac/2578) X-CID: 11 Cache-Control: public, max-age=26901 Date: Mon, 11 Mar 2024 11:56:49 GMT Content-Length: 55 Connection: close X-CID: 2
2024-03-11 11:56:49 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.16	49985	52.9.139.67	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:49 UTC	519	OUT	GET /sync/v1?source_id=5b286190338513af73f09c28&source_user_id=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:56:49 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:49 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:56:49 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:56:49 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.16	49981	23.105.12.121	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:49 UTC	1301	OUT	GET /redir?partneruserid=AAKPDU7L3eMAABWFZYx_mg&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fbee_sync_partners%3Dpp%252Csyn%252Cshr%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3%26userid%3DSMART_USER_ID&gdpr=0 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21
2024-03-11 11:56:49 UTC	612	IN	HTTP/1.1 302 Found content-length: 0 date: Mon, 11 Mar 2024 11:56:49 GMT cache-control: no-cache,no-store location: https://match.prod.bidr.io/cookie-sync?bee_sync_partners=pp%2Csyn%2Cshr&bee_sync_current_partner=sas&bee_sync_initiator=adx&bee_sync_hop_count=3&userid=1899505890594565248&gdpr=0&gdpr_consent= pragma: no-cache set-cookie: csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; expires=Wed, 12 Mar 2025 11:56:49 GMT; domain=smartadserver.com; path=/; SameSite=None; secure p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.16	49989	204.237.133.120	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:49 UTC	2278	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; PugT=1710158209; SyncRTB3=1711324800%3A250_166_71_220_21_54_13_55_104%7C1710720000%3A223_15_2; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=3
2024-03-11 11:56:49 UTC	767	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:56:48 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 09-Jun-2024 11:56:48 GMT; path=/ Set-Cookie: PugT=1710158208; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:48 GMT; path=/ Location: https://image8.pubmatic.com/AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.16	49994	104.36.113.107	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:49 UTC	2352	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:rQpbF21I1RJEgU5&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; PugT=1710158209; SyncRTB3=1711324800%3A250_166_71_220_21_54_13_55_104%7C1710720000%3A223_15_2; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=3
2024-03-11 11:56:50 UTC	705	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:56:49 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 09-Jun-2024 11:56:49 GMT; path=/ Set-Cookie: PugT=1710158209; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:49 GMT; path=/ Location: https://image8.pubmatic.com/AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.16	49992	35.244.159.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:49 UTC	485	OUT	GET /w/1.0/sd?cc=1&id=540245193&val=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=2a5f7fb6-27c9-488e-9168-f0298407ea3a\|1710158208
2024-03-11 11:56:50 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Mon, 11 Mar 2024 11:56:49 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:56:50 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.16	49990	142.250.141.156	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:49 UTC	781	OUT	GET /pagead/drt/si?st=NO_DATA HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlhWjE-nrLMqamcKd4HCzJGyk-lF6Y-_gdSV1_rcQ-Lc3JBzMSF3zk6wICTe0A; test_cookie=CheckForPermission
2024-03-11 11:56:50 UTC	664	IN	HTTP/1.1 200 OK Cross-Origin-Resource-Policy: cross-origin P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 11 Mar 2024 11:56:50 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: DSID=NO_DATA; expires=Mon, 11-Mar-2024 12:56:50 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 11 Mar 2024 11:56:50 GMT Cache-Control: private Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.16	49993	104.36.113.107	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:49 UTC	2348	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=70a98560-df9e-11ee-9b1b-8fc11e983897 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; PugT=1710158209; SyncRTB3=1711324800%3A250_166_71_220_21_54_13_55_104%7C1710720000%3A223_15_2; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=3
2024-03-11 11:56:50 UTC	741	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:56:48 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 09-Jun-2024 11:56:48 GMT; path=/ Set-Cookie: PugT=1710158208; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:48 GMT; path=/ Location: https://image8.pubmatic.com/AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.16	49997	34.117.77.79	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:49 UTC	642	OUT	GET /csync.ashx?fp=7822940101119878936&person_id=3642666937673580575&eid=2 HTTP/1.1 Host: ml314.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: u=aHR0cHM6Ly9zb3VyY2Vmb3JnZS5uZXQvcHJvamVjdHMvZG9jZmV0Y2hlci9maWxlcy9kb2NmZXRjaGVyLzEuMS4yNS9kb2NmZXRjaGVyXzEuMS4yNV93aW4zMl9zZXR1cC5leGUvZG93bmxvYWQ%3D; pi=3642666937673580575; tp=3%253B03%252F11%252F2024%2B11%253A56%253A43%253B0
2024-03-11 11:56:50 UTC	279	IN	HTTP/1.1 200 OK content-type: image/gif expires: Tue, 12 Mar 2024 11:56:50 GMT date: Mon, 11 Mar 2024 11:56:50 GMT server: Google Frontend via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-11 11:56:50 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-03-11 11:56:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.16	49984	15.197.193.217	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:49 UTC	833	OUT	GET /track/cmf/generic?ttd_pid=d0tro1j&ttd_tpi=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFEhQKBXRhcGFkEgsIqK7DwIvz4DwQBRIbCgxzaGFyZXRocm91Z2gSCwjWjMfSi_PgPBAFGAEgASgCMgsIlILK_6Hz4DwQBTgBWgxzaGFyZXRocm91Z2hgAg..
2024-03-11 11:56:49 UTC	668	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:56:49 GMT Content-Length: 241 Connection: close server: Kestrel location: https://ml314.com/utsync.ashx?eid=53819&et=0&fp=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent= set-cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; expires=Tue, 11 Mar 2025 11:56:49 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFEhQKBXRhcGFkEgsIqK7DwIvz4DwQBRIbCgxzaGFyZXRocm91Z2gSCwjWjMfSi_PgPBAFEhYKB2QwdHJvMWoSCwj-h-Hhi_PgPBAFGAEgASgCMgsIkv7jjqLz4DwQBTgBWgdkMHRybzFqYAI.; expires=Tue, 11 Mar 2025 11:56:49 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-11 11:56:49 UTC	241	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 6c 33 31 34 2e 63 6f 6d 2f 75 74 73 79 6e 63 2e 61 73 68 78 3f 65 69 64 3d 35 33 38 31 39 26 65 74 3d 30 26 66 70 3d 37 31 64 63 64 36 35 37 2d 62 37 63 65 2d 34 65 35 36 2d 39 30 36 34 2d 30 66 38 33 39 37 39 66 38 66 63 62 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 6d 6c 33 31 34 2e 63 6f 6d 2f 75 74 73 79 6e 63 2e 61 73 68 78 3f 65 69 64 3d 35 33 38 31 39 26 65 74 3d 30 26 66 70 3d 37 31 64 63 64 36 35 37 2d 62 37 63 65 2d 34 65 35 36 2d 39 30 36 34 2d 30 66 38 33 39 37 39 66 38 66 63 62 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://ml314.com/utsync.ashx?eid=53819&et=0&fp=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent=">https://ml314.com/utsync.ashx?eid=53819&et=0&fp=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.16	49998	34.210.5.217	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:49 UTC	698	OUT	GET /demconf.jpg?et:ibs%7cdata:dpid=22052&dpuuid=3642666937673580575&redir= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=45232011452423388812062241212727845356
2024-03-11 11:56:50 UTC	891	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:50 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: NP97Ji+ISXs= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-usw2-2-v054-00935321a.edge-usw2.demdex.com 4 ms set-cookie: dpm=45232011452423388812062241212727845356; Max-Age=15552000; Expires=Sat, 07 Sep 2024 11:56:50 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=45232011452423388812062241212727845356; Max-Age=15552000; Expires=Sat, 07 Sep 2024 11:56:50 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-03-11 11:56:50 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.16	50001	104.36.113.110	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:50 UTC	2294	OUT	GET /AdServer/ImgSync?gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; chkChromeAb67Sec=2; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; SyncRTB3=1711324800%3A166_71_220_21_13_54_250_55_104%7C1710720000%3A223_2; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; PugT=1710158209
2024-03-11 11:56:50 UTC	1209	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: SyncRTB3=1711324800%3A54_250_55_71_220_21_13_104_166%7C1710720000%3A2_15_223; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; domain=pubmatic.com; path=/; max-age=3; SameSite=None; secure; Set-Cookie: pi=156557:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=3; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Mon, 11 Mar 2024 11:56:48 GMT Content-Length: 182 Connection: close
2024-03-11 11:56:50 UTC	182	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 75 62 6d 61 74 69 63 2d 6d 61 74 63 68 2e 64 6f 74 6f 6d 69 2e 63 6f 6d 2f 6d 61 74 63 68 2f 62 6f 75 6e 63 65 2f 63 75 72 72 65 6e 74 3f 6e 65 74 77 6f 72 6b 49 64 3d 31 37 31 30 30 26 61 6d 70 3b 76 65 72 73 69 6f 6e 3d 31 26 61 6d 70 3b 6e 75 69 64 3d 39 41 31 37 36 41 44 42 2d 37 33 46 34 2d 34 42 44 38 2d 41 36 34 38 2d 32 33 46 32 34 34 33 34 39 33 42 35 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.16	50004	34.117.77.79	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:50 UTC	999	OUT	GET /utsync.ashx?eid=50052&et=0&fp=2RG0B3VBEgqU6Lfhw-rw1_Eo5qnhiAZ4NH3viKx8NrM0&gdpr=0&gdpr_consent=&return=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dr8hrb20%26uid%3Dnil%26referrer_pid%3Dr8hrb20 HTTP/1.1 Host: ml314.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: u=aHR0cHM6Ly9zb3VyY2Vmb3JnZS5uZXQvcHJvamVjdHMvZG9jZmV0Y2hlci9maWxlcy9kb2NmZXRjaGVyLzEuMS4yNS9kb2NmZXRjaGVyXzEuMS4yNV93aW4zMl9zZXR1cC5leGUvZG93bmxvYWQ%3D; pi=3642666937673580575; tp=3%253B03%252F11%252F2024%2B11%253A56%253A43%253B0
2024-03-11 11:56:50 UTC	814	IN	HTTP/1.1 302 Found content-type: image/gif cache-control: no-cache, no-store, must-revalidate expires: 0,Tue, 12 Mar 2024 11:56:50 GMT location: https://ps.eyeota.net/match?bid=r8hrb20&uid=nil&referrer_pid=r8hrb20 pragma: no-cache set-cookie: u=aHR0cHM6Ly9zb3VyY2Vmb3JnZS5uZXQv; expires=Mon, 11 Mar 2024 11:57:05 GMT; domain=ml314.com; path=/;SameSite=None; secure set-cookie: pi=3642666937673580575; expires=Tue, 11 Mar 2025 11:56:50 GMT; domain=ml314.com; path=/; secure; samesite=none; httponly p3p: CP="NON DSP COR ADMo PSAo DEVo BUS COM UNI NAV DEM STA" x-cloud-trace-context: b1769ed0a3ec4f37535b597e88401b1d date: Mon, 11 Mar 2024 11:56:50 GMT server: Google Frontend Content-Length: 43 via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:56:50 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.16	50000	193.122.128.135	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:50 UTC	1178	OUT	GET /services?srv=cs&nuid=CDBA957564F9422CB94ECF5C311A0351&att=1&pid=82&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26gdpr_consent%3D%26userid%3D1899505890594565248%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dpp%252Cpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dpm%26bee_sync_hop_count%3D2&uid=Ze7xfMAoIeEAAAzaAIdO4AAA%264192 HTTP/1.1 Host: sync.technoratimedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tads_uidp_73=AAKPDU7L3eMAABWFZYx_mg; tads_uid=CDBA957564F9422CB94ECF5C311A0351; tads_uid_cd=20240311115648+0000; tads_zora=2
2024-03-11 11:56:50 UTC	1227	IN	HTTP/1.1 307 Temporary Redirect Server: nginx Date: Mon, 11 Mar 2024 11:56:50 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: close Location: https://match.prod.bidr.io/cookie-sync?gdpr=0&gdpr_consent=&userid=1899505890594565248&gdpr=0&gdpr_consent=&bee_sync_partners=pp%2Cpm&bee_sync_current_partner=syn&bee_sync_initiator=pm&bee_sync_hop_count=2 Set-Cookie: tads_uidp_82=Ze7xfMAoIeEAAAzaAIdO4AAA&4192; Max-Age=259200; Expires=Thu, 14 Mar 2024 11:56:50 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid=CDBA957564F9422CB94ECF5C311A0351; Max-Age=63072000; Expires=Wed, 11 Mar 2026 11:56:50 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid_cd=20240311115648+0000; Max-Age=63072000; Expires=Wed, 11 Mar 2026 11:56:50 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_zora=2; Max-Age=63072000; Expires=Wed, 11 Mar 2026 11:56:50 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None access-control-allow-origin: https://ads.pubmatic.com/ access-control-allow-credentials: true access-control-allow-methods: POST,GET,HEAD,OPTIONS X-Varnish: 878874949 Age: 0 Via: 1.1 varnish

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.16	50005	104.36.113.107	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:50 UTC	2336	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAKjSefg7ls1AMUGjNCAAAAAAA&expiration=1710244609&nuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; PugT=1710158209; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=3; SyncRTB3=1711324800%3A71_55_104_166_220_21_13_54_250%7C1710720000%3A2_15_223
2024-03-11 11:56:50 UTC	799	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:56:50 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_32=11175-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&22713-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&22715-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&23519-AAAKjSefg7ls1AMUGjNCAAAAAAA; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 09-Jun-2024 11:56:50 GMT; path=/ Set-Cookie: PugT=1710158210; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:50 GMT; path=/ Location: https://image8.pubmatic.com/AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.16	50006	104.36.113.110	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:50 UTC	2617	OUT	GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=3; SyncRTB3=1711324800%3A71_55_104_166_220_21_13_54_250%7C1710720000%3A2_15_223; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; PugT=1710158209
2024-03-11 11:56:50 UTC	923	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: https://image4.pubmatic.com/AdServer/SPug?gdpr=0&p=156557&pr=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DuFFr5RFBYgoUJbWMAWGEZKS3%26source_user_id%3D9A176ADB-73F4-4BD8-A648-23F2443493B5&us_privacy=%24%7BUS_PRIVACY%7D P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: ipc=; domain=pubmatic.com; path=/; max-age=0; SameSite=None; secure; Set-Cookie: pi=156557:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=4; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Mon, 11 Mar 2024 11:56:48 GMT Content-Length: 270 Connection: close
2024-03-11 11:56:50 UTC	270	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 34 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 53 50 75 67 3f 67 64 70 72 3d 30 26 61 6d 70 3b 70 3d 31 35 36 35 35 37 26 61 6d 70 3b 70 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 74 63 68 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 25 32 46 73 79 6e 63 25 32 46 76 31 25 33 46 73 6f 75 72 63 65 5f 69 64 25 33 44 75 46 46 72 35 52 46 42 59 67 6f 55 4a 62 57 4d 41 57 47 45 5a 4b 53 33 25 32 36 73 6f 75 72 63 65 5f 75 73 65 72 5f 69 64 25 33 44 39 41 31 37 36 41 44 42 2d 37 33 46 34 2d 34 42 44 38 2d 41 36 34 38 2d 32 33 46 32 34 34 33 34 39 33 42 35 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 25 32 34 25 37 42 55 53 5f 50 52 49 56 41 43 59 25 37 Data Ascii: <a href="https://image4.pubmatic.com/AdServer/SPug?gdpr=0&p=156557&pr=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DuFFr5RFBYgoUJbWMAWGEZKS3%26source_user_id%3D9A176ADB-73F4-4BD8-A648-23F2443493B5&us_privacy=%24%7BUS_PRIVACY%7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.16	50008	104.36.113.110	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:50 UTC	2333	OUT	GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=3; SyncRTB3=1711324800%3A71_55_104_166_220_21_13_54_250%7C1710720000%3A2_15_223; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; PugT=1710158208
2024-03-11 11:56:50 UTC	923	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: https://image4.pubmatic.com/AdServer/SPug?gdpr=0&p=156557&pr=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DuFFr5RFBYgoUJbWMAWGEZKS3%26source_user_id%3D9A176ADB-73F4-4BD8-A648-23F2443493B5&us_privacy=%24%7BUS_PRIVACY%7D P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: ipc=; domain=pubmatic.com; path=/; max-age=0; SameSite=None; secure; Set-Cookie: pi=156557:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=4; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Mon, 11 Mar 2024 11:56:48 GMT Content-Length: 270 Connection: close
2024-03-11 11:56:50 UTC	270	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 34 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 53 50 75 67 3f 67 64 70 72 3d 30 26 61 6d 70 3b 70 3d 31 35 36 35 35 37 26 61 6d 70 3b 70 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 74 63 68 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 25 32 46 73 79 6e 63 25 32 46 76 31 25 33 46 73 6f 75 72 63 65 5f 69 64 25 33 44 75 46 46 72 35 52 46 42 59 67 6f 55 4a 62 57 4d 41 57 47 45 5a 4b 53 33 25 32 36 73 6f 75 72 63 65 5f 75 73 65 72 5f 69 64 25 33 44 39 41 31 37 36 41 44 42 2d 37 33 46 34 2d 34 42 44 38 2d 41 36 34 38 2d 32 33 46 32 34 34 33 34 39 33 42 35 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 25 32 34 25 37 42 55 53 5f 50 52 49 56 41 43 59 25 37 Data Ascii: <a href="https://image4.pubmatic.com/AdServer/SPug?gdpr=0&p=156557&pr=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DuFFr5RFBYgoUJbWMAWGEZKS3%26source_user_id%3D9A176ADB-73F4-4BD8-A648-23F2443493B5&us_privacy=%24%7BUS_PRIVACY%7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.16	50003	3.222.237.51	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:50 UTC	588	OUT	GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=9A176ADB-73F4-4BD8-A648-23F2443493B5&vxii_pid=12&vxii_pid1=10067&vxii_rcid=5aa989e0-19fe-4ef1-8068-2d0a432b0425 HTTP/1.1 Host: thrtle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=eyJpZCI6IjVhYTk4OWUwLTE5ZmUtNGVmMS04MDY4LTJkMGE0MzJiMDQyNSIsImwiOjE3MTAxNTgyMDkzNzUsInQiOjF9
2024-03-11 11:56:50 UTC	353	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:50 GMT Content-Type: image/gif Content-Length: 43 Connection: close P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6IjVhYTk4OWUwLTE5ZmUtNGVmMS04MDY4LTJkMGE0MzJiMDQyNSIsImwiOjE3MTAxNTgyMTA0NTEsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Fri, 27 Sep 2024 11:56:50 GMT; Secure; SameSite=None
2024-03-11 11:56:50 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.16	50009	34.117.77.79	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:50 UTC	895	OUT	GET /utsync.ashx?eid=53819&et=0&fp=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent= HTTP/1.1 Host: ml314.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: u=aHR0cHM6Ly9zb3VyY2Vmb3JnZS5uZXQvcHJvamVjdHMvZG9jZmV0Y2hlci9maWxlcy9kb2NmZXRjaGVyLzEuMS4yNS9kb2NmZXRjaGVyXzEuMS4yNV93aW4zMl9zZXR1cC5leGUvZG93bmxvYWQ%3D; pi=3642666937673580575; tp=3%253B03%252F11%252F2024%2B11%253A56%253A43%253B0
2024-03-11 11:56:50 UTC	682	IN	HTTP/1.1 200 OK content-type: image/gif cache-control: no-cache, no-store, must-revalidate expires: 0,Tue, 12 Mar 2024 11:56:50 GMT pragma: no-cache set-cookie: u=aHR0cHM6Ly9zb3VyY2Vmb3JnZS5uZXQv; expires=Mon, 11 Mar 2024 11:57:05 GMT; domain=ml314.com; path=/;SameSite=None; secure set-cookie: pi=3642666937673580575; expires=Tue, 11 Mar 2025 11:56:50 GMT; domain=ml314.com; path=/; secure; samesite=none; httponly p3p: CP="NON DSP COR ADMo PSAo DEVo BUS COM UNI NAV DEM STA" date: Mon, 11 Mar 2024 11:56:50 GMT server: Google Frontend via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-11 11:56:50 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-03-11 11:56:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.16	50012	104.36.113.110	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:50 UTC	2334	OUT	GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; PugT=1710158209; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=3; SyncRTB3=1711324800%3A71_55_104_166_220_21_13_54_250%7C1710720000%3A2_15_223; KRTBCOOKIE_188=3189-6bbe4efa-b2b9-483b-b167-285771ce2f25-65eef180-5553&KRTB&23418-6bbe4efa-b2b9-483b-b167-285771ce2f25-65eef180-5553
2024-03-11 11:56:50 UTC	923	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: https://image4.pubmatic.com/AdServer/SPug?gdpr=0&p=156557&pr=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DuFFr5RFBYgoUJbWMAWGEZKS3%26source_user_id%3D9A176ADB-73F4-4BD8-A648-23F2443493B5&us_privacy=%24%7BUS_PRIVACY%7D P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: ipc=; domain=pubmatic.com; path=/; max-age=0; SameSite=None; secure; Set-Cookie: pi=156557:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=4; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Mon, 11 Mar 2024 11:56:49 GMT Content-Length: 270 Connection: close
2024-03-11 11:56:50 UTC	270	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 34 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 53 50 75 67 3f 67 64 70 72 3d 30 26 61 6d 70 3b 70 3d 31 35 36 35 35 37 26 61 6d 70 3b 70 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 74 63 68 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 25 32 46 73 79 6e 63 25 32 46 76 31 25 33 46 73 6f 75 72 63 65 5f 69 64 25 33 44 75 46 46 72 35 52 46 42 59 67 6f 55 4a 62 57 4d 41 57 47 45 5a 4b 53 33 25 32 36 73 6f 75 72 63 65 5f 75 73 65 72 5f 69 64 25 33 44 39 41 31 37 36 41 44 42 2d 37 33 46 34 2d 34 42 44 38 2d 41 36 34 38 2d 32 33 46 32 34 34 33 34 39 33 42 35 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 25 32 34 25 37 42 55 53 5f 50 52 49 56 41 43 59 25 37 Data Ascii: <a href="https://image4.pubmatic.com/AdServer/SPug?gdpr=0&p=156557&pr=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DuFFr5RFBYgoUJbWMAWGEZKS3%26source_user_id%3D9A176ADB-73F4-4BD8-A648-23F2443493B5&us_privacy=%24%7BUS_PRIVACY%7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.16	50010	52.25.158.6	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:50 UTC	819	OUT	GET /cookie-sync?bee_sync_partners=pp%2Csyn%2Cshr&bee_sync_current_partner=sas&bee_sync_initiator=adx&bee_sync_hop_count=3&userid=1899505890594565248&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAKPDU7L3eMAABWFZYx_mg; bitoIsSecure=ok; checkForPermission=ok
2024-03-11 11:56:50 UTC	636	IN	HTTP/1.1 303 See Other Date: Mon, 11 Mar 2024 11:56:50 GMT location: https://bh.contextweb.com/bh/rtset?ev=AAKPDU7L3eMAABWFZYx_mg&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fuserid%3D1899505890594565248%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dsyn%252Cshr%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&gdpr=0 Server: gunicorn set-cookie: bito=AAKPDU7L3eMAABWFZYx_mg; Domain=bidr.io; expires=Thu, 10 Apr 2025 07:56:50 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.16	50017	104.36.113.111	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:50 UTC	2449	OUT	GET /AdServer/SPug?partnerID=162538&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=3; SyncRTB3=1711324800%3A71_55_104_166_220_21_13_54_250%7C1710720000%3A2_15_223; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; PugT=1710158209
2024-03-11 11:56:51 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 11 Mar 2024 11:56:49 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1710158209; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:49 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.16	50020	142.250.141.154	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:50 UTC	595	OUT	GET /pagead/drt/si?st=NO_DATA HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlhWjE-nrLMqamcKd4HCzJGyk-lF6Y-_gdSV1_rcQ-Lc3JBzMSF3zk6wICTe0A; test_cookie=CheckForPermission; DSID=NO_DATA
2024-03-11 11:56:51 UTC	664	IN	HTTP/1.1 200 OK Cross-Origin-Resource-Policy: cross-origin P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 11 Mar 2024 11:56:51 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: DSID=NO_DATA; expires=Mon, 11-Mar-2024 12:56:51 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 11 Mar 2024 11:56:51 GMT Cache-Control: private Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.16	50022	54.69.221.139	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:50 UTC	507	OUT	GET /demconf.jpg?et:ibs%7cdata:dpid=22052&dpuuid=3642666937673580575&redir= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=45232011452423388812062241212727845356; dpm=45232011452423388812062241212727845356
2024-03-11 11:56:51 UTC	891	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:51 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: rtZhfIGnTIk= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-usw2-1-v054-0be56e47d.edge-usw2.demdex.com 2 ms set-cookie: dpm=45232011452423388812062241212727845356; Max-Age=15552000; Expires=Sat, 07 Sep 2024 11:56:51 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=45232011452423388812062241212727845356; Max-Age=15552000; Expires=Sat, 07 Sep 2024 11:56:51 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-03-11 11:56:51 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.16	50021	3.232.64.79	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:50 UTC	684	OUT	GET /match?bid=r8hrb20&uid=nil&referrer_pid=r8hrb20 HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=18e2d5f5e6f-1cc10000010a4999; SERVERID=18841~DM
2024-03-11 11:56:51 UTC	389	IN	HTTP/1.1 200 OK Connection: close Set-Cookie: SERVERID=18841~DM; Domain=eyeota.net; Path=/; Expires=Mon, 11 Mar 2024 12:06:51 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Content-Type: image/gif Content-Length: 70 Date: Mon, 11 Mar 2024 11:56:51 GMT
2024-03-11 11:56:51 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.16	50023	52.11.41.99	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:50 UTC	936	OUT	GET /cookie-sync?gdpr=0&gdpr_consent=&userid=1899505890594565248&gdpr=0&gdpr_consent=&bee_sync_partners=pp%2Cpm&bee_sync_current_partner=syn&bee_sync_initiator=pm&bee_sync_hop_count=2 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAKPDU7L3eMAABWFZYx_mg; bitoIsSecure=ok; checkForPermission=ok
2024-03-11 11:56:51 UTC	619	IN	HTTP/1.1 303 See Other Date: Mon, 11 Mar 2024 11:56:51 GMT location: https://bh.contextweb.com/bh/rtset?ev=AAKPDU7L3eMAABWFZYx_mg&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D1899505890594565248%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dpm%26bee_sync_hop_count%3D3&gdpr=0 Server: gunicorn set-cookie: bito=AAKPDU7L3eMAABWFZYx_mg; Domain=bidr.io; expires=Thu, 10 Apr 2025 07:56:51 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.16	50025	192.82.242.213	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:50 UTC	2698	OUT	GET /AdServer/SPug?gdpr=0&p=156557&pr=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DuFFr5RFBYgoUJbWMAWGEZKS3%26source_user_id%3D9A176ADB-73F4-4BD8-A648-23F2443493B5&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SyncRTB3=1711324800%3A54_250_55_71_220_21_13_104_166%7C1710720000%3A2_15_223; KRTBCOOKIE_32=11175-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&22713-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&22715-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&23519-AAAKjSefg7ls1AMUGjNCAAAAAAA; PugT=1710158210; chkChromeAb67Sec=4
2024-03-11 11:56:51 UTC	560	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:56:50 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1710158210; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:50 GMT; path=/ Location: https://match.sharethrough.com/sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.16	50024	104.36.113.110	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:50 UTC	2617	OUT	GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=3; SyncRTB3=1711324800%3A71_55_104_166_220_21_13_54_250%7C1710720000%3A2_15_223; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; PugT=1710158209
2024-03-11 11:56:51 UTC	923	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: https://image4.pubmatic.com/AdServer/SPug?gdpr=0&p=156557&pr=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DuFFr5RFBYgoUJbWMAWGEZKS3%26source_user_id%3D9A176ADB-73F4-4BD8-A648-23F2443493B5&us_privacy=%24%7BUS_PRIVACY%7D P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: ipc=; domain=pubmatic.com; path=/; max-age=0; SameSite=None; secure; Set-Cookie: pi=156557:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=4; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Mon, 11 Mar 2024 11:56:49 GMT Content-Length: 270 Connection: close
2024-03-11 11:56:51 UTC	270	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 34 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 53 50 75 67 3f 67 64 70 72 3d 30 26 61 6d 70 3b 70 3d 31 35 36 35 35 37 26 61 6d 70 3b 70 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 74 63 68 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 25 32 46 73 79 6e 63 25 32 46 76 31 25 33 46 73 6f 75 72 63 65 5f 69 64 25 33 44 75 46 46 72 35 52 46 42 59 67 6f 55 4a 62 57 4d 41 57 47 45 5a 4b 53 33 25 32 36 73 6f 75 72 63 65 5f 75 73 65 72 5f 69 64 25 33 44 39 41 31 37 36 41 44 42 2d 37 33 46 34 2d 34 42 44 38 2d 41 36 34 38 2d 32 33 46 32 34 34 33 34 39 33 42 35 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 25 32 34 25 37 42 55 53 5f 50 52 49 56 41 43 59 25 37 Data Ascii: <a href="https://image4.pubmatic.com/AdServer/SPug?gdpr=0&p=156557&pr=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DuFFr5RFBYgoUJbWMAWGEZKS3%26source_user_id%3D9A176ADB-73F4-4BD8-A648-23F2443493B5&us_privacy=%24%7BUS_PRIVACY%7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.16	50026	104.36.113.107	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:51 UTC	2592	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAJLoB_DnsBqQNyIxdlAAAAAAA&expiration=1710244610&nuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SyncRTB3=1711324800%3A54_250_55_71_220_21_13_104_166%7C1710720000%3A2_15_223; KRTBCOOKIE_32=11175-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&22713-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&22715-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&23519-AAAKjSefg7ls1AMUGjNCAAAAAAA; PugT=1710158210; chkChromeAb67Sec=4
2024-03-11 11:56:51 UTC	708	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 11 Mar 2024 11:56:49 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_32=11175-AAAJLoB_DnsBqQNyIxdlAAAAAAA&KRTB&22713-AAAJLoB_DnsBqQNyIxdlAAAAAAA&KRTB&22715-AAAJLoB_DnsBqQNyIxdlAAAAAAA&KRTB&23519-AAAJLoB_DnsBqQNyIxdlAAAAAAA; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 09-Jun-2024 11:56:49 GMT; path=/ Set-Cookie: PugT=1710158209; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:49 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:51 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.16	50027	104.36.113.110	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:51 UTC	2680	OUT	GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=3; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SyncRTB3=1711324800%3A54_250_55_71_220_21_13_104_166%7C1710720000%3A2_15_223; KRTBCOOKIE_32=11175-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&22713-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&22715-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&23519-AAAKjSefg7ls1AMUGjNCAAAAAAA; PugT=1710158210
2024-03-11 11:56:51 UTC	923	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: https://image4.pubmatic.com/AdServer/SPug?gdpr=0&p=156557&pr=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DuFFr5RFBYgoUJbWMAWGEZKS3%26source_user_id%3D9A176ADB-73F4-4BD8-A648-23F2443493B5&us_privacy=%24%7BUS_PRIVACY%7D P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: ipc=; domain=pubmatic.com; path=/; max-age=0; SameSite=None; secure; Set-Cookie: pi=156557:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=4; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Mon, 11 Mar 2024 11:56:50 GMT Content-Length: 270 Connection: close
2024-03-11 11:56:51 UTC	270	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 34 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 53 50 75 67 3f 67 64 70 72 3d 30 26 61 6d 70 3b 70 3d 31 35 36 35 35 37 26 61 6d 70 3b 70 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 74 63 68 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 25 32 46 73 79 6e 63 25 32 46 76 31 25 33 46 73 6f 75 72 63 65 5f 69 64 25 33 44 75 46 46 72 35 52 46 42 59 67 6f 55 4a 62 57 4d 41 57 47 45 5a 4b 53 33 25 32 36 73 6f 75 72 63 65 5f 75 73 65 72 5f 69 64 25 33 44 39 41 31 37 36 41 44 42 2d 37 33 46 34 2d 34 42 44 38 2d 41 36 34 38 2d 32 33 46 32 34 34 33 34 39 33 42 35 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 25 32 34 25 37 42 55 53 5f 50 52 49 56 41 43 59 25 37 Data Ascii: <a href="https://image4.pubmatic.com/AdServer/SPug?gdpr=0&p=156557&pr=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DuFFr5RFBYgoUJbWMAWGEZKS3%26source_user_id%3D9A176ADB-73F4-4BD8-A648-23F2443493B5&us_privacy=%24%7BUS_PRIVACY%7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.16	50029	34.117.77.79	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:51 UTC	542	OUT	GET /utsync.ashx?eid=53819&et=0&fp=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent= HTTP/1.1 Host: ml314.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pi=3642666937673580575; tp=3%253B03%252F11%252F2024%2B11%253A56%253A43%253B0; u=aHR0cHM6Ly9zb3VyY2Vmb3JnZS5uZXQv
2024-03-11 11:56:51 UTC	547	IN	HTTP/1.1 200 OK content-type: image/gif cache-control: no-cache, no-store, must-revalidate expires: 0,Tue, 12 Mar 2024 11:56:51 GMT pragma: no-cache set-cookie: pi=3642666937673580575; expires=Tue, 11 Mar 2025 11:56:51 GMT; domain=ml314.com; path=/; secure; samesite=none; httponly p3p: CP="NON DSP COR ADMo PSAo DEVo BUS COM UNI NAV DEM STA" date: Mon, 11 Mar 2024 11:56:51 GMT server: Google Frontend via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-11 11:56:51 UTC	54	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2bGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.16	50028	192.82.242.213	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:51 UTC	2595	OUT	GET /AdServer/SPug?gdpr=0&p=156557&pr=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DuFFr5RFBYgoUJbWMAWGEZKS3%26source_user_id%3D9A176ADB-73F4-4BD8-A648-23F2443493B5&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SyncRTB3=1711324800%3A54_250_55_71_220_21_13_104_166%7C1710720000%3A2_15_223; KRTBCOOKIE_32=11175-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&22713-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&22715-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&23519-AAAKjSefg7ls1AMUGjNCAAAAAAA; PugT=1710158210; chkChromeAb67Sec=4
2024-03-11 11:56:51 UTC	560	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:56:51 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1710158211; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:51 GMT; path=/ Location: https://match.sharethrough.com/sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.16	50031	192.82.242.213	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:51 UTC	2594	OUT	GET /AdServer/SPug?gdpr=0&p=156557&pr=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DuFFr5RFBYgoUJbWMAWGEZKS3%26source_user_id%3D9A176ADB-73F4-4BD8-A648-23F2443493B5&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; SPugT=1710158208; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SyncRTB3=1711324800%3A54_250_55_71_220_21_13_104_166%7C1710720000%3A2_15_223; KRTBCOOKIE_32=11175-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&22713-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&22715-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&23519-AAAKjSefg7ls1AMUGjNCAAAAAAA; PugT=1710158210; chkChromeAb67Sec=4
2024-03-11 11:56:51 UTC	560	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:56:51 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1710158211; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:51 GMT; path=/ Location: https://match.sharethrough.com/sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.16	50032	74.214.196.131	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:51 UTC	865	OUT	GET /bh/rtset?ev=AAKPDU7L3eMAABWFZYx_mg&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fuserid%3D1899505890594565248%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dsyn%252Cshr%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&gdpr=0 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:51 UTC	1150	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-98c7f4b5-lr4l6 Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: V=czT79gxaPTJK;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Thu, 06-Mar-2025 11:56:51 GMT;Max-Age=31104000;SameSite=None Set-Cookie: pb_rtb_ev=3-1q66\|7dN.0.AAKPDU7L3eMAABWFZYx_mg;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Tue, 11-Mar-2025 11:56:51 GMT;Max-Age=31536000;SameSite=None Location: https://match.prod.bidr.io/cookie-sync?userid=1899505890594565248&gdpr=0&gdpr_consent=&bee_sync_partners=syn%2Cshr&bee_sync_current_partner=pp&bee_sync_initiator=adx&bee_sync_hop_count=4&ev=AAKPDU7L3eMAABWFZYx_mg&pid=558502&do=add&gdpr=0 Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000 Set-Cookie: INGRESSCOOKIE=887c4613e70ac9c8; path=/; HttpOnly; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.16	50034	104.36.113.107	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:51 UTC	2695	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAJk8EYVlWhHwN6XiilAAAAAAA&expiration=1710244611&nuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SyncRTB3=1711324800%3A54_250_55_71_220_21_13_104_166%7C1710720000%3A2_15_223; KRTBCOOKIE_32=11175-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&22713-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&22715-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&23519-AAAKjSefg7ls1AMUGjNCAAAAAAA; PugT=1710158210; chkChromeAb67Sec=4; SPugT=1710158209
2024-03-11 11:56:51 UTC	708	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 11 Mar 2024 11:56:50 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_32=11175-AAAJk8EYVlWhHwN6XiilAAAAAAA&KRTB&22713-AAAJk8EYVlWhHwN6XiilAAAAAAA&KRTB&22715-AAAJk8EYVlWhHwN6XiilAAAAAAA&KRTB&23519-AAAJk8EYVlWhHwN6XiilAAAAAAA; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 09-Jun-2024 11:56:50 GMT; path=/ Set-Cookie: PugT=1710158210; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:50 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:51 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.16	50036	192.82.242.213	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:51 UTC	2698	OUT	GET /AdServer/SPug?gdpr=0&p=156557&pr=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DuFFr5RFBYgoUJbWMAWGEZKS3%26source_user_id%3D9A176ADB-73F4-4BD8-A648-23F2443493B5&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SyncRTB3=1711324800%3A54_250_55_71_220_21_13_104_166%7C1710720000%3A2_15_223; KRTBCOOKIE_32=11175-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&22713-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&22715-AAAKjSefg7ls1AMUGjNCAAAAAAA&KRTB&23519-AAAKjSefg7ls1AMUGjNCAAAAAAA; PugT=1710158210; chkChromeAb67Sec=4; SPugT=1710158210
2024-03-11 11:56:52 UTC	560	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:56:51 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1710158211; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:51 GMT; path=/ Location: https://match.sharethrough.com/sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.16	50037	104.36.113.107	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:51 UTC	2356	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAJLoB_DnsBqQNyIxdlAAAAAAA&expiration=1710244610&nuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SyncRTB3=1711324800%3A54_250_55_71_220_21_13_104_166%7C1710720000%3A2_15_223; chkChromeAb67Sec=4; SPugT=1710158210; KRTBCOOKIE_32=11175-AAAJLoB_DnsBqQNyIxdlAAAAAAA&KRTB&22713-AAAJLoB_DnsBqQNyIxdlAAAAAAA&KRTB&22715-AAAJLoB_DnsBqQNyIxdlAAAAAAA&KRTB&23519-AAAJLoB_DnsBqQNyIxdlAAAAAAA; PugT=1710158209
2024-03-11 11:56:52 UTC	708	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 11 Mar 2024 11:56:51 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_32=11175-AAAJLoB_DnsBqQNyIxdlAAAAAAA&KRTB&22713-AAAJLoB_DnsBqQNyIxdlAAAAAAA&KRTB&22715-AAAJLoB_DnsBqQNyIxdlAAAAAAA&KRTB&23519-AAAJLoB_DnsBqQNyIxdlAAAAAAA; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 09-Jun-2024 11:56:51 GMT; path=/ Set-Cookie: PugT=1710158211; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:51 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:52 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.16	50040	192.82.242.213	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:51 UTC	2595	OUT	GET /AdServer/SPug?gdpr=0&p=156557&pr=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DuFFr5RFBYgoUJbWMAWGEZKS3%26source_user_id%3D9A176ADB-73F4-4BD8-A648-23F2443493B5&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SyncRTB3=1711324800%3A54_250_55_71_220_21_13_104_166%7C1710720000%3A2_15_223; chkChromeAb67Sec=4; SPugT=1710158210; KRTBCOOKIE_32=11175-AAAJLoB_DnsBqQNyIxdlAAAAAAA&KRTB&22713-AAAJLoB_DnsBqQNyIxdlAAAAAAA&KRTB&22715-AAAJLoB_DnsBqQNyIxdlAAAAAAA&KRTB&23519-AAAJLoB_DnsBqQNyIxdlAAAAAAA; PugT=1710158209
2024-03-11 11:56:52 UTC	560	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:56:52 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1710158212; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:52 GMT; path=/ Location: https://match.sharethrough.com/sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.16	50038	74.214.196.131	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:51 UTC	952	OUT	GET /bh/rtset?ev=AAKPDU7L3eMAABWFZYx_mg&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D1899505890594565248%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dpm%26bee_sync_hop_count%3D3&gdpr=0 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:56:52 UTC	1135	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-98c7f4b5-rbg4l Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: V=3ftvG5anVWUA;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Thu, 06-Mar-2025 11:56:52 GMT;Max-Age=31104000;SameSite=None Set-Cookie: pb_rtb_ev=3-1q66\|7dN.0.AAKPDU7L3eMAABWFZYx_mg;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Tue, 11-Mar-2025 11:56:52 GMT;Max-Age=31536000;SameSite=None Location: https://match.prod.bidr.io/cookie-sync?gdpr=0&userid=1899505890594565248&gdpr=0&bee_sync_partners=pm&bee_sync_current_partner=pp&bee_sync_initiator=pm&bee_sync_hop_count=3&ev=AAKPDU7L3eMAABWFZYx_mg&pid=558502&do=add&gdpr=0 Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000 Set-Cookie: INGRESSCOOKIE=c74e8523d665f622; path=/; HttpOnly; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.16	50044	104.36.113.107	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:51 UTC	2356	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAJLRSyz5tvPANVn5seAAAAAAA&expiration=1710244611&nuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SyncRTB3=1711324800%3A54_250_55_71_220_21_13_104_166%7C1710720000%3A2_15_223; chkChromeAb67Sec=4; KRTBCOOKIE_32=11175-AAAJLoB_DnsBqQNyIxdlAAAAAAA&KRTB&22713-AAAJLoB_DnsBqQNyIxdlAAAAAAA&KRTB&22715-AAAJLoB_DnsBqQNyIxdlAAAAAAA&KRTB&23519-AAAJLoB_DnsBqQNyIxdlAAAAAAA; PugT=1710158209; SPugT=1710158211
2024-03-11 11:56:52 UTC	708	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 11 Mar 2024 11:56:51 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_32=11175-AAAJLRSyz5tvPANVn5seAAAAAAA&KRTB&22713-AAAJLRSyz5tvPANVn5seAAAAAAA&KRTB&22715-AAAJLRSyz5tvPANVn5seAAAAAAA&KRTB&23519-AAAJLRSyz5tvPANVn5seAAAAAAA; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 09-Jun-2024 11:56:51 GMT; path=/ Set-Cookie: PugT=1710158211; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:51 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:52 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.16	50043	54.215.97.222	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:51 UTC	733	OUT	GET /sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:56:52 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:52 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:56:52 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:56:52 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.16	50039	52.52.154.39	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:52 UTC	837	OUT	GET /sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:56:52 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:52 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:56:52 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:56:52 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.16	50041	52.52.154.39	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:52 UTC	734	OUT	GET /sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:56:52 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:52 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:56:52 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:56:52 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.16	50045	52.25.158.6	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:52 UTC	864	OUT	GET /cookie-sync?userid=1899505890594565248&gdpr=0&gdpr_consent=&bee_sync_partners=syn%2Cshr&bee_sync_current_partner=pp&bee_sync_initiator=adx&bee_sync_hop_count=4&ev=AAKPDU7L3eMAABWFZYx_mg&pid=558502&do=add&gdpr=0 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAKPDU7L3eMAABWFZYx_mg; bitoIsSecure=ok; checkForPermission=ok
2024-03-11 11:56:52 UTC	624	IN	HTTP/1.1 303 See Other Date: Mon, 11 Mar 2024 11:56:52 GMT location: https://sync.technoratimedia.com/services?uid=AAKPDU7L3eMAABWFZYx_mg&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fuserid%3D1899505890594565248%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dshr%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D5&gdpr=0 Server: gunicorn set-cookie: bito=AAKPDU7L3eMAABWFZYx_mg; Domain=bidr.io; expires=Thu, 10 Apr 2025 07:56:52 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.16	50042	18.214.54.215	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:52 UTC	449	OUT	GET /match?bid=r8hrb20&uid=nil&referrer_pid=r8hrb20 HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=18e2d5f5e6f-1cc10000010a4999; SERVERID=18841~DM
2024-03-11 11:56:52 UTC	389	IN	HTTP/1.1 200 OK Connection: close Set-Cookie: SERVERID=18841~DM; Domain=eyeota.net; Path=/; Expires=Mon, 11 Mar 2024 12:06:52 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Content-Type: image/gif Content-Length: 70 Date: Mon, 11 Mar 2024 11:56:52 GMT
2024-03-11 11:56:52 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.16	50047	104.36.113.107	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:52 UTC	2695	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAJLoB_DnsBwwNPtb-EAAAAAAA&expiration=1710244611&nuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SyncRTB3=1711324800%3A54_250_55_71_220_21_13_104_166%7C1710720000%3A2_15_223; chkChromeAb67Sec=4; SPugT=1710158211; KRTBCOOKIE_32=11175-AAAJk8EYVlWhHwN6XiilAAAAAAA&KRTB&22713-AAAJk8EYVlWhHwN6XiilAAAAAAA&KRTB&22715-AAAJk8EYVlWhHwN6XiilAAAAAAA&KRTB&23519-AAAJk8EYVlWhHwN6XiilAAAAAAA; PugT=1710158210
2024-03-11 11:56:52 UTC	708	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 11 Mar 2024 11:56:50 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_32=11175-AAAJLoB_DnsBwwNPtb-EAAAAAAA&KRTB&22713-AAAJLoB_DnsBwwNPtb-EAAAAAAA&KRTB&22715-AAAJLoB_DnsBwwNPtb-EAAAAAAA&KRTB&23519-AAAJLoB_DnsBwwNPtb-EAAAAAAA; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 09-Jun-2024 11:56:50 GMT; path=/ Set-Cookie: PugT=1710158210; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:50 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:52 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.16	50048	52.52.154.39	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:52 UTC	837	OUT	GET /sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:56:52 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:52 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:56:52 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:56:52 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.16	50050	52.9.139.67	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:52 UTC	498	OUT	GET /sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:56:52 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:52 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:56:52 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:56:52 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.16	50051	52.52.154.39	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:52 UTC	734	OUT	GET /sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:56:52 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:52 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:56:52 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:56:52 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.16	50049	52.11.41.99	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:52 UTC	953	OUT	GET /cookie-sync?gdpr=0&userid=1899505890594565248&gdpr=0&bee_sync_partners=pm&bee_sync_current_partner=pp&bee_sync_initiator=pm&bee_sync_hop_count=3&ev=AAKPDU7L3eMAABWFZYx_mg&pid=558502&do=add&gdpr=0 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAKPDU7L3eMAABWFZYx_mg; bitoIsSecure=ok; checkForPermission=ok
2024-03-11 11:56:53 UTC	454	IN	HTTP/1.1 303 See Other Date: Mon, 11 Mar 2024 11:56:52 GMT location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AAKPDU7L3eMAABWFZYx_mg&gdpr=0 Server: gunicorn set-cookie: bito=AAKPDU7L3eMAABWFZYx_mg; Domain=bidr.io; expires=Thu, 10 Apr 2025 07:56:52 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.16	50052	104.36.113.107	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:52 UTC	2695	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAKjSefg7ltFQMpDsPHAAAAAAA&expiration=1710244612&nuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SyncRTB3=1711324800%3A54_250_55_71_220_21_13_104_166%7C1710720000%3A2_15_223; chkChromeAb67Sec=4; PugT=1710158211; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAJLRSyz5tvPANVn5seAAAAAAA&KRTB&22713-AAAJLRSyz5tvPANVn5seAAAAAAA&KRTB&22715-AAAJLRSyz5tvPANVn5seAAAAAAA&KRTB&23519-AAAJLRSyz5tvPANVn5seAAAAAAA
2024-03-11 11:56:53 UTC	708	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 11 Mar 2024 11:56:51 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 09-Jun-2024 11:56:51 GMT; path=/ Set-Cookie: PugT=1710158211; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:51 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:53 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.16	50053	193.122.128.135	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:53 UTC	1031	OUT	GET /services?uid=AAKPDU7L3eMAABWFZYx_mg&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fuserid%3D1899505890594565248%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dshr%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D5&gdpr=0 HTTP/1.1 Host: sync.technoratimedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tads_uidp_73=AAKPDU7L3eMAABWFZYx_mg; tads_uid=CDBA957564F9422CB94ECF5C311A0351; tads_uid_cd=20240311115648+0000; tads_zora=2; tads_uidp_82=Ze7xfMAoIeEAAAzaAIdO4AAA&4192
2024-03-11 11:56:53 UTC	1274	IN	HTTP/1.1 307 Temporary Redirect Server: nginx Date: Mon, 11 Mar 2024 11:56:53 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: close Location: https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26nuid%3DCDBA957564F9422CB94ECF5C311A0351%26att%3D1%26pid%3D46%26cb%3Dhttps%253A%252F%252Fmatch.prod.bidr.io%252Fcookie-sync%253Fuserid%253D1899505890594565248%2526gdpr%253D0%2526gdpr%253D0%2526bee_sync_partners%253Dshr%2526bee_sync_current_partner%253Dsyn%2526bee_sync_initiator%253Dadx%2526bee_sync_hop_count%253D5%26uid%3D%24UID set-cookie: tads_uid=CDBA957564F9422CB94ECF5C311A0351; Max-Age=63072000; Expires=Wed, 11 Mar 2026 11:56:53 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid_cd=20240311115648+0000; Max-Age=63072000; Expires=Wed, 11 Mar 2026 11:56:53 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_zora=2; Max-Age=63072000; Expires=Wed, 11 Mar 2026 11:56:53 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None access-control-allow-origin: https://sourceforge.net/ access-control-allow-credentials: true access-control-allow-methods: POST,GET,HEAD,OPTIONS X-Varnish: 876330731 Age: 0 Via: 1.1 varnish

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.16	50054	52.9.139.67	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:53 UTC	498	OUT	GET /sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:56:53 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:53 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:56:53 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:56:53 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.16	50055	204.237.133.120	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:53 UTC	2596	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AAKPDU7L3eMAABWFZYx_mg&gdpr=0 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SyncRTB3=1711324800%3A54_250_55_71_220_21_13_104_166%7C1710720000%3A2_15_223; chkChromeAb67Sec=4; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAJLoB_DnsBwwNPtb-EAAAAAAA&KRTB&22713-AAAJLoB_DnsBwwNPtb-EAAAAAAA&KRTB&22715-AAAJLoB_DnsBwwNPtb-EAAAAAAA&KRTB&23519-AAAJLoB_DnsBwwNPtb-EAAAAAAA; PugT=1710158210
2024-03-11 11:56:53 UTC	587	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 11 Mar 2024 11:56:53 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 09-Jun-2024 11:56:53 GMT; path=/ Set-Cookie: PugT=1710158213; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:56:53 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:56:53 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.16	50056	52.9.139.67	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:54 UTC	498	OUT	GET /sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:56:54 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:54 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:56:54 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:56:54 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.16	50057	104.254.151.68	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:54 UTC	1215	OUT	GET /getuid?https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26nuid%3DCDBA957564F9422CB94ECF5C311A0351%26att%3D1%26pid%3D46%26cb%3Dhttps%253A%252F%252Fmatch.prod.bidr.io%252Fcookie-sync%253Fuserid%253D1899505890594565248%2526gdpr%253D0%2526gdpr%253D0%2526bee_sync_partners%253Dshr%2526bee_sync_current_partner%253Dsyn%2526bee_sync_initiator%253Dadx%2526bee_sync_hop_count%253D5%26uid%3D%24UID HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; icu=ChgIkPoyEAoYASABKAEw9-K7rwY4AUABSAEQ9-K7rwYYAA..; receive-cookie-deprecation=1; uuid2=7822940101119878936
2024-03-11 11:56:54 UTC	1704	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Mon, 11 Mar 2024 11:56:54 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://sync.technoratimedia.com/services?srv=cs&nuid=CDBA957564F9422CB94ECF5C311A0351&att=1&pid=46&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fuserid%3D1899505890594565248%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dshr%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D5&uid=7822940101119878936 AN-X-Request-Uuid: b79f1da9-bbe6-4e37-b860-c62a0ac2d69b Set-Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:56:54 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 27-Feb-2034 11:56:54 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=7822940101119878936; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:56:54 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.105.38; 154.16.105.38; 904.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.16	50058	193.122.128.135	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:55 UTC	1065	OUT	GET /services?srv=cs&nuid=CDBA957564F9422CB94ECF5C311A0351&att=1&pid=46&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fuserid%3D1899505890594565248%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dshr%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D5&uid=7822940101119878936 HTTP/1.1 Host: sync.technoratimedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tads_uidp_73=AAKPDU7L3eMAABWFZYx_mg; tads_uid=CDBA957564F9422CB94ECF5C311A0351; tads_uid_cd=20240311115648+0000; tads_zora=2; tads_uidp_82=Ze7xfMAoIeEAAAzaAIdO4AAA&4192
2024-03-11 11:56:55 UTC	1187	IN	HTTP/1.1 307 Temporary Redirect Server: nginx Date: Mon, 11 Mar 2024 11:56:55 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: close Location: https://match.prod.bidr.io/cookie-sync?userid=1899505890594565248&gdpr=0&gdpr=0&bee_sync_partners=shr&bee_sync_current_partner=syn&bee_sync_initiator=adx&bee_sync_hop_count=5 Set-Cookie: tads_uidp_46=7822940101119878936; Max-Age=63072000; Expires=Wed, 11 Mar 2026 11:56:55 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid=CDBA957564F9422CB94ECF5C311A0351; Max-Age=63072000; Expires=Wed, 11 Mar 2026 11:56:55 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid_cd=20240311115648+0000; Max-Age=63072000; Expires=Wed, 11 Mar 2026 11:56:55 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_zora=2; Max-Age=63072000; Expires=Wed, 11 Mar 2026 11:56:55 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None access-control-allow-origin: https://sourceforge.net/ access-control-allow-credentials: true access-control-allow-methods: POST,GET,HEAD,OPTIONS X-Varnish: 879987907 Age: 0 Via: 1.1 varnish

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.16	50059	52.25.158.6	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:55 UTC	801	OUT	GET /cookie-sync?userid=1899505890594565248&gdpr=0&gdpr=0&bee_sync_partners=shr&bee_sync_current_partner=syn&bee_sync_initiator=adx&bee_sync_hop_count=5 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAKPDU7L3eMAABWFZYx_mg; bitoIsSecure=ok; checkForPermission=ok
2024-03-11 11:56:56 UTC	439	IN	HTTP/1.1 303 See Other Date: Mon, 11 Mar 2024 11:56:56 GMT location: https://match.sharethrough.com/sync/v1?source_id=vyXkw8rSq3j4JmKvTgxR3x1c&source_user_id=AAKPDU7L3eMAABWFZYx_mg&gdpr=0 Server: gunicorn set-cookie: bito=AAKPDU7L3eMAABWFZYx_mg; Domain=bidr.io; expires=Thu, 10 Apr 2025 07:56:56 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.16	50060	54.215.97.222	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:56 UTC	726	OUT	GET /sync/v1?source_id=vyXkw8rSq3j4JmKvTgxR3x1c&source_user_id=AAKPDU7L3eMAABWFZYx_mg&gdpr=0 HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:56:56 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:56 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:56:56 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:56:56 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.16	50061	52.9.139.67	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:57 UTC	491	OUT	GET /sync/v1?source_id=vyXkw8rSq3j4JmKvTgxR3x1c&source_user_id=AAKPDU7L3eMAABWFZYx_mg&gdpr=0 HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:56:57 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:56:57 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:56:57 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:56:57 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.16	50062	34.117.77.79	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:56:57 UTC	776	OUT	GET /imsync.ashx?pi=3642666937673580575&data=eyJwaCI6NDMwOSwid2giOjkwNywidGJzIjowLCJkdCI6MTUsInBpZCI6IjE3MTAxNTgyMDE5NTlfbm9wamh2cjRzIiwic2QiOjkwN30%3D HTTP/1.1 Host: ml314.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pi=3642666937673580575; tp=3%253B03%252F11%252F2024%2B11%253A56%253A43%253B0; u=aHR0cHM6Ly9zb3VyY2Vmb3JnZS5uZXQv
2024-03-11 11:56:58 UTC	252	IN	HTTP/1.1 200 OK content-type: application/javascript date: Mon, 11 Mar 2024 11:56:58 GMT server: Google Frontend via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-11 11:56:58 UTC	23	IN	Data Raw: 31 31 0d 0a 5f 6d 6c 2e 73 65 74 49 4d 28 66 61 6c 73 65 29 3b 0d 0a Data Ascii: 11_ml.setIM(false);
2024-03-11 11:56:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.16	50063	104.18.37.111	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:00 UTC	1794	OUT	GET /projects/docfetcher/postdownload HTTP/1.1 Host: sourceforge.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFdTcypzJDJDIXQ0IyV8TSs2KyVLUnhDNjRCQG1NaG1ObnslVjt1eEhQVFhlfUt4Q0RZVm83JUwzdTRleEdVdGNxOzQxaF9pO1M-UEdsQyhscUh6QGRHekhJNytYIXlEMlNtVWF-dlY_cWVXSVA8aUVLR0ZRU3w4diY_cypDOEcpNmJ2NWVCJTNnODZvRXA7enw9TV5Xa2w0RnpuOzBzRGhqMTc3ZG8pU0duMT5tLWpvanloN0Z6e0VeNGpPezQ3SHojTHxDR3AhKE1SKWUhSkwzZn1NNzJsY21kSG9qJnhRMDk5PiMqNjJvQUxoMVllP2pkKFA0O2tWJGw7ZipwRHBZOzZBaUppY0FPZHxZTnlBKEhvYHhCTz92VkZSe31TPkYifQ.KgEiMfdHyRq89be7fSK-sXsSnVuiJxBAXYJndndkHVc; OAID=e012d283a5e1eae18062d3edb9725359; _gid=GA1.2.1668299401.1710158203; __gads=ID=ed8d538436f1b623:T=1710158205:RT=1710158205:S=ALNI_MbiYxvEWP7dZiJkctj8HGzhHyMpCg; __gpi=UID=00000dc711cb5676:T=1710158205:RT=1710158205:S=ALNI_MbtGcDgo6RHjTtG2es2mbdsN1jDSw; __eoi=ID=ccb10672a4298c0a:T=1710158205:RT=1710158205:S=AA-AfjZQQCnCz9TlsGBpH19Z0_Y8; _ga_1H226E4E4L=GS1.1.1710158208.1.0.1710158208.0.0.0; _ga=GA1.1.1854926735.1710158203
2024-03-11 11:57:01 UTC	1187	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:01 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache pragma: no-cache link: <https://a.fsdn.com/con/js/sftheme/vendor/bizx-prebid.js?1709827391>; rel=preload; as=script, <https://a.fsdn.com/con/js/min/sf.sandiego-cmp-top.js?1709827391>; rel=preload; as=script, <https://a.fsdn.com/con/css/fonts/sftheme/lato-v20-latin-ext_latin-regular.woff2>; rel=preload; as=font; crossorigin, <https://a.fsdn.com/con/css/fonts/sftheme/lato-v20-latin-ext_latin-700.woff2>; rel=preload; as=font; crossorigin, <https://a.fsdn.com/con/css/lato.css?1709827391>; rel=preload; as=style, <https://a.fsdn.com/con/css/sandiego.css?1709827391>; rel=preload; as=style, <https://a.fsdn.com/con/js/min/sf.sandiego-head.js?1709827391>; rel=preload; as=script x-ua-compatible: IE=edge,chrome=1 permissions-policy: geolocation=(), microphone=(), camera=(), payment=(), document-domain=(), display-capture=(), autoplay=() feature-policy: geolocation 'none'; microphone 'none'; camera 'none'; payment 'none'; document-domain 'none'; display-capture 'none'; autoplay 'none' x-frame-options: SAMEORIGIN
2024-03-11 11:57:01 UTC	5311	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 6d 2d 61 63 74 69 6f 6e 20 27 73 65 6c 66 27 20 6c 69 73 74 73 2e 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 3b 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 3b 20 66 72 61 6d 65 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 3a 2f 2f 2a 2e 70 72 6f 2d 6d 61 72 6b 65 74 2e 6e 65 74 20 2a 2e 63 72 73 73 70 78 6c 2e 63 6f 6d 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 68 74 74 70 3a 2f 2f 63 2e 73 66 2d 73 79 6e 2e 63 6f 6d 20 68 74 74 70 3a 2f 2f 62 2e 73 66 2d 73 79 6e 2e 63 6f 6d 20 2a 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 20 2a 2e 73 61 66 Data Ascii: content-security-policy: form-action 'self' lists.sourceforge.net; upgrade-insecure-requests; frame-ancestors 'self'; frame-src 'self' http://.pro-market.net .crsspxl.com .google.com http://c.sf-syn.com http://b.sf-syn.com .googlesyndication.com *.saf
2024-03-11 11:57:01 UTC	823	IN	Data Raw: 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 73 6f 75 72 63 65 66 6f 72 67 65 3d 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 69 63 31 6f 69 4f 69 4a 6a 4c 57 77 2d 62 55 74 2d 51 6c 4a 72 4e 55 70 6c 66 46 4a 54 63 79 70 79 56 7a 45 32 57 6a 77 79 56 7a 52 44 52 6c 34 7a 54 43 59 34 59 48 68 44 4e 6a 52 43 51 47 31 4e 61 47 31 68 59 6e 6f 77 4c 54 74 31 65 45 68 51 4e 6c 4a 66 50 6b 5a 74 4b 6c 35 6a 4d 32 59 71 56 7a 68 37 4d 57 64 32 53 30 31 67 4b 45 6c 34 4b 43 56 4e 4d 6d 68 47 54 53 46 65 57 45 68 41 51 7a 64 4e 66 58 5a 55 4d 6d 52 44 59 45 55 78 59 31 42 69 53 32 4a 49 64 53 4e 71 64 30 59 37 61 6d 45 7a 52 54 4d 39 64 48 6f 32 62 57 6b 6d 50 6d 4a 6a 65 6b 49 30 66 43 74 44 61 47 Data Ascii: set-cookie: sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFJTcypyVzE2WjwyVzRDRl4zTCY4YHhDNjRCQG1NaG1hYnowLTt1eEhQNlJfPkZtKl5jM2YqVzh7MWd2S01gKEl4KCVNMmhGTSFeWEhAQzdNfXZUMmRDYEUxY1BiS2JIdSNqd0Y7amEzRTM9dHo2bWkmPmJjekI0fCtDaG
2024-03-11 11:57:01 UTC	1369	IN	Data Raw: 32 66 38 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 61 2e 66 73 64 6e 2e 63 6f 6d 2f 63 6f 6e 2f 6a 73 2f Data Ascii: 2f8e<!doctype html><html class="no-js" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=no" /><script src="//a.fsdn.com/con/js/
2024-03-11 11:57:01 UTC	1369	IN	Data Raw: 20 37 34 33 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 69 6c 6c 62 6f 61 72 64 3a 20 39 38 35 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 61 72 67 65 3a 20 31 30 35 33 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 78 6c 61 72 67 65 3a 20 31 32 39 35 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 78 78 6c 61 72 67 65 3a 20 31 33 36 36 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 53 46 2e 69 6e 69 74 69 61 6c 5f 62 72 65 61 6b 70 6f 69 6e 74 73 5f 76 69 73 69 62 6c 65 20 3d 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 62 70 20 69 6e 20 53 46 2e 42 72 65 61 6b 70 6f 69 6e 74 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 53 46 2e 42 72 65 Data Ascii: 743, billboard: 985, large: 1053, xlarge: 1295, xxlarge: 1366 }; SF.initial_breakpoints_visible = {}; for (var bp in SF.Breakpoints) { if (!SF.Bre
2024-03-11 11:57:01 UTC	1369	IN	Data Raw: 5b 7b 22 62 69 64 64 65 72 22 3a 22 73 6f 76 72 6e 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 74 61 67 69 64 22 3a 22 33 36 34 36 37 32 22 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 22 62 69 64 64 65 72 22 3a 22 72 75 62 69 63 6f 6e 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 7a 6f 6e 65 49 64 22 3a 22 34 38 36 31 30 36 22 2c 22 73 69 7a 65 73 22 3a 5b 32 5d 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 22 61 74 66 22 2c 22 61 63 63 6f 75 6e 74 49 64 22 3a 22 31 35 36 38 30 22 2c 22 73 69 74 65 49 64 22 3a 22 31 30 33 32 34 30 22 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 22 62 69 64 64 65 72 22 3a 22 61 70 70 6e 65 78 75 73 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 Data Ascii: [{"bidder":"sovrn","params":{"tagid":"364672"}}, {"bidder":"rubicon","params":{"zoneId":"486106","sizes":[2],"position":"atf","accountId":"15680","siteId":"103240"}}, {"bidder":"appnexus","params":{"
2024-03-11 11:57:01 UTC	1369	IN	Data Raw: 72 22 3a 22 73 6f 76 72 6e 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 74 61 67 69 64 22 3a 22 35 34 32 33 31 36 22 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 22 62 69 64 64 65 72 22 3a 22 72 75 62 69 63 6f 6e 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 7a 6f 6e 65 49 64 22 3a 22 36 31 30 38 34 38 22 2c 22 73 69 7a 65 73 22 3a 5b 34 33 5d 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 22 61 74 66 22 2c 22 61 63 63 6f 75 6e 74 49 64 22 3a 22 31 35 36 38 30 22 2c 22 73 69 74 65 49 64 22 3a 22 31 30 33 32 34 30 22 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 22 62 69 64 64 65 72 22 3a 22 61 70 70 6e 65 78 75 73 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 70 6c 61 63 65 6d 65 Data Ascii: r":"sovrn","params":{"tagid":"542316"}}, {"bidder":"rubicon","params":{"zoneId":"610848","sizes":[43],"position":"atf","accountId":"15680","siteId":"103240"}}, {"bidder":"appnexus","params":{"placeme
2024-03-11 11:57:01 UTC	1369	IN	Data Raw: 42 7a 51 59 73 47 71 22 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 22 62 69 64 64 65 72 22 3a 22 70 75 62 6d 61 74 69 63 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 61 64 53 6c 6f 74 22 3a 22 34 37 34 31 35 39 39 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 31 36 32 35 33 38 22 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 22 62 69 64 64 65 72 22 3a 22 73 6d 61 72 74 61 64 73 65 72 76 65 72 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 70 61 67 65 49 64 22 3a 31 38 38 37 37 39 37 2c 22 6e 65 74 77 6f 72 6b 49 64 22 3a 34 35 35 39 2c 22 73 69 74 65 49 64 22 3a 35 37 35 38 31 36 2c 22 66 6f 72 6d 61 74 49 64 22 3a 31 31 39 35 38 33 7d 7d 2c 0a 20 20 20 20 Data Ascii: BzQYsGq"}}, {"bidder":"pubmatic","params":{"adSlot":"4741599","publisherId":"162538"}}, {"bidder":"smartadserver","params":{"pageId":1887797,"networkId":4559,"siteId":575816,"formatId":119583}},
2024-03-11 11:57:01 UTC	1369	IN	Data Raw: 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 22 62 69 64 64 65 72 22 3a 22 70 75 62 6d 61 74 69 63 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 61 64 53 6c 6f 74 22 3a 22 34 37 34 31 35 39 36 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 31 36 32 35 33 38 22 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 22 62 69 64 64 65 72 22 3a 22 73 6d 61 72 74 61 64 73 65 72 76 65 72 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 70 61 67 65 49 64 22 3a 31 39 31 31 34 39 35 2c 22 6e 65 74 77 6f 72 6b 49 64 22 3a 34 35 35 39 2c 22 73 69 74 65 49 64 22 3a 35 37 35 38 31 36 2c 22 66 6f 72 6d 61 74 49 64 22 3a 31 31 39 35 38 33 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: , {"bidder":"pubmatic","params":{"adSlot":"4741596","publisherId":"162538"}}, {"bidder":"smartadserver","params":{"pageId":1911495,"networkId":4559,"siteId":575816,"formatId":119583}},
2024-03-11 11:57:01 UTC	1369	IN	Data Raw: 54 59 50 5f 33 30 30 78 32 35 30 5f 42 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 65 64 69 61 54 79 70 65 73 3a 20 7b 20 62 61 6e 6e 65 72 3a 20 7b 20 73 69 7a 65 73 3a 20 5b 5b 33 30 30 2c 32 35 30 5d 5d 20 7d 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 46 2e 41 64 73 2e 70 72 65 62 69 64 55 6e 69 74 73 2e 70 75 73 68 28 74 68 69 73 55 6e 69 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 53 46 2e 69 6e 69 74 69 61 6c 5f 62 72 65 61 6b 70 6f 69 6e 74 73 5f 76 69 73 69 62 6c 65 2e 6c 65 61 64 65 72 62 6f 61 72 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 68 69 73 55 Data Ascii: TYP_300x250_B', mediaTypes: { banner: { sizes: [[300,250]] } } }; SF.Ads.prebidUnits.push(thisUnit); } if (SF.initial_breakpoints_visible.leaderboard) { var thisU
2024-03-11 11:57:01 UTC	1369	IN	Data Raw: 20 3d 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 69 64 73 3a 20 5b 7b 22 62 69 64 64 65 72 22 3a 22 73 6f 76 72 6e 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 74 61 67 69 64 22 3a 22 33 38 32 33 34 34 22 2c 22 73 69 7a 65 73 22 3a 5b 33 30 30 2c 32 35 30 5d 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 22 62 69 64 64 65 72 22 3a 22 72 75 62 69 63 6f 6e 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 7a 6f 6e 65 49 64 22 3a 22 34 38 36 31 30 38 22 2c 22 73 69 7a 65 73 22 3a 5b 32 2c 31 35 5d 2c 22 61 63 63 6f 75 6e 74 49 64 22 3a 22 31 35 36 38 30 22 2c 22 73 69 74 65 49 64 22 3a 22 31 30 33 32 34 30 22 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: = { bids: [{"bidder":"sovrn","params":{"tagid":"382344","sizes":[300,250]}}, {"bidder":"rubicon","params":{"zoneId":"486108","sizes":[2,15],"accountId":"15680","siteId":"103240"}},

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.16	50068	104.254.151.68	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:01 UTC	842	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 2174 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; icu=ChgIkPoyEAoYASABKAEw9-K7rwY4AUABSAEQ9-K7rwYYAA..; receive-cookie-deprecation=1; uuid2=7822940101119878936
2024-03-11 11:57:01 UTC	2174	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 7b 22 77 69 64 74 68 22 3a 39 37 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 5d 2c 22 70 72 69 6d 61 72 79 5f 73 69 7a 65 22 3a 7b 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 22 61 64 5f 74 79 70 65 73 22 3a 5b 22 62 61 6e 6e 65 72 22 5d 2c 22 75 75 69 64 22 3a 22 39 61 30 31 36 36 61 30 30 31 36 31 33 61 22 2c 22 69 64 22 3a 39 32 36 35 31 30 33 2c 22 61 6c 6c 6f 77 5f 73 6d 61 6c 6c 65 72 5f 73 69 7a 65 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 5f 70 6d 74 5f 72 75 6c 65 22 3a 66 61 6c 73 65 2c 22 70 72 65 62 69 64 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 70 73 61 22 3a 74 72 75 65 2c Data Ascii: {"tags":[{"sizes":[{"width":728,"height":90},{"width":970,"height":250}],"primary_size":{"width":728,"height":90},"ad_types":["banner"],"uuid":"9a0166a001613a","id":9265103,"allow_smaller_sizes":false,"use_pmt_rule":false,"prebid":true,"disable_psa":true,
2024-03-11 11:57:02 UTC	1591	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Mon, 11 Mar 2024 11:57:02 GMT Content-Type: application/json; charset=utf-8 Content-Length: 111837 Connection: close Vary: Accept-Encoding Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://sourceforge.net Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 84dc1fa9-3317-43f5-917e-95c512902950 Set-Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:02 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: icu=ChgIkPoyEAoYAiACKAIwjuO7rwY4AkACSAIQjuO7rwYYAQ..; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:02 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 27-Feb-2034 11:57:02 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=7822940101119878936; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:02 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.105.38; 154.16.105.38; 904.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com
2024-03-11 11:57:02 UTC	14793	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 61 67 73 22 3a 5b 7b 22 75 75 69 64 22 3a 22 39 61 30 31 36 36 61 30 30 31 36 31 33 61 22 2c 22 74 61 67 5f 69 64 22 3a 39 32 36 35 31 30 33 2c 22 61 75 63 74 69 6f 6e 5f 69 64 22 3a 22 38 34 30 39 36 35 36 33 35 39 37 39 30 36 30 32 30 31 22 2c 22 6e 6f 62 69 64 22 3a 66 61 6c 73 65 2c 22 6e 6f 5f 61 64 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6c 61 78 31 2d 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 69 74 3f 61 6e 5f 61 75 64 69 74 3d 30 26 72 65 66 65 72 72 65 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 25 32 46 70 72 6f 6a 65 63 74 73 25 32 46 64 6f 63 66 65 74 63 68 65 72 25 32 46 26 65 3d 77 71 54 5f 33 51 4b 72 42 4b 41 72 41 67 41 41 41 Data Ascii: {"version":"3.0.0","tags":[{"uuid":"9a0166a001613a","tag_id":9265103,"auction_id":"840965635979060201","nobid":false,"no_ad_url":"https://lax1-ib.adnxs.com/it?an_audit=0&referrer=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2F&e=wqT_3QKrBKArAgAAA
2024-03-11 11:57:02 UTC	16384	IN	Data Raw: 78 6b 61 58 59 67 63 33 52 35 49 56 49 4d 63 47 39 7a 61 61 47 78 5a 44 6f 67 59 57 4a 7a 62 32 78 31 64 47 55 37 49 47 78 6c 5a 6e 51 36 49 44 42 77 65 44 73 67 64 47 39 77 44 51 70 6b 64 6d 6c 7a 61 57 4a 70 62 47 6c 30 65 54 6f 67 61 47 6c 6b 5a 47 56 75 4f 79 49 2d 50 47 6c 74 5a 79 44 68 54 46 57 48 53 52 52 4b 57 51 4a 42 4e 67 30 65 4c 6a 49 43 46 47 46 33 59 6d 6c 6b 4a 67 55 47 38 49 5a 66 59 6a 31 42 53 30 46 74 5a 69 31 43 4e 53 31 6b 5a 6c 68 59 55 56 6c 4c 57 48 52 57 56 46 4a 78 4e 48 52 77 63 32 56 43 62 6c 70 74 56 56 4e 73 51 79 31 33 54 57 74 47 56 58 70 4a 4e 6a 42 6e 51 57 68 58 51 32 6b 77 59 33 49 34 65 44 6c 42 61 55 63 77 63 30 31 49 52 32 5a 45 51 6b 46 4c 55 33 70 71 54 6b 4a 43 65 47 6c 47 5a 6b 4e 30 59 6b 68 46 52 6b 6c 35 52 Data Ascii: xkaXYgc3R5IVIMcG9zaaGxZDogYWJzb2x1dGU7IGxlZnQ6IDBweDsgdG9wDQpkdmlzaWJpbGl0eTogaGlkZGVuOyI-PGltZyDhTFWHSRRKWQJBNg0eLjICFGF3YmlkJgUG8IZfYj1BS0FtZi1CNS1kZlhYUVlLWHRWVFJxNHRwc2VCblptVVNsQy13TWtGVXpJNjBnQWhXQ2kwY3I4eDlBaUcwc01IR2ZEQkFLU3pqTkJCeGlGZkN0YkhFRkl5R
2024-03-11 11:57:02 UTC	16384	IN	Data Raw: 6e 3a 2d 31 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 5c 22 3e 3c 2f 69 66 72 61 6d 65 3e 3c 73 63 72 69 70 74 3e 74 72 79 20 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 5c 22 66 75 6e 63 74 69 6f 6e 5c 22 3d 3d 74 79 70 65 6f 66 20 5f 5f 61 6e 5f 6f 62 6a 5f 65 78 74 65 6e 64 5f 74 68 75 6e 6b 3f 5f 5f 61 6e 5f 6f 62 6a 5f 65 78 74 65 6e 64 5f 74 68 75 6e 6b 28 65 2c 74 29 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 5c 22 66 75 6e 63 74 69 6f 6e 5c 22 3d 3d 74 79 70 65 6f 66 20 5f 5f 61 6e 5f 65 72 72 5f 74 68 75 6e 6b 26 26 5f 5f 61 6e 5f 65 72 72 5f 74 68 75 6e 6b 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 69 66 28 5c 22 66 75 6e 63 Data Ascii: n:-1px;padding:0;border:0;\"></iframe><script>try {!function(){function e(e,t){return\"function\"==typeof __an_obj_extend_thunk?__an_obj_extend_thunk(e,t):e}function t(e,t){\"function\"==typeof __an_err_thunk&&__an_err_thunk(e,t)}function n(e,t){if(\"func
2024-03-11 11:57:02 UTC	16384	IN	Data Raw: 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 5b 64 61 74 61 2d 6a 63 3d 5c 22 37 37 5c 22 5d 27 29 7d 3b 76 61 72 20 72 3d 52 65 67 45 78 70 28 5c 22 5e 68 74 74 70 73 3f 3a 2f 2f 28 5c 5c 5c 5c 77 7c 2d 29 2b 5c 5c 5c 5c 2e 63 64 6e 5c 5c 5c 5c 2e 61 6d 70 70 72 6f 6a 65 63 74 5c 5c 5c 5c 2e 28 6e 65 74 7c 6f 72 67 29 28 5c 5c 5c 5c 3f 7c 2f 7c 24 29 5c 22 29 3b 5c 6e 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 61 3d 6b 3b 76 61 72 20 63 3d 5b 5d 3b 76 61 72 20 65 3d 6e 75 6c 6c 3b 64 6f 7b 76 61 72 20 62 3d 61 3b 74 72 79 7b 76 61 72 20 64 3b 69 66 28 64 3d 21 21 62 26 26 6e 75 6c 6c 21 3d 62 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 62 3a 7b 74 72 79 7b 6c 28 62 2e 66 6f 6f 29 3b 64 3d 21 30 3b 62 72 65 61 6b 20 62 7d 63 61 74 63 68 28 68 29 Data Ascii: querySelector('[data-jc=\"77\"]')};var r=RegExp(\"^https?://(\\\\w\|-)+\\\\.cdn\\\\.ampproject\\\\.(net\|org)(\\\\?\|/\|$)\");\nfunction t(){var a=k;var c=[];var e=null;do{var b=a;try{var d;if(d=!!b&&null!=b.location.href)b:{try{l(b.foo);d=!0;break b}catch(h)
2024-03-11 11:57:02 UTC	16384	IN	Data Raw: 41 41 41 41 41 41 41 41 45 41 41 59 41 4f 41 47 41 66 49 47 41 67 67 41 67 41 63 42 69 41 63 41 6f 41 63 42 71 67 63 4d 4d 54 4d 35 4d 54 6b 30 4e 44 4d 32 4e 7a 51 35 79 41 65 37 5f 77 58 53 42 77 30 4a 41 41 41 41 41 41 41 41 41 41 41 51 41 42 67 41 32 67 63 47 43 41 41 51 41 42 67 41 34 41 63 41 36 67 63 43 43 41 44 77 42 38 76 72 36 67 61 4b 43 41 49 51 41 4a 55 49 41 41 43 41 50 35 67 49 41 63 41 49 6e 6f 59 43 30 67 67 47 43 41 41 51 41 42 67 41 26 73 3d 62 30 63 66 35 62 39 31 64 31 31 34 64 35 62 63 65 34 61 61 38 37 32 65 65 64 31 31 34 39 64 37 63 34 34 65 33 36 61 62 5c 22 3b 63 2b 3d 5c 22 26 5c 22 2b 6f 28 7b 72 64 52 65 66 3a 5c 22 62 64 72 65 66 5c 22 2c 72 64 54 6f 70 3a 5c 22 62 64 74 6f 70 5c 22 2c 72 64 49 66 73 3a 5c 22 62 64 69 66 73 Data Ascii: AAAAAAAAEAAYAOAGAfIGAggAgAcBiAcAoAcBqgcMMTM5MTk0NDM2NzQ5yAe7_wXSBw0JAAAAAAAAAAAQABgA2gcGCAAQABgA4AcA6gcCCADwB8vr6gaKCAIQAJUIAACAP5gIAcAInoYC0ggGCAAQABgA&s=b0cf5b91d114d5bce4aa872eed1149d7c44e36ab\";c+=\"&\"+o({rdRef:\"bdref\",rdTop:\"bdtop\",rdIfs:\"bdifs
2024-03-11 11:57:02 UTC	16384	IN	Data Raw: 64 58 4a 79 5a 57 35 30 55 32 4e 79 61 58 42 30 54 55 38 41 4b 44 4a 75 41 69 78 75 64 57 78 73 4f 6d 45 70 4a 69 59 69 4e 7a 64 68 48 52 52 68 4c 6d 64 6c 64 45 45 4e 6b 44 68 6c 4b 43 4a 6b 59 58 52 68 4c 57 70 6a 49 69 6b 5f 59 54 6f 56 56 7a 78 78 64 57 56 79 65 56 4e 6c 62 47 56 6a 64 47 39 79 4b 43 64 62 44 53 55 41 50 51 46 45 44 46 30 6e 4b 58 31 46 4e 36 68 79 50 56 4a 6c 5a 30 56 34 63 43 67 69 58 6d 68 30 64 48 42 7a 50 7a 6f 76 4c 79 68 63 58 48 64 38 4c 53 6b 72 58 46 77 75 59 32 52 75 58 46 77 75 59 57 31 77 63 48 4a 76 6f 54 74 67 58 46 77 75 4b 47 35 6c 64 48 78 76 63 6d 63 70 4b 46 78 63 50 33 77 76 66 43 51 70 49 69 6b 37 43 6c 46 6a 42 43 42 30 46 65 41 41 61 77 56 68 44 47 4d 39 57 31 30 46 43 51 52 6c 50 51 48 47 44 44 74 6b 62 33 74 Data Ascii: dXJyZW50U2NyaXB0TU8AKDJuAixudWxsOmEpJiYiNzdhHRRhLmdldEENkDhlKCJkYXRhLWpjIik_YToVVzxxdWVyeVNlbGVjdG9yKCdbDSUAPQFEDF0nKX1FN6hyPVJlZ0V4cCgiXmh0dHBzPzovLyhcXHd8LSkrXFwuY2RuXFwuYW1wcHJvoTtgXFwuKG5ldHxvcmcpKFxcP3wvfCQpIik7ClFjBCB0FeAAawVhDGM9W10FCQRlPQHGDDtkb3t
2024-03-11 11:57:02 UTC	15124	IN	Data Raw: 6a 44 59 53 59 57 39 63 4d 54 69 75 50 2d 45 6d 67 52 77 26 63 69 64 3d 43 41 51 53 47 77 42 37 46 4c 74 71 49 4e 41 70 4e 4e 64 38 67 64 69 54 33 77 43 76 6b 42 7a 56 5f 62 6b 70 78 30 50 72 43 68 67 42 26 61 5f 63 69 64 3d 26 72 66 6c 3d 27 2b 28 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 2e 72 66 6c 29 3d 3d 27 66 75 6e 63 74 69 6f 6e 27 3f 72 66 6c 28 29 3a 27 27 29 2c 27 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 27 29 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 5c 22 5c 72 5c 6e 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 72 65 6e 64 65 72 5f 70 6f 73 74 5f 61 64 73 5f 76 31 2e 68 74 6d 6c Data Ascii: jDYSYW9cMTiuP-EmgRw&cid=CAQSGwB7FLtqINApNNd8gdiT3wCvkBzV_bkpx0PrChgB&a_cid=&rfl='+(typeof(window.rfl)=='function'?rfl():''),'https://googleads.g.doubleclick.net')}).call(this);\"\r\n src=\"https://googleads.g.doubleclick.net/pagead/render_post_ads_v1.html

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.16	50067	44.230.187.183	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:01 UTC	666	OUT	POST /rtb/bid?src=prebid_prebid_8.13.0 HTTP/1.1 Host: ap.lijit.com Connection: keep-alive Content-Length: 1548 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=ITYsABZHyF-4XRyhT4uuZCmM
2024-03-11 11:57:01 UTC	1548	OUT	Data Raw: 7b 22 69 64 22 3a 22 34 33 35 66 32 39 39 62 34 62 62 63 63 30 36 22 2c 22 69 6d 70 22 3a 5b 7b 22 61 64 75 6e 69 74 63 6f 64 65 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 33 39 34 32 30 39 33 35 38 38 35 36 2d 30 22 2c 22 69 64 22 3a 22 32 38 32 35 65 65 33 32 61 31 65 33 38 62 22 2c 22 74 61 67 69 64 22 3a 22 33 36 34 36 37 32 22 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 22 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 39 37 30 2c 22 68 22 3a 32 35 30 7d 5d 2c 22 77 22 3a 31 2c 22 68 22 3a 31 7d 2c 22 65 78 74 22 3a 7b 7d 7d 2c 7b 22 61 64 75 6e 69 74 63 6f 64 65 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 33 39 34 32 30 39 33 35 38 38 35 37 2d 30 22 2c 22 69 64 22 3a 22 Data Ascii: {"id":"435f299b4bbcc06","imp":[{"adunitcode":"div-gpt-ad-1394209358856-0","id":"2825ee32a1e38b","tagid":"364672","bidfloor":"","banner":{"format":[{"w":728,"h":90},{"w":970,"h":250}],"w":1,"h":1},"ext":{}},{"adunitcode":"div-gpt-ad-1394209358857-0","id":"
2024-03-11 11:57:02 UTC	496	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:02 GMT Content-Type: application/json Content-Length: 94 Connection: close Set-Cookie: ljt_reader=ITYsABZHyF-4XRyhT4uuZCmM;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: https://sourceforge.net Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type Vary: Accept-Encoding, User-Agent
2024-03-11 11:57:02 UTC	94	IN	Data Raw: 7b 22 69 64 22 3a 22 34 33 35 66 32 39 39 62 34 62 62 63 63 30 36 22 2c 22 62 69 64 69 64 22 3a 22 30 35 62 63 32 63 61 31 2d 39 64 30 62 2d 34 38 39 36 2d 61 32 65 31 2d 66 61 32 64 36 32 62 30 31 33 32 62 22 2c 22 65 78 74 22 3a 7b 22 69 69 64 22 3a 31 32 37 38 30 33 34 30 7d 7d Data Ascii: {"id":"435f299b4bbcc06","bidid":"05bc2ca1-9d0b-4896-a2e1-fa2d62b0132b","ext":{"iid":12780340}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.16	50081	23.83.76.35	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:01 UTC	1078	OUT	POST /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive Content-Length: 308 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg
2024-03-11 11:57:01 UTC	308	OUT	Data Raw: 7b 22 73 69 74 65 69 64 22 3a 35 37 35 38 31 36 2c 22 70 61 67 65 69 64 22 3a 31 38 38 37 37 39 37 2c 22 66 6f 72 6d 61 74 69 64 22 3a 31 31 39 35 38 33 2c 22 63 6b 69 64 22 3a 30 2c 22 74 61 67 49 64 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 33 39 34 32 30 39 33 35 38 38 35 36 2d 30 22 2c 22 70 61 67 65 44 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 70 6f 73 74 64 6f 77 6e 6c 6f 61 64 22 2c 22 74 69 6d 65 6f 75 74 22 3a 33 30 30 30 2c 22 62 69 64 49 64 22 3a 22 33 30 38 34 30 36 39 64 34 34 61 65 32 36 39 22 2c 22 70 72 65 62 69 64 56 65 72 73 69 6f 6e 22 3a 22 38 2e 31 33 2e 30 22 2c 22 73 63 68 61 69 6e 22 3a 6e 75 6c 6c 2c 22 73 69 7a 65 Data Ascii: {"siteid":575816,"pageid":1887797,"formatid":119583,"ckid":0,"tagId":"div-gpt-ad-1394209358856-0","pageDomain":"https://sourceforge.net/projects/docfetcher/postdownload","timeout":3000,"bidId":"3084069d44ae269","prebidVersion":"8.13.0","schain":null,"size
2024-03-11 11:57:02 UTC	588	IN	HTTP/1.1 200 OK content-type: application/json; charset=UTF-8 date: Mon, 11 Mar 2024 11:57:01 GMT access-control-allow-credentials: true access-control-allow-origin: https://sourceforge.net cache-control: no-cache,no-store pragma: no-cache set-cookie: vs=575816=5885997; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: pid=1899505890594565248; expires=Tue, 11 Mar 2025 11:57:01 GMT; domain=.smartadserver.com; path=/; secure; samesite=none transfer-encoding: chunked vary: Origin p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:02 UTC	1392	IN	Data Raw: 35 36 34 0d 0a 7b 22 63 70 6d 22 3a 30 2e 30 2c 22 63 75 72 72 65 6e 63 79 22 3a 22 55 53 44 22 2c 22 77 69 64 74 68 22 3a 30 2c 22 68 65 69 67 68 74 22 3a 30 2c 22 61 64 22 3a 6e 75 6c 6c 2c 22 61 64 55 72 6c 22 3a 6e 75 6c 6c 2c 22 64 65 61 6c 49 64 22 3a 6e 75 6c 6c 2c 22 74 74 6c 22 3a 30 2c 22 69 73 4e 65 74 43 70 6d 22 3a 66 61 6c 73 65 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 30 2c 22 63 53 79 6e 63 55 72 6c 22 3a 22 2f 2f 63 73 79 6e 63 2e 73 6d 61 72 74 61 64 73 65 72 76 65 72 2e 63 6f 6d 2f 64 69 66 66 2f 72 74 62 2f 63 73 79 6e 63 2f 43 6f 6f 6b 69 65 53 79 6e 63 2e 68 74 6d 6c 3f 68 61 73 72 74 62 3d 74 72 75 65 26 6e 77 69 64 3d 34 35 35 39 26 64 63 69 64 3d 31 30 26 69 73 63 6e 61 6d 65 3d 66 61 6c 73 65 26 63 6e 61 6d 65 3d 26 67 64 70 72 Data Ascii: 564{"cpm":0.0,"currency":"USD","width":0,"height":0,"ad":null,"adUrl":null,"dealId":null,"ttl":0,"isNetCpm":false,"creativeId":0,"cSyncUrl":"//csync.smartadserver.com/diff/rtb/csync/CookieSync.html?hasrtb=true&nwid=4559&dcid=10&iscname=false&cname=&gdpr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.16	50076	23.83.76.35	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:01 UTC	1078	OUT	POST /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive Content-Length: 308 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg
2024-03-11 11:57:01 UTC	308	OUT	Data Raw: 7b 22 73 69 74 65 69 64 22 3a 35 37 35 38 31 36 2c 22 70 61 67 65 69 64 22 3a 31 38 38 37 37 39 37 2c 22 66 6f 72 6d 61 74 69 64 22 3a 31 31 39 35 38 33 2c 22 63 6b 69 64 22 3a 30 2c 22 74 61 67 49 64 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 33 39 34 32 30 39 33 35 38 38 35 37 2d 30 22 2c 22 70 61 67 65 44 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 70 6f 73 74 64 6f 77 6e 6c 6f 61 64 22 2c 22 74 69 6d 65 6f 75 74 22 3a 33 30 30 30 2c 22 62 69 64 49 64 22 3a 22 33 31 37 35 35 39 33 66 65 34 33 62 65 35 31 22 2c 22 70 72 65 62 69 64 56 65 72 73 69 6f 6e 22 3a 22 38 2e 31 33 2e 30 22 2c 22 73 63 68 61 69 6e 22 3a 6e 75 6c 6c 2c 22 73 69 7a 65 Data Ascii: {"siteid":575816,"pageid":1887797,"formatid":119583,"ckid":0,"tagId":"div-gpt-ad-1394209358857-0","pageDomain":"https://sourceforge.net/projects/docfetcher/postdownload","timeout":3000,"bidId":"3175593fe43be51","prebidVersion":"8.13.0","schain":null,"size
2024-03-11 11:57:02 UTC	588	IN	HTTP/1.1 200 OK content-type: application/json; charset=UTF-8 date: Mon, 11 Mar 2024 11:57:01 GMT access-control-allow-credentials: true access-control-allow-origin: https://sourceforge.net cache-control: no-cache,no-store pragma: no-cache set-cookie: vs=575816=5885997; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: pid=1899505890594565248; expires=Tue, 11 Mar 2025 11:57:01 GMT; domain=.smartadserver.com; path=/; secure; samesite=none transfer-encoding: chunked vary: Origin p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:02 UTC	1262	IN	Data Raw: 34 45 32 0d 0a 7b 22 63 70 6d 22 3a 30 2e 30 2c 22 63 75 72 72 65 6e 63 79 22 3a 22 55 53 44 22 2c 22 77 69 64 74 68 22 3a 30 2c 22 68 65 69 67 68 74 22 3a 30 2c 22 61 64 22 3a 6e 75 6c 6c 2c 22 61 64 55 72 6c 22 3a 6e 75 6c 6c 2c 22 64 65 61 6c 49 64 22 3a 6e 75 6c 6c 2c 22 74 74 6c 22 3a 30 2c 22 69 73 4e 65 74 43 70 6d 22 3a 66 61 6c 73 65 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 30 2c 22 63 53 79 6e 63 55 72 6c 22 3a 22 2f 2f 63 73 79 6e 63 2e 73 6d 61 72 74 61 64 73 65 72 76 65 72 2e 63 6f 6d 2f 64 69 66 66 2f 72 74 62 2f 63 73 79 6e 63 2f 43 6f 6f 6b 69 65 53 79 6e 63 2e 68 74 6d 6c 3f 68 61 73 72 74 62 3d 74 72 75 65 26 6e 77 69 64 3d 34 35 35 39 26 64 63 69 64 3d 31 30 26 69 73 63 6e 61 6d 65 3d 66 61 6c 73 65 26 63 6e 61 6d 65 3d 26 67 64 70 72 Data Ascii: 4E2{"cpm":0.0,"currency":"USD","width":0,"height":0,"ad":null,"adUrl":null,"dealId":null,"ttl":0,"isNetCpm":false,"creativeId":0,"cSyncUrl":"//csync.smartadserver.com/diff/rtb/csync/CookieSync.html?hasrtb=true&nwid=4559&dcid=10&iscname=false&cname=&gdpr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.16	50077	23.83.76.35	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:01 UTC	1078	OUT	POST /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive Content-Length: 309 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg
2024-03-11 11:57:01 UTC	309	OUT	Data Raw: 7b 22 73 69 74 65 69 64 22 3a 35 37 35 38 31 36 2c 22 70 61 67 65 69 64 22 3a 31 39 31 31 34 39 35 2c 22 66 6f 72 6d 61 74 69 64 22 3a 31 31 39 35 38 33 2c 22 63 6b 69 64 22 3a 30 2c 22 74 61 67 49 64 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 33 39 34 32 30 39 33 35 38 38 35 38 2d 30 22 2c 22 70 61 67 65 44 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 70 6f 73 74 64 6f 77 6e 6c 6f 61 64 22 2c 22 74 69 6d 65 6f 75 74 22 3a 33 30 30 30 2c 22 62 69 64 49 64 22 3a 22 33 32 61 31 33 39 31 38 61 30 63 64 38 35 36 22 2c 22 70 72 65 62 69 64 56 65 72 73 69 6f 6e 22 3a 22 38 2e 31 33 2e 30 22 2c 22 73 63 68 61 69 6e 22 3a 6e 75 6c 6c 2c 22 73 69 7a 65 Data Ascii: {"siteid":575816,"pageid":1911495,"formatid":119583,"ckid":0,"tagId":"div-gpt-ad-1394209358858-0","pageDomain":"https://sourceforge.net/projects/docfetcher/postdownload","timeout":3000,"bidId":"32a13918a0cd856","prebidVersion":"8.13.0","schain":null,"size
2024-03-11 11:57:02 UTC	588	IN	HTTP/1.1 200 OK content-type: application/json; charset=UTF-8 date: Mon, 11 Mar 2024 11:57:01 GMT access-control-allow-credentials: true access-control-allow-origin: https://sourceforge.net cache-control: no-cache,no-store pragma: no-cache set-cookie: vs=575816=5885997; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: pid=1899505890594565248; expires=Tue, 11 Mar 2025 11:57:01 GMT; domain=.smartadserver.com; path=/; secure; samesite=none transfer-encoding: chunked vary: Origin p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:02 UTC	1350	IN	Data Raw: 35 33 41 0d 0a 7b 22 63 70 6d 22 3a 30 2e 30 2c 22 63 75 72 72 65 6e 63 79 22 3a 22 55 53 44 22 2c 22 77 69 64 74 68 22 3a 30 2c 22 68 65 69 67 68 74 22 3a 30 2c 22 61 64 22 3a 6e 75 6c 6c 2c 22 61 64 55 72 6c 22 3a 6e 75 6c 6c 2c 22 64 65 61 6c 49 64 22 3a 6e 75 6c 6c 2c 22 74 74 6c 22 3a 30 2c 22 69 73 4e 65 74 43 70 6d 22 3a 66 61 6c 73 65 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 30 2c 22 63 53 79 6e 63 55 72 6c 22 3a 22 2f 2f 63 73 79 6e 63 2e 73 6d 61 72 74 61 64 73 65 72 76 65 72 2e 63 6f 6d 2f 64 69 66 66 2f 72 74 62 2f 63 73 79 6e 63 2f 43 6f 6f 6b 69 65 53 79 6e 63 2e 68 74 6d 6c 3f 68 61 73 72 74 62 3d 74 72 75 65 26 6e 77 69 64 3d 34 35 35 39 26 64 63 69 64 3d 31 30 26 69 73 63 6e 61 6d 65 3d 66 61 6c 73 65 26 63 6e 61 6d 65 3d 26 67 64 70 72 Data Ascii: 53A{"cpm":0.0,"currency":"USD","width":0,"height":0,"ad":null,"adUrl":null,"dealId":null,"ttl":0,"isNetCpm":false,"creativeId":0,"cSyncUrl":"//csync.smartadserver.com/diff/rtb/csync/CookieSync.html?hasrtb=true&nwid=4559&dcid=10&iscname=false&cname=&gdpr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.16	50079	23.83.76.35	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:01 UTC	1078	OUT	POST /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive Content-Length: 291 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg
2024-03-11 11:57:01 UTC	291	OUT	Data Raw: 7b 22 73 69 74 65 69 64 22 3a 35 37 35 38 31 36 2c 22 70 61 67 65 69 64 22 3a 31 38 38 37 37 39 37 2c 22 66 6f 72 6d 61 74 69 64 22 3a 31 31 39 35 38 33 2c 22 63 6b 69 64 22 3a 30 2c 22 74 61 67 49 64 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 33 39 34 32 30 39 33 35 38 38 35 39 2d 30 22 2c 22 70 61 67 65 44 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 70 6f 73 74 64 6f 77 6e 6c 6f 61 64 22 2c 22 74 69 6d 65 6f 75 74 22 3a 33 30 30 30 2c 22 62 69 64 49 64 22 3a 22 33 33 37 64 37 39 38 39 35 32 33 33 38 38 31 22 2c 22 70 72 65 62 69 64 56 65 72 73 69 6f 6e 22 3a 22 38 2e 31 33 2e 30 22 2c 22 73 63 68 61 69 6e 22 3a 6e 75 6c 6c 2c 22 73 69 7a 65 Data Ascii: {"siteid":575816,"pageid":1887797,"formatid":119583,"ckid":0,"tagId":"div-gpt-ad-1394209358859-0","pageDomain":"https://sourceforge.net/projects/docfetcher/postdownload","timeout":3000,"bidId":"337d79895233881","prebidVersion":"8.13.0","schain":null,"size
2024-03-11 11:57:02 UTC	588	IN	HTTP/1.1 200 OK content-type: application/json; charset=UTF-8 date: Mon, 11 Mar 2024 11:57:01 GMT access-control-allow-credentials: true access-control-allow-origin: https://sourceforge.net cache-control: no-cache,no-store pragma: no-cache set-cookie: vs=575816=5885997; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: pid=1899505890594565248; expires=Tue, 11 Mar 2025 11:57:01 GMT; domain=.smartadserver.com; path=/; secure; samesite=none transfer-encoding: chunked vary: Origin p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:02 UTC	1132	IN	Data Raw: 34 36 30 0d 0a 7b 22 63 70 6d 22 3a 30 2e 30 2c 22 63 75 72 72 65 6e 63 79 22 3a 22 55 53 44 22 2c 22 77 69 64 74 68 22 3a 30 2c 22 68 65 69 67 68 74 22 3a 30 2c 22 61 64 22 3a 6e 75 6c 6c 2c 22 61 64 55 72 6c 22 3a 6e 75 6c 6c 2c 22 64 65 61 6c 49 64 22 3a 6e 75 6c 6c 2c 22 74 74 6c 22 3a 30 2c 22 69 73 4e 65 74 43 70 6d 22 3a 66 61 6c 73 65 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 30 2c 22 63 53 79 6e 63 55 72 6c 22 3a 22 2f 2f 63 73 79 6e 63 2e 73 6d 61 72 74 61 64 73 65 72 76 65 72 2e 63 6f 6d 2f 64 69 66 66 2f 72 74 62 2f 63 73 79 6e 63 2f 43 6f 6f 6b 69 65 53 79 6e 63 2e 68 74 6d 6c 3f 68 61 73 72 74 62 3d 74 72 75 65 26 6e 77 69 64 3d 34 35 35 39 26 64 63 69 64 3d 31 30 26 69 73 63 6e 61 6d 65 3d 66 61 6c 73 65 26 63 6e 61 6d 65 3d 26 67 64 70 72 Data Ascii: 460{"cpm":0.0,"currency":"USD","width":0,"height":0,"ad":null,"adUrl":null,"dealId":null,"ttl":0,"isNetCpm":false,"creativeId":0,"cSyncUrl":"//csync.smartadserver.com/diff/rtb/csync/CookieSync.html?hasrtb=true&nwid=4559&dcid=10&iscname=false&cname=&gdpr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.16	50082	204.237.133.116	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:01 UTC	2439	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 1964 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SyncRTB3=1711324800%3A54_250_55_71_220_21_13_104_166%7C1710720000%3A2_15_223; chkChromeAb67Sec=4; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; PugT=1710158213
2024-03-11 11:57:01 UTC	1964	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 31 30 31 35 38 32 32 30 37 35 35 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 33 37 37 64 38 37 33 37 30 36 32 62 62 38 32 22 2c 22 74 61 67 69 64 22 3a 22 34 37 34 31 35 39 38 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 7d 2c 22 62 69 64 66 6c 6f 6f 72 63 75 72 22 3a 22 55 53 44 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 39 37 30 2c 22 68 22 3a 32 35 30 7d 5d 2c 22 70 6f 73 22 3a 30 2c 22 74 6f 70 66 72 61 6d 65 22 3a 31 7d 7d 2c 7b 22 69 64 22 3a 22 33 38 32 37 38 39 37 30 30 31 65 37 32 33 39 22 2c 22 74 61 67 69 64 22 3a 22 34 37 34 31 35 39 39 22 2c 22 73 65 63 Data Ascii: {"id":"1710158220755","at":1,"cur":["USD"],"imp":[{"id":"377d8737062bb82","tagid":"4741598","secure":1,"ext":{},"bidfloorcur":"USD","banner":{"w":728,"h":90,"format":[{"w":970,"h":250}],"pos":0,"topframe":1}},{"id":"3827897001e7239","tagid":"4741599","sec
2024-03-11 11:57:02 UTC	229	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://sourceforge.net Cache-Control: no-cache, no-store, must-revalidate Date: Mon, 11 Mar 2024 11:57:00 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.16	50083	130.211.23.194	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:01 UTC	564	OUT	GET /mw/state?bt_env=prod HTTP/1.1 Host: api.btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:02 UTC	203	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Vary: Origin Date: Mon, 11 Mar 2024 11:57:02 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.16	50078	23.83.76.35	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:01 UTC	1078	OUT	POST /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive Content-Length: 416 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg
2024-03-11 11:57:01 UTC	416	OUT	Data Raw: 7b 22 73 69 74 65 69 64 22 3a 35 37 35 38 31 36 2c 22 70 61 67 65 69 64 22 3a 31 38 38 37 37 39 37 2c 22 66 6f 72 6d 61 74 69 64 22 3a 31 31 39 35 38 33 2c 22 63 6b 69 64 22 3a 30 2c 22 74 61 67 49 64 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 33 39 34 32 30 39 33 35 38 38 36 36 2d 30 22 2c 22 70 61 67 65 44 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 70 6f 73 74 64 6f 77 6e 6c 6f 61 64 22 2c 22 74 69 6d 65 6f 75 74 22 3a 33 30 30 30 2c 22 62 69 64 49 64 22 3a 22 33 34 34 61 35 61 33 62 32 63 33 35 38 39 63 22 2c 22 70 72 65 62 69 64 56 65 72 73 69 6f 6e 22 3a 22 38 2e 31 33 2e 30 22 2c 22 73 63 68 61 69 6e 22 3a 6e 75 6c 6c 2c 22 73 69 7a 65 Data Ascii: {"siteid":575816,"pageid":1887797,"formatid":119583,"ckid":0,"tagId":"div-gpt-ad-1394209358866-0","pageDomain":"https://sourceforge.net/projects/docfetcher/postdownload","timeout":3000,"bidId":"344a5a3b2c3589c","prebidVersion":"8.13.0","schain":null,"size
2024-03-11 11:57:02 UTC	588	IN	HTTP/1.1 200 OK content-type: application/json; charset=UTF-8 date: Mon, 11 Mar 2024 11:57:02 GMT access-control-allow-credentials: true access-control-allow-origin: https://sourceforge.net cache-control: no-cache,no-store pragma: no-cache set-cookie: vs=575816=5885997; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: pid=1899505890594565248; expires=Tue, 11 Mar 2025 11:57:02 GMT; domain=.smartadserver.com; path=/; secure; samesite=none transfer-encoding: chunked vary: Origin p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:02 UTC	1500	IN	Data Raw: 35 44 30 0d 0a 7b 22 63 70 6d 22 3a 30 2e 30 2c 22 63 75 72 72 65 6e 63 79 22 3a 22 55 53 44 22 2c 22 77 69 64 74 68 22 3a 30 2c 22 68 65 69 67 68 74 22 3a 30 2c 22 61 64 22 3a 6e 75 6c 6c 2c 22 61 64 55 72 6c 22 3a 6e 75 6c 6c 2c 22 64 65 61 6c 49 64 22 3a 6e 75 6c 6c 2c 22 74 74 6c 22 3a 30 2c 22 69 73 4e 65 74 43 70 6d 22 3a 66 61 6c 73 65 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 30 2c 22 63 53 79 6e 63 55 72 6c 22 3a 22 2f 2f 63 73 79 6e 63 2e 73 6d 61 72 74 61 64 73 65 72 76 65 72 2e 63 6f 6d 2f 64 69 66 66 2f 72 74 62 2f 63 73 79 6e 63 2f 43 6f 6f 6b 69 65 53 79 6e 63 2e 68 74 6d 6c 3f 68 61 73 72 74 62 3d 74 72 75 65 26 6e 77 69 64 3d 34 35 35 39 26 64 63 69 64 3d 31 30 26 69 73 63 6e 61 6d 65 3d 66 61 6c 73 65 26 63 6e 61 6d 65 3d 26 67 64 70 72 Data Ascii: 5D0{"cpm":0.0,"currency":"USD","width":0,"height":0,"ad":null,"adUrl":null,"dealId":null,"ttl":0,"isNetCpm":false,"creativeId":0,"cSyncUrl":"//csync.smartadserver.com/diff/rtb/csync/CookieSync.html?hasrtb=true&nwid=4559&dcid=10&iscname=false&cname=&gdpr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.16	50080	23.83.76.35	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:01 UTC	1078	OUT	POST /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive Content-Length: 398 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=575816=5885996; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg
2024-03-11 11:57:01 UTC	398	OUT	Data Raw: 7b 22 73 69 74 65 69 64 22 3a 35 37 35 38 31 36 2c 22 70 61 67 65 69 64 22 3a 31 38 38 37 37 39 37 2c 22 66 6f 72 6d 61 74 69 64 22 3a 31 31 39 35 38 33 2c 22 63 6b 69 64 22 3a 30 2c 22 74 61 67 49 64 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 33 39 34 32 30 39 33 35 38 38 36 37 2d 30 22 2c 22 70 61 67 65 44 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 70 6f 73 74 64 6f 77 6e 6c 6f 61 64 22 2c 22 74 69 6d 65 6f 75 74 22 3a 33 30 30 30 2c 22 62 69 64 49 64 22 3a 22 33 35 61 34 36 66 35 31 32 36 39 39 66 31 62 22 2c 22 70 72 65 62 69 64 56 65 72 73 69 6f 6e 22 3a 22 38 2e 31 33 2e 30 22 2c 22 73 63 68 61 69 6e 22 3a 6e 75 6c 6c 2c 22 73 69 7a 65 Data Ascii: {"siteid":575816,"pageid":1887797,"formatid":119583,"ckid":0,"tagId":"div-gpt-ad-1394209358867-0","pageDomain":"https://sourceforge.net/projects/docfetcher/postdownload","timeout":3000,"bidId":"35a46f512699f1b","prebidVersion":"8.13.0","schain":null,"size
2024-03-11 11:57:02 UTC	588	IN	HTTP/1.1 200 OK content-type: application/json; charset=UTF-8 date: Mon, 11 Mar 2024 11:57:01 GMT access-control-allow-credentials: true access-control-allow-origin: https://sourceforge.net cache-control: no-cache,no-store pragma: no-cache set-cookie: vs=575816=5885997; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: pid=1899505890594565248; expires=Tue, 11 Mar 2025 11:57:02 GMT; domain=.smartadserver.com; path=/; secure; samesite=none transfer-encoding: chunked vary: Origin p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:02 UTC	1058	IN	Data Raw: 34 31 36 0d 0a 7b 22 63 70 6d 22 3a 30 2e 30 2c 22 63 75 72 72 65 6e 63 79 22 3a 22 55 53 44 22 2c 22 77 69 64 74 68 22 3a 30 2c 22 68 65 69 67 68 74 22 3a 30 2c 22 61 64 22 3a 6e 75 6c 6c 2c 22 61 64 55 72 6c 22 3a 6e 75 6c 6c 2c 22 64 65 61 6c 49 64 22 3a 6e 75 6c 6c 2c 22 74 74 6c 22 3a 30 2c 22 69 73 4e 65 74 43 70 6d 22 3a 66 61 6c 73 65 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 30 2c 22 63 53 79 6e 63 55 72 6c 22 3a 22 2f 2f 63 73 79 6e 63 2e 73 6d 61 72 74 61 64 73 65 72 76 65 72 2e 63 6f 6d 2f 64 69 66 66 2f 72 74 62 2f 63 73 79 6e 63 2f 43 6f 6f 6b 69 65 53 79 6e 63 2e 68 74 6d 6c 3f 68 61 73 72 74 62 3d 74 72 75 65 26 6e 77 69 64 3d 34 35 35 39 26 64 63 69 64 3d 31 30 26 69 73 63 6e 61 6d 65 3d 66 61 6c 73 65 26 63 6e 61 6d 65 3d 26 67 64 70 72 Data Ascii: 416{"cpm":0.0,"currency":"USD","width":0,"height":0,"ad":null,"adUrl":null,"dealId":null,"ttl":0,"isNetCpm":false,"creativeId":0,"cSyncUrl":"//csync.smartadserver.com/diff/rtb/csync/CookieSync.html?hasrtb=true&nwid=4559&dcid=10&iscname=false&cname=&gdpr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.16	50074	52.8.138.210	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:01 UTC	686	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 824 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:01 UTC	824	OUT	Data Raw: 7b 22 69 64 22 3a 22 37 65 32 35 37 32 35 38 2d 35 62 39 62 2d 34 65 37 37 2d 62 39 63 37 2d 61 30 39 31 38 36 64 66 31 36 66 64 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 33 30 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 70 6f 73 74 64 6f 77 6e 6c 6f 61 64 22 2c 22 72 65 66 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 66 69 6c 65 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 31 2e 31 2e 32 35 2f 64 Data Ascii: {"id":"7e257258-5b9b-4e77-b9c7-a09186df16fd","at":1,"cur":["USD"],"tmax":3000,"site":{"domain":"sourceforge.net","page":"https://sourceforge.net/projects/docfetcher/postdownload","ref":"https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/d
2024-03-11 11:57:02 UTC	497	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:02 GMT Content-Type: application/json; charset=utf-8 Content-Length: 748 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:02 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate x-openrtb-version: 2.5 Access-Control-Allow-Origin: https://sourceforge.net Access-Control-Allow-Credentials: true
2024-03-11 11:57:02 UTC	748	IN	Data Raw: 7b 22 63 6f 6f 6b 69 65 53 79 6e 63 55 72 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 68 61 72 65 74 68 72 6f 75 67 68 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 31 26 74 79 70 65 3d 35 38 32 38 30 26 6f 76 73 69 64 3d 62 36 62 61 66 35 62 36 2d 33 35 31 36 2d 34 63 34 36 2d 61 37 30 38 2d 35 33 65 30 65 63 31 39 33 61 33 37 22 2c 22 68 74 74 70 73 3a 2f 2f 62 68 2e 63 6f 6e 74 65 78 74 77 65 62 2e 63 6f 6d 2f 62 68 2f 72 74 73 65 74 3f 70 69 64 3d 35 35 38 33 35 37 Data Ascii: {"cookieSyncUrls":["https://match.adsrvr.org/track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent=","https://hb.yahoo.net/cksync.php?cs=1&type=58280&ovsid=b6baf5b6-3516-4c46-a708-53e0ec193a37","https://bh.contextweb.com/bh/rtset?pid=558357

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.16	50071	52.8.138.210	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:01 UTC	686	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 824 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:01 UTC	824	OUT	Data Raw: 7b 22 69 64 22 3a 22 37 65 32 35 37 32 35 38 2d 35 62 39 62 2d 34 65 37 37 2d 62 39 63 37 2d 61 30 39 31 38 36 64 66 31 36 66 64 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 33 30 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 70 6f 73 74 64 6f 77 6e 6c 6f 61 64 22 2c 22 72 65 66 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 66 69 6c 65 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 31 2e 31 2e 32 35 2f 64 Data Ascii: {"id":"7e257258-5b9b-4e77-b9c7-a09186df16fd","at":1,"cur":["USD"],"tmax":3000,"site":{"domain":"sourceforge.net","page":"https://sourceforge.net/projects/docfetcher/postdownload","ref":"https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/d
2024-03-11 11:57:02 UTC	497	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:02 GMT Content-Type: application/json; charset=utf-8 Content-Length: 580 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:02 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate x-openrtb-version: 2.5 Access-Control-Allow-Origin: https://sourceforge.net Access-Control-Allow-Credentials: true
2024-03-11 11:57:02 UTC	580	IN	Data Raw: 7b 22 63 6f 6f 6b 69 65 53 79 6e 63 55 72 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 68 61 72 65 74 68 72 6f 75 67 68 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 73 2e 61 64 2e 73 6d 61 61 74 6f 2e 6e 65 74 2f 63 2f 3f 61 64 45 78 49 6e 69 74 3d 73 26 72 65 64 69 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 74 63 68 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 25 32 46 73 79 6e 63 25 32 46 76 31 25 33 46 73 6f 75 72 63 65 5f 69 64 25 33 44 78 54 46 4a 62 4c 62 73 33 37 74 79 68 62 4b 73 50 50 39 56 43 32 63 6d 25 32 36 73 6f 75 72 Data Ascii: {"cookieSyncUrls":["https://match.adsrvr.org/track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent=","https://s.ad.smaato.net/c/?adExInit=s&redir=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DxTFJbLbs37tyhbKsPP9VC2cm%26sour

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.16	50073	52.8.138.210	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:01 UTC	686	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 825 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:01 UTC	825	OUT	Data Raw: 7b 22 69 64 22 3a 22 37 65 32 35 37 32 35 38 2d 35 62 39 62 2d 34 65 37 37 2d 62 39 63 37 2d 61 30 39 31 38 36 64 66 31 36 66 64 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 33 30 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 70 6f 73 74 64 6f 77 6e 6c 6f 61 64 22 2c 22 72 65 66 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 66 69 6c 65 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 31 2e 31 2e 32 35 2f 64 Data Ascii: {"id":"7e257258-5b9b-4e77-b9c7-a09186df16fd","at":1,"cur":["USD"],"tmax":3000,"site":{"domain":"sourceforge.net","page":"https://sourceforge.net/projects/docfetcher/postdownload","ref":"https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/d
2024-03-11 11:57:02 UTC	497	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:02 GMT Content-Type: application/json; charset=utf-8 Content-Length: 619 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:02 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate x-openrtb-version: 2.5 Access-Control-Allow-Origin: https://sourceforge.net Access-Control-Allow-Credentials: true
2024-03-11 11:57:02 UTC	619	IN	Data Raw: 7b 22 63 6f 6f 6b 69 65 53 79 6e 63 55 72 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 68 61 72 65 74 68 72 6f 75 67 68 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 69 64 73 79 6e 63 2e 72 6c 63 64 6e 2e 63 6f 6d 2f 37 31 32 30 36 38 2e 67 69 66 3f 70 61 72 74 6e 65 72 5f 75 69 64 3d 62 36 62 61 66 35 62 36 2d 33 35 31 36 2d 34 63 34 36 2d 61 37 30 38 2d 35 33 65 30 65 63 31 39 33 61 33 37 22 2c 22 68 74 74 70 73 3a 2f 2f 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 63 6d 3f 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 69 Data Ascii: {"cookieSyncUrls":["https://match.adsrvr.org/track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent=","https://idsync.rlcdn.com/712068.gif?partner_uid=b6baf5b6-3516-4c46-a708-53e0ec193a37","https://u.openx.net/w/1.0/cm?gdpr=0&gdpr_consent=&i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.16	50075	52.8.138.210	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:02 UTC	686	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 807 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:02 UTC	807	OUT	Data Raw: 7b 22 69 64 22 3a 22 37 65 32 35 37 32 35 38 2d 35 62 39 62 2d 34 65 37 37 2d 62 39 63 37 2d 61 30 39 31 38 36 64 66 31 36 66 64 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 33 30 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 70 6f 73 74 64 6f 77 6e 6c 6f 61 64 22 2c 22 72 65 66 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 66 69 6c 65 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 31 2e 31 2e 32 35 2f 64 Data Ascii: {"id":"7e257258-5b9b-4e77-b9c7-a09186df16fd","at":1,"cur":["USD"],"tmax":3000,"site":{"domain":"sourceforge.net","page":"https://sourceforge.net/projects/docfetcher/postdownload","ref":"https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/d
2024-03-11 11:57:02 UTC	497	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:02 GMT Content-Type: application/json; charset=utf-8 Content-Length: 629 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:02 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate x-openrtb-version: 2.5 Access-Control-Allow-Origin: https://sourceforge.net Access-Control-Allow-Credentials: true
2024-03-11 11:57:02 UTC	629	IN	Data Raw: 7b 22 63 6f 6f 6b 69 65 53 79 6e 63 55 72 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 68 61 72 65 74 68 72 6f 75 67 68 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 62 74 74 72 61 63 6b 2e 63 6f 6d 2f 70 69 78 65 6c 2f 63 6f 6f 6b 69 65 73 79 6e 63 72 65 64 69 72 3f 72 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 74 63 68 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 25 32 46 73 79 6e 63 25 32 46 76 31 25 33 46 73 6f 75 72 63 65 5f 69 64 25 33 44 46 47 68 71 4e 6a 43 32 57 6e 46 6d 6d 76 4e 70 54 4c 33 32 4c 4d 4d 45 25 32 36 73 Data Ascii: {"cookieSyncUrls":["https://match.adsrvr.org/track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent=","https://bttrack.com/pixel/cookiesyncredir?rurl=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DFGhqNjC2WnFmmvNpTL32LMME%26s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.16	50070	52.8.138.210	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:02 UTC	686	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 932 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:02 UTC	932	OUT	Data Raw: 7b 22 69 64 22 3a 22 37 65 32 35 37 32 35 38 2d 35 62 39 62 2d 34 65 37 37 2d 62 39 63 37 2d 61 30 39 31 38 36 64 66 31 36 66 64 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 33 30 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 70 6f 73 74 64 6f 77 6e 6c 6f 61 64 22 2c 22 72 65 66 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 66 69 6c 65 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 31 2e 31 2e 32 35 2f 64 Data Ascii: {"id":"7e257258-5b9b-4e77-b9c7-a09186df16fd","at":1,"cur":["USD"],"tmax":3000,"site":{"domain":"sourceforge.net","page":"https://sourceforge.net/projects/docfetcher/postdownload","ref":"https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/d
2024-03-11 11:57:02 UTC	497	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:02 GMT Content-Type: application/json; charset=utf-8 Content-Length: 617 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:02 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate x-openrtb-version: 2.5 Access-Control-Allow-Origin: https://sourceforge.net Access-Control-Allow-Credentials: true
2024-03-11 11:57:02 UTC	617	IN	Data Raw: 7b 22 63 6f 6f 6b 69 65 53 79 6e 63 55 72 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 68 61 72 65 74 68 72 6f 75 67 68 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 73 72 76 2e 73 74 61 63 6b 61 64 61 70 74 2e 63 6f 6d 2f 73 79 6e 63 3f 6e 69 64 3d 31 35 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 73 68 61 72 65 74 68 72 6f 75 67 68 26 75 73 65 72 5f 69 64 3d 62 36 62 61 66 35 62 36 2d 33 35 31 36 2d 34 63 34 Data Ascii: {"cookieSyncUrls":["https://match.adsrvr.org/track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent=","https://sync.srv.stackadapt.com/sync?nid=15&gdpr=0&gdpr_consent=","https://x.bidswitch.net/sync?ssp=sharethrough&user_id=b6baf5b6-3516-4c4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.16	50072	52.8.138.210	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:02 UTC	686	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 913 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:02 UTC	913	OUT	Data Raw: 7b 22 69 64 22 3a 22 37 65 32 35 37 32 35 38 2d 35 62 39 62 2d 34 65 37 37 2d 62 39 63 37 2d 61 30 39 31 38 36 64 66 31 36 66 64 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 33 30 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 70 6f 73 74 64 6f 77 6e 6c 6f 61 64 22 2c 22 72 65 66 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 66 69 6c 65 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 31 2e 31 2e 32 35 2f 64 Data Ascii: {"id":"7e257258-5b9b-4e77-b9c7-a09186df16fd","at":1,"cur":["USD"],"tmax":3000,"site":{"domain":"sourceforge.net","page":"https://sourceforge.net/projects/docfetcher/postdownload","ref":"https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/d
2024-03-11 11:57:02 UTC	497	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:02 GMT Content-Type: application/json; charset=utf-8 Content-Length: 530 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:02 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate x-openrtb-version: 2.5 Access-Control-Allow-Origin: https://sourceforge.net Access-Control-Allow-Credentials: true
2024-03-11 11:57:02 UTC	530	IN	Data Raw: 7b 22 63 6f 6f 6b 69 65 53 79 6e 63 55 72 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 68 61 72 65 74 68 72 6f 75 67 68 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 65 63 6d 33 3f 65 78 3d 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 26 69 64 3d 62 36 62 61 66 35 62 36 2d 33 35 31 36 2d 34 63 34 36 2d 61 37 30 38 2d 35 33 65 30 65 63 31 39 33 61 33 37 22 2c 22 68 74 74 70 73 3a 2f 2f 70 72 2d 62 68 2e 79 62 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 73 79 6e 63 2f 73 68 61 72 65 74 68 72 Data Ascii: {"cookieSyncUrls":["https://match.adsrvr.org/track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent=","https://s.amazon-adsystem.com/ecm3?ex=sharethrough.com&id=b6baf5b6-3516-4c46-a708-53e0ec193a37","https://pr-bh.ybp.yahoo.com/sync/sharethr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.16	50088	23.83.76.44	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:02 UTC	826	OUT	GET /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; vs=575816=5885997
2024-03-11 11:57:02 UTC	123	IN	HTTP/1.1 405 Method Not Allowed content-length: 0 date: Mon, 11 Mar 2024 11:57:02 GMT allow: POST connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.16	50089	52.27.166.248	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:02 UTC	413	OUT	GET /rtb/bid?src=prebid_prebid_8.13.0 HTTP/1.1 Host: ap.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=ITYsABZHyF-4XRyhT4uuZCmM
2024-03-11 11:57:02 UTC	271	IN	HTTP/1.1 204 No Content Date: Mon, 11 Mar 2024 11:57:02 GMT Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.16	50093	52.9.62.96	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:02 UTC	434	OUT	GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:03 UTC	101	IN	HTTP/1.1 404 Not Found Date: Mon, 11 Mar 2024 11:57:03 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.16	50094	104.26.2.70	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:02 UTC	686	OUT	GET /px.gif?ch=2 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "ad4b0f606e0f8465bc4c4c170b37e1a3" If-Modified-Since: Wed, 05 May 2021 19:25:32 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:03 UTC	1089	IN	HTTP/1.1 304 Not Modified Date: Mon, 11 Mar 2024 11:57:03 GMT Connection: close X-GUploader-UploadID: ABPtcPpGGNTgZsoRij7ebx0tkB7iGg9XbLdoonjCwCI4eplpM45CJtOkYxgyWfcdATXohbGZkEDdQqwQmA x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Expires: Fri, 01 Mar 2024 20:35:25 GMT Cache-Control: public, max-age=86400 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" Age: 836498 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jp%2BlxpHulQflriF%2B%2FgiDjHJPq2bQLWoDzldOyULB7E5IoH64leJi2srFl%2F2RnBdNuqVuQ3HVLo1pTRPK2bwNjAqiSt8fk2GUxmBl9%2F4eCdNWqM5qw1G4salFbVhj1ynEPA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 862b5d5e2be50acf-LAS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.16	50064	104.18.37.111	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:02 UTC	1660	OUT	GET /directory/tp3/?b=69705&c=13445&z=67087&cb=000f291466 HTTP/1.1 Host: sourceforge.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/projects/docfetcher/postdownload Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; OAID=e012d283a5e1eae18062d3edb9725359; _gid=GA1.2.1668299401.1710158203; __gads=ID=ed8d538436f1b623:T=1710158205:RT=1710158205:S=ALNI_MbiYxvEWP7dZiJkctj8HGzhHyMpCg; __gpi=UID=00000dc711cb5676:T=1710158205:RT=1710158205:S=ALNI_MbtGcDgo6RHjTtG2es2mbdsN1jDSw; __eoi=ID=ccb10672a4298c0a:T=1710158205:RT=1710158205:S=AA-AfjZQQCnCz9TlsGBpH19Z0_Y8; _ga_1H226E4E4L=GS1.1.1710158208.1.0.1710158208.0.0.0; _ga=GA1.1.1854926735.1710158203; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFJTcypyVzE2WjwyVzRDRl4zTCY4YHhDNjRCQG1NaG1hYnowLTt1eEhQNlJfPkZtKl5jM2YqVzh7MWd2S01gKEl4KCVNMmhGTSFeWEhAQzdNfXZUMmRDYEUxY1BiS2JIdSNqd0Y7amEzRTM9dHo2bWkmPmJjekI0fCtDaGtRQT5vaTdaWndMZE5OMEl4XngtaUlGZmBjZlBNTkkpYWEqK1NST04qLT9jPDZPSDw5U2xWOSFFViVQb1FIYThRUyFlK15nZiRKV3R9Z3Beb25LdVhvQnlSYFU4RTVqIUk4JWBvR19RQDkmVGRMWTxXRzd4PDU-ZzYjQHVSdGN5a3FwS1RCQUQzeGBGP2MwZSVmQVNMTCFwKXE7fng2YiVsdzs3cSFKJSY7In0.XysH-z9DDtydQIaiX4Q_fLbH0fYGiJWBs2t2JkUMNH8
2024-03-11 11:57:03 UTC	649	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:03 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-powered-by: PHP/5.3.29 pragma: no-cache Cache-Control: private, max-age=0, no-cache expires: Mon, 26 Jul 1997 05:00:00 GMT p3p: CP="CUR ADM OUR NOR STA NID" set-cookie: OAID=e012d283a5e1eae18062d3edb9725359; expires=Tue, 11-Mar-2025 11:57:03 GMT; path=/ x-frame-options: SameOrigin x-content-type-options: nosniff content-security-policy: frame-ancestors 'self'; upgrade-insecure-requests x-robots-tag: noindex CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 862b5d5ddb7869e6-LAS alt-svc: h3=":443"; ma=86400
2024-03-11 11:57:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.16	50095	23.83.76.44	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:03 UTC	826	OUT	GET /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; vs=575816=5885997
2024-03-11 11:57:03 UTC	123	IN	HTTP/1.1 405 Method Not Allowed content-length: 0 date: Mon, 11 Mar 2024 11:57:02 GMT allow: POST connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.16	50096	104.26.2.70	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:03 UTC	606	OUT	GET /px.gif?ch=1&e=0.8406123646586141 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:03 UTC	1152	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:03 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPpGGNTgZsoRij7ebx0tkB7iGg9XbLdoonjCwCI4eplpM45CJtOkYxgyWfcdATXohbGZkEDdQqwQmA x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Expires: Fri, 01 Mar 2024 20:35:25 GMT Cache-Control: public, max-age=86400 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" Age: 836498 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EzBNRH6%2B7t0A74Yydk2YY3T7CWvbvL6ONFOSd%2BmAQjLa95raHDTwpPW%2Bw%2BZ127sANEn1IYl32zG%2Foq60E3Bfvcrl8e%2BcaZ%2BGtSHtAy6Fu%2F58AmWjHqb1KlVzKAu21l2wTA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 862b5d613c1e0a03-LAS
2024-03-11 11:57:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.16	50097	104.18.37.111	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:03 UTC	1660	OUT	GET /directory/tp3/?b=69513&c=13409&z=66895&cb=8b302bed4f HTTP/1.1 Host: sourceforge.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/projects/docfetcher/postdownload Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; OAID=e012d283a5e1eae18062d3edb9725359; _gid=GA1.2.1668299401.1710158203; __gads=ID=ed8d538436f1b623:T=1710158205:RT=1710158205:S=ALNI_MbiYxvEWP7dZiJkctj8HGzhHyMpCg; __gpi=UID=00000dc711cb5676:T=1710158205:RT=1710158205:S=ALNI_MbtGcDgo6RHjTtG2es2mbdsN1jDSw; __eoi=ID=ccb10672a4298c0a:T=1710158205:RT=1710158205:S=AA-AfjZQQCnCz9TlsGBpH19Z0_Y8; _ga_1H226E4E4L=GS1.1.1710158208.1.0.1710158208.0.0.0; _ga=GA1.1.1854926735.1710158203; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFJTcypyVzE2WjwyVzRDRl4zTCY4YHhDNjRCQG1NaG1hYnowLTt1eEhQNlJfPkZtKl5jM2YqVzh7MWd2S01gKEl4KCVNMmhGTSFeWEhAQzdNfXZUMmRDYEUxY1BiS2JIdSNqd0Y7amEzRTM9dHo2bWkmPmJjekI0fCtDaGtRQT5vaTdaWndMZE5OMEl4XngtaUlGZmBjZlBNTkkpYWEqK1NST04qLT9jPDZPSDw5U2xWOSFFViVQb1FIYThRUyFlK15nZiRKV3R9Z3Beb25LdVhvQnlSYFU4RTVqIUk4JWBvR19RQDkmVGRMWTxXRzd4PDU-ZzYjQHVSdGN5a3FwS1RCQUQzeGBGP2MwZSVmQVNMTCFwKXE7fng2YiVsdzs3cSFKJSY7In0.XysH-z9DDtydQIaiX4Q_fLbH0fYGiJWBs2t2JkUMNH8
2024-03-11 11:57:03 UTC	649	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:03 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-powered-by: PHP/5.3.29 pragma: no-cache Cache-Control: private, max-age=0, no-cache expires: Mon, 26 Jul 1997 05:00:00 GMT p3p: CP="CUR ADM OUR NOR STA NID" set-cookie: OAID=e012d283a5e1eae18062d3edb9725359; expires=Tue, 11-Mar-2025 11:57:03 GMT; path=/ x-frame-options: SameOrigin x-content-type-options: nosniff content-security-policy: frame-ancestors 'self'; upgrade-insecure-requests x-robots-tag: noindex CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 862b5d61084b09f7-LAS alt-svc: h3=":443"; ma=86400
2024-03-11 11:57:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.16	50098	104.254.148.252	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:03 UTC	589	OUT	GET /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=7822940101119878936; XANDR_PANID=3nI6clyYzfbnEpT9fRyZHeeDLf-D2s87ENd4pOyw4BFTVoas2vYN3I0kAmg30iZxhJeWONbdfUtKXwuvlFOruOXDykPNWOUWZiMtJDNoxzc.; receive-cookie-deprecation=1; icu=ChgIkPoyEAoYAiACKAIwjuO7rwY4AkACSAIQjuO7rwYYAQ..
2024-03-11 11:57:03 UTC	1360	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Mon, 11 Mar 2024 11:57:03 GMT Content-Type: application/json; charset=utf-8 Content-Length: 57 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 30e4ea94-02b6-4240-997d-644d598bf9fd Set-Cookie: XANDR_PANID=3nI6clyYzfbnEpT9fRyZHeeDLf-D2s87ENd4pOyw4BFTVoas2vYN3I0kAmg30iZxhJeWONbdfUtKXwuvlFOruOXDykPNWOUWZiMtJDNoxzc.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:03 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 27-Feb-2034 11:57:03 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=7822940101119878936; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:03 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.105.38; 154.16.105.38; 894.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com
2024-03-11 11:57:03 UTC	57	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6a 73 6f 6e 70 20 72 65 71 75 69 72 65 73 20 61 20 75 72 69 65 6e 63 6f 64 65 64 20 71 75 65 72 79 73 74 72 69 6e 67 20 70 61 72 61 6d 22 7d Data Ascii: {"error":"jsonp requires a uriencoded querystring param"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.16	50099	52.9.62.96	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:03 UTC	434	OUT	GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:03 UTC	101	IN	HTTP/1.1 404 Not Found Date: Mon, 11 Mar 2024 11:57:03 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.16	50101	172.64.150.145	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:03 UTC	1392	OUT	GET /directory/tp3/?b=69705&c=13445&z=67087&cb=000f291466 HTTP/1.1 Host: sourceforge.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; OAID=e012d283a5e1eae18062d3edb9725359; _gid=GA1.2.1668299401.1710158203; __gads=ID=ed8d538436f1b623:T=1710158205:RT=1710158205:S=ALNI_MbiYxvEWP7dZiJkctj8HGzhHyMpCg; __gpi=UID=00000dc711cb5676:T=1710158205:RT=1710158205:S=ALNI_MbtGcDgo6RHjTtG2es2mbdsN1jDSw; __eoi=ID=ccb10672a4298c0a:T=1710158205:RT=1710158205:S=AA-AfjZQQCnCz9TlsGBpH19Z0_Y8; _ga_1H226E4E4L=GS1.1.1710158208.1.0.1710158208.0.0.0; _ga=GA1.1.1854926735.1710158203; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFJTcypyVzE2WjwyVzRDRl4zTCY4YHhDNjRCQG1NaG1hYnowLTt1eEhQNlJfPkZtKl5jM2YqVzh7MWd2S01gKEl4KCVNMmhGTSFeWEhAQzdNfXZUMmRDYEUxY1BiS2JIdSNqd0Y7amEzRTM9dHo2bWkmPmJjekI0fCtDaGtRQT5vaTdaWndMZE5OMEl4XngtaUlGZmBjZlBNTkkpYWEqK1NST04qLT9jPDZPSDw5U2xWOSFFViVQb1FIYThRUyFlK15nZiRKV3R9Z3Beb25LdVhvQnlSYFU4RTVqIUk4JWBvR19RQDkmVGRMWTxXRzd4PDU-ZzYjQHVSdGN5a3FwS1RCQUQzeGBGP2MwZSVmQVNMTCFwKXE7fng2YiVsdzs3cSFKJSY7In0.XysH-z9DDtydQIaiX4Q_fLbH0fYGiJWBs2t2JkUMNH8
2024-03-11 11:57:03 UTC	649	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:03 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-powered-by: PHP/5.3.29 pragma: no-cache Cache-Control: private, max-age=0, no-cache expires: Mon, 26 Jul 1997 05:00:00 GMT p3p: CP="CUR ADM OUR NOR STA NID" set-cookie: OAID=e012d283a5e1eae18062d3edb9725359; expires=Tue, 11-Mar-2025 11:57:03 GMT; path=/ x-frame-options: SameOrigin x-content-type-options: nosniff content-security-policy: frame-ancestors 'self'; upgrade-insecure-requests x-robots-tag: noindex CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 862b5d622b6b09ed-LAS alt-svc: h3=":443"; ma=86400
2024-03-11 11:57:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.16	50100	104.18.37.111	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:03 UTC	1660	OUT	GET /directory/tp3/?b=66709&c=12881&z=64083&cb=2daf02b8d0 HTTP/1.1 Host: sourceforge.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/projects/docfetcher/postdownload Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; OAID=e012d283a5e1eae18062d3edb9725359; _gid=GA1.2.1668299401.1710158203; __gads=ID=ed8d538436f1b623:T=1710158205:RT=1710158205:S=ALNI_MbiYxvEWP7dZiJkctj8HGzhHyMpCg; __gpi=UID=00000dc711cb5676:T=1710158205:RT=1710158205:S=ALNI_MbtGcDgo6RHjTtG2es2mbdsN1jDSw; __eoi=ID=ccb10672a4298c0a:T=1710158205:RT=1710158205:S=AA-AfjZQQCnCz9TlsGBpH19Z0_Y8; _ga_1H226E4E4L=GS1.1.1710158208.1.0.1710158208.0.0.0; _ga=GA1.1.1854926735.1710158203; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFJTcypyVzE2WjwyVzRDRl4zTCY4YHhDNjRCQG1NaG1hYnowLTt1eEhQNlJfPkZtKl5jM2YqVzh7MWd2S01gKEl4KCVNMmhGTSFeWEhAQzdNfXZUMmRDYEUxY1BiS2JIdSNqd0Y7amEzRTM9dHo2bWkmPmJjekI0fCtDaGtRQT5vaTdaWndMZE5OMEl4XngtaUlGZmBjZlBNTkkpYWEqK1NST04qLT9jPDZPSDw5U2xWOSFFViVQb1FIYThRUyFlK15nZiRKV3R9Z3Beb25LdVhvQnlSYFU4RTVqIUk4JWBvR19RQDkmVGRMWTxXRzd4PDU-ZzYjQHVSdGN5a3FwS1RCQUQzeGBGP2MwZSVmQVNMTCFwKXE7fng2YiVsdzs3cSFKJSY7In0.XysH-z9DDtydQIaiX4Q_fLbH0fYGiJWBs2t2JkUMNH8
2024-03-11 11:57:03 UTC	649	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:03 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-powered-by: PHP/5.3.29 pragma: no-cache Cache-Control: private, max-age=0, no-cache expires: Mon, 26 Jul 1997 05:00:00 GMT p3p: CP="CUR ADM OUR NOR STA NID" set-cookie: OAID=e012d283a5e1eae18062d3edb9725359; expires=Tue, 11-Mar-2025 11:57:03 GMT; path=/ x-frame-options: SameOrigin x-content-type-options: nosniff content-security-policy: frame-ancestors 'self'; upgrade-insecure-requests x-robots-tag: noindex CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 862b5d622cc60a03-LAS alt-svc: h3=":443"; ma=86400
2024-03-11 11:57:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.16	50106	23.83.76.44	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:03 UTC	826	OUT	GET /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; vs=575816=5885997
2024-03-11 11:57:04 UTC	123	IN	HTTP/1.1 405 Method Not Allowed content-length: 0 date: Mon, 11 Mar 2024 11:57:03 GMT allow: POST connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.16	50108	104.26.2.70	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:03 UTC	371	OUT	GET /px.gif?ch=1&e=0.8406123646586141 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:04 UTC	1140	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:04 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPpGGNTgZsoRij7ebx0tkB7iGg9XbLdoonjCwCI4eplpM45CJtOkYxgyWfcdATXohbGZkEDdQqwQmA x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Expires: Fri, 01 Mar 2024 20:35:25 GMT Cache-Control: public, max-age=86400 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" Age: 836499 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UO4uR9HEucOUt6ATI1bGw%2B1rFWDAHPDps1Hc0RcR9oN0Onur6JsKFuYPr1eKxWxEBYINw3wg28uub76YmTggoYbebxz4lUXr1feS7qooQPWuZPou%2FVOIM7rDfjAZqUDPzw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 862b5d659c1169e3-LAS
2024-03-11 11:57:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.16	50110	172.64.150.145	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:03 UTC	1392	OUT	GET /directory/tp3/?b=69513&c=13409&z=66895&cb=8b302bed4f HTTP/1.1 Host: sourceforge.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; OAID=e012d283a5e1eae18062d3edb9725359; _gid=GA1.2.1668299401.1710158203; __gads=ID=ed8d538436f1b623:T=1710158205:RT=1710158205:S=ALNI_MbiYxvEWP7dZiJkctj8HGzhHyMpCg; __gpi=UID=00000dc711cb5676:T=1710158205:RT=1710158205:S=ALNI_MbtGcDgo6RHjTtG2es2mbdsN1jDSw; __eoi=ID=ccb10672a4298c0a:T=1710158205:RT=1710158205:S=AA-AfjZQQCnCz9TlsGBpH19Z0_Y8; _ga_1H226E4E4L=GS1.1.1710158208.1.0.1710158208.0.0.0; _ga=GA1.1.1854926735.1710158203; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFJTcypyVzE2WjwyVzRDRl4zTCY4YHhDNjRCQG1NaG1hYnowLTt1eEhQNlJfPkZtKl5jM2YqVzh7MWd2S01gKEl4KCVNMmhGTSFeWEhAQzdNfXZUMmRDYEUxY1BiS2JIdSNqd0Y7amEzRTM9dHo2bWkmPmJjekI0fCtDaGtRQT5vaTdaWndMZE5OMEl4XngtaUlGZmBjZlBNTkkpYWEqK1NST04qLT9jPDZPSDw5U2xWOSFFViVQb1FIYThRUyFlK15nZiRKV3R9Z3Beb25LdVhvQnlSYFU4RTVqIUk4JWBvR19RQDkmVGRMWTxXRzd4PDU-ZzYjQHVSdGN5a3FwS1RCQUQzeGBGP2MwZSVmQVNMTCFwKXE7fng2YiVsdzs3cSFKJSY7In0.XysH-z9DDtydQIaiX4Q_fLbH0fYGiJWBs2t2JkUMNH8
2024-03-11 11:57:04 UTC	649	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:04 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-powered-by: PHP/5.3.29 pragma: no-cache Cache-Control: private, max-age=0, no-cache expires: Mon, 26 Jul 1997 05:00:00 GMT p3p: CP="CUR ADM OUR NOR STA NID" set-cookie: OAID=e012d283a5e1eae18062d3edb9725359; expires=Tue, 11-Mar-2025 11:57:04 GMT; path=/ x-frame-options: SameOrigin x-content-type-options: nosniff content-security-policy: frame-ancestors 'self'; upgrade-insecure-requests x-robots-tag: noindex CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 862b5d657f140add-LAS alt-svc: h3=":443"; ma=86400
2024-03-11 11:57:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.16	50109	130.211.23.194	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:04 UTC	764	OUT	GET /pv?tid=2r5yo54xlW&w=5483815487668224&o=5098683085881344&cv=2.1.38-1-g3a5ff56&widget=false&r=false&vr=1280x907&pageURL=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Fpostdownload&sid=nZZIdvDKz&pm=false&upapi=true HTTP/1.1 Host: api.btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:04 UTC	255	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Vary: Origin Date: Mon, 11 Mar 2024 11:57:04 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.16	50111	52.9.62.96	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:04 UTC	434	OUT	GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:04 UTC	101	IN	HTTP/1.1 404 Not Found Date: Mon, 11 Mar 2024 11:57:04 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.16	50112	172.64.150.145	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:04 UTC	1392	OUT	GET /directory/tp3/?b=66709&c=12881&z=64083&cb=2daf02b8d0 HTTP/1.1 Host: sourceforge.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; OAID=e012d283a5e1eae18062d3edb9725359; _gid=GA1.2.1668299401.1710158203; __gads=ID=ed8d538436f1b623:T=1710158205:RT=1710158205:S=ALNI_MbiYxvEWP7dZiJkctj8HGzhHyMpCg; __gpi=UID=00000dc711cb5676:T=1710158205:RT=1710158205:S=ALNI_MbtGcDgo6RHjTtG2es2mbdsN1jDSw; __eoi=ID=ccb10672a4298c0a:T=1710158205:RT=1710158205:S=AA-AfjZQQCnCz9TlsGBpH19Z0_Y8; _ga_1H226E4E4L=GS1.1.1710158208.1.0.1710158208.0.0.0; _ga=GA1.1.1854926735.1710158203; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFJTcypyVzE2WjwyVzRDRl4zTCY4YHhDNjRCQG1NaG1hYnowLTt1eEhQNlJfPkZtKl5jM2YqVzh7MWd2S01gKEl4KCVNMmhGTSFeWEhAQzdNfXZUMmRDYEUxY1BiS2JIdSNqd0Y7amEzRTM9dHo2bWkmPmJjekI0fCtDaGtRQT5vaTdaWndMZE5OMEl4XngtaUlGZmBjZlBNTkkpYWEqK1NST04qLT9jPDZPSDw5U2xWOSFFViVQb1FIYThRUyFlK15nZiRKV3R9Z3Beb25LdVhvQnlSYFU4RTVqIUk4JWBvR19RQDkmVGRMWTxXRzd4PDU-ZzYjQHVSdGN5a3FwS1RCQUQzeGBGP2MwZSVmQVNMTCFwKXE7fng2YiVsdzs3cSFKJSY7In0.XysH-z9DDtydQIaiX4Q_fLbH0fYGiJWBs2t2JkUMNH8
2024-03-11 11:57:04 UTC	649	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:04 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-powered-by: PHP/5.3.29 pragma: no-cache Cache-Control: private, max-age=0, no-cache expires: Mon, 26 Jul 1997 05:00:00 GMT p3p: CP="CUR ADM OUR NOR STA NID" set-cookie: OAID=e012d283a5e1eae18062d3edb9725359; expires=Tue, 11-Mar-2025 11:57:04 GMT; path=/ x-frame-options: SameOrigin x-content-type-options: nosniff content-security-policy: frame-ancestors 'self'; upgrade-insecure-requests x-robots-tag: noindex CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 862b5d666c8669e3-LAS alt-svc: h3=":443"; ma=86400
2024-03-11 11:57:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.16	50116	23.83.76.44	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:04 UTC	826	OUT	GET /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; vs=575816=5885997
2024-03-11 11:57:04 UTC	123	IN	HTTP/1.1 405 Method Not Allowed content-length: 0 date: Mon, 11 Mar 2024 11:57:03 GMT allow: POST connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.16	50127	52.9.62.96	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:04 UTC	434	OUT	GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:05 UTC	101	IN	HTTP/1.1 404 Not Found Date: Mon, 11 Mar 2024 11:57:05 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.16	50126	107.178.240.89	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:04 UTC	886	OUT	GET /engine?site=143572;size=1x1;e=0;dt=0;category=twljteyw08d;kw=gqe5%20od1%20enrf%20135uc%20mgbff139vr;rnd=(1710158223957) HTTP/1.1 Host: pbid.pro-market.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: anProfile="0+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)"
2024-03-11 11:57:05 UTC	687	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" ANServer: gapp2 Set-Cookie: anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)"; Domain=.pro-market.net; Max-Age=15552000; Path=/; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 1 Jan 1990 0:0:0 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html Vary: Accept-Encoding Date: Mon, 11 Mar 2024 11:57:05 GMT Via: 1.1 google Alt-Svc: clear Connection: close Transfer-Encoding: chunked
2024-03-11 11:57:05 UTC	483	IN	Data Raw: 31 64 37 0d 0a 20 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 72 69 67 68 74 6d 61 72 67 69 6e 3d 30 20 6c 65 66 74 6d 61 72 67 69 6e 3d 30 20 74 6f 70 6d 61 72 67 69 6e 3d 30 20 62 6f 74 74 6f 6d 6d 61 72 67 69 6e 3d 30 3e 3c 21 2d 2d 20 2d 2d 3e 3c 21 2d 2d 20 2d 2d 3e 3c 53 43 52 49 50 54 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 74 72 79 20 7b 0d 0a 76 61 72 20 47 5f 50 55 42 4c 49 53 48 45 52 5f 49 44 20 3d 22 31 34 33 35 37 32 22 3b 0d 0a 76 61 72 20 47 5f 44 55 5f 44 49 53 20 3d 20 22 39 38 2c 31 30 2c 32 35 22 3b 0d 0a 76 61 72 20 47 5f 56 49 53 49 54 4f 52 5f 49 44 20 3d 20 22 2d 32 35 33 33 34 31 31 36 36 37 36 35 33 36 30 33 39 37 39 22 3b 0d 0a 76 61 72 20 47 5f 56 49 53 49 54 4f 52 5f 49 44 5f 45 36 34 20 3d 20 22 Data Ascii: 1d7 <html><body rightmargin=0 leftmargin=0 topmargin=0 bottommargin=0>... -->... --><SCRIPT type="text/javascript">try {var G_PUBLISHER_ID ="143572";var G_DU_DIS = "98,10,25";var G_VISITOR_ID = "-2533411667653603979";var G_VISITOR_ID_E64 = "

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.16	50128	23.83.76.44	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:05 UTC	826	OUT	GET /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; vs=575816=5885997
2024-03-11 11:57:05 UTC	123	IN	HTTP/1.1 405 Method Not Allowed content-length: 0 date: Mon, 11 Mar 2024 11:57:05 GMT allow: POST connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.16	50124	34.232.140.51	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:05 UTC	618	OUT	GET /s1.js?d=2396&cb=1710158221751 HTTP/1.1 Host: tag.crsspxl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=693098949688747066; uuid=c80b7ee4-92fa-4d71-9444-870d4e377528
2024-03-11 11:57:05 UTC	792	IN	HTTP/1.1 200 Set-Cookie: re=1; Domain=.crsspxl.com; Expires=Fri, 10-May-2024 11:57:05 UTC; Path=/; SameSite=None; Secure Set-Cookie: uid=693098949688747066; Domain=.crsspxl.com; Expires=Fri, 10-May-2024 11:57:05 UTC; Path=/; SameSite=None; Secure P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Set-Cookie: re=1; Domain=.crsspxl.com; Expires=Fri, 10-May-2024 11:57:05 UTC; Path=/; SameSite=None; Secure Set-Cookie: uuid=c80b7ee4-92fa-4d71-9444-870d4e377528; Domain=.crsspxl.com; Expires=Fri, 10-May-2024 11:57:05 UTC; Path=/; SameSite=None; Secure P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Content-Type: text/javascript Content-Length: 1780 Vary: Accept-Encoding Date: Mon, 11 Mar 2024 11:57:04 GMT Connection: close
2024-03-11 11:57:05 UTC	1780	IN	Data Raw: 76 61 72 20 63 70 5f 43 34 77 31 6c 64 4e 32 64 39 50 6d 56 72 6b 4e 3d 63 70 5f 43 34 77 31 6c 64 4e 32 64 39 50 6d 56 72 6b 4e 7c 7c 7b 7d 3b 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 3b 74 72 79 7b 64 3d 74 6f 70 2e 64 6f 63 75 6d 65 6e 74 7d 63 61 74 63 68 28 65 30 29 7b 74 72 79 7b 64 3d 64 6f 63 75 6d 65 6e 74 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 5f 65 28 63 2c 6d 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 63 72 73 73 70 78 6c 28 7a 29 7b 69 66 28 64 2e 62 6f 64 79 3d 3d 6e 75 6c 6c 7c 7c 74 79 70 65 6f 66 20 64 2e 62 6f 64 79 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 69 66 28 7a 3c 32 35 30 30 29 7b 76 61 72 20 72 65 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 72 73 73 70 78 6c 28 7a 2a 32 29 7d 3b 73 65 Data Ascii: var cp_C4w1ldN2d9PmVrkN=cp_C4w1ldN2d9PmVrkN\|\|{};try{(function(){var d;try{d=top.document}catch(e0){try{d=document}catch(e){}}function _e(c,m){}function crsspxl(z){if(d.body==null\|\|typeof d.body=="undefined"){if(z<2500){var rec=function(){crsspxl(z*2)};se

