{"report_id":"10e776ba-b4b6-4025-afaf-a2405bccc74d","version":6,"status":"done","tags":[],"date":"2023-12-05T08:19:27Z","url":{"schema":"http","addr":"cli.re/bpjdA8","fqdn":"cli.re","domain":"cli.re","tld":"re"},"ip":{"addr":"104.21.94.71","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","fqdn":"www.mediafire.com","domain":"mediafire.com","tld":"com"},"title":"!@#Setup-Pa$$W0rd-2024"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T09:03:11Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"translate.googleapis.com","ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":1005,"first_seen":"2012-05-31 09:21:21","last_seen":"2023-12-04 14:42:31","alert_count":0,"request_count":2,"received_data":83605,"sent_data":1165,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-09-09 02:40:21","last_seen":"2023-12-05 06:14:20","alert_count":0,"request_count":1,"received_data":4198,"sent_data":466,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2016-07-26 11:37:06","last_seen":"2023-12-05 08:08:22","alert_count":0,"request_count":3,"received_data":8893,"sent_data":1634,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2013-05-22 04:07:37","last_seen":"2023-12-05 06:24:59","alert_count":0,"request_count":3,"received_data":233135,"sent_data":1349,"comment":"","tags":null,"fingerprints":null},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":0,"first_seen":"2022-03-17 12:26:33","last_seen":"2023-12-05 05:10:23","alert_count":0,"request_count":1,"received_data":448,"sent_data":848,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cli.re","ip":{"addr":"172.67.220.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2014-02-12","domain_rank":0,"first_seen":"2015-12-28 02:56:46","last_seen":"2023-12-02 13:16:25","alert_count":0,"request_count":1,"received_data":95139,"sent_data":481,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.google.com","ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":1156,"first_seen":"2012-05-30 03:30:32","last_seen":"2023-12-04 05:10:19","alert_count":0,"request_count":2,"received_data":33764,"sent_data":947,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate-pa.googleapis.com","ip":{"addr":"142.250.74.138","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":1620,"first_seen":"2021-11-04 07:37:42","last_seen":"2023-12-04 09:43:34","alert_count":0,"request_count":1,"received_data":2285,"sent_data":543,"comment":"","tags":null,"fingerprints":null},{"fqdn":"softsssall.mediafire.com","ip":{"addr":"104.16.114.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":95034,"sent_data":516,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.56.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":1294,"first_seen":"2019-09-24 16:34:56","last_seen":"2023-12-04 06:35:54","alert_count":0,"request_count":1,"received_data":20383,"sent_data":512,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.mediafire.com","ip":{"addr":"104.16.114.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2002-08-11","domain_rank":47565,"first_seen":"2017-12-11 22:20:42","last_seen":"2023-12-02 20:06:38","alert_count":0,"request_count":5,"received_data":10474,"sent_data":4684,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.mediafire.com","ip":{"addr":"104.16.114.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2002-08-11","domain_rank":30109,"first_seen":"2012-05-22 04:29:38","last_seen":"2023-12-03 20:09:06","alert_count":0,"request_count":10,"received_data":129817,"sent_data":9745,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.no","ip":{"addr":"142.250.74.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":25607,"first_seen":"2016-04-05 21:50:59","last_seen":"2023-12-05 05:55:22","alert_count":0,"request_count":1,"received_data":580,"sent_data":594,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2023-12-05T08:19:14Z","timestamp":1701764354,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":38220,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET HUNTING File Sharing Related Domain (www .mediafire .com) in DNS Lookup","source":"{\"timestamp\":\"2023-12-05T08:19:14.177222+0000\",\"flow_id\":381826300556358,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.203\",\"src_port\":38220,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2043259,\"rev\":1,\"signature\":\"ET HUNTING File Sharing Related Domain (www .mediafire .com) in DNS Lookup\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2023_01_10\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2023_01_10\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":38670,\"rrname\":\"www.mediafire.com\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":88,\"bytes_toclient\":0,\"start\":\"2023-12-05T08:19:14.177222+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-05T08:19:14Z","timestamp":1701764354,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":46627,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET HUNTING File Sharing Related Domain (www .mediafire .com) in DNS Lookup","source":"{\"timestamp\":\"2023-12-05T08:19:14.177395+0000\",\"flow_id\":475267609048307,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.203\",\"src_port\":46627,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2043259,\"rev\":1,\"signature\":\"ET HUNTING File Sharing Related Domain (www .mediafire .com) in DNS Lookup\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2023_01_10\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2023_01_10\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":29538,\"rrname\":\"www.mediafire.com\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":88,\"bytes_toclient\":0,\"start\":\"2023-12-05T08:19:14.177395+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-05T08:19:14Z","timestamp":1701764354,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":55779,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET HUNTING File Sharing Related Domain (www .mediafire .com) in DNS Lookup","source":"{\"timestamp\":\"2023-12-05T08:19:14.892049+0000\",\"flow_id\":2185961672973457,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.203\",\"src_port\":55779,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2043259,\"rev\":1,\"signature\":\"ET HUNTING File Sharing Related Domain (www .mediafire .com) in DNS Lookup\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2023_01_10\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2023_01_10\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":14621,\"rrname\":\"www.mediafire.com\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":88,\"bytes_toclient\":0,\"start\":\"2023-12-05T08:19:14.892049+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-05T08:19:15Z","timestamp":1701764355,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":38824,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET HUNTING File Sharing Related Domain (www .mediafire .com) in DNS Lookup","source":"{\"timestamp\":\"2023-12-05T08:19:15.117642+0000\",\"flow_id\":910772997966730,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.203\",\"src_port\":38824,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2043259,\"rev\":1,\"signature\":\"ET HUNTING File Sharing Related Domain (www .mediafire .com) in DNS Lookup\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2023_01_10\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2023_01_10\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":51113,\"rrname\":\"www.mediafire.com\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":88,\"bytes_toclient\":0,\"start\":\"2023-12-05T08:19:15.117642+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-05T08:19:15Z","timestamp":1701764355,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":53495,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET HUNTING File Sharing Related Domain (www .mediafire .com) in DNS Lookup","source":"{\"timestamp\":\"2023-12-05T08:19:15.141243+0000\",\"flow_id\":1408924779751355,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.203\",\"src_port\":53495,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2043259,\"rev\":1,\"signature\":\"ET HUNTING File Sharing Related Domain (www .mediafire .com) in DNS Lookup\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2023_01_10\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2023_01_10\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":62148,\"rrname\":\"www.mediafire.com\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":88,\"bytes_toclient\":0,\"start\":\"2023-12-05T08:19:15.141243+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-05T08:19:15Z","timestamp":1701764355,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":39950,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET HUNTING File Sharing Related Domain (www .mediafire .com) in DNS Lookup","source":"{\"timestamp\":\"2023-12-05T08:19:15.311015+0000\",\"flow_id\":2007381227847399,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.203\",\"src_port\":39950,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2043259,\"rev\":1,\"signature\":\"ET HUNTING File Sharing Related Domain (www .mediafire .com) in DNS Lookup\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2023_01_10\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2023_01_10\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":28390,\"rrname\":\"www.mediafire.com\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":88,\"bytes_toclient\":0,\"start\":\"2023-12-05T08:19:15.311015+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-05T08:19:15Z","timestamp":1701764355,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":35503,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET HUNTING File Sharing Related Domain (www .mediafire .com) in DNS Lookup","source":"{\"timestamp\":\"2023-12-05T08:19:15.327331+0000\",\"flow_id\":2050919311343267,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.203\",\"src_port\":35503,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2043259,\"rev\":1,\"signature\":\"ET HUNTING File Sharing Related Domain (www .mediafire .com) in DNS Lookup\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2023_01_10\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2023_01_10\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":56746,\"rrname\":\"www.mediafire.com\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":88,\"bytes_toclient\":0,\"start\":\"2023-12-05T08:19:15.327331+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-05T08:19:15Z","timestamp":1701764355,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":37151,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET HUNTING File Sharing Related Domain (www .mediafire .com) in DNS Lookup","source":"{\"timestamp\":\"2023-12-05T08:19:15.716475+0000\",\"flow_id\":84661808393915,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.203\",\"src_port\":37151,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2043259,\"rev\":1,\"signature\":\"ET HUNTING File Sharing Related Domain (www .mediafire .com) in DNS Lookup\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2023_01_10\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2023_01_10\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":28151,\"rrname\":\"www.mediafire.com\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":88,\"bytes_toclient\":0,\"start\":\"2023-12-05T08:19:15.716475+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-05T08:19:16Z","timestamp":1701764356,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":43321,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET HUNTING File Sharing Related Domain (www .mediafire .com) in DNS Lookup","source":"{\"timestamp\":\"2023-12-05T08:19:16.260749+0000\",\"flow_id\":189025218787981,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.203\",\"src_port\":43321,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2043259,\"rev\":1,\"signature\":\"ET HUNTING File Sharing Related Domain (www .mediafire .com) in DNS Lookup\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2023_01_10\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2023_01_10\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":63037,\"rrname\":\"www.mediafire.com\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":88,\"bytes_toclient\":0,\"start\":\"2023-12-05T08:19:16.260749+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-05T08:19:16Z","timestamp":1701764356,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":51103,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET HUNTING File Sharing Related Domain (www .mediafire .com) in DNS Lookup","source":"{\"timestamp\":\"2023-12-05T08:19:16.300281+0000\",\"flow_id\":1817526493549817,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.203\",\"src_port\":51103,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2043259,\"rev\":1,\"signature\":\"ET HUNTING File Sharing Related Domain (www .mediafire .com) in DNS Lookup\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2023_01_10\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2023_01_10\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":30904,\"rrname\":\"www.mediafire.com\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":88,\"bytes_toclient\":0,\"start\":\"2023-12-05T08:19:16.300281+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-05T08:19:28Z","timestamp":1701764368,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":45529,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET HUNTING File Sharing Related Domain (www .mediafire .com) in DNS Lookup","source":"{\"timestamp\":\"2023-12-05T08:19:28.999522+0000\",\"flow_