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.16	50135	52.9.62.96	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:05 UTC	434	OUT	GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:05 UTC	101	IN	HTTP/1.1 404 Not Found Date: Mon, 11 Mar 2024 11:57:05 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.16	50131	34.117.77.79	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:05 UTC	1092	OUT	GET /utsync.ashx?pub=&adv=&et=0&eid=771&ct=js&pi=3642666937673580575&fp=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f&clid=&if=0&ps=&cl=&mlt=&data=&&cp=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Fpostdownload&pv=1710158223965_ao5ati89k&bl=en-us&cb=3445188&return=&ht=&d=&dc=&si=1710158201959_nopjhvr4s&cid=&s=1280x1024&rp=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Ffiles%2Fdocfetcher%2F1.1.25%2Fdocfetcher_1.1.25_win32_setup.exe%2Fdownload&v=2.6.1.139 HTTP/1.1 Host: ml314.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pi=3642666937673580575; tp=3%253B03%252F11%252F2024%2B11%253A56%253A43%253B0; u=aHR0cHM6Ly9zb3VyY2Vmb3JnZS5uZXQv
2024-03-11 11:57:05 UTC	864	IN	HTTP/1.1 200 OK content-type: application/javascript cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache set-cookie: u=aHR0cHM6Ly9zb3VyY2Vmb3JnZS5uZXQvcHJvamVjdHMvZG9jZmV0Y2hlci9wb3N0ZG93bmxvYWQ%3D; expires=Mon, 11 Mar 2024 11:57:20 GMT; domain=ml314.com; path=/;SameSite=None; secure set-cookie: pi=3642666937673580575; expires=Tue, 11 Mar 2025 11:57:05 GMT; domain=ml314.com; path=/; secure; samesite=none; httponly set-cookie: tp=7%253B03%252F11%252F2024%2B11%253A57%253A05%253B0; expires=Mon, 25 Mar 2024 11:57:05 GMT; domain=ml314.com; path=/;SameSite=None; secure p3p: CP="NON DSP COR ADMo PSAo DEVo BUS COM UNI NAV DEM STA" date: Mon, 11 Mar 2024 11:57:05 GMT server: Google Frontend via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-11 11:57:05 UTC	388	IN	Data Raw: 32 31 39 0d 0a 5f 6d 6c 2e 73 65 74 46 50 49 28 27 33 36 34 32 36 36 36 39 33 37 36 37 33 35 38 30 35 37 35 27 29 3b 5f 6d 6c 2e 70 72 6f 63 65 73 73 54 61 67 28 7b 20 75 72 6c 3a 20 27 68 74 74 70 73 3a 2f 2f 70 73 2e 65 79 65 6f 74 61 2e 6e 65 74 2f 70 69 78 65 6c 3f 70 69 64 3d 72 38 68 72 62 32 30 26 74 3d 67 69 66 27 2c 20 74 79 70 65 3a 20 27 69 6d 67 27 20 7d 29 3b 0a 5f 6d 6c 2e 70 72 6f 63 65 73 73 54 61 67 28 7b 20 75 72 6c 3a 20 27 68 74 74 70 73 3a 2f 2f 6c 6f 61 64 75 73 2e 65 78 65 6c 61 74 6f 72 2e 63 6f 6d 2f 6c 6f 61 64 2f 3f 70 3d 32 30 34 26 67 3d 31 31 37 30 26 6a 3d 30 26 72 65 64 69 72 65 63 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 6c 33 31 34 2e 63 6f 6d 25 32 46 63 73 79 6e 63 2e 61 73 68 78 25 33 46 70 65 72 73 6f 6e 5f Data Ascii: 219_ml.setFPI('3642666937673580575');_ml.processTag({ url: 'https://ps.eyeota.net/pixel?pid=r8hrb20&t=gif', type: 'img' });_ml.processTag({ url: 'https://loadus.exelator.com/load/?p=204&g=1170&j=0&redirect=https%3A%2F%2Fml314.com%2Fcsync.ashx%3Fperson_
2024-03-11 11:57:05 UTC	156	IN	Data Raw: 33 36 34 32 36 36 36 39 33 37 36 37 33 35 38 30 35 37 35 26 72 65 64 69 72 3d 27 2c 20 74 79 70 65 3a 20 27 69 6d 67 27 20 7d 29 3b 0a 5f 6d 6c 2e 70 72 6f 63 65 73 73 54 61 67 28 7b 20 75 72 6c 3a 20 27 68 74 74 70 73 3a 2f 2f 69 64 73 79 6e 63 2e 72 6c 63 64 6e 2e 63 6f 6d 2f 33 39 35 38 38 36 2e 67 69 66 3f 70 61 72 74 6e 65 72 5f 75 69 64 3d 33 36 34 32 36 36 36 39 33 37 36 37 33 35 38 30 35 37 35 27 2c 20 74 79 70 65 3a 20 27 69 6d 67 27 20 7d 29 3b 0a 0d 0a Data Ascii: 3642666937673580575&redir=', type: 'img' });_ml.processTag({ url: 'https://idsync.rlcdn.com/395886.gif?partner_uid=3642666937673580575', type: 'img' });
2024-03-11 11:57:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.16	50144	23.83.76.44	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:05 UTC	826	OUT	GET /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; vs=575816=5885997
2024-03-11 11:57:06 UTC	123	IN	HTTP/1.1 405 Method Not Allowed content-length: 0 date: Mon, 11 Mar 2024 11:57:05 GMT allow: POST connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.16	50141	34.36.216.150	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:05 UTC	794	OUT	GET /connectors/datonics/usersync?redir=https://pbid.pro-market.net/engine?du=73%26mimetype=img%26csync={userId} HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pbid.pro-market.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=e186753e-f558-43f2-9eb8-0f25b6de5290#1710158208299; _ssuma=eyI0NSI6MTcxMDE1ODIwOTExOX0
2024-03-11 11:57:06 UTC	800	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=e186753e-f558-43f2-9eb8-0f25b6de5290#1710158208299; Domain=.sitescout.com; Expires=Tue, 11-Mar-2025 11:57:05 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyI0NSI6MTcxMDE1ODIwOTExOSwiNTMiOjE3MTAxNTgyMjU5OTV9; Domain=.sitescout.com; Expires=Wed, 10-Apr-2024 11:57:05 GMT; Path=/; Secure; SameSite=None location: https://pbid.pro-market.net/engine?du=73&mimetype=img&csync=e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553 Content-Length: 0 date: Mon, 11 Mar 2024 11:57:05 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.16	50143	35.230.38.116	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:05 UTC	630	OUT	GET /datonics HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pbid.pro-market.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=B6512778B5DA4E7C942E6E491CF4A04A
2024-03-11 11:57:06 UTC	646	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Mon, 11 Mar 2024 11:57:06 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://pbid.pro-market.net/engine?du=24;csync=B6512778B5DA4E7C942E6E491CF4A04A;mimetype=img; Expires: Sun, 10 Mar 2024 11:57:06 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-03-11 11:57:06 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.16	50146	3.163.125.46	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:05 UTC	655	OUT	GET /profiles_engine/ProfilesEngineServlet?at=20&dpi=3&pcid=-2533411667653603979 HTTP/1.1 Host: sync.intentiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pbid.pro-market.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:06 UTC	1001	IN	HTTP/1.1 302 Content-Type: image/gif Content-Length: 43 Connection: close Date: Mon, 11 Mar 2024 11:57:06 GMT Set-Cookie: intentIQ=qrjjuwiCKK; Domain=.intentiq.com; Expires=Wed, 11 Mar 2026 11:57:06 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Location: https://sync1.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&dpi=3&pcid=-2533411667653603979&ckls=true&ci=qrjjuwiCKK&nc=false&trid=1376010420 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Patent: https://www.almondnet.com/ip Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Wed, 11 Mar 2026 11:57:06 GMT; Path=/; Secure; SameSite=None X-Cache: Miss from cloudfront Via: 1.1 0ef7f058b6800e1f8ea404e35f354a4e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX54-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: vApMOv5HWbbGUpUuXXolC2D8uMG_EizkVZbVsx6JcKHY6WDJoCbIrw==
2024-03-11 11:57:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.16	50149	35.244.154.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:05 UTC	622	OUT	GET /400646.gif?partner_uid=-2533411667653603979 HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pbid.pro-market.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:06 UTC	596	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=4k01LoRgMc1aOOm42RcYUFYmzAEAL4KXC73Hrxo9kEM=; Path=/; Domain=rlcdn.com; Expires=Tue, 11 Mar 2025 11:57:06 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Fri, 10 May 2024 11:57:06 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Mon, 11 Mar 2024 11:57:06 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:57:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.16	50148	142.251.2.132	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:05 UTC	855	OUT	GET /safeframe/1-0-40/html/container.html HTTP/1.1 Host: 2e364cc7caa3f2e10b0fb666ab9496ef.safeframe.googlesyndication.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:06 UTC	707	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-gpt-scs" Report-To: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} Timing-Allow-Origin: * Content-Length: 6162 Date: Mon, 11 Mar 2024 11:57:06 GMT Expires: Tue, 11 Mar 2025 11:57:06 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Thu, 03 Nov 2022 19:10:08 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:57:06 UTC	545	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 61 66 65 46 72 61 6d 65 20 43 6f 6e 74 61 69 6e 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 6e 3d 66 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8"> <title>SafeFrame Container</title> <script>(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var f=this\|\|self,h=function(a){return a};var n=f
2024-03-11 11:57:06 UTC	1252	IN	Data Raw: 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 6f 6f 67 23 68 74 6d 6c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 68 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 68 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 68 7d 29 7d 63 61 74 63 68 28 63 29 7b 66 2e 63 6f 6e 73 6f 6c 65 26 26 66 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 63 2e 6d 65 73 73 61 67 65 29 7d 74 3d 61 7d 65 6c 73 65 20 74 3d 61 7d 72 65 74 75 72 6e 20 74 7d 3b 76 61 72 20 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 67 3d 62 61 3d 3d 3d 62 61 3f 61 3a 22 22 7d 3b 63 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2b 22 22 7d 3b 76 61 72 20 62 61 3d 7b 7d 2c 64 61 3d 66 75 6e 63 74 69 Data Ascii: .createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=functi
2024-03-11 11:57:06 UTC	1252	IN	Data Raw: 74 68 69 73 2e 69 3d 22 26 22 3b 74 68 69 73 2e 68 3d 7b 7d 3b 74 68 69 73 2e 6f 3d 30 3b 74 68 69 73 2e 67 3d 5b 5d 7d 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 3b 63 5b 61 5d 3d 62 3b 72 65 74 75 72 6e 5b 63 5d 7d 2c 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 6b 3d 5b 5d 3b 6a 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 67 2c 41 29 7b 28 67 3d 70 61 28 67 2c 62 2c 63 2c 64 2c 65 29 29 26 26 6b 2e 70 75 73 68 28 41 2b 22 3d 22 2b 67 29 7d 29 3b 72 65 74 75 72 6e 20 6b 2e 6a 6f 69 6e 28 62 29 7d 2c 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 72 65 74 75 72 6e 22 22 3b 62 3d 62 7c 7c 22 26 22 3b 63 3d 63 7c 7c 22 2c 24 22 3b 22 73 74 Data Ascii: this.i="&";this.h={};this.o=0;this.g=[]},z=function(a,b){var c={};c[a]=b;return[c]},qa=function(a,b,c,d,e){var k=[];ja(a,function(g,A){(g=pa(g,b,c,d,e))&&k.push(A+"="+g)});return k.join(b)},pa=function(a,b,c,d,e){if(null==a)return"";b=b\|\|"&";c=c\|\|",$";"st
2024-03-11 11:57:06 UTC	1252	IN	Data Raw: 28 29 3b 61 2e 6e 61 6d 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6e 61 6d 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6e 61 6d 65 29 3b 61 2e 6d 65 73 73 61 67 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6d 65 73 73 61 67 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6d 65 73 73 61 67 65 29 3b 69 66 28 61 2e 73 74 61 63 6b 29 7b 61 3d 61 2e 73 74 61 63 6b 3b 76 61 72 20 63 3d 62 3b 74 72 79 7b 2d 31 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 63 29 26 26 28 61 3d 63 2b 22 5c 6e 22 2b 61 29 3b 66 6f 72 28 76 61 72 20 64 3b 61 21 3d 64 3b 29 64 3d 61 2c 61 3d 61 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 28 28 68 74 74 70 73 3f 3a 2f 2e 2e 2a 2f 29 5b 5e 2f 3a 5d 2a 3a 5c 5c 64 2b 28 3f 3a 2e 7c 5c 6e 29 2a 29 5c 5c 32 22 29 2c Data Ascii: ();a.name&&-1==b.indexOf(a.name)&&(b+=": "+a.name);a.message&&-1==b.indexOf(a.message)&&(b+=": "+a.message);if(a.stack){a=a.stack;var c=b;try{-1==a.indexOf(c)&&(a=c+"\n"+a);for(var d;a!=d;)d=a,a=a.replace(RegExp("((https?:/../)[^/:]:\\d+(?:.\|\n)*)\\2"),
2024-03-11 11:57:06 UTC	1252	IN	Data Raw: 5b 32 5d 2c 45 3d 43 5b 33 5d 3b 69 66 28 44 3e 45 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 50 61 72 73 65 64 20 63 6f 6e 74 65 6e 74 20 73 69 7a 65 20 64 6f 65 73 6e 27 74 20 6d 61 74 63 68 2e 20 22 2b 44 2b 22 3a 22 2b 45 2e 6c 65 6e 67 74 68 29 3b 42 3d 7b 6d 3a 43 5b 31 5d 2c 63 6f 6e 74 65 6e 74 3a 45 2e 73 75 62 73 74 72 28 30 2c 44 29 2c 6c 3a 45 2e 73 75 62 73 74 72 28 44 29 7d 3b 76 61 72 20 46 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 42 2e 6c 29 3b 77 69 6e 64 6f 77 2e 6e 61 6d 65 3d 22 22 3b 76 61 72 20 42 61 3d 42 2e 63 6f 6e 74 65 6e 74 3b 46 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c 74 26 26 28 66 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c 74 3d 46 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c Data Ascii: [2],E=C[3];if(D>E.length)throw Error("Parsed content size doesn't match. "+D+":"+E.length);B={m:C[1],content:E.substr(0,D),l:E.substr(D)};var F=JSON.parse(B.l);window.name="";var Ba=B.content;F.goog_safeframe_hlt&&(f.goog_safeframe_hlt=F.goog_safeframe_hl
2024-03-11 11:57:06 UTC	609	IN	Data Raw: 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 21 31 29 2c 46 61 3d 6e 75 6c 6c 2c 55 3d 4b 2e 6c 65 6e 67 74 68 2d 31 2c 56 3d 55 3b 30 3c 3d 56 3b 2d 2d 56 29 7b 76 61 72 20 57 3d 4b 5b 56 5d 3b 21 46 61 26 26 6b 61 2e 74 65 73 74 28 57 2e 75 72 6c 29 26 26 28 46 61 3d 57 29 3b 69 66 28 57 2e 75 72 6c 26 26 21 57 2e 6a 29 7b 78 3d 57 3b 62 72 65 61 6b 7d 7d 76 61 72 20 6c 61 3d 6e 75 6c 6c 2c 47 61 3d 4b 2e 6c 65 6e 67 74 68 26 26 4b 5b 55 5d 2e 75 72 6c 3b 30 21 3d 78 2e 64 65 70 74 68 26 26 47 61 26 26 28 6c 61 3d 4b 5b 55 5d 29 3b 48 3d 6e 65 77 20 6d 61 3b 69 66 28 48 2e 68 29 7b 76 61 72 20 48 61 3d 48 2e 68 2e 75 72 6c 7c 7c 22 22 3b 49 2e 67 2e 70 75 73 68 28 34 29 3b 49 2e 68 5b 34 5d 3d 7a 28 22 74 6f 70 22 2c 48 61 29 7d 76 61 72 20 49 61 3d 7b Data Ascii: .location.href,!1),Fa=null,U=K.length-1,V=U;0<=V;--V){var W=K[V];!Fa&&ka.test(W.url)&&(Fa=W);if(W.url&&!W.j){x=W;break}}var la=null,Ga=K.length&&K[U].url;0!=x.depth&&Ga&&(la=K[U]);H=new ma;if(H.h){var Ha=H.h.url\|\|"";I.g.push(4);I.h[4]=z("top",Ha)}var Ia={

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.16	50142	35.71.131.137	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:05 UTC	861	OUT	GET /track/cmf/generic?ttd_pid=9hr4p8g&ttd_tpi=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pbid.pro-market.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFEhQKBXRhcGFkEgsIqK7DwIvz4DwQBRIbCgxzaGFyZXRocm91Z2gSCwjWjMfSi_PgPBAFEhYKB2QwdHJvMWoSCwj-h-Hhi_PgPBAFGAEgASgCMgsIkv7jjqLz4DwQBTgBWgdkMHRybzFqYAI.
2024-03-11 11:57:06 UTC	679	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:57:06 GMT Content-Length: 263 Connection: close server: Kestrel location: https://pbid.pro-market.net/engine?site=161131&size=1x1&mimetype=img&du=1&csync=71dcd657-b7ce-4e56-9064-0f83979f8fcb set-cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; expires=Tue, 11 Mar 2025 11:57:06 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFEhQKBXRhcGFkEgsIqK7DwIvz4DwQBRIbCgxzaGFyZXRocm91Z2gSCwjWjMfSi_PgPBAFEhYKB2QwdHJvMWoSCwj-h-Hhi_PgPBAFGAEgASgCMgsIgODmqKPz4DwQBTgBWgc5aHI0cDhnYAI.; expires=Tue, 11 Mar 2025 11:57:06 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-11 11:57:06 UTC	263	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 62 69 64 2e 70 72 6f 2d 6d 61 72 6b 65 74 2e 6e 65 74 2f 65 6e 67 69 6e 65 3f 73 69 74 65 3d 31 36 31 31 33 31 26 73 69 7a 65 3d 31 78 31 26 6d 69 6d 65 74 79 70 65 3d 69 6d 67 26 64 75 3d 31 26 63 73 79 6e 63 3d 37 31 64 63 64 36 35 37 2d 62 37 63 65 2d 34 65 35 36 2d 39 30 36 34 2d 30 66 38 33 39 37 39 66 38 66 63 62 22 3e 68 74 74 70 73 3a 2f 2f 70 62 69 64 2e 70 72 6f 2d 6d 61 72 6b 65 74 2e 6e 65 74 2f 65 6e 67 69 6e 65 3f 73 69 74 65 3d 31 36 31 31 33 31 26 73 69 7a 65 3d 31 78 31 26 6d 69 6d 65 74 79 70 65 3d 69 6d 67 26 64 75 3d 31 26 63 73 79 6e 63 3d 37 31 64 63 64 36 35 37 2d 62 37 63 65 2d 34 65 35 36 2d 39 30 36 34 2d 30 66 38 33 39 37 39 66 Data Ascii: Redirecting to: <a href="https://pbid.pro-market.net/engine?site=161131&size=1x1&mimetype=img&du=1&csync=71dcd657-b7ce-4e56-9064-0f83979f8fcb">https://pbid.pro-market.net/engine?site=161131&size=1x1&mimetype=img&du=1&csync=71dcd657-b7ce-4e56-9064-0f83979f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.16	50147	104.254.148.251	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:05 UTC	891	OUT	GET /getuid?https://pbid.pro-market.net/engine?du=13;csync=$UID;mimetype=img HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pbid.pro-market.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; receive-cookie-deprecation=1; uuid2=7822940101119878936; icu=ChgIkPoyEAoYAiACKAIwjuO7rwY4AkACSAIQjuO7rwYYAQ..
2024-03-11 11:57:06 UTC	1446	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Mon, 11 Mar 2024 11:57:06 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://pbid.pro-market.net/engine?du=13;csync=7822940101119878936;mimetype=img AN-X-Request-Uuid: 54dbd8e8-7567-4e1d-b47c-ddc0ee6d9e95 Set-Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:06 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 27-Feb-2034 11:57:06 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=7822940101119878936; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:06 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.105.38; 154.16.105.38; 893.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.16	50154	52.9.62.96	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:06 UTC	434	OUT	GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:06 UTC	101	IN	HTTP/1.1 404 Not Found Date: Mon, 11 Mar 2024 11:57:06 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.16	50155	192.82.242.209	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:06 UTC	2478	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=55881087&p=162538&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; DPSync3=1711324800%3A201_262_261_260_259_263%7C1710201600%3A248%7C1710720000%3A265; pi=156557:3; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SyncRTB3=1711324800%3A54_250_55_71_220_21_13_104_166%7C1710720000%3A2_15_223; chkChromeAb67Sec=4; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; PugT=1710158213
2024-03-11 11:57:06 UTC	1000	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=5; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=162538:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1711324800%3A201_258_256_262_261_260_259_263%7C1710201600%3A248_255%7C1710720000%3A265%7C1711152000%3A257; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1710720000%3A223_15_2%7C1711324800%3A8_54_166_46_249_48_55_21_5_165_231_250_220_104_22_71_13_3%7C1710979200%3A63; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Mon, 11 Mar 2024 11:57:05 GMT Transfer-Encoding: chunked Connection: close
2024-03-11 11:57:06 UTC	2206	IN	Data Raw: 38 39 32 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 73 79 6e 63 68 72 6f 73 63 72 69 70 74 2e 64 65 6c 69 76 65 72 79 65 6e 67 69 6e 65 2e 61 64 73 77 69 7a 7a 2e 63 6f 6d 2f 73 79 6e 63 4d 65 3f 70 61 72 74 6e 65 72 44 6f 6d 61 69 6e 3d 6d 72 74 6e 73 76 72 2e 63 6f 6d 26 69 64 54 79 70 65 3d 63 6f 6f 6b 69 65 26 70 61 72 74 6e 65 72 55 73 65 72 49 64 3d 39 41 31 37 36 41 44 42 2d 37 33 46 34 2d 34 42 44 38 2d 41 36 34 38 2d 32 33 46 32 34 34 33 34 39 33 42 35 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 69 64 73 79 6e 63 2e 72 6c 63 64 6e Data Ascii: 892PubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.16	50156	107.178.240.89	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:06 UTC	1168	OUT	GET /engine?du=73&mimetype=img&csync=e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553 HTTP/1.1 Host: pbid.pro-market.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pbid.pro-market.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)"; anTRD=20141002%7C33.143572.999998..143572%7C53.143572.999998..143572%7C73.143572.999998..143572%7C13.143572.999998..143572%7C1.143572.999998..143572%7C89.143572.999998..143572%7C85.143572.999998..143572%7C24.143572.999998..143572; anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%23
2024-03-11 11:57:06 UTC	713	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" ANServer: gapp2 Set-Cookie: anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553"; Domain=.pro-market.net; Max-Age=15552000; Path=/; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 1 Jan 1990 0:0:0 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: image/gif Content-Length: 43 Date: Mon, 11 Mar 2024 11:57:06 GMT Via: 1.1 google Alt-Svc: clear Connection: close
2024-03-11 11:57:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.16	50157	107.178.240.89	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:06 UTC	1127	OUT	GET /engine?du=53&mimetype=img&google_error=15 HTTP/1.1 Host: pbid.pro-market.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pbid.pro-market.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)"; anTRD=20141002%7C33.143572.999998..143572%7C53.143572.999998..143572%7C73.143572.999998..143572%7C13.143572.999998..143572%7C1.143572.999998..143572%7C89.143572.999998..143572%7C85.143572.999998..143572%7C24.143572.999998..143572; anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%23
2024-03-11 11:57:06 UTC	721	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" ANServer: gapp2 Set-Cookie: anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553"; Domain=.pro-market.net; Max-Age=15552000; Path=/; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 1 Jan 1990 0:0:0 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: image/gif Content-Length: 43 Date: Mon, 11 Mar 2024 11:57:06 GMT Via: 1.1 google Alt-Svc: clear Connection: close
2024-03-11 11:57:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.16	50159	107.178.240.89	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:06 UTC	1174	OUT	GET /engine?site=161131&size=1x1&mimetype=img&du=1&csync=71dcd657-b7ce-4e56-9064-0f83979f8fcb HTTP/1.1 Host: pbid.pro-market.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pbid.pro-market.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)"; anTRD=20141002%7C33.143572.999998..143572%7C53.143572.999998..143572%7C73.143572.999998..143572%7C13.143572.999998..143572%7C1.143572.999998..143572%7C89.143572.999998..143572%7C85.143572.999998..143572%7C24.143572.999998..143572; anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%23
2024-03-11 11:57:06 UTC	760	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" ANServer: gapp2 Set-Cookie: anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=1-71dcd657-b7ce-4e56-9064-0f83979f8fcb:53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553"; Domain=.pro-market.net; Max-Age=15552000; Path=/; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 1 Jan 1990 0:0:0 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: image/gif Content-Length: 43 Date: Mon, 11 Mar 2024 11:57:06 GMT Via: 1.1 google Alt-Svc: clear Connection: close
2024-03-11 11:57:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.16	50160	107.178.240.89	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:06 UTC	1137	OUT	GET /engine?du=13;csync=7822940101119878936;mimetype=img HTTP/1.1 Host: pbid.pro-market.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pbid.pro-market.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)"; anTRD=20141002%7C33.143572.999998..143572%7C53.143572.999998..143572%7C73.143572.999998..143572%7C13.143572.999998..143572%7C1.143572.999998..143572%7C89.143572.999998..143572%7C85.143572.999998..143572%7C24.143572.999998..143572; anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%23
2024-03-11 11:57:06 UTC	783	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" ANServer: gapp2 Set-Cookie: anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=1-71dcd657-b7ce-4e56-9064-0f83979f8fcb:13-7822940101119878936:53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553"; Domain=.pro-market.net; Max-Age=15552000; Path=/; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 1 Jan 1990 0:0:0 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: image/gif Content-Length: 43 Date: Mon, 11 Mar 2024 11:57:06 GMT Via: 1.1 google Alt-Svc: clear Connection: close
2024-03-11 11:57:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.16	50161	107.178.240.89	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:06 UTC	1151	OUT	GET /engine?du=24;csync=B6512778B5DA4E7C942E6E491CF4A04A;mimetype=img; HTTP/1.1 Host: pbid.pro-market.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pbid.pro-market.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)"; anTRD=20141002%7C33.143572.999998..143572%7C53.143572.999998..143572%7C73.143572.999998..143572%7C13.143572.999998..143572%7C1.143572.999998..143572%7C89.143572.999998..143572%7C85.143572.999998..143572%7C24.143572.999998..143572; anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%23
2024-03-11 11:57:06 UTC	819	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" ANServer: gapp2 Set-Cookie: anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=1-71dcd657-b7ce-4e56-9064-0f83979f8fcb:13-7822940101119878936:24-B6512778B5DA4E7C942E6E491CF4A04A:53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553"; Domain=.pro-market.net; Max-Age=15552000; Path=/; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 1 Jan 1990 0:0:0 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: image/gif Content-Length: 43 Date: Mon, 11 Mar 2024 11:57:06 GMT Via: 1.1 google Alt-Svc: clear Connection: close
2024-03-11 11:57:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.16	50162	107.178.240.89	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:06 UTC	1263	OUT	GET /engine?site=143572;mimetype=img;ddar;rn=257546669;mds=0-5 HTTP/1.1 Host: pbid.pro-market.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pbid.pro-market.net/engine?site=143572;size=1x1;e=0;dt=0;category=twljteyw08d;kw=gqe5%20od1%20enrf%20135uc%20mgbff139vr;rnd=(1710158223957) Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)"; anTRD=20141002%7C33.143572.999998..143572%7C53.143572.999998..143572%7C73.143572.999998..143572%7C13.143572.999998..143572%7C1.143572.999998..143572%7C89.143572.999998..143572%7C85.143572.999998..143572%7C24.143572.999998..143572; anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%23
2024-03-11 11:57:07 UTC	909	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" ANServer: gapp2 Set-Cookie: anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=1-71dcd657-b7ce-4e56-9064-0f83979f8fcb:13-7822940101119878936:24-B6512778B5DA4E7C942E6E491CF4A04A:53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553"; Domain=.pro-market.net; Max-Age=15552000; Path=/; Secure; SameSite=None; Set-Cookie: anTRD="x"; Domain=.pro-market.net; Max-Age=0; Path=/; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 1 Jan 1990 0:0:0 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: image/gif Content-Length: 43 Date: Mon, 11 Mar 2024 11:57:06 GMT Via: 1.1 google Alt-Svc: clear Connection: close
2024-03-11 11:57:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.16	50163	3.163.125.99	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:06 UTC	745	OUT	GET /profiles_engine/ProfilesEngineServlet?at=20&dpi=3&pcid=-2533411667653603979&ckls=true&ci=qrjjuwiCKK&nc=false&trid=1376010420 HTTP/1.1 Host: sync1.intentiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pbid.pro-market.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: intentIQ=qrjjuwiCKK; IQver=1.9
2024-03-11 11:57:07 UTC	1452	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Date: Mon, 11 Mar 2024 11:57:07 GMT Set-Cookie: IQPData=2584766758#1710158227008#0#1710158227008; Domain=.intentiq.com; Expires=Wed, 11 Mar 2026 11:57:07 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Wed, 11 Mar 2026 11:57:07 GMT; Path=/; Secure; SameSite=None Set-Cookie: intentIQCDate=1710158227010; Domain=.intentiq.com; Expires=Wed, 11 Mar 2026 11:57:07 GMT; Path=/; Secure; SameSite=None Set-Cookie: ASDT=0; Domain=.intentiq.com; Expires=Wed, 11 Mar 2026 11:57:07 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQPending=pending; Domain=.intentiq.com; Expires=Wed, 11 Mar 2026 11:57:07 GMT; Path=/; Secure; SameSite=None Set-Cookie: intentIQ=qrjjuwiCKK; Domain=.intentiq.com; Expires=Wed, 11 Mar 2026 11:57:07 GMT; Path=/; Secure; SameSite=None Set-Cookie: CSDT=UEQ6Ml8wJlU2aUhkWnI; Domain=.intentiq.com; Expires=Wed, 11 Mar 2026 11:57:07 GMT; Path=/; Secure; SameSite=None Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Cache: Miss from cloudfront Via: 1.1 04cea2531f88aa1497e1358060c764c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX54-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 46lyZsqyEgCZLEeQ2UKMTC1XteubYB2oDMdQBDtolBFceuKsQZsb7Q==
2024-03-11 11:57:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.16	50164	35.244.154.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:06 UTC	454	OUT	GET /400646.gif?partner_uid=-2533411667653603979 HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=4k01LoRgMc1aOOm42RcYUFYmzAEAL4KXC73Hrxo9kEM=; pxrc=CAA=
2024-03-11 11:57:07 UTC	596	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=h4rvB4lZ2+1aOOm42RcYUFYmzAEAL4KXC73Hrxo9kEM=; Path=/; Domain=rlcdn.com; Expires=Tue, 11 Mar 2025 11:57:07 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Fri, 10 May 2024 11:57:07 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Mon, 11 Mar 2024 11:57:07 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:57:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.16	50165	104.254.148.252	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:07 UTC	1053	OUT	GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; receive-cookie-deprecation=1; uuid2=7822940101119878936; icu=ChgIkPoyEAoYAiACKAIwjuO7rwY4AkACSAIQjuO7rwYYAQ..
2024-03-11 11:57:07 UTC	1512	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Mon, 11 Mar 2024 11:57:07 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=7822940101119878936&gdpr=0&gdpr_consent= AN-X-Request-Uuid: d66153c0-7e5b-4308-999c-ef8eceaf533e Set-Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:07 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 27-Feb-2034 11:57:07 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=7822940101119878936; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:07 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.105.38; 154.16.105.38; 894.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.16	50168	35.166.28.193	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:07 UTC	901	OUT	GET /ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=rQpbF21I1RJEgU5; matchpubmatic=5
2024-03-11 11:57:07 UTC	773	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Mon, 11 Mar 2024 11:57:07 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:rQpbF21I1RJEgU5&gdpr=0&gdpr_consent= Pragma: no-cache Server: PingMatch/v2.0.30-801-g0076fb7#rel-ec2-master i-0667b1538ac47198a@us-west-2b@dxedge-app-us-west-2-prod-asg Set-Cookie: wfivefivec=rQpbF21I1RJEgU5; Domain=.w55c.net; Expires=Fri, 11 Apr 2025 11:57:07 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchpubmatic=5; Domain=.w55c.net; Expires=Wed, 10 Apr 2024 11:57:07 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.16	50171	107.178.240.89	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:07 UTC	1137	OUT	GET /engine?du=85&mimetype=img&csync=2407834391265652961 HTTP/1.1 Host: pbid.pro-market.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pbid.pro-market.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)"; anTRD=20141002%7C33.143572.999998..143572%7C53.143572.999998..143572%7C73.143572.999998..143572%7C13.143572.999998..143572%7C1.143572.999998..143572%7C89.143572.999998..143572%7C85.143572.999998..143572%7C24.143572.999998..143572; anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%23
2024-03-11 11:57:07 UTC	842	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" ANServer: gapp2 Set-Cookie: anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=1-71dcd657-b7ce-4e56-9064-0f83979f8fcb:13-7822940101119878936:24-B6512778B5DA4E7C942E6E491CF4A04A:53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553:85-2407834391265652961"; Domain=.pro-market.net; Max-Age=15552000; Path=/; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 1 Jan 1990 0:0:0 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: image/gif Content-Length: 43 Date: Mon, 11 Mar 2024 11:57:07 GMT Via: 1.1 google Alt-Svc: clear Connection: close
2024-03-11 11:57:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.16	50173	104.36.113.110	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:07 UTC	2720	OUT	GET /AdServer/ImgSync?p=156557&gdpr=0&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; PugT=1710158213; chkChromeAb67Sec=5; pi=162538:3; DPSync3=1711324800%3A201_258_256_262_261_260_259_263%7C1710201600%3A248_255%7C1710720000%3A265%7C1711152000%3A257; SyncRTB3=1710720000%3A223_15_2%7C1711324800%3A8_54_166_46_249_48_55_21_5_165_231_250_220_104_22_71_13_3%7C1710979200%3A63
2024-03-11 11:57:07 UTC	1180	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: https://creativecdn.com/cm-notify?pi=pubmatic&gdpr=0&gdpr_consent= P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: SyncRTB3=1711324800%3A55_5_165_231_104_8_48_21_166_249_220_22_3_54_46_250_266_71_13%7C1710720000%3A2_223_15%7C1710979200%3A63; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; domain=pubmatic.com; path=/; max-age=3; SameSite=None; secure; Set-Cookie: pi=156557:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=6; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Mon, 11 Mar 2024 11:57:05 GMT Content-Length: 97 Connection: close
2024-03-11 11:57:07 UTC	97	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 72 65 61 74 69 76 65 63 64 6e 2e 63 6f 6d 2f 63 6d 2d 6e 6f 74 69 66 79 3f 70 69 3d 70 75 62 6d 61 74 69 63 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://creativecdn.com/cm-notify?pi=pubmatic&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.16	50174	192.184.67.70	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:07 UTC	798	OUT	GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=65eef17d-816a8-799a4-641fc; d=EMUBEgGsK_ijCP_8EA
2024-03-11 11:57:07 UTC	494	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:57:07 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO Pragma: no-cache Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.16	50172	169.197.150.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:07 UTC	802	OUT	GET /usersync/141?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.deepintent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDIUSER=di_5eeffdf13c334a9c86516; CDIPARTNERS=%7B%221%22%3A%2220240311%22%7D
2024-03-11 11:57:07 UTC	702	IN	HTTP/1.1 303 See Other p3p: policyref='http://cdn.deepintent.com/p3p.xml', CP='NON CUR DEV TAI' location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzAmdGw9MTI5NjAw&piggybackCookie=di_5eeffdf13c334a9c86516 set-cookie: CDIUSER=di_5eeffdf13c334a9c86516; Max-Age=47260800; SameSite=None; Expires=Tue, 9 Sep 2025 11:57:07 GMT; Domain=deepintent.com; Secure; Path=/ set-cookie: CDIPARTNERS=%7B%221%22%3A%2220240311%22%2C%22141%22%3A%2220240311%22%7D; Max-Age=47260800; SameSite=None; Expires=Tue, 9 Sep 2025 11:57:07 GMT; Domain=deepintent.com; Secure; Path=/ content-type: image/gif content-length: 0 date: Mon, 11 Mar 2024 11:57:07 GMT server: a connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.16	50176	142.251.2.147	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:07 UTC	1026	OUT	GET /ads/measurement/l?ebcid=ALh7CaRqsTio6mbrvBleuubzYc1bNiqyA0NAKCpC8DN6WFHPzJk1ZpBPjXX5quQvIC7RpU0eEik_ftf9dxTJrU4Hc9vJGYyQgw HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://2e364cc7caa3f2e10b0fb666ab9496ef.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-03-11 11:57:07 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 11 Mar 2024 11:57:07 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.16	50177	35.244.154.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:07 UTC	727	OUT	GET /712188.gif?partner_uid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=4k01LoRgMc1aOOm42RcYUFYmzAEAL4KXC73Hrxo9kEM=; pxrc=CAA=
2024-03-11 11:57:07 UTC	743	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://pippio.com/api/sync?pid=5324&it=1&iv=3f4d01118e46a9c1da92273369e463cd275f659a1c1281b7f6700bb3da3c2691791426b5417dce21&_=2 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=h4rvB4lZ2+1aOOm42RcYUFYmzAEAL4KXC73Hrxo9kEM=; Path=/; Domain=rlcdn.com; Expires=Tue, 11 Mar 2025 11:57:07 GMT; Secure; SameSite=None Set-Cookie: pxrc=CJPju68GEgUI6EcQAA==; Path=/; Domain=rlcdn.com; Expires=Fri, 10 May 2024 11:57:07 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Mon, 11 Mar 2024 11:57:07 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.16	50179	34.111.113.62	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:07 UTC	789	OUT	GET /idsync/ex/receive?partner_id=3203&partner_device_id=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1710158204884; TapAd_DID=3d92896e-6439-4f25-b0dc-753e207e1323; TapAd_3WAY_SYNCS=1!1715
2024-03-11 11:57:07 UTC	1101	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:07 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1710158204884;Expires=Fri, 10 May 2024 11:57:07 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=3d92896e-6439-4f25-b0dc-753e207e1323;Expires=Fri, 10 May 2024 11:57:07 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!1715;Expires=Fri, 10 May 2024 11:57:07 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:57:07 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.16	50184	18.154.206.74	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:07 UTC	718	OUT	GET /syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1 Host: synchroscript.deliveryengine.adswizz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:07 UTC	312	IN	HTTP/1.1 200 OK Server: CloudFront Date: Mon, 11 Mar 2024 11:57:07 GMT Content-Length: 0 Connection: close X-Cache: Error from cloudfront Via: 1.1 cc5ee9362c1a190f2004ed17d0fdd242.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: Gyxt3tqDljJZl4sg-lRk4Ua9ZfXjg1Dj2su6B9PCm1N4jO-DvbI8_Q==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.16	50191	107.178.240.89	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:07 UTC	1092	OUT	GET /engine?du=73&mimetype=img&csync=e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553 HTTP/1.1 Host: pbid.pro-market.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: anTRD=20141002%7C33.143572.999998..143572%7C53.143572.999998..143572%7C73.143572.999998..143572%7C13.143572.999998..143572%7C1.143572.999998..143572%7C89.143572.999998..143572%7C85.143572.999998..143572%7C24.143572.999998..143572; anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%23; anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=1-71dcd657-b7ce-4e56-9064-0f83979f8fcb:13-7822940101119878936:24-B6512778B5DA4E7C942E6E491CF4A04A:53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553"
2024-03-11 11:57:07 UTC	480	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" ANServer: gapp2 Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 1 Jan 1990 0:0:0 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: image/gif Content-Length: 43 Date: Mon, 11 Mar 2024 11:57:07 GMT Via: 1.1 google Alt-Svc: clear Connection: close
2024-03-11 11:57:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.16	50187	38.99.107.14	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:07 UTC	604	OUT	GET /sn.ashx?&gdpr=0&gdpr_consent= HTTP/1.1 Host: pmp.mxptint.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:07 UTC	718	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R4E330_11235B51F_E079381&r=https://pmp.mxptint.net/sn.ashx?ak=1 P3P: CP="NON CUR ADM DEVo PSAo PSDo OUR IND UNI COM NAV DEM STA PRE" P3P: CP="NON CUR ADM DEVo PSAo PSDo OUR IND UNI COM NAV DEM STA PRE" Set-Cookie: mxpim=R4E330_11235B51F_E079381.1.000000000000000065EEF193; domain=mxptint.net; expires=Wed, 11-Mar-2026 11:57:07 GMT; path=/; secure; SameSite=None Date: Mon, 11 Mar 2024 11:57:07 GMT Connection: close Content-Length: 301 Strict-Transport-Security: max-age=-393163027; includeSubDomains
2024-03-11 11:57:07 UTC	301	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 71 63 7a 30 78 4a 6d 4e 76 5a 47 55 39 4d 6a 63 30 4e 43 5a 30 62 44 30 78 4e 54 63 32 4f 44 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 52 34 45 33 33 30 5f 31 31 32 33 35 42 35 31 46 5f 45 30 37 39 33 38 31 26 61 6d 70 3b 72 3d 68 74 74 70 73 3a 2f 2f 70 6d 70 2e 6d 78 70 74 69 6e 74 2e 6e 65 74 2f Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R4E330_11235B51F_E079381&r=https://pmp.mxptint.net/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.16	50189	107.178.240.89	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:07 UTC	1051	OUT	GET /engine?du=53&mimetype=img&google_error=15 HTTP/1.1 Host: pbid.pro-market.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: anTRD=20141002%7C33.143572.999998..143572%7C53.143572.999998..143572%7C73.143572.999998..143572%7C13.143572.999998..143572%7C1.143572.999998..143572%7C89.143572.999998..143572%7C85.143572.999998..143572%7C24.143572.999998..143572; anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%23; anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=1-71dcd657-b7ce-4e56-9064-0f83979f8fcb:13-7822940101119878936:24-B6512778B5DA4E7C942E6E491CF4A04A:53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553"
2024-03-11 11:57:07 UTC	480	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" ANServer: gapp2 Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 1 Jan 1990 0:0:0 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: image/gif Content-Length: 43 Date: Mon, 11 Mar 2024 11:57:07 GMT Via: 1.1 google Alt-Svc: clear Connection: close
2024-03-11 11:57:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.16	50188	107.178.240.89	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:07 UTC	1098	OUT	GET /engine?site=161131&size=1x1&mimetype=img&du=1&csync=71dcd657-b7ce-4e56-9064-0f83979f8fcb HTTP/1.1 Host: pbid.pro-market.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: anTRD=20141002%7C33.143572.999998..143572%7C53.143572.999998..143572%7C73.143572.999998..143572%7C13.143572.999998..143572%7C1.143572.999998..143572%7C89.143572.999998..143572%7C85.143572.999998..143572%7C24.143572.999998..143572; anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%23; anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=1-71dcd657-b7ce-4e56-9064-0f83979f8fcb:13-7822940101119878936:24-B6512778B5DA4E7C942E6E491CF4A04A:53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553"
2024-03-11 11:57:08 UTC	480	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" ANServer: gapp2 Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 1 Jan 1990 0:0:0 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: image/gif Content-Length: 43 Date: Mon, 11 Mar 2024 11:57:07 GMT Via: 1.1 google Alt-Svc: clear Connection: close
2024-03-11 11:57:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.16	50190	107.178.240.89	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:07 UTC	1061	OUT	GET /engine?du=13;csync=7822940101119878936;mimetype=img HTTP/1.1 Host: pbid.pro-market.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: anTRD=20141002%7C33.143572.999998..143572%7C53.143572.999998..143572%7C73.143572.999998..143572%7C13.143572.999998..143572%7C1.143572.999998..143572%7C89.143572.999998..143572%7C85.143572.999998..143572%7C24.143572.999998..143572; anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%23; anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=1-71dcd657-b7ce-4e56-9064-0f83979f8fcb:13-7822940101119878936:24-B6512778B5DA4E7C942E6E491CF4A04A:53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553"
2024-03-11 11:57:07 UTC	480	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" ANServer: gapp2 Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 1 Jan 1990 0:0:0 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: image/gif Content-Length: 43 Date: Mon, 11 Mar 2024 11:57:07 GMT Via: 1.1 google Alt-Svc: clear Connection: close
2024-03-11 11:57:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.16	50186	93.184.216.16	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:07 UTC	546	OUT	GET /diff/js/modules/cmp.js HTTP/1.1 Host: ced-ns.sascdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:07 UTC	353	IN	HTTP/1.1 200 OK Age: 38961 Cache-Control: max-age=86400 Content-Type: application/x-javascript Date: Mon, 11 Mar 2024 11:57:07 GMT Etag: "c7fd4195b568021979df433d733bf4a9:1707728236.404528+ident" Last-Modified: Mon, 12 Feb 2024 08:56:24 GMT Server: ECS (laa/7BF8) Vary: Accept-Encoding X-Cache: HIT Content-Length: 10186 Connection: close
2024-03-11 11:57:07 UTC	10186	IN	Data Raw: 76 61 72 20 73 61 73 3d 77 69 6e 64 6f 77 2e 73 61 73 7c 7c 7b 7d 3b 73 61 73 2e 75 74 69 6c 73 3d 73 61 73 2e 75 74 69 6c 73 7c 7c 7b 7d 2c 73 61 73 2e 65 76 65 6e 74 73 3d 73 61 73 2e 65 76 65 6e 74 73 7c 7c 7b 7d 2c 73 61 73 2e 63 6d 70 3d 73 61 73 2e 63 6d 70 7c 7c 7b 7d 2c 73 61 73 2e 63 6f 6e 73 65 6e 74 3d 73 61 73 2e 63 6f 6e 73 65 6e 74 7c 7c 7b 7d 2c 73 61 73 2e 64 65 62 75 67 4d 6f 64 65 3d 73 61 73 2e 64 65 62 75 67 4d 6f 64 65 7c 7c 7b 7d 2c 73 61 73 2e 64 65 62 75 67 4d 6f 64 65 2e 6c 6f 67 73 51 75 65 75 65 3d 73 61 73 2e 64 65 62 75 67 4d 6f 64 65 2e 6c 6f 67 73 51 75 65 75 65 7c 7c 5b 5d 2c 73 61 73 2e 64 65 62 75 67 4d 6f 64 65 2e 62 61 6e 6e 65 72 73 51 75 65 75 65 3d 73 61 73 2e 64 65 62 75 67 4d 6f 64 65 2e 62 61 6e 6e 65 72 73 51 75 Data Ascii: var sas=window.sas\|\|{};sas.utils=sas.utils\|\|{},sas.events=sas.events\|\|{},sas.cmp=sas.cmp\|\|{},sas.consent=sas.consent\|\|{},sas.debugMode=sas.debugMode\|\|{},sas.debugMode.logsQueue=sas.debugMode.logsQueue\|\|[],sas.debugMode.bannersQueue=sas.debugMode.bannersQu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.16	50193	107.178.240.89	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:07 UTC	1075	OUT	GET /engine?du=24;csync=B6512778B5DA4E7C942E6E491CF4A04A;mimetype=img; HTTP/1.1 Host: pbid.pro-market.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: anTRD=20141002%7C33.143572.999998..143572%7C53.143572.999998..143572%7C73.143572.999998..143572%7C13.143572.999998..143572%7C1.143572.999998..143572%7C89.143572.999998..143572%7C85.143572.999998..143572%7C24.143572.999998..143572; anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%23; anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=1-71dcd657-b7ce-4e56-9064-0f83979f8fcb:13-7822940101119878936:24-B6512778B5DA4E7C942E6E491CF4A04A:53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553"
2024-03-11 11:57:08 UTC	480	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" ANServer: gapp2 Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 1 Jan 1990 0:0:0 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: image/gif Content-Length: 43 Date: Mon, 11 Mar 2024 11:57:07 GMT Via: 1.1 google Alt-Svc: clear Connection: close
2024-03-11 11:57:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.16	50192	107.178.240.89	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:07 UTC	836	OUT	GET /engine?site=143572;mimetype=img;ddar;rn=257546669;mds=0-5 HTTP/1.1 Host: pbid.pro-market.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%23; anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=1-71dcd657-b7ce-4e56-9064-0f83979f8fcb:13-7822940101119878936:24-B6512778B5DA4E7C942E6E491CF4A04A:53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553"
2024-03-11 11:57:08 UTC	842	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" ANServer: gapp2 Set-Cookie: anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=1-71dcd657-b7ce-4e56-9064-0f83979f8fcb:13-7822940101119878936:24-B6512778B5DA4E7C942E6E491CF4A04A:53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553:85-2407834391265652961"; Domain=.pro-market.net; Max-Age=15552000; Path=/; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 1 Jan 1990 0:0:0 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: image/gif Content-Length: 43 Date: Mon, 11 Mar 2024 11:57:07 GMT Via: 1.1 google Alt-Svc: clear Connection: close
2024-03-11 11:57:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.16	50194	3.163.125.99	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:07 UTC	638	OUT	GET /profiles_engine/ProfilesEngineServlet?at=20&dpi=3&pcid=-2533411667653603979&ckls=true&ci=qrjjuwiCKK&nc=false&trid=1376010420 HTTP/1.1 Host: sync1.intentiq.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: intentIQ=qrjjuwiCKK; IQver=1.9; IQPData=2584766758#1710158227008#0#1710158227008; intentIQCDate=1710158227010; ASDT=0; IQPending=pending; CSDT=UEQ6Ml8wJlU2aUhkWnI
2024-03-11 11:57:08 UTC	675	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Date: Mon, 11 Mar 2024 11:57:07 GMT Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Wed, 11 Mar 2026 11:57:07 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Cache: Miss from cloudfront Via: 1.1 0bbf912a3f16f6a62fd4dbef8771ad4c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX54-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: kbeMass5I4eYSV_amxWUtWxEGoM3TmvQKNs9t8CQtjxHFaaFvu5SmQ==
2024-03-11 11:57:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.16	50195	104.36.113.107	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:07 UTC	2684	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=7822940101119878936&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; PugT=1710158213; chkChromeAb67Sec=5; pi=162538:3; DPSync3=1711324800%3A201_258_256_262_261_260_259_263%7C1710201600%3A248_255%7C1710720000%3A265%7C1711152000%3A257; SyncRTB3=1710720000%3A223_15_2%7C1711324800%3A8_54_166_46_249_48_55_21_5_165_231_250_220_104_22_71_13_3%7C1710979200%3A63
2024-03-11 11:57:08 UTC	614	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 11 Mar 2024 11:57:07 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 09-Jun-2024 11:57:07 GMT; path=/ Set-Cookie: PugT=1710158227; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:57:07 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:57:08 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.16	50185	52.8.161.245	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:07 UTC	659	OUT	GET /map/c=14701/tp=MTAI/tpid=9A176ADB-73F4-4BD8-A648-23F2443493B5/gdpr=0/gdpr_consent= HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:07 UTC	459	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:57:07 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.41.29.208 Set-Cookie: _cc_cc=ctst;Path=/;Domain=crwdcntrl.net;SameSite=None;Secure Location: https://bcp.crwdcntrl.net/map/ct=y/c=14701/tp=MTAI/tpid=9A176ADB-73F4-4BD8-A648-23F2443493B5/gdpr=0/gdpr_consent= Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.16	50183	35.212.133.238	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:07 UTC	728	OUT	GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:07 UTC	781	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:57:07 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://x.bidswitch.net/ul_cb/sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= Set-Cookie: tuuid=6ec76371-3031-4b49-abb3-349fb3d7cf23; path=/; expires=Tue, 11-Mar-2025 11:57:07 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1710158227; path=/; expires=Tue, 11-Mar-2025 11:57:07 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1710158227; path=/; expires=Tue, 11-Mar-2025 11:57:07 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1710158227; path=/; expires=Tue, 11-Mar-2025 11:57:07 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.16	50197	204.237.133.120	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:07 UTC	2662	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=1973209972465453479 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; PugT=1710158213; chkChromeAb67Sec=5; pi=162538:3; DPSync3=1711324800%3A201_258_256_262_261_260_259_263%7C1710201600%3A248_255%7C1710720000%3A265%7C1711152000%3A257; SyncRTB3=1710720000%3A223_15_2%7C1711324800%3A8_54_166_46_249_48_55_21_5_165_231_250_220_104_22_71_13_3%7C1710979200%3A63
2024-03-11 11:57:08 UTC	583	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 11 Mar 2024 11:57:08 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_18=22947-1973209972465453479; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 09-Jun-2024 11:57:08 GMT; path=/ Set-Cookie: PugT=1710158228; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:57:08 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:57:08 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.16	50198	74.214.196.131	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:07 UTC	813	OUT	GET /bh/rtset?pid=558357&ev=1&rurl=https%3a%2f%2fmatch.sharethrough.com/sync/v1?source_id=790d3e0174b12a86f1cbebf4&source_user_id=%%VGUID%% HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pb_rtb_ev=3-1q66\|7dN.0.AAKPDU7L3eMAABWFZYx_mg; V=3ftvG5anVWUA; INGRESSCOOKIE=c74e8523d665f622
2024-03-11 11:57:08 UTC	953	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-98c7f4b5-rbg4l Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: V=3ftvG5anVWUA;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Thu, 06-Mar-2025 11:57:08 GMT;Max-Age=31104000;SameSite=None Set-Cookie: pb_rtb_ev=3-1q66\|7bs.0.1\|7dN.0.AAKPDU7L3eMAABWFZYx_mg;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Tue, 11-Mar-2025 11:57:08 GMT;Max-Age=31536000;SameSite=None Location: https://match.sharethrough.com/sync/v1?source_id=790d3e0174b12a86f1cbebf4&ev=1&source_user_id=3ftvG5anVWUA&pid=558357 Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.16	50200	15.197.193.217	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:08 UTC	883	OUT	GET /track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFEhQKBXRhcGFkEgsIqK7DwIvz4DwQBRIbCgxzaGFyZXRocm91Z2gSCwjWjMfSi_PgPBAFEhYKB2QwdHJvMWoSCwj-h-Hhi_PgPBAFGAEgASgCMgsIgODmqKPz4DwQBTgBWgc5aHI0cDhnYAI.
2024-03-11 11:57:08 UTC	717	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:57:08 GMT Content-Length: 323 Connection: close server: Kestrel location: https://match.sharethrough.com/sync/v1?source_id=5b286190338513af73f09c28&source_user_id=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent= set-cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; expires=Tue, 11 Mar 2025 11:57:08 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFEhQKBXRhcGFkEgsIqK7DwIvz4DwQBRIbCgxzaGFyZXRocm91Z2gSCwiktNqPjfPgPBAFEhYKB2QwdHJvMWoSCwj-h-Hhi_PgPBAFGAEgASgCMgsIxKndvKPz4DwQBTgBWgxzaGFyZXRocm91Z2hgAg..; expires=Tue, 11 Mar 2025 11:57:08 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-11 11:57:08 UTC	323	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 2f 73 79 6e 63 2f 76 31 3f 73 6f 75 72 63 65 5f 69 64 3d 35 62 32 38 36 31 39 30 33 33 38 35 31 33 61 66 37 33 66 30 39 63 32 38 26 73 6f 75 72 63 65 5f 75 73 65 72 5f 69 64 3d 37 31 64 63 64 36 35 37 2d 62 37 63 65 2d 34 65 35 36 2d 39 30 36 34 2d 30 66 38 33 39 37 39 66 38 66 63 62 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 2f 73 79 6e 63 2f 76 31 3f 73 6f 75 72 63 65 5f 69 64 3d 35 62 32 38 36 31 39 30 33 33 38 35 31 33 61 66 37 33 66 30 39 63 32 38 26 73 6f 75 72 63 65 5f 75 Data Ascii: Redirecting to: <a href="https://match.sharethrough.com/sync/v1?source_id=5b286190338513af73f09c28&source_user_id=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent=">https://match.sharethrough.com/sync/v1?source_id=5b286190338513af73f09c28&source_u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.16	50208	104.36.113.107	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:08 UTC	2684	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:rQpbF21I1RJEgU5&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; PugT=1710158213; chkChromeAb67Sec=5; pi=162538:3; DPSync3=1711324800%3A201_258_256_262_261_260_259_263%7C1710201600%3A248_255%7C1710720000%3A265%7C1711152000%3A257; SyncRTB3=1710720000%3A223_15_2%7C1711324800%3A8_54_166_46_249_48_55_21_5_165_231_250_220_104_22_71_13_3%7C1710979200%3A63
2024-03-11 11:57:08 UTC	614	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 11 Mar 2024 11:57:07 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 09-Jun-2024 11:57:07 GMT; path=/ Set-Cookie: PugT=1710158227; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:57:07 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:57:08 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.16	50201	142.250.141.156	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:08 UTC	1095	OUT	GET /xbbe/pixel?d=CI2VFxDq2JIBGNGSv6IBMAE&v=APEucNWR6j7Zdo_ZWHJ1BAEVA_bD2i-y6soHEJkg2uUZkLhy8PuOAjjkq5YKWSti2AeaGMblvOf8Jhitztycsp1WAo5UjRXfCQ HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://2e364cc7caa3f2e10b0fb666ab9496ef.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlhWjE-nrLMqamcKd4HCzJGyk-lF6Y-_gdSV1_rcQ-Lc3JBzMSF3zk6wICTe0A; test_cookie=CheckForPermission; DSID=NO_DATA
2024-03-11 11:57:08 UTC	731	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 11 Mar 2024 11:57:08 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Mon, 11 Mar 2024 11:57:08 GMT Connection: close Transfer-Encoding: chunked
2024-03-11 11:57:08 UTC	521	IN	Data Raw: 32 37 30 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 63 61 73 61 6c 65 5f 6d 65 64 69 61 32 5f 64 73 70 5f 73 65 63 75 72 65 26 67 6f 6f 67 6c 65 5f 63 6d 26 67 6f 6f 67 6c 65 5f 64 62 6d 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 72 75 6d 3f 69 78 69 3d 30 26 63 6d 5f 64 73 70 5f 69 64 3d 38 35 26 63 62 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 Data Ascii: 270<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm" style="display:none;"/><img src="https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclic
2024-03-11 11:57:08 UTC	110	IN	Data Raw: 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 61 70 70 6e 65 78 75 73 26 67 6f 6f 67 6c 65 5f 68 6d 3d 24 7b 42 41 53 45 36 34 5f 55 49 44 5f 45 4e 43 7d 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 2f 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC}" style="display:none;"/></body></html>
2024-03-11 11:57:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.16	50210	204.237.133.120	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:08 UTC	2918	OUT	GET /AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; PugT=1710158213; DPSync3=1711324800%3A201_258_256_262_261_260_259_263%7C1710201600%3A248_255%7C1710720000%3A265%7C1711152000%3A257; SyncRTB3=1711324800%3A55_5_165_231_104_8_48_21_166_249_220_22_3_54_46_250_266_71_13%7C1710720000%3A2_223_15%7C1710979200%3A63; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; chkChromeAb67Sec=6
2024-03-11 11:57:08 UTC	845	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:57:08 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 09-Jun-2024 11:57:08 GMT; path=/ Set-Cookie: PugT=1710158228; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:57:08 GMT; path=/ Location: https://image8.pubmatic.com/AdServer/ImgSync?gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:57:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.16	50211	142.251.2.148	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:08 UTC	689	OUT	GET /879366/express_html_inpage_rendering_lib_200_278.js HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://2e364cc7caa3f2e10b0fb666ab9496ef.safeframe.googlesyndication.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://2e364cc7caa3f2e10b0fb666ab9496ef.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:08 UTC	771	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 113329 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 11 Mar 2024 11:57:08 GMT Expires: Tue, 12 Mar 2024 11:57:08 GMT Cache-Control: public, max-age=86400 Last-Modified: Tue, 14 Mar 2023 18:44:05 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:57:08 UTC	481	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 68 2c 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 63 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 Data Ascii: (function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var h,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.define
2024-03-11 11:57:08 UTC	1252	IN	Data Raw: 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 0a 7d 2c 65 61 3d 64 61 28 74 68 69 73 29 2c 66 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 65 61 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 Data Ascii: t"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ea=da(this),fa=function(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))br
2024-03-11 11:57:08 UTC	1252	IN	Data Raw: 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 2c 6a 61 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 29 6a 61 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 65 6c 73 65 7b 76 61 72 20 6d 61 3b 61 3a 7b 76 61 72 20 6e 61 3d 7b 61 3a 21 30 7d 2c 6f 61 3d 7b 7d 3b 74 72 79 7b 6f 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6e 61 3b 6d 61 3d 6f 61 2e 61 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 6d 61 3d 21 31 7d 6a 61 3d 6d 61 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f Data Ascii: bject.create:function(a){var b=function(){};b.prototype=a;return new b},ja;if("function"==typeof Object.setPrototypeOf)ja=Object.setPrototypeOf;else{var ma;a:{var na={a:!0},oa={};try{oa.__proto__=na;ma=oa.a;break a}catch(a){}ma=!1}ja=ma?function(a,b){a.__
2024-03-11 11:57:08 UTC	1252	IN	Data Raw: 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 62 3d 62 5b 61 5b 63 5d 5d 2c 6e 75 6c 6c 3d 3d 62 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 7d 2c 72 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 62 26 26 6e 75 6c 6c 21 3d 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 62 7d 2c 73 61 3d 22 63 6c 6f 73 75 72 65 5f 75 69 64 5f 22 2b 28 31 45 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3e 3e 3e 30 29 2c 75 61 3d 30 2c 76 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 61 2e 62 69 6e 64 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 77 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c Data Ascii: =0;c<a.length;c++)if(b=b[a[c]],null==b)return null;return b},ra=function(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b},sa="closure_uid_"+(1E9*Math.random()>>>0),ua=0,va=function(a,b,c){return a.call.apply(a.bind,arguments)},wa=function(a,b,
2024-03-11 11:57:08 UTC	1252	IN	Data Raw: 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 67 5b 6b 2d 32 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6b 5d 3b 72 65 74 75 72 6e 20 62 2e 70 72 6f 74 6f 74 79 70 65 5b 65 5d 2e 61 70 70 6c 79 28 64 2c 67 29 7d 7d 2c 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 41 28 61 2c 62 29 7b 69 66 28 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 41 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 76 6f 69 64 20 30 21 3d 3d 62 26 26 28 74 68 69 73 Data Ascii: .length;k++)g[k-2]=arguments[k];return b.prototype[e].apply(d,g)}},za=function(a){return a};function A(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,A);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));void 0!==b&&(this
2024-03-11 11:57:08 UTC	1252	IN	Data Raw: 64 2a 29 28 5c 44 2a 29 28 2e 2a 29 2f 2e 65 78 65 63 28 67 29 7c 7c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 5d 3b 69 66 28 30 3d 3d 66 5b 30 5d 2e 6c 65 6e 67 74 68 26 26 30 3d 3d 67 5b 30 5d 2e 6c 65 6e 67 74 68 29 62 72 65 61 6b 3b 63 3d 4f 61 28 30 3d 3d 66 5b 31 5d 2e 6c 65 6e 67 74 68 3f 30 3a 70 61 72 73 65 49 6e 74 28 66 5b 31 5d 2c 31 30 29 2c 30 3d 3d 67 5b 31 5d 2e 6c 65 6e 67 74 68 3f 30 3a 70 61 72 73 65 49 6e 74 28 67 5b 31 5d 2c 31 30 29 29 7c 7c 4f 61 28 30 3d 3d 66 5b 32 5d 2e 6c 65 6e 67 74 68 2c 30 3d 3d 67 5b 32 5d 2e 6c 65 6e 67 74 68 29 7c 7c 4f 61 28 66 5b 32 5d 2c 67 5b 32 5d 29 3b 66 3d 66 5b 33 5d 3b 67 3d 67 5b 33 5d 7d 77 68 69 6c 65 28 30 3d 3d 63 29 7d 72 65 74 75 72 6e 20 63 7d 2c 4f 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 Data Ascii: d)(\D)(.*)/.exec(g)\|\|["","","",""];if(0==f[0].length&&0==g[0].length)break;c=Oa(0==f[1].length?0:parseInt(f[1],10),0==g[1].length?0:parseInt(g[1],10))\|\|Oa(0==f[2].length,0==g[2].length)\|\|Oa(f[2],g[2]);f=f[3];g=g[3]}while(0==c)}return c},Oa=function(a,b)
2024-03-11 11:57:08 UTC	1252	IN	Data Raw: 66 6f 72 28 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 2c 64 3d 5b 5d 2c 65 3d 30 2c 66 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 67 3d 30 3b 67 3c 63 3b 67 2b 2b 29 69 66 28 67 20 69 6e 20 66 29 7b 76 61 72 20 6b 3d 66 5b 67 5d 3b 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 6b 2c 67 2c 61 29 26 26 28 64 5b 65 2b 2b 5d 3d 6b 29 7d 72 65 74 75 72 6e 20 64 7d 2c 67 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 2c 64 3d 41 72 72 61 79 28 63 29 2c 65 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 0a 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 66 3d 30 3b 66 3c 63 3b 66 2b 2b 29 66 20 69 6e 20 65 26 26 28 64 5b 66 5d 3d 62 2e 63 61 Data Ascii: for(var c=a.length,d=[],e=0,f="string"===typeof a?a.split(""):a,g=0;g<c;g++)if(g in f){var k=f[g];b.call(void 0,k,g,a)&&(d[e++]=k)}return d},gb=function(a,b){for(var c=a.length,d=Array(c),e="string"===typeof a?a.split(""):a,f=0;f<c;f++)f in e&&(d[f]=b.ca
2024-03-11 11:57:08 UTC	1252	IN	Data Raw: 3d 43 28 22 45 64 67 65 22 29 2c 76 62 3d 43 28 22 47 65 63 6b 6f 22 29 26 26 21 28 2d 31 21 3d 55 61 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 77 65 62 6b 69 74 22 29 26 26 21 43 28 22 45 64 67 65 22 29 29 26 26 21 28 43 28 22 54 72 69 64 65 6e 74 22 29 7c 7c 43 28 22 4d 53 49 45 22 29 29 26 26 21 43 28 22 45 64 67 65 22 29 2c 77 62 3d 2d 31 21 3d 55 61 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 77 65 62 6b 69 74 22 29 26 26 21 43 28 22 45 64 67 65 22 29 2c 78 62 3d 51 61 26 26 56 61 26 26 56 61 2e 70 6c 61 74 66 6f 72 6d 3f 22 41 6e 64 72 6f 69 64 22 3d 3d 3d 56 61 2e 70 6c 61 74 66 6f 72 6d 3a 43 28 22 41 6e 64 72 6f 69 64 22 29 2c 79 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 Data Ascii: =C("Edge"),vb=C("Gecko")&&!(-1!=Ua().toLowerCase().indexOf("webkit")&&!C("Edge"))&&!(C("Trident")\|\|C("MSIE"))&&!C("Edge"),wb=-1!=Ua().toLowerCase().indexOf("webkit")&&!C("Edge"),xb=Qa&&Va&&Va.platform?"Android"===Va.platform:C("Android"),yb=function(){var
2024-03-11 11:57:08 UTC	1252	IN	Data Raw: 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 28 29 3f 53 79 6d 62 6f 6c 28 29 3a 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 58 62 28 61 29 7b 76 61 72 20 62 3b 57 62 3f 62 3d 61 5b 57 62 5d 3a 62 3d 61 2e 6a 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 62 3f 30 3a 62 7d 66 75 6e 63 74 69 6f 6e 20 59 62 28 61 2c 62 29 7b 57 62 3f 61 5b 57 62 5d 3d 62 3a 76 6f 69 64 20 30 21 3d 3d 61 2e 6a 3f 61 2e 6a 3d 62 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 61 2c 7b 6a 3a 7b 76 61 6c 75 65 3a 62 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 7d 7d 29 3b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 5a 62 3d 7b 7d 3b 66 75 Data Ascii: l&&"symbol"===typeof Symbol()?Symbol():void 0;function Xb(a){var b;Wb?b=a[Wb]:b=a.j;return null==b?0:b}function Yb(a,b){Wb?a[Wb]=b:void 0!==a.j?a.j=b:Object.defineProperties(a,{j:{value:b,configurable:!0,writable:!0,enumerable:!1}});return a};var Zb={};fu
2024-03-11 11:57:08 UTC	1252	IN	Data Raw: 65 6e 67 74 68 3b 67 2b 2b 29 7b 76 61 72 20 6b 3d 66 5b 67 5d 3b 76 6f 69 64 20 30 3d 3d 3d 54 62 5b 6b 5d 26 26 28 54 62 5b 6b 5d 3d 67 29 7d 7d 7d 62 3d 4f 62 5b 62 5d 3b 63 3d 41 72 72 61 79 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 61 2e 6c 65 6e 67 74 68 2f 33 29 29 3b 64 3d 62 5b 36 34 5d 7c 7c 22 22 3b 66 6f 72 28 65 3d 66 3d 30 3b 66 3c 61 2e 6c 65 6e 67 74 68 2d 32 3b 66 2b 3d 33 29 7b 76 61 72 20 6e 3d 61 5b 66 5d 2c 72 3d 61 5b 66 2b 31 5d 3b 6b 3d 61 5b 66 2b 32 5d 3b 67 3d 62 5b 6e 3e 3e 32 5d 3b 6e 3d 62 5b 28 6e 26 33 29 3c 3c 34 7c 72 3e 3e 34 5d 3b 72 3d 62 5b 28 72 26 31 35 29 3c 3c 32 7c 6b 3e 3e 36 5d 3b 6b 3d 62 5b 6b 26 36 33 5d 3b 63 5b 65 2b 2b 5d 3d 22 22 2b 67 2b 6e 2b 72 2b 6b 7d 67 3d 30 3b 6b 3d 64 3b 73 77 69 74 63 68 28 61 2e 6c Data Ascii: ength;g++){var k=f[g];void 0===Tb[k]&&(Tb[k]=g)}}}b=Ob[b];c=Array(Math.floor(a.length/3));d=b[64]\|\|"";for(e=f=0;f<a.length-2;f+=3){var n=a[f],r=a[f+1];k=a[f+2];g=b[n>>2];n=b[(n&3)<<4\|r>>4];r=b[(r&15)<<2\|k>>6];k=b[k&63];c[e++]=""+g+n+r+k}g=0;k=d;switch(a.l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.16	50223	107.178.254.65	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:08 UTC	680	OUT	GET /api/sync?pid=5324&it=1&iv=3f4d01118e46a9c1da92273369e463cd275f659a1c1281b7f6700bb3da3c2691791426b5417dce21&_=2 HTTP/1.1 Host: pippio.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:08 UTC	959	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://px.ads.linkedin.com/db_sync?pid=10339&puuid=3f4d01118e46a9c1da92273369e463cd275f659a1c1281b7f6700bb3da3c2691791426b5417dce21&rand=05917268 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: did=WBUvwB4CJXuSE8ru; Path=/; Domain=pippio.com; Expires=Tue, 11 Mar 2025 11:57:08 GMT; Secure; SameSite=None Set-Cookie: didts=1710158228; Path=/; Domain=pippio.com; Expires=Tue, 11 Mar 2025 11:57:08 GMT; Secure; SameSite=None Set-Cookie: nnls=; Path=/; Domain=pippio.com; Expires=Fri, 10 May 2024 11:57:08 GMT; Secure; SameSite=None Set-Cookie: pxrc=CJTju68GEgYIgr0rEAA=; Path=/; Domain=pippio.com; Expires=Fri, 10 May 2024 11:57:08 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Mon, 11 Mar 2024 11:57:08 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.16	50209	184.28.98.113	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:08 UTC	640	OUT	GET /cksync.php?cs=1&type=58280&ovsid=b6baf5b6-3516-4c46-a708-53e0ec193a37 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:08 UTC	904	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: visitor-id=3531598286675836000V10; Expires=Sat, 07 Sep 2024 11:57:08 GMT; domain=.hb.yahoo.net; Path=/; sameSite=none; secure=true Set-Cookie: data-sht=b6baf5b6-3516-4c46-a708-53e0ec193a37~~1;Expires=Sat, 07 Sep 2024 11:57:08 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Mon, 11 Mar 2024 11:57:08 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 11 Mar 2024 11:57:08 GMT Connection: close
2024-03-11 11:57:08 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-11 11:57:08 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.16	50221	34.111.113.62	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:08 UTC	553	OUT	GET /idsync/ex/receive?partner_id=3203&partner_device_id=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1710158204884; TapAd_DID=3d92896e-6439-4f25-b0dc-753e207e1323; TapAd_3WAY_SYNCS=1!1715
2024-03-11 11:57:08 UTC	1101	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:08 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1710158204884;Expires=Fri, 10 May 2024 11:57:08 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=3d92896e-6439-4f25-b0dc-753e207e1323;Expires=Fri, 10 May 2024 11:57:08 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!1715;Expires=Fri, 10 May 2024 11:57:08 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:57:08 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.16	50217	142.251.2.147	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:08 UTC	1026	OUT	GET /ads/measurement/l?ebcid=ALh7CaRTwsiJVQZ4bDDtRcB7kq4pFrSNQL8wOFRR0TqwbGaAazPAGtmNiZyNuS7PhZw8XVNHaB0cYHuoU6whI1TJA9W6PSo0gA HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://2e364cc7caa3f2e10b0fb666ab9496ef.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-03-11 11:57:08 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 11 Mar 2024 11:57:08 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.16	50229	107.178.240.89	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:08 UTC	853	OUT	GET /engine?du=85&mimetype=img&csync=2407834391265652961 HTTP/1.1 Host: pbid.pro-market.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%23; anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=1-71dcd657-b7ce-4e56-9064-0f83979f8fcb:13-7822940101119878936:24-B6512778B5DA4E7C942E6E491CF4A04A:53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553:85-2407834391265652961"
2024-03-11 11:57:08 UTC	480	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" ANServer: gapp2 Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 1 Jan 1990 0:0:0 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: image/gif Content-Length: 43 Date: Mon, 11 Mar 2024 11:57:08 GMT Via: 1.1 google Alt-Svc: clear Connection: close
2024-03-11 11:57:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.16	50220	204.237.133.120	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:08 UTC	2895	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzAmdGw9MTI5NjAw&piggybackCookie=di_5eeffdf13c334a9c86516 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; PugT=1710158213; DPSync3=1711324800%3A201_258_256_262_261_260_259_263%7C1710201600%3A248_255%7C1710720000%3A265%7C1711152000%3A257; SyncRTB3=1711324800%3A55_5_165_231_104_8_48_21_166_249_220_22_3_54_46_250_266_71_13%7C1710720000%3A2_223_15%7C1710979200%3A63; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; chkChromeAb67Sec=6
2024-03-11 11:57:08 UTC	717	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:57:08 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 09-Jun-2024 11:57:08 GMT; path=/ Set-Cookie: PugT=1710158228; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:57:08 GMT; path=/ Location: https://image8.pubmatic.com/AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:57:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.16	50224	104.36.113.107	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:08 UTC	2840	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R4E330_11235B51F_E079381&r=https://pmp.mxptint.net/sn.ashx?ak=1 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; PugT=1710158213; DPSync3=1711324800%3A201_258_256_262_261_260_259_263%7C1710201600%3A248_255%7C1710720000%3A265%7C1711152000%3A257; SyncRTB3=1711324800%3A55_5_165_231_104_8_48_21_166_249_220_22_3_54_46_250_266_71_13%7C1710720000%3A2_223_15%7C1710979200%3A63; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; chkChromeAb67Sec=6
2024-03-11 11:57:08 UTC	655	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:57:08 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:57:08 GMT; path=/ Set-Cookie: PugT=1710158228; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:57:08 GMT; path=/ Location: https://pmp.mxptint.net/sn.ashx?ak=1 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:57:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.16	50215	3.232.64.79	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:08 UTC	661	OUT	GET /pixel?pid=r8hrb20&t=gif HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=18e2d5f5e6f-1cc10000010a4999; SERVERID=18841~DM
2024-03-11 11:57:08 UTC	587	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: SERVERID=18841~DM; Domain=eyeota.net; Path=/; Expires=Mon, 11 Mar 2024 12:07:08 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: https://cm.g.doubleclick.net/pixel?google_nid=eye&google_cm&google_sc&google_hm=MnVYRlFDOUZzLUxBT2hWYXp1LTQ1NHViN0E5a014cWxMbkQxUUZwZ25fN0k&gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&referrer_pid=r8hrb20 Content-Length: 0 Date: Mon, 11 Mar 2024 11:57:08 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.16	50226	52.8.161.245	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:08 UTC	685	OUT	GET /map/ct=y/c=14701/tp=MTAI/tpid=9A176ADB-73F4-4BD8-A648-23F2443493B5/gdpr=0/gdpr_consent= HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_cc=ctst
2024-03-11 11:57:08 UTC	694	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:08 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.41.27.126 Set-Cookie: _cc_dc=3;Path=/;Domain=crwdcntrl.net;Expires=Fri, 06-Dec-2024 11:12:00 GMT;SameSite=None;Secure Set-Cookie: _cc_id=9d77637072f92cb5f5d20c39a1b22cb5;Path=/;Domain=crwdcntrl.net;Expires=Fri, 06-Dec-2024 11:12:00 GMT;SameSite=None;Secure Set-Cookie: _cc_cc="";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Thu, 01-Jan-1970 02:01:00 GMT;Max-Age=0;SameSite=None;Secure Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-03-11 11:57:08 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.16	50236	54.215.97.222	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:08 UTC	725	OUT	GET /sync/v1?source_id=790d3e0174b12a86f1cbebf4&ev=1&source_user_id=3ftvG5anVWUA&pid=558357 HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:08 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:08 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:08 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:57:08 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.16	50227	35.244.154.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:08 UTC	721	OUT	GET /712068.gif?partner_uid=b6baf5b6-3516-4c46-a708-53e0ec193a37 HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=h4rvB4lZ2+1aOOm42RcYUFYmzAEAL4KXC73Hrxo9kEM=; pxrc=CJPju68GEgUI6EcQAA==
2024-03-11 11:57:08 UTC	780	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://us-u.openx.net/w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fidsync.rlcdn.com%2F396846.gif%3Fserved_by%3Devergreen%26partner_uid%3D P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=8roSmpTpFipaOOm42RcYUFYmzAEAL4KXC73Hrxo9kEM=; Path=/; Domain=rlcdn.com; Expires=Tue, 11 Mar 2025 11:57:08 GMT; Secure; SameSite=None Set-Cookie: pxrc=CJPju68GEgUI6EcQABIGCLjrARAB; Path=/; Domain=rlcdn.com; Expires=Fri, 10 May 2024 11:57:08 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Mon, 11 Mar 2024 11:57:08 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.16	50213	185.184.8.90	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:08 UTC	616	OUT	GET /cm-notify?pi=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:09 UTC	765	IN	HTTP/1.1 302 Found date: Mon, 11 Mar 2024 11:57:08 GMT vary: Accept-Encoding set-cookie: g=2fVAwyNGZ4vWrC85UL9S_1710158228861;Path=/;Domain=.creativecdn.com;Expires=Tue, 11-Mar-2025 11:57:08 GMT;Max-Age=31536000;Secure;SameSite=None set-cookie: ts=1710158228;Path=/;Domain=.creativecdn.com;Expires=Tue, 11-Mar-2025 11:57:08 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" location: https://creativecdn.com/cm-notify?pi=pubmatic&gdpr=0&gdpr_consent=&tc=1 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Mon, 11 Mar 2024 11:57:08 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.16	50231	18.154.206.74	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:08 UTC	482	OUT	GET /syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1 Host: synchroscript.deliveryengine.adswizz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:08 UTC	312	IN	HTTP/1.1 200 OK Server: CloudFront Date: Mon, 11 Mar 2024 11:57:08 GMT Content-Length: 0 Connection: close X-Cache: Error from cloudfront Via: 1.1 8c835b4ab9d422bca46b885db5c34720.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: Ci-WQest6n1wWmFIMySfYSeWG53PbpWgqHtOCaTDfX5AazLXbDA7Vw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.16	50233	192.82.242.209	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:08 UTC	3007	OUT	GET /AdServer/UCookieSetPug?&rd=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D91%26partneruserid%3D%23PM_USER_ID%26gdpr%3DPM_GDPR%26gdpr_consent%3DPM_CONSENT&gdpr=0&gdpr_consent= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; DPSync3=1711324800%3A201_258_256_262_261_260_259_263%7C1710201600%3A248_255%7C1710720000%3A265%7C1711152000%3A257; SyncRTB3=1711324800%3A55_5_165_231_104_8_48_21_166_249_220_22_3_54_46_250_266_71_13%7C1710720000%3A2_223_15%7C1710979200%3A63; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; chkChromeAb67Sec=6; PugT=1710158227
2024-03-11 11:57:08 UTC	408	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=91&partneruserid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Date: Mon, 11 Mar 2024 11:57:07 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.16	50243	54.215.97.222	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:08 UTC	754	OUT	GET /sync/v1?source_id=5b286190338513af73f09c28&source_user_id=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:09 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:08 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:08 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:57:09 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.16	50240	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:08 UTC	1279	OUT	GET /redir/?issi=1&partnerid=76&partneruserid=GOOGLE_HOSTED_SI&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmartrtb_dbm%26google_cm%26google_sc%26google_hm%3DSMART_USER_ID_B64&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; vs=575816=5885997
2024-03-11 11:57:09 UTC	578	IN	HTTP/1.1 302 Found content-length: 0 date: Mon, 11 Mar 2024 11:57:08 GMT cache-control: no-cache,no-store location: https://cm.g.doubleclick.net/pixel?google_nid=smartrtb_dbm&google_cm&google_sc&google_hm=MTg5OTUwNTg5MDU5NDU2NTI0OA==&gdpr=0&gdpr_consent= pragma: no-cache set-cookie: csync=76:GOOGLE_HOSTED_SI\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; expires=Tue, 11 Mar 2025 11:57:09 GMT; domain=smartadserver.com; path=/; SameSite=None; secure p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.16	50242	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:08 UTC	1250	OUT	GET /redir/?issi=1&partnerid=134&partneruserid=OB_OK&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmart_adserver_eb%26google_hm%3DSMART_USER_ID_B64&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; vs=575816=5885997
2024-03-11 11:57:09 UTC	553	IN	HTTP/1.1 302 Found content-length: 0 date: Mon, 11 Mar 2024 11:57:09 GMT cache-control: no-cache,no-store location: https://cm.g.doubleclick.net/pixel?google_nid=smart_adserver_eb&google_hm=MTg5OTUwNTg5MDU5NDU2NTI0OA==&gdpr=0&gdpr_consent= pragma: no-cache set-cookie: csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK; expires=Tue, 11 Mar 2025 11:57:09 GMT; domain=smartadserver.com; path=/; SameSite=None; secure p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.16	50230	35.212.133.238	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:08 UTC	821	OUT	GET /ul_cb/sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=6ec76371-3031-4b49-abb3-349fb3d7cf23; c=1710158227; tuuid_lu=1710158227
2024-03-11 11:57:09 UTC	547	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:57:09 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //t.pswec.com/bsw_sync?ssp=pubmatic&bsw_user_id=6ec76371-3031-4b49-abb3-349fb3d7cf23 Set-Cookie: tuuid=6ec76371-3031-4b49-abb3-349fb3d7cf23; path=/; expires=Tue, 11-Mar-2025 11:57:09 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1710158229; path=/; expires=Tue, 11-Mar-2025 11:57:09 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.16	50228	44.238.141.43	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:08 UTC	702	OUT	GET /load/?p=204&g=1170&j=0&redirect=https%3A%2F%2Fml314.com%2Fcsync.ashx%3Fperson_id%3D3642666937673580575%26eid%3D50596%26fp%3D HTTP/1.1 Host: loadus.exelator.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:09 UTC	1063	IN	HTTP/1.1 302 server: nginx date: Mon, 11 Mar 2024 11:57:08 GMT content-type: image/gif content-length: 0 cache-control: no-cache x-powered-by: Undertow/1 set-cookie: EE="ef0ee26ff141c186c8f416092ed9f16d"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Tue, 09-Jul-2024 11:57:08 GMT; SameSite=None; Secure; set-cookie: ud="eJxrXxzq6XKLQSE1zSA11cgsLc3QxDDZ0MIs2SLNxNDMwNIoNcUyzdAsZXFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVywAswJcw1asCS%252FKDN9UWjw4qKUNMZFJcWngo%252BLbQAAX5snfg%253D%253D"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Tue, 09-Jul-2024 11:57:08 GMT; SameSite=None; Secure; p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA location: https://loadus.exelator.com/load/?p=204&g=1170&j=0&redirect=https%3A%2F%2Fml314.com%2Fcsync.ashx%3Fperson_id%3D3642666937673580575%26eid%3D50596%26fp%3D&xl8blockcheck=1 access-control-allow-credentials: true p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.16	50235	104.18.36.155	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:08 UTC	898	OUT	GET /usermatch?s=179394&cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D33%26partneruserid%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
2024-03-11 11:57:09 UTC	990	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:09 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 862b5d83ed440acf-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; Path=/; Domain=casalemedia.com; Expires=Tue, 11 Mar 2025 11:57:09 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=4192; Path=/; Domain=casalemedia.com; Expires=Sun, 09 Jun 2024 11:57:09 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X9XlosXYWdImWwbLVQubgR%2BJ0Mg0QbqpOVVwuNFCndJ3WofUEoMjslh4BEfUvmZqg7XpMEULUG4NEBhr7%2BScFARkpJUk39vY60Ewg4RCpXEtiyLgT86Yj2E5vcLQAcJiYZDboasKrj337w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-11 11:57:09 UTC	379	IN	Data Raw: 36 61 65 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 73 2e 71 75 61 6e 74 73 65 72 76 65 2e 63 6f 6d 2f 70 69 78 65 6c 2f 70 2d 5a 38 50 75 4a 45 6b 36 55 37 48 79 71 2e 67 69 66 3f 69 64 6d 61 74 63 68 3d 30 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 73 74 69 63 6b 79 61 64 73 74 76 2e 63 6f 6d 2f 75 73 65 72 2d 72 65 67 69 73 74 65 72 69 6e 67 3f 64 61 74 61 50 72 6f 76 69 64 65 72 49 64 3d 31 30 32 35 Data Ascii: 6ae<html><head><title></title></head><body><img src="https://cms.quantserve.com/pixel/p-Z8PuJEk6U7Hyq.gif?idmatch=0" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://ads.stickyadstv.com/user-registering?dataProviderId=1025
2024-03-11 11:57:09 UTC	1338	IN	Data Raw: 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 75 70 73 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 75 70 73 2f 35 35 39 34 30 2f 73 79 6e 63 3f 5f 6f 72 69 67 69 6e 3d 31 26 61 6d 70 3b 72 65 64 69 72 32 3d 74 72 75 65 26 61 6d 70 3b 75 69 64 3d 5a 65 37 78 66 4d 41 6f 49 65 45 41 41 41 7a 61 41 49 64 4f 34 41 41 41 45 47 41 41 41 41 41 42 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 26 61 6d 70 3b 67 64 70 72 3d 26 61 6d 70 3b 67 70 70 3d 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 Data Ascii: ay:none" width="0" height="0" alt="" border="0" /><img src="https://ups.analytics.yahoo.com/ups/55940/sync?_origin=1&redir2=true&uid=Ze7xfMAoIeEAAAzaAIdO4AAAEGAAAAAB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=" style="display
2024-03-11 11:57:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.16	50241	104.254.148.251	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:09 UTC	955	OUT	GET /getuid?https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D86%26partneruserid%3D$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; receive-cookie-deprecation=1; uuid2=7822940101119878936; icu=ChgIkPoyEAoYAiACKAIwjuO7rwY4AkACSAIQjuO7rwYYAQ..
2024-03-11 11:57:09 UTC	1484	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Mon, 11 Mar 2024 11:57:09 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=86&partneruserid=7822940101119878936&gdpr=0&gdpr_consent= AN-X-Request-Uuid: 390d148e-e8fc-4677-8f68-61007d2d544a Set-Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:09 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 27-Feb-2034 11:57:09 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=7822940101119878936; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:09 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.105.38; 154.16.105.38; 893.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.16	50244	192.82.242.209	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:09 UTC	3327	OUT	GET /AdServer/UCookieSetPug?oid=1&rd=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dpmeb%26google_sc%3D1%26google_hm%3D%23%23B64_16B_PM_UID%26google_redir%3Dhttps%25253A%25252F%25252Fimage8.pubmatic.com%25252FAdServer%25252FImgSync%25253Fsec%25253D1%252526p%25253D156578%252526mpc%25253D4%252526fp%25253D1%252526pu%25253Dhttps%2525253A%2525252F%2525252Fimage4.pubmatic.com%2525252FAdServer%2525252FSPug%2525253Fp%2525253D156578%25252526sc%2525253D1&google_push=AXcoOmTLLecfdkrh8XrNPYiAPAHUwxHVMhTH1d0UNuIjnx8DR10Q3My5E6JHgA0mCRvJF6fv9E6bjO0c0X7rrMgtMidlBVftkh4PIND4YZhI6BrRZvgWRtBTM2-gAzKfJnQW9vG9Jnk25EePyQMXInZH8Ug HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; DPSync3=1711324800%3A201_258_256_262_261_260_259_263%7C1710201600%3A248_255%7C1710720000%3A265%7C1711152000%3A257; SyncRTB3=1711324800%3A55_5_165_231_104_8_48_21_166_249_220_22_3_54_46_250_266_71_13%7C1710720000%3A2_223_15%7C1710979200%3A63; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; chkChromeAb67Sec=6; PugT=1710158228
2024-03-11 11:57:09 UTC	752	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Location: https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=mhdq23P0S9imSCPyRDSTtQ%3D%3D&google_redir=https%3A%2F%2Fimage8.pubmatic.com%2FAdServer%2FImgSync%3Fsec%3D1%26p%3D156578%26mpc%3D4%26fp%3D1%26pu%3Dhttps%253A%252F%252Fimage4.pubmatic.com%252FAdServer%252FSPug%253Fp%253D156578%2526sc%253D1&google_push=AXcoOmTLLecfdkrh8XrNPYiAPAHUwxHVMhTH1d0UNuIjnx8DR10Q3My5E6JHgA0mCRvJF6fv9E6bjO0c0X7rrMgtMidlBVftkh4PIND4YZhI6BrRZvgWRtBTM2-gAzKfJnQW9vG9Jnk25EePyQMXInZH8Ug P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Date: Mon, 11 Mar 2024 11:57:09 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.16	50246	35.244.159.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:09 UTC	969	OUT	GET /w/1.0/cm?id=a547219b-814b-4e3e-8a4f-35c044fa1891&ph=ec81d0b7-c42e-4a42-b97a-9305af647d30&r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D100%26partneruserid%3D%7BOPENX_ID%7D&gdpr=0&gdpr_consent= HTTP/1.1 Host: eu-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=2a5f7fb6-27c9-488e-9168-f0298407ea3a\|1710158208
2024-03-11 11:57:09 UTC	623	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Set-Cookie: i=2a5f7fb6-27c9-488e-9168-f0298407ea3a\|1710158208; Version=1; Expires=Tue, 11-Mar-2025 11:57:09 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Set-Cookie: pd=v2\|1710158229\|vMgavPkWgyiK; Version=1; Expires=Tue, 26-Mar-2024 11:57:09 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Date: Mon, 11 Mar 2024 11:57:09 GMT Content-Type: text/html Content-Length: 1027 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:57:09 UTC	1027	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 3e 69 66 28 22 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 22 69 6e 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 2e 61 6c 6c 6f 77 73 46 65 61 74 75 72 65 28 22 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 22 29 29 64 6f 63 75 6d 65 6e 74 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 28 29 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 72 74 62 2d 63 73 79 6e 63 2e 73 6d 61 72 74 61 64 73 65 72 76 65 72 2e 63 6f 6d 2f 72 65 64 69 72 2f 3f 69 73 73 69 3d 31 26 70 61 72 74 6e 65 72 69 64 3d 31 30 30 26 Data Ascii: <html><head><title>Pixels</title></head><body><script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script><img src="https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=100&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.16	50237	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:09 UTC	1267	OUT	GET /redir/?issi=1&partnerid=91&partneruserid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; vs=575816=5885997
2024-03-11 11:57:09 UTC	479	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:08 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=91:9A176ADB-73F4-4BD8-A648-23F2443493B5\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; expires=Tue, 11 Mar 2025 11:57:09 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:09 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.16	50261	104.18.36.155	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:09 UTC	793	OUT	GET /rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
2024-03-11 11:57:09 UTC	1092	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:57:09 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_hm=Ze7xfMAoIeEAAAzaAIdO4AAA CF-Ray: 862b5d858a470ad3-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; Path=/; Domain=casalemedia.com; Expires=Tue, 11 Mar 2025 11:57:09 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=4192; Path=/; Domain=casalemedia.com; Expires=Sun, 09 Jun 2024 11:57:09 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Aq8g6OmszYkQbNtIBURQUmeAxtLw33HH7PSc%2F0W%2FQCdWcgMzuV%2BCBrI09mnfKyoImky1mYMHchHwbwMtUknaDAv2HImTQemwsHY5Y9lxO12nA%2FVBg%2F1mbJNDavf5zsMbLNxGgjevVKdI6A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.16	50250	104.18.24.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:09 UTC	1069	OUT	GET /i.match?p=b6&u=&google_push=AXcoOmRF5W8NAr6bAj2leKfOVpf5YPzmwyGOBL4Qk8UWxtsoHp0JQQY85SL4-cQeNi9_rHcFCBXE2c5C6Ay7fe1qbbggKpd9tHB6SYPy500tMuwErDYeYvmQ-SgIpoMan23eFzYDHNVE2L_UTWrHWxf4SwM&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmRF5W8NAr6bAj2leKfOVpf5YPzmwyGOBL4Qk8UWxtsoHp0JQQY85SL4-cQeNi9_rHcFCBXE2c5C6Ay7fe1qbbggKpd9tHB6SYPy500tMuwErDYeYvmQ-SgIpoMan23eFzYDHNVE2L_UTWrHWxf4SwM%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24 HTTP/1.1 Host: a.tribalfusion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:09 UTC	1236	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:57:09 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 206 X-Reuse-Index: 286 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=aUnoeUON6Ju8ZbUxpciddGPZbVOBUU1hxbk1tqV4wa; path=/; domain=.tribalfusion.com; expires=Sun, 09-Jun-2024 11:57:09 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=aUnoeUON6Ju8ZbUxpciddGPZbVOBUU1hxbk1tqV4wa; path=/; domain=.tribalfusion.com; expires=Sun, 09-Jun-2024 11:57:09 GMT; Location: https://s.tribalfusion.com/z/i.match?p=b6&u=&google_push=AXcoOmRF5W8NAr6bAj2leKfOVpf5YPzmwyGOBL4Qk8UWxtsoHp0JQQY85SL4-cQeNi9_rHcFCBXE2c5C6Ay7fe1qbbggKpd9tHB6SYPy500tMuwErDYeYvmQ-SgIpoMan23eFzYDHNVE2L_UTWrHWxf4SwM&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmRF5W8NAr6bAj2leKfOVpf5YPzmwyGOBL4Qk8UWxtsoHp0JQQY85SL4-cQeNi9_rHcFCBXE2c5C6Ay7fe1qbbggKpd9tHB6SYPy500tMuwErDYeYvmQ-SgIpoMan23eFzYDHNVE2L_UTWrHWxf4SwM%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24 CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 862b5d856be109fb-LAS alt-svc: h3=":443"; ma=86400
2024-03-11 11:57:09 UTC	42	IN	Data Raw: 32 34 0d 0a 3c 68 31 3e 45 72 72 6f 72 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 68 31 3e 0d 0a Data Ascii: 24<h1>Error 302 Moved Temporarily</h1>
2024-03-11 11:57:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.16	50257	104.254.148.252	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:09 UTC	913	OUT	GET /getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC} HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; receive-cookie-deprecation=1; uuid2=7822940101119878936; icu=ChgIkPoyEAoYAiACKAIwjuO7rwY4AkACSAIQjuO7rwYYAQ..
2024-03-11 11:57:09 UTC	1464	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Mon, 11 Mar 2024 11:57:09 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=NzgyMjk0MDEwMTExOTg3ODkzNg%3D%3D AN-X-Request-Uuid: b52c60de-bc68-427a-bb4f-2cf07e79f21e Set-Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:09 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 27-Feb-2034 11:57:09 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=7822940101119878936; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:09 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.105.38; 154.16.105.38; 894.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.16	50253	185.184.8.90	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:09 UTC	799	OUT	GET /cm-notify?pi=adxab&google_nid=rtb_house_us&google_push=AXcoOmSAJRqiKrDk695NM5A0bhR-PbKirjUMU0XPtB6Bxc1RwguQH-dmF956DAw2sVHKCv2Y4vavcXcVnIKVuw_hQgBYLNHy-IK58IbCyOEo5pB0qQik5vT4D0CWsGdjc8bVTO3Kh1KpZOphCjRZ2QEAxox5 HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:09 UTC	934	IN	HTTP/1.1 302 Found date: Mon, 11 Mar 2024 11:57:09 GMT vary: Accept-Encoding set-cookie: g=6d5Bhd7V8Z70rO0rzoOe_1710158229627;Path=/;Domain=.creativecdn.com;Expires=Tue, 11-Mar-2025 11:57:09 GMT;Max-Age=31536000;Secure;SameSite=None set-cookie: ts=1710158229;Path=/;Domain=.creativecdn.com;Expires=Tue, 11-Mar-2025 11:57:09 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" location: https://creativecdn.com/cm-notify?pi=adxab&google_nid=rtb_house_us&google_push=AXcoOmSAJRqiKrDk695NM5A0bhR-PbKirjUMU0XPtB6Bxc1RwguQH-dmF956DAw2sVHKCv2Y4vavcXcVnIKVuw_hQgBYLNHy-IK58IbCyOEo5pB0qQik5vT4D0CWsGdjc8bVTO3Kh1KpZOphCjRZ2QEAxox5&tc=1 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Mon, 11 Mar 2024 11:57:09 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.16	50238	35.71.131.137	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:09 UTC	885	OUT	GET /track/cmf/openx?oxid=f9f340ef-8e4e-7779-cbbe-38c1e020d9c7&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eu-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFEhQKBXRhcGFkEgsIqK7DwIvz4DwQBRIbCgxzaGFyZXRocm91Z2gSCwiktNqPjfPgPBAFEhYKB2QwdHJvMWoSCwj-h-Hhi_PgPBAFGAEgASgCMgsIxKndvKPz4DwQBTgBWgxzaGFyZXRocm91Z2hgAg..
2024-03-11 11:57:09 UTC	723	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:57:09 GMT Content-Length: 335 Connection: close server: Kestrel location: https://us-u.openx.net/w/1.0/sd?id=537072971&val=71dcd657-b7ce-4e56-9064-0f83979f8fcb&ttd_puid=f9f340ef-8e4e-7779-cbbe-38c1e020d9c7&gdpr=0&gdpr_consent= set-cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; expires=Tue, 11 Mar 2025 11:57:09 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFEhQKBXRhcGFkEgsIqK7DwIvz4DwQBRIbCgxzaGFyZXRocm91Z2gSCwiktNqPjfPgPBAFEhYKB2QwdHJvMWoSCwj-h-Hhi_PgPBAFGAEgAigCMgsIxKndvKPz4DwQBTgBWgxzaGFyZXRocm91Z2hgAg..; expires=Tue, 11 Mar 2025 11:57:09 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-11 11:57:09 UTC	335	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 37 31 26 76 61 6c 3d 37 31 64 63 64 36 35 37 2d 62 37 63 65 2d 34 65 35 36 2d 39 30 36 34 2d 30 66 38 33 39 37 39 66 38 66 63 62 26 74 74 64 5f 70 75 69 64 3d 66 39 66 33 34 30 65 66 2d 38 65 34 65 2d 37 37 37 39 2d 63 62 62 65 2d 33 38 63 31 65 30 32 30 64 39 63 37 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 37 31 26 76 61 6c 3d 37 31 64 63 64 36 35 37 2d 62 37 63 65 2d 34 65 35 36 2d 39 30 36 34 2d 30 66 38 Data Ascii: Redirecting to: <a href="https://us-u.openx.net/w/1.0/sd?id=537072971&val=71dcd657-b7ce-4e56-9064-0f83979f8fcb&ttd_puid=f9f340ef-8e4e-7779-cbbe-38c1e020d9c7&gdpr=0&gdpr_consent=">https://us-u.openx.net/w/1.0/sd?id=537072971&val=71dcd657-b7ce-4e56-9064-0f8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.16	50249	45.137.176.88	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:09 UTC	736	OUT	GET /cookie/smart?r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D66%26partneruserid%3D%7Bamob_user_id%7D&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.adotmob.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:09 UTC	731	IN	HTTP/1.1 302 Found x-powered-by: Express vary: Origin access-control-allow-credentials: true set-cookie: uid=0a42220400c08ec15f936285; Domain=.adotmob.com; Path=/; Expires=Thu, 10 Apr 2025 11:57:09 GMT; Secure; SameSite=None set-cookie: uuid=0a42220400c08ec15f936285; Domain=.adotmob.com; Path=/; Expires=Thu, 10 Apr 2025 11:57:09 GMT; Secure; SameSite=None set-cookie: partners=SMA%3A1710158229823; Domain=.adotmob.com; Path=/; Expires=Thu, 10 Apr 2025 11:57:09 GMT; Secure; SameSite=None location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=66&partneruserid=0a42220400c08ec15f936285&gdpr=0&gdpr_consent= date: Mon, 11 Mar 2024 11:57:09 GMT keep-alive: timeout=5 content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.16	50260	34.210.5.217	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:09 UTC	720	OUT	GET /ibs:dpid=22052&dpuuid=3642666937673580575&redir= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=45232011452423388812062241212727845356; dpm=45232011452423388812062241212727845356
2024-03-11 11:57:09 UTC	891	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:09 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 6ngxLCowQxU= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-usw2-1-v054-0c80f6093.edge-usw2.demdex.com 2 ms set-cookie: dpm=45232011452423388812062241212727845356; Max-Age=15552000; Expires=Sat, 07 Sep 2024 11:57:09 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=45232011452423388812062241212727845356; Max-Age=15552000; Expires=Sat, 07 Sep 2024 11:57:09 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-03-11 11:57:09 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.16	50259	216.22.16.53	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:09 UTC	1257	OUT	GET /api/sync?callerId=3&google_push=AXcoOmSUHkieHzSCVAsjirmCD7B7oZRz_25e9CkaT-I-XgeAQGIsIovSy5WLakb5XIAj69xCo23uqFTpaGOL7u6IoMa1X5LGN2C7i_2yY98mEEG9SH0EkuLOEUUDYJLjD-jx0E_SN7dGH8TOpoGAi5NbhT4 HTTP/1.1 Host: ssbsync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; vs=575816=5885997
2024-03-11 11:57:09 UTC	404	IN	HTTP/1.1 302 Found content-length: 0 date: Mon, 11 Mar 2024 11:57:08 GMT location: https://cm.g.doubleclick.net/pixel?google_nid=smart_adserver_eb&google_push=AXcoOmSUHkieHzSCVAsjirmCD7B7oZRz_25e9CkaT-I-XgeAQGIsIovSy5WLakb5XIAj69xCo23uqFTpaGOL7u6IoMa1X5LGN2C7i_2yY98mEEG9SH0EkuLOEUUDYJLjD-jx0E_SN7dGH8TOpoGAi5NbhT4&google_hm=MTg5OTUwNTg5MDU5NDU2NTI0OA%3D%3D&gdpr=0&gdpr_consent= connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.16	50254	104.36.113.110	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:09 UTC	2857	OUT	GET /AdServer/ImgSync?gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; DPSync3=1711324800%3A201_258_256_262_261_260_259_263%7C1710201600%3A248_255%7C1710720000%3A265%7C1711152000%3A257; SyncRTB3=1711324800%3A55_5_165_231_104_8_48_21_166_249_220_22_3_54_46_250_266_71_13%7C1710720000%3A2_223_15%7C1710979200%3A63; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; chkChromeAb67Sec=6; PugT=1710158228
2024-03-11 11:57:09 UTC	1340	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: https://c1.adform.net/serving/cookie/match?party=14&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&piggybackCookie=[PLACE YOUR PIGGYBACK COOKIES HERE]&gdpr=0&gdpr_consent= P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: SyncRTB3=1711324800%3A266_55_5_231_166_249_22_54_165_8_71_56_13_104_48_21_220_3_46_250%7C1710720000%3A2_15_223%7C1710979200%3A63; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; domain=pubmatic.com; path=/; max-age=3; SameSite=None; secure; Set-Cookie: pi=156557:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=7; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Mon, 11 Mar 2024 11:57:08 GMT Content-Length: 261 Connection: close
2024-03-11 11:57:09 UTC	261	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 31 2e 61 64 66 6f 72 6d 2e 6e 65 74 2f 73 65 72 76 69 6e 67 2f 63 6f 6f 6b 69 65 2f 6d 61 74 63 68 3f 70 61 72 74 79 3d 31 34 26 61 6d 70 3b 72 65 64 69 72 65 63 74 3d 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 49 34 4e 7a 55 6d 64 47 77 39 4e 44 4d 79 4d 44 41 3d 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 5b 50 4c 41 43 45 20 59 4f 55 52 20 50 49 47 47 59 42 41 43 4b 20 43 4f 4f 4b 49 45 53 20 48 45 52 45 5d 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c Data Ascii: <a href="https://c1.adform.net/serving/cookie/match?party=14&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&piggybackCookie=[PLACE YOUR PIGGYBACK COOKIES HERE]&gdpr=0&gdpr_consent=">Found<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.16	50274	35.244.154.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:09 UTC	704	OUT	GET /395886.gif?partner_uid=3642666937673580575 HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=h4rvB4lZ2+1aOOm42RcYUFYmzAEAL4KXC73Hrxo9kEM=; pxrc=CJPju68GEgUI6EcQAA==
2024-03-11 11:57:09 UTC	774	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://ml314.com/csync.ashx?fp=40dcaaf904223ef640b08777bb7ed3da08de2c0166ccb1ed6ddd6999579dd017f4cb09cee1a4f8eb&person_id=3642666937673580575&eid=50082 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=yhBJVcnL/dBaOOm42RcYUFYmzAEAL4KXC73Hrxo9kEM=; Path=/; Domain=rlcdn.com; Expires=Tue, 11 Mar 2025 11:57:09 GMT; Secure; SameSite=None Set-Cookie: pxrc=CJPju68GEgUI6EcQABIFCNtOEAI=; Path=/; Domain=rlcdn.com; Expires=Fri, 10 May 2024 11:57:09 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Mon, 11 Mar 2024 11:57:09 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.16	50239	35.212.133.238	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:09 UTC	712	OUT	GET /sync?ssp=smartadserver&gdpr=0&gdpr_consent= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=6ec76371-3031-4b49-abb3-349fb3d7cf23; c=1710158227; tuuid_lu=1710158227
2024-03-11 11:57:09 UTC	390	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:57:09 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //pm.w55c.net/ping_match.gif?st=bidswitch&rurl=%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D79%26user_id%3D_wfivefivec_%26expires%3D30%26ssp%3Dsmartadserver%26bsw_param%3D6ec76371-3031-4b49-abb3-349fb3d7cf23

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.16	50265	184.28.98.116	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:09 UTC	498	OUT	GET /cksync.php?cs=1&type=58280&ovsid=b6baf5b6-3516-4c46-a708-53e0ec193a37 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3531598286675836000V10; data-sht=b6baf5b6-3516-4c46-a708-53e0ec193a37~~1
2024-03-11 11:57:09 UTC	679	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-sht=b6baf5b6-3516-4c46-a708-53e0ec193a37~~1;Expires=Sat, 07 Sep 2024 11:57:09 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Mon, 11 Mar 2024 11:57:09 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 11 Mar 2024 11:57:09 GMT Connection: close
2024-03-11 11:57:09 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-11 11:57:09 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.16	50269	38.99.107.14	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:09 UTC	654	OUT	GET /sn.ashx?ak=1 HTTP/1.1 Host: pmp.mxptint.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mxpim=R4E330_11235B51F_E079381.1.000000000000000065EEF193
2024-03-11 11:57:09 UTC	242	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: image/gif Expires: -1 Date: Mon, 11 Mar 2024 11:57:09 GMT Connection: close Content-Length: 43 Strict-Transport-Security: max-age=-393163029; includeSubDomains
2024-03-11 11:57:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.16	50275	52.9.139.67	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:09 UTC	490	OUT	GET /sync/v1?source_id=790d3e0174b12a86f1cbebf4&ev=1&source_user_id=3ftvG5anVWUA&pid=558357 HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:09 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:09 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:09 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:57:09 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.16	50264	104.36.113.110	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:09 UTC	2947	OUT	GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; DPSync3=1711324800%3A201_258_256_262_261_260_259_263%7C1710201600%3A248_255%7C1710720000%3A265%7C1711152000%3A257; SyncRTB3=1711324800%3A55_5_165_231_104_8_48_21_166_249_220_22_3_54_46_250_266_71_13%7C1710720000%3A2_223_15%7C1710979200%3A63; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; chkChromeAb67Sec=6; PugT=1710158228; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516
2024-03-11 11:57:10 UTC	1340	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: https://c1.adform.net/serving/cookie/match?party=14&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&piggybackCookie=[PLACE YOUR PIGGYBACK COOKIES HERE]&gdpr=0&gdpr_consent= P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: SyncRTB3=1710720000%3A223_2_15%7C1710979200%3A63%7C1711324800%3A231_220_266_165_104_48_166_250_13_56_55_249_71_5_8_21_22_3_54_46; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; domain=pubmatic.com; path=/; max-age=3; SameSite=None; secure; Set-Cookie: pi=156557:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=7; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Mon, 11 Mar 2024 11:57:08 GMT Content-Length: 261 Connection: close
2024-03-11 11:57:10 UTC	261	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 31 2e 61 64 66 6f 72 6d 2e 6e 65 74 2f 73 65 72 76 69 6e 67 2f 63 6f 6f 6b 69 65 2f 6d 61 74 63 68 3f 70 61 72 74 79 3d 31 34 26 61 6d 70 3b 72 65 64 69 72 65 63 74 3d 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 49 34 4e 7a 55 6d 64 47 77 39 4e 44 4d 79 4d 44 41 3d 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 5b 50 4c 41 43 45 20 59 4f 55 52 20 50 49 47 47 59 42 41 43 4b 20 43 4f 4f 4b 49 45 53 20 48 45 52 45 5d 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c Data Ascii: <a href="https://c1.adform.net/serving/cookie/match?party=14&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&piggybackCookie=[PLACE YOUR PIGGYBACK COOKIES HERE]&gdpr=0&gdpr_consent=">Found<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.16	50251	69.90.133.51	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:09 UTC	778	OUT	GET /tum?umid=4&uid=&google_push=AXcoOmTDl7yrU__lMIcgE74og1sWQ0QATWpz7GDIG8DYmKfhVwkZGRxN4IQefreQEq53DMN4eR6l1FVe15gFW41ncSWRwP5A2A_FdH2zPoyhebZNOm6WsM7hEYUH2VNiONSskXE5HakntWRC35YB1G-3OEU HTTP/1.1 Host: ums.acuityplatform.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:10 UTC	27	IN	HTTP/1.1 204 No Content
2024-03-11 11:57:10 UTC	695	OUT	GET /tum?umid=6 HTTP/1.1 Host: ums.acuityplatform.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:10 UTC	27	IN	HTTP/1.1 204 No Content

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.16	50276	52.8.161.245	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:09 UTC	487	OUT	GET /map/ct=y/c=14701/tp=MTAI/tpid=9A176ADB-73F4-4BD8-A648-23F2443493B5/gdpr=0/gdpr_consent= HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=3; _cc_id=9d77637072f92cb5f5d20c39a1b22cb5
2024-03-11 11:57:10 UTC	315	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:10 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.41.29.208 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-03-11 11:57:10 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.16	50277	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:09 UTC	1260	OUT	GET /redir/?issi=1&partnerid=32&partneruserid=2407834391265652961&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
2024-03-11 11:57:10 UTC	472	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:09 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=32:2407834391265652961\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK; expires=Wed, 12 Mar 2025 11:57:10 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:10 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.16	50290	192.184.67.70	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:09 UTC	682	OUT	GET /pixel/p-Z8PuJEk6U7Hyq.gif?idmatch=0 HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=65eef17d-816a8-799a4-641fc; d=EMUBEgGsK_ijCP_8EA
2024-03-11 11:57:10 UTC	590	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:57:10 GMT Content-Length: 0 Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=81&gdpr=0&external_user_id=DgrDEF4OkREVB5dDWQeLQgEGx0EVCZJEXlwabpLi P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=EJsBGAGsK_ijC_vLEM-7EA; expires=Sun, 09-Jun-2024 11:57:10 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.16	50280	142.251.2.148	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:10 UTC	833	OUT	GET /sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/index.html?ev=01_250 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://2e364cc7caa3f2e10b0fb666ab9496ef.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:10 UTC	831	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 8112 Date: Mon, 11 Mar 2024 11:57:10 GMT Expires: Tue, 11 Mar 2025 11:57:10 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 21 Feb 2024 21:32:45 GMT X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:57:10 UTC	421	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 69 6e 67 2d 74 6f 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 64 6f 62 65 5f 41 6e 69 6d 61 74 65 5f 43 43 22 3e 0a 09 09 3c 74 69 74 6c 65 3e 69 6e 64 65 78 20 2d 20 33 30 30 20 78 20 32 35 30 3c 2f 74 69 74 6c 65 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 64 2e 73 69 7a 65 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 33 30 30 Data Ascii: <!DOCTYPE html><html><head><meta charset="UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="authoring-tool" content="Adobe_Animate_CC"><title>index - 300 x 250</title><meta name="ad.size" content="width=300
2024-03-11 11:57:10 UTC	1252	IN	Data Raw: 64 64 79 2e 63 6f 6d 2f 22 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 20 77 72 69 74 65 20 79 6f 75 72 20 63 6f 64 65 20 68 65 72 65 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 64 65 2e 63 72 65 61 74 65 6a 73 2e 63 6f 6d 2f 31 2e 30 2e 30 2f 63 72 65 61 74 65 6a 73 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 69 6e 64 65 78 2e 6a 73 3f 31 37 30 38 33 39 33 36 35 39 32 38 30 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 09 09 3c 73 63 72 69 70 74 3e 0a 09 2f 2f 20 73 74 61 72 74 20 73 63 72 69 70 74 20 2a 2a 2a 2a 2a 2a 2a 0a 09 09 76 61 72 20 63 61 6e 76 61 73 2c 20 73 74 61 67 65 2c 20 65 78 70 6f 72 74 52 6f 6f 74 2c 20 61 6e 69 6d 5f 63 6f 6e 74 61 69 6e 65 72 2c 20 64 Data Ascii: ddy.com/";</script>... write your code here --><script src="https://code.createjs.com/1.0.0/createjs.min.js"></script><script src="index.js?1708393659280"></script><script>// start script *******var canvas, stage, exportRoot, anim_container, d
2024-03-11 11:57:10 UTC	1252	IN	Data Raw: 2e 67 65 74 4c 69 62 72 61 72 79 28 29 3b 0a 09 76 61 72 20 73 73 3d 63 6f 6d 70 2e 67 65 74 53 70 72 69 74 65 53 68 65 65 74 28 29 3b 0a 09 76 61 72 20 71 75 65 75 65 20 3d 20 65 76 74 2e 74 61 72 67 65 74 3b 0a 09 76 61 72 20 73 73 4d 65 74 61 64 61 74 61 20 3d 20 6c 69 62 2e 73 73 4d 65 74 61 64 61 74 61 3b 0a 09 66 6f 72 28 69 3d 30 3b 20 69 3c 73 73 4d 65 74 61 64 61 74 61 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 09 09 73 73 5b 73 73 4d 65 74 61 64 61 74 61 5b 69 5d 2e 6e 61 6d 65 5d 20 3d 20 6e 65 77 20 63 72 65 61 74 65 6a 73 2e 53 70 72 69 74 65 53 68 65 65 74 28 20 7b 22 69 6d 61 67 65 73 22 3a 20 5b 71 75 65 75 65 2e 67 65 74 52 65 73 75 6c 74 28 73 73 4d 65 74 61 64 61 74 61 5b 69 5d 2e 6e 61 6d 65 29 5d 2c 20 22 66 72 61 6d 65 73 22 3a Data Ascii: .getLibrary();var ss=comp.getSpriteSheet();var queue = evt.target;var ssMetadata = lib.ssMetadata;for(i=0; i<ssMetadata.length; i++) {ss[ssMetadata[i].name] = new createjs.SpriteSheet( {"images": [queue.getResult(ssMetadata[i].name)], "frames":
2024-03-11 11:57:10 UTC	1252	IN	Data Raw: 73 65 3b 0a 20 20 20 20 76 61 72 20 72 65 70 6f 72 74 69 6e 67 49 64 73 20 3d 20 7b 7d 3b 0a 0a 20 20 20 20 75 72 6c 50 61 72 61 6d 4d 61 70 5b 43 4c 49 43 4b 5f 58 5f 55 52 4c 5f 4b 45 59 5d 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 75 72 6c 50 61 72 61 6d 4d 61 70 5b 43 4c 49 43 4b 5f 59 5f 55 52 4c 5f 4b 45 59 5d 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 75 72 6c 50 61 72 61 6d 4d 61 70 5b 43 52 45 41 54 49 56 45 5f 44 49 4d 45 4e 53 49 4f 4e 53 5f 4b 45 59 5d 20 3d 20 6e 75 6c 6c 3b 0a 0a 20 20 20 20 76 61 72 20 68 61 6e 64 6c 65 43 6c 69 63 6b 54 61 67 4d 65 73 73 61 67 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 65 76 65 6e 74 44 61 74 61 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 Data Ascii: se; var reportingIds = {}; urlParamMap[CLICK_X_URL_KEY] = null; urlParamMap[CLICK_Y_URL_KEY] = null; urlParamMap[CREATIVE_DIMENSIONS_KEY] = null; var handleClickTagMessage = function(e) { try { var eventData = JSON.pars
2024-03-11 11:57:10 UTC	1252	IN	Data Raw: 28 65 76 65 6e 74 44 61 74 61 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 27 6e 65 77 74 6f 6e 4f 74 32 54 6f 6b 65 6e 27 20 69 6e 20 65 76 65 6e 74 44 61 74 61 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 76 61 72 20 65 6e 61 62 6c 65 41 74 74 72 69 62 75 74 69 6f 6e 52 65 70 6f 72 74 69 6e 67 41 70 69 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6f 72 69 67 69 6e 54 72 69 61 6c 54 6f 6b 65 6e 29 20 7b 0a 20 20 20 20 20 20 69 66 20 28 2f 43 68 72 6f 6d 65 2f 2e 74 65 73 74 28 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6d 65 74 61 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 6d 65 74 61 27 29 3b 0a 20 20 20 20 20 20 20 20 6d 65 74 61 2e 68 74 Data Ascii: (eventData) { return 'newtonOt2Token' in eventData; } var enableAttributionReportingApi = function(originTrialToken) { if (/Chrome/.test(window.navigator.userAgent)) { var meta = document.createElement('meta'); meta.ht
2024-03-11 11:57:10 UTC	1252	IN	Data Raw: 20 28 61 64 55 72 6c 49 6e 64 65 78 20 3e 20 2d 31 20 26 26 20 70 61 72 61 6d 73 54 6f 42 65 41 64 64 65 64 2e 6c 65 6e 67 74 68 20 3c 3d 20 4d 41 58 5f 55 52 4c 5f 50 41 52 41 4d 5f 4c 45 4e 47 54 48 29 20 7b 0a 20 20 20 20 20 20 20 20 75 72 6c 20 3d 20 75 72 6c 2e 73 75 62 73 74 72 28 30 2c 20 61 64 55 72 6c 49 6e 64 65 78 29 20 2b 20 70 61 72 61 6d 73 54 6f 42 65 41 64 64 65 64 20 2b 0a 20 20 20 20 20 20 20 20 20 20 75 72 6c 2e 73 75 62 73 74 72 28 61 64 55 72 6c 49 6e 64 65 78 29 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 75 72 6c 3b 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 69 66 20 28 6f 70 65 6e 2e 63 61 6c 6c 29 20 7b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 70 65 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6f 70 65 6e 29 Data Ascii: (adUrlIndex > -1 && paramsToBeAdded.length <= MAX_URL_PARAM_LENGTH) { url = url.substr(0, adUrlIndex) + paramsToBeAdded + url.substr(adUrlIndex); }; return url; }; if (open.call) { window.open = function(open)
2024-03-11 11:57:10 UTC	1252	IN	Data Raw: 65 70 6f 72 74 69 6e 67 27 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 66 65 61 74 75 72 65 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 66 65 61 74 75 72 65 73 2e 69 6e 63 6c 75 64 65 73 28 27 61 74 74 72 69 62 75 74 69 6f 6e 73 72 63 27 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 46 65 61 74 75 72 65 73 20 3d 20 77 69 6e 64 6f 77 46 65 61 74 75 72 65 73 2e 63 6f 6e 63 61 74 28 66 65 61 74 75 72 65 73 2c 20 27 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 73 72 63 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 Data Ascii: eporting')) { if (features) { if (!features.includes('attributionsrc')) { windowFeatures = windowFeatures.concat(features, ', attributionsrc'); } } else { window
2024-03-11 11:57:10 UTC	179	IN	Data Raw: 79 5f 63 6f 6e 74 61 69 6e 65 72 22 20 73 74 79 6c 65 3d 22 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 20 77 69 64 74 68 3a 33 30 30 70 78 3b 20 68 65 69 67 68 74 3a 32 35 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 6c 65 66 74 3a 20 30 70 78 3b 20 74 6f 70 3a 20 30 70 78 3b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 22 3e 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 3c 2f 64 69 76 3e 0a 09 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: y_container" style="pointer-events:none; overflow:hidden; width:300px; height:250px; position: absolute; left: 0px; top: 0px; display: block;"></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.16	50279	185.184.8.90	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:10 UTC	682	OUT	GET /cm-notify?pi=pubmatic&gdpr=0&gdpr_consent=&tc=1 HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=2fVAwyNGZ4vWrC85UL9S_1710158228861; ts=1710158228
2024-03-11 11:57:10 UTC	487	IN	HTTP/1.1 302 Found date: Mon, 11 Mar 2024 11:57:10 GMT vary: Accept-Encoding location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNTQmdGw9NDMyMDA%3D&piggybackCookie=p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&pi=pubmatic&gdpr=0&gdpr_consent=&tc=1 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Mon, 11 Mar 2024 11:57:10 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.16	50284	52.9.139.67	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:10 UTC	519	OUT	GET /sync/v1?source_id=5b286190338513af73f09c28&source_user_id=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:10 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:10 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:10 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:57:10 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.16	50297	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:10 UTC	1166	OUT	GET /redir/?issi=1&partnerid=100&partneruserid=ec7ad717-1f8c-4815-8c2c-86fdc6330201&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eu-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
2024-03-11 11:57:10 UTC	490	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:09 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK; expires=Wed, 12 Mar 2025 11:57:10 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:10 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.16	50283	34.98.64.218	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:10 UTC	767	OUT	GET /w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fidsync.rlcdn.com%2F396846.gif%3Fserved_by%3Devergreen%26partner_uid%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=2a5f7fb6-27c9-488e-9168-f0298407ea3a\|1710158208
2024-03-11 11:57:10 UTC	579	IN	HTTP/1.1 302 Found Vary: Accept, Accept-Encoding Set-Cookie: i=2a5f7fb6-27c9-488e-9168-f0298407ea3a\|1710158208; Version=1; Expires=Tue, 11-Mar-2025 11:57:10 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://idsync.rlcdn.com/396846.gif?served_by=evergreen&partner_uid=ac353f89-4309-4119-94c7-b832d9bbb81f Date: Mon, 11 Mar 2024 11:57:10 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.16	50300	35.160.96.43	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:10 UTC	738	OUT	GET /sync/openx/6d3426ab-1ee2-e530-fa69-2e341f77148e?gdpr=0 HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eu-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo
2024-03-11 11:57:10 UTC	778	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:10 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo; Expires=Tue, 11 Mar 2025 17:57:10 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-11 11:57:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.16	50307	192.82.242.209	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:10 UTC	2935	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=73299430&p=162538&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; DPSync3=1711324800%3A201_258_256_262_261_260_259_263%7C1710201600%3A248_255%7C1710720000%3A265%7C1711152000%3A257; SyncRTB3=1711324800%3A55_5_165_231_104_8_48_21_166_249_220_22_3_54_46_250_266_71_13%7C1710720000%3A2_223_15%7C1710979200%3A63; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; chkChromeAb67Sec=6; PugT=1710158228; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381
2024-03-11 11:57:10 UTC	1100	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=7; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=162538:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_220_250_234_3_13_56_240_55_231_71_264_254_165_48_7_54_5_104_249_46_176%7C1711411200%3A35; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Mon, 11 Mar 2024 11:57:09 GMT Transfer-Encoding: chunked Connection: close
2024-03-11 11:57:10 UTC	2478	IN	Data Raw: 39 61 32 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 62 70 69 2e 72 74 61 63 74 69 76 61 74 65 2e 63 6f 6d 2f 74 61 67 2f 3f 69 64 3d 32 30 39 30 39 26 75 73 65 72 5f 69 64 3d 39 41 31 37 36 41 44 42 2d 37 33 46 34 2d 34 42 44 38 2d 41 36 34 38 2d 32 33 46 32 34 34 33 34 39 33 42 35 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 69 2e 6c 69 61 64 6d 2e 63 6f 6d 2f 73 2f 37 35 31 34 35 3f 62 69 64 64 65 72 5f 69 64 3d 31 39 35 37 35 35 26 62 69 64 64 65 72 5f 75 75 69 64 3d 39 41 31 37 36 41 44 42 2d 37 33 46 34 2d 34 42 44 38 2d 41 36 34 38 2d Data Ascii: 9a2PubMatic.loadAsyncImagePixel('https://bpi.rtactivate.com/tag/?id=20909&user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://i.liadm.com/s/75145?bidder_id=195755&bidder_uuid=9A176ADB-73F4-4BD8-A648-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.16	50296	104.18.36.155	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:10 UTC	707	OUT	GET /rum?cm_dsp_id=45&external_user_id=&google_error=15 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
2024-03-11 11:57:10 UTC	984	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:10 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 862b5d8c1ca569e6-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; Path=/; Domain=casalemedia.com; Expires=Tue, 11 Mar 2025 11:57:10 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=4192; Path=/; Domain=casalemedia.com; Expires=Sun, 09 Jun 2024 11:57:10 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dzrLSs5l8WwyzgKB1OYgYdKhk57n4yi9%2B8pXPOcxwY9PyKdIJyuLzQ7OA%2BG2U%2BGsTDEZKGuEU9HDEiKDzvOBjIygOMI2guI63rCrLixfDmTxlNpOPjvujeAneY4ElHjkuK1jOkYyLmttkA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-11 11:57:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.16	50285	44.238.141.43	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:10 UTC	936	OUT	GET /load/?p=204&g=1170&j=0&redirect=https%3A%2F%2Fml314.com%2Fcsync.ashx%3Fperson_id%3D3642666937673580575%26eid%3D50596%26fp%3D&xl8blockcheck=1 HTTP/1.1 Host: loadus.exelator.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EE="ef0ee26ff141c186c8f416092ed9f16d"; ud="eJxrXxzq6XKLQSE1zSA11cgsLc3QxDDZ0MIs2SLNxNDMwNIoNcUyzdAsZXFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVywAswJcw1asCS%252FKDN9UWjw4qKUNMZFJcWngo%252BLbQAAX5snfg%253D%253D"
2024-03-11 11:57:10 UTC	1027	IN	HTTP/1.1 302 server: nginx date: Mon, 11 Mar 2024 11:57:10 GMT content-type: image/gif content-length: 0 cache-control: no-cache x-powered-by: Undertow/1 set-cookie: EE="ef0ee26ff141c186c8f416092ed9f16d"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Tue, 09-Jul-2024 11:57:10 GMT; SameSite=None; Secure; set-cookie: ud="eJxrXxzq6XKLQSE1zSA11cgsLc3QxDDZ0MIs2SLNxNDMwNIoNcUyzdAsZXFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVzmnFGUn5u6AiwU5hq02NDQfEl%252BUWb6otDgxUUpaQyLSopPBR8X2wAAuzcqfQ%253D%253D"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Tue, 09-Jul-2024 11:57:10 GMT; SameSite=None; Secure; p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA location: https://ml314.com/csync.ashx?person_id=3642666937673580575&eid=50596&fp=ef0ee26ff141c186c8f416092ed9f16d&gdpr=&gdpr_consent= access-control-allow-credentials: true p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.16	50289	142.251.2.149	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:10 UTC	3206	OUT	GET /pcs/view?xai=AKAOjssr9-mhLE0SfG-5qH3RyP1YWYQmPZqAZD-JNFW9L9ZZB624P4aaDVY1sueg4t2dCU-JyFaiv-A2-319CZSIk0BpZ_YkvHN5TLkk2xaURijKmN_lfni-dftf-oA1ghoL7g1eVc6DrytzA0bppgpqN9xghAxNs2qRJHZJDbdTUTyvGa3I_ZW61Eed_fzUUaEj1u30mN61IGPCOu03Qk_jYH37D8yPJvLehYnNsO_qgWaRjls9fKckHaF1jve_g1OlJ9Tk5nAKA8NjqpZskV4PyOoFpejrQ2BsYts-w7qABMU7abEXUTtu2iBTVjqU7gl2yy6bL3fySGF5Jvv1b2dxNbfJsjwOjj5rlKcu88XQK00Uqh2_lGXz_sV61HYY-rUrWgiMGiLPQI2vkkVQ_QthUNyU6hjUWr0dgYj4hqEX9vb61ZtBM4ZXxxlix-owVU0mlQGKGE8w9dEzSy5WefX1fI_pZLX12va6uze7P7Ceh-6dOYf9WodT_VRegF-CPdTFkKoYghuNNhYFLPI5dDE3zoUv18dqtnBoG0Rtxbo2_rp0lhzMmjAO7uSaJgY6AikEVilto2fWQnNwTpKqsG9lGKG7Z8tD9sJwpRho6iCScHtqdrMqabOPDxqHogVxN3vvJm9EHhFkm92paYCzXKNTha_7CuCDjO5eAo73VWoKSjDdMqWqiLfx6D3_KbUY_xNgmpXFKx06flMwLgRgpT5kbQpwV_vtWY5ZPMI8IZjMtXabY7O3RxzjsWXj_HeukVqg_GRs0UYG7ijSUu-k0aPRWn2hjo3Ilse5byLn0dm2Gb7jAp6inVQP4v45voC6GkBsFlnV9dvXRBjYzE5FkgByXD0udadFXuyAUSFNbhurGc5qYaJdQv7WtpyG6ahTYNrr2tKGofX2XsOB3JfTnrHXb4AUzpm4ZHsxMHW8fS8M4EBQDxL08Zf0V-j8UBXNpkx6ZN-y6byaEq2X5LUgqpbIZKiKV7j2CJl6ozJNWvPRcaScDkXO6UcE8UjgTLZOdP3un06CRMMLjJfwB87OrN7JCKjc9y2LRkBxhl7MXFVfUcz1FxGRDQXPwh-I_aeFwxe9Bf48kibTLRRQ2Y8x6IqBKEHlOAsFHkitv8tuHBy0eDRuGEdujljKmXOXeOruWnB-o0xUgolupUe_1x_0IvN5KTVzcTX3jV8OgQpnsbFBBEcsn1X9uwZfGLXM6BehsfIlwt0omg0ONDmuVOilSGNc_UxYVHfDrF6ow3Z_zhIn2Gdd5FZzEEHqznuNuolKpMCKrJwzm_TEE1dQgaxC7qFN_3Wg8CSATlsQRYWPV3TEEamVOJd0M662X9HBNWbhnSNpBhspBqufCtgjoHKvxPIKoNCC_YhQ9vrq6ZjvPsdOceNs6zwr7EYRbjP-6dyUPz0LSyeTVOjeH0hHtD2fN6Euad56QPptnGTWh_GtlJqUYv2d2oP2oiqLFw08wCqCltY0jA&sai=AMfl-YR6H9LZFZbm2QUsLKawXiZYPJ51DChZcYNZ2CLZN1Zy7HnBUZaBh8nURMgsK5Fgf4uAUKNTIXdrUwsCbLrj6_XmR2EXiTluZUMLVdYlVN_CT10rFClCR6WiGTdhDISme3YrgiUm5XFdSp93HCvtUjvL4iJwsAU1vk_qcNGa0Aeq6Oudjlza1pNANIukObfIjEmJ-GjN6lE_kcHfdX3YvyXOmWjvjPlfFZdtuZu9MRcHBJACNcvd4ZhYoRilqs5ZhvGMmI2BdmJiH5Wm7QWTKkqDN-TnCImnpd1xBijO0NI97zpVX0imZT_HTXIYbN9iwCY1vyTxGaRAwnhcsz2LKR0fGomzH6M-PZPS3AEQ9EqMAodP4H8uZJRfOZZmaAMDOB4rmcB96FldPeLnIW2bTzHfFBVVPbyPQGzQNEQBE7wB6rItRZ_F&sig=Cg0ArKJSzDZLkNT3f9qHEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9nb2RhZGR5LmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1541&cbvp=1&cstd=1537&cisv=r20240306.62815&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: not-trigger=navigation-source, event-source Referer: https://2e364cc7caa3f2e10b0fb666ab9496ef.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlhWjE-nrLMqamcKd4HCzJGyk-lF6Y-_gdSV1_rcQ-Lc3JBzMSF3zk6wICTe0A; DSID=NO_DATA
2024-03-11 11:57:10 UTC	1638	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Cache-Control: private Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0x7ea1e75912a048420000000000000000","13":"0x93a6ec985e65c3cb0000000000000000","14":"0x715189f243f3be020000000000000000","15":"0x50e9b08879f53ba0000000000000000"},"debug_key":"10447018128650586221","debug_reporting":true,"destination":["https://godaddy.com","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"event_report_window":"345600","expiry":"2592000","filter_data":{"14":["16014670","16044197"],"21":[],"8":["8316070"]},"priority":"0","source_event_id":"2080623705247710850"} X-Content-Type-Options: nosniff Date: Mon, 11 Mar 2024 11:57:10 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Wed, 10-Apr-2024 11:57:10 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 11 Mar 2024 11:57:10 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.16	50293	169.197.150.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:10 UTC	715	OUT	GET /usersync/113 HTTP/1.1 Host: match.deepintent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDIUSER=di_5eeffdf13c334a9c86516; CDIPARTNERS=%7B%221%22%3A%2220240311%22%2C%22141%22%3A%2220240311%22%7D
2024-03-11 11:57:10 UTC	692	IN	HTTP/1.1 303 See Other p3p: policyref='http://cdn.deepintent.com/p3p.xml', CP='NON CUR DEV TAI' location: https://dsum.casalemedia.com/crum?cm_dsp_id=176&external_user_id=di_5eeffdf13c334a9c86516 set-cookie: CDIUSER=di_5eeffdf13c334a9c86516; Max-Age=47260800; SameSite=None; Expires=Tue, 9 Sep 2025 11:57:10 GMT; Domain=deepintent.com; Secure; Path=/ set-cookie: CDIPARTNERS=%7B%221%22%3A%2220240311%22%2C%22141%22%3A%2220240311%22%2C%22113%22%3A%2220240311%22%7D; Max-Age=47260800; SameSite=None; Expires=Tue, 9 Sep 2025 11:57:10 GMT; Domain=deepintent.com; Secure; Path=/ content-type: image/gif content-length: 0 date: Mon, 11 Mar 2024 11:57:10 GMT server: c connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.16	50306	104.36.113.111	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:10 UTC	2861	OUT	GET /AdServer/SPug?partnerID=162538&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; DPSync3=1711324800%3A201_258_256_262_261_260_259_263%7C1710201600%3A248_255%7C1710720000%3A265%7C1711152000%3A257; SyncRTB3=1711324800%3A55_5_165_231_104_8_48_21_166_249_220_22_3_54_46_250_266_71_13%7C1710720000%3A2_223_15%7C1710979200%3A63; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^2^0; pi=156557:3; chkChromeAb67Sec=6; PugT=1710158228; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381
2024-03-11 11:57:10 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 11 Mar 2024 11:57:08 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1710158228; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:57:08 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:57:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.16	50292	34.36.216.150	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:10 UTC	737	OUT	GET /dmp/pixelSync?nid=48 HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=e186753e-f558-43f2-9eb8-0f25b6de5290#1710158208299; _ssuma=eyI0NSI6MTcxMDE1ODIwOTExOSwiNTMiOjE3MTAxNTgyMjU5OTV9
2024-03-11 11:57:10 UTC	1230	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=e186753e-f558-43f2-9eb8-0f25b6de5290#1710158208299; Domain=.sitescout.com; Expires=Tue, 11-Mar-2025 11:57:10 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyI0NSI6MTcxMDE1ODIwOTExOSwiMjQiOjE3MTAxNTgyMzA1MDMsIjM5IjoxNzEwMTU4MjMwNTAzLCI3IjoxNzEwMTU4MjMwNTAzLCI1MyI6MTcxMDE1ODIyNTk5NX0; Domain=.sitescout.com; Expires=Wed, 10-Apr-2024 11:57:10 GMT; Path=/; Secure; SameSite=None location: https://sync.crwdcntrl.net/qmap?c=1389&tp=STSC&tpid=e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3De186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553%26partner_url%3Dhttps%253A%252F%252Fr.casalemedia.com%252Frum%253Fcm_dsp_id%253D64%2526external_user_id%253De186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553%2526gdpr%253D0%2526gdpr_consent%253D Content-Length: 0 date: Mon, 11 Mar 2024 11:57:09 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.16	50320	35.166.28.193	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:10 UTC	819	OUT	GET /ping_match.gif?st=bidswitch&rurl=%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D79%26user_id%3D_wfivefivec_%26expires%3D30%26ssp%3Dsmartadserver%26bsw_param%3D6ec76371-3031-4b49-abb3-349fb3d7cf23 HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=rQpbF21I1RJEgU5; matchpubmatic=5
2024-03-11 11:57:10 UTC	767	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Mon, 11 Mar 2024 11:57:09 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://x.bidswitch.net/sync?dsp_id=79&user_id=rQpbF21I1RJEgU5&expires=30&ssp=smartadserver&bsw_param=6ec76371-3031-4b49-abb3-349fb3d7cf23 Pragma: no-cache Server: PingMatch/v2.0.30-801-g0076fb7#rel-ec2-master i-0991768c636277b6e@us-west-2c@dxedge-app-us-west-2-prod-asg Set-Cookie: wfivefivec=rQpbF21I1RJEgU5; Domain=.w55c.net; Expires=Fri, 11 Apr 2025 11:57:10 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchbidswitch=5; Domain=.w55c.net; Expires=Wed, 10 Apr 2024 11:57:10 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.16	50317	54.69.221.139	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:10 UTC	485	OUT	GET /ibs:dpid=22052&dpuuid=3642666937673580575&redir= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=45232011452423388812062241212727845356; dpm=45232011452423388812062241212727845356
2024-03-11 11:57:10 UTC	891	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:10 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: WWfvjYDPTkg= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-usw2-2-v054-0ef8fb09e.edge-usw2.demdex.com 2 ms set-cookie: dpm=45232011452423388812062241212727845356; Max-Age=15552000; Expires=Sat, 07 Sep 2024 11:57:10 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=45232011452423388812062241212727845356; Max-Age=15552000; Expires=Sat, 07 Sep 2024 11:57:10 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-03-11 11:57:10 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.16	50301	52.46.155.104	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:10 UTC	716	OUT	GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=a1253c92-92e4-cc83-0bb0-ba5688131227 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eu-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_mD47eJIUzEqu3DVtJD2b0; ad-privacy=0
2024-03-11 11:57:10 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 11 Mar 2024 11:57:10 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 6HCM2XR3SRA7XBFCJJNN Set-Cookie: ad-id=A_mD47eJIUzEqu3DVtJD2b0; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 11:57:10 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 11:57:10 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-11 11:57:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.16	50298	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:10 UTC	1260	OUT	GET /redir/?issi=1&partnerid=135&partneruserid=TAM_OK&redirurl=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fdcm%3Fpid%3Df7a5db36-1d5c-4c26-81b6-b4d0807faffb%26id%3DSMART_USER_ID&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; vs=575816=5885997
2024-03-11 11:57:10 UTC	556	IN	HTTP/1.1 302 Found content-length: 0 date: Mon, 11 Mar 2024 11:57:10 GMT cache-control: no-cache,no-store location: https://aax-eu.amazon-adsystem.com/s/dcm?pid=f7a5db36-1d5c-4c26-81b6-b4d0807faffb&id=1899505890594565248&gdpr=0&gdpr_consent= pragma: no-cache set-cookie: csync=116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|135:TAM_OK; expires=Wed, 12 Mar 2025 11:57:10 GMT; domain=smartadserver.com; path=/; SameSite=None; secure p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.16	50291	34.214.251.32	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:10 UTC	835	OUT	GET /ups/55940/sync?_origin=1&redir2=true&uid=Ze7xfMAoIeEAAAzaAIdO4AAAEGAAAAAB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid= HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDSYNC=18z8~2h8b; A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo
2024-03-11 11:57:10 UTC	718	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:57:10 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="18z8~2h8b:175w~2h8b";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Tue, 11-Mar-2025 11:57:10 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://pr-bh.ybp.yahoo.com/sync/casale/Ze7xfMAoIeEAAAzaAIdO4AAAEGAAAAAB Age: 0 Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo; Expires=Tue, 11 Mar 2025 17:57:10 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.16	50305	54.208.174.31	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:10 UTC	744	OUT	GET /bsw_sync?ssp=pubmatic&bsw_user_id=6ec76371-3031-4b49-abb3-349fb3d7cf23 HTTP/1.1 Host: t.pswec.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:10 UTC	759	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Date: Mon, 11 Mar 2024 11:57:10 GMT Location: https://t.pswec.com/ul_cb/bsw_sync?ssp=pubmatic&bsw_user_id=6ec76371-3031-4b49-abb3-349fb3d7cf23 P3P: CP="NON DSP ADMo DEVo TAIo PSAo PSDo IVAo IVDo CONo OUR UNRo IND ONL UNI PUR COM NAV INT DEM STA PRE" Set-Cookie: tuuid=e247a636-2303-4c44-ba6f-6f53475eec38; path=/; expires=Wed, 11-Mar-2026 11:57:10 GMT; domain=.pswec.com; samesite=none; secure Set-Cookie: c=1710158230; path=/; expires=Wed, 11-Mar-2026 11:57:10 GMT; domain=.pswec.com; samesite=none; secure Set-Cookie: tuuid_lu=1710158230; path=/; expires=Wed, 11-Mar-2026 11:57:10 GMT; domain=.pswec.com; samesite=none; secure Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.16	50321	34.117.77.79	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:10 UTC	870	OUT	GET /csync.ashx?fp=40dcaaf904223ef640b08777bb7ed3da08de2c0166ccb1ed6ddd6999579dd017f4cb09cee1a4f8eb&person_id=3642666937673580575&eid=50082 HTTP/1.1 Host: ml314.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pi=3642666937673580575; u=aHR0cHM6Ly9zb3VyY2Vmb3JnZS5uZXQvcHJvamVjdHMvZG9jZmV0Y2hlci9wb3N0ZG93bmxvYWQ%3D; tp=7%253B03%252F11%252F2024%2B11%253A57%253A05%253B0
2024-03-11 11:57:10 UTC	279	IN	HTTP/1.1 200 OK content-type: image/gif expires: Tue, 12 Mar 2024 11:57:10 GMT date: Mon, 11 Mar 2024 11:57:10 GMT server: Google Frontend via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-11 11:57:10 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-03-11 11:57:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.16	50310	34.96.71.22	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:10 UTC	651	OUT	GET /s/ix?cm_dsp_id=18&us_privacy=&gdpr=&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1 Host: s.company-target.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:10 UTC	688	IN	HTTP/1.1 302 Found Access-Control-Allow-Methods: GET,OPTIONS Access-Control-Allow-Origin: *.casalemedia.com Content-Type: text/html; charset=utf-8 Location: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=18&expiration=1726055830&external_user_id=8fb517aa-a8d0-437d-988f-7084f5819e19 Set-Cookie: tuuid=8fb517aa-a8d0-437d-988f-7084f5819e19; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Set-Cookie: tuuid_lu=1710158230\|ix:0; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Date: Mon, 11 Mar 2024 11:57:10 GMT Content-Length: 157 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:57:10 UTC	157	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 63 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 31 38 26 61 6d 70 3b 65 78 70 69 72 61 74 69 6f 6e 3d 31 37 32 36 30 35 35 38 33 30 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 38 66 62 35 31 37 61 61 2d 61 38 64 30 2d 34 33 37 64 2d 39 38 38 66 2d 37 30 38 34 66 35 38 31 39 65 31 39 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://dsum-sec.casalemedia.com/crum?cm_dsp_id=18&expiration=1726055830&external_user_id=8fb517aa-a8d0-437d-988f-7084f5819e19">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.16	50315	104.18.25.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:10 UTC	1131	OUT	GET /z/i.match?p=b6&u=&google_push=AXcoOmRF5W8NAr6bAj2leKfOVpf5YPzmwyGOBL4Qk8UWxtsoHp0JQQY85SL4-cQeNi9_rHcFCBXE2c5C6Ay7fe1qbbggKpd9tHB6SYPy500tMuwErDYeYvmQ-SgIpoMan23eFzYDHNVE2L_UTWrHWxf4SwM&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmRF5W8NAr6bAj2leKfOVpf5YPzmwyGOBL4Qk8UWxtsoHp0JQQY85SL4-cQeNi9_rHcFCBXE2c5C6Ay7fe1qbbggKpd9tHB6SYPy500tMuwErDYeYvmQ-SgIpoMan23eFzYDHNVE2L_UTWrHWxf4SwM%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24 HTTP/1.1 Host: s.tribalfusion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=aUnoeUON6Ju8ZbUxpciddGPZbVOBUU1hxbk1tqV4wa
2024-03-11 11:57:10 UTC	795	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:10 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 43 Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 302 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=aNnseFyg6AbrA7u8PVN85SDLFaYDQAYJBbDheR4Zb71OpnZdIHc20GvxWZc7CRZdwZdgkWQEdbw5fmj33XCodR7Ad; path=/; domain=.tribalfusion.com; expires=Sun, 09-Jun-2024 11:57:10 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=aNnseFyg6AbrA7u8PVN85SDLFaYDQAYJBbDheR4Zb71OpnZdIHc20GvxWZc7CRZdwZdgkWQEdbw5fmj33XCodR7Ad; path=/; domain=.tribalfusion.com; expires=Sun, 09-Jun-2024 11:57:10 GMT; CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 862b5d8dbea50ad1-LAS alt-svc: h3=":443"; ma=86400
2024-03-11 11:57:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 44 01 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.16	50287	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:10 UTC	1167	OUT	GET /redir/?issi=1&partnerid=86&partneruserid=7822940101119878936&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=76:GOOGLE_HOSTED_SI\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg
2024-03-11 11:57:10 UTC	482	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:09 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=76:GOOGLE_HOSTED_SI\|86:7822940101119878936\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; expires=Wed, 12 Mar 2025 11:57:10 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:10 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.16	50314	34.98.64.218	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:10 UTC	791	OUT	GET /w/1.0/sd?id=537072971&val=71dcd657-b7ce-4e56-9064-0f83979f8fcb&ttd_puid=f9f340ef-8e4e-7779-cbbe-38c1e020d9c7&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eu-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=2a5f7fb6-27c9-488e-9168-f0298407ea3a\|1710158208; pd=v2\|1710158229\|vMgavPkWgyiK
2024-03-11 11:57:10 UTC	568	IN	HTTP/1.1 200 OK Vary: Accept Set-Cookie: univ_id=537072971\|71dcd657-b7ce-4e56-9064-0f83979f8fcb\|1710158230712525; Version=1; Expires=Tue, 26-Mar-2024 11:57:10 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Mon, 11 Mar 2024 11:57:10 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:57:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.16	50311	74.121.140.211	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:10 UTC	872	OUT	GET /sync/img?mt_exid=3&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA%3D%3D%26piggybackCookie%3Duid%3A%5BMM_UUID%5D HTTP/1.1 Host: sync.mathtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:10 UTC	708	IN	HTTP/1.1 302 Moved Temporarily Date: Mon, 11 Mar 2024 11:57:10 GMT Content-Type: image/gif Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Server: MT3 1549 cea2cde master iad iad-pixel-x20 config_version:"828" Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" set-cookie: uuid=3de265ee-f196-4200-b07f-5ba8fa18f4f0; domain=.mathtag.com; path=/; expires=Tue, 08-Apr-2025 11:57:10 GMT; SameSite=None; Secure location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0&gdpr=0&gdpr_consent= Expires: Mon, 11 Mar 2024 11:57:09 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.16	50319	3.232.64.79	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:10 UTC	729	OUT	GET /match?gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&referrer_pid=r8hrb20&google_error=15 HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=18e2d5f5e6f-1cc10000010a4999; SERVERID=18841~DM
2024-03-11 11:57:10 UTC	389	IN	HTTP/1.1 200 OK Connection: close Set-Cookie: SERVERID=18841~DM; Domain=eyeota.net; Path=/; Expires=Mon, 11 Mar 2024 12:07:10 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Content-Type: image/gif Content-Length: 70 Date: Mon, 11 Mar 2024 11:57:10 GMT
2024-03-11 11:57:10 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.16	50323	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:10 UTC	1192	OUT	GET /redir/?issi=1&partnerid=66&partneruserid=0a42220400c08ec15f936285&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=91:9A176ADB-73F4-4BD8-A648-23F2443493B5\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg
2024-03-11 11:57:11 UTC	507	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:10 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=66:0a42220400c08ec15f936285\|91:9A176ADB-73F4-4BD8-A648-23F2443493B5\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; expires=Tue, 11 Mar 2025 11:57:10 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:11 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.16	50326	104.18.36.155	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:10 UTC	707	OUT	GET /rum?cm_dsp_id=45&external_user_id=&google_error=15 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
2024-03-11 11:57:10 UTC	996	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:10 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 862b5d8eaba909f5-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; Path=/; Domain=casalemedia.com; Expires=Tue, 11 Mar 2025 11:57:10 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=4192; Path=/; Domain=casalemedia.com; Expires=Sun, 09 Jun 2024 11:57:10 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iOFDwDkE9pgzPzIGxEbGXSqZwWYFUFunTAAk%2BPfX%2Fmcg67VlaeLJ7SqqVBC0eFRfWeCchppom%2B%2BLR2ISIAnM8oFo%2Fa%2BNmXdbaqGTFP8GN04uU5lKaOWgmb%2FLFBuIej%2B%2BSLHHHX0XxwS2kQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-11 11:57:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.16	50302	35.71.131.137	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:10 UTC	893	OUT	GET /track/cmf/generic?ttd_pid=smart-adserver&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFEhQKBXRhcGFkEgsIqK7DwIvz4DwQBRIbCgxzaGFyZXRocm91Z2gSCwjWjMfSi_PgPBAFEhYKB2QwdHJvMWoSCwj-h-Hhi_PgPBAFGAEgASgCMgsIgODmqKPz4DwQBTgBWgc5aHI0cDhnYAI.
2024-03-11 11:57:11 UTC	705	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:57:10 GMT Content-Length: 299 Connection: close server: Kestrel location: https://rtb-csync.smartadserver.com/redir/?partnerid=75&issi=1&partneruserid=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent= set-cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; expires=Tue, 11 Mar 2025 11:57:10 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFEhQKBXRhcGFkEgsIqK7DwIvz4DwQBRIbCgxzaGFyZXRocm91Z2gSCwjWjMfSi_PgPBAFEhYKB2QwdHJvMWoSCwj-h-Hhi_PgPBAFGAEgASgCMgsIqpmb16Pz4DwQBTgBWg5zbWFydC1hZHNlcnZlcmAC; expires=Tue, 11 Mar 2025 11:57:10 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-11 11:57:11 UTC	299	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 74 62 2d 63 73 79 6e 63 2e 73 6d 61 72 74 61 64 73 65 72 76 65 72 2e 63 6f 6d 2f 72 65 64 69 72 2f 3f 70 61 72 74 6e 65 72 69 64 3d 37 35 26 69 73 73 69 3d 31 26 70 61 72 74 6e 65 72 75 73 65 72 69 64 3d 37 31 64 63 64 36 35 37 2d 62 37 63 65 2d 34 65 35 36 2d 39 30 36 34 2d 30 66 38 33 39 37 39 66 38 66 63 62 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 72 74 62 2d 63 73 79 6e 63 2e 73 6d 61 72 74 61 64 73 65 72 76 65 72 2e 63 6f 6d 2f 72 65 64 69 72 2f 3f 70 61 72 74 6e 65 72 69 64 3d 37 35 26 69 73 73 69 3d 31 26 70 61 72 74 6e 65 72 75 73 65 72 69 64 3d 37 31 64 63 64 36 35 37 2d 62 37 63 65 2d 34 65 35 Data Ascii: Redirecting to: <a href="https://rtb-csync.smartadserver.com/redir/?partnerid=75&issi=1&partneruserid=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent=">https://rtb-csync.smartadserver.com/redir/?partnerid=75&issi=1&partneruserid=71dcd657-b7ce-4e5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.16	50331	34.98.64.218	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:10 UTC	704	OUT	GET /w/1.0/sd?id=537148856&val=Ze7xgAAAAwa1TAAh HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eu-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=2a5f7fb6-27c9-488e-9168-f0298407ea3a\|1710158208; pd=v2\|1710158229\|vMgavPkWgyiK
2024-03-11 11:57:11 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Mon, 11 Mar 2024 11:57:11 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:57:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.16	50316	185.184.8.90	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:10 UTC	865	OUT	GET /cm-notify?pi=adxab&google_nid=rtb_house_us&google_push=AXcoOmSAJRqiKrDk695NM5A0bhR-PbKirjUMU0XPtB6Bxc1RwguQH-dmF956DAw2sVHKCv2Y4vavcXcVnIKVuw_hQgBYLNHy-IK58IbCyOEo5pB0qQik5vT4D0CWsGdjc8bVTO3Kh1KpZOphCjRZ2QEAxox5&tc=1 HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=6d5Bhd7V8Z70rO0rzoOe_1710158229627; ts=1710158229
2024-03-11 11:57:11 UTC	628	IN	HTTP/1.1 302 Found date: Mon, 11 Mar 2024 11:57:11 GMT vary: Accept-Encoding location: https://cm.g.doubleclick.net/pixel?google_ula=5153224&google_hm=FhKEXQMH1DSzhfuBW22XwTUCQXVh4MujT2xDVlUE1ZQ&pi=adx&tdc=ams&pi=adxab&google_nid=rtb_house_us&google_push=AXcoOmSAJRqiKrDk695NM5A0bhR-PbKirjUMU0XPtB6Bxc1RwguQH-dmF956DAw2sVHKCv2Y4vavcXcVnIKVuw_hQgBYLNHy-IK58IbCyOEo5pB0qQik5vT4D0CWsGdjc8bVTO3Kh1KpZOphCjRZ2QEAxox5&tc=1 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Mon, 11 Mar 2024 11:57:11 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.16	50325	38.99.107.14	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:10 UTC	418	OUT	GET /sn.ashx?ak=1 HTTP/1.1 Host: pmp.mxptint.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mxpim=R4E330_11235B51F_E079381.1.000000000000000065EEF193
2024-03-11 11:57:11 UTC	242	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: image/gif Expires: -1 Date: Mon, 11 Mar 2024 11:57:10 GMT Connection: close Content-Length: 43 Strict-Transport-Security: max-age=-393163031; includeSubDomains
2024-03-11 11:57:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.16	50330	104.18.36.155	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:10 UTC	735	OUT	GET /rum?cm_dsp_id=81&gdpr=0&external_user_id=DgrDEF4OkREVB5dDWQeLQgEGx0EVCZJEXlwabpLi HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
2024-03-11 11:57:11 UTC	986	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 862b5d901c610a03-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; Path=/; Domain=casalemedia.com; Expires=Tue, 11 Mar 2025 11:57:11 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=4192; Path=/; Domain=casalemedia.com; Expires=Sun, 09 Jun 2024 11:57:11 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K8%2BY6RFgnxk3MjjWyC2S8rq0sUfIbnVxu0GO46K2ADn9PdVCUUuV9P%2BE7vyncu8RynNkxmUdnugvkiRgv8ExvChWpLhK%2FqY4IY%2FHKtCImKRLVXZ4HAIMPWpK2H8wSfwkPvR7F8llj2JmJA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-11 11:57:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.16	50344	35.230.38.116	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	873	OUT	GET /pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=B6512778B5DA4E7C942E6E491CF4A04A
2024-03-11 11:57:11 UTC	723	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Mon, 11 Mar 2024 11:57:11 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:B6512778B5DA4E7C942E6E491CF4A04A&gdpr=0&gdpr_consent= Expires: Sun, 10 Mar 2024 11:57:11 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-03-11 11:57:11 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.16	50338	35.244.154.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	749	OUT	GET /396846.gif?served_by=evergreen&partner_uid=ac353f89-4309-4119-94c7-b832d9bbb81f HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=yhBJVcnL/dBaOOm42RcYUFYmzAEAL4KXC73Hrxo9kEM=; pxrc=CJPju68GEgUI6EcQABIFCNtOEAI=
2024-03-11 11:57:11 UTC	620	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=OObdWnbiCN9aOOm42RcYUFYmzAEAL4KXC73Hrxo9kEM=; Path=/; Domain=rlcdn.com; Expires=Tue, 11 Mar 2025 11:57:11 GMT; Secure; SameSite=None Set-Cookie: pxrc=CJPju68GEgUI6EcQABIFCNtOEAI=; Path=/; Domain=rlcdn.com; Expires=Fri, 10 May 2024 11:57:11 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Mon, 11 Mar 2024 11:57:11 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:57:11 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.16	50340	104.18.36.155	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	725	OUT	GET /crum?cm_dsp_id=41&external_user_id=70a98560-df9e-11ee-9b1b-8fc11e983897 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
2024-03-11 11:57:11 UTC	986	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 862b5d925bc20acd-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; Path=/; Domain=casalemedia.com; Expires=Tue, 11 Mar 2025 11:57:11 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=4192; Path=/; Domain=casalemedia.com; Expires=Sun, 09 Jun 2024 11:57:11 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lEUmYaYBRgZXCYYCrDNP%2FpL2VG22A71fPoj82vM2tRWtOlunyHMLbYDHeuFF04omcBHqLJJb5HkHd2nqhHED2VgxQ2lOxNAY%2FUhQSiV7ksmPjYAR9IPmegqe0N3i%2BoNF90koiRrapbTf%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-11 11:57:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.16	50334	142.251.2.148	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	731	OUT	GET /sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/index.js?1708393659280 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://s0.2mdn.net/sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/index.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:11 UTC	847	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: application/x-javascript Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 68827 Date: Mon, 11 Mar 2024 11:57:11 GMT Expires: Tue, 11 Mar 2025 11:57:11 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 21 Feb 2024 21:32:45 GMT X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:57:11 UTC	405	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 63 6a 73 2c 20 61 6e 29 20 7b 0a 0a 76 61 72 20 70 3b 20 2f 2f 20 73 68 6f 72 74 63 75 74 20 74 6f 20 72 65 66 65 72 65 6e 63 65 20 70 72 6f 74 6f 74 79 70 65 73 0a 76 61 72 20 6c 69 62 3d 7b 7d 3b 76 61 72 20 73 73 3d 7b 7d 3b 76 61 72 20 69 6d 67 3d 7b 7d 3b 0a 6c 69 62 2e 73 73 4d 65 74 61 64 61 74 61 20 3d 20 5b 5d 3b 0a 0a 0a 28 6c 69 62 2e 41 6e 4d 6f 76 69 65 43 6c 69 70 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 74 68 69 73 2e 61 63 74 69 6f 6e 46 72 61 6d 65 73 20 3d 20 5b 5d 3b 0a 09 74 68 69 73 2e 69 67 6e 6f 72 65 50 61 75 73 65 20 3d 20 66 61 6c 73 65 3b 0a 09 74 68 69 73 2e 67 6f 74 6f 41 6e 64 50 6c 61 79 20 3d 20 66 75 6e 63 74 69 6f 6e 28 70 6f 73 69 74 69 6f 6e 4f 72 4c 61 62 65 6c 29 7b 0a 09 09 63 Data Ascii: (function (cjs, an) {var p; // shortcut to reference prototypesvar lib={};var ss={};var img={};lib.ssMetadata = [];(lib.AnMovieClip = function(){this.actionFrames = [];this.ignorePause = false;this.gotoAndPlay = function(positionOrLabel){c
2024-03-11 11:57:11 UTC	1252	IN	Data Raw: 53 74 6f 70 20 3d 20 66 75 6e 63 74 69 6f 6e 28 70 6f 73 69 74 69 6f 6e 4f 72 4c 61 62 65 6c 29 7b 0a 09 09 63 6a 73 2e 4d 6f 76 69 65 43 6c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 67 6f 74 6f 41 6e 64 53 74 6f 70 2e 63 61 6c 6c 28 74 68 69 73 2c 70 6f 73 69 74 69 6f 6e 4f 72 4c 61 62 65 6c 29 3b 0a 09 7d 0a 09 74 68 69 73 2e 73 74 6f 70 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 63 6a 73 2e 4d 6f 76 69 65 43 6c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 6f 70 2e 63 61 6c 6c 28 74 68 69 73 29 3b 0a 09 7d 0a 7d 29 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 70 20 3d 20 6e 65 77 20 63 6a 73 2e 4d 6f 76 69 65 43 6c 69 70 28 29 3b 0a 2f 2f 20 73 79 6d 62 6f 6c 73 3a 0a 0a 0a 0a 28 6c 69 62 2e 43 54 41 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 74 Data Ascii: Stop = function(positionOrLabel){cjs.MovieClip.prototype.gotoAndStop.call(this,positionOrLabel);}this.stop = function(){cjs.MovieClip.prototype.stop.call(this);}}).prototype = p = new cjs.MovieClip();// symbols:(lib.CTA = function() {t
2024-03-11 11:57:11 UTC	1252	IN	Data Raw: 6e 73 74 61 6e 63 65 2e 73 65 74 54 72 61 6e 73 66 6f 72 6d 28 2d 31 35 30 2c 2d 31 32 35 2c 30 2e 35 2c 30 2e 35 29 3b 0a 0a 09 74 68 69 73 2e 74 69 6d 65 6c 69 6e 65 2e 61 64 64 54 77 65 65 6e 28 63 6a 73 2e 54 77 65 65 6e 2e 67 65 74 28 74 68 69 73 2e 69 6e 73 74 61 6e 63 65 29 2e 77 61 69 74 28 31 29 29 3b 0a 0a 09 74 68 69 73 2e 5f 72 65 6e 64 65 72 46 69 72 73 74 46 72 61 6d 65 28 29 3b 0a 0a 7d 29 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 70 20 3d 20 6e 65 77 20 63 6a 73 2e 4d 6f 76 69 65 43 6c 69 70 28 29 3b 0a 70 2e 6e 6f 6d 69 6e 61 6c 42 6f 75 6e 64 73 20 3d 20 6e 65 77 20 63 6a 73 2e 52 65 63 74 61 6e 67 6c 65 28 2d 31 35 30 2c 2d 31 32 35 2c 33 30 30 2c 32 35 30 29 3b 0a 0a 0a 28 6c 69 62 2e 54 77 65 65 6e 32 39 20 3d 20 66 75 6e 63 74 69 6f 6e Data Ascii: nstance.setTransform(-150,-125,0.5,0.5);this.timeline.addTween(cjs.Tween.get(this.instance).wait(1));this._renderFirstFrame();}).prototype = p = new cjs.MovieClip();p.nominalBounds = new cjs.Rectangle(-150,-125,300,250);(lib.Tween29 = function
2024-03-11 11:57:11 UTC	1252	IN	Data Raw: 6e 63 65 2e 73 65 74 54 72 61 6e 73 66 6f 72 6d 28 2d 31 35 30 2e 32 2c 2d 31 32 35 2e 31 35 2c 30 2e 35 30 30 37 2c 30 2e 35 30 30 37 29 3b 0a 0a 09 74 68 69 73 2e 74 69 6d 65 6c 69 6e 65 2e 61 64 64 54 77 65 65 6e 28 63 6a 73 2e 54 77 65 65 6e 2e 67 65 74 28 74 68 69 73 2e 69 6e 73 74 61 6e 63 65 29 2e 77 61 69 74 28 31 29 29 3b 0a 0a 09 74 68 69 73 2e 5f 72 65 6e 64 65 72 46 69 72 73 74 46 72 61 6d 65 28 29 3b 0a 0a 7d 29 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 70 20 3d 20 6e 65 77 20 63 6a 73 2e 4d 6f 76 69 65 43 6c 69 70 28 29 3b 0a 70 2e 6e 6f 6d 69 6e 61 6c 42 6f 75 6e 64 73 20 3d 20 6e 65 77 20 63 6a 73 2e 52 65 63 74 61 6e 67 6c 65 28 2d 31 35 30 2e 32 2c 2d 31 32 35 2e 31 2c 33 30 30 2e 34 2c 32 35 30 2e 33 29 3b 0a 0a 0a 28 6c 69 62 2e 54 77 65 Data Ascii: nce.setTransform(-150.2,-125.15,0.5007,0.5007);this.timeline.addTween(cjs.Tween.get(this.instance).wait(1));this._renderFirstFrame();}).prototype = p = new cjs.MovieClip();p.nominalBounds = new cjs.Rectangle(-150.2,-125.1,300.4,250.3);(lib.Twe
2024-03-11 11:57:11 UTC	1252	IN	Data Raw: 38 2e 30 35 2c 30 2e 38 29 3b 0a 0a 09 74 68 69 73 2e 73 68 61 70 65 5f 33 20 3d 20 6e 65 77 20 63 6a 73 2e 53 68 61 70 65 28 29 3b 0a 09 74 68 69 73 2e 73 68 61 70 65 5f 33 2e 67 72 61 70 68 69 63 73 2e 66 28 22 23 31 31 31 31 31 31 22 29 2e 73 28 29 2e 70 28 22 41 67 76 41 78 51 67 55 67 55 41 41 67 64 51 41 41 67 63 41 55 67 55 51 41 54 67 54 41 63 41 41 51 41 63 41 41 41 55 41 54 51 41 55 41 55 41 41 41 63 51 41 41 41 64 67 55 41 55 51 67 55 41 55 67 63 67 42 51 67 63 41 41 67 54 67 54 67 41 67 67 67 69 51 67 4d 41 4f 41 41 41 55 51 41 41 41 56 41 4d 41 4f 51 41 4f 41 4f 41 53 41 41 51 41 55 41 41 41 4d 67 4f 51 41 4e 67 4e 41 42 67 57 51 67 42 67 55 67 4e 67 4f 51 67 4d 67 4f 67 55 41 41 51 67 53 41 41 67 4f 41 4f 67 22 29 3b 0a 09 74 68 69 73 2e 73 Data Ascii: 8.05,0.8);this.shape_3 = new cjs.Shape();this.shape_3.graphics.f("#111111").s().p("AgvAxQgUgUAAgdQAAgcAUgUQATgTAcAAQAcAAAUATQAUAUAAAcQAAAdgUAUQgUAUgcgBQgcAAgTgTgAgggiQgMAOAAAUQAAAVAMAOQAOAOASAAQAUAAAMgOQANgNABgWQgBgUgNgOQgMgOgUAAQgSAAgOAOg");this.s
2024-03-11 11:57:11 UTC	1252	IN	Data Raw: 41 4f 67 4b 51 41 4f 67 4b 41 55 41 41 51 41 59 67 42 41 4f 41 4f 51 41 4f 41 4f 41 41 41 61 49 41 41 42 51 49 67 54 41 41 49 67 42 67 58 51 67 51 41 5a 67 65 41 41 51 67 56 41 41 67 4d 67 4b 67 41 67 5a 41 4d 51 67 49 41 48 41 41 41 4b 51 41 41 41 56 41 61 41 41 51 41 53 41 41 41 4d 67 4c 51 41 4b 67 4b 41 43 67 50 51 67 53 67 49 67 53 41 41 51 67 50 41 41 67 4a 41 47 67 22 29 3b 0a 09 74 68 69 73 2e 73 68 61 70 65 5f 37 2e 73 65 74 54 72 61 6e 73 66 6f 72 6d 28 31 34 2e 33 37 35 2c 30 2e 39 29 3b 0a 0a 09 74 68 69 73 2e 73 68 61 70 65 5f 38 20 3d 20 6e 65 77 20 63 6a 73 2e 53 68 61 70 65 28 29 3b 0a 09 74 68 69 73 2e 73 68 61 70 65 5f 38 2e 67 72 61 70 68 69 63 73 2e 66 28 22 23 31 31 31 31 31 31 22 29 2e 73 28 29 2e 70 28 22 41 67 33 41 31 49 41 56 41 Data Ascii: AOgKQAOgKAUAAQAYgBAOAOQAOAOAAAaIAABQIgTAAIgBgXQgQAZgeAAQgVAAgMgKgAgZAMQgIAHAAAKQAAAVAaAAQASAAAMgLQAKgKACgPQgSgIgSAAQgPAAgJAGg");this.shape_7.setTransform(14.375,0.9);this.shape_8 = new cjs.Shape();this.shape_8.graphics.f("#111111").s().p("Ag3A1IAVA
2024-03-11 11:57:11 UTC	1252	IN	Data Raw: 4c 51 67 4b 41 4b 41 41 41 52 49 41 41 42 4d 49 67 57 41 41 49 41 41 69 44 49 41 57 41 41 49 41 41 41 54 51 41 50 67 56 41 5a 41 41 51 41 58 41 41 41 4d 41 4e 51 41 4f 41 4f 41 41 41 58 49 41 41 42 54 67 22 29 3b 0a 09 74 68 69 73 2e 73 68 61 70 65 5f 31 32 2e 73 65 74 54 72 61 6e 73 66 6f 72 6d 28 2d 35 30 2e 36 2c 30 2e 37 37 35 29 3b 0a 0a 09 74 68 69 73 2e 73 68 61 70 65 5f 31 33 20 3d 20 6e 65 77 20 63 6a 73 2e 53 68 61 70 65 28 29 3b 0a 09 74 68 69 73 2e 73 68 61 70 65 5f 31 33 2e 67 72 61 70 68 69 63 73 2e 66 28 22 23 31 31 31 31 31 31 22 29 2e 73 28 29 2e 70 28 22 41 67 75 41 79 51 67 52 67 53 41 41 67 65 51 41 41 67 65 41 54 67 55 51 41 54 67 55 41 64 41 42 51 41 62 41 41 41 51 41 50 51 41 52 41 51 41 41 41 64 49 41 41 41 4d 49 68 70 41 41 51 41 Data Ascii: LQgKAKAAARIAABMIgWAAIAAiDIAWAAIAAATQAPgVAZAAQAXAAAMANQAOAOAAAXIAABTg");this.shape_12.setTransform(-50.6,0.775);this.shape_13 = new cjs.Shape();this.shape_13.graphics.f("#111111").s().p("AguAyQgRgSAAgeQAAgeATgUQATgUAdABQAbAAAQAPQARAQAAAdIAAAMIhpAAQA
2024-03-11 11:57:11 UTC	1252	IN	Data Raw: 74 68 69 73 2e 73 68 61 70 65 5f 36 7d 2c 7b 74 3a 74 68 69 73 2e 73 68 61 70 65 5f 35 7d 2c 7b 74 3a 74 68 69 73 2e 73 68 61 70 65 5f 34 7d 2c 7b 74 3a 74 68 69 73 2e 73 68 61 70 65 5f 33 7d 2c 7b 74 3a 74 68 69 73 2e 73 68 61 70 65 5f 32 7d 2c 7b 74 3a 74 68 69 73 2e 73 68 61 70 65 5f 31 7d 2c 7b 74 3a 74 68 69 73 2e 73 68 61 70 65 7d 5d 7d 29 2e 77 61 69 74 28 31 29 29 3b 0a 0a 09 74 68 69 73 2e 5f 72 65 6e 64 65 72 46 69 72 73 74 46 72 61 6d 65 28 29 3b 0a 0a 7d 29 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 70 20 3d 20 6e 65 77 20 63 6a 73 2e 4d 6f 76 69 65 43 6c 69 70 28 29 3b 0a 70 2e 6e 6f 6d 69 6e 61 6c 42 6f 75 6e 64 73 20 3d 20 6e 65 77 20 63 6a 73 2e 52 65 63 74 61 6e 67 6c 65 28 2d 31 30 35 2e 37 2c 2d 32 30 2e 33 2c 32 33 30 2e 34 2c 33 37 29 3b Data Ascii: this.shape_6},{t:this.shape_5},{t:this.shape_4},{t:this.shape_3},{t:this.shape_2},{t:this.shape_1},{t:this.shape}]}).wait(1));this._renderFirstFrame();}).prototype = p = new cjs.MovieClip();p.nominalBounds = new cjs.Rectangle(-105.7,-20.3,230.4,37);
2024-03-11 11:57:11 UTC	1252	IN	Data Raw: 4d 41 4c 51 41 4b 41 4d 41 53 41 41 51 41 67 41 41 41 47 67 61 49 41 57 41 41 51 67 4a 41 73 67 7a 41 41 51 67 64 41 41 67 52 67 52 67 41 41 71 67 4c 51 67 42 67 52 67 4c 67 4b 51 67 4b 67 4b 67 52 41 41 51 67 51 41 41 67 4d 41 4c 51 67 4c 41 4a 67 44 41 52 49 42 52 41 41 49 41 41 41 41 67 22 29 3b 0a 09 74 68 69 73 2e 73 68 61 70 65 5f 32 2e 73 65 74 54 72 61 6e 73 66 6f 72 6d 28 31 31 30 2e 36 35 2c 33 2e 38 37 35 29 3b 0a 0a 09 74 68 69 73 2e 73 68 61 70 65 5f 33 20 3d 20 6e 65 77 20 63 6a 73 2e 53 68 61 70 65 28 29 3b 0a 09 74 68 69 73 2e 73 68 61 70 65 5f 33 2e 67 72 61 70 68 69 63 73 2e 66 28 22 23 31 31 31 31 31 31 22 29 2e 73 28 29 2e 70 28 22 41 67 4b 42 62 49 41 41 69 31 49 41 56 41 41 49 41 41 43 31 67 22 29 3b 0a 09 74 68 69 73 2e 73 68 61 70 Data Ascii: MALQAKAMASAAQAgAAAGgaIAWAAQgJAsgzAAQgdAAgRgRgAAqgLQgBgRgLgKQgKgKgRAAQgQAAgMALQgLAJgDARIBRAAIAAAAg");this.shape_2.setTransform(110.65,3.875);this.shape_3 = new cjs.Shape();this.shape_3.graphics.f("#111111").s().p("AgKBbIAAi1IAVAAIAAC1g");this.shap
2024-03-11 11:57:11 UTC	1252	IN	Data Raw: 65 5f 37 2e 67 72 61 70 68 69 63 73 2e 66 28 22 23 31 31 31 31 31 31 22 29 2e 73 28 29 2e 70 28 22 41 41 50 41 2b 51 67 46 67 46 41 41 67 4a 51 41 41 67 4e 41 48 67 61 49 41 41 41 41 51 67 4a 41 62 67 4f 41 51 51 67 4f 41 50 67 50 41 41 51 67 4b 41 41 67 47 67 47 51 67 46 67 47 41 41 67 4a 51 41 41 67 49 41 48 67 57 49 41 4e 67 6f 51 41 45 67 4e 41 41 67 47 51 41 41 67 49 67 48 41 42 51 67 48 67 42 67 47 41 4b 51 67 49 41 4d 67 46 41 59 49 41 41 41 41 51 41 43 67 63 41 4d 67 51 51 41 4e 67 52 41 50 41 42 51 41 48 41 41 41 45 41 45 51 41 46 41 45 41 41 41 4a 51 41 41 41 49 67 47 41 55 49 67 4f 41 70 51 67 46 41 50 41 41 41 48 51 41 41 41 4b 41 4b 41 41 51 41 4f 41 41 41 4f 67 61 51 41 4e 67 57 41 51 68 46 49 41 59 41 41 49 67 5a 42 68 49 67 42 41 4c 51 41 Data Ascii: e_7.graphics.f("#111111").s().p("AAPA+QgFgFAAgJQAAgNAHgaIAAAAQgJAbgOAQQgOAPgPAAQgKAAgGgGQgFgGAAgJQAAgIAHgWIANgoQAEgNAAgGQAAgIgHABQgHgBgGAKQgIAMgFAYIAAAAQACgcAMgQQANgRAPABQAHAAAEAEQAFAEAAAJQAAAIgGAUIgOApQgFAPAAAHQAAAKAKAAQAOAAAOgaQANgWAQhFIAYAAIgZBhIgBALQA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.16	50336	104.18.24.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	917	OUT	GET /i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1 Host: a.tribalfusion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=aUnoeUON6Ju8ZbUxpciddGPZbVOBUU1hxbk1tqV4wa
2024-03-11 11:57:11 UTC	821	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:11 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 43 Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 302 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=ajntAZcOleq9PZabpryMqnxC9KThWTFiUJX5MZcHB1F3hHc7q1LISQ9JDSn7HCaobmZdHTEZbnvwqogCOfRgMYV1Uaj2KJJLrkhZb6; path=/; domain=.tribalfusion.com; expires=Sun, 09-Jun-2024 11:57:11 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=ajntAZcOleq9PZabpryMqnxC9KThWTFiUJX5MZcHB1F3hHc7q1LISQ9JDSn7HCaobmZdHTEZbnvwqogCOfRgMYV1Uaj2KJJLrkhZb6; path=/; domain=.tribalfusion.com; expires=Sun, 09-Jun-2024 11:57:11 GMT; CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 862b5d92f85009ff-LAS alt-svc: h3=":443"; ma=86400
2024-03-11 11:57:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 44 01 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.16	50335	216.22.16.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	973	OUT	GET /redir/?issi=1&partnerid=100&partneruserid=ec7ad717-1f8c-4815-8c2c-86fdc6330201&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
2024-03-11 11:57:11 UTC	490	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:10 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK; expires=Tue, 11 Mar 2025 11:57:11 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:11 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.16	50354	35.80.168.78	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	504	OUT	GET /sync/openx/6d3426ab-1ee2-e530-fa69-2e341f77148e?gdpr=0 HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo
2024-03-11 11:57:11 UTC	778	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo; Expires=Tue, 11 Mar 2025 17:57:11 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-11 11:57:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.16	50356	142.251.2.149	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	2918	OUT	GET /pcs/view?xai=AKAOjssr9-mhLE0SfG-5qH3RyP1YWYQmPZqAZD-JNFW9L9ZZB624P4aaDVY1sueg4t2dCU-JyFaiv-A2-319CZSIk0BpZ_YkvHN5TLkk2xaURijKmN_lfni-dftf-oA1ghoL7g1eVc6DrytzA0bppgpqN9xghAxNs2qRJHZJDbdTUTyvGa3I_ZW61Eed_fzUUaEj1u30mN61IGPCOu03Qk_jYH37D8yPJvLehYnNsO_qgWaRjls9fKckHaF1jve_g1OlJ9Tk5nAKA8NjqpZskV4PyOoFpejrQ2BsYts-w7qABMU7abEXUTtu2iBTVjqU7gl2yy6bL3fySGF5Jvv1b2dxNbfJsjwOjj5rlKcu88XQK00Uqh2_lGXz_sV61HYY-rUrWgiMGiLPQI2vkkVQ_QthUNyU6hjUWr0dgYj4hqEX9vb61ZtBM4ZXxxlix-owVU0mlQGKGE8w9dEzSy5WefX1fI_pZLX12va6uze7P7Ceh-6dOYf9WodT_VRegF-CPdTFkKoYghuNNhYFLPI5dDE3zoUv18dqtnBoG0Rtxbo2_rp0lhzMmjAO7uSaJgY6AikEVilto2fWQnNwTpKqsG9lGKG7Z8tD9sJwpRho6iCScHtqdrMqabOPDxqHogVxN3vvJm9EHhFkm92paYCzXKNTha_7CuCDjO5eAo73VWoKSjDdMqWqiLfx6D3_KbUY_xNgmpXFKx06flMwLgRgpT5kbQpwV_vtWY5ZPMI8IZjMtXabY7O3RxzjsWXj_HeukVqg_GRs0UYG7ijSUu-k0aPRWn2hjo3Ilse5byLn0dm2Gb7jAp6inVQP4v45voC6GkBsFlnV9dvXRBjYzE5FkgByXD0udadFXuyAUSFNbhurGc5qYaJdQv7WtpyG6ahTYNrr2tKGofX2XsOB3JfTnrHXb4AUzpm4ZHsxMHW8fS8M4EBQDxL08Zf0V-j8UBXNpkx6ZN-y6byaEq2X5LUgqpbIZKiKV7j2CJl6ozJNWvPRcaScDkXO6UcE8UjgTLZOdP3un06CRMMLjJfwB87OrN7JCKjc9y2LRkBxhl7MXFVfUcz1FxGRDQXPwh-I_aeFwxe9Bf48kibTLRRQ2Y8x6IqBKEHlOAsFHkitv8tuHBy0eDRuGEdujljKmXOXeOruWnB-o0xUgolupUe_1x_0IvN5KTVzcTX3jV8OgQpnsbFBBEcsn1X9uwZfGLXM6BehsfIlwt0omg0ONDmuVOilSGNc_UxYVHfDrF6ow3Z_zhIn2Gdd5FZzEEHqznuNuolKpMCKrJwzm_TEE1dQgaxC7qFN_3Wg8CSATlsQRYWPV3TEEamVOJd0M662X9HBNWbhnSNpBhspBqufCtgjoHKvxPIKoNCC_YhQ9vrq6ZjvPsdOceNs6zwr7EYRbjP-6dyUPz0LSyeTVOjeH0hHtD2fN6Euad56QPptnGTWh_GtlJqUYv2d2oP2oiqLFw08wCqCltY0jA&sai=AMfl-YR6H9LZFZbm2QUsLKawXiZYPJ51DChZcYNZ2CLZN1Zy7HnBUZaBh8nURMgsK5Fgf4uAUKNTIXdrUwsCbLrj6_XmR2EXiTluZUMLVdYlVN_CT10rFClCR6WiGTdhDISme3YrgiUm5XFdSp93HCvtUjvL4iJwsAU1vk_qcNGa0Aeq6Oudjlza1pNANIukObfIjEmJ-GjN6lE_kcHfdX3YvyXOmWjvjPlfFZdtuZu9MRcHBJACNcvd4ZhYoRilqs5ZhvGMmI2BdmJiH5Wm7QWTKkqDN-TnCImnpd1xBijO0NI97zpVX0imZT_HTXIYbN9iwCY1vyTxGaRAwnhcsz2LKR0fGomzH6M-PZPS3AEQ9EqMAodP4H8uZJRfOZZmaAMDOB4rmcB96FldPeLnIW2bTzHfFBVVPbyPQGzQNEQBE7wB6rItRZ_F&sig=Cg0ArKJSzDZLkNT3f9qHEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9nb2RhZGR5LmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1541&cbvp=1&cstd=1537&cisv=r20240306.62815&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlhWjE-nrLMqamcKd4HCzJGyk-lF6Y-_gdSV1_rcQ-Lc3JBzMSF3zk6wICTe0A; DSID=NO_DATA; ar_debug=1
2024-03-11 11:57:11 UTC	895	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Cache-Control: private Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 11 Mar 2024 11:57:11 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.16	50372	192.184.67.70	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	706	OUT	GET /pixel/p-EtBqU4Lj3YbAv.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=65eef17d-816a8-799a4-641fc; d=EJsBGAGsK_ijC_vLEM-7EA
2024-03-11 11:57:11 UTC	388	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:57:11 GMT Content-Length: 0 Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://rtb-csync.smartadserver.com/redir/?partnerid=80&gdpr=0&partneruserid=VbPHRgW3lUdOvpMVAr6PFFq_wxdOsJYSBeXINTmx Pragma: no-cache Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.16	50384	34.117.77.79	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	635	OUT	GET /csync.ashx?fp=40dcaaf904223ef640b08777bb7ed3da08de2c0166ccb1ed6ddd6999579dd017f4cb09cee1a4f8eb&person_id=3642666937673580575&eid=50082 HTTP/1.1 Host: ml314.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pi=3642666937673580575; u=aHR0cHM6Ly9zb3VyY2Vmb3JnZS5uZXQvcHJvamVjdHMvZG9jZmV0Y2hlci9wb3N0ZG93bmxvYWQ%3D; tp=7%253B03%252F11%252F2024%2B11%253A57%253A05%253B0
2024-03-11 11:57:11 UTC	279	IN	HTTP/1.1 200 OK content-type: image/gif expires: Tue, 12 Mar 2024 11:57:11 GMT date: Mon, 11 Mar 2024 11:57:11 GMT server: Google Frontend via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-11 11:57:11 UTC	54	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2bGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.16	50345	34.117.77.79	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	842	OUT	GET /csync.ashx?person_id=3642666937673580575&eid=50596&fp=ef0ee26ff141c186c8f416092ed9f16d&gdpr=&gdpr_consent= HTTP/1.1 Host: ml314.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pi=3642666937673580575; u=aHR0cHM6Ly9zb3VyY2Vmb3JnZS5uZXQvcHJvamVjdHMvZG9jZmV0Y2hlci9wb3N0ZG93bmxvYWQ%3D; tp=7%253B03%252F11%252F2024%2B11%253A57%253A05%253B0
2024-03-11 11:57:11 UTC	279	IN	HTTP/1.1 200 OK content-type: image/gif expires: Tue, 12 Mar 2024 11:57:11 GMT date: Mon, 11 Mar 2024 11:57:11 GMT server: Google Frontend via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-11 11:57:11 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-03-11 11:57:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.16	50376	104.36.113.107	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	3196	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; PugT=1710158228; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=7; pi=162538:4; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_220_250_234_3_13_56_240_55_231_71_264_254_165_48_7_54_5_104_249_46_176%7C1711411200%3A35; SPugT=1710158228
2024-03-11 11:57:11 UTC	695	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:57:10 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 09-Jun-2024 11:57:10 GMT; path=/ Set-Cookie: PugT=1710158230; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:57:10 GMT; path=/ Location: https://image8.pubmatic.com/AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:57:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.16	50368	54.208.174.31	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	837	OUT	GET /ul_cb/bsw_sync?ssp=pubmatic&bsw_user_id=6ec76371-3031-4b49-abb3-349fb3d7cf23 HTTP/1.1 Host: t.pswec.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=e247a636-2303-4c44-ba6f-6f53475eec38; c=1710158230; tuuid_lu=1710158230
2024-03-11 11:57:11 UTC	666	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Date: Mon, 11 Mar 2024 11:57:11 GMT Location: https://x.bidswitch.net/sync?dsp_id=2&user_id=e247a636-2303-4c44-ba6f-6f53475eec38&expires=3&user_group=1&ssp=pubmatic P3P: CP="NON DSP ADMo DEVo TAIo PSAo PSDo IVAo IVDo CONo OUR UNRo IND ONL UNI PUR COM NAV INT DEM STA PRE" Set-Cookie: tuuid=e247a636-2303-4c44-ba6f-6f53475eec38; path=/; expires=Wed, 11-Mar-2026 11:57:11 GMT; domain=.pswec.com; samesite=none; secure Set-Cookie: tuuid_lu=1710158231; path=/; expires=Wed, 11-Mar-2026 11:57:11 GMT; domain=.pswec.com; samesite=none; secure Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.16	50342	74.119.118.138	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	874	OUT	GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:11 UTC	441	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:11 GMT server: Kestrel cache-control: no-cache expires: Mon, 11 Mar 2024 00:00:00 GMT pragma: no-cache transfer-encoding: chunked x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 379118 strict-transport-security: max-age=31536000; preload; connection: close
2024-03-11 11:57:11 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.16	50364	142.251.2.148	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 282 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:11 UTC	282	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 64 65 62 75 67 63 6f 6e 76 65 72 73 69 6f 6e 64 6f 6d 61 69 6e 31 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 64 65 62 75 67 63 6f 6e 76 65 72 73 69 6f 6e 64 6f 6d 61 69 6e 32 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 67 6f 64 61 64 64 79 2e 63 6f 6d 22 5d 2c 22 73 6f 75 72 63 65 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 30 34 34 37 30 31 38 31 32 38 36 35 30 35 38 36 32 32 31 22 2c 22 73 6f 75 72 63 65 5f 65 76 65 6e 74 5f 69 64 22 3a 22 32 30 38 30 36 32 33 37 30 35 32 34 37 37 31 30 38 35 30 22 2c 22 73 6f 75 72 63 65 5f 73 69 74 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 22 Data Ascii: [{"body":{"attribution_destination":["https://debugconversiondomain1.com","https://debugconversiondomain2.com","https://godaddy.com"],"source_debug_key":"10447018128650586221","source_event_id":"2080623705247710850","source_site":"https://sourceforge.net"
2024-03-11 11:57:11 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 11 Mar 2024 11:57:11 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.16	50343	74.121.140.211	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	738	OUT	GET /sync/img?mt_exid=15&redir=https%3A%2F%2Fdsum-sec.casalemedia.com%2Fcrum%3Fcm_dsp_id%3D3%26external_user_id%3D%5BMM_UUID%5D&us_privacy=&gdpr=&gdpr_consent= HTTP/1.1 Host: sync.mathtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:11 UTC	664	IN	HTTP/1.1 302 Moved Temporarily Date: Mon, 11 Mar 2024 11:57:55 GMT Content-Type: image/gif Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Server: MT3 1549 cea2cde master iad iad-pixel-x30 config_version:"828" Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" set-cookie: uuid=3e9d65ee-f197-4b00-b33c-8e23896e09ac; domain=.mathtag.com; path=/; expires=Tue, 08-Apr-2025 11:57:11 GMT; SameSite=None; Secure location: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=3&external_user_id=3e9d65ee-f197-4b00-b33c-8e23896e09ac&gdpr=&gdpr_consent= Expires: Mon, 11 Mar 2024 11:57:54 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.16	50369	52.8.161.245	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	718	OUT	GET /qmap?c=240&tp=PUBM&tpid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=3; _cc_id=9d77637072f92cb5f5d20c39a1b22cb5
2024-03-11 11:57:11 UTC	313	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:11 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.41.0.14 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-03-11 11:57:11 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.16	50383	172.64.151.101	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	710	OUT	GET /crum?cm_dsp_id=176&external_user_id=di_5eeffdf13c334a9c86516 HTTP/1.1 Host: dsum.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
2024-03-11 11:57:11 UTC	966	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 862b5d95298f0ad7-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; Path=/; Domain=casalemedia.com; Expires=Tue, 11 Mar 2025 11:57:11 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=4192; Path=/; Domain=casalemedia.com; Expires=Sun, 09 Jun 2024 11:57:11 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qmU5gA8R9u0E7q9BAz3U5qxbQxAnpieeVW3QxYGcM3Gs7ZD3coCyr8ZMpe8xmBZN50YBBYtht4tA8PJNBxPXtW44RMOo7mVwJpazgaWL85URIjrVYeyoPiUzn1cZYgMgV6CaeBgH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-11 11:57:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.16	50346	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	1190	OUT	GET /redir/?issi=1&partnerid=33&partneruserid=Ze7xfMAoIeEAAAzaAIdO4AAA%264192 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
2024-03-11 11:57:11 UTC	523	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:11 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK; expires=Tue, 11 Mar 2025 11:57:11 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:11 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.16	50352	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	1188	OUT	GET /redir/?partnerid=76&partneruserid=&gdpr=0&gdpr_consent=&google_error=15 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
2024-03-11 11:57:11 UTC	128	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:10 GMT transfer-encoding: chunked connection: close
2024-03-11 11:57:11 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.16	50389	104.18.25.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	929	OUT	GET /z/i.match?p=b6&u=&google_push=AXcoOmRF5W8NAr6bAj2leKfOVpf5YPzmwyGOBL4Qk8UWxtsoHp0JQQY85SL4-cQeNi9_rHcFCBXE2c5C6Ay7fe1qbbggKpd9tHB6SYPy500tMuwErDYeYvmQ-SgIpoMan23eFzYDHNVE2L_UTWrHWxf4SwM&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmRF5W8NAr6bAj2leKfOVpf5YPzmwyGOBL4Qk8UWxtsoHp0JQQY85SL4-cQeNi9_rHcFCBXE2c5C6Ay7fe1qbbggKpd9tHB6SYPy500tMuwErDYeYvmQ-SgIpoMan23eFzYDHNVE2L_UTWrHWxf4SwM%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24 HTTP/1.1 Host: s.tribalfusion.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=aNnseFyg6AbrA7u8PVN85SDLFaYDQAYJBbDheR4Zb71OpnZdIHc20GvxWZc7CRZdwZdgkWQEdbw5fmj33XCodR7Ad
2024-03-11 11:57:11 UTC	791	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:11 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 43 Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 302 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=aWnsAGujieEo7YxU2qxDpvcKPxQFjxTlfMCga8247fmGeFKTZcuYdZbE1OyOVjGqiZdaHH3hH3rwh6sWBPufp64; path=/; domain=.tribalfusion.com; expires=Sun, 09-Jun-2024 11:57:11 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=aWnsAGujieEo7YxU2qxDpvcKPxQFjxTlfMCga8247fmGeFKTZcuYdZbE1OyOVjGqiZdaHH3hH3rwh6sWBPufp64; path=/; domain=.tribalfusion.com; expires=Sun, 09-Jun-2024 11:57:11 GMT; CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 862b5d94c97109ff-LAS alt-svc: h3=":443"; ma=86400
2024-03-11 11:57:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 44 01 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.16	50370	52.8.161.245	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	1083	OUT	GET /qmap?c=1389&tp=STSC&tpid=e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3De186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553%26partner_url%3Dhttps%253A%252F%252Fr.casalemedia.com%252Frum%253Fcm_dsp_id%253D64%2526external_user_id%253De186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553%2526gdpr%253D0%2526gdpr_consent%253D HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=3; _cc_id=9d77637072f92cb5f5d20c39a1b22cb5
2024-03-11 11:57:12 UTC	563	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:57:12 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.41.11.233 Location: https://pixel.tapad.com/idsync/ex/push?partner_id=2499&partner_device_id=e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&partner_url=https%3A%2F%2Fr.casalemedia.com%2Frum%3Fcm_dsp_id%3D64%26external_user_id%3De186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553%26gdpr%3D0%26gdpr_consent%3D Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.16	50367	52.27.232.237	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	641	OUT	GET /?companyId=673&id=pubmatic_id:9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1 Host: io.narrative.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:11 UTC	391	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:57:11 GMT Location: https://io.narrative.io/?io.narrative.guid.v2=7eb19c60-df9e-11ee-88ca-0ab6e37f1c27&companyId=673&id=pubmatic_id:9A176ADB-73F4-4BD8-A648-23F2443493B5 Server: nginx/1.22.1 Set-Cookie: io.narrative.guid.v2=7eb19c60-df9e-11ee-88ca-0ab6e37f1c27; Max-Age=47278080; SameSite=None; Secure Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.16	50366	3.218.15.224	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	644	OUT	GET /s/75145?bidder_id=195755&bidder_uuid=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:12 UTC	490	IN	HTTP/1.1 303 See Other Date: Mon, 11 Mar 2024 11:57:11 GMT Content-Length: 0 Connection: close Location: /s/75145?bidder_id=195755&bidder_uuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&_li_chk=true&previous_uuid=0d1e68fad7fe46a8ba8fe840f06a5d57 Set-Cookie: lidid=0d1e68fa-d7fe-46a8-ba8f-e840f06a5d57; Max-Age=63072000; Expires=Wed, 11 Mar 2026 11:57:11 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.16	50361	35.212.133.238	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	783	OUT	GET /sync?dsp_id=79&user_id=rQpbF21I1RJEgU5&expires=30&ssp=smartadserver&bsw_param=6ec76371-3031-4b49-abb3-349fb3d7cf23 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=6ec76371-3031-4b49-abb3-349fb3d7cf23; c=1710158227; tuuid_lu=1710158229
2024-03-11 11:57:12 UTC	550	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:57:11 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //rtb-csync.smartadserver.com/redir/?partnerid=31&partneruserid=6ec76371-3031-4b49-abb3-349fb3d7cf23&gdpr=&gdpr_consent= Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.16	50377	35.244.159.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	630	OUT	GET /w/1.0/sd?id=537072971&val=71dcd657-b7ce-4e56-9064-0f83979f8fcb&ttd_puid=f9f340ef-8e4e-7779-cbbe-38c1e020d9c7&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=2a5f7fb6-27c9-488e-9168-f0298407ea3a\|1710158208; pd=v2\|1710158229\|vMgavPkWgyiK; univ_id=537072971\|71dcd657-b7ce-4e56-9064-0f83979f8fcb\|1710158230712525
2024-03-11 11:57:12 UTC	568	IN	HTTP/1.1 200 OK Vary: Accept Set-Cookie: univ_id=537072971\|71dcd657-b7ce-4e56-9064-0f83979f8fcb\|1710158231967576; Version=1; Expires=Tue, 26-Mar-2024 11:57:11 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Mon, 11 Mar 2024 11:57:11 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:57:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.16	50359	44.218.18.183	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	816	OUT	GET /pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=$UID HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:12 UTC	337	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:57:12 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=6255abe4-6520-429f-aa2c-493e15bdee11&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.16	50391	35.244.159.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	543	OUT	GET /w/1.0/sd?id=537148856&val=Ze7xgAAAAwa1TAAh HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=2a5f7fb6-27c9-488e-9168-f0298407ea3a\|1710158208; pd=v2\|1710158229\|vMgavPkWgyiK; univ_id=537072971\|71dcd657-b7ce-4e56-9064-0f83979f8fcb\|1710158230712525
2024-03-11 11:57:12 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Mon, 11 Mar 2024 11:57:12 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:57:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.16	50360	35.214.235.183	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	840	OUT	GET /?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzImdGw9MTI5NjAw&piggybackCookie={viewer_token}&gdpr=0&gdpr_consent= HTTP/1.1 Host: csync.loopme.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.16	50365	3.213.0.7	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	657	OUT	GET /tag/?id=20909&user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1 Host: bpi.rtactivate.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:12 UTC	140	IN	HTTP/1.1 200 OK Server: awselb/2.0 Date: Mon, 11 Mar 2024 11:57:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close
2024-03-11 11:57:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.16	50357	104.36.113.107	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	3113	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNTQmdGw9NDMyMDA%3D&piggybackCookie=p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&pi=pubmatic&gdpr=0&gdpr_consent=&tc=1 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; SPugT=1710158212; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; PugT=1710158228; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=7; pi=162538:4; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_220_250_234_3_13_56_240_55_231_71_264_254_165_48_7_54_5_104_249_46_176%7C1711411200%3A35
2024-03-11 11:57:12 UTC	864	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:57:11 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23234-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23361-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:57:11 GMT; path=/ Set-Cookie: PugT=1710158231; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:57:11 GMT; path=/ Location: https://image8.pubmatic.com/AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:57:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.16	50347	82.145.213.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	709	OUT	GET /pub/sync?pubid=pub8730968190912 HTTP/1.1 Host: t.adx.opera.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:12 UTC	809	IN	HTTP/1.1 302 Found Server: Tengine Date: Mon, 11 Mar 2024 11:57:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 166 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 01 Jan 1990 00:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPUc21b156e4d4f4c8381b77a05c19b0a40 Pragma: no-cache Set-Cookie: UID=OPUc21b156e4d4f4c8381b77a05c19b0a40; Path=/; Domain=adx.opera.com; Max-Age=31536000; Secure; SameSite=None
2024-03-11 11:57:12 UTC	166	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4f 44 6b 6d 64 47 77 39 4e 44 4d 79 4d 44 41 3d 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 4f 50 55 63 32 31 62 31 35 36 65 34 64 34 66 34 63 38 33 38 31 62 37 37 61 30 35 63 31 39 62 30 61 34 30 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPUc21b156e4d4f4c8381b77a05c19b0a40">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.16	50388	74.214.196.131	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	862	OUT	GET /bh/rtset?pid=560288&ev=1&rurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D92%26partneruserid%3D%25%25VGUID%25%25&gdpr=0&gdpr_consent= HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: V=3ftvG5anVWUA; INGRESSCOOKIE=c74e8523d665f622; pb_rtb_ev=3-1q66\|7bs.0.1\|7dN.0.AAKPDU7L3eMAABWFZYx_mg
2024-03-11 11:57:12 UTC	970	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-98c7f4b5-rbg4l Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: V=3ftvG5anVWUA;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Thu, 06-Mar-2025 11:57:12 GMT;Max-Age=31104000;SameSite=None Set-Cookie: pb_rtb_ev=3-1q66\|7GB.0.1\|7bs.0.1\|7dN.0.AAKPDU7L3eMAABWFZYx_mg;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Tue, 11-Mar-2025 11:57:12 GMT;Max-Age=31536000;SameSite=None Location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=92&partneruserid=3ftvG5anVWUA&ev=1&pid=560288&gdpr_consent=&gdpr=0 Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.16	50373	104.18.36.155	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	460	OUT	GET /rum?cm_dsp_id=45&external_user_id=&google_error=15 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
2024-03-11 11:57:12 UTC	986	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 862b5d9648b80adb-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; Path=/; Domain=casalemedia.com; Expires=Tue, 11 Mar 2025 11:57:12 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=4192; Path=/; Domain=casalemedia.com; Expires=Sun, 09 Jun 2024 11:57:12 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=COtTRH%2BgCphE3%2B72Ttmrgzuh186F9ZXf06urzORoaUJzuRug0Mhlg2mO7XR3hbOqmXG0j6njFCICOXr0M0AMqZQrPfYcgB6xnYc%2BuRrzgrBc%2Fuy3nWrPlUl26HhVlxzbNzZI3lczzgdgTQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-11 11:57:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.16	50392	104.18.36.155	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	491	OUT	GET /rum?cm_dsp_id=81&gdpr=0&external_user_id=DgrDEF4OkREVB5dDWQeLQgEGx0EVCZJEXlwabpLi HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
2024-03-11 11:57:12 UTC	988	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 862b5d96483709ed-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; Path=/; Domain=casalemedia.com; Expires=Tue, 11 Mar 2025 11:57:12 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=4192; Path=/; Domain=casalemedia.com; Expires=Sun, 09 Jun 2024 11:57:12 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qVngSmI4rRLg2kYCMZ3a6gN29SiYyK2UFv7BFMnv7tvr%2BpyPH4YC8tkRP%2FPyKT68QN5F%2FBBd6pIBMbTJ6pvJozROYt%2Ft7UQT3%2B6lKi0C1Dp5BQmW5zk9d8esxpzKn2zxLPMcKfe0kyg4SA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-11 11:57:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.16	50374	216.22.16.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	947	OUT	GET /redir/?issi=1&partnerid=86&partneruserid=7822940101119878936&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=76:GOOGLE_HOSTED_SI\|86:7822940101119878936\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg
2024-03-11 11:57:12 UTC	482	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:11 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=76:GOOGLE_HOSTED_SI\|86:7822940101119878936\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; expires=Tue, 11 Mar 2025 11:57:12 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:12 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.16	50362	35.160.96.43	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	738	OUT	GET /sync/casale/Ze7xfMAoIeEAAAzaAIdO4AAAEGAAAAAB HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo
2024-03-11 11:57:12 UTC	778	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo; Expires=Tue, 11 Mar 2025 17:57:12 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-11 11:57:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.16	50385	104.18.36.155	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:11 UTC	747	OUT	GET /crum?cm_dsp_id=18&expiration=1726055830&external_user_id=8fb517aa-a8d0-437d-988f-7084f5819e19 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
2024-03-11 11:57:12 UTC	982	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 862b5d96786f09f5-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; Path=/; Domain=casalemedia.com; Expires=Tue, 11 Mar 2025 11:57:12 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=4192; Path=/; Domain=casalemedia.com; Expires=Sun, 09 Jun 2024 11:57:12 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wJFuT1Bv3Uk%2FcKhrt9pi3mtmxwEB9WGLTL1ovXvdXey9pbrCfD8xwdHXOkcEeSApQblWXSkQ1jaj2g5ZuSgrJcWFUrgOqORY4WmLDptEGwNUz3mxNX65zftodDxlOI%2B8GCxWRLdwWQSH8w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-11 11:57:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.16	50382	18.214.54.215	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	494	OUT	GET /match?gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&referrer_pid=r8hrb20&google_error=15 HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=18e2d5f5e6f-1cc10000010a4999; SERVERID=18841~DM
2024-03-11 11:57:12 UTC	389	IN	HTTP/1.1 200 OK Connection: close Set-Cookie: SERVERID=18841~DM; Domain=eyeota.net; Path=/; Expires=Mon, 11 Mar 2024 12:07:12 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Content-Type: image/gif Content-Length: 70 Date: Mon, 11 Mar 2024 11:57:12 GMT
2024-03-11 11:57:12 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.16	50378	52.46.155.104	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	482	OUT	GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=a1253c92-92e4-cc83-0bb0-ba5688131227 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_mD47eJIUzEqu3DVtJD2b0; ad-privacy=0
2024-03-11 11:57:12 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 11 Mar 2024 11:57:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: GNBSZD6FY0PK6E6WSAKH Set-Cookie: ad-id=A_mD47eJIUzEqu3DVtJD2b0; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 11:57:12 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 11:57:12 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-11 11:57:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.16	50386	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	1189	OUT	GET /redir/?issi=1&partnerid=22&partneruserid=396012428125075951&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=76:GOOGLE_HOSTED_SI\|86:7822940101119878936\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg
2024-03-11 11:57:12 UTC	504	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:11 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=22:396012428125075951\|76:GOOGLE_HOSTED_SI\|86:7822940101119878936\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; expires=Wed, 12 Mar 2025 11:57:12 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:12 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.16	50395	104.36.113.107	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	3199	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:B6512778B5DA4E7C942E6E491CF4A04A&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; PugT=1710158228; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=7; pi=162538:4; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_220_250_234_3_13_56_240_55_231_71_264_254_165_48_7_54_5_104_249_46_176%7C1711411200%3A35; SPugT=1710158228
2024-03-11 11:57:12 UTC	410	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:57:11 GMT Transfer-Encoding: chunked Connection: close Location: https://image8.pubmatic.com/AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:57:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.16	50387	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	1207	OUT	GET /redir/?partnerid=75&issi=1&partneruserid=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=76:GOOGLE_HOSTED_SI\|86:7822940101119878936\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg
2024-03-11 11:57:12 UTC	522	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:11 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=75:71dcd657-b7ce-4e56-9064-0f83979f8fcb\|76:GOOGLE_HOSTED_SI\|86:7822940101119878936\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; expires=Wed, 12 Mar 2025 11:57:12 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:12 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.16	50379	52.94.220.185	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	736	OUT	GET /s/dcm?pid=f7a5db36-1d5c-4c26-81b6-b4d0807faffb&id=1899505890594565248&gdpr=0&gdpr_consent= HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_mD47eJIUzEqu3DVtJD2b0; ad-privacy=0
2024-03-11 11:57:12 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 11 Mar 2024 11:57:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: WHB8SRPAV0A9XKQR53YS Set-Cookie: ad-id=A_mD47eJIUzEqu3DVtJD2b0; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 11:57:12 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 11:57:12 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-11 11:57:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.16	50390	216.22.16.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	977	OUT	GET /redir/?issi=1&partnerid=66&partneruserid=0a42220400c08ec15f936285&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=66:0a42220400c08ec15f936285\|91:9A176ADB-73F4-4BD8-A648-23F2443493B5\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg
2024-03-11 11:57:12 UTC	507	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:11 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=66:0a42220400c08ec15f936285\|91:9A176ADB-73F4-4BD8-A648-23F2443493B5\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; expires=Tue, 11 Mar 2025 11:57:12 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:12 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.16	50397	104.18.36.155	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	481	OUT	GET /crum?cm_dsp_id=41&external_user_id=70a98560-df9e-11ee-9b1b-8fc11e983897 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
2024-03-11 11:57:12 UTC	988	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 862b5d980b860ad7-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; Path=/; Domain=casalemedia.com; Expires=Tue, 11 Mar 2025 11:57:12 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=4192; Path=/; Domain=casalemedia.com; Expires=Sun, 09 Jun 2024 11:57:12 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JEc6a5%2FtOVkuE0N01HNbs4417QB%2FKVTQQF66cGVgGYs2OfuIwwwPCQjASuNzKC3QnRbR2kDOxiLiDOJQA3A%2FWkgR2Gnrfv78kFcCNU0jO%2BhEKgGeiLvyaSQaX1iDmBXi%2FEJsPVN4YNDBmQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-11 11:57:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.16	50363	85.114.159.93	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	624	OUT	GET /cookie/?ssp=5&gdpr=0&gdpr_consent= HTTP/1.1 Host: dsp.adfarm1.adition.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:12 UTC	482	IN	HTTP/1.1 302 Found Server: nginx Date: Mon, 11 Mar 2024 11:57:12 GMT Transfer-Encoding: chunked Connection: close p3p: policyref="http://imagesrv.adition.com/w3c/p3p.xml",CP="NON DSP ADM DEV PSD IVDo OTPi OUR IND STP PHY PRE NAV UNI" Set-Cookie: UserID1=7345073677437040781; Max-Age=7776000; domain=.adfarm1.adition.com; Path=/; SameSite=None; Secure Location: https://rtb-csync.smartadserver.com/redir/?partnerid=49&partneruserid=7345073677437040781&gdpr=0&gdpr_consent=
2024-03-11 11:57:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.16	50398	35.244.154.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	514	OUT	GET /396846.gif?served_by=evergreen&partner_uid=ac353f89-4309-4119-94c7-b832d9bbb81f HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pxrc=CJPju68GEgUI6EcQABIFCNtOEAI=; rlas3=OObdWnbiCN9aOOm42RcYUFYmzAEAL4KXC73Hrxo9kEM=
2024-03-11 11:57:12 UTC	620	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=N+0/VuGKojJaOOm42RcYUFYmzAEAL4KXC73Hrxo9kEM=; Path=/; Domain=rlcdn.com; Expires=Tue, 11 Mar 2025 11:57:12 GMT; Secure; SameSite=None Set-Cookie: pxrc=CJPju68GEgUI6EcQABIFCNtOEAI=; Path=/; Domain=rlcdn.com; Expires=Fri, 10 May 2024 11:57:12 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Mon, 11 Mar 2024 11:57:12 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:57:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.16	50402	34.117.77.79	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	607	OUT	GET /csync.ashx?person_id=3642666937673580575&eid=50596&fp=ef0ee26ff141c186c8f416092ed9f16d&gdpr=&gdpr_consent= HTTP/1.1 Host: ml314.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pi=3642666937673580575; u=aHR0cHM6Ly9zb3VyY2Vmb3JnZS5uZXQvcHJvamVjdHMvZG9jZmV0Y2hlci9wb3N0ZG93bmxvYWQ%3D; tp=7%253B03%252F11%252F2024%2B11%253A57%253A05%253B0
2024-03-11 11:57:12 UTC	279	IN	HTTP/1.1 200 OK content-type: image/gif expires: Tue, 12 Mar 2024 11:57:12 GMT date: Mon, 11 Mar 2024 11:57:12 GMT server: Google Frontend via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-11 11:57:12 UTC	54	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2bGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.16	50409	52.27.232.237	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	766	OUT	GET /?io.narrative.guid.v2=7eb19c60-df9e-11ee-88ca-0ab6e37f1c27&companyId=673&id=pubmatic_id:9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1 Host: io.narrative.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: io.narrative.guid.v2=7eb19c60-df9e-11ee-88ca-0ab6e37f1c27
2024-03-11 11:57:12 UTC	242	IN	HTTP/1.1 204 No Content Cache-Control: no-cache Date: Mon, 11 Mar 2024 11:57:12 GMT Server: nginx/1.22.1 Set-Cookie: io.narrative.guid.v2=7eb19c60-df9e-11ee-88ca-0ab6e37f1c27; Max-Age=47278080; SameSite=None; Secure Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.16	50401	104.36.113.110	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	3187	OUT	GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=7; pi=162538:4; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_220_250_234_3_13_56_240_55_231_71_264_254_165_48_7_54_5_104_249_46_176%7C1711411200%3A35; SPugT=1710158228; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; PugT=1710158230
2024-03-11 11:57:12 UTC	923	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: https://image4.pubmatic.com/AdServer/SPug?gdpr=0&p=156557&pr=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DuFFr5RFBYgoUJbWMAWGEZKS3%26source_user_id%3D9A176ADB-73F4-4BD8-A648-23F2443493B5&us_privacy=%24%7BUS_PRIVACY%7D P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: ipc=; domain=pubmatic.com; path=/; max-age=0; SameSite=None; secure; Set-Cookie: pi=156557:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=8; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Mon, 11 Mar 2024 11:57:10 GMT Content-Length: 270 Connection: close
2024-03-11 11:57:12 UTC	270	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 34 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 53 50 75 67 3f 67 64 70 72 3d 30 26 61 6d 70 3b 70 3d 31 35 36 35 35 37 26 61 6d 70 3b 70 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 74 63 68 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 25 32 46 73 79 6e 63 25 32 46 76 31 25 33 46 73 6f 75 72 63 65 5f 69 64 25 33 44 75 46 46 72 35 52 46 42 59 67 6f 55 4a 62 57 4d 41 57 47 45 5a 4b 53 33 25 32 36 73 6f 75 72 63 65 5f 75 73 65 72 5f 69 64 25 33 44 39 41 31 37 36 41 44 42 2d 37 33 46 34 2d 34 42 44 38 2d 41 36 34 38 2d 32 33 46 32 34 34 33 34 39 33 42 35 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 25 32 34 25 37 42 55 53 5f 50 52 49 56 41 43 59 25 37 Data Ascii: <a href="https://image4.pubmatic.com/AdServer/SPug?gdpr=0&p=156557&pr=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DuFFr5RFBYgoUJbWMAWGEZKS3%26source_user_id%3D9A176ADB-73F4-4BD8-A648-23F2443493B5&us_privacy=%24%7BUS_PRIVACY%7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.16	50399	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	1198	OUT	GET /redir/?partnerid=80&gdpr=0&partneruserid=VbPHRgW3lUdOvpMVAr6PFFq_wxdOsJYSBeXINTmx HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
2024-03-11 11:57:12 UTC	534	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:12 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=80:VbPHRgW3lUdOvpMVAr6PFFq_wxdOsJYSBeXINTmx\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK; expires=Tue, 11 Mar 2025 11:57:12 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:12 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.16	50403	104.18.36.155	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	744	OUT	GET /crum?cm_dsp_id=3&external_user_id=3e9d65ee-f197-4b00-b33c-8e23896e09ac&gdpr=&gdpr_consent= HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
2024-03-11 11:57:12 UTC	990	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 862b5d9aa84009f9-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; Path=/; Domain=casalemedia.com; Expires=Tue, 11 Mar 2025 11:57:12 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=4192; Path=/; Domain=casalemedia.com; Expires=Sun, 09 Jun 2024 11:57:12 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8I5gCR6ZfmsMtRvZ3I%2BB7Agecb7TrMMmhH%2BZczbu%2F61k1bcuBZDDR0i169zaI%2BvqgdWLrUBCisr4nzS29xYstz95IKDqtct%2FK0%2FLW05gIzLP1DrIJWcaCz9crupMjayzNPy9MJbYmz4EcQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-11 11:57:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.16	50410	216.22.16.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	979	OUT	GET /redir/?issi=1&partnerid=33&partneruserid=Ze7xfMAoIeEAAAzaAIdO4AAA%264192 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
2024-03-11 11:57:12 UTC	523	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:12 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK; expires=Wed, 12 Mar 2025 11:57:12 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:12 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.16	50407	142.251.2.148	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	797	OUT	GET /sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/images/CTA.png?1708393659275 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s0.2mdn.net/sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/index.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:12 UTC	820	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 5930 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Sun, 10 Mar 2024 16:52:50 GMT Expires: Mon, 10 Mar 2025 16:52:50 GMT Cache-Control: public, max-age=31536000 Age: 68662 Last-Modified: Wed, 21 Feb 2024 21:32:45 GMT Content-Type: image/png Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:57:12 UTC	432	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 42 00 00 00 51 08 06 00 00 00 a7 98 af 1d 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 0a 49 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 48 89 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 Data Ascii: PNGIHDRBQgAMAaIiCCPsRGB IEC61966-2.1HSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.T
2024-03-11 11:57:12 UTC	1252	IN	Data Raw: f4 c5 a2 fe 6b f0 6f 22 3e 21 f1 df fe bc 8c 02 04 00 10 4e cf ef da 5f e5 e5 d6 03 70 c7 01 b0 75 bf 6b a9 5b 00 da 56 00 68 df f9 5d 33 db 09 a0 5a 0a d0 7a f9 8b 79 38 fc 40 1e 9e a1 50 c8 3c 1d 1c 0a 0b 0b ed 25 62 a1 bd 30 e3 8b 3e ff 33 e1 6f e0 8b 7e f6 fc 40 1e fe db 7a f0 00 71 9a 40 99 ad c0 a3 83 fd 71 61 6e 76 ae 52 8e e7 cb 04 42 31 6e f7 e7 23 fe c7 85 7f fd 8e 29 d1 e2 34 b1 5c 2c 15 8a f1 58 89 b8 50 22 4d c7 79 b9 52 91 44 21 c9 95 e2 12 e9 7f 32 f1 1f 96 fd 09 93 77 0d 00 ac 86 4f c0 4e b6 07 b5 cb 6c c0 7e ee 01 02 8b 0e 58 d2 76 00 40 7e f3 2d 8c 1a 0b 91 00 10 67 34 32 79 f7 00 00 93 bf f9 8f 40 2b 01 00 cd 97 a4 e3 00 00 bc e8 18 5c a8 94 17 4c c6 08 00 00 44 a0 81 2a b0 41 07 0c c1 14 ac c0 0e 9c c1 1d bc c0 17 02 61 06 44 40 0c 24 Data Ascii: ko">!N_puk[Vh]3Zzy8@P<%b0>3o~@zq@qanvRB1n#)4\,XP"MyRD!2wONl~Xv@~-g42y@+\LD*AaD@$
2024-03-11 11:57:12 UTC	1252	IN	Data Raw: 60 3a 3e 3d 65 fa ce e9 03 3e c6 3e 02 9f 7a 9f 87 be a6 be 22 df 3d be 23 7e d6 7e 99 7e 07 fc 9e fb 3b fa cb fd 8f f8 bf e1 79 f2 16 f1 4e 05 60 01 c1 01 e5 01 bd 81 1a 81 b3 03 6b 03 1f 04 99 04 a5 07 35 05 8d 05 bb 06 2f 0c 3e 15 42 0c 09 0d 59 1f 72 93 6f c0 17 f2 1b f9 63 33 dc 67 2c 9a d1 15 ca 08 9d 15 5a 1b fa 30 cc 26 4c 1e d6 11 8e 86 cf 08 df 10 7e 6f a6 f9 4c e9 cc b6 08 88 e0 47 6c 88 b8 1f 69 19 99 17 f9 7d 14 29 2a 32 aa 2e ea 51 b4 53 74 71 74 f7 2c d6 ac e4 59 fb 67 bd 8e f1 8f a9 8c b9 3b db 6a b6 72 76 67 ac 6a 6c 52 6c 63 ec 9b b8 80 b8 aa b8 81 78 87 f8 45 f1 97 12 74 13 24 09 ed 89 e4 c4 d8 c4 3d 89 e3 73 02 e7 6c 9a 33 9c e4 9a 54 96 74 63 ae e5 dc a2 b9 17 e6 e9 ce cb 9e 77 3c 59 35 59 90 7c 38 85 98 12 97 b2 3f e5 83 20 42 50 2f Data Ascii: `:>=e>>z"=#~~~;yN`k5/>BYroc3g,Z0&L~oLGli})*2.QStqt,Yg;jrvgjlRlcxEt$=sl3Ttcw<Y5Y\|8? BP/
2024-03-11 11:57:12 UTC	1252	IN	Data Raw: 11 91 a5 e3 32 70 0e 78 0d f8 23 10 03 a6 6b 59 c1 b2 1a b5 08 9b 81 2f 03 5f 02 3e 59 8b 03 8a 88 14 f1 67 e0 67 c0 cf 81 54 b5 07 ab 36 11 b6 03 df 04 ee ad 36 10 11 91 0a bc 0f fc 12 f8 1e 56 ab b1 22 95 26 c2 3b 80 1f 02 5b 2b ad 58 44 a4 86 fe 0b fc 08 78 0a 78 a7 dc c2 e5 26 c2 8f 00 07 80 7d 68 dc 4f 44 ae 3e 29 e0 ab c0 91 72 0a 95 93 08 d7 02 bf 02 3e 5f 5e 5c 22 22 9e fb 31 56 42 fc 4f 29 3b 97 9a 08 5b 81 97 81 1b 2a 8f 4b 44 c4 53 7f 02 1e a4 84 e5 37 4d 25 1c ec 8b c0 ef 50 12 14 91 c5 e5 b3 c0 29 e0 53 0b ed b8 50 8b f0 3e e0 04 1a 0f 14 91 c5 eb 02 d6 c4 ee a5 42 3b 14 4b 84 9f c3 6a 09 ea 6a 10 11 59 ec 4e 63 2d f3 7b 37 df c6 42 5d e3 8f 03 2f a2 24 28 22 8d a1 19 38 0c 2c cb b7 31 5f 22 5c 06 fc 04 b8 b9 8e 41 89 88 78 ad 0b e8 cd b7 21 Data Ascii: 2px#kY/_>YggT66V"&;[+XDxx&}hOD>)r>_^\""1VBO);[*KDS7M%P)SP>B;KjjYNc-{7B]/$("8,1_"\Ax!
2024-03-11 11:57:12 UTC	1252	IN	Data Raw: 13 4f e4 dd e7 f9 e7 9f c7 30 8c 7a 86 59 56 9d 0b 9d 53 24 12 e1 f8 f1 e3 0c 0f 0f 67 7d f6 99 4c 86 a7 9f 7e ba e0 6c 76 34 1a 25 1a 8d 32 38 38 e8 0c ad 04 02 01 9e 7d f6 59 ce 9e 3d eb 1c 2b 1c 0e 73 fb ed b7 ab 45 58 0f a6 5a 84 35 e1 6e 15 ba 5b 5f b9 ff e9 73 2d 34 59 61 b7 3c 5a 5a 5a cc 64 32 69 9a a6 d5 5a 70 d7 97 db b2 ca 8d a3 bf bf df 19 5c cf 6d 4d 54 33 59 52 ac ac bb e5 d3 db db 9b d5 52 9a 98 98 c8 6a 51 1d 3a 74 c8 d9 e6 6e 9d e5 b6 7a 4b 69 09 b9 cb 8f 8c 8c 14 fd 29 b7 4e f7 7e b9 ef a9 fb f3 c8 6d b5 ed df bf 3f eb bd b0 3f 47 fb bd 70 b7 40 dd db c4 33 03 4a 84 35 54 a8 0b db d1 d1 51 f0 17 bc 58 32 99 99 99 31 7b 7b 7b 0b 26 54 3b d9 f4 f4 f4 e4 3d a6 dd 5d 2b a6 1e 89 d0 dd 1d 2f 54 bf bb eb e7 9e 05 75 27 9b 8e 8e 8e b2 bb 81 b9 Data Ascii: O0zYVS$g}L~lv4%288}Y=+sEXZ5n[_s-4Ya<ZZZd2iZp\mMT3YRRjQ:tnzKi)N~m??Gp@3J5TQX21{{{&T;=]+/Tu'
2024-03-11 11:57:12 UTC	490	IN	Data Raw: 8d 26 e0 ef 7e 47 21 22 e2 a3 73 4d 40 72 c1 dd 44 44 1a d3 07 5c 49 84 13 0b ed 29 22 d2 a0 5e e5 ca 18 e1 5b c0 59 9f 83 11 11 f1 c3 ef e1 c3 75 84 bf f1 31 10 11 11 bf 9c 00 eb 5a 63 80 bb b1 9a 88 22 22 4b c5 1b c0 3a e0 03 bb 45 f8 17 60 d2 b7 70 44 44 bc f7 53 ac c9 92 ac 4b ec 9e f3 27 16 11 11 cf fd 1b 18 b0 9f b8 13 e1 2f 80 7f 78 1e 8e 88 88 f7 0e 61 4d 14 03 1f 8e 11 da 1e 01 7e ed 75 44 22 22 1e 7a 0f b8 0d b8 68 bf 90 7b f7 99 a3 40 cc cb 88 44 44 3c f6 5d 5c 49 10 e6 b7 08 01 d6 63 4d 9e 5c e7 4d 4c 22 22 9e f9 2b 70 0f f0 be fb c5 7c f7 23 3c 0f ec f1 22 22 11 11 0f 5d 06 b6 93 93 04 a1 f0 8d 59 0f 63 0d 26 8a 88 34 02 13 78 14 38 97 6f 63 b1 3b 54 ef 06 c6 ea 11 91 88 88 c7 be 41 91 89 e0 7c 63 84 6e d7 61 4d 9e 6c ae 71 50 22 22 5e f9 3e Data Ascii: &~G!"sM@rDD\I)"^[Yu1Zc""K:E`pDDSK'/xaM~uD""zh{@DD<]\IcM\ML""+p\|#<""]Yc&4x8oc;TA\|cnaMlqP""^>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.16	50417	3.218.15.224	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	756	OUT	GET /s/75145?bidder_id=195755&bidder_uuid=9A176ADB-73F4-4BD8-A648-23F2443493B5&_li_chk=true&previous_uuid=0d1e68fad7fe46a8ba8fe840f06a5d57 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=0d1e68fa-d7fe-46a8-ba8f-e840f06a5d57
2024-03-11 11:57:12 UTC	565	IN	HTTP/1.1 303 See Other Date: Mon, 11 Mar 2024 11:57:12 GMT Content-Length: 0 Connection: close Location: https://x.bidswitch.net/sync?ssp=liveintent&user_id=0d1e68fa-d7fe-46a8-ba8f-e840f06a5d57 Set-Cookie: _li_ss=CgcKBQgMEL8X; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:12 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=0d1e68fa-d7fe-46a8-ba8f-e840f06a5d57; Max-Age=63072000; Expires=Wed, 11 Mar 2026 11:57:12 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 3 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.16	50408	142.251.2.149	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	3211	OUT	GET /pcs/view?xai=AKAOjssr9-mhLE0SfG-5qH3RyP1YWYQmPZqAZD-JNFW9L9ZZB624P4aaDVY1sueg4t2dCU-JyFaiv-A2-319CZSIk0BpZ_YkvHN5TLkk2xaURijKmN_lfni-dftf-oA1ghoL7g1eVc6DrytzA0bppgpqN9xghAxNs2qRJHZJDbdTUTyvGa3I_ZW61Eed_fzUUaEj1u30mN61IGPCOu03Qk_jYH37D8yPJvLehYnNsO_qgWaRjls9fKckHaF1jve_g1OlJ9Tk5nAKA8NjqpZskV4PyOoFpejrQ2BsYts-w7qABMU7abEXUTtu2iBTVjqU7gl2yy6bL3fySGF5Jvv1b2dxNbfJsjwOjj5rlKcu88XQK00Uqh2_lGXz_sV61HYY-rUrWgiMGiLPQI2vkkVQ_QthUNyU6hjUWr0dgYj4hqEX9vb61ZtBM4ZXxxlix-owVU0mlQGKGE8w9dEzSy5WefX1fI_pZLX12va6uze7P7Ceh-6dOYf9WodT_VRegF-CPdTFkKoYghuNNhYFLPI5dDE3zoUv18dqtnBoG0Rtxbo2_rp0lhzMmjAO7uSaJgY6AikEVilto2fWQnNwTpKqsG9lGKG7Z8tD9sJwpRho6iCScHtqdrMqabOPDxqHogVxN3vvJm9EHhFkm92paYCzXKNTha_7CuCDjO5eAo73VWoKSjDdMqWqiLfx6D3_KbUY_xNgmpXFKx06flMwLgRgpT5kbQpwV_vtWY5ZPMI8IZjMtXabY7O3RxzjsWXj_HeukVqg_GRs0UYG7ijSUu-k0aPRWn2hjo3Ilse5byLn0dm2Gb7jAp6inVQP4v45voC6GkBsFlnV9dvXRBjYzE5FkgByXD0udadFXuyAUSFNbhurGc5qYaJdQv7WtpyG6ahTYNrr2tKGofX2XsOB3JfTnrHXb4AUzpm4ZHsxMHW8fS8M4EBQDxL08Zf0V-j8UBXNpkx6ZN-y6byaEq2X5LUgqpbIZKiKV7j2CJl6ozJNWvPRcaScDkXO6UcE8UjgTLZOdP3un06CRMMLjJfwB87OrN7JCKjc9y2LRkBxhl7MXFVfUcz1FxGRDQXPwh-I_aeFwxe9Bf48kibTLRRQ2Y8x6IqBKEHlOAsFHkitv8tuHBy0eDRuGEdujljKmXOXeOruWnB-o0xUgolupUe_1x_0IvN5KTVzcTX3jV8OgQpnsbFBBEcsn1X9uwZfGLXM6BehsfIlwt0omg0ONDmuVOilSGNc_UxYVHfDrF6ow3Z_zhIn2Gdd5FZzEEHqznuNuolKpMCKrJwzm_TEE1dQgaxC7qFN_3Wg8CSATlsQRYWPV3TEEamVOJd0M662X9HBNWbhnSNpBhspBqufCtgjoHKvxPIKoNCC_YhQ9vrq6ZjvPsdOceNs6zwr7EYRbjP-6dyUPz0LSyeTVOjeH0hHtD2fN6Euad56QPptnGTWh_GtlJqUYv2d2oP2oiqLFw08wCqCltY0jA&sai=AMfl-YR6H9LZFZbm2QUsLKawXiZYPJ51DChZcYNZ2CLZN1Zy7HnBUZaBh8nURMgsK5Fgf4uAUKNTIXdrUwsCbLrj6_XmR2EXiTluZUMLVdYlVN_CT10rFClCR6WiGTdhDISme3YrgiUm5XFdSp93HCvtUjvL4iJwsAU1vk_qcNGa0Aeq6Oudjlza1pNANIukObfIjEmJ-GjN6lE_kcHfdX3YvyXOmWjvjPlfFZdtuZu9MRcHBJACNcvd4ZhYoRilqs5ZhvGMmI2BdmJiH5Wm7QWTKkqDN-TnCImnpd1xBijO0NI97zpVX0imZT_HTXIYbN9iwCY1vyTxGaRAwnhcsz2LKR0fGomzH6M-PZPS3AEQ9EqMAodP4H8uZJRfOZZmaAMDOB4rmcB96FldPeLnIW2bTzHfFBVVPbyPQGzQNEQBE7wB6rItRZ_F&sig=Cg0ArKJSzDZLkNT3f9qHEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9nb2RhZGR5LmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=4473&vt=11&dtpt=2932&dett=3&cstd=1537&cisv=r20240306.62815&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: event-source;trigger Referer: https://2e364cc7caa3f2e10b0fb666ab9496ef.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlhWjE-nrLMqamcKd4HCzJGyk-lF6Y-_gdSV1_rcQ-Lc3JBzMSF3zk6wICTe0A; DSID=NO_DATA; ar_debug=1
2024-03-11 11:57:12 UTC	1534	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0x7ea1e75912a048420000000000000000","13":"0x93a6ec985e65c3cb0000000000000000","14":"0x715189f243f3be020000000000000000","15":"0x50e9b08879f53ba0000000000000000"},"debug_key":"2413754102022057883","debug_reporting":true,"destination":["https://godaddy.com","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"event_report_window":"345600","expiry":"2592000","filter_data":{"14":["16014670","16044197"],"21":[],"8":["8316070"]},"priority":"0","source_event_id":"7463942867147461470"} X-Content-Type-Options: nosniff Date: Mon, 11 Mar 2024 11:57:12 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Wed, 10-Apr-2024 11:57:12 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 11 Mar 2024 11:57:12 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.16	50412	104.36.113.107	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	3236	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=7271851492747088692 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=7; pi=162538:4; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_220_250_234_3_13_56_240_55_231_71_264_254_165_48_7_54_5_104_249_46_176%7C1711411200%3A35; SPugT=1710158228; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; PugT=1710158230
2024-03-11 11:57:12 UTC	737	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:57:11 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_391=22924-7271851492747088692&KRTB&23263-7271851492747088692&KRTB&23481-7271851492747088692; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:57:11 GMT; path=/ Set-Cookie: PugT=1710158231; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:57:11 GMT; path=/ Location: https://image8.pubmatic.com/AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:57:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.16	50413	52.8.161.245	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	482	OUT	GET /qmap?c=240&tp=PUBM&tpid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=3; _cc_id=9d77637072f92cb5f5d20c39a1b22cb5
2024-03-11 11:57:12 UTC	315	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:12 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.41.11.233 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-03-11 11:57:12 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.16	50422	172.64.151.101	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	466	OUT	GET /crum?cm_dsp_id=176&external_user_id=di_5eeffdf13c334a9c86516 HTTP/1.1 Host: dsum.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
2024-03-11 11:57:12 UTC	976	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 862b5d9b8fd509f7-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; Path=/; Domain=casalemedia.com; Expires=Tue, 11 Mar 2025 11:57:12 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=4192; Path=/; Domain=casalemedia.com; Expires=Sun, 09 Jun 2024 11:57:12 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pvYPF0U1G87o1RyIdTdIIepSvEkalji4osFbkWZrvy6ffns47G7PjX%2BYrvEFRiXFTj%2Fvr%2FhUQAnnwqQrYA8HLz%2BSLdhfWFi8zXyVxyHQDJYvF%2FCkSpEevHZqagKLRy829YoHL1Hn"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-11 11:57:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.16	50404	216.22.16.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	978	OUT	GET /redir/?partnerid=76&partneruserid=&gdpr=0&gdpr_consent=&google_error=15 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
2024-03-11 11:57:13 UTC	128	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:12 GMT transfer-encoding: chunked connection: close
2024-03-11 11:57:13 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.16	50405	74.119.118.138	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	777	OUT	GET /dis/usersync.aspx?r=30&p=273&cp=smartortb&cu=1&url=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D79%26partneruserid%3D%40%40CRITEO_USERID%40%40&gdpr=0&gdpr_consent= HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:13 UTC	701	IN	HTTP/1.1 302 Found content-length: 0 date: Mon, 11 Mar 2024 11:57:12 GMT server: Kestrel cache-control: no-cache expires: Mon, 11 Mar 2024 00:00:00 GMT location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=79&partneruserid=fb6bf7e8-4454-41c2-9d45-dd203ebb7093&gdpr=0&gdpr_consent= pragma: no-cache set-cookie: uid=fb6bf7e8-4454-41c2-9d45-dd203ebb7093; expires=Sat, 05 Apr 2025 11:57:12 GMT; domain=.criteo.com; path=/; secure; samesite=none x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 1321143 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.16	50419	104.36.113.107	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	3533	OUT	GET /AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=6255abe4-6520-429f-aa2c-493e15bdee11&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID} HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=7; pi=162538:4; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_220_250_234_3_13_56_240_55_231_71_264_254_165_48_7_54_5_104_249_46_176%7C1711411200%3A35; SPugT=1710158228; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23234-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23361-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk; PugT=1710158231
2024-03-11 11:57:12 UTC	781	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:57:12 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_1278=23329-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23340-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23498-6255abe4-6520-429f-aa2c-493e15bdee11; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 09-Jun-2024 11:57:12 GMT; path=/ Set-Cookie: PugT=1710158232; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:57:12 GMT; path=/ Location: https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=9A176ADB-73F4-4BD8-A648-23F2443493B5 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:57:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.16	50423	104.18.36.155	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	460	OUT	GET /rum?cm_dsp_id=45&external_user_id=&google_error=15 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
2024-03-11 11:57:13 UTC	988	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 862b5d9bbb9509f5-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; Path=/; Domain=casalemedia.com; Expires=Tue, 11 Mar 2025 11:57:12 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=4192; Path=/; Domain=casalemedia.com; Expires=Sun, 09 Jun 2024 11:57:12 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cKONYKrlDHmAuxHVpQCnLqL%2Bq2B8O0zppbSlLPi9Rv4xAf03%2BRq%2BPGLRwMBEULkOPf%2FNwJRLBy5mthEmWbkzTPXGOazjaSNiMqhETZ%2BbXajlCXAxrZg8IRyoGMHG0qbsMb0dbbrDC9DUug%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-11 11:57:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.16	50421	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	1240	OUT	GET /redir/?partnerid=31&partneruserid=6ec76371-3031-4b49-abb3-349fb3d7cf23&gdpr=&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
2024-03-11 11:57:13 UTC	563	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:12 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK; expires=Tue, 11 Mar 2025 11:57:12 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:13 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.16	50425	104.18.36.155	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	503	OUT	GET /crum?cm_dsp_id=18&expiration=1726055830&external_user_id=8fb517aa-a8d0-437d-988f-7084f5819e19 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
2024-03-11 11:57:13 UTC	990	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 862b5d9bdc730adb-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; Path=/; Domain=casalemedia.com; Expires=Tue, 11 Mar 2025 11:57:12 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=4192; Path=/; Domain=casalemedia.com; Expires=Sun, 09 Jun 2024 11:57:12 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LWbfs0FhNoiClp2I6jYC35AMylLVdl0E%2FmcUAXdawLzuUqh988OAcKWjGwZU2jB8kxZprvoKwOu6JTVTOMTHn3Ctb%2BnH52sbkmcgXX%2Byn8ZuvMq9%2FAIk47%2BBbreW3Diu4tk5Mzvo%2Fw4qjg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-11 11:57:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.16	50420	34.111.113.62	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	955	OUT	GET /idsync/ex/push?partner_id=2499&partner_device_id=e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&partner_url=https%3A%2F%2Fr.casalemedia.com%2Frum%3Fcm_dsp_id%3D64%26external_user_id%3De186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1710158204884; TapAd_DID=3d92896e-6439-4f25-b0dc-753e207e1323; TapAd_3WAY_SYNCS=1!1715
2024-03-11 11:57:13 UTC	1221	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:57:12 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1710158204884;Expires=Fri, 10 May 2024 11:57:12 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=3d92896e-6439-4f25-b0dc-753e207e1323;Expires=Fri, 10 May 2024 11:57:12 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!1715;Expires=Fri, 10 May 2024 11:57:12 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://r.casalemedia.com/rum?cm_dsp_id=64&external_user_id=e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&gdpr=0&gdpr_consent= Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.16	50418	104.36.113.110	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	3314	OUT	GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=7; pi=162538:4; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_220_250_234_3_13_56_240_55_231_71_264_254_165_48_7_54_5_104_249_46_176%7C1711411200%3A35; SPugT=1710158228; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23234-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23361-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk; PugT=1710158231
2024-03-11 11:57:13 UTC	923	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: https://image4.pubmatic.com/AdServer/SPug?gdpr=0&p=156557&pr=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DuFFr5RFBYgoUJbWMAWGEZKS3%26source_user_id%3D9A176ADB-73F4-4BD8-A648-23F2443493B5&us_privacy=%24%7BUS_PRIVACY%7D P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: ipc=; domain=pubmatic.com; path=/; max-age=0; SameSite=None; secure; Set-Cookie: pi=156557:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=8; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Mon, 11 Mar 2024 11:57:11 GMT Content-Length: 270 Connection: close
2024-03-11 11:57:13 UTC	270	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 34 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 53 50 75 67 3f 67 64 70 72 3d 30 26 61 6d 70 3b 70 3d 31 35 36 35 35 37 26 61 6d 70 3b 70 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 74 63 68 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 25 32 46 73 79 6e 63 25 32 46 76 31 25 33 46 73 6f 75 72 63 65 5f 69 64 25 33 44 75 46 46 72 35 52 46 42 59 67 6f 55 4a 62 57 4d 41 57 47 45 5a 4b 53 33 25 32 36 73 6f 75 72 63 65 5f 75 73 65 72 5f 69 64 25 33 44 39 41 31 37 36 41 44 42 2d 37 33 46 34 2d 34 42 44 38 2d 41 36 34 38 2d 32 33 46 32 34 34 33 34 39 33 42 35 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 25 32 34 25 37 42 55 53 5f 50 52 49 56 41 43 59 25 37 Data Ascii: <a href="https://image4.pubmatic.com/AdServer/SPug?gdpr=0&p=156557&pr=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DuFFr5RFBYgoUJbWMAWGEZKS3%26source_user_id%3D9A176ADB-73F4-4BD8-A648-23F2443493B5&us_privacy=%24%7BUS_PRIVACY%7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.16	50427	104.36.113.107	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	3466	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=327905091701696804 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=7; pi=162538:4; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_220_250_234_3_13_56_240_55_231_71_264_254_165_48_7_54_5_104_249_46_176%7C1711411200%3A35; SPugT=1710158228; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23234-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23361-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk; PugT=1710158231
2024-03-11 11:57:13 UTC	709	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:57:11 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_391=22924-327905091701696804&KRTB&23263-327905091701696804&KRTB&23481-327905091701696804; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:57:11 GMT; path=/ Set-Cookie: PugT=1710158231; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:57:11 GMT; path=/ Location: https://image8.pubmatic.com/AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent= P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:57:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.16	50424	35.80.168.78	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	494	OUT	GET /sync/casale/Ze7xfMAoIeEAAAzaAIdO4AAAEGAAAAAB HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo
2024-03-11 11:57:13 UTC	778	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo; Expires=Tue, 11 Mar 2025 17:57:12 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-11 11:57:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.16	50428	204.237.133.120	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	3461	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPUc21b156e4d4f4c8381b77a05c19b0a40 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=7; pi=162538:4; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_220_250_234_3_13_56_240_55_231_71_264_254_165_48_7_54_5_104_249_46_176%7C1711411200%3A35; SPugT=1710158228; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23234-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23361-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk; PugT=1710158231
2024-03-11 11:57:13 UTC	780	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:57:12 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_1323=23480-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23485-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23575-OPUc21b156e4d4f4c8381b77a05c19b0a40; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 25-Mar-2024 11:57:12 GMT; path=/ Set-Cookie: PugT=1710158232; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:57:12 GMT; path=/ Location: https://image8.pubmatic.com/AdServer/ImgSync?gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:57:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.16	50429	104.36.113.107	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	3364	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=1724005921034811649 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=7; pi=162538:4; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_220_250_234_3_13_56_240_55_231_71_264_254_165_48_7_54_5_104_249_46_176%7C1711411200%3A35; SPugT=1710158228; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23234-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23361-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk; PugT=1710158231
2024-03-11 11:57:13 UTC	737	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:57:12 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_391=22924-1724005921034811649&KRTB&23263-1724005921034811649&KRTB&23481-1724005921034811649; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:57:12 GMT; path=/ Set-Cookie: PugT=1710158232; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:57:12 GMT; path=/ Location: https://image8.pubmatic.com/AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:57:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.16	50411	35.212.133.238	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	859	OUT	GET /sync?dsp_id=2&user_id=e247a636-2303-4c44-ba6f-6f53475eec38&expires=3&user_group=1&ssp=pubmatic HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=6ec76371-3031-4b49-abb3-349fb3d7cf23; c=1710158227; tuuid_lu=1710158229
2024-03-11 11:57:13 UTC	614	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:57:12 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=6ec76371-3031-4b49-abb3-349fb3d7cf23&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy= Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.16	50416	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	1240	OUT	GET /redir/?issi=1&partnerid=92&partneruserid=3ftvG5anVWUA&ev=1&pid=560288&gdpr_consent=&gdpr=0 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
2024-03-11 11:57:13 UTC	539	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:12 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|92:3ftvG5anVWUA\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK; expires=Wed, 12 Mar 2025 11:57:13 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:13 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.16	50432	216.22.16.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	968	OUT	GET /redir/?issi=1&partnerid=22&partneruserid=396012428125075951&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=22:396012428125075951\|76:GOOGLE_HOSTED_SI\|86:7822940101119878936\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg
2024-03-11 11:57:13 UTC	504	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:12 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=22:396012428125075951\|76:GOOGLE_HOSTED_SI\|86:7822940101119878936\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; expires=Tue, 11 Mar 2025 11:57:13 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:13 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.16	50431	216.22.16.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	1004	OUT	GET /redir/?partnerid=75&issi=1&partneruserid=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=75:71dcd657-b7ce-4e56-9064-0f83979f8fcb\|76:GOOGLE_HOSTED_SI\|86:7822940101119878936\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg
2024-03-11 11:57:13 UTC	522	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:12 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=75:71dcd657-b7ce-4e56-9064-0f83979f8fcb\|76:GOOGLE_HOSTED_SI\|86:7822940101119878936\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; expires=Tue, 11 Mar 2025 11:57:13 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:13 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.16	50433	3.213.0.7	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:12 UTC	421	OUT	GET /tag/?id=20909&user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1 Host: bpi.rtactivate.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:13 UTC	140	IN	HTTP/1.1 200 OK Server: awselb/2.0 Date: Mon, 11 Mar 2024 11:57:13 GMT Content-Type: image/gif Content-Length: 43 Connection: close
2024-03-11 11:57:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.16	50435	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:13 UTC	1223	OUT	GET /redir/?partnerid=49&partneruserid=7345073677437040781&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=75:71dcd657-b7ce-4e56-9064-0f83979f8fcb\|76:GOOGLE_HOSTED_SI\|86:7822940101119878936\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg
2024-03-11 11:57:13 UTC	545	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:12 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=49:7345073677437040781\|75:71dcd657-b7ce-4e56-9064-0f83979f8fcb\|76:GOOGLE_HOSTED_SI\|86:7822940101119878936\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; expires=Wed, 12 Mar 2025 11:57:13 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:13 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.16	50434	162.19.138.119	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:13 UTC	611	OUT	GET /i/102/9.gif?gdpr=0&gdpr_consent= HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:13 UTC	1387	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: id5=da35dfea-1127-79f5-8b21-8d4166047880#1710158233639#1; Max-Age=300; Expires=Mon, 11-Mar-2024 12:02:13 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://id5-sync.com/c/102/0/9/1.gif?gdpr=0&gdpr_consent=&us_privacy= transfer-encoding: chunked date: Mon, 11 Mar 2024 11:57:12 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-03-11 11:57:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.16	50438	192.82.242.213	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:13 UTC	3333	OUT	GET /AdServer/SPug?gdpr=0&p=156557&pr=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DuFFr5RFBYgoUJbWMAWGEZKS3%26source_user_id%3D9A176ADB-73F4-4BD8-A648-23F2443493B5&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_220_250_234_3_13_56_240_55_231_71_264_254_165_48_7_54_5_104_249_46_176%7C1711411200%3A35; SPugT=1710158228; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23234-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23361-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk; PugT=1710158231; pi=156557:3; chkChromeAb67Sec=8
2024-03-11 11:57:13 UTC	560	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:57:12 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1710158232; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:57:12 GMT; path=/ Location: https://match.sharethrough.com/sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:57:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.16	50437	104.36.113.110	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:13 UTC	3418	OUT	GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; ipc=156557^https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156557%26pr%3Dhttps%253A%252F%252Fmatch.sharethrough.com%252Fsync%252Fv1%253Fsource_id%253DuFFr5RFBYgoUJbWMAWGEZKS3%2526source_user_id%253D%2523PMUID^1^0; chkChromeAb67Sec=7; pi=162538:4; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_220_250_234_3_13_56_240_55_231_71_264_254_165_48_7_54_5_104_249_46_176%7C1711411200%3A35; SPugT=1710158228; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23234-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23361-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk; PugT=1710158231
2024-03-11 11:57:13 UTC	923	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: https://image4.pubmatic.com/AdServer/SPug?gdpr=0&p=156557&pr=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DuFFr5RFBYgoUJbWMAWGEZKS3%26source_user_id%3D9A176ADB-73F4-4BD8-A648-23F2443493B5&us_privacy=%24%7BUS_PRIVACY%7D P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: ipc=; domain=pubmatic.com; path=/; max-age=0; SameSite=None; secure; Set-Cookie: pi=156557:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=8; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Mon, 11 Mar 2024 11:57:11 GMT Content-Length: 270 Connection: close
2024-03-11 11:57:13 UTC	270	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 34 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 53 50 75 67 3f 67 64 70 72 3d 30 26 61 6d 70 3b 70 3d 31 35 36 35 35 37 26 61 6d 70 3b 70 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 74 63 68 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 25 32 46 73 79 6e 63 25 32 46 76 31 25 33 46 73 6f 75 72 63 65 5f 69 64 25 33 44 75 46 46 72 35 52 46 42 59 67 6f 55 4a 62 57 4d 41 57 47 45 5a 4b 53 33 25 32 36 73 6f 75 72 63 65 5f 75 73 65 72 5f 69 64 25 33 44 39 41 31 37 36 41 44 42 2d 37 33 46 34 2d 34 42 44 38 2d 41 36 34 38 2d 32 33 46 32 34 34 33 34 39 33 42 35 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 25 32 34 25 37 42 55 53 5f 50 52 49 56 41 43 59 25 37 Data Ascii: <a href="https://image4.pubmatic.com/AdServer/SPug?gdpr=0&p=156557&pr=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DuFFr5RFBYgoUJbWMAWGEZKS3%26source_user_id%3D9A176ADB-73F4-4BD8-A648-23F2443493B5&us_privacy=%24%7BUS_PRIVACY%7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.16	50441	104.18.36.155	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:13 UTC	500	OUT	GET /crum?cm_dsp_id=3&external_user_id=3e9d65ee-f197-4b00-b33c-8e23896e09ac&gdpr=&gdpr_consent= HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
2024-03-11 11:57:13 UTC	986	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:13 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 862b5d9f3f3d0a03-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; Path=/; Domain=casalemedia.com; Expires=Tue, 11 Mar 2025 11:57:13 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=4192; Path=/; Domain=casalemedia.com; Expires=Sun, 09 Jun 2024 11:57:13 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jmBh1QrjY43r0Rk2JaOUSDLO01YKMx4itgbHUtcLEb%2F3hVNiFboZhAqGgXRhCaU%2B6JbZJ83M%2FGpjFTEJCJ5wekoZjyfiEU9uN5k4PwIyJ5czAi2zCXryXguLDXAcY%2FVMNymXDYjoVCHJ3w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-11 11:57:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.16	50444	142.251.2.148	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:13 UTC	809	OUT	GET /sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/images/f1_img1_300x250.png?1708393659275 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s0.2mdn.net/sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/index.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:13 UTC	822	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 24134 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Fri, 08 Mar 2024 16:43:55 GMT Expires: Sat, 08 Mar 2025 16:43:55 GMT Cache-Control: public, max-age=31536000 Age: 241998 Last-Modified: Wed, 21 Feb 2024 21:32:45 GMT Content-Type: image/png Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:57:13 UTC	430	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 01 f4 08 06 00 00 00 e1 50 53 d4 00 00 20 00 49 44 41 54 78 9c ec dd 7b 7c 1c 77 7d ef ff f7 cc 5e b5 ba ae 6c cb f7 4b 24 27 76 9c ab 2d 07 48 08 b7 20 a7 10 c2 1d 19 7e f4 34 05 0e 95 a1 14 e8 69 1f 20 b7 a7 e7 77 ca 21 3d c8 b4 3d 07 4a db 53 99 16 5a a0 3d ad cd bd 29 05 64 20 81 40 9a c4 8a 13 e7 9e 58 8a ef 37 59 bb 92 56 ab bd ce cc f9 43 da cd 4a 5e 49 2b 69 65 ad 56 af e7 e3 b1 0f ad 66 67 67 be 3b df d9 99 cf 7e bf 9f f9 8e 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRXPS IDATx{\|w}^lK$'v-H ~4i w!==JSZ=)d @X7YVCJ^I+ieVfgg;~
2024-03-11 11:57:13 UTC	1252	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-03-11 11:57:13 UTC	1252	IN	Data Raw: 66 1e 5f f9 ca 57 9a 6b 6b 6b 3f 2b 49 eb d7 af d7 8a 15 2b ae 48 a1 01 00 8b 47 43 43 83 d6 ad 5b 27 49 aa ad ad bd f7 eb 5f ff fa 0e e5 f4 82 28 7f 5e 2f e3 27 5e 41 04 58 25 a4 b1 b1 d1 75 ed b5 d7 7e 51 92 3b 18 0c 6a d5 aa 55 0b 5d 24 00 40 89 5a bd 7a b5 ea ea ea 24 c9 bd 79 f3 e6 2f 6c de bc 99 cb c9 4b 08 01 56 71 e5 fb 05 30 f1 17 43 be e4 76 53 92 f9 a5 2f 7d 69 b7 cb e5 ba c1 e5 72 65 9b 7f 01 00 98 cc a6 4d 9b e4 72 b9 e4 72 b9 6e fe e2 17 bf f8 2e 4d de 72 35 dd 7d 6d 51 64 04 58 25 a4 be be fe 13 d2 e8 af 12 8f c7 b3 d0 c5 01 00 94 38 8f c7 93 ed ed a8 af af ff bd 05 2e 0e 72 10 60 cd 9f a9 5a ae 32 d3 b2 bf 34 be f6 b5 af 35 bb 5c ae 6b 4d d3 54 43 43 c3 95 2d 29 00 60 d1 6a 68 68 90 69 9a 72 b9 5c db be fe f5 af 6f d7 e5 ad 58 19 53 e5 60 Data Ascii: f_Wkkk?+I+HGCC['I_(^/'^AX%u~Q;jU]$@Zz$y/lKVq0CvS/}ireMrrn.Mr5}mQdX%8.r`Z245\kMTCC-)`jhhir\oXS`
2024-03-11 11:57:13 UTC	1252	IN	Data Raw: ad 4d cd cd cd 6a 6c 6c 9c b2 3c 13 e7 9b 6e 7f 2d e4 f3 65 f6 eb 5d bb 76 69 ff fe fd 6a 6f 6f 9f f6 7d e5 ec e0 c1 83 ea ed ed d5 e1 c3 87 c7 7d 5f ba bb bb 67 b4 9c d6 d6 d6 71 75 35 d5 be 94 6f 9d dd dd dd 97 d5 63 30 18 cc a6 09 ec df bf 7f d2 fd 29 63 e2 f7 3d 53 df dd dd dd 97 b5 54 71 2c c0 4c d0 45 88 19 eb ee ee be ec 24 d9 d2 d2 32 ed 41 67 ff fe fd 0a 87 c3 6a 6f 6f 57 4b 4b 4b de ee ba e9 b4 b6 b6 aa a5 a5 45 7b f6 ec d1 ae 5d bb c6 ad 73 2e cb 3f 78 f0 a0 f6 ec d9 a3 3d 7b f6 64 4f 12 53 ad 0b 33 93 d9 be bb 77 ef be ec b5 d6 d6 56 1d 3c 78 50 87 0e 1d 52 38 1c be 2c 28 ee e8 e8 d0 a1 43 87 54 5f 5f af ee ee ee 49 03 ac c9 e6 9b ed fe 9a cf 6c df 57 6e 32 db 20 37 38 69 6f 6f cf 06 b1 d3 e9 ec ec 54 77 77 77 b6 eb 2e 18 0c ce 6a 9d f9 ea 23 Data Ascii: Mjll<n-e]vijoo}}_gqu5oc0)c=STq,LE$2AgjooWKKKE{]s.?x={dOS3wV<xPR8,(CT__IlWn2 78iooTwww.j#
2024-03-11 11:57:13 UTC	1252	IN	Data Raw: 69 6c 6c bc 6c e4 e3 dc 47 67 67 e7 b8 f7 74 75 75 8d 1b f1 78 e2 f2 26 8e a8 9d fb 98 38 2a 73 46 be 91 b6 73 df 33 d7 cf 75 e0 c0 81 bc f3 1d 3e 7c 78 dc 67 99 f8 68 6b 6b bb 6c fe a9 3e 5f 63 63 e3 b8 91 ae cb c1 4c eb a6 ab ab 6b dc 36 9a 38 fa fe 44 d3 d5 c1 64 fb 4c ee fb 33 f3 e6 8e ea 3f 9d dc 51 c8 19 bd bd 30 5d 5d 5d 79 47 c3 9f ca c4 d1 de a7 7a 64 cc e6 38 32 71 e4 f8 89 8f c9 8e 01 8b 0d 23 b9 a3 5c 95 5d 80 75 e0 c0 81 71 07 a0 cc f3 dc 20 2a f7 24 aa 29 0e 8a 8e 33 fe 20 17 0c 06 9d f6 f6 76 a7 a3 a3 63 5c b0 33 f1 84 9b 7b d0 6e 6c 6c 74 3a 3a 3a 9c 8e 8e 8e 71 27 dd 89 41 de 74 5a 5b 5b b3 ef cd dc 4a 63 ba f9 32 27 d9 50 28 e4 b4 b5 b5 65 a7 e7 06 4c b9 07 fd dc b2 e6 7e be 52 bd c5 c6 6c cc b4 6e f2 ed 1f d3 05 58 f9 b6 69 7b 7b fb 94 Data Ascii: illlGggtuux&8sFs3u>\|xghkkl>_ccLk68DdL3?Q0]]]yGzd82q#\]uq $)3 vc\3{nllt:::q'AtZ[[Jc2'P(eL~RlnXi{{
2024-03-11 11:57:13 UTC	1252	IN	Data Raw: ee 95 6a 85 3c 30 fd d8 64 73 d9 6e b9 f5 93 ef c7 db 5c 8f 23 13 e5 7e 97 1b 1b 1b 0b 2e 67 a9 22 c0 2a 2d 74 11 62 c6 3a 3b 3b f3 5e d5 33 95 dc 64 e7 7c 89 c6 87 0e 1d ca 36 d1 37 37 37 8f 7b 6d ff fe fd da b9 73 67 b6 3b a2 a3 a3 43 07 0e 1c 28 f8 ca 9f e9 12 cc f3 25 a8 67 ba 3f f3 25 bf 06 83 c1 6c 19 27 7e fe c6 c6 46 75 76 76 aa a7 a7 47 3d 3d 3d d9 e5 95 6b e2 f4 5c eb 66 2a 99 6d 9c b9 4d d1 44 b9 d3 32 f3 16 5a d7 b9 dd 85 98 99 dc ef 6a b1 97 9b a9 d3 dc 2b 07 73 cd e6 38 92 b9 03 43 a6 1b 38 57 ee 77 99 5b e7 a0 d8 b8 d9 33 26 95 b9 3d 45 4b 4b 8b ba ba ba b2 d3 83 c1 a0 1a 1b 1b d5 db db 5b f0 81 b6 b5 b5 55 7b f7 ee cd e6 c8 b4 b4 b4 8c 3b 81 e6 e6 5d e4 06 35 99 1c 26 69 f4 80 d9 d9 d9 79 59 00 36 9d e6 e6 e6 6c 20 b4 77 ef de cb 02 9d dc Data Ascii: j<0dsn\#~.g"-tb:;;^3d\|6777{msg;C(%g?%l'~FuvvG===k\fmMD2Zj+s8C8Ww[3&=EKK[U{;]5&iyY6l w
2024-03-11 11:57:13 UTC	1252	IN	Data Raw: 01 00 70 05 d9 92 fe 75 78 58 7f da df af e3 a9 94 ea 4c 53 ef f3 7a b5 35 1e 97 37 9d 5e e8 e2 a1 48 08 b0 00 00 b8 02 1c 49 ff 3e 3c ac 3f 0d 85 f4 62 32 a9 6a d3 54 ab d7 ab eb 12 09 f9 08 ac ca 0e 01 16 00 00 f3 ec 27 d1 a8 3e 1f 0a e9 e9 44 42 15 86 a1 77 fb 7c ba 3e 1e 97 df b2 46 67 a0 7b af ec 10 60 01 00 30 4f 1e 89 c7 d5 71 e9 92 1e 89 c7 e5 33 0c bd cb e7 d3 0d 89 84 fc f1 f8 42 17 0d f3 8c 00 0b 00 80 22 7b 26 91 d0 be 50 48 3f 89 46 e5 32 0c dd e5 f3 69 67 22 a1 8a 79 0c ac 68 03 2b 2d 04 58 00 00 14 c9 c9 54 4a 9f 0f 85 f4 bd 48 44 92 f4 06 9f 4f b7 26 93 aa a1 c5 6a c9 21 c0 02 00 60 8e 06 6d 5b 5f 0c 85 f4 95 c1 41 a5 1d 47 b7 fa 7c 7a 6d 2a a5 20 81 d5 92 45 80 05 00 c0 2c 25 1d 47 5f 1d 1c d4 17 43 21 0d d9 b6 ae f5 78 f4 16 49 cb 17 20 Data Ascii: puxXLSz57^HI><?b2jT'>DBw\|>Fg{`0Oq3B"{&PH?F2ig"yh+-XTJHDO&j!`m[_AG\|zm* E,%G_C!xI
2024-03-11 11:57:13 UTC	1252	IN	Data Raw: ac be d6 56 d9 a1 d0 65 af 19 b5 b5 5a 71 e0 80 5c 2b 56 2c 40 c9 80 d1 1c ab f6 be 3e fd 62 64 44 41 d3 d4 7f f6 fb 75 4d 22 21 57 32 49 02 f6 98 93 27 e3 7a ac 7b 48 a7 4f 8d 76 97 6e d8 e8 d7 8e e6 1a ad 5b e7 9f f3 b2 d9 c2 a5 85 00 0b 58 44 9c 64 52 d6 f9 f3 72 f2 b5 04 44 22 4a 3e fc b0 2a ee be fb ca 17 0c 4b de 77 22 11 fd 41 5f 9f 86 6d 5b 6f f6 f9 74 7b 2a 25 3f 2d 56 92 24 db 76 f4 e2 8b 23 7a ac 3b a2 4b 97 92 32 4d 69 cb d6 4a ed d8 51 a3 e5 0c b5 50 b6 08 b0 80 45 c4 b5 72 a5 56 fd ea 57 72 22 91 71 d3 07 ff ec cf 14 bb ef 3e 25 9f 79 86 00 0b 57 54 da 71 f4 99 4b 97 f4 d5 c1 41 ad 70 b9 d4 e6 f1 68 ed 02 8f 74 5e 2a 12 09 5b 4f 3d 35 9a b8 3e 3c 6c c9 e3 31 74 f3 f6 d1 2b 02 ab ab 39 fd 96 3b 6a 18 58 64 cc 9a 1a a9 a6 66 dc 34 ef f6 ed 8a Data Ascii: VeZq\+V,@>bdDAuM"!W2I'z{HOvn[XDdRrD"J>Kw"A_m[ot{%?-V$v#z;K2MiJQPErVWr"q>%yWTqKApht^*[O=5><l1t+9;jXdf4
2024-03-11 11:57:13 UTC	1252	IN	Data Raw: 36 b8 dd da ea f3 69 87 df af db 2a 2a b4 bc 44 13 6b 31 35 f7 35 d7 48 92 ac 33 67 e4 0c 0f cb a8 aa 9a d1 fb ed c1 41 59 17 2f 4a 92 3c 63 cb c2 d4 5e 4a a5 f4 8d c1 41 1d 88 44 14 b6 2c ad 75 bb f5 5e af 57 d7 a4 d3 32 e7 21 37 c9 2b 69 5b 32 a9 6b 25 bd e4 f3 e9 bb 96 a5 7d fd fd fa ea e0 a0 3e 55 5f af f7 54 57 cb 53 c4 40 eb 68 22 a1 4f 5e b8 a0 17 93 49 ed f4 7a f5 1e cb 92 af c8 f7 f3 b3 6d 47 27 4e c4 f5 fc f3 51 f5 f4 8c e6 33 65 54 55 b9 54 53 e3 56 45 85 4b 2e 97 e4 76 9b 4a 26 6d 39 8e a3 78 7c 34 30 ea ef 4f 29 16 b3 8a 76 9b 41 8f c7 50 5d 9d 47 5b b7 56 6a e5 4a 9f 1a 1a bc 5a b9 d2 4b f7 1f 66 8c 00 ab cc 44 6c 5b f7 0d 0f eb 9b 91 88 1e 8d c5 b2 37 df ad 33 4d ad 75 b9 b4 c1 e3 51 40 52 52 52 cc 71 14 91 74 38 1e d7 83 b1 d1 cb 8a 0d 49 Data Ascii: 6i**Dk155H3gAY/J<c^JAD,u^W2!7+i[2k%}>U_TWS@h"O^IzmG'NQ3eTUTSVEK.vJ&m9x\|40O)vAP]G[VjJZKfDl[73MuQ@RRRqt8I
2024-03-11 11:57:13 UTC	1252	IN	Data Raw: 8b e9 81 91 91 29 df 7b 95 db ad 56 bf 5f 5b 2c 4b 2b 8a 1c 58 d9 b6 f4 1f 0f 0f e8 91 47 07 65 9a 86 5e f5 ca 5a dd b2 b3 56 6e 37 c7 90 62 f1 9e 1a d6 b6 df 3f a2 d8 df bf 7a a1 8b 82 31 04 58 8b d0 b1 64 52 9f be 78 51 8f c4 e3 6a 70 b9 f4 51 af 57 5b d2 e9 79 b9 82 24 e8 38 6a 49 26 75 9b 69 aa db e3 d1 bf 27 93 fa d8 f9 f3 fa bc c7 a3 4f 04 83 7a 57 91 93 6a cb cd b0 6d eb df a3 51 7d 27 12 d1 83 23 23 b2 25 55 9b a6 ee f2 fb 75 83 65 69 b5 65 c9 28 62 f7 4b e2 97 bf 94 24 55 be ef 7d aa 7c ff fb 67 fc 7e d7 9a 35 32 6b 6b 8b 56 9e c9 44 6d 5b 8f c6 e3 fa 65 2c a6 27 e2 71 3d 99 48 28 32 21 88 aa 35 4d ad 74 b9 74 ad c7 a3 5a c3 50 b5 46 5b 6a 2a 34 1a 2c 99 79 82 ae a4 46 bb bc 1d 49 71 49 89 b1 69 09 8d e6 1c 4a d2 88 e3 c8 6f 18 32 25 55 8e fd ad Data Ascii: ){V_[,K+XGe^ZVn7b?z1XdRxQjpQW[y$8jI&ui'OzWjmQ}'##%Uueie(bK$U}\|g~52kkVDm[e,'q=H(2!5MttZPF[j*4,yFIqIiJo2%U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.16	50445	142.251.2.149	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:13 UTC	2934	OUT	GET /pcs/view?xai=AKAOjssr9-mhLE0SfG-5qH3RyP1YWYQmPZqAZD-JNFW9L9ZZB624P4aaDVY1sueg4t2dCU-JyFaiv-A2-319CZSIk0BpZ_YkvHN5TLkk2xaURijKmN_lfni-dftf-oA1ghoL7g1eVc6DrytzA0bppgpqN9xghAxNs2qRJHZJDbdTUTyvGa3I_ZW61Eed_fzUUaEj1u30mN61IGPCOu03Qk_jYH37D8yPJvLehYnNsO_qgWaRjls9fKckHaF1jve_g1OlJ9Tk5nAKA8NjqpZskV4PyOoFpejrQ2BsYts-w7qABMU7abEXUTtu2iBTVjqU7gl2yy6bL3fySGF5Jvv1b2dxNbfJsjwOjj5rlKcu88XQK00Uqh2_lGXz_sV61HYY-rUrWgiMGiLPQI2vkkVQ_QthUNyU6hjUWr0dgYj4hqEX9vb61ZtBM4ZXxxlix-owVU0mlQGKGE8w9dEzSy5WefX1fI_pZLX12va6uze7P7Ceh-6dOYf9WodT_VRegF-CPdTFkKoYghuNNhYFLPI5dDE3zoUv18dqtnBoG0Rtxbo2_rp0lhzMmjAO7uSaJgY6AikEVilto2fWQnNwTpKqsG9lGKG7Z8tD9sJwpRho6iCScHtqdrMqabOPDxqHogVxN3vvJm9EHhFkm92paYCzXKNTha_7CuCDjO5eAo73VWoKSjDdMqWqiLfx6D3_KbUY_xNgmpXFKx06flMwLgRgpT5kbQpwV_vtWY5ZPMI8IZjMtXabY7O3RxzjsWXj_HeukVqg_GRs0UYG7ijSUu-k0aPRWn2hjo3Ilse5byLn0dm2Gb7jAp6inVQP4v45voC6GkBsFlnV9dvXRBjYzE5FkgByXD0udadFXuyAUSFNbhurGc5qYaJdQv7WtpyG6ahTYNrr2tKGofX2XsOB3JfTnrHXb4AUzpm4ZHsxMHW8fS8M4EBQDxL08Zf0V-j8UBXNpkx6ZN-y6byaEq2X5LUgqpbIZKiKV7j2CJl6ozJNWvPRcaScDkXO6UcE8UjgTLZOdP3un06CRMMLjJfwB87OrN7JCKjc9y2LRkBxhl7MXFVfUcz1FxGRDQXPwh-I_aeFwxe9Bf48kibTLRRQ2Y8x6IqBKEHlOAsFHkitv8tuHBy0eDRuGEdujljKmXOXeOruWnB-o0xUgolupUe_1x_0IvN5KTVzcTX3jV8OgQpnsbFBBEcsn1X9uwZfGLXM6BehsfIlwt0omg0ONDmuVOilSGNc_UxYVHfDrF6ow3Z_zhIn2Gdd5FZzEEHqznuNuolKpMCKrJwzm_TEE1dQgaxC7qFN_3Wg8CSATlsQRYWPV3TEEamVOJd0M662X9HBNWbhnSNpBhspBqufCtgjoHKvxPIKoNCC_YhQ9vrq6ZjvPsdOceNs6zwr7EYRbjP-6dyUPz0LSyeTVOjeH0hHtD2fN6Euad56QPptnGTWh_GtlJqUYv2d2oP2oiqLFw08wCqCltY0jA&sai=AMfl-YR6H9LZFZbm2QUsLKawXiZYPJ51DChZcYNZ2CLZN1Zy7HnBUZaBh8nURMgsK5Fgf4uAUKNTIXdrUwsCbLrj6_XmR2EXiTluZUMLVdYlVN_CT10rFClCR6WiGTdhDISme3YrgiUm5XFdSp93HCvtUjvL4iJwsAU1vk_qcNGa0Aeq6Oudjlza1pNANIukObfIjEmJ-GjN6lE_kcHfdX3YvyXOmWjvjPlfFZdtuZu9MRcHBJACNcvd4ZhYoRilqs5ZhvGMmI2BdmJiH5Wm7QWTKkqDN-TnCImnpd1xBijO0NI97zpVX0imZT_HTXIYbN9iwCY1vyTxGaRAwnhcsz2LKR0fGomzH6M-PZPS3AEQ9EqMAodP4H8uZJRfOZZmaAMDOB4rmcB96FldPeLnIW2bTzHfFBVVPbyPQGzQNEQBE7wB6rItRZ_F&sig=Cg0ArKJSzDZLkNT3f9qHEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9nb2RhZGR5LmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=4473&vt=11&dtpt=2932&dett=3&cstd=1537&cisv=r20240306.62815&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlhWjE-nrLMqamcKd4HCzJGyk-lF6Y-_gdSV1_rcQ-Lc3JBzMSF3zk6wICTe0A; DSID=NO_DATA; ar_debug=1
2024-03-11 11:57:13 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 11 Mar 2024 11:57:13 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.16	50443	216.22.16.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:13 UTC	999	OUT	GET /redir/?partnerid=80&gdpr=0&partneruserid=VbPHRgW3lUdOvpMVAr6PFFq_wxdOsJYSBeXINTmx HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=80:VbPHRgW3lUdOvpMVAr6PFFq_wxdOsJYSBeXINTmx\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
2024-03-11 11:57:13 UTC	534	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:12 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=80:VbPHRgW3lUdOvpMVAr6PFFq_wxdOsJYSBeXINTmx\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK; expires=Wed, 12 Mar 2025 11:57:13 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:13 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.16	50436	69.194.240.13	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:13 UTC	622	OUT	GET /usersync2/smartadserver?gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:13 UTC	637	IN	HTTP/1.1 302 Found date: Mon, 11 Mar 2024 11:57:13 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005%22%2C%22zdxidn%22%3A%222075%22%7D; path=/; expires=Tue, 11 Mar 2025 11:57:13 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.1rx.io/usersync2/smartadserver?zcc=1&cb=1710158233278 etag: RX5a36053c69dd47d484e1b94f859f1cd2005 connection: close
2024-03-11 11:57:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.16	50447	44.218.18.183	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:13 UTC	742	OUT	GET /pbmtc.gif?puid=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:13 UTC	442	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:13 GMT Content-Type: image/gif Content-Length: 42 Connection: close Server: Kestrel Set-Cookie: UID=66d38b60-d976-415d-a6f0-d92615f9d45e; expires=Tue, 11 Mar 2025 11:57:13 GMT; path=/; secure; samesite=none Set-Cookie: ss=50buAWwA0Kqe9bg3Drw8ke7aebWB57C9AzsW2FR5wbGz93M7QbwwGH18e3Z%2Fj8jZw0kYcHPFErouxz6O9HdQ6w%3D%3D; expires=Tue, 11 Mar 2025 11:57:13 GMT; path=/; secure; samesite=none
2024-03-11 11:57:13 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.16	50449	192.82.242.213	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:13 UTC	3489	OUT	GET /AdServer/SPug?gdpr=0&p=156557&pr=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DuFFr5RFBYgoUJbWMAWGEZKS3%26source_user_id%3D9A176ADB-73F4-4BD8-A648-23F2443493B5&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_220_250_234_3_13_56_240_55_231_71_264_254_165_48_7_54_5_104_249_46_176%7C1711411200%3A35; SPugT=1710158228; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23234-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23361-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk; pi=156557:3; chkChromeAb67Sec=8; KRTBCOOKIE_391=22924-7271851492747088692&KRTB&23263-7271851492747088692&KRTB&23481-7271851492747088692; KRTBCOOKIE_1278=23329-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23340-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23498-6255abe4-6520-429f-aa2c-493e15bdee11; PugT=1710158232
2024-03-11 11:57:13 UTC	560	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:57:13 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1710158233; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:57:13 GMT; path=/ Location: https://match.sharethrough.com/sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:57:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.16	50450	104.36.113.107	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:13 UTC	3548	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=6ec76371-3031-4b49-abb3-349fb3d7cf23&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_220_250_234_3_13_56_240_55_231_71_264_254_165_48_7_54_5_104_249_46_176%7C1711411200%3A35; SPugT=1710158228; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23234-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23361-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk; pi=156557:3; chkChromeAb67Sec=8; KRTBCOOKIE_391=22924-7271851492747088692&KRTB&23263-7271851492747088692&KRTB&23481-7271851492747088692; KRTBCOOKIE_1278=23329-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23340-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23498-6255abe4-6520-429f-aa2c-493e15bdee11; PugT=1710158232
2024-03-11 11:57:13 UTC	600	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 11 Mar 2024 11:57:13 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_466=16530-6ec76371-3031-4b49-abb3-349fb3d7cf23; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 09-Jun-2024 11:57:13 GMT; path=/ Set-Cookie: PugT=1710158233; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:57:13 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:57:13 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.16	50439	52.94.220.185	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:13 UTC	493	OUT	GET /s/dcm?pid=f7a5db36-1d5c-4c26-81b6-b4d0807faffb&id=1899505890594565248&gdpr=0&gdpr_consent= HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_mD47eJIUzEqu3DVtJD2b0; ad-privacy=0
2024-03-11 11:57:14 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 11 Mar 2024 11:57:13 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 62HNJX6H5AMSWY1Y6CER Set-Cookie: ad-id=A_mD47eJIUzEqu3DVtJD2b0; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 11:57:13 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 11:57:13 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-11 11:57:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.16	50448	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:13 UTC	1248	OUT	GET /redir/?issi=1&partnerid=79&partneruserid=fb6bf7e8-4454-41c2-9d45-dd203ebb7093&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
2024-03-11 11:57:13 UTC	563	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:12 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|79:fb6bf7e8-4454-41c2-9d45-dd203ebb7093\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK; expires=Tue, 11 Mar 2025 11:57:13 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:13 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.16	50452	142.251.2.148	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:13 UTC	454	OUT	GET /sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/images/CTA.png?1708393659275 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:13 UTC	820	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 5930 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Sun, 10 Mar 2024 16:52:50 GMT Expires: Mon, 10 Mar 2025 16:52:50 GMT Cache-Control: public, max-age=31536000 Age: 68663 Last-Modified: Wed, 21 Feb 2024 21:32:45 GMT Content-Type: image/png Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:57:13 UTC	432	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 42 00 00 00 51 08 06 00 00 00 a7 98 af 1d 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 0a 49 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 48 89 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 Data Ascii: PNGIHDRBQgAMAaIiCCPsRGB IEC61966-2.1HSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.T
2024-03-11 11:57:13 UTC	1252	IN	Data Raw: f4 c5 a2 fe 6b f0 6f 22 3e 21 f1 df fe bc 8c 02 04 00 10 4e cf ef da 5f e5 e5 d6 03 70 c7 01 b0 75 bf 6b a9 5b 00 da 56 00 68 df f9 5d 33 db 09 a0 5a 0a d0 7a f9 8b 79 38 fc 40 1e 9e a1 50 c8 3c 1d 1c 0a 0b 0b ed 25 62 a1 bd 30 e3 8b 3e ff 33 e1 6f e0 8b 7e f6 fc 40 1e fe db 7a f0 00 71 9a 40 99 ad c0 a3 83 fd 71 61 6e 76 ae 52 8e e7 cb 04 42 31 6e f7 e7 23 fe c7 85 7f fd 8e 29 d1 e2 34 b1 5c 2c 15 8a f1 58 89 b8 50 22 4d c7 79 b9 52 91 44 21 c9 95 e2 12 e9 7f 32 f1 1f 96 fd 09 93 77 0d 00 ac 86 4f c0 4e b6 07 b5 cb 6c c0 7e ee 01 02 8b 0e 58 d2 76 00 40 7e f3 2d 8c 1a 0b 91 00 10 67 34 32 79 f7 00 00 93 bf f9 8f 40 2b 01 00 cd 97 a4 e3 00 00 bc e8 18 5c a8 94 17 4c c6 08 00 00 44 a0 81 2a b0 41 07 0c c1 14 ac c0 0e 9c c1 1d bc c0 17 02 61 06 44 40 0c 24 Data Ascii: ko">!N_puk[Vh]3Zzy8@P<%b0>3o~@zq@qanvRB1n#)4\,XP"MyRD!2wONl~Xv@~-g42y@+\LD*AaD@$
2024-03-11 11:57:13 UTC	1252	IN	Data Raw: 60 3a 3e 3d 65 fa ce e9 03 3e c6 3e 02 9f 7a 9f 87 be a6 be 22 df 3d be 23 7e d6 7e 99 7e 07 fc 9e fb 3b fa cb fd 8f f8 bf e1 79 f2 16 f1 4e 05 60 01 c1 01 e5 01 bd 81 1a 81 b3 03 6b 03 1f 04 99 04 a5 07 35 05 8d 05 bb 06 2f 0c 3e 15 42 0c 09 0d 59 1f 72 93 6f c0 17 f2 1b f9 63 33 dc 67 2c 9a d1 15 ca 08 9d 15 5a 1b fa 30 cc 26 4c 1e d6 11 8e 86 cf 08 df 10 7e 6f a6 f9 4c e9 cc b6 08 88 e0 47 6c 88 b8 1f 69 19 99 17 f9 7d 14 29 2a 32 aa 2e ea 51 b4 53 74 71 74 f7 2c d6 ac e4 59 fb 67 bd 8e f1 8f a9 8c b9 3b db 6a b6 72 76 67 ac 6a 6c 52 6c 63 ec 9b b8 80 b8 aa b8 81 78 87 f8 45 f1 97 12 74 13 24 09 ed 89 e4 c4 d8 c4 3d 89 e3 73 02 e7 6c 9a 33 9c e4 9a 54 96 74 63 ae e5 dc a2 b9 17 e6 e9 ce cb 9e 77 3c 59 35 59 90 7c 38 85 98 12 97 b2 3f e5 83 20 42 50 2f Data Ascii: `:>=e>>z"=#~~~;yN`k5/>BYroc3g,Z0&L~oLGli})*2.QStqt,Yg;jrvgjlRlcxEt$=sl3Ttcw<Y5Y\|8? BP/
2024-03-11 11:57:13 UTC	1252	IN	Data Raw: 11 91 a5 e3 32 70 0e 78 0d f8 23 10 03 a6 6b 59 c1 b2 1a b5 08 9b 81 2f 03 5f 02 3e 59 8b 03 8a 88 14 f1 67 e0 67 c0 cf 81 54 b5 07 ab 36 11 b6 03 df 04 ee ad 36 10 11 91 0a bc 0f fc 12 f8 1e 56 ab b1 22 95 26 c2 3b 80 1f 02 5b 2b ad 58 44 a4 86 fe 0b fc 08 78 0a 78 a7 dc c2 e5 26 c2 8f 00 07 80 7d 68 dc 4f 44 ae 3e 29 e0 ab c0 91 72 0a 95 93 08 d7 02 bf 02 3e 5f 5e 5c 22 22 9e fb 31 56 42 fc 4f 29 3b 97 9a 08 5b 81 97 81 1b 2a 8f 4b 44 c4 53 7f 02 1e a4 84 e5 37 4d 25 1c ec 8b c0 ef 50 12 14 91 c5 e5 b3 c0 29 e0 53 0b ed b8 50 8b f0 3e e0 04 1a 0f 14 91 c5 eb 02 d6 c4 ee a5 42 3b 14 4b 84 9f c3 6a 09 ea 6a 10 11 59 ec 4e 63 2d f3 7b 37 df c6 42 5d e3 8f 03 2f a2 24 28 22 8d a1 19 38 0c 2c cb b7 31 5f 22 5c 06 fc 04 b8 b9 8e 41 89 88 78 ad 0b e8 cd b7 21 Data Ascii: 2px#kY/_>YggT66V"&;[+XDxx&}hOD>)r>_^\""1VBO);[*KDS7M%P)SP>B;KjjYNc-{7B]/$("8,1_"\Ax!
2024-03-11 11:57:13 UTC	1252	IN	Data Raw: 13 4f e4 dd e7 f9 e7 9f c7 30 8c 7a 86 59 56 9d 0b 9d 53 24 12 e1 f8 f1 e3 0c 0f 0f 67 7d f6 99 4c 86 a7 9f 7e ba e0 6c 76 34 1a 25 1a 8d 32 38 38 e8 0c ad 04 02 01 9e 7d f6 59 ce 9e 3d eb 1c 2b 1c 0e 73 fb ed b7 ab 45 58 0f a6 5a 84 35 e1 6e 15 ba 5b 5f b9 ff e9 73 2d 34 59 61 b7 3c 5a 5a 5a cc 64 32 69 9a a6 d5 5a 70 d7 97 db b2 ca 8d a3 bf bf df 19 5c cf 6d 4d 54 33 59 52 ac ac bb e5 d3 db db 9b d5 52 9a 98 98 c8 6a 51 1d 3a 74 c8 d9 e6 6e 9d e5 b6 7a 4b 69 09 b9 cb 8f 8c 8c 14 fd 29 b7 4e f7 7e b9 ef a9 fb f3 c8 6d b5 ed df bf 3f eb bd b0 3f 47 fb bd 70 b7 40 dd db c4 33 03 4a 84 35 54 a8 0b db d1 d1 51 f0 17 bc 58 32 99 99 99 31 7b 7b 7b 0b 26 54 3b d9 f4 f4 f4 e4 3d a6 dd 5d 2b a6 1e 89 d0 dd 1d 2f 54 bf bb eb e7 9e 05 75 27 9b 8e 8e 8e b2 bb 81 b9 Data Ascii: O0zYVS$g}L~lv4%288}Y=+sEXZ5n[_s-4Ya<ZZZd2iZp\mMT3YRRjQ:tnzKi)N~m??Gp@3J5TQX21{{{&T;=]+/Tu'
2024-03-11 11:57:13 UTC	490	IN	Data Raw: 8d 26 e0 ef 7e 47 21 22 e2 a3 73 4d 40 72 c1 dd 44 44 1a d3 07 5c 49 84 13 0b ed 29 22 d2 a0 5e e5 ca 18 e1 5b c0 59 9f 83 11 11 f1 c3 ef e1 c3 75 84 bf f1 31 10 11 11 bf 9c 00 eb 5a 63 80 bb b1 9a 88 22 22 4b c5 1b c0 3a e0 03 bb 45 f8 17 60 d2 b7 70 44 44 bc f7 53 ac c9 92 ac 4b ec 9e f3 27 16 11 11 cf fd 1b 18 b0 9f b8 13 e1 2f 80 7f 78 1e 8e 88 88 f7 0e 61 4d 14 03 1f 8e 11 da 1e 01 7e ed 75 44 22 22 1e 7a 0f b8 0d b8 68 bf 90 7b f7 99 a3 40 cc cb 88 44 44 3c f6 5d 5c 49 10 e6 b7 08 01 d6 63 4d 9e 5c e7 4d 4c 22 22 9e f9 2b 70 0f f0 be fb c5 7c f7 23 3c 0f ec f1 22 22 11 11 0f 5d 06 b6 93 93 04 a1 f0 8d 59 0f 63 0d 26 8a 88 34 02 13 78 14 38 97 6f 63 b1 3b 54 ef 06 c6 ea 11 91 88 88 c7 be 41 91 89 e0 7c 63 84 6e d7 61 4d 9e 6c ae 71 50 22 22 5e f9 3e Data Ascii: &~G!"sM@rDD\I)"^[Yu1Zc""K:E`pDDSK'/xaM~uD""zh{@DD<]\IcM\ML""+p\|#<""]Yc&4x8oc;TA\|cnaMlqP""^>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.16	50453	104.36.113.110	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:13 UTC	3426	OUT	GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_220_250_234_3_13_56_240_55_231_71_264_254_165_48_7_54_5_104_249_46_176%7C1711411200%3A35; SPugT=1710158228; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23234-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23361-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk; pi=156557:3; chkChromeAb67Sec=8; KRTBCOOKIE_1278=23329-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23340-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23498-6255abe4-6520-429f-aa2c-493e15bdee11; KRTBCOOKIE_391=22924-327905091701696804&KRTB&23263-327905091701696804&KRTB&23481-327905091701696804; PugT=1710158231
2024-03-11 11:57:13 UTC	1045	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: https://rtb.adentifi.com/CookieSyncPubMatic&gdpr=0&gdpr_consent= P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: SyncRTB3=1710720000%3A223_2_15%7C1711411200%3A35%7C1712707200%3A224%7C1710979200%3A63%7C1711324800%3A56_220_234_55_71_165_5_250_13_264_176_8_231_48_104_249_21_7_54_46_266_166_178_22_3_240_254%7C1715299200%3A69; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: ipc=0^^2^0; domain=pubmatic.com; path=/; max-age=3; SameSite=None; secure; Set-Cookie: pi=0:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=9; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Mon, 11 Mar 2024 11:57:12 GMT Content-Length: 95 Connection: close
2024-03-11 11:57:13 UTC	95	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 74 62 2e 61 64 65 6e 74 69 66 69 2e 63 6f 6d 2f 43 6f 6f 6b 69 65 53 79 6e 63 50 75 62 4d 61 74 69 63 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://rtb.adentifi.com/CookieSyncPubMatic&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.16	50451	104.36.113.110	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:13 UTC	3598	OUT	GET /AdServer/ImgSync?gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_220_250_234_3_13_56_240_55_231_71_264_254_165_48_7_54_5_104_249_46_176%7C1711411200%3A35; SPugT=1710158228; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23234-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23361-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk; pi=156557:3; chkChromeAb67Sec=8; KRTBCOOKIE_1278=23329-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23340-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23498-6255abe4-6520-429f-aa2c-493e15bdee11; KRTBCOOKIE_391=22924-327905091701696804&KRTB&23263-327905091701696804&KRTB&23481-327905091701696804; KRTBCOOKIE_1323=23480-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23485-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23575-OPUc21b156e4d4f4c8381b77a05c19b0a40; PugT=1710158232
2024-03-11 11:57:13 UTC	1045	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: https://rtb.adentifi.com/CookieSyncPubMatic&gdpr=0&gdpr_consent= P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: SyncRTB3=1710720000%3A2_223_15%7C1712707200%3A224%7C1711324800%3A254_165_54_3_71_48_178_21_220_250_264_249_46_166_104_13_22_8_56_240_55_176_231_234_266_7_5%7C1715299200%3A69%7C1711411200%3A35%7C1710979200%3A63; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: ipc=0^^2^0; domain=pubmatic.com; path=/; max-age=3; SameSite=None; secure; Set-Cookie: pi=0:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=9; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Mon, 11 Mar 2024 11:57:13 GMT Content-Length: 95 Connection: close
2024-03-11 11:57:13 UTC	95	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 74 62 2e 61 64 65 6e 74 69 66 69 2e 63 6f 6d 2f 43 6f 6f 6b 69 65 53 79 6e 63 50 75 62 4d 61 74 69 63 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://rtb.adentifi.com/CookieSyncPubMatic&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.16	50454	104.36.113.110	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:13 UTC	3504	OUT	GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_220_250_234_3_13_56_240_55_231_71_264_254_165_48_7_54_5_104_249_46_176%7C1711411200%3A35; SPugT=1710158228; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23234-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23361-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk; pi=156557:3; chkChromeAb67Sec=8; KRTBCOOKIE_1278=23329-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23340-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23498-6255abe4-6520-429f-aa2c-493e15bdee11; KRTBCOOKIE_1323=23480-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23485-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23575-OPUc21b156e4d4f4c8381b77a05c19b0a40; PugT=1710158232; KRTBCOOKIE_391=22924-1724005921034811649&KRTB&23263-1724005921034811649&KRTB&23481-1724005921034811649
2024-03-11 11:57:13 UTC	1045	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: https://rtb.adentifi.com/CookieSyncPubMatic&gdpr=0&gdpr_consent= P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: SyncRTB3=1711324800%3A266_55_220_234_240_48_5_254_13_231_264_250_56_165_54_249_46_71_7_178_22_21_3_8_166_104_176%7C1712707200%3A224%7C1710720000%3A15_223_2%7C1710979200%3A63%7C1711411200%3A35%7C1715299200%3A69; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: ipc=0^^2^0; domain=pubmatic.com; path=/; max-age=3; SameSite=None; secure; Set-Cookie: pi=0:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=9; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Mon, 11 Mar 2024 11:57:13 GMT Content-Length: 95 Connection: close
2024-03-11 11:57:13 UTC	95	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 74 62 2e 61 64 65 6e 74 69 66 69 2e 63 6f 6d 2f 43 6f 6f 6b 69 65 53 79 6e 63 50 75 62 4d 61 74 69 63 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://rtb.adentifi.com/CookieSyncPubMatic&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.16	50455	142.251.2.148	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:13 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 281 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:13 UTC	281	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 64 65 62 75 67 63 6f 6e 76 65 72 73 69 6f 6e 64 6f 6d 61 69 6e 31 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 64 65 62 75 67 63 6f 6e 76 65 72 73 69 6f 6e 64 6f 6d 61 69 6e 32 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 67 6f 64 61 64 64 79 2e 63 6f 6d 22 5d 2c 22 73 6f 75 72 63 65 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 32 34 31 33 37 35 34 31 30 32 30 32 32 30 35 37 38 38 33 22 2c 22 73 6f 75 72 63 65 5f 65 76 65 6e 74 5f 69 64 22 3a 22 37 34 36 33 39 34 32 38 36 37 31 34 37 34 36 31 34 37 30 22 2c 22 73 6f 75 72 63 65 5f 73 69 74 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 22 7d Data Ascii: [{"body":{"attribution_destination":["https://debugconversiondomain1.com","https://debugconversiondomain2.com","https://godaddy.com"],"source_debug_key":"2413754102022057883","source_event_id":"7463942867147461470","source_site":"https://sourceforge.net"}
2024-03-11 11:57:13 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 11 Mar 2024 11:57:13 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.16	50458	104.18.36.155	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:13 UTC	752	OUT	GET /rum?cm_dsp_id=64&external_user_id=e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: r.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
2024-03-11 11:57:13 UTC	978	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:13 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 862b5da12eff09f5-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; Path=/; Domain=casalemedia.com; Expires=Tue, 11 Mar 2025 11:57:13 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=4192; Path=/; Domain=casalemedia.com; Expires=Sun, 09 Jun 2024 11:57:13 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fBV0D8kKYSfq%2B%2BYefRKVDAOPwrpMBcM%2BuMPXl%2FpW27c8uBwEt2K0r%2FL4yoedhirBYIz4i8IG3H8%2BAwiWfuRZ4j8B0L%2FVmvh6T0fD1MrLm8QBBFPRVkYv3cmUWpK5%2BtkdxuK8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-11 11:57:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.16	50442	35.214.235.183	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:13 UTC	739	OUT	GET /?redirect=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D124%26partneruserid%3D%7Bdevice_id%7D&pubid=5679&gdpr=0&gdpr_consent= HTTP/1.1 Host: csync.loopme.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.16	50446	35.212.133.238	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:13 UTC	726	OUT	GET /sync?ssp=liveintent&user_id=0d1e68fa-d7fe-46a8-ba8f-e840f06a5d57 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=6ec76371-3031-4b49-abb3-349fb3d7cf23; c=1710158227; tuuid_lu=1710158229
2024-03-11 11:57:13 UTC	262	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:57:13 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //c1.adform.net/serving/cookie/match/?party=24&bidswitch_ssp_id=liveintent

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.16	50456	216.22.16.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:13 UTC	1037	OUT	GET /redir/?partnerid=31&partneruserid=6ec76371-3031-4b49-abb3-349fb3d7cf23&gdpr=&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
2024-03-11 11:57:14 UTC	563	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:13 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK; expires=Tue, 11 Mar 2025 11:57:13 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:14 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.16	50457	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:13 UTC	1268	OUT	GET /redir/?issi=1&partnerid=94&partneruserid=Ze7xgAAAAwa1TAAh&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
2024-03-11 11:57:14 UTC	583	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:13 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK; expires=Tue, 11 Mar 2025 11:57:13 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:14 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.16	50459	216.22.16.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:13 UTC	1013	OUT	GET /redir/?issi=1&partnerid=92&partneruserid=3ftvG5anVWUA&ev=1&pid=560288&gdpr_consent=&gdpr=0 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|92:3ftvG5anVWUA\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
2024-03-11 11:57:14 UTC	539	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:13 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|92:3ftvG5anVWUA\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK; expires=Wed, 12 Mar 2025 11:57:13 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:14 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.16	50461	18.244.214.61	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:13 UTC	729	OUT	GET /c/?adExInit=sas&redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D133%26partneruserid%3D$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: s.ad.smaato.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:14 UTC	663	IN	HTTP/1.1 302 Moved Temporarily Content-Length: 0 Connection: close Server: CloudFront Date: Mon, 11 Mar 2024 11:57:14 GMT Cache-Control: no-cache, must-revalidate Set-Cookie: SCM=27fa38a615; Max-Age=1814400; Domain=.smaato.net; SameSite=None; Path=/; Secure Set-Cookie: SCMsas=27fa38a615; Max-Age=1814400; Domain=.smaato.net; Path=/; SameSite=None; Secure Location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=133&partneruserid=27fa38a615 X-Cache: Miss from cloudfront Via: 1.1 2fb361d51da8eb93e27836ee244084b2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO53-P4 X-Amz-Cf-Id: pk3dcrVCtZbit_9d8qOXDPivbaKOmzyl-Mo-33iwJnqgROPyLF8z4w==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.16	50462	104.36.113.111	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:13 UTC	3439	OUT	GET /AdServer/SPug?partnerID=162538&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_220_250_234_3_13_56_240_55_231_71_264_254_165_48_7_54_5_104_249_46_176%7C1711411200%3A35; SPugT=1710158228; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23234-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23361-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk; pi=156557:3; chkChromeAb67Sec=8; KRTBCOOKIE_1278=23329-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23340-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23498-6255abe4-6520-429f-aa2c-493e15bdee11; KRTBCOOKIE_1323=23480-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23485-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23575-OPUc21b156e4d4f4c8381b77a05c19b0a40; PugT=1710158232; KRTBCOOKIE_391=22924-1724005921034811649&KRTB&23263-1724005921034811649&KRTB&23481-1724005921034811649
2024-03-11 11:57:14 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 11 Mar 2024 11:57:12 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1710158232; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:57:12 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:57:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.16	50465	52.52.154.39	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:13 UTC	837	OUT	GET /sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:14 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:14 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:14 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:57:14 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.16	50466	104.36.113.110	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:13 UTC	3298	OUT	GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_220_250_234_3_13_56_240_55_231_71_264_254_165_48_7_54_5_104_249_46_176%7C1711411200%3A35; SPugT=1710158228; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23234-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23361-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk; PugT=1710158231; pi=156557:3; chkChromeAb67Sec=8; KRTBCOOKIE_391=22924-7271851492747088692&KRTB&23263-7271851492747088692&KRTB&23481-7271851492747088692
2024-03-11 11:57:14 UTC	1045	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: https://rtb.adentifi.com/CookieSyncPubMatic&gdpr=0&gdpr_consent= P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: SyncRTB3=1710720000%3A223_2_15%7C1711324800%3A250_166_240_264_249_13_231_5_176_266_8_220_56_22_254_104_21_3_71_48_54_55_46_234_165_7_178%7C1711411200%3A35%7C1715299200%3A69%7C1710979200%3A63%7C1712707200%3A224; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: ipc=0^^2^0; domain=pubmatic.com; path=/; max-age=3; SameSite=None; secure; Set-Cookie: pi=0:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=9; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Mon, 11 Mar 2024 11:57:12 GMT Content-Length: 95 Connection: close
2024-03-11 11:57:14 UTC	95	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 74 62 2e 61 64 65 6e 74 69 66 69 2e 63 6f 6d 2f 43 6f 6f 6b 69 65 53 79 6e 63 50 75 62 4d 61 74 69 63 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://rtb.adentifi.com/CookieSyncPubMatic&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.16	50467	192.82.242.213	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:13 UTC	3746	OUT	GET /AdServer/SPug?gdpr=0&p=156557&pr=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DuFFr5RFBYgoUJbWMAWGEZKS3%26source_user_id%3D9A176ADB-73F4-4BD8-A648-23F2443493B5&us_privacy=%24%7BUS_PRIVACY%7D HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; SyncRTB3=1715299200%3A69%7C1710720000%3A223_2_15%7C1710979200%3A63%7C1712707200%3A224%7C1711324800%3A22_266_8_21_166_220_250_234_3_13_56_240_55_231_71_264_254_165_48_7_54_5_104_249_46_176%7C1711411200%3A35; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23234-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23361-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk; pi=156557:3; chkChromeAb67Sec=8; KRTBCOOKIE_1278=23329-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23340-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23498-6255abe4-6520-429f-aa2c-493e15bdee11; KRTBCOOKIE_1323=23480-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23485-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23575-OPUc21b156e4d4f4c8381b77a05c19b0a40; PugT=1710158232; KRTBCOOKIE_391=22924-1724005921034811649&KRTB&23263-1724005921034811649&KRTB&23481-1724005921034811649; SPugT=1710158232
2024-03-11 11:57:14 UTC	560	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:57:14 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1710158234; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:57:14 GMT; path=/ Location: https://match.sharethrough.com/sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:57:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.16	50460	80.77.87.163	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:13 UTC	813	OUT	GET /e09bad714a425a93d6dea503dcf9c528.gif?redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D130%26partneruserid%3D%5BUID%5D%26gdpr%3D%5BGDPR%5D%26gdpr_consent%3D%5BGDPR_CONSENT%5D&gdpr=0&gdpr_consent= HTTP/1.1 Host: cs.admanmedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:14 UTC	619	IN	HTTP/1.1 302 Found Server: nginx Date: Mon, 11 Mar 2024 11:57:14 GMT Content-Length: 0 Connection: close Set-Cookie: admtr=bb7cbab5-f73e-439c-a427-5018e7e027e6; path=/; domain=.admanmedia.com; expires=Mon, 25 Mar 2024 11:46:31 GMT;SameSite=None;Secure Set-Cookie: ac_r=CS159; path=/; domain=.admanmedia.com; expires=Mon, 25 Mar 2024 11:46:31 GMT;SameSite=None;Secure Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=130&partneruserid=bb7cbab5-f73e-439c-a427-5018e7e027e6&gdpr=0&gdpr_consent=[GDPR_CONSENT]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.16	50463	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:13 UTC	1365	OUT	GET /redir/?issi=1&partnerid=139&partneruserid=0&redirurl=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3D98KUz37ype9D3X2sf9ovgeTt%26source_user_id%3DSMART_USER_ID&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=49:7345073677437040781\|75:71dcd657-b7ce-4e56-9064-0f83979f8fcb\|76:GOOGLE_HOSTED_SI\|86:7822940101119878936\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg
2024-03-11 11:57:14 UTC	661	IN	HTTP/1.1 302 Found content-length: 0 date: Mon, 11 Mar 2024 11:57:13 GMT cache-control: no-cache,no-store location: https://match.sharethrough.com/sync/v1?source_id=98KUz37ype9D3X2sf9ovgeTt&source_user_id=1899505890594565248&gdpr=0&gdpr_consent= pragma: no-cache set-cookie: csync=49:7345073677437040781\|75:71dcd657-b7ce-4e56-9064-0f83979f8fcb\|76:GOOGLE_HOSTED_SI\|86:7822940101119878936\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|139:0; expires=Tue, 11 Mar 2025 11:57:14 GMT; domain=smartadserver.com; path=/; SameSite=None; secure p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.16	50464	216.22.16.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:13 UTC	1003	OUT	GET /redir/?partnerid=49&partneruserid=7345073677437040781&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=49:7345073677437040781\|75:71dcd657-b7ce-4e56-9064-0f83979f8fcb\|76:GOOGLE_HOSTED_SI\|86:7822940101119878936\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg
2024-03-11 11:57:14 UTC	545	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:13 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=49:7345073677437040781\|75:71dcd657-b7ce-4e56-9064-0f83979f8fcb\|76:GOOGLE_HOSTED_SI\|86:7822940101119878936\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg; expires=Wed, 12 Mar 2025 11:57:14 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:14 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.16	50469	52.11.41.99	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:14 UTC	455	OUT	GET /cookie-sync/stv?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAKPDU7L3eMAABWFZYx_mg; bitoIsSecure=ok; checkForPermission=ok
2024-03-11 11:57:14 UTC	421	IN	HTTP/1.1 303 See Other Date: Mon, 11 Mar 2024 11:57:14 GMT location: https://ads.stickyadstv.com/user-registering?userId=AAKPDU7L3eMAABWFZYx_mg&dataProviderId=817&gdpr=0 Server: gunicorn set-cookie: bito=AAKPDU7L3eMAABWFZYx_mg; Domain=bidr.io; expires=Thu, 10 Apr 2025 07:57:14 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.16	50471	54.215.97.222	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:14 UTC	733	OUT	GET /sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:14 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:14 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:14 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:57:14 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.16	50473	142.251.2.148	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:14 UTC	809	OUT	GET /sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/images/f1_img2_300x250.png?1708393659275 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s0.2mdn.net/sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/index.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:14 UTC	821	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 4552 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Fri, 08 Mar 2024 13:32:49 GMT Expires: Sat, 08 Mar 2025 13:32:49 GMT Cache-Control: public, max-age=31536000 Age: 253465 Last-Modified: Wed, 21 Feb 2024 21:32:45 GMT Content-Type: image/png Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:57:14 UTC	431	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 01 f4 08 06 00 00 00 e1 50 53 d4 00 00 11 8f 49 44 41 54 78 9c ed dd 6b 70 9d 65 81 07 f0 ff c9 49 d2 a6 4d 5b 4b 1b 28 66 58 5a d8 83 97 29 83 60 77 14 9c 41 dd 0e 0a 05 ef 2c b6 65 c4 72 11 77 ac 17 18 dd 19 91 65 10 1d 2f e0 32 38 88 83 50 41 16 ad 55 61 9c a1 3a 20 8c a3 20 22 97 1d 44 04 f1 92 2d 58 21 48 49 5b da b4 4d 93 e6 24 d9 0f 59 42 4b b1 5c 7a 92 37 cd f9 fd 3e e5 7d cf 7b 9e e7 9f 6f ff 79 df f7 3c 4f 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRXPSIDATxkpeIM[K(fXZ)`wA,erwe/28PAUa: "D-X!HI[M$YBK\z7>}{oy<O
2024-03-11 11:57:14 UTC	1252	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-03-11 11:57:14 UTC	1252	IN	Data Raw: 43 d3 7a ea a9 69 79 f7 bb d3 30 63 c6 cb 1b 73 eb d6 6c bf f5 d6 6c bd fe fa f4 3f f2 c8 2e 9f b5 9c 78 62 66 7e e9 4b 29 4d 9d ba d7 d9 5f 01 05 0b 00 ea 49 11 05 6b e0 a9 a7 b2 e1 23 1f 49 ff 9f fe 34 72 ae dc de 9e 19 9f f9 4c 5a 16 2d 1a 7e 0c b8 97 7a 7f f9 cb 74 7f ed 6b e9 ef e8 18 39 d7 38 6f 5e 66 5d 79 65 1a 0f 3d 74 af c7 7f 99 ea b6 60 59 a6 01 00 c6 40 75 cd 9a 74 9d 7c f2 73 e5 aa 54 4a eb 19 67 e4 80 9f fd 2c 2d 27 9d 54 93 72 95 24 93 df fe f6 b4 ad 5e 9d e9 e7 9e 3b f2 b2 7b f5 b1 c7 d2 75 ca 29 d9 f1 e0 83 35 99 83 17 a7 60 01 c0 28 ab ae 5d 9b ae a5 4b 33 b0 6e 5d 92 a4 61 da b4 cc 5a b1 22 33 ce 3b 6f 54 5e 44 2f 35 36 66 da c7 3e 96 b6 55 ab d2 30 7b 76 92 64 b0 bb 3b eb 97 2d 4b ff c3 0f d7 7c 3e 76 a7 60 01 c0 28 1a dc b4 29 1b 4e Data Ascii: Cziy0csll?.xbf~K)M_Ik#I4rLZ-~ztk98o^f]ye=t`Y@ut\|sTJg,-'Tr$^;{u)5`(]K3n]aZ"3;oT^D/56f>U0{vd;-K\|>v`()N
2024-03-11 11:57:14 UTC	1252	IN	Data Raw: 3d 0e bb 53 b0 00 a0 06 76 7e 3c f8 7c 9b 2f be 38 3d 3f f9 c9 9e 07 28 97 33 f3 e2 8b d3 7a da 69 49 92 c1 f5 eb b3 7e c9 92 6c fe ea 57 47 a5 5c 0d 6d df 9e a7 17 2d ca d3 27 9e 98 2d 57 5f bd d7 e3 b1 2b 05 0b 00 f6 d2 50 4f 4f fa 7e fd eb 7f 7c 41 43 43 aa 1d 1d 2f 3e 50 a9 94 19 17 5c 90 69 1f ff 78 92 e1 3b 4c 5b af b9 66 f8 a3 1a 3f 16 ec fd e5 2f 47 de f5 ea 7f e4 91 9a 8c c9 73 ec 45 08 00 7b a9 ef ae bb 32 d4 d7 b7 db f9 72 5b 5b 66 5e 76 59 9a 0f 3f 3c a5 29 53 5e f2 78 d3 3f f5 a9 34 cc 98 91 cd 5f fa 52 92 d1 79 e7 6a fb 2d b7 8c fc 3d e9 cd 6f ae d9 b8 0c 53 b0 00 60 2f 35 1d 7e 78 a6 2d 5f 9e a6 c3 0e 4b d3 eb 5f 9f ae 93 4f ce e0 e6 cd 19 e8 ea 4a b9 ad ed 65 95 ab 67 b5 2e 5b 96 f2 ec d9 e9 b9 e9 a6 4c fb e8 47 d3 bc 60 41 cd f2 0e 6e d8 Data Ascii: =Sv~<\|/8=?(3ziI~lWG\m-'-W_+POO~\|ACC/>P\ix;L[f?/GsE{2r[[f^vY?<)S^x?4_Ryj-=oS`/5~x-_K_OJeg.[LG`An
2024-03-11 11:57:14 UTC	365	IN	Data Raw: 50 af 1e 2d 3a c0 04 b7 a1 b3 52 d9 51 74 88 a2 28 58 00 d4 ab ff 4d f2 4c d1 21 26 b0 9b 8a 0e 50 24 05 0b 80 ba d4 59 a9 54 93 7c a7 e8 1c 13 d8 b7 8a 0e 50 24 05 0b 80 7a f6 b5 24 5b 8a 0e 31 01 ad ee ac 54 fe a7 e8 10 45 52 b0 00 a8 5b 9d 95 ca 53 49 3e 53 74 8e 09 66 53 92 4f 16 1d a2 68 0a 16 00 75 ad b3 52 b9 3a c9 7f 17 9d 63 82 18 4c f2 a1 ce 4a 65 6d d1 41 8a a6 60 01 40 f2 91 24 37 14 1d 62 1f d7 9f e4 b4 ce 4a e5 a7 45 07 19 0f 14 2c 00 ea 5e 67 a5 d2 9f 64 49 92 8b 52 c7 8b 63 ee 85 27 93 1c d7 59 a9 ac 2c 3a c8 78 51 2a 3a 00 00 8c 27 ed 1d 1d 47 24 b9 38 c9 3b 8b ce b2 0f d8 96 e4 aa 24 17 75 56 2a dd 45 87 19 4f 14 2c 00 78 01 ed 1d 1d af 4f b2 38 c9 bf 26 39 3c c9 f4 62 13 8d 1b 4f 24 b9 3f c9 2d 49 7e d4 59 a9 58 4b 0c 00 00 00 00 00 00 Data Ascii: P-:RQt(XML!&P$YT\|P$z$[1TER[SI>StfSOhuR:cLJemA`@$7bJE,^gdIRc'Y,:xQ:'G$8;$uVEO,xO8&9<bO$?-I~YXK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.16	50474	142.251.2.148	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:14 UTC	466	OUT	GET /sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/images/f1_img1_300x250.png?1708393659275 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:14 UTC	822	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 24134 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Fri, 08 Mar 2024 16:43:55 GMT Expires: Sat, 08 Mar 2025 16:43:55 GMT Cache-Control: public, max-age=31536000 Age: 241999 Last-Modified: Wed, 21 Feb 2024 21:32:45 GMT Content-Type: image/png Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:57:14 UTC	430	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 01 f4 08 06 00 00 00 e1 50 53 d4 00 00 20 00 49 44 41 54 78 9c ec dd 7b 7c 1c 77 7d ef ff f7 cc 5e b5 ba ae 6c cb f7 4b 24 27 76 9c ab 2d 07 48 08 b7 20 a7 10 c2 1d 19 7e f4 34 05 0e 95 a1 14 e8 69 1f 20 b7 a7 e7 77 ca 21 3d c8 b4 3d 07 4a db 53 99 16 5a a0 3d ad cd bd 29 05 64 20 81 40 9a c4 8a 13 e7 9e 58 8a ef 37 59 bb 92 56 ab bd ce cc f9 43 da cd 4a 5e 49 2b 69 65 ad 56 af e7 e3 b1 0f ad 66 67 67 be 3b df d9 99 cf 7e bf 9f f9 8e 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRXPS IDATx{\|w}^lK$'v-H ~4i w!==JSZ=)d @X7YVCJ^I+ieVfgg;~
2024-03-11 11:57:14 UTC	1252	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-03-11 11:57:14 UTC	1252	IN	Data Raw: 66 1e 5f f9 ca 57 9a 6b 6b 6b 3f 2b 49 eb d7 af d7 8a 15 2b ae 48 a1 01 00 8b 47 43 43 83 d6 ad 5b 27 49 aa ad ad bd f7 eb 5f ff fa 0e e5 f4 82 28 7f 5e 2f e3 27 5e 41 04 58 25 a4 b1 b1 d1 75 ed b5 d7 7e 51 92 3b 18 0c 6a d5 aa 55 0b 5d 24 00 40 89 5a bd 7a b5 ea ea ea 24 c9 bd 79 f3 e6 2f 6c de bc 99 cb c9 4b 08 01 56 71 e5 fb 05 30 f1 17 43 be e4 76 53 92 f9 a5 2f 7d 69 b7 cb e5 ba c1 e5 72 65 9b 7f 01 00 98 cc a6 4d 9b e4 72 b9 e4 72 b9 6e fe e2 17 bf f8 2e 4d de 72 35 dd 7d 6d 51 64 04 58 25 a4 be be fe 13 d2 e8 af 12 8f c7 b3 d0 c5 01 00 94 38 8f c7 93 ed ed a8 af af ff bd 05 2e 0e 72 10 60 cd 9f a9 5a ae 32 d3 b2 bf 34 be f6 b5 af 35 bb 5c ae 6b 4d d3 54 43 43 c3 95 2d 29 00 60 d1 6a 68 68 90 69 9a 72 b9 5c db be fe f5 af 6f d7 e5 ad 58 19 53 e5 60 Data Ascii: f_Wkkk?+I+HGCC['I_(^/'^AX%u~Q;jU]$@Zz$y/lKVq0CvS/}ireMrrn.Mr5}mQdX%8.r`Z245\kMTCC-)`jhhir\oXS`
2024-03-11 11:57:14 UTC	1252	IN	Data Raw: ad 4d cd cd cd 6a 6c 6c 9c b2 3c 13 e7 9b 6e 7f 2d e4 f3 65 f6 eb 5d bb 76 69 ff fe fd 6a 6f 6f 9f f6 7d e5 ec e0 c1 83 ea ed ed d5 e1 c3 87 c7 7d 5f ba bb bb 67 b4 9c d6 d6 d6 71 75 35 d5 be 94 6f 9d dd dd dd 97 d5 63 30 18 cc a6 09 ec df bf 7f d2 fd 29 63 e2 f7 3d 53 df dd dd dd 97 b5 54 71 2c c0 4c d0 45 88 19 eb ee ee be ec 24 d9 d2 d2 32 ed 41 67 ff fe fd 0a 87 c3 6a 6f 6f 57 4b 4b 4b de ee ba e9 b4 b6 b6 aa a5 a5 45 7b f6 ec d1 ae 5d bb c6 ad 73 2e cb 3f 78 f0 a0 f6 ec d9 a3 3d 7b f6 64 4f 12 53 ad 0b 33 93 d9 be bb 77 ef be ec b5 d6 d6 56 1d 3c 78 50 87 0e 1d 52 38 1c be 2c 28 ee e8 e8 d0 a1 43 87 54 5f 5f af ee ee ee 49 03 ac c9 e6 9b ed fe 9a cf 6c df 57 6e 32 db 20 37 38 69 6f 6f cf 06 b1 d3 e9 ec ec 54 77 77 77 b6 eb 2e 18 0c ce 6a 9d f9 ea 23 Data Ascii: Mjll<n-e]vijoo}}_gqu5oc0)c=STq,LE$2AgjooWKKKE{]s.?x={dOS3wV<xPR8,(CT__IlWn2 78iooTwww.j#
2024-03-11 11:57:14 UTC	1252	IN	Data Raw: 69 6c 6c bc 6c e4 e3 dc 47 67 67 e7 b8 f7 74 75 75 8d 1b f1 78 e2 f2 26 8e a8 9d fb 98 38 2a 73 46 be 91 b6 73 df 33 d7 cf 75 e0 c0 81 bc f3 1d 3e 7c 78 dc 67 99 f8 68 6b 6b bb 6c fe a9 3e 5f 63 63 e3 b8 91 ae cb c1 4c eb a6 ab ab 6b dc 36 9a 38 fa fe 44 d3 d5 c1 64 fb 4c ee fb 33 f3 e6 8e ea 3f 9d dc 51 c8 19 bd bd 30 5d 5d 5d 79 47 c3 9f ca c4 d1 de a7 7a 64 cc e6 38 32 71 e4 f8 89 8f c9 8e 01 8b 0d 23 b9 a3 5c 95 5d 80 75 e0 c0 81 71 07 a0 cc f3 dc 20 2a f7 24 aa 29 0e 8a 8e 33 fe 20 17 0c 06 9d f6 f6 76 a7 a3 a3 63 5c b0 33 f1 84 9b 7b d0 6e 6c 6c 74 3a 3a 3a 9c 8e 8e 8e 71 27 dd 89 41 de 74 5a 5b 5b b3 ef cd dc 4a 63 ba f9 32 27 d9 50 28 e4 b4 b5 b5 65 a7 e7 06 4c b9 07 fd dc b2 e6 7e be 52 bd c5 c6 6c cc b4 6e f2 ed 1f d3 05 58 f9 b6 69 7b 7b fb 94 Data Ascii: illlGggtuux&8sFs3u>\|xghkkl>_ccLk68DdL3?Q0]]]yGzd82q#\]uq $)3 vc\3{nllt:::q'AtZ[[Jc2'P(eL~RlnXi{{
2024-03-11 11:57:14 UTC	1252	IN	Data Raw: ee 95 6a 85 3c 30 fd d8 64 73 d9 6e b9 f5 93 ef c7 db 5c 8f 23 13 e5 7e 97 1b 1b 1b 0b 2e 67 a9 22 c0 2a 2d 74 11 62 c6 3a 3b 3b f3 5e d5 33 95 dc 64 e7 7c 89 c6 87 0e 1d ca 36 d1 37 37 37 8f 7b 6d ff fe fd da b9 73 67 b6 3b a2 a3 a3 43 07 0e 1c 28 f8 ca 9f e9 12 cc f3 25 a8 67 ba 3f f3 25 bf 06 83 c1 6c 19 27 7e fe c6 c6 46 75 76 76 aa a7 a7 47 3d 3d 3d d9 e5 95 6b e2 f4 5c eb 66 2a 99 6d 9c b9 4d d1 44 b9 d3 32 f3 16 5a d7 b9 dd 85 98 99 dc ef 6a b1 97 9b a9 d3 dc 2b 07 73 cd e6 38 92 b9 03 43 a6 1b 38 57 ee 77 99 5b e7 a0 d8 b8 d9 33 26 95 b9 3d 45 4b 4b 8b ba ba ba b2 d3 83 c1 a0 1a 1b 1b d5 db db 5b f0 81 b6 b5 b5 55 7b f7 ee cd e6 c8 b4 b4 b4 8c 3b 81 e6 e6 5d e4 06 35 99 1c 26 69 f4 80 d9 d9 d9 79 59 00 36 9d e6 e6 e6 6c 20 b4 77 ef de cb 02 9d dc Data Ascii: j<0dsn\#~.g"-tb:;;^3d\|6777{msg;C(%g?%l'~FuvvG===k\fmMD2Zj+s8C8Ww[3&=EKK[U{;]5&iyY6l w
2024-03-11 11:57:14 UTC	1252	IN	Data Raw: 01 00 70 05 d9 92 fe 75 78 58 7f da df af e3 a9 94 ea 4c 53 ef f3 7a b5 35 1e 97 37 9d 5e e8 e2 a1 48 08 b0 00 00 b8 02 1c 49 ff 3e 3c ac 3f 0d 85 f4 62 32 a9 6a d3 54 ab d7 ab eb 12 09 f9 08 ac ca 0e 01 16 00 00 f3 ec 27 d1 a8 3e 1f 0a e9 e9 44 42 15 86 a1 77 fb 7c ba 3e 1e 97 df b2 46 67 a0 7b af ec 10 60 01 00 30 4f 1e 89 c7 d5 71 e9 92 1e 89 c7 e5 33 0c bd cb e7 d3 0d 89 84 fc f1 f8 42 17 0d f3 8c 00 0b 00 80 22 7b 26 91 d0 be 50 48 3f 89 46 e5 32 0c dd e5 f3 69 67 22 a1 8a 79 0c ac 68 03 2b 2d 04 58 00 00 14 c9 c9 54 4a 9f 0f 85 f4 bd 48 44 92 f4 06 9f 4f b7 26 93 aa a1 c5 6a c9 21 c0 02 00 60 8e 06 6d 5b 5f 0c 85 f4 95 c1 41 a5 1d 47 b7 fa 7c 7a 6d 2a a5 20 81 d5 92 45 80 05 00 c0 2c 25 1d 47 5f 1d 1c d4 17 43 21 0d d9 b6 ae f5 78 f4 16 49 cb 17 20 Data Ascii: puxXLSz57^HI><?b2jT'>DBw\|>Fg{`0Oq3B"{&PH?F2ig"yh+-XTJHDO&j!`m[_AG\|zm* E,%G_C!xI
2024-03-11 11:57:14 UTC	1252	IN	Data Raw: ac be d6 56 d9 a1 d0 65 af 19 b5 b5 5a 71 e0 80 5c 2b 56 2c 40 c9 80 d1 1c ab f6 be 3e fd 62 64 44 41 d3 d4 7f f6 fb 75 4d 22 21 57 32 49 02 f6 98 93 27 e3 7a ac 7b 48 a7 4f 8d 76 97 6e d8 e8 d7 8e e6 1a ad 5b e7 9f f3 b2 d9 c2 a5 85 00 0b 58 44 9c 64 52 d6 f9 f3 72 f2 b5 04 44 22 4a 3e fc b0 2a ee be fb ca 17 0c 4b de 77 22 11 fd 41 5f 9f 86 6d 5b 6f f6 f9 74 7b 2a 25 3f 2d 56 92 24 db 76 f4 e2 8b 23 7a ac 3b a2 4b 97 92 32 4d 69 cb d6 4a ed d8 51 a3 e5 0c b5 50 b6 08 b0 80 45 c4 b5 72 a5 56 fd ea 57 72 22 91 71 d3 07 ff ec cf 14 bb ef 3e 25 9f 79 86 00 0b 57 54 da 71 f4 99 4b 97 f4 d5 c1 41 ad 70 b9 d4 e6 f1 68 ed 02 8f 74 5e 2a 12 09 5b 4f 3d 35 9a b8 3e 3c 6c c9 e3 31 74 f3 f6 d1 2b 02 ab ab 39 fd 96 3b 6a 18 58 64 cc 9a 1a a9 a6 66 dc 34 ef f6 ed 8a Data Ascii: VeZq\+V,@>bdDAuM"!W2I'z{HOvn[XDdRrD"J>Kw"A_m[ot{%?-V$v#z;K2MiJQPErVWr"q>%yWTqKApht^*[O=5><l1t+9;jXdf4
2024-03-11 11:57:14 UTC	1252	IN	Data Raw: 36 b8 dd da ea f3 69 87 df af db 2a 2a b4 bc 44 13 6b 31 35 f7 35 d7 48 92 ac 33 67 e4 0c 0f cb a8 aa 9a d1 fb ed c1 41 59 17 2f 4a 92 3c 63 cb c2 d4 5e 4a a5 f4 8d c1 41 1d 88 44 14 b6 2c ad 75 bb f5 5e af 57 d7 a4 d3 32 e7 21 37 c9 2b 69 5b 32 a9 6b 25 bd e4 f3 e9 bb 96 a5 7d fd fd fa ea e0 a0 3e 55 5f af f7 54 57 cb 53 c4 40 eb 68 22 a1 4f 5e b8 a0 17 93 49 ed f4 7a f5 1e cb 92 af c8 f7 f3 b3 6d 47 27 4e c4 f5 fc f3 51 f5 f4 8c e6 33 65 54 55 b9 54 53 e3 56 45 85 4b 2e 97 e4 76 9b 4a 26 6d 39 8e a3 78 7c 34 30 ea ef 4f 29 16 b3 8a 76 9b 41 8f c7 50 5d 9d 47 5b b7 56 6a e5 4a 9f 1a 1a bc 5a b9 d2 4b f7 1f 66 8c 00 ab cc 44 6c 5b f7 0d 0f eb 9b 91 88 1e 8d c5 b2 37 df ad 33 4d ad 75 b9 b4 c1 e3 51 40 52 52 52 cc 71 14 91 74 38 1e d7 83 b1 d1 cb 8a 0d 49 Data Ascii: 6i**Dk155H3gAY/J<c^JAD,u^W2!7+i[2k%}>U_TWS@h"O^IzmG'NQ3eTUTSVEK.vJ&m9x\|40O)vAP]G[VjJZKfDl[73MuQ@RRRqt8I
2024-03-11 11:57:14 UTC	1252	IN	Data Raw: 8b e9 81 91 91 29 df 7b 95 db ad 56 bf 5f 5b 2c 4b 2b 8a 1c 58 d9 b6 f4 1f 0f 0f e8 91 47 07 65 9a 86 5e f5 ca 5a dd b2 b3 56 6e 37 c7 90 62 f1 9e 1a d6 b6 df 3f a2 d8 df bf 7a a1 8b 82 31 04 58 8b d0 b1 64 52 9f be 78 51 8f c4 e3 6a 70 b9 f4 51 af 57 5b d2 e9 79 b9 82 24 e8 38 6a 49 26 75 9b 69 aa db e3 d1 bf 27 93 fa d8 f9 f3 fa bc c7 a3 4f 04 83 7a 57 91 93 6a cb cd b0 6d eb df a3 51 7d 27 12 d1 83 23 23 b2 25 55 9b a6 ee f2 fb 75 83 65 69 b5 65 c9 28 62 f7 4b e2 97 bf 94 24 55 be ef 7d aa 7c ff fb 67 fc 7e d7 9a 35 32 6b 6b 8b 56 9e c9 44 6d 5b 8f c6 e3 fa 65 2c a6 27 e2 71 3d 99 48 28 32 21 88 aa 35 4d ad 74 b9 74 ad c7 a3 5a c3 50 b5 46 5b 6a 2a 34 1a 2c 99 79 82 ae a4 46 bb bc 1d 49 71 49 89 b1 69 09 8d e6 1c 4a d2 88 e3 c8 6f 18 32 25 55 8e fd ad Data Ascii: ){V_[,K+XGe^ZVn7b?z1XdRxQjpQW[y$8jI&ui'OzWjmQ}'##%Uueie(bK$U}\|g~52kkVDm[e,'q=H(2!5MttZPF[j*4,yFIqIiJo2%U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.16	50468	69.194.240.13	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:14 UTC	741	OUT	GET /usersync2/smartadserver?zcc=1&cb=1710158233278 HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005%22%2C%22zdxidn%22%3A%222075%22%7D
2024-03-11 11:57:14 UTC	642	IN	HTTP/1.1 302 Found date: Mon, 11 Mar 2024 11:57:14 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005%22%2C%22zdxidn%22%3A%222075%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Tue, 11 Mar 2025 11:57:14 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://ad.turn.com/r/cs?pid=45&rndcb=7291804038 etag: RX5a36053c69dd47d484e1b94f859f1cd2005 connection: close
2024-03-11 11:57:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.16	50475	216.22.16.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:14 UTC	1045	OUT	GET /redir/?issi=1&partnerid=79&partneruserid=fb6bf7e8-4454-41c2-9d45-dd203ebb7093&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|79:fb6bf7e8-4454-41c2-9d45-dd203ebb7093\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
2024-03-11 11:57:14 UTC	563	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:14 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|79:fb6bf7e8-4454-41c2-9d45-dd203ebb7093\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK; expires=Tue, 11 Mar 2025 11:57:14 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:14 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.16	50478	52.52.154.39	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:14 UTC	837	OUT	GET /sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:14 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:14 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:14 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:57:14 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.16	50482	104.18.36.155	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:14 UTC	508	OUT	GET /rum?cm_dsp_id=64&external_user_id=e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: r.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; CMPS=4192; CMPRO=4192
2024-03-11 11:57:14 UTC	970	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:14 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 862b5da68dee09f1-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Ze7xfMAoIeEAAAzaAIdO4AAA; Path=/; Domain=casalemedia.com; Expires=Tue, 11 Mar 2025 11:57:14 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=4192; Path=/; Domain=casalemedia.com; Expires=Sun, 09 Jun 2024 11:57:14 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9o5ZQfCEQocc7C8o9T2pxZZVklNOmBMaRsxKmw0zYwJlSfeQts8qGhgzxBB64fX%2FNlFjPHN4ggt8sLRaHvyv3HlixLOy6h8QJMROC48bBmOF%2FDCRKyjnxKf%2FdlhGjPs16Kq%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-11 11:57:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.16	50472	162.19.138.119	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:14 UTC	693	OUT	GET /c/102/0/9/1.gif?gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=da35dfea-1127-79f5-8b21-8d4166047880#1710158233639#1
2024-03-11 11:57:15 UTC	1702	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: id5=da35dfea-1127-79f5-8b21-8d4166047880#1710158233639#2; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:14 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: 3pi=; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:14 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://rtb-csync.smartadserver.com/redir/?partnerid=111&partneruserid=ID5-a710HdK4FhLRsadVx_Vfn3AaQuf2TaKe92gbJM_sOA&redirurl=https%3A%2F%2Fid5-sync.com%2Fc%2F102%2F102%2F8%2F2.gif%3Fpuid%3DSMART_USER_ID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= transfer-encoding: chunked date: Mon, 11 Mar 2024 11:57:14 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-03-11 11:57:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.16	50479	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:14 UTC	1424	OUT	GET /redir/?issi=1&partnerid=150&partneruserid=0&redirurl=https%3A%2F%2Fwt.rqtrk.eu%3Fpid%3D58a76248-f101-4e52-b8f7-c4de9362ea12%26src%3Dwww%26type%3D100%26sid%3D0%26uid%3DSMART_USER_ID%26gdpr_pd%3D0&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
2024-03-11 11:57:14 UTC	708	IN	HTTP/1.1 302 Found content-length: 0 date: Mon, 11 Mar 2024 11:57:14 GMT cache-control: no-cache,no-store location: https://wt.rqtrk.eu?pid=58a76248-f101-4e52-b8f7-c4de9362ea12&src=www&type=100&sid=0&uid=1899505890594565248&gdpr_pd=0&gdpr=0&gdpr_consent= pragma: no-cache set-cookie: csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|150:0; expires=Tue, 11 Mar 2025 11:57:14 GMT; domain=smartadserver.com; path=/; SameSite=None; secure p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.16	50480	216.22.16.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:14 UTC	1045	OUT	GET /redir/?issi=1&partnerid=94&partneruserid=Ze7xgAAAAwa1TAAh&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
2024-03-11 11:57:14 UTC	583	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:14 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK; expires=Tue, 11 Mar 2025 11:57:14 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:14 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.16	50483	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:14 UTC	1218	OUT	GET /redir/?issi=1&partnerid=133&partneruserid=27fa38a615 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|92:3ftvG5anVWUA\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
2024-03-11 11:57:15 UTC	554	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:14 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|92:3ftvG5anVWUA\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|133:27fa38a615\|134:OB_OK; expires=Wed, 12 Mar 2025 11:57:14 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:15 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.16	50485	52.52.154.39	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:14 UTC	699	OUT	GET /universal/v1?supply_id=v5hJK9Sl&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:14 UTC	397	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:57:14 GMT Content-Length: 0 Connection: close Location: https://rtb-csync.smartadserver.com/redir/?partnerid=147&partneruserid=b6baf5b6-3516-4c46-a708-53e0ec193a37&gdpr=0 Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:14 GMT; Path=/; Domain=sharethrough.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.16	50484	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:14 UTC	1279	OUT	GET /redir/?issi=1&partnerid=130&partneruserid=bb7cbab5-f73e-439c-a427-5018e7e027e6&gdpr=0&gdpr_consent=[GDPR_CONSENT] HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|92:3ftvG5anVWUA\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
2024-03-11 11:57:15 UTC	580	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:14 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|92:3ftvG5anVWUA\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|130:bb7cbab5-f73e-439c-a427-5018e7e027e6\|134:OB_OK; expires=Wed, 12 Mar 2025 11:57:14 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:15 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.16	50476	35.171.70.242	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:14 UTC	718	OUT	GET /CookieSyncPubMatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb.adentifi.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:14 UTC	472	IN	HTTP/1.1 204 No Content Date: Mon, 11 Mar 2024 11:57:14 GMT Content-Type: text/plain Content-Length: 0 Connection: close Set-Cookie: adtheorent[cuid]=cuid_806eb5b4-df9e-11ee-afc1-120817463c8f; path=/; domain=.adentifi.com; expires=11 Mar 2026 11:57:14 Z; SameSite=None; Secure; version=1; path=/ Set-Cookie: adtheorent-legacy[cuid]=cuid_806eb5b4-df9e-11ee-afc1-120817463c8f; path=/; domain=.adentifi.com; expires=11 Mar 2026 11:57:14 Z; Secure; version=1; path=/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.16	50477	35.171.70.242	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:14 UTC	615	OUT	GET /CookieSyncPubMatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb.adentifi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:14 UTC	472	IN	HTTP/1.1 204 No Content Date: Mon, 11 Mar 2024 11:57:14 GMT Content-Type: text/plain Content-Length: 0 Connection: close Set-Cookie: adtheorent[cuid]=cuid_806f03d1-df9e-11ee-9a32-125335d52042; path=/; domain=.adentifi.com; expires=11 Mar 2026 11:57:14 Z; SameSite=None; Secure; version=1; path=/ Set-Cookie: adtheorent-legacy[cuid]=cuid_806f03d1-df9e-11ee-9a32-125335d52042; path=/; domain=.adentifi.com; expires=11 Mar 2026 11:57:14 Z; Secure; version=1; path=/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.16	50486	52.52.154.39	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:14 UTC	745	OUT	GET /sync/v1?source_id=98KUz37ype9D3X2sf9ovgeTt&source_user_id=1899505890594565248&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:15 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:14 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:14 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:57:15 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.16	50488	52.9.139.67	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:14 UTC	498	OUT	GET /sync/v1?source_id=uFFr5RFBYgoUJbWMAWGEZKS3&source_user_id=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:15 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:15 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:15 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:57:15 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.16	50491	142.251.2.148	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:14 UTC	466	OUT	GET /sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/images/f1_img2_300x250.png?1708393659275 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:15 UTC	821	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 4552 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Fri, 08 Mar 2024 13:32:49 GMT Expires: Sat, 08 Mar 2025 13:32:49 GMT Cache-Control: public, max-age=31536000 Age: 253466 Last-Modified: Wed, 21 Feb 2024 21:32:45 GMT Content-Type: image/png Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:57:15 UTC	431	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 01 f4 08 06 00 00 00 e1 50 53 d4 00 00 11 8f 49 44 41 54 78 9c ed dd 6b 70 9d 65 81 07 f0 ff c9 49 d2 a6 4d 5b 4b 1b 28 66 58 5a d8 83 97 29 83 60 77 14 9c 41 dd 0e 0a 05 ef 2c b6 65 c4 72 11 77 ac 17 18 dd 19 91 65 10 1d 2f e0 32 38 88 83 50 41 16 ad 55 61 9c a1 3a 20 8c a3 20 22 97 1d 44 04 f1 92 2d 58 21 48 49 5b da b4 4d 93 e6 24 d9 0f 59 42 4b b1 5c 7a 92 37 cd f9 fd 3e e5 7d cf 7b 9e e7 9f 6f ff 79 df f7 3c 4f 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRXPSIDATxkpeIM[K(fXZ)`wA,erwe/28PAUa: "D-X!HI[M$YBK\z7>}{oy<O
2024-03-11 11:57:15 UTC	1252	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-03-11 11:57:15 UTC	1252	IN	Data Raw: 43 d3 7a ea a9 69 79 f7 bb d3 30 63 c6 cb 1b 73 eb d6 6c bf f5 d6 6c bd fe fa f4 3f f2 c8 2e 9f b5 9c 78 62 66 7e e9 4b 29 4d 9d ba d7 d9 5f 01 05 0b 00 ea 49 11 05 6b e0 a9 a7 b2 e1 23 1f 49 ff 9f fe 34 72 ae dc de 9e 19 9f f9 4c 5a 16 2d 1a 7e 0c b8 97 7a 7f f9 cb 74 7f ed 6b e9 ef e8 18 39 d7 38 6f 5e 66 5d 79 65 1a 0f 3d 74 af c7 7f 99 ea b6 60 59 a6 01 00 c6 40 75 cd 9a 74 9d 7c f2 73 e5 aa 54 4a eb 19 67 e4 80 9f fd 2c 2d 27 9d 54 93 72 95 24 93 df fe f6 b4 ad 5e 9d e9 e7 9e 3b f2 b2 7b f5 b1 c7 d2 75 ca 29 d9 f1 e0 83 35 99 83 17 a7 60 01 c0 28 ab ae 5d 9b ae a5 4b 33 b0 6e 5d 92 a4 61 da b4 cc 5a b1 22 33 ce 3b 6f 54 5e 44 2f 35 36 66 da c7 3e 96 b6 55 ab d2 30 7b 76 92 64 b0 bb 3b eb 97 2d 4b ff c3 0f d7 7c 3e 76 a7 60 01 c0 28 1a dc b4 29 1b 4e Data Ascii: Cziy0csll?.xbf~K)M_Ik#I4rLZ-~ztk98o^f]ye=t`Y@ut\|sTJg,-'Tr$^;{u)5`(]K3n]aZ"3;oT^D/56f>U0{vd;-K\|>v`()N
2024-03-11 11:57:15 UTC	1252	IN	Data Raw: 3d 0e bb 53 b0 00 a0 06 76 7e 3c f8 7c 9b 2f be 38 3d 3f f9 c9 9e 07 28 97 33 f3 e2 8b d3 7a da 69 49 92 c1 f5 eb b3 7e c9 92 6c fe ea 57 47 a5 5c 0d 6d df 9e a7 17 2d ca d3 27 9e 98 2d 57 5f bd d7 e3 b1 2b 05 0b 00 f6 d2 50 4f 4f fa 7e fd eb 7f 7c 41 43 43 aa 1d 1d 2f 3e 50 a9 94 19 17 5c 90 69 1f ff 78 92 e1 3b 4c 5b af b9 66 f8 a3 1a 3f 16 ec fd e5 2f 47 de f5 ea 7f e4 91 9a 8c c9 73 ec 45 08 00 7b a9 ef ae bb 32 d4 d7 b7 db f9 72 5b 5b 66 5e 76 59 9a 0f 3f 3c a5 29 53 5e f2 78 d3 3f f5 a9 34 cc 98 91 cd 5f fa 52 92 d1 79 e7 6a fb 2d b7 8c fc 3d e9 cd 6f ae d9 b8 0c 53 b0 00 60 2f 35 1d 7e 78 a6 2d 5f 9e a6 c3 0e 4b d3 eb 5f 9f ae 93 4f ce e0 e6 cd 19 e8 ea 4a b9 ad ed 65 95 ab 67 b5 2e 5b 96 f2 ec d9 e9 b9 e9 a6 4c fb e8 47 d3 bc 60 41 cd f2 0e 6e d8 Data Ascii: =Sv~<\|/8=?(3ziI~lWG\m-'-W_+POO~\|ACC/>P\ix;L[f?/GsE{2r[[f^vY?<)S^x?4_Ryj-=oS`/5~x-_K_OJeg.[LG`An
2024-03-11 11:57:15 UTC	365	IN	Data Raw: 50 af 1e 2d 3a c0 04 b7 a1 b3 52 d9 51 74 88 a2 28 58 00 d4 ab ff 4d f2 4c d1 21 26 b0 9b 8a 0e 50 24 05 0b 80 ba d4 59 a9 54 93 7c a7 e8 1c 13 d8 b7 8a 0e 50 24 05 0b 80 7a f6 b5 24 5b 8a 0e 31 01 ad ee ac 54 fe a7 e8 10 45 52 b0 00 a8 5b 9d 95 ca 53 49 3e 53 74 8e 09 66 53 92 4f 16 1d a2 68 0a 16 00 75 ad b3 52 b9 3a c9 7f 17 9d 63 82 18 4c f2 a1 ce 4a 65 6d d1 41 8a a6 60 01 40 f2 91 24 37 14 1d 62 1f d7 9f e4 b4 ce 4a e5 a7 45 07 19 0f 14 2c 00 ea 5e 67 a5 d2 9f 64 49 92 8b 52 c7 8b 63 ee 85 27 93 1c d7 59 a9 ac 2c 3a c8 78 51 2a 3a 00 00 8c 27 ed 1d 1d 47 24 b9 38 c9 3b 8b ce b2 0f d8 96 e4 aa 24 17 75 56 2a dd 45 87 19 4f 14 2c 00 78 01 ed 1d 1d af 4f b2 38 c9 bf 26 39 3c c9 f4 62 13 8d 1b 4f 24 b9 3f c9 2d 49 7e d4 59 a9 58 4b 0c 00 00 00 00 00 00 Data Ascii: P-:RQt(XML!&P$YT\|P$z$[1TER[SI>StfSOhuR:cLJemA`@$7bJE,^gdIRc'Y,:xQ:'G$8;$uVEO,xO8&9<bO$?-I~YXK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.16	50490	142.251.2.148	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:14 UTC	809	OUT	GET /sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/images/f2_logo_300x250.png?1708393659275 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s0.2mdn.net/sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/index.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:15 UTC	821	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 1671 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Fri, 08 Mar 2024 13:47:43 GMT Expires: Sat, 08 Mar 2025 13:47:43 GMT Cache-Control: public, max-age=31536000 Age: 252572 Last-Modified: Wed, 21 Feb 2024 21:32:45 GMT Content-Type: image/png Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:57:15 UTC	431	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 01 f4 04 03 00 00 00 13 7e 4e e7 00 00 00 15 50 4c 54 45 47 70 4c 1b db db 1b db db 1b db db 1b db db 1b db db 1b db db a5 1d 8f c7 00 00 00 06 74 52 4e 53 00 25 56 8a b7 de af ac ae 61 00 00 06 1b 49 44 41 54 78 da ec 9b 4b 57 db 48 10 46 f5 b0 b3 76 20 f6 1a c8 e0 35 4f af 0d 01 ad 09 44 5a 8f b1 d4 ff ff 27 4c 55 3f 65 e1 ec e2 c9 91 b9 f7 24 52 bb d4 52 4e 7f ae aa ae 56 3b 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 4e 9f eb fa 71 66 9b 27 77 75 fd 63 96 c1 ef f8 c7 28 dd 59 bf 09 fb 99 18 cf 55 76 e9 5b 1d be b5 9f bc 31 41 a2 7b 13 78 cf 60 1f 73 15 a7 76 8a a5 26 81 b8 17 d1 66 2b 51 f7 dd c9 b5 3d 97 7c 2f cd 4d 06 1f 29 8d 69 6d 86 2a 54 ad d7 60 eb 32 f8 c8 42 12 7b cc 5d Data Ascii: PNGIHDRX~NPLTEGpLtRNS%VaIDATxKWHFv 5ODZ'LU?e$RRNV;Nqf'wuc(YUv[1A{x`sv&f+Q=\|/M)im*T`2B{]
2024-03-11 11:57:15 UTC	1240	IN	Data Raw: af 1d d6 71 e5 f8 20 e7 6f 72 de ec 8a f5 ae a7 4a 45 fc 3c 62 fd 6b f3 7c 88 c2 bc 32 67 4e ac 97 10 85 db d8 18 88 15 3c 6f f3 79 c4 da b8 53 1b 17 3a eb 9e 67 e5 31 b1 97 7e f8 a7 4f 4f d7 5e 2c 77 83 b7 7f 7f 7a cc 8a 8b 73 bd e7 4e 7a 38 6b 21 4d 15 cb 5d c8 4e 2e c6 bd 88 f2 62 35 ee 94 a2 cd 6b 54 a4 94 d4 bc cd 7c 07 f3 e0 c4 8a b3 a5 9f 07 5e 57 da 39 af b4 87 88 e5 d7 e6 37 f2 44 b9 7a 26 57 d4 38 66 96 2e f5 78 6d ca 58 50 89 61 50 d7 9f f4 26 c1 ab 24 56 6e 34 82 e7 d6 5c a9 58 4b 9b f4 ed 7d 95 6d 3a b1 d6 72 f3 d8 5f 2a 8a 58 be 06 8d 2f 4d bb 5e e9 30 1d 24 9c 65 28 50 d3 c0 2b bd b7 09 45 97 5e 08 7d 26 a1 b9 59 18 4d 8d 13 3d 8e 99 85 d9 3a 4d 42 4d 55 db 54 5f f8 0a fe cb ee f8 f2 30 fc 33 2b 56 5c 27 95 26 8a 35 4f 62 2d a3 58 53 db 7b Data Ascii: q orJE<bk\|2gN<oyS:g1~OO^,wzsNz8k!M]N.b5kT\|^W97Dz&W8f.xmXPaP&$Vn4\XK}m:r_*X/M^0$e(P+E^}&YM=:MBMUT_03+V\'&5Ob-XS{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.16	50492	35.212.133.238	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:15 UTC	719	OUT	GET /sync?dsp_id=70&user_id=1724005921034811649&ssp=liveintent HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=6ec76371-3031-4b49-abb3-349fb3d7cf23; c=1710158227; tuuid_lu=1710158229
2024-03-11 11:57:15 UTC	514	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:57:15 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //i.liadm.com/s/52164?bidder_id=5298&licd=&bidder_uuid=6ec76371-3031-4b49-abb3-349fb3d7cf23 Set-Cookie: licd=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.16	50481	34.255.246.57	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:15 UTC	723	OUT	GET /get?p=M501991648&r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D141%26partneruserid%3D$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: a.audrte.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:15 UTC	964	IN	HTTP/1.1 302 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Origin: * Date: Mon, 11 Mar 2024 11:57:15 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=ar101281&google_hm=OWZsU3kzbko1SXZRV2lhWVRjVTEydjdYZw%3D%3D&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fa.audrte.com%2Fddp%3Fred%3DeyJ1IjoiaHR0cHM6Ly9ydGItY3N5bmMuc21hcnRhZHNlcnZlci5jb20vcmVkaXIvP2lzc2lcdTAwM2QxXHUwMDI2cGFydG5lcmlkXHUwMDNkMTQxXHUwMDI2cGFydG5lcnVzZXJpZFx1MDAzZDlmbFN5M25KNUl2UVdpYVlUY1UxMnY3WGciLCJkIjpbeyJuYW1lIjoiYWRmb3JtIn0seyJuYW1lIjoic21hcnQifV19 Server: nginx/1.22.1 Set-Cookie: arcki2=9flSy3nJ5IvQWiaYTcU12v7Xg!20220908!1710158235401!ip#154.16.105.38; Max-Age=1296000; Expires=Tue, 26 Mar 2024 11:57:15 GMT; Domain=audrte.com; Path=/; Secure; HttpOnly; SameSite=none; Secure Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.16	50493	35.171.70.242	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:15 UTC	718	OUT	GET /CookieSyncPubMatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb.adentifi.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:15 UTC	472	IN	HTTP/1.1 204 No Content Date: Mon, 11 Mar 2024 11:57:15 GMT Content-Type: text/plain Content-Length: 0 Connection: close Set-Cookie: adtheorent[cuid]=cuid_80f2b2c0-df9e-11ee-b53f-121a6d1d7927; path=/; domain=.adentifi.com; expires=11 Mar 2026 11:57:15 Z; SameSite=None; Secure; version=1; path=/ Set-Cookie: adtheorent-legacy[cuid]=cuid_80f2b2c0-df9e-11ee-b53f-121a6d1d7927; path=/; domain=.adentifi.com; expires=11 Mar 2026 11:57:15 Z; Secure; version=1; path=/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.16	50495	34.96.71.22	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:15 UTC	814	OUT	GET /s/eqx?sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D152%26partneruserid%3DPARTNER_USER_ID&gdpr=0&gdpr_consent= HTTP/1.1 Host: s.company-target.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=8fb517aa-a8d0-437d-988f-7084f5819e19; tuuid_lu=1710158230\|ix:0
2024-03-11 11:57:15 UTC	705	IN	HTTP/1.1 302 Found Access-Control-Allow-Methods: GET,OPTIONS Access-Control-Allow-Origin: *.smartadserver.com Content-Type: text/html; charset=utf-8 Location: https://rtb-csync.smartadserver.com/redir/?gdpr=0&gdpr_consent=&issi=1&partnerid=152&partneruserid=8fb517aa-a8d0-437d-988f-7084f5819e19 Set-Cookie: tuuid=8fb517aa-a8d0-437d-988f-7084f5819e19; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Set-Cookie: tuuid_lu=1710158235\|eqx:0\|ix:0; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Date: Mon, 11 Mar 2024 11:57:15 GMT Content-Length: 174 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:57:15 UTC	174	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 74 62 2d 63 73 79 6e 63 2e 73 6d 61 72 74 61 64 73 65 72 76 65 72 2e 63 6f 6d 2f 72 65 64 69 72 2f 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 69 73 73 69 3d 31 26 61 6d 70 3b 70 61 72 74 6e 65 72 69 64 3d 31 35 32 26 61 6d 70 3b 70 61 72 74 6e 65 72 75 73 65 72 69 64 3d 38 66 62 35 31 37 61 61 2d 61 38 64 30 2d 34 33 37 64 2d 39 38 38 66 2d 37 30 38 34 66 35 38 31 39 65 31 39 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://rtb-csync.smartadserver.com/redir/?gdpr=0&gdpr_consent=&issi=1&partnerid=152&partneruserid=8fb517aa-a8d0-437d-988f-7084f5819e19">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.16	50494	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:15 UTC	1288	OUT	GET /redir/?partnerid=147&partneruserid=b6baf5b6-3516-4c46-a708-53e0ec193a37&gdpr=0 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK
2024-03-11 11:57:15 UTC	624	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:15 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37; expires=Wed, 12 Mar 2025 11:57:15 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:15 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.16	50500	52.9.139.67	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:15 UTC	502	OUT	GET /sync/v1?source_id=98KUz37ype9D3X2sf9ovgeTt&source_user_id=1899505890594565248&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:15 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:15 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:15 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:57:15 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
519	192.168.2.16	50496	216.22.16.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:15 UTC	990	OUT	GET /redir/?issi=1&partnerid=133&partneruserid=27fa38a615 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|92:3ftvG5anVWUA\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|133:27fa38a615\|134:OB_OK
2024-03-11 11:57:15 UTC	554	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:14 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|92:3ftvG5anVWUA\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|133:27fa38a615\|134:OB_OK; expires=Wed, 12 Mar 2025 11:57:15 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:15 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.16	50497	216.22.16.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:15 UTC	1077	OUT	GET /redir/?issi=1&partnerid=130&partneruserid=bb7cbab5-f73e-439c-a427-5018e7e027e6&gdpr=0&gdpr_consent=[GDPR_CONSENT] HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|92:3ftvG5anVWUA\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|130:bb7cbab5-f73e-439c-a427-5018e7e027e6\|134:OB_OK
2024-03-11 11:57:15 UTC	580	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:15 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|92:3ftvG5anVWUA\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|130:bb7cbab5-f73e-439c-a427-5018e7e027e6\|134:OB_OK; expires=Wed, 12 Mar 2025 11:57:15 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:15 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.16	50499	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:15 UTC	1425	OUT	GET /redir/?partnerid=111&partneruserid=ID5-a710HdK4FhLRsadVx_Vfn3AaQuf2TaKe92gbJM_sOA&redirurl=https%3A%2F%2Fid5-sync.com%2Fc%2F102%2F102%2F8%2F2.gif%3Fpuid%3DSMART_USER_ID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|92:3ftvG5anVWUA\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|130:bb7cbab5-f73e-439c-a427-5018e7e027e6\|134:OB_OK
2024-03-11 11:57:15 UTC	717	IN	HTTP/1.1 302 Found content-length: 0 date: Mon, 11 Mar 2024 11:57:15 GMT cache-control: no-cache,no-store location: https://id5-sync.com/c/102/102/8/2.gif?puid=1899505890594565248&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent= pragma: no-cache set-cookie: csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|92:3ftvG5anVWUA\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|111:ID5-a710HdK4FhLRsadVx_Vfn3AaQuf2TaKe92gbJM_sOA\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|130:bb7cbab5-f73e-439c-a427-5018e7e027e6\|134:OB_OK; expires=Tue, 11 Mar 2025 11:57:15 GMT; domain=smartadserver.com; path=/; SameSite=None; secure p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.16	50498	51.222.241.106	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:15 UTC	697	OUT	GET /?pid=58a76248-f101-4e52-b8f7-c4de9362ea12&src=www&type=100&sid=0&uid=1899505890594565248&gdpr_pd=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: wt.rqtrk.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:15 UTC	471	IN	HTTP/1.1 200 OK server: istio-envoy date: Mon, 11 Mar 2024 11:57:15 GMT content-type: image/gif content-length: 43 p3p: CP="NOI DSP COR DEVa PSAa PSDa OUR BUS UNI COM NAV STA" cache-control: no-cache,private pragma: no-cache expires: Mon, 11 Mar 2024 11:57:14 GMT set-cookie: browser_id=1:493755f2-09c2-4b96-b3fb-614b089ac45a; Expires=Mon, 18 Mar 2024 11:57:15 GMT; Domain=.rqtrk.eu; Secure; SameSite=None x-envoy-upstream-service-time: 2 connection: close
2024-03-11 11:57:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.16	50501	35.80.168.78	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:15 UTC	518	OUT	GET /sync/stickyads/1741b0c9991c7bb5fabee245b6778a40?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo
2024-03-11 11:57:15 UTC	882	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:57:15 GMT Content-Length: 0 Connection: close Location: https://ads.stickyadstv.com/user-registering?dataProviderId=199&userId=y-AGWMJS9E2oOtVnT17X7.IoPdSI1.3hJhlfecJ8aJ~A Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo; Expires=Tue, 11 Mar 2025 17:57:15 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.16	50503	142.251.2.148	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:15 UTC	466	OUT	GET /sadbundle/16086664575141254234/2024_imc-manage-one-place_html5_diy_ols_value_en_us_300x250/images/f2_logo_300x250.png?1708393659275 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:16 UTC	821	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 1671 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Fri, 08 Mar 2024 13:47:43 GMT Expires: Sat, 08 Mar 2025 13:47:43 GMT Cache-Control: public, max-age=31536000 Age: 252572 Last-Modified: Wed, 21 Feb 2024 21:32:45 GMT Content-Type: image/png Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:57:16 UTC	431	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 01 f4 04 03 00 00 00 13 7e 4e e7 00 00 00 15 50 4c 54 45 47 70 4c 1b db db 1b db db 1b db db 1b db db 1b db db 1b db db a5 1d 8f c7 00 00 00 06 74 52 4e 53 00 25 56 8a b7 de af ac ae 61 00 00 06 1b 49 44 41 54 78 da ec 9b 4b 57 db 48 10 46 f5 b0 b3 76 20 f6 1a c8 e0 35 4f af 0d 01 ad 09 44 5a 8f b1 d4 ff ff 27 4c 55 3f 65 e1 ec e2 c9 91 b9 f7 24 52 bb d4 52 4e 7f ae aa ae 56 3b 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 4e 9f eb fa 71 66 9b 27 77 75 fd 63 96 c1 ef f8 c7 28 dd 59 bf 09 fb 99 18 cf 55 76 e9 5b 1d be b5 9f bc 31 41 a2 7b 13 78 cf 60 1f 73 15 a7 76 8a a5 26 81 b8 17 d1 66 2b 51 f7 dd c9 b5 3d 97 7c 2f cd 4d 06 1f 29 8d 69 6d 86 2a 54 ad d7 60 eb 32 f8 c8 42 12 7b cc 5d Data Ascii: PNGIHDRX~NPLTEGpLtRNS%VaIDATxKWHFv 5ODZ'LU?e$RRNV;Nqf'wuc(YUv[1A{x`sv&f+Q=\|/M)im*T`2B{]
2024-03-11 11:57:16 UTC	1240	IN	Data Raw: af 1d d6 71 e5 f8 20 e7 6f 72 de ec 8a f5 ae a7 4a 45 fc 3c 62 fd 6b f3 7c 88 c2 bc 32 67 4e ac 97 10 85 db d8 18 88 15 3c 6f f3 79 c4 da b8 53 1b 17 3a eb 9e 67 e5 31 b1 97 7e f8 a7 4f 4f d7 5e 2c 77 83 b7 7f 7f 7a cc 8a 8b 73 bd e7 4e 7a 38 6b 21 4d 15 cb 5d c8 4e 2e c6 bd 88 f2 62 35 ee 94 a2 cd 6b 54 a4 94 d4 bc cd 7c 07 f3 e0 c4 8a b3 a5 9f 07 5e 57 da 39 af b4 87 88 e5 d7 e6 37 f2 44 b9 7a 26 57 d4 38 66 96 2e f5 78 6d ca 58 50 89 61 50 d7 9f f4 26 c1 ab 24 56 6e 34 82 e7 d6 5c a9 58 4b 9b f4 ed 7d 95 6d 3a b1 d6 72 f3 d8 5f 2a 8a 58 be 06 8d 2f 4d bb 5e e9 30 1d 24 9c 65 28 50 d3 c0 2b bd b7 09 45 97 5e 08 7d 26 a1 b9 59 18 4d 8d 13 3d 8e 99 85 d9 3a 4d 42 4d 55 db 54 5f f8 0a fe cb ee f8 f2 30 fc 33 2b 56 5c 27 95 26 8a 35 4f 62 2d a3 58 53 db 7b Data Ascii: q orJE<bk\|2gN<oyS:g1~OO^,wzsNz8k!M]N.b5kT\|^W97Dz&W8f.xmXPaP&$Vn4\XK}m:r_*X/M^0$e(P+E^}&YM=:MBMUT_03+V\'&5Ob-XS{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.16	50504	3.218.15.224	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:15 UTC	721	OUT	GET /s/52164?bidder_id=5298&licd=&bidder_uuid=6ec76371-3031-4b49-abb3-349fb3d7cf23 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _li_ss=CgcKBQgMEL8X; lidid=0d1e68fa-d7fe-46a8-ba8f-e840f06a5d57
2024-03-11 11:57:16 UTC	590	IN	HTTP/1.1 303 See Other Date: Mon, 11 Mar 2024 11:57:16 GMT Content-Length: 0 Connection: close Location: https://i6.liadm.com/s/52164?bidder_id=5298&licd=&bidder_uuid=6ec76371-3031-4b49-abb3-349fb3d7cf23 Set-Cookie: _li_ss=ChIKBQgMEL8XCgkI_____wcQvxc; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:16 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=0d1e68fa-d7fe-46a8-ba8f-e840f06a5d57; Max-Age=63072000; Expires=Wed, 11 Mar 2026 11:57:16 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 1 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.16	50502	69.194.240.13	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:15 UTC	793	OUT	GET /usersync/turn/2407834391265652961?dspret=1&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005%22%2C%22zdxidn%22%3A%222075%22%2C%22nxtrdr%22%3Afalse%7D
2024-03-11 11:57:16 UTC	748	IN	HTTP/1.1 302 Found date: Mon, 11 Mar 2024 11:57:16 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Tue, 11 Mar 2025 11:57:16 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.targeting.unrulymedia.com/csync/RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005?redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fpartnerid%3D113%26partneruserid%3DRX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005 connection: close
2024-03-11 11:57:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.16	50506	35.171.70.242	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:16 UTC	718	OUT	GET /CookieSyncPubMatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb.adentifi.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:16 UTC	472	IN	HTTP/1.1 204 No Content Date: Mon, 11 Mar 2024 11:57:16 GMT Content-Type: text/plain Content-Length: 0 Connection: close Set-Cookie: adtheorent[cuid]=cuid_8176afd6-df9e-11ee-8f04-1202f1c33782; path=/; domain=.adentifi.com; expires=11 Mar 2026 11:57:16 Z; SameSite=None; Secure; version=1; path=/ Set-Cookie: adtheorent-legacy[cuid]=cuid_8176afd6-df9e-11ee-8f04-1202f1c33782; path=/; domain=.adentifi.com; expires=11 Mar 2026 11:57:16 Z; Secure; version=1; path=/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.16	50507	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:16 UTC	1306	OUT	GET /redir/?gdpr=0&gdpr_consent=&issi=1&partnerid=152&partneruserid=8fb517aa-a8d0-437d-988f-7084f5819e19 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|92:3ftvG5anVWUA\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|130:bb7cbab5-f73e-439c-a427-5018e7e027e6\|134:OB_OK
2024-03-11 11:57:16 UTC	621	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:16 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|92:3ftvG5anVWUA\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|130:bb7cbab5-f73e-439c-a427-5018e7e027e6\|134:OB_OK\|152:8fb517aa-a8d0-437d-988f-7084f5819e19; expires=Tue, 11 Mar 2025 11:57:16 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:16 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.16	50508	216.22.16.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:16 UTC	1086	OUT	GET /redir/?partnerid=147&partneruserid=b6baf5b6-3516-4c46-a708-53e0ec193a37&gdpr=0 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:16 UTC	624	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:16 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37; expires=Tue, 11 Mar 2025 11:57:16 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:16 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.16	50510	162.19.138.119	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:16 UTC	735	OUT	GET /c/102/102/8/2.gif?puid=1899505890594565248&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent= HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=da35dfea-1127-79f5-8b21-8d4166047880#1710158233639#2; 3pi=
2024-03-11 11:57:17 UTC	1407	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: 3pi=102#1710158237036#1964507446; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:17 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=gif; Max-Age=300; Expires=Mon, 11-Mar-2024 12:02:17 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=102; Max-Age=300; Expires=Mon, 11-Mar-2024 12:02:17 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=7; Max-Age=300; Expires=Mon, 11-Mar-2024 12:02:17 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=3; Max-Age=300; Expires=Mon, 11-Mar-2024 12:02:17 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=0\|; Max-Age=300; Expires=Mon, 11-Mar-2024 12:02:17 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=8h9u11h&ttd_tpi=1&gdpr=0&gdpr_consent= transfer-encoding: chunked date: Mon, 11 Mar 2024 11:57:16 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-03-11 11:57:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.16	50511	51.222.241.145	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:16 UTC	513	OUT	GET /?pid=58a76248-f101-4e52-b8f7-c4de9362ea12&src=www&type=100&sid=0&uid=1899505890594565248&gdpr_pd=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: wt.rqtrk.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: browser_id=1:493755f2-09c2-4b96-b3fb-614b089ac45a
2024-03-11 11:57:17 UTC	469	IN	HTTP/1.1 200 OK server: istio-envoy date: Mon, 11 Mar 2024 11:57:16 GMT content-type: image/gif content-length: 43 p3p: CP="NOI DSP COR DEVa PSAa PSDa OUR BUS UNI COM NAV STA" cache-control: no-cache,private pragma: no-cache expires: Mon, 11 Mar 2024 11:57:15 GMT set-cookie: browser_id=493755f2-09c2-4b96-b3fb-614b089ac45a; Expires=Tue, 11 Mar 2025 11:57:16 GMT; Domain=.rqtrk.eu; Secure; SameSite=None x-envoy-upstream-service-time: 1 connection: close
2024-03-11 11:57:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.16	50512	34.255.246.57	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:16 UTC	926	OUT	GET /ddp?red=eyJ1IjoiaHR0cHM6Ly9ydGItY3N5bmMuc21hcnRhZHNlcnZlci5jb20vcmVkaXIvP2lzc2lcdTAwM2QxXHUwMDI2cGFydG5lcmlkXHUwMDNkMTQxXHUwMDI2cGFydG5lcnVzZXJpZFx1MDAzZDlmbFN5M25KNUl2UVdpYVlUY1UxMnY3WGciLCJkIjpbeyJuYW1lIjoiYWRmb3JtIn0seyJuYW1lIjoic21hcnQifV19&gdpr=0&gdpr_consent= HTTP/1.1 Host: a.audrte.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: arcki2=9flSy3nJ5IvQWiaYTcU12v7Xg!20220908!1710158235401!ip#154.16.105.38
2024-03-11 11:57:17 UTC	826	IN	HTTP/1.1 302 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Origin: * Date: Mon, 11 Mar 2024 11:57:17 GMT Location: https://dmp.adform.net/serving/cookie/match/?party=1003&r=eyJ1IjoiaHR0cHM6Ly9ydGItY3N5bmMuc21hcnRhZHNlcnZlci5jb20vcmVkaXIvP2lzc2lcdTAwM2QxXHUwMDI2cGFydG5lcmlkXHUwMDNkMTQxXHUwMDI2cGFydG5lcnVzZXJpZFx1MDAzZDlmbFN5M25KNUl2UVdpYVlUY1UxMnY3WGciLCJkIjpbeyJuYW1lIjoic21hcnQifV19&gdpr=0&gdpr_consent= Server: nginx/1.22.1 Set-Cookie: arcki2_ddp2=9flSy3nJ5IvQWiaYTcU12v7Xg!20220908!1710158237382; Max-Age=1296000; Expires=Tue, 26 Mar 2024 11:57:17 GMT; Domain=audrte.com; Path=/; Secure; HttpOnly; SameSite=none; Secure Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.16	50513	69.194.240.13	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:16 UTC	785	OUT	GET /csync/RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005?redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fpartnerid%3D113%26partneruserid%3DRX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:17 UTC	594	IN	HTTP/1.1 302 Found date: Mon, 11 Mar 2024 11:57:17 GMT content-type: text/html transfer-encoding: chunked set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005%22%7D; path=/; expires=Tue, 11 Mar 2025 11:57:17 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://rtb-csync.smartadserver.com/redir/?partnerid=113&partneruserid=RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005 etag: RX5a36053c69dd47d484e1b94f859f1cd2005 connection: close
2024-03-11 11:57:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
534	192.168.2.16	50515	216.22.16.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:17 UTC	1104	OUT	GET /redir/?gdpr=0&gdpr_consent=&issi=1&partnerid=152&partneruserid=8fb517aa-a8d0-437d-988f-7084f5819e19 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|92:3ftvG5anVWUA\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|130:bb7cbab5-f73e-439c-a427-5018e7e027e6\|134:OB_OK\|152:8fb517aa-a8d0-437d-988f-7084f5819e19
2024-03-11 11:57:17 UTC	621	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:17 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|92:3ftvG5anVWUA\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|130:bb7cbab5-f73e-439c-a427-5018e7e027e6\|134:OB_OK\|152:8fb517aa-a8d0-437d-988f-7084f5819e19; expires=Wed, 12 Mar 2025 11:57:17 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:17 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
535	192.168.2.16	50514	3.211.2.230	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:17 UTC	701	OUT	GET /s/52164?bidder_id=5298&licd=&bidder_uuid=6ec76371-3031-4b49-abb3-349fb3d7cf23 HTTP/1.1 Host: i6.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=0d1e68fa-d7fe-46a8-ba8f-e840f06a5d57
2024-03-11 11:57:17 UTC	226	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:17 GMT Content-Type: image/gif Content-Length: 43 Connection: close Request-Time: 0 Cache-Control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-03-11 11:57:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
536	192.168.2.16	50516	15.197.193.217	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:17 UTC	632	OUT	GET /track/cmf/generic?ttd_pid=stickyads&ttd_tpi=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFEhQKBXRhcGFkEgsIqK7DwIvz4DwQBRIbCgxzaGFyZXRocm91Z2gSCwjWjMfSi_PgPBAFEhYKB2QwdHJvMWoSCwj-h-Hhi_PgPBAFGAEgASgCMgsIqpmb16Pz4DwQBTgBWg5zbWFydC1hZHNlcnZlcmAC
2024-03-11 11:57:17 UTC	695	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:57:17 GMT Content-Length: 287 Connection: close server: Kestrel location: https://ads.stickyadstv.com/user-registering?dataProviderId=208&userId=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent= set-cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; expires=Tue, 11 Mar 2025 11:57:17 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFEhQKBXRhcGFkEgsIqK7DwIvz4DwQBRIbCgxzaGFyZXRocm91Z2gSCwjWjMfSi_PgPBAFEhYKB2QwdHJvMWoSCwj-h-Hhi_PgPBAFGAEgASgCMgsIhtDjlKTz4DwQBTgBWglzdGlja3lhZHNgAg..; expires=Tue, 11 Mar 2025 11:57:17 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-11 11:57:17 UTC	287	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 73 74 69 63 6b 79 61 64 73 74 76 2e 63 6f 6d 2f 75 73 65 72 2d 72 65 67 69 73 74 65 72 69 6e 67 3f 64 61 74 61 50 72 6f 76 69 64 65 72 49 64 3d 32 30 38 26 75 73 65 72 49 64 3d 37 31 64 63 64 36 35 37 2d 62 37 63 65 2d 34 65 35 36 2d 39 30 36 34 2d 30 66 38 33 39 37 39 66 38 66 63 62 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 61 64 73 2e 73 74 69 63 6b 79 61 64 73 74 76 2e 63 6f 6d 2f 75 73 65 72 2d 72 65 67 69 73 74 65 72 69 6e 67 3f 64 61 74 61 50 72 6f 76 69 64 65 72 49 64 3d 32 30 38 26 75 73 65 72 49 64 3d 37 31 64 63 64 36 35 37 2d 62 37 63 65 2d 34 65 35 36 2d 39 30 36 34 2d 30 66 38 33 39 Data Ascii: Redirecting to: <a href="https://ads.stickyadstv.com/user-registering?dataProviderId=208&userId=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent=">https://ads.stickyadstv.com/user-registering?dataProviderId=208&userId=71dcd657-b7ce-4e56-9064-0f839

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
537	192.168.2.16	50518	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:17 UTC	1329	OUT	GET /redir/?partnerid=113&partneruserid=RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:18 UTC	672	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:17 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37; expires=Wed, 12 Mar 2025 11:57:17 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:18 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
538	192.168.2.16	50517	35.71.131.137	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:17 UTC	894	OUT	GET /track/cmf/generic?ttd_pid=8h9u11h&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFEhQKBXRhcGFkEgsIqK7DwIvz4DwQBRIbCgxzaGFyZXRocm91Z2gSCwjWjMfSi_PgPBAFEhYKB2QwdHJvMWoSCwj-h-Hhi_PgPBAFGAEgASgCMgsIqpmb16Pz4DwQBTgBWg5zbWFydC1hZHNlcnZlcmAC
2024-03-11 11:57:17 UTC	647	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:57:17 GMT Content-Length: 199 Connection: close server: Kestrel location: https://id5-sync.com/k/264.gif?puid=71dcd657-b7ce-4e56-9064-0f83979f8fcb&ttl=%%TTL%% set-cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; expires=Tue, 11 Mar 2025 11:57:17 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFEhQKBXRhcGFkEgsIqK7DwIvz4DwQBRIbCgxzaGFyZXRocm91Z2gSCwjWjMfSi_PgPBAFEhYKB2QwdHJvMWoSCwj-h-Hhi_PgPBAFGAEgASgCMgsIsqWkmaTz4DwQBTgBWgc4aDl1MTFoYAI.; expires=Tue, 11 Mar 2025 11:57:17 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-11 11:57:17 UTC	199	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 6b 2f 32 36 34 2e 67 69 66 3f 70 75 69 64 3d 37 31 64 63 64 36 35 37 2d 62 37 63 65 2d 34 65 35 36 2d 39 30 36 34 2d 30 66 38 33 39 37 39 66 38 66 63 62 26 74 74 6c 3d 25 25 54 54 4c 25 25 22 3e 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 6b 2f 32 36 34 2e 67 69 66 3f 70 75 69 64 3d 37 31 64 63 64 36 35 37 2d 62 37 63 65 2d 34 65 35 36 2d 39 30 36 34 2d 30 66 38 33 39 37 39 66 38 66 63 62 26 74 74 6c 3d 25 25 54 54 4c 25 25 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://id5-sync.com/k/264.gif?puid=71dcd657-b7ce-4e56-9064-0f83979f8fcb&ttl=%%TTL%%">https://id5-sync.com/k/264.gif?puid=71dcd657-b7ce-4e56-9064-0f83979f8fcb&ttl=%%TTL%%</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
539	192.168.2.16	50520	3.211.2.230	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:17 UTC	465	OUT	GET /s/52164?bidder_id=5298&licd=&bidder_uuid=6ec76371-3031-4b49-abb3-349fb3d7cf23 HTTP/1.1 Host: i6.liadm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=0d1e68fa-d7fe-46a8-ba8f-e840f06a5d57
2024-03-11 11:57:18 UTC	226	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:18 GMT Content-Type: image/gif Content-Length: 43 Connection: close Request-Time: 0 Cache-Control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-03-11 11:57:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
540	192.168.2.16	50523	216.22.16.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:18 UTC	1134	OUT	GET /redir/?partnerid=113&partneruserid=RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:18 UTC	672	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:17 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37; expires=Wed, 12 Mar 2025 11:57:18 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:18 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
541	192.168.2.16	50522	162.19.138.119	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:18 UTC	783	OUT	GET /k/264.gif?puid=71dcd657-b7ce-4e56-9064-0f83979f8fcb&ttl=%%TTL%% HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=da35dfea-1127-79f5-8b21-8d4166047880#1710158233639#2; 3pi=102#1710158237036#1964507446; cf=gif; cip=102; cnac=7; car=3; gdpr=0\|
2024-03-11 11:57:19 UTC	1459	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: 3pi=102#1710158237036#1964507446\|264#1710158239046#-333836484#71dcd657-b7ce-4e56-9064-0f83979f8fcb; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:19 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://ib.adnxs.com/getuid?https://id5-sync.com/c/102/2/6/4.gif?puid=$UID&gdpr=0&gdpr_consent= transfer-encoding: chunked date: Mon, 11 Mar 2024 11:57:18 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-03-11 11:57:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
542	192.168.2.16	50525	104.18.37.111	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:18 UTC	1733	OUT	GET /projects/docfetcher/ HTTP/1.1 Host: sourceforge.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://sourceforge.net/projects/docfetcher/postdownload Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; OAID=e012d283a5e1eae18062d3edb9725359; _gid=GA1.2.1668299401.1710158203; __gads=ID=ed8d538436f1b623:T=1710158205:RT=1710158205:S=ALNI_MbiYxvEWP7dZiJkctj8HGzhHyMpCg; __gpi=UID=00000dc711cb5676:T=1710158205:RT=1710158205:S=ALNI_MbtGcDgo6RHjTtG2es2mbdsN1jDSw; __eoi=ID=ccb10672a4298c0a:T=1710158205:RT=1710158205:S=AA-AfjZQQCnCz9TlsGBpH19Z0_Y8; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFJTcypyVzE2WjwyVzRDRl4zTCY4YHhDNjRCQG1NaG1hYnowLTt1eEhQNlJfPkZtKl5jM2YqVzh7MWd2S01gKEl4KCVNMmhGTSFeWEhAQzdNfXZUMmRDYEUxY1BiS2JIdSNqd0Y7amEzRTM9dHo2bWkmPmJjekI0fCtDaGtRQT5vaTdaWndMZE5OMEl4XngtaUlGZmBjZlBNTkkpYWEqK1NST04qLT9jPDZPSDw5U2xWOSFFViVQb1FIYThRUyFlK15nZiRKV3R9Z3Beb25LdVhvQnlSYFU4RTVqIUk4JWBvR19RQDkmVGRMWTxXRzd4PDU-ZzYjQHVSdGN5a3FwS1RCQUQzeGBGP2MwZSVmQVNMTCFwKXE7fng2YiVsdzs3cSFKJSY7In0.XysH-z9DDtydQIaiX4Q_fLbH0fYGiJWBs2t2JkUMNH8; _ga_1H226E4E4L=GS1.1.1710158208.1.1.1710158224.0.0.0; _ga=GA1.1.1854926735.1710158203
2024-03-11 11:57:19 UTC	1187	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:19 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache pragma: no-cache link: <https://a.fsdn.com/con/js/sftheme/vendor/bizx-prebid.js?1709827391>; rel=preload; as=script, <https://a.fsdn.com/con/js/min/sf.sandiego-cmp-top.js?1709827391>; rel=preload; as=script, <https://a.fsdn.com/con/css/fonts/sftheme/lato-v20-latin-ext_latin-regular.woff2>; rel=preload; as=font; crossorigin, <https://a.fsdn.com/con/css/fonts/sftheme/lato-v20-latin-ext_latin-700.woff2>; rel=preload; as=font; crossorigin, <https://a.fsdn.com/con/css/lato.css?1709827391>; rel=preload; as=style, <https://a.fsdn.com/con/css/sandiego.css?1709827391>; rel=preload; as=style, <https://a.fsdn.com/con/js/min/sf.sandiego-head.js?1709827391>; rel=preload; as=script x-ua-compatible: IE=edge,chrome=1 permissions-policy: geolocation=(), microphone=(), camera=(), payment=(), document-domain=(), display-capture=(), autoplay=() feature-policy: geolocation 'none'; microphone 'none'; camera 'none'; payment 'none'; document-domain 'none'; display-capture 'none'; autoplay 'none' x-frame-options: SAMEORIGIN
2024-03-11 11:57:19 UTC	6135	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 73 63 72 69 70 74 2d 73 72 63 20 27 73 65 6c 66 27 20 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 69 6d 20 2a 2e 6c 69 6a 69 74 2e 63 6f 6d 20 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 6d 65 20 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 73 6b 20 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 2e 7a 61 20 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2e 75 61 20 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2e 76 63 20 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2e 62 7a 20 2a 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 20 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2e 73 61 20 Data Ascii: content-security-policy: script-src 'self' adservice.google.im .lijit.com adservice.google.me adservice.google.sk adservice.google.co.za adservice.google.com.ua adservice.google.com.vc adservice.google.com.bz .consentmanager.net adservice.google.com.sa
2024-03-11 11:57:19 UTC	1369	IN	Data Raw: 33 30 34 66 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 61 2e 66 73 64 6e 2e 63 6f 6d 2f 63 6f 6e 2f 6a 73 2f Data Ascii: 304f<!doctype html><html class="no-js" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=no" /><script src="//a.fsdn.com/con/js/
2024-03-11 11:57:19 UTC	1369	IN	Data Raw: 20 37 34 33 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 69 6c 6c 62 6f 61 72 64 3a 20 39 38 35 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 61 72 67 65 3a 20 31 30 35 33 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 78 6c 61 72 67 65 3a 20 31 32 39 35 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 78 78 6c 61 72 67 65 3a 20 31 33 36 36 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 53 46 2e 69 6e 69 74 69 61 6c 5f 62 72 65 61 6b 70 6f 69 6e 74 73 5f 76 69 73 69 62 6c 65 20 3d 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 62 70 20 69 6e 20 53 46 2e 42 72 65 61 6b 70 6f 69 6e 74 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 53 46 2e 42 72 65 Data Ascii: 743, billboard: 985, large: 1053, xlarge: 1295, xxlarge: 1366 }; SF.initial_breakpoints_visible = {}; for (var bp in SF.Breakpoints) { if (!SF.Bre
2024-03-11 11:57:19 UTC	1369	IN	Data Raw: 5b 7b 22 62 69 64 64 65 72 22 3a 22 73 6f 76 72 6e 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 74 61 67 69 64 22 3a 22 33 36 34 36 35 32 22 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 22 62 69 64 64 65 72 22 3a 22 72 75 62 69 63 6f 6e 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 7a 6f 6e 65 49 64 22 3a 22 34 38 36 30 30 30 22 2c 22 73 69 7a 65 73 22 3a 5b 32 5d 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 22 61 74 66 22 2c 22 61 63 63 6f 75 6e 74 49 64 22 3a 22 31 35 36 38 30 22 2c 22 73 69 74 65 49 64 22 3a 22 31 30 33 32 34 30 22 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 22 62 69 64 64 65 72 22 3a 22 61 70 70 6e 65 78 75 73 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 Data Ascii: [{"bidder":"sovrn","params":{"tagid":"364652"}}, {"bidder":"rubicon","params":{"zoneId":"486000","sizes":[2],"position":"atf","accountId":"15680","siteId":"103240"}}, {"bidder":"appnexus","params":{"
2024-03-11 11:57:19 UTC	1369	IN	Data Raw: 7b 22 62 69 64 64 65 72 22 3a 22 73 6f 76 72 6e 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 74 61 67 69 64 22 3a 22 35 34 32 33 31 36 22 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 22 62 69 64 64 65 72 22 3a 22 72 75 62 69 63 6f 6e 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 7a 6f 6e 65 49 64 22 3a 22 36 31 30 38 34 38 22 2c 22 73 69 7a 65 73 22 3a 5b 34 33 5d 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 22 61 74 66 22 2c 22 61 63 63 6f 75 6e 74 49 64 22 3a 22 31 35 36 38 30 22 2c 22 73 69 74 65 49 64 22 3a 22 31 30 33 32 34 30 22 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 22 62 69 64 64 65 72 22 3a 22 61 70 70 6e 65 78 75 73 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 Data Ascii: {"bidder":"sovrn","params":{"tagid":"542316"}}, {"bidder":"rubicon","params":{"zoneId":"610848","sizes":[43],"position":"atf","accountId":"15680","siteId":"103240"}}, {"bidder":"appnexus","params":{"
2024-03-11 11:57:19 UTC	1369	IN	Data Raw: 65 79 22 3a 22 77 52 66 4b 73 69 4d 44 55 59 64 66 33 6c 37 64 35 6f 69 71 4c 47 4e 4e 22 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 22 62 69 64 64 65 72 22 3a 22 70 75 62 6d 61 74 69 63 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 61 64 53 6c 6f 74 22 3a 22 34 37 34 31 35 38 36 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 31 36 32 35 33 38 22 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 22 62 69 64 64 65 72 22 3a 22 73 6d 61 72 74 61 64 73 65 72 76 65 72 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 70 61 67 65 49 64 22 3a 31 39 31 31 34 39 35 2c 22 6e 65 74 77 6f 72 6b 49 64 22 3a 34 35 35 39 2c 22 73 69 74 65 49 64 22 3a 35 37 35 38 31 36 2c 22 66 6f Data Ascii: ey":"wRfKsiMDUYdf3l7d5oiqLGNN"}}, {"bidder":"pubmatic","params":{"adSlot":"4741586","publisherId":"162538"}}, {"bidder":"smartadserver","params":{"pageId":1911495,"networkId":4559,"siteId":575816,"fo
2024-03-11 11:57:19 UTC	1369	IN	Data Raw: 35 38 38 35 36 2d 30 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 61 67 3a 20 27 53 46 5f 50 72 6f 6a 65 63 74 53 75 6d 5f 33 30 30 78 32 35 30 5f 42 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 65 64 69 61 54 79 70 65 73 3a 20 7b 20 62 61 6e 6e 65 72 3a 20 7b 20 73 69 7a 65 73 3a 20 5b 5b 33 30 30 2c 32 35 30 5d 5d 20 7d 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 46 2e 41 64 73 2e 70 72 65 62 69 64 55 6e 69 74 73 2e 70 75 73 68 28 74 68 69 73 55 6e 69 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 53 46 2e 69 6e 69 74 69 61 6c 5f 62 72 65 61 6b 70 6f 69 6e 74 73 5f 76 69 Data Ascii: 58856-0', tag: 'SF_ProjectSum_300x250_B', mediaTypes: { banner: { sizes: [[300,250]] } } }; SF.Ads.prebidUnits.push(thisUnit); } if (SF.initial_breakpoints_vi
2024-03-11 11:57:19 UTC	1369	IN	Data Raw: 6d 73 22 3a 7b 22 74 61 67 69 64 22 3a 22 33 36 34 36 35 35 22 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 22 62 69 64 64 65 72 22 3a 22 72 75 62 69 63 6f 6e 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 7a 6f 6e 65 49 64 22 3a 22 34 38 36 30 31 30 22 2c 22 73 69 7a 65 73 22 3a 5b 32 5d 2c 22 61 63 63 6f 75 6e 74 49 64 22 3a 22 31 35 36 38 30 22 2c 22 73 69 74 65 49 64 22 3a 22 31 30 33 32 34 30 22 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 22 62 69 64 64 65 72 22 3a 22 61 70 70 6e 65 78 75 73 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 70 6c 61 63 65 6d 65 6e 74 49 64 22 3a 39 32 36 35 31 31 31 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ms":{"tagid":"364655"}}, {"bidder":"rubicon","params":{"zoneId":"486010","sizes":[2],"accountId":"15680","siteId":"103240"}}, {"bidder":"appnexus","params":{"placementId":9265111}},
2024-03-11 11:57:19 UTC	1369	IN	Data Raw: 33 31 37 22 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 22 62 69 64 64 65 72 22 3a 22 72 75 62 69 63 6f 6e 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 7a 6f 6e 65 49 64 22 3a 22 37 39 38 32 36 30 22 2c 22 73 69 7a 65 73 22 3a 5b 34 33 5d 2c 22 61 63 63 6f 75 6e 74 49 64 22 3a 22 31 35 36 38 30 22 2c 22 73 69 74 65 49 64 22 3a 22 31 30 33 32 34 30 22 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 22 62 69 64 64 65 72 22 3a 22 61 70 70 6e 65 78 75 73 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 70 6c 61 63 65 6d 65 6e 74 49 64 22 3a 31 32 35 35 39 30 38 34 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 22 62 69 Data Ascii: 317"}}, {"bidder":"rubicon","params":{"zoneId":"798260","sizes":[43],"accountId":"15680","siteId":"103240"}}, {"bidder":"appnexus","params":{"placementId":12559084}}, {"bi
2024-03-11 11:57:19 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 22 62 69 64 64 65 72 22 3a 22 70 75 62 6d 61 74 69 63 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 61 64 53 6c 6f 74 22 3a 22 34 38 34 35 30 37 33 22 2c 22 70 75 62 6c 69 73 68 65 72 49 64 22 3a 22 31 36 32 35 33 38 22 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 22 62 69 64 64 65 72 22 3a 22 73 6d 61 72 74 61 64 73 65 72 76 65 72 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 70 61 67 65 49 64 22 3a 31 38 38 37 37 39 37 2c 22 6e 65 74 77 6f 72 6b 49 64 22 3a 34 35 35 39 2c 22 73 69 74 65 49 64 22 3a 35 37 35 38 31 36 2c 22 66 6f 72 6d 61 74 49 64 22 3a 31 31 39 35 38 33 7d 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: {"bidder":"pubmatic","params":{"adSlot":"4845073","publisherId":"162538"}}, {"bidder":"smartadserver","params":{"pageId":1887797,"networkId":4559,"siteId":575816,"formatId":119583}},

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
543	192.168.2.16	50527	34.255.246.57	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:19 UTC	970	OUT	GET /a?adform_uid=1724005921034811649&r=eyJ1IjoiaHR0cHM6Ly9ydGItY3N5bmMuc21hcnRhZHNlcnZlci5jb20vcmVkaXIvP2lzc2lcdTAwM2QxXHUwMDI2cGFydG5lcmlkXHUwMDNkMTQxXHUwMDI2cGFydG5lcnVzZXJpZFx1MDAzZDlmbFN5M25KNUl2UVdpYVlUY1UxMnY3WGciLCJkIjpbeyJuYW1lIjoic21hcnQifV19 HTTP/1.1 Host: a.audrte.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: arcki2=9flSy3nJ5IvQWiaYTcU12v7Xg!20220908!1710158235401!ip#154.16.105.38; arcki2_ddp2=9flSy3nJ5IvQWiaYTcU12v7Xg!20220908!1710158237382

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
544	192.168.2.16	50534	23.83.76.35	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:19 UTC	1311	OUT	POST /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive Content-Length: 295 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:19 UTC	295	OUT	Data Raw: 7b 22 73 69 74 65 69 64 22 3a 35 37 35 38 31 36 2c 22 70 61 67 65 69 64 22 3a 31 38 38 37 37 39 37 2c 22 66 6f 72 6d 61 74 69 64 22 3a 31 31 39 35 38 33 2c 22 63 6b 69 64 22 3a 30 2c 22 74 61 67 49 64 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 33 39 34 32 30 39 33 35 38 38 35 33 2d 30 22 2c 22 70 61 67 65 44 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 22 2c 22 74 69 6d 65 6f 75 74 22 3a 33 30 30 30 2c 22 62 69 64 49 64 22 3a 22 32 34 65 62 38 65 34 30 65 35 38 65 66 62 22 2c 22 70 72 65 62 69 64 56 65 72 73 69 6f 6e 22 3a 22 38 2e 31 33 2e 30 22 2c 22 73 63 68 61 69 6e 22 3a 6e 75 6c 6c 2c 22 73 69 7a 65 73 22 3a 5b 7b 22 77 22 3a 37 32 38 2c Data Ascii: {"siteid":575816,"pageid":1887797,"formatid":119583,"ckid":0,"tagId":"div-gpt-ad-1394209358853-0","pageDomain":"https://sourceforge.net/projects/docfetcher/","timeout":3000,"bidId":"24eb8e40e58efb","prebidVersion":"8.13.0","schain":null,"sizes":[{"w":728,
2024-03-11 11:57:20 UTC	588	IN	HTTP/1.1 200 OK content-type: application/json; charset=UTF-8 date: Mon, 11 Mar 2024 11:57:19 GMT access-control-allow-credentials: true access-control-allow-origin: https://sourceforge.net cache-control: no-cache,no-store pragma: no-cache set-cookie: vs=575816=5885997; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: pid=1899505890594565248; expires=Tue, 11 Mar 2025 11:57:19 GMT; domain=.smartadserver.com; path=/; secure; samesite=none transfer-encoding: chunked vary: Origin p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:20 UTC	1224	IN	Data Raw: 34 42 43 0d 0a 7b 22 63 70 6d 22 3a 30 2e 30 2c 22 63 75 72 72 65 6e 63 79 22 3a 22 55 53 44 22 2c 22 77 69 64 74 68 22 3a 30 2c 22 68 65 69 67 68 74 22 3a 30 2c 22 61 64 22 3a 6e 75 6c 6c 2c 22 61 64 55 72 6c 22 3a 6e 75 6c 6c 2c 22 64 65 61 6c 49 64 22 3a 6e 75 6c 6c 2c 22 74 74 6c 22 3a 30 2c 22 69 73 4e 65 74 43 70 6d 22 3a 66 61 6c 73 65 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 30 2c 22 63 53 79 6e 63 55 72 6c 22 3a 22 2f 2f 63 73 79 6e 63 2e 73 6d 61 72 74 61 64 73 65 72 76 65 72 2e 63 6f 6d 2f 64 69 66 66 2f 72 74 62 2f 63 73 79 6e 63 2f 43 6f 6f 6b 69 65 53 79 6e 63 2e 68 74 6d 6c 3f 68 61 73 72 74 62 3d 74 72 75 65 26 6e 77 69 64 3d 34 35 35 39 26 64 63 69 64 3d 31 30 26 69 73 63 6e 61 6d 65 3d 66 61 6c 73 65 26 63 6e 61 6d 65 3d 26 67 64 70 72 Data Ascii: 4BC{"cpm":0.0,"currency":"USD","width":0,"height":0,"ad":null,"adUrl":null,"dealId":null,"ttl":0,"isNetCpm":false,"creativeId":0,"cSyncUrl":"//csync.smartadserver.com/diff/rtb/csync/CookieSync.html?hasrtb=true&nwid=4559&dcid=10&iscname=false&cname=&gdpr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
545	192.168.2.16	50533	23.83.76.35	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:19 UTC	1311	OUT	POST /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive Content-Length: 296 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:19 UTC	296	OUT	Data Raw: 7b 22 73 69 74 65 69 64 22 3a 35 37 35 38 31 36 2c 22 70 61 67 65 69 64 22 3a 31 39 31 31 34 39 35 2c 22 66 6f 72 6d 61 74 69 64 22 3a 31 31 39 35 38 33 2c 22 63 6b 69 64 22 3a 30 2c 22 74 61 67 49 64 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 33 39 34 32 30 39 33 35 38 38 35 35 2d 30 22 2c 22 70 61 67 65 44 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 22 2c 22 74 69 6d 65 6f 75 74 22 3a 33 30 30 30 2c 22 62 69 64 49 64 22 3a 22 33 66 65 65 33 34 61 62 38 32 38 34 31 34 22 2c 22 70 72 65 62 69 64 56 65 72 73 69 6f 6e 22 3a 22 38 2e 31 33 2e 30 22 2c 22 73 63 68 61 69 6e 22 3a 6e 75 6c 6c 2c 22 73 69 7a 65 73 22 3a 5b 7b 22 77 22 3a 33 30 30 2c Data Ascii: {"siteid":575816,"pageid":1911495,"formatid":119583,"ckid":0,"tagId":"div-gpt-ad-1394209358855-0","pageDomain":"https://sourceforge.net/projects/docfetcher/","timeout":3000,"bidId":"3fee34ab828414","prebidVersion":"8.13.0","schain":null,"sizes":[{"w":300,
2024-03-11 11:57:20 UTC	588	IN	HTTP/1.1 200 OK content-type: application/json; charset=UTF-8 date: Mon, 11 Mar 2024 11:57:19 GMT access-control-allow-credentials: true access-control-allow-origin: https://sourceforge.net cache-control: no-cache,no-store pragma: no-cache set-cookie: vs=575816=5885997; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: pid=1899505890594565248; expires=Tue, 11 Mar 2025 11:57:19 GMT; domain=.smartadserver.com; path=/; secure; samesite=none transfer-encoding: chunked vary: Origin p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:20 UTC	1183	IN	Data Raw: 34 39 33 0d 0a 7b 22 63 70 6d 22 3a 30 2e 30 2c 22 63 75 72 72 65 6e 63 79 22 3a 22 55 53 44 22 2c 22 77 69 64 74 68 22 3a 30 2c 22 68 65 69 67 68 74 22 3a 30 2c 22 61 64 22 3a 6e 75 6c 6c 2c 22 61 64 55 72 6c 22 3a 6e 75 6c 6c 2c 22 64 65 61 6c 49 64 22 3a 6e 75 6c 6c 2c 22 74 74 6c 22 3a 30 2c 22 69 73 4e 65 74 43 70 6d 22 3a 66 61 6c 73 65 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 30 2c 22 63 53 79 6e 63 55 72 6c 22 3a 22 2f 2f 63 73 79 6e 63 2e 73 6d 61 72 74 61 64 73 65 72 76 65 72 2e 63 6f 6d 2f 64 69 66 66 2f 72 74 62 2f 63 73 79 6e 63 2f 43 6f 6f 6b 69 65 53 79 6e 63 2e 68 74 6d 6c 3f 68 61 73 72 74 62 3d 74 72 75 65 26 6e 77 69 64 3d 34 35 35 39 26 64 63 69 64 3d 31 30 26 69 73 63 6e 61 6d 65 3d 66 61 6c 73 65 26 63 6e 61 6d 65 3d 26 67 64 70 72 Data Ascii: 493{"cpm":0.0,"currency":"USD","width":0,"height":0,"ad":null,"adUrl":null,"dealId":null,"ttl":0,"isNetCpm":false,"creativeId":0,"cSyncUrl":"//csync.smartadserver.com/diff/rtb/csync/CookieSync.html?hasrtb=true&nwid=4559&dcid=10&iscname=false&cname=&gdpr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
546	192.168.2.16	50535	23.83.76.35	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:19 UTC	1311	OUT	POST /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive Content-Length: 278 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:19 UTC	278	OUT	Data Raw: 7b 22 73 69 74 65 69 64 22 3a 35 37 35 38 31 36 2c 22 70 61 67 65 69 64 22 3a 31 39 31 31 34 39 35 2c 22 66 6f 72 6d 61 74 69 64 22 3a 31 31 39 35 38 33 2c 22 63 6b 69 64 22 3a 30 2c 22 74 61 67 49 64 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 33 39 34 32 30 39 33 35 38 38 35 36 2d 30 22 2c 22 70 61 67 65 44 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 22 2c 22 74 69 6d 65 6f 75 74 22 3a 33 30 30 30 2c 22 62 69 64 49 64 22 3a 22 34 37 33 64 66 36 31 38 37 30 39 32 65 34 22 2c 22 70 72 65 62 69 64 56 65 72 73 69 6f 6e 22 3a 22 38 2e 31 33 2e 30 22 2c 22 73 63 68 61 69 6e 22 3a 6e 75 6c 6c 2c 22 73 69 7a 65 73 22 3a 5b 7b 22 77 22 3a 33 30 30 2c Data Ascii: {"siteid":575816,"pageid":1911495,"formatid":119583,"ckid":0,"tagId":"div-gpt-ad-1394209358856-0","pageDomain":"https://sourceforge.net/projects/docfetcher/","timeout":3000,"bidId":"473df6187092e4","prebidVersion":"8.13.0","schain":null,"sizes":[{"w":300,
2024-03-11 11:57:20 UTC	588	IN	HTTP/1.1 200 OK content-type: application/json; charset=UTF-8 date: Mon, 11 Mar 2024 11:57:19 GMT access-control-allow-credentials: true access-control-allow-origin: https://sourceforge.net cache-control: no-cache,no-store pragma: no-cache set-cookie: vs=575816=5885997; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: pid=1899505890594565248; expires=Tue, 11 Mar 2025 11:57:19 GMT; domain=.smartadserver.com; path=/; secure; samesite=none transfer-encoding: chunked vary: Origin p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:20 UTC	1287	IN	Data Raw: 34 46 42 0d 0a 7b 22 63 70 6d 22 3a 30 2e 30 2c 22 63 75 72 72 65 6e 63 79 22 3a 22 55 53 44 22 2c 22 77 69 64 74 68 22 3a 30 2c 22 68 65 69 67 68 74 22 3a 30 2c 22 61 64 22 3a 6e 75 6c 6c 2c 22 61 64 55 72 6c 22 3a 6e 75 6c 6c 2c 22 64 65 61 6c 49 64 22 3a 6e 75 6c 6c 2c 22 74 74 6c 22 3a 30 2c 22 69 73 4e 65 74 43 70 6d 22 3a 66 61 6c 73 65 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 30 2c 22 63 53 79 6e 63 55 72 6c 22 3a 22 2f 2f 63 73 79 6e 63 2e 73 6d 61 72 74 61 64 73 65 72 76 65 72 2e 63 6f 6d 2f 64 69 66 66 2f 72 74 62 2f 63 73 79 6e 63 2f 43 6f 6f 6b 69 65 53 79 6e 63 2e 68 74 6d 6c 3f 68 61 73 72 74 62 3d 74 72 75 65 26 6e 77 69 64 3d 34 35 35 39 26 64 63 69 64 3d 31 30 26 69 73 63 6e 61 6d 65 3d 66 61 6c 73 65 26 63 6e 61 6d 65 3d 26 67 64 70 72 Data Ascii: 4FB{"cpm":0.0,"currency":"USD","width":0,"height":0,"ad":null,"adUrl":null,"dealId":null,"ttl":0,"isNetCpm":false,"creativeId":0,"cSyncUrl":"//csync.smartadserver.com/diff/rtb/csync/CookieSync.html?hasrtb=true&nwid=4559&dcid=10&iscname=false&cname=&gdpr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
547	192.168.2.16	50538	23.83.76.35	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:19 UTC	1311	OUT	POST /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive Content-Length: 278 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:19 UTC	278	OUT	Data Raw: 7b 22 73 69 74 65 69 64 22 3a 35 37 35 38 31 36 2c 22 70 61 67 65 69 64 22 3a 31 39 31 31 34 39 35 2c 22 66 6f 72 6d 61 74 69 64 22 3a 31 31 39 35 38 33 2c 22 63 6b 69 64 22 3a 30 2c 22 74 61 67 49 64 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 33 39 34 32 30 39 33 35 38 38 35 37 2d 30 22 2c 22 70 61 67 65 44 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 22 2c 22 74 69 6d 65 6f 75 74 22 3a 33 30 30 30 2c 22 62 69 64 49 64 22 3a 22 35 33 36 66 65 39 39 37 37 38 35 65 39 39 22 2c 22 70 72 65 62 69 64 56 65 72 73 69 6f 6e 22 3a 22 38 2e 31 33 2e 30 22 2c 22 73 63 68 61 69 6e 22 3a 6e 75 6c 6c 2c 22 73 69 7a 65 73 22 3a 5b 7b 22 77 22 3a 33 30 30 2c Data Ascii: {"siteid":575816,"pageid":1911495,"formatid":119583,"ckid":0,"tagId":"div-gpt-ad-1394209358857-0","pageDomain":"https://sourceforge.net/projects/docfetcher/","timeout":3000,"bidId":"536fe997785e99","prebidVersion":"8.13.0","schain":null,"sizes":[{"w":300,
2024-03-11 11:57:20 UTC	588	IN	HTTP/1.1 200 OK content-type: application/json; charset=UTF-8 date: Mon, 11 Mar 2024 11:57:19 GMT access-control-allow-credentials: true access-control-allow-origin: https://sourceforge.net cache-control: no-cache,no-store pragma: no-cache set-cookie: vs=575816=5885997; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: pid=1899505890594565248; expires=Tue, 11 Mar 2025 11:57:19 GMT; domain=.smartadserver.com; path=/; secure; samesite=none transfer-encoding: chunked vary: Origin p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:20 UTC	963	IN	Data Raw: 33 42 37 0d 0a 7b 22 63 70 6d 22 3a 30 2e 30 2c 22 63 75 72 72 65 6e 63 79 22 3a 22 55 53 44 22 2c 22 77 69 64 74 68 22 3a 30 2c 22 68 65 69 67 68 74 22 3a 30 2c 22 61 64 22 3a 6e 75 6c 6c 2c 22 61 64 55 72 6c 22 3a 6e 75 6c 6c 2c 22 64 65 61 6c 49 64 22 3a 6e 75 6c 6c 2c 22 74 74 6c 22 3a 30 2c 22 69 73 4e 65 74 43 70 6d 22 3a 66 61 6c 73 65 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 30 2c 22 63 53 79 6e 63 55 72 6c 22 3a 22 2f 2f 63 73 79 6e 63 2e 73 6d 61 72 74 61 64 73 65 72 76 65 72 2e 63 6f 6d 2f 64 69 66 66 2f 72 74 62 2f 63 73 79 6e 63 2f 43 6f 6f 6b 69 65 53 79 6e 63 2e 68 74 6d 6c 3f 68 61 73 72 74 62 3d 74 72 75 65 26 6e 77 69 64 3d 34 35 35 39 26 64 63 69 64 3d 31 30 26 69 73 63 6e 61 6d 65 3d 66 61 6c 73 65 26 63 6e 61 6d 65 3d 26 67 64 70 72 Data Ascii: 3B7{"cpm":0.0,"currency":"USD","width":0,"height":0,"ad":null,"adUrl":null,"dealId":null,"ttl":0,"isNetCpm":false,"creativeId":0,"cSyncUrl":"//csync.smartadserver.com/diff/rtb/csync/CookieSync.html?hasrtb=true&nwid=4559&dcid=10&iscname=false&cname=&gdpr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
548	192.168.2.16	50549	130.211.23.194	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:19 UTC	564	OUT	GET /mw/state?bt_env=prod HTTP/1.1 Host: api.btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:20 UTC	203	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Vary: Origin Date: Mon, 11 Mar 2024 11:57:20 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
549	192.168.2.16	50539	104.254.151.68	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:19 UTC	842	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 1770 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; receive-cookie-deprecation=1; uuid2=7822940101119878936; icu=ChgIkPoyEAoYAiACKAIwjuO7rwY4AkACSAIQjuO7rwYYAQ..
2024-03-11 11:57:19 UTC	1770	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 7b 22 77 69 64 74 68 22 3a 39 37 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 5d 2c 22 70 72 69 6d 61 72 79 5f 73 69 7a 65 22 3a 7b 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 22 61 64 5f 74 79 70 65 73 22 3a 5b 22 62 61 6e 6e 65 72 22 5d 2c 22 75 75 69 64 22 3a 22 39 32 35 63 34 64 39 63 64 36 32 39 38 65 22 2c 22 69 64 22 3a 39 32 36 35 31 30 37 2c 22 61 6c 6c 6f 77 5f 73 6d 61 6c 6c 65 72 5f 73 69 7a 65 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 5f 70 6d 74 5f 72 75 6c 65 22 3a 66 61 6c 73 65 2c 22 70 72 65 62 69 64 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 70 73 61 22 3a 74 72 75 65 2c Data Ascii: {"tags":[{"sizes":[{"width":728,"height":90},{"width":970,"height":250}],"primary_size":{"width":728,"height":90},"ad_types":["banner"],"uuid":"925c4d9cd6298e","id":9265107,"allow_smaller_sizes":false,"use_pmt_rule":false,"prebid":true,"disable_psa":true,
2024-03-11 11:57:20 UTC	1590	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Mon, 11 Mar 2024 11:57:20 GMT Content-Type: application/json; charset=utf-8 Content-Length: 87257 Connection: close Vary: Accept-Encoding Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://sourceforge.net Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: f60ae750-156c-493e-85c7-5eaaa815904d Set-Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:20 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: icu=ChgIkPoyEAoYAyADKAMwoOO7rwY4A0ADSAMQoOO7rwYYAg..; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:20 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 27-Feb-2034 11:57:20 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=7822940101119878936; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:20 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.105.38; 154.16.105.38; 904.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com
2024-03-11 11:57:20 UTC	14794	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 61 67 73 22 3a 5b 7b 22 75 75 69 64 22 3a 22 39 32 35 63 34 64 39 63 64 36 32 39 38 65 22 2c 22 74 61 67 5f 69 64 22 3a 39 32 36 35 31 30 37 2c 22 61 75 63 74 69 6f 6e 5f 69 64 22 3a 22 36 38 38 36 39 36 33 33 34 39 32 34 33 30 33 37 39 34 30 22 2c 22 6e 6f 62 69 64 22 3a 66 61 6c 73 65 2c 22 6e 6f 5f 61 64 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6c 61 78 31 2d 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 69 74 3f 61 6e 5f 61 75 64 69 74 3d 30 26 72 65 66 65 72 72 65 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 25 32 46 70 72 6f 6a 65 63 74 73 25 32 46 64 6f 63 66 65 74 63 68 65 72 25 32 46 26 65 3d 77 71 54 5f 33 51 4b 69 44 61 43 69 42 67 41 41 Data Ascii: {"version":"3.0.0","tags":[{"uuid":"925c4d9cd6298e","tag_id":9265107,"auction_id":"6886963349243037940","nobid":false,"no_ad_url":"https://lax1-ib.adnxs.com/it?an_audit=0&referrer=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2F&e=wqT_3QKiDaCiBgAA
2024-03-11 11:57:20 UTC	16384	IN	Data Raw: 51 55 57 38 49 75 53 41 74 55 46 49 54 42 4a 4f 56 64 57 55 57 70 4f 4d 32 5a 52 59 6b 56 4a 55 44 51 7a 5a 57 64 43 52 30 46 42 5a 32 30 74 64 45 46 4e 51 55 6b 30 51 55 56 42 51 56 4e 4b 64 30 5a 56 54 6b 39 66 64 46 46 53 57 55 46 48 51 32 39 43 4d 6d 64 42 59 30 46 43 4e 45 46 4a 51 55 4a 42 53 57 64 43 51 55 70 42 51 6b 46 61 5a 30 4a 42 59 55 46 43 51 33 46 6e 51 6b 4e 79 51 55 4a 42 54 47 74 43 52 6b 35 4f 62 45 78 49 61 45 31 42 61 30 52 43 51 56 4a 55 56 46 70 54 65 44 52 55 51 55 70 42 65 56 46 46 51 55 46 42 51 55 46 42 51 55 52 33 55 44 6c 72 51 6b 46 42 51 51 55 4f 64 44 68 45 58 32 64 42 59 6e 46 35 62 31 46 4d 4d 55 46 69 4d 57 70 46 61 30 4e 5a 51 57 64 44 5a 30 46 6e 55 7a 46 42 5a 77 45 6a 42 45 4d 35 43 51 6a 77 6d 6b 52 42 51 57 64 45 Data Ascii: QUW8IuSAtUFITBJOVdWUWpOM2ZRYkVJUDQzZWdCR0FBZ20tdEFNQUk0QUVBQVNKd0ZVTk9fdFFSWUFHQ29CMmdBY0FCNEFJQUJBSWdCQUpBQkFaZ0JBYUFCQ3FnQkNyQUJBTGtCRk5ObExIaE1Ba0RCQVJUVFpTeDRUQUpBeVFFQUFBQUFBQUR3UDlrQkFBQQUOdDhEX2dBYnF5b1FMMUFiMWpFa0NZQWdDZ0FnUzFBZwEjBEM5CQjwmkRBQWdE
2024-03-11 11:57:20 UTC	16384	IN	Data Raw: 4d 31 51 30 4a 44 64 48 70 6a 62 30 4a 48 54 56 4e 6c 4e 33 64 4a 5a 30 4a 35 5a 30 46 52 54 57 5a 69 63 30 46 61 53 58 4a 7a 55 32 64 44 52 6b 52 35 55 6c 5a 70 59 6b 30 7a 4e 73 4d 43 41 47 64 56 77 77 78 42 51 55 46 4a 72 66 41 73 53 6d 39 43 51 57 64 6e 51 58 46 42 52 55 46 7a 4c 69 41 41 54 45 45 75 4c 6f 41 48 41 59 67 48 41 4b 41 48 41 63 67 48 68 34 41 47 30 67 63 4e 46 66 6b 42 72 41 7a 61 42 77 59 49 42 51 6d 6b 34 41 63 41 36 67 63 43 43 41 44 77 42 38 76 72 36 67 61 4b 43 41 49 51 41 4a 55 49 41 41 43 41 50 35 67 49 41 63 41 49 6e 6f 59 43 30 67 67 47 43 41 41 51 41 42 67 41 26 73 3d 37 30 63 66 62 31 34 61 66 65 37 30 65 30 37 31 33 62 37 62 64 63 35 64 62 30 39 65 31 38 35 33 34 37 32 37 39 39 66 62 5c 22 3b 63 2b 3d 5c 22 26 5c 22 2b 6f 28 Data Ascii: M1Q0JDdHpjb0JHTVNlN3dJZ0J5Z0FRTWZic0FaSXJzU2dDRkR5UlZpYk0zNsMCAGdVwwxBQUFJrfAsSm9CQWdnQXFBRUFzLiAATEEuLoAHAYgHAKAHAcgHh4AG0gcNFfkBrAzaBwYIBQmk4AcA6gcCCADwB8vr6gaKCAIQAJUIAACAP5gIAcAInoYC0ggGCAAQABgA&s=70cfb14afe70e0713b7bdc5db09e1853472799fb\";c+=\"&\"+o(
2024-03-11 11:57:20 UTC	16384	IN	Data Raw: 69 4d 57 70 46 61 30 4e 5a 51 57 64 44 5a 30 46 6e 55 7a 46 42 5a 77 45 6a 42 45 4d 35 43 51 6a 77 6d 6b 52 42 51 57 64 45 53 55 46 6e 52 46 46 42 5a 30 52 5a 51 57 64 45 5a 30 46 6e 52 47 39 42 5a 30 51 30 51 57 64 44 51 55 46 33 52 31 6c 42 64 30 64 70 51 58 68 6a 53 58 5a 68 54 45 35 4f 61 45 46 48 52 30 46 46 64 45 46 34 62 56 46 50 61 6b 6c 49 54 58 70 72 4d 55 31 36 55 54 4a 50 53 30 6c 45 52 6e 64 70 54 6a 6c 7a 4f 44 4a 46 51 57 39 5a 51 56 4d 77 51 55 46 4a 51 56 39 4e 5a 32 51 78 59 6d 31 30 64 57 49 7a 5a 48 56 76 5a 30 31 50 51 30 30 74 52 54 6c 55 52 56 46 44 65 47 64 44 54 46 46 42 51 55 46 42 51 7a 5a 42 64 32 78 4e 55 56 5a 6e 65 45 39 71 57 58 70 4e 56 45 78 6e 51 56 39 4b 52 6a 5a 52 54 55 46 42 41 61 63 42 41 62 68 51 51 55 51 7a 65 45 Data Ascii: iMWpFa0NZQWdDZ0FnUzFBZwEjBEM5CQjwmkRBQWdESUFnRFFBZ0RZQWdEZ0FnRG9BZ0Q0QWdDQUF3R1lBd0dpQXhjSXZhTE5OaEFHR0FFdEF4bVFPaklITXprMU16UTJPS0lERndpTjlzODJFQW9ZQVMwQUFJQV9NZ2QxYm10dWIzZHVvZ01PQ00tRTlURVFDeGdDTFFBQUFBQzZBd2xNUVZneE9qWXpNVExnQV9KRjZRTUFBAacBAbhQQUQzeE
2024-03-11 11:57:21 UTC	16384	IN	Data Raw: 4e 33 64 4a 5a 30 4a 35 5a 30 46 52 54 57 5a 69 63 30 46 61 53 58 4a 7a 55 32 64 44 52 6b 52 35 55 6c 5a 70 59 6b 30 7a 4e 73 4d 43 41 47 64 56 77 77 78 42 51 55 46 4a 72 66 41 73 53 6d 39 43 51 57 64 6e 51 58 46 42 52 55 46 7a 4c 69 41 41 54 45 45 75 4c 6f 41 48 41 59 67 48 41 4b 41 48 41 63 67 48 68 34 41 47 30 67 63 4e 46 66 6b 42 72 41 7a 61 42 77 59 49 42 51 6d 6b 34 41 63 41 36 67 63 43 43 41 44 77 42 38 76 72 36 67 61 4b 43 41 49 51 41 4a 55 49 41 41 43 41 50 35 67 49 41 63 41 49 6e 6f 59 43 30 67 67 47 43 41 41 51 41 42 67 41 26 73 3d 37 30 63 66 62 31 34 61 66 65 37 30 65 30 37 31 33 62 37 62 64 63 35 64 62 30 39 65 31 38 35 33 34 37 32 37 39 39 66 62 5c 22 3b 63 2b 3d 5c 22 26 5c 22 2b 6f 28 7b 72 64 52 65 66 3a 5c 22 62 64 72 65 66 5c 22 2c 72 Data Ascii: N3dJZ0J5Z0FRTWZic0FaSXJzU2dDRkR5UlZpYk0zNsMCAGdVwwxBQUFJrfAsSm9CQWdnQXFBRUFzLiAATEEuLoAHAYgHAKAHAcgHh4AG0gcNFfkBrAzaBwYIBQmk4AcA6gcCCADwB8vr6gaKCAIQAJUIAACAP5gIAcAInoYC0ggGCAAQABgA&s=70cfb14afe70e0713b7bdc5db09e1853472799fb\";c+=\"&\"+o({rdRef:\"bdref\",r
2024-03-11 11:57:21 UTC	6927	IN	Data Raw: 3a 3a 20 6c 6f 63 61 74 69 6f 6e 5c 22 29 7d 69 66 28 61 29 69 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 2c 72 2e 70 75 73 68 28 69 29 2c 75 7c 7c 28 75 3d 69 29 3b 65 6c 73 65 20 69 66 28 30 21 3d 3d 6e 29 7b 63 3d 65 5b 6e 2d 31 5d 3b 74 72 79 7b 64 3d 63 2e 72 65 66 65 72 72 65 72 2c 73 3d 63 2e 61 6e 63 65 73 74 6f 72 7d 63 61 74 63 68 28 6c 29 7b 5c 22 75 6e 64 65 66 69 6e 65 64 5c 22 21 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 2c 74 28 6c 2c 5c 22 41 6e 52 44 4d 6f 64 75 6c 65 3a 3a 67 65 74 50 75 62 55 72 6c 53 74 61 63 6b 3a 3a 20 70 72 65 76 46 72 61 6d 65 5c 22 29 7d 64 3f 28 69 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 29 2c 72 2e 70 75 73 68 28 69 29 2c 75 7c 7c 28 75 3d 69 29 29 3a 73 3f 28 69 Data Ascii: :: location\")}if(a)i=encodeURIComponent(a),r.push(i),u\|\|(u=i);else if(0!==n){c=e[n-1];try{d=c.referrer,s=c.ancestor}catch(l){\"undefined\"!=typeof console,t(l,\"AnRDModule::getPubUrlStack:: prevFrame\")}d?(i=encodeURIComponent(d),r.push(i),u\|\|(u=i)):s?(i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
550	192.168.2.16	50537	23.83.76.35	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:19 UTC	1311	OUT	POST /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive Content-Length: 295 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:19 UTC	295	OUT	Data Raw: 7b 22 73 69 74 65 69 64 22 3a 35 37 35 38 31 36 2c 22 70 61 67 65 69 64 22 3a 31 38 38 37 37 39 37 2c 22 66 6f 72 6d 61 74 69 64 22 3a 31 31 39 35 38 33 2c 22 63 6b 69 64 22 3a 30 2c 22 74 61 67 49 64 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 33 39 32 31 34 38 32 30 38 37 39 30 2d 30 22 2c 22 70 61 67 65 44 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 22 2c 22 74 69 6d 65 6f 75 74 22 3a 33 30 30 30 2c 22 62 69 64 49 64 22 3a 22 36 61 62 64 33 62 31 64 64 65 34 64 37 36 22 2c 22 70 72 65 62 69 64 56 65 72 73 69 6f 6e 22 3a 22 38 2e 31 33 2e 30 22 2c 22 73 63 68 61 69 6e 22 3a 6e 75 6c 6c 2c 22 73 69 7a 65 73 22 3a 5b 7b 22 77 22 3a 37 32 38 2c Data Ascii: {"siteid":575816,"pageid":1887797,"formatid":119583,"ckid":0,"tagId":"div-gpt-ad-1392148208790-0","pageDomain":"https://sourceforge.net/projects/docfetcher/","timeout":3000,"bidId":"6abd3b1dde4d76","prebidVersion":"8.13.0","schain":null,"sizes":[{"w":728,
2024-03-11 11:57:20 UTC	588	IN	HTTP/1.1 200 OK content-type: application/json; charset=UTF-8 date: Mon, 11 Mar 2024 11:57:25 GMT access-control-allow-credentials: true access-control-allow-origin: https://sourceforge.net cache-control: no-cache,no-store pragma: no-cache set-cookie: vs=575816=5885997; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: pid=1899505890594565248; expires=Tue, 11 Mar 2025 11:57:25 GMT; domain=.smartadserver.com; path=/; secure; samesite=none transfer-encoding: chunked vary: Origin p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:20 UTC	897	IN	Data Raw: 33 37 35 0d 0a 7b 22 63 70 6d 22 3a 30 2e 30 2c 22 63 75 72 72 65 6e 63 79 22 3a 22 55 53 44 22 2c 22 77 69 64 74 68 22 3a 30 2c 22 68 65 69 67 68 74 22 3a 30 2c 22 61 64 22 3a 6e 75 6c 6c 2c 22 61 64 55 72 6c 22 3a 6e 75 6c 6c 2c 22 64 65 61 6c 49 64 22 3a 6e 75 6c 6c 2c 22 74 74 6c 22 3a 30 2c 22 69 73 4e 65 74 43 70 6d 22 3a 66 61 6c 73 65 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 30 2c 22 63 53 79 6e 63 55 72 6c 22 3a 22 2f 2f 63 73 79 6e 63 2e 73 6d 61 72 74 61 64 73 65 72 76 65 72 2e 63 6f 6d 2f 64 69 66 66 2f 72 74 62 2f 63 73 79 6e 63 2f 43 6f 6f 6b 69 65 53 79 6e 63 2e 68 74 6d 6c 3f 68 61 73 72 74 62 3d 74 72 75 65 26 6e 77 69 64 3d 34 35 35 39 26 64 63 69 64 3d 31 30 26 69 73 63 6e 61 6d 65 3d 66 61 6c 73 65 26 63 6e 61 6d 65 3d 26 67 64 70 72 Data Ascii: 375{"cpm":0.0,"currency":"USD","width":0,"height":0,"ad":null,"adUrl":null,"dealId":null,"ttl":0,"isNetCpm":false,"creativeId":0,"cSyncUrl":"//csync.smartadserver.com/diff/rtb/csync/CookieSync.html?hasrtb=true&nwid=4559&dcid=10&iscname=false&cname=&gdpr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
551	192.168.2.16	50536	23.83.76.35	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:19 UTC	1311	OUT	POST /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive Content-Length: 295 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:19 UTC	295	OUT	Data Raw: 7b 22 73 69 74 65 69 64 22 3a 35 37 35 38 31 36 2c 22 70 61 67 65 69 64 22 3a 31 38 38 37 37 39 37 2c 22 66 6f 72 6d 61 74 69 64 22 3a 31 31 39 35 38 33 2c 22 63 6b 69 64 22 3a 30 2c 22 74 61 67 49 64 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 34 39 31 35 30 30 38 33 33 36 36 36 2d 30 22 2c 22 70 61 67 65 44 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 22 2c 22 74 69 6d 65 6f 75 74 22 3a 33 30 30 30 2c 22 62 69 64 49 64 22 3a 22 37 66 32 31 34 63 61 64 65 37 33 35 39 39 22 2c 22 70 72 65 62 69 64 56 65 72 73 69 6f 6e 22 3a 22 38 2e 31 33 2e 30 22 2c 22 73 63 68 61 69 6e 22 3a 6e 75 6c 6c 2c 22 73 69 7a 65 73 22 3a 5b 7b 22 77 22 3a 37 32 38 2c Data Ascii: {"siteid":575816,"pageid":1887797,"formatid":119583,"ckid":0,"tagId":"div-gpt-ad-1491500833666-0","pageDomain":"https://sourceforge.net/projects/docfetcher/","timeout":3000,"bidId":"7f214cade73599","prebidVersion":"8.13.0","schain":null,"sizes":[{"w":728,
2024-03-11 11:57:20 UTC	588	IN	HTTP/1.1 200 OK content-type: application/json; charset=UTF-8 date: Mon, 11 Mar 2024 11:57:19 GMT access-control-allow-credentials: true access-control-allow-origin: https://sourceforge.net cache-control: no-cache,no-store pragma: no-cache set-cookie: vs=575816=5885997; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: pid=1899505890594565248; expires=Tue, 11 Mar 2025 11:57:20 GMT; domain=.smartadserver.com; path=/; secure; samesite=none transfer-encoding: chunked vary: Origin p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:20 UTC	1111	IN	Data Raw: 34 34 42 0d 0a 7b 22 63 70 6d 22 3a 30 2e 30 2c 22 63 75 72 72 65 6e 63 79 22 3a 22 55 53 44 22 2c 22 77 69 64 74 68 22 3a 30 2c 22 68 65 69 67 68 74 22 3a 30 2c 22 61 64 22 3a 6e 75 6c 6c 2c 22 61 64 55 72 6c 22 3a 6e 75 6c 6c 2c 22 64 65 61 6c 49 64 22 3a 6e 75 6c 6c 2c 22 74 74 6c 22 3a 30 2c 22 69 73 4e 65 74 43 70 6d 22 3a 66 61 6c 73 65 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 30 2c 22 63 53 79 6e 63 55 72 6c 22 3a 22 2f 2f 63 73 79 6e 63 2e 73 6d 61 72 74 61 64 73 65 72 76 65 72 2e 63 6f 6d 2f 64 69 66 66 2f 72 74 62 2f 63 73 79 6e 63 2f 43 6f 6f 6b 69 65 53 79 6e 63 2e 68 74 6d 6c 3f 68 61 73 72 74 62 3d 74 72 75 65 26 6e 77 69 64 3d 34 35 35 39 26 64 63 69 64 3d 31 30 26 69 73 63 6e 61 6d 65 3d 66 61 6c 73 65 26 63 6e 61 6d 65 3d 26 67 64 70 72 Data Ascii: 44B{"cpm":0.0,"currency":"USD","width":0,"height":0,"ad":null,"adUrl":null,"dealId":null,"ttl":0,"isNetCpm":false,"creativeId":0,"cSyncUrl":"//csync.smartadserver.com/diff/rtb/csync/CookieSync.html?hasrtb=true&nwid=4559&dcid=10&iscname=false&cname=&gdpr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
552	192.168.2.16	50553	104.254.148.252	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:19 UTC	725	OUT	GET /getuid?https%3A%2F%2Fads.stickyadstv.com%2Fuser-registering%3FdataProviderId%3D209%26userId%3D$UID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=7822940101119878936; XANDR_PANID=3nI6clyYzfbnEpT9fRyZHeeDLf-D2s87ENd4pOyw4BFTVoas2vYN3I0kAmg30iZxhJeWONbdfUtKXwuvlFOruOXDykPNWOUWZiMtJDNoxzc.; receive-cookie-deprecation=1; icu=ChgIkPoyEAoYAiACKAIwjuO7rwY4AkACSAIQjuO7rwYYAQ..
2024-03-11 11:57:20 UTC	1499	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Mon, 11 Mar 2024 11:57:20 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ads.stickyadstv.com/user-registering?dataProviderId=209&userId=7822940101119878936&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent= AN-X-Request-Uuid: 87780b90-b97d-4a95-aecc-376fe740e8ac Set-Cookie: XANDR_PANID=3nI6clyYzfbnEpT9fRyZHeeDLf-D2s87ENd4pOyw4BFTVoas2vYN3I0kAmg30iZxhJeWONbdfUtKXwuvlFOruOXDykPNWOUWZiMtJDNoxzc.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:20 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 27-Feb-2034 11:57:20 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=7822940101119878936; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:20 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.105.38; 154.16.105.38; 894.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
553	192.168.2.16	50547	204.237.133.116	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:19 UTC	3545	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 1672 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23234-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23361-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk; KRTBCOOKIE_1278=23329-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23340-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23498-6255abe4-6520-429f-aa2c-493e15bdee11; KRTBCOOKIE_1323=23480-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23485-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23575-OPUc21b156e4d4f4c8381b77a05c19b0a40; KRTBCOOKIE_391=22924-1724005921034811649&KRTB&23263-1724005921034811649&KRTB&23481-1724005921034811649; KRTBCOOKIE_466=16530-6ec76371-3031-4b49-abb3-349fb3d7cf23; PugT=1710158233; pi=0:3; chkChromeAb67Sec=9; SPugT=1710158234; SyncRTB3=1710720000%3A223_2_15%7C1711324800%3A250_166_240_264_249_13_231_5_176_266_8_220_56_22_254_104_21_3_71_48_54_55_46_234_165_7_178%7C1711411200%3A35%7C1715299200%3A69%7C1710979200%3A63%7C1712707200%3A224
2024-03-11 11:57:19 UTC	1672	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 31 30 31 35 38 32 33 38 38 31 39 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 33 37 64 32 34 37 30 65 34 34 32 64 37 33 38 22 2c 22 74 61 67 69 64 22 3a 22 34 37 34 31 35 38 39 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 7d 2c 22 62 69 64 66 6c 6f 6f 72 63 75 72 22 3a 22 55 53 44 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 39 37 30 2c 22 68 22 3a 32 35 30 7d 5d 2c 22 70 6f 73 22 3a 30 2c 22 74 6f 70 66 72 61 6d 65 22 3a 31 7d 7d 2c 7b 22 69 64 22 3a 22 33 38 66 38 31 32 30 30 66 38 31 35 64 66 38 22 2c 22 74 61 67 69 64 22 3a 22 34 37 34 31 35 38 36 22 2c 22 73 65 63 Data Ascii: {"id":"1710158238819","at":1,"cur":["USD"],"imp":[{"id":"37d2470e442d738","tagid":"4741589","secure":1,"ext":{},"bidfloorcur":"USD","banner":{"w":728,"h":90,"format":[{"w":970,"h":250}],"pos":0,"topframe":1}},{"id":"38f81200f815df8","tagid":"4741586","sec
2024-03-11 11:57:20 UTC	229	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://sourceforge.net Cache-Control: no-cache, no-store, must-revalidate Date: Mon, 11 Mar 2024 11:57:20 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
554	192.168.2.16	50544	52.8.138.210	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:19 UTC	686	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 757 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:19 UTC	757	OUT	Data Raw: 7b 22 69 64 22 3a 22 38 31 38 63 62 62 64 61 2d 36 64 33 31 2d 34 30 65 64 2d 39 30 30 31 2d 31 37 34 65 61 38 31 31 62 32 66 31 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 33 30 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 22 2c 22 72 65 66 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 70 6f 73 74 64 6f 77 6e 6c 6f 61 64 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 Data Ascii: {"id":"818cbbda-6d31-40ed-9001-174ea811b2f1","at":1,"cur":["USD"],"tmax":3000,"site":{"domain":"sourceforge.net","page":"https://sourceforge.net/projects/docfetcher/","ref":"https://sourceforge.net/projects/docfetcher/postdownload","publisher":{"domain":"
2024-03-11 11:57:20 UTC	497	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:20 GMT Content-Type: application/json; charset=utf-8 Content-Length: 538 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:20 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate x-openrtb-version: 2.5 Access-Control-Allow-Origin: https://sourceforge.net Access-Control-Allow-Credentials: true
2024-03-11 11:57:20 UTC	538	IN	Data Raw: 7b 22 63 6f 6f 6b 69 65 53 79 6e 63 55 72 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 68 61 72 65 74 68 72 6f 75 67 68 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 73 69 64 2e 73 74 6f 72 79 67 69 7a 65 2e 6e 65 74 2f 63 63 6d 2f 63 39 64 64 37 31 62 36 2d 66 64 31 33 2d 34 31 33 33 2d 62 66 35 64 2d 62 38 38 36 31 39 63 65 66 34 39 31 22 2c 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 70 72 6f 64 2e 62 69 64 72 2e 69 6f 2f 63 6f 6f 6b 69 65 2d 73 79 6e 63 2f 73 68 72 3f 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 Data Ascii: {"cookieSyncUrls":["https://match.adsrvr.org/track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent=","https://sid.storygize.net/ccm/c9dd71b6-fd13-4133-bf5d-b88619cef491","https://match.prod.bidr.io/cookie-sync/shr?gdpr=0&gdpr_consent=","htt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
555	192.168.2.16	50540	44.230.187.183	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:19 UTC	666	OUT	POST /rtb/bid?src=prebid_prebid_8.13.0 HTTP/1.1 Host: ap.lijit.com Connection: keep-alive Content-Length: 1272 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=ITYsABZHyF-4XRyhT4uuZCmM
2024-03-11 11:57:19 UTC	1272	OUT	Data Raw: 7b 22 69 64 22 3a 22 34 33 61 39 39 65 64 37 62 31 32 32 36 63 33 22 2c 22 69 6d 70 22 3a 5b 7b 22 61 64 75 6e 69 74 63 6f 64 65 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 33 39 34 32 30 39 33 35 38 38 35 33 2d 30 22 2c 22 69 64 22 3a 22 32 33 31 34 32 36 38 38 65 65 63 31 61 34 38 22 2c 22 74 61 67 69 64 22 3a 22 33 36 34 36 35 32 22 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 22 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 39 37 30 2c 22 68 22 3a 32 35 30 7d 5d 2c 22 77 22 3a 31 2c 22 68 22 3a 31 7d 2c 22 65 78 74 22 3a 7b 7d 7d 2c 7b 22 61 64 75 6e 69 74 63 6f 64 65 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 33 39 34 32 30 39 33 35 38 38 35 35 2d 30 22 2c 22 69 64 22 3a Data Ascii: {"id":"43a99ed7b1226c3","imp":[{"adunitcode":"div-gpt-ad-1394209358853-0","id":"23142688eec1a48","tagid":"364652","bidfloor":"","banner":{"format":[{"w":728,"h":90},{"w":970,"h":250}],"w":1,"h":1},"ext":{}},{"adunitcode":"div-gpt-ad-1394209358855-0","id":
2024-03-11 11:57:20 UTC	496	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:20 GMT Content-Type: application/json Content-Length: 94 Connection: close Set-Cookie: ljt_reader=ITYsABZHyF-4XRyhT4uuZCmM;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: https://sourceforge.net Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type Vary: Accept-Encoding, User-Agent
2024-03-11 11:57:20 UTC	94	IN	Data Raw: 7b 22 69 64 22 3a 22 34 33 61 39 39 65 64 37 62 31 32 32 36 63 33 22 2c 22 62 69 64 69 64 22 3a 22 62 66 66 61 34 62 30 38 2d 37 61 35 63 2d 34 34 38 34 2d 39 34 36 63 2d 37 31 38 62 39 36 37 31 61 31 62 36 22 2c 22 65 78 74 22 3a 7b 22 69 69 64 22 3a 31 32 37 38 30 33 34 30 7d 7d Data Ascii: {"id":"43a99ed7b1226c3","bidid":"bffa4b08-7a5c-4484-946c-718b9671a1b6","ext":{"iid":12780340}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
556	192.168.2.16	50546	52.8.138.210	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:19 UTC	686	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 759 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:19 UTC	759	OUT	Data Raw: 7b 22 69 64 22 3a 22 38 31 38 63 62 62 64 61 2d 36 64 33 31 2d 34 30 65 64 2d 39 30 30 31 2d 31 37 34 65 61 38 31 31 62 32 66 31 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 33 30 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 22 2c 22 72 65 66 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 70 6f 73 74 64 6f 77 6e 6c 6f 61 64 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 Data Ascii: {"id":"818cbbda-6d31-40ed-9001-174ea811b2f1","at":1,"cur":["USD"],"tmax":3000,"site":{"domain":"sourceforge.net","page":"https://sourceforge.net/projects/docfetcher/","ref":"https://sourceforge.net/projects/docfetcher/postdownload","publisher":{"domain":"
2024-03-11 11:57:20 UTC	497	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:20 GMT Content-Type: application/json; charset=utf-8 Content-Length: 601 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:20 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate x-openrtb-version: 2.5 Access-Control-Allow-Origin: https://sourceforge.net Access-Control-Allow-Credentials: true
2024-03-11 11:57:20 UTC	601	IN	Data Raw: 7b 22 63 6f 6f 6b 69 65 53 79 6e 63 55 72 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 68 61 72 65 74 68 72 6f 75 67 68 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 69 64 73 79 6e 63 2e 72 6c 63 64 6e 2e 63 6f 6d 2f 37 31 32 30 36 38 2e 67 69 66 3f 70 61 72 74 6e 65 72 5f 75 69 64 3d 62 36 62 61 66 35 62 36 2d 33 35 31 36 2d 34 63 34 36 2d 61 37 30 38 2d 35 33 65 30 65 63 31 39 33 61 33 37 22 2c 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 73 68 61 72 65 74 68 72 6f 75 67 68 26 75 73 65 72 5f Data Ascii: {"cookieSyncUrls":["https://match.adsrvr.org/track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent=","https://idsync.rlcdn.com/712068.gif?partner_uid=b6baf5b6-3516-4c46-a708-53e0ec193a37","https://x.bidswitch.net/sync?ssp=sharethrough&user_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
557	192.168.2.16	50543	52.8.138.210	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:19 UTC	686	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 741 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:19 UTC	741	OUT	Data Raw: 7b 22 69 64 22 3a 22 38 31 38 63 62 62 64 61 2d 36 64 33 31 2d 34 30 65 64 2d 39 30 30 31 2d 31 37 34 65 61 38 31 31 62 32 66 31 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 33 30 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 22 2c 22 72 65 66 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 70 6f 73 74 64 6f 77 6e 6c 6f 61 64 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 Data Ascii: {"id":"818cbbda-6d31-40ed-9001-174ea811b2f1","at":1,"cur":["USD"],"tmax":3000,"site":{"domain":"sourceforge.net","page":"https://sourceforge.net/projects/docfetcher/","ref":"https://sourceforge.net/projects/docfetcher/postdownload","publisher":{"domain":"
2024-03-11 11:57:20 UTC	497	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:20 GMT Content-Type: application/json; charset=utf-8 Content-Length: 588 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:20 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate x-openrtb-version: 2.5 Access-Control-Allow-Origin: https://sourceforge.net Access-Control-Allow-Credentials: true
2024-03-11 11:57:20 UTC	588	IN	Data Raw: 7b 22 63 6f 6f 6b 69 65 53 79 6e 63 55 72 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 68 61 72 65 74 68 72 6f 75 67 68 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 63 6d 3f 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 69 64 3d 37 65 61 64 34 33 35 65 2d 61 32 63 64 2d 34 63 62 66 2d 38 38 37 36 2d 61 64 62 36 36 38 32 32 36 31 33 66 26 70 68 3d 63 36 62 30 31 65 31 32 2d 61 61 36 32 2d 34 61 65 36 2d 39 65 31 30 2d 37 31 33 34 36 65 35 39 37 63 33 31 26 72 3d 68 74 74 70 73 25 Data Ascii: {"cookieSyncUrls":["https://match.adsrvr.org/track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent=","https://u.openx.net/w/1.0/cm?gdpr=0&gdpr_consent=&id=7ead435e-a2cd-4cbf-8876-adb66822613f&ph=c6b01e12-aa62-4ae6-9e10-71346e597c31&r=https%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
558	192.168.2.16	50541	52.8.138.210	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:19 UTC	686	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 741 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:19 UTC	741	OUT	Data Raw: 7b 22 69 64 22 3a 22 38 31 38 63 62 62 64 61 2d 36 64 33 31 2d 34 30 65 64 2d 39 30 30 31 2d 31 37 34 65 61 38 31 31 62 32 66 31 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 33 30 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 22 2c 22 72 65 66 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 70 6f 73 74 64 6f 77 6e 6c 6f 61 64 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 Data Ascii: {"id":"818cbbda-6d31-40ed-9001-174ea811b2f1","at":1,"cur":["USD"],"tmax":3000,"site":{"domain":"sourceforge.net","page":"https://sourceforge.net/projects/docfetcher/","ref":"https://sourceforge.net/projects/docfetcher/postdownload","publisher":{"domain":"
2024-03-11 11:57:20 UTC	497	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:20 GMT Content-Type: application/json; charset=utf-8 Content-Length: 558 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:20 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate x-openrtb-version: 2.5 Access-Control-Allow-Origin: https://sourceforge.net Access-Control-Allow-Credentials: true
2024-03-11 11:57:20 UTC	558	IN	Data Raw: 7b 22 63 6f 6f 6b 69 65 53 79 6e 63 55 72 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 68 61 72 65 74 68 72 6f 75 67 68 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 2f 73 79 6e 63 2f 76 31 3f 73 6f 75 72 63 65 5f 69 64 3d 30 65 38 38 39 33 66 39 30 62 36 30 36 63 39 63 35 64 33 33 66 31 62 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 73 6f 75 72 63 65 5f 75 73 65 72 Data Ascii: {"cookieSyncUrls":["https://match.adsrvr.org/track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent=","https://secure.adnxs.com/getuid?https://match.sharethrough.com/sync/v1?source_id=0e8893f90b606c9c5d33f1be&gdpr=0&gdpr_consent=&source_user

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
559	192.168.2.16	50545	52.8.138.210	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:20 UTC	686	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 758 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:20 UTC	758	OUT	Data Raw: 7b 22 69 64 22 3a 22 38 31 38 63 62 62 64 61 2d 36 64 33 31 2d 34 30 65 64 2d 39 30 30 31 2d 31 37 34 65 61 38 31 31 62 32 66 31 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 33 30 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 22 2c 22 72 65 66 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 70 6f 73 74 64 6f 77 6e 6c 6f 61 64 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 Data Ascii: {"id":"818cbbda-6d31-40ed-9001-174ea811b2f1","at":1,"cur":["USD"],"tmax":3000,"site":{"domain":"sourceforge.net","page":"https://sourceforge.net/projects/docfetcher/","ref":"https://sourceforge.net/projects/docfetcher/postdownload","publisher":{"domain":"
2024-03-11 11:57:20 UTC	497	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:20 GMT Content-Type: application/json; charset=utf-8 Content-Length: 601 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:20 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate x-openrtb-version: 2.5 Access-Control-Allow-Origin: https://sourceforge.net Access-Control-Allow-Credentials: true
2024-03-11 11:57:20 UTC	601	IN	Data Raw: 7b 22 63 6f 6f 6b 69 65 53 79 6e 63 55 72 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 68 61 72 65 74 68 72 6f 75 67 68 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2d 74 6d 2e 65 76 65 72 65 73 74 74 65 63 68 2e 6e 65 74 2f 75 70 69 2f 70 69 64 2f 62 79 4e 35 39 4e 63 42 3f 72 65 64 69 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 74 63 68 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 25 32 46 73 79 6e 63 25 32 46 76 31 25 33 46 73 6f 75 72 63 65 5f 69 64 25 33 44 53 76 57 75 51 48 55 62 4d 57 6e 68 73 43 44 59 6a 65 61 71 Data Ascii: {"cookieSyncUrls":["https://match.adsrvr.org/track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent=","https://sync-tm.everesttech.net/upi/pid/byN59NcB?redir=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DSvWuQHUbMWnhsCDYjeaq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
560	192.168.2.16	50542	52.8.138.210	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:20 UTC	686	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 758 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:20 UTC	758	OUT	Data Raw: 7b 22 69 64 22 3a 22 38 31 38 63 62 62 64 61 2d 36 64 33 31 2d 34 30 65 64 2d 39 30 30 31 2d 31 37 34 65 61 38 31 31 62 32 66 31 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 33 30 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 22 2c 22 72 65 66 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 70 6f 73 74 64 6f 77 6e 6c 6f 61 64 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 Data Ascii: {"id":"818cbbda-6d31-40ed-9001-174ea811b2f1","at":1,"cur":["USD"],"tmax":3000,"site":{"domain":"sourceforge.net","page":"https://sourceforge.net/projects/docfetcher/","ref":"https://sourceforge.net/projects/docfetcher/postdownload","publisher":{"domain":"
2024-03-11 11:57:20 UTC	497	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:20 GMT Content-Type: application/json; charset=utf-8 Content-Length: 611 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:20 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate x-openrtb-version: 2.5 Access-Control-Allow-Origin: https://sourceforge.net Access-Control-Allow-Credentials: true
2024-03-11 11:57:20 UTC	611	IN	Data Raw: 7b 22 63 6f 6f 6b 69 65 53 79 6e 63 55 72 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 68 61 72 65 74 68 72 6f 75 67 68 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 2f 73 79 6e 63 2f 76 31 3f 73 6f 75 72 63 65 5f 69 64 3d 30 65 38 38 39 33 66 39 30 62 36 30 36 63 39 63 35 64 33 33 66 31 62 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 73 6f 75 72 63 65 5f 75 73 65 72 Data Ascii: {"cookieSyncUrls":["https://match.adsrvr.org/track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent=","https://secure.adnxs.com/getuid?https://match.sharethrough.com/sync/v1?source_id=0e8893f90b606c9c5d33f1be&gdpr=0&gdpr_consent=&source_user

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
561	192.168.2.16	50526	104.18.37.111	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:20 UTC	1644	OUT	GET /rest/p/docfetcher/activity?limit=5 HTTP/1.1 Host: sourceforge.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/projects/docfetcher/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; OAID=e012d283a5e1eae18062d3edb9725359; _gid=GA1.2.1668299401.1710158203; __gads=ID=ed8d538436f1b623:T=1710158205:RT=1710158205:S=ALNI_MbiYxvEWP7dZiJkctj8HGzhHyMpCg; __gpi=UID=00000dc711cb5676:T=1710158205:RT=1710158205:S=ALNI_MbtGcDgo6RHjTtG2es2mbdsN1jDSw; __eoi=ID=ccb10672a4298c0a:T=1710158205:RT=1710158205:S=AA-AfjZQQCnCz9TlsGBpH19Z0_Y8; _ga=GA1.1.1854926735.1710158203; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUY7MnVWNUplfStRWG0_KjBoQmJeKnReKiE2KyVLMyt5UG42Y3ViNSE5TjkqSUkwZ2tCOWs8dkxpOEY4c3dBPXVqTUw7JDQtfmFsV1MhTXZhRmJXTztmRzxjJWx1ZTdBJjFafFluZSZ6JURUV08kWXBnMExNbn5HaVI_TmFnXl99cW5VZ0tVPXV1NVplX0tHbVRhVEt9bHRQNnZAQ2ZKRW1TPTFEO0JNMTJ9SmhnY0MxOSFiblhGTmBkKnlFQHQ9P1FlcUJ0eDU_bDYkXj9uQ0Q0K0hgTExje2BGMi0keDJAVEJWdDN1dHI9IXFjblVYVE5wfVI-TihPPjh1VV91Nl5hXkFHOW0henFBY0JkX3BDNVl7dEIzY0tPaGBvWHA0NWd2Si09Tmg0cXZzdVM_ZCJ9.tgdlsLBkbNObw1mMFsBom9XAl4NYypd0w9z2Y37IS3M; _ga_1H226E4E4L=GS1.1.1710158208.1.1.1710158238.0.0.0
2024-03-11 11:57:20 UTC	1234	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:20 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache pragma: no-cache content-security-policy: upgrade-insecure-requests; report-uri https://sourceforge.report-uri.com/r/d/csp/enforce; script-src-attr 'none' 'report-sample'; form-action 'self'; object-src 'none'; frame-ancestors 'self'; frame-src 'self' .sf-syn.com .google.com .googlesyndication.com .safeframe.usercontent.goog .doubleclick.net .recaptcha.net recaptcha.net www.youtube-nocookie.com .youtube.com .stripe.com .plaid.com .prosperstack.com .consentmanager.net; script-src 'self' a.fsdn.com .sf-syn.com .slashdotmedia.com ml314.com .cloudflareinsights.com .doubleclick.net .google.com .googlesyndication.com .google-analytics.com .googletagmanager.com .googletagservices.com .consentmanager.net .microsofttranslator.com *.googleapis.com 'unsafe-inline' 'unsafe-eval' 'report-sample' permissions-policy: microphone=(), geolocation=(), camera=(), document-domain=(), display-capture=(), autoplay=() feature-policy: microphone 'none'; geolocation 'none'; camera 'none'; document-domain 'none'; display 'none'; autoplay 'none'
2024-03-11 11:57:20 UTC	813	IN	Data Raw: 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 73 6f 75 72 63 65 66 6f 72 67 65 3d 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 69 63 31 6f 69 4f 69 4a 6a 4c 57 77 2d 62 55 59 37 4d 6e 56 57 4e 55 70 6c 66 54 35 52 57 47 30 2d 50 58 4e 48 4c 58 35 41 62 6e 78 4d 50 7a 64 78 4b 46 56 75 63 44 4e 6f 63 32 46 67 57 45 5a 50 53 6d 35 4d 54 45 46 32 5a 6d 5a 49 4b 43 52 6a 4f 7a 45 71 61 30 31 51 64 44 64 47 66 43 74 35 53 53 74 4b 53 33 4e 46 52 54 78 38 54 6a 56 47 4b 56 64 6b 53 31 6c 57 4d 53 70 61 56 6b 39 74 49 58 56 41 61 48 4a 69 55 79 70 5a 50 55 59 33 53 45 39 41 56 58 31 58 63 6a 59 71 61 6d 38 30 64 57 42 45 4e 46 55 35 59 32 51 30 53 45 59 6b 4b 58 5a 69 59 32 63 32 50 31 55 6a 65 58 Data Ascii: set-cookie: sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUY7MnVWNUplfT5RWG0-PXNHLX5AbnxMPzdxKFVucDNoc2FgWEZPSm5MTEF2ZmZIKCRjOzEqa01QdDdGfCt5SStKS3NFRTx8TjVGKVdkS1lWMSpaVk9tIXVAaHJiUypZPUY3SE9AVX1XcjYqam80dWBENFU5Y2Q0SEYkKXZiY2c2P1UjeX
2024-03-11 11:57:20 UTC	1369	IN	Data Raw: 31 37 38 65 0d 0a 7b 22 66 6f 6c 6c 6f 77 69 6e 67 22 3a 20 66 61 6c 73 65 2c 20 22 66 6f 6c 6c 6f 77 65 65 22 3a 20 7b 22 61 63 74 69 76 69 74 79 5f 6e 61 6d 65 22 3a 20 22 44 6f 63 46 65 74 63 68 65 72 22 2c 20 22 61 63 74 69 76 69 74 79 5f 75 72 6c 22 3a 20 22 2f 70 2f 64 6f 63 66 65 74 63 68 65 72 2f 22 2c 20 22 61 63 74 69 76 69 74 79 5f 65 78 74 72 61 73 22 3a 20 7b 7d 7d 2c 20 22 74 69 6d 65 6c 69 6e 65 22 3a 20 5b 7b 22 70 75 62 6c 69 73 68 65 64 22 3a 20 31 37 30 39 36 34 30 39 32 38 30 30 30 2c 20 22 61 63 74 6f 72 22 3a 20 7b 22 61 63 74 69 76 69 74 79 5f 65 78 74 72 61 73 22 3a 20 7b 22 61 6c 6c 75 72 61 5f 69 64 22 3a 20 22 55 73 65 72 3a 34 63 66 31 61 38 36 31 62 39 33 36 33 63 30 64 35 30 30 30 30 35 64 36 22 2c 20 22 69 63 6f 6e 5f 75 72 Data Ascii: 178e{"following": false, "followee": {"activity_name": "DocFetcher", "activity_url": "/p/docfetcher/", "activity_extras": {}}, "timeline": [{"published": 1709640928000, "actor": {"activity_extras": {"allura_id": "User:4cf1a861b9363c0d500005d6", "icon_ur
2024-03-11 11:57:20 UTC	1369	IN	Data Raw: 6c 6c 75 72 61 5f 69 64 22 3a 20 22 55 73 65 72 3a 36 35 65 36 64 38 35 39 35 35 33 32 37 37 63 35 61 63 65 62 36 35 65 30 22 2c 20 22 69 63 6f 6e 5f 75 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 61 2e 66 73 64 6e 2e 63 6f 6d 2f 61 6c 6c 75 72 61 2f 75 2f 61 6e 64 72 77 2f 75 73 65 72 5f 69 63 6f 6e 22 7d 2c 20 22 61 63 74 69 76 69 74 79 5f 6e 61 6d 65 22 3a 20 22 41 6e 64 72 65 6a 20 52 6f 68 6c 5c 75 30 30 65 64 6e 65 6b 22 2c 20 22 6e 6f 64 65 5f 69 64 22 3a 20 22 55 73 65 72 3a 36 35 65 36 64 38 35 39 35 35 33 32 37 37 63 35 61 63 65 62 36 35 65 30 22 2c 20 22 61 63 74 69 76 69 74 79 5f 75 72 6c 22 3a 20 22 2f 75 2f 61 6e 64 72 77 2f 70 72 6f 66 69 6c 65 2f 22 7d 2c 20 22 76 65 72 62 22 3a 20 22 70 6f 73 74 65 64 22 2c 20 22 6f 62 6a 22 3a 20 7b 22 61 Data Ascii: llura_id": "User:65e6d859553277c5aceb65e0", "icon_url": "https://a.fsdn.com/allura/u/andrw/user_icon"}, "activity_name": "Andrej Rohl\u00ednek", "node_id": "User:65e6d859553277c5aceb65e0", "activity_url": "/u/andrw/profile/"}, "verb": "posted", "obj": {"a
2024-03-11 11:57:20 UTC	1369	IN	Data Raw: 63 68 61 74 67 70 74 20 34 20 74 6f 2e 2e 2e 20 77 72 69 74 65 20 6d 65 20 61 20 70 79 74 68 6f 6e 20 73 63 72 69 70 74 20 77 69 74 68 20 47 55 49 20 74 68 61 74 20 6c 65 74 20 6d 65 20 73 65 6c 65 63 74 20 66 69 6c 65 2f 66 69 6c 65 73 20 61 6e 64 20 64 6f 20 72 65 63 75 72 73 69 76 65 6c 79 2c 20 74 68 6f 73 65 20 77 69 6c 6c 20 62 65 20 6a 70 65 67 20 69 6d 61 67 65 20 66 69 6c 65 73 2e 20 66 6f 72 20 65 61 63 68 20 66 69 6c 65 2c 20 64 6f 20 4f 43 52 20 6f 6e 20 74 68 65 6d 20 74 68 72 75 20 74 65 73 73 61 72 63 74 2c 20 61 6e 64 20 77 72 69 74 65 20 74 68 65 20 69 6e 66 6f 20 69 6e 74 6f 20 74 68 65 20 65 78 69 66 2e 20 6c 65 74 20 6d 65 20 63 68 6f 6f 73 65 20 74 68 65 20 6c 61 6e 67 75 61 67 65 20 69 6e 20 74 68 65 20 47 55 49 2e 20 69 74 20 77 6f Data Ascii: chatgpt 4 to... write me a python script with GUI that let me select file/files and do recursively, those will be jpeg image files. for each file, do OCR on them thru tessarct, and write the info into the exif. let me choose the language in the GUI. it wo
2024-03-11 11:57:20 UTC	1369	IN	Data Raw: 20 73 65 6c 65 63 74 20 66 69 6c 65 2f 66 69 6c 65 73 20 61 6e 64 20 64 6f 20 72 65 63 75 72 73 69 76 65 6c 79 2c 20 74 68 6f 73 65 20 77 69 6c 6c 20 62 65 20 6a 70 65 67 20 69 6d 61 67 65 20 66 69 6c 65 73 2e 20 66 6f 72 20 65 61 63 68 20 66 69 6c 65 2c 20 64 6f 20 4f 43 52 20 6f 6e 20 74 68 65 6d 20 74 68 72 75 20 74 65 73 73 61 72 63 74 2c 20 61 6e 64 20 77 72 69 74 65 20 74 68 65 20 69 6e 66 6f 20 69 6e 74 6f 20 74 68 65 20 65 78 69 66 2e 20 6c 65 74 20 6d 65 20 63 68 6f 6f 73 65 20 74 68 65 20 6c 61 6e 67 75 61 67 65 20 69 6e 20 74 68 65 20 47 55 49 2e 20 69 74 20 77 6f 6e 74 20 62 65 20 64 69 66 66 69 63 75 6c 74 2c 20 69 20 72 65 63 65 6e 74 6c 79 20 61 73 6b 65 64 20 66 6f 72 20 70 79 74 68 6f 6e 20 73 63 72 69 70 74 20 2f 77 20 47 55 49 20 74 6f Data Ascii: select file/files and do recursively, those will be jpeg image files. for each file, do OCR on them thru tessarct, and write the info into the exif. let me choose the language in the GUI. it wont be difficult, i recently asked for python script /w GUI to
2024-03-11 11:57:20 UTC	562	IN	Data Raw: 6d 65 64 69 75 6d 2d 73 69 7a 65 64 20 73 6f 66 74 77 61 72 65 20 70 72 6f 6a 65 63 74 73 29 20 69 73 20 61 20 63 6f 6d 70 6c 65 78 20 6d 61 63 68 69 6e 65 20 77 68 65 72 65 20 65 76 65 72 79 74 68 69 6e 67 20 69 73 20 63 6f 6e 6e 65 63 74 65 64 2e 20 45 76 65 72 79 74 68 69 6e 67 20 69 73 20 63 6f 6e 6e 65 63 74 65 64 20 3d 20 63 75 72 72 65 6e 74 20 41 49 20 63 61 6e 27 74 20 75 6e 64 65 72 73 74 61 6e 64 20 69 74 20 64 65 65 70 6c 79 20 65 6e 6f 75 67 68 20 3d 20 41 49 20 63 61 6e 27 74 20 63 6f 6e 74 72 69 62 75 74 65 20 64 69 72 65 63 74 6c 79 20 61 73 20 61 20 64 65 76 65 6c 6f 70 65 72 2e 22 7d 2c 20 22 61 63 74 69 76 69 74 79 5f 6e 61 6d 65 22 3a 20 22 61 20 63 6f 6d 6d 65 6e 74 22 2c 20 22 61 63 74 69 76 69 74 79 5f 75 72 6c 22 3a 20 22 2f 70 2f Data Ascii: medium-sized software projects) is a complex machine where everything is connected. Everything is connected = current AI can't understand it deeply enough = AI can't contribute directly as a developer."}, "activity_name": "a comment", "activity_url": "/p/
2024-03-11 11:57:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
562	192.168.2.16	50556	23.83.76.44	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:20 UTC	1059	OUT	GET /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:20 UTC	123	IN	HTTP/1.1 405 Method Not Allowed content-length: 0 date: Mon, 11 Mar 2024 11:57:20 GMT allow: POST connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
563	192.168.2.16	50563	52.9.62.96	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:20 UTC	434	OUT	GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:21 UTC	101	IN	HTTP/1.1 404 Not Found Date: Mon, 11 Mar 2024 11:57:20 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
564	192.168.2.16	50564	52.27.166.248	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:20 UTC	413	OUT	GET /rtb/bid?src=prebid_prebid_8.13.0 HTTP/1.1 Host: ap.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=ITYsABZHyF-4XRyhT4uuZCmM
2024-03-11 11:57:21 UTC	271	IN	HTTP/1.1 204 No Content Date: Mon, 11 Mar 2024 11:57:21 GMT Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
565	192.168.2.16	50566	104.26.2.70	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:20 UTC	607	OUT	GET /px.gif?ch=1&e=0.07056342703533591 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:21 UTC	1144	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:21 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPpGGNTgZsoRij7ebx0tkB7iGg9XbLdoonjCwCI4eplpM45CJtOkYxgyWfcdATXohbGZkEDdQqwQmA x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Expires: Fri, 01 Mar 2024 20:35:25 GMT Cache-Control: public, max-age=86400 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" Age: 836516 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Uy7BmmoQCVyKL9hzxSUhJXjv8lNb%2Ftyu7qTUDrpbzl1hMObeDEbMnKQBp3bJBqn477nxPlzwRIAXH2RK7oLh6%2B2OsgHr3dUhnhwKyksA6QnrmOu8Wp9VG%2Fzdbnaso%2Fx1UA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 862b5dcecfd009ff-LAS
2024-03-11 11:57:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
566	192.168.2.16	50565	104.26.2.70	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:20 UTC	686	OUT	GET /px.gif?ch=2 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "ad4b0f606e0f8465bc4c4c170b37e1a3" If-Modified-Since: Wed, 05 May 2021 19:25:32 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:21 UTC	1087	IN	HTTP/1.1 304 Not Modified Date: Mon, 11 Mar 2024 11:57:21 GMT Connection: close X-GUploader-UploadID: ABPtcPpGGNTgZsoRij7ebx0tkB7iGg9XbLdoonjCwCI4eplpM45CJtOkYxgyWfcdATXohbGZkEDdQqwQmA x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Expires: Fri, 01 Mar 2024 20:35:25 GMT Cache-Control: public, max-age=86400 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" Age: 836516 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fiNC776z3TReYZJ6DfXpjPiTpkL8TPsasvqNQ%2BsD0bbFLkzupx8xMg%2BdoXyMwtofC9g0drKsLUjtZ%2FQWavEAjjNEmK1Gljf0BXYf02BfRRDlmtvvyT%2F6VNRbgXCHq90Mag%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 862b5dcecfe20a03-LAS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
567	192.168.2.16	50567	23.83.76.44	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:21 UTC	1059	OUT	GET /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:21 UTC	123	IN	HTTP/1.1 405 Method Not Allowed content-length: 0 date: Mon, 11 Mar 2024 11:57:20 GMT allow: POST connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
568	192.168.2.16	50570	172.64.150.145	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:21 UTC	1374	OUT	GET /rest/p/docfetcher/activity?limit=5 HTTP/1.1 Host: sourceforge.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; OAID=e012d283a5e1eae18062d3edb9725359; _gid=GA1.2.1668299401.1710158203; __gads=ID=ed8d538436f1b623:T=1710158205:RT=1710158205:S=ALNI_MbiYxvEWP7dZiJkctj8HGzhHyMpCg; __gpi=UID=00000dc711cb5676:T=1710158205:RT=1710158205:S=ALNI_MbtGcDgo6RHjTtG2es2mbdsN1jDSw; __eoi=ID=ccb10672a4298c0a:T=1710158205:RT=1710158205:S=AA-AfjZQQCnCz9TlsGBpH19Z0_Y8; _ga=GA1.1.1854926735.1710158203; _ga_1H226E4E4L=GS1.1.1710158208.1.1.1710158238.0.0.0; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUY7MnVWNUplfT5RWG0-PXNHLX5AbnxMPzdxKFVucDNoc2FgWEZPSm5MTEF2ZmZIKCRjOzEqa01QdDdGfCt5SStKS3NFRTx8TjVGKVdkS1lWMSpaVk9tIXVAaHJiUypZPUY3SE9AVX1XcjYqam80dWBENFU5Y2Q0SEYkKXZiY2c2P1UjeXV9I2xnOC1tNFBrKXVENDZmODN4bThSSUVZZU4pRCpCSTJrYU1LU2lKbSFoaEM-TW8rbytpYW56SWExVWhEdHAtb1Q4eSppbVBtYyh-TTlvXllxQDJvMVNnNGgzdSpiI0FXaEIrNlchcmZUVjFIcnpNZiM4RmVGT09NejF1fXQtV0g1RlIhTmxnel9vTTYwKTd2QHw1fE8rb3dkMlJIKD1LdU4wPExtY3tyIn0.S4BMK9ORnLmioS9AuJC5dIJmbUJP7YDRx2c-zH2qscY
2024-03-11 11:57:21 UTC	1234	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:21 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache pragma: no-cache content-security-policy: object-src 'none'; script-src-attr 'none' 'report-sample'; script-src 'self' a.fsdn.com .sf-syn.com .slashdotmedia.com ml314.com .cloudflareinsights.com .doubleclick.net .google.com .googlesyndication.com .google-analytics.com .googletagmanager.com .googletagservices.com .consentmanager.net .microsofttranslator.com .googleapis.com 'unsafe-inline' 'unsafe-eval' 'report-sample'; report-uri https://sourceforge.report-uri.com/r/d/csp/enforce; upgrade-insecure-requests; form-action 'self'; frame-src 'self' .sf-syn.com .google.com .googlesyndication.com .safeframe.usercontent.goog .doubleclick.net .recaptcha.net recaptcha.net www.youtube-nocookie.com .youtube.com .stripe.com .plaid.com .prosperstack.com *.consentmanager.net; frame-ancestors 'self' permissions-policy: microphone=(), geolocation=(), camera=(), document-domain=(), display-capture=(), autoplay=() feature-policy: microphone 'none'; geolocation 'none'; camera 'none'; document-domain 'none'; display 'none'; autoplay 'none'
2024-03-11 11:57:21 UTC	813	IN	Data Raw: 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 73 6f 75 72 63 65 66 6f 72 67 65 3d 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 69 63 31 6f 69 4f 69 4a 6a 4c 57 77 2d 62 55 74 2d 51 6c 4a 72 4e 55 70 6c 66 46 4a 54 63 79 70 79 56 7a 45 32 57 6a 77 79 56 7a 52 44 52 6c 34 7a 54 48 70 74 52 48 6b 72 5a 46 55 39 50 45 5a 53 4e 55 4d 37 50 6d 49 78 64 69 4d 30 4a 45 70 75 62 31 51 31 64 55 55 68 4d 32 38 6b 58 6d 45 77 4e 6c 39 4d 5a 6c 6c 79 50 55 42 38 54 47 4a 6b 53 6d 35 46 66 6c 67 6d 51 31 34 68 53 30 4e 36 4f 54 45 68 4d 45 68 61 4e 58 74 44 63 45 52 76 4a 6b 55 6d 55 6d 4e 6c 4c 54 63 6d 5a 6b 41 35 64 6a 68 30 5a 45 77 35 59 32 51 30 53 45 59 6b 4b 58 5a 69 59 32 63 32 50 6b 70 71 5a 55 Data Ascii: set-cookie: sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUt-QlJrNUplfFJTcypyVzE2WjwyVzRDRl4zTHptRHkrZFU9PEZSNUM7PmIxdiM0JEpub1Q1dUUhM28kXmEwNl9MZllyPUB8TGJkSm5FflgmQ14hS0N6OTEhMEhaNXtDcERvJkUmUmNlLTcmZkA5djh0ZEw5Y2Q0SEYkKXZiY2c2PkpqZU
2024-03-11 11:57:21 UTC	1369	IN	Data Raw: 31 37 38 65 0d 0a 7b 22 66 6f 6c 6c 6f 77 69 6e 67 22 3a 20 66 61 6c 73 65 2c 20 22 66 6f 6c 6c 6f 77 65 65 22 3a 20 7b 22 61 63 74 69 76 69 74 79 5f 6e 61 6d 65 22 3a 20 22 44 6f 63 46 65 74 63 68 65 72 22 2c 20 22 61 63 74 69 76 69 74 79 5f 75 72 6c 22 3a 20 22 2f 70 2f 64 6f 63 66 65 74 63 68 65 72 2f 22 2c 20 22 61 63 74 69 76 69 74 79 5f 65 78 74 72 61 73 22 3a 20 7b 7d 7d 2c 20 22 74 69 6d 65 6c 69 6e 65 22 3a 20 5b 7b 22 70 75 62 6c 69 73 68 65 64 22 3a 20 31 37 30 39 36 34 30 39 32 38 30 30 30 2c 20 22 61 63 74 6f 72 22 3a 20 7b 22 61 63 74 69 76 69 74 79 5f 65 78 74 72 61 73 22 3a 20 7b 22 61 6c 6c 75 72 61 5f 69 64 22 3a 20 22 55 73 65 72 3a 34 63 66 31 61 38 36 31 62 39 33 36 33 63 30 64 35 30 30 30 30 35 64 36 22 2c 20 22 69 63 6f 6e 5f 75 72 Data Ascii: 178e{"following": false, "followee": {"activity_name": "DocFetcher", "activity_url": "/p/docfetcher/", "activity_extras": {}}, "timeline": [{"published": 1709640928000, "actor": {"activity_extras": {"allura_id": "User:4cf1a861b9363c0d500005d6", "icon_ur
2024-03-11 11:57:21 UTC	1369	IN	Data Raw: 6c 6c 75 72 61 5f 69 64 22 3a 20 22 55 73 65 72 3a 36 35 65 36 64 38 35 39 35 35 33 32 37 37 63 35 61 63 65 62 36 35 65 30 22 2c 20 22 69 63 6f 6e 5f 75 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 61 2e 66 73 64 6e 2e 63 6f 6d 2f 61 6c 6c 75 72 61 2f 75 2f 61 6e 64 72 77 2f 75 73 65 72 5f 69 63 6f 6e 22 7d 2c 20 22 61 63 74 69 76 69 74 79 5f 6e 61 6d 65 22 3a 20 22 41 6e 64 72 65 6a 20 52 6f 68 6c 5c 75 30 30 65 64 6e 65 6b 22 2c 20 22 6e 6f 64 65 5f 69 64 22 3a 20 22 55 73 65 72 3a 36 35 65 36 64 38 35 39 35 35 33 32 37 37 63 35 61 63 65 62 36 35 65 30 22 2c 20 22 61 63 74 69 76 69 74 79 5f 75 72 6c 22 3a 20 22 2f 75 2f 61 6e 64 72 77 2f 70 72 6f 66 69 6c 65 2f 22 7d 2c 20 22 76 65 72 62 22 3a 20 22 70 6f 73 74 65 64 22 2c 20 22 6f 62 6a 22 3a 20 7b 22 61 Data Ascii: llura_id": "User:65e6d859553277c5aceb65e0", "icon_url": "https://a.fsdn.com/allura/u/andrw/user_icon"}, "activity_name": "Andrej Rohl\u00ednek", "node_id": "User:65e6d859553277c5aceb65e0", "activity_url": "/u/andrw/profile/"}, "verb": "posted", "obj": {"a
2024-03-11 11:57:21 UTC	1369	IN	Data Raw: 63 68 61 74 67 70 74 20 34 20 74 6f 2e 2e 2e 20 77 72 69 74 65 20 6d 65 20 61 20 70 79 74 68 6f 6e 20 73 63 72 69 70 74 20 77 69 74 68 20 47 55 49 20 74 68 61 74 20 6c 65 74 20 6d 65 20 73 65 6c 65 63 74 20 66 69 6c 65 2f 66 69 6c 65 73 20 61 6e 64 20 64 6f 20 72 65 63 75 72 73 69 76 65 6c 79 2c 20 74 68 6f 73 65 20 77 69 6c 6c 20 62 65 20 6a 70 65 67 20 69 6d 61 67 65 20 66 69 6c 65 73 2e 20 66 6f 72 20 65 61 63 68 20 66 69 6c 65 2c 20 64 6f 20 4f 43 52 20 6f 6e 20 74 68 65 6d 20 74 68 72 75 20 74 65 73 73 61 72 63 74 2c 20 61 6e 64 20 77 72 69 74 65 20 74 68 65 20 69 6e 66 6f 20 69 6e 74 6f 20 74 68 65 20 65 78 69 66 2e 20 6c 65 74 20 6d 65 20 63 68 6f 6f 73 65 20 74 68 65 20 6c 61 6e 67 75 61 67 65 20 69 6e 20 74 68 65 20 47 55 49 2e 20 69 74 20 77 6f Data Ascii: chatgpt 4 to... write me a python script with GUI that let me select file/files and do recursively, those will be jpeg image files. for each file, do OCR on them thru tessarct, and write the info into the exif. let me choose the language in the GUI. it wo
2024-03-11 11:57:21 UTC	1369	IN	Data Raw: 20 73 65 6c 65 63 74 20 66 69 6c 65 2f 66 69 6c 65 73 20 61 6e 64 20 64 6f 20 72 65 63 75 72 73 69 76 65 6c 79 2c 20 74 68 6f 73 65 20 77 69 6c 6c 20 62 65 20 6a 70 65 67 20 69 6d 61 67 65 20 66 69 6c 65 73 2e 20 66 6f 72 20 65 61 63 68 20 66 69 6c 65 2c 20 64 6f 20 4f 43 52 20 6f 6e 20 74 68 65 6d 20 74 68 72 75 20 74 65 73 73 61 72 63 74 2c 20 61 6e 64 20 77 72 69 74 65 20 74 68 65 20 69 6e 66 6f 20 69 6e 74 6f 20 74 68 65 20 65 78 69 66 2e 20 6c 65 74 20 6d 65 20 63 68 6f 6f 73 65 20 74 68 65 20 6c 61 6e 67 75 61 67 65 20 69 6e 20 74 68 65 20 47 55 49 2e 20 69 74 20 77 6f 6e 74 20 62 65 20 64 69 66 66 69 63 75 6c 74 2c 20 69 20 72 65 63 65 6e 74 6c 79 20 61 73 6b 65 64 20 66 6f 72 20 70 79 74 68 6f 6e 20 73 63 72 69 70 74 20 2f 77 20 47 55 49 20 74 6f Data Ascii: select file/files and do recursively, those will be jpeg image files. for each file, do OCR on them thru tessarct, and write the info into the exif. let me choose the language in the GUI. it wont be difficult, i recently asked for python script /w GUI to
2024-03-11 11:57:21 UTC	562	IN	Data Raw: 6d 65 64 69 75 6d 2d 73 69 7a 65 64 20 73 6f 66 74 77 61 72 65 20 70 72 6f 6a 65 63 74 73 29 20 69 73 20 61 20 63 6f 6d 70 6c 65 78 20 6d 61 63 68 69 6e 65 20 77 68 65 72 65 20 65 76 65 72 79 74 68 69 6e 67 20 69 73 20 63 6f 6e 6e 65 63 74 65 64 2e 20 45 76 65 72 79 74 68 69 6e 67 20 69 73 20 63 6f 6e 6e 65 63 74 65 64 20 3d 20 63 75 72 72 65 6e 74 20 41 49 20 63 61 6e 27 74 20 75 6e 64 65 72 73 74 61 6e 64 20 69 74 20 64 65 65 70 6c 79 20 65 6e 6f 75 67 68 20 3d 20 41 49 20 63 61 6e 27 74 20 63 6f 6e 74 72 69 62 75 74 65 20 64 69 72 65 63 74 6c 79 20 61 73 20 61 20 64 65 76 65 6c 6f 70 65 72 2e 22 7d 2c 20 22 61 63 74 69 76 69 74 79 5f 6e 61 6d 65 22 3a 20 22 61 20 63 6f 6d 6d 65 6e 74 22 2c 20 22 61 63 74 69 76 69 74 79 5f 75 72 6c 22 3a 20 22 2f 70 2f Data Ascii: medium-sized software projects) is a complex machine where everything is connected. Everything is connected = current AI can't understand it deeply enough = AI can't contribute directly as a developer."}, "activity_name": "a comment", "activity_url": "/p/
2024-03-11 11:57:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
569	192.168.2.16	50571	104.18.37.111	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:21 UTC	1648	OUT	GET /directory/tp3/?b=69705&c=13445&z=67087&cb=000f291466 HTTP/1.1 Host: sourceforge.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/projects/docfetcher/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; OAID=e012d283a5e1eae18062d3edb9725359; _gid=GA1.2.1668299401.1710158203; __gads=ID=ed8d538436f1b623:T=1710158205:RT=1710158205:S=ALNI_MbiYxvEWP7dZiJkctj8HGzhHyMpCg; __gpi=UID=00000dc711cb5676:T=1710158205:RT=1710158205:S=ALNI_MbtGcDgo6RHjTtG2es2mbdsN1jDSw; __eoi=ID=ccb10672a4298c0a:T=1710158205:RT=1710158205:S=AA-AfjZQQCnCz9TlsGBpH19Z0_Y8; _ga=GA1.1.1854926735.1710158203; _ga_1H226E4E4L=GS1.1.1710158208.1.1.1710158238.0.0.0; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUY7MnVWNUplfT5RWG0-PXNHLX5AbnxMPzdxKFVucDNoc2FgWEZPSm5MTEF2ZmZIKCRjOzEqa01QdDdGfCt5SStKS3NFRTx8TjVGKVdkS1lWMSpaVk9tIXVAaHJiUypZPUY3SE9AVX1XcjYqam80dWBENFU5Y2Q0SEYkKXZiY2c2P1UjeXV9I2xnOC1tNFBrKXVENDZmODN4bThSSUVZZU4pRCpCSTJrYU1LU2lKbSFoaEM-TW8rbytpYW56SWExVWhEdHAtb1Q4eSppbVBtYyh-TTlvXllxQDJvMVNnNGgzdSpiI0FXaEIrNlchcmZUVjFIcnpNZiM4RmVGT09NejF1fXQtV0g1RlIhTmxnel9vTTYwKTd2QHw1fE8rb3dkMlJIKD1LdU4wPExtY3tyIn0.S4BMK9ORnLmioS9AuJC5dIJmbUJP7YDRx2c-zH2qscY
2024-03-11 11:57:21 UTC	649	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:21 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-powered-by: PHP/5.3.29 pragma: no-cache Cache-Control: private, max-age=0, no-cache expires: Mon, 26 Jul 1997 05:00:00 GMT p3p: CP="CUR ADM OUR NOR STA NID" set-cookie: OAID=e012d283a5e1eae18062d3edb9725359; expires=Tue, 11-Mar-2025 11:57:21 GMT; path=/ x-frame-options: SameOrigin x-content-type-options: nosniff content-security-policy: frame-ancestors 'self'; upgrade-insecure-requests x-robots-tag: noindex CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 862b5dd09eea09ef-LAS alt-svc: h3=":443"; ma=86400
2024-03-11 11:57:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
570	192.168.2.16	50574	104.254.148.252	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:21 UTC	589	OUT	GET /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=7822940101119878936; XANDR_PANID=3nI6clyYzfbnEpT9fRyZHeeDLf-D2s87ENd4pOyw4BFTVoas2vYN3I0kAmg30iZxhJeWONbdfUtKXwuvlFOruOXDykPNWOUWZiMtJDNoxzc.; receive-cookie-deprecation=1; icu=ChgIkPoyEAoYAyADKAMwoOO7rwY4A0ADSAMQoOO7rwYYAg..
2024-03-11 11:57:21 UTC	1360	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Mon, 11 Mar 2024 11:57:21 GMT Content-Type: application/json; charset=utf-8 Content-Length: 57 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: d8c8fac2-241f-435f-89c8-9943ff6cfc89 Set-Cookie: XANDR_PANID=3nI6clyYzfbnEpT9fRyZHeeDLf-D2s87ENd4pOyw4BFTVoas2vYN3I0kAmg30iZxhJeWONbdfUtKXwuvlFOruOXDykPNWOUWZiMtJDNoxzc.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:21 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 27-Feb-2034 11:57:21 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=7822940101119878936; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:21 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.105.38; 154.16.105.38; 894.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com
2024-03-11 11:57:21 UTC	57	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6a 73 6f 6e 70 20 72 65 71 75 69 72 65 73 20 61 20 75 72 69 65 6e 63 6f 64 65 64 20 71 75 65 72 79 73 74 72 69 6e 67 20 70 61 72 61 6d 22 7d Data Ascii: {"error":"jsonp requires a uriencoded querystring param"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
571	192.168.2.16	50580	104.26.2.70	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:21 UTC	372	OUT	GET /px.gif?ch=1&e=0.07056342703533591 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:21 UTC	1146	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:21 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPpGGNTgZsoRij7ebx0tkB7iGg9XbLdoonjCwCI4eplpM45CJtOkYxgyWfcdATXohbGZkEDdQqwQmA x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Expires: Fri, 01 Mar 2024 20:35:25 GMT Cache-Control: public, max-age=86400 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" Age: 836516 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zHBwJiFgN8yzrabZnHowXh2%2F3NUSJ6hD%2Bqna0Ke5fFXTgKBLQtQ0U477gKOAr9AfwcrJpj4HkuyF1eFbto8wqL9Z1fWi1qQQKNOO%2BksQ2rM45XMwzesJHx%2FdnAor%2BzXK8w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 862b5dd308390adb-LAS
2024-03-11 11:57:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
572	192.168.2.16	50575	52.9.62.96	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:21 UTC	434	OUT	GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:21 UTC	101	IN	HTTP/1.1 404 Not Found Date: Mon, 11 Mar 2024 11:57:21 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
573	192.168.2.16	50579	107.178.240.89	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:21 UTC	1231	OUT	GET /engine?site=143572;size=1x1;e=0;dt=0;category=twljteyw08d;kw=ew37vtvpnj;rnd=(1710158240574) HTTP/1.1 Host: pbid.pro-market.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%23; anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=1-71dcd657-b7ce-4e56-9064-0f83979f8fcb:13-7822940101119878936:24-B6512778B5DA4E7C942E6E491CF4A04A:53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553:85-2407834391265652961"
2024-03-11 11:57:21 UTC	511	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" ANServer: gapp2 Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 1 Jan 1990 0:0:0 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html Vary: Accept-Encoding Date: Mon, 11 Mar 2024 11:57:21 GMT Via: 1.1 google Alt-Svc: clear Connection: close Transfer-Encoding: chunked
2024-03-11 11:57:21 UTC	736	IN	Data Raw: 32 64 34 0d 0a 20 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 72 69 67 68 74 6d 61 72 67 69 6e 3d 30 20 6c 65 66 74 6d 61 72 67 69 6e 3d 30 20 74 6f 70 6d 61 72 67 69 6e 3d 30 20 62 6f 74 74 6f 6d 6d 61 72 67 69 6e 3d 30 3e 3c 21 2d 2d 20 2d 2d 3e 3c 53 43 52 49 50 54 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 74 72 79 20 7b 0d 0a 76 61 72 20 47 5f 50 55 42 4c 49 53 48 45 52 5f 49 44 20 3d 22 31 34 33 35 37 32 22 3b 0d 0a 76 61 72 20 47 5f 44 55 5f 44 49 53 20 3d 20 22 39 38 2c 31 30 2c 32 35 22 3b 0d 0a 76 61 72 20 47 5f 56 49 53 49 54 4f 52 5f 49 44 20 3d 20 22 2d 32 35 33 33 34 31 31 36 36 37 36 35 33 36 30 33 39 37 39 22 3b 0d 0a 76 61 72 20 47 5f 56 49 53 49 54 4f 52 5f 49 44 5f 45 36 34 20 3d 20 22 4c 54 49 31 4d 7a 4d 30 Data Ascii: 2d4 <html><body rightmargin=0 leftmargin=0 topmargin=0 bottommargin=0>... --><SCRIPT type="text/javascript">try {var G_PUBLISHER_ID ="143572";var G_DU_DIS = "98,10,25";var G_VISITOR_ID = "-2533411667653603979";var G_VISITOR_ID_E64 = "LTI1MzM0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
574	192.168.2.16	50581	130.211.23.194	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:21 UTC	750	OUT	GET /pv?tid=SZ50vnK0&w=5483815487668224&o=5098683085881344&cv=2.1.38-1-g3a5ff56&widget=false&r=false&vr=1280x907&pageURL=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2F&sid=nZZIdvDKz&pm=false&upapi=true HTTP/1.1 Host: api.btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:21 UTC	255	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Vary: Origin Date: Mon, 11 Mar 2024 11:57:21 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
575	192.168.2.16	50572	52.11.39.206	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:21 UTC	555	OUT	GET /ping_match.gif?st=FREEWHEEL&rurl=https%3A%2F%2Fads.stickyadstv.com%2Fuser-registering%3FdataProviderId%3D593&userId=_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1 Host: pm.w55c.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=rQpbF21I1RJEgU5; matchpubmatic=5; matchbidswitch=5
2024-03-11 11:57:21 UTC	736	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Mon, 11 Mar 2024 11:57:20 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://ads.stickyadstv.com/user-registering?dataProviderId=593&userId=rQpbF21I1RJEgU5&gdpr=0&gdpr_consent= Pragma: no-cache Server: PingMatch/v2.0.30-801-g0076fb7#rel-ec2-master i-0991768c636277b6e@us-west-2c@dxedge-app-us-west-2-prod-asg Set-Cookie: wfivefivec=rQpbF21I1RJEgU5; Domain=.w55c.net; Expires=Fri, 11 Apr 2025 11:57:21 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchfreewheel=5; Domain=.w55c.net; Expires=Wed, 10 Apr 2024 11:57:21 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
576	192.168.2.16	50582	23.83.76.44	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:21 UTC	1059	OUT	GET /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:22 UTC	123	IN	HTTP/1.1 405 Method Not Allowed content-length: 0 date: Mon, 11 Mar 2024 11:57:21 GMT allow: POST connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
577	192.168.2.16	50573	34.232.140.51	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:21 UTC	624	OUT	GET /s1.js?d=2396&cb=1710158239756 HTTP/1.1 Host: tag.crsspxl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=693098949688747066; uuid=c80b7ee4-92fa-4d71-9444-870d4e377528; re=1
2024-03-11 11:57:22 UTC	792	IN	HTTP/1.1 200 Set-Cookie: re=1; Domain=.crsspxl.com; Expires=Fri, 10-May-2024 11:57:21 UTC; Path=/; SameSite=None; Secure Set-Cookie: uid=693098949688747066; Domain=.crsspxl.com; Expires=Fri, 10-May-2024 11:57:21 UTC; Path=/; SameSite=None; Secure P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Set-Cookie: re=1; Domain=.crsspxl.com; Expires=Fri, 10-May-2024 11:57:21 UTC; Path=/; SameSite=None; Secure Set-Cookie: uuid=c80b7ee4-92fa-4d71-9444-870d4e377528; Domain=.crsspxl.com; Expires=Fri, 10-May-2024 11:57:21 UTC; Path=/; SameSite=None; Secure P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Content-Type: text/javascript Content-Length: 1780 Vary: Accept-Encoding Date: Mon, 11 Mar 2024 11:57:21 GMT Connection: close
2024-03-11 11:57:22 UTC	1780	IN	Data Raw: 76 61 72 20 63 70 5f 43 34 77 31 6c 64 4e 32 64 39 50 6d 56 72 6b 4e 3d 63 70 5f 43 34 77 31 6c 64 4e 32 64 39 50 6d 56 72 6b 4e 7c 7c 7b 7d 3b 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 3b 74 72 79 7b 64 3d 74 6f 70 2e 64 6f 63 75 6d 65 6e 74 7d 63 61 74 63 68 28 65 30 29 7b 74 72 79 7b 64 3d 64 6f 63 75 6d 65 6e 74 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 5f 65 28 63 2c 6d 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 63 72 73 73 70 78 6c 28 7a 29 7b 69 66 28 64 2e 62 6f 64 79 3d 3d 6e 75 6c 6c 7c 7c 74 79 70 65 6f 66 20 64 2e 62 6f 64 79 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 69 66 28 7a 3c 32 35 30 30 29 7b 76 61 72 20 72 65 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 72 73 73 70 78 6c 28 7a 2a 32 29 7d 3b 73 65 Data Ascii: var cp_C4w1ldN2d9PmVrkN=cp_C4w1ldN2d9PmVrkN\|\|{};try{(function(){var d;try{d=top.document}catch(e0){try{d=document}catch(e){}}function _e(c,m){}function crsspxl(z){if(d.body==null\|\|typeof d.body=="undefined"){if(z<2500){var rec=function(){crsspxl(z*2)};se

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
578	192.168.2.16	50584	172.64.150.145	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:21 UTC	1392	OUT	GET /directory/tp3/?b=69705&c=13445&z=67087&cb=000f291466 HTTP/1.1 Host: sourceforge.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: VISITOR=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f; OAID=e012d283a5e1eae18062d3edb9725359; _gid=GA1.2.1668299401.1710158203; __gads=ID=ed8d538436f1b623:T=1710158205:RT=1710158205:S=ALNI_MbiYxvEWP7dZiJkctj8HGzhHyMpCg; __gpi=UID=00000dc711cb5676:T=1710158205:RT=1710158205:S=ALNI_MbtGcDgo6RHjTtG2es2mbdsN1jDSw; __eoi=ID=ccb10672a4298c0a:T=1710158205:RT=1710158205:S=AA-AfjZQQCnCz9TlsGBpH19Z0_Y8; _ga_1H226E4E4L=GS1.1.1710158208.1.1.1710158238.0.0.0; sourceforge=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJic1oiOiJjLWw-bUY7MnVWNUplfT5RWG0-PXNHLX5AbnxMPzdxKFVucDNoc2FgWEZPSm5MTEF2ZmZIKCRjOzEqa01QdDdGfCt5SStKS3NFRTx8TjVGKVdkS1lWMSpaVk9tIXVAaHJiUypZPUY3SE9AVX1XcjYqam80dWBENFU5Y2Q0SEYkKXZiY2c2P1UjeXV9I2xnOC1tNFBrKXVENDZmODN4bThSSUVZZU4pRCpCSTJrYU1LU2lKbSFoaEM-TW8rbytpYW56SWExVWhEdHAtb1Q4eSppbVBtYyh-TTlvXllxQDJvMVNnNGgzdSpiI0FXaEIrNlchcmZUVjFIcnpNZiM4RmVGT09NejF1fXQtV0g1RlIhTmxnel9vTTYwKTd2QHw1fE8rb3dkMlJIKD1LdU4wPExtY3tyIn0.S4BMK9ORnLmioS9AuJC5dIJmbUJP7YDRx2c-zH2qscY; _ga=GA1.2.1854926735.1710158203
2024-03-11 11:57:22 UTC	649	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:22 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-powered-by: PHP/5.3.29 pragma: no-cache Cache-Control: private, max-age=0, no-cache expires: Mon, 26 Jul 1997 05:00:00 GMT p3p: CP="CUR ADM OUR NOR STA NID" set-cookie: OAID=e012d283a5e1eae18062d3edb9725359; expires=Tue, 11-Mar-2025 11:57:22 GMT; path=/ x-frame-options: SameOrigin x-content-type-options: nosniff content-security-policy: frame-ancestors 'self'; upgrade-insecure-requests x-robots-tag: noindex CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 862b5dd4cca60ad7-LAS alt-svc: h3=":443"; ma=86400
2024-03-11 11:57:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
579	192.168.2.16	50590	52.9.62.96	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:22 UTC	434	OUT	GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:22 UTC	101	IN	HTTP/1.1 404 Not Found Date: Mon, 11 Mar 2024 11:57:22 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
580	192.168.2.16	50595	52.8.161.245	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:22 UTC	733	OUT	GET /map/c=14750/tp=DTNC/?https://pbid.pro-market.net/engine?mimetype=img&du=19&csync=${profile_id} HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pbid.pro-market.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=3; _cc_id=9d77637072f92cb5f5d20c39a1b22cb5
2024-03-11 11:57:22 UTC	364	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:57:22 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.41.29.208 Location: https://pbid.pro-market.net/engine?mimetype=img&du=19&csync=9d77637072f92cb5f5d20c39a1b22cb5 Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
581	192.168.2.16	50596	107.178.240.89	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:22 UTC	1446	OUT	GET /engine?site=143572;mimetype=img;ddar;rn=811884759;mds=0-0 HTTP/1.1 Host: pbid.pro-market.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pbid.pro-market.net/engine?site=143572;size=1x1;e=0;dt=0;category=twljteyw08d;kw=ew37vtvpnj;rnd=(1710158240574) Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=1-71dcd657-b7ce-4e56-9064-0f83979f8fcb:13-7822940101119878936:24-B6512778B5DA4E7C942E6E491CF4A04A:53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553:85-2407834391265652961"; anTRD=20141002%7C81.143572.999998..143572%7C91.143572.999998..143572%7C19.143572.999998..143572%7C67.143572.999998..143572%7C88.143572.999998..143572; anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%2381%7C1710158241464%2391%7C1710158241464%2319%7C1710158241464%2367%7C1710158241464%2388%7C1710158241464%23
2024-03-11 11:57:22 UTC	570	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" ANServer: gapp2 Set-Cookie: anTRD="x"; Domain=.pro-market.net; Max-Age=0; Path=/; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 1 Jan 1990 0:0:0 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: image/gif Content-Length: 43 Date: Mon, 11 Mar 2024 11:57:22 GMT Via: 1.1 google Alt-Svc: clear Connection: close
2024-03-11 11:57:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
582	192.168.2.16	50597	23.83.76.44	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:22 UTC	1059	OUT	GET /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:22 UTC	123	IN	HTTP/1.1 405 Method Not Allowed content-length: 0 date: Mon, 11 Mar 2024 11:57:21 GMT allow: POST connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
583	192.168.2.16	50599	142.251.2.132	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:22 UTC	855	OUT	GET /safeframe/1-0-40/html/container.html HTTP/1.1 Host: fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:22 UTC	707	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-gpt-scs" Report-To: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} Timing-Allow-Origin: * Content-Length: 6162 Date: Mon, 11 Mar 2024 11:57:22 GMT Expires: Tue, 11 Mar 2025 11:57:22 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Thu, 03 Nov 2022 19:10:08 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:57:22 UTC	545	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 61 66 65 46 72 61 6d 65 20 43 6f 6e 74 61 69 6e 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 6e 3d 66 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8"> <title>SafeFrame Container</title> <script>(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var f=this\|\|self,h=function(a){return a};var n=f
2024-03-11 11:57:22 UTC	1252	IN	Data Raw: 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 6f 6f 67 23 68 74 6d 6c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 68 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 68 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 68 7d 29 7d 63 61 74 63 68 28 63 29 7b 66 2e 63 6f 6e 73 6f 6c 65 26 26 66 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 63 2e 6d 65 73 73 61 67 65 29 7d 74 3d 61 7d 65 6c 73 65 20 74 3d 61 7d 72 65 74 75 72 6e 20 74 7d 3b 76 61 72 20 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 67 3d 62 61 3d 3d 3d 62 61 3f 61 3a 22 22 7d 3b 63 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2b 22 22 7d 3b 76 61 72 20 62 61 3d 7b 7d 2c 64 61 3d 66 75 6e 63 74 69 Data Ascii: .createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=functi
2024-03-11 11:57:22 UTC	1252	IN	Data Raw: 74 68 69 73 2e 69 3d 22 26 22 3b 74 68 69 73 2e 68 3d 7b 7d 3b 74 68 69 73 2e 6f 3d 30 3b 74 68 69 73 2e 67 3d 5b 5d 7d 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 3b 63 5b 61 5d 3d 62 3b 72 65 74 75 72 6e 5b 63 5d 7d 2c 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 6b 3d 5b 5d 3b 6a 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 67 2c 41 29 7b 28 67 3d 70 61 28 67 2c 62 2c 63 2c 64 2c 65 29 29 26 26 6b 2e 70 75 73 68 28 41 2b 22 3d 22 2b 67 29 7d 29 3b 72 65 74 75 72 6e 20 6b 2e 6a 6f 69 6e 28 62 29 7d 2c 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 72 65 74 75 72 6e 22 22 3b 62 3d 62 7c 7c 22 26 22 3b 63 3d 63 7c 7c 22 2c 24 22 3b 22 73 74 Data Ascii: this.i="&";this.h={};this.o=0;this.g=[]},z=function(a,b){var c={};c[a]=b;return[c]},qa=function(a,b,c,d,e){var k=[];ja(a,function(g,A){(g=pa(g,b,c,d,e))&&k.push(A+"="+g)});return k.join(b)},pa=function(a,b,c,d,e){if(null==a)return"";b=b\|\|"&";c=c\|\|",$";"st
2024-03-11 11:57:22 UTC	1252	IN	Data Raw: 28 29 3b 61 2e 6e 61 6d 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6e 61 6d 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6e 61 6d 65 29 3b 61 2e 6d 65 73 73 61 67 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6d 65 73 73 61 67 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6d 65 73 73 61 67 65 29 3b 69 66 28 61 2e 73 74 61 63 6b 29 7b 61 3d 61 2e 73 74 61 63 6b 3b 76 61 72 20 63 3d 62 3b 74 72 79 7b 2d 31 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 63 29 26 26 28 61 3d 63 2b 22 5c 6e 22 2b 61 29 3b 66 6f 72 28 76 61 72 20 64 3b 61 21 3d 64 3b 29 64 3d 61 2c 61 3d 61 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 28 28 68 74 74 70 73 3f 3a 2f 2e 2e 2a 2f 29 5b 5e 2f 3a 5d 2a 3a 5c 5c 64 2b 28 3f 3a 2e 7c 5c 6e 29 2a 29 5c 5c 32 22 29 2c Data Ascii: ();a.name&&-1==b.indexOf(a.name)&&(b+=": "+a.name);a.message&&-1==b.indexOf(a.message)&&(b+=": "+a.message);if(a.stack){a=a.stack;var c=b;try{-1==a.indexOf(c)&&(a=c+"\n"+a);for(var d;a!=d;)d=a,a=a.replace(RegExp("((https?:/../)[^/:]:\\d+(?:.\|\n)*)\\2"),
2024-03-11 11:57:22 UTC	1252	IN	Data Raw: 5b 32 5d 2c 45 3d 43 5b 33 5d 3b 69 66 28 44 3e 45 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 50 61 72 73 65 64 20 63 6f 6e 74 65 6e 74 20 73 69 7a 65 20 64 6f 65 73 6e 27 74 20 6d 61 74 63 68 2e 20 22 2b 44 2b 22 3a 22 2b 45 2e 6c 65 6e 67 74 68 29 3b 42 3d 7b 6d 3a 43 5b 31 5d 2c 63 6f 6e 74 65 6e 74 3a 45 2e 73 75 62 73 74 72 28 30 2c 44 29 2c 6c 3a 45 2e 73 75 62 73 74 72 28 44 29 7d 3b 76 61 72 20 46 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 42 2e 6c 29 3b 77 69 6e 64 6f 77 2e 6e 61 6d 65 3d 22 22 3b 76 61 72 20 42 61 3d 42 2e 63 6f 6e 74 65 6e 74 3b 46 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c 74 26 26 28 66 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c 74 3d 46 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c Data Ascii: [2],E=C[3];if(D>E.length)throw Error("Parsed content size doesn't match. "+D+":"+E.length);B={m:C[1],content:E.substr(0,D),l:E.substr(D)};var F=JSON.parse(B.l);window.name="";var Ba=B.content;F.goog_safeframe_hlt&&(f.goog_safeframe_hlt=F.goog_safeframe_hl
2024-03-11 11:57:22 UTC	609	IN	Data Raw: 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 21 31 29 2c 46 61 3d 6e 75 6c 6c 2c 55 3d 4b 2e 6c 65 6e 67 74 68 2d 31 2c 56 3d 55 3b 30 3c 3d 56 3b 2d 2d 56 29 7b 76 61 72 20 57 3d 4b 5b 56 5d 3b 21 46 61 26 26 6b 61 2e 74 65 73 74 28 57 2e 75 72 6c 29 26 26 28 46 61 3d 57 29 3b 69 66 28 57 2e 75 72 6c 26 26 21 57 2e 6a 29 7b 78 3d 57 3b 62 72 65 61 6b 7d 7d 76 61 72 20 6c 61 3d 6e 75 6c 6c 2c 47 61 3d 4b 2e 6c 65 6e 67 74 68 26 26 4b 5b 55 5d 2e 75 72 6c 3b 30 21 3d 78 2e 64 65 70 74 68 26 26 47 61 26 26 28 6c 61 3d 4b 5b 55 5d 29 3b 48 3d 6e 65 77 20 6d 61 3b 69 66 28 48 2e 68 29 7b 76 61 72 20 48 61 3d 48 2e 68 2e 75 72 6c 7c 7c 22 22 3b 49 2e 67 2e 70 75 73 68 28 34 29 3b 49 2e 68 5b 34 5d 3d 7a 28 22 74 6f 70 22 2c 48 61 29 7d 76 61 72 20 49 61 3d 7b Data Ascii: .location.href,!1),Fa=null,U=K.length-1,V=U;0<=V;--V){var W=K[V];!Fa&&ka.test(W.url)&&(Fa=W);if(W.url&&!W.j){x=W;break}}var la=null,Ga=K.length&&K[U].url;0!=x.depth&&Ga&&(la=K[U]);H=new ma;if(H.h){var Ha=H.h.url\|\|"";I.g.push(4);I.h[4]=z("top",Ha)}var Ia={

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
584	192.168.2.16	50600	13.227.74.54	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:22 UTC	631	OUT	GET /adscores/g.pixel?sid=9212294058&puid=-2533411667653603979 HTTP/1.1 Host: aa.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pbid.pro-market.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:22 UTC	900	IN	HTTP/1.1 302 Found Transfer-Encoding: chunked Connection: close Date: Mon, 11 Mar 2024 11:57:22 GMT Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3AocxTy5sZanTDl3LkkVak30MN5QAidCII; Path=/; Domain=.agkn.com; Expires=Tue, 11-Mar-2025 11:57:22 GMT; Max-Age=31536000; Secure; SameSite=None Location: https://pbid.pro-market.net/engine?du=91;csync=209170804818002183636 X-Cache: Miss from cloudfront Via: 1.1 366f8b73c917b9815b93f1cf0b9f8e96.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO20-C1 X-Amz-Cf-Id: 28vcjgOJDV1qDzWJ49qZQec38GNJqAr22DMe28cLH3LanNT4rdcuQg==
2024-03-11 11:57:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
585	192.168.2.16	50601	35.84.163.233	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:22 UTC	743	OUT	GET /cms?partner_id=DATCS HTTP/1.1 Host: cms.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pbid.pro-market.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo; IDSYNC="18z8~2h8b:175w~2h8b"
2024-03-11 11:57:22 UTC	499	IN	HTTP/1.1 302 Redirect Date: Mon, 11 Mar 2024 11:57:22 GMT Connection: close Server: ATS/9.1.10.94 Cache-Control: no-store Location: https://ups.analytics.yahoo.com/ups/58726/cms?partner_id=DATCS Content-Type: text/html Content-Language: en Set-Cookie: A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo; Expires=Tue, 11 Mar 2025 17:57:22 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Content-Length: 344
2024-03-11 11:57:22 UTC	344	IN	Data Raw: 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 77 68 69 74 65 22 20 46 47 43 4f 4c 4f 52 3d 22 62 6c 61 63 6b 22 3e 0a 3c 48 31 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 3c 48 52 3e 0a 0a 3c 46 4f 4e 54 20 46 41 43 45 3d 22 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 22 3e 3c 42 3e 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 6d 6f 76 65 64 20 74 6f 20 61 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 2e 20 20 54 68 65 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 20 69 73 20 22 68 Data Ascii: <HTML><HEAD><TITLE>Document Has Moved</TITLE></HEAD><BODY BGCOLOR="white" FGCOLOR="black"><H1>Document Has Moved</H1><HR><FONT FACE="Helvetica,Arial"><B>Description: The document you requested has moved to a new location. The new location is "h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
586	192.168.2.16	50602	54.213.96.237	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:22 UTC	716	OUT	GET /ibs:dpid=575&dpuuid=-2533411667653603979 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pbid.pro-market.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=45232011452423388812062241212727845356; dpm=45232011452423388812062241212727845356
2024-03-11 11:57:22 UTC	891	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:22 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: bljowbFzR3Q= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-usw2-1-v054-090da309e.edge-usw2.demdex.com 2 ms set-cookie: dpm=45232011452423388812062241212727845356; Max-Age=15552000; Expires=Sat, 07 Sep 2024 11:57:22 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=45232011452423388812062241212727845356; Max-Age=15552000; Expires=Sat, 07 Sep 2024 11:57:22 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-03-11 11:57:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
587	192.168.2.16	50603	54.201.134.102	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:22 UTC	641	OUT	GET /usermatch.gif?partner=datonics&partner_uid=-2533411667653603979 HTTP/1.1 Host: beacon.krxd.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pbid.pro-market.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:22 UTC	103	IN	HTTP/1.1 204 No Content Server: awselb/2.0 Date: Mon, 11 Mar 2024 11:57:22 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
588	192.168.2.16	50604	52.9.62.96	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:22 UTC	434	OUT	GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:23 UTC	101	IN	HTTP/1.1 404 Not Found Date: Mon, 11 Mar 2024 11:57:23 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
589	192.168.2.16	50610	23.83.76.44	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:23 UTC	1059	OUT	GET /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:23 UTC	123	IN	HTTP/1.1 405 Method Not Allowed content-length: 0 date: Mon, 11 Mar 2024 11:57:23 GMT allow: POST connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
590	192.168.2.16	50609	107.178.240.89	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:23 UTC	1361	OUT	GET /engine?mimetype=img&du=19&csync=9d77637072f92cb5f5d20c39a1b22cb5 HTTP/1.1 Host: pbid.pro-market.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pbid.pro-market.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=1-71dcd657-b7ce-4e56-9064-0f83979f8fcb:13-7822940101119878936:24-B6512778B5DA4E7C942E6E491CF4A04A:53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553:85-2407834391265652961"; anTRD=20141002%7C81.143572.999998..143572%7C91.143572.999998..143572%7C19.143572.999998..143572%7C67.143572.999998..143572%7C88.143572.999998..143572; anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%2381%7C1710158241464%2391%7C1710158241464%2319%7C1710158241464%2367%7C1710158241464%2388%7C1710158241464%23
2024-03-11 11:57:23 UTC	878	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" ANServer: gapp2 Set-Cookie: anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=1-71dcd657-b7ce-4e56-9064-0f83979f8fcb:13-7822940101119878936:19-9d77637072f92cb5f5d20c39a1b22cb5:24-B6512778B5DA4E7C942E6E491CF4A04A:53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553:85-2407834391265652961"; Domain=.pro-market.net; Max-Age=15552000; Path=/; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 1 Jan 1990 0:0:0 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: image/gif Content-Length: 43 Date: Mon, 11 Mar 2024 11:57:23 GMT Via: 1.1 google Alt-Svc: clear Connection: close
2024-03-11 11:57:23 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
591	192.168.2.16	50611	107.178.240.89	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:23 UTC	964	OUT	GET /engine?site=143572;mimetype=img;ddar;rn=811884759;mds=0-0 HTTP/1.1 Host: pbid.pro-market.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=1-71dcd657-b7ce-4e56-9064-0f83979f8fcb:13-7822940101119878936:24-B6512778B5DA4E7C942E6E491CF4A04A:53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553:85-2407834391265652961"; anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%2381%7C1710158241464%2391%7C1710158241464%2319%7C1710158241464%2367%7C1710158241464%2388%7C1710158241464%23
2024-03-11 11:57:23 UTC	878	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" ANServer: gapp2 Set-Cookie: anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=1-71dcd657-b7ce-4e56-9064-0f83979f8fcb:13-7822940101119878936:19-9d77637072f92cb5f5d20c39a1b22cb5:24-B6512778B5DA4E7C942E6E491CF4A04A:53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553:85-2407834391265652961"; Domain=.pro-market.net; Max-Age=15552000; Path=/; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 1 Jan 1990 0:0:0 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: image/gif Content-Length: 43 Date: Mon, 11 Mar 2024 11:57:23 GMT Via: 1.1 google Alt-Svc: clear Connection: close
2024-03-11 11:57:23 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
592	192.168.2.16	50612	107.178.240.89	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:23 UTC	1186	OUT	GET /engine?du=91;csync=209170804818002183636 HTTP/1.1 Host: pbid.pro-market.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pbid.pro-market.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=1-71dcd657-b7ce-4e56-9064-0f83979f8fcb:13-7822940101119878936:24-B6512778B5DA4E7C942E6E491CF4A04A:53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553:85-2407834391265652961"; anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%2381%7C1710158241464%2391%7C1710158241464%2319%7C1710158241464%2367%7C1710158241464%2388%7C1710158241464%23
2024-03-11 11:57:23 UTC	934	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" ANServer: gapp2 Set-Cookie: anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=1-71dcd657-b7ce-4e56-9064-0f83979f8fcb:13-7822940101119878936:19-9d77637072f92cb5f5d20c39a1b22cb5:24-B6512778B5DA4E7C942E6E491CF4A04A:53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553:85-2407834391265652961:91-209170804818002183636"; Domain=.pro-market.net; Max-Age=15552000; Path=/; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 1 Jan 1990 0:0:0 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html Vary: Accept-Encoding Date: Mon, 11 Mar 2024 11:57:23 GMT Via: 1.1 google Alt-Svc: clear Connection: close Transfer-Encoding: chunked
2024-03-11 11:57:23 UTC	11	IN	Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
593	192.168.2.16	50608	52.44.255.182	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:23 UTC	586	OUT	GET /d/sync/cookie/generic?partner=stickyadstv&append=1&cb=2102497&redirect=https%3A%2F%2Fads.stickyadstv.com%2Fuser-registering%3FdataProviderId%3D690%26userId%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cu=31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99\|1710158207259
2024-03-11 11:57:23 UTC	486	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Mon, 11 Mar 2024 11:57:23 GMT Location: https://ads.stickyadstv.com/user-registering?dataProviderId=690&userId=31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99 Set-Cookie: cu=31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99\|1710158207259; Path=/; Domain=ipredictive.com; Expires=Tue, 11 Mar 2025 11:57:23 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: bef0b1fb-959b-40bf-bfb5-f1ee168f79e3 Content-Length: 134 Connection: Close
2024-03-11 11:57:23 UTC	134	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 73 74 69 63 6b 79 61 64 73 74 76 2e 63 6f 6d 2f 75 73 65 72 2d 72 65 67 69 73 74 65 72 69 6e 67 3f 64 61 74 61 50 72 6f 76 69 64 65 72 49 64 3d 36 39 30 26 61 6d 70 3b 75 73 65 72 49 64 3d 33 31 61 62 36 62 32 61 2d 35 35 32 66 2d 34 65 66 32 2d 38 66 31 62 2d 32 62 31 65 62 31 62 61 33 63 39 39 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://ads.stickyadstv.com/user-registering?dataProviderId=690&userId=31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
594	192.168.2.16	50613	34.214.251.32	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:23 UTC	753	OUT	GET /ups/58726/cms?partner_id=DATCS HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pbid.pro-market.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo; IDSYNC="18z8~2h8b:175w~2h8b"
2024-03-11 11:57:23 UTC	756	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:57:23 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="18z8~2h8b:175w~2h8b:19ba~2h8b";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Tue, 11-Mar-2025 11:57:23 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://pbid.pro-market.net/engine?du=81&mimetype=img&csync=y-igMOMsZE2pSSFMQegarRiWWbKqRAWq5Hhco-~A Age: 0 Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo; Expires=Tue, 11 Mar 2025 17:57:23 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
595	192.168.2.16	50614	54.69.221.139	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:23 UTC	477	OUT	GET /ibs:dpid=575&dpuuid=-2533411667653603979 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=45232011452423388812062241212727845356; dpm=45232011452423388812062241212727845356
2024-03-11 11:57:23 UTC	891	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:23 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: hFs1H6CKQ7w= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-usw2-1-v054-04cf0d4be.edge-usw2.demdex.com 1 ms set-cookie: dpm=45232011452423388812062241212727845356; Max-Age=15552000; Expires=Sat, 07 Sep 2024 11:57:23 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=45232011452423388812062241212727845356; Max-Age=15552000; Expires=Sat, 07 Sep 2024 11:57:23 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-03-11 11:57:23 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
596	192.168.2.16	50615	52.9.62.96	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:23 UTC	434	OUT	GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:23 UTC	101	IN	HTTP/1.1 404 Not Found Date: Mon, 11 Mar 2024 11:57:23 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
597	192.168.2.16	50616	23.83.76.44	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:23 UTC	1059	OUT	GET /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:23 UTC	123	IN	HTTP/1.1 405 Method Not Allowed content-length: 0 date: Mon, 11 Mar 2024 11:57:28 GMT allow: POST connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
598	192.168.2.16	50617	107.178.240.89	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:23 UTC	1007	OUT	GET /engine?mimetype=img&du=19&csync=9d77637072f92cb5f5d20c39a1b22cb5 HTTP/1.1 Host: pbid.pro-market.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%2381%7C1710158241464%2391%7C1710158241464%2319%7C1710158241464%2367%7C1710158241464%2388%7C1710158241464%23; anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=1-71dcd657-b7ce-4e56-9064-0f83979f8fcb:13-7822940101119878936:19-9d77637072f92cb5f5d20c39a1b22cb5:24-B6512778B5DA4E7C942E6E491CF4A04A:53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553:85-2407834391265652961"
2024-03-11 11:57:24 UTC	480	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" ANServer: gapp2 Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 1 Jan 1990 0:0:0 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: image/gif Content-Length: 43 Date: Mon, 11 Mar 2024 11:57:23 GMT Via: 1.1 google Alt-Svc: clear Connection: close
2024-03-11 11:57:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
599	192.168.2.16	50618	34.117.77.79	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:23 UTC	982	OUT	GET /utsync.ashx?pub=&adv=&et=0&eid=771&ct=js&pi=3642666937673580575&fp=cbb0cc00-c0bc-4066-b3c6-bcc8fd2b1f8f&clid=&if=0&ps=&cl=&mlt=&data=&&cp=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2F&pv=1710158240565_6iq94tiew&bl=en-us&cb=5075665&return=&ht=&d=&dc=&si=1710158201959_nopjhvr4s&cid=&s=1280x1024&rp=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Fpostdownload&v=2.6.1.139 HTTP/1.1 Host: ml314.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pi=3642666937673580575; tp=7%253B03%252F11%252F2024%2B11%253A57%253A05%253B0
2024-03-11 11:57:24 UTC	848	IN	HTTP/1.1 200 OK content-type: application/javascript cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache set-cookie: u=aHR0cHM6Ly9zb3VyY2Vmb3JnZS5uZXQvcHJvamVjdHMvZG9jZmV0Y2hlci8%3D; expires=Mon, 11 Mar 2024 11:57:39 GMT; domain=ml314.com; path=/;SameSite=None; secure set-cookie: pi=3642666937673580575; expires=Tue, 11 Mar 2025 11:57:24 GMT; domain=ml314.com; path=/; secure; samesite=none; httponly set-cookie: tp=9%253B03%252F11%252F2024%2B11%253A57%253A24%253B0; expires=Mon, 25 Mar 2024 11:57:24 GMT; domain=ml314.com; path=/;SameSite=None; secure p3p: CP="NON DSP COR ADMo PSAo DEVo BUS COM UNI NAV DEM STA" date: Mon, 11 Mar 2024 11:57:24 GMT server: Google Frontend via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-11 11:57:24 UTC	404	IN	Data Raw: 31 39 33 0d 0a 5f 6d 6c 2e 73 65 74 46 50 49 28 27 33 36 34 32 36 36 36 39 33 37 36 37 33 35 38 30 35 37 35 27 29 3b 5f 6d 6c 2e 70 72 6f 63 65 73 73 54 61 67 28 7b 20 75 72 6c 3a 20 27 68 74 74 70 73 3a 2f 2f 74 72 63 2e 74 61 62 6f 6f 6c 61 2e 63 6f 6d 2f 73 67 2f 62 6f 6d 62 6f 72 61 2f 31 2f 63 6d 3f 72 65 64 69 72 65 63 74 3d 68 74 74 70 73 3a 2f 2f 6d 6c 33 31 34 2e 63 6f 6d 2f 63 73 79 6e 63 2e 61 73 68 78 25 33 46 66 70 3d 3c 54 55 49 44 3e 25 32 36 70 65 72 73 6f 6e 5f 69 64 3d 33 36 34 32 36 36 36 39 33 37 36 37 33 35 38 30 35 37 35 25 32 36 65 69 64 3d 35 30 30 37 37 27 2c 20 74 79 70 65 3a 20 27 69 6d 67 27 20 7d 29 3b 0a 5f 6d 6c 2e 70 72 6f 63 65 73 73 54 61 67 28 7b 20 75 72 6c 3a 20 27 68 74 74 70 73 3a 2f 2f 6c 6f 61 64 75 73 2e 65 78 65 Data Ascii: 193_ml.setFPI('3642666937673580575');_ml.processTag({ url: 'https://trc.taboola.com/sg/bombora/1/cm?redirect=https://ml314.com/csync.ashx%3Ffp=<TUID>%26person_id=3642666937673580575%26eid=50077', type: 'img' });_ml.processTag({ url: 'https://loadus.exe
2024-03-11 11:57:24 UTC	6	IN	Data Raw: 7d 29 3b 0a 0d 0a Data Ascii: });
2024-03-11 11:57:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
600	192.168.2.16	50623	107.178.240.89	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:23 UTC	1008	OUT	GET /engine?du=91;csync=209170804818002183636 HTTP/1.1 Host: pbid.pro-market.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%2381%7C1710158241464%2391%7C1710158241464%2319%7C1710158241464%2367%7C1710158241464%2388%7C1710158241464%23; anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=1-71dcd657-b7ce-4e56-9064-0f83979f8fcb:13-7822940101119878936:19-9d77637072f92cb5f5d20c39a1b22cb5:24-B6512778B5DA4E7C942E6E491CF4A04A:53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553:85-2407834391265652961:91-209170804818002183636"
2024-03-11 11:57:24 UTC	511	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" ANServer: gapp2 Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 1 Jan 1990 0:0:0 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html Vary: Accept-Encoding Date: Mon, 11 Mar 2024 11:57:23 GMT Via: 1.1 google Alt-Svc: clear Connection: close Transfer-Encoding: chunked
2024-03-11 11:57:24 UTC	11	IN	Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
601	192.168.2.16	50624	107.178.240.89	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:24 UTC	1279	OUT	GET /engine?du=81&mimetype=img&csync=y-igMOMsZE2pSSFMQegarRiWWbKqRAWq5Hhco-~A HTTP/1.1 Host: pbid.pro-market.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pbid.pro-market.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%2381%7C1710158241464%2391%7C1710158241464%2319%7C1710158241464%2367%7C1710158241464%2388%7C1710158241464%23; anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=1-71dcd657-b7ce-4e56-9064-0f83979f8fcb:13-7822940101119878936:19-9d77637072f92cb5f5d20c39a1b22cb5:24-B6512778B5DA4E7C942E6E491CF4A04A:53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553:85-2407834391265652961:91-209170804818002183636"
2024-03-11 11:57:24 UTC	949	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" ANServer: gapp2 Set-Cookie: anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=1-71dcd657-b7ce-4e56-9064-0f83979f8fcb:13-7822940101119878936:19-9d77637072f92cb5f5d20c39a1b22cb5:24-B6512778B5DA4E7C942E6E491CF4A04A:53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553:81-y-igMOMsZE2pSSFMQegarRiWWbKqRAWq5Hhco-%7EA:85-2407834391265652961:91-209170804818002183636"; Domain=.pro-market.net; Max-Age=15552000; Path=/; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 1 Jan 1990 0:0:0 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: image/gif Content-Length: 43 Date: Mon, 11 Mar 2024 11:57:24 GMT Via: 1.1 google Alt-Svc: clear Connection: close
2024-03-11 11:57:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
602	192.168.2.16	50627	142.250.141.156	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:24 UTC	1076	OUT	GET /xbbe/pixel?d=CJfnugEQw7j0ARj888CDAjAB&v=APEucNUtRYcCTiUSaNym1risqulco6fsZINI35TLxttHiGkQZ9C38O-l2AZ3i-5nU8X5jCUabvkoQnUhZlvjaytYQqmWA5yVkA HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlhWjE-nrLMqamcKd4HCzJGyk-lF6Y-_gdSV1_rcQ-Lc3JBzMSF3zk6wICTe0A; DSID=NO_DATA; ar_debug=1
2024-03-11 11:57:24 UTC	570	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 11 Mar 2024 11:57:24 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-11 11:57:24 UTC	647	IN	Data Raw: 32 38 30 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 6f 70 65 6e 78 26 67 6f 6f 67 6c 65 5f 63 6d 26 67 6f 6f 67 6c 65 5f 64 62 6d 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 63 6d 3f 69 64 3d 39 63 61 31 36 35 61 39 2d 64 39 66 65 2d 32 66 66 36 2d 64 38 33 64 2d 64 31 34 35 61 38 30 62 30 64 33 37 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 Data Ascii: 280<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_dbm" style="display:none;"/><img src="https://us-u.openx.net/w/1.0/cm?id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&r=https%3A%2F%2Fcm.g.doubleclick.net
2024-03-11 11:57:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
603	192.168.2.16	50629	52.9.62.96	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:24 UTC	434	OUT	GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:24 UTC	101	IN	HTTP/1.1 404 Not Found Date: Mon, 11 Mar 2024 11:57:24 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
604	192.168.2.16	50631	192.82.242.209	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:24 UTC	3809	OUT	GET /AdServer/UCookieSetPug?&rd=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D91%26partneruserid%3D%23PM_USER_ID%26gdpr%3DPM_GDPR%26gdpr_consent%3DPM_CONSENT&gdpr=0&gdpr_consent= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23234-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23361-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk; KRTBCOOKIE_1278=23329-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23340-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23498-6255abe4-6520-429f-aa2c-493e15bdee11; KRTBCOOKIE_1323=23480-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23485-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23575-OPUc21b156e4d4f4c8381b77a05c19b0a40; KRTBCOOKIE_391=22924-1724005921034811649&KRTB&23263-1724005921034811649&KRTB&23481-1724005921034811649; KRTBCOOKIE_466=16530-6ec76371-3031-4b49-abb3-349fb3d7cf23; PugT=1710158233; pi=0:3; chkChromeAb67Sec=9; SPugT=1710158234; SyncRTB3=1710720000%3A223_2_15%7C1711324800%3A250_166_240_264_249_13_231_5_176_266_8_220_56_22_254_104_21_3_71_48_54_55_46_234_165_7_178%7C1711411200%3A35%7C1715299200%3A69%7C1710979200%3A63%7C1712707200%3A224
2024-03-11 11:57:24 UTC	408	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=91&partneruserid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Date: Mon, 11 Mar 2024 11:57:24 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
605	192.168.2.16	50632	192.82.242.209	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:24 UTC	3584	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=48534641&p=162538&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; DPSync3=1711324800%3A256_258_261_259_262_260_236_245_201_263%7C1710201600%3A248_255%7C1710720000%3A253_252_265%7C1711152000%3A257; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23234-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23361-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk; KRTBCOOKIE_1278=23329-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23340-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23498-6255abe4-6520-429f-aa2c-493e15bdee11; KRTBCOOKIE_1323=23480-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23485-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23575-OPUc21b156e4d4f4c8381b77a05c19b0a40; KRTBCOOKIE_391=22924-1724005921034811649&KRTB&23263-1724005921034811649&KRTB&23481-1724005921034811649; KRTBCOOKIE_466=16530-6ec76371-3031-4b49-abb3-349fb3d7cf23; PugT=1710158233; pi=0:3; chkChromeAb67Sec=9; SPugT=1710158234; SyncRTB3=1710720000%3A223_2_15%7C1711324800%3A250_166_240_264_249_13_231_5_176_266_8_220_56_22_254_104_21_3_71_48_54_55_46_234_165_7_178%7C1711411200%3A35%7C1715299200%3A69%7C1710979200%3A63%7C1712707200%3A224
2024-03-11 11:57:24 UTC	1128	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=10; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=162538:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1710720000%3A252_265_253%7C1711324800%3A259_245_201_263_260_235_226_236_228_219_256_258_261_262%7C1710201600%3A248_255%7C1711152000%3A257; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1710720000%3A223_15_38_2%7C1712707200%3A224%7C1711411200%3A35%7C1715299200%3A69%7C1710979200%3A63%7C1711324800%3A234_165_56_21_48_46_7_250_240_249_231_176_96_13_220_104_178_99_264_22_254_3_54_55_71_233_166_5_266_8; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Mon, 11 Mar 2024 11:57:24 GMT Content-Length: 1053 Connection: close
2024-03-11 11:57:24 UTC	1053	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 61 2e 61 75 64 72 74 65 2e 63 6f 6d 2f 6d 61 74 63 68 3f 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 70 3d 4d 31 37 31 37 30 35 34 39 30 31 26 75 69 64 3d 39 41 31 37 36 41 44 42 2d 37 33 46 34 2d 34 42 44 38 2d 41 36 34 38 2d 32 33 46 32 34 34 33 34 39 33 42 35 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 61 61 2e 61 67 6b 6e 2e 63 6f 6d 2f 61 64 73 63 6f 72 65 73 2f 67 2e 70 69 78 65 6c 3f 73 69 64 3d 39 32 31 32 33 30 38 32 37 38 26 70 75 69 64 3d 39 41 31 37 36 41 44 42 2d 37 33 46 34 2d 34 42 44 38 2d 41 36 34 38 2d 32 33 46 32 34 34 33 34 39 Data Ascii: PubMatic.loadAsyncImagePixel('https://a.audrte.com/match?gdpr=0&gdpr_consent=&p=M1717054901&uid=9A176ADB-73F4-4BD8-A648-23F2443493B5');PubMatic.loadAsyncImagePixel('https://aa.agkn.com/adscores/g.pixel?sid=9212308278&puid=9A176ADB-73F4-4BD8-A648-23F244349

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
606	192.168.2.16	50638	143.244.208.184	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:24 UTC	616	OUT	GET /ccm/c9dd71b6-fd13-4133-bf5d-b88619cef491 HTTP/1.1 Host: sid.storygize.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:25 UTC	422	IN	HTTP/1.1 302 Found location: /csr?r=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3Dm3k4T1aBLLPMpeMdFP9tJTiB%26source_user_id%3Dac45c3ec-c17b-4938-9811-6a9b00078f13 content-length: 0 set-cookie: U=ac45c3ec-c17b-4938-9811-6a9b00078f13; Max-Age=63072000; Expires=Wed, 11 Mar 2026 11:57:24 GMT; Path=/; Domain=.storygize.net; SameSite=None; Secure date: Mon, 11 Mar 2024 11:57:24 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
607	192.168.2.16	50642	192.184.67.70	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:24 UTC	706	OUT	GET /pixel/p-EtBqU4Lj3YbAv.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=65eef17d-816a8-799a4-641fc; d=EJsBGAGsK_ijC_vLEM-7EA
2024-03-11 11:57:25 UTC	388	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:57:24 GMT Content-Length: 0 Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://rtb-csync.smartadserver.com/redir/?partnerid=80&gdpr=0&partneruserid=VbPHRgW3lUdOvpMVAr6PFFq_wxdOsJYSBeXINTmx Pragma: no-cache Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
608	192.168.2.16	50630	15.197.193.217	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:24 UTC	883	OUT	GET /track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFEhQKBXRhcGFkEgsIqK7DwIvz4DwQBRIbCgxzaGFyZXRocm91Z2gSCwjWjMfSi_PgPBAFEhYKB2QwdHJvMWoSCwj-h-Hhi_PgPBAFGAEgASgCMgsIsqWkmaTz4DwQBTgBWgc4aDl1MTFoYAI.
2024-03-11 11:57:24 UTC	717	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:57:24 GMT Content-Length: 323 Connection: close server: Kestrel location: https://match.sharethrough.com/sync/v1?source_id=5b286190338513af73f09c28&source_user_id=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent= set-cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; expires=Tue, 11 Mar 2025 11:57:24 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFEhQKBXRhcGFkEgsIqK7DwIvz4DwQBRIbCgxzaGFyZXRocm91Z2gSCwj8hJCujvPgPBAFEhYKB2QwdHJvMWoSCwj-h-Hhi_PgPBAFGAEgASgCMgsInvuS26Tz4DwQBTgBWgxzaGFyZXRocm91Z2hgAg..; expires=Tue, 11 Mar 2025 11:57:24 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-11 11:57:24 UTC	323	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 2f 73 79 6e 63 2f 76 31 3f 73 6f 75 72 63 65 5f 69 64 3d 35 62 32 38 36 31 39 30 33 33 38 35 31 33 61 66 37 33 66 30 39 63 32 38 26 73 6f 75 72 63 65 5f 75 73 65 72 5f 69 64 3d 37 31 64 63 64 36 35 37 2d 62 37 63 65 2d 34 65 35 36 2d 39 30 36 34 2d 30 66 38 33 39 37 39 66 38 66 63 62 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 2f 73 79 6e 63 2f 76 31 3f 73 6f 75 72 63 65 5f 69 64 3d 35 62 32 38 36 31 39 30 33 33 38 35 31 33 61 66 37 33 66 30 39 63 32 38 26 73 6f 75 72 63 65 5f 75 Data Ascii: Redirecting to: <a href="https://match.sharethrough.com/sync/v1?source_id=5b286190338513af73f09c28&source_user_id=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent=">https://match.sharethrough.com/sync/v1?source_id=5b286190338513af73f09c28&source_u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
609	192.168.2.16	50634	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:24 UTC	1512	OUT	GET /redir/?issi=1&partnerid=76&partneruserid=GOOGLE_HOSTED_SI&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmartrtb_dbm%26google_cm%26google_sc%26google_hm%3DSMART_USER_ID_B64&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:25 UTC	811	IN	HTTP/1.1 302 Found content-length: 0 date: Mon, 11 Mar 2024 11:57:24 GMT cache-control: no-cache,no-store location: https://cm.g.doubleclick.net/pixel?google_nid=smartrtb_dbm&google_cm&google_sc&google_hm=MTg5OTUwNTg5MDU5NDU2NTI0OA==&gdpr=0&gdpr_consent= pragma: no-cache set-cookie: csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|76:GOOGLE_HOSTED_SI\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37; expires=Tue, 11 Mar 2025 11:57:24 GMT; domain=smartadserver.com; path=/; SameSite=None; secure p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
610	192.168.2.16	50640	104.254.148.251	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:24 UTC	955	OUT	GET /getuid?https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D86%26partneruserid%3D$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; receive-cookie-deprecation=1; uuid2=7822940101119878936; icu=ChgIkPoyEAoYAyADKAMwoOO7rwY4A0ADSAMQoOO7rwYYAg..
2024-03-11 11:57:25 UTC	1484	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Mon, 11 Mar 2024 11:57:24 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=86&partneruserid=7822940101119878936&gdpr=0&gdpr_consent= AN-X-Request-Uuid: 81ef5aca-486f-44e0-9dd1-04e933ba2d4c Set-Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:24 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 27-Feb-2034 11:57:24 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=7822940101119878936; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:24 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.105.38; 154.16.105.38; 893.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
611	192.168.2.16	50644	52.25.158.6	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:24 UTC	690	OUT	GET /cookie-sync/shr?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAKPDU7L3eMAABWFZYx_mg; bitoIsSecure=ok; checkForPermission=ok
2024-03-11 11:57:25 UTC	439	IN	HTTP/1.1 303 See Other Date: Mon, 11 Mar 2024 11:57:25 GMT location: https://match.sharethrough.com/sync/v1?source_id=vyXkw8rSq3j4JmKvTgxR3x1c&source_user_id=AAKPDU7L3eMAABWFZYx_mg&gdpr=0 Server: gunicorn set-cookie: bito=AAKPDU7L3eMAABWFZYx_mg; Domain=bidr.io; expires=Thu, 10 Apr 2025 07:57:25 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
612	192.168.2.16	50637	67.202.105.21	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:24 UTC	727	OUT	GET /ps/?ri=0013300001kQj2HAAS&ru=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DkzFyzzqXEqukMDumpVLB6Eq3%26source_user_id%3D33XUSERID33X HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:25 UTC	638	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212349963528473%3As1%3D1710158245046%3Ats%3D1710158245046; Domain=.33across.com; Expires=Tue, 11-Mar-2025 11:57:25 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 100000000008200000C server: 33XP019 location: https://match.sharethrough.com/sync/v1?source_id=kzFyzzqXEqukMDumpVLB6Eq3&source_user_id=212349963528473 content-length: 0 date: Mon, 11 Mar 2024 11:57:24 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
613	192.168.2.16	50649	34.36.216.150	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:24 UTC	590	OUT	GET /dmp/pixelSync?nid=103&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=e186753e-f558-43f2-9eb8-0f25b6de5290#1710158208299; _ssuma=eyI0NSI6MTcxMDE1ODIwOTExOSwiMjQiOjE3MTAxNTgyMzA1MDMsIjM5IjoxNzEwMTU4MjMwNTAzLCI3IjoxNzEwMTU4MjMwNTAzLCI1MyI6MTcxMDE1ODIyNTk5NX0
2024-03-11 11:57:25 UTC	932	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=e186753e-f558-43f2-9eb8-0f25b6de5290#1710158208299; Domain=.sitescout.com; Expires=Tue, 11-Mar-2025 11:57:25 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyI0NSI6MTcxMDE1ODIwOTExOSwiMjQiOjE3MTAxNTgyMzA1MDMsIjU5IjoxNzEwMTU4MjQ1MDM3LCIzOSI6MTcxMDE1ODIzMDUwMywiNyI6MTcxMDE1ODIzMDUwMywiNTMiOjE3MTAxNTgyMjU5OTV9; Domain=.sitescout.com; Expires=Wed, 10-Apr-2024 11:57:25 GMT; Path=/; Secure; SameSite=None location: https://ads.stickyadstv.com/user-registering?dataProviderId=721&userId=e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&gdpr=0&gdpr_consent= Content-Length: 0 date: Mon, 11 Mar 2024 11:57:24 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
614	192.168.2.16	50647	44.238.141.43	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:24 UTC	928	OUT	GET /load/?p=204&g=1170&j=0&redirect=https%3A%2F%2Fml314.com%2Fcsync.ashx%3Fperson_id%3D3642666937673580575%26eid%3D50596%26fp%3D HTTP/1.1 Host: loadus.exelator.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EE="ef0ee26ff141c186c8f416092ed9f16d"; ud="eJxrXxzq6XKLQSE1zSA11cgsLc3QxDDZ0MIs2SLNxNDMwNIoNcUyzdAsZXFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVzmnFGUn5u6AiwU5hq02NDQfEl%252BUWb6otDgxUUpaQyLSopPBR8X2wAAuzcqfQ%253D%253D"
2024-03-11 11:57:25 UTC	1303	IN	HTTP/1.1 302 server: nginx date: Mon, 11 Mar 2024 11:57:25 GMT content-type: image/gif content-length: 0 cache-control: no-cache x-powered-by: Undertow/1 set-cookie: EE="ef0ee26ff141c186c8f416092ed9f16d"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Tue, 09-Jul-2024 11:57:25 GMT; SameSite=None; Secure; set-cookie: hsk_7505="gAAAAAQAAABQKLUv%252FSBQgQIAiKRidWlkoKNoc2ukNjI3OahkZWxpdmVyeaQ2Mjc5o3ZlcgGlYm5hbWWnUzIwNEhDWaV0c2Vnc6cyODk1NTc4pWJjb2RlzR1RonRzylPHFrA%253D"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Tue, 09-Jul-2024 11:57:25 GMT; SameSite=None; Secure; set-cookie: ud="eJxrXxzq6XKLQSE1zSA11cgsLc3QxDDZ0MIs2SLNxNDMwNIoNcUyzdAsZXFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVzmnFGUn5u6AiwU5hq02NDQfEl%252BUWb6otDgxUUpaQyLSopPBR8X2wAAuzcqfQ%253D%253D"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Tue, 09-Jul-2024 11:57:25 GMT; SameSite=None; Secure; p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA location: https://ml314.com/csync.ashx?person_id=3642666937673580575&eid=50596&fp=ef0ee26ff141c186c8f416092ed9f16d&gdpr=&gdpr_consent= access-control-allow-credentials: true p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
615	192.168.2.16	50641	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:24 UTC	1493	OUT	GET /redir/?issi=1&partnerid=135&partneruserid=TAM_OK&redirurl=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fdcm%3Fpid%3Df7a5db36-1d5c-4c26-81b6-b4d0807faffb%26id%3DSMART_USER_ID&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:25 UTC	789	IN	HTTP/1.1 302 Found content-length: 0 date: Mon, 11 Mar 2024 11:57:25 GMT cache-control: no-cache,no-store location: https://aax-eu.amazon-adsystem.com/s/dcm?pid=f7a5db36-1d5c-4c26-81b6-b4d0807faffb&id=1899505890594565248&gdpr=0&gdpr_consent= pragma: no-cache set-cookie: csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|135:TAM_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37; expires=Wed, 12 Mar 2025 11:57:25 GMT; domain=smartadserver.com; path=/; SameSite=None; secure p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
616	192.168.2.16	50635	35.71.131.137	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:24 UTC	893	OUT	GET /track/cmf/generic?ttd_pid=smart-adserver&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFEhQKBXRhcGFkEgsIqK7DwIvz4DwQBRIbCgxzaGFyZXRocm91Z2gSCwjWjMfSi_PgPBAFEhYKB2QwdHJvMWoSCwj-h-Hhi_PgPBAFGAEgASgCMgsIsqWkmaTz4DwQBTgBWgc4aDl1MTFoYAI.
2024-03-11 11:57:24 UTC	705	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:57:24 GMT Content-Length: 299 Connection: close server: Kestrel location: https://rtb-csync.smartadserver.com/redir/?partnerid=75&issi=1&partneruserid=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent= set-cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; expires=Tue, 11 Mar 2025 11:57:24 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFEhQKBXRhcGFkEgsIqK7DwIvz4DwQBRIbCgxzaGFyZXRocm91Z2gSCwjWjMfSi_PgPBAFEhYKB2QwdHJvMWoSCwj-h-Hhi_PgPBAFGAEgASgCMgsIvL7H3KTz4DwQBTgBWg5zbWFydC1hZHNlcnZlcmAC; expires=Tue, 11 Mar 2025 11:57:24 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-11 11:57:24 UTC	299	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 74 62 2d 63 73 79 6e 63 2e 73 6d 61 72 74 61 64 73 65 72 76 65 72 2e 63 6f 6d 2f 72 65 64 69 72 2f 3f 70 61 72 74 6e 65 72 69 64 3d 37 35 26 69 73 73 69 3d 31 26 70 61 72 74 6e 65 72 75 73 65 72 69 64 3d 37 31 64 63 64 36 35 37 2d 62 37 63 65 2d 34 65 35 36 2d 39 30 36 34 2d 30 66 38 33 39 37 39 66 38 66 63 62 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 72 74 62 2d 63 73 79 6e 63 2e 73 6d 61 72 74 61 64 73 65 72 76 65 72 2e 63 6f 6d 2f 72 65 64 69 72 2f 3f 70 61 72 74 6e 65 72 69 64 3d 37 35 26 69 73 73 69 3d 31 26 70 61 72 74 6e 65 72 75 73 65 72 69 64 3d 37 31 64 63 64 36 35 37 2d 62 37 63 65 2d 34 65 35 Data Ascii: Redirecting to: <a href="https://rtb-csync.smartadserver.com/redir/?partnerid=75&issi=1&partneruserid=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent=">https://rtb-csync.smartadserver.com/redir/?partnerid=75&issi=1&partneruserid=71dcd657-b7ce-4e5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
617	192.168.2.16	50650	107.178.240.89	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:24 UTC	1086	OUT	GET /engine?du=81&mimetype=img&csync=y-igMOMsZE2pSSFMQegarRiWWbKqRAWq5Hhco-~A HTTP/1.1 Host: pbid.pro-market.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: anTHS=33%7C1710158224833%2353%7C1710158224833%2373%7C1710158224833%2313%7C1710158224833%231%7C1710158224833%2389%7C1710158224833%2385%7C1710158224833%2324%7C1710158224833%2381%7C1710158241464%2391%7C1710158241464%2319%7C1710158241464%2367%7C1710158241464%2388%7C1710158241464%23; anProfile="-j8wzhh7u2utn+1+4=2ml+1f=1+1g=1+1j=57:1+rs=s+rt=9A106926+s0=(1y)+s2=(sa6mii)+vm=1-71dcd657-b7ce-4e56-9064-0f83979f8fcb:13-7822940101119878936:19-9d77637072f92cb5f5d20c39a1b22cb5:24-B6512778B5DA4E7C942E6E491CF4A04A:53-CCPA:73-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553:81-y-igMOMsZE2pSSFMQegarRiWWbKqRAWq5Hhco-%7EA:85-2407834391265652961:91-209170804818002183636"
2024-03-11 11:57:25 UTC	480	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" ANServer: gapp2 Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 1 Jan 1990 0:0:0 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: image/gif Content-Length: 43 Date: Mon, 11 Mar 2024 11:57:24 GMT Via: 1.1 google Alt-Svc: clear Connection: close
2024-03-11 11:57:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
618	192.168.2.16	50653	151.101.129.44	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:24 UTC	687	OUT	GET /sg/bombora/1/cm?redirect=https://ml314.com/csync.ashx%3Ffp=%3CTUID%3E%26person_id=3642666937673580575%26eid=50077 HTTP/1.1 Host: trc.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:25 UTC	591	IN	HTTP/1.1 200 OK Connection: close Server: nginx Cache-Control: no-cache, no-store Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Fastly-to-NLB-rtt: 921 Accept-Ranges: bytes Date: Mon, 11 Mar 2024 11:57:25 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-bur-kbur8200106-BUR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1710158245.136643,VS0,VE2 X-vcl-time-ms: 2 transfer-encoding: chunked
2024-03-11 11:57:25 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2024-03-11 11:57:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;
2024-03-11 11:57:25 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
619	192.168.2.16	50639	45.137.176.88	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:24 UTC	835	OUT	GET /cookie/smart?r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D66%26partneruserid%3D%7Bamob_user_id%7D&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.adotmob.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=0a42220400c08ec15f936285; uuid=0a42220400c08ec15f936285; partners=SMA%3A1710158229823
2024-03-11 11:57:25 UTC	331	IN	HTTP/1.1 302 Found x-powered-by: Express vary: Origin access-control-allow-credentials: true location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=66&partneruserid=0a42220400c08ec15f936285&gdpr=0&gdpr_consent= date: Mon, 11 Mar 2024 11:57:25 GMT keep-alive: timeout=5 content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
620	192.168.2.16	50655	34.98.64.218	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:24 UTC	900	OUT	GET /w/1.0/cm?id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&r=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dopenx%26google_hm%3D%7Bopenx_uuid_base64%7D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=2a5f7fb6-27c9-488e-9168-f0298407ea3a\|1710158208; pd=v2\|1710158229\|vMgavPkWgyiK; univ_id=537072971\|71dcd657-b7ce-4e56-9064-0f83979f8fcb\|1710158231967576
2024-03-11 11:57:25 UTC	585	IN	HTTP/1.1 302 Found Vary: Accept, Accept-Encoding Set-Cookie: i=2a5f7fb6-27c9-488e-9168-f0298407ea3a\|1710158208; Version=1; Expires=Tue, 11-Mar-2025 11:57:25 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=ZDU5YzkzMjUtNDczOS0yOWRkLWRlNWUtNjI3ODJhYzIxN2E3 Date: Mon, 11 Mar 2024 11:57:25 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
621	192.168.2.16	50652	35.160.96.43	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:24 UTC	760	OUT	GET /sync/sharethrough/b6baf5b6-3516-4c46-a708-53e0ec193a37?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo
2024-03-11 11:57:25 UTC	904	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:57:25 GMT Content-Length: 0 Connection: close Location: https://match.sharethrough.com/sync/v1?source_id=BVbSRuzbUWjBEF6bQrmLHKkX&source_user_id=y-o7eUixNE2oMWn2w9DoaTRVJhEsb6JNCG6wAd2Og7t_Z.~A Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo; Expires=Tue, 11 Mar 2025 17:57:25 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
622	192.168.2.16	50660	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:25 UTC	1500	OUT	GET /redir/?issi=1&partnerid=91&partneruserid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:25 UTC	712	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:25 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|91:9A176ADB-73F4-4BD8-A648-23F2443493B5\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37; expires=Tue, 11 Mar 2025 11:57:25 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:25 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
623	192.168.2.16	50664	54.215.97.222	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:25 UTC	754	OUT	GET /sync/v1?source_id=5b286190338513af73f09c28&source_user_id=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:25 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:25 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:25 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:57:25 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
624	192.168.2.16	50663	13.227.74.54	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:25 UTC	696	OUT	GET /adscores/g.pixel?sid=9212308278&puid=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1 Host: aa.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3AocxTy5sZanTDl3LkkVak30MN5QAidCII
2024-03-11 11:57:25 UTC	834	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Mon, 11 Mar 2024 11:57:25 GMT Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3AocxTy5sZanTDl3LkkVak30MN5QAidCII; Path=/; Domain=.agkn.com; Expires=Tue, 11-Mar-2025 11:57:25 GMT; Max-Age=31536000; Secure; SameSite=None X-Cache: Miss from cloudfront Via: 1.1 7a21e9c0eca084f9537ebb23906ea9fe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO20-C1 X-Amz-Cf-Id: gwakV3Gd-2RSWX44nRVuNBQZ7a3qvwa6SIBiDZPFjL6CXmZKil_Djw==
2024-03-11 11:57:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
625	192.168.2.16	50643	85.114.159.93	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:25 UTC	661	OUT	GET /cookie/?ssp=5&gdpr=0&gdpr_consent= HTTP/1.1 Host: dsp.adfarm1.adition.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UserID1=7345073677437040781
2024-03-11 11:57:25 UTC	482	IN	HTTP/1.1 302 Found Server: nginx Date: Mon, 11 Mar 2024 11:57:25 GMT Transfer-Encoding: chunked Connection: close p3p: policyref="http://imagesrv.adition.com/w3c/p3p.xml",CP="NON DSP ADM DEV PSD IVDo OTPi OUR IND STP PHY PRE NAV UNI" Set-Cookie: UserID1=7345073677437040781; Max-Age=7776000; domain=.adfarm1.adition.com; Path=/; SameSite=None; Secure Location: https://rtb-csync.smartadserver.com/redir/?partnerid=49&partneruserid=7345073677437040781&gdpr=0&gdpr_consent=
2024-03-11 11:57:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
626	192.168.2.16	50665	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:25 UTC	1483	OUT	GET /redir/?issi=1&partnerid=32&partneruserid=2407834391265652961&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:25 UTC	695	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:25 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|32:2407834391265652961\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37; expires=Wed, 12 Mar 2025 11:57:25 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:25 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
627	192.168.2.16	50666	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:25 UTC	1397	OUT	GET /redir/?partnerid=75&issi=1&partneruserid=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:25 UTC	712	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:24 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|75:71dcd657-b7ce-4e56-9064-0f83979f8fcb\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37; expires=Tue, 11 Mar 2025 11:57:25 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:25 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
628	192.168.2.16	50678	142.250.141.156	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:25 UTC	5202	OUT	GET /dbm/ad?dbm_c=AKAmf-AD6Jo0HzhMu1X7BaFWGwfmmuA9iHBSiGG-c4n64ngPHw4q2BtjRsGQ_zovC-KjAzzKkSFhC_Tj2Xx6aku5H7vW0yh1Gu6nK5ohKpRpILWi1QOXptVB3dbKxWbSGpAnawEB16I-oBgAKFVz45f8d_iEEoGVjSs_qcZvKd_mPTzRojmRR6-UensKFH3_TlsNVmQ2_YfFnnOi9fhrpkG_aHuVvniJug&cry=1&dbm_d=AKAmf-CHK7qOhF9cGNuZSQeaIezpRwwmlH_SdlRPz75hZv7urGWH5XjPlHR0XeJCqWfeJ4Yjocl-awkO4pt3JDdEXJfTpFncjtpJWbiLDX6KaSHJ-E2GPQC4cqbVIGVyB79AAdO9myNknqozSIGGDoQnXB3dI0jW4GI0YnCYXN3K3a2xOZOywyvnmJg-RP81wUoQZSeu1uypHgXqXNn_8YhidGKle4tkypsfke7jhw7fAthovjJXRd-iFMXKjFblTACWPZLxvA4GeauuMtYbtQQ8xqmzasDdPy5AxwbV37oRoxrtoNo1htR2IFd5ZQ_-Lj-Fi8P3O_4QgYlEytfUUWycg3dBbpn-OcCCs_IAobQrsNSnBlWRX18IBqSeja3mWhyPwGOmOpblYbBldRDf--KpVWwFbf_h62jMGUl0Ui6qaofrRcLucoFApuPnBlYnbaBvtdM2gAG1pTfu70xmvMjcCIfemzm-q4WqpGeIKqr6IWoaZGefJPJRkIceIfe-bMTlMBuyYl0VFyupglGV357c0FKpkph6-UiGzYSYvi7wOmNihaXrTBxGzY9UA6x3uQFFfEdb3UrxtSLollUu4TjdFAgsQV1ViJaQUjYwsfcVBOyL1M901Xr2nZBMvgB6QV3oP-9yR1bqOLhbCqmLY2xobBIXFvBnam86VpA30CD-7tBx03S-oJHbqtgHDLI0EXcYzNj5bdpxPLG09kgB2esE0H9CDmlw6mZTaCn-vGpcLZtVnPauK7EPz77Qd-osShdyo9vNjoksjHqI5dQ9EFMvhkdh2am-rNo8oqtQl-Ebw_HgRlGLA_jZoHF1xdjjzGvk8XUSZkcz9uAMMZdPDz3W5YjxoNy2q1EVNIZfD3y_mEZ-_1FnZn3rzy-pEj2ZCEY044ALTiOaF416Ib0EYVatW3RQMcH0YuwQ8zom2UJdu3lTYy1qrbXYDe5n8USMhVbt4kAw9uHuZ47sq3nViZ4w66u2D_zZBFHe2pOBqvAY02OYkhL6UP6qyozcZvzIq32Gr2aoGLF3Ig7-UoprbjT4s9g_K9BmeUuRBnWxdRbGcTvXJA6wXwP9uM5BeY2gYDhyAn9Ue4nakJXm6FrENvM3k7CLwmgjtdsTwf36w8hoPp2iXe8Bg5pK6dFNslnpqvhH4QtnbkDOcIrHpjockE3C0orTHAfKBiy5WEVBjwZXFN27ctgBfBlj_wzW9ldwxm2msv7AHnRWSqvGqxr3cKJOanjjTY1YilzsUeIQQHkRdD5rxVd5MsRzTOd0nAqMhiZwp8GxVxmyG56EfpNL6C4c8yFYag_oKtxBm3pDMFhoewnlO9M_NmCga-7s78sttG3t3L93rb9TQQTy0Ntzil1EfxJWXvcAbgtHrLHJEKhgd0VSDMAIgnAxoWW2j9DvStWkyk4co1eIeVexmbwduchtvRzGoUQmSwQKvgXTXUiah3RhkplOiQAhKK1YM22ss9oIPnzegon-or2RZx_5_VAQGGoStiEpqi01Focl3VCINg7FZoixkF-FWMZUHqpth61FNzYfgyOdRZyr7oO-Fr4vOATXYgOYEjRnnzavprSIJl_pxBFqHBhA3Qe34hyQvWRKDTNRUo0X3gBgVWrhjKNTjNWGhzYM5Bd3KothczcBKgDc54ITgtIkq88cQntUnWgzntYNsfJJ5UvnIZE6QbqLM8l5lTuMhWJJfW0jorZB1P5eD2txGyCybVFSPtc1lfYvK6IYK0oBEZNlo0vnj84cvRVO-BqtSNbVMDL3nRYr7PV9XWaOmsq_LnL4PTByd482cre7vieUkKxd_zqKwz6Ef01ctAns-U_EmQ06okboziFMH-UK7cU18pK7dtcfUdJjQFcyT0_HzT7URlFFR7SWCWs1n-0ka7BvP7dmdljcoLM5KmJ8wv0iYDMqOv26ghHFih4n3DYhN03bNVCo7CR0MVkODP7JgP7KtlcP90EN8iFt6SG0RiXw7rJp8XAzaKdAEtlt6acJbDgUflcdanDhCa4SXq40dykNPcX8ZQcFYFytF44tlqJI8E0jBBKrPo_pPRem0YzgOAb-5vt3MrADgdpoxyqlzREEQPbjsIuv7GgySoljl3c_5A2gdkzR2ToZBENPUklTvHA2V4HffRu3ZPfFwoqtokgi5JSDEV3x9f6OEeb9pB8sx2AV5rnRL8XzWb_F_OyZuruOuTO-xymq86_6lJNSc-LmFxrX22uJPqCkUdNdDyJIWmIFBQxUVtmvrXz-qxYTcwqM6Zzho9xbsnVX9L95JAVcGy3Fqb9AF0VyOvFUex9S0kOoT0C_YLKpPtj3LO18FmI2qPR2wcxC6GHefMhmyyIsDxm5PbDoZ8siYwGjBv3bn5P_vjPomjLdlNs1fs9kpmxSs6Myh42TwvR-27Foc3j6hSqNeZzBF23wALLFBPbn623WhGIJQq2SzQ2Pm48uICfamhivFCnnJUDvO034kyCqi3Y7EtsKQt-sMBZQlub54VxdtTF_kAwSUlOKhwb98g9cfIW-YCj57B4vLz2rwXjAd8xpwtAv31nsX17_Ci0bVbd_l-gRh4ezw6VhfqFaomOa9BDVR3w1t2ELcT4fPtobvw43h2QQkf8ZN1IOL2NkixyZlgzFjoDZDwcin1Reh9aCzWk2-8q_ZJFyocfRu97_PX3Oebqh70d6T2UO7BJ4lwEd5ft2vSdabARB0m6NmuBvklh2xDfbYR9LS67K_ShNnfpzhL9itVz6Wt2gseMbNX_G-3KEgYW1OgtHTpjs-rUSgnV29PXWAjzV32vWvv8YxjGDMlWtzbW-_UZQ6PJVJwvX_JsHjxOsWiuf_188AkcoxMmizgAssExHpviECsvtnJwyp_craMBx0I_IW-tpRPxmWEO-M2ia98cVE2F-WoWKVG0dQbVTYTJ_-PnpcEAlXEcrl26B7Y8b8RlVsNVxQoCoWDbWysKFLuvLrmkK6rCvwC5khzEicuCZh-xPoSsYkAD0QRAodnDJ2BM3yvhlIEVu2J5HmnMgJNtvvaQS0WrSidYwUPv8cogtqLeK7yHTHwQyVFEZbpEvAKbfpawH4gt3GirQvZQLvRKnird913z7u9ja0F2xjK0ob4O_xjl-FAdP5CwgzrQVO4fBw3zqmkPn_AP8ODFVkc6oZ-_uHKVCtfJK9WWZxLAIHTLvFWHT4bkLPBeyfp_bBezPP4Ko3zPu8FtjYB2q6AwyLT7fWRMp0oSiei9r__DBya4-7Rp0ug-m0gB8I2k69szYJYwU-ywNvjDBXd-zUry2KqJz-IyN5W9gk8sNQjdAIG6W-MSg0rgsOd-TAeLk8ADXai0StgGOGRzzm8WtKdkde0e_xfHq6wJk5XqgWyI1A-_OyLoI4weWK3rtu5xDYpgy3V4HJ13TjJP5as048r-AMuA4D_TV_QUsWrqlhulSo-78Qxu-qg2nin7En5LXE4Vok20InXuvgsvA4Fdk2_XSMcU8XLcCoAn8yF5NaLjej7zZN_hCPgqq2xa9daq3e6GzF1wpv189qTge1kalhDeTaRC-89EB9YF74ebZP-6y3RMFdhsu9dKtiy5WZZPbfbDKNZs2FiOTw0aH2SQRD0HR7_rZ7FZiimfsKqsQM5tuduQwJpZ7_sdrC_bNEOnzcPCrxJWd1WMPYPTyvKa3WXp0xVqz4xwq6GiGQLliQJajn-KKNMcH6FhQGYWkmPqkkcprzJdQqSx3Zdba-p6YBTJzPfPKTVOMnRY_jJoFTqgX7o61BbBeYVgIuwcfyXhpP3IHBqon9xZORLga_sRZxXQ75UBbRMVQHQ9SFpA7ej1BvEPcup0oahNwsMDhidd81tkCBAuuLBtxajMt7cyacrzXLpuY_DpTigBRq1WjkDp7zCWBrN1DbEAv_PRDfyF4SyP5qBxQuwfQqsqYmPaC05DS4X0uXtcr2GNv7Ke1AAHlX_4K_g&cid=CAQSPAB7FLtq5LxsBGvZWfh1Tl8IzwfVNO-aQwqnnAPLWYqT-JXWSS3jHCvOvCEuCHssK8u09e8huT6ed6Z7iBgB&dv3_ver=m202402290101&nel=1&rfl=https%3A%2F%2Fsourceforge.net%2F&ds=l&xdt=1&iif=1&cor=15792798227289076000&adk=3047537734&idt=1275&cac=0&dtd=30 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlhWjE-nrLMqamcKd4HCzJGyk-lF6Y-_gdSV1_rcQ-Lc3JBzMSF3zk6wICTe0A; DSID=NO_DATA; ar_debug=1
2024-03-11 11:57:25 UTC	882	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 11 Mar 2024 11:57:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: APC=AfxxVi5YUxnPwsd7fPtyKzbxN7tPdmurBxtCa_F5XSaP9ZnkNqb1MQ; expires=Sat, 07-Sep-2024 11:57:25 GMT; path=/; domain=doubleclick.net; Secure; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-11 11:57:25 UTC	370	IN	Data Raw: 36 63 64 64 0d 0a 69 66 20 28 21 77 69 6e 64 6f 77 2e 6d 72 61 69 64 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 64 69 76 20 69 64 3d 22 61 64 5f 75 6e 69 74 22 5c 78 33 65 27 29 3b 7d 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 73 74 79 6c 65 5c 78 33 65 64 69 76 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 7d 2e 61 62 67 63 70 7b 68 65 69 67 68 74 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 39 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 33 70 78 3b 72 69 67 68 74 3a 30 70 78 3b 74 6f 70 3a 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a Data Ascii: 6cddif (!window.mraid) {document.write('\x3cdiv id="ad_unit"\x3e');}document.write('\x3cstyle\x3ediv{margin:0;padding:0;}.abgcp{height:15px;padding-right:1px;padding-top:1px;padding-left:9px;padding-bottom:13px;right:0px;top:0px;position:absolute;width:
2024-03-11 11:57:25 UTC	1252	IN	Data Raw: 69 63 50 72 65 63 69 73 69 6f 6e 3b 7a 2d 69 6e 64 65 78 3a 32 31 34 37 34 38 33 36 34 36 3b 7d 2e 61 62 67 62 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 31 35 70 78 3b 7d 2e 61 62 67 63 2c 2e 61 62 67 63 70 2c 2e 6a 61 72 20 2e 61 62 67 63 2c 2e 6a 61 72 20 2e 61 62 67 63 70 2c 2e 6a 61 72 20 2e 63 62 62 7b 6f 70 61 63 69 74 79 3a 31 3b 7d 2e 61 62 67 63 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 63 62 62 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 68 65 69 67 68 74 3a 31 35 70 78 3b 77 69 64 74 68 3a 31 35 70 78 3b 7a 2d 69 6e 64 65 78 3a 32 31 34 37 34 38 33 36 34 36 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 6f 70 61 63 69 74 79 3a 30 3b 7d 2e 63 62 62 20 73 Data Ascii: icPrecision;z-index:2147483646;}.abgb{display:inline-block;height:15px;}.abgc,.abgcp,.jar .abgc,.jar .abgcp,.jar .cbb{opacity:1;}.abgc{cursor:pointer;}.cbb{cursor:pointer;height:15px;width:15px;z-index:2147483646;background-color:#ffffff;opacity:0;}.cbb s
2024-03-11 11:57:25 UTC	1252	IN	Data Raw: 5c 78 32 32 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 5c 78 33 64 5c 78 32 32 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 5c 78 32 32 20 76 69 65 77 42 6f 78 5c 78 33 64 5c 78 32 32 30 20 30 20 31 35 20 31 35 5c 78 32 32 5c 78 33 65 5c 78 33 63 63 69 72 63 6c 65 20 63 78 5c 78 33 64 5c 78 32 32 36 5c 78 32 32 20 63 79 5c 78 33 64 5c 78 32 32 36 5c 78 32 32 20 72 5c 78 33 64 5c 78 32 32 30 2e 36 37 5c 78 32 32 5c 78 33 65 5c 78 33 63 2f 63 69 72 63 6c 65 5c 78 33 65 5c 78 33 63 70 61 74 68 20 64 5c 78 33 64 5c 78 32 32 4d 34 2e 32 2c 31 31 2e 33 51 33 2e 33 2c 31 31 2e 38 2c 33 2e 33 2c 31 30 2e 37 35 4c 33 2e 33 2c 34 2e 31 51 33 2e 33 2c 33 2e 31 2c 34 2e 33 2c 33 2e 35 4c 31 30 2e 34 2c 37 2e 30 51 31 32 2e 30 2c 37 2e Data Ascii: \x22 xmlns:xlink\x3d\x22http://www.w3.org/1999/xlink\x22 viewBox\x3d\x220 0 15 15\x22\x3e\x3ccircle cx\x3d\x226\x22 cy\x3d\x226\x22 r\x3d\x220.67\x22\x3e\x3c/circle\x3e\x3cpath d\x3d\x22M4.2,11.3Q3.3,11.8,3.3,10.75L3.3,4.1Q3.3,3.1,4.3,3.5L10.4,7.0Q12.0,7.
2024-03-11 11:57:25 UTC	1252	IN	Data Raw: 71 45 55 4a 30 37 2d 78 73 76 37 68 6c 43 61 51 6b 38 49 44 45 45 63 75 47 63 53 68 4f 54 57 36 6e 42 42 34 55 38 61 65 53 67 72 4a 64 47 70 41 59 4a 4c 75 54 34 63 61 4c 39 48 42 48 72 6c 55 43 49 6c 6d 31 63 50 46 46 4b 69 58 54 4b 55 71 43 46 59 74 31 48 4b 49 67 6f 4b 74 67 6d 79 75 6c 6d 47 62 70 4d 73 2d 55 45 4e 49 45 52 61 6e 45 30 72 4e 56 75 35 6e 2d 62 69 74 6a 34 58 4b 61 64 42 6f 72 6e 43 30 41 2d 4f 6e 6c 74 6a 74 2d 4c 50 6c 43 45 75 70 57 6b 56 63 2d 45 33 53 41 5a 5a 6e 34 72 53 49 62 4d 7a 65 52 35 46 2d 74 53 6e 7a 63 55 74 43 62 5a 43 77 73 64 71 56 2d 32 51 37 37 61 45 66 34 75 7a 58 55 57 37 77 64 2d 52 34 6f 39 68 4a 76 33 76 6c 50 37 36 79 56 37 50 56 4b 6e 61 49 71 68 42 74 59 5a 44 6b 2d 6d 33 42 69 46 69 6f 65 57 59 41 46 52 38 Data Ascii: qEUJ07-xsv7hlCaQk8IDEEcuGcShOTW6nBB4U8aeSgrJdGpAYJLuT4caL9HBHrlUCIlm1cPFFKiXTKUqCFYt1HKIgoKtgmyulmGbpMs-UENIERanE0rNVu5n-bitj4XKadBornC0A-Onltjt-LPlCEupWkVc-E3SAZZn4rSIbMzeR5F-tSnzcUtCbZCwsdqV-2Q77aEf4uzXUW7wd-R4o9hJv3vlP76yV7PVKnaIqhBtYZDk-m3BiFioeWYAFR8
2024-03-11 11:57:25 UTC	1252	IN	Data Raw: 70 73 35 62 4d 58 78 56 6e 79 69 44 77 43 34 58 39 4d 2d 64 47 37 42 45 6c 4c 35 47 74 76 35 46 59 36 4f 41 6d 73 42 51 38 44 32 78 6e 31 51 5c 78 32 36 61 6d 70 3b 6f 70 69 5c 78 33 64 31 32 32 37 31 35 38 33 37 5c 78 32 32 20 74 61 72 67 65 74 5c 78 33 64 5c 78 32 32 5f 62 6c 61 6e 6b 5c 78 32 32 5c 78 33 65 5c 78 33 63 2f 61 5c 78 33 65 5c 78 33 63 2f 64 69 76 5c 78 33 65 5c 78 33 63 64 69 76 20 69 64 5c 78 33 64 5c 78 32 32 63 62 62 5c 78 32 32 20 63 6c 61 73 73 5c 78 33 64 5c 78 32 32 63 62 62 5c 78 32 32 20 74 61 62 69 6e 64 65 78 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 20 72 6f 6c 65 5c 78 33 64 5c 78 32 32 62 75 74 74 6f 6e 5c 78 32 32 5c 78 33 65 5c 78 33 63 73 76 67 20 78 6d 6c 6e 73 5c 78 33 64 5c 78 32 32 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 Data Ascii: ps5bMXxVnyiDwC4X9M-dG7BElL5Gtv5FY6OAmsBQ8D2xn1Q\x26amp;opi\x3d122715837\x22 target\x3d\x22_blank\x22\x3e\x3c/a\x3e\x3c/div\x3e\x3cdiv id\x3d\x22cbb\x22 class\x3d\x22cbb\x22 tabindex\x3d\x220\x22 role\x3d\x22button\x22\x3e\x3csvg xmlns\x3d\x22http://www.w3
2024-03-11 11:57:25 UTC	1252	IN	Data Raw: 61 2d 68 69 64 64 65 6e 5c 78 33 64 5c 78 32 32 74 72 75 65 5c 78 32 32 5c 78 33 65 5c 78 33 63 64 69 76 20 69 64 5c 78 33 64 5c 78 32 32 6d 6c 73 63 5c 78 32 32 20 63 6c 61 73 73 5c 78 33 64 5c 78 32 32 6d 6c 73 63 5c 78 32 32 5c 78 33 65 5c 78 33 63 73 76 67 20 63 6c 61 73 73 5c 78 33 64 5c 78 32 32 6d 6c 73 5c 78 32 32 20 76 69 65 77 42 6f 78 5c 78 33 64 5c 78 32 32 35 30 20 35 30 20 31 30 30 20 31 30 30 5c 78 32 32 5c 78 33 65 5c 78 33 63 63 69 72 63 6c 65 20 63 6c 61 73 73 5c 78 33 64 5c 78 32 32 6d 6c 73 64 5c 78 32 32 20 63 78 5c 78 33 64 5c 78 32 32 31 30 30 5c 78 32 32 20 63 79 5c 78 33 64 5c 78 32 32 31 30 30 5c 78 32 32 20 72 5c 78 33 64 5c 78 32 32 33 30 5c 78 32 32 20 66 69 6c 6c 5c 78 33 64 5c 78 32 32 6e 6f 6e 65 5c 78 32 32 20 73 74 72 6f Data Ascii: a-hidden\x3d\x22true\x22\x3e\x3cdiv id\x3d\x22mlsc\x22 class\x3d\x22mlsc\x22\x3e\x3csvg class\x3d\x22mls\x22 viewBox\x3d\x2250 50 100 100\x22\x3e\x3ccircle class\x3d\x22mlsd\x22 cx\x3d\x22100\x22 cy\x3d\x22100\x22 r\x3d\x2230\x22 fill\x3d\x22none\x22 stro
2024-03-11 11:57:25 UTC	1252	IN	Data Raw: 62 4f 7a 6a 57 35 79 67 71 4a 4b 77 41 53 33 77 74 65 55 30 67 54 67 42 41 4f 49 42 66 6d 47 35 72 4e 4f 6b 41 59 42 6f 41 5a 4e 67 41 65 33 68 59 43 56 41 61 67 48 32 62 61 78 41 71 67 48 72 37 36 78 41 71 67 48 31 63 6b 62 71 41 65 6d 76 68 75 6f 42 34 37 4f 47 36 67 48 6b 39 67 62 71 41 66 75 6c 72 45 43 71 41 66 2d 6e 72 45 43 71 41 65 61 42 71 67 48 38 39 45 62 71 41 65 57 32 42 75 6f 42 36 71 62 73 51 4b 6f 42 34 4f 74 73 51 4b 6f 42 2d 43 39 73 51 4b 6f 42 5f 2d 65 73 51 4b 6f 42 39 2d 66 73 51 4c 59 42 77 44 53 43 43 51 49 67 47 45 51 41 52 67 64 4d 67 4b 4b 41 6a 6f 4a 67 45 43 41 77 49 43 41 67 4b 41 6f 53 4c 33 39 77 54 70 59 79 63 36 35 39 4a 50 73 68 41 4f 41 43 67 4f 59 43 77 48 49 43 77 47 41 44 41 47 71 44 51 4a 56 55 2d 49 4e 45 77 69 48 Data Ascii: bOzjW5ygqJKwAS3wteU0gTgBAOIBfmG5rNOkAYBoAZNgAe3hYCVAagH2baxAqgHr76xAqgH1ckbqAemvhuoB47OG6gHk9gbqAfulrECqAf-nrECqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB-C9sQKoB_-esQKoB9-fsQLYBwDSCCQIgGEQARgdMgKKAjoJgECAwICAgKAoSL39wTpYyc659JPshAOACgOYCwHICwGADAGqDQJVU-INEwiH
2024-03-11 11:57:25 UTC	1252	IN	Data Raw: 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 72 6c 3f 63 74 5c 78 33 64 61 62 67 5c 5c 75 30 30 32 36 71 5c 78 33 64 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 64 73 65 6e 73 65 2f 73 75 70 70 6f 72 74 2f 62 69 6e 2f 72 65 71 75 65 73 74 2e 70 79 25 33 46 63 6f 6e 74 61 63 74 25 33 44 61 62 67 5f 61 66 63 25 32 36 75 72 6c 25 33 44 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 25 32 36 67 6c 25 33 44 55 53 25 32 36 68 6c 25 33 44 65 6e 25 32 36 61 69 30 25 33 44 5c 5c 75 30 30 32 36 75 73 67 5c 78 33 64 41 4f 76 56 61 77 33 42 34 53 76 49 58 37 34 7a 75 49 61 47 41 6d 67 64 56 71 66 6a 5c 78 32 36 71 75 6f 74 3b 2c 5c 78 32 36 71 75 6f 74 Data Ascii: www.google.com/url?ct\x3dabg\\u0026q\x3dhttps://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttps://sourceforge.net/projects/docfetcher/%26gl%3DUS%26hl%3Den%26ai0%3D\\u0026usg\x3dAOvVaw3B4SvIX74zuIaGAmgdVqfj\x26quot;,\x26quot
2024-03-11 11:57:25 UTC	1252	IN	Data Raw: 20 66 65 65 64 62 61 63 6b 5c 78 32 36 71 75 6f 74 3b 2c 5c 78 32 36 71 75 6f 74 3b 54 68 61 6e 6b 73 2e 20 46 65 65 64 62 61 63 6b 20 69 6d 70 72 6f 76 65 73 20 47 6f 6f 67 6c 65 20 61 64 73 5c 78 32 36 71 75 6f 74 3b 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 78 32 36 71 75 6f 74 3b 53 65 65 20 6d 79 20 47 6f 6f 67 6c 65 20 61 64 20 73 65 74 74 69 6e 67 73 5c 78 32 36 71 75 6f 74 3b 2c 6e 75 6c 6c 2c 5c 78 32 36 71 75 6f 74 3b 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 5c 78 32 36 71 75 6f 74 3b 2c 5c 78 32 36 71 75 6f 74 3b 5c 78 32 36 71 75 6f 74 3b 2c 5c 78 32 36 71 75 6f 74 3b 41 64 73 20 62 79 20 25 31 24 73 5c 78 32 36 71 75 6f 74 3b 2c 5c 78 32 36 71 75 6f 74 3b 41 64 Data Ascii: feedback\x26quot;,\x26quot;Thanks. Feedback improves Google ads\x26quot;,null,null,null,null,null,null,\x26quot;See my Google ad settings\x26quot;,null,\x26quot;https://www.gstatic.com\x26quot;,\x26quot;\x26quot;,\x26quot;Ads by %1$s\x26quot;,\x26quot;Ad
2024-03-11 11:57:25 UTC	1252	IN	Data Raw: 46 55 7a 68 74 5a 46 4a 51 61 45 35 76 4f 57 46 35 55 7a 68 5a 64 6a 52 4c 4f 54 56 4a 56 46 64 4e 61 54 46 69 56 6c 52 5a 62 31 70 36 55 46 6c 32 62 57 52 68 54 55 5a 4d 56 56 42 34 54 57 5a 32 56 31 70 30 53 33 52 77 54 56 67 34 55 57 46 47 4e 6e 5a 69 54 33 70 71 56 7a 56 35 5a 33 46 4b 53 33 64 42 55 7a 4e 33 64 47 56 56 4d 47 64 55 5a 30 4a 42 54 30 6c 43 5a 6d 31 48 4e 58 4a 4f 54 32 74 42 57 55 4a 76 51 56 70 4f 5a 30 46 6c 4d 32 68 5a 51 31 5a 42 59 57 64 49 4d 6d 4a 68 65 45 46 78 5a 30 68 79 4e 7a 5a 34 51 58 46 6e 53 44 46 6a 61 32 4a 78 51 57 56 74 64 6d 68 31 62 30 49 30 4e 30 39 48 4e 6d 64 49 61 7a 6c 6e 59 6e 46 42 5a 6e 56 73 63 6b 56 44 63 55 46 6d 4c 57 35 79 52 55 4e 78 51 57 56 68 51 6e 46 6e 53 44 67 35 52 57 4a 78 51 57 56 58 4d 6b Data Ascii: FUzhtZFJQaE5vOWF5UzhZdjRLOTVJVFdNaTFiVlRZb1p6UFl2bWRhTUZMVVB4TWZ2V1p0S3RwTVg4UWFGNnZiT3pqVzV5Z3FKS3dBUzN3dGVVMGdUZ0JBT0lCZm1HNXJOT2tBWUJvQVpOZ0FlM2hZQ1ZBYWdIMmJheEFxZ0hyNzZ4QXFnSDFja2JxQWVtdmh1b0I0N09HNmdIazlnYnFBZnVsckVDcUFmLW5yRUNxQWVhQnFnSDg5RWJxQWVXMk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
629	192.168.2.16	50673	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:25 UTC	1380	OUT	GET /redir/?issi=1&partnerid=86&partneruserid=7822940101119878936&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:25 UTC	695	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:24 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|86:7822940101119878936\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37; expires=Tue, 11 Mar 2025 11:57:25 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:25 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
630	192.168.2.16	50682	54.215.97.222	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:25 UTC	726	OUT	GET /sync/v1?source_id=vyXkw8rSq3j4JmKvTgxR3x1c&source_user_id=AAKPDU7L3eMAABWFZYx_mg&gdpr=0 HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:25 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:25 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:25 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:57:25 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
631	192.168.2.16	50683	54.215.97.222	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:25 UTC	712	OUT	GET /sync/v1?source_id=kzFyzzqXEqukMDumpVLB6Eq3&source_user_id=212349963528473 HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:25 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:25 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:25 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:57:25 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
632	192.168.2.16	50662	34.255.246.57	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:25 UTC	797	OUT	GET /match?gdpr=0&gdpr_consent=&p=M1717054901&uid=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1 Host: a.audrte.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: arcki2=9flSy3nJ5IvQWiaYTcU12v7Xg!20220908!1710158235401!ip#154.16.105.38; arcki2_ddp2=9flSy3nJ5IvQWiaYTcU12v7Xg!20220908!1710158237382
2024-03-11 11:57:26 UTC	687	IN	HTTP/1.1 302 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Origin: * Date: Mon, 11 Mar 2024 11:57:26 GMT Location: https://dmp.adform.net/serving/cookie/match/?party=1003&r=eyJ1IjoiaHR0cHM6Ly9hLmF1ZHJ0ZS5jb206NDQzL3AiLCJkIjpbXX0%3D&gdpr=0&gdpr_consent= Server: nginx/1.22.1 Set-Cookie: arcki2_pubmatic=9A176ADB-73F4-4BD8-A648-23F2443493B5!20220908!1710158246005; Max-Age=1296000; Expires=Tue, 26 Mar 2024 11:57:26 GMT; Domain=audrte.com; Path=/; Secure; HttpOnly; SameSite=none; Secure Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
633	192.168.2.16	50679	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:25 UTC	1380	OUT	GET /redir/?partnerid=80&gdpr=0&partneruserid=VbPHRgW3lUdOvpMVAr6PFFq_wxdOsJYSBeXINTmx HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:25 UTC	716	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:25 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|80:VbPHRgW3lUdOvpMVAr6PFFq_wxdOsJYSBeXINTmx\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37; expires=Tue, 11 Mar 2025 11:57:25 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:25 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
634	192.168.2.16	50668	143.244.208.184	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:25 UTC	773	OUT	GET /csr?r=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3Dm3k4T1aBLLPMpeMdFP9tJTiB%26source_user_id%3Dac45c3ec-c17b-4938-9811-6a9b00078f13 HTTP/1.1 Host: sid.storygize.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: U=ac45c3ec-c17b-4938-9811-6a9b00078f13
2024-03-11 11:57:26 UTC	234	IN	HTTP/1.1 302 Found location: https://match.sharethrough.com/sync/v1?source_id=m3k4T1aBLLPMpeMdFP9tJTiB&source_user_id=ac45c3ec-c17b-4938-9811-6a9b00078f13 content-length: 0 date: Mon, 11 Mar 2024 11:57:25 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
635	192.168.2.16	50669	172.105.221.29	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:25 UTC	688	OUT	GET /pubmatic HTTP/1.1 Host: gocm.c.appier.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:26 UTC	627	IN	HTTP/1.1 302 Found Server: nginx Date: Mon, 11 Mar 2024 11:57:25 GMT Content-Type: text/html; charset=utf-8 Content-Length: 153 Connection: close Accept-Ch: Sec-CH-UA-Model,Sec-CH-UA-Platform-Version Cache-Control: no-store Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=GTz-sRdlCHiHoCwUpfHuZQ P3p: CP="CUR ADM DEV TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Set-Cookie: _auid=GTz-sRdlCHiHoCwUpfHuZQ; Path=/; Domain=c.appier.net; Expires=Tue, 11 Mar 2025 11:57:25 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None
2024-03-11 11:57:26 UTC	153	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 79 4d 44 49 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 47 54 7a 2d 73 52 64 6c 43 48 69 48 6f 43 77 55 70 66 48 75 5a 51 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=GTz-sRdlCHiHoCwUpfHuZQ">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
636	192.168.2.16	50661	69.194.240.13	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:25 UTC	825	OUT	GET /usersync2/pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005%22%2C%22nxtrdr%22%3Afalse%7D
2024-03-11 11:57:25 UTC	683	IN	HTTP/1.1 302 Found date: Mon, 11 Mar 2024 11:57:26 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005%22%2C%22nxtrdr%22%3Afalse%2C%22zdxidn%22%3A%221508%22%7D; path=/; expires=Tue, 11 Mar 2025 11:57:26 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=4311914755 etag: RX5a36053c69dd47d484e1b94f859f1cd2005 connection: close
2024-03-11 11:57:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
637	192.168.2.16	50674	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:25 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=gh3SN4NAMWbvSOw&MD=VV3cGtUY HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-03-11 11:57:26 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: 967b951b-96ed-4645-af4d-19c19493a668 MS-RequestId: 0c71b9d3-49e2-4e14-8a92-afa4c50c1981 MS-CV: HSpRP3h9+kyCIN2M.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 11 Mar 2024 11:57:25 GMT Connection: close Content-Length: 25457
2024-03-11 11:57:26 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-03-11 11:57:26 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
638	192.168.2.16	50671	141.94.171.212	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:25 UTC	657	OUT	GET /?partner=214&mapped=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel.onaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:26 UTC	438	IN	HTTP/1.1 302 Found set-cookie: cookie=ec1562c92b86ee97; Max-Age=31536000; Expires=Tue, 11 Mar 2025 11:57:26 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None set-cookie: done_redirects147=1; Max-Age=86400; Expires=Tue, 12 Mar 2024 11:57:26 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=xksw9la&ttd_tpi=1&gdpr=0 content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
639	192.168.2.16	50670	50.57.31.206	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:25 UTC	696	OUT	GET /pubmatic/1/info?sType=sync&sExtCookieId=9A176ADB-73F4-4BD8-A648-23F2443493B5&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:25 UTC	688	IN	HTTP/1.1 302 Found Location: /pubmatic/1/info2?sType=sync&sExtCookieId=9A176ADB-73F4-4BD8-A648-23F2443493B5&sInitiator=external&gdpr=0&gdpr_consent= UIP-Response-Status: Ok Frontend-ID: 9 Set-Cookie: SEUNCY=9465D35DF42222D4; Expires=Tue, 11 Mar 2025 11:57:25 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Connection: close Date: Mon, 11 Mar 2024 11:57:25 GMT Content-Length: 0 Routing-Server-ID: -1 Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
640	192.168.2.16	50684	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:25 UTC	1400	OUT	GET /redir/?issi=1&partnerid=22&partneruserid=1724005921034811649&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|76:GOOGLE_HOSTED_SI\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:26 UTC	715	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:25 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=22:1724005921034811649\|31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|76:GOOGLE_HOSTED_SI\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37; expires=Tue, 11 Mar 2025 11:57:25 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:26 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
641	192.168.2.16	50692	54.215.97.222	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:25 UTC	745	OUT	GET /sync/v1?source_id=BVbSRuzbUWjBEF6bQrmLHKkX&source_user_id=y-o7eUixNE2oMWn2w9DoaTRVJhEsb6JNCG6wAd2Og7t_Z.~A HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:26 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:25 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:25 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:57:26 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
642	192.168.2.16	50693	151.101.129.44	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:25 UTC	452	OUT	GET /sg/bombora/1/cm?redirect=https://ml314.com/csync.ashx%3Ffp=%3CTUID%3E%26person_id=3642666937673580575%26eid=50077 HTTP/1.1 Host: trc.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:26 UTC	592	IN	HTTP/1.1 200 OK Connection: close Server: nginx Cache-Control: no-cache, no-store Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Fastly-to-NLB-rtt: 1015 Accept-Ranges: bytes Date: Mon, 11 Mar 2024 11:57:25 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-lax-kwhp1940062-LAX X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1710158246.956563,VS0,VE5 X-vcl-time-ms: 5 transfer-encoding: chunked
2024-03-11 11:57:26 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2024-03-11 11:57:26 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;
2024-03-11 11:57:26 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
643	192.168.2.16	50685	52.94.220.185	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:25 UTC	736	OUT	GET /s/dcm?pid=f7a5db36-1d5c-4c26-81b6-b4d0807faffb&id=1899505890594565248&gdpr=0&gdpr_consent= HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_mD47eJIUzEqu3DVtJD2b0; ad-privacy=0
2024-03-11 11:57:26 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 11 Mar 2024 11:57:26 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: R0M6EV8C954SN4HK7KJS Set-Cookie: ad-id=A_mD47eJIUzEqu3DVtJD2b0; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 11:57:26 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 11:57:26 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-11 11:57:26 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
644	192.168.2.16	50672	54.165.23.128	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:25 UTC	718	OUT	GET /sync?nid=11&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:26 UTC	1391	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Mon, 11 Mar 2024 11:57:26 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=9sM9r_oDVSN4eO2NU2v64poQaSY&gdpr=0&gdpr_consent= Set-Cookie: sa-user-id=s%3A0-f6c33daf-fa03-5523-7878-ed8d536bfae2.uwyHEon85sda9j242OONUUQXWOua1lV8b6xpdUxCuqE; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-f6c33daf-fa03-5523-7878-ed8d536bfae2.uwyHEon85sda9j242OONUUQXWOua1lV8b6xpdUxCuqE; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3A9sM9r_oDVSN4eO2NU2v64poQaSY.81CG%2Fp7rnnh%2BweajKu%2B5Q%2FmbfOncsujRafk7JsmoNW0; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3A9sM9r_oDVSN4eO2NU2v64poQaSY.81CG%2Fp7rnnh%2BweajKu%2B5Q%2FmbfOncsujRafk7JsmoNW0; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIFcOR1jGa1qA5o-mgQ6efIofPjsSCquYtOmMnbDHS608EHwYBCCm47uvBjABOgT87-jmQgTJSjZo.vpKeKtWcUw8i%2F6LgqP73YrYL8DwlCkkQgbdEZF6NiCI; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIFcOR1jGa1qA5o-mgQ6efIofPjsSCquYtOmMnbDHS608EHwYBCCm47uvBjABOgT87-jmQgTJSjZo.vpKeKtWcUw8i%2F6LgqP73YrYL8DwlCkkQgbdEZF6NiCI; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Content-Length: 188 Connection: Close
2024-03-11 11:57:26 UTC	188	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4d 7a 45 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 39 73 4d 39 72 5f 6f 44 56 53 4e 34 65 4f 32 4e 55 32 76 36 34 70 6f 51 61 53 59 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=9sM9r_oDVSN4eO2NU2v64poQaSY&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
645	192.168.2.16	50696	52.9.139.67	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:25 UTC	519	OUT	GET /sync/v1?source_id=5b286190338513af73f09c28&source_user_id=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:26 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:26 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:26 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:57:26 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
646	192.168.2.16	50697	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:26 UTC	1396	OUT	GET /redir/?issi=1&partnerid=66&partneruserid=0a42220400c08ec15f936285&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|135:TAM_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:26 UTC	711	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:25 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|66:0a42220400c08ec15f936285\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|135:TAM_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37; expires=Tue, 11 Mar 2025 11:57:26 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:26 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
647	192.168.2.16	50704	52.9.139.67	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:26 UTC	491	OUT	GET /sync/v1?source_id=vyXkw8rSq3j4JmKvTgxR3x1c&source_user_id=AAKPDU7L3eMAABWFZYx_mg&gdpr=0 HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:26 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:26 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:26 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:57:26 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
648	192.168.2.16	50702	13.227.74.48	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:26 UTC	460	OUT	GET /adscores/g.pixel?sid=9212308278&puid=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1 Host: aa.agkn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3AocxTy5sZanTDl3LkkVak30MN5QAidCII
2024-03-11 11:57:26 UTC	834	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Mon, 11 Mar 2024 11:57:26 GMT Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3AocxTy5sZanTDl3LkkVak30MN5QAidCII; Path=/; Domain=.agkn.com; Expires=Tue, 11-Mar-2025 11:57:26 GMT; Max-Age=31536000; Secure; SameSite=None X-Cache: Miss from cloudfront Via: 1.1 7b2d3bc4b6f9e52c671b0f2fb9d0fc74.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO20-C1 X-Amz-Cf-Id: Xu4mhjfMB_g2vfgoW5qbCWJiWGlaTb-jw0_fsnlIHZDy6qDqLKRTYQ==
2024-03-11 11:57:26 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
649	192.168.2.16	50705	52.9.139.67	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:26 UTC	477	OUT	GET /sync/v1?source_id=kzFyzzqXEqukMDumpVLB6Eq3&source_user_id=212349963528473 HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:26 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:26 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:26 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:57:26 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
650	192.168.2.16	50706	74.214.196.131	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:26 UTC	870	OUT	GET /bh/rtset?pid=560288&ev=1&rurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D92%26partneruserid%3D%25%25VGUID%25%25&gdpr=0&gdpr_consent= HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: V=3ftvG5anVWUA; INGRESSCOOKIE=c74e8523d665f622; pb_rtb_ev=3-1q66\|7GB.0.1\|7bs.0.1\|7dN.0.AAKPDU7L3eMAABWFZYx_mg
2024-03-11 11:57:26 UTC	970	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-98c7f4b5-rbg4l Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: V=3ftvG5anVWUA;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Thu, 06-Mar-2025 11:57:26 GMT;Max-Age=31104000;SameSite=None Set-Cookie: pb_rtb_ev=3-1q66\|7GB.0.1\|7bs.0.1\|7dN.0.AAKPDU7L3eMAABWFZYx_mg;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Tue, 11-Mar-2025 11:57:26 GMT;Max-Age=31536000;SameSite=None Location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=92&partneruserid=3ftvG5anVWUA&ev=1&pid=560288&gdpr_consent=&gdpr=0 Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
651	192.168.2.16	50708	50.57.31.206	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:26 UTC	730	OUT	GET /pubmatic/1/info2?sType=sync&sExtCookieId=9A176ADB-73F4-4BD8-A648-23F2443493B5&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SEUNCY=9465D35DF42222D4
2024-03-11 11:57:26 UTC	580	IN	HTTP/1.1 200 OK Content-Type: image/gif UIP-Response-Status: Ok Frontend-ID: 9 Set-Cookie: SEUNCY=9465D35DF42222D4; Expires=Tue, 11 Mar 2025 11:57:26 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Date: Mon, 11 Mar 2024 11:57:26 GMT Content-Length: 42 Routing-Server-ID: -1 Access-Control-Allow-Origin: * Connection: close
2024-03-11 11:57:26 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
652	192.168.2.16	50709	74.119.118.138	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:26 UTC	827	OUT	GET /dis/usersync.aspx?r=30&p=273&cp=smartortb&cu=1&url=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D79%26partneruserid%3D%40%40CRITEO_USERID%40%40&gdpr=0&gdpr_consent= HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=fb6bf7e8-4454-41c2-9d45-dd203ebb7093
2024-03-11 11:57:26 UTC	557	IN	HTTP/1.1 302 Found content-length: 0 date: Mon, 11 Mar 2024 11:57:26 GMT server: Kestrel cache-control: no-cache expires: Mon, 11 Mar 2024 00:00:00 GMT location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=79&partneruserid=fb6bf7e8-4454-41c2-9d45-dd203ebb7093&gdpr=0&gdpr_consent= pragma: no-cache x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 1340567 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
653	192.168.2.16	50701	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:26 UTC	1384	OUT	GET /redir/?partnerid=49&partneruserid=7345073677437040781&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|135:TAM_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:26 UTC	706	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:25 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|49:7345073677437040781\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|135:TAM_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37; expires=Wed, 12 Mar 2025 11:57:26 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:26 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
654	192.168.2.16	50700	52.223.22.214	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:26 UTC	530	OUT	GET /getuid?redir=https%3A%2F%2Fads.stickyadstv.com%2Fuser-registering%3FdataProviderId%3D1580%26userId%3D$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=626499573555793188163; tluidp=626499573555793188163
2024-03-11 11:57:26 UTC	692	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:57:26 GMT Content-Length: 0 Connection: close Location: https://ads.stickyadstv.com/user-registering?dataProviderId=1580&userId=626499573555793188163 Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=626499573555793188163; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Sun, 09 Jun 2024 11:57:26 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=626499573555793188163; Max-Age=7776000; Expires=Sun, 09 Jun 2024 11:57:26 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
655	192.168.2.16	50707	216.22.16.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:26 UTC	1194	OUT	GET /redir/?partnerid=75&issi=1&partneruserid=71dcd657-b7ce-4e56-9064-0f83979f8fcb&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|75:71dcd657-b7ce-4e56-9064-0f83979f8fcb\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:26 UTC	712	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:26 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|75:71dcd657-b7ce-4e56-9064-0f83979f8fcb\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37; expires=Wed, 12 Mar 2025 11:57:26 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:26 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
656	192.168.2.16	50699	35.71.131.137	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:26 UTC	990	OUT	GET /track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=4311914755 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFEhQKBXRhcGFkEgsIqK7DwIvz4DwQBRIbCgxzaGFyZXRocm91Z2gSCwjWjMfSi_PgPBAFEhYKB2QwdHJvMWoSCwj-h-Hhi_PgPBAFGAEgASgCMgsIvL7H3KTz4DwQBTgBWg5zbWFydC1hZHNlcnZlcmAC
2024-03-11 11:57:26 UTC	642	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:57:26 GMT Content-Length: 181 Connection: close server: Kestrel location: https://sync.1rx.io/usersync/tradedesk/71dcd657-b7ce-4e56-9064-0f83979f8fcb set-cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; expires=Tue, 11 Mar 2025 11:57:26 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFEhQKBXRhcGFkEgsIqK7DwIvz4DwQBRIbCgxzaGFyZXRocm91Z2gSCwjWjMfSi_PgPBAFEhYKB2QwdHJvMWoSCwj-h-Hhi_PgPBAFGAEgASgCMgsIoPOX7qTz4DwQBTgBWgthZGNvbmR1Y3RvcmAC; expires=Tue, 11 Mar 2025 11:57:26 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-11 11:57:26 UTC	181	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 31 72 78 2e 69 6f 2f 75 73 65 72 73 79 6e 63 2f 74 72 61 64 65 64 65 73 6b 2f 37 31 64 63 64 36 35 37 2d 62 37 63 65 2d 34 65 35 36 2d 39 30 36 34 2d 30 66 38 33 39 37 39 66 38 66 63 62 22 3e 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 31 72 78 2e 69 6f 2f 75 73 65 72 73 79 6e 63 2f 74 72 61 64 65 64 65 73 6b 2f 37 31 64 63 64 36 35 37 2d 62 37 63 65 2d 34 65 35 36 2d 39 30 36 34 2d 30 66 38 33 39 37 39 66 38 66 63 62 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://sync.1rx.io/usersync/tradedesk/71dcd657-b7ce-4e56-9064-0f83979f8fcb">https://sync.1rx.io/usersync/tradedesk/71dcd657-b7ce-4e56-9064-0f83979f8fcb</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
657	192.168.2.16	50713	216.22.16.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:26 UTC	1160	OUT	GET /redir/?issi=1&partnerid=86&partneruserid=7822940101119878936&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|86:7822940101119878936\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:26 UTC	695	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:26 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|86:7822940101119878936\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37; expires=Wed, 12 Mar 2025 11:57:26 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:26 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
658	192.168.2.16	50714	52.9.139.67	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:26 UTC	510	OUT	GET /sync/v1?source_id=BVbSRuzbUWjBEF6bQrmLHKkX&source_user_id=y-o7eUixNE2oMWn2w9DoaTRVJhEsb6JNCG6wAd2Og7t_Z.~A HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:26 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:26 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:26 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:57:26 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
659	192.168.2.16	50716	204.237.133.120	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:26 UTC	3730	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=GTz-sRdlCHiHoCwUpfHuZQ HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23234-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23361-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk; KRTBCOOKIE_1278=23329-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23340-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23498-6255abe4-6520-429f-aa2c-493e15bdee11; KRTBCOOKIE_1323=23480-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23485-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23575-OPUc21b156e4d4f4c8381b77a05c19b0a40; KRTBCOOKIE_391=22924-1724005921034811649&KRTB&23263-1724005921034811649&KRTB&23481-1724005921034811649; KRTBCOOKIE_466=16530-6ec76371-3031-4b49-abb3-349fb3d7cf23; PugT=1710158233; SPugT=1710158234; chkChromeAb67Sec=10; pi=162538:3; DPSync3=1710720000%3A252_265_253%7C1711324800%3A259_245_201_263_260_235_226_236_228_219_256_258_261_262%7C1710201600%3A248_255%7C1711152000%3A257; SyncRTB3=1710720000%3A223_15_38_2%7C1712707200%3A224%7C1711411200%3A35%7C1715299200%3A69%7C1710979200%3A63%7C1711324800%3A234_165_56_21_48_46_7_250_240_249_231_176_96_13_220_104_178_99_264_22_254_3_54_55_71_233_166_5_266_8
2024-03-11 11:57:26 UTC	621	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 11 Mar 2024 11:57:26 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_904=23554-GTz-sRdlCHiHoCwUpfHuZQ&KRTB&23557-GTz-sRdlCHiHoCwUpfHuZQ; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:57:26 GMT; path=/ Set-Cookie: PugT=1710158246; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:57:26 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:57:26 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
660	192.168.2.16	50710	216.22.16.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:26 UTC	1181	OUT	GET /redir/?partnerid=80&gdpr=0&partneruserid=VbPHRgW3lUdOvpMVAr6PFFq_wxdOsJYSBeXINTmx HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|80:VbPHRgW3lUdOvpMVAr6PFFq_wxdOsJYSBeXINTmx\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:26 UTC	716	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:25 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|80:VbPHRgW3lUdOvpMVAr6PFFq_wxdOsJYSBeXINTmx\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37; expires=Wed, 12 Mar 2025 11:57:26 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:26 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
661	192.168.2.16	50722	104.36.113.107	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:26 UTC	3757	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=9sM9r_oDVSN4eO2NU2v64poQaSY&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23234-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23361-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk; KRTBCOOKIE_1278=23329-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23340-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23498-6255abe4-6520-429f-aa2c-493e15bdee11; KRTBCOOKIE_1323=23480-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23485-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23575-OPUc21b156e4d4f4c8381b77a05c19b0a40; KRTBCOOKIE_391=22924-1724005921034811649&KRTB&23263-1724005921034811649&KRTB&23481-1724005921034811649; KRTBCOOKIE_466=16530-6ec76371-3031-4b49-abb3-349fb3d7cf23; PugT=1710158233; SPugT=1710158234; chkChromeAb67Sec=10; pi=162538:3; DPSync3=1710720000%3A252_265_253%7C1711324800%3A259_245_201_263_260_235_226_236_228_219_256_258_261_262%7C1710201600%3A248_255%7C1711152000%3A257; SyncRTB3=1710720000%3A223_15_38_2%7C1712707200%3A224%7C1711411200%3A35%7C1715299200%3A69%7C1710979200%3A63%7C1711324800%3A234_165_56_21_48_46_7_250_240_249_231_176_96_13_220_104_178_99_264_22_254_3_54_55_71_233_166_5_266_8
2024-03-11 11:57:26 UTC	709	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 11 Mar 2024 11:57:25 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_860=16335-9sM9r_oDVSN4eO2NU2v64poQaSY&KRTB&23334-9sM9r_oDVSN4eO2NU2v64poQaSY&KRTB&23417-9sM9r_oDVSN4eO2NU2v64poQaSY&KRTB&23426-9sM9r_oDVSN4eO2NU2v64poQaSY; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 09-Jun-2024 11:57:25 GMT; path=/ Set-Cookie: PugT=1710158245; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:57:25 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:57:26 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
662	192.168.2.16	50721	142.251.2.149	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:26 UTC	4347	OUT	GET /ddm/activity/attribution_src_register;crd=cXVlcnlfZXZlbnRfaWQgewogIHRpbWVfdXNlYzogMTcxMDE1ODI0NTc0NTg2NwogIHNlcnZlcl9pcDogMzI0MDg4NTkKICBwcm9jZXNzX2lkOiAzMzIyNDc1MDQ1Cn0KZmxvb2RsaWdodF9jb25maWdfaWQ6IDkyMTIyNTIKYWR2ZXJ0aXNlcl9kb21haW46ICJodHRwczovL2Fkb2JlLmNvbSIKeGZhX2F0dHJpYnV0aW9uX2ludGVyYWN0aW9uX3R5cGU6IFZJRVcKaW1wcmVzc2lvbl9wcmlvcml0eTogMAppbXByZXNzaW9uX2V4cGlyeV9pbl9kYXlzOiAzMApldmVudF9pbXByZXNzaW9uX2lkOiAxMTM2MjM2ODUxMTA4NTc2NDkyMgpkZWJ1Z19rZXk6IDE3NTQwMDEwMjcwMDgwODE2MjY0CmltcHJlc3Npb25fbWVhc3VyZW1lbnRfZGltZW5zaW9uc19kYXRhIHsKICBtZWFzdXJlbWVudF9kaW1lbnNpb246IElNUFJFU1NJT05fRElNRU5TSU9OX1BST0RVQ1RfVFlQRQogIG1lYXN1cmVtZW50X2RpbWVuc2lvbl92YWx1ZSB7CiAgICBpbnQ2NF92YWx1ZTogMgogIH0KfQppbXByZXNzaW9uX21lYXN1cmVtZW50X2RpbWVuc2lvbnNfZGF0YSB7CiAgbWVhc3VyZW1lbnRfZGltZW5zaW9uOiBJTVBSRVNTSU9OX0RJTUVOU0lPTl9JTlRFUkFDVElPTl9UWVBFCiAgbWVhc3VyZW1lbnRfZGltZW5zaW9uX3ZhbHVlIHsKICAgIGludDY0X3ZhbHVlOiAzCiAgfQp9CmltcHJlc3Npb25fbWVhc3VyZW1lbnRfZGltZW5zaW9uc19kYXRhIHsKICBtZWFzdXJlbWVudF9kaW1lbnNpb246IElNUFJFU1NJT05fRElNRU5TSU9OX0lOVEVSQUNUSU9OX0RBVEUKICBtZWFzdXJlbWVudF9kaW1lbnNpb25fdmFsdWUgewogICAgc3RyaW5nX3ZhbHVlOiAiMjAyNC0wMy0xMSIKICB9Cn0KaW1wcmVzc2lvbl9tZWFzdXJlbWVudF9kaW1lbnNpb25zX2RhdGEgewogIG1lYXN1cmVtZW50X2RpbWVuc2lvbjogSU1QUkVTU0lPTl9ESU1FTlNJT05fRkxPT0RMSUdIVF9DT05GSUdfSUQKICBtZWFzdXJlbWVudF9kaW1lbnNpb25fdmFsdWUgewogICAgaW50NjRfdmFsdWU6IDkyMTIyNTIKICB9Cn0KaW1wcmVzc2lvbl9tZWFzdXJlbWVudF9kaW1lbnNpb25zX2RhdGEgewogIG1lYXN1cmVtZW50X2RpbWVuc2lvbjogSU1QUkVTU0lPTl9ESU1FTlNJT05fQ09SRV9QTEFURk9STV9TRVJWSUNFCiAgbWVhc3VyZW1lbnRfZGltZW5zaW9uX3ZhbHVlIHsKICAgIGludDY0X3ZhbHVlOiAwCiAgfQp9CmltcHJlc3Npb25fbWVhc3VyZW1lbnRfZGltZW5zaW9uc19kYXRhIHsKICBtZWFzdXJlbWVudF9kaW1lbnNpb246IElNUFJFU1NJT05fRElNRU5TSU9OX1BMQVRGT1JNX1RZUEUKICBtZWFzdXJlbWVudF9kaW1lbnNpb25fdmFsdWUgewogICAgaW50NjRfdmFsdWU6IDAKICB9Cn0KaW1wcmVzc2lvbl9tZWFzdXJlbWVudF9kaW1lbnNpb25zX2RhdGEgewogIG1lYXN1cmVtZW50X2RpbWVuc2lvbjogSU1QUkVTU0lPTl9ESU1FTlNJT05fUVVFUllfQ09VTlRSWQogIG1lYXN1cmVtZW50X2RpbWVuc2lvbl92YWx1ZSB7CiAgICBzdHJpbmdfdmFsdWU6ICJVUyIKICB9Cn0KaW1wcmVzc2lvbl9tZWFzdXJlbWVudF9kaW1lbnNpb25zX2RhdGEgewogIG1lYXN1cmVtZW50X2RpbWVuc2lvbjogSU1QUkVTU0lPTl9ESU1FTlNJT05fUExBQ0VNRU5UX0lECiAgbWVhc3VyZW1lbnRfZGltZW5zaW9uX3ZhbHVlIHsKICAgIGludDY0X3ZhbHVlOiAzODU3MDc1ODcKICB9Cn0KaW1wcmVzc2lvbl9tZWFzdXJlbWVudF9kaW1lbnNpb25zX2RhdGEgewogIG1lYXN1cmVtZW50X2RpbWVuc2lvbjogSU1QUkVTU0lPTl9ESU1FTlNJT05fRFYzX0FEVkVSVElTRVJfSUQKICBtZWFzdXJlbWVudF9kaW1lbnNpb25fdmFsdWUgewogICAgaW50NjRfdmFsdWU6IDQwMDQ5MzEKICB9Cn0KaW1wcmVzc2lvbl9tZWFzdXJlbWVudF9kaW1lbnNpb25zX2RhdGEgewogIG1lYXN1cmVtZW50X2RpbWVuc2lvbjogSU1QUkVTU0lPTl9ESU1FTlNJT05fRFYzX0xJTkVfSVRFTV9JRAogIG1lYXN1cmVtZW50X2RpbWVuc2lvbl92YWx1ZSB7CiAgICBpbnQ2NF92YWx1ZTogMjEwNDY1OTIzNzcKICB9Cn0KaW1wcmVzc2lvbl9tZWFzdXJlbWVudF9kaW1lbnNpb25zX2RhdGEgewogIG1lYXN1cmVtZW50X2RpbWVuc2lvbjogSU1QUkVTU0lPTl9ESU1FTlNJT05fRFYzX0NSRUFUSVZFX0lECiAgbWVhc3VyZW1lbnRfZGltZW5zaW9uX3ZhbHVlIHsKICAgIGludDY0X3ZhbHVlOiA1NDQyMjU3ODgKICB9Cn0KYXJjaGV0eXBlX2lkOiAxMgphcmNoZXR5cGVfaWQ6IDEzCmFyY2hldHlwZV9pZDogMTQKYXJjaGV0eXBlX2lkOiAxNQphZHZlcnRpc2VyX2NvbnZlcnNpb25fZG9tYWluczogImh0dHBzOi8vYWRvYmUuY29tIgphZHZlcnRpc2VyX2NvbnZlcnNpb25fZG9tYWluczogImh0dHBzOi8vZmxhc2h0YWxraW5nLmNvbSIKYWR2ZXJ0aXNlcl9jb252ZXJzaW9uX2RvbWFpbnM6ICJodHRwczovL2RlYnVnY29udmVyc2lvbmRvbWFpbjEuY29tIgppbXByZXNzaW9uX2V2ZW50X3JlcG9ydGluZ193aW5kb3dfZGF5czogNApicm93c2VyX2F0dHJpYnV0aW9uX2FwaV9yZXF1ZXN0X3Byb2Nlc3NpbmdfYml0czogNzM4MTk3NTA0CmRtYV9wcm9kdWN0X2lkOiAxMjI3MTU4MzcK HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlhWjE-nrLMqamcKd4HCzJGyk-lF6Y-_gdSV1_rcQ-Lc3JBzMSF3zk6wICTe0A; DSID=NO_DATA; ar_debug=1; APC=AfxxVi5YUxnPwsd7fPtyKzbxN7tPdmurBxtCa_F5XSaP9ZnkNqb1MQ
2024-03-11 11:57:26 UTC	1216	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 11 Mar 2024 11:57:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0x46f342e31e1df3400000000000000000","13":"0x8b0d3426e06b0aa70000000000000000","14":"0x22a7af40492be24b0000000000000000","15":"0x41b8e7071f24ef020000000000000000"},"debug_key":"17540010270080816264","debug_reporting":true,"destination":"https://adobe.com","event_report_window":"345600","expiry":"2592000","filter_data":{"14":[],"21":[],"8":["9212252"]},"priority":"0","source_event_id":"11362368511085764922"} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Wed, 10-Apr-2024 11:57:26 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
663	192.168.2.16	50718	216.22.16.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:26 UTC	1180	OUT	GET /redir/?issi=1&partnerid=22&partneruserid=1724005921034811649&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=22:1724005921034811649\|31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|76:GOOGLE_HOSTED_SI\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:27 UTC	715	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:26 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=22:1724005921034811649\|31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|76:GOOGLE_HOSTED_SI\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37; expires=Wed, 12 Mar 2025 11:57:26 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:27 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
664	192.168.2.16	50724	192.184.67.70	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:26 UTC	871	OUT	GET /dpixel?a=p-n5vvLvRdjg0ek&eid=0&qc_google_push=&google_push=AXcoOmTa_gSi2JFhTeHRn12ihR9fb9XQNVE2Lw9h-mUYB_aANnW7qavoKpGGc6iXvbxCgv1huRCHq8HwXCqD3NLMWU3bF1Ct_vzBjHA3hvBnJChYq9-wT03HN12vOWMDqfKZboLQYRaZ2tsy7JdbqhBKAUiu HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=65eef17d-816a8-799a4-641fc; d=EJsBGAGsK_ijC_vLEM-7EA
2024-03-11 11:57:26 UTC	747	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:57:26 GMT Content-Length: 0 Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://cm.g.doubleclick.net/pixel?gdpr=0&google_nid=B765081F39B1F7&google_push=AXcoOmTa_gSi2JFhTeHRn12ihR9fb9XQNVE2Lw9h-mUYB_aANnW7qavoKpGGc6iXvbxCgv1huRCHq8HwXCqD3NLMWU3bF1Ct_vzBjHA3hvBnJChYq9-wT03HN12vOWMDqfKZboLQYRaZ2tsy7JdbqhBKAUiu&google_hm=i1PBKxUbhkVXS2_AdP3HUA P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=ED4BGwGsK4EO-TC_vLEM-7EA; expires=Sun, 09-Jun-2024 11:57:26 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
665	192.168.2.16	50729	54.215.97.222	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:26 UTC	733	OUT	GET /sync/v1?source_id=m3k4T1aBLLPMpeMdFP9tJTiB&source_user_id=ac45c3ec-c17b-4938-9811-6a9b00078f13 HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:26 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:26 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:26 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:57:26 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
666	192.168.2.16	50727	35.160.96.43	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:26 UTC	876	OUT	GET /sync/adx?google_push=AXcoOmQ64B5RVuCMirdD3az4OZFjRLYWsP1zngU4sr9Q8KwPFsiH2bMlZrkaHdaElmDLIbNAmNw0yBCculqWm_S2d8UuRLe0AdOXrqJaa1VNAnuzIAmjNz2hb1YefOxl6KP9t2TM2ATZ_rCklyb34jQVBAUk HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo
2024-03-11 11:57:27 UTC	1046	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:57:26 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=yahoo&google_push=AXcoOmQ64B5RVuCMirdD3az4OZFjRLYWsP1zngU4sr9Q8KwPFsiH2bMlZrkaHdaElmDLIbNAmNw0yBCculqWm_S2d8UuRLe0AdOXrqJaa1VNAnuzIAmjNz2hb1YefOxl6KP9t2TM2ATZ_rCklyb34jQVBAUk&google_hm=eS01TUxVbmJwRTJwSHhKOTBocUlycFBJRndmRkxkWUw2bX5B Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo; Expires=Tue, 11 Mar 2025 17:57:26 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
667	192.168.2.16	50712	162.19.138.119	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:26 UTC	777	OUT	GET /i/102/9.gif?gdpr=0&gdpr_consent= HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=da35dfea-1127-79f5-8b21-8d4166047880#1710158233639#2; 3pi=102#1710158237036#1964507446\|264#1710158239046#-333836484#71dcd657-b7ce-4e56-9064-0f83979f8fcb
2024-03-11 11:57:27 UTC	1637	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: id5=da35dfea-1127-79f5-8b21-8d4166047880#1710158233639#3; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:27 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: 3pi=102#1710158237036#1964507446\|264#1710158239046#-333836484#71dcd657-b7ce-4e56-9064-0f83979f8fcb; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:27 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://ib.adnxs.com/getuid?https://id5-sync.com/c/102/2/8/2.gif?puid=$UID&gdpr=0&gdpr_consent= transfer-encoding: chunked date: Mon, 11 Mar 2024 11:57:26 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-03-11 11:57:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
668	192.168.2.16	50717	35.214.235.183	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:26 UTC	739	OUT	GET /?redirect=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D124%26partneruserid%3D%7Bdevice_id%7D&pubid=5679&gdpr=0&gdpr_consent= HTTP/1.1 Host: csync.loopme.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
669	192.168.2.16	50733	38.99.107.14	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:26 UTC	831	OUT	GET /sn.ashx?google_push=AXcoOmTft9RzgwcXGqYQKF5bYx_6K5MNK0ONLnfYMVYUYD4N0ZTrutDDWlu3c1pBlebGzSuRtfApf4MChFeLYF1PYVHCDq87e-_aqeLMSCH9SHVX8vIO7W0YWfstVHhW68VO7P11HGxs3Xa26kw3O-9erjV7 HTTP/1.1 Host: aep.mxptint.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mxpim=R4E330_11235B51F_E079381.1.000000000000000065EEF193
2024-03-11 11:57:27 UTC	741	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://cm.g.doubleclick.net/pixel?google_nid=pf8b3zh4kyw&google_push=AXcoOmTft9RzgwcXGqYQKF5bYx_6K5MNK0ONLnfYMVYUYD4N0ZTrutDDWlu3c1pBlebGzSuRtfApf4MChFeLYF1PYVHCDq87e-_aqeLMSCH9SHVX8vIO7W0YWfstVHhW68VO7P11HGxs3Xa26kw3O-9erjV7&google_hm=UjRFMzMwXzExMjM1QjUxRl9FMDc5Mzgx P3P: CP="NON CUR ADM DEVo PSAo PSDo OUR IND UNI COM NAV DEM STA PRE" Set-Cookie: mxpim=R4E330_11235B51F_E079381.1.65EEF1A70000000065EEF193; domain=mxptint.net; expires=Wed, 11-Mar-2026 11:57:27 GMT; path=/; secure; SameSite=None Date: Mon, 11 Mar 2024 11:57:26 GMT Connection: close Content-Length: 394 Strict-Transport-Security: max-age=-393163047; includeSubDomains
2024-03-11 11:57:27 UTC	394	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 70 66 38 62 33 7a 68 34 6b 79 77 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 70 75 73 68 3d 41 58 63 6f 4f 6d 54 66 74 39 52 7a 67 77 63 58 47 71 59 51 4b 46 35 62 59 78 5f 36 4b 35 4d 4e 4b 30 4f 4e 4c 6e 66 59 4d 56 59 55 59 44 34 4e 30 5a 54 72 75 74 44 44 57 6c 75 33 63 31 70 42 6c 65 62 47 7a 53 75 52 74 66 41 70 66 34 4d 43 68 46 65 4c 59 46 31 50 59 56 48 43 44 71 38 37 65 2d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://cm.g.doubleclick.net/pixel?google_nid=pf8b3zh4kyw&google_push=AXcoOmTft9RzgwcXGqYQKF5bYx_6K5MNK0ONLnfYMVYUYD4N0ZTrutDDWlu3c1pBlebGzSuRtfApf4MChFeLYF1PYVHCDq87e-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
670	192.168.2.16	50725	69.90.133.51	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:26 UTC	779	OUT	GET /tum?umid=4&uid=&google_push=AXcoOmSpbemza_yuZ9OTOdHQzrDfhX6v6hClCvAUQls_mGHbZ_fIFzQuqBdBbyHujNekztt0bNUIdBpjMN4SAkXyzrqbjlGoaheXwUz2a1I9wXl9nidmGNJuPGJJm3ctAQ16ErONS0IRbkkOIXpoYffcSZhZ HTTP/1.1 Host: ums.acuityplatform.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:27 UTC	27	IN	HTTP/1.1 204 No Content

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
671	192.168.2.16	50735	44.230.187.183	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:26 UTC	819	OUT	GET /dsp/google/pixelmatch?google_push=AXcoOmTF44p9nh_0y-tI2KYaLEc-K5FYZkUEcUdYZ5hKxSLU5cqgTuxuPRUqvxDw1cynRSzSfboYqkAaD7bLeCga--FyHfzhbbzLFqJ-mDBgPH-Gv80DJXI1_1BhnTgT_-H0N89UbyaRoAKhLYLIsdVVkf8 HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=ITYsABZHyF-4XRyhT4uuZCmM
2024-03-11 11:57:27 UTC	688	IN	HTTP/1.1 307 Temporary Redirect Date: Mon, 11 Mar 2024 11:57:27 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=sovrn&google_push=AXcoOmTF44p9nh_0y-tI2KYaLEc-K5FYZkUEcUdYZ5hKxSLU5cqgTuxuPRUqvxDw1cynRSzSfboYqkAaD7bLeCga--FyHfzhbbzLFqJ-mDBgPH-Gv80DJXI1_1BhnTgT_-H0N89UbyaRoAKhLYLIsdVVkf8&google_hm=ITYsABZHyF-4XRyhT4uuZCmM Set-Cookie: ljt_reader=ITYsABZHyF-4XRyhT4uuZCmM;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
672	192.168.2.16	50726	35.212.133.238	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:26 UTC	858	OUT	GET /sync?ssp=google&google_push=AXcoOmR3BXt5aaoQFuLH-riyAqoMHU2Ts3U5EEyQaPjVZSz3LaYDK7-tkeZRP_6rKrGlZpICVDQefSeA2PbyS7u3aRT7HuISMzmkI1iPlw6nAq7SsSJO90nU9y7SeZc5yTGoiqMsMaPQ6i8Wwi1nxg7MkTs HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=6ec76371-3031-4b49-abb3-349fb3d7cf23; c=1710158227; tuuid_lu=1710158229
2024-03-11 11:57:27 UTC	525	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:57:27 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //p.rfihub.com/cm?in=1&pub=20513&ssp=google&gdpr=&gdpr_consent= Set-Cookie: google_push=AXcoOmR3BXt5aaoQFuLH-riyAqoMHU2Ts3U5EEyQaPjVZSz3LaYDK7-tkeZRP_6rKrGlZpICVDQefSeA2PbyS7u3aRT7HuISMzmkI1iPlw6nAq7SsSJO90nU9y7SeZc5yTGoiqMsMaPQ6i8Wwi1nxg7MkTs; path=/; expires=Mon, 11-Mar-2024 12:02:27 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
673	192.168.2.16	50738	104.36.113.107	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:26 UTC	3729	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzMmdGw9MTI5NjAw&piggybackCookie=Q7634446451890918085 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23234-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23361-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk; KRTBCOOKIE_1278=23329-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23340-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23498-6255abe4-6520-429f-aa2c-493e15bdee11; KRTBCOOKIE_1323=23480-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23485-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23575-OPUc21b156e4d4f4c8381b77a05c19b0a40; KRTBCOOKIE_391=22924-1724005921034811649&KRTB&23263-1724005921034811649&KRTB&23481-1724005921034811649; KRTBCOOKIE_466=16530-6ec76371-3031-4b49-abb3-349fb3d7cf23; PugT=1710158233; SPugT=1710158234; chkChromeAb67Sec=10; pi=162538:3; DPSync3=1710720000%3A252_265_253%7C1711324800%3A259_245_201_263_260_235_226_236_228_219_256_258_261_262%7C1710201600%3A248_255%7C1711152000%3A257; SyncRTB3=1710720000%3A223_15_38_2%7C1712707200%3A224%7C1711411200%3A35%7C1715299200%3A69%7C1710979200%3A63%7C1711324800%3A234_165_56_21_48_46_7_250_240_249_231_176_96_13_220_104_178_99_264_22_254_3_54_55_71_233_166_5_266_8
2024-03-11 11:57:27 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 11 Mar 2024 11:57:25 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:57:27 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
674	192.168.2.16	50731	35.71.131.137	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:26 UTC	873	OUT	GET /track/cmf/generic?ttd_pid=xksw9la&ttd_tpi=1&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFEhQKBXRhcGFkEgsIqK7DwIvz4DwQBRIbCgxzaGFyZXRocm91Z2gSCwjWjMfSi_PgPBAFEhYKB2QwdHJvMWoSCwj-h-Hhi_PgPBAFGAEgASgCMgsIvL7H3KTz4DwQBTgBWg5zbWFydC1hZHNlcnZlcmAC
2024-03-11 11:57:27 UTC	678	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:57:27 GMT Content-Length: 261 Connection: close server: Kestrel location: https://pixel.onaudience.com/?partner=147&mapped=71dcd657-b7ce-4e56-9064-0f83979f8fcb&icm&gdpr=0&gdpr_consent=&cver set-cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; expires=Tue, 11 Mar 2025 11:57:27 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFEhQKBXRhcGFkEgsIqK7DwIvz4DwQBRIbCgxzaGFyZXRocm91Z2gSCwjWjMfSi_PgPBAFEhYKB2QwdHJvMWoSCwj-h-Hhi_PgPBAFGAEgASgCMgsIxKO68aTz4DwQBTgBWgd4a3N3OWxhYAI.; expires=Tue, 11 Mar 2025 11:57:27 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-11 11:57:27 UTC	261	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 6f 6e 61 75 64 69 65 6e 63 65 2e 63 6f 6d 2f 3f 70 61 72 74 6e 65 72 3d 31 34 37 26 6d 61 70 70 65 64 3d 37 31 64 63 64 36 35 37 2d 62 37 63 65 2d 34 65 35 36 2d 39 30 36 34 2d 30 66 38 33 39 37 39 66 38 66 63 62 26 69 63 6d 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 63 76 65 72 22 3e 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 6f 6e 61 75 64 69 65 6e 63 65 2e 63 6f 6d 2f 3f 70 61 72 74 6e 65 72 3d 31 34 37 26 6d 61 70 70 65 64 3d 37 31 64 63 64 36 35 37 2d 62 37 63 65 2d 34 65 35 36 2d 39 30 36 34 2d 30 66 38 33 39 37 39 66 38 66 63 62 26 69 63 6d 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 63 76 Data Ascii: Redirecting to: <a href="https://pixel.onaudience.com/?partner=147&mapped=71dcd657-b7ce-4e56-9064-0f83979f8fcb&icm&gdpr=0&gdpr_consent=&cver">https://pixel.onaudience.com/?partner=147&mapped=71dcd657-b7ce-4e56-9064-0f83979f8fcb&icm&gdpr=0&gdpr_consent=&cv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
675	192.168.2.16	50742	18.244.214.61	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:27 UTC	772	OUT	GET /c/?adExInit=sas&redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D133%26partneruserid%3D$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: s.ad.smaato.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SCM=27fa38a615; SCMsas=27fa38a615
2024-03-11 11:57:27 UTC	663	IN	HTTP/1.1 302 Moved Temporarily Content-Length: 0 Connection: close Server: CloudFront Date: Mon, 11 Mar 2024 11:57:27 GMT Cache-Control: no-cache, must-revalidate Set-Cookie: SCM=27fa38a615; Max-Age=1814400; Domain=.smaato.net; SameSite=None; Path=/; Secure Set-Cookie: SCMsas=27fa38a615; Max-Age=1814400; Domain=.smaato.net; Path=/; SameSite=None; Secure Location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=133&partneruserid=27fa38a615 X-Cache: Miss from cloudfront Via: 1.1 2b0f261418972622662cec56e4b49826.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO53-P4 X-Amz-Cf-Id: HNqrhhE5DPCRFttHpQtD1yVj9SOQ97oPlhuKUz-eQkKoVRhJHY9Tng==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
676	192.168.2.16	50741	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:27 UTC	1413	OUT	GET /redir/?partnerid=76&partneruserid=&gdpr=0&gdpr_consent=&google_error=15 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=22:1724005921034811649\|31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|76:GOOGLE_HOSTED_SI\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:27 UTC	128	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:26 GMT transfer-encoding: chunked connection: close
2024-03-11 11:57:27 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
677	192.168.2.16	50743	216.22.16.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:27 UTC	1181	OUT	GET /redir/?issi=1&partnerid=66&partneruserid=0a42220400c08ec15f936285&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|66:0a42220400c08ec15f936285\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|135:TAM_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:27 UTC	711	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:26 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|66:0a42220400c08ec15f936285\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|135:TAM_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37; expires=Tue, 11 Mar 2025 11:57:27 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:27 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
678	192.168.2.16	50744	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:27 UTC	1428	OUT	GET /redir/?issi=1&partnerid=92&partneruserid=3ftvG5anVWUA&ev=1&pid=560288&gdpr_consent=&gdpr=0 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|66:0a42220400c08ec15f936285\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|135:TAM_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:27 UTC	727	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:26 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|66:0a42220400c08ec15f936285\|92:3ftvG5anVWUA\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|135:TAM_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37; expires=Tue, 11 Mar 2025 11:57:27 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:27 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
679	192.168.2.16	50752	142.251.2.149	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:27 UTC	3948	OUT	GET /ddm/activity/attribution_src_register;crd=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 HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlhWjE-nrLMqamcKd4HCzJGyk-lF6Y-_gdSV1_rcQ-Lc3JBzMSF3zk6wICTe0A; DSID=NO_DATA; ar_debug=1
2024-03-11 11:57:27 UTC	1216	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 11 Mar 2024 11:57:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0x46f342e31e1df3400000000000000000","13":"0x8b0d3426e06b0aa70000000000000000","14":"0x22a7af40492be24b0000000000000000","15":"0x41b8e7071f24ef020000000000000000"},"debug_key":"17540010270080816264","debug_reporting":true,"destination":"https://adobe.com","event_report_window":"345600","expiry":"2592000","filter_data":{"14":[],"21":[],"8":["9212252"]},"priority":"0","source_event_id":"11362368511085764922"} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Wed, 10-Apr-2024 11:57:27 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
680	192.168.2.16	50749	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:27 UTC	1436	OUT	GET /redir/?issi=1&partnerid=79&partneruserid=fb6bf7e8-4454-41c2-9d45-dd203ebb7093&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|66:0a42220400c08ec15f936285\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|135:TAM_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:27 UTC	751	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:27 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|66:0a42220400c08ec15f936285\|79:fb6bf7e8-4454-41c2-9d45-dd203ebb7093\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|135:TAM_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37; expires=Tue, 11 Mar 2025 11:57:27 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:27 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
681	192.168.2.16	50739	80.77.87.163	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:27 UTC	877	OUT	GET /e09bad714a425a93d6dea503dcf9c528.gif?redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D130%26partneruserid%3D%5BUID%5D%26gdpr%3D%5BGDPR%5D%26gdpr_consent%3D%5BGDPR_CONSENT%5D&gdpr=0&gdpr_consent= HTTP/1.1 Host: cs.admanmedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: admtr=bb7cbab5-f73e-439c-a427-5018e7e027e6; ac_r=CS159
2024-03-11 11:57:27 UTC	619	IN	HTTP/1.1 302 Found Server: nginx Date: Mon, 11 Mar 2024 11:57:27 GMT Content-Length: 0 Connection: close Set-Cookie: admtr=bb7cbab5-f73e-439c-a427-5018e7e027e6; path=/; domain=.admanmedia.com; expires=Mon, 25 Mar 2024 11:46:31 GMT;SameSite=None;Secure Set-Cookie: ac_r=CS159; path=/; domain=.admanmedia.com; expires=Mon, 25 Mar 2024 11:46:31 GMT;SameSite=None;Secure Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=130&partneruserid=bb7cbab5-f73e-439c-a427-5018e7e027e6&gdpr=0&gdpr_consent=[GDPR_CONSENT]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
682	192.168.2.16	50750	216.22.16.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:27 UTC	1164	OUT	GET /redir/?partnerid=49&partneruserid=7345073677437040781&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|49:7345073677437040781\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|135:TAM_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:27 UTC	706	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:27 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|49:7345073677437040781\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|135:TAM_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37; expires=Tue, 11 Mar 2025 11:57:27 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:27 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
683	192.168.2.16	50740	52.94.220.185	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:27 UTC	493	OUT	GET /s/dcm?pid=f7a5db36-1d5c-4c26-81b6-b4d0807faffb&id=1899505890594565248&gdpr=0&gdpr_consent= HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_mD47eJIUzEqu3DVtJD2b0; ad-privacy=0
2024-03-11 11:57:27 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 11 Mar 2024 11:57:27 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 4RTZD74153Q1HREJAPGZ Set-Cookie: ad-id=A_mD47eJIUzEqu3DVtJD2b0; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 11:57:27 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 11:57:27 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-11 11:57:27 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
684	192.168.2.16	50529	104.254.148.252	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:27 UTC	894	OUT	GET /getuid?https://id5-sync.com/c/102/2/8/2.gif?puid=$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; receive-cookie-deprecation=1; uuid2=7822940101119878936; icu=ChgIkPoyEAoYAyADKAMwoOO7rwY4A0ADSAMQoOO7rwYYAg..
2024-03-11 11:57:27 UTC	1449	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Mon, 11 Mar 2024 11:57:27 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://id5-sync.com/c/102/2/8/2.gif?puid=7822940101119878936&gdpr=0&gdpr_consent= AN-X-Request-Uuid: cb07dac0-1a4a-4d78-ad84-6c925a623ac6 Set-Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:27 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 27-Feb-2034 11:57:27 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=7822940101119878936; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:27 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.105.38; 154.16.105.38; 894.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
685	192.168.2.16	50748	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:27 UTC	1526	OUT	GET /redir/?issi=1&partnerid=139&partneruserid=0&redirurl=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3D98KUz37ype9D3X2sf9ovgeTt%26source_user_id%3DSMART_USER_ID&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|49:7345073677437040781\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|135:TAM_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:27 UTC	822	IN	HTTP/1.1 302 Found content-length: 0 date: Mon, 11 Mar 2024 11:57:26 GMT cache-control: no-cache,no-store location: https://match.sharethrough.com/sync/v1?source_id=98KUz37ype9D3X2sf9ovgeTt&source_user_id=1899505890594565248&gdpr=0&gdpr_consent= pragma: no-cache set-cookie: csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|49:7345073677437040781\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|135:TAM_OK\|139:0\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37; expires=Tue, 11 Mar 2025 11:57:27 GMT; domain=smartadserver.com; path=/; SameSite=None; secure p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
686	192.168.2.16	50755	52.9.139.67	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:27 UTC	498	OUT	GET /sync/v1?source_id=m3k4T1aBLLPMpeMdFP9tJTiB&source_user_id=ac45c3ec-c17b-4938-9811-6a9b00078f13 HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:27 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:27 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:27 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:57:27 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
687	192.168.2.16	50753	50.57.31.206	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:27 UTC	494	OUT	GET /pubmatic/1/info2?sType=sync&sExtCookieId=9A176ADB-73F4-4BD8-A648-23F2443493B5&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SEUNCY=9465D35DF42222D4
2024-03-11 11:57:27 UTC	580	IN	HTTP/1.1 200 OK Content-Type: image/gif UIP-Response-Status: Ok Frontend-ID: 9 Set-Cookie: SEUNCY=9465D35DF42222D4; Expires=Tue, 11 Mar 2025 11:57:27 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Date: Mon, 11 Mar 2024 11:57:27 GMT Content-Length: 42 Routing-Server-ID: -1 Access-Control-Allow-Origin: * Connection: close
2024-03-11 11:57:27 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
688	192.168.2.16	50745	50.31.142.63	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:27 UTC	814	OUT	GET /usersync/googleadx/?google_push=AXcoOmQnJfnHGRaXWFt7mthQepyDR2C5ms77cxecwp7TL5wbOgMAhSSwP2sATJFXbkWREVPO2rt290j7ZChbbkVsJgRQrzH_qasa-4XTzN9lrdp9ijDCRjWTKHsUpNy8SUOzesPqpMYHDNhpFg3DyCm1Cdm_ HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=njquBca-QhUZqz9ypfJV
2024-03-11 11:57:27 UTC	783	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 292 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=zemanta&google_push=AXcoOmQnJfnHGRaXWFt7mthQepyDR2C5ms77cxecwp7TL5wbOgMAhSSwP2sATJFXbkWREVPO2rt290j7ZChbbkVsJgRQrzH_qasa-4XTzN9lrdp9ijDCRjWTKHsUpNy8SUOzesPqpMYHDNhpFg3DyCm1Cdm_&google_hm=bmpxdUJjYS1RaFVacXo5eXBmSlY= P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=njquBca-QhUZqz9ypfJV; Path=/; Domain=zemanta.com; Expires=Tue, 11 Mar 2025 11:57:27 GMT; Max-Age=31536000; Secure; SameSite=None Date: Mon, 11 Mar 2024 11:57:27 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-03-11 11:57:27 UTC	292	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 7a 65 6d 61 6e 74 61 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 70 75 73 68 3d 41 58 63 6f 4f 6d 51 6e 4a 66 6e 48 47 52 61 58 57 46 74 37 6d 74 68 51 65 70 79 44 52 32 43 35 6d 73 37 37 63 78 65 63 77 70 37 54 4c 35 77 62 4f 67 4d 41 68 53 53 77 50 32 73 41 54 4a 46 58 62 6b 57 52 45 56 50 4f 32 72 74 32 39 30 6a 37 5a 43 68 62 62 6b 56 73 4a 67 52 51 72 7a 48 5f 71 61 73 61 2d 34 58 54 7a 4e 39 6c 72 64 70 39 69 6a 44 43 52 6a 57 54 4b 48 73 55 70 4e 79 38 53 55 4f 7a 65 73 50 71 70 4d 59 48 44 4e 68 70 46 67 33 44 79 43 6d 31 43 64 6d 5f 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 62 6d 70 78 64 Data Ascii: <a href="https://cm.g.doubleclick.net/pixel?google_nid=zemanta&google_push=AXcoOmQnJfnHGRaXWFt7mthQepyDR2C5ms77cxecwp7TL5wbOgMAhSSwP2sATJFXbkWREVPO2rt290j7ZChbbkVsJgRQrzH_qasa-4XTzN9lrdp9ijDCRjWTKHsUpNy8SUOzesPqpMYHDNhpFg3DyCm1Cdm_&google_hm=bmpxd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
689	192.168.2.16	50756	142.251.2.148	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:27 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 205 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:27 UTC	205	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 61 64 6f 62 65 2e 63 6f 6d 22 2c 22 73 6f 75 72 63 65 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 37 35 34 30 30 31 30 32 37 30 30 38 30 38 31 36 32 36 34 22 2c 22 73 6f 75 72 63 65 5f 65 76 65 6e 74 5f 69 64 22 3a 22 31 31 33 36 32 33 36 38 35 31 31 30 38 35 37 36 34 39 32 32 22 2c 22 73 6f 75 72 63 65 5f 73 69 74 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 22 7d 2c 22 74 79 70 65 22 3a 22 73 6f 75 72 63 65 2d 73 75 63 63 65 73 73 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://adobe.com","source_debug_key":"17540010270080816264","source_event_id":"11362368511085764922","source_site":"https://sourceforge.net"},"type":"source-success"}]
2024-03-11 11:57:27 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 11 Mar 2024 11:57:27 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
690	192.168.2.16	50751	69.194.240.13	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:27 UTC	869	OUT	GET /usersync/tradedesk/71dcd657-b7ce-4e56-9064-0f83979f8fcb HTTP/1.1 Host: sync.1rx.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005%22%2C%22nxtrdr%22%3Afalse%2C%22zdxidn%22%3A%221508%22%7D
2024-03-11 11:57:27 UTC	784	IN	HTTP/1.1 302 Found date: Mon, 11 Mar 2024 11:57:27 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Tue, 11 Mar 2025 11:57:27 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.targeting.unrulymedia.com/csync/RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005?redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA%3D%26piggybackCookie%3DRX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005 connection: close
2024-03-11 11:57:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
691	192.168.2.16	50764	18.154.144.60	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:27 UTC	581	OUT	GET /ftUtils.js HTTP/1.1 Host: ajs-assets.ftstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:27 UTC	826	IN	HTTP/1.1 200 OK Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range Access-Control-Max-Age: 3000 Last-Modified: Mon, 04 Mar 2024 15:53:41 GMT x-amz-server-side-encryption: AES256 Server: AmazonS3 Access-Control-Allow-Origin: * X-Varnish: 472063267 Via: 1.1 varnish (Varnish/5.1), 1.1 e235a9ff25582ed62ef48771e429fb16.cloudfront.net (CloudFront) Accept-Ranges: bytes Date: Mon, 11 Mar 2024 11:57:27 GMT Cache-Control: max-age=86400 ETag: W/"ff56f311f5a69d0213d01af94b111f42" Vary: Accept-Encoding,Accept-Encoding X-Cache: Hit from cloudfront X-Amz-Cf-Pop: LAX50-P4 X-Amz-Cf-Id: gjm0usRB1N0tHKUxu2pLNH2aQK5XEG7UwJlzk7zUukhB4EPhuMQm6w== Age: 2043
2024-03-11 11:57:27 UTC	15558	IN	Data Raw: 31 35 38 34 61 0d 0a 77 69 6e 64 6f 77 2e 66 74 55 74 69 6c 73 3d 77 69 6e 64 6f 77 2e 66 74 55 74 69 6c 73 7c 7c 7b 7d 2c 77 69 6e 64 6f 77 2e 66 74 55 74 69 6c 73 2e 63 6f 6d 6d 6f 6e 3d 7b 24 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 69 3d 65 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 28 65 3d 65 7c 7c 74 2e 6d 61 72 6b 75 70 2e 64 69 76 2e 69 64 29 26 26 28 69 3d 74 2e 77 2e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 29 2c 6e 65 77 20 74 2e 24 42 61 73 65 28 7b 6f 3a 74 2c 79 3a 69 7d 29 7d 2c 24 42 61 73 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 69 3d 74 68 69 73 3b 69 2e 24 3d 21 30 2c 69 2e 6f 3d 74 2e 6f 2c 74 2e 79 3d 74 2e 79 7c 7c 7b 7d 2c 69 Data Ascii: 1584awindow.ftUtils=window.ftUtils\|\|{},window.ftUtils.common={$:function(e){var t=this,i=e;return"string"==typeof(e=e\|\|t.markup.div.id)&&(i=t.w.document.getElementById(e)),new t.$Base({o:t,y:i})},$Base:function(t){var i=this;i.$=!0,i.o=t.o,t.y=t.y\|\|{},i
2024-03-11 11:57:27 UTC	16384	IN	Data Raw: 61 6c 6c 62 61 63 6b 41 50 49 2e 5f 46 54 26 26 6e 2e 66 61 6c 6c 62 61 63 6b 41 50 49 2e 5f 46 54 2e 67 6f 6e 65 46 75 6c 6c 73 63 72 65 65 6e 26 26 65 3f 69 25 31 38 30 3d 3d 30 3f 74 3c 65 3f 39 30 3a 69 3a 65 3c 74 3f 30 3a 69 3a 69 7d 2c 67 65 74 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 63 61 6c 6c 28 22 67 65 74 53 74 61 74 65 22 29 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 42 52 49 44 47 45 29 7d 2c 67 65 74 56 65 72 73 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 42 52 49 44 47 45 2e 67 65 74 56 65 72 73 69 6f 6e 3f 74 68 69 73 2e 5f 63 61 6c 6c 28 22 67 65 74 56 65 72 73 69 6f 6e 22 29 2e 61 70 70 6c 79 28 74 68 69 73 2e 5f 42 52 49 44 47 45 2c 61 72 67 75 6d 65 6e Data Ascii: allbackAPI._FT&&n.fallbackAPI._FT.goneFullscreen&&e?i%180==0?t<e?90:i:e<t?0:i:i},getState:function(){return this._call("getState").call(this._BRIDGE)},getVersion:function(){return this._BRIDGE.getVersion?this._call("getVersion").apply(this._BRIDGE,argumen
2024-03-11 11:57:28 UTC	16384	IN	Data Raw: 28 22 66 74 73 22 29 26 26 22 30 22 21 3d 3d 6e 2e 71 73 28 22 66 74 73 22 29 2e 6c 65 6e 67 74 68 3f 6e 2e 71 73 28 22 66 74 73 22 29 3a 22 22 7d 2c 7b 70 61 72 61 6d 3a 22 66 6c 22 2c 76 61 6c 75 65 3a 6e 2e 71 73 28 22 66 6c 22 29 26 26 22 30 22 21 3d 3d 6e 2e 71 73 28 22 66 6c 22 29 2e 6c 65 6e 67 74 68 3f 6e 2e 71 73 28 22 66 6c 22 29 3a 22 22 7d 2c 7b 70 61 72 61 6d 3a 22 70 6f 73 74 61 6c 22 2c 76 61 6c 75 65 3a 77 69 6e 64 6f 77 5b 22 66 74 50 6f 73 74 61 6c 5f 22 2b 6e 2e 70 6c 61 63 65 6d 65 6e 74 2e 69 64 5d 7c 7c 22 22 7d 2c 7b 70 61 72 61 6d 3a 22 6f 6f 62 22 2c 76 61 6c 75 65 3a 6e 2e 71 73 28 22 6f 6f 62 22 29 26 26 22 30 22 21 3d 3d 6e 2e 71 73 28 22 6f 6f 62 22 29 2e 6c 65 6e 67 74 68 3f 6e 2e 71 73 28 22 6f 6f 62 22 29 3a 22 22 7d 2c 7b Data Ascii: ("fts")&&"0"!==n.qs("fts").length?n.qs("fts"):""},{param:"fl",value:n.qs("fl")&&"0"!==n.qs("fl").length?n.qs("fl"):""},{param:"postal",value:window["ftPostal_"+n.placement.id]\|\|""},{param:"oob",value:n.qs("oob")&&"0"!==n.qs("oob").length?n.qs("oob"):""},{
2024-03-11 11:57:28 UTC	16384	IN	Data Raw: 3b 22 2c 22 68 65 69 67 68 74 3a 22 2b 6e 2e 63 72 65 61 74 69 76 65 2e 68 65 69 67 68 74 2b 22 70 78 3b 22 2c 22 7a 2d 69 6e 64 65 78 3a 20 38 39 30 30 30 3b 22 2c 27 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 67 69 66 3b 62 61 73 65 36 34 2c 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 48 35 42 41 45 41 41 41 41 41 4c 41 41 41 41 41 41 42 41 41 45 41 41 41 49 43 52 41 45 41 4f 77 3d 3d 22 29 3b 27 2c 22 74 6f 70 3a 20 30 3b 22 2c 22 6c 65 66 74 3a 20 30 3b 22 5d 2e 6a 6f 69 6e 28 22 20 22 29 2c 65 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 21 3d 3d 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 Data Ascii: ;","height:"+n.creative.height+"px;","z-index: 89000;",'background: url("data:image/gif;base64,R0lGODlhAQABAIAAAP///wAAACH5BAEAAAAALAAAAAABAAEAAAICRAEAOw==");',"top: 0;","left: 0;"].join(" "),e.offsetParent!==e.parentElement&&(e.parentElement.style.positi
2024-03-11 11:57:28 UTC	16384	IN	Data Raw: 63 68 6f 72 2e 69 64 3b 74 2e 73 65 74 75 70 50 61 67 65 56 69 73 69 62 69 6c 69 74 79 28 29 2c 22 6c 6f 61 64 69 6e 67 22 3d 3d 3d 74 2e 61 70 69 2e 67 65 74 53 74 61 74 65 28 29 26 26 74 2e 61 70 70 65 6e 64 3f 74 2e 61 70 69 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 61 64 79 22 2c 65 29 3a 65 28 29 7d 2c 69 6e 74 65 72 61 63 74 69 6f 6e 4d 61 6e 61 67 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 69 3d 74 68 69 73 2c 6e 3d 31 30 2c 61 3d 36 65 33 2c 72 3d 30 2c 6f 3d 69 2e 69 73 2e 6d 6f 62 69 6c 65 2c 65 3d 69 2e 74 72 61 63 6b 69 6e 67 33 72 64 50 61 72 74 79 2e 75 73 65 72 45 6e 67 61 67 65 6d 65 6e 74 2c 73 3d 21 30 3b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 69 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 22 69 6e Data Ascii: chor.id;t.setupPageVisibility(),"loading"===t.api.getState()&&t.append?t.api.addEventListener("ready",e):e()},interactionManager:function(){var t,i=this,n=10,a=6e3,r=0,o=i.is.mobile,e=i.tracking3rdParty.userEngagement,s=!0;function c(){i.dispatchEvent("in
2024-03-11 11:57:28 UTC	7058	IN	Data Raw: 54 69 6d 65 3d 63 2e 5f 5f 70 72 6f 70 65 72 74 69 65 73 2e 61 64 44 75 72 61 74 69 6f 6e 2c 63 2e 69 73 4c 69 6e 65 61 72 3d 63 2e 5f 5f 70 72 6f 70 65 72 74 69 65 73 2e 61 64 4c 69 6e 65 61 72 2c 6c 2e 73 63 72 69 70 74 4c 6f 63 61 74 69 6f 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 6c 2e 73 63 72 69 70 74 4c 6f 63 61 74 69 6f 6e 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 2c 63 2e 61 64 53 6c 6f 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6c 2e 73 63 72 69 70 74 4c 6f 63 61 74 69 6f 6e 29 2c 6c 2e 77 3d 63 2e 61 64 53 6c 6f 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 74 79 6c 65 2e 6d 61 72 67 69 6e Data Ascii: Time=c.__properties.adDuration,c.isLinear=c.__properties.adLinear,l.scriptLocation=document.createElement("div"),l.scriptLocation.style.display="none",c.adSlot.appendChild(l.scriptLocation),l.w=c.adSlot.ownerDocument.defaultView,document.body.style.margin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
692	192.168.2.16	50757	34.255.246.57	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:27 UTC	886	OUT	GET /a?adform_uid=1724005921034811649&r=eyJ1IjoiaHR0cHM6Ly9hLmF1ZHJ0ZS5jb206NDQzL3AiLCJkIjpbXX0%3D HTTP/1.1 Host: a.audrte.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: arcki2=9flSy3nJ5IvQWiaYTcU12v7Xg!20220908!1710158235401!ip#154.16.105.38; arcki2_ddp2=9flSy3nJ5IvQWiaYTcU12v7Xg!20220908!1710158237382; arcki2_pubmatic=9A176ADB-73F4-4BD8-A648-23F2443493B5!20220908!1710158246005
2024-03-11 11:57:28 UTC	557	IN	HTTP/1.1 302 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Origin: * Date: Mon, 11 Mar 2024 11:57:28 GMT Location: https://a.audrte.com:443/p Server: nginx/1.22.1 Set-Cookie: arcki2_adform=1724005921034811649!20220908!1710158248143; Max-Age=1296000; Expires=Tue, 26 Mar 2024 11:57:28 GMT; Domain=audrte.com; Path=/; Secure; HttpOnly; SameSite=none; Secure Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
693	192.168.2.16	50766	192.82.242.209	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:27 UTC	3852	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=85471405&p=162538&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23234-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23361-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk; KRTBCOOKIE_1278=23329-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23340-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23498-6255abe4-6520-429f-aa2c-493e15bdee11; KRTBCOOKIE_1323=23480-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23485-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23575-OPUc21b156e4d4f4c8381b77a05c19b0a40; KRTBCOOKIE_391=22924-1724005921034811649&KRTB&23263-1724005921034811649&KRTB&23481-1724005921034811649; KRTBCOOKIE_466=16530-6ec76371-3031-4b49-abb3-349fb3d7cf23; SPugT=1710158234; chkChromeAb67Sec=10; DPSync3=1710720000%3A252_265_253%7C1711324800%3A259_245_201_263_260_235_226_236_228_219_256_258_261_262%7C1710201600%3A248_255%7C1711152000%3A257; SyncRTB3=1710720000%3A223_15_38_2%7C1712707200%3A224%7C1711411200%3A35%7C1715299200%3A69%7C1710979200%3A63%7C1711324800%3A234_165_56_21_48_46_7_250_240_249_231_176_96_13_220_104_178_99_264_22_254_3_54_55_71_233_166_5_266_8; KRTBCOOKIE_904=23554-GTz-sRdlCHiHoCwUpfHuZQ&KRTB&23557-GTz-sRdlCHiHoCwUpfHuZQ; KRTBCOOKIE_860=16335-9sM9r_oDVSN4eO2NU2v64poQaSY&KRTB&23334-9sM9r_oDVSN4eO2NU2v64poQaSY&KRTB&23417-9sM9r_oDVSN4eO2NU2v64poQaSY&KRTB&23426-9sM9r_oDVSN4eO2NU2v64poQaSY; PugT=1710158245
2024-03-11 11:57:28 UTC	829	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=11; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=162538:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1710720000%3A253_252_265_164%7C1711324800%3A245_260_219_258_261_235_256_259_263_262_197_201_226_236_228%7C1710201600%3A255_248%7C1711152000%3A257; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Mon, 11 Mar 2024 11:57:27 GMT Content-Length: 311 Connection: close
2024-03-11 11:57:28 UTC	311	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 66 72 61 6d 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 63 31 2e 61 64 66 6f 72 6d 2e 6e 65 74 2f 73 65 72 76 69 6e 67 2f 63 6f 6f 6b 69 65 2f 6d 61 74 63 68 3f 70 61 72 74 79 3d 31 34 26 63 69 64 3d 39 41 31 37 36 41 44 42 2d 37 33 46 34 2d 34 42 44 38 2d 41 36 34 38 2d 32 33 46 32 34 34 33 34 39 33 42 35 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 69 64 73 79 6e 63 2e 72 6c 63 64 6e 2e 63 6f 6d 2f 34 32 30 34 38 36 2e 67 69 66 3f 70 61 72 74 6e 65 72 5f 75 69 64 3d 39 41 31 37 36 41 44 42 2d 37 33 46 34 2d 34 42 44 38 2d 41 36 34 38 2d 32 33 46 32 34 34 Data Ascii: PubMatic.loadAsyncIframePixel('https://c1.adform.net/serving/cookie/match?party=14&cid=9A176ADB-73F4-4BD8-A648-23F2443493B5&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn.com/420486.gif?partner_uid=9A176ADB-73F4-4BD8-A648-23F244

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
694	192.168.2.16	50765	104.36.113.111	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:27 UTC	3778	OUT	GET /AdServer/SPug?partnerID=162538&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23234-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23361-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk; KRTBCOOKIE_1278=23329-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23340-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23498-6255abe4-6520-429f-aa2c-493e15bdee11; KRTBCOOKIE_1323=23480-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23485-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23575-OPUc21b156e4d4f4c8381b77a05c19b0a40; KRTBCOOKIE_391=22924-1724005921034811649&KRTB&23263-1724005921034811649&KRTB&23481-1724005921034811649; KRTBCOOKIE_466=16530-6ec76371-3031-4b49-abb3-349fb3d7cf23; SPugT=1710158234; chkChromeAb67Sec=10; pi=162538:3; DPSync3=1710720000%3A252_265_253%7C1711324800%3A259_245_201_263_260_235_226_236_228_219_256_258_261_262%7C1710201600%3A248_255%7C1711152000%3A257; SyncRTB3=1710720000%3A223_15_38_2%7C1712707200%3A224%7C1711411200%3A35%7C1715299200%3A69%7C1710979200%3A63%7C1711324800%3A234_165_56_21_48_46_7_250_240_249_231_176_96_13_220_104_178_99_264_22_254_3_54_55_71_233_166_5_266_8; KRTBCOOKIE_904=23554-GTz-sRdlCHiHoCwUpfHuZQ&KRTB&23557-GTz-sRdlCHiHoCwUpfHuZQ; KRTBCOOKIE_860=16335-9sM9r_oDVSN4eO2NU2v64poQaSY&KRTB&23334-9sM9r_oDVSN4eO2NU2v64poQaSY&KRTB&23417-9sM9r_oDVSN4eO2NU2v64poQaSY&KRTB&23426-9sM9r_oDVSN4eO2NU2v64poQaSY; PugT=1710158245
2024-03-11 11:57:28 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 11 Mar 2024 11:57:26 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1710158246; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:57:26 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:57:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
695	192.168.2.16	50761	141.94.171.212	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:27 UTC	720	OUT	GET /?partner=147&mapped=71dcd657-b7ce-4e56-9064-0f83979f8fcb&icm&gdpr=0&gdpr_consent=&cver HTTP/1.1 Host: pixel.onaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookie=ec1562c92b86ee97; done_redirects147=1
2024-03-11 11:57:28 UTC	419	IN	HTTP/1.1 302 Found set-cookie: cookie=ec1562c92b86ee97; Max-Age=31536000; Expires=Tue, 11 Mar 2025 11:57:28 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None set-cookie: done_redirects219=1; Max-Age=86400; Expires=Tue, 12 Mar 2024 11:57:28 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None location: https://spl.zeotap.com?zdid=1332&zcluid=ec1562c92b86ee97 content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
696	192.168.2.16	50763	34.255.246.57	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:27 UTC	944	OUT	GET /get?p=M501991648&r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D141%26partneruserid%3D$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: a.audrte.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: arcki2=9flSy3nJ5IvQWiaYTcU12v7Xg!20220908!1710158235401!ip#154.16.105.38; arcki2_ddp2=9flSy3nJ5IvQWiaYTcU12v7Xg!20220908!1710158237382; arcki2_pubmatic=9A176ADB-73F4-4BD8-A648-23F2443493B5!20220908!1710158246005
2024-03-11 11:57:28 UTC	628	IN	HTTP/1.1 302 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Origin: * Date: Mon, 11 Mar 2024 11:57:28 GMT Location: https://dmp.adform.net/serving/cookie/match/?party=1003&r=eyJ1IjoiaHR0cHM6Ly9ydGItY3N5bmMuc21hcnRhZHNlcnZlci5jb20vcmVkaXIvP2lzc2lcdTAwM2QxXHUwMDI2cGFydG5lcmlkXHUwMDNkMTQxXHUwMDI2cGFydG5lcnVzZXJpZFx1MDAzZDlmbFN5M25KNUl2UVdpYVlUY1UxMnY3WGciLCJkIjpbeyJuYW1lIjoic21hcnQifV19&gdpr=0&gdpr_consent= Server: nginx/1.22.1 Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
697	192.168.2.16	50768	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:27 UTC	1394	OUT	GET /redir/?issi=1&partnerid=133&partneruserid=27fa38a615 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=22:1724005921034811649\|31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|76:GOOGLE_HOSTED_SI\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:28 UTC	730	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:28 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=22:1724005921034811649\|31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|76:GOOGLE_HOSTED_SI\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|133:27fa38a615\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37; expires=Wed, 12 Mar 2025 11:57:28 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:28 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
698	192.168.2.16	50769	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:27 UTC	1455	OUT	GET /redir/?issi=1&partnerid=130&partneruserid=bb7cbab5-f73e-439c-a427-5018e7e027e6&gdpr=0&gdpr_consent=[GDPR_CONSENT] HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=22:1724005921034811649\|31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|76:GOOGLE_HOSTED_SI\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:28 UTC	756	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:27 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=22:1724005921034811649\|31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|76:GOOGLE_HOSTED_SI\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|130:bb7cbab5-f73e-439c-a427-5018e7e027e6\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37; expires=Tue, 11 Mar 2025 11:57:28 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:28 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
699	192.168.2.16	50770	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:27 UTC	1556	OUT	GET /redir/?issi=1&partnerid=150&partneruserid=0&redirurl=https%3A%2F%2Fwt.rqtrk.eu%3Fpid%3D58a76248-f101-4e52-b8f7-c4de9362ea12%26src%3Dwww%26type%3D100%26sid%3D0%26uid%3DSMART_USER_ID%26gdpr_pd%3D0&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=22:1724005921034811649\|31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|76:GOOGLE_HOSTED_SI\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:28 UTC	840	IN	HTTP/1.1 302 Found content-length: 0 date: Mon, 11 Mar 2024 11:57:27 GMT cache-control: no-cache,no-store location: https://wt.rqtrk.eu?pid=58a76248-f101-4e52-b8f7-c4de9362ea12&src=www&type=100&sid=0&uid=1899505890594565248&gdpr_pd=0&gdpr=0&gdpr_consent= pragma: no-cache set-cookie: csync=22:1724005921034811649\|31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|76:GOOGLE_HOSTED_SI\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37\|150:0; expires=Wed, 12 Mar 2025 11:57:28 GMT; domain=smartadserver.com; path=/; SameSite=None; secure p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
700	192.168.2.16	50771	216.22.16.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:27 UTC	1170	OUT	GET /redir/?partnerid=76&partneruserid=&gdpr=0&gdpr_consent=&google_error=15 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=22:1724005921034811649\|31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|76:GOOGLE_HOSTED_SI\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:28 UTC	128	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:27 GMT transfer-encoding: chunked connection: close
2024-03-11 11:57:28 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
701	192.168.2.16	50773	34.96.71.22	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:28 UTC	820	OUT	GET /s/eqx?sspurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D152%26partneruserid%3DPARTNER_USER_ID&gdpr=0&gdpr_consent= HTTP/1.1 Host: s.company-target.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=8fb517aa-a8d0-437d-988f-7084f5819e19; tuuid_lu=1710158235\|eqx:0\|ix:0
2024-03-11 11:57:28 UTC	705	IN	HTTP/1.1 302 Found Access-Control-Allow-Methods: GET,OPTIONS Access-Control-Allow-Origin: *.smartadserver.com Content-Type: text/html; charset=utf-8 Location: https://rtb-csync.smartadserver.com/redir/?gdpr=0&gdpr_consent=&issi=1&partnerid=152&partneruserid=8fb517aa-a8d0-437d-988f-7084f5819e19 Set-Cookie: tuuid=8fb517aa-a8d0-437d-988f-7084f5819e19; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Set-Cookie: tuuid_lu=1710158248\|eqx:0\|ix:0; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Date: Mon, 11 Mar 2024 11:57:28 GMT Content-Length: 174 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:57:28 UTC	174	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 74 62 2d 63 73 79 6e 63 2e 73 6d 61 72 74 61 64 73 65 72 76 65 72 2e 63 6f 6d 2f 72 65 64 69 72 2f 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 69 73 73 69 3d 31 26 61 6d 70 3b 70 61 72 74 6e 65 72 69 64 3d 31 35 32 26 61 6d 70 3b 70 61 72 74 6e 65 72 75 73 65 72 69 64 3d 38 66 62 35 31 37 61 61 2d 61 38 64 30 2d 34 33 37 64 2d 39 38 38 66 2d 37 30 38 34 66 35 38 31 39 65 31 39 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://rtb-csync.smartadserver.com/redir/?gdpr=0&gdpr_consent=&issi=1&partnerid=152&partneruserid=8fb517aa-a8d0-437d-988f-7084f5819e19">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
702	192.168.2.16	50777	52.52.154.39	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:28 UTC	745	OUT	GET /sync/v1?source_id=98KUz37ype9D3X2sf9ovgeTt&source_user_id=1899505890594565248&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:28 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:28 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:28 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:57:28 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
703	192.168.2.16	50767	162.19.138.119	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:28 UTC	806	OUT	GET /c/102/2/8/2.gif?puid=7822940101119878936&gdpr=0&gdpr_consent= HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3pi=102#1710158237036#1964507446\|264#1710158239046#-333836484#71dcd657-b7ce-4e56-9064-0f83979f8fcb; id5=da35dfea-1127-79f5-8b21-8d4166047880#1710158233639#3
2024-03-11 11:57:28 UTC	1484	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: 3pi=2#1710158248567#767531070#7822940101119878936\|102#1710158237036#1964507446\|264#1710158239046#-333836484#71dcd657-b7ce-4e56-9064-0f83979f8fcb; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:28 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=gif; Max-Age=300; Expires=Mon, 11-Mar-2024 12:02:28 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=102; Max-Age=300; Expires=Mon, 11-Mar-2024 12:02:28 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=7; Max-Age=300; Expires=Mon, 11-Mar-2024 12:02:28 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=3; Max-Age=300; Expires=Mon, 11-Mar-2024 12:02:28 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=0\|; Max-Age=300; Expires=Mon, 11-Mar-2024 12:02:28 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://match.prod.bidr.io/cookie-sync/id5?us_privacy= transfer-encoding: chunked date: Mon, 11 Mar 2024 11:57:27 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-03-11 11:57:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
704	192.168.2.16	50774	216.22.16.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:28 UTC	1201	OUT	GET /redir/?issi=1&partnerid=92&partneruserid=3ftvG5anVWUA&ev=1&pid=560288&gdpr_consent=&gdpr=0 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|66:0a42220400c08ec15f936285\|92:3ftvG5anVWUA\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|135:TAM_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:28 UTC	727	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:27 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|66:0a42220400c08ec15f936285\|92:3ftvG5anVWUA\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|135:TAM_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37; expires=Wed, 12 Mar 2025 11:57:28 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:28 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
705	192.168.2.16	50776	216.22.16.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:28 UTC	1233	OUT	GET /redir/?issi=1&partnerid=79&partneruserid=fb6bf7e8-4454-41c2-9d45-dd203ebb7093&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|66:0a42220400c08ec15f936285\|79:fb6bf7e8-4454-41c2-9d45-dd203ebb7093\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|135:TAM_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:28 UTC	751	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:28 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|66:0a42220400c08ec15f936285\|79:fb6bf7e8-4454-41c2-9d45-dd203ebb7093\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|135:TAM_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37; expires=Tue, 11 Mar 2025 11:57:28 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:28 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
706	192.168.2.16	50780	35.212.133.238	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:28 UTC	909	OUT	GET /sync?dsp_id=119&user_id=1973209972465453479&expires=30&ssp=google HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=6ec76371-3031-4b49-abb3-349fb3d7cf23; c=1710158227; tuuid_lu=1710158229; google_push=AXcoOmR3BXt5aaoQFuLH-riyAqoMHU2Ts3U5EEyQaPjVZSz3LaYDK7-tkeZRP_6rKrGlZpICVDQefSeA2PbyS7u3aRT7HuISMzmkI1iPlw6nAq7SsSJO90nU9y7SeZc5yTGoiqMsMaPQ6i8Wwi1nxg7MkTs
2024-03-11 11:57:28 UTC	697	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:57:28 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //cm.g.doubleclick.net/pixel?google_nid=bdsw&google_push=AXcoOmR3BXt5aaoQFuLH-riyAqoMHU2Ts3U5EEyQaPjVZSz3LaYDK7-tkeZRP_6rKrGlZpICVDQefSeA2PbyS7u3aRT7HuISMzmkI1iPlw6nAq7SsSJO90nU9y7SeZc5yTGoiqMsMaPQ6i8Wwi1nxg7MkTs&google_hm=bsdjcTAxS0mrszSfs9fPIw==&gdpr=&gdpr_consent= Set-Cookie: google_push=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
707	192.168.2.16	50784	35.244.154.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:28 UTC	730	OUT	GET /420486.gif?partner_uid=9A176ADB-73F4-4BD8-A648-23F2443493B5 HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pxrc=CJPju68GEgUI6EcQABIFCNtOEAI=; rlas3=N+0/VuGKojJaOOm42RcYUFYmzAEAL4KXC73Hrxo9kEM=
2024-03-11 11:57:28 UTC	792	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://us-u.openx.net/w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fidsync.rlcdn.com%2F396846.gif%3Fserved_by%3Devergreen%26partner_uid%3D P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=rrybn0sTZ5NaOOm42RcYUFYmzAEAL4KXC73Hrxo9kEM=; Path=/; Domain=rlcdn.com; Expires=Tue, 11 Mar 2025 11:57:28 GMT; Secure; SameSite=None Set-Cookie: pxrc=CJPju68GEgUI6EcQABIFCNtOEAISBgi46wEQFQ==; Path=/; Domain=rlcdn.com; Expires=Fri, 10 May 2024 11:57:28 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Mon, 11 Mar 2024 11:57:28 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
708	192.168.2.16	50778	69.194.240.13	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:28 UTC	1006	OUT	GET /csync/RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005?redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA%3D%26piggybackCookie%3DRX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005%22%7D
2024-03-11 11:57:28 UTC	628	IN	HTTP/1.1 302 Found date: Mon, 11 Mar 2024 11:57:28 GMT content-type: text/html transfer-encoding: chunked set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005%22%7D; path=/; expires=Tue, 11 Mar 2025 11:57:28 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA=&piggybackCookie=RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005 etag: RX5a36053c69dd47d484e1b94f859f1cd2005 connection: close
2024-03-11 11:57:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
709	192.168.2.16	50790	52.9.139.67	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:28 UTC	502	OUT	GET /sync/v1?source_id=98KUz37ype9D3X2sf9ovgeTt&source_user_id=1899505890594565248&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:29 UTC	320	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:29 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:29 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-11 11:57:29 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
710	192.168.2.16	50787	216.22.16.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:28 UTC	1166	OUT	GET /redir/?issi=1&partnerid=133&partneruserid=27fa38a615 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=22:1724005921034811649\|31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|76:GOOGLE_HOSTED_SI\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|133:27fa38a615\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:29 UTC	730	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:28 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=22:1724005921034811649\|31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|76:GOOGLE_HOSTED_SI\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|133:27fa38a615\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37; expires=Tue, 11 Mar 2025 11:57:29 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:29 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
711	192.168.2.16	50788	216.22.16.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:28 UTC	1253	OUT	GET /redir/?issi=1&partnerid=130&partneruserid=bb7cbab5-f73e-439c-a427-5018e7e027e6&gdpr=0&gdpr_consent=[GDPR_CONSENT] HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=22:1724005921034811649\|31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|76:GOOGLE_HOSTED_SI\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|130:bb7cbab5-f73e-439c-a427-5018e7e027e6\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:29 UTC	756	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:29 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=22:1724005921034811649\|31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|76:GOOGLE_HOSTED_SI\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|130:bb7cbab5-f73e-439c-a427-5018e7e027e6\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37; expires=Tue, 11 Mar 2025 11:57:29 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:29 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
712	192.168.2.16	50793	13.226.210.30	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:28 UTC	678	OUT	GET /display/8065398/4362981.json HTTP/1.1 Host: agen-assets.ftstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:29 UTC	812	IN	HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range Access-Control-Max-Age: 3000 Last-Modified: Tue, 13 Feb 2024 20:32:42 GMT x-amz-server-side-encryption: AES256 Server: AmazonS3 Access-Control-Allow-Origin: * X-Varnish: 14914663 Via: 1.1 varnish (Varnish/5.1), 1.1 548c2d28df76d61dde347634b8c93b72.cloudfront.net (CloudFront) Accept-Ranges: bytes Date: Mon, 11 Mar 2024 11:57:30 GMT Cache-Control: max-age=30 ETag: W/"da09f652813942217a9e3d4f95edddb7" Vary: Accept-Encoding,Accept-Encoding X-Cache: RefreshHit from cloudfront X-Amz-Cf-Pop: LAX50-C1 X-Amz-Cf-Id: h1bO9G8rQYgSjwmEZvJtg-wHm546-uJlS59lKzRDbNtA0rArX6yjmQ==
2024-03-11 11:57:29 UTC	4224	IN	Data Raw: 31 30 37 38 0d 0a 7b 22 69 64 22 3a 33 37 32 32 30 36 30 37 2c 22 74 69 6d 65 53 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 32 2d 31 33 54 32 30 3a 33 31 3a 31 35 2b 30 30 30 30 22 2c 22 61 6c 74 49 6d 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 65 72 76 65 64 62 79 2e 66 6c 61 73 68 74 61 6c 6b 69 6e 67 2e 63 6f 6d 2f 63 6c 69 63 6b 2f 38 2f 32 32 35 32 39 31 3b 38 30 36 35 33 39 38 3b 34 33 36 32 39 38 31 3b 32 31 30 3b 5b 46 54 5f 43 4f 4e 46 49 44 5d 2f 3f 67 3d 5b 46 54 5f 47 55 49 44 5d 26 72 61 6e 64 6f 6d 3d 31 38 31 32 33 39 2e 31 31 35 35 34 39 34 32 35 37 34 26 66 74 5f 77 69 64 74 68 3d 33 30 30 26 66 74 5f 68 65 69 67 68 74 3d 32 35 30 26 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 64 6f 62 65 2e 63 6f 6d 2f 61 63 72 6f 62 61 74 Data Ascii: 1078{"id":37220607,"timeStamp":"2024-02-13T20:31:15+0000","altImageUrl":"https://servedby.flashtalking.com/click/8/225291;8065398;4362981;210;[FT_CONFID]/?g=[FT_GUID]&random=181239.11554942574&ft_width=300&ft_height=250&url=https://www.adobe.com/acrobat
2024-03-11 11:57:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
713	192.168.2.16	50789	51.222.241.106	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:28 UTC	754	OUT	GET /?pid=58a76248-f101-4e52-b8f7-c4de9362ea12&src=www&type=100&sid=0&uid=1899505890594565248&gdpr_pd=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: wt.rqtrk.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: browser_id=493755f2-09c2-4b96-b3fb-614b089ac45a
2024-03-11 11:57:29 UTC	328	IN	HTTP/1.1 200 OK server: istio-envoy date: Mon, 11 Mar 2024 11:57:29 GMT content-type: image/gif content-length: 43 p3p: CP="NOI DSP COR DEVa PSAa PSDa OUR BUS UNI COM NAV STA" cache-control: no-cache,private pragma: no-cache expires: Mon, 11 Mar 2024 11:57:28 GMT x-envoy-upstream-service-time: 0 connection: close
2024-03-11 11:57:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
714	192.168.2.16	50791	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:28 UTC	1447	OUT	GET /redir/?gdpr=0&gdpr_consent=&issi=1&partnerid=152&partneruserid=8fb517aa-a8d0-437d-988f-7084f5819e19 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=22:1724005921034811649\|31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|76:GOOGLE_HOSTED_SI\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37\|150:0
2024-03-11 11:57:29 UTC	762	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:29 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=22:1724005921034811649\|31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|76:GOOGLE_HOSTED_SI\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37\|150:0\|152:8fb517aa-a8d0-437d-988f-7084f5819e19; expires=Tue, 11 Mar 2025 11:57:29 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:29 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
715	192.168.2.16	50785	34.255.246.57	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:28 UTC	852	OUT	GET /p HTTP/1.1 Host: a.audrte.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: arcki2=9flSy3nJ5IvQWiaYTcU12v7Xg!20220908!1710158235401!ip#154.16.105.38; arcki2_ddp2=9flSy3nJ5IvQWiaYTcU12v7Xg!20220908!1710158237382; arcki2_pubmatic=9A176ADB-73F4-4BD8-A648-23F2443493B5!20220908!1710158246005; arcki2_adform=1724005921034811649!20220908!1710158248143
2024-03-11 11:57:29 UTC	351	IN	HTTP/1.1 200 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Origin: * Content-Type: image/png Date: Mon, 11 Mar 2024 11:57:29 GMT Server: nginx/1.22.1 Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Content-Length: 68 Connection: Close
2024-03-11 11:57:29 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
716	192.168.2.16	50794	104.22.51.98	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:28 UTC	608	OUT	GET /?zdid=1332&zcluid=ec1562c92b86ee97 HTTP/1.1 Host: spl.zeotap.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:29 UTC	1142	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:57:29 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-headers: * access-control-allow-origin: https://ads.pubmatic.com location: https://cm.g.doubleclick.net/pixel?google_nid=zeotap_ddp&google_cm&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=98b0bf49-7792-48ef-6725-eedef40ec42e&reqId=47445c2f-d6f2-4f5e-456b-e1e02d8cb77a&zcluid=ec1562c92b86ee97&zdid=1332 set-cookie: zc=98b0bf49-7792-48ef-6725-eedef40ec42e; Path=/; Domain=.zeotap.com; Max-Age=31536000; SameSite=None; Secure set-cookie: zsc=%D4%84%C9T%93%EF%3F%C4%3At%11%E7%85N%88%EA%A6%ED%01%13%87%DFAU%F9%C1z%2A%12%D5%21r%25%25%2A%13x%BD%5B%F7%80eR%D1%AF%F9%9C%3F%29%DDR%D2%95m%16%17%B1%12%7D%EF%9E%2F%A2%1Ch%24%93%9A%99%06%E2%9C%60Y%F7%B8%B99%98o2%5EU; Path=/; Domain=.zeotap.com; Max-Age=86400; SameSite=None; Secure vary: Origin via: 1.1 google CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=2592000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 862b5e015cca0add-LAS
2024-03-11 11:57:29 UTC	227	IN	Data Raw: 31 31 38 0d 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 7a 65 6f 74 61 70 5f 64 64 70 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 6d 26 61 6d 70 3b 7a 70 61 72 74 6e 65 72 69 64 3d 31 26 61 6d 70 3b 65 6e 76 3d 6d 57 65 62 26 61 6d 70 3b 65 76 65 6e 74 54 79 70 65 3d 6d 61 70 26 61 6d 70 3b 69 64 5f 6d 69 64 5f 34 3d 39 38 62 30 62 66 34 39 2d 37 37 39 32 2d 34 38 65 66 2d 36 37 32 35 2d 65 65 64 65 66 34 30 65 63 34 32 65 26 61 6d 70 3b 72 65 71 49 64 3d 34 37 34 34 35 63 32 66 2d 64 36 66 32 2d 34 66 35 65 2d 34 35 36 62 2d 65 31 65 30 32 64 38 63 62 37 Data Ascii: 118<a href="https://cm.g.doubleclick.net/pixel?google_nid=zeotap_ddp&google_cm&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=98b0bf49-7792-48ef-6725-eedef40ec42e&reqId=47445c2f-d6f2-4f5e-456b-e1e02d8cb7
2024-03-11 11:57:29 UTC	60	IN	Data Raw: 37 61 26 61 6d 70 3b 7a 63 6c 75 69 64 3d 65 63 31 35 36 32 63 39 32 62 38 36 65 65 39 37 26 61 6d 70 3b 7a 64 69 64 3d 31 33 33 32 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a 0d 0a Data Ascii: 7a&zcluid=ec1562c92b86ee97&zdid=1332">Found</a>.
2024-03-11 11:57:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
717	192.168.2.16	50796	52.11.41.99	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:29 UTC	689	OUT	GET /cookie-sync/id5?us_privacy= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAKPDU7L3eMAABWFZYx_mg; bitoIsSecure=ok; checkForPermission=ok
2024-03-11 11:57:29 UTC	418	IN	HTTP/1.1 303 See Other Date: Mon, 11 Mar 2024 11:57:29 GMT location: https://id5-sync.com/k/155.gif?puid=AAKPDU7L3eMAABWFZYx_mg&id5AccountNum=155&numCascadesAllowed=9 Server: gunicorn set-cookie: bito=AAKPDU7L3eMAABWFZYx_mg; Domain=bidr.io; expires=Thu, 10 Apr 2025 07:57:29 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
718	192.168.2.16	50798	34.98.64.218	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:29 UTC	872	OUT	GET /w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fidsync.rlcdn.com%2F396846.gif%3Fserved_by%3Devergreen%26partner_uid%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=2a5f7fb6-27c9-488e-9168-f0298407ea3a\|1710158208; pd=v2\|1710158229\|vMgavPkWgyiK; univ_id=537072971\|71dcd657-b7ce-4e56-9064-0f83979f8fcb\|1710158231967576
2024-03-11 11:57:29 UTC	579	IN	HTTP/1.1 302 Found Vary: Accept, Accept-Encoding Set-Cookie: i=2a5f7fb6-27c9-488e-9168-f0298407ea3a\|1710158208; Version=1; Expires=Tue, 11-Mar-2025 11:57:29 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://idsync.rlcdn.com/396846.gif?served_by=evergreen&partner_uid=ac353f89-4309-4119-94c7-b832d9bbb81f Date: Mon, 11 Mar 2024 11:57:29 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
719	192.168.2.16	50799	104.36.113.107	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:29 UTC	4006	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA=&piggybackCookie=RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23234-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23361-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk; KRTBCOOKIE_1278=23329-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23340-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23498-6255abe4-6520-429f-aa2c-493e15bdee11; KRTBCOOKIE_1323=23480-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23485-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23575-OPUc21b156e4d4f4c8381b77a05c19b0a40; KRTBCOOKIE_391=22924-1724005921034811649&KRTB&23263-1724005921034811649&KRTB&23481-1724005921034811649; KRTBCOOKIE_466=16530-6ec76371-3031-4b49-abb3-349fb3d7cf23; SyncRTB3=1710720000%3A223_15_38_2%7C1712707200%3A224%7C1711411200%3A35%7C1715299200%3A69%7C1710979200%3A63%7C1711324800%3A234_165_56_21_48_46_7_250_240_249_231_176_96_13_220_104_178_99_264_22_254_3_54_55_71_233_166_5_266_8; KRTBCOOKIE_904=23554-GTz-sRdlCHiHoCwUpfHuZQ&KRTB&23557-GTz-sRdlCHiHoCwUpfHuZQ; KRTBCOOKIE_860=16335-9sM9r_oDVSN4eO2NU2v64poQaSY&KRTB&23334-9sM9r_oDVSN4eO2NU2v64poQaSY&KRTB&23417-9sM9r_oDVSN4eO2NU2v64poQaSY&KRTB&23426-9sM9r_oDVSN4eO2NU2v64poQaSY; PugT=1710158245; chkChromeAb67Sec=11; pi=162538:4; DPSync3=1710720000%3A253_252_265_164%7C1711324800%3A245_260_219_258_261_235_256_259_263_262_197_201_226_236_228%7C1710201600%3A255_248%7C1711152000%3A257; SPugT=1710158246
2024-03-11 11:57:29 UTC	663	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 11 Mar 2024 11:57:29 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_594=17105-RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005&KRTB&17107-RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 09-Jun-2024 11:57:29 GMT; path=/ Set-Cookie: PugT=1710158249; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 10-Apr-2024 11:57:29 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-11 11:57:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
720	192.168.2.16	50800	216.22.16.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:29 UTC	1245	OUT	GET /redir/?gdpr=0&gdpr_consent=&issi=1&partnerid=152&partneruserid=8fb517aa-a8d0-437d-988f-7084f5819e19 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=22:1724005921034811649\|31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|76:GOOGLE_HOSTED_SI\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37\|150:0\|152:8fb517aa-a8d0-437d-988f-7084f5819e19
2024-03-11 11:57:30 UTC	762	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 11 Mar 2024 11:57:29 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=22:1724005921034811649\|31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|76:GOOGLE_HOSTED_SI\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37\|150:0\|152:8fb517aa-a8d0-437d-988f-7084f5819e19; expires=Wed, 12 Mar 2025 11:57:30 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-03-11 11:57:30 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
721	192.168.2.16	50803	51.222.241.145	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:29 UTC	511	OUT	GET /?pid=58a76248-f101-4e52-b8f7-c4de9362ea12&src=www&type=100&sid=0&uid=1899505890594565248&gdpr_pd=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: wt.rqtrk.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: browser_id=493755f2-09c2-4b96-b3fb-614b089ac45a
2024-03-11 11:57:30 UTC	328	IN	HTTP/1.1 200 OK server: istio-envoy date: Mon, 11 Mar 2024 11:57:30 GMT content-type: image/gif content-length: 43 p3p: CP="NOI DSP COR DEVa PSAa PSDa OUR BUS UNI COM NAV STA" cache-control: no-cache,private pragma: no-cache expires: Mon, 11 Mar 2024 11:57:29 GMT x-envoy-upstream-service-time: 0 connection: close
2024-03-11 11:57:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
722	192.168.2.16	50805	13.226.210.86	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:29 UTC	376	OUT	GET /display/8065398/4362981.json HTTP/1.1 Host: agen-assets.ftstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:30 UTC	813	IN	HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range Access-Control-Max-Age: 3000 Last-Modified: Tue, 13 Feb 2024 20:32:42 GMT x-amz-server-side-encryption: AES256 Server: AmazonS3 Access-Control-Allow-Origin: * X-Varnish: 14914663 Via: 1.1 varnish (Varnish/5.1), 1.1 98a1dc94cc3b4443dca7386844769b2e.cloudfront.net (CloudFront) Accept-Ranges: bytes Date: Mon, 11 Mar 2024 11:57:30 GMT Cache-Control: max-age=30 ETag: W/"da09f652813942217a9e3d4f95edddb7" Vary: Accept-Encoding,Accept-Encoding X-Cache: Hit from cloudfront X-Amz-Cf-Pop: LAX50-C1 X-Amz-Cf-Id: lzYPsd1o4Y64K4ha9GZz0NH4UMHJNNvKphbiALwPRKBtyfYhf0Lgow== Age: 1
2024-03-11 11:57:30 UTC	4224	IN	Data Raw: 31 30 37 38 0d 0a 7b 22 69 64 22 3a 33 37 32 32 30 36 30 37 2c 22 74 69 6d 65 53 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 32 2d 31 33 54 32 30 3a 33 31 3a 31 35 2b 30 30 30 30 22 2c 22 61 6c 74 49 6d 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 65 72 76 65 64 62 79 2e 66 6c 61 73 68 74 61 6c 6b 69 6e 67 2e 63 6f 6d 2f 63 6c 69 63 6b 2f 38 2f 32 32 35 32 39 31 3b 38 30 36 35 33 39 38 3b 34 33 36 32 39 38 31 3b 32 31 30 3b 5b 46 54 5f 43 4f 4e 46 49 44 5d 2f 3f 67 3d 5b 46 54 5f 47 55 49 44 5d 26 72 61 6e 64 6f 6d 3d 31 38 31 32 33 39 2e 31 31 35 35 34 39 34 32 35 37 34 26 66 74 5f 77 69 64 74 68 3d 33 30 30 26 66 74 5f 68 65 69 67 68 74 3d 32 35 30 26 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 64 6f 62 65 2e 63 6f 6d 2f 61 63 72 6f 62 61 74 Data Ascii: 1078{"id":37220607,"timeStamp":"2024-02-13T20:31:15+0000","altImageUrl":"https://servedby.flashtalking.com/click/8/225291;8065398;4362981;210;[FT_CONFID]/?g=[FT_GUID]&random=181239.11554942574&ft_width=300&ft_height=250&url=https://www.adobe.com/acrobat
2024-03-11 11:57:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
723	192.168.2.16	50807	35.244.154.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:29 UTC	762	OUT	GET /396846.gif?served_by=evergreen&partner_uid=ac353f89-4309-4119-94c7-b832d9bbb81f HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=rrybn0sTZ5NaOOm42RcYUFYmzAEAL4KXC73Hrxo9kEM=; pxrc=CJPju68GEgUI6EcQABIFCNtOEAISBgi46wEQFQ==
2024-03-11 11:57:30 UTC	632	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=x3QxAPTow+RaOOm42RcYUFYmzAEAL4KXC73Hrxo9kEM=; Path=/; Domain=rlcdn.com; Expires=Tue, 11 Mar 2025 11:57:30 GMT; Secure; SameSite=None Set-Cookie: pxrc=CJPju68GEgUI6EcQABIFCNtOEAISBgi46wEQFQ==; Path=/; Domain=rlcdn.com; Expires=Fri, 10 May 2024 11:57:30 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Mon, 11 Mar 2024 11:57:30 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:57:30 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
724	192.168.2.16	50809	18.164.154.15	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:29 UTC	592	OUT	GET /score.min.js?pid=1000925&tt=g HTTP/1.1 Host: js.ad-score.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:30 UTC	644	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 566699 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 Expires: Mon, 11 Mar 2024 17:53:58 GMT Last-Modified: Sun, 10 Mar 2024 17:53:58 GMT Date: Sun, 10 Mar 2024 17:53:58 GMT Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 37f2101e0d4bd2baeb9163d6b31c8476.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P3 X-Amz-Cf-Id: JCVMqgjk4i4_ZBmAb-wiLUjkDmeqlRWfG9BsOj0e5LfegVgt0ZmBOA== Age: 65012
2024-03-11 11:57:30 UTC	15990	IN	Data Raw: 5f 5f 70 6d 5f 67 6c 62 6c 3d 7b 63 66 67 3a 7b 22 68 6f 73 74 22 3a 22 64 61 74 61 2e 61 64 2d 73 63 6f 72 65 2e 63 6f 6d 22 2c 22 63 64 6e 22 3a 22 6a 73 2e 61 64 2d 73 63 6f 72 65 2e 63 6f 6d 22 2c 22 73 65 72 76 65 72 5f 74 6f 6b 65 6e 22 3a 22 44 61 61 76 61 65 46 58 52 6b 6f 48 75 4e 48 77 77 42 4f 6f 78 57 52 42 54 6f 52 5a 41 61 41 57 2d 46 45 37 66 50 73 68 6c 64 56 58 69 4b 44 77 59 32 6e 4c 4f 47 30 33 49 4f 67 3d 3d 2d 45 30 33 41 50 4d 31 75 61 46 44 68 50 67 3d 3d 22 2c 22 76 36 22 3a 30 7d 2c 71 75 65 72 79 3a 7b 70 69 64 3a 22 31 30 30 30 39 32 35 22 7d 2c 62 70 5f 70 6f 6c 69 63 69 65 73 3a 22 30 30 61 65 30 30 32 38 30 30 37 35 30 30 63 30 30 30 63 32 30 30 62 37 30 30 62 38 30 30 63 36 30 30 37 35 30 30 38 64 30 30 32 30 30 30 37 35 30 Data Ascii: __pm_glbl={cfg:{"host":"data.ad-score.com","cdn":"js.ad-score.com","server_token":"DaavaeFXRkoHuNHwwBOoxWRBToRZAaAW-FE7fPshldVXiKDwY2nLOG03IOg==-E03APM1uaFDhPg==","v6":0},query:{pid:"1000925"},bp_policies:"00ae0028007500c000c200b700b800c60075008d002000750
2024-03-11 11:57:30 UTC	16384	IN	Data Raw: 62 34 30 30 63 36 30 30 62 38 30 30 62 63 30 30 37 35 30 30 38 64 30 30 32 30 30 30 32 31 30 30 63 35 30 30 32 32 30 30 62 38 30 30 37 66 30 30 32 30 30 30 37 35 30 30 32 33 30 30 62 34 30 30 62 66 30 30 32 32 30 30 62 38 30 30 37 35 30 30 38 64 30 30 32 30 30 30 37 35 30 30 61 30 30 30 62 34 30 30 63 36 30 30 63 36 30 30 32 30 30 30 63 36 30 30 62 62 30 30 63 32 30 30 63 32 30 30 32 31 30 30 62 63 30 30 63 31 30 30 62 61 30 30 37 35 30 30 32 61 30 30 37 66 30 30 32 30 30 30 32 38 30 30 37 35 30 30 62 36 30 30 62 34 30 30 63 36 30 30 62 38 30 30 62 63 30 30 37 35 30 30 38 64 30 30 32 30 30 30 32 31 30 30 63 35 30 30 32 32 30 30 62 38 30 30 37 66 30 30 32 30 30 30 37 35 30 30 32 33 30 30 62 34 30 30 62 66 30 30 32 32 30 30 62 38 30 30 37 35 30 30 38 64 30 Data Ascii: b400c600b800bc0075008d0020002100c5002200b8007f00200075002300b400bf002200b80075008d0020007500a000b400c600c6002000c600bb00c200c2002100bc00c100ba0075002a007f00200028007500b600b400c600b800bc0075008d0020002100c5002200b8007f00200075002300b400bf002200b80075008d0
2024-03-11 11:57:30 UTC	16384	IN	Data Raw: 32 30 30 30 32 31 30 30 63 35 30 30 32 32 30 30 62 38 30 30 37 66 30 30 32 30 30 30 37 35 30 30 32 33 30 30 62 34 30 30 62 66 30 30 32 32 30 30 62 38 30 30 37 35 30 30 38 64 30 30 32 30 30 30 37 35 35 36 66 64 38 34 36 63 30 30 37 35 30 30 32 61 30 30 37 66 30 30 32 30 30 30 32 38 30 30 37 35 30 30 62 36 30 30 62 34 30 30 63 36 30 30 62 38 30 30 62 63 30 30 37 35 30 30 38 64 30 30 32 30 30 30 32 31 30 30 63 35 30 30 32 32 30 30 62 38 30 30 37 66 30 30 32 30 30 30 37 35 30 30 32 33 30 30 62 34 30 30 62 66 30 30 32 32 30 30 62 38 30 30 37 35 30 30 38 64 30 30 32 30 30 30 37 35 35 33 34 61 36 35 64 37 30 30 37 35 30 30 32 61 30 30 37 66 30 30 32 30 30 30 32 38 30 30 37 35 30 30 62 36 30 30 62 34 30 30 63 36 30 30 62 38 30 30 62 63 30 30 37 35 30 30 38 64 30 Data Ascii: 20002100c5002200b8007f00200075002300b400bf002200b80075008d0020007556fd846c0075002a007f00200028007500b600b400c600b800bc0075008d0020002100c5002200b8007f00200075002300b400bf002200b80075008d00200075534a65d70075002a007f00200028007500b600b400c600b800bc0075008d0
2024-03-11 11:57:30 UTC	16384	IN	Data Raw: 5b 5f 70 5b 31 34 30 5d 5d 3d 28 28 6a 3d 7b 7d 29 5b 5f 70 5b 31 34 31 5d 5d 3d 5f 70 5b 31 34 32 5d 2c 6a 29 29 2c 59 5b 5f 70 5b 31 34 33 5d 5d 28 4a 29 2c 4a 5b 5f 70 5b 31 33 37 5d 5d 5b 5f 70 5b 31 31 34 5d 5d 29 74 72 79 7b 76 61 72 20 57 3d 4a 5b 5f 70 5b 31 33 37 5d 5d 5b 5f 70 5b 31 31 34 5d 5d 2c 4d 3d 7b 7d 3b 4d 5b 5f 70 5b 31 31 34 5d 5d 3d 57 5b 5f 70 5b 31 34 34 5d 5d 28 5f 70 5b 31 34 35 5d 29 3f 57 5b 5f 70 5b 31 34 36 5d 5d 28 30 2c 34 30 29 3a 57 2c 59 5b 5f 70 5b 31 34 37 5d 5d 28 4d 29 7d 63 61 74 63 68 28 5a 33 29 7b 7d 69 66 28 49 5b 5f 70 5b 31 34 38 5d 5d 28 5f 70 5b 31 34 39 5d 2c 66 75 6e 63 74 69 6f 6e 28 5a 34 29 7b 76 61 72 20 5a 35 3d 7b 7d 3b 5a 35 5b 5f 70 5b 31 35 30 5d 5d 3d 7b 7d 3b 76 61 72 20 5a 36 3d 5a 35 3b 5a 36 Data Ascii: [_p[140]]=((j={})[_p[141]]=_p[142],j)),Y[_p[143]](J),J[_p[137]][_p[114]])try{var W=J[_p[137]][_p[114]],M={};M[_p[114]]=W[_p[144]](_p[145])?W[_p[146]](0,40):W,Y[_p[147]](M)}catch(Z3){}if(I[_p[148]](_p[149],function(Z4){var Z5={};Z5[_p[150]]={};var Z6=Z5;Z6
2024-03-11 11:57:30 UTC	16384	IN	Data Raw: 33 35 5d 5d 5b 5a 43 5d 29 7d 76 61 72 20 5a 49 3d 5a 6b 5b 5f 70 5b 32 30 34 5d 5d 3f 5f 70 5b 34 31 32 5d 2b 5a 6b 5b 5f 70 5b 32 30 34 5d 5d 3a 5f 70 5b 33 39 5d 2c 5a 51 3d 5a 6b 5b 5f 70 5b 32 33 39 5d 5d 3f 5f 70 5b 34 31 33 5d 2b 5a 6b 5b 5f 70 5b 32 33 39 5d 5d 3a 5f 70 5b 33 39 5d 2c 5a 6f 3d 28 30 2c 57 5b 5f 70 5b 32 5d 5d 29 28 5a 55 29 2c 5a 6c 3d 28 30 2c 48 5b 5f 70 5b 34 31 34 5d 5d 29 28 5a 65 2c 4a 53 4f 4e 5b 5f 70 5b 34 33 5d 5d 28 5a 74 29 29 3b 72 65 74 75 72 6e 28 5a 67 3d 7b 7d 29 5b 5f 70 5b 33 31 38 5d 5d 3d 66 75 6e 63 74 69 6f 6e 28 5a 64 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 5a 64 26 26 28 5a 64 3d 5f 70 5b 33 37 36 5d 29 2c 5a 6b 5b 5f 70 5b 32 39 32 5d 5d 2b 5f 70 5b 34 31 35 5d 2b 5a 64 2b 5f 70 5b 34 30 30 Data Ascii: 35]][ZC])}var ZI=Zk[_p[204]]?_p[412]+Zk[_p[204]]:_p[39],ZQ=Zk[_p[239]]?_p[413]+Zk[_p[239]]:_p[39],Zo=(0,W[_p[2]])(ZU),Zl=(0,H[_p[414]])(Ze,JSON[_p[43]](Zt));return(Zg={})[_p[318]]=function(Zd){return void 0===Zd&&(Zd=_p[376]),Zk[_p[292]]+_p[415]+Zd+_p[400
2024-03-11 11:57:30 UTC	16384	IN	Data Raw: 74 69 6f 6e 28 4e 2c 57 29 7b 69 66 28 21 41 28 4c 29 29 72 65 74 75 72 6e 20 57 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 5f 70 5b 35 35 35 5d 29 29 3b 66 6f 72 28 76 61 72 20 4d 3d 30 2c 48 3d 4c 5b 5f 70 5b 35 36 5d 5d 3b 4d 3c 48 3b 4d 2b 2b 29 45 5b 5f 70 5b 35 33 37 5d 5d 28 4c 5b 4d 5d 29 5b 5f 70 5b 32 38 37 5d 5d 28 4e 2c 57 29 7d 29 7d 2c 45 5b 5f 70 5b 35 34 34 5d 5d 3d 5f 70 5b 33 37 37 5d 3d 3d 74 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 26 26 66 75 6e 63 74 69 6f 6e 28 4c 29 7b 73 65 74 49 6d 6d 65 64 69 61 74 65 28 4c 29 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 4c 29 7b 51 28 4c 2c 30 29 7d 2c 45 5b 5f 70 5b 35 35 30 5d 5d 3d 66 75 6e 63 74 69 6f 6e 28 4c 29 7b 5f 70 5b 36 30 5d 21 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 26 Data Ascii: tion(N,W){if(!A(L))return W(new TypeError(_p[555]));for(var M=0,H=L[_p[56]];M<H;M++)E[_p[537]](L[M])[_p[287]](N,W)})},E[_p[544]]=_p[377]==typeof setImmediate&&function(L){setImmediate(L)}\|\|function(L){Q(L,0)},E[_p[550]]=function(L){_p[60]!=typeof console&
2024-03-11 11:57:30 UTC	704	IN	Data Raw: 61 74 63 68 28 56 29 7b 7d 72 65 74 75 72 6e 20 76 7d 76 61 72 20 6b 3d 7b 7d 3b 6b 5b 5f 70 5b 32 37 34 5d 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 7d 2c 42 5b 5f 70 5b 31 5d 5d 28 73 2c 6b 29 7d 2c 36 31 36 3a 66 75 6e 63 74 69 6f 6e 28 44 2c 73 2c 42 29 7b 5f 65 28 27 6b 69 75 20 69 6a 68 79 73 6a 27 2c 31 30 29 3b 76 61 72 20 77 3d 7b 7d 3b 77 5b 5f 70 5b 33 30 34 5d 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 7d 2c 42 5b 5f 70 5b 31 5d 5d 28 73 2c 77 29 3b 76 61 72 20 6b 3d 6e 65 77 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 76 28 29 7b 74 68 69 73 5b 5f 70 5b 32 32 33 5d 5d 3d 5b 5d 7d 76 61 72 20 71 3d 76 5b 5f 70 5b 32 36 5d 5d 3b 72 65 74 75 72 6e 20 71 5b 5f 70 5b 37 33 35 5d 5d 3d 66 Data Ascii: atch(V){}return v}var k={};k[_p[274]]=function(){return w},B[_p[1]](s,k)},616:function(D,s,B){_e('kiu ijhysj',10);var w={};w[_p[304]]=function(){return k},B[_p[1]](s,w);var k=new(function(){function v(){this[_p[223]]=[]}var q=v[_p[26]];return q[_p[735]]=f
2024-03-11 11:57:30 UTC	16384	IN	Data Raw: 61 72 20 59 3d 41 5b 5f 70 5b 39 34 5d 5d 2c 45 3d 59 5b 5f 70 5b 33 34 35 5d 5d 28 5f 70 5b 34 34 39 5d 29 5b 32 5d 2c 54 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 74 72 79 7b 76 61 72 20 52 3d 62 5b 5f 70 5b 34 30 31 5d 5d 28 2f 5c 5c 75 28 5b 5c 64 5c 77 5d 7b 34 7d 29 2f 67 69 2c 66 75 6e 63 74 69 6f 6e 28 4f 2c 66 29 7b 72 65 74 75 72 6e 20 53 74 72 69 6e 67 5b 5f 70 5b 34 38 37 5d 5d 28 70 61 72 73 65 49 6e 74 28 66 2c 31 36 29 29 7d 29 5b 5f 70 5b 34 30 31 5d 5d 28 2f 26 61 6d 70 3b 2f 67 2c 5f 70 5b 34 30 32 5d 29 3b 69 66 28 5f 70 5b 33 39 5d 3d 3d 3d 62 29 72 65 74 75 72 6e 3b 76 61 72 20 70 3d 5f 70 5b 33 39 5d 3b 69 66 28 52 5b 5f 70 5b 31 38 38 5d 5d 28 5f 70 5b 34 30 30 5d 29 26 26 62 5b 5f 70 5b 31 38 38 5d 5d 28 5f 70 5b 37 33 36 5d 29 3f 70 Data Ascii: ar Y=A[_p[94]],E=Y[_p[345]](_p[449])[2],T=function(b){try{var R=b[_p[401]](/\\u([\d\w]{4})/gi,function(O,f){return String[_p[487]](parseInt(f,16))})[_p[401]](/&/g,_p[402]);if(_p[39]===b)return;var p=_p[39];if(R[_p[188]](_p[400])&&b[_p[188]](_p[736])?p
2024-03-11 11:57:30 UTC	14982	IN	Data Raw: 6e 20 74 68 69 73 5b 5f 70 5b 38 35 31 5d 5d 28 5a 58 2c 5a 72 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 32 28 5a 5a 2c 5a 58 29 7b 66 75 6e 63 74 69 6f 6e 20 5a 72 28 5a 44 2c 5a 73 2c 5a 42 2c 5a 77 29 7b 76 61 72 20 5a 6b 3d 4c 28 5a 5a 5b 5a 44 5d 2c 5a 5a 2c 5a 73 29 3b 69 66 28 5f 70 5b 38 35 36 5d 21 3d 3d 5a 6b 5b 5f 70 5b 32 37 5d 5d 29 7b 76 61 72 20 5a 76 3d 5a 6b 5b 5f 70 5b 38 35 37 5d 5d 2c 5a 71 3d 5a 76 5b 5f 70 5b 32 35 32 5d 5d 3b 72 65 74 75 72 6e 20 5a 71 26 26 5f 70 5b 35 39 5d 3d 3d 77 28 5a 71 29 26 26 49 5b 5f 70 5b 32 31 31 5d 5d 28 5a 71 2c 5f 70 5b 38 36 35 5d 29 3f 5a 58 5b 5f 70 5b 35 33 37 5d 5d 28 5a 71 5b 5f 70 5b 38 36 35 5d 5d 29 5b 5f 70 5b 32 38 37 5d 5d 28 66 75 6e 63 74 69 6f 6e 28 5a 67 29 7b 5a 72 28 5f 70 5b Data Ascii: n this[_p[851]](ZX,Zr)})})}function Z2(ZZ,ZX){function Zr(ZD,Zs,ZB,Zw){var Zk=L(ZZ[ZD],ZZ,Zs);if(_p[856]!==Zk[_p[27]]){var Zv=Zk[_p[857]],Zq=Zv[_p[252]];return Zq&&_p[59]==w(Zq)&&I[_p[211]](Zq,_p[865])?ZX[_p[537]](Zq[_p[865]])[_p[287]](function(Zg){Zr(_p[
2024-03-11 11:57:30 UTC	16384	IN	Data Raw: 28 30 2c 6b 5b 5f 70 5b 36 37 32 5d 5d 29 28 29 29 7b 76 61 72 20 64 3d 7b 7d 3b 64 5b 5f 70 5b 34 32 32 5d 5d 3d 7b 7d 3b 76 61 72 20 41 3d 64 3b 41 5b 5f 70 5b 34 32 32 5d 5d 5b 5f 70 5b 31 31 30 33 5d 5d 3d 5b 4e 75 6d 62 65 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 69 66 28 5f 70 5b 36 30 5d 21 3d 74 79 70 65 6f 66 20 74 6f 70 26 26 6e 75 6c 6c 21 3d 3d 74 6f 70 26 26 6e 75 6c 6c 21 3d 74 6f 70 5b 5f 70 5b 31 31 30 34 5d 5d 26 26 21 28 6e 75 6c 6c 21 3d 67 5b 5f 70 5b 31 31 33 5d 5d 5b 5f 70 5b 31 31 30 35 5d 5d 26 26 67 5b 5f 70 5b 31 31 33 5d 5d 5b 5f 70 5b 31 31 30 35 5d 5d 5b 5f 70 5b 35 36 5d 5d 3e 30 26 26 67 5b 5f 70 5b 31 31 33 5d 5d 5b 5f 70 5b 31 31 30 35 5d 5d 5b 30 5d 21 3d 3d 67 5b 5f 70 5b 31 31 33 5d 5d 5b 5f 70 5b 31 31 39 5d Data Ascii: (0,k[_p[672]])()){var d={};d[_p[422]]={};var A=d;A[_p[422]][_p[1103]]=[Number(function(){try{if(_p[60]!=typeof top&&null!==top&&null!=top[_p[1104]]&&!(null!=g[_p[113]][_p[1105]]&&g[_p[113]][_p[1105]][_p[56...0&&g[_p[113]][_p[1105]][0]!==g[_p[113]][_p[119]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
725	192.168.2.16	50804	34.255.246.57	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:29 UTC	1105	OUT	GET /a?adform_uid=1724005921034811649&r=eyJ1IjoiaHR0cHM6Ly9ydGItY3N5bmMuc21hcnRhZHNlcnZlci5jb20vcmVkaXIvP2lzc2lcdTAwM2QxXHUwMDI2cGFydG5lcmlkXHUwMDNkMTQxXHUwMDI2cGFydG5lcnVzZXJpZFx1MDAzZDlmbFN5M25KNUl2UVdpYVlUY1UxMnY3WGciLCJkIjpbeyJuYW1lIjoic21hcnQifV19 HTTP/1.1 Host: a.audrte.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: arcki2=9flSy3nJ5IvQWiaYTcU12v7Xg!20220908!1710158235401!ip#154.16.105.38; arcki2_ddp2=9flSy3nJ5IvQWiaYTcU12v7Xg!20220908!1710158237382; arcki2_pubmatic=9A176ADB-73F4-4BD8-A648-23F2443493B5!20220908!1710158246005; arcki2_adform=1724005921034811649!20220908!1710158248143
2024-03-11 11:57:30 UTC	587	IN	HTTP/1.1 302 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Origin: * Date: Mon, 11 Mar 2024 11:57:30 GMT Location: https://rtb-csync.smartadserver.com/redir/?partnerid=141&partneruserid=9flSy3nJ5IvQWiaYTcU12v7Xg&gdpr=0&gdpr_consent=&redirurl=https%3A%2F%2Fa.audrte.com%2Fmatch%3Fuid%3DSMART_USER_ID%26p%3DM501991648%26r%3Dhttps%253A%252F%252Fa.audrte.com%252Fp%253F Server: nginx/1.22.1 Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
726	192.168.2.16	50808	52.9.211.225	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:30 UTC	620	OUT	GET /d9core HTTP/1.1 Host: d9.flashtalking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: flashtalkingad1="GUID=5914E51D31FF3E"
2024-03-11 11:57:30 UTC	565	IN	HTTP/1.1 200 Date: Mon, 11 Mar 2024 11:57:30 GMT Content-Type: application/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close Server: Apache/2.4.58 (Amazon Linux) OpenSSL/3.0.8 Access-Control-Allow-Origin: d9.flashtalking.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,POST,SERVER P3P: policyref="localhost/w3c/D9_p3p_.xml", CP="NON DSP ADM DEV PSD IVDo OTPi OUR IND STP PHY PRE NAV UNI" Cache-Control: private, must-revalidate, proxy-revalidate, max-age=172800 ETag: 5bc31bf7d4a298e1bef9d35fce222bfc
2024-03-11 11:57:30 UTC	10822	IN	Data Raw: 32 61 33 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 63 6f 72 65 45 6c 65 6d 65 6e 74 49 64 3d 22 64 39 2d 63 6f 72 65 2d 33 66 34 66 33 34 37 36 2d 62 35 33 61 2d 34 30 33 39 2d 62 35 38 35 2d 39 61 63 39 39 63 36 61 31 66 33 31 22 3b 76 61 72 20 63 6f 6e 74 61 69 6e 65 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 63 6f 72 65 45 6c 65 6d 65 6e 74 49 64 29 3b 76 61 72 20 69 73 41 70 69 3d 63 6f 6e 74 61 69 6e 65 72 26 26 63 6f 6e 74 61 69 6e 65 72 2e 69 64 3d 3d 3d 63 6f 72 65 45 6c 65 6d 65 6e 74 49 64 3b 76 61 72 20 64 39 64 3d 63 6f 6c 6c 65 63 74 53 69 67 6e 61 6c 73 28 29 3b 69 66 28 21 69 73 41 70 69 29 7b 64 39 6c 65 67 61 63 Data Ascii: 2a3e(function(){const coreElementId="d9-core-3f4f3476-b53a-4039-b585-9ac99c6a1f31";var container=document.currentScript\|\|document.getElementById(coreElementId);var isApi=container&&container.id===coreElementId;var d9d=collectSignals();if(!isApi){d9legac
2024-03-11 11:57:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
727	192.168.2.16	50812	162.19.138.119	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:30 UTC	908	OUT	GET /k/155.gif?puid=AAKPDU7L3eMAABWFZYx_mg&id5AccountNum=155&numCascadesAllowed=9 HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=da35dfea-1127-79f5-8b21-8d4166047880#1710158233639#3; 3pi=2#1710158248567#767531070#7822940101119878936\|102#1710158237036#1964507446\|264#1710158239046#-333836484#71dcd657-b7ce-4e56-9064-0f83979f8fcb; cf=gif; cip=102; cnac=7; car=3; gdpr=0\|
2024-03-11 11:57:30 UTC	1633	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: 3pi=2#1710158248567#767531070#7822940101119878936\|102#1710158237036#1964507446\|264#1710158239046#-333836484#71dcd657-b7ce-4e56-9064-0f83979f8fcb\|155#1710158250693#2045511777#AAKPDU7L3eMAABWFZYx_mg; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:30 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://uipglob.semasio.net/id5/1/get?gdpr=0&gdpr_consent=&_url=https%3A%2F%2Fid5-sync.com%2Fc%2F102%2F112%2F6%2F4.gif%3Fpuid%3D%24%7BUIPID%7D%26gdpr%3D0%26gdpr_consent%3D transfer-encoding: chunked date: Mon, 11 Mar 2024 11:57:30 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-03-11 11:57:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
728	192.168.2.16	50813	34.255.246.57	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:30 UTC	616	OUT	GET /p HTTP/1.1 Host: a.audrte.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: arcki2=9flSy3nJ5IvQWiaYTcU12v7Xg!20220908!1710158235401!ip#154.16.105.38; arcki2_ddp2=9flSy3nJ5IvQWiaYTcU12v7Xg!20220908!1710158237382; arcki2_pubmatic=9A176ADB-73F4-4BD8-A648-23F2443493B5!20220908!1710158246005; arcki2_adform=1724005921034811649!20220908!1710158248143
2024-03-11 11:57:30 UTC	351	IN	HTTP/1.1 200 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Origin: * Content-Type: image/png Date: Mon, 11 Mar 2024 11:57:30 GMT Server: nginx/1.22.1 Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Content-Length: 68 Connection: Close
2024-03-11 11:57:30 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
729	192.168.2.16	50814	52.9.211.225	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:30 UTC	767	OUT	POST /lgc HTTP/1.1 Host: d9.flashtalking.com Connection: keep-alive Content-Length: 2227 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: flashtalkingad1="GUID=5914E51D31FF3E"
2024-03-11 11:57:30 UTC	2227	OUT	Data Raw: 26 74 62 78 3d 25 32 35 37 42 25 32 35 32 32 44 39 5f 31 25 32 35 32 32 25 32 35 33 41 31 37 31 30 31 35 38 32 34 39 37 32 37 25 32 35 32 43 25 32 35 32 32 44 39 5f 36 25 32 35 32 32 25 32 35 33 41 6e 75 6c 6c 25 32 35 32 43 25 32 35 32 32 44 39 5f 37 25 32 35 32 32 25 32 35 33 41 6e 75 6c 6c 25 32 35 32 43 25 32 35 32 32 44 39 5f 38 25 32 35 32 32 25 32 35 33 41 6e 75 6c 6c 25 32 35 32 43 25 32 35 32 32 44 39 5f 39 25 32 35 32 32 25 32 35 33 41 25 32 35 35 42 25 32 35 32 32 61 70 70 6c 69 63 61 74 69 6f 6e 25 32 35 32 46 70 64 66 25 32 35 33 41 25 32 35 32 30 50 6f 72 74 61 62 6c 65 25 32 35 32 30 44 6f 63 75 6d 65 6e 74 25 32 35 32 30 46 6f 72 6d 61 74 25 32 35 32 32 25 32 35 32 43 25 32 35 32 32 74 65 78 74 25 32 35 32 46 70 64 66 25 32 35 33 41 25 32 Data Ascii: &tbx=%257B%2522D9_1%2522%253A1710158249727%252C%2522D9_6%2522%253Anull%252C%2522D9_7%2522%253Anull%252C%2522D9_8%2522%253Anull%252C%2522D9_9%2522%253A%255B%2522application%252Fpdf%253A%2520Portable%2520Document%2520Format%2522%252C%2522text%252Fpdf%253A%2
2024-03-11 11:57:30 UTC	657	IN	HTTP/1.1 200 Date: Mon, 11 Mar 2024 11:57:30 GMT Content-Type: application/json;charset=ISO-8859-1 Content-Length: 118 Connection: close Server: Apache/2.4.58 (Amazon Linux) OpenSSL/3.0.8 Access-Control-Allow-Origin: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,POST,SERVER P3P: policyref="localhost/w3c/D9_p3p_.xml", CP="NON DSP ADM DEV PSD IVDo OTPi OUR IND STP PHY PRE NAV UNI" set-cookie: _D9J=db72d2cb31ea4d63a889aab8ff7f5992; path=/; Max-Age=31536000; Expires=Tue, 11-Mar-2025 11:57:30 UTC; SameSite=None;Secure;Domain=flashtalking.com
2024-03-11 11:57:30 UTC	118	IN	Data Raw: 7b 22 44 65 76 69 63 65 49 44 22 3a 5b 22 62 66 38 33 62 31 63 61 66 30 35 31 34 35 33 63 61 63 36 64 32 63 36 65 35 63 63 37 31 34 63 39 22 5d 2c 22 53 69 6e 67 6c 65 44 65 76 69 63 65 49 44 22 3a 5b 22 62 66 38 33 62 31 63 61 66 30 35 31 34 35 33 63 61 63 36 64 32 63 36 65 35 63 63 37 31 34 63 39 22 5d 2c 22 63 6e 78 22 3a 5b 22 74 72 75 65 22 5d 7d Data Ascii: {"DeviceID":["bf83b1caf051453cac6d2c6e5cc714c9"],"SingleDeviceID":["bf83b1caf051453cac6d2c6e5cc714c9"],"cnx":["true"]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
730	192.168.2.16	50815	35.244.154.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:30 UTC	526	OUT	GET /396846.gif?served_by=evergreen&partner_uid=ac353f89-4309-4119-94c7-b832d9bbb81f HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pxrc=CJPju68GEgUI6EcQABIFCNtOEAISBgi46wEQFQ==; rlas3=x3QxAPTow+RaOOm42RcYUFYmzAEAL4KXC73Hrxo9kEM=
2024-03-11 11:57:30 UTC	632	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=x3QxAPTow+RaOOm42RcYUFYmzAEAL4KXC73Hrxo9kEM=; Path=/; Domain=rlcdn.com; Expires=Tue, 11 Mar 2025 11:57:30 GMT; Secure; SameSite=None Set-Cookie: pxrc=CJPju68GEgUI6EcQABIFCNtOEAISBgi46wEQFQ==; Path=/; Domain=rlcdn.com; Expires=Fri, 10 May 2024 11:57:30 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Mon, 11 Mar 2024 11:57:30 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:57:30 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
731	192.168.2.16	50816	104.22.51.98	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:30 UTC	1047	OUT	GET /mw?google_gid=&google_cver=&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=98b0bf49-7792-48ef-6725-eedef40ec42e&reqId=47445c2f-d6f2-4f5e-456b-e1e02d8cb77a&zcluid=ec1562c92b86ee97&zdid=1332&google_error=15 HTTP/1.1 Host: mwzeom.zeotap.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zc=98b0bf49-7792-48ef-6725-eedef40ec42e; zsc=%D4%84%C9T%93%EF%3F%C4%3At%11%E7%85N%88%EA%A6%ED%01%13%87%DFAU%F9%C1z%2A%12%D5%21r%25%25%2A%13x%BD%5B%F7%80eR%D1%AF%F9%9C%3F%29%DDR%D2%95m%16%17%B1%12%7D%EF%9E%2F%A2%1Ch%24%93%9A%99%06%E2%9C%60Y%F7%B8%B99%98o2%5EU
2024-03-11 11:57:31 UTC	582	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:31 GMT Content-Type: image/png Content-Length: 95 Connection: close access-control-allow-credentials: true access-control-allow-headers: * access-control-allow-origin: https://ads.pubmatic.com set-cookie: zc=98b0bf49-7792-48ef-6725-eedef40ec42e; Path=/; Domain=.zeotap.com; Max-Age=31536000; SameSite=None; Secure vary: Origin via: 1.1 google CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=2592000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 862b5e0c7dbc0ad9-LAS
2024-03-11 11:57:31 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
732	192.168.2.16	50817	54.241.104.80	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:30 UTC	768	OUT	GET /state/8065398;4362981;0;271;7B84D742-C6FD-17AF-7071-15DDD9BECD3E/?cachebuster=146218641 HTTP/1.1 Host: ad-events.flashtalking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: flashtalkingad1="GUID=5914E51D31FF3E"
2024-03-11 11:57:31 UTC	155	IN	HTTP/1.1 200 OK Server: awselb/2.0 Date: Mon, 11 Mar 2024 11:57:31 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
733	192.168.2.16	50818	23.105.12.173	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:31 UTC	1603	OUT	GET /redir/?partnerid=141&partneruserid=9flSy3nJ5IvQWiaYTcU12v7Xg&gdpr=0&gdpr_consent=&redirurl=https%3A%2F%2Fa.audrte.com%2Fmatch%3Fuid%3DSMART_USER_ID%26p%3DM501991648%26r%3Dhttps%253A%252F%252Fa.audrte.com%252Fp%253F HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=22:1724005921034811649\|31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|76:GOOGLE_HOSTED_SI\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37\|150:0\|152:8fb517aa-a8d0-437d-988f-7084f5819e19
2024-03-11 11:57:31 UTC	893	IN	HTTP/1.1 302 Found content-length: 0 date: Mon, 11 Mar 2024 11:57:30 GMT cache-control: no-cache,no-store location: https://a.audrte.com/match?uid=1899505890594565248&p=M501991648&r=https%3A%2F%2Fa.audrte.com%2Fp%3F&gdpr=0&gdpr_consent= pragma: no-cache set-cookie: csync=22:1724005921034811649\|31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|76:GOOGLE_HOSTED_SI\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|141:9flSy3nJ5IvQWiaYTcU12v7Xg\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37\|150:0\|152:8fb517aa-a8d0-437d-988f-7084f5819e19; expires=Tue, 11 Mar 2025 11:57:31 GMT; domain=smartadserver.com; path=/; SameSite=None; secure p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
734	192.168.2.16	50821	50.57.31.206	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:31 UTC	762	OUT	GET /id5/1/get?gdpr=0&gdpr_consent=&_url=https%3A%2F%2Fid5-sync.com%2Fc%2F102%2F112%2F6%2F4.gif%3Fpuid%3D%24%7BUIPID%7D%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SEUNCY=9465D35DF42222D4
2024-03-11 11:57:31 UTC	650	IN	HTTP/1.1 302 Found Location: https://id5-sync.com/c/102/112/6/4.gif?puid=9465D35DF42222D4&gdpr=0&gdpr_consent= UIP-Response-Status: Ok Frontend-ID: 9 Set-Cookie: SEUNCY=9465D35DF42222D4; Expires=Tue, 11 Mar 2025 11:57:31 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Connection: close Date: Mon, 11 Mar 2024 11:57:31 GMT Content-Length: 0 Routing-Server-ID: -1 Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
735	192.168.2.16	50822	18.164.154.15	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:31 UTC	593	OUT	GET /nlp-bp.min.js?pid=1000925&tt=g HTTP/1.1 Host: js.ad-score.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:31 UTC	482	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 306860 Connection: close Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Sun, 10 Mar 2024 08:06:29 GMT Date: Sun, 10 Mar 2024 17:53:58 GMT Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 5da8684e29a12c12f87c2c9e3e2d4904.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P3 X-Amz-Cf-Id: hcaSGMvS1aqLzYI1npE_SEZT3EhWlPT8fjCNbI6zIR2_zTcaFCJbHg== Age: 65013
2024-03-11 11:57:31 UTC	16384	IN	Data Raw: 2f 2a 20 6f 70 65 6e 20 73 6f 75 72 63 65 73 20 6c 69 63 65 6e 73 65 73 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 68 74 74 70 73 3a 2f 2f 75 69 2e 70 72 6f 74 65 63 74 65 64 2e 6d 65 64 69 61 2f 6c 69 63 65 6e 73 65 73 2f 6e 6c 70 2d 62 70 2e 6d 69 6e 2e 6a 73 2e 74 78 74 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6c 3d 27 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 27 2c 75 3d 27 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 27 2c 72 6c 3d 2f 5b 61 2d 7a 5d 2f 2c 72 75 3d 2f 5b 41 2d 5a 5d 2f 2c 5f 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 69 66 28 6e 75 6c 6c 3d 3d 72 26 26 28 72 3d 31 33 29 2c 72 3d 4e 75 6d 62 65 72 28 72 29 2c 65 3d 53 74 72 69 6e 67 28 Data Ascii: /* open sources licenses can be found in https://ui.protected.media/licenses/nlp-bp.min.js.txt */(function(){var l='abcdefghijklmnopqrstuvwxyz',u='ABCDEFGHIJKLMNOPQRSTUVWXYZ',rl=/[a-z]/,ru=/[A-Z]/,_e=function(e,r){if(null==r&&(r=13),r=Number(r),e=String(
2024-03-11 11:57:31 UTC	16384	IN	Data Raw: 70 5b 38 39 39 5d 5d 3d 32 36 31 2c 76 5b 5f 70 5b 39 30 30 5d 5d 3d 32 36 32 2c 76 5b 5f 70 5b 35 36 32 5d 5d 3d 32 36 33 2c 76 5b 5f 70 5b 39 30 31 5d 5d 3d 32 36 34 2c 76 5b 5f 70 5b 39 30 32 5d 5d 3d 32 36 35 2c 76 5b 5f 70 5b 39 30 33 5d 5d 3d 32 36 36 2c 76 5b 5f 70 5b 34 32 34 5d 5d 3d 32 36 37 2c 76 5b 5f 70 5b 39 30 34 5d 5d 3d 32 36 38 2c 76 5b 5f 70 5b 39 30 35 5d 5d 3d 32 36 39 2c 76 5b 5f 70 5b 39 30 36 5d 5d 3d 32 37 30 2c 76 5b 5f 70 5b 36 35 37 5d 5d 3d 32 37 31 2c 76 5b 5f 70 5b 39 30 37 5d 5d 3d 32 37 32 2c 76 5b 5f 70 5b 39 30 38 5d 5d 3d 32 37 33 2c 76 5b 5f 70 5b 39 30 39 5d 5d 3d 32 37 34 2c 76 5b 5f 70 5b 39 31 30 5d 5d 3d 32 37 35 2c 76 5b 5f 70 5b 39 31 31 5d 5d 3d 32 37 36 2c 76 5b 5f 70 5b 39 31 32 5d 5d 3d 32 37 37 2c 76 5b 5f Data Ascii: p[899]]=261,v[_p[900]]=262,v[_p[562]]=263,v[_p[901]]=264,v[_p[902]]=265,v[_p[903]]=266,v[_p[424]]=267,v[_p[904]]=268,v[_p[905]]=269,v[_p[906]]=270,v[_p[657]]=271,v[_p[907]]=272,v[_p[908]]=273,v[_p[909]]=274,v[_p[910]]=275,v[_p[911]]=276,v[_p[912]]=277,v[_
2024-03-11 11:57:31 UTC	16384	IN	Data Raw: 5d 5d 3d 31 34 36 2c 50 5b 5f 70 5b 31 32 34 37 5d 5d 3d 31 34 37 2c 50 5b 5f 70 5b 31 32 36 31 5d 5d 3d 31 34 38 2c 50 5b 5f 70 5b 38 39 33 5d 5d 3d 31 34 39 2c 50 5b 5f 70 5b 31 32 39 37 5d 5d 3d 31 35 30 2c 50 5b 5f 70 5b 38 30 38 5d 5d 3d 31 35 31 2c 50 5b 5f 70 5b 31 33 38 33 5d 5d 3d 31 35 32 2c 50 5b 5f 70 5b 31 34 32 39 5d 5d 3d 31 35 33 2c 50 5b 5f 70 5b 31 32 36 38 5d 5d 3d 31 35 34 2c 50 5b 5f 70 5b 31 34 33 30 5d 5d 3d 31 35 35 2c 50 5b 5f 70 5b 31 32 31 39 5d 5d 3d 31 35 36 2c 50 5b 5f 70 5b 37 33 38 5d 5d 3d 31 35 37 2c 50 5b 5f 70 5b 31 34 33 31 5d 5d 3d 31 35 38 2c 50 5b 5f 70 5b 31 34 33 32 5d 5d 3d 31 35 39 2c 50 5b 5f 70 5b 31 34 33 33 5d 5d 3d 31 36 30 2c 50 5b 5f 70 5b 37 39 32 5d 5d 3d 31 36 31 2c 50 5b 5f 70 5b 33 39 32 5d 5d 3d 31 Data Ascii: ]]=146,P[_p[1247]]=147,P[_p[1261]]=148,P[_p[893]]=149,P[_p[1297]]=150,P[_p[808]]=151,P[_p[1383]]=152,P[_p[1429]]=153,P[_p[1268]]=154,P[_p[1430]]=155,P[_p[1219]]=156,P[_p[738]]=157,P[_p[1431]]=158,P[_p[1432]]=159,P[_p[1433]]=160,P[_p[792]]=161,P[_p[392]]=1
2024-03-11 11:57:31 UTC	15453	IN	Data Raw: 37 2c 4c 30 5b 5f 70 5b 32 30 35 35 5d 5d 3d 32 38 38 2c 4c 30 5b 5f 70 5b 36 37 37 5d 5d 3d 32 38 39 2c 4c 30 5b 5f 70 5b 38 30 36 5d 5d 3d 32 39 30 2c 4c 30 5b 5f 70 5b 37 37 31 5d 5d 3d 32 39 31 2c 4c 30 5b 5f 70 5b 31 38 36 33 5d 5d 3d 32 39 32 2c 4c 30 5b 5f 70 5b 31 32 31 32 5d 5d 3d 32 39 33 2c 4c 30 5b 5f 70 5b 31 33 36 32 5d 5d 3d 32 39 34 2c 4c 30 5b 5f 70 5b 32 30 35 36 5d 5d 3d 32 39 35 2c 4c 30 5b 5f 70 5b 32 30 35 37 5d 5d 3d 32 39 36 2c 4c 30 5b 5f 70 5b 37 34 37 5d 5d 3d 32 39 37 2c 4c 30 5b 5f 70 5b 32 30 35 38 5d 5d 3d 32 39 38 2c 4c 30 5b 5f 70 5b 32 30 35 39 5d 5d 3d 32 39 39 3b 76 61 72 20 4c 31 3d 7b 7d 3b 4c 31 5b 5f 70 5b 32 30 36 30 5d 5d 3d 30 2c 4c 31 5b 5f 70 5b 31 34 30 32 5d 5d 3d 31 2c 4c 31 5b 5f 70 5b 31 31 30 39 5d 5d 3d Data Ascii: 7,L0[_p[2055]]=288,L0[_p[677]]=289,L0[_p[806]]=290,L0[_p[771]]=291,L0[_p[1863]]=292,L0[_p[1212]]=293,L0[_p[1362]]=294,L0[_p[2056]]=295,L0[_p[2057]]=296,L0[_p[747]]=297,L0[_p[2058]]=298,L0[_p[2059]]=299;var L1={};L1[_p[2060]]=0,L1[_p[1402]]=1,L1[_p[1109]]=
2024-03-11 11:57:31 UTC	16384	IN	Data Raw: 32 34 32 5d 5d 3d 34 30 2c 4c 34 5b 5f 70 5b 31 31 30 35 5d 5d 3d 34 31 2c 4c 34 5b 5f 70 5b 32 34 30 30 5d 5d 3d 34 32 2c 4c 34 5b 5f 70 5b 33 37 36 5d 5d 3d 34 33 2c 4c 34 5b 5f 70 5b 31 33 30 31 5d 5d 3d 34 34 2c 4c 34 5b 5f 70 5b 34 34 39 5d 5d 3d 34 35 2c 4c 34 5b 5f 70 5b 31 32 35 35 5d 5d 3d 34 36 2c 4c 34 5b 5f 70 5b 31 32 36 30 5d 5d 3d 34 37 2c 4c 34 5b 5f 70 5b 37 36 31 5d 5d 3d 34 38 2c 4c 34 5b 5f 70 5b 31 31 32 36 5d 5d 3d 34 39 2c 4c 34 5b 5f 70 5b 32 34 30 31 5d 5d 3d 35 30 2c 4c 34 5b 5f 70 5b 33 37 38 5d 5d 3d 35 31 2c 4c 34 5b 5f 70 5b 34 35 37 5d 5d 3d 35 32 2c 4c 34 5b 5f 70 5b 31 31 39 31 5d 5d 3d 35 33 2c 4c 34 5b 5f 70 5b 37 37 38 5d 5d 3d 35 34 2c 4c 34 5b 5f 70 5b 31 30 32 34 5d 5d 3d 35 35 2c 4c 34 5b 5f 70 5b 31 31 36 34 5d 5d Data Ascii: 242]]=40,L4[_p[1105]]=41,L4[_p[2400]]=42,L4[_p[376]]=43,L4[_p[1301]]=44,L4[_p[449]]=45,L4[_p[1255]]=46,L4[_p[1260]]=47,L4[_p[761]]=48,L4[_p[1126]]=49,L4[_p[2401]]=50,L4[_p[378]]=51,L4[_p[457]]=52,L4[_p[1191]]=53,L4[_p[778]]=54,L4[_p[1024]]=55,L4[_p[1164]]
2024-03-11 11:57:31 UTC	16384	IN	Data Raw: 30 5d 5d 3d 31 34 33 2c 4c 37 5b 5f 70 5b 32 32 34 34 5d 5d 3d 31 34 34 2c 4c 37 5b 5f 70 5b 32 34 32 30 5d 5d 3d 31 34 35 2c 4c 37 5b 5f 70 5b 37 34 36 5d 5d 3d 31 34 36 2c 4c 37 5b 5f 70 5b 34 33 33 5d 5d 3d 31 34 37 2c 4c 37 5b 5f 70 5b 37 31 35 5d 5d 3d 31 34 38 2c 4c 37 5b 5f 70 5b 37 34 38 5d 5d 3d 31 34 39 2c 4c 37 5b 5f 70 5b 38 36 36 5d 5d 3d 31 35 30 2c 4c 37 5b 5f 70 5b 37 34 39 5d 5d 3d 31 35 31 2c 4c 37 5b 5f 70 5b 37 36 30 5d 5d 3d 31 35 32 2c 4c 37 5b 5f 70 5b 31 32 36 37 5d 5d 3d 31 35 33 2c 4c 37 5b 5f 70 5b 36 32 34 5d 5d 3d 31 35 34 2c 4c 37 5b 5f 70 5b 37 34 35 5d 5d 3d 31 35 35 2c 4c 37 5b 5f 70 5b 37 38 35 5d 5d 3d 31 35 36 2c 4c 37 5b 5f 70 5b 32 38 37 38 5d 5d 3d 31 35 37 2c 4c 37 5b 5f 70 5b 34 39 34 5d 5d 3d 31 35 38 2c 4c 37 5b Data Ascii: 0]]=143,L7[_p[2244]]=144,L7[_p[2420]]=145,L7[_p[746]]=146,L7[_p[433]]=147,L7[_p[715]]=148,L7[_p[748]]=149,L7[_p[866]]=150,L7[_p[749]]=151,L7[_p[760]]=152,L7[_p[1267]]=153,L7[_p[624]]=154,L7[_p[745]]=155,L7[_p[785]]=156,L7[_p[2878]]=157,L7[_p[494]]=158,L7[
2024-03-11 11:57:31 UTC	16384	IN	Data Raw: 39 33 5d 5d 3d 2f 5b 5c 75 41 38 30 30 2d 5c 75 41 38 32 46 5d 2f 67 2c 4c 4a 5b 5f 70 5b 33 33 39 34 5d 5d 3d 2f 5b 5c 75 41 38 34 30 2d 5c 75 41 38 37 46 5d 2f 67 2c 4c 4a 5b 5f 70 5b 33 33 39 35 5d 5d 3d 2f 5b 5c 75 41 43 30 30 2d 5c 75 44 37 41 46 5d 2f 67 2c 4c 4a 5b 5f 70 5b 33 33 39 36 5d 5d 3d 2f 5b 5c 75 44 38 30 30 2d 5c 75 44 42 37 46 5d 2f 67 2c 4c 4a 5b 5f 70 5b 33 33 39 37 5d 5d 3d 2f 5b 5c 75 44 42 38 30 2d 5c 75 44 42 46 46 5d 2f 67 2c 4c 4a 5b 5f 70 5b 33 33 39 38 5d 5d 3d 2f 5b 5c 75 44 43 30 30 2d 5c 75 44 46 46 46 5d 2f 67 2c 4c 4a 5b 5f 70 5b 33 33 39 39 5d 5d 3d 2f 5b 5c 75 45 30 30 30 2d 5c 75 46 38 46 46 5d 2f 67 2c 4c 4a 5b 5f 70 5b 33 34 30 30 5d 5d 3d 2f 5b 5c 75 46 39 30 30 2d 5c 75 46 41 46 46 5d 2f 67 2c 4c 4a 5b 5f 70 5b 33 Data Ascii: 93]]=/[\uA800-\uA82F]/g,LJ[_p[3394]]=/[\uA840-\uA87F]/g,LJ[_p[3395]]=/[\uAC00-\uD7AF]/g,LJ[_p[3396]]=/[\uD800-\uDB7F]/g,LJ[_p[3397]]=/[\uDB80-\uDBFF]/g,LJ[_p[3398]]=/[\uDC00-\uDFFF]/g,LJ[_p[3399]]=/[\uE000-\uF8FF]/g,LJ[_p[3400]]=/[\uF900-\uFAFF]/g,LJ[_p[3
2024-03-11 11:57:31 UTC	14808	IN	Data Raw: 3a 2d 35 2c 22 e2 9e a5 22 3a 31 2c 22 f0 9f 8e 8c 22 3a 35 2c 22 e2 97 a3 22 3a 31 2c 22 e2 8f ac 22 3a 35 2c 22 e2 99 ad 22 3a 31 2c 22 e2 93 9e 22 3a 35 2c 22 f0 9f 94 b3 22 3a 32 2c 22 f0 9f 8f ad 22 3a 32 2c 22 f0 9f 8e b3 22 3a 2d 33 2c 22 e2 98 9a 22 3a 35 2c 22 e2 9e bd 22 3a 32 2c 22 e2 9e ab 22 3a 32 2c 22 e2 9e 96 22 3a 2d 35 2c 22 ea 92 b0 22 3a 32 2c 22 ea 92 b1 22 3a 32 2c 22 e2 97 9d 22 3a 2d 33 2c 22 f0 9f 93 91 22 3a 35 2c 22 e2 93 a7 22 3a 35 2c 22 f0 9f 94 9f 22 3a 35 2c 22 e3 80 93 22 3a 35 2c 22 e2 93 9c 22 3a 32 2c 22 e2 9e a0 22 3a 35 2c 22 f0 9f 9a 86 22 3a 32 2c 22 e2 84 85 22 3a 2d 35 2c 22 e2 98 83 22 3a 32 2c 22 f0 9f 9a bd 22 3a 35 2c 22 e2 93 9d 22 3a 35 2c 22 e2 87 a6 22 3a 35 2c 22 f0 9f 91 b2 22 3a 32 2c 22 f0 9f 9a a1 22 Data Ascii: :-5,"":1,"":5,"":1,"":5,"":1,"":5,"":2,"":2,"":-3,"":5,"":2,"":2,"":-5,"":2,"":2,"":-3,"":5,"":5,"":5,"":5,"":2,"":5,"":2,"":-5,"":2,"":5,"":5,"":5,"":2,""
2024-03-11 11:57:31 UTC	1576	IN	Data Raw: 3a 2d 32 2c 22 75 7a 6a 6b 6c 69 73 7a 65 78 22 3a 2d 32 2c 22 75 7a 6a 6b 6c 69 73 6a 22 3a 2d 32 2c 22 75 7a 6b 79 76 69 7a 65 78 22 3a 2d 32 2c 22 75 7a 6d 76 69 6b 7a 65 78 22 3a 2d 31 2c 22 75 7a 71 71 70 22 3a 2d 31 2c 22 75 66 75 78 7a 65 78 22 3a 2d 32 2c 22 75 66 75 78 70 22 3a 2d 32 2c 22 75 66 76 6a 20 65 66 6b 20 6e 66 69 62 22 3a 2d 33 2c 22 75 66 63 66 69 66 6c 6a 22 3a 2d 32 2c 22 75 66 65 72 6b 76 22 3a 32 2c 22 75 66 65 72 6b 76 75 22 3a 32 2c 22 75 66 65 72 6b 76 6a 22 3a 32 2c 22 75 66 65 72 6b 7a 65 78 22 3a 32 2c 22 75 66 65 72 6b 7a 66 65 22 3a 32 2c 22 75 66 65 6b 20 63 7a 62 76 22 3a 2d 32 2c 22 75 66 66 64 22 3a 2d 32 2c 22 75 66 66 64 76 75 22 3a 2d 32 2c 22 75 66 6c 73 6b 22 3a 2d 31 2c 22 75 66 6c 73 6b 76 75 22 3a 2d 31 2c 22 Data Ascii: :-2,"uzjkliszex":-2,"uzjklisj":-2,"uzkyvizex":-2,"uzmvikzex":-1,"uzqqp":-1,"ufuxzex":-2,"ufuxp":-2,"ufvj efk nfib":-3,"ufcfiflj":-2,"uferkv":2,"uferkvu":2,"uferkvj":2,"uferkzex":2,"uferkzfe":2,"ufek czbv":-2,"uffd":-2,"uffdvu":-2,"uflsk":-1,"uflskvu":-1,"
2024-03-11 11:57:32 UTC	16384	IN	Data Raw: 76 65 69 72 78 76 6a 22 3a 2d 32 2c 22 76 65 69 72 78 7a 65 78 22 3a 2d 32 2c 22 76 65 69 72 67 6b 6c 69 76 22 3a 33 2c 22 76 65 6a 63 72 6d 76 22 3a 2d 32 2c 22 76 65 6a 63 72 6d 76 75 22 3a 2d 32 2c 22 76 65 6a 63 72 6d 76 6a 22 3a 2d 32 2c 22 76 65 6a 6c 69 76 22 3a 31 2c 22 76 65 6a 6c 69 7a 65 78 22 3a 31 2c 22 76 65 6b 76 69 67 69 7a 6a 7a 65 78 22 3a 31 2c 22 76 65 6b 76 69 6b 72 7a 65 7a 65 78 22 3a 32 2c 22 76 65 6b 79 69 72 63 22 3a 33 2c 22 76 65 6b 79 6c 6a 7a 72 6a 6b 7a 74 22 3a 33 2c 22 76 65 6b 7a 6b 63 76 75 22 3a 31 2c 22 76 65 6b 69 6c 6a 6b 76 75 22 3a 32 2c 22 76 65 6d 7a 76 6a 22 3a 2d 31 2c 22 76 65 6d 7a 66 6c 6a 22 3a 2d 32 2c 22 76 65 6d 7a 69 66 65 64 76 65 6b 2d 77 69 7a 76 65 75 63 70 22 3a 32 2c 22 76 65 6d 70 22 3a 2d 31 2c Data Ascii: veirxvj":-2,"veirxzex":-2,"veirgkliv":3,"vejcrmv":-2,"vejcrmvu":-2,"vejcrmvj":-2,"vejliv":1,"vejlizex":1,"vekvigizjzex":1,"vekvikrzezex":2,"vekyirc":3,"vekyljzrjkzt":3,"vekzkcvu":1,"vekiljkvu":2,"vemzvj":-1,"vemzflj":-2,"vemzifedvek-wizveucp":2,"vemp":-1,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
736	192.168.2.16	50827	54.241.104.80	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:31 UTC	523	OUT	GET /state/8065398;4362981;0;271;7B84D742-C6FD-17AF-7071-15DDD9BECD3E/?cachebuster=146218641 HTTP/1.1 Host: ad-events.flashtalking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: flashtalkingad1="GUID=5914E51D31FF3E"; _D9J=db72d2cb31ea4d63a889aab8ff7f5992
2024-03-11 11:57:31 UTC	155	IN	HTTP/1.1 200 OK Server: awselb/2.0 Date: Mon, 11 Mar 2024 11:57:31 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
737	192.168.2.16	50824	52.9.211.225	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:31 UTC	761	OUT	GET /img/img.png?cnx=5229deeef87486e0390412aad88930d1 HTTP/1.1 Host: d9.flashtalking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: flashtalkingad1="GUID=5914E51D31FF3E"; _D9J=db72d2cb31ea4d63a889aab8ff7f5992
2024-03-11 11:57:31 UTC	257	IN	HTTP/1.1 200 Date: Mon, 11 Mar 2024 11:57:31 GMT Content-Type: image/png Content-Length: 70 Connection: close Server: Apache/2.4.58 (Amazon Linux) OpenSSL/3.0.8 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,POST,SERVER
2024-03-11 11:57:31 UTC	70	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0d 49 44 41 54 78 5e 63 60 60 f8 cf 00 00 02 03 01 00 94 77 ba e2 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATx^c``wIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
738	192.168.2.16	50828	104.22.51.98	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:31 UTC	811	OUT	GET /mw?google_gid=&google_cver=&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=98b0bf49-7792-48ef-6725-eedef40ec42e&reqId=47445c2f-d6f2-4f5e-456b-e1e02d8cb77a&zcluid=ec1562c92b86ee97&zdid=1332&google_error=15 HTTP/1.1 Host: mwzeom.zeotap.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zc=98b0bf49-7792-48ef-6725-eedef40ec42e; zsc=%D4%84%C9T%93%EF%3F%C4%3At%11%E7%85N%88%EA%A6%ED%01%13%87%DFAU%F9%C1z%2A%12%D5%21r%25%25%2A%13x%BD%5B%F7%80eR%D1%AF%F9%9C%3F%29%DDR%D2%95m%16%17%B1%12%7D%EF%9E%2F%A2%1Ch%24%93%9A%99%06%E2%9C%60Y%F7%B8%B99%98o2%5EU
2024-03-11 11:57:32 UTC	431	IN	HTTP/1.1 403 Forbidden Date: Mon, 11 Mar 2024 11:57:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: max-age=15 Expires: Mon, 11 Mar 2024 11:57:46 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 862b5e12ac130ad3-LAS
2024-03-11 11:57:32 UTC	938	IN	Data Raw: 31 37 35 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1757<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-03-11 11:57:32 UTC	1369	IN	Data Raw: 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 6f 6f 6b 69 65 2d 61 6c 65 72 74 27 29 3b 0a 20 20 20 20 20 20 63 6f 6f 6b 69 65 45 6c 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 62 6c 6f 63 6b 27 3b 0a 20 20 20 20 7d 29 0a 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 3c 64 69 76 20 69 64 3d 22 63 66 2d 77 72 61 Data Ascii: r.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElementById('cookie-alert'); cookieEl.style.display = 'block'; }) }</script>...<![endif]--></head><body> <div id="cf-wra
2024-03-11 11:57:32 UTC	1369	IN	Data Raw: 20 6f 6e 6c 69 6e 65 20 61 74 74 61 63 6b 73 2e 20 54 68 65 20 61 63 74 69 6f 6e 20 79 6f 75 20 6a 75 73 74 20 70 65 72 66 6f 72 6d 65 64 20 74 72 69 67 67 65 72 65 64 20 74 68 65 20 73 65 63 75 72 69 74 79 20 73 6f 6c 75 74 69 6f 6e 2e 20 54 68 65 72 65 20 61 72 65 20 73 65 76 65 72 61 6c 20 61 63 74 69 6f 6e 73 20 74 68 61 74 20 63 6f 75 6c 64 20 74 72 69 67 67 65 72 20 74 68 69 73 20 62 6c 6f 63 6b 20 69 6e 63 6c 75 64 69 6e 67 20 73 75 62 6d 69 74 74 69 6e 67 20 61 20 63 65 72 74 61 69 6e 20 77 6f 72 64 20 6f 72 20 70 68 72 61 73 65 2c 20 61 20 53 51 4c 20 63 6f 6d 6d 61 6e 64 20 6f 72 20 6d 61 6c 66 6f 72 6d 65 64 20 64 61 74 61 2e 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c Data Ascii: online attacks. The action you just performed triggered the security solution. There are several actions that could trigger this block including submitting a certain word or phrase, a SQL command or malformed data.</p> </div> <div cl
2024-03-11 11:57:32 UTC	1369	IN	Data Raw: 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d 6c 61 6e 64 69 6e 67 22 20 69 64 3d 22 62 72 61 6e 64 5f 6c 69 6e 6b 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 61 3e 3c 2f 73 Data Ascii: dden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-landing" id="brand_link" target="_blank">Cloudflare</a></s
2024-03-11 11:57:32 UTC	938	IN	Data Raw: 5f 30 78 69 20 3d 20 5f 30 78 68 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 20 7c 7c 20 5f 30 78 68 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 20 28 5f 30 78 69 29 20 7b 76 61 72 20 5f 30 78 6a 20 3d 20 5f 30 78 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 5f 30 78 6a 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 6a 73 3b 5f 30 78 69 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 68 65 61 64 27 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 5f 30 78 6a 29 3b 7d 7d 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 20 21 3d 3d 20 27 6c 6f 61 64 69 6e 67 27 29 20 7b 68 61 6e 64 6c 65 72 28 29 3b 7d 20 65 6c 73 65 20 69 66 20 28 77 69 6e 64 6f 77 2e Data Ascii: _0xi = _0xh.contentDocument \|\| _0xh.contentWindow.document;if (_0xi) {var _0xj = _0xi.createElement('script');_0xj.innerHTML = js;_0xi.getElementsByTagName('head')[0].appendChild(_0xj);}}if (document.readyState !== 'loading') {handler();} else if (window.
2024-03-11 11:57:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
739	192.168.2.16	50826	52.9.211.225	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:31 UTC	432	OUT	GET /lgc HTTP/1.1 Host: d9.flashtalking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: flashtalkingad1="GUID=5914E51D31FF3E"; _D9J=db72d2cb31ea4d63a889aab8ff7f5992
2024-03-11 11:57:31 UTC	231	IN	HTTP/1.1 200 Date: Mon, 11 Mar 2024 11:57:31 GMT Content-Length: 0 Connection: close Server: Apache/2.4.58 (Amazon Linux) OpenSSL/3.0.8 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,POST,SERVER

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
740	192.168.2.16	50823	130.211.115.4	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:31 UTC	929	OUT	POST /data/cors?pm_st=DaavaeFXRkoHuNHwwBOoxWRBToRZAaAW-FE7fPshldVXiKDwY2nLOG03IOg==-E03APM1uaFDhPg==&pm_ct=af311b017264c1af4a86ebab&pm_pl=1710158250443&pm_td=13&pid=1000925&en=1.1&callback=__pm_glbl_FedQiQJZ7xSP0886AVcdDDI6._gc1&tt=g&v=f4fb108 HTTP/1.1 Host: data.ad-score.com Connection: keep-alive Content-Length: 1186 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:31 UTC	1186	OUT	Data Raw: 41 5c 33 39 2d 5c 74 41 5c 28 35 35 3a 5c 74 41 5c 2a 32 2e 38 5c 74 5c 2e 3a 3a 36 39 74 69 69 2c 27 70 6f 6b 2c 70 73 28 71 6a 2c 70 6e 73 6d 72 28 2a 6a 6f 6f 6a 2b 70 2b 6e 28 29 6a 6b 28 68 39 27 2c 2b 2c 38 27 33 2b 68 2d 35 35 2d 32 2b 39 3f 34 2a 2f 29 27 3a 2f 35 34 68 29 35 33 69 39 27 2c 2b 2c 38 27 33 2b 69 6b 67 6a 67 6e 6a 69 2e 3a 33 32 69 29 35 34 3a 27 2f 34 2b 38 68 2e 3a 33 32 5c 66 5c 36 38 2b 34 5c 74 41 5c 34 5c 74 5c 2e 3a 3a 36 39 74 69 69 2c 27 70 6f 6b 2c 70 73 28 71 6a 2c 70 6e 73 6d 72 28 2a 6a 6f 6f 6a 2b 70 2b 6e 28 29 6a 6b 28 68 39 27 2c 2b 2c 38 27 33 2b 68 2d 35 35 2d 32 2b 39 3f 34 2a 2f 29 27 3a 2f 35 34 68 29 35 33 69 39 27 2c 2b 2c 38 27 33 2b 69 6b 67 6a 67 6e 6a 69 2e 3a 33 32 69 29 35 34 3a 27 2f 34 2b 38 68 2e 3a Data Ascii: A\39-\tA\(55:\tA\2.8\t\.::69tii,'pok,ps(qj,pnsmr(jooj+p+n()jk(h9',+,8'3+h-55-2+9?4/)':/54h)53i9',+,8'3+ikgjgnji.:32i)54:'/4+8h.:32\f\68+4\tA\4\t\.::69tii,'pok,ps(qj,pnsmr(jooj+p+n()jk(h9',+,8'3+h-55-2+9?4*/)':/54h)53i9',+,8'3+ikgjgnji.:32i)54:'/4+8h.:
2024-03-11 11:57:32 UTC	591	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST Access-Control-Allow-Origin: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com Age: 0 Cache-Control: post-check=0, pre-check=0, false Cache-Control: proxy-revalidate, no-cache, no-cache=Set-Cookie, no-store, must-revalidate, max-age=0, s-maxage=0 P3p: CP="CURa ADMa DEVa TAIi PSAi PSDi IVAi IVDi CONi HISa TELi OUR IND DSP CAO COR" Pragma: no-cache Date: Mon, 11 Mar 2024 11:57:32 GMT Content-Length: 121 Content-Type: text/plain; charset=utf-8 Connection: close
2024-03-11 11:57:32 UTC	121	IN	Data Raw: 5f 5f 70 6d 5f 67 6c 62 6c 5f 46 65 64 51 69 51 4a 5a 37 78 53 50 30 38 38 36 41 56 63 64 44 44 49 36 2e 5f 67 63 31 28 7b 22 62 70 22 3a 7b 22 67 65 6f 22 3a 22 55 53 22 2c 22 73 75 62 64 69 76 69 73 69 6f 6e 73 5f 63 6f 64 65 22 3a 22 55 53 2d 4e 56 22 2c 22 6d 65 74 72 6f 5f 63 6f 64 65 22 3a 22 38 33 39 22 2c 22 7a 69 70 22 3a 22 38 39 31 30 31 22 7d 7d 29 Data Ascii: __pm_glbl_FedQiQJZ7xSP0886AVcdDDI6._gc1({"bp":{"geo":"US","subdivisions_code":"US-NV","metro_code":"839","zip":"89101"}})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
741	192.168.2.16	50830	34.255.246.57	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:32 UTC	957	OUT	GET /match?uid=1899505890594565248&p=M501991648&r=https%3A%2F%2Fa.audrte.com%2Fp%3F&gdpr=0&gdpr_consent= HTTP/1.1 Host: a.audrte.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: arcki2=9flSy3nJ5IvQWiaYTcU12v7Xg!20220908!1710158235401!ip#154.16.105.38; arcki2_ddp2=9flSy3nJ5IvQWiaYTcU12v7Xg!20220908!1710158237382; arcki2_pubmatic=9A176ADB-73F4-4BD8-A648-23F2443493B5!20220908!1710158246005; arcki2_adform=1724005921034811649!20220908!1710158248143
2024-03-11 11:57:32 UTC	553	IN	HTTP/1.1 302 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Origin: * Date: Mon, 11 Mar 2024 11:57:32 GMT Location: https://a.audrte.com/p? Server: nginx/1.22.1 Set-Cookie: arcki2_smart=1899505890594565248!20220908!1710158252586; Max-Age=1296000; Expires=Tue, 26 Mar 2024 11:57:32 GMT; Domain=audrte.com; Path=/; Secure; HttpOnly; SameSite=none; Secure Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
742	192.168.2.16	50833	52.9.211.225	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:32 UTC	477	OUT	GET /img/img.png?cnx=5229deeef87486e0390412aad88930d1 HTTP/1.1 Host: d9.flashtalking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: flashtalkingad1="GUID=5914E51D31FF3E"; _D9J=db72d2cb31ea4d63a889aab8ff7f5992
2024-03-11 11:57:32 UTC	257	IN	HTTP/1.1 200 Date: Mon, 11 Mar 2024 11:57:32 GMT Content-Type: image/png Content-Length: 70 Connection: close Server: Apache/2.4.58 (Amazon Linux) OpenSSL/3.0.8 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,POST,SERVER
2024-03-11 11:57:32 UTC	70	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0d 49 44 41 54 78 5e 63 60 60 f8 cf 00 00 02 03 01 00 94 77 ba e2 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATx^c``wIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
743	192.168.2.16	50832	162.19.138.119	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:32 UTC	903	OUT	GET /c/102/112/6/4.gif?puid=9465D35DF42222D4&gdpr=0&gdpr_consent= HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=da35dfea-1127-79f5-8b21-8d4166047880#1710158233639#3; 3pi=2#1710158248567#767531070#7822940101119878936\|102#1710158237036#1964507446\|264#1710158239046#-333836484#71dcd657-b7ce-4e56-9064-0f83979f8fcb\|155#1710158250693#2045511777#AAKPDU7L3eMAABWFZYx_mg
2024-03-11 11:57:32 UTC	1700	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: 3pi=112#1710158252796#-1466498922#9465D35DF42222D4\|2#1710158248567#767531070#7822940101119878936\|102#1710158237036#1964507446\|264#1710158239046#-333836484#71dcd657-b7ce-4e56-9064-0f83979f8fcb\|155#1710158250693#2045511777#AAKPDU7L3eMAABWFZYx_mg; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:32 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://c1.adform.net/serving/cookie/match?party=1135&callback=https%3A%2F%2Fid5-sync.com%2Fc%2F102%2F10%2F5%2F5.gif%3Fpuid%3D%5Badformuid%5D%26gdpr%3D0%26gdpr_consent%3D&gdpr_consent=&gdpr=0 transfer-encoding: chunked date: Mon, 11 Mar 2024 11:57:31 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-03-11 11:57:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
744	192.168.2.16	50836	130.211.115.4	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:32 UTC	932	OUT	POST /data/cors?pm_st=DaavaeFXRkoHuNHwwBOoxWRBToRZAaAW-FE7fPshldVXiKDwY2nLOG03IOg==-E03APM1uaFDhPg==&pm_ct=af311b017264c1af4a86ebab&pm_pl=1710158250443&pm_td=1369&pid=1000925&en=1.1&callback=__pm_glbl_FedQiQJZ7xSP0886AVcdDDI6._gc2&tt=g&v=f4fb108 HTTP/1.1 Host: data.ad-score.com Connection: keep-alive Content-Length: 20709 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:32 UTC	16384	OUT	Data Raw: c3 ad c2 94 c3 9f c3 a5 c3 99 c2 94 c2 ac c3 ad c2 94 c3 a4 c3 a1 c2 94 c2 ac c3 8d c3 ad c2 94 c3 9b c3 a7 c2 94 c2 ac c2 94 c3 82 c3 83 c3 86 c2 94 c3 af c3 8f c2 9e c2 94 c3 9a c3 97 c3 a8 c2 94 c2 ac c3 ad c2 94 c3 96 c3 94 c3 99 c2 94 c2 ac c2 94 c3 ad c3 8e c2 94 c3 94 c3 a6 c3 a0 c3 8e c2 94 c2 ac c3 8e c2 94 c2 a8 c2 a6 c3 8e c2 94 c2 9e c3 8e c2 94 c3 93 c3 a4 c3 95 c3 8e c2 94 c2 ac c3 8e c2 94 c3 aa c2 aa c2 a8 c3 8e c2 94 c3 af c2 94 c2 9e c2 94 c3 9f c3 96 c3 9e c2 94 c2 ac c2 94 c2 94 c2 9e c2 94 c3 a2 c3 9e c3 a8 c2 94 c2 ac c2 94 c2 a3 c2 a2 c2 a0 c2 a2 c2 a0 c2 a2 c2 94 c3 af c2 9e c2 94 c3 93 c3 96 c3 a9 c3 a4 c2 94 c2 ac c3 ad c2 94 c3 93 c3 96 c3 91 c3 a1 c3 a2 c2 94 c2 ac c2 a3 c2 9e c2 94 c3 93 c3 96 c3 a2 c3 9d c2 94 c2 ac c3 98 c3 Data Ascii:
2024-03-11 11:57:32 UTC	4325	OUT	Data Raw: ac c3 98 c3 93 c3 9e c3 a5 c3 97 c2 9e c2 94 c3 9f c3 97 c3 aa c3 99 c2 94 c2 ac c3 8d c2 a2 c2 9e c2 a2 c2 9e c2 a2 c2 9e c2 a2 c2 9e c2 a2 c2 9e c2 a2 c2 9e c2 a2 c2 9e c2 a2 c2 9e c2 a2 c2 9e c2 a2 c2 9e c2 a2 c2 9e c2 a2 c2 9e c2 a2 c2 9e c2 a2 c2 9e c2 a2 c2 9e c2 a2 c2 9e c2 a2 c2 9e c2 a2 c2 9e c2 a2 c2 9e c2 a2 c2 9e c2 a2 c3 8f c2 9e c2 94 c3 a0 c3 a1 c3 93 c2 94 c2 ac c2 a4 c2 9e c2 94 c3 97 c3 aa c3 a2 c2 94 c2 ac c3 8d c3 98 c3 93 c3 9e c3 a5 c3 97 c2 9e c3 98 c3 93 c3 9e c3 a5 c3 97 c2 9e c3 98 c3 93 c3 9e c3 a5 c3 97 c2 9e c3 98 c3 93 c3 9e c3 a5 c3 97 c2 9e c3 98 c3 93 c3 9e c3 a5 c3 97 c2 9e c3 98 c3 93 c3 9e c3 a5 c3 97 c2 9e c3 98 c3 93 c3 9e c3 a5 c3 97 c3 8f c2 9e c2 94 c3 a0 c3 93 c3 a8 c3 9e c2 94 c2 ac c2 a2 c2 9e c2 94 c3 a5 c3 95 Data Ascii:
2024-03-11 11:57:33 UTC	314	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST Access-Control-Allow-Origin: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com Date: Mon, 11 Mar 2024 11:57:33 GMT Content-Length: 1 Content-Type: text/plain; charset=utf-8 Connection: close
2024-03-11 11:57:33 UTC	1	IN	Data Raw: 30 Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
745	192.168.2.16	50837	130.211.115.4	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:32 UTC	578	OUT	GET /data/cors?pm_st=DaavaeFXRkoHuNHwwBOoxWRBToRZAaAW-FE7fPshldVXiKDwY2nLOG03IOg==-E03APM1uaFDhPg==&pm_ct=af311b017264c1af4a86ebab&pm_pl=1710158250443&pm_td=13&pid=1000925&en=1.1&callback=__pm_glbl_FedQiQJZ7xSP0886AVcdDDI6._gc1&tt=g&v=f4fb108 HTTP/1.1 Host: data.ad-score.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:33 UTC	493	IN	HTTP/1.1 405 Method Not Allowed Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST Access-Control-Allow-Origin: * Age: 0 Cache-Control: post-check=0, pre-check=0, false Cache-Control: proxy-revalidate, no-cache, no-cache=Set-Cookie, no-store, must-revalidate, max-age=0, s-maxage=0 P3p: CP="CURa ADMa DEVa TAIi PSAi PSDi IVAi IVDi CONi HISa TELi OUR IND DSP CAO COR" Pragma: no-cache Date: Mon, 11 Mar 2024 11:57:33 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
746	192.168.2.16	50838	34.255.246.57	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:33 UTC	917	OUT	GET /p? HTTP/1.1 Host: a.audrte.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: arcki2=9flSy3nJ5IvQWiaYTcU12v7Xg!20220908!1710158235401!ip#154.16.105.38; arcki2_ddp2=9flSy3nJ5IvQWiaYTcU12v7Xg!20220908!1710158237382; arcki2_pubmatic=9A176ADB-73F4-4BD8-A648-23F2443493B5!20220908!1710158246005; arcki2_adform=1724005921034811649!20220908!1710158248143; arcki2_smart=1899505890594565248!20220908!1710158252586
2024-03-11 11:57:33 UTC	351	IN	HTTP/1.1 200 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Origin: * Content-Type: image/png Date: Mon, 11 Mar 2024 11:57:33 GMT Server: nginx/1.22.1 Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Content-Length: 68 Connection: Close
2024-03-11 11:57:33 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
747	192.168.2.16	50840	130.211.115.4	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:33 UTC	580	OUT	GET /data/cors?pm_st=DaavaeFXRkoHuNHwwBOoxWRBToRZAaAW-FE7fPshldVXiKDwY2nLOG03IOg==-E03APM1uaFDhPg==&pm_ct=af311b017264c1af4a86ebab&pm_pl=1710158250443&pm_td=1369&pid=1000925&en=1.1&callback=__pm_glbl_FedQiQJZ7xSP0886AVcdDDI6._gc2&tt=g&v=f4fb108 HTTP/1.1 Host: data.ad-score.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:34 UTC	493	IN	HTTP/1.1 405 Method Not Allowed Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST Access-Control-Allow-Origin: * Age: 0 Cache-Control: post-check=0, pre-check=0, false Cache-Control: proxy-revalidate, no-cache, no-cache=Set-Cookie, no-store, must-revalidate, max-age=0, s-maxage=0 P3p: CP="CURa ADMa DEVa TAIi PSAi PSDi IVAi IVDi CONi HISa TELi OUR IND DSP CAO COR" Pragma: no-cache Date: Mon, 11 Mar 2024 11:57:34 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
748	192.168.2.16	50841	162.19.138.119	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:34 UTC	952	OUT	GET /c/102/10/5/5.gif?puid=1724005921034811649&gdpr=0&gdpr_consent= HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=da35dfea-1127-79f5-8b21-8d4166047880#1710158233639#3; 3pi=112#1710158252796#-1466498922#9465D35DF42222D4\|2#1710158248567#767531070#7822940101119878936\|102#1710158237036#1964507446\|264#1710158239046#-333836484#71dcd657-b7ce-4e56-9064-0f83979f8fcb\|155#1710158250693#2045511777#AAKPDU7L3eMAABWFZYx_mg
2024-03-11 11:57:35 UTC	1723	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: 3pi=112#1710158252796#-1466498922#9465D35DF42222D4\|2#1710158248567#767531070#7822940101119878936\|102#1710158237036#1964507446\|264#1710158239046#-333836484#71dcd657-b7ce-4e56-9064-0f83979f8fcb\|10#1710158254963#-323882679#1724005921034811649\|155#1710158250693#2045511777#AAKPDU7L3eMAABWFZYx_mg; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:34 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://ps.eyeota.net/match?gdpr=0&gdpr_consent=&bid=1mpr7m0&r=https%3A%2F%2Fid5-sync.com%2Fc%2F102%2F123%2F4%2F6.gif%3Fpuid%3D%7BUUID%7D%26gdpr%3D0%26gdpr_consent%3D transfer-encoding: chunked date: Mon, 11 Mar 2024 11:57:34 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-03-11 11:57:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
749	192.168.2.16	50842	34.255.246.57	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:34 UTC	674	OUT	GET /p? HTTP/1.1 Host: a.audrte.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: arcki2=9flSy3nJ5IvQWiaYTcU12v7Xg!20220908!1710158235401!ip#154.16.105.38; arcki2_ddp2=9flSy3nJ5IvQWiaYTcU12v7Xg!20220908!1710158237382; arcki2_pubmatic=9A176ADB-73F4-4BD8-A648-23F2443493B5!20220908!1710158246005; arcki2_adform=1724005921034811649!20220908!1710158248143; arcki2_smart=1899505890594565248!20220908!1710158252586
2024-03-11 11:57:35 UTC	351	IN	HTTP/1.1 200 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Origin: * Content-Type: image/png Date: Mon, 11 Mar 2024 11:57:35 GMT Server: nginx/1.22.1 Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Content-Length: 68 Connection: Close
2024-03-11 11:57:35 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
750	192.168.2.16	50843	18.214.54.215	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:35 UTC	790	OUT	GET /match?gdpr=0&gdpr_consent=&bid=1mpr7m0&r=https%3A%2F%2Fid5-sync.com%2Fc%2F102%2F123%2F4%2F6.gif%3Fpuid%3D%7BUUID%7D%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=18e2d5f5e6f-1cc10000010a4999; SERVERID=18841~DM
2024-03-11 11:57:36 UTC	471	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: SERVERID=18841~DM; Domain=eyeota.net; Path=/; Expires=Mon, 11 Mar 2024 12:07:36 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: https://id5-sync.com/c/102/123/4/6.gif?puid=18e2d5f5e6f-1cc10000010a4999&gdpr=0&gdpr_consent= Content-Length: 0 Date: Mon, 11 Mar 2024 11:57:36 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
751	192.168.2.16	50845	34.117.77.79	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:36 UTC	806	OUT	GET /imsync.ashx?pi=3642666937673580575&data=eyJwaCI6NDc4MSwid2giOjkwNywidGJzIjowLCJkdCI6MTUsInBpZCI6IjE3MTAxNTgyNDA1NjVfNmlxOTR0aWV3Iiwic2QiOjkwN30%3D HTTP/1.1 Host: ml314.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pi=3642666937673580575; u=aHR0cHM6Ly9zb3VyY2Vmb3JnZS5uZXQvcHJvamVjdHMvZG9jZmV0Y2hlci8%3D; tp=9%253B03%252F11%252F2024%2B11%253A57%253A24%253B0
2024-03-11 11:57:36 UTC	252	IN	HTTP/1.1 200 OK content-type: application/javascript date: Mon, 11 Mar 2024 11:57:36 GMT server: Google Frontend via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-11 11:57:36 UTC	23	IN	Data Raw: 31 31 0d 0a 5f 6d 6c 2e 73 65 74 49 4d 28 66 61 6c 73 65 29 3b 0d 0a Data Ascii: 11_ml.setIM(false);
2024-03-11 11:57:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
752	192.168.2.16	50846	162.19.138.119	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:36 UTC	1010	OUT	GET /c/102/123/4/6.gif?puid=18e2d5f5e6f-1cc10000010a4999&gdpr=0&gdpr_consent= HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=da35dfea-1127-79f5-8b21-8d4166047880#1710158233639#3; 3pi=112#1710158252796#-1466498922#9465D35DF42222D4\|2#1710158248567#767531070#7822940101119878936\|102#1710158237036#1964507446\|264#1710158239046#-333836484#71dcd657-b7ce-4e56-9064-0f83979f8fcb\|10#1710158254963#-323882679#1724005921034811649\|155#1710158250693#2045511777#AAKPDU7L3eMAABWFZYx_mg
2024-03-11 11:57:37 UTC	1752	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: 3pi=112#1710158252796#-1466498922#9465D35DF42222D4\|2#1710158248567#767531070#7822940101119878936\|102#1710158237036#1964507446\|264#1710158239046#-333836484#71dcd657-b7ce-4e56-9064-0f83979f8fcb\|10#1710158254963#-323882679#1724005921034811649\|155#1710158250693#2045511777#AAKPDU7L3eMAABWFZYx_mg\|123#1710158257294#1234176899; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:37 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://x.bidswitch.net/check_uuid/https%3A%2F%2Fid5-sync.com%2Fc%2F102%2F104%2F3%2F7.gif%3Fpuid%3D%24%7BBSW_UUID%7D%26gdpr%3D0%26gdpr_consent%3D?gdpr=0&gdpr_consent= transfer-encoding: chunked date: Mon, 11 Mar 2024 11:57:37 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-03-11 11:57:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
753	192.168.2.16	50847	35.212.133.238	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:38 UTC	811	OUT	GET /check_uuid/https%3A%2F%2Fid5-sync.com%2Fc%2F102%2F104%2F3%2F7.gif%3Fpuid%3D%24%7BBSW_UUID%7D%26gdpr%3D0%26gdpr_consent%3D?gdpr=0&gdpr_consent= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=6ec76371-3031-4b49-abb3-349fb3d7cf23; c=1710158227; tuuid_lu=1710158229
2024-03-11 11:57:38 UTC	289	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 11 Mar 2024 11:57:38 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://id5-sync.com/c/102/104/3/7.gif?puid=6ec76371-3031-4b49-abb3-349fb3d7cf23&gdpr=0&gdpr_consent=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
754	192.168.2.16	50848	162.19.138.119	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:38 UTC	1047	OUT	GET /c/102/104/3/7.gif?puid=6ec76371-3031-4b49-abb3-349fb3d7cf23&gdpr=0&gdpr_consent= HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=da35dfea-1127-79f5-8b21-8d4166047880#1710158233639#3; 3pi=112#1710158252796#-1466498922#9465D35DF42222D4\|2#1710158248567#767531070#7822940101119878936\|102#1710158237036#1964507446\|264#1710158239046#-333836484#71dcd657-b7ce-4e56-9064-0f83979f8fcb\|10#1710158254963#-323882679#1724005921034811649\|155#1710158250693#2045511777#AAKPDU7L3eMAABWFZYx_mg\|123#1710158257294#1234176899
2024-03-11 11:57:39 UTC	1804	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: 3pi=112#1710158252796#-1466498922#9465D35DF42222D4\|2#1710158248567#767531070#7822940101119878936\|102#1710158237036#1964507446\|264#1710158239046#-333836484#71dcd657-b7ce-4e56-9064-0f83979f8fcb\|104#1710158259344#1856793942#6ec76371-3031-4b49-abb3-349fb3d7cf23\|10#1710158254963#-323882679#1724005921034811649\|155#1710158250693#2045511777#AAKPDU7L3eMAABWFZYx_mg\|123#1710158257294#1234176899; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:39 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://pm.w55c.net/ping_match.gif?st=ID5&rurl=https%3A%2F%2Fid5-sync.com%2Fc%2F102%2F163%2F2%2F8.gif%3Fpuid%3D_wfivefivec_%26gdpr%3D0%26gdpr_consent%3D transfer-encoding: chunked date: Mon, 11 Mar 2024 11:57:38 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-03-11 11:57:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
755	192.168.2.16	50849	35.166.28.193	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:39 UTC	799	OUT	GET /ping_match.gif?st=ID5&rurl=https%3A%2F%2Fid5-sync.com%2Fc%2F102%2F163%2F2%2F8.gif%3Fpuid%3D_wfivefivec_%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=rQpbF21I1RJEgU5; matchpubmatic=5; matchbidswitch=5; matchfreewheel=5
2024-03-11 11:57:40 UTC	703	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Mon, 11 Mar 2024 11:57:39 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://id5-sync.com/c/102/163/2/8.gif?puid=rQpbF21I1RJEgU5&gdpr=0&gdpr_consent= Pragma: no-cache Server: PingMatch/v2.0.30-801-g0076fb7#rel-ec2-master i-0991768c636277b6e@us-west-2c@dxedge-app-us-west-2-prod-asg Set-Cookie: wfivefivec=rQpbF21I1RJEgU5; Domain=.w55c.net; Expires=Fri, 11 Apr 2025 11:57:40 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchid5=5; Domain=.w55c.net; Expires=Wed, 10 Apr 2024 11:57:40 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
756	192.168.2.16	50851	162.19.138.119	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:40 UTC	1092	OUT	GET /c/102/163/2/8.gif?puid=rQpbF21I1RJEgU5&gdpr=0&gdpr_consent= HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://csync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=da35dfea-1127-79f5-8b21-8d4166047880#1710158233639#3; 3pi=112#1710158252796#-1466498922#9465D35DF42222D4\|2#1710158248567#767531070#7822940101119878936\|102#1710158237036#1964507446\|264#1710158239046#-333836484#71dcd657-b7ce-4e56-9064-0f83979f8fcb\|104#1710158259344#1856793942#6ec76371-3031-4b49-abb3-349fb3d7cf23\|10#1710158254963#-323882679#1724005921034811649\|155#1710158250693#2045511777#AAKPDU7L3eMAABWFZYx_mg\|123#1710158257294#1234176899
2024-03-11 11:57:41 UTC	1708	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: 3pi=112#1710158252796#-1466498922#9465D35DF42222D4\|2#1710158248567#767531070#7822940101119878936\|163#1710158261425#-476530922\|102#1710158237036#1964507446\|264#1710158239046#-333836484#71dcd657-b7ce-4e56-9064-0f83979f8fcb\|104#1710158259344#1856793942#6ec76371-3031-4b49-abb3-349fb3d7cf23\|10#1710158254963#-323882679#1724005921034811649\|155#1710158250693#2045511777#AAKPDU7L3eMAABWFZYx_mg\|123#1710158257294#1234176899; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:41 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure content-type: image/gif;charset=UTF-8 transfer-encoding: chunked date: Mon, 11 Mar 2024 11:57:40 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-03-11 11:57:41 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
757	192.168.2.16	50853	162.19.138.119	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:42 UTC	878	OUT	GET /c/102/163/2/8.gif?puid=rQpbF21I1RJEgU5&gdpr=0&gdpr_consent= HTTP/1.1 Host: id5-sync.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=da35dfea-1127-79f5-8b21-8d4166047880#1710158233639#3; 3pi=112#1710158252796#-1466498922#9465D35DF42222D4\|2#1710158248567#767531070#7822940101119878936\|163#1710158261425#-476530922\|102#1710158237036#1964507446\|264#1710158239046#-333836484#71dcd657-b7ce-4e56-9064-0f83979f8fcb\|104#1710158259344#1856793942#6ec76371-3031-4b49-abb3-349fb3d7cf23\|10#1710158254963#-323882679#1724005921034811649\|155#1710158250693#2045511777#AAKPDU7L3eMAABWFZYx_mg\|123#1710158257294#1234176899
2024-03-11 11:57:43 UTC	1708	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: 3pi=112#1710158252796#-1466498922#9465D35DF42222D4\|2#1710158248567#767531070#7822940101119878936\|163#1710158262853#-476530922\|102#1710158237036#1964507446\|264#1710158239046#-333836484#71dcd657-b7ce-4e56-9064-0f83979f8fcb\|104#1710158259344#1856793942#6ec76371-3031-4b49-abb3-349fb3d7cf23\|10#1710158254963#-323882679#1724005921034811649\|155#1710158250693#2045511777#AAKPDU7L3eMAABWFZYx_mg\|123#1710158257294#1234176899; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:42 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure content-type: image/gif;charset=UTF-8 transfer-encoding: chunked date: Mon, 11 Mar 2024 11:57:41 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-03-11 11:57:43 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
758	192.168.2.16	50855	34.232.140.51	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:42 UTC	1083	OUT	GET /s2.html?d=2396&r=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2Fpostdownload&t=DocFetcher%20download%20%7C%20SourceForge.net&u=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdocfetcher%2F&b2=%20CategoriesFile%20Managers%2C%20Search%2C%20Source%20Code%20Management%20LicenseEclipse%20Public%20License%20%20%20%20%20%20%20 HTTP/1.1 Host: tag.crsspxl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=693098949688747066; uuid=c80b7ee4-92fa-4d71-9444-870d4e377528; re=1
2024-03-11 11:57:42 UTC	687	IN	HTTP/1.1 200 Set-Cookie: JSESSIONID=15E2757A33FC390F50DDFB3EF4080DB4; Path=/; Secure; HttpOnly Set-Cookie: re=1; Domain=.crsspxl.com; Expires=Wed, 10-Apr-2024 11:57:42 UTC; Path=/; SameSite=None; Secure Set-Cookie: _rt_=2396_7521,7539,7731,7576,7641,7755,7756,7581; Domain=.crsspxl.com; Expires=Mon, 11-Mar-2024 01:57:42 UTC; Path=/; SameSite=None; Secure Set-Cookie: uidc=2; Domain=.crsspxl.com; Expires=Mon, 18-Mar-2024 11:57:42 UTC; Path=/; SameSite=None; Secure Set-Cookie: ua=1; Domain=.crsspxl.com; Expires=Mon, 18-Mar-2024 11:57:42 UTC; Path=/; SameSite=None; Secure Connection: close Content-Type: text/html Vary: Accept-Encoding Date: Mon, 11 Mar 2024 11:57:42 GMT
2024-03-11 11:57:42 UTC	1556	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 77 69 64 74 68 3d 27 31 27 20 68 65 69 67 68 74 3d 27 31 27 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 43 50 58 31 32 26 67 6f 6f 67 6c 65 5f 63 6d 26 67 6f 6f 67 6c 65 5f 68 6d 3d 4e 6a 6b 7a 4d 44 6b 34 4f 54 51 35 4e 6a 67 34 4e 7a 51 33 4d 44 59 32 22 3e 3c 69 6d 67 20 77 69 64 74 68 3d 27 31 27 20 68 65 69 67 68 74 3d 27 31 27 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 6d 61 74 68 74 61 67 2e 63 6f 6d 2f 73 79 6e 63 2f 69 6d 67 3f 6d 74 5f 65 78 69 64 3d 31 30 30 31 32 26 72 65 64 69 72 3d 68 74 74 70 73 3a 2f 2f 74 61 67 2e 63 72 73 73 70 78 6c 2e 63 6f 6d 2f 6d 2e 67 69 66 Data Ascii: <html><body><img width='1' height='1' src="https://cm.g.doubleclick.net/pixel?google_nid=CPX12&google_cm&google_hm=NjkzMDk4OTQ5Njg4NzQ3MDY2"><img width='1' height='1' src="https://sync.mathtag.com/sync/img?mt_exid=10012&redir=https://tag.crsspxl.com/m.gif

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
759	192.168.2.16	50862	104.254.148.252	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:43 UTC	858	OUT	GET /getuid?https://tag.crsspxl.com/m.gif?anid=$UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tag.crsspxl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; receive-cookie-deprecation=1; uuid2=7822940101119878936; icu=ChgIkPoyEAoYAyADKAMwoOO7rwY4A0ADSAMQoOO7rwYYAg..
2024-03-11 11:57:43 UTC	1421	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Mon, 11 Mar 2024 11:57:43 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://tag.crsspxl.com/m.gif?anid=7822940101119878936 AN-X-Request-Uuid: 16b37a98-be75-4bd4-b255-c7dab8ffb835 Set-Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:43 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 27-Feb-2034 11:57:43 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=7822940101119878936; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 09-Jun-2024 11:57:43 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.105.38; 154.16.105.38; 894.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
760	192.168.2.16	50863	35.244.154.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:43 UTC	723	OUT	GET /366518.gif?partner_uid=693098949688747066 HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tag.crsspxl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pxrc=CJPju68GEgUI6EcQABIFCNtOEAISBgi46wEQFQ==; rlas3=x3QxAPTow+RaOOm42RcYUFYmzAEAL4KXC73Hrxo9kEM=
2024-03-11 11:57:43 UTC	705	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://cm.g.doubleclick.net/pixel?google_nid=epsilon&google_cm P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=N/a3jh3YJhtaOOm42RcYUFYmzAEAL4KXC73Hrxo9kEM=; Path=/; Domain=rlcdn.com; Expires=Tue, 11 Mar 2025 11:57:43 GMT; Secure; SameSite=None Set-Cookie: pxrc=CJPju68GEgUI6EcQABIFCNtOEAISBgi66gEQJBIGCLjrARAV; Path=/; Domain=rlcdn.com; Expires=Fri, 10 May 2024 11:57:43 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Mon, 11 Mar 2024 11:57:43 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
761	192.168.2.16	50865	54.213.96.237	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:43 UTC	712	OUT	GET /ibs:dpid=22083&dpuuid=693098949688747066 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tag.crsspxl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=45232011452423388812062241212727845356; dpm=45232011452423388812062241212727845356
2024-03-11 11:57:43 UTC	891	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:43 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: OJEG3VjhR60= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-usw2-1-v054-0089d766d.edge-usw2.demdex.com 2 ms set-cookie: dpm=45232011452423388812062241212727845356; Max-Age=15552000; Expires=Sat, 07 Sep 2024 11:57:43 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=45232011452423388812062241212727845356; Max-Age=15552000; Expires=Sat, 07 Sep 2024 11:57:43 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-03-11 11:57:43 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
762	192.168.2.16	50864	35.84.163.233	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:43 UTC	749	OUT	GET /cms?partner_id=CROEL HTTP/1.1 Host: cms.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tag.crsspxl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo; IDSYNC="18z8~2h8b:175w~2h8b:19ba~2h8b"
2024-03-11 11:57:43 UTC	499	IN	HTTP/1.1 302 Redirect Date: Mon, 11 Mar 2024 11:57:43 GMT Connection: close Server: ATS/9.1.10.94 Cache-Control: no-store Location: https://ups.analytics.yahoo.com/ups/58701/cms?partner_id=CROEL Content-Type: text/html Content-Language: en Set-Cookie: A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo; Expires=Tue, 11 Mar 2025 17:57:43 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Content-Length: 344
2024-03-11 11:57:43 UTC	344	IN	Data Raw: 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 77 68 69 74 65 22 20 46 47 43 4f 4c 4f 52 3d 22 62 6c 61 63 6b 22 3e 0a 3c 48 31 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 3c 48 52 3e 0a 0a 3c 46 4f 4e 54 20 46 41 43 45 3d 22 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 22 3e 3c 42 3e 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 6d 6f 76 65 64 20 74 6f 20 61 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 2e 20 20 54 68 65 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 20 69 73 20 22 68 Data Ascii: <HTML><HEAD><TITLE>Document Has Moved</TITLE></HEAD><BODY BGCOLOR="white" FGCOLOR="black"><H1>Document Has Moved</H1><HR><FONT FACE="Helvetica,Arial"><B>Description: The document you requested has moved to a new location. The new location is "h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
763	192.168.2.16	50861	35.71.131.137	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:43 UTC	860	OUT	GET /track/cmf/generic?ttd_pid=crosspixel&ttd_tpi=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tag.crsspxl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFEhQKBXRhcGFkEgsIqK7DwIvz4DwQBRIbCgxzaGFyZXRocm91Z2gSCwjWjMfSi_PgPBAFEhYKB2QwdHJvMWoSCwj-h-Hhi_PgPBAFGAEgASgCMgsIxKO68aTz4DwQBTgBWgd4a3N3OWxhYAI.
2024-03-11 11:57:43 UTC	638	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:57:43 GMT Content-Length: 173 Connection: close server: Kestrel location: https://tag.crsspxl.com/m.gif?tdid=71dcd657-b7ce-4e56-9064-0f83979f8fcb set-cookie: TDID=71dcd657-b7ce-4e56-9064-0f83979f8fcb; expires=Tue, 11 Mar 2025 11:57:43 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwj8tYu5i_PgPBAFEhQKBXRhcGFkEgsIqK7DwIvz4DwQBRIbCgxzaGFyZXRocm91Z2gSCwjWjMfSi_PgPBAFEhYKB2QwdHJvMWoSCwj-h-Hhi_PgPBAFGAEgASgCMgsIqJ6rj6bz4DwQBTgBWgpjcm9zc3BpeGVsYAI.; expires=Tue, 11 Mar 2025 11:57:43 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-11 11:57:43 UTC	173	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 61 67 2e 63 72 73 73 70 78 6c 2e 63 6f 6d 2f 6d 2e 67 69 66 3f 74 64 69 64 3d 37 31 64 63 64 36 35 37 2d 62 37 63 65 2d 34 65 35 36 2d 39 30 36 34 2d 30 66 38 33 39 37 39 66 38 66 63 62 22 3e 68 74 74 70 73 3a 2f 2f 74 61 67 2e 63 72 73 73 70 78 6c 2e 63 6f 6d 2f 6d 2e 67 69 66 3f 74 64 69 64 3d 37 31 64 63 64 36 35 37 2d 62 37 63 65 2d 34 65 35 36 2d 39 30 36 34 2d 30 66 38 33 39 37 39 66 38 66 63 62 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://tag.crsspxl.com/m.gif?tdid=71dcd657-b7ce-4e56-9064-0f83979f8fcb">https://tag.crsspxl.com/m.gif?tdid=71dcd657-b7ce-4e56-9064-0f83979f8fcb</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
764	192.168.2.16	50860	74.121.140.211	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:43 UTC	699	OUT	GET /sync/img?mt_exid=10012&redir=https://tag.crsspxl.com/m.gif?mmid=[MM_UUID] HTTP/1.1 Host: sync.mathtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tag.crsspxl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=3e9d65ee-f197-4b00-b33c-8e23896e09ac
2024-03-11 11:57:43 UTC	466	IN	HTTP/1.1 302 Moved Temporarily Date: Mon, 11 Mar 2024 11:57:43 GMT Content-Type: image/gif Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Server: MT3 1549 cea2cde master iad iad-pixel-x15 config_version:"828" Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" location: https://tag.crsspxl.com/m.gif?mmid=3e9d65ee-f197-4b00-b33c-8e23896e09ac Expires: Mon, 11 Mar 2024 11:57:42 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
765	192.168.2.16	50867	142.251.2.147	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:43 UTC	979	OUT	GET /recaptcha/api2/aframe HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-03-11 11:57:44 UTC	847	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Mon, 11 Mar 2024 11:57:44 GMT Date: Mon, 11 Mar 2024 11:57:44 GMT Cache-Control: private, max-age=300 Content-Security-Policy: script-src 'report-sample' 'nonce-ieZUcO504DUnLZ7UluBs6A' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-11 11:57:44 UTC	405	IN	Data Raw: 33 33 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 69 65 5a 55 63 4f 35 30 34 44 55 6e 4c 5a 37 55 6c 75 42 73 36 41 22 3e 2f 2a 2a 20 41 6e 74 69 2d 66 72 61 75 64 20 61 6e 64 20 61 6e 74 69 2d 61 62 75 73 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 20 6f 6e 6c 79 2e 20 53 65 65 20 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 20 2a 2f 20 74 72 79 7b 76 61 72 20 63 6c 69 65 6e 74 73 3d 7b 27 73 6f 64 61 72 27 3a 27 68 Data Ascii: 33d<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="ieZUcO504DUnLZ7UluBs6A">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha */ try{var clients={'sodar':'h
2024-03-11 11:57:44 UTC	431	IN	Data Raw: 2e 64 61 74 61 29 3b 76 61 72 20 63 3d 63 6c 69 65 6e 74 73 5b 62 5b 27 69 64 27 5d 5d 3b 69 66 28 63 29 7b 76 61 72 20 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 64 2e 73 72 63 3d 63 2b 62 5b 27 70 61 72 61 6d 73 27 5d 2b 27 26 72 63 3d 27 2b 28 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 63 3a 3a 61 22 29 3f 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 63 3a 3a 62 22 29 3a 22 22 29 3b 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 29 3b 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 72 63 3a 3a 65 22 2c 70 61 72 73 65 49 6e 74 28 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 Data Ascii: .data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("rc::a")?sessionStorage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorag
2024-03-11 11:57:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
766	192.168.2.16	50873	34.214.251.32	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:44 UTC	759	OUT	GET /ups/58701/cms?partner_id=CROEL HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tag.crsspxl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo; IDSYNC="18z8~2h8b:175w~2h8b:19ba~2h8b"
2024-03-11 11:57:44 UTC	745	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 11:57:44 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="18z8~2h8b:175w~2h8b:19ba~2h8b:19al~2h8b";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Tue, 11-Mar-2025 11:57:44 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://tag.crsspxl.com/m.gif?yahoo_id=y-0U3P02xE2pMszjbZP.8FC7RHe6zD7YBA60w-~A Age: 0 Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBH7x7mUCEFgS-Vbff0FfJXtU25dtwD8FEgEBAQFC8GX4Zdwy0iMA_eMAAA&S=AQAAAuBpvuvDOjFOkyojMQDAszo; Expires=Tue, 11 Mar 2025 17:57:44 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
767	192.168.2.16	50874	54.69.221.139	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:44 UTC	477	OUT	GET /ibs:dpid=22083&dpuuid=693098949688747066 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=45232011452423388812062241212727845356; dpm=45232011452423388812062241212727845356
2024-03-11 11:57:44 UTC	891	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:44 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: kw+fT73wTeg= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-usw2-1-v054-0089d766d.edge-usw2.demdex.com 1 ms set-cookie: dpm=45232011452423388812062241212727845356; Max-Age=15552000; Expires=Sat, 07 Sep 2024 11:57:44 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=45232011452423388812062241212727845356; Max-Age=15552000; Expires=Sat, 07 Sep 2024 11:57:44 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-03-11 11:57:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
768	192.168.2.16	50876	104.17.217.204	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:44 UTC	627	OUT	GET /417381ab8bee90f7/sync.gif?dm=&fck=693098949688747066 HTTP/1.1 Host: dmp.truoptik.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tag.crsspxl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:57:44 UTC	785	IN	HTTP/1.1 204 No Content Date: Mon, 11 Mar 2024 11:57:44 GMT Connection: close Set-Cookie: to_master_s=66ff72aed1a33ee43e7a5a16dbbb2168; Expires=Tue, 11-Mar-25 11:57:44 GMT; Max-Age=31536000; Domain=.truoptik.com; Path=/; Secure; SameSite=None Set-Cookie: to_version_s=b2; Expires=Tue, 11-Mar-25 11:57:44 GMT; Max-Age=31536000; Domain=.truoptik.com; Path=/; Secure; SameSite=None TO-DMP-Sync: s1a-dmp-use1-aws.truoptik.com User-Agent: Tru Optik DMP 1.3.1 Cache-Control: no-store Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: * X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 862b5e613f4709fb-LAS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
769	192.168.2.16	50878	35.167.0.196	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:44 UTC	654	OUT	GET /merge?pid=5110&3pid=693098949688747066 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tag.crsspxl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=ITYsABZHyF-4XRyhT4uuZCmM
2024-03-11 11:57:44 UTC	619	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:44 GMT Content-Type: image/gif Content-Length: 43 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_5110=693098949688747066; Path=/; Domain=.lijit.com; Expires=Tue, 11-Mar-2025 11:57:44 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=ITYsABZHyF-4XRyhT4uuZCmM; Path=/; Domain=.lijit.com; Expires=Tue, 11-Mar-2025 11:57:44 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-03-11 11:57:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
770	192.168.2.16	50869	34.232.140.51	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:44 UTC	699	OUT	GET /m.gif?anid=7822940101119878936 HTTP/1.1 Host: tag.crsspxl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tag.crsspxl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=693098949688747066; uuid=c80b7ee4-92fa-4d71-9444-870d4e377528; re=1; uidc=2; ua=1
2024-03-11 11:57:44 UTC	361	IN	HTTP/1.1 200 Set-Cookie: anid=1; Domain=.crsspxl.com; Expires=Sat, 16-Mar-2024 11:57:44 UTC; Path=/; SameSite=None; Secure Set-Cookie: id_apnx=7822940101119878936; Domain=.crsspxl.com; Expires=Wed, 10-Apr-2024 11:57:44 UTC; Path=/; SameSite=None; Secure Content-Type: image/gif Content-Length: 43 Date: Mon, 11 Mar 2024 11:57:44 GMT Connection: close
2024-03-11 11:57:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
771	192.168.2.16	50870	34.232.140.51	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:44 UTC	694	OUT	GET /m.gif?id=&google_error=15 HTTP/1.1 Host: tag.crsspxl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tag.crsspxl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=693098949688747066; uuid=c80b7ee4-92fa-4d71-9444-870d4e377528; re=1; uidc=2; ua=1
2024-03-11 11:57:44 UTC	118	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Date: Mon, 11 Mar 2024 11:57:44 GMT Connection: close
2024-03-11 11:57:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
772	192.168.2.16	50871	34.232.140.51	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:44 UTC	716	OUT	GET /m.gif?tdid=71dcd657-b7ce-4e56-9064-0f83979f8fcb HTTP/1.1 Host: tag.crsspxl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tag.crsspxl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=693098949688747066; uuid=c80b7ee4-92fa-4d71-9444-870d4e377528; re=1; uidc=2; ua=1
2024-03-11 11:57:44 UTC	375	IN	HTTP/1.1 200 Set-Cookie: tdid=1; Domain=.crsspxl.com; Expires=Sat, 16-Mar-2024 11:57:44 UTC; Path=/; SameSite=None; Secure Set-Cookie: tdid=71dcd657-b7ce-4e56-9064-0f83979f8fcb; Domain=.crsspxl.com; Expires=Mon, 18-Mar-2024 11:57:44 UTC; Path=/; SameSite=None; Secure Content-Type: image/gif Content-Length: 43 Date: Mon, 11 Mar 2024 11:57:43 GMT Connection: close
2024-03-11 11:57:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
773	192.168.2.16	50875	34.232.140.51	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:44 UTC	716	OUT	GET /m.gif?mmid=3e9d65ee-f197-4b00-b33c-8e23896e09ac HTTP/1.1 Host: tag.crsspxl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tag.crsspxl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=693098949688747066; uuid=c80b7ee4-92fa-4d71-9444-870d4e377528; re=1; uidc=2; ua=1
2024-03-11 11:57:44 UTC	229	IN	HTTP/1.1 200 Set-Cookie: mmid=1; Domain=.crsspxl.com; Expires=Sat, 16-Mar-2024 11:57:44 UTC; Path=/; SameSite=None; Secure Content-Type: image/gif Content-Length: 43 Date: Mon, 11 Mar 2024 11:57:44 GMT Connection: close
2024-03-11 11:57:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
774	192.168.2.16	50880	35.244.154.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:44 UTC	716	OUT	GET /362358.gif?google_error=15 HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tag.crsspxl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=N/a3jh3YJhtaOOm42RcYUFYmzAEAL4KXC73Hrxo9kEM=; pxrc=CJPju68GEgUI6EcQABIFCNtOEAISBgi66gEQJBIGCLjrARAV
2024-03-11 11:57:45 UTC	640	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=Fr6qTX84UAlaOOm42RcYUFYmzAEAL4KXC73Hrxo9kEM=; Path=/; Domain=rlcdn.com; Expires=Tue, 11 Mar 2025 11:57:45 GMT; Secure; SameSite=None Set-Cookie: pxrc=CJPju68GEgUI6EcQABIFCNtOEAISBgi66gEQJBIGCLjrARAV; Path=/; Domain=rlcdn.com; Expires=Fri, 10 May 2024 11:57:45 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Mon, 11 Mar 2024 11:57:45 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:57:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
775	192.168.2.16	50882	52.8.161.245	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:44 UTC	699	OUT	GET /map/c=3602/tp=CPPB/tpid=693098949688747066/gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tag.crsspxl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=3; _cc_id=9d77637072f92cb5f5d20c39a1b22cb5
2024-03-11 11:57:45 UTC	313	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:45 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.41.7.10 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-03-11 11:57:45 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
776	192.168.2.16	50887	35.244.159.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:45 UTC	831	OUT	GET /w/1.0/cm?id=d3d03dbd-5946-4cba-8d30-3c0226699028&r=https%3A%2F%2Ftag.crsspxl.com%2Fm.gif%3Foxid%3D HTTP/1.1 Host: u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tag.crsspxl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=2a5f7fb6-27c9-488e-9168-f0298407ea3a\|1710158208; pd=v2\|1710158229\|vMgavPkWgyiK; univ_id=537072971\|71dcd657-b7ce-4e56-9064-0f83979f8fcb\|1710158231967576
2024-03-11 11:57:45 UTC	546	IN	HTTP/1.1 302 Found Vary: Accept, Accept-Encoding Set-Cookie: i=2a5f7fb6-27c9-488e-9168-f0298407ea3a\|1710158208; Version=1; Expires=Tue, 11-Mar-2025 11:57:45 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://tag.crsspxl.com/m.gif?oxid=9aedcb31-c781-4a91-8b53-8f3fa4a08ab8 Date: Mon, 11 Mar 2024 11:57:45 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
777	192.168.2.16	50881	34.232.140.51	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:45 UTC	724	OUT	GET /m.gif?yahoo_id=y-0U3P02xE2pMszjbZP.8FC7RHe6zD7YBA60w-~A HTTP/1.1 Host: tag.crsspxl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tag.crsspxl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=693098949688747066; uuid=c80b7ee4-92fa-4d71-9444-870d4e377528; re=1; uidc=2; ua=1
2024-03-11 11:57:45 UTC	229	IN	HTTP/1.1 200 Set-Cookie: dxid=1; Domain=.crsspxl.com; Expires=Sat, 16-Mar-2024 11:57:45 UTC; Path=/; SameSite=None; Secure Content-Type: image/gif Content-Length: 43 Date: Mon, 11 Mar 2024 11:57:45 GMT Connection: close
2024-03-11 11:57:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
778	192.168.2.16	50892	52.34.118.204	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:45 UTC	452	OUT	GET /merge?pid=5110&3pid=693098949688747066 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=ITYsABZHyF-4XRyhT4uuZCmM; _ljtrtb_5110=693098949688747066
2024-03-11 11:57:45 UTC	917	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:45 GMT Content-Type: image/gif Content-Length: 43 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_5110=693098949688747066; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJyrVjI1NDRQslIyszQ2sLSwNLE0s7AwNzE3MDNTqgUAXQQGTw%3D%3D; Path=/; Domain=.lijit.com; Expires=Tue, 11-Mar-2025 11:57:45 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_5110=693098949688747066; Path=/; Domain=.lijit.com; Expires=Tue, 11-Mar-2025 11:57:45 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=ITYsABZHyF-4XRyhT4uuZCmM; Path=/; Domain=.lijit.com; Expires=Tue, 11-Mar-2025 11:57:45 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-03-11 11:57:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
779	192.168.2.16	50886	34.232.140.51	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:45 UTC	501	OUT	GET /m.gif?anid=7822940101119878936 HTTP/1.1 Host: tag.crsspxl.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=693098949688747066; uuid=c80b7ee4-92fa-4d71-9444-870d4e377528; re=1; uidc=2; ua=1; anid=1; id_apnx=7822940101119878936
2024-03-11 11:57:45 UTC	361	IN	HTTP/1.1 200 Set-Cookie: anid=1; Domain=.crsspxl.com; Expires=Sat, 16-Mar-2024 11:57:45 UTC; Path=/; SameSite=None; Secure Set-Cookie: id_apnx=7822940101119878936; Domain=.crsspxl.com; Expires=Wed, 10-Apr-2024 11:57:45 UTC; Path=/; SameSite=None; Secure Content-Type: image/gif Content-Length: 43 Date: Mon, 11 Mar 2024 11:57:44 GMT Connection: close
2024-03-11 11:57:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
780	192.168.2.16	50884	34.232.140.51	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:45 UTC	496	OUT	GET /m.gif?id=&google_error=15 HTTP/1.1 Host: tag.crsspxl.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=693098949688747066; uuid=c80b7ee4-92fa-4d71-9444-870d4e377528; re=1; uidc=2; ua=1; anid=1; id_apnx=7822940101119878936
2024-03-11 11:57:45 UTC	118	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Date: Mon, 11 Mar 2024 11:57:45 GMT Connection: close
2024-03-11 11:57:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
781	192.168.2.16	50885	34.232.140.51	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:45 UTC	561	OUT	GET /m.gif?tdid=71dcd657-b7ce-4e56-9064-0f83979f8fcb HTTP/1.1 Host: tag.crsspxl.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=693098949688747066; uuid=c80b7ee4-92fa-4d71-9444-870d4e377528; re=1; uidc=2; ua=1; anid=1; id_apnx=7822940101119878936; tdid=71dcd657-b7ce-4e56-9064-0f83979f8fcb
2024-03-11 11:57:45 UTC	375	IN	HTTP/1.1 200 Set-Cookie: tdid=1; Domain=.crsspxl.com; Expires=Sat, 16-Mar-2024 11:57:45 UTC; Path=/; SameSite=None; Secure Set-Cookie: tdid=71dcd657-b7ce-4e56-9064-0f83979f8fcb; Domain=.crsspxl.com; Expires=Mon, 18-Mar-2024 11:57:45 UTC; Path=/; SameSite=None; Secure Content-Type: image/gif Content-Length: 43 Date: Mon, 11 Mar 2024 11:57:45 GMT Connection: close
2024-03-11 11:57:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
782	192.168.2.16	50890	34.232.140.51	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:45 UTC	569	OUT	GET /m.gif?mmid=3e9d65ee-f197-4b00-b33c-8e23896e09ac HTTP/1.1 Host: tag.crsspxl.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=693098949688747066; uuid=c80b7ee4-92fa-4d71-9444-870d4e377528; re=1; uidc=2; ua=1; anid=1; id_apnx=7822940101119878936; tdid=71dcd657-b7ce-4e56-9064-0f83979f8fcb; mmid=1
2024-03-11 11:57:45 UTC	229	IN	HTTP/1.1 200 Set-Cookie: mmid=1; Domain=.crsspxl.com; Expires=Sat, 16-Mar-2024 11:57:45 UTC; Path=/; SameSite=None; Secure Content-Type: image/gif Content-Length: 43 Date: Mon, 11 Mar 2024 11:57:45 GMT Connection: close
2024-03-11 11:57:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
783	192.168.2.16	50893	35.244.154.8	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:45 UTC	481	OUT	GET /362358.gif?google_error=15 HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pxrc=CJPju68GEgUI6EcQABIFCNtOEAISBgi66gEQJBIGCLjrARAV; rlas3=Fr6qTX84UAlaOOm42RcYUFYmzAEAL4KXC73Hrxo9kEM=
2024-03-11 11:57:45 UTC	640	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=Fr6qTX84UAlaOOm42RcYUFYmzAEAL4KXC73Hrxo9kEM=; Path=/; Domain=rlcdn.com; Expires=Tue, 11 Mar 2025 11:57:45 GMT; Secure; SameSite=None Set-Cookie: pxrc=CJPju68GEgUI6EcQABIFCNtOEAISBgi66gEQJBIGCLjrARAV; Path=/; Domain=rlcdn.com; Expires=Fri, 10 May 2024 11:57:45 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Mon, 11 Mar 2024 11:57:45 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-11 11:57:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
784	192.168.2.16	50894	52.8.161.245	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:45 UTC	464	OUT	GET /map/c=3602/tp=CPPB/tpid=693098949688747066/gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=3; _cc_id=9d77637072f92cb5f5d20c39a1b22cb5
2024-03-11 11:57:45 UTC	313	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:45 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.41.0.14 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-03-11 11:57:45 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
785	192.168.2.16	50897	34.232.140.51	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:46 UTC	585	OUT	GET /m.gif?yahoo_id=y-0U3P02xE2pMszjbZP.8FC7RHe6zD7YBA60w-~A HTTP/1.1 Host: tag.crsspxl.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=693098949688747066; uuid=c80b7ee4-92fa-4d71-9444-870d4e377528; re=1; uidc=2; ua=1; anid=1; id_apnx=7822940101119878936; tdid=71dcd657-b7ce-4e56-9064-0f83979f8fcb; mmid=1; dxid=1
2024-03-11 11:57:46 UTC	229	IN	HTTP/1.1 200 Set-Cookie: dxid=1; Domain=.crsspxl.com; Expires=Sat, 16-Mar-2024 11:57:46 UTC; Path=/; SameSite=None; Secure Content-Type: image/gif Content-Length: 43 Date: Mon, 11 Mar 2024 11:57:45 GMT Connection: close
2024-03-11 11:57:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
786	192.168.2.16	50898	34.232.140.51	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:46 UTC	812	OUT	GET /m.gif?oxid=9aedcb31-c781-4a91-8b53-8f3fa4a08ab8 HTTP/1.1 Host: tag.crsspxl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tag.crsspxl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=693098949688747066; uuid=c80b7ee4-92fa-4d71-9444-870d4e377528; re=1; uidc=2; ua=1; anid=1; id_apnx=7822940101119878936; tdid=71dcd657-b7ce-4e56-9064-0f83979f8fcb; mmid=1; dxid=1
2024-03-11 11:57:46 UTC	229	IN	HTTP/1.1 200 Set-Cookie: oxid=1; Domain=.crsspxl.com; Expires=Sat, 16-Mar-2024 11:57:46 UTC; Path=/; SameSite=None; Secure Content-Type: image/gif Content-Length: 43 Date: Mon, 11 Mar 2024 11:57:45 GMT Connection: close
2024-03-11 11:57:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
787	192.168.2.16	50901	34.232.140.51	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:47 UTC	585	OUT	GET /m.gif?oxid=9aedcb31-c781-4a91-8b53-8f3fa4a08ab8 HTTP/1.1 Host: tag.crsspxl.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=693098949688747066; uuid=c80b7ee4-92fa-4d71-9444-870d4e377528; re=1; uidc=2; ua=1; anid=1; id_apnx=7822940101119878936; mmid=1; dxid=1; tdid=71dcd657-b7ce-4e56-9064-0f83979f8fcb; oxid=1
2024-03-11 11:57:47 UTC	229	IN	HTTP/1.1 200 Set-Cookie: oxid=1; Domain=.crsspxl.com; Expires=Sat, 16-Mar-2024 11:57:47 UTC; Path=/; SameSite=None; Secure Content-Type: image/gif Content-Length: 43 Date: Mon, 11 Mar 2024 11:57:46 GMT Connection: close
2024-03-11 11:57:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
788	192.168.2.16	50903	34.117.77.79	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:51 UTC	740	OUT	GET /imsync.ashx?pi=3642666937673580575&data=eyJwaCI6NDc4MSwid2giOjkwNywidGJzIjowLCJkdCI6MzAsInBpZCI6IjE3MTAxNTgyNDA1NjVfNmlxOTR0aWV3Iiwic2QiOjkwN30%3D HTTP/1.1 Host: ml314.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pi=3642666937673580575; tp=9%253B03%252F11%252F2024%2B11%253A57%253A24%253B0
2024-03-11 11:57:51 UTC	252	IN	HTTP/1.1 200 OK content-type: application/javascript date: Mon, 11 Mar 2024 11:57:51 GMT server: Google Frontend via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-11 11:57:51 UTC	23	IN	Data Raw: 31 31 0d 0a 5f 6d 6c 2e 73 65 74 49 4d 28 66 61 6c 73 65 29 3b 0d 0a Data Ascii: 11_ml.setIM(false);
2024-03-11 11:57:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
789	192.168.2.16	50904	23.83.76.35	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:54 UTC	1431	OUT	POST /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive Content-Length: 297 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=22:1724005921034811649\|31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|76:GOOGLE_HOSTED_SI\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|141:9flSy3nJ5IvQWiaYTcU12v7Xg\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37\|150:0\|152:8fb517aa-a8d0-437d-988f-7084f5819e19
2024-03-11 11:57:54 UTC	297	OUT	Data Raw: 7b 22 73 69 74 65 69 64 22 3a 35 37 35 38 31 36 2c 22 70 61 67 65 69 64 22 3a 31 39 31 31 34 39 35 2c 22 66 6f 72 6d 61 74 69 64 22 3a 31 31 39 35 38 33 2c 22 63 6b 69 64 22 3a 30 2c 22 74 61 67 49 64 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 33 39 34 32 30 39 33 35 38 38 35 35 2d 30 22 2c 22 70 61 67 65 44 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 22 2c 22 74 69 6d 65 6f 75 74 22 3a 33 30 30 30 2c 22 62 69 64 49 64 22 3a 22 35 37 38 30 36 36 34 31 30 64 33 37 62 38 37 22 2c 22 70 72 65 62 69 64 56 65 72 73 69 6f 6e 22 3a 22 38 2e 31 33 2e 30 22 2c 22 73 63 68 61 69 6e 22 3a 6e 75 6c 6c 2c 22 73 69 7a 65 73 22 3a 5b 7b 22 77 22 3a 33 30 30 Data Ascii: {"siteid":575816,"pageid":1911495,"formatid":119583,"ckid":0,"tagId":"div-gpt-ad-1394209358855-0","pageDomain":"https://sourceforge.net/projects/docfetcher/","timeout":3000,"bidId":"578066410d37b87","prebidVersion":"8.13.0","schain":null,"sizes":[{"w":300

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
790	192.168.2.16	50907	204.237.133.116	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:54 UTC	3955	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 1020 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23234-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23361-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk; KRTBCOOKIE_1278=23329-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23340-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23498-6255abe4-6520-429f-aa2c-493e15bdee11; KRTBCOOKIE_1323=23480-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23485-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23575-OPUc21b156e4d4f4c8381b77a05c19b0a40; KRTBCOOKIE_391=22924-1724005921034811649&KRTB&23263-1724005921034811649&KRTB&23481-1724005921034811649; KRTBCOOKIE_466=16530-6ec76371-3031-4b49-abb3-349fb3d7cf23; SyncRTB3=1710720000%3A223_15_38_2%7C1712707200%3A224%7C1711411200%3A35%7C1715299200%3A69%7C1710979200%3A63%7C1711324800%3A234_165_56_21_48_46_7_250_240_249_231_176_96_13_220_104_178_99_264_22_254_3_54_55_71_233_166_5_266_8; KRTBCOOKIE_904=23554-GTz-sRdlCHiHoCwUpfHuZQ&KRTB&23557-GTz-sRdlCHiHoCwUpfHuZQ; KRTBCOOKIE_860=16335-9sM9r_oDVSN4eO2NU2v64poQaSY&KRTB&23334-9sM9r_oDVSN4eO2NU2v64poQaSY&KRTB&23417-9sM9r_oDVSN4eO2NU2v64poQaSY&KRTB&23426-9sM9r_oDVSN4eO2NU2v64poQaSY; chkChromeAb67Sec=11; pi=162538:4; DPSync3=1710720000%3A253_252_265_164%7C1711324800%3A245_260_219_258_261_235_256_259_263_262_197_201_226_236_228%7C1710201600%3A255_248%7C1711152000%3A257; SPugT=1710158246; KRTBCOOKIE_594=17105-RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005&KRTB&17107-RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005; PugT=1710158249
2024-03-11 11:57:54 UTC	1020	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 31 30 31 35 38 32 37 33 33 37 36 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 36 33 33 63 30 30 31 35 38 63 38 64 38 66 39 22 2c 22 74 61 67 69 64 22 3a 22 34 37 34 31 35 38 36 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 7d 2c 22 62 69 64 66 6c 6f 6f 72 63 75 72 22 3a 22 55 53 44 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 36 30 30 7d 5d 2c 22 70 6f 73 22 3a 30 2c 22 74 6f 70 66 72 61 6d 65 22 3a 31 7d 7d 5d 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a Data Ascii: {"id":"1710158273376","at":1,"cur":["USD"],"imp":[{"id":"633c00158c8d8f9","tagid":"4741586","secure":1,"ext":{},"bidfloorcur":"USD","banner":{"w":300,"h":250,"format":[{"w":300,"h":600}],"pos":0,"topframe":1}}],"site":{"page":"https://sourceforge.net/proj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
791	192.168.2.16	50908	44.236.19.27	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:54 UTC	763	OUT	POST /rtb/bid?src=prebid_prebid_8.13.0 HTTP/1.1 Host: ap.lijit.com Connection: keep-alive Content-Length: 514 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=ITYsABZHyF-4XRyhT4uuZCmM; _ljtrtb_5110=693098949688747066; ljtrtb=eJyrVjI1NDRQslIyszQ2sLSwNLE0s7AwNzE3MDNTqgUAXQQGTw%3D%3D
2024-03-11 11:57:54 UTC	514	OUT	Data Raw: 7b 22 69 64 22 3a 22 36 38 66 32 63 32 64 34 31 32 30 63 66 35 32 22 2c 22 69 6d 70 22 3a 5b 7b 22 61 64 75 6e 69 74 63 6f 64 65 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 33 39 34 32 30 39 33 35 38 38 35 35 2d 30 22 2c 22 69 64 22 3a 22 36 35 36 61 38 64 34 39 34 36 61 64 32 33 66 22 2c 22 74 61 67 69 64 22 3a 22 33 36 34 36 34 39 22 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 22 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 2c 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 36 30 30 7d 5d 2c 22 77 22 3a 31 2c 22 68 22 3a 31 7d 2c 22 65 78 74 22 3a 7b 7d 7d 5d 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 22 2c 22 6b 65 79 77 6f 72 64 73 22 3a Data Ascii: {"id":"68f2c2d4120cf52","imp":[{"adunitcode":"div-gpt-ad-1394209358855-0","id":"656a8d4946ad23f","tagid":"364649","bidfloor":"","banner":{"format":[{"w":300,"h":250},{"w":300,"h":600}],"w":1,"h":1},"ext":{}}],"site":{"domain":"sourceforge.net","keywords":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
792	192.168.2.16	50909	104.254.151.69	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:54 UTC	841	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 704 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; receive-cookie-deprecation=1; uuid2=7822940101119878936; icu=ChgIkPoyEAoYAyADKAMwoOO7rwY4A0ADSAMQoOO7rwYYAg..
2024-03-11 11:57:54 UTC	704	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 2c 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 36 30 30 7d 5d 2c 22 70 72 69 6d 61 72 79 5f 73 69 7a 65 22 3a 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 2c 22 61 64 5f 74 79 70 65 73 22 3a 5b 22 62 61 6e 6e 65 72 22 5d 2c 22 75 75 69 64 22 3a 22 36 37 33 62 64 35 31 31 38 30 35 33 66 36 22 2c 22 69 64 22 3a 39 32 36 35 31 30 38 2c 22 61 6c 6c 6f 77 5f 73 6d 61 6c 6c 65 72 5f 73 69 7a 65 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 5f 70 6d 74 5f 72 75 6c 65 22 3a 66 61 6c 73 65 2c 22 70 72 65 62 69 64 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 70 73 61 22 3a 74 72 75 Data Ascii: {"tags":[{"sizes":[{"width":300,"height":250},{"width":300,"height":600}],"primary_size":{"width":300,"height":250},"ad_types":["banner"],"uuid":"673bd5118053f6","id":9265108,"allow_smaller_sizes":false,"use_pmt_rule":false,"prebid":true,"disable_psa":tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
793	192.168.2.16	50906	54.215.139.244	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:54 UTC	686	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 845 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:54 UTC	845	OUT	Data Raw: 7b 22 69 64 22 3a 22 37 34 37 63 62 36 31 63 2d 65 32 63 39 2d 34 39 38 37 2d 39 63 64 61 2d 65 66 38 64 62 36 31 38 36 64 37 62 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 36 35 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 22 2c 22 72 65 66 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 70 6f 73 74 64 6f 77 6e 6c 6f 61 64 22 2c 22 6b 65 79 77 6f 72 64 73 22 3a 22 44 6f 63 46 65 74 63 68 65 72 2c 64 Data Ascii: {"id":"747cb61c-e2c9-4987-9cda-ef8db6186d7b","at":1,"cur":["USD"],"tmax":650,"site":{"domain":"sourceforge.net","page":"https://sourceforge.net/projects/docfetcher/","ref":"https://sourceforge.net/projects/docfetcher/postdownload","keywords":"DocFetcher,d
2024-03-11 11:57:55 UTC	497	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 11:57:55 GMT Content-Type: application/json; charset=utf-8 Content-Length: 694 Connection: close Set-Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37; Max-Age=2592000; Expires=Wed, 10 Apr 2024 11:57:55 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate x-openrtb-version: 2.5 Access-Control-Allow-Origin: https://sourceforge.net Access-Control-Allow-Credentials: true
2024-03-11 11:57:55 UTC	694	IN	Data Raw: 7b 22 63 6f 6f 6b 69 65 53 79 6e 63 55 72 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 68 61 72 65 74 68 72 6f 75 67 68 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 31 26 74 79 70 65 3d 35 38 32 38 30 26 6f 76 73 69 64 3d 62 36 62 61 66 35 62 36 2d 33 35 31 36 2d 34 63 34 36 2d 61 37 30 38 2d 35 33 65 30 65 63 31 39 33 61 33 37 22 2c 22 68 74 74 70 73 3a 2f 2f 73 2e 61 64 2e 73 6d 61 61 74 6f 2e 6e 65 74 2f 63 2f 3f 61 64 45 78 49 6e 69 74 3d 73 26 72 65 64 69 72 3d 68 Data Ascii: {"cookieSyncUrls":["https://match.adsrvr.org/track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent=","https://hb.yahoo.net/cksync.php?cs=1&type=58280&ovsid=b6baf5b6-3516-4c46-a708-53e0ec193a37","https://s.ad.smaato.net/c/?adExInit=s&redir=h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
794	192.168.2.16	50911	23.83.76.35	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:55 UTC	1431	OUT	POST /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive Content-Length: 295 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=22:1724005921034811649\|31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|76:GOOGLE_HOSTED_SI\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|141:9flSy3nJ5IvQWiaYTcU12v7Xg\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37\|150:0\|152:8fb517aa-a8d0-437d-988f-7084f5819e19
2024-03-11 11:57:55 UTC	295	OUT	Data Raw: 7b 22 73 69 74 65 69 64 22 3a 35 37 35 38 31 36 2c 22 70 61 67 65 69 64 22 3a 31 38 38 37 37 39 37 2c 22 66 6f 72 6d 61 74 69 64 22 3a 31 31 39 35 38 33 2c 22 63 6b 69 64 22 3a 30 2c 22 74 61 67 49 64 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 33 39 34 32 30 39 33 35 38 38 35 33 2d 30 22 2c 22 70 61 67 65 44 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 22 2c 22 74 69 6d 65 6f 75 74 22 3a 33 30 30 30 2c 22 62 69 64 49 64 22 3a 22 37 30 64 62 30 31 36 32 31 61 35 36 39 39 22 2c 22 70 72 65 62 69 64 56 65 72 73 69 6f 6e 22 3a 22 38 2e 31 33 2e 30 22 2c 22 73 63 68 61 69 6e 22 3a 6e 75 6c 6c 2c 22 73 69 7a 65 73 22 3a 5b 7b 22 77 22 3a 37 32 38 2c Data Ascii: {"siteid":575816,"pageid":1887797,"formatid":119583,"ckid":0,"tagId":"div-gpt-ad-1394209358853-0","pageDomain":"https://sourceforge.net/projects/docfetcher/","timeout":3000,"bidId":"70db01621a5699","prebidVersion":"8.13.0","schain":null,"sizes":[{"w":728,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
795	192.168.2.16	50915	104.254.151.69	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:55 UTC	841	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 703 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; receive-cookie-deprecation=1; uuid2=7822940101119878936; icu=ChgIkPoyEAoYAyADKAMwoOO7rwY4A0ADSAMQoOO7rwYYAg..
2024-03-11 11:57:55 UTC	703	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 7b 22 77 69 64 74 68 22 3a 39 37 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 5d 2c 22 70 72 69 6d 61 72 79 5f 73 69 7a 65 22 3a 7b 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 22 61 64 5f 74 79 70 65 73 22 3a 5b 22 62 61 6e 6e 65 72 22 5d 2c 22 75 75 69 64 22 3a 22 38 30 38 63 37 38 30 32 30 33 34 33 38 30 63 22 2c 22 69 64 22 3a 39 32 36 35 31 30 37 2c 22 61 6c 6c 6f 77 5f 73 6d 61 6c 6c 65 72 5f 73 69 7a 65 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 5f 70 6d 74 5f 72 75 6c 65 22 3a 66 61 6c 73 65 2c 22 70 72 65 62 69 64 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 70 73 61 22 3a 74 72 75 65 Data Ascii: {"tags":[{"sizes":[{"width":728,"height":90},{"width":970,"height":250}],"primary_size":{"width":728,"height":90},"ad_types":["banner"],"uuid":"808c7802034380c","id":9265107,"allow_smaller_sizes":false,"use_pmt_rule":false,"prebid":true,"disable_psa":true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
796	192.168.2.16	50914	204.237.133.116	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:55 UTC	3955	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 1019 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23234-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23361-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk; KRTBCOOKIE_1278=23329-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23340-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23498-6255abe4-6520-429f-aa2c-493e15bdee11; KRTBCOOKIE_1323=23480-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23485-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23575-OPUc21b156e4d4f4c8381b77a05c19b0a40; KRTBCOOKIE_391=22924-1724005921034811649&KRTB&23263-1724005921034811649&KRTB&23481-1724005921034811649; KRTBCOOKIE_466=16530-6ec76371-3031-4b49-abb3-349fb3d7cf23; SyncRTB3=1710720000%3A223_15_38_2%7C1712707200%3A224%7C1711411200%3A35%7C1715299200%3A69%7C1710979200%3A63%7C1711324800%3A234_165_56_21_48_46_7_250_240_249_231_176_96_13_220_104_178_99_264_22_254_3_54_55_71_233_166_5_266_8; KRTBCOOKIE_904=23554-GTz-sRdlCHiHoCwUpfHuZQ&KRTB&23557-GTz-sRdlCHiHoCwUpfHuZQ; KRTBCOOKIE_860=16335-9sM9r_oDVSN4eO2NU2v64poQaSY&KRTB&23334-9sM9r_oDVSN4eO2NU2v64poQaSY&KRTB&23417-9sM9r_oDVSN4eO2NU2v64poQaSY&KRTB&23426-9sM9r_oDVSN4eO2NU2v64poQaSY; chkChromeAb67Sec=11; pi=162538:4; DPSync3=1710720000%3A253_252_265_164%7C1711324800%3A245_260_219_258_261_235_256_259_263_262_197_201_226_236_228%7C1710201600%3A255_248%7C1711152000%3A257; SPugT=1710158246; KRTBCOOKIE_594=17105-RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005&KRTB&17107-RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005; PugT=1710158249
2024-03-11 11:57:55 UTC	1019	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 31 30 31 35 38 32 37 34 33 37 39 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 37 36 33 32 34 65 62 66 65 63 62 30 34 36 66 22 2c 22 74 61 67 69 64 22 3a 22 34 37 34 31 35 38 39 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 7d 2c 22 62 69 64 66 6c 6f 6f 72 63 75 72 22 3a 22 55 53 44 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 39 37 30 2c 22 68 22 3a 32 35 30 7d 5d 2c 22 70 6f 73 22 3a 30 2c 22 74 6f 70 66 72 61 6d 65 22 3a 31 7d 7d 5d 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 Data Ascii: {"id":"1710158274379","at":1,"cur":["USD"],"imp":[{"id":"76324ebfecb046f","tagid":"4741589","secure":1,"ext":{},"bidfloorcur":"USD","banner":{"w":728,"h":90,"format":[{"w":970,"h":250}],"pos":0,"topframe":1}}],"site":{"page":"https://sourceforge.net/proje

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
797	192.168.2.16	50912	44.236.19.27	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:55 UTC	763	OUT	POST /rtb/bid?src=prebid_prebid_8.13.0 HTTP/1.1 Host: ap.lijit.com Connection: keep-alive Content-Length: 513 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=ITYsABZHyF-4XRyhT4uuZCmM; _ljtrtb_5110=693098949688747066; ljtrtb=eJyrVjI1NDRQslIyszQ2sLSwNLE0s7AwNzE3MDNTqgUAXQQGTw%3D%3D
2024-03-11 11:57:55 UTC	513	OUT	Data Raw: 7b 22 69 64 22 3a 22 38 31 63 64 65 33 34 33 64 66 63 31 66 34 38 22 2c 22 69 6d 70 22 3a 5b 7b 22 61 64 75 6e 69 74 63 6f 64 65 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 33 39 34 32 30 39 33 35 38 38 35 33 2d 30 22 2c 22 69 64 22 3a 22 37 34 37 62 63 30 61 64 64 36 62 37 63 31 62 22 2c 22 74 61 67 69 64 22 3a 22 33 36 34 36 35 32 22 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 22 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 39 37 30 2c 22 68 22 3a 32 35 30 7d 5d 2c 22 77 22 3a 31 2c 22 68 22 3a 31 7d 2c 22 65 78 74 22 3a 7b 7d 7d 5d 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 22 2c 22 6b 65 79 77 6f 72 64 73 22 3a 22 Data Ascii: {"id":"81cde343dfc1f48","imp":[{"adunitcode":"div-gpt-ad-1394209358853-0","id":"747bc0add6b7c1b","tagid":"364652","bidfloor":"","banner":{"format":[{"w":728,"h":90},{"w":970,"h":250}],"w":1,"h":1},"ext":{}}],"site":{"domain":"sourceforge.net","keywords":"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
798	192.168.2.16	50916	52.52.237.208	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:57:56 UTC	434	OUT	GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:57:56 UTC	101	IN	HTTP/1.1 404 Not Found Date: Mon, 11 Mar 2024 11:57:56 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
799	192.168.2.16	50936	34.117.77.79	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:58:06 UTC	740	OUT	GET /imsync.ashx?pi=3642666937673580575&data=eyJwaCI6NDc4MSwid2giOjkwNywidGJzIjowLCJkdCI6NDUsInBpZCI6IjE3MTAxNTgyNDA1NjVfNmlxOTR0aWV3Iiwic2QiOjkwN30%3D HTTP/1.1 Host: ml314.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pi=3642666937673580575; tp=9%253B03%252F11%252F2024%2B11%253A57%253A24%253B0
2024-03-11 11:58:06 UTC	252	IN	HTTP/1.1 200 OK content-type: application/javascript date: Mon, 11 Mar 2024 11:58:06 GMT server: Google Frontend via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-11 11:58:06 UTC	23	IN	Data Raw: 31 31 0d 0a 5f 6d 6c 2e 73 65 74 49 4d 28 66 61 6c 73 65 29 3b 0d 0a Data Ascii: 11_ml.setIM(false);
2024-03-11 11:58:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
800	192.168.2.16	50940	54.241.104.80	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:58:14 UTC	807	OUT	GET /state/8065398;4362981;0;202;7B84D742-C6FD-17AF-7071-15DDD9BECD3E/?cachebuster=723015688 HTTP/1.1 Host: ad-events.flashtalking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: flashtalkingad1="GUID=5914E51D31FF3E"; _D9J=db72d2cb31ea4d63a889aab8ff7f5992
2024-03-11 11:58:14 UTC	155	IN	HTTP/1.1 200 OK Server: awselb/2.0 Date: Mon, 11 Mar 2024 11:58:14 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
801	192.168.2.16	50942	130.211.115.4	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:58:14 UTC	932	OUT	POST /data/cors?pm_st=DaavaeFXRkoHuNHwwBOoxWRBToRZAaAW-FE7fPshldVXiKDwY2nLOG03IOg==-E03APM1uaFDhPg==&pm_ct=af311b017264c1af4a86ebab&pm_pl=1710158250443&pm_td=42975&pid=1000925&en=1.1&callback=__pm_glbl_FedQiQJZ7xSP0886AVcdDDI6._gc3&tt=g&v=f4fb108 HTTP/1.1 Host: data.ad-score.com Connection: keep-alive Content-Length: 3104 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:58:14 UTC	3104	OUT	Data Raw: c3 b3 c2 9a c3 a5 c3 ab c3 9f c2 9a c2 b2 c3 b3 c2 9a c3 a0 c3 9d c3 ae c2 9a c2 b2 c3 b3 c2 9a c3 a5 c3 9c c3 a4 c2 9a c2 b2 c2 9a c2 9a c2 a4 c2 9a c3 a8 c3 a4 c3 ae c2 9a c2 b2 c2 9a c2 a9 c2 a8 c2 a6 c2 a8 c2 a6 c2 a8 c2 9a c3 b5 c2 a4 c2 9a c3 9a c3 ac c3 ab c2 9a c2 b2 c3 b3 c2 9a c3 a4 c3 a4 c3 ab c2 9a c2 b2 c3 9e c3 99 c3 a4 c3 ab c3 9d c2 a4 c2 9a c3 a4 c3 a1 c2 9a c2 b2 c2 9a c3 ac c2 9a c2 a4 c2 9a c3 ab c3 af c3 a1 c2 9a c2 b2 c2 9a c3 a5 c2 9a c3 b5 c2 a4 c2 9a c3 99 c3 9c c3 af c3 aa c2 9a c2 b2 c3 b3 c2 9a c3 a6 c3 97 c3 ab c3 aa c3 a8 c3 ac c2 9a c2 b2 c2 a9 c3 b5 c2 a4 c2 9a c3 ab c3 aa c3 a8 c3 ac c2 9a c2 b2 c3 93 c2 9a c3 a0 c3 ac c3 ac c3 a8 c3 ab c2 b2 c2 a7 c2 a7 c3 99 c3 9f c3 9d c3 a6 c2 a5 c3 99 c3 ab c3 ab c3 9d c3 ac c3 ab c2 Data Ascii:
2024-03-11 11:58:14 UTC	314	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST Access-Control-Allow-Origin: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com Date: Mon, 11 Mar 2024 11:58:14 GMT Content-Length: 1 Content-Type: text/plain; charset=utf-8 Connection: close
2024-03-11 11:58:14 UTC	1	IN	Data Raw: 30 Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
802	192.168.2.16	50944	54.241.104.80	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:58:14 UTC	523	OUT	GET /state/8065398;4362981;0;202;7B84D742-C6FD-17AF-7071-15DDD9BECD3E/?cachebuster=723015688 HTTP/1.1 Host: ad-events.flashtalking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: flashtalkingad1="GUID=5914E51D31FF3E"; _D9J=db72d2cb31ea4d63a889aab8ff7f5992
2024-03-11 11:58:15 UTC	155	IN	HTTP/1.1 200 OK Server: awselb/2.0 Date: Mon, 11 Mar 2024 11:58:15 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
803	192.168.2.16	50946	130.211.115.4	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:58:15 UTC	581	OUT	GET /data/cors?pm_st=DaavaeFXRkoHuNHwwBOoxWRBToRZAaAW-FE7fPshldVXiKDwY2nLOG03IOg==-E03APM1uaFDhPg==&pm_ct=af311b017264c1af4a86ebab&pm_pl=1710158250443&pm_td=42975&pid=1000925&en=1.1&callback=__pm_glbl_FedQiQJZ7xSP0886AVcdDDI6._gc3&tt=g&v=f4fb108 HTTP/1.1 Host: data.ad-score.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:58:15 UTC	493	IN	HTTP/1.1 405 Method Not Allowed Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST Access-Control-Allow-Origin: * Age: 0 Cache-Control: post-check=0, pre-check=0, false Cache-Control: proxy-revalidate, no-cache, no-cache=Set-Cookie, no-store, must-revalidate, max-age=0, s-maxage=0 P3p: CP="CURa ADMa DEVa TAIi PSAi PSDi IVAi IVDi CONi HISa TELi OUR IND DSP CAO COR" Pragma: no-cache Date: Mon, 11 Mar 2024 11:58:15 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
804	192.168.2.16	50949	34.117.77.79	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:58:21 UTC	760	OUT	GET /imsync.ashx?pi=3642666937673580575&data=eyJwaCI6NDk0MSwid2giOjkwNywidGJzIjo1Mi4wMSwiZHQiOjYwLCJwaWQiOiIxNzEwMTU4MjQwNTY1XzZpcTk0dGlldyIsInNkIjoxMzA3LCJzZHMiOjgwMH0%3D HTTP/1.1 Host: ml314.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pi=3642666937673580575; tp=9%253B03%252F11%252F2024%2B11%253A57%253A24%253B0
2024-03-11 11:58:21 UTC	252	IN	HTTP/1.1 200 OK content-type: application/javascript date: Mon, 11 Mar 2024 11:58:21 GMT server: Google Frontend via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-11 11:58:21 UTC	23	IN	Data Raw: 31 31 0d 0a 5f 6d 6c 2e 73 65 74 49 4d 28 66 61 6c 73 65 29 3b 0d 0a Data Ascii: 11_ml.setIM(false);
2024-03-11 11:58:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
805	192.168.2.16	50954	104.254.151.69	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:58:27 UTC	841	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 705 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; receive-cookie-deprecation=1; uuid2=7822940101119878936; icu=ChgIkPoyEAoYAyADKAMwoOO7rwY4A0ADSAMQoOO7rwYYAg..
2024-03-11 11:58:27 UTC	705	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 2c 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 36 30 30 7d 5d 2c 22 70 72 69 6d 61 72 79 5f 73 69 7a 65 22 3a 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 2c 22 61 64 5f 74 79 70 65 73 22 3a 5b 22 62 61 6e 6e 65 72 22 5d 2c 22 75 75 69 64 22 3a 22 39 33 62 33 30 30 30 30 38 62 64 63 61 30 34 22 2c 22 69 64 22 3a 39 32 36 35 31 30 38 2c 22 61 6c 6c 6f 77 5f 73 6d 61 6c 6c 65 72 5f 73 69 7a 65 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 5f 70 6d 74 5f 72 75 6c 65 22 3a 66 61 6c 73 65 2c 22 70 72 65 62 69 64 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 70 73 61 22 3a 74 72 Data Ascii: {"tags":[{"sizes":[{"width":300,"height":250},{"width":300,"height":600}],"primary_size":{"width":300,"height":250},"ad_types":["banner"],"uuid":"93b300008bdca04","id":9265108,"allow_smaller_sizes":false,"use_pmt_rule":false,"prebid":true,"disable_psa":tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
806	192.168.2.16	50950	204.237.133.116	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:58:27 UTC	3955	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 1020 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23234-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23361-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk; KRTBCOOKIE_1278=23329-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23340-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23498-6255abe4-6520-429f-aa2c-493e15bdee11; KRTBCOOKIE_1323=23480-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23485-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23575-OPUc21b156e4d4f4c8381b77a05c19b0a40; KRTBCOOKIE_391=22924-1724005921034811649&KRTB&23263-1724005921034811649&KRTB&23481-1724005921034811649; KRTBCOOKIE_466=16530-6ec76371-3031-4b49-abb3-349fb3d7cf23; SyncRTB3=1710720000%3A223_15_38_2%7C1712707200%3A224%7C1711411200%3A35%7C1715299200%3A69%7C1710979200%3A63%7C1711324800%3A234_165_56_21_48_46_7_250_240_249_231_176_96_13_220_104_178_99_264_22_254_3_54_55_71_233_166_5_266_8; KRTBCOOKIE_904=23554-GTz-sRdlCHiHoCwUpfHuZQ&KRTB&23557-GTz-sRdlCHiHoCwUpfHuZQ; KRTBCOOKIE_860=16335-9sM9r_oDVSN4eO2NU2v64poQaSY&KRTB&23334-9sM9r_oDVSN4eO2NU2v64poQaSY&KRTB&23417-9sM9r_oDVSN4eO2NU2v64poQaSY&KRTB&23426-9sM9r_oDVSN4eO2NU2v64poQaSY; chkChromeAb67Sec=11; pi=162538:4; DPSync3=1710720000%3A253_252_265_164%7C1711324800%3A245_260_219_258_261_235_256_259_263_262_197_201_226_236_228%7C1710201600%3A255_248%7C1711152000%3A257; SPugT=1710158246; KRTBCOOKIE_594=17105-RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005&KRTB&17107-RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005; PugT=1710158249
2024-03-11 11:58:27 UTC	1020	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 31 30 31 35 38 33 30 36 33 36 38 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 38 37 33 37 34 64 31 33 32 61 33 30 66 66 32 22 2c 22 74 61 67 69 64 22 3a 22 34 37 34 31 35 38 36 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 7d 2c 22 62 69 64 66 6c 6f 6f 72 63 75 72 22 3a 22 55 53 44 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 36 30 30 7d 5d 2c 22 70 6f 73 22 3a 30 2c 22 74 6f 70 66 72 61 6d 65 22 3a 31 7d 7d 5d 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a Data Ascii: {"id":"1710158306368","at":1,"cur":["USD"],"imp":[{"id":"87374d132a30ff2","tagid":"4741586","secure":1,"ext":{},"bidfloorcur":"USD","banner":{"w":300,"h":250,"format":[{"w":300,"h":600}],"pos":0,"topframe":1}}],"site":{"page":"https://sourceforge.net/proj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
807	192.168.2.16	50952	44.236.19.27	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:58:27 UTC	763	OUT	POST /rtb/bid?src=prebid_prebid_8.13.0 HTTP/1.1 Host: ap.lijit.com Connection: keep-alive Content-Length: 514 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=ITYsABZHyF-4XRyhT4uuZCmM; _ljtrtb_5110=693098949688747066; ljtrtb=eJyrVjI1NDRQslIyszQ2sLSwNLE0s7AwNzE3MDNTqgUAXQQGTw%3D%3D
2024-03-11 11:58:27 UTC	514	OUT	Data Raw: 7b 22 69 64 22 3a 22 39 34 65 65 37 36 31 61 34 63 35 30 62 62 39 22 2c 22 69 6d 70 22 3a 5b 7b 22 61 64 75 6e 69 74 63 6f 64 65 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 33 39 34 32 30 39 33 35 38 38 35 35 2d 30 22 2c 22 69 64 22 3a 22 38 39 62 31 64 61 30 64 63 35 37 62 62 35 62 22 2c 22 74 61 67 69 64 22 3a 22 33 36 34 36 34 39 22 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 22 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 2c 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 36 30 30 7d 5d 2c 22 77 22 3a 31 2c 22 68 22 3a 31 7d 2c 22 65 78 74 22 3a 7b 7d 7d 5d 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 22 2c 22 6b 65 79 77 6f 72 64 73 22 3a Data Ascii: {"id":"94ee761a4c50bb9","imp":[{"adunitcode":"div-gpt-ad-1394209358855-0","id":"89b1da0dc57bb5b","tagid":"364649","bidfloor":"","banner":{"format":[{"w":300,"h":250},{"w":300,"h":600}],"w":1,"h":1},"ext":{}}],"site":{"domain":"sourceforge.net","keywords":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
808	192.168.2.16	50955	23.83.76.80	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:58:27 UTC	1431	OUT	POST /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive Content-Length: 297 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=22:1724005921034811649\|31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|76:GOOGLE_HOSTED_SI\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|141:9flSy3nJ5IvQWiaYTcU12v7Xg\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37\|150:0\|152:8fb517aa-a8d0-437d-988f-7084f5819e19
2024-03-11 11:58:27 UTC	297	OUT	Data Raw: 7b 22 73 69 74 65 69 64 22 3a 35 37 35 38 31 36 2c 22 70 61 67 65 69 64 22 3a 31 39 31 31 34 39 35 2c 22 66 6f 72 6d 61 74 69 64 22 3a 31 31 39 35 38 33 2c 22 63 6b 69 64 22 3a 30 2c 22 74 61 67 49 64 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 33 39 34 32 30 39 33 35 38 38 35 35 2d 30 22 2c 22 70 61 67 65 44 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 22 2c 22 74 69 6d 65 6f 75 74 22 3a 33 30 30 30 2c 22 62 69 64 49 64 22 3a 22 38 33 34 36 66 63 37 62 32 39 37 63 62 65 64 22 2c 22 70 72 65 62 69 64 56 65 72 73 69 6f 6e 22 3a 22 38 2e 31 33 2e 30 22 2c 22 73 63 68 61 69 6e 22 3a 6e 75 6c 6c 2c 22 73 69 7a 65 73 22 3a 5b 7b 22 77 22 3a 33 30 30 Data Ascii: {"siteid":575816,"pageid":1911495,"formatid":119583,"ckid":0,"tagId":"div-gpt-ad-1394209358855-0","pageDomain":"https://sourceforge.net/projects/docfetcher/","timeout":3000,"bidId":"8346fc7b297cbed","prebidVersion":"8.13.0","schain":null,"sizes":[{"w":300

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
809	192.168.2.16	50953	54.215.139.244	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:58:27 UTC	686	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 846 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:58:27 UTC	846	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 62 66 33 34 66 31 30 2d 30 63 63 36 2d 34 34 36 66 2d 61 37 33 35 2d 37 30 63 61 36 66 33 34 37 61 36 34 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 36 35 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 22 2c 22 72 65 66 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 70 6f 73 74 64 6f 77 6e 6c 6f 61 64 22 2c 22 6b 65 79 77 6f 72 64 73 22 3a 22 44 6f 63 46 65 74 63 68 65 72 2c 64 Data Ascii: {"id":"1bf34f10-0cc6-446f-a735-70ca6f347a64","at":1,"cur":["USD"],"tmax":650,"site":{"domain":"sourceforge.net","page":"https://sourceforge.net/projects/docfetcher/","ref":"https://sourceforge.net/projects/docfetcher/postdownload","keywords":"DocFetcher,d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
810	192.168.2.16	50961	34.117.77.79	443	6196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:58:36 UTC	760	OUT	GET /imsync.ashx?pi=3642666937673580575&data=eyJwaCI6NDk0MSwid2giOjkwNywidGJzIjo1Mi4wMSwiZHQiOjc1LCJwaWQiOiIxNzEwMTU4MjQwNTY1XzZpcTk0dGlldyIsInNkIjoxMzA3LCJzZHMiOjgwMH0%3D HTTP/1.1 Host: ml314.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pi=3642666937673580575; tp=9%253B03%252F11%252F2024%2B11%253A57%253A24%253B0
2024-03-11 11:58:36 UTC	252	IN	HTTP/1.1 200 OK content-type: application/javascript date: Mon, 11 Mar 2024 11:58:36 GMT server: Google Frontend via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-11 11:58:36 UTC	23	IN	Data Raw: 31 31 0d 0a 5f 6d 6c 2e 73 65 74 49 4d 28 66 61 6c 73 65 29 3b 0d 0a Data Ascii: 11_ml.setIM(false);
2024-03-11 11:58:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
811	192.168.2.16	50964	104.254.151.69	443

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:58:43 UTC	841	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 679 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=NrtH8M8aWv4wgtxHL-S-0MBFgmvQipzsq2IfKqI0OHiAgQuZZROYbVGCXhl8SOCavE4TxGVQNLLoEa6yghI5App_C1nzRH2owBXNZR6Si2U.; receive-cookie-deprecation=1; uuid2=7822940101119878936; icu=ChgIkPoyEAoYAyADKAMwoOO7rwY4A0ADSAMQoOO7rwYYAg..
2024-03-11 11:58:43 UTC	679	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 5d 2c 22 70 72 69 6d 61 72 79 5f 73 69 7a 65 22 3a 7b 22 77 69 64 74 68 22 3a 33 30 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 2c 22 61 64 5f 74 79 70 65 73 22 3a 5b 22 62 61 6e 6e 65 72 22 5d 2c 22 75 75 69 64 22 3a 22 31 30 30 31 65 37 62 32 37 35 33 63 35 63 39 34 22 2c 22 69 64 22 3a 39 32 36 35 31 30 39 2c 22 61 6c 6c 6f 77 5f 73 6d 61 6c 6c 65 72 5f 73 69 7a 65 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 5f 70 6d 74 5f 72 75 6c 65 22 3a 66 61 6c 73 65 2c 22 70 72 65 62 69 64 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 70 73 61 22 3a 74 72 75 65 2c 22 68 62 5f 73 6f 75 72 63 65 22 3a 31 7d 5d 2c 22 75 73 65 72 22 3a Data Ascii: {"tags":[{"sizes":[{"width":300,"height":250}],"primary_size":{"width":300,"height":250},"ad_types":["banner"],"uuid":"1001e7b2753c5c94","id":9265109,"allow_smaller_sizes":false,"use_pmt_rule":false,"prebid":true,"disable_psa":true,"hb_source":1}],"user":

Session ID	Source IP	Source Port	Destination IP	Destination Port
812	192.168.2.16	50967	23.83.76.80	443

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:58:43 UTC	1431	OUT	POST /prebid/v1 HTTP/1.1 Host: prg.smartadserver.com Connection: keep-alive Content-Length: 280 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6; pid=1899505890594565248; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D89146%3B%24qt%3D152_695_18562t%3B%24dma%3D839%3B%24qo%3D6&c=1&l&lo&lt=638457549988580052&o=1; vs=575816=5885997; csync=22:1724005921034811649\|31:6ec76371-3031-4b49-abb3-349fb3d7cf23\|33:Ze7xfMAoIeEAAAzaAIdO4AAA&4192\|76:GOOGLE_HOSTED_SI\|94:Ze7xgAAAAwa1TAAh\|100:ec7ad717-1f8c-4815-8c2c-86fdc6330201\|113:RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005\|116:njquBca-QhUZqz9ypfJV\|117:e14297a0dfa4790f9c33b6631995bf21\|127:AAKPDU7L3eMAABWFZYx_mg\|134:OB_OK\|141:9flSy3nJ5IvQWiaYTcU12v7Xg\|147:b6baf5b6-3516-4c46-a708-53e0ec193a37\|150:0\|152:8fb517aa-a8d0-437d-988f-7084f5819e19
2024-03-11 11:58:43 UTC	280	OUT	Data Raw: 7b 22 73 69 74 65 69 64 22 3a 35 37 35 38 31 36 2c 22 70 61 67 65 69 64 22 3a 31 39 31 31 34 39 35 2c 22 66 6f 72 6d 61 74 69 64 22 3a 31 31 39 35 38 33 2c 22 63 6b 69 64 22 3a 30 2c 22 74 61 67 49 64 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 33 39 34 32 30 39 33 35 38 38 35 36 2d 30 22 2c 22 70 61 67 65 44 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 22 2c 22 74 69 6d 65 6f 75 74 22 3a 33 30 30 30 2c 22 62 69 64 49 64 22 3a 22 31 30 34 34 35 31 35 34 36 31 62 66 37 39 35 39 22 2c 22 70 72 65 62 69 64 56 65 72 73 69 6f 6e 22 3a 22 38 2e 31 33 2e 30 22 2c 22 73 63 68 61 69 6e 22 3a 6e 75 6c 6c 2c 22 73 69 7a 65 73 22 3a 5b 7b 22 77 22 3a 33 30 Data Ascii: {"siteid":575816,"pageid":1911495,"formatid":119583,"ckid":0,"tagId":"div-gpt-ad-1394209358856-0","pageDomain":"https://sourceforge.net/projects/docfetcher/","timeout":3000,"bidId":"1044515461bf7959","prebidVersion":"8.13.0","schain":null,"sizes":[{"w":30

Session ID	Source IP	Source Port	Destination IP	Destination Port
813	192.168.2.16	50966	204.237.133.116	443

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:58:43 UTC	3954	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 992 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=9A176ADB-73F4-4BD8-A648-23F2443493B5; KRTBCOOKIE_148=19421-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23486-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23489-uid:B6512778B5DA4E7C942E6E491CF4A04A&KRTB&23539-uid:B6512778B5DA4E7C942E6E491CF4A04A; KRTBCOOKIE_377=6810-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22918-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&22926-71dcd657-b7ce-4e56-9064-0f83979f8fcb&KRTB&23031-71dcd657-b7ce-4e56-9064-0f83979f8fcb; KRTBCOOKIE_699=22727-AAKPDU7L3eMAABWFZYx_mg; KRTBCOOKIE_279=22890-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23011-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99&KRTB&23355-31ab6b2a-552f-4ef2-8f1b-2b1eb1ba3c99; KRTBCOOKIE_22=14911-2407834391265652961&KRTB&23150-2407834391265652961&KRTB&23527-2407834391265652961; KRTBCOOKIE_57=22776-7822940101119878936&KRTB&23339-7822940101119878936; KRTBCOOKIE_18=22947-1973209972465453479; KRTBCOOKIE_153=1923-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&19420-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&22979-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO&KRTB&23462-s4mlP-ON9z6ohPFs5ITtbbyFoW6oivRr49-vQxiO; KRTBCOOKIE_188=3189-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553&KRTB&23418-e186753e-f558-43f2-9eb8-0f25b6de5290-65eef180-5553; KRTBCOOKIE_1003=22761-70a98560-df9e-11ee-9b1b-8fc11e983897&KRTB&23275-70a98560-df9e-11ee-9b1b-8fc11e983897; KRTBCOOKIE_107=1471-uid:rQpbF21I1RJEgU5&KRTB&23421-uid:rQpbF21I1RJEgU5; KRTBCOOKIE_32=11175-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22713-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&22715-AAAKjSefg7ltFQMpDsPHAAAAAAA&KRTB&23519-AAAKjSefg7ltFQMpDsPHAAAAAAA; KRTBCOOKIE_1251=23269-di_5eeffdf13c334a9c86516&KRTB&23571-di_5eeffdf13c334a9c86516; KRTBCOOKIE_52=22772-R4E330_11235B51F_E079381&KRTB&23092-R4E330_11235B51F_E079381; KRTBCOOKIE_27=16735-uid:3de265ee-f196-4200-b07f-5ba8fa18f4f0; KRTBCOOKIE_632=23041-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23047-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23234-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk&KRTB&23361-p-Pap5tWi3MsPwnaxxEMeT0asAyxCeXcjUeFlkMMptk; KRTBCOOKIE_1278=23329-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23340-6255abe4-6520-429f-aa2c-493e15bdee11&KRTB&23498-6255abe4-6520-429f-aa2c-493e15bdee11; KRTBCOOKIE_1323=23480-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23485-OPUc21b156e4d4f4c8381b77a05c19b0a40&KRTB&23575-OPUc21b156e4d4f4c8381b77a05c19b0a40; KRTBCOOKIE_391=22924-1724005921034811649&KRTB&23263-1724005921034811649&KRTB&23481-1724005921034811649; KRTBCOOKIE_466=16530-6ec76371-3031-4b49-abb3-349fb3d7cf23; SyncRTB3=1710720000%3A223_15_38_2%7C1712707200%3A224%7C1711411200%3A35%7C1715299200%3A69%7C1710979200%3A63%7C1711324800%3A234_165_56_21_48_46_7_250_240_249_231_176_96_13_220_104_178_99_264_22_254_3_54_55_71_233_166_5_266_8; KRTBCOOKIE_904=23554-GTz-sRdlCHiHoCwUpfHuZQ&KRTB&23557-GTz-sRdlCHiHoCwUpfHuZQ; KRTBCOOKIE_860=16335-9sM9r_oDVSN4eO2NU2v64poQaSY&KRTB&23334-9sM9r_oDVSN4eO2NU2v64poQaSY&KRTB&23417-9sM9r_oDVSN4eO2NU2v64poQaSY&KRTB&23426-9sM9r_oDVSN4eO2NU2v64poQaSY; chkChromeAb67Sec=11; pi=162538:4; DPSync3=1710720000%3A253_252_265_164%7C1711324800%3A245_260_219_258_261_235_256_259_263_262_197_201_226_236_228%7C1710201600%3A255_248%7C1711152000%3A257; SPugT=1710158246; KRTBCOOKIE_594=17105-RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005&KRTB&17107-RX-5a36053c-69dd-47d4-84e1-b94f859f1cd2-005; PugT=1710158249
2024-03-11 11:58:43 UTC	992	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 31 30 31 35 38 33 32 32 33 38 32 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 31 30 32 30 66 36 36 36 31 65 31 33 36 31 33 38 22 2c 22 74 61 67 69 64 22 3a 22 34 37 34 31 35 38 37 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 7d 2c 22 62 69 64 66 6c 6f 6f 72 63 75 72 22 3a 22 55 53 44 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 2c 22 70 6f 73 22 3a 30 2c 22 74 6f 70 66 72 61 6d 65 22 3a 31 7d 7d 5d 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 22 2c 22 72 65 66 22 3a 22 68 74 74 Data Ascii: {"id":"1710158322382","at":1,"cur":["USD"],"imp":[{"id":"1020f6661e136138","tagid":"4741587","secure":1,"ext":{},"bidfloorcur":"USD","banner":{"w":300,"h":250,"pos":0,"topframe":1}}],"site":{"page":"https://sourceforge.net/projects/docfetcher/","ref":"htt

Session ID	Source IP	Source Port	Destination IP	Destination Port
814	192.168.2.16	50963	54.215.139.244	443

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:58:43 UTC	686	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 828 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=b6baf5b6-3516-4c46-a708-53e0ec193a37
2024-03-11 11:58:43 UTC	828	OUT	Data Raw: 7b 22 69 64 22 3a 22 30 37 35 63 66 66 30 39 2d 63 66 32 37 2d 34 66 36 30 2d 39 32 33 61 2d 31 63 66 32 66 38 39 66 64 30 37 34 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 36 35 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 22 2c 22 72 65 66 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 2f 70 72 6f 6a 65 63 74 73 2f 64 6f 63 66 65 74 63 68 65 72 2f 70 6f 73 74 64 6f 77 6e 6c 6f 61 64 22 2c 22 6b 65 79 77 6f 72 64 73 22 3a 22 44 6f 63 46 65 74 63 68 65 72 2c 64 Data Ascii: {"id":"075cff09-cf27-4f60-923a-1cf2f89fd074","at":1,"cur":["USD"],"tmax":650,"site":{"domain":"sourceforge.net","page":"https://sourceforge.net/projects/docfetcher/","ref":"https://sourceforge.net/projects/docfetcher/postdownload","keywords":"DocFetcher,d

Session ID	Source IP	Source Port	Destination IP	Destination Port
815	192.168.2.16	50968	44.236.19.27	443

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:58:43 UTC	763	OUT	POST /rtb/bid?src=prebid_prebid_8.13.0 HTTP/1.1 Host: ap.lijit.com Connection: keep-alive Content-Length: 497 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://sourceforge.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sourceforge.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=ITYsABZHyF-4XRyhT4uuZCmM; _ljtrtb_5110=693098949688747066; ljtrtb=eJyrVjI1NDRQslIyszQ2sLSwNLE0s7AwNzE3MDNTqgUAXQQGTw%3D%3D
2024-03-11 11:58:43 UTC	497	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 30 37 39 36 64 61 38 66 64 37 30 61 63 65 34 22 2c 22 69 6d 70 22 3a 5b 7b 22 61 64 75 6e 69 74 63 6f 64 65 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 33 39 34 32 30 39 33 35 38 38 35 36 2d 30 22 2c 22 69 64 22 3a 22 31 30 36 65 66 30 38 62 62 31 30 65 34 62 39 22 2c 22 74 61 67 69 64 22 3a 22 33 36 34 36 35 30 22 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 22 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 5d 2c 22 77 22 3a 31 2c 22 68 22 3a 31 7d 2c 22 65 78 74 22 3a 7b 7d 7d 5d 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 73 6f 75 72 63 65 66 6f 72 67 65 2e 6e 65 74 22 2c 22 6b 65 79 77 6f 72 64 73 22 3a 22 44 6f 63 46 65 74 63 68 65 72 2c 64 6f 77 6e 6c Data Ascii: {"id":"10796da8fd70ace4","imp":[{"adunitcode":"div-gpt-ad-1394209358856-0","id":"106ef08bb10e4b9","tagid":"364650","bidfloor":"","banner":{"format":[{"w":300,"h":250}],"w":1,"h":1},"ext":{}}],"site":{"domain":"sourceforge.net","keywords":"DocFetcher,downl

Session ID	Source IP	Source Port	Destination IP	Destination Port
816	192.168.2.16	50971	130.211.115.4	443

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:58:45 UTC	949	OUT	POST /data/cors?pm_st=DaavaeFXRkoHuNHwwBOoxWRBToRZAaAW-FE7fPshldVXiKDwY2nLOG03IOg==-E03APM1uaFDhPg==&pm_ct=af311b017264c1af4a86ebab&pm_pl=1710158250443&pm_td=74143&pid=1000925&en=1.1&callback=__pm_glbl_FedQiQJZ7xSP0886AVcdDDI6._gc4&tt=g&v=f4fb108 HTTP/1.1 Host: data.ad-score.com Connection: keep-alive Content-Length: 5075 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-11 11:58:45 UTC	5075	OUT	Data Raw: 23 7a c3 85 c3 8b c2 bf 7a c2 92 23 7a c2 ba c3 8c c3 8b c3 83 7a c2 92 23 7a c3 8a c2 bc 7a c2 92 23 7a c2 b7 c2 bf c2 bb c2 8b 7a c2 92 c2 91 c2 8b c2 8f 25 c2 84 7a c3 8b c3 8a c3 88 c3 8c c2 b7 c3 81 c3 81 7a c2 92 c2 88 c2 84 7a c3 8b c3 8a c3 88 c3 8c c2 b7 c3 81 c3 8a 7a c2 92 c2 88 c2 84 7a c3 8e c3 8b c3 8b c3 8c c3 85 7a c2 92 c2 89 c2 84 7a c3 8e c3 8b c3 80 c2 bc c3 85 7a c2 92 c2 89 c2 84 7a c2 bd c2 be c3 88 7a c2 92 c2 89 c2 84 7a c3 87 c2 ba c3 81 c3 86 7a c2 92 c2 88 c2 84 7a c3 87 c2 ba c3 8c 7a c2 92 7a c3 88 c2 b9 c2 bf c2 bd c3 80 c3 81 c2 bc c2 bd 7a c2 84 7a c2 ba c2 be c2 bb c3 80 7a c2 92 c2 8a 25 c2 84 7a c2 bf c3 8e c3 8f c2 b7 c2 89 7a c2 92 23 7a c2 bf c2 bd 7a c2 92 c2 85 c2 89 c2 84 7a c3 81 c3 87 7a c2 92 c2 89 c2 88 c2 88 Data Ascii: #zz#zz#zz#zz%zzzzzzzzzzzzzzzzzz%zz#zzzz
2024-03-11 11:58:46 UTC	314	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST Access-Control-Allow-Origin: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com Date: Mon, 11 Mar 2024 11:58:45 GMT Content-Length: 1 Content-Type: text/plain; charset=utf-8 Connection: close
2024-03-11 11:58:46 UTC	1	IN	Data Raw: 30 Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
817	192.168.2.16	50975	142.251.2.106	443

Timestamp	Bytes transferred	Direction	Data
2024-03-11 11:58:45 UTC	1026	OUT	GET /ads/measurement/l?ebcid=ALh7CaRH8ul5f9I-aGaPnjqe1Gsz1Y_PPTZxConu93RI-oCozWUAkFFhle2M6qS9MPS0DO0Zqc50qA9KKWkdFspmJ9-KuTlqew HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fa651f69b70f64938bd0550e6e4bc01b.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-03-11 11:58:46 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 11 Mar 2024 11:58:46 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	0
Start time:	12:56:34
Start date:	11/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	12:56:34
Start date:	11/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=2004,i,4405816494534265162,16023283234935556524,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	12:56:47
Start date:	11/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=8160 --field-trial-handle=2004,i,4405816494534265162,16023283234935556524,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	12:57:13
Start date:	11/03/2024
Path:	C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Downloads\docfetcher_1.1.25_win32_setup.exe"
Imagebase:	0x400000
File size:	73'856'445 bytes
MD5 hash:	9198C3C72789AEFB6790A60EEF7D33B0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	12:57:21
Start date:	11/03/2024
Path:	C:\Program Files (x86)\DocFetcher\docfetcher-daemon-windows.exe
Wow64 process (32bit):	true
Commandline:	C:\Program Files (x86)\DocFetcher\docfetcher-daemon-windows.exe
Imagebase:	0x400000
File size:	563'621 bytes
MD5 hash:	560CDB1150BB331C4571F45E51E2EADC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 2%, ReversingLabs Detection: 7%, Virustotal, Browse
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	15
Start time:	12:57:22
Start date:	11/03/2024
Path:	C:\Program Files (x86)\DocFetcher\DocFetcher.exe
Wow64 process (32bit):	true
Commandline:	C:\Program Files (x86)\DocFetcher\DocFetcher.exe
Imagebase:	0x400000
File size:	39'424 bytes
MD5 hash:	5D66247846EF8F577C318965D6036536
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 4%, ReversingLabs Detection: 0%, Virustotal, Browse
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	16
Start time:	12:57:22
Start date:	11/03/2024
Path:	C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe" -Xmx1024m -Djava.library.path="lib" -enableassertions -Xss2m -classpath "lib;lib\ansj_lucene6_plug-5.1.2.0.jar;lib\ansj_seg-5.1.2.jar;lib\ant-1.10.3.jar;lib\bcmail-jdk15on-160.jar;lib\bcpkix-jdk15on-160.jar;lib\bcprov-jdk15on-160.jar;lib\commons-codec-1.10.jar;lib\commons-collections4-4.1.jar;lib\commons-compress-1.4.1.jar;lib\commons-io-2.4.jar;lib\commons-logging-1.2.jar;lib\curvesapi-1.04.jar;lib\fontbox-2.0.13.jar;lib\guava-12.0.jar;lib\J7zip_4.43_alpha2.jar;lib\java-libpst-0.8.1.jar;lib\java-unrar-0.3.jar;lib\javolution-5.5.1.jar;lib\jericho-html-3.4.jar;lib\jexcelapi-2.6.12.jar;lib\jintellitype-1.3.7.jar;lib\jna-3.2.7.jar;lib\jna-platform-3.2.7.jar;lib\juniversalchardet-1.0.3.jar;lib\JXGrabKey-0.3.2.jar;lib\log4j-1.2.17.jar;lib\lucene-analyzers-common-6.6.3.jar;lib\lucene-backward-codecs-6.6.3.jar;lib\lucene-core-6.6.3.jar;lib\lucene-highlighter-6.6.3.jar;lib\lucene-join-6.6.3.jar;lib\lucene-memory-6.6.3.jar;lib\lucene-queries-6.6.3.jar;lib\lucene-queryparser-6.6.3.jar;lib\metadata-extractor-2.11.0.jar;lib\mime-util-2.1.3.jar;lib\net.sourceforge.docfetcher_1.1.25_20210525-2212.jar;lib\nlp-lang-1.7.7.jar;lib\pdfbox-2.0.13.jar;lib\poi-3.17.jar;lib\poi-ooxml-3.17.jar;lib\poi-ooxml-schemas-3.17.jar;lib\poi-scratchpad-3.17.jar;lib\py4j0.10.7-py3.jar;lib\slf4j-api-1.6.1.jar;lib\slf4j-nop-1.6.1.jar;lib\truezip-driver-file-7.7.7.jar;lib\truezip-driver-tar-7.7.7.jar;lib\truezip-driver-zip-7.7.7.jar;lib\truezip-file-7.7.7.jar;lib\truezip-kernel-7.7.7.jar;lib\truezip-swing-7.7.7.jar;lib\xmlbeans-2.6.0.jar;lib\xmpbox-2.0.13.jar;lib\xmpcore-5.1.3.jar;lib\xz-1.3.jar" net.sourceforge.docfetcher.Main
Imagebase:	0x630000
File size:	257'664 bytes
MD5 hash:	6E0F4F812AE02FBCB744A929E74A04B8
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	17
Start time:	12:57:23
Start date:	11/03/2024
Path:	C:\Windows\SysWOW64\icacls.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M
Imagebase:	0x5e0000
File size:	29'696 bytes
MD5 hash:	2E49585E4E08565F52090B144062F97E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	12:57:23
Start date:	11/03/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6684c0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	2.3%
Dynamic/Decrypted Code Coverage:	3%
Signature Coverage:	5%
Total number of Nodes:	437
Total number of Limit Nodes:	41

Executed Functions

Function 6C539DC7 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 92
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNEL32(oleacc.dll), ref: 6C539E3A
GetProcAddress.KERNEL32(00000000,CreateStdAccessibleObject), ref: 6C539E4A

Strings

oleacc.dll, xrefs: 6C539E35
CreateStdAccessibleObject, xrefs: 6C539E44

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: CreateStdAccessibleObject$oleacc.dll
API String ID: 2574300362-2370133546
Opcode ID: 7cc212a99e99894bdbddec4c5cbeaf73db089098089cc994b6e8430587c0a324
Instruction ID: 4f76e61731e56afc235f93fc2058be14ee99739e4f53f72daea377c4ad470d0f
Opcode Fuzzy Hash: 7cc212a99e99894bdbddec4c5cbeaf73db089098089cc994b6e8430587c0a324
Instruction Fuzzy Hash: 8C31C2B1205365AFD701DFA5CC40A6BB7F8EFCA708F11581DF85883240EB72D9458BA2

Uniqueness

Uniqueness Score: -1.00%

Function 6C511012 Relevance: 4.7, APIs: 1, Strings: 2, Instructions: 198
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNEL32(48570000,00004000,00001000,00000040), ref: 6C5111A2

Strings

Callback thunk overflow, xrefs: 6C511261
java/lang/Error, xrefs: 6C511256

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AllocVirtual
String ID: Callback thunk overflow$java/lang/Error
API String ID: 4275171209-2602470377
Opcode ID: 5503e849bf2c3c7fafba0bd0513691df3864476f6d330de73f73959a36bcf0be
Instruction ID: e8199eddac74798f7cf569d350ee64379291e3cf21d99b4eca8fef44ab1605fc
Opcode Fuzzy Hash: 5503e849bf2c3c7fafba0bd0513691df3864476f6d330de73f73959a36bcf0be
Instruction Fuzzy Hash: C971E33110A681AFE3128F69CC48B6BFBF4FF66308F1545ADE89087A51D771E441CB96

Uniqueness

Uniqueness Score: -1.00%

Function 6C5124A0 Relevance: 1.6, APIs: 1, Instructions: 84comCOMMON

Download Yara Rule

APIs

CoCreateInstance.OLE32(00000000,?,?,00000000,00000000), ref: 6C51250E

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: CreateInstance
String ID:
API String ID: 542301482-0
Opcode ID: a2a72ffd24fa7b6d9a4b380bda9fe9bfa898da9530fb40f3eeedc2419aa36575
Instruction ID: 598f3bac77fcb39a4ad261e81829aa76424ad5a36e683f8722f5d30ca3539521
Opcode Fuzzy Hash: a2a72ffd24fa7b6d9a4b380bda9fe9bfa898da9530fb40f3eeedc2419aa36575
Instruction Fuzzy Hash: 28218C3210A340AFE7119F81CC9CF6BB7E8FF8A309F61092DF5944A551C7719841CB56

Uniqueness

Uniqueness Score: -1.00%

Function 6A3B633F Relevance: 9.1, APIs: 6, Instructions: 126
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__RTC_Initialize.LIBCMT ref: 6A3B637D
___scrt_uninitialize_crt.LIBCMT ref: 6A3B639A

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID: Initialize___scrt_uninitialize_crt
String ID:
API String ID: 2442719207-0
Opcode ID: cb8b86fdb648f54a9f3f2d7f4d3af855682a30503f2c131f283e8b894c0a13ef
Instruction ID: b7e54bae373b008226a68ba62eff81a9e3f7de2a10765a5a3b623a1dcb1a586a
Opcode Fuzzy Hash: cb8b86fdb648f54a9f3f2d7f4d3af855682a30503f2c131f283e8b894c0a13ef
Instruction Fuzzy Hash: CC41D531D00A19ABDF618F25CC0979E3A7BEF61794F028019E85597953EF31DD01CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 675441FC Relevance: 9.1, APIs: 1, Strings: 5, Instructions: 118
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

memcpy.MSVCRT ref: 67544289

Part of subcall function 675411CC: InitializeCriticalSection.KERNEL32(00000018,?,?,?,?,67544247,6754C870), ref: 675411FB

Part of subcall function 67541030: __dllonexit.MSVCRT ref: 6754104C

Strings

net/contentobjects/jnotify/win32/JNotify_win32, xrefs: 6754427F
callbackProcessEvent not found, xrefs: 67544300
(IILjava/lang/String;Ljava/lang/String;)V, xrefs: 675442E5
callbackProcessEvent, xrefs: 675442EA
class %s not found , xrefs: 675442AB

Memory Dump Source

Source File: 00000010.00000002.2464023360.0000000067541000.00000020.00000001.01000000.00000011.sdmp, Offset: 67540000, based on PE: true

Associated: 00000010.00000002.2463980469.0000000067540000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464120924.000000006754B000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464168986.0000000067551000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464214723.0000000067552000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464256525.0000000067553000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_67540000_javaw.jbxd

Similarity

API ID: CriticalInitializeSection__dllonexitmemcpy
String ID: (IILjava/lang/String;Ljava/lang/String;)V$callbackProcessEvent$callbackProcessEvent not found$class %s not found $net/contentobjects/jnotify/win32/JNotify_win32
API String ID: 3213439088-1416750521
Opcode ID: c3f0ebdaa5a8257a12fd02f642d919cea8ecd9741e8954b0f0c7d1946446d47b
Instruction ID: 2469d229d11db67e868de44d3f33b7bfe75b11b569441c4d5f1c6f87b1c3f56b
Opcode Fuzzy Hash: c3f0ebdaa5a8257a12fd02f642d919cea8ecd9741e8954b0f0c7d1946446d47b
Instruction Fuzzy Hash: 82419070804348EFDB10EFA5D845B8DBBF8AB8E358F1042DAD5249B29DD7764484CF56

Uniqueness

Uniqueness Score: -1.00%

Function 67541740 Relevance: 9.1, APIs: 6, Instructions: 66
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateIoCompletionPort.KERNEL32(000000FF,00000000,00000000,00000001,00000000,?,?,?,675443B6,?,0000008C), ref: 67541767
GetLastError.KERNEL32(000000FF,00000000,00000000,00000001,00000000,?,?,?,675443B6,?,0000008C), ref: 67541773

Part of subcall function 67545CC4: malloc.MSVCRT ref: 67545D06
Part of subcall function 67545CC4: memset.MSVCRT ref: 67545D27

CreateThread.KERNEL32(00000000,00000000,67543D86,?,00000000,675443B6), ref: 675417A5
SetThreadPriority.KERNEL32(?,0000000F,000000FF,00000000,00000000,00000001,00000000,?,?,?,675443B6,?,0000008C), ref: 675417B6
CreateThread.KERNEL32(00000000,00000000,675433A2,?,00000000,675443B6), ref: 675417C8
CloseHandle.KERNEL32(?,00000000,00000000,675433A2,?,00000000,675443B6,?,0000000F,000000FF,00000000,00000000,00000001,00000000), ref: 675417D7

Memory Dump Source

Source File: 00000010.00000002.2464023360.0000000067541000.00000020.00000001.01000000.00000011.sdmp, Offset: 67540000, based on PE: true

Associated: 00000010.00000002.2463980469.0000000067540000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464120924.000000006754B000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464168986.0000000067551000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464214723.0000000067552000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464256525.0000000067553000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_67540000_javaw.jbxd

Similarity

API ID: CreateThread$CloseCompletionErrorHandleLastPortPrioritymallocmemset
String ID:
API String ID: 548781609-0
Opcode ID: ce0a6756fc4948a11049868d8727811c3c9deef75b15168cb8dc95508f684d04
Instruction ID: de7f7fa5aa1788ecd5f8860c5ddadfbe879bef6af4a9a97659119bd138247410
Opcode Fuzzy Hash: ce0a6756fc4948a11049868d8727811c3c9deef75b15168cb8dc95508f684d04
Instruction Fuzzy Hash: 78119070644305BAEB10AF64CC81F4A7BA8AB08758F1040D8F708AF1CDD7B5AC5087AA

Uniqueness

Uniqueness Score: -1.00%

Function 6C51BF1F Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 100
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNEL32(shell32.dll), ref: 6C51BF94
GetProcAddress.KERNEL32(00000000,SHCreateItemFromParsingName), ref: 6C51BFA4
SHCreateItemFromParsingName.SHELL32(00000000,?,00000000,00000000), ref: 6C51BFD2

Strings

shell32.dll, xrefs: 6C51BF8F
SHCreateItemFromParsingName, xrefs: 6C51BF9E

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressCreateFromItemLibraryLoadNameParsingProc
String ID: SHCreateItemFromParsingName$shell32.dll
API String ID: 1486269804-2320870614
Opcode ID: 615b917b1e315aca8082328ba2c1c1b94a774dffd3d4955b844c0dc0534389b3
Instruction ID: 15b03562729ae92fc005ff7b6b44ad2c31b1643b1bf1e773a9b215d045032516
Opcode Fuzzy Hash: 615b917b1e315aca8082328ba2c1c1b94a774dffd3d4955b844c0dc0534389b3
Instruction Fuzzy Hash: DF319E7120A345AFE701AF90CC88B6BB7E8FF89309F21092EF59596A40C7729541CF16

Uniqueness

Uniqueness Score: -1.00%

Function 6C5153EF Relevance: 8.8, APIs: 2, Strings: 3, Instructions: 80
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNEL32(shcore.dll), ref: 6C515442
GetProcAddress.KERNEL32(00000000,GetDpiForMonitor), ref: 6C515452

Strings

shcore.dll, xrefs: 6C51543D
@tWu, xrefs: 6C515458, 6C51545F, 6C515470
GetDpiForMonitor, xrefs: 6C51544C

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: @tWu$GetDpiForMonitor$shcore.dll
API String ID: 2574300362-1366712221
Opcode ID: f0983aa782c49a3039e05a6da46daed3d01c425c2516cd3feba2af75747c5f10
Instruction ID: c08ed252ac256eb6126083631b05a71f8b0631284c76e01dec1530b6f41d9acc
Opcode Fuzzy Hash: f0983aa782c49a3039e05a6da46daed3d01c425c2516cd3feba2af75747c5f10
Instruction Fuzzy Hash: 0621AE3520A345AFEB019FA6CC8CF1B77F8EF8931AF60492EF55486901CBB19841DB25

Uniqueness

Uniqueness Score: -1.00%

Function 6C512575 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 26
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNEL32(urlmon.dll), ref: 6C512585
GetProcAddress.KERNEL32(00000000,CoInternetIsFeatureEnabled), ref: 6C512595
CoInternetIsFeatureEnabled.URLMON(?,?), ref: 6C5125C4

Strings

CoInternetIsFeatureEnabled, xrefs: 6C51258F
urlmon.dll, xrefs: 6C512580

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressEnabledFeatureInternetLibraryLoadProc
String ID: CoInternetIsFeatureEnabled$urlmon.dll
API String ID: 3550628867-1110479486
Opcode ID: d394c589eb413f29ae05735316aae89d7d7b2ee9fbdf59af0d263dbf7f401362
Instruction ID: 0940d57373fe3e86eb0db6fdcbec4d9b7e44be9cd862f20b77ff6b2593bbb37e
Opcode Fuzzy Hash: d394c589eb413f29ae05735316aae89d7d7b2ee9fbdf59af0d263dbf7f401362
Instruction Fuzzy Hash: 9FF030303081609FEB02AF64CD4CE0977F5A78B745B034926A482E6A42C771C8408B79

Uniqueness

Uniqueness Score: -1.00%

Function 6A3B94D1 Relevance: 7.6, APIs: 5, Instructions: 67
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetLastError.KERNEL32(?,?,?,6A3B9884,6A3B8E34,?,?,6A3B6198,?,?,6A3B23D9,00000018), ref: 6A3B94D6
SetLastError.KERNEL32(00000000,0000000D,000000FF,?,?,?,6A3B9884,6A3B8E34,?,?,6A3B6198,?,?,6A3B23D9,00000018), ref: 6A3B94FC
_free.LIBCMT ref: 6A3B953C
_free.LIBCMT ref: 6A3B956F
SetLastError.KERNEL32(00000000), ref: 6A3B957C

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID: ErrorLast$_free
String ID:
API String ID: 3170660625-0
Opcode ID: 257d5ef48c8ae81ca0d125e580118063d0cfffa2f7fcf1a129afc19ca4ad3d1e
Instruction ID: 2bcb3b047a0eef7b0ed609e103d99c7241d719892fccda00645c9a228bccafbb
Opcode Fuzzy Hash: 257d5ef48c8ae81ca0d125e580118063d0cfffa2f7fcf1a129afc19ca4ad3d1e
Instruction Fuzzy Hash: 671108325845117B8A01DE7C5C88D5B36FFABB22B4B130216FAA5D2DC5EF3AEC01E160

Uniqueness

Uniqueness Score: -1.00%

Function 675433A2 Relevance: 7.5, APIs: 3, Strings: 1, Instructions: 472
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 675412B4: _vsnprintf.MSVCRT ref: 675412DF
Part of subcall function 675412B4: GetCurrentThreadId.KERNEL32 ref: 675412F0
Part of subcall function 675412B4: fprintf.MSVCRT ref: 67541309
Part of subcall function 675412B4: fflush.MSVCRT ref: 67541362

EnterCriticalSection.KERNEL32(?), ref: 67543A04
LeaveCriticalSection.KERNEL32(?,?), ref: 67543AC1
WaitForSingleObjectEx.KERNEL32(00000000,000000FF,00000001), ref: 67543BA3

Strings

eventLoop exits, xrefs: 67543BAD

Memory Dump Source

Source File: 00000010.00000002.2464023360.0000000067541000.00000020.00000001.01000000.00000011.sdmp, Offset: 67540000, based on PE: true

Associated: 00000010.00000002.2463980469.0000000067540000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464120924.000000006754B000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464168986.0000000067551000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464214723.0000000067552000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464256525.0000000067553000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_67540000_javaw.jbxd

Similarity

API ID: CriticalSection$CurrentEnterLeaveObjectSingleThreadWait_vsnprintffflushfprintf
String ID: eventLoop exits
API String ID: 3256900102-4157613458
Opcode ID: 1b50d56d34be68e2f210906d8587fa85c7a8f372f1595b7ec0b2acbee7565811
Instruction ID: c9efaae507c255c8560cc04823e3850b1aa3237dcd99ba5023fc778fe5462d54
Opcode Fuzzy Hash: 1b50d56d34be68e2f210906d8587fa85c7a8f372f1595b7ec0b2acbee7565811
Instruction Fuzzy Hash: 9F4245B5D012299FDB60CF69C984BCDBBF5BB48314F1481EAD808AB314D775AA85CF90

Uniqueness

Uniqueness Score: -1.00%

Function 6C51A8A9 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 87
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNEL32(propsys.dll), ref: 6C51A90F
GetProcAddress.KERNEL32(00000000,PSPropertyKeyFromString), ref: 6C51A91F

Strings

propsys.dll, xrefs: 6C51A90A
PSPropertyKeyFromString, xrefs: 6C51A919

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: PSPropertyKeyFromString$propsys.dll
API String ID: 2574300362-3576366454
Opcode ID: 3906f3c439f0b9b721cd7e20595c4cdf44199534b185b6767fc0eb3a67d37b6e
Instruction ID: 2b1204b162d0393ded6c6397c3e019dced0c216938a211a815bc3504ee972de5
Opcode Fuzzy Hash: 3906f3c439f0b9b721cd7e20595c4cdf44199534b185b6767fc0eb3a67d37b6e
Instruction Fuzzy Hash: 82218571609305AFE701DF69CD48B7B77FCEF85218F12052DF85482A10DB70D9498B66

Uniqueness

Uniqueness Score: -1.00%

Function 6C51F99F Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 79
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNEL32(uxtheme.dll), ref: 6C51F9F2
GetProcAddress.KERNEL32(00000000,SetWindowTheme), ref: 6C51FA02

Strings

uxtheme.dll, xrefs: 6C51F9ED
SetWindowTheme, xrefs: 6C51F9FC

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: SetWindowTheme$uxtheme.dll
API String ID: 2574300362-2891710335
Opcode ID: e7d093137cb15f68bc275d69835d62f61d96fbf404cd55ec51390b4725852c30
Instruction ID: 5f00ce3661125a8f3ca0a501f3684937d3c79d9f5e393cc028d063808696b0c5
Opcode Fuzzy Hash: e7d093137cb15f68bc275d69835d62f61d96fbf404cd55ec51390b4725852c30
Instruction Fuzzy Hash: 87219D31209246AFE7019F58CC8CF6B77F8EF89748F210A2EB5A586900DBB59941CB25

Uniqueness

Uniqueness Score: -1.00%

Function 6C51F055 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 54
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNEL32(shell32.dll), ref: 6C51F087
GetProcAddress.KERNEL32(00000000,SetCurrentProcessExplicitAppUserModelID), ref: 6C51F097

Strings

SetCurrentProcessExplicitAppUserModelID, xrefs: 6C51F091
shell32.dll, xrefs: 6C51F082

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: SetCurrentProcessExplicitAppUserModelID$shell32.dll
API String ID: 2574300362-2703365408
Opcode ID: ab6c027731a90b0e413e77aecfd13ef01a9999c106fc3c5b4b77eb827edbd599
Instruction ID: 61ed20d165f7b85ebaf1790fcc0fa750a92bba93bfa6523d669c24ce9e3536fc
Opcode Fuzzy Hash: ab6c027731a90b0e413e77aecfd13ef01a9999c106fc3c5b4b77eb827edbd599
Instruction Fuzzy Hash: A001F53930AA259FD711AB69CC8CF1B7BFCEBC6718B12865AB806C7A00D632C440C774

Uniqueness

Uniqueness Score: -1.00%

Function 675415FC Relevance: 6.0, APIs: 4, Instructions: 49
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_wcsdup.MSVCRT ref: 67541636
CreateFileW.KERNEL32(?,C0000001,00000007,00000000,00000003,42000000,?,?,?,675421B9,?,?,00000000,?,?,?), ref: 67541658
CreateIoCompletionPort.KERNEL32(?,?,?,00000000,?,C0000001,00000007,00000000,00000003,42000000,?,?,?,675421B9,?,?), ref: 67541671
GetLastError.KERNEL32(?,C0000001,00000007,00000000,00000003,42000000,?,?,?,675421B9,?,?,00000000,?,?,?), ref: 6754167A

Memory Dump Source

Source File: 00000010.00000002.2464023360.0000000067541000.00000020.00000001.01000000.00000011.sdmp, Offset: 67540000, based on PE: true

Associated: 00000010.00000002.2463980469.0000000067540000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464120924.000000006754B000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464168986.0000000067551000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464214723.0000000067552000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464256525.0000000067553000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_67540000_javaw.jbxd

Similarity

API ID: Create$CompletionErrorFileLastPort_wcsdup
String ID:
API String ID: 3072120858-0
Opcode ID: 14da26378349fa83ebff5ac6ca5a05ae596c5fec990eef2262358a50f75aaaef
Instruction ID: f0b60fcda80cbda5ad9633db5df1a38cfe3e04643fc4e6e4199f268a8ce1cd11
Opcode Fuzzy Hash: 14da26378349fa83ebff5ac6ca5a05ae596c5fec990eef2262358a50f75aaaef
Instruction Fuzzy Hash: C111F7B4500344EFEF51EF64C9C1B497BE4BB48304F1480E8EA489F25AD379E950DBA6

Uniqueness

Uniqueness Score: -1.00%

Function 6754211E Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 121
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 675412B4: _vsnprintf.MSVCRT ref: 675412DF
Part of subcall function 675412B4: GetCurrentThreadId.KERNEL32 ref: 675412F0
Part of subcall function 675412B4: fprintf.MSVCRT ref: 67541309
Part of subcall function 675412B4: fflush.MSVCRT ref: 67541362

EnterCriticalSection.KERNEL32(?), ref: 6754217F

Part of subcall function 67545564: malloc.MSVCRT ref: 675455B7

Part of subcall function 675415FC: _wcsdup.MSVCRT ref: 67541636
Part of subcall function 675415FC: CreateFileW.KERNEL32(?,C0000001,00000007,00000000,00000003,42000000,?,?,?,675421B9,?,?,00000000,?,?,?), ref: 67541658
Part of subcall function 675415FC: CreateIoCompletionPort.KERNEL32(?,?,?,00000000,?,C0000001,00000007,00000000,00000003,42000000,?,?,?,675421B9,?,?), ref: 67541671
Part of subcall function 675415FC: GetLastError.KERNEL32(?,C0000001,00000007,00000000,00000003,42000000,?,?,?,675421B9,?,?,00000000,?,?,?), ref: 6754167A

LeaveCriticalSection.KERNEL32(?,?,?,?,?,?), ref: 6754227B

Part of subcall function 67545CC4: malloc.MSVCRT ref: 67545D06
Part of subcall function 67545CC4: memset.MSVCRT ref: 67545D27

Strings

+add_watch(%ls), xrefs: 6754216C

Memory Dump Source

Source File: 00000010.00000002.2464023360.0000000067541000.00000020.00000001.01000000.00000011.sdmp, Offset: 67540000, based on PE: true

Associated: 00000010.00000002.2463980469.0000000067540000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464120924.000000006754B000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464168986.0000000067551000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464214723.0000000067552000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464256525.0000000067553000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_67540000_javaw.jbxd

Similarity

API ID: CreateCriticalSectionmalloc$CompletionCurrentEnterErrorFileLastLeavePortThread_vsnprintf_wcsdupfflushfprintfmemset
String ID: +add_watch(%ls)
API String ID: 1265635602-3593916274
Opcode ID: c6abdcba7f1c2aa7a1bd647f7d1b8297d0c7a800ba6c7417b3ccefa804aeaa5c
Instruction ID: 4bf50b2df00bebbadceead25a0a282c6a790031fd46a025ef3f9b4d64d9bb40b
Opcode Fuzzy Hash: c6abdcba7f1c2aa7a1bd647f7d1b8297d0c7a800ba6c7417b3ccefa804aeaa5c
Instruction Fuzzy Hash: 6C4117B1D002199FDF00DFD9C981ADEBBF9FF88314F20805AE518AB249D7359A558FA1

Uniqueness

Uniqueness Score: -1.00%

Function 6A3B63C7 Relevance: 4.6, APIs: 3, Instructions: 93COMMONLIBRARYCODE

Download Yara Rule

APIs

dllmain_crt_dispatch.LIBCMT ref: 6A3B6430
dllmain_crt_dispatch.LIBCMT ref: 6A3B6469
dllmain_crt_dispatch.LIBCMT ref: 6A3B6497

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID: dllmain_crt_dispatch
String ID:
API String ID: 4247944735-0
Opcode ID: d6fc6eab733b02685453f227ef4513a2fd995e9e57ebfddce94da3ac633ab448
Instruction ID: a375bc6372c73ade3b27ea6e5600e73486c172350c20477083336f67d49d65b6
Opcode Fuzzy Hash: d6fc6eab733b02685453f227ef4513a2fd995e9e57ebfddce94da3ac633ab448
Instruction Fuzzy Hash: 5E318271D01A29ABCF218F25CC45AAF3A7AEB65794F028118F855A7652EF31CD01CFE0

Uniqueness

Uniqueness Score: -1.00%

Function 02D3D8F7 Relevance: 3.7, APIs: 1, Strings: 1, Instructions: 223COMMON

Download Yara Rule

APIs

KiUserCallbackDispatcher.NTDLL ref: 02D3DB6F

Strings

`pl, xrefs: 02D3DAC5

Memory Dump Source

Source File: 00000010.00000002.2370771116.0000000002D32000.00000040.00000800.00020000.00000000.sdmp, Offset: 02D32000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_2d32000_javaw.jbxd

Similarity

API ID: CallbackDispatcherUser
String ID: `pl
API String ID: 2492992576-4034430390
Opcode ID: 15780091b67c7a44f602a3d06c481440e646c802418031a877101695f62e867f
Instruction ID: ebc9bb2d76a0e2b51fe7377a6b552c8d5f2283bc4f3b45c0ec9dfe9df0c633ca
Opcode Fuzzy Hash: 15780091b67c7a44f602a3d06c481440e646c802418031a877101695f62e867f
Instruction Fuzzy Hash: A0A19AB1A04601DFDB1ACF64C594BAAFBB2FF49314F0881A9D8595B382C734AC45CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 02D3D8E0 Relevance: 3.7, APIs: 1, Strings: 1, Instructions: 160COMMON

Download Yara Rule

APIs

KiUserCallbackDispatcher.NTDLL ref: 02D3DB6F

Strings

`pl, xrefs: 02D3DAC5

Memory Dump Source

Source File: 00000010.00000002.2370771116.0000000002D32000.00000040.00000800.00020000.00000000.sdmp, Offset: 02D32000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_2d32000_javaw.jbxd

Similarity

API ID: CallbackDispatcherUser
String ID: `pl
API String ID: 2492992576-4034430390
Opcode ID: 269b8bc8ae87d339a368f1fbea3721625bd0283edb5a2dd88b24d47a26f77f64
Instruction ID: 30f3814e4b98fdeb38e2a64a5547060df32cbaa2545a107a1e2b0c9178c16c2b
Opcode Fuzzy Hash: 269b8bc8ae87d339a368f1fbea3721625bd0283edb5a2dd88b24d47a26f77f64
Instruction Fuzzy Hash: 54618871604601DFDB1ACF24C594BAAFBB2FB49714F18819DD85A9B381C774AC41CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 67545564 Relevance: 2.6, APIs: 2, Instructions: 81COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 675455B7

Memory Dump Source

Source File: 00000010.00000002.2464023360.0000000067541000.00000020.00000001.01000000.00000011.sdmp, Offset: 67540000, based on PE: true

Associated: 00000010.00000002.2463980469.0000000067540000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464120924.000000006754B000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464168986.0000000067551000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464214723.0000000067552000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464256525.0000000067553000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_67540000_javaw.jbxd

Similarity

API ID: malloc
String ID:
API String ID: 2803490479-0
Opcode ID: ec9ea25af705c92d05d04975f324ffc1e7d971d6b5c87921e5d0a49fae426994
Instruction ID: 914ecc145d21be3e3d9e98faeb28afb5a3172075f4100fa24b9bf10cf5d446b9
Opcode Fuzzy Hash: ec9ea25af705c92d05d04975f324ffc1e7d971d6b5c87921e5d0a49fae426994
Instruction Fuzzy Hash: 6E31A6B4904748EFDB00EFA9C48569DBBF4FF48304F1184A9E948AB305D774AA85DF92

Uniqueness

Uniqueness Score: -1.00%

Function 67544167 Relevance: 2.5, APIs: 2, Instructions: 46COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 67544198
wcslen.MSVCRT ref: 675441B3

Memory Dump Source

Source File: 00000010.00000002.2464023360.0000000067541000.00000020.00000001.01000000.00000011.sdmp, Offset: 67540000, based on PE: true

Associated: 00000010.00000002.2463980469.0000000067540000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464120924.000000006754B000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464168986.0000000067551000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464214723.0000000067552000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464256525.0000000067553000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_67540000_javaw.jbxd

Similarity

API ID: wcslen
String ID:
API String ID: 4088430540-0
Opcode ID: 04471da92e3700703a965f0679e99168ecb3bcc38426ab7d93b7836b60134326
Instruction ID: d134fa4ea9ee48d3c49bddd267378f98f5929cf2b59720a51b104fbe21a4039c
Opcode Fuzzy Hash: 04471da92e3700703a965f0679e99168ecb3bcc38426ab7d93b7836b60134326
Instruction Fuzzy Hash: 95015A75101104AFEF01AF54CC89E9BBBBDFF8A310F0142E5FA049721AD336A855DBA9

Uniqueness

Uniqueness Score: -1.00%

Function 67544161 Relevance: 2.5, APIs: 2, Instructions: 46COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 67544198
wcslen.MSVCRT ref: 675441B3

Memory Dump Source

Source File: 00000010.00000002.2464023360.0000000067541000.00000020.00000001.01000000.00000011.sdmp, Offset: 67540000, based on PE: true

Associated: 00000010.00000002.2463980469.0000000067540000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464120924.000000006754B000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464168986.0000000067551000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464214723.0000000067552000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464256525.0000000067553000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_67540000_javaw.jbxd

Similarity

API ID: wcslen
String ID:
API String ID: 4088430540-0
Opcode ID: 6455535ceaab953051084adaba76b6a4c31951ae2cf8f8585bf716860ba6b8b8
Instruction ID: a06f1e677cd8ef4e82710de17629a016324e5bedda3afe2b201a6073e6772e46
Opcode Fuzzy Hash: 6455535ceaab953051084adaba76b6a4c31951ae2cf8f8585bf716860ba6b8b8
Instruction Fuzzy Hash: AC019E75101104AFEF01AF54CC88E9A7BB9FFCE310F1142E5FA049721AD336A814EBA9

Uniqueness

Uniqueness Score: -1.00%

Function 6C53A627 Relevance: 1.6, APIs: 1, Instructions: 135comCOMMON

Download Yara Rule

APIs

OleCreate.OLE32(00000000,00000000,?,00000000,?,?,?), ref: 6C53A709

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: Create
String ID:
API String ID: 2289755597-0
Opcode ID: c65d93bb4d6c093a113a9824a732c8f38875803fdbf11a70886c0f01ac5f81f5
Instruction ID: e0f892eca0bb54f593760f1c35cc4f2bff21ac8c2cae15e70078c6196629e0a4
Opcode Fuzzy Hash: c65d93bb4d6c093a113a9824a732c8f38875803fdbf11a70886c0f01ac5f81f5
Instruction Fuzzy Hash: 38415D716093519FEB04CFA5CC84A7BB7E9EFC5644F10582DF99882600FB71D9058BA2

Uniqueness

Uniqueness Score: -1.00%

Function 6C51CAB0 Relevance: 1.6, APIs: 1, Instructions: 115COMMON

Download Yara Rule

APIs

ScriptItemize.USP10(00000000,00000000,00000000,00000000,00000000,00000000,?), ref: 6C51CB59

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: ItemizeScript
String ID:
API String ID: 2844469434-0
Opcode ID: 099d5f1572e7ceaa35945c05fd16be5d7fa140e29e316f7cfce45e0cfdaf30f4
Instruction ID: 8befc31dcf0757061e9e04220cde29ef1cdc24ac19e8a5901715b953ea101c81
Opcode Fuzzy Hash: 099d5f1572e7ceaa35945c05fd16be5d7fa140e29e316f7cfce45e0cfdaf30f4
Instruction Fuzzy Hash: D831523120D350AFE701AE94DC48B6FB7E8EF85604F50083EF99486A50D776EA45CB57

Uniqueness

Uniqueness Score: -1.00%

Function 6C51AF95 Relevance: 1.6, APIs: 1, Instructions: 114registryCOMMON

Download Yara Rule

APIs

RegCreateKeyExW.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,?), ref: 6C51B039

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: Create
String ID:
API String ID: 2289755597-0
Opcode ID: adaa449d19e6c355fa0bd50199eab5b722d8cf5a26e48bd06ddb53af0374273c
Instruction ID: 676702947afa293fc80a84e80a9451f1baf2abcfd887c6ab134b15723e68013c
Opcode Fuzzy Hash: adaa449d19e6c355fa0bd50199eab5b722d8cf5a26e48bd06ddb53af0374273c
Instruction Fuzzy Hash: 73412C71109341AFE7129F90CD88F6BB7F9EF85709F20092DF6A046A50C772D945CB1A

Uniqueness

Uniqueness Score: -1.00%

Function 6C51B832 Relevance: 1.6, APIs: 1, Instructions: 111registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.KERNEL32(00000000,00000000,00000000,00000000,00000000,?), ref: 6C51B8CA

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 2ff5bf1b8587a5f98f58d611ff1589cb50faa31442fcdc49cd88b76d47b4a6c1
Instruction ID: 453f211563b26d8c6d6eaa1135ddd0988c36c1158403732261df4110960744d2
Opcode Fuzzy Hash: 2ff5bf1b8587a5f98f58d611ff1589cb50faa31442fcdc49cd88b76d47b4a6c1
Instruction Fuzzy Hash: E2413D7110A341BFE711AF94CC88F6BB7E9EF84759F20082EF59146A50C771D941CB56

Uniqueness

Uniqueness Score: -1.00%

Function 6C51B951 Relevance: 1.6, APIs: 1, Instructions: 111registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.KERNEL32(00000000,00000000,00000000,00000000,00000000,?), ref: 6C51B9E9

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 0c62ad7580c11c6f7516652548b3e6424f7eac30db825dbda5090c7ae0285a75
Instruction ID: 92b490c7957c14d381146f046588c8b6d80723579af78585213171fcd0cbbf8c
Opcode Fuzzy Hash: 0c62ad7580c11c6f7516652548b3e6424f7eac30db825dbda5090c7ae0285a75
Instruction Fuzzy Hash: 9F4149B110A341AFE711AF80CC88F6BBBE9FF84359F20092EF99146A50C775D942CB56

Uniqueness

Uniqueness Score: -1.00%

Function 6C539CA3 Relevance: 1.6, APIs: 1, Instructions: 104COMMON

Download Yara Rule

APIs

CoGetClassObject.OLE32(00000000,?,?,00000000,?), ref: 6C539D44

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: ClassObject
String ID:
API String ID: 1165159591-0
Opcode ID: 227e4186bd6f63a39313e04e033651bed04bb4da6419493737f6dd21ff0f42d6
Instruction ID: 612ce5fbf27738e876d290f63b83642a8a55b85b8ac681bee2b06195e29e95c3
Opcode Fuzzy Hash: 227e4186bd6f63a39313e04e033651bed04bb4da6419493737f6dd21ff0f42d6
Instruction Fuzzy Hash: 60314BB1209316ABE301DE59CC81A6BB7ECEFC5649F10182DF99887604EB35DD098B63

Uniqueness

Uniqueness Score: -1.00%

Function 6C513260 Relevance: 1.6, APIs: 1, Instructions: 91COMMON

Download Yara Rule

APIs

CreateWindowExW.USER32(?,00000000,00000000,?,?,?,?,?,?,?,?,00000000), ref: 6C5132F2

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: bed53105f08b91e3b1487dfc0d029ca641121e4012dbf3009f63058f31acdf7f
Instruction ID: 4e8f46580e186a48e987eb0f7e352ad0e7ba92dc0258b27183a8560a5939bb9b
Opcode Fuzzy Hash: bed53105f08b91e3b1487dfc0d029ca641121e4012dbf3009f63058f31acdf7f
Instruction Fuzzy Hash: E9216232109785AFE7115ED1CC58F6BB7E9EF85309F20442DFAA443910DB758845CB56

Uniqueness

Uniqueness Score: -1.00%

Function 6C5139A6 Relevance: 1.6, APIs: 1, Instructions: 76COMMON

Download Yara Rule

APIs

DrawTextW.USER32(?,00000000,?,00000000,?), ref: 6C513A18

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: DrawText
String ID:
API String ID: 2175133113-0
Opcode ID: 476114fc2f8785261471b9d3500a43064d78185fe1d688f2f6efb43adb9640c4
Instruction ID: e66de80b2bc2c5bad851cc9a6c95dd56494ed548442cd3af29b7b5494a83a057
Opcode Fuzzy Hash: 476114fc2f8785261471b9d3500a43064d78185fe1d688f2f6efb43adb9640c4
Instruction Fuzzy Hash: DE216A71609315AFE310CF559C98E7BBBE8EFC9A14F01842DF95887A00E7719C058BA2

Uniqueness

Uniqueness Score: -1.00%

Function 6C53AC86 Relevance: 1.6, APIs: 1, Instructions: 71COMMON

Download Yara Rule

APIs

ProgIDFromCLSID.OLE32(00000000,00000000), ref: 6C53ACE5

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: FromProg
String ID:
API String ID: 3303861117-0
Opcode ID: ff61161b16ac4fac77217199ea22b9cef3392a08788ad3c6eabfd22f62d42d09
Instruction ID: 7344ce907c8e43a42697703beae13cbd4e8b270d03377e3e8cb36d78f50aff26
Opcode Fuzzy Hash: ff61161b16ac4fac77217199ea22b9cef3392a08788ad3c6eabfd22f62d42d09
Instruction Fuzzy Hash: E611AF722053159BD701DEA5CC40E6BB7ECEFD9659F21482DF85893201FB61D90587A2

Uniqueness

Uniqueness Score: -1.00%

Function 6C539A3D Relevance: 1.6, APIs: 1, Instructions: 70COMMON

Download Yara Rule

APIs

CLSIDFromProgID.OLE32(00000000,00000000), ref: 6C539A97

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: FromProg
String ID:
API String ID: 3303861117-0
Opcode ID: d664dab7baf33cb95fb876a35b07fdc0e859d35f25a1ce2b99944a6dbfe3a9f8
Instruction ID: d221512304d537b6c20067d9c38f1694c7b5fbc8d63f039f18ca6e6c48671d63
Opcode Fuzzy Hash: d664dab7baf33cb95fb876a35b07fdc0e859d35f25a1ce2b99944a6dbfe3a9f8
Instruction Fuzzy Hash: 0A1193B6206716AFD300EF54CC84ABB77ECEFC9258F15052DF85983600EB60DD048AA3

Uniqueness

Uniqueness Score: -1.00%

Function 6A3B2837 Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

GdiplusStartup.GDIPLUS(00000000,00000000,?), ref: 6A3B289D

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID: GdiplusStartup
String ID:
API String ID: 2503201367-0
Opcode ID: 121e1a8061df8547c2d691ec692cf609bf25beaf1eff84c41e1efe05122b41b8
Instruction ID: fa4de17e9a0207335c4a00d148744c3c36f73f6ec20a3237b290b9f94a06df10
Opcode Fuzzy Hash: 121e1a8061df8547c2d691ec692cf609bf25beaf1eff84c41e1efe05122b41b8
Instruction Fuzzy Hash: C911BE72508345ABD3009F88C944A6BB7EDEF98200F020A6EF9A482611DB72D504CBA6

Uniqueness

Uniqueness Score: -1.00%

Function 6C51C863 Relevance: 1.6, APIs: 1, Instructions: 65COMMON

Download Yara Rule

APIs

ScriptGetCMap.USP10(?,?,00000000,?,?,00000000), ref: 6C51C8BA

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: Script
String ID:
API String ID: 455967244-0
Opcode ID: acd4eb2d286021bb4fdc73087e3b09cfe384305d638fe72dab90ca8591113a05
Instruction ID: 6b429b0b662b9d99283e192406b0f6ac8675963e27c58b5c514a23e0714dbf32
Opcode Fuzzy Hash: acd4eb2d286021bb4fdc73087e3b09cfe384305d638fe72dab90ca8591113a05
Instruction Fuzzy Hash: AE11513210A345BFE311AE84CC88F6B77E8EFC5A08F20083DB59046550CB72AD01CB66

Uniqueness

Uniqueness Score: -1.00%

Function 6C51BB0D Relevance: 1.6, APIs: 1, Instructions: 65registryCOMMON

Download Yara Rule

APIs

RegSetValueExW.KERNEL32(?,00000000,?,?,00000000,?), ref: 6C51BB64

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: Value
String ID:
API String ID: 3702945584-0
Opcode ID: 005e7f9e24351c4101491e6d95da7733d93e319c0b325a139cdcab160eb7c8bc
Instruction ID: 013e318352a150f8c57c57ba2d39e7c124002b0417ed53f0f066315546def1fb
Opcode Fuzzy Hash: 005e7f9e24351c4101491e6d95da7733d93e319c0b325a139cdcab160eb7c8bc
Instruction Fuzzy Hash: BA115E7210A345BFE711AF91CC88F6BB7E9EF84649F20092DF99046A50CB719901CB26

Uniqueness

Uniqueness Score: -1.00%

Function 6C51B55B Relevance: 1.6, APIs: 1, Instructions: 64registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExW.KERNEL32(?,00000000,?,?,00000000), ref: 6C51B5AE

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: Open
String ID:
API String ID: 71445658-0
Opcode ID: eff38ffec0077b4e68db56b513baf643be3af622317f90548ef5513cb4b4fd67
Instruction ID: a470f0ed69230c74d1e9f7e66f55583445db9c3a85aaff9be7143f0fcfffc62b
Opcode Fuzzy Hash: eff38ffec0077b4e68db56b513baf643be3af622317f90548ef5513cb4b4fd67
Instruction Fuzzy Hash: F9115B7210A345AFE711AF90CC88F6BB7E9EF89709F61052DF99046601DB71D8018B62

Uniqueness

Uniqueness Score: -1.00%

Function 6C53ADBB Relevance: 1.6, APIs: 1, Instructions: 63COMMON

Download Yara Rule

APIs

StgCreateDocfile.OLE32(00000000,?,?,00000000), ref: 6C53AE0A

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: CreateDocfile
String ID:
API String ID: 3608135114-0
Opcode ID: 65f059dab88b09ce59b9893698397044671ee87b94fe17aa72fa9c6f77a6c6e8
Instruction ID: dea2e0a4803ffa4dccc9d52804c0d3ee28c3dde2d8832e4e7e0e82489d691979
Opcode Fuzzy Hash: 65f059dab88b09ce59b9893698397044671ee87b94fe17aa72fa9c6f77a6c6e8
Instruction Fuzzy Hash: 30119132206315AFD7019FD5CC88F6BB7ECEF88659F20042DF95846241EB719911DB66

Uniqueness

Uniqueness Score: -1.00%

Function 6C51887E Relevance: 1.6, APIs: 1, Instructions: 63windowCOMMON

Download Yara Rule

APIs

MessageBoxW.USER32(?,00000000,00000000,?), ref: 6C5188CD

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: Message
String ID:
API String ID: 2030045667-0
Opcode ID: ca07bd4369ff1d6162bb5a4244998ad12150b47bd19b564a5c8962513e055950
Instruction ID: edaa9a1e55620df4af09800df88dc35ed6db8724ea282a17850178a3d4bd341f
Opcode Fuzzy Hash: ca07bd4369ff1d6162bb5a4244998ad12150b47bd19b564a5c8962513e055950
Instruction Fuzzy Hash: 4B118232209345BFE3219E94CC88F6BB7ECEF89359F21092EF69456500C7719901CB26

Uniqueness

Uniqueness Score: -1.00%

Function 6C5202D5 Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

KiUserCallbackDispatcher.NTDLL(?,?,?,?,?,?,00000000), ref: 6C520331

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: CallbackDispatcherUser
String ID:
API String ID: 2492992576-0
Opcode ID: 0b5c87d1cd68c2747a677d5371853ab27caf67d7aec036c0025dac593acf58d1
Instruction ID: bf38b12681d9bfd9dfb9209bf456f31090f6116d3bffac3c4076fe2d5ef93636
Opcode Fuzzy Hash: 0b5c87d1cd68c2747a677d5371853ab27caf67d7aec036c0025dac593acf58d1
Instruction Fuzzy Hash: AE117C3260A394AF8301DF989C8097FFBE8AFD9614F44082EFA8447201D7A5DD1897A3

Uniqueness

Uniqueness Score: -1.00%

Function 6C51EB6C Relevance: 1.6, APIs: 1, Instructions: 51windowCOMMON

Download Yara Rule

APIs

SendMessageW.USER32(?,?,?,00000000), ref: 6C51EBB9

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: MessageSend
String ID:
API String ID: 3850602802-0
Opcode ID: 567ac7402028be5d4bf95aaf328d9f3aab63b238d5f0ebe17502169c86862e49
Instruction ID: 88939b7a899aaf46803b3057f88886442ba4fe5bbe880e5b610123b7895dcaed
Opcode Fuzzy Hash: 567ac7402028be5d4bf95aaf328d9f3aab63b238d5f0ebe17502169c86862e49
Instruction Fuzzy Hash: EA01713260A7249B83109A598C48D6BBBF9FFC9A54F41092DFD4993B40E765DD0887E2

Uniqueness

Uniqueness Score: -1.00%

Function 6C51FFDC Relevance: 1.5, APIs: 1, Instructions: 49COMMON

Download Yara Rule

APIs

SystemParametersInfoW.USER32(?,?,00000000,?), ref: 6C520025

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: InfoParametersSystem
String ID:
API String ID: 3098949447-0
Opcode ID: d40e03c2a76c8ab230777c4e9bb2dbf03cbace39f69adab329a12841dd7742b1
Instruction ID: c10375a8e2097fcca13298fb1acdd543b8caef60f5b67ba7363377c5c5028ef1
Opcode Fuzzy Hash: d40e03c2a76c8ab230777c4e9bb2dbf03cbace39f69adab329a12841dd7742b1
Instruction Fuzzy Hash: F4012831A0226EABEB118F949C80AFFBBBCDF96258F4000B5FD1453241D7358D189BE0

Uniqueness

Uniqueness Score: -1.00%

Function 6C51E46A Relevance: 1.5, APIs: 1, Instructions: 42windowCOMMON

Download Yara Rule

APIs

SendMessageW.USER32(?,?,?,00000000), ref: 6C51E49E

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: MessageSend
String ID:
API String ID: 3850602802-0
Opcode ID: 50c42cc72404ccfcf1a27fec0d9eacd320b2d7fd4a90d557949b9fc4350a5494
Instruction ID: 04127320ad2205e4f2071b935c64f67a625a9aa43e29e91ae13c61dcd5facd37
Opcode Fuzzy Hash: 50c42cc72404ccfcf1a27fec0d9eacd320b2d7fd4a90d557949b9fc4350a5494
Instruction Fuzzy Hash: 27F0F632902928A7CB216D5A9C4CCDB7F6DDFC9A64B014121FC1862A10D3A2CC2587E0

Uniqueness

Uniqueness Score: -1.00%

Function 6C51AA1F Relevance: 1.5, APIs: 1, Instructions: 41windowCOMMON

Download Yara Rule

APIs

PeekMessageW.USER32(00000000,?,?,?,?), ref: 6C51AA56

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: MessagePeek
String ID:
API String ID: 2222842502-0
Opcode ID: b17d7b6d77ce78c51a80ee1f473ac6c1f41ba986c578de62af6202ec718ec497
Instruction ID: 8078b1cabf17ab09842df7240d646f3f8d27a93ff2c914cc6bd3a76ebb39da9d
Opcode Fuzzy Hash: b17d7b6d77ce78c51a80ee1f473ac6c1f41ba986c578de62af6202ec718ec497
Instruction Fuzzy Hash: 45F0AF3280A259BBEF029EE09C849EF7FACEF08244F040064FD1466612D726C92997E1

Uniqueness

Uniqueness Score: -1.00%

Function 6C51EDB6 Relevance: 1.5, APIs: 1, Instructions: 40windowCOMMON

Download Yara Rule

APIs

SendMessageW.USER32(?,?,?,00000000), ref: 6C51EDE8

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: MessageSend
String ID:
API String ID: 3850602802-0
Opcode ID: c14d0a326f6d0fcfb0050f7a83fb73b9338b01a6d660ed120c0c8d49f9cc1517
Instruction ID: 61c1cbbb32c19ed97a76633fa33c46681eec383eb047bacd401655c3d48ac484
Opcode Fuzzy Hash: c14d0a326f6d0fcfb0050f7a83fb73b9338b01a6d660ed120c0c8d49f9cc1517
Instruction Fuzzy Hash: 99F0F632206A24ABC2215A55CC4CE5B7FACEFCA7A8F12022DF5099BA10CB72D400C7E0

Uniqueness

Uniqueness Score: -1.00%

Function 6C513518 Relevance: 1.5, APIs: 1, Instructions: 39windowCOMMON

Download Yara Rule

APIs

DispatchMessageW.USER32(00000000), ref: 6C513543

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: DispatchMessage
String ID:
API String ID: 2061451462-0
Opcode ID: ec5d9741282d32a5ae13610ceeeadadcd6f7ecb7c03de609d5e3fbced6b5f11d
Instruction ID: 7d0acc64976c75a2b251de73e9fbd71df6c111547a75442720ab6286d4bbe31c
Opcode Fuzzy Hash: ec5d9741282d32a5ae13610ceeeadadcd6f7ecb7c03de609d5e3fbced6b5f11d
Instruction Fuzzy Hash: C8F0EC32A0AA296792116E598C08DBB7BBCDFC5E68B120225FC1897B06F761DD1681E0

Uniqueness

Uniqueness Score: -1.00%

Function 6A3B8F06 Relevance: 1.5, APIs: 1, Instructions: 39memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,6A3B9527,00000001,00000364,0000000D,000000FF,?,?,?,6A3B9884,6A3B8E34), ref: 6A3B8F47

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: c1537261f1f5acac66372b2db16e07a816ed2aa5fe4d176f917d09d0332663ce
Instruction ID: 61f1ff0b9442cf96056183cf8261ace7274bc73138d445caf83ab1fbccd25918
Opcode Fuzzy Hash: c1537261f1f5acac66372b2db16e07a816ed2aa5fe4d176f917d09d0332663ce
Instruction Fuzzy Hash: 20F0B43265952666EB115E26BC08B8A779FAF727A0F168013E818D6D81DF31D90486E0

Uniqueness

Uniqueness Score: -1.00%

Function 6C5173B0 Relevance: 1.5, APIs: 1, Instructions: 37COMMON

Download Yara Rule

APIs

GlobalAddAtomW.KERNEL32(00000000), ref: 6C5173D6

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AtomGlobal
String ID:
API String ID: 2189174293-0
Opcode ID: ec4ab4d7f8ce8d32d4fdce1617e7075f078f107dd0eb00eaa6863a74727da957
Instruction ID: 1099f06bcedb83fb1d49fca14db2d01ed0e1c2fa5b649c2b12b00b69b4c2b6f4
Opcode Fuzzy Hash: ec4ab4d7f8ce8d32d4fdce1617e7075f078f107dd0eb00eaa6863a74727da957
Instruction Fuzzy Hash: 98F02736607E6467C2215A5ECC8CF5B7BACDFCAB95F22025DBC148B600CB31D80182B0

Uniqueness

Uniqueness Score: -1.00%

Function 6A3B4CE1 Relevance: 1.5, APIs: 1, Instructions: 16COMMON

Download Yara Rule

APIs

GdipFillPolygonI.GDIPLUS(?,?,?,?,?,00000000,6A3B55A5,?,00000000,?,?), ref: 6A3B4CF9

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID: FillGdipPolygon
String ID:
API String ID: 1255299028-0
Opcode ID: b6a631c04bcf9a8207792ebe9930268cc82f8caac631083bde14cca9cb0f541a
Instruction ID: 7aec6d9cf50fa3f8bdd98edc9a7cac801c67fca20c1a764408ac6039bdc3030a
Opcode Fuzzy Hash: b6a631c04bcf9a8207792ebe9930268cc82f8caac631083bde14cca9cb0f541a
Instruction Fuzzy Hash: 44D01736008201AE9B118F50EA04C07BAE2EF98640F018C1DF5C592522DB32DC20EB62

Uniqueness

Uniqueness Score: -1.00%

Function 6C51203C Relevance: 1.5, APIs: 1, Instructions: 10COMMON

Download Yara Rule

APIs

CallWindowProcW.USER32(?,?,?,?,?), ref: 6C51204E

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: CallProcWindow
String ID:
API String ID: 2714655100-0
Opcode ID: aa67c7150d82e99ccf50a1b7959197e00dc3a215ee7bbfa90ab5e7cd449a0f56
Instruction ID: b90e020cdb94e47251c37572f55b18845f08146edae0ced050d6fed54705aab9
Opcode Fuzzy Hash: aa67c7150d82e99ccf50a1b7959197e00dc3a215ee7bbfa90ab5e7cd449a0f56
Instruction Fuzzy Hash: E1C0EC3200428EEB8F02AE91EC09CDA3F3AFB29358B058015FA1510022C736D831ABA5

Uniqueness

Uniqueness Score: -1.00%

Function 6C51FA8A Relevance: 1.5, APIs: 1, Instructions: 6COMMON

Download Yara Rule

APIs

SetWindowsHookExW.USER32(?,?,?,?), ref: 6C51FA9A

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: HookWindows
String ID:
API String ID: 2559412058-0
Opcode ID: 4471365816e5482f6a2480a81774f9dd655e120675bf96b91000551b03b22a60
Instruction ID: d5b57549312263ebec0ebbbfb4a15d3a0c9da158e1ac32cc1503c5cd8e34b182
Opcode Fuzzy Hash: 4471365816e5482f6a2480a81774f9dd655e120675bf96b91000551b03b22a60
Instruction Fuzzy Hash: 5EC00C325086069BCF42EF50CD1484EBFF2ABB5385F014819F18140176C72295AAEF96

Uniqueness

Uniqueness Score: -1.00%

Function 6C53AB64 Relevance: 1.5, APIs: 1, Instructions: 6comCOMMON

Download Yara Rule

APIs

OleSave.OLE32(?,?,?), ref: 6C53AB72

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: Save
String ID:
API String ID: 4115961312-0
Opcode ID: 9090a29071de393865438edf26afca69231fcb1fb1d4fe6e5c663b30a6e5c283
Instruction ID: 4ed7de79316bebc0a6b31f658e620524c50017f4cc747a959990260d2c193b84
Opcode Fuzzy Hash: 9090a29071de393865438edf26afca69231fcb1fb1d4fe6e5c663b30a6e5c283
Instruction Fuzzy Hash: B5B09272508242AECE06EF51AF0483FBEF5ABC9B02F014809B6C1A0061C2218C28EB33

Uniqueness

Uniqueness Score: -1.00%

Function 6C51ABA2 Relevance: 1.5, APIs: 1, Instructions: 6threadwindowCOMMON

Download Yara Rule

APIs

PostThreadMessageW.USER32(?,?,?,?), ref: 6C51ABB2

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: MessagePostThread
String ID:
API String ID: 1836367815-0
Opcode ID: b5b764eb7510d44d1fb7d44e1d645d23f2ba9a20162c3fd103eec95b1330843f
Instruction ID: 74bc26e0306a81e832e3b569452af38300ef57366ccac8f0bd8089533da94437
Opcode Fuzzy Hash: b5b764eb7510d44d1fb7d44e1d645d23f2ba9a20162c3fd103eec95b1330843f
Instruction Fuzzy Hash: 5BC00C32508606DBDF42EF50CD04D5EBFB2EFA5785F015819F18140076C72685AAEF96

Uniqueness

Uniqueness Score: -1.00%

Function 6C513401 Relevance: 1.5, APIs: 1, Instructions: 6COMMON

Download Yara Rule

APIs

DefWindowProcW.USER32(?,?,?,?), ref: 6C513411

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: ProcWindow
String ID:
API String ID: 181713994-0
Opcode ID: 27c18c95d7cc1a82c598b9c91505ed1b2787b3d0a401d145e65020fb89c8620c
Instruction ID: d748953ac0f92c05cef44acb2979c74c81b6bf22c38f97697ebb73d0db8ba031
Opcode Fuzzy Hash: 27c18c95d7cc1a82c598b9c91505ed1b2787b3d0a401d145e65020fb89c8620c
Instruction Fuzzy Hash: 42C00C325086069BCE42EF50CD14D4EBFB2EBA5385F015819B18144077C72685AAEF96

Uniqueness

Uniqueness Score: -1.00%

Function 6C51F7A5 Relevance: 1.5, APIs: 1, Instructions: 6timeCOMMON

Download Yara Rule

APIs

SetTimer.USER32(?,?,?,?), ref: 6C51F7B5

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: Timer
String ID:
API String ID: 2870079774-0
Opcode ID: c2f0d1b11e2994b0e34572e331e320ae339e38d17499da23aff966c0aed9d820
Instruction ID: cc5c74a792b37e1afdb13e374acae5853088f6dc15bb7543a4d092fc460bca39
Opcode Fuzzy Hash: c2f0d1b11e2994b0e34572e331e320ae339e38d17499da23aff966c0aed9d820
Instruction Fuzzy Hash: 58C00C325096069BCE42EF50CD04D4EBFB2ABA5385F014819B18544076C72285AAEF96

Uniqueness

Uniqueness Score: -1.00%

Function 6C51E1FE Relevance: 1.5, APIs: 1, Instructions: 6windowCOMMON

Download Yara Rule

APIs

SendMessageW.USER32(?,?,?,?), ref: 6C51E20E

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: MessageSend
String ID:
API String ID: 3850602802-0
Opcode ID: 00e862aaccb184dec4dc4d40af3d7a3e495c68161b427515e8663660e620169c
Instruction ID: a797a33b90ce248dcefd0271269e11d67989831fdc6457adb5799bf9dc7909f8
Opcode Fuzzy Hash: 00e862aaccb184dec4dc4d40af3d7a3e495c68161b427515e8663660e620169c
Instruction Fuzzy Hash: 9CC00C325086069BCE42EF50CD04D4EBFB6EBA5385F415819B18140476C72685AAEF96

Uniqueness

Uniqueness Score: -1.00%

Function 6C513D44 Relevance: 1.5, APIs: 1, Instructions: 5COMMON

Download Yara Rule

APIs

KiUserCallbackDispatcher.NTDLL(?,?), ref: 6C513D4E

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: CallbackDispatcherUser
String ID:
API String ID: 2492992576-0
Opcode ID: b61c0a334a2ac87199bfe06ce70ee1912e074191343a0e0d3e9bfad8d4c0c79e
Instruction ID: 7d290c322fea598a1b8b3bb0e0887cabaa5052da76ea91055626fa614dce9a25
Opcode Fuzzy Hash: b61c0a334a2ac87199bfe06ce70ee1912e074191343a0e0d3e9bfad8d4c0c79e
Instruction Fuzzy Hash: 7BB012310083C55FCB01EF208C0483F7FB4BB81301F054C09B0E580091C3108414EB11

Uniqueness

Uniqueness Score: -1.00%

Function 6C5174B4 Relevance: 1.5, APIs: 1, Instructions: 5memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(?,?,?), ref: 6C5174C0

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: f179919796f4f24743a4062b7fe7003208d23e92ed4a7fb4cb9c3a8f11cef56d
Instruction ID: 417541dbe48b513d64a997588e9b18ed0bf093194ecbeab3e7a9d073b47a6808
Opcode Fuzzy Hash: f179919796f4f24743a4062b7fe7003208d23e92ed4a7fb4cb9c3a8f11cef56d
Instruction Fuzzy Hash: 9EB002325086069BCE02EF50EE0580EBAB2AB95B05F058919B2816017597328838FB37

Uniqueness

Uniqueness Score: -1.00%

Function 6C51FCCE Relevance: 1.5, APIs: 1, Instructions: 4COMMON

Download Yara Rule

APIs

ShowWindow.USER32(?,?), ref: 6C51FCD6

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: ShowWindow
String ID:
API String ID: 1268545403-0
Opcode ID: d366cf55d5584442935c67fb8940e83a5b82fb069f0fda89275df0f2c19b13a7
Instruction ID: d07963789d4afeb9c2f1e72382a77696f6c9f5a5b09226063d9d1b267b6d999a
Opcode Fuzzy Hash: d366cf55d5584442935c67fb8940e83a5b82fb069f0fda89275df0f2c19b13a7
Instruction Fuzzy Hash: F1A001325187869BCF02EF50CD08E1EBBB2FB95305F06AD19B1A2800A5C7768468EB16

Uniqueness

Uniqueness Score: -1.00%

Function 6C517721 Relevance: 1.5, APIs: 1, Instructions: 4COMMON

Download Yara Rule

APIs

ImmAssociateContext.IMM32(?,?), ref: 6C517729

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AssociateContext
String ID:
API String ID: 196682639-0
Opcode ID: f160b804e63d79ea55ebb972e91853eee7e8118dffc67d33dc17a66cf5b5718b
Instruction ID: 1df949c3b7fc0070a3c3db1ed514c9fffc39383a789d2319d8a39eb5d6cf07ce
Opcode Fuzzy Hash: f160b804e63d79ea55ebb972e91853eee7e8118dffc67d33dc17a66cf5b5718b
Instruction Fuzzy Hash: 66A0013601839ADBCA12DE908C0095ABAE2BBD4204F445C19A5A6005A197A6A828AA52

Uniqueness

Uniqueness Score: -1.00%

Function 6C51AE5D Relevance: 1.5, APIs: 1, Instructions: 3registryCOMMON

Download Yara Rule

APIs

RegCloseKey.KERNEL32(?), ref: 6C51AE61

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: Close
String ID:
API String ID: 3535843008-0
Opcode ID: d4c8487318e70ea1e2f3f4689ea82ee874a616b01566bd6ee83270ba787bf41f
Instruction ID: 03b51e41a4e9bdd39997c527102b09616786b64da7f6ebda77a21fa7f98a4d26
Opcode Fuzzy Hash: d4c8487318e70ea1e2f3f4689ea82ee874a616b01566bd6ee83270ba787bf41f
Instruction Fuzzy Hash: 58A00231504508DFCF01BB20ED0CE0EBB71BBA131BB22C519A06941024A7314420DA19

Uniqueness

Uniqueness Score: -1.00%

Function 6C511F4C Relevance: 1.5, APIs: 1, Instructions: 3COMMON

Download Yara Rule

APIs

KiUserCallbackDispatcher.NTDLL(?), ref: 6C511F50

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: CallbackDispatcherUser
String ID:
API String ID: 2492992576-0
Opcode ID: 593b005f7906e1592aae0307700c35786282d0c6c9fd414900551c9357a39756
Instruction ID: 34f9a1d67c4bcd93f4e0247f56b7b889b26437876bba762d8426171eb955a1fe
Opcode Fuzzy Hash: 593b005f7906e1592aae0307700c35786282d0c6c9fd414900551c9357a39756
Instruction Fuzzy Hash: DDA00231504514DFCF01BB20DD48D0EBB71FBA1315F22D919E0664112487314420DA25

Uniqueness

Uniqueness Score: -1.00%

Function 6C516B5C Relevance: 1.5, APIs: 1, Instructions: 3COMMON

Download Yara Rule

APIs

GetSystemMetrics.USER32(?), ref: 6C516B60

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: MetricsSystem
String ID:
API String ID: 4116985748-0
Opcode ID: d009975e82f41a65cf4fe0e50e624ddd858c155a13ed6cc088e2b056a5ec84c2
Instruction ID: 2616dd23d715a41f946465a2d8c43a781aec803ce5688dc5d2e15c21af7ee6c2
Opcode Fuzzy Hash: d009975e82f41a65cf4fe0e50e624ddd858c155a13ed6cc088e2b056a5ec84c2
Instruction Fuzzy Hash: 3DA00271604500DFCF01BB25DE0CD0EBB71ABB1315B12C619A4594002487314420DA15

Uniqueness

Uniqueness Score: -1.00%

Function 6C5134B8 Relevance: 1.5, APIs: 1, Instructions: 3COMMON

Download Yara Rule

APIs

DestroyWindow.USER32(?), ref: 6C5134BC

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: DestroyWindow
String ID:
API String ID: 3375834691-0
Opcode ID: e8e362fe8905280a431be5cadef06a3644a98a73c0505ef00cedbfd2c30bc8c8
Instruction ID: b0844cac68e43acbcea2a2ecbc8ea824ca5e644a3d4f300d122d950dfd890d0a
Opcode Fuzzy Hash: e8e362fe8905280a431be5cadef06a3644a98a73c0505ef00cedbfd2c30bc8c8
Instruction Fuzzy Hash: F9A00231504700DFCF01BB20DD08D0EBF71EBA1315B12E619A05540124C7314430DA15

Uniqueness

Uniqueness Score: -1.00%

Function 6C51A653 Relevance: 1.5, APIs: 1, Instructions: 3comCOMMON

Download Yara Rule

APIs

OleInitialize.OLE32(?), ref: 6C51A657

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: 583af86ea2df407b75203f04fe8fc60b0dc03686a916b03ae225b382b6dc303d
Instruction ID: 38882aa77afc25e6df181ed0368cdd417e10449be6c0cb3626b55d7ccf39a0c5
Opcode Fuzzy Hash: 583af86ea2df407b75203f04fe8fc60b0dc03686a916b03ae225b382b6dc303d
Instruction Fuzzy Hash: B5A00231505500DFCF01BB10DD48E0EBB71ABA1315B12C51AA0559103487354460DA15

Uniqueness

Uniqueness Score: -1.00%

Function 6C520736 Relevance: 1.5, APIs: 1, Instructions: 3COMMON

Download Yara Rule

APIs

KiUserCallbackDispatcher.NTDLL(?), ref: 6C52073A

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: CallbackDispatcherUser
String ID:
API String ID: 2492992576-0
Opcode ID: 9328c20c031b7adbb215741714e9f1132b7a42d0bb5f4aee9dbc812680d793d1
Instruction ID: 58c0d64360f4e59daceeaadc0a46d69aafdd45adf1dc483c9270c5e80b7ed707
Opcode Fuzzy Hash: 9328c20c031b7adbb215741714e9f1132b7a42d0bb5f4aee9dbc812680d793d1
Instruction Fuzzy Hash: 79A00231504514DFCF01BF20DD08D0EBB71FBA1315F22C919A0654102487314420DA19

Uniqueness

Uniqueness Score: -1.00%

Function 6C51F27F Relevance: 1.5, APIs: 1, Instructions: 3COMMON

Download Yara Rule

APIs

SetErrorMode.KERNEL32(?), ref: 6C51F283

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 484e48cbc061e1aab48394c19ee45a5cc6ee32f685a258a450c53e47d5683081
Instruction ID: 9590c3ec681357c73754a3c78a8b1e2777939407f8e1a36afee073bb315b3270
Opcode Fuzzy Hash: 484e48cbc061e1aab48394c19ee45a5cc6ee32f685a258a450c53e47d5683081
Instruction Fuzzy Hash: 47A00235504904DFCF01BF20DD08D0EBB72BBA1319B22C519A1554112487716520DA15

Uniqueness

Uniqueness Score: -1.00%

Function 02DD9852 Relevance: .3, Instructions: 313COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2370771116.0000000002DD1000.00000040.00000800.00020000.00000000.sdmp, Offset: 02DD1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_2dd1000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8ef9db161f0d652b53e4ddae65e807a707dabbc6888ed346a0d86ee841ca5003
Instruction ID: 0fcbb695721b4d5f7481c88db0369ccc9764210da266638e11e8f3c39f9e8d3c
Opcode Fuzzy Hash: 8ef9db161f0d652b53e4ddae65e807a707dabbc6888ed346a0d86ee841ca5003
Instruction Fuzzy Hash: F4D10875A08B408FC714DF28C09466ABBF2FB89314F6599ADE4899B355C732EC42CF91

Uniqueness

Uniqueness Score: -1.00%

Function 02E9E637 Relevance: .1, Instructions: 94COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2370771116.0000000002DD1000.00000040.00000800.00020000.00000000.sdmp, Offset: 02DD1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_2dd1000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0c4d2cb28959fe6c78ea351781cbf066072ac6408e9ff88e9d1e543236721520
Instruction ID: 9f6ddaf247be1c4ce0fc9c8f08f8633fdc32fad05ba0f605dd0f686d74376851
Opcode Fuzzy Hash: 0c4d2cb28959fe6c78ea351781cbf066072ac6408e9ff88e9d1e543236721520
Instruction Fuzzy Hash: 2E419EB0908746EFDB15CF24C4047A9BBF0FB46308F08866BE94897392D735A958CBC2

Uniqueness

Uniqueness Score: -1.00%

Function 02EA7A37 Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2370771116.0000000002DD1000.00000040.00000800.00020000.00000000.sdmp, Offset: 02DD1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_2dd1000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 40eec0b3e5722985f298ee6c312542d08bce117a1d603157360896d3a85d43e6
Instruction ID: c4cfcf84e3b02a9dfbcb7e4257b439b8732152e25bc1190d69783c7af45c783d
Opcode Fuzzy Hash: 40eec0b3e5722985f298ee6c312542d08bce117a1d603157360896d3a85d43e6
Instruction Fuzzy Hash: A831ADB0909746EFD715CF25C4687A9FBF0BB45308F04816DD8499B781D334AA59CB82

Uniqueness

Uniqueness Score: -1.00%

Function 02E979F7 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2370771116.0000000002DD1000.00000040.00000800.00020000.00000000.sdmp, Offset: 02DD1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_2dd1000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 06c9da286b47f08cf47128b6321815831c4406dd9b6afab3a26945c06c54f813
Instruction ID: 2b85f1c5b4f45de6ffe2e65c426950686d5762d90dc3cc87ac5d8dc2274b5d78
Opcode Fuzzy Hash: 06c9da286b47f08cf47128b6321815831c4406dd9b6afab3a26945c06c54f813
Instruction Fuzzy Hash: B431ADB0919746AFDB15CF60C8483A9FBF0FB45708F04856ED84997782E374AA59CBC2

Uniqueness

Uniqueness Score: -1.00%

Function 02D30672 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2370771116.0000000002D30000.00000040.00000800.00020000.00000000.sdmp, Offset: 02D30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_2d30000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 26b9d01a04b0ad85b2374960b41be3a69e50b2b5c95a0cfcec949c474b252b36
Instruction ID: 4c378bc5e9efc6ebb588978d3c6851a2361eb9e0bb8397e9fb2a24be52d8c9d7
Opcode Fuzzy Hash: 26b9d01a04b0ad85b2374960b41be3a69e50b2b5c95a0cfcec949c474b252b36
Instruction Fuzzy Hash: B5115BB6D0026ADFCF29DF48C9855ADB7B0FB98315B168525DC66A3345D334AD20CB90

Uniqueness

Uniqueness Score: -1.00%

Function 02D30667 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2370771116.0000000002D30000.00000040.00000800.00020000.00000000.sdmp, Offset: 02D30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_2d30000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 49dc87b3a8b6938ed3b9fac1ec2aa050ea93db2de6f66cf2116391fded2245b0
Instruction ID: 73fd3d58abc649662f761e0626999442740b12f54de05a37855a6418344032e9
Opcode Fuzzy Hash: 49dc87b3a8b6938ed3b9fac1ec2aa050ea93db2de6f66cf2116391fded2245b0
Instruction Fuzzy Hash: 62118FB6D0026A8FCF19DF88C5865EDB7B0FB49314B064559DC65A3342D3346D61CB81

Uniqueness

Uniqueness Score: -1.00%

Function 02D30722 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2370771116.0000000002D30000.00000040.00000800.00020000.00000000.sdmp, Offset: 02D30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_2d30000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ba15a287fd00cd65c85051497b8bd3b2daa3b48d69815a717ecf41d8eba577cc
Instruction ID: 79bd31a703e4f6ecae2acb559e201638782df314153da90a09fc45d754d201d1
Opcode Fuzzy Hash: ba15a287fd00cd65c85051497b8bd3b2daa3b48d69815a717ecf41d8eba577cc
Instruction Fuzzy Hash: 57F0A5B6C00269DB8B15DF48C4411ADF7B1EB49218B1A8496DC6977341D332AD62CF91

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 6A3B5BF7 Relevance: 7.5, APIs: 5, Instructions: 43timethreadCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32(?), ref: 6A3B5C1E
GetCurrentProcessId.KERNEL32 ref: 6A3B5C2D
GetCurrentThreadId.KERNEL32 ref: 6A3B5C36
GetTickCount.KERNEL32 ref: 6A3B5C3F
QueryPerformanceCounter.KERNEL32(00000000), ref: 6A3B5C54

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID: CurrentTime$CountCounterFilePerformanceProcessQuerySystemThreadTick
String ID:
API String ID: 1445889803-0
Opcode ID: 5eae678e683f64af5a86e863d3c1c274704f8298bb8ce8eb686dde91493b6760
Instruction ID: 6e2679bb9bdcfdeba1e291918e9a30c7c4570837a2312b382b96a29d80faf89f
Opcode Fuzzy Hash: 5eae678e683f64af5a86e863d3c1c274704f8298bb8ce8eb686dde91493b6760
Instruction Fuzzy Hash: BA11B375D11219EBCF00DFA5CA48A9EB7F8EF19315F524496E406E7500EA74EA009B60

Uniqueness

Uniqueness Score: -1.00%

Function 6C53DE4B Relevance: 6.1, APIs: 4, Instructions: 59COMMONLIBRARYCODE

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 6C53DFAD
UnhandledExceptionFilter.KERNEL32(6C54ED98), ref: 6C53DFB8
GetCurrentProcess.KERNEL32(C0000409), ref: 6C53DFD4
TerminateProcess.KERNEL32(00000000), ref: 6C53DFDB

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: ExceptionFilterProcessUnhandled$CurrentTerminate
String ID:
API String ID: 3231755760-0
Opcode ID: dce9260f89468f08ba75b3d2f48375e0b088b543eb78a5c3cebc13cf6a75547d
Instruction ID: c3229877bf5582a94cec29e21996e0ef970d5d5fb883057a5a4a916ab408b1b0
Opcode Fuzzy Hash: dce9260f89468f08ba75b3d2f48375e0b088b543eb78a5c3cebc13cf6a75547d
Instruction Fuzzy Hash: 0921F5B66112A49FDB02EF19CD486487BF4BB8A314F12411BE509D7360E7B24981CB6D

Uniqueness

Uniqueness Score: -1.00%

Function 6A3B5BE7 Relevance: 6.1, APIs: 4, Instructions: 59COMMONLIBRARYCODE

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 6A3B5D49
UnhandledExceptionFilter.KERNEL32(6A3C1530), ref: 6A3B5D54
GetCurrentProcess.KERNEL32(C0000409), ref: 6A3B5D70
TerminateProcess.KERNEL32(00000000), ref: 6A3B5D77

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID: ExceptionFilterProcessUnhandled$CurrentTerminate
String ID:
API String ID: 3231755760-0
Opcode ID: 3dfa2e9e2bbac294ed65e77e5400d8d73c8996bfaf65de8b990479f6e529ebba
Instruction ID: 5b05bf1648db4b507b07a04c05538601aa3f5fe06f7ec59aae03dc544f586423
Opcode Fuzzy Hash: 3dfa2e9e2bbac294ed65e77e5400d8d73c8996bfaf65de8b990479f6e529ebba
Instruction Fuzzy Hash: CA21ADBA800204ABDB10CFA6DD49644BBFCBB0A714F10401AE90BC7B52E771BD41DF59

Uniqueness

Uniqueness Score: -1.00%

Function 6C543868 Relevance: 4.6, APIs: 3, Instructions: 78COMMONLIBRARYCODE

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32(?,?,?,?,?,00007FFF), ref: 6C543960
SetUnhandledExceptionFilter.KERNEL32(00000000,?,?,?,?,?,00007FFF), ref: 6C54396A
UnhandledExceptionFilter.KERNEL32(?,?,?,?,?,?,00007FFF), ref: 6C543977

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: ExceptionFilterUnhandled$DebuggerPresent
String ID:
API String ID: 3906539128-0
Opcode ID: c7d57b99a000891b207d4fd32073b521e8550069b7943a2f3537e2044fd362d4
Instruction ID: 8934851623f064bd6c212d13b8f853ded744bf3ffe5af6e3016904a297782ae2
Opcode Fuzzy Hash: c7d57b99a000891b207d4fd32073b521e8550069b7943a2f3537e2044fd362d4
Instruction Fuzzy Hash: 8531B3749012289BCB21DF65DC88BDCBBB8AF48314F6052EAE41CA7290E7709F858F44

Uniqueness

Uniqueness Score: -1.00%

Function 6A3B95FD Relevance: 4.6, APIs: 3, Instructions: 78COMMONLIBRARYCODE

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32(?,?,?,?,?,?), ref: 6A3B96F5
SetUnhandledExceptionFilter.KERNEL32(00000000,?,?,?,?,?,?), ref: 6A3B96FF
UnhandledExceptionFilter.KERNEL32(?,?,?,?,?,?,?), ref: 6A3B970C

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID: ExceptionFilterUnhandled$DebuggerPresent
String ID:
API String ID: 3906539128-0
Opcode ID: 655b8cddbfaa1a012a61905466c3f83445de378f088423c283bbd2e8dc8d8dbe
Instruction ID: 2c49e089daedd547428f400ada1b7f18eb06515971742bf60330a24166df12de
Opcode Fuzzy Hash: 655b8cddbfaa1a012a61905466c3f83445de378f088423c283bbd2e8dc8d8dbe
Instruction Fuzzy Hash: DE31C17490122DABCB21DF64D989798BBF9AF18310F5041EAE81CAA251EB309B818F54

Uniqueness

Uniqueness Score: -1.00%

Function 6C542B55 Relevance: 4.5, APIs: 3, Instructions: 20COMMONLIBRARYCODE

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,6C542B54,00000001,00000000,?,00000001,?,6C543B3C), ref: 6C542B77
TerminateProcess.KERNEL32(00000000,?,6C542B54,00000001,00000000,?,00000001,?,6C543B3C), ref: 6C542B7E
ExitProcess.KERNEL32 ref: 6C542B90

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: Process$CurrentExitTerminate
String ID:
API String ID: 1703294689-0
Opcode ID: 0594948d717fb1b737a336c9b050e5028ee745768bee7569dba755e2d3a1af7e
Instruction ID: 4e6d4adc05d42a9268cd07c8512e2659c15172456ca85c9bf95515550b7b9611
Opcode Fuzzy Hash: 0594948d717fb1b737a336c9b050e5028ee745768bee7569dba755e2d3a1af7e
Instruction Fuzzy Hash: A0E0B631100559EFCF017F65CC4CA9C3B7AFB85759B158414F809C6A21CB35DD92DA85

Uniqueness

Uniqueness Score: -1.00%

Function 6A3B8397 Relevance: 4.5, APIs: 3, Instructions: 20COMMONLIBRARYCODE

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,6A3B8396,?,00000001,?,?), ref: 6A3B83B9
TerminateProcess.KERNEL32(00000000,?,6A3B8396,?,00000001,?,?), ref: 6A3B83C0
ExitProcess.KERNEL32 ref: 6A3B83D2

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID: Process$CurrentExitTerminate
String ID:
API String ID: 1703294689-0
Opcode ID: 5f60ce07f37c90eff6de50b32c93568bae863974404319c9d1f488efca3e989e
Instruction ID: 9c46306cc8ab5ac24a6154d001f791e046ba90831a728c089c4a4ba7109d5011
Opcode Fuzzy Hash: 5f60ce07f37c90eff6de50b32c93568bae863974404319c9d1f488efca3e989e
Instruction Fuzzy Hash: D2E04631140288ABCF116F61CD08A487FBEFF11381F018414F84AC6521DF36EC81DEA0

Uniqueness

Uniqueness Score: -1.00%

Function 6C5446C5 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 113COMMON

Download Yara Rule

Strings

., xrefs: 6C544872

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID:
String ID: .
API String ID: 0-248832578
Opcode ID: 6afae555deda114dfa4e11c30a7dfd7ec4e7d3cb5baca7487949337cad41da74
Instruction ID: f9f0bdd29b214fd9281dce2ceccd233652aad0372ffcdfe0c04858b888acd63a
Opcode Fuzzy Hash: 6afae555deda114dfa4e11c30a7dfd7ec4e7d3cb5baca7487949337cad41da74
Instruction Fuzzy Hash: 173136B5940218AFDB14CE69CC84EFA77BEDB8235CF148298E45897A51E7309D468FA0

Uniqueness

Uniqueness Score: -1.00%

Function 6A3B9A8A Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 113COMMON

Download Yara Rule

Strings

., xrefs: 6A3B9C37

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID:
String ID: .
API String ID: 0-248832578
Opcode ID: ec110e3722beeb35442cb3f227d12628a44f3ea1a6d4e57401af10e11280ef93
Instruction ID: 9365dff640e8142f2640d88d23f57aedebe5ac2d8ccb405e15a54cdf73014b8f
Opcode Fuzzy Hash: ec110e3722beeb35442cb3f227d12628a44f3ea1a6d4e57401af10e11280ef93
Instruction Fuzzy Hash: A2312471804209AFDB14CE68CC84EFA7BBFDFA6348F010198E45987651EB31ED41CB60

Uniqueness

Uniqueness Score: -1.00%

Function 6C5423C7 Relevance: 1.8, APIs: 1, Instructions: 269COMMONLIBRARYCODE

Download Yara Rule

APIs

RaiseException.KERNEL32(C000000D,00000000,00000001,?,?,?,?,?,6C5423C2,?,?,?,?,?,?,00000000), ref: 6C5425F4

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: ExceptionRaise
String ID:
API String ID: 3997070919-0
Opcode ID: 6200409253c56cb67cf8351f66c063857ad514d945ecf76d0d77b83cc2e78701
Instruction ID: b8a5a813baba71973314ad6f6c36973587325828f42eca742222dd2d7d28e9de
Opcode Fuzzy Hash: 6200409253c56cb67cf8351f66c063857ad514d945ecf76d0d77b83cc2e78701
Instruction Fuzzy Hash: D0B15B712106189FD705CF28CC8AB957BE0FF45368F25C658E8A9CF6A2C735E991CB40

Uniqueness

Uniqueness Score: -1.00%

Function 6A3BEFC8 Relevance: 1.8, APIs: 1, Instructions: 269COMMONLIBRARYCODE

Download Yara Rule

APIs

RaiseException.KERNEL32(C000000D,00000000,00000001,?,?,00000008,?,?,6A3BEFC3,?,?,00000008,?,?,6A3BEC56,00000000), ref: 6A3BF1F5

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID: ExceptionRaise
String ID:
API String ID: 3997070919-0
Opcode ID: e46d0b9517019edfd898eb070adda115d24a460b94e2b3e397affefa2529b04b
Instruction ID: 150bc809968f6e549371b7fecf17b96b5fb421eeb0b6ea83502a39a578c5676a
Opcode Fuzzy Hash: e46d0b9517019edfd898eb070adda115d24a460b94e2b3e397affefa2529b04b
Instruction Fuzzy Hash: 76B19E39610608DFD704CF28C486B557BE2FF55364F269698E8E9CF6A1C736E981CB40

Uniqueness

Uniqueness Score: -1.00%

Function 6A3B6B5B Relevance: 1.6, APIs: 1, Instructions: 130COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(0000000A,?), ref: 6A3B6B74

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID: FeaturePresentProcessor
String ID:
API String ID: 2325560087-0
Opcode ID: 087da844803347cbd00a6252f0ff12d4e9e5d1e8d2dec51af7370723a66dc6f8
Instruction ID: 0a60bbf107b0634531cef52185c9b49f8696cb0580a9e4282dc3db2c8e438d92
Opcode Fuzzy Hash: 087da844803347cbd00a6252f0ff12d4e9e5d1e8d2dec51af7370723a66dc6f8
Instruction Fuzzy Hash: 0341AAB1D013089BEB10CF95C9857AEBBF9FB48314F11856AC816EB641E772F901CB60

Uniqueness

Uniqueness Score: -1.00%

Function 6C515966 Relevance: 1.5, APIs: 1, Instructions: 40COMMON

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(?,?,00000000,?), ref: 6C515998

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: InfoLocale
String ID:
API String ID: 2299586839-0
Opcode ID: 69e9f0d10747ac019e22118adde33a20715ef6d448af27798c1b0df9aa91e771
Instruction ID: a7df1203718d3371296e10fee738c6b9aeccaa85f0f2108d445291ab17f2e9cb
Opcode Fuzzy Hash: 69e9f0d10747ac019e22118adde33a20715ef6d448af27798c1b0df9aa91e771
Instruction Fuzzy Hash: A9F09632106B246BC2115A56CC8CF5B7FBDDFCABA4F560269F5099B615D632D800C7A1

Uniqueness

Uniqueness Score: -1.00%

Function 6C51590E Relevance: 1.5, APIs: 1, Instructions: 40COMMON

Download Yara Rule

APIs

GetLocaleInfoA.KERNEL32(?,?,00000000,?), ref: 6C515940

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: InfoLocale
String ID:
API String ID: 2299586839-0
Opcode ID: 264b712cfa939026d83bab8076fafb53f515ca5c128189d3038ad2138cc33af9
Instruction ID: f6cfae58ec026af883f404b45cc267d669dea1a4ba0b609f217cc4362bf318e5
Opcode Fuzzy Hash: 264b712cfa939026d83bab8076fafb53f515ca5c128189d3038ad2138cc33af9
Instruction Fuzzy Hash: 85F0F63210AB24ABC3111A55CC4CF5B7FBCEFCAB68F120269F5089B611C732C801C7A1

Uniqueness

Uniqueness Score: -1.00%

Function 6C51573A Relevance: 1.5, APIs: 1, Instructions: 40COMMON

Download Yara Rule

APIs

GetKeyboardState.USER32(00000000), ref: 6C515763

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: KeyboardState
String ID:
API String ID: 1724228437-0
Opcode ID: e83e20bed3ecf01b85a02a3167cf28fd48bc4c2e19231817a68bc344d9b8de81
Instruction ID: 70ecc65e7a03312e582b90757e091d1ca656976e31572ff2250e2748e860d604
Opcode Fuzzy Hash: e83e20bed3ecf01b85a02a3167cf28fd48bc4c2e19231817a68bc344d9b8de81
Instruction Fuzzy Hash: 33F0C236906A64ABD31196598C4CF9FBF7CEF8AA94F550195FC049B6018631D401C2E0

Uniqueness

Uniqueness Score: -1.00%

Function 6C51411C Relevance: 1.5, APIs: 1, Instructions: 4COMMON

Download Yara Rule

APIs

EnumSystemLocalesA.KERNEL32(?,?), ref: 6C514124

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: EnumLocalesSystem
String ID:
API String ID: 2099609381-0
Opcode ID: 7d0a3cc6ad66d390c4d9f8cb73958ab4fca78abc6403a23ce2cd5281e316c700
Instruction ID: af6e8fb6ca0fda858487509fe26a8fdd0814ee12f6935059c539ed0c3ee1236a
Opcode Fuzzy Hash: 7d0a3cc6ad66d390c4d9f8cb73958ab4fca78abc6403a23ce2cd5281e316c700
Instruction Fuzzy Hash: 11A002315187859BCF02EF51CD0891E7A72BB95305F154C19B19141069C7614424EB15

Uniqueness

Uniqueness Score: -1.00%

Function 6C51412D Relevance: 1.5, APIs: 1, Instructions: 4COMMON

Download Yara Rule

APIs

EnumSystemLocalesW.KERNEL32(?,?), ref: 6C514135

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: EnumLocalesSystem
String ID:
API String ID: 2099609381-0
Opcode ID: 6195797761a656bfb9c68da14301fbd861c3077615bc362612a54adbe0e85721
Instruction ID: bd05ab9f541e1dcf28e0459ac9a9b3cf25dd43e75f2609ad43a268030055da0c
Opcode Fuzzy Hash: 6195797761a656bfb9c68da14301fbd861c3077615bc362612a54adbe0e85721
Instruction Fuzzy Hash: EAA001725187869FCF02EF51CD0891EBAB2BBD9705F568C19B1A2401A5D7628428EB16

Uniqueness

Uniqueness Score: -1.00%

Function 6C51846C Relevance: 1.5, APIs: 1, Instructions: 3windowCOMMON

Download Yara Rule

APIs

IsIconic.USER32(?), ref: 6C518470

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: Iconic
String ID:
API String ID: 110040809-0
Opcode ID: a7dbed13619d3e3b439a53eae5a19fd54f7cdbea7cb7ff7a34eedf9ebe606e56
Instruction ID: a359e9f7ba4aad597ee880b1013d2f3b34b4beb6bf3c8b6985d3f1a0331f7cfd
Opcode Fuzzy Hash: a7dbed13619d3e3b439a53eae5a19fd54f7cdbea7cb7ff7a34eedf9ebe606e56
Instruction Fuzzy Hash: EBA00271644500DFCF01BF15DE48D0EBB71EBA1315F12D519A05A4012487314420DE36

Uniqueness

Uniqueness Score: -1.00%

Function 6C51A669 Relevance: 1.5, APIs: 1, Instructions: 3clipboardCOMMON

Download Yara Rule

APIs

OpenClipboard.USER32(?), ref: 6C51A66D

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: ClipboardOpen
String ID:
API String ID: 2793039342-0
Opcode ID: a996b16be4e583ace1f2c4d2f32617fe7a6d9e2cbaac0b1f8c0bbf7d841a5953
Instruction ID: ef03ce0c3a988e6d9ecd3d4fc9899a176861133a21de4ca7b943bb709f7fab86
Opcode Fuzzy Hash: a996b16be4e583ace1f2c4d2f32617fe7a6d9e2cbaac0b1f8c0bbf7d841a5953
Instruction Fuzzy Hash: F7A00231504508DFCF01BB20DD0CD0EBB71FBA1329B22D51AE1554102487314420DA15

Uniqueness

Uniqueness Score: -1.00%

Function 6C515017 Relevance: 1.5, APIs: 1, Instructions: 3clipboardCOMMON

Download Yara Rule

APIs

GetClipboardData.USER32(?), ref: 6C51501B

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: ClipboardData
String ID:
API String ID: 2952336681-0
Opcode ID: 035a76eedd7abf2476eaa1e960ef2be173aa294aacf0a080d5ac42d11bc6fe5e
Instruction ID: 3f42ed8eff9262775850c5e4b8129e3e15497a0e1d23528e9eb23e99bb1f87de
Opcode Fuzzy Hash: 035a76eedd7abf2476eaa1e960ef2be173aa294aacf0a080d5ac42d11bc6fe5e
Instruction Fuzzy Hash: 25A00231605501DFCF01BB11DD08E4EBF71ABA1355B13C559A0698002887314460DE15

Uniqueness

Uniqueness Score: -1.00%

Function 6A3BABBF Relevance: 1.3, APIs: 1, Instructions: 5memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32 ref: 6A3BABBF

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID: HeapProcess
String ID:
API String ID: 54951025-0
Opcode ID: ff39d9ab77a7532f2726a6350372012d01be2b468c784c11482cd84bca9e65e3
Instruction ID: 66d77e3b0274eedcf12ea5051a0682613bdab44aa8195655fef03ed84c4e7279
Opcode Fuzzy Hash: ff39d9ab77a7532f2726a6350372012d01be2b468c784c11482cd84bca9e65e3
Instruction Fuzzy Hash: 66A011302802008B8B808E308B88208BAFCAA0A2C03000028A80AC0000EB28A800AA20

Uniqueness

Uniqueness Score: -1.00%

Function 6C53F82D Relevance: .6, Instructions: 620COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b3aec21595abd17b2c15bb3adf4d00461801115e7375e06d1082fafdd0861615
Instruction ID: 1de8bbda8db5cf8ba58cee12f0715c0e49c3a4b206d0f0fa3fa2fca81774ac67
Opcode Fuzzy Hash: b3aec21595abd17b2c15bb3adf4d00461801115e7375e06d1082fafdd0861615
Instruction Fuzzy Hash: F2227F317055268BDF0CCE69C8B047E7BE2EB9536472483ADD867DBAC1EA34D921C790

Uniqueness

Uniqueness Score: -1.00%

Function 6C5408AC Relevance: .5, Instructions: 473COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 323db9accf14f3090eec3d0a87b25f30b364fe91438709469afbe282fd986862
Instruction ID: 5964b83185b2f062d416334c0c0979db7bf80005e2dc6ad83b07a52816f2f6f9
Opcode Fuzzy Hash: 323db9accf14f3090eec3d0a87b25f30b364fe91438709469afbe282fd986862
Instruction Fuzzy Hash: DAE1513170256687EF4CCA2A8CB007E76A2EBE4375735836ED863D7AC4EA34D915C790

Uniqueness

Uniqueness Score: -1.00%

Function 6C540DEC Relevance: .5, Instructions: 470COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b5b3e5219c24e38db487436f5840cf4e1437969e14af223875bf10b042f87811
Instruction ID: f42411d7afd1c15a3141a33086a520e6278972096eae20468c75acadfe63ae98
Opcode Fuzzy Hash: b5b3e5219c24e38db487436f5840cf4e1437969e14af223875bf10b042f87811
Instruction Fuzzy Hash: CEF1A1317065128BEF0CCA6ACDB007F76E2EBD4375725836DD867D7AC4EA24D921C690

Uniqueness

Uniqueness Score: -1.00%

Function 6C540393 Relevance: .5, Instructions: 457COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 28e35ac769e7317f25c8d2f7079bfb7ba7f6bb36bb2429e733617ce6d81fc8a1
Instruction ID: 63c1aa4068b179e7ba499ad146cbfc5c835f285ea5f4915522f89704b34ad6c6
Opcode Fuzzy Hash: 28e35ac769e7317f25c8d2f7079bfb7ba7f6bb36bb2429e733617ce6d81fc8a1
Instruction Fuzzy Hash: 73E172317025528BEF0CCA6D8DB047E76A2EBE4374735836ED863D7AC4EA34D925C690

Uniqueness

Uniqueness Score: -1.00%

Function 6C53FE8A Relevance: .5, Instructions: 453COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 613de14202fb079796339272098cac10a140e9056447b28830b687cdfc889608
Instruction ID: 4a338511cf267b4882e993bbdef556000803fc294bc1f81bb086572dffdff1ff
Opcode Fuzzy Hash: 613de14202fb079796339272098cac10a140e9056447b28830b687cdfc889608
Instruction Fuzzy Hash: 42E170317025228BEF4CCA29CCB007E76E2EBE4375725836ED867D7AC4EA24D915C790

Uniqueness

Uniqueness Score: -1.00%

Function 67546384 Relevance: .3, Instructions: 322COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2464023360.0000000067541000.00000020.00000001.01000000.00000011.sdmp, Offset: 67540000, based on PE: true

Associated: 00000010.00000002.2463980469.0000000067540000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464120924.000000006754B000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464168986.0000000067551000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464214723.0000000067552000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464256525.0000000067553000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_67540000_javaw.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: e0aa017fa8336c02a4cfa9a00fca152781d4b24647213767966b2f324d7d0c80
Instruction ID: 497795069de3d049e6800bdc141b13f3bee4949eaf3c83fe8ea1b6be22cc4ab8
Opcode Fuzzy Hash: e0aa017fa8336c02a4cfa9a00fca152781d4b24647213767966b2f324d7d0c80
Instruction Fuzzy Hash: 0AE1D874A043598FEB14CF68C98079EBBF1FF89314F1085DAD958AB249EB309985CF91

Uniqueness

Uniqueness Score: -1.00%

Function 6C535CEB Relevance: .2, Instructions: 158COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3ff53927dfef95e36e38be4c9b631ac72697c43da50fa0838d6506156e433d6a
Instruction ID: 510ece864db7ce03b1cacbb4b00ace51cfe48c2d0287b9c280c518b498a1ab9b
Opcode Fuzzy Hash: 3ff53927dfef95e36e38be4c9b631ac72697c43da50fa0838d6506156e433d6a
Instruction Fuzzy Hash: E751CFB5211014EFE6028B14CC88CBA77BDFF9A749B650459F9858A242C737AD53FB31

Uniqueness

Uniqueness Score: -1.00%

Function 6C52E9A9 Relevance: .1, Instructions: 114COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1deb53b74f42932bfda9f0d28987ec997495e464e0b2174397ecbcde799b0774
Instruction ID: c8f6624b1a94c2e82160ce65699a99e589dd2f56cf25ae405a3afe7281c59d77
Opcode Fuzzy Hash: 1deb53b74f42932bfda9f0d28987ec997495e464e0b2174397ecbcde799b0774
Instruction Fuzzy Hash: AB413931100111AFD3529F24C8C9E7AB7F8FF89345F2105AAF8D5C7161EB3899A6EB20

Uniqueness

Uniqueness Score: -1.00%

Function 6C5112A6 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7654ebaef6699b427f57a18cac5e1bded69b733d9bc70aa37f999eccb7855610
Instruction ID: 239a223a8af7505b1d649c5c7f7b30a811f5ff475fda74a2eb90eab0c44b6641
Opcode Fuzzy Hash: 7654ebaef6699b427f57a18cac5e1bded69b733d9bc70aa37f999eccb7855610
Instruction Fuzzy Hash: 1FF0AF31506201EFD7114E46CC88F9AB7B1AF69305F214489F8A093A60E37198D1CA95

Uniqueness

Uniqueness Score: -1.00%

Function 02DDBC98 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2370771116.0000000002DD1000.00000040.00000800.00020000.00000000.sdmp, Offset: 02DD1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_2dd1000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 059701c07114c480a18dfab4d282bcdcbd098b78e3181259c078b7b8cf1f6b38
Instruction ID: 9f98b79a42b55fcbd4ae7aa493eeee5b76767ba15c1b8e90fe723b32be3364a6
Opcode Fuzzy Hash: 059701c07114c480a18dfab4d282bcdcbd098b78e3181259c078b7b8cf1f6b38
Instruction Fuzzy Hash: 61E092F1C041449BC7105F24D89AA24BBB5FF26314F5685EAE888BF217D322D816CBA8

Uniqueness

Uniqueness Score: -1.00%

Function 6C54449A Relevance: .0, Instructions: 23COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b1ed8babab58a74b2fd4f253c1292d6a6bb720767e540f051cf9004faf96cdc1
Instruction ID: 7dd57d6fdd091d6b0a5f87a67d1ab70f345c5ab9d9c688ef00a2bca3942e95ea
Opcode Fuzzy Hash: b1ed8babab58a74b2fd4f253c1292d6a6bb720767e540f051cf9004faf96cdc1
Instruction Fuzzy Hash: D0E04632956228EB8720CE88990499AB3FCEB89B11B26829AB908D3600C6719E00C7D0

Uniqueness

Uniqueness Score: -1.00%

Function 6A3B95CA Relevance: .0, Instructions: 23COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6a222618e80174f45f92e8c7cc71c4fc57b9a4f1dcb7adccf2b68ab982c144e2
Instruction ID: 318d7634d5664bf1790596e5c8e7b85484dd2b455d778f506e1117a714e1bc32
Opcode Fuzzy Hash: 6a222618e80174f45f92e8c7cc71c4fc57b9a4f1dcb7adccf2b68ab982c144e2
Instruction Fuzzy Hash: 6DE04632956228EB8B10DE889944A9AB7EDEB19A61B12019BF904D3A01CA71DE00CBC0

Uniqueness

Uniqueness Score: -1.00%

Function 6C5375FD Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f2c83b9e9670eed33e88e9b2f3c9efbc2d76b48ff0ae9ed64df8d7177d5380dd
Instruction ID: 7b4cad198fd41b43db2de8277cb5188353cf9554b821626105ae18cba364ccd9
Opcode Fuzzy Hash: f2c83b9e9670eed33e88e9b2f3c9efbc2d76b48ff0ae9ed64df8d7177d5380dd
Instruction Fuzzy Hash: E8C002B1565240DBD704CF10C154755BBE4EB4531EF24C89CD1598E182D7BBC547DF40

Uniqueness

Uniqueness Score: -1.00%

Function 67547CE0 Relevance: 28.2, APIs: 7, Strings: 9, Instructions: 166COMMON

Download Yara Rule

APIs

FindAtomA.KERNEL32 ref: 67547D87
malloc.MSVCRT ref: 67547DA2
memset.MSVCRT ref: 67547DC3

Strings

AAAA, xrefs: 67547D4F
AAAA, xrefs: 67547D23
AAAA, xrefs: 67547D0A, 67547CE3
AAAA, xrefs: 67547D39
AAAA, xrefs: 67547D14
AAAA, xrefs: 67547D2A
AAAA, xrefs: 67547D0D
AAAA, xrefs: 67547D40
-LIBGCCW32-EH-3-SJLJ-GTHR-MINGW32, xrefs: 67547D05, 67547E79

Memory Dump Source

Source File: 00000010.00000002.2464023360.0000000067541000.00000020.00000001.01000000.00000011.sdmp, Offset: 67540000, based on PE: true

Associated: 00000010.00000002.2463980469.0000000067540000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464120924.000000006754B000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464168986.0000000067551000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464214723.0000000067552000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464256525.0000000067553000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_67540000_javaw.jbxd

Similarity

API ID: AtomFindmallocmemset
String ID: -LIBGCCW32-EH-3-SJLJ-GTHR-MINGW32$AAAA$AAAA$AAAA$AAAA$AAAA$AAAA$AAAA$AAAA
API String ID: 2931028552-2505628470
Opcode ID: 4c8b3962cde89f3c9d51ed6a242e3a115b8885f6e5ca6c555e84980bf9d4a4cc
Instruction ID: d067d2d3bfe29a7dc64264bd0f924e687cf327ecef0f5ae9ce2a8eacdc07f6a0
Opcode Fuzzy Hash: 4c8b3962cde89f3c9d51ed6a242e3a115b8885f6e5ca6c555e84980bf9d4a4cc
Instruction Fuzzy Hash: B37108B5A00308CFDB91EFA9C485699BBF0FB49314F1145AAD858DB749E3399881CF85

Uniqueness

Uniqueness Score: -1.00%

Function 6A3BB89C Relevance: 19.6, APIs: 13, Instructions: 114COMMONLIBRARYCODE

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 6A3BB8E0

Part of subcall function 6A3BD46B: _free.LIBCMT ref: 6A3BD488
Part of subcall function 6A3BD46B: _free.LIBCMT ref: 6A3BD49A
Part of subcall function 6A3BD46B: _free.LIBCMT ref: 6A3BD4AC
Part of subcall function 6A3BD46B: _free.LIBCMT ref: 6A3BD4BE
Part of subcall function 6A3BD46B: _free.LIBCMT ref: 6A3BD4D0
Part of subcall function 6A3BD46B: _free.LIBCMT ref: 6A3BD4E2
Part of subcall function 6A3BD46B: _free.LIBCMT ref: 6A3BD4F4
Part of subcall function 6A3BD46B: _free.LIBCMT ref: 6A3BD506
Part of subcall function 6A3BD46B: _free.LIBCMT ref: 6A3BD518
Part of subcall function 6A3BD46B: _free.LIBCMT ref: 6A3BD52A
Part of subcall function 6A3BD46B: _free.LIBCMT ref: 6A3BD53C
Part of subcall function 6A3BD46B: _free.LIBCMT ref: 6A3BD54E
Part of subcall function 6A3BD46B: _free.LIBCMT ref: 6A3BD560

_free.LIBCMT ref: 6A3BB8D5

Part of subcall function 6A3B8DB7: HeapFree.KERNEL32(00000000,00000000,?,6A3BD5FC,?,00000000,?,00000000,?,6A3BD623,?,00000007,?,?,6A3BBA34,?), ref: 6A3B8DCD
Part of subcall function 6A3B8DB7: GetLastError.KERNEL32(?,?,6A3BD5FC,?,00000000,?,00000000,?,6A3BD623,?,00000007,?,?,6A3BBA34,?,?), ref: 6A3B8DDF

_free.LIBCMT ref: 6A3BB8F7
_free.LIBCMT ref: 6A3BB90C
_free.LIBCMT ref: 6A3BB917
_free.LIBCMT ref: 6A3BB939
_free.LIBCMT ref: 6A3BB94C
_free.LIBCMT ref: 6A3BB95A
_free.LIBCMT ref: 6A3BB965
_free.LIBCMT ref: 6A3BB99D
_free.LIBCMT ref: 6A3BB9A4
_free.LIBCMT ref: 6A3BB9C1
_free.LIBCMT ref: 6A3BB9D9

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast___free_lconv_mon
String ID:
API String ID: 161543041-0
Opcode ID: 10e465ae5eed81161c9d33201ac43faf6fddd2dd4f6e0e9bd6b01bdc3b7ba1ea
Instruction ID: 5a3e17e8e8f62f6d83b16cd95db6ca4b2cad30eb350086347d85341d3f034158
Opcode Fuzzy Hash: 10e465ae5eed81161c9d33201ac43faf6fddd2dd4f6e0e9bd6b01bdc3b7ba1ea
Instruction Fuzzy Hash: 0E314D31604705DFEB219E39D884B9A73EAAF30314F52442EE4E9DB952DF36E940DB20

Uniqueness

Uniqueness Score: -1.00%

Function 675412B4 Relevance: 17.6, APIs: 7, Strings: 3, Instructions: 51threadfileCOMMON

Download Yara Rule

APIs

Part of subcall function 67541292: EnterCriticalSection.KERNEL32(58006754,?,6754426C,6754C870), ref: 6754129B

_vsnprintf.MSVCRT ref: 675412DF
GetCurrentThreadId.KERNEL32 ref: 675412F0
fprintf.MSVCRT ref: 67541309
fopen.MSVCRT ref: 67541335
GetCurrentThreadId.KERNEL32 ref: 67541346
fprintf.MSVCRT ref: 67541357
fflush.MSVCRT ref: 67541362

Strings

Win32 [tid=%d]: %s, xrefs: 67541300, 6754134C
v!Tg, xrefs: 675412CE, 675412D1
jnotify_win32.log, xrefs: 67541330

Memory Dump Source

Source File: 00000010.00000002.2464023360.0000000067541000.00000020.00000001.01000000.00000011.sdmp, Offset: 67540000, based on PE: true

Associated: 00000010.00000002.2463980469.0000000067540000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464120924.000000006754B000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464168986.0000000067551000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464214723.0000000067552000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464256525.0000000067553000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_67540000_javaw.jbxd

Similarity

API ID: CurrentThreadfprintf$CriticalEnterSection_vsnprintffflushfopen
String ID: Win32 [tid=%d]: %s$jnotify_win32.log$v!Tg
API String ID: 2169239480-2847087058
Opcode ID: 9d5f9aeab214dcd768b324e2808253375ad001c8e47d733b117f7dc845893609
Instruction ID: 30192a03ae31fd9e4f583f6dcc4d07164b3310debb88b10b9e90ef1d0d49f976
Opcode Fuzzy Hash: 9d5f9aeab214dcd768b324e2808253375ad001c8e47d733b117f7dc845893609
Instruction Fuzzy Hash: DC0140B5805104B9EF16B7A49C8AF1D365897DD30CF0502D1E31AA505DD72A7C5887AF

Uniqueness

Uniqueness Score: -1.00%

Function 67541378 Relevance: 17.5, APIs: 7, Strings: 3, Instructions: 48threadfileCOMMON

Download Yara Rule

APIs

Part of subcall function 67541292: EnterCriticalSection.KERNEL32(58006754,?,6754426C,6754C870), ref: 6754129B

_vsnprintf.MSVCRT ref: 67541396
GetCurrentThreadId.KERNEL32 ref: 675413AC
fprintf.MSVCRT ref: 675413C0
fopen.MSVCRT ref: 675413EC
GetCurrentThreadId.KERNEL32 ref: 675413FD
fprintf.MSVCRT ref: 6754140E
fflush.MSVCRT ref: 67541419

Strings

CTg, xrefs: 67541389
Win32 [tid=%d]: %s, xrefs: 675413B7, 67541403
jnotify_win32.log, xrefs: 675413E7

Memory Dump Source

Source File: 00000010.00000002.2464023360.0000000067541000.00000020.00000001.01000000.00000011.sdmp, Offset: 67540000, based on PE: true

Associated: 00000010.00000002.2463980469.0000000067540000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464120924.000000006754B000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464168986.0000000067551000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464214723.0000000067552000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464256525.0000000067553000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_67540000_javaw.jbxd

Similarity

API ID: CurrentThreadfprintf$CriticalEnterSection_vsnprintffflushfopen
String ID: CTg$Win32 [tid=%d]: %s$jnotify_win32.log
API String ID: 2169239480-2537974460
Opcode ID: cbe92e46c9b2476dfc406a879d5356c105d74b0185cdb5a26a34e7605511d5cf
Instruction ID: 3ac4dadda38ac32d1faab026a7ffd4f5f82a2143e17edf56b52c59a82a3b359f
Opcode Fuzzy Hash: cbe92e46c9b2476dfc406a879d5356c105d74b0185cdb5a26a34e7605511d5cf
Instruction Fuzzy Hash: 280171B5D04104BADF06B7D49C8AF1E365887DE34DF4202D1E31AA105DD72A7C5887AF

Uniqueness

Uniqueness Score: -1.00%

Function 67543D86 Relevance: 16.0, APIs: 5, Strings: 4, Instructions: 205COMMON

Download Yara Rule

APIs

Part of subcall function 675412B4: _vsnprintf.MSVCRT ref: 675412DF
Part of subcall function 675412B4: GetCurrentThreadId.KERNEL32 ref: 675412F0
Part of subcall function 675412B4: fprintf.MSVCRT ref: 67541309
Part of subcall function 675412B4: fflush.MSVCRT ref: 67541362

GetQueuedCompletionStatus.KERNEL32(?,00000000,00000000,00000000,000000FF), ref: 67543E51

Part of subcall function 6754183A: EnterCriticalSection.KERNEL32(?,GetQueuedCompletionStatus returned an error,?,?,?,67543EC5,?,00000000,?,00000000,00000000,00000000,000000FF,?,00000000,00000000), ref: 67541849
Part of subcall function 6754183A: LeaveCriticalSection.KERNEL32(?,?,GetQueuedCompletionStatus returned an error,?,?,?,67543EC5,?,00000000,?,00000000,00000000,00000000,000000FF,?,00000000), ref: 67541868

wcslen.MSVCRT ref: 67543FBC
wcslen.MSVCRT ref: 67543FD0
wcsncpy.MSVCRT ref: 6754405D
wcsncpy.MSVCRT ref: 67544090

Part of subcall function 67541378: _vsnprintf.MSVCRT ref: 67541396
Part of subcall function 67541378: GetCurrentThreadId.KERNEL32 ref: 675413AC
Part of subcall function 67541378: fprintf.MSVCRT ref: 675413C0
Part of subcall function 67541378: fflush.MSVCRT ref: 67541419

Strings

GetQueuedCompletionStatus returned an error, xrefs: 67544113
mainLoop : ignoring event for watch id %d, no longer in wid2WatchData map, xrefs: 67543ED7
mainLoop exits, xrefs: 67544133
Error watching dir %s : %d, xrefs: 67544104

Memory Dump Source

Source File: 00000010.00000002.2464023360.0000000067541000.00000020.00000001.01000000.00000011.sdmp, Offset: 67540000, based on PE: true

Associated: 00000010.00000002.2463980469.0000000067540000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464120924.000000006754B000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464168986.0000000067551000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464214723.0000000067552000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464256525.0000000067553000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_67540000_javaw.jbxd

Similarity

API ID: CriticalCurrentSectionThread_vsnprintffflushfprintfwcslenwcsncpy$CompletionEnterLeaveQueuedStatus
String ID: Error watching dir %s : %d$GetQueuedCompletionStatus returned an error$mainLoop : ignoring event for watch id %d, no longer in wid2WatchData map$mainLoop exits
API String ID: 4236803813-3465038132
Opcode ID: 7c2d1cf057d68bd8747d6c84fde3d095c4d63af5f3ef8f1a85e6e468b5b07912
Instruction ID: e0f06bc33f802c8211819fd374156dd7b85e7ccd0eab07eb292a9cdade15bd0b
Opcode Fuzzy Hash: 7c2d1cf057d68bd8747d6c84fde3d095c4d63af5f3ef8f1a85e6e468b5b07912
Instruction Fuzzy Hash: 57A10571904329DBEB20DF24CC88A8AF7B5BF48320F1082D6D618A7256D7359ED5CF91

Uniqueness

Uniqueness Score: -1.00%

Function 6A3B923D Relevance: 15.1, APIs: 10, Instructions: 70COMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 6A3B9253

Part of subcall function 6A3B8DB7: HeapFree.KERNEL32(00000000,00000000,?,6A3BD5FC,?,00000000,?,00000000,?,6A3BD623,?,00000007,?,?,6A3BBA34,?), ref: 6A3B8DCD
Part of subcall function 6A3B8DB7: GetLastError.KERNEL32(?,?,6A3BD5FC,?,00000000,?,00000000,?,6A3BD623,?,00000007,?,?,6A3BBA34,?,?), ref: 6A3B8DDF

_free.LIBCMT ref: 6A3B925F
_free.LIBCMT ref: 6A3B926A
_free.LIBCMT ref: 6A3B9275
_free.LIBCMT ref: 6A3B9280
_free.LIBCMT ref: 6A3B928B
_free.LIBCMT ref: 6A3B9296
_free.LIBCMT ref: 6A3B92A1
_free.LIBCMT ref: 6A3B92AC
_free.LIBCMT ref: 6A3B92BA

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 1057cd2fff852bc3690e01fc87e919eee1e5a064755d6443dc640e1a868f54ce
Instruction ID: 8dd1f6644d8c09b82956c975d759892ba7642dc483ef4f2eb1df59f873f20c04
Opcode Fuzzy Hash: 1057cd2fff852bc3690e01fc87e919eee1e5a064755d6443dc640e1a868f54ce
Instruction Fuzzy Hash: A9217C76900209EFCF41DF98C884DDD7BB9BF68354F0141AAF5559BA21EB31DA54CB80

Uniqueness

Uniqueness Score: -1.00%

Function 67541938 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 119COMMON

Download Yara Rule

APIs

Part of subcall function 675412B4: _vsnprintf.MSVCRT ref: 675412DF
Part of subcall function 675412B4: GetCurrentThreadId.KERNEL32 ref: 675412F0
Part of subcall function 675412B4: fprintf.MSVCRT ref: 67541309
Part of subcall function 675412B4: fflush.MSVCRT ref: 67541362

SetEvent.KERNEL32(67541B93), ref: 675419A1
PostQueuedCompletionStatus.KERNEL32(?,05F5E0FE,00000000,00000000,67541B93), ref: 675419B8
CloseHandle.KERNEL32(?,?,05F5E0FE,00000000,00000000,67541B93), ref: 675419CC
CloseHandle.KERNEL32(?,?,05F5E0FE,00000000,00000000,67541B93), ref: 675419E7
CloseHandle.KERNEL32(?,?,05F5E0FE,00000000,00000000,67541B93), ref: 675419FC
DeleteCriticalSection.KERNEL32(?,?,?,05F5E0FE,00000000,00000000,67541B93), ref: 67541A0B

Strings

+Win32FSHook destructor, xrefs: 67541980
-Win32FSHook destructor, xrefs: 67541A10

Memory Dump Source

Source File: 00000010.00000002.2464023360.0000000067541000.00000020.00000001.01000000.00000011.sdmp, Offset: 67540000, based on PE: true

Associated: 00000010.00000002.2463980469.0000000067540000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464120924.000000006754B000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464168986.0000000067551000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464214723.0000000067552000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464256525.0000000067553000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_67540000_javaw.jbxd

Similarity

API ID: CloseHandle$CompletionCriticalCurrentDeleteEventPostQueuedSectionStatusThread_vsnprintffflushfprintf
String ID: +Win32FSHook destructor$-Win32FSHook destructor
API String ID: 922133035-3366854391
Opcode ID: 6f7f7965e5ee1c81710a60a840ca8227e6e9df317ddd33edbbe01de7cef20a51
Instruction ID: 308959d4bb85a29590cf156ba3cf5672df3b05ad6aa5785d8af6252c4be86c4c
Opcode Fuzzy Hash: 6f7f7965e5ee1c81710a60a840ca8227e6e9df317ddd33edbbe01de7cef20a51
Instruction Fuzzy Hash: 7D51E075D002199FDB10DFA9C984B8DFBF5BF88314F10819AE658AB315D730AD918F85

Uniqueness

Uniqueness Score: -1.00%

Function 67541BE2 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 117COMMON

Download Yara Rule

APIs

Part of subcall function 675412B4: _vsnprintf.MSVCRT ref: 675412DF
Part of subcall function 675412B4: GetCurrentThreadId.KERNEL32 ref: 675412F0
Part of subcall function 675412B4: fprintf.MSVCRT ref: 67541309
Part of subcall function 675412B4: fflush.MSVCRT ref: 67541362

SetEvent.KERNEL32(67541E3D), ref: 67541C4B
PostQueuedCompletionStatus.KERNEL32(?,05F5E0FE,00000000,00000000,67541E3D), ref: 67541C62
CloseHandle.KERNEL32(?,?,05F5E0FE,00000000,00000000,67541E3D), ref: 67541C76
CloseHandle.KERNEL32(?,?,05F5E0FE,00000000,00000000,67541E3D), ref: 67541C91
CloseHandle.KERNEL32(?,?,05F5E0FE,00000000,00000000,67541E3D), ref: 67541CA6
DeleteCriticalSection.KERNEL32(?,?,?,05F5E0FE,00000000,00000000,67541E3D), ref: 67541CB5

Strings

+Win32FSHook destructor, xrefs: 67541C2A
-Win32FSHook destructor, xrefs: 67541CBA

Memory Dump Source

Source File: 00000010.00000002.2464023360.0000000067541000.00000020.00000001.01000000.00000011.sdmp, Offset: 67540000, based on PE: true

Associated: 00000010.00000002.2463980469.0000000067540000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464120924.000000006754B000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464168986.0000000067551000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464214723.0000000067552000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464256525.0000000067553000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_67540000_javaw.jbxd

Similarity

API ID: CloseHandle$CompletionCriticalCurrentDeleteEventPostQueuedSectionStatusThread_vsnprintffflushfprintf
String ID: +Win32FSHook destructor$-Win32FSHook destructor
API String ID: 922133035-3366854391
Opcode ID: 39c6e758ef781c7451345d8173f087cb3b5aebc22e51712e736c6958d1798047
Instruction ID: 3e2ad485194393e18a6aa6f558442c2edc2b1b1ef9c97cf3a8d0418870d06454
Opcode Fuzzy Hash: 39c6e758ef781c7451345d8173f087cb3b5aebc22e51712e736c6958d1798047
Instruction Fuzzy Hash: 6751F175D002199FCB20DFA9C984B8DFBF5BF88314F20859AE618AB315D730A9918F85

Uniqueness

Uniqueness Score: -1.00%

Function 67541E80 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 117COMMON

Download Yara Rule

APIs

Part of subcall function 675412B4: _vsnprintf.MSVCRT ref: 675412DF
Part of subcall function 675412B4: GetCurrentThreadId.KERNEL32 ref: 675412F0
Part of subcall function 675412B4: fprintf.MSVCRT ref: 67541309
Part of subcall function 675412B4: fflush.MSVCRT ref: 67541362

SetEvent.KERNEL32(675420DB), ref: 67541EE9
PostQueuedCompletionStatus.KERNEL32(?,05F5E0FE,00000000,00000000,675420DB), ref: 67541F00
CloseHandle.KERNEL32(?,?,05F5E0FE,00000000,00000000,675420DB), ref: 67541F14
CloseHandle.KERNEL32(?,?,05F5E0FE,00000000,00000000,675420DB), ref: 67541F2F
CloseHandle.KERNEL32(?,?,05F5E0FE,00000000,00000000,675420DB), ref: 67541F44
DeleteCriticalSection.KERNEL32(?,?,?,05F5E0FE,00000000,00000000,675420DB), ref: 67541F53

Strings

+Win32FSHook destructor, xrefs: 67541EC8
-Win32FSHook destructor, xrefs: 67541F58

Memory Dump Source

Source File: 00000010.00000002.2464023360.0000000067541000.00000020.00000001.01000000.00000011.sdmp, Offset: 67540000, based on PE: true

Associated: 00000010.00000002.2463980469.0000000067540000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464120924.000000006754B000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464168986.0000000067551000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464214723.0000000067552000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464256525.0000000067553000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_67540000_javaw.jbxd

Similarity

API ID: CloseHandle$CompletionCriticalCurrentDeleteEventPostQueuedSectionStatusThread_vsnprintffflushfprintf
String ID: +Win32FSHook destructor$-Win32FSHook destructor
API String ID: 922133035-3366854391
Opcode ID: 05e541078d86913123f2e88ad4dac600d1ced597c9cd96c73e23f1587b50694b
Instruction ID: fe39e02c22fe8ba049b6a1e7b9f155095f4839813903183710b69194123c58ba
Opcode Fuzzy Hash: 05e541078d86913123f2e88ad4dac600d1ced597c9cd96c73e23f1587b50694b
Instruction Fuzzy Hash: B151CF75D002199FDB10DF99C984B8DFBF5BF88314F20819AE618AB315D730A9818F95

Uniqueness

Uniqueness Score: -1.00%

Function 67541878 Relevance: 14.1, APIs: 3, Strings: 5, Instructions: 75COMMON

Download Yara Rule

APIs

Part of subcall function 675412B4: _vsnprintf.MSVCRT ref: 675412DF
Part of subcall function 675412B4: GetCurrentThreadId.KERNEL32 ref: 675412F0
Part of subcall function 675412B4: fprintf.MSVCRT ref: 67541309
Part of subcall function 675412B4: fflush.MSVCRT ref: 67541362

EnterCriticalSection.KERNEL32(?,?,?,?,?,?,6754448D,?), ref: 67541898
PostQueuedCompletionStatus.KERNEL32(?,05F5E0FD,?,00000000,?,?,?,?,?,?,6754448D,?), ref: 67541915
LeaveCriticalSection.KERNEL32(?,?,05F5E0FD,?,00000000,?,?,?,?,?,?,6754448D,?), ref: 6754191E

Part of subcall function 675412B4: fopen.MSVCRT ref: 67541335
Part of subcall function 675412B4: GetCurrentThreadId.KERNEL32 ref: 67541346
Part of subcall function 675412B4: fprintf.MSVCRT ref: 67541357

Strings

+remove_watch(%d), xrefs: 67541885
Error deleting watch %d from map, res=%d, xrefs: 675418FD
remove_watch: watch id %d not found, xrefs: 675418B5
Error canceling watch on dir %ls : %d, xrefs: 675418D5
-remove_watch(%d), xrefs: 67541926

Memory Dump Source

Source File: 00000010.00000002.2464023360.0000000067541000.00000020.00000001.01000000.00000011.sdmp, Offset: 67540000, based on PE: true

Associated: 00000010.00000002.2463980469.0000000067540000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464120924.000000006754B000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464168986.0000000067551000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464214723.0000000067552000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464256525.0000000067553000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_67540000_javaw.jbxd

Similarity

API ID: CriticalCurrentSectionThreadfprintf$CompletionEnterLeavePostQueuedStatus_vsnprintffflushfopen
String ID: +remove_watch(%d)$-remove_watch(%d)$Error canceling watch on dir %ls : %d$Error deleting watch %d from map, res=%d$remove_watch: watch id %d not found
API String ID: 2529827844-3035656204
Opcode ID: 9dc0c2f069e2b42233a07cb4af8dbe5d6e2429709e80e61eee8441a79c198203
Instruction ID: f147546a363a31223d5b3db58e2ae085e0dc3bade6a9f6f635622c95e7916309
Opcode Fuzzy Hash: 9dc0c2f069e2b42233a07cb4af8dbe5d6e2429709e80e61eee8441a79c198203
Instruction Fuzzy Hash: 22115173500519BADB00AFA5DC80CDE776DEF8C3247148596FB28DA009EB31EA7187E2

Uniqueness

Uniqueness Score: -1.00%

Function 6C546BFC Relevance: 10.7, APIs: 7, Instructions: 248COMMONLIBRARYCODE

Download Yara Rule

APIs

GetCPInfo.KERNEL32(00000000,00000001,?,7FFFFFFF,?,?,6C546EA0,00000000,00000000,?,00000001,?,?,?,?,00000001), ref: 6C546CA8
MultiByteToWideChar.KERNEL32(00000000,00000009,00000000,00000001,00000000,00000000,?,6C546EA0,00000000,00000000,?,00000001,?,?,?,?), ref: 6C546D2B
MultiByteToWideChar.KERNEL32(00000000,00000001,00000000,00000001,00000000,00000000,?,6C546EA0,00000000,00000000,?,00000001,?,?,?,?), ref: 6C546DA1
MultiByteToWideChar.KERNEL32(00000000,00000009,6C546EA0,00000000,00000000,00000000,?,6C546EA0,00000000,00000000,?,00000001,?,?,?,?), ref: 6C546DB8

Part of subcall function 6C543605: HeapAlloc.KERNEL32(00000000,6C546DF7,00000000,?,6C546DF7,00000000,?,6C546EA0,00000000,00000000,?,00000001,?,?,?,?), ref: 6C543637

MultiByteToWideChar.KERNEL32(00000000,00000001,6C546EA0,00000000,00000000,00000000,?,6C546EA0,00000000,00000000,?,00000001,?,?,?,?), ref: 6C546E1C
__freea.LIBCMT ref: 6C546E47
__freea.LIBCMT ref: 6C546E53

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: ByteCharMultiWide$__freea$AllocHeapInfo
String ID:
API String ID: 2171645-0
Opcode ID: 4bb6156e364a019551b16e5e46203e1706a851aca585cd90f9da5ad8339e8c5c
Instruction ID: 853f316711434e5d5f7f76b8fe6bb07077a6ea5e97892248d8b89cfa57013aae
Opcode Fuzzy Hash: 4bb6156e364a019551b16e5e46203e1706a851aca585cd90f9da5ad8339e8c5c
Instruction Fuzzy Hash: 1B81DF71E0131A9BDF108FA9CC84FDF7BB5EF4A718F258559E914E7A80DF2198448BA0

Uniqueness

Uniqueness Score: -1.00%

Function 6C5480E4 Relevance: 10.7, APIs: 7, Instructions: 162fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetConsoleCP.KERNEL32(00000000,00000001,00000020,?,?,?,?,?,?,?,6C548870,00000008,00000001,00000020,0000002C,?), ref: 6C548126
__fassign.LIBCMT ref: 6C5481A5
__fassign.LIBCMT ref: 6C5481C4
WideCharToMultiByte.KERNEL32(?,00000000,00000001,00000001,00000020,00000005,00000000,00000000), ref: 6C5481F1
WriteFile.KERNEL32(?,00000020,00000000,?,00000000,?,?,?,?,?,?,?,?,?,?,6C548870), ref: 6C548211
WriteFile.KERNEL32(?,00000008,00000001,?,00000000,?,?,?,?,?,?,?,?,?,?,6C548870), ref: 6C54824B

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: FileWrite__fassign$ByteCharConsoleMultiWide
String ID:
API String ID: 1324828854-0
Opcode ID: 0ddc5c61974c954f0ea628cb91a76767361ccbbd45a125b8a0f088bc42692901
Instruction ID: a00c29813c60ef97a0773d130220204effb43e7d8349356efdfe4a9cdc1123c6
Opcode Fuzzy Hash: 0ddc5c61974c954f0ea628cb91a76767361ccbbd45a125b8a0f088bc42692901
Instruction Fuzzy Hash: 06519071A046499FDF04CFA8CC81AEEBBF5EF49314F14852AE565E7241E7309941CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 6A3BCA44 Relevance: 10.7, APIs: 7, Instructions: 162fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetConsoleCP.KERNEL32(00000000,00000001,00000020,?,?,?,?,?,?,?,6A3BD1D0,00000008,00000001,00000020,0000002C,?), ref: 6A3BCA86
__fassign.LIBCMT ref: 6A3BCB05
__fassign.LIBCMT ref: 6A3BCB24
WideCharToMultiByte.KERNEL32(?,00000000,00000001,00000001,00000020,00000005,00000000,00000000), ref: 6A3BCB51
WriteFile.KERNEL32(?,00000020,00000000,?,00000000,?,?,?,?,?,?,?,?,?,?,6A3BD1D0), ref: 6A3BCB71
WriteFile.KERNEL32(?,00000008,00000001,?,00000000,?,?,?,?,?,?,?,?,?,?,6A3BD1D0), ref: 6A3BCBAB

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID: FileWrite__fassign$ByteCharConsoleMultiWide
String ID:
API String ID: 1324828854-0
Opcode ID: b67065ad111161272e8bf791001534b4b5886aa35543e2e295cbac217a3abdec
Instruction ID: 877b16366116003361de96484883f97baf2276b08d5ab7246d64ba127d666a02
Opcode Fuzzy Hash: b67065ad111161272e8bf791001534b4b5886aa35543e2e295cbac217a3abdec
Instruction Fuzzy Hash: AE515A71A00249EFDB10CFA9D885AEEBBF9EF1D300F15416AE556E7641EB30E941CB60

Uniqueness

Uniqueness Score: -1.00%

Function 6C53F6D0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 116COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 6C53F6FB
___except_validate_context_record.LIBVCRUNTIME ref: 6C53F703
__IsNonwritableInCurrentImage.LIBCMT ref: 6C53F777

Part of subcall function 6C54A3A0: __FindPESection.LIBCMT ref: 6C54A3F9

_ValidateLocalCookies.LIBCMT ref: 6C53F7EC
_ValidateLocalCookies.LIBCMT ref: 6C53F817

Strings

csm, xrefs: 6C53F761

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: CookiesLocalValidate$CurrentFindImageNonwritableSection___except_validate_context_record
String ID: csm
API String ID: 138943561-1018135373
Opcode ID: 15d6431ec35a1018a43d413eb348241e85f87abc41dbac0f2d0adfdde7319a06
Instruction ID: 0d3c90f41ecc49dc9687394534ad85c79531dcc199af5b5223f24b1e43c30162
Opcode Fuzzy Hash: 15d6431ec35a1018a43d413eb348241e85f87abc41dbac0f2d0adfdde7319a06
Instruction Fuzzy Hash: 9941A434E00228EBCF00CFA9CC88ADE7BB5EF45328F149295D8189BB51E771D915CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 6A3B72D0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 116COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 6A3B72FB
___except_validate_context_record.LIBVCRUNTIME ref: 6A3B7303
__IsNonwritableInCurrentImage.LIBCMT ref: 6A3B7377

Part of subcall function 6A3BF5F0: __FindPESection.LIBCMT ref: 6A3BF649

_ValidateLocalCookies.LIBCMT ref: 6A3B73EC
_ValidateLocalCookies.LIBCMT ref: 6A3B7417

Strings

csm, xrefs: 6A3B7361

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID: CookiesLocalValidate$CurrentFindImageNonwritableSection___except_validate_context_record
String ID: csm
API String ID: 138943561-1018135373
Opcode ID: 542b3a391213a49418981c0c8a5de75ec966426c24756a11d76254d8db5d7fcf
Instruction ID: 0d0ee3a149018e8c3b264dc4ffb029afb799d5dfccc05dbdd1488dd0c8766cf2
Opcode Fuzzy Hash: 542b3a391213a49418981c0c8a5de75ec966426c24756a11d76254d8db5d7fcf
Instruction Fuzzy Hash: 6B419634E01209ABCF00CF68C884A9EBBB6EF55318F158055ED19AB791DF32E905CBD1

Uniqueness

Uniqueness Score: -1.00%

Function 6C5456F1 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 77COMMONLIBRARYCODE

Download Yara Rule

Strings

api-ms-, xrefs: 6C545747
ext-ms-, xrefs: 6C54575B

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID:
String ID: api-ms-$ext-ms-
API String ID: 0-537541572
Opcode ID: cd0623c9de41bdcf0f484b7cfd9cbb56c189c7910f767cfcb7fec438a4ad9e5a
Instruction ID: 79a27e16be69e2942b3b09af29635ad54dd37b4aa3b10e7577f7e38a0fc8b95f
Opcode Fuzzy Hash: cd0623c9de41bdcf0f484b7cfd9cbb56c189c7910f767cfcb7fec438a4ad9e5a
Instruction Fuzzy Hash: 7E210A76A46620EBDB21DA39CC40B4E7778AF467F8F95C630ED15A7A90D630EC0085E4

Uniqueness

Uniqueness Score: -1.00%

Function 6A3BA733 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 77COMMONLIBRARYCODE

Download Yara Rule

Strings

ext-ms-, xrefs: 6A3BA79D
api-ms-, xrefs: 6A3BA789

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID:
String ID: api-ms-$ext-ms-
API String ID: 0-537541572
Opcode ID: d2416194c9f2ed30f30989de1ac71b8c1921299467a888911110614737222b32
Instruction ID: 0af7efa4cb9528853a1fa63799b8ea85a21170b71dd963d5c361186980d1ac1a
Opcode Fuzzy Hash: d2416194c9f2ed30f30989de1ac71b8c1921299467a888911110614737222b32
Instruction Fuzzy Hash: F8210D71D49A25BBDB215AE88C86B5A77BEAF16760F110111ED15E7B80EF31ED00C5F0

Uniqueness

Uniqueness Score: -1.00%

Function 6A3B1CDE Relevance: 10.6, APIs: 7, Instructions: 73memoryCOMMON

Download Yara Rule

APIs

GdipGetPenFillType.GDIPLUS(?,?,?,?,?,?,6A3B3ED1), ref: 6A3B1CEC
GdipAlloc.GDIPLUS(0000000C,?,?,?,?,?,?,6A3B3ED1), ref: 6A3B1D1B
GdipAlloc.GDIPLUS(0000000C,?,?,?,?,?,?,6A3B3ED1), ref: 6A3B1D2E
GdipGetPenBrushFill.GDIPLUS(?,?,0000000C,?,?,?,?,?,?,6A3B3ED1), ref: 6A3B1D89

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID: Gdip$AllocFill$BrushType
String ID:
API String ID: 3372051197-0
Opcode ID: 9c00260b0fe21f08f5b4172d63ed64153307ca85b382221d17ee901e3791bda6
Instruction ID: 42e14eb1b79fdc885add43655afad34da81eb0ecc2189c8c11c475d5ac8fa99b
Opcode Fuzzy Hash: 9c00260b0fe21f08f5b4172d63ed64153307ca85b382221d17ee901e3791bda6
Instruction Fuzzy Hash: 78117276900701AAF7116F74CA09B75B7ABAF22684F02425DEC25DBA65EF32D900C771

Uniqueness

Uniqueness Score: -1.00%

Function 6A3BD60A Relevance: 10.6, APIs: 7, Instructions: 65COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 6A3BD5D2: _free.LIBCMT ref: 6A3BD5F7

_free.LIBCMT ref: 6A3BD658

Part of subcall function 6A3B8DB7: HeapFree.KERNEL32(00000000,00000000,?,6A3BD5FC,?,00000000,?,00000000,?,6A3BD623,?,00000007,?,?,6A3BBA34,?), ref: 6A3B8DCD
Part of subcall function 6A3B8DB7: GetLastError.KERNEL32(?,?,6A3BD5FC,?,00000000,?,00000000,?,6A3BD623,?,00000007,?,?,6A3BBA34,?,?), ref: 6A3B8DDF

_free.LIBCMT ref: 6A3BD663
_free.LIBCMT ref: 6A3BD66E
_free.LIBCMT ref: 6A3BD6C2
_free.LIBCMT ref: 6A3BD6CD
_free.LIBCMT ref: 6A3BD6D8
_free.LIBCMT ref: 6A3BD6E3

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 9ed6174ca8ec3634e4611ac5419cd5672eec73905e376dd65f93abc2f12e33d3
Instruction ID: c12637925d0a9cad0ceeba6a1eddc9a5a16617ae6dc6ac80e0b6c9692ab467a9
Opcode Fuzzy Hash: 9ed6174ca8ec3634e4611ac5419cd5672eec73905e376dd65f93abc2f12e33d3
Instruction Fuzzy Hash: 8B114731541B08BBD621EBB0CC09FCB77DAAF20748F82481AE2DAA6852DF35E515C660

Uniqueness

Uniqueness Score: -1.00%

Function 675444A2 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 47windowCOMMON

Download Yara Rule

APIs

FormatMessageW.KERNEL32(00001300,00000000,?,00000000,?,00000000,6754C880,?,?,?,?,6754455E,?,?,00000400), ref: 675444F6
_snwprintf.MSVCRT ref: 67544508
wcslen.MSVCRT ref: 6754450E
LocalFree.KERNEL32(?,?,?,6754455E,?,?,00000400), ref: 67544525

Part of subcall function 675411CC: InitializeCriticalSection.KERNEL32(00000018,?,?,?,?,67544247,6754C870), ref: 675411FB

Part of subcall function 67541030: __dllonexit.MSVCRT ref: 6754104C

Strings

Error %d : %s, xrefs: 675444FF
^ETg, xrefs: 67544504

Memory Dump Source

Source File: 00000010.00000002.2464023360.0000000067541000.00000020.00000001.01000000.00000011.sdmp, Offset: 67540000, based on PE: true

Associated: 00000010.00000002.2463980469.0000000067540000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464120924.000000006754B000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464168986.0000000067551000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464214723.0000000067552000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464256525.0000000067553000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_67540000_javaw.jbxd

Similarity

API ID: CriticalFormatFreeInitializeLocalMessageSection__dllonexit_snwprintfwcslen
String ID: Error %d : %s$^ETg
API String ID: 825753020-1722840446
Opcode ID: 28bc843eb8d70f49070811c2620a7b75b9a506a12aeec2c57da3b827cd5504b5
Instruction ID: 0e516ce06ec8a374858145693a6a77b8cb454e0177c62426493d5d9c7480390f
Opcode Fuzzy Hash: 28bc843eb8d70f49070811c2620a7b75b9a506a12aeec2c57da3b827cd5504b5
Instruction Fuzzy Hash: FB01A271945248BAEF10BFE08C41FDE7BA8AF8D358F1049C4F748A6448D776692487B7

Uniqueness

Uniqueness Score: -1.00%

Function 6C547991 Relevance: 9.2, APIs: 6, Instructions: 197COMMONLIBRARYCODE

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(00000001,00000000,?,?,00000000,00000000,00000001,7FFFFFFF,?,?,?,?,6C547BAB,00000001,00000001,00000000), ref: 6C5479EB
MultiByteToWideChar.KERNEL32(00000001,00000001,?,?,00000000,00000000,?,?,?,6C547BAB,00000001,00000001,00000000,?,?,?), ref: 6C547A54
WideCharToMultiByte.KERNEL32(00000001,00000000,00000000,00000000,?,00000000,00000000,00000000,?,?,00000000,?,00000000,00000000,00000000,00000000), ref: 6C547B34
__freea.LIBCMT ref: 6C547B41

Part of subcall function 6C543605: HeapAlloc.KERNEL32(00000000,6C546DF7,00000000,?,6C546DF7,00000000,?,6C546EA0,00000000,00000000,?,00000001,?,?,?,?), ref: 6C543637

__freea.LIBCMT ref: 6C547B4A
__freea.LIBCMT ref: 6C547B6F

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: ByteCharMultiWide__freea$AllocHeap
String ID:
API String ID: 3147120248-0
Opcode ID: 4cd9b59a6525afadd7e0a8e72c2ec2b43b4b00703907fd832482e847b2928681
Instruction ID: 03b69186139c04c43ae5de96738f2cefdce9b684383d17fb5e9ecb3a2e07640e
Opcode Fuzzy Hash: 4cd9b59a6525afadd7e0a8e72c2ec2b43b4b00703907fd832482e847b2928681
Instruction Fuzzy Hash: 0251E372601206AFEF118F65CC44EAB7BB9EF85798F258569FD14D7A40EB30DC10D6A0

Uniqueness

Uniqueness Score: -1.00%

Function 6A3BC2F1 Relevance: 9.2, APIs: 6, Instructions: 197COMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(?,00000000,?,?,00000000,00000000,00000100,6A3BA4AE,00000000,?,?,?,6A3BC50B,?,?,00000100), ref: 6A3BC34B
MultiByteToWideChar.KERNEL32(?,00000001,?,?,00000000,00000000,?,?,?,6A3BC50B,?,?,00000100,5EFC4D8B,?,?), ref: 6A3BC3B4
WideCharToMultiByte.KERNEL32(?,00000000,00000000,00000000,5EFC4D8B,00000100,00000000,00000000,?,?,00000000,?,00000000,00000000,00000000,00000000), ref: 6A3BC494
__freea.LIBCMT ref: 6A3BC4A1

Part of subcall function 6A3B8DF1: HeapAlloc.KERNEL32(00000000,?,?,?,6A3B6198,?,?,6A3B23D9,00000018), ref: 6A3B8E23

__freea.LIBCMT ref: 6A3BC4AA
__freea.LIBCMT ref: 6A3BC4CF

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID: ByteCharMultiWide__freea$AllocHeap
String ID:
API String ID: 3147120248-0
Opcode ID: d196bf017f4e0c00d7b5f3711b49cc93bf3ee0b9d55c498385251030166f445a
Instruction ID: e4a98e3dc85b21e8e88ea3600a0f72f900001878aa00e3ef762900aa1eb52c43
Opcode Fuzzy Hash: d196bf017f4e0c00d7b5f3711b49cc93bf3ee0b9d55c498385251030166f445a
Instruction Fuzzy Hash: 1F519272600216AFEB328E54CC46EBB37ABEFA9764F124119FD19D6940DF35ED10C660

Uniqueness

Uniqueness Score: -1.00%

Function 6C53E709 Relevance: 9.1, APIs: 6, Instructions: 126COMMON

Download Yara Rule

APIs

__RTC_Initialize.LIBCMT ref: 6C53E747
___scrt_uninitialize_crt.LIBCMT ref: 6C53E764

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: Initialize___scrt_uninitialize_crt
String ID:
API String ID: 2442719207-0
Opcode ID: ce26f2e17aa08df83622afa01dc51995d822d1f5ffc152fcd8c9074f2831fa06
Instruction ID: 0d79af370f2998f8edcc3ead3fff05c06f26f92324053ca2f58d0ce7b3719154
Opcode Fuzzy Hash: ce26f2e17aa08df83622afa01dc51995d822d1f5ffc152fcd8c9074f2831fa06
Instruction Fuzzy Hash: 2341C131E00279EBDF219F64CC04A9E77F5AB85758F009518E80C67B80F7B08D468BE0

Uniqueness

Uniqueness Score: -1.00%

Function 67548720 Relevance: 9.1, APIs: 6, Instructions: 95COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,00000000,67545CA4,?,67546993), ref: 675487F3
TlsGetValue.KERNEL32(?,?,?,00000000,67545CA4,?,67546993), ref: 675487FE
SetLastError.KERNEL32(?,?,?,?,00000000,67545CA4,?,67546993), ref: 6754880C

Memory Dump Source

Source File: 00000010.00000002.2464023360.0000000067541000.00000020.00000001.01000000.00000011.sdmp, Offset: 67540000, based on PE: true

Associated: 00000010.00000002.2463980469.0000000067540000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464120924.000000006754B000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464168986.0000000067551000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464214723.0000000067552000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464256525.0000000067553000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_67540000_javaw.jbxd

Similarity

API ID: ErrorLast$Value
String ID:
API String ID: 1883355122-0
Opcode ID: 74e8b606246296f807b77a29f79b88a2b49b1767411d13208b9747e9659e74a8
Instruction ID: 18d8b83ee79b24c3a2c74b616ca925ac33419d363441a31c3bc49027dd6f95d3
Opcode Fuzzy Hash: 74e8b606246296f807b77a29f79b88a2b49b1767411d13208b9747e9659e74a8
Instruction Fuzzy Hash: 823136B4A113158FEB00EF75C584A8AB7B5BF8D724B024999DA08AB309D731FC45CBD2

Uniqueness

Uniqueness Score: -1.00%

Function 67548880 Relevance: 9.1, APIs: 6, Instructions: 88COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,67545C82,?,?,?,?,?,67546A43), ref: 6754892A
TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,67545C82,?,?,?,?,?,67546A43), ref: 67548935
SetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,67545C82), ref: 67548943
TlsSetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,67545C82), ref: 6754895D
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,67545C82), ref: 6754896A
abort.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,67545C82), ref: 6754899F

Memory Dump Source

Source File: 00000010.00000002.2464023360.0000000067541000.00000020.00000001.01000000.00000011.sdmp, Offset: 67540000, based on PE: true

Associated: 00000010.00000002.2463980469.0000000067540000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464120924.000000006754B000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464168986.0000000067551000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464214723.0000000067552000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464256525.0000000067553000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_67540000_javaw.jbxd

Similarity

API ID: ErrorLast$Value$abort
String ID:
API String ID: 2626461348-0
Opcode ID: f117cc7ddf5047731184a09705d7b80eb18c013e6fd28ef6a2441cefd3fa42d1
Instruction ID: 3a8b90aa3091b428c12cb2de3993d3887ca5efa2dcb117edad7612dfb4917796
Opcode Fuzzy Hash: f117cc7ddf5047731184a09705d7b80eb18c013e6fd28ef6a2441cefd3fa42d1
Instruction Fuzzy Hash: 0D3115B0A047058FEB04EF69C58099AB7B4BB89714B0249D9D948AB709D730BD40CBD3

Uniqueness

Uniqueness Score: -1.00%

Function 67548060 Relevance: 9.1, APIs: 4, Strings: 2, Instructions: 65COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,?,6754422C,?), ref: 675480E3
TlsGetValue.KERNEL32(?,?,?,?,6754422C,?), ref: 675480EE
SetLastError.KERNEL32(?,?,?,?,?,6754422C,?), ref: 675480FC
TlsSetValue.KERNEL32(?,?,?,?,?,?,6754422C,?), ref: 67548116

Strings

,BTg, xrefs: 67548069
,BTg, xrefs: 67548095, 6754812A

Memory Dump Source

Source File: 00000010.00000002.2464023360.0000000067541000.00000020.00000001.01000000.00000011.sdmp, Offset: 67540000, based on PE: true

Associated: 00000010.00000002.2463980469.0000000067540000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464120924.000000006754B000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464168986.0000000067551000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464214723.0000000067552000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464256525.0000000067553000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_67540000_javaw.jbxd

Similarity

API ID: ErrorLastValue
String ID: ,BTg$,BTg
API String ID: 1151882462-2342911624
Opcode ID: 7dbdc3888a2f30f37e37ca452c003f304f992412bdef25f6382022a40426a1b0
Instruction ID: 1b96820bdb3cd2361f6d6830cff2f7a21b6c10445b2e0313e05486b91c1688ec
Opcode Fuzzy Hash: 7dbdc3888a2f30f37e37ca452c003f304f992412bdef25f6382022a40426a1b0
Instruction Fuzzy Hash: 8321E2B5A1030A9BEB00DF69C48569AB7F0BF89314F124599D948A7304D735B991CBC2

Uniqueness

Uniqueness Score: -1.00%

Function 6A3B98AA Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 199COMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 6A3B9A32

Strings

*?, xrefs: 6A3B98EB
., xrefs: 6A3B9C37

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID: _free
String ID: *?$.
API String ID: 269201875-3972193922
Opcode ID: 72ea377bd20388bcbbb9c7987fa9dfe931686edbcf45609450f1adc41f8f644d
Instruction ID: 6f27f2472b4a5f5d78991ad6a414c86c6a2d4b22bacf52952b7c0dd89cc5ca2d
Opcode Fuzzy Hash: 72ea377bd20388bcbbb9c7987fa9dfe931686edbcf45609450f1adc41f8f644d
Instruction Fuzzy Hash: 7B612876D04219AFDB14CFA8C8814EDFBF6EF68314F2541AAD855A7700DB32EA418B90

Uniqueness

Uniqueness Score: -1.00%

Function 6A3B84C1 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 123COMMON

Download Yara Rule

Strings

C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe, xrefs: 6A3B8504, 6A3B850B, 6A3B853F
PE, xrefs: 6A3B8513

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID:
String ID: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe$PE
API String ID: 0-528247127
Opcode ID: c5133d7fb1f315ce809f8ad07c565c7d9b007fdbc0c86df36fa617c1f1770701
Instruction ID: 7f56ee72d2db39b8eb9a2c50d1920f07adc9b7e77b219fa319e2f114a571e517
Opcode Fuzzy Hash: c5133d7fb1f315ce809f8ad07c565c7d9b007fdbc0c86df36fa617c1f1770701
Instruction Fuzzy Hash: 79416FB1A4425AEFDB11CF998C8499EBBFEEBA6310F11006BE845D7600DF71DA40CB60

Uniqueness

Uniqueness Score: -1.00%

Function 6C511D46 Relevance: 8.9, APIs: 2, Strings: 3, Instructions: 119libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(uxtheme.dll), ref: 6C511DE8
GetProcAddress.KERNEL32(00000000,BeginBufferedPaint), ref: 6C511DF8

Strings

uxtheme.dll, xrefs: 6C511DE3
pYyt, xrefs: 6C511DFE, 6C511E05, 6C511E16
BeginBufferedPaint, xrefs: 6C511DF2

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: BeginBufferedPaint$pYyt$uxtheme.dll
API String ID: 2574300362-1399853563
Opcode ID: 360e9f40bc8cdae54f27f2279a3810fa6180b03bb3d9fa9759fac2877f0e9cf6
Instruction ID: c8c3f1759eb58185038b09765dc477ab5a91d2c1728a883a71ab891e4155917d
Opcode Fuzzy Hash: 360e9f40bc8cdae54f27f2279a3810fa6180b03bb3d9fa9759fac2877f0e9cf6
Instruction Fuzzy Hash: 85416D71609305ABE700DFA5CC88F6BBBF9EFD5648F50092DF95482A00EB71D905CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 675478E0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 80memoryCOMMON

Download Yara Rule

APIs

VirtualQuery.KERNEL32 ref: 67547918
VirtualProtect.KERNEL32 ref: 6754794D
memcpy.MSVCRT ref: 67547960
VirtualProtect.KERNEL32 ref: 6754798D

Part of subcall function 67547890: fwrite.MSVCRT ref: 675478C3
Part of subcall function 67547890: vfprintf.MSVCRT ref: 675478D6
Part of subcall function 67547890: abort.MSVCRT(?,?,?,?,?,?,675479B2), ref: 675478DB

Strings

@, xrefs: 6754793B

Memory Dump Source

Source File: 00000010.00000002.2464023360.0000000067541000.00000020.00000001.01000000.00000011.sdmp, Offset: 67540000, based on PE: true

Associated: 00000010.00000002.2463980469.0000000067540000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464120924.000000006754B000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464168986.0000000067551000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464214723.0000000067552000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464256525.0000000067553000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_67540000_javaw.jbxd

Similarity

API ID: Virtual$Protect$Queryabortfwritememcpyvfprintf
String ID: @
API String ID: 1199066469-2766056989
Opcode ID: 17920b34b677fb446adcda5d7024efcf2be3785e80ff0e41a0eb05a53becef3f
Instruction ID: e489aebc63f3f074d05c4cb58cc54ab05fb5fbba7a16c077d5e88df94d44ed3d
Opcode Fuzzy Hash: 17920b34b677fb446adcda5d7024efcf2be3785e80ff0e41a0eb05a53becef3f
Instruction Fuzzy Hash: C13195B5D05309ABEB00DFA9C58069DFBF4EB88314F50889EE998E7315D334A945CB92

Uniqueness

Uniqueness Score: -1.00%

Function 67547C40 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 62COMMON

Download Yara Rule

APIs

GetAtomNameA.KERNEL32 ref: 67547C5F
_assert.MSVCRT ref: 67547CCE
FindAtomA.KERNEL32 ref: 67547D87
malloc.MSVCRT ref: 67547DA2
memset.MSVCRT ref: 67547DC3

Strings

AAAA, xrefs: 67547CE3
../../gcc-3.4.5/gcc/config/i386/w32-shared-ptr.c, xrefs: 67547CA3, 67547CC1

Memory Dump Source

Source File: 00000010.00000002.2464023360.0000000067541000.00000020.00000001.01000000.00000011.sdmp, Offset: 67540000, based on PE: true

Associated: 00000010.00000002.2463980469.0000000067540000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464120924.000000006754B000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464168986.0000000067551000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464214723.0000000067552000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464256525.0000000067553000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_67540000_javaw.jbxd

Similarity

API ID: Atom$FindName_assertmallocmemset
String ID: ../../gcc-3.4.5/gcc/config/i386/w32-shared-ptr.c$AAAA
API String ID: 1376756837-4207002825
Opcode ID: ac722f56378e21de524e53b08d0517b093bca38b5d913c604ce5d2a616b54820
Instruction ID: 1d80a124a368855d676bfe3ef574a457687578964f480b5d73fddbfcafb16b8d
Opcode Fuzzy Hash: ac722f56378e21de524e53b08d0517b093bca38b5d913c604ce5d2a616b54820
Instruction Fuzzy Hash: BF1104B0A08345EBDB209F69C08479EBFF5EBC9324F008CBED6484B64DD27598459B87

Uniqueness

Uniqueness Score: -1.00%

Function 675416DA Relevance: 8.8, APIs: 2, Strings: 3, Instructions: 44COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 675416F1
ReadDirectoryChangesW.KERNEL32(?,?,00002004,?,00000000,?,675422C0,00000000,67542272,?,?,?,?,?,?,?), ref: 6754171E

Strings

+add_watch(%ls), xrefs: 675416DD
r"Tg, xrefs: 67541733, 67541727
r"Tg, xrefs: 675416DF

Memory Dump Source

Source File: 00000010.00000002.2464023360.0000000067541000.00000020.00000001.01000000.00000011.sdmp, Offset: 67540000, based on PE: true

Associated: 00000010.00000002.2463980469.0000000067540000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464120924.000000006754B000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464168986.0000000067551000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464214723.0000000067552000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464256525.0000000067553000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_67540000_javaw.jbxd

Similarity

API ID: ChangesDirectoryReadmemset
String ID: +add_watch(%ls)$r"Tg$r"Tg
API String ID: 3579477209-3751632301
Opcode ID: bbe4212798d9fb1038f871276f0c43dc98f5fe52313e4b91399288b3ca40d326
Instruction ID: 2a61a88186bc96b666c9b9e73b75804bd3bee866acc9a5bf17fd56d3c6359db5
Opcode Fuzzy Hash: bbe4212798d9fb1038f871276f0c43dc98f5fe52313e4b91399288b3ca40d326
Instruction Fuzzy Hash: A4F062326002147AEF548E55DC81ED777ACEB48725F4040A2EF04DA04AD335E636D7E2

Uniqueness

Uniqueness Score: -1.00%

Function 6C542BDB Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 38libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,?,?,?,6C542B8C,?,?,6C542B54,00000001,00000000), ref: 6C542BFB
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 6C542C0E
FreeLibrary.KERNEL32(00000000,?,?,?,6C542B8C,?,?,6C542B54,00000001,00000000), ref: 6C542C31

Strings

CorExitProcess, xrefs: 6C542C06
mscoree.dll, xrefs: 6C542BF4

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: 732a7394eddbe8690ea89af39edb491cab6c2c407e3a1cdf7378e1fd19c43780
Instruction ID: f5c6701dfaf71afebf498ef37fcae23a63e47f2977694797290212bdacc1f925
Opcode Fuzzy Hash: 732a7394eddbe8690ea89af39edb491cab6c2c407e3a1cdf7378e1fd19c43780
Instruction Fuzzy Hash: DDF06230A11518BBDF05AFA5CD08BAEBFB9EF59719F5181A4F805E2650DB308A44CAA4

Uniqueness

Uniqueness Score: -1.00%

Function 6A3B841D Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 38libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,?,?,?,6A3B83CE,?,?,6A3B8396,?,00000001), ref: 6A3B843D
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 6A3B8450
FreeLibrary.KERNEL32(00000000,?,?,?,6A3B83CE,?,?,6A3B8396,?,00000001), ref: 6A3B8473

Strings

mscoree.dll, xrefs: 6A3B8436
CorExitProcess, xrefs: 6A3B8448

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: 5c012501fe9c640959a661aa86a0c167501caec5022457bfc35d354d00c9d69f
Instruction ID: 0afbcbac34143ed1f770e08eb03499d3f38fcbae65575ac9baed0af5bb89a827
Opcode Fuzzy Hash: 5c012501fe9c640959a661aa86a0c167501caec5022457bfc35d354d00c9d69f
Instruction Fuzzy Hash: 32F03C35904118BBDB019FA0CC09BEEBFB9EB15315F1141A9E806E2640DF71AD40DAA0

Uniqueness

Uniqueness Score: -1.00%

Function 6A3BA604 Relevance: 7.6, APIs: 5, Instructions: 68COMMON

Download Yara Rule

APIs

GetEnvironmentStringsW.KERNEL32 ref: 6A3BA60D
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 6A3BA630

Part of subcall function 6A3B8DF1: HeapAlloc.KERNEL32(00000000,?,?,?,6A3B6198,?,?,6A3B23D9,00000018), ref: 6A3B8E23

WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,00000000,?,00000000,00000000), ref: 6A3BA656
_free.LIBCMT ref: 6A3BA669
FreeEnvironmentStringsW.KERNEL32(00000000), ref: 6A3BA678

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID: ByteCharEnvironmentMultiStringsWide$AllocFreeHeap_free
String ID:
API String ID: 2278895681-0
Opcode ID: f603496de3ab66ccbd417e2f9c24fdd261ea81450a71f0f9c2e819bcc616ebe5
Instruction ID: bd239e718c589010f041fb3ca44dcaa550668651497579cca4a11ae70508808a
Opcode Fuzzy Hash: f603496de3ab66ccbd417e2f9c24fdd261ea81450a71f0f9c2e819bcc616ebe5
Instruction Fuzzy Hash: 8401D8B7A01A657B2711057A5C8CE7B69AEDAD3E91312011AFC14C3504EE71CD0191B0

Uniqueness

Uniqueness Score: -1.00%

Function 6A3B9383 Relevance: 7.6, APIs: 5, Instructions: 65COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,6A3BCCAD,00000000,00000001,6A3BB36F,?,6A3BD191,00000001,?,?,?,00000008,6A3BB308,?,00000000), ref: 6A3B9387
_free.LIBCMT ref: 6A3B93DE
_free.LIBCMT ref: 6A3B9412
SetLastError.KERNEL32(00000000,?,?,?,00000008,6A3BB308,?,00000000,00000000,6A3C68D8,0000002C,6A3BB36F,?), ref: 6A3B941F
SetLastError.KERNEL32(00000000,0000000D,000000FF,?,6A3BD191,00000001,?,?,?,00000008,6A3BB308,?,00000000,00000000,6A3C68D8,0000002C), ref: 6A3B942B

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID: ErrorLast$_free
String ID:
API String ID: 3170660625-0
Opcode ID: 6cef289aa44189b4b931acfeee6df654302c4a6b7dadfe1c46c273d2d203e481
Instruction ID: 009675543385f01094e8a2b1329e4271a8e984f1dcbdb1da9fd6fe85fdbd37bb
Opcode Fuzzy Hash: 6cef289aa44189b4b931acfeee6df654302c4a6b7dadfe1c46c273d2d203e481
Instruction Fuzzy Hash: 901148319049117BDA015A2C8C09A9B32BFAFB3364B134215FA65D2DC4FF36D801E171

Uniqueness

Uniqueness Score: -1.00%

Function 6C53DE5B Relevance: 7.5, APIs: 5, Instructions: 43timethreadCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32(?), ref: 6C53DE82
GetCurrentProcessId.KERNEL32 ref: 6C53DE91
GetCurrentThreadId.KERNEL32 ref: 6C53DE9A
GetTickCount.KERNEL32 ref: 6C53DEA3
QueryPerformanceCounter.KERNEL32(00000000), ref: 6C53DEB8

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: CurrentTime$CountCounterFilePerformanceProcessQuerySystemThreadTick
String ID:
API String ID: 1445889803-0
Opcode ID: 7074f6fc50ee1cc5a3894864a2cbc7ed81ee16556f216a49647cbf1c6835751a
Instruction ID: e1270519c602a047654ac685b2b140baf942b017558a9b4a2bcf504562a7fcbb
Opcode Fuzzy Hash: 7074f6fc50ee1cc5a3894864a2cbc7ed81ee16556f216a49647cbf1c6835751a
Instruction Fuzzy Hash: C7111771E11208EBCF00EFB9C94869EBBF8FF19315F528896E405E7100E7309A049B55

Uniqueness

Uniqueness Score: -1.00%

Function 6A3BD569 Relevance: 7.5, APIs: 5, Instructions: 40COMMONLIBRARYCODE

Download Yara Rule

APIs

_free.LIBCMT ref: 6A3BD581

Part of subcall function 6A3B8DB7: HeapFree.KERNEL32(00000000,00000000,?,6A3BD5FC,?,00000000,?,00000000,?,6A3BD623,?,00000007,?,?,6A3BBA34,?), ref: 6A3B8DCD
Part of subcall function 6A3B8DB7: GetLastError.KERNEL32(?,?,6A3BD5FC,?,00000000,?,00000000,?,6A3BD623,?,00000007,?,?,6A3BBA34,?,?), ref: 6A3B8DDF

_free.LIBCMT ref: 6A3BD593
_free.LIBCMT ref: 6A3BD5A5
_free.LIBCMT ref: 6A3BD5B7
_free.LIBCMT ref: 6A3BD5C9

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 5aa8cbb94f5d331eefa0e2d516e248f716ce0849db7750bd49d60aee304195bd
Instruction ID: 244783a4bbdbcac6333481300647de32ec62d31490d1000d751387480816fd72
Opcode Fuzzy Hash: 5aa8cbb94f5d331eefa0e2d516e248f716ce0849db7750bd49d60aee304195bd
Instruction Fuzzy Hash: 26F04F71501255DB8A00DA58D984D5A33EFAB35354B96080BF4A9D7E00CF31FC808AA0

Uniqueness

Uniqueness Score: -1.00%

Function 6C54876D Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 193COMMONLIBRARYCODE

Download Yara Rule

Strings

ocTl, xrefs: 6C5488DF, 6C5488E2

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID:
String ID: ocTl
API String ID: 0-2453927955
Opcode ID: 78ddf798e656d0556119725a82ff5fb8c034c9d6822f686992f9fc475be17c1b
Instruction ID: 0758c1abbb87890e6ff55f9653fcfcb1bc51cdf80ca109b8464463f90c3b8060
Opcode Fuzzy Hash: 78ddf798e656d0556119725a82ff5fb8c034c9d6822f686992f9fc475be17c1b
Instruction Fuzzy Hash: D561A171E4050AEEDB01DBA9CC40BDEB7B9EF4A318F008956E510F7A91D731994587A3

Uniqueness

Uniqueness Score: -1.00%

Function 6C544F03 Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 168COMMON

Download Yara Rule

APIs

Part of subcall function 6C544A8E: GetOEMCP.KERNEL32(00000000,6C544D15,?,6C542CBD,6C570880,6C570880,6C542CBD), ref: 6C544AB9

GetACP.KERNEL32(00000000,FFF475FF,?,?,?,6C544D5C,?,00000000,?,?,?,?,?,?,6C570880,6C542CBD), ref: 6C544F72
IsValidCodePage.KERNEL32(-00000030,00000000,FFF475FF,?,?,?,6C544D5C,?,00000000,?,?,?,?,?,?,6C570880), ref: 6C544F84
GetCPInfo.KERNEL32(00000000,\MTl,?,?,6C544D5C,?,00000000,?,?,?,?,?,?,6C570880,6C542CBD), ref: 6C544F97

Strings

\MTl, xrefs: 6C544F92, 6C544F95

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: CodeInfoPageValid
String ID: \MTl
API String ID: 546120528-1108264118
Opcode ID: b725b1de0df1c79dc66c1af117f8f2a0d92431541e76d00d81fe72180d32615b
Instruction ID: 96980ac2e5c720e911fafcb67b9443f985d6532ea2e991f546b915962c6d9b5a
Opcode Fuzzy Hash: b725b1de0df1c79dc66c1af117f8f2a0d92431541e76d00d81fe72180d32615b
Instruction Fuzzy Hash: 28518674A042459FDB21CF36CC806ABBBB5EF41309F64C52ED09A8BA41E7769545CBD0

Uniqueness

Uniqueness Score: -1.00%

Function 6C511A70 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 126libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(shlwapi.dll), ref: 6C511B0C
GetProcAddress.KERNEL32(00000000,AssocQueryStringA), ref: 6C511B1C

Strings

AssocQueryStringA, xrefs: 6C511B16
shlwapi.dll, xrefs: 6C511B07

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: AssocQueryStringA$shlwapi.dll
API String ID: 2574300362-1063146013
Opcode ID: f1cc9364c27018e904199d38b64bc09781388a994def876c285addd3795fcd19
Instruction ID: 2f249147d4f936525c4fa7a2ff00bc30b207269ac37d207831163a85a8827c61
Opcode Fuzzy Hash: f1cc9364c27018e904199d38b64bc09781388a994def876c285addd3795fcd19
Instruction Fuzzy Hash: BC41883120A344AFE7119F90CC4CB6B7BE8FF95349F60086DF591869A0E7B1D981CB66

Uniqueness

Uniqueness Score: -1.00%

Function 6C511BD5 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 126libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(shlwapi.dll), ref: 6C511C71
GetProcAddress.KERNEL32(00000000,AssocQueryStringW), ref: 6C511C81

Strings

AssocQueryStringW, xrefs: 6C511C7B
shlwapi.dll, xrefs: 6C511C6C

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: AssocQueryStringW$shlwapi.dll
API String ID: 2574300362-733752090
Opcode ID: b26887e89a199fe91e12397704f8d16859acd081bb91045ca0e74ed4a6c490f6
Instruction ID: d9ebeb9fe6e3f3629acd6defd9e75ebb68d703faa8a9dae0719d7e3d04af2f04
Opcode Fuzzy Hash: b26887e89a199fe91e12397704f8d16859acd081bb91045ca0e74ed4a6c490f6
Instruction Fuzzy Hash: 9841893120A345AFE7029F90CD8CB6BB7F9EFA5349F20086EF59196950C771D841CB2A

Uniqueness

Uniqueness Score: -1.00%

Function 6C51C14F Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 125libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(shell32.dll), ref: 6C51C1EB
GetProcAddress.KERNEL32(00000000,SHCreateItemInKnownFolder), ref: 6C51C1FB

Strings

SHCreateItemInKnownFolder, xrefs: 6C51C1F5
shell32.dll, xrefs: 6C51C1E6

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: SHCreateItemInKnownFolder$shell32.dll
API String ID: 2574300362-1606858871
Opcode ID: e8d00ae88a84f29019a4f4370d8e02186353d5c1bd4f3637cc94fa9c92557fec
Instruction ID: 100d166f45b2a8c27a23333057148a413e4f3a4d1559e73462975bf4bd6ff900
Opcode Fuzzy Hash: e8d00ae88a84f29019a4f4370d8e02186353d5c1bd4f3637cc94fa9c92557fec
Instruction Fuzzy Hash: 84413B3124A345AFE701AF91CC4CB6A77E9EF89749F20083EF5A146A40C772E941CB66

Uniqueness

Uniqueness Score: -1.00%

Function 6C516E6D Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 122libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(uxtheme.dll), ref: 6C516F0A
GetProcAddress.KERNEL32(00000000,GetThemeTextExtent), ref: 6C516F1A

Strings

uxtheme.dll, xrefs: 6C516F05
GetThemeTextExtent, xrefs: 6C516F14

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: GetThemeTextExtent$uxtheme.dll
API String ID: 2574300362-1064931672
Opcode ID: 6cd6ad8d65ff5747f51f4c6927d2cc0dd40cbc8d8526f8b706a74af932a4fc10
Instruction ID: 46277484d6b2ee0453517925a47a8414b79c476bf57fb61d736b8abdf0876f5e
Opcode Fuzzy Hash: 6cd6ad8d65ff5747f51f4c6927d2cc0dd40cbc8d8526f8b706a74af932a4fc10
Instruction Fuzzy Hash: A2415875619741AFE700DE65CC48E6BB7E8FFC5204F11082DF954C2A04EB76E805CB66

Uniqueness

Uniqueness Score: -1.00%

Function 6C51C035 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 101libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(shell32.dll), ref: 6C51C0AA
GetProcAddress.KERNEL32(00000000,SHCreateItemFromRelativeName), ref: 6C51C0BA

Strings

shell32.dll, xrefs: 6C51C0A5
SHCreateItemFromRelativeName, xrefs: 6C51C0B4

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: SHCreateItemFromRelativeName$shell32.dll
API String ID: 2574300362-4180653408
Opcode ID: 3813c4a1f811ab36a6ab2f60fde4da5de1e273340fee5ce8400d9bcde4df9942
Instruction ID: 6dafd8eec284f0fdc95595595e6abe7fa6bb5cdbd6eb86958691a74cab120d44
Opcode Fuzzy Hash: 3813c4a1f811ab36a6ab2f60fde4da5de1e273340fee5ce8400d9bcde4df9942
Instruction Fuzzy Hash: 1A318B3124A341AFE712AF95CC48F6F77E8EF89309F21083EF59556950C772A941CB26

Uniqueness

Uniqueness Score: -1.00%

Function 6C5157A3 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 100libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(user32.dll), ref: 6C515818
GetProcAddress.KERNEL32(00000000,GetLayeredWindowAttributes), ref: 6C515828

Strings

user32.dll, xrefs: 6C515813
GetLayeredWindowAttributes, xrefs: 6C515822

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: GetLayeredWindowAttributes$user32.dll
API String ID: 2574300362-3600297913
Opcode ID: 0ccc714a415ab8bbf31d1d093abfcb55d90839f0d1537f44815f644d11b09f1f
Instruction ID: 96970d6668869c6d02978a6b4982558535d9e6de1fba2d4f71d7d16f3742b276
Opcode Fuzzy Hash: 0ccc714a415ab8bbf31d1d093abfcb55d90839f0d1537f44815f644d11b09f1f
Instruction Fuzzy Hash: 92319C3120A244AFE7129F94CC4CF5BBBF8EF89348FB1052EF99596941C7718946CB26

Uniqueness

Uniqueness Score: -1.00%

Function 6C513A67 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 98libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(uxtheme.dll), ref: 6C513AE5
GetProcAddress.KERNEL32(00000000,DrawThemeBackground), ref: 6C513AF5

Strings

uxtheme.dll, xrefs: 6C513AE0
DrawThemeBackground, xrefs: 6C513AEF

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: DrawThemeBackground$uxtheme.dll
API String ID: 2574300362-103120828
Opcode ID: 2f2af7b26c972f47e78a78d3a197c889dfe90db2cfb6abeeba2008af111fbe76
Instruction ID: 455d74a87b648a445663be4bde428f55b262949ce4bdc177a887f1f03c04da31
Opcode Fuzzy Hash: 2f2af7b26c972f47e78a78d3a197c889dfe90db2cfb6abeeba2008af111fbe76
Instruction Fuzzy Hash: 8B317E7160A364ABD700DE99DC58E1BBBF8EBC5718F41082DF99593B00E775D908CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 6C513B7D Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 94libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(uxtheme.dll), ref: 6C513BE7
GetProcAddress.KERNEL32(00000000,DrawThemeText), ref: 6C513BF7

Strings

uxtheme.dll, xrefs: 6C513BE2
DrawThemeText, xrefs: 6C513BF1

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: DrawThemeText$uxtheme.dll
API String ID: 2574300362-3017180938
Opcode ID: 21543a8076e001213335ed7d04008bf1112099aeb4c05186b5955575bf704cd5
Instruction ID: c4f91bbb0abbf4dc4a13a6d498938a7adb2b5f9dc7e392b4fa62da846a094c16
Opcode Fuzzy Hash: 21543a8076e001213335ed7d04008bf1112099aeb4c05186b5955575bf704cd5
Instruction Fuzzy Hash: DD318D71209241AFE7019F99CC58EABBBF9EFD5358F10082DF94583A10D7B1D9448B62

Uniqueness

Uniqueness Score: -1.00%

Function 6C539938 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 92libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(oleacc.dll), ref: 6C5399AB
GetProcAddress.KERNEL32(00000000,AccessibleObjectFromWindow), ref: 6C5399BB

Strings

oleacc.dll, xrefs: 6C5399A6
AccessibleObjectFromWindow, xrefs: 6C5399B5

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: AccessibleObjectFromWindow$oleacc.dll
API String ID: 2574300362-3877047211
Opcode ID: 60586a7ab0f973473a9ee211410b10e30ad0bddf9d0642a4431fcea97559f1df
Instruction ID: f3e6380769b4dd1780d8c5376e3bd131257f0708f01c6fd72859baaadd242c37
Opcode Fuzzy Hash: 60586a7ab0f973473a9ee211410b10e30ad0bddf9d0642a4431fcea97559f1df
Instruction Fuzzy Hash: 8331ADB22053659FE700DF69CC84A6BB7F8EFC5608F11592EF85986600EB71D8458BA2

Uniqueness

Uniqueness Score: -1.00%

Function 67544014 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 90COMMON

Download Yara Rule

APIs

Part of subcall function 67545544: free.MSVCRT(FFFFFF08,C7240485,?,?,?,?,00000000,?,675429BA,00000000), ref: 67545554

GetQueuedCompletionStatus.KERNEL32(?,00000000,00000000,00000000,000000FF), ref: 67543E51
wcslen.MSVCRT ref: 67543FBC
wcslen.MSVCRT ref: 67543FD0
wcsncpy.MSVCRT ref: 6754405D
wcsncpy.MSVCRT ref: 67544090

Part of subcall function 67543D32: EnterCriticalSection.KERNEL32(?,?,?,675440C8,?), ref: 67543D3D
Part of subcall function 67543D32: LeaveCriticalSection.KERNEL32(?,?,?,?,675440C8,?), ref: 67543D73
Part of subcall function 67543D32: SetEvent.KERNEL32(?,?,?,?,?,675440C8,?), ref: 67543D7B

Strings

Error watching dir %s : %d, xrefs: 67544104

Memory Dump Source

Source File: 00000010.00000002.2464023360.0000000067541000.00000020.00000001.01000000.00000011.sdmp, Offset: 67540000, based on PE: true

Associated: 00000010.00000002.2463980469.0000000067540000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464120924.000000006754B000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464168986.0000000067551000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464214723.0000000067552000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464256525.0000000067553000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_67540000_javaw.jbxd

Similarity

API ID: CriticalSectionwcslenwcsncpy$CompletionEnterEventLeaveQueuedStatusfree
String ID: Error watching dir %s : %d
API String ID: 3044158944-610355264
Opcode ID: bb9e6008b0c9052517db749a6b0f867e5cd2250c7ea2558e11d180c3ae599b0e
Instruction ID: 39ac053065664b159bf73437af0af640c97412f40ac4c0377c2a0d83b9e00575
Opcode Fuzzy Hash: bb9e6008b0c9052517db749a6b0f867e5cd2250c7ea2558e11d180c3ae599b0e
Instruction Fuzzy Hash: D9410A7190432ADBEF20DF14DC8898AF7B5AF58320F1483D2D528A62A6D7319E95CF91

Uniqueness

Uniqueness Score: -1.00%

Function 6C516D96 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 75libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(uxtheme.dll), ref: 6C516DEF
GetProcAddress.KERNEL32(00000000,GetThemePartSize), ref: 6C516DFF

Strings

uxtheme.dll, xrefs: 6C516DEA
GetThemePartSize, xrefs: 6C516DF9

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: GetThemePartSize$uxtheme.dll
API String ID: 2574300362-3456411065
Opcode ID: 80b52ab035d5b47242cba897dc387ca1d9fda8917616e4b2e99fcd4cbfd3372d
Instruction ID: f821b94846c89cb42e8c8d2266a7c19069c4f676f749c1c76fc269bb131c5ba2
Opcode Fuzzy Hash: 80b52ab035d5b47242cba897dc387ca1d9fda8917616e4b2e99fcd4cbfd3372d
Instruction Fuzzy Hash: D721A1316083109FE7119FA5CC48A2BB7F5EBC9714F014A2DB954C2600DB72DC088BA2

Uniqueness

Uniqueness Score: -1.00%

Function 6C513E4E Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 68libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(user32.dll), ref: 6C513EA1
GetProcAddress.KERNEL32(00000000,EnumDisplayMonitors), ref: 6C513EB1

Strings

user32.dll, xrefs: 6C513E9C
EnumDisplayMonitors, xrefs: 6C513EAB

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: EnumDisplayMonitors$user32.dll
API String ID: 2574300362-2459821190
Opcode ID: b45282b33a2dcc8549c0159cbbd3ab0cf6c9be7bb6acd5ee5977dd2c84b5f18b
Instruction ID: 3224224a533b9653af1f12baed4b355ba0053a994b60170437f21bf60aa58974
Opcode Fuzzy Hash: b45282b33a2dcc8549c0159cbbd3ab0cf6c9be7bb6acd5ee5977dd2c84b5f18b
Instruction Fuzzy Hash: B411D531609355AFE701DF698C84E6BBBF8ABC6248F40092AF94583A01D775D949CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 6C5159CB Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 66libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(user32.dll), ref: 6C515A0F
GetProcAddress.KERNEL32(00000000,GetMenuBarInfo), ref: 6C515A1F

Strings

user32.dll, xrefs: 6C515A0A
GetMenuBarInfo, xrefs: 6C515A19

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: GetMenuBarInfo$user32.dll
API String ID: 2574300362-3353899518
Opcode ID: 432002eab56cfca55bb4f9e0c0e9f9a5501db9dd98728b134d2b85b3ef356736
Instruction ID: 9829e37c82762749109d92ad368af298d228ba78c55749f7efb6e252d1525c80
Opcode Fuzzy Hash: 432002eab56cfca55bb4f9e0c0e9f9a5501db9dd98728b134d2b85b3ef356736
Instruction Fuzzy Hash: 42110330645258ABEB01EFA58CC8EAF7BFCEF5A259F814025ED04A2A01D7719C49C7B0

Uniqueness

Uniqueness Score: -1.00%

Function 6C53A135 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 66libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(oleacc.dll), ref: 6C53A181
GetProcAddress.KERNEL32(00000000,LresultFromObject), ref: 6C53A191

Strings

oleacc.dll, xrefs: 6C53A17C
LresultFromObject, xrefs: 6C53A18B

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: LresultFromObject$oleacc.dll
API String ID: 2574300362-136597311
Opcode ID: 68cc808a43374b14fe03e41ad23286795cfc12862f9767c64ec59a359b4eba84
Instruction ID: daca373121339af9e84208110a46d31fdbfbb8a62b34699a02cddfcdd937cd40
Opcode Fuzzy Hash: 68cc808a43374b14fe03e41ad23286795cfc12862f9767c64ec59a359b4eba84
Instruction Fuzzy Hash: 8911B272606760AF9B01DB988C40A1B77F8ABC9B28B01152EF81D93604F771D904C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 6C515E99 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 64libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(user32.dll), ref: 6C515EE4
GetProcAddress.KERNEL32(00000000,GetMonitorInfoA), ref: 6C515EF4

Strings

user32.dll, xrefs: 6C515EDF
GetMonitorInfoA, xrefs: 6C515EEE

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: GetMonitorInfoA$user32.dll
API String ID: 2574300362-48335910
Opcode ID: 9fa534f52bcf95829fafcc3058d08d420bcabfbae5e6795941fd9c790ef87473
Instruction ID: 693378e6397d6c435a9064c62ae527be185416528afc7f0deb18253529ff63e3
Opcode Fuzzy Hash: 9fa534f52bcf95829fafcc3058d08d420bcabfbae5e6795941fd9c790ef87473
Instruction Fuzzy Hash: A111E6B1A0D2049FF7009B699C84A7BB7F8DB8A608F814519F95483A01D730DC08CB62

Uniqueness

Uniqueness Score: -1.00%

Function 6C515F4F Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 64libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(user32.dll), ref: 6C515F9A
GetProcAddress.KERNEL32(00000000,GetMonitorInfoW), ref: 6C515FAA

Strings

user32.dll, xrefs: 6C515F95
GetMonitorInfoW, xrefs: 6C515FA4

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: GetMonitorInfoW$user32.dll
API String ID: 2574300362-3787768890
Opcode ID: 480763c4c2060da91aedba1f142bda2def77fab69521031651840e470172daa3
Instruction ID: 77d85ebfd05524c0c1e72d366bbd7f81572da1dee30bbff89653399b828bce02
Opcode Fuzzy Hash: 480763c4c2060da91aedba1f142bda2def77fab69521031651840e470172daa3
Instruction Fuzzy Hash: F211B67160A3049FF7009A698D84B7FBBFCAB96618F414929F85483A01E770D80887A2

Uniqueness

Uniqueness Score: -1.00%

Function 6C511996 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 64libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(msimg32.dll), ref: 6C5119CC
GetProcAddress.KERNEL32(00000000,AlphaBlend), ref: 6C5119DC

Strings

msimg32.dll, xrefs: 6C5119C7
AlphaBlend, xrefs: 6C5119D6

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: AlphaBlend$msimg32.dll
API String ID: 2574300362-3639726679
Opcode ID: f120722c00c8821f5ba985bafe471b404d67657f7849eb623e44eb52dd958587
Instruction ID: 4e0193117d5c64d5d31b21b7a950a797f56c0e985f5d30e35b618d7581f33b30
Opcode Fuzzy Hash: f120722c00c8821f5ba985bafe471b404d67657f7849eb623e44eb52dd958587
Instruction Fuzzy Hash: CB11CA3260A259FBEF029E94CC48ADB3FF9FB19358F4101A1FD1496910D732C8A0DBA0

Uniqueness

Uniqueness Score: -1.00%

Function 6C5150CC Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 64libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(user32.dll), ref: 6C515117
GetProcAddress.KERNEL32(00000000,GetComboBoxInfo), ref: 6C515127

Strings

user32.dll, xrefs: 6C515112
GetComboBoxInfo, xrefs: 6C515121

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: GetComboBoxInfo$user32.dll
API String ID: 2574300362-3174150333
Opcode ID: 04fc862781b665402c8b9a69ca905b4c8cef487e920b453834fe355f27a3feee
Instruction ID: 336c7b42ecf8923f0610393076de276e63a338267d8a4a361e069c0e421c3dca
Opcode Fuzzy Hash: 04fc862781b665402c8b9a69ca905b4c8cef487e920b453834fe355f27a3feee
Instruction Fuzzy Hash: 9211BC316493549BE603DE559C48A6BB7F8EB86778F81441AE88083B00D771DC48C7B6

Uniqueness

Uniqueness Score: -1.00%

Function 6C53989C Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 58libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(oleacc.dll), ref: 6C5398CE
GetProcAddress.KERNEL32(00000000,AccessibleChildren), ref: 6C5398DE

Strings

oleacc.dll, xrefs: 6C5398C9
AccessibleChildren, xrefs: 6C5398D8

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: AccessibleChildren$oleacc.dll
API String ID: 2574300362-492510187
Opcode ID: 7229322435f35f16f836833c68e9b711de4f397224736237fa2b4832d0876955
Instruction ID: 245921238fdd5eb8c7b724091a070a59c5ddf23333e10bacde04d53d72ae228c
Opcode Fuzzy Hash: 7229322435f35f16f836833c68e9b711de4f397224736237fa2b4832d0876955
Instruction Fuzzy Hash: 9B117372606725AFC7119E65CC48E17BBB8EBCA758F115529F81997601DB32D401CB60

Uniqueness

Uniqueness Score: -1.00%

Function 6C518479 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 58libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(user32.dll), ref: 6C5184AF
GetProcAddress.KERNEL32(00000000,IsTouchWindow), ref: 6C5184BF

Strings

user32.dll, xrefs: 6C5184AA
IsTouchWindow, xrefs: 6C5184B9

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: IsTouchWindow$user32.dll
API String ID: 2574300362-1895045149
Opcode ID: c71703fd30995f2e9470e961d1c9137c11dc71292074edaa760b8ee2d4886059
Instruction ID: 1464e268fb11f75a219f66d17be90135bea192cb5f2696ac5058652f686adc35
Opcode Fuzzy Hash: c71703fd30995f2e9470e961d1c9137c11dc71292074edaa760b8ee2d4886059
Instruction Fuzzy Hash: 5C11A73160A6557BDB209B5ACC4CF5B7B7CEB4A758F120656F81497A01CB71C400C7A1

Uniqueness

Uniqueness Score: -1.00%

Function 6C5116FC Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 58libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(kernel32.dll), ref: 6C511732
GetProcAddress.KERNEL32(00000000,ActivateActCtx), ref: 6C511742

Strings

ActivateActCtx, xrefs: 6C51173C
kernel32.dll, xrefs: 6C51172D

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: ActivateActCtx$kernel32.dll
API String ID: 2574300362-2082336521
Opcode ID: a5a956f1f5f87d8860e636c9471cc245316b1be839292eb92b651356e4bf4e3f
Instruction ID: 159a4b92e93b63b71e483f5c8b879d20c68363eed07be41f890047c50631572b
Opcode Fuzzy Hash: a5a956f1f5f87d8860e636c9471cc245316b1be839292eb92b651356e4bf4e3f
Instruction Fuzzy Hash: 06110236609614ABEB109B6ACC4CF9BFBBCEB57744F114299E814D7B01C731D801C7A0

Uniqueness

Uniqueness Score: -1.00%

Function 6C51F157 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 57libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(Kernel32.dll), ref: 6C51F18D
GetProcAddress.KERNEL32(00000000,SetDllDirectoryA), ref: 6C51F19D

Strings

SetDllDirectoryA, xrefs: 6C51F197
Kernel32.dll, xrefs: 6C51F188

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: Kernel32.dll$SetDllDirectoryA
API String ID: 2574300362-2718317316
Opcode ID: 0095eb6b5999d2dd1d28f7a8e8ec631b50e0647c9b528b3bf4d57a00d6be7230
Instruction ID: 802ba9a98a5f731efe6d5337b480dee5987fba45e5a07c258597ce29be97453a
Opcode Fuzzy Hash: 0095eb6b5999d2dd1d28f7a8e8ec631b50e0647c9b528b3bf4d57a00d6be7230
Instruction Fuzzy Hash: BB11E532649B64ABEB119B59CC4CF4B7BFCAB8A778F010656AC0497A01C671D402CBB0

Uniqueness

Uniqueness Score: -1.00%

Function 6C51F1EB Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 57libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(Kernel32.dll), ref: 6C51F221
GetProcAddress.KERNEL32(00000000,SetDllDirectoryW), ref: 6C51F231

Strings

SetDllDirectoryW, xrefs: 6C51F22B
Kernel32.dll, xrefs: 6C51F21C

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: Kernel32.dll$SetDllDirectoryW
API String ID: 2574300362-1456639573
Opcode ID: 390475d80db8105aae0704fc720378600a2d39a88cc5b5f9d9396faae1e71ae6
Instruction ID: 7f88d8809f99921e03387084b0aa3f2aa644295075e28c6139d80014562e4e90
Opcode Fuzzy Hash: 390475d80db8105aae0704fc720378600a2d39a88cc5b5f9d9396faae1e71ae6
Instruction Fuzzy Hash: 44112935A09A54ABDB02DB59CC4CF8BBBBC9FC6758F114259AC24C7A01C772C806C7B4

Uniqueness

Uniqueness Score: -1.00%

Function 6C511838 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 56libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(gdi32.dll), ref: 6C51186A
GetProcAddress.KERNEL32(00000000,AddFontResourceExW), ref: 6C51187A

Strings

AddFontResourceExW, xrefs: 6C511874
gdi32.dll, xrefs: 6C511865

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: AddFontResourceExW$gdi32.dll
API String ID: 2574300362-2125477917
Opcode ID: 62ae046c4c4b421ec5bab4cd4894d0a16255eac46b9097b6475c5b5b0aa6964a
Instruction ID: 15d103bbe5a861a2deb50551fd042c6cd314bf3ff8a2d93a73fe4b86258e6789
Opcode Fuzzy Hash: 62ae046c4c4b421ec5bab4cd4894d0a16255eac46b9097b6475c5b5b0aa6964a
Instruction Fuzzy Hash: 4201A531A0A615BBD7109F5ACC4CFAB7BB8EB9B704F1286A9F41497A10C731D4008764

Uniqueness

Uniqueness Score: -1.00%

Function 6C5117A4 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 56libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(gdi32.dll), ref: 6C5117D6
GetProcAddress.KERNEL32(00000000,AddFontResourceExA), ref: 6C5117E6

Strings

gdi32.dll, xrefs: 6C5117D1
AddFontResourceExA, xrefs: 6C5117E0

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: AddFontResourceExA$gdi32.dll
API String ID: 2574300362-955463317
Opcode ID: 4c99d07694e007c3c0f42b19a5f0d2b7eb35c672bdddabc1694bb19b9520a405
Instruction ID: 4fdd58dde9167bec0736a2fbf08a3e96f2b6b03c30f84401fd0500288dc2991e
Opcode Fuzzy Hash: 4c99d07694e007c3c0f42b19a5f0d2b7eb35c672bdddabc1694bb19b9520a405
Instruction Fuzzy Hash: 3801E131A0A625ABD7109E6ACC4CB5BBBFCFB9B709F1246AAF414D7A00D731D401C761

Uniqueness

Uniqueness Score: -1.00%

Function 6C515A93 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 55libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(user32.dll), ref: 6C515ACB
GetProcAddress.KERNEL32(00000000,GetMenuInfo), ref: 6C515ADB

Strings

user32.dll, xrefs: 6C515AC6
GetMenuInfo, xrefs: 6C515AD5

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: GetMenuInfo$user32.dll
API String ID: 2574300362-1592764916
Opcode ID: 2e5c7472331f9c04a7d0edc95b8e779220d5727cb81bb1db6e17aa11b154e19a
Instruction ID: d6b21ca1ac6cffaa4a0d0daea100929082896b59c605f9a7e06b9e4129e1b364
Opcode Fuzzy Hash: 2e5c7472331f9c04a7d0edc95b8e779220d5727cb81bb1db6e17aa11b154e19a
Instruction Fuzzy Hash: F611C431A4A259AFFF029EA59CC8B9F3BFCEB15209F804026EC0592A01D771D945C7B5

Uniqueness

Uniqueness Score: -1.00%

Function 6C515550 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 55libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(user32.dll), ref: 6C515588
GetProcAddress.KERNEL32(00000000,GetGestureInfo), ref: 6C515598

Strings

user32.dll, xrefs: 6C515583
GetGestureInfo, xrefs: 6C515592

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: GetGestureInfo$user32.dll
API String ID: 2574300362-475027952
Opcode ID: 9c098c02d4790c6f9a4432ff336cdef9ff79099e4bf358ab13800b233d4e9e8a
Instruction ID: 7d5d1e07c9b0a4947c3862781d87a46530818710dd98becb1344766088a3c544
Opcode Fuzzy Hash: 9c098c02d4790c6f9a4432ff336cdef9ff79099e4bf358ab13800b233d4e9e8a
Instruction Fuzzy Hash: F9110C31A0A258ABEF019EF5CC8CB9A3BFD9B06358F824021EC0496A02D771C95587B0

Uniqueness

Uniqueness Score: -1.00%

Function 6C51A7AD Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 55libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(uxtheme.dll), ref: 6C51A7DF
GetProcAddress.KERNEL32(00000000,OpenThemeData), ref: 6C51A7EF

Strings

uxtheme.dll, xrefs: 6C51A7DA
OpenThemeData, xrefs: 6C51A7E9

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: OpenThemeData$uxtheme.dll
API String ID: 2574300362-2605521130
Opcode ID: 53ee218c7ad013c7e9a2c311bed8783e659e2d24929efe2ad4ab697fb8c4f32b
Instruction ID: 93df28d13b93ae72eea46f2b622d5c4ebe63b0abfec4f74b39a7c6158c4f4a40
Opcode Fuzzy Hash: 53ee218c7ad013c7e9a2c311bed8783e659e2d24929efe2ad4ab697fb8c4f32b
Instruction Fuzzy Hash: F001C43560A615AFD7119A5ECC4CF577BB8FB87718B124629F904D7A01DB31C806CB60

Uniqueness

Uniqueness Score: -1.00%

Function 6C51F3FD Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 55libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(user32.dll), ref: 6C51F435
GetProcAddress.KERNEL32(00000000,SetMenuInfo), ref: 6C51F445

Strings

user32.dll, xrefs: 6C51F430
SetMenuInfo, xrefs: 6C51F43F

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: SetMenuInfo$user32.dll
API String ID: 2574300362-2881056949
Opcode ID: 420a831f00086f11dae14f59c6beb05419feb42c0f2d5280f1a88ca0a25c2aa1
Instruction ID: 33736a3ec31910570342abacc4ed83621a7fa5c471ff619a4a0b0e76b25520a8
Opcode Fuzzy Hash: 420a831f00086f11dae14f59c6beb05419feb42c0f2d5280f1a88ca0a25c2aa1
Instruction Fuzzy Hash: 4D110030609259BFFF01AEA69C4CBAE3BF8AB49314F404225AC1456A01D7B5C845C7B4

Uniqueness

Uniqueness Score: -1.00%

Function 6C51519C Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 54libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(shell32.dll), ref: 6C5151CE
GetProcAddress.KERNEL32(00000000,GetCurrentProcessExplicitAppUserModelID), ref: 6C5151DE

Strings

shell32.dll, xrefs: 6C5151C9
GetCurrentProcessExplicitAppUserModelID, xrefs: 6C5151D8

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: GetCurrentProcessExplicitAppUserModelID$shell32.dll
API String ID: 2574300362-718263829
Opcode ID: 1ebba0e7e262fd500a348023dc5d5cd22a36f995cfcb8c1d50de7fc94668af51
Instruction ID: 73407e9e889d0af6f00975c1fc06a75d2bf52ad4d8fbbc849cb2177388527b5f
Opcode Fuzzy Hash: 1ebba0e7e262fd500a348023dc5d5cd22a36f995cfcb8c1d50de7fc94668af51
Instruction Fuzzy Hash: A901F93234A6259BD7129B69CC8CF0B7BFCEB8B714B92451AB825D7A01CB36D4408774

Uniqueness

Uniqueness Score: -1.00%

Function 6C51272A Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 44libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(kernel32.dll), ref: 6C512760
GetProcAddress.KERNEL32(00000000,CreateActCtxA), ref: 6C512770

Strings

CreateActCtxA, xrefs: 6C51276A
kernel32.dll, xrefs: 6C51275B

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: CreateActCtxA$kernel32.dll
API String ID: 2574300362-2272402106
Opcode ID: 1bef794f83d062f5fa5d2eb3198c12c9732905394f6a8ec5e5d03ef4e244b878
Instruction ID: 2faa44f600e16dee0c820531bd5f980a17987f4fe1cd761b3b30c9ac1179ef92
Opcode Fuzzy Hash: 1bef794f83d062f5fa5d2eb3198c12c9732905394f6a8ec5e5d03ef4e244b878
Instruction Fuzzy Hash: 3D018131A096689BAF02EE69CC0CA5F77F9AB8B765B01052AEC10D3E00DB71D851C7E5

Uniqueness

Uniqueness Score: -1.00%

Function 6C5127A6 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 44libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(kernel32.dll), ref: 6C5127DC
GetProcAddress.KERNEL32(00000000,CreateActCtxW), ref: 6C5127EC

Strings

CreateActCtxW, xrefs: 6C5127E6
kernel32.dll, xrefs: 6C5127D7

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: CreateActCtxW$kernel32.dll
API String ID: 2574300362-419589472
Opcode ID: 45a3d8c5f7dc08e2cb3939baf3752c8c35f90df9d7cd39601df5c843325cdd96
Instruction ID: d547336d34017bf2609b58517d7d4712c73ff9c10c5a154cdce9f24305663377
Opcode Fuzzy Hash: 45a3d8c5f7dc08e2cb3939baf3752c8c35f90df9d7cd39601df5c843325cdd96
Instruction Fuzzy Hash: 3601D131E09614ABEB00EE6A9C0CB6EB7FCFB4B7157114625E820D2A54D734C85187E5

Uniqueness

Uniqueness Score: -1.00%

Function 6A3B10D8 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 44COMMON

Download Yara Rule

APIs

GetObjectA.GDI32(?,0000003C,?), ref: 6A3B1101
GdipCreateFontFromLogfontA.GDIPLUS(?,?,00000000), ref: 6A3B1114
GdipCreateFontFromDC.GDIPLUS(?,00000000), ref: 6A3B1120

Strings

=vv, xrefs: 6A3B1101

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID: CreateFontFromGdip$LogfontObject
String ID: =vv
API String ID: 3733165904-3354361292
Opcode ID: 9cfc34670f0be229528175703375f5b1b227dd91283af743702df1045ab4c6c9
Instruction ID: 2c7524ca9105b9b82d02e074a910e278850b94e3e83977a59ac9d99b55184e9b
Opcode Fuzzy Hash: 9cfc34670f0be229528175703375f5b1b227dd91283af743702df1045ab4c6c9
Instruction Fuzzy Hash: B8014B71A00208ABDB14DF98C945EAEF3FDEB29650F11402EE941E3640EB70FE05CBA4

Uniqueness

Uniqueness Score: -1.00%

Function 6C52051D Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 38libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(msimg32.dll), ref: 6C520531
GetProcAddress.KERNEL32(00000000,TransparentBlt), ref: 6C520541

Strings

TransparentBlt, xrefs: 6C52053B
msimg32.dll, xrefs: 6C52052C

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: TransparentBlt$msimg32.dll
API String ID: 2574300362-276965307
Opcode ID: 15a59bf58a954349662ec0848bd79def9fda4d0f39452d8825d76e4ac77bcbe1
Instruction ID: 2b8be26db2f8e206cacda5e86fa2fa0206ce716c371130f20cca7184002a4751
Opcode Fuzzy Hash: 15a59bf58a954349662ec0848bd79def9fda4d0f39452d8825d76e4ac77bcbe1
Instruction Fuzzy Hash: 4001F632646148AFCF01AF99CE10ADABBBAFB4A348F025601FA1452561C336C4A0EF14

Uniqueness

Uniqueness Score: -1.00%

Function 6C517442 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 33libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(msimg32.dll), ref: 6C517456
GetProcAddress.KERNEL32(00000000,GradientFill), ref: 6C517466

Strings

GradientFill, xrefs: 6C517460
msimg32.dll, xrefs: 6C517451

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: GradientFill$msimg32.dll
API String ID: 2574300362-3632770705
Opcode ID: a54934c4dd0bf1051932edf167f65b7f1e5e05d2cb8c6ad7b70a89ff48e237d4
Instruction ID: 254030c203740149347b7e52d1ef3c398f42c3ee5de36add5da3f14467b70c0e
Opcode Fuzzy Hash: a54934c4dd0bf1051932edf167f65b7f1e5e05d2cb8c6ad7b70a89ff48e237d4
Instruction Fuzzy Hash: 86F03631249659EFEF01AF9ADC08E893BBAB746358F418506F50052921C272C4A4DF35

Uniqueness

Uniqueness Score: -1.00%

Function 6C51F2A6 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 32libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(user32.dll), ref: 6C51F2BA
GetProcAddress.KERNEL32(00000000,SetGestureConfig), ref: 6C51F2CA

Strings

user32.dll, xrefs: 6C51F2B5
SetGestureConfig, xrefs: 6C51F2C4

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: SetGestureConfig$user32.dll
API String ID: 2574300362-2478114855
Opcode ID: eba9645a85ed3d45ef97c454d8d182201b664c7d5553ce011f6e9aadab38daeb
Instruction ID: f16dd521f4d019363c3d874408d827413171965e215cfdf52f75493873c2ec0b
Opcode Fuzzy Hash: eba9645a85ed3d45ef97c454d8d182201b664c7d5553ce011f6e9aadab38daeb
Instruction Fuzzy Hash: F9F03A35249189EFEF019EA6CC08ECA3BB9BB46318F514606F52082911C376C0A5DB28

Uniqueness

Uniqueness Score: -1.00%

Function 6C5125CE Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 29libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(urlmon.dll), ref: 6C5125DE
GetProcAddress.KERNEL32(00000000,CoInternetSetFeatureEnabled), ref: 6C5125EE

Strings

CoInternetSetFeatureEnabled, xrefs: 6C5125E8
urlmon.dll, xrefs: 6C5125D9

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: CoInternetSetFeatureEnabled$urlmon.dll
API String ID: 2574300362-622215037
Opcode ID: 921c741abd937195c427fed9145f3b8a5bb1c9ea05b949ea7d8ea5de08cd7928
Instruction ID: 85de1b7eea4bb2f801ac5231665493c8d9e4c497bd4d198e70c81d670bbe5229
Opcode Fuzzy Hash: 921c741abd937195c427fed9145f3b8a5bb1c9ea05b949ea7d8ea5de08cd7928
Instruction Fuzzy Hash: 3AF0827170D2619BEF06DE658C0CE197BF5A78B745B02481EF582C2E92CA318881DB6D

Uniqueness

Uniqueness Score: -1.00%

Function 6C516FC2 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 28libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(user32.dll), ref: 6C516FD3
GetProcAddress.KERNEL32(00000000,GetTouchInputInfo), ref: 6C516FE3

Strings

user32.dll, xrefs: 6C516FCE
GetTouchInputInfo, xrefs: 6C516FDD

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: GetTouchInputInfo$user32.dll
API String ID: 2574300362-148426255
Opcode ID: bc04aaa653129f886f559cfeb283958249501261a65dba0c24219ea7b60a895c
Instruction ID: da99081197fb6abbaa61a96e006a91e211187efc1b5ef1d98022730478618d6c
Opcode Fuzzy Hash: bc04aaa653129f886f559cfeb283958249501261a65dba0c24219ea7b60a895c
Instruction Fuzzy Hash: 0DF0F831249296DFEB02AF6ACC4CE4A7BF6AB86354F118816B45092A11D7368099EF35

Uniqueness

Uniqueness Score: -1.00%

Function 6C51F31C Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 28libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(user32.dll), ref: 6C51F32D
GetProcAddress.KERNEL32(00000000,SetLayeredWindowAttributes), ref: 6C51F33D

Strings

user32.dll, xrefs: 6C51F328
SetLayeredWindowAttributes, xrefs: 6C51F337

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: SetLayeredWindowAttributes$user32.dll
API String ID: 2574300362-3673630139
Opcode ID: 6e0927bebdc6f1eafa6a013bf745638baa21437ec7d605155d659dedcb3faa4d
Instruction ID: 65545a45ec1fd83d66f582f9bc9caef9b14e14e5c4e25582ba1c8204edbcf0eb
Opcode Fuzzy Hash: 6e0927bebdc6f1eafa6a013bf745638baa21437ec7d605155d659dedcb3faa4d
Instruction Fuzzy Hash: 50F0F831249295DFEB01EE66CC4CA5A77FAAB96319F168A06A05182A11C332C499DF25

Uniqueness

Uniqueness Score: -1.00%

Function 6C51AC63 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 27libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(user32.dll), ref: 6C51AC74
GetProcAddress.KERNEL32(00000000,PrintWindow), ref: 6C51AC84

Strings

user32.dll, xrefs: 6C51AC6F
PrintWindow, xrefs: 6C51AC7E

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: PrintWindow$user32.dll
API String ID: 2574300362-4148512372
Opcode ID: 2a55dfe620274623005fa091f78c3745a69a5429c474faa6b3a410aeffdb6f63
Instruction ID: 88eeda15b0624ab1eb0f498b8a894531ba7b22232d5e996bf0d5e4da4d96a5ee
Opcode Fuzzy Hash: 2a55dfe620274623005fa091f78c3745a69a5429c474faa6b3a410aeffdb6f63
Instruction Fuzzy Hash: 49F01231649201DFEA019F6ACC48B56B7B5AB67749F018915F441C2961DB31C449DB25

Uniqueness

Uniqueness Score: -1.00%

Function 6C514060 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 27libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(kernel32.dll), ref: 6C514071
GetProcAddress.KERNEL32(00000000,EnumSystemLanguageGroupsA), ref: 6C514081

Strings

EnumSystemLanguageGroupsA, xrefs: 6C51407B
kernel32.dll, xrefs: 6C51406C

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: EnumSystemLanguageGroupsA$kernel32.dll
API String ID: 2574300362-4053898600
Opcode ID: 409afc1f598b537dca9a277c4c6cbb4bc425c60a97c3f796711502a74dfa816a
Instruction ID: c9bae39643c6b442c450dcfa3436b70f98618cf266a3f12ba61473b78fa713f5
Opcode Fuzzy Hash: 409afc1f598b537dca9a277c4c6cbb4bc425c60a97c3f796711502a74dfa816a
Instruction Fuzzy Hash: 49F0A731B4D2119FEF01EF22CC48B49BBF96797309F029816A00186D21C33380C4CF25

Uniqueness

Uniqueness Score: -1.00%

Function 6C5140BE Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 27libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(kernel32.dll), ref: 6C5140CF
GetProcAddress.KERNEL32(00000000,EnumSystemLanguageGroupsW), ref: 6C5140DF

Strings

EnumSystemLanguageGroupsW, xrefs: 6C5140D9
kernel32.dll, xrefs: 6C5140CA

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: EnumSystemLanguageGroupsW$kernel32.dll
API String ID: 2574300362-1876026034
Opcode ID: 56d5ce5b315333c31f73b86548a0abb333acbc419ce3ca9e040c67f8363f3c6b
Instruction ID: fe4d6f09a5c1f22eef5c91b5d999d9c293cc034bd48c0edb6db6daf3cbbb1e9c
Opcode Fuzzy Hash: 56d5ce5b315333c31f73b86548a0abb333acbc419ce3ca9e040c67f8363f3c6b
Instruction Fuzzy Hash: DEF08C302881019FEA91EF65CC48A4A3BF9ABA7348F019816B04682E22C73380C5DB24

Uniqueness

Uniqueness Score: -1.00%

Function 6C51BCEA Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 26libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(user32.dll), ref: 6C51BCFB
GetProcAddress.KERNEL32(00000000,RegisterTouchWindow), ref: 6C51BD0B

Strings

user32.dll, xrefs: 6C51BCF6
RegisterTouchWindow, xrefs: 6C51BD05

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: RegisterTouchWindow$user32.dll
API String ID: 2574300362-3747950992
Opcode ID: 0e6a21455ead2d4e0fefb470d97201d37bdbd969bc237e675e54705a7c65071a
Instruction ID: 0bbfe8a5dfa2c4be2a66241aba6a29523c084b5bb61c9d09fcb91f62198b1d15
Opcode Fuzzy Hash: 0e6a21455ead2d4e0fefb470d97201d37bdbd969bc237e675e54705a7c65071a
Instruction Fuzzy Hash: FFF039B434D2959FEE01FF24CD0DB4937FABB86319F028896A01092A41C7728484DA36

Uniqueness

Uniqueness Score: -1.00%

Function 6C513D57 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 26libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(uxtheme.dll), ref: 6C513D67
GetProcAddress.KERNEL32(00000000,EndBufferedPaint), ref: 6C513D77

Strings

uxtheme.dll, xrefs: 6C513D62
EndBufferedPaint, xrefs: 6C513D71

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: EndBufferedPaint$uxtheme.dll
API String ID: 2574300362-2993015961
Opcode ID: bda56abec9d9030fcaee5dd93afad8584f7e87eea3560e21b5c33ec7f8bf2152
Instruction ID: d83eb7340cbb7f1854a5a772836638a67bc2f29883e9d8b4db4086669e1ce633
Opcode Fuzzy Hash: bda56abec9d9030fcaee5dd93afad8584f7e87eea3560e21b5c33ec7f8bf2152
Instruction Fuzzy Hash: EEF0E57434C132DFEB02EF68CD0CE0936F4B746799B02491AF511D3900E331998097B5

Uniqueness

Uniqueness Score: -1.00%

Function 6C51896C Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 26libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(user32.dll), ref: 6C51897C
GetProcAddress.KERNEL32(00000000,MonitorFromWindow), ref: 6C51898C

Strings

user32.dll, xrefs: 6C518977
MonitorFromWindow, xrefs: 6C518986

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: MonitorFromWindow$user32.dll
API String ID: 2574300362-292294077
Opcode ID: 1b30064e2495c986f1229addd7d78f3c5d07c11aba5da7b64d6a7c988992054f
Instruction ID: 53cd53fa86d5f86ccdde19390ef72c136cc464ead6b96bffebf11f3c9c44bbe3
Opcode Fuzzy Hash: 1b30064e2495c986f1229addd7d78f3c5d07c11aba5da7b64d6a7c988992054f
Instruction Fuzzy Hash: B4F030307096259BEB22EF648D0CB4A36F5B786765B034857E545D3A80C3718840C767

Uniqueness

Uniqueness Score: -1.00%

Function 6C51F37E Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 26libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(gdi32.dll), ref: 6C51F38E
GetProcAddress.KERNEL32(00000000,SetLayout), ref: 6C51F39E

Strings

SetLayout, xrefs: 6C51F398
gdi32.dll, xrefs: 6C51F389

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: SetLayout$gdi32.dll
API String ID: 2574300362-836973393
Opcode ID: fde9a42bb9a0b0d0ffd3fb92f616e5f56a8a9c48c4bcad435b0183a71ae28499
Instruction ID: 270c6b246229800f396f6c781b828c28ff9c6fe992c3b88a251e0e25244fdd2a
Opcode Fuzzy Hash: fde9a42bb9a0b0d0ffd3fb92f616e5f56a8a9c48c4bcad435b0183a71ae28499
Instruction Fuzzy Hash: 55F039313085A1DFEF02EE79AD0CA1A77F4B786758B425B1AA500D2E00DB7588818BB5

Uniqueness

Uniqueness Score: -1.00%

Function 6C5158B9 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 25libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(gdi32.dll), ref: 6C5158C9
GetProcAddress.KERNEL32(00000000,GetLayout), ref: 6C5158D9

Strings

GetLayout, xrefs: 6C5158D3
gdi32.dll, xrefs: 6C5158C4

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: GetLayout$gdi32.dll
API String ID: 2574300362-3418949049
Opcode ID: a910855da1f226c06ceec27401bd605244227968003a77023e68c21b216861a0
Instruction ID: e032fab8b6c5ff1afdfc58e459727016afeaff64811cfbe5a870473f315f951b
Opcode Fuzzy Hash: a910855da1f226c06ceec27401bd605244227968003a77023e68c21b216861a0
Instruction Fuzzy Hash: F0E0E53470C6B1DFEB41AF69CC4CA0977F4A7467597928826B410E2A00D6318482CBB4

Uniqueness

Uniqueness Score: -1.00%

Function 6C511940 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 25libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(user32.dll), ref: 6C511951
GetProcAddress.KERNEL32(00000000,AllowSetForegroundWindow), ref: 6C511961

Strings

user32.dll, xrefs: 6C51194C
AllowSetForegroundWindow, xrefs: 6C51195B

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: AllowSetForegroundWindow$user32.dll
API String ID: 2574300362-3855017861
Opcode ID: 1da587c7b2baa8b8d1218b8008d0e4350956c471ccb038d470d079bda089dc6f
Instruction ID: 9d955739d5ad5e85477ed93a39f2c634685cdb83fa557efa3055b9aa07e2bb48
Opcode Fuzzy Hash: 1da587c7b2baa8b8d1218b8008d0e4350956c471ccb038d470d079bda089dc6f
Instruction Fuzzy Hash: 23E0C030B4E155ABEA00EF2A8C48B5AB7B9AB23348B229555E471D2B51C731C144DB19

Uniqueness

Uniqueness Score: -1.00%

Function 6C51244A Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 25libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(user32.dll), ref: 6C51245B
GetProcAddress.KERNEL32(00000000,CloseTouchInputHandle), ref: 6C51246B

Strings

user32.dll, xrefs: 6C512456
CloseTouchInputHandle, xrefs: 6C512465

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: CloseTouchInputHandle$user32.dll
API String ID: 2574300362-3775931010
Opcode ID: 3d9e5c8f2a4cd16c4eac9ecb83ad9533bddc75d08aba68c70889dd7e742ffc44
Instruction ID: bbc84de8754fdfc48138ad98420841504f306bdf2443e094d7075d275dbe7a88
Opcode Fuzzy Hash: 3d9e5c8f2a4cd16c4eac9ecb83ad9533bddc75d08aba68c70889dd7e742ffc44
Instruction Fuzzy Hash: F1E0EDB53896519FEE01AF66CC4CB4A77F8A767309B12C816A49292E41C7768084DE34

Uniqueness

Uniqueness Score: -1.00%

Function 6C518416 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 25libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(user32.dll), ref: 6C518427
GetProcAddress.KERNEL32(00000000,IsHungAppWindow), ref: 6C518437

Strings

IsHungAppWindow, xrefs: 6C518431
user32.dll, xrefs: 6C518422

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: IsHungAppWindow$user32.dll
API String ID: 2574300362-2929308406
Opcode ID: 0f1f627ab3905b6359d09db82f1bf12ec357933e58e7cdf95a5234e153d8cfbc
Instruction ID: 4c6d4e70ca8c480db55fe41cfe2c67ea3a6e69ce4237ea41d220ae851d7ad219
Opcode Fuzzy Hash: 0f1f627ab3905b6359d09db82f1bf12ec357933e58e7cdf95a5234e153d8cfbc
Instruction Fuzzy Hash: 85E0C934B49604DFEA10AE6B8C48B59B7B8A70330DB13D916E410D2A61DBB08444DB16

Uniqueness

Uniqueness Score: -1.00%

Function 6C5206E0 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 25libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(user32.dll), ref: 6C5206F1
GetProcAddress.KERNEL32(00000000,UnregisterTouchWindow), ref: 6C520701

Strings

UnregisterTouchWindow, xrefs: 6C5206FB
user32.dll, xrefs: 6C5206EC

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: UnregisterTouchWindow$user32.dll
API String ID: 2574300362-2519005324
Opcode ID: 8c3aa8e64bc693df494a0a7cea0401b2cf288e396168a4e0a8c5c9141936a0eb
Instruction ID: 9087d27810168d89cc58b3ad7eeb950d82acc2babce59e7402b6541457b9e8d6
Opcode Fuzzy Hash: 8c3aa8e64bc693df494a0a7cea0401b2cf288e396168a4e0a8c5c9141936a0eb
Instruction Fuzzy Hash: C9E0C034B4A144AFDB00EF6A8C94F59BBF96753308B15A516E451C2691C7348044DF14

Uniqueness

Uniqueness Score: -1.00%

Function 6C5123F5 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 25libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(uxtheme.dll), ref: 6C512405
GetProcAddress.KERNEL32(00000000,CloseThemeData), ref: 6C512415

Strings

CloseThemeData, xrefs: 6C51240F
uxtheme.dll, xrefs: 6C512400

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: CloseThemeData$uxtheme.dll
API String ID: 2574300362-2665337217
Opcode ID: c6270ff689971175f52e97c8f1522f9e2d5494ed9db8929a79aec3f0fc82a2ad
Instruction ID: 6c07615f7f6d5db91766f2327072bfff952cfa6581ea3bc8a603846ffff6bd2f
Opcode Fuzzy Hash: c6270ff689971175f52e97c8f1522f9e2d5494ed9db8929a79aec3f0fc82a2ad
Instruction Fuzzy Hash: 53E0E5B0748572DBEB42EF6A9C0CE4976F4A7477587828816A420D2E00E67199819B74

Uniqueness

Uniqueness Score: -1.00%

Function 6C512387 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 25libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(user32.dll), ref: 6C512397
GetProcAddress.KERNEL32(00000000,CloseGestureInfoHandle), ref: 6C5123A7

Strings

user32.dll, xrefs: 6C512392
CloseGestureInfoHandle, xrefs: 6C5123A1

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: CloseGestureInfoHandle$user32.dll
API String ID: 2574300362-934464808
Opcode ID: b6d3966d5689ba3b115fd75b85bb1417e0569f3f03af7a38bcae98590d03a69c
Instruction ID: 6d716cbcf6bcf99ff903fcbf448ff62ad061bb7469b06bd89a3cf180359e7139
Opcode Fuzzy Hash: b6d3966d5689ba3b115fd75b85bb1417e0569f3f03af7a38bcae98590d03a69c
Instruction Fuzzy Hash: A4E06D307081A48BEB16FF799C0CB4D36F4B7473987428817A502E2E00D77188818B74

Uniqueness

Uniqueness Score: -1.00%

Function 6C511F59 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 24libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(uxtheme.dll), ref: 6C511F69
GetProcAddress.KERNEL32(00000000,BufferedPaintInit), ref: 6C511F79

Strings

uxtheme.dll, xrefs: 6C511F64
BufferedPaintInit, xrefs: 6C511F73

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: BufferedPaintInit$uxtheme.dll
API String ID: 2574300362-1331937065
Opcode ID: 20b68d13f878644b072fd4f91ad2b571f86d26ea78de2a7fc7b92b53d549aeb7
Instruction ID: ebf404da6d518b512bfa52f1641819fd64285ad30e221daf3627ca67bc82d5f7
Opcode Fuzzy Hash: 20b68d13f878644b072fd4f91ad2b571f86d26ea78de2a7fc7b92b53d549aeb7
Instruction Fuzzy Hash: 43E01A3070C6758FEB52FE69CC0C75A36F8B7567687424956F501D2E80DB71C8818BB8

Uniqueness

Uniqueness Score: -1.00%

Function 6C511FAA Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 24libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(uxtheme.dll), ref: 6C511FBA
GetProcAddress.KERNEL32(00000000,BufferedPaintUnInit), ref: 6C511FCA

Strings

uxtheme.dll, xrefs: 6C511FB5
BufferedPaintUnInit, xrefs: 6C511FC4

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: BufferedPaintUnInit$uxtheme.dll
API String ID: 2574300362-1501038116
Opcode ID: 0fdddd69f861768f2325188bde64f04a47598465d63ab264382ff78ed71a0130
Instruction ID: 6af1f041c2e3953537af28a923f8c6c35eab8e696edf90b2a0cf169a96f29ef4
Opcode Fuzzy Hash: 0fdddd69f861768f2325188bde64f04a47598465d63ab264382ff78ed71a0130
Instruction Fuzzy Hash: 40E0923174C670CBEF41EA6ACC0CA1A32F4B7663597028457A410C3E80C731C4C0CB78

Uniqueness

Uniqueness Score: -1.00%

Function 6C516AF6 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 24libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(kernel32.dll), ref: 6C516B06
GetProcAddress.KERNEL32(00000000,GetSystemDefaultUILanguage), ref: 6C516B16

Strings

GetSystemDefaultUILanguage, xrefs: 6C516B10
kernel32.dll, xrefs: 6C516B01

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: GetSystemDefaultUILanguage$kernel32.dll
API String ID: 2574300362-1150936577
Opcode ID: 470aca7f7b2976e16717cfd0b6ef6107600335165293575deb435ce031d2563b
Instruction ID: d87da9272175da186606e9a90161b2330bca5543146c15fa3114d3bd5e5f511d
Opcode Fuzzy Hash: 470aca7f7b2976e16717cfd0b6ef6107600335165293575deb435ce031d2563b
Instruction Fuzzy Hash: 4DE01239B09611AAEB10FF6E9D08F5EB6F8F71B749302561EE400D2E50CF308541C764

Uniqueness

Uniqueness Score: -1.00%

Function 6C51F5F3 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 24libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(user32.dll), ref: 6C51F604
GetProcAddress.KERNEL32(00000000,SetProcessDPIAware), ref: 6C51F614

Strings

user32.dll, xrefs: 6C51F5FF
SetProcessDPIAware, xrefs: 6C51F60E

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: SetProcessDPIAware$user32.dll
API String ID: 2574300362-1137607222
Opcode ID: 222af31473034300b46c07a308581ec2580849d6f2751a65cbb057792b770bed
Instruction ID: bf74ebc8804ed46c70a10135be2b3a052897669ca9ca322d5a91dea1496083e3
Opcode Fuzzy Hash: 222af31473034300b46c07a308581ec2580849d6f2751a65cbb057792b770bed
Instruction Fuzzy Hash: BBE0EDB478A1649FEB01AE648D4CB4A33F8BB96319F8296069094C6E51C7768485CA38

Uniqueness

Uniqueness Score: -1.00%

Function 6C5183C4 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 24libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(uxtheme.dll), ref: 6C5183D5
GetProcAddress.KERNEL32(00000000,IsAppThemed), ref: 6C5183E5

Strings

uxtheme.dll, xrefs: 6C5183D0
IsAppThemed, xrefs: 6C5183DF

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: IsAppThemed$uxtheme.dll
API String ID: 2574300362-2993874081
Opcode ID: 594e6bc9fe471670a91810e75d8ee923c76ba3d9eacd930b394fe91e6a5c657b
Instruction ID: 691925b99334e65c4e8b9dfc0f43692ce9dfc3486b4e558d3c5d843ec7a605ae
Opcode Fuzzy Hash: 594e6bc9fe471670a91810e75d8ee923c76ba3d9eacd930b394fe91e6a5c657b
Instruction Fuzzy Hash: DBE0C930B591519AEA10AA6A8C4875BB7B8B70330CB17C517D410C2A50CB749045CB2A

Uniqueness

Uniqueness Score: -1.00%

Function 6C51A55F Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 23libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(user32.dll), ref: 6C51A56D
GetProcAddress.KERNEL32(00000000,NotifyWinEvent), ref: 6C51A57D

Strings

user32.dll, xrefs: 6C51A568
NotifyWinEvent, xrefs: 6C51A577

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: NotifyWinEvent$user32.dll
API String ID: 2574300362-597752486
Opcode ID: da2dac40de9e4fadbc39899be153a2ea04d55b5e01fec7a3b342c3f076ac8a0c
Instruction ID: 810cb5d1e3a64fb2578327b1d33f8f610b100ec641e8c11c9e51cb77a4b1d077
Opcode Fuzzy Hash: da2dac40de9e4fadbc39899be153a2ea04d55b5e01fec7a3b342c3f076ac8a0c
Instruction Fuzzy Hash: 40F0A53020C2559BEF03AF66CC0CA0A3BF5AB9A349F124819B50285E62D776C19D9B65

Uniqueness

Uniqueness Score: -1.00%

Function 67548340 Relevance: 6.4, APIs: 5, Instructions: 126COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2464023360.0000000067541000.00000020.00000001.01000000.00000011.sdmp, Offset: 67540000, based on PE: true

Associated: 00000010.00000002.2463980469.0000000067540000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464120924.000000006754B000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464168986.0000000067551000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464214723.0000000067552000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464256525.0000000067553000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_67540000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 903b89d9e68987f3dafc76ef15ece33c6fa5b358d91649454a6a7c15b3e38426
Instruction ID: 98cec6964c346aaf7a6666b55d1cb46025497a090287e37fae9325b572bf823e
Opcode Fuzzy Hash: 903b89d9e68987f3dafc76ef15ece33c6fa5b358d91649454a6a7c15b3e38426
Instruction Fuzzy Hash: 0D4146B4A052058FEB04DF69C980A5EB7F0FB89314F1189AAE9089B718D734E940CBD2

Uniqueness

Uniqueness Score: -1.00%

Function 675485C0 Relevance: 6.4, APIs: 5, Instructions: 101COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 67548663
TlsGetValue.KERNEL32 ref: 6754866E
SetLastError.KERNEL32 ref: 6754867C
TlsSetValue.KERNEL32 ref: 675486E8
GetLastError.KERNEL32 ref: 675486F5

Memory Dump Source

Source File: 00000010.00000002.2464023360.0000000067541000.00000020.00000001.01000000.00000011.sdmp, Offset: 67540000, based on PE: true

Associated: 00000010.00000002.2463980469.0000000067540000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464120924.000000006754B000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464168986.0000000067551000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464214723.0000000067552000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464256525.0000000067553000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_67540000_javaw.jbxd

Similarity

API ID: ErrorLast$Value
String ID:
API String ID: 1883355122-0
Opcode ID: 91e6c2ad7b181b0910ee37c46c693210ea052e1080c2858d366dcd022df5b0eb
Instruction ID: f8af0da8a1e701c5912a7fb52910f02e48c5d3c78e5cbbfee463db02dad4fde6
Opcode Fuzzy Hash: 91e6c2ad7b181b0910ee37c46c693210ea052e1080c2858d366dcd022df5b0eb
Instruction Fuzzy Hash: F841F9B4A013559FDB80EF69C58099EB7B0BB5D714B01459AD918AB309D730FD40CFD2

Uniqueness

Uniqueness Score: -1.00%

Function 6C54788D Relevance: 6.1, APIs: 4, Instructions: 99COMMONLIBRARYCODE

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(?,00000000,00000000,?,00000000,00000000,?,00000001,7FFFFFFF,?,?,00000001,?,00000000,00000001,?), ref: 6C5478D5
MultiByteToWideChar.KERNEL32(?,00000001,?,?,00000000,?), ref: 6C54794A
GetStringTypeW.KERNEL32(?,00000000,00000000,?), ref: 6C54795C
__freea.LIBCMT ref: 6C547965

Part of subcall function 6C543605: HeapAlloc.KERNEL32(00000000,6C546DF7,00000000,?,6C546DF7,00000000,?,6C546EA0,00000000,00000000,?,00000001,?,?,?,?), ref: 6C543637

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: ByteCharMultiWide$AllocHeapStringType__freea
String ID:
API String ID: 573072132-0
Opcode ID: 5adcef5a7858ce50b9a400a540fd851dcf8c6f40e1bd57868b337913d5f5e7c9
Instruction ID: f65b63672c22d018dc925a49ad26107d43355cfcdeeb9e0fde435e6f28e0f4b6
Opcode Fuzzy Hash: 5adcef5a7858ce50b9a400a540fd851dcf8c6f40e1bd57868b337913d5f5e7c9
Instruction Fuzzy Hash: 8E31E171A0121AABDF109FA5CC44DEF7BB9EF85368F118668FC14A7650E7308D54CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 6A3BC1CD Relevance: 6.1, APIs: 4, Instructions: 99COMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(00000000,00000000,00000100,00000020,00000000,00000000,5EFC4D8B,00000100,6A3BA4AE,00000000,00000000,00000001,00000020,00000100,?,5EFC4D8B), ref: 6A3BC215
MultiByteToWideChar.KERNEL32(00000000,00000001,?,?,00000000,?), ref: 6A3BC28A
GetStringTypeW.KERNEL32(?,00000000,00000000,?), ref: 6A3BC29C
__freea.LIBCMT ref: 6A3BC2A5

Part of subcall function 6A3B8DF1: HeapAlloc.KERNEL32(00000000,?,?,?,6A3B6198,?,?,6A3B23D9,00000018), ref: 6A3B8E23

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID: ByteCharMultiWide$AllocHeapStringType__freea
String ID:
API String ID: 573072132-0
Opcode ID: 5d3cdd9af07406d1ca6129a608a9924ab13195c62bbd32afcb559527221f52aa
Instruction ID: 1f9f38c055ece98152930d81b990cfbb6f96f3f92bc8b8ad361c3cab82fee72c
Opcode Fuzzy Hash: 5d3cdd9af07406d1ca6129a608a9924ab13195c62bbd32afcb559527221f52aa
Instruction Fuzzy Hash: 3B31F37190025AAFDF218FA4EC44DAF7BBAEF59714F024128FC14AB651DB31E911CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 67545CC4 Relevance: 6.1, APIs: 2, Strings: 2, Instructions: 88COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 67545D06
memset.MSVCRT ref: 67545D27

Strings

P?VTg, xrefs: 67545D00
P?VTg, xrefs: 67545D46

Memory Dump Source

Source File: 00000010.00000002.2464023360.0000000067541000.00000020.00000001.01000000.00000011.sdmp, Offset: 67540000, based on PE: true

Associated: 00000010.00000002.2463980469.0000000067540000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464120924.000000006754B000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464168986.0000000067551000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464214723.0000000067552000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464256525.0000000067553000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_67540000_javaw.jbxd

Similarity

API ID: mallocmemset
String ID: P?VTg$P?VTg
API String ID: 2882185209-2107792483
Opcode ID: 3d7c77f2e001b1734918c9fe15ee455aa0e77ebff5f948828ce3829624c31828
Instruction ID: 5c8d2802706df271883bfdf14b795ee5872d200f15358625a44657f7c3500bc3
Opcode Fuzzy Hash: 3d7c77f2e001b1734918c9fe15ee455aa0e77ebff5f948828ce3829624c31828
Instruction Fuzzy Hash: 0A31D370D046089BEF44EFA4C08539DBBF4FF89704F11459AD969AB208D735AA858F82

Uniqueness

Uniqueness Score: -1.00%

Function 6C53E60A Relevance: 6.1, APIs: 4, Instructions: 70COMMON

Download Yara Rule

APIs

__RTC_Initialize.LIBCMT ref: 6C53E65A
___scrt_initialize_default_local_stdio_options.LIBCMT ref: 6C53E664
___scrt_is_nonwritable_in_current_image.LIBCMT ref: 6C53E6C8

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: Initialize___scrt_initialize_default_local_stdio_options___scrt_is_nonwritable_in_current_image
String ID:
API String ID: 49320711-0
Opcode ID: 5590f69cfd19e3b1aa8cc3098912ebbb6d2f732bd6dd0b66943309a6604df534
Instruction ID: 7edfbd8829eb18ab2a0dd6e13f564fdb42024d65c19c5e84937775cb10c38508
Opcode Fuzzy Hash: 5590f69cfd19e3b1aa8cc3098912ebbb6d2f732bd6dd0b66943309a6604df534
Instruction Fuzzy Hash: 5A11AF31644275D9DB416BB0AC147EC33E14F9232CF24A809D48C67FC2FBE25C8986E9

Uniqueness

Uniqueness Score: -1.00%

Function 6A3B6240 Relevance: 6.1, APIs: 4, Instructions: 70COMMON

Download Yara Rule

APIs

__RTC_Initialize.LIBCMT ref: 6A3B6290
___scrt_initialize_default_local_stdio_options.LIBCMT ref: 6A3B629A
___scrt_is_nonwritable_in_current_image.LIBCMT ref: 6A3B62FE

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID: Initialize___scrt_initialize_default_local_stdio_options___scrt_is_nonwritable_in_current_image
String ID:
API String ID: 49320711-0
Opcode ID: 3eaeeefcf84f433ae85e922ac2890bd4d7393c4818fa39ae5648556bebc48d2c
Instruction ID: df768c9b5f258dac058c656faa1232115acfcd06faec35c8bcbaed15939a1ee6
Opcode Fuzzy Hash: 3eaeeefcf84f433ae85e922ac2890bd4d7393c4818fa39ae5648556bebc48d2c
Instruction Fuzzy Hash: 5D11EE31609641A9EF406BB49C2879C7BB34F7231CF220409E8CA2BCC3DF76D584D626

Uniqueness

Uniqueness Score: -1.00%

Function 6C54523F Relevance: 6.1, APIs: 4, Instructions: 68COMMON

Download Yara Rule

APIs

GetEnvironmentStringsW.KERNEL32 ref: 6C545248
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 6C54526B

Part of subcall function 6C543605: HeapAlloc.KERNEL32(00000000,6C546DF7,00000000,?,6C546DF7,00000000,?,6C546EA0,00000000,00000000,?,00000001,?,?,?,?), ref: 6C543637

WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,00000000,?,00000000,00000000), ref: 6C545291
FreeEnvironmentStringsW.KERNEL32(00000000), ref: 6C5452B3

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: ByteCharEnvironmentMultiStringsWide$AllocFreeHeap
String ID:
API String ID: 1993637811-0
Opcode ID: f778a000458f3078203885e028b53226f028453c7af0d07199a86e459221ba2c
Instruction ID: ef66ca74d0a762107747040de1ddf5dc3c19697999c2b636204eb4f8b75fedb6
Opcode Fuzzy Hash: f778a000458f3078203885e028b53226f028453c7af0d07199a86e459221ba2c
Instruction Fuzzy Hash: 1501847260AA167F67116ABA5C4CC7F3A7DDFC3BA9361812AFD14D7604DB608C0181B0

Uniqueness

Uniqueness Score: -1.00%

Function 67541556 Relevance: 6.0, APIs: 4, Instructions: 49fileCOMMON

Download Yara Rule

APIs

_wcsdup.MSVCRT ref: 67541590
CreateFileW.KERNEL32(?,C0000001,00000007,00000000,00000003,42000000,?), ref: 675415B2
CreateIoCompletionPort.KERNEL32(?,?,?,00000000,?,C0000001,00000007,00000000,00000003,42000000,?), ref: 675415CB
GetLastError.KERNEL32(?,C0000001,00000007,00000000,00000003,42000000,?), ref: 675415D4

Memory Dump Source

Source File: 00000010.00000002.2464023360.0000000067541000.00000020.00000001.01000000.00000011.sdmp, Offset: 67540000, based on PE: true

Associated: 00000010.00000002.2463980469.0000000067540000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464120924.000000006754B000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464168986.0000000067551000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464214723.0000000067552000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464256525.0000000067553000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_67540000_javaw.jbxd

Similarity

API ID: Create$CompletionErrorFileLastPort_wcsdup
String ID:
API String ID: 3072120858-0
Opcode ID: 14da26378349fa83ebff5ac6ca5a05ae596c5fec990eef2262358a50f75aaaef
Instruction ID: 5df6e5e5298c775afe7d72338bbe699110a7f63c9b4a48ecc2f09ba44219cc0b
Opcode Fuzzy Hash: 14da26378349fa83ebff5ac6ca5a05ae596c5fec990eef2262358a50f75aaaef
Instruction Fuzzy Hash: D411F7B0500304EFEF51EF64C9C1B497BE4AB48308F1480E8EA489F25ED779E950DBA6

Uniqueness

Uniqueness Score: -1.00%

Function 6C549252 Relevance: 6.0, APIs: 4, Instructions: 29COMMONLIBRARYCODE

Download Yara Rule

APIs

WriteConsoleW.KERNEL32(?,?,0000002C,00000000,?,?,6C548ED1,?,00000001,?,00000001,?,6C5482D6,00000020,00000000,00000001), ref: 6C549269
GetLastError.KERNEL32(?,6C548ED1,?,00000001,?,00000001,?,6C5482D6,00000020,00000000,00000001,00000020,00000001,?,6C548855,00000008), ref: 6C549275

Part of subcall function 6C54923B: CloseHandle.KERNEL32(FFFFFFFE,6C549285,?,6C548ED1,?,00000001,?,00000001,?,6C5482D6,00000020,00000000,00000001,00000020,00000001), ref: 6C54924B

___initconout.LIBCMT ref: 6C549285

Part of subcall function 6C5491FD: CreateFileW.KERNEL32(CONOUT$,40000000,00000003,00000000,00000003,00000000,00000000,6C54922C,6C548EB7,00000001,?,6C5482D6,00000020,00000000,00000001,00000020), ref: 6C549210

WriteConsoleW.KERNEL32(?,?,0000002C,00000000,?,6C548ED1,?,00000001,?,00000001,?,6C5482D6,00000020,00000000,00000001,00000020), ref: 6C54929A

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: ConsoleWrite$CloseCreateErrorFileHandleLast___initconout
String ID:
API String ID: 2744216297-0
Opcode ID: 785403eed391e2a3b9561a85691eda91848792b26ac8dc1feba98d497468d605
Instruction ID: 85299f92971256a38d3895dcdcb9ceaeedb67326e5826342768bc2598d453824
Opcode Fuzzy Hash: 785403eed391e2a3b9561a85691eda91848792b26ac8dc1feba98d497468d605
Instruction Fuzzy Hash: 6BF03736204518BBCF122F96CD0999D3F7EFB463B4F058014FA0885124DB3288209BD5

Uniqueness

Uniqueness Score: -1.00%

Function 6A3BDBB6 Relevance: 6.0, APIs: 4, Instructions: 29COMMONLIBRARYCODE

Download Yara Rule

APIs

WriteConsoleW.KERNEL32(?,?,0000002C,00000000,?,?,6A3BD7CE,?,00000001,?,00000001,?,6A3BCC36,00000020,00000000,00000001), ref: 6A3BDBCD
GetLastError.KERNEL32(?,6A3BD7CE,?,00000001,?,00000001,?,6A3BCC36,00000020,00000000,00000001,00000020,00000001,?,6A3BD1B5,00000008), ref: 6A3BDBD9

Part of subcall function 6A3BDB9F: CloseHandle.KERNEL32(FFFFFFFE,6A3BDBE9,?,6A3BD7CE,?,00000001,?,00000001,?,6A3BCC36,00000020,00000000,00000001,00000020,00000001), ref: 6A3BDBAF

___initconout.LIBCMT ref: 6A3BDBE9

Part of subcall function 6A3BDB61: CreateFileW.KERNEL32(CONOUT$,40000000,00000003,00000000,00000003,00000000,00000000,6A3BDB90,6A3BD7B4,00000001,?,6A3BCC36,00000020,00000000,00000001,00000020), ref: 6A3BDB74

WriteConsoleW.KERNEL32(?,?,0000002C,00000000,?,6A3BD7CE,?,00000001,?,00000001,?,6A3BCC36,00000020,00000000,00000001,00000020), ref: 6A3BDBFE

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID: ConsoleWrite$CloseCreateErrorFileHandleLast___initconout
String ID:
API String ID: 2744216297-0
Opcode ID: 85bacc1ebf2ea0552615594da1179d5be0dbb715acd4f12c233a82e19c20cb62
Instruction ID: d658c0690010f478b13a7cb0a6d471939765142740d3d11f586c8e0946b9aef6
Opcode Fuzzy Hash: 85bacc1ebf2ea0552615594da1179d5be0dbb715acd4f12c233a82e19c20cb62
Instruction Fuzzy Hash: E1F0AC36540164BBDF525F95DC089897FBAFB093A1F054050FA5AD6520CB32EC20EBA1

Uniqueness

Uniqueness Score: -1.00%

Function 67548BF0 Relevance: 6.0, APIs: 3, Strings: 1, Instructions: 21COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,?,?,67547750), ref: 67548BFC
TlsGetValue.KERNEL32(?,?,?,?,?,67547750), ref: 67548C0A
SetLastError.KERNEL32(?,?,?,?,?,?,67547750), ref: 67548C18

Strings

PwTg, xrefs: 67548C23

Memory Dump Source

Source File: 00000010.00000002.2464023360.0000000067541000.00000020.00000001.01000000.00000011.sdmp, Offset: 67540000, based on PE: true

Associated: 00000010.00000002.2463980469.0000000067540000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464120924.000000006754B000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464168986.0000000067551000.00000002.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464214723.0000000067552000.00000004.00000001.01000000.00000011.sdmpDownload File
Associated: 00000010.00000002.2464256525.0000000067553000.00000002.00000001.01000000.00000011.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_67540000_javaw.jbxd

Similarity

API ID: ErrorLast$Value
String ID: PwTg
API String ID: 1883355122-3069625024
Opcode ID: 4b2828f55c3f187b55ece3b4de4bc2a179ea7b75392ecde180fdfc36fa8c2b91
Instruction ID: 8fe04afcd32c62930905f8180619b2caedb21b9255bb1bee1090734848838cd0
Opcode Fuzzy Hash: 4b2828f55c3f187b55ece3b4de4bc2a179ea7b75392ecde180fdfc36fa8c2b91
Instruction Fuzzy Hash: DBE0E5B59003089FDB00EFBCC98A05EBBB4BB09210F4141A9ED45A3301E635AA548BC6

Uniqueness

Uniqueness Score: -1.00%

Function 6A3B8C3C Relevance: 6.0, APIs: 4, Instructions: 19COMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 6A3B8C45

Part of subcall function 6A3B8DB7: HeapFree.KERNEL32(00000000,00000000,?,6A3BD5FC,?,00000000,?,00000000,?,6A3BD623,?,00000007,?,?,6A3BBA34,?), ref: 6A3B8DCD
Part of subcall function 6A3B8DB7: GetLastError.KERNEL32(?,?,6A3BD5FC,?,00000000,?,00000000,?,6A3BD623,?,00000007,?,?,6A3BBA34,?,?), ref: 6A3B8DDF

_free.LIBCMT ref: 6A3B8C58
_free.LIBCMT ref: 6A3B8C69
_free.LIBCMT ref: 6A3B8C7A

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: b0f994b4095aea56eb3b54f15f7bf1cb402a39c2b8b078904517aa6ca131a492
Instruction ID: 920da8c8c7c9c1b7c573cf0370e26043049ee7e2cd617686412ecfeceb49d2b6
Opcode Fuzzy Hash: b0f994b4095aea56eb3b54f15f7bf1cb402a39c2b8b078904517aa6ca131a492
Instruction Fuzzy Hash: 41E0BF71480221DF8E526F199C054953BFAB7B6784742000BF58693611DF757D12DB81

Uniqueness

Uniqueness Score: -1.00%

Function 6A3BE683 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 154COMMON

Download Yara Rule

APIs

DecodePointer.KERNEL32(?,?,?,?,?,?,?,?,?,?,6A3BE05F), ref: 6A3BE6A6

Strings

_;j, xrefs: 6A3BE88B
S<j, xrefs: 6A3BE849

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID: DecodePointer
String ID: _;j$S<j
API String ID: 3527080286-1354403045
Opcode ID: bc60205624bd066c9dc60bca8b2fa39e0232c9900b604e4d54a562272dcb2d59
Instruction ID: fd85266ab1325fc371f65e2a5085eaf9a38f69bb569ee0f38056e61d9ab6c7b1
Opcode Fuzzy Hash: bc60205624bd066c9dc60bca8b2fa39e0232c9900b604e4d54a562272dcb2d59
Instruction Fuzzy Hash: 1E519C74940A09DBCB10CF9CD94939CBBBAFB6B300F2101C5E491AAA54DF76E920CB65

Uniqueness

Uniqueness Score: -1.00%

Function 6C544B66 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 132COMMON

Download Yara Rule

APIs

GetCPInfo.KERNEL32(?,?,00000005,?,?), ref: 6C544B8B

Strings

PTl, xrefs: 6C544B7D
, xrefs: 6C544BD0

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: Info
String ID: $PTl
API String ID: 1807457897-3411319798
Opcode ID: 7e064521d0e35f14326fc9efc769411b53bd9246e6050f3959c1a06328c44024
Instruction ID: 386420fca0a6f4157b14c2d3aab0a4581faa820e9302578c5c5430b55fefc6b3
Opcode Fuzzy Hash: 7e064521d0e35f14326fc9efc769411b53bd9246e6050f3959c1a06328c44024
Instruction Fuzzy Hash: CE4138B154424C9ADF22CE288C84BE6BBBDEB56308F1844ECE59987542E3359A45CF60

Uniqueness

Uniqueness Score: -1.00%

Function 6C542C7F Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 123COMMON

Download Yara Rule

Strings

C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe, xrefs: 6C542CC2, 6C542CC9, 6C542CFD
PE, xrefs: 6C542CD1

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID:
String ID: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe$PE
API String ID: 0-528247127
Opcode ID: 7a3ea327797c71f37c1b9d34b261d4622a1eca8368e827a85cabbaaa5907230c
Instruction ID: 0f4b441991df8c2e02e72e40ac04a02803f2bff07af35c318cca22a4b360c1c4
Opcode Fuzzy Hash: 7a3ea327797c71f37c1b9d34b261d4622a1eca8368e827a85cabbaaa5907230c
Instruction Fuzzy Hash: 97418071A40228EFDB12DF99CC889DEBBF8EBC9314F10816AE814D7750D7718A45CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 6A3B617E Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 43COMMON

Download Yara Rule

APIs

__CxxThrowException@8.LIBVCRUNTIME ref: 6A3B6604

Part of subcall function 6A3B74AF: RaiseException.KERNEL32(?,?,?,&f;j,?,?,?,?,?,?,?,?,6A3B6626,?,6A3C6698), ref: 6A3B750E

__CxxThrowException@8.LIBVCRUNTIME ref: 6A3B6621

Strings

Unknown exception, xrefs: 6A3B662E

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID: Exception@8Throw$ExceptionRaise
String ID: Unknown exception
API String ID: 3476068407-410509341
Opcode ID: 579ec79a9a9a9001455225e31c6af523c90eddef9c3fd4025eb0c5d591d69227
Instruction ID: 4c3d3adab0dc3c37d24ac9a28553303f1197b65588a783ea164fbe0b6cf2551a
Opcode Fuzzy Hash: 579ec79a9a9a9001455225e31c6af523c90eddef9c3fd4025eb0c5d591d69227
Instruction Fuzzy Hash: E1F0C23480420C77CB00EAB8DC0999D777F9E20214F914125E96996CA3FF31E726C5D5

Uniqueness

Uniqueness Score: -1.00%

Function 6C5451EF Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 6COMMON

Download Yara Rule

APIs

GetCommandLineA.KERNEL32 ref: 6C5451EF
GetCommandLineW.KERNEL32 ref: 6C5451FA

Strings

PE, xrefs: 6C5451F5

Memory Dump Source

Source File: 00000010.00000002.2464925852.000000006C511000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000010.00000002.2464884587.000000006C510000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465561424.000000006C54B000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C56E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2465906904.000000006C570000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000010.00000002.2466022146.000000006C573000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6c510000_javaw.jbxd

Similarity

API ID: CommandLine
String ID: PE
API String ID: 3253501508-650672642
Opcode ID: 9e3a0c0262a950130597df1c2051313463b7a49e6a24cdbed4ccbec5334fb7a0
Instruction ID: 5d181ba5cb04fd17deb73bc7dee92d22fbceb2163c8e44db1f42e655294b988e
Opcode Fuzzy Hash: 9e3a0c0262a950130597df1c2051313463b7a49e6a24cdbed4ccbec5334fb7a0
Instruction Fuzzy Hash: FEB092B8A20655CFCF41BF32880D01C3BF0F68A30A3828057E809C2704DA360080DF68

Uniqueness

Uniqueness Score: -1.00%

Function 6A3BA5B4 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 6COMMON

Download Yara Rule

APIs

GetCommandLineA.KERNEL32 ref: 6A3BA5B4
GetCommandLineW.KERNEL32 ref: 6A3BA5BF

Strings

PE, xrefs: 6A3BA5BA

Memory Dump Source

Source File: 00000010.00000002.2464353336.000000006A3B1000.00000020.00000001.01000000.00000016.sdmp, Offset: 6A3B0000, based on PE: true

Associated: 00000010.00000002.2464305694.000000006A3B0000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464589578.000000006A3C1000.00000002.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464753939.000000006A3CC000.00000004.00000001.01000000.00000016.sdmpDownload File
Associated: 00000010.00000002.2464808988.000000006A3CE000.00000002.00000001.01000000.00000016.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_6a3b0000_javaw.jbxd

Similarity

API ID: CommandLine
String ID: PE
API String ID: 3253501508-650672642
Opcode ID: c96af8e781aca2e4a3a42853c4ddbd7bda8db72ad85cbce2680a8013cdf650e5
Instruction ID: bfe461f4f7418bb7893c45be025cb39bd1c178befec5b0a315fd0923ffc1a465
Opcode Fuzzy Hash: c96af8e781aca2e4a3a42853c4ddbd7bda8db72ad85cbce2680a8013cdf650e5
Instruction Fuzzy Hash: 61B092B88802909FCF90AF31880C084BBF8B38B2423800056E807C3304E638284CEF24

Uniqueness

Uniqueness Score: -1.00%

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to hide configuration information within Registry keys, remove information as part of cleaning up, or as part of other techniques to aid in persistence and execution.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may collect data stored in the clipboard from users copying information within or between applications.
Tactics:	Collection
Data Sources:	Command: Command Execution, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Bitcoin Miner

Compliance

Spreading

Software Vulnerabilities

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Program Files (x86)\DocFetcher\DocFetcher.exe

C:\Program Files (x86)\DocFetcher\Readme.txt

C:\Program Files (x86)\DocFetcher\docfetcher-daemon-windows.exe

C:\Program Files (x86)\DocFetcher\help\Chinese (China)\DocFetcher_Manual.html

C:\Program Files (x86)\DocFetcher\help\Chinese (China)\DocFetcher_Manual_files\Indexing_Options.html

C:\Program Files (x86)\DocFetcher\help\Chinese (China)\DocFetcher_Manual_files\Memory_Limit.html

C:\Program Files (x86)\DocFetcher\help\Chinese (China)\DocFetcher_Manual_files\Portable_Repositories.html

C:\Program Files (x86)\DocFetcher\help\Chinese (China)\DocFetcher_Manual_files\Preferences.html

C:\Program Files (x86)\DocFetcher\help\Chinese (China)\DocFetcher_Manual_files\Query_Syntax.html

C:\Program Files (x86)\DocFetcher\help\Chinese (China)\DocFetcher_Manual_files\Regular_Expressions.html

C:\Program Files (x86)\DocFetcher\help\Chinese (China)\DocFetcher_Manual_files\Release_Notification.html

C:\Program Files (x86)\DocFetcher\help\Chinese (China)\DocFetcher_Manual_files\Watch_Limit.html

C:\Program Files (x86)\DocFetcher\help\Chinese (China)\DocFetcher_Manual_files\bullet.png

Windows Analysis Report
https://sourceforge.net/projects/docfetcher/files/docfetcher/1.1.25/docfetcher_1.1.25_win32_setup.exe/download

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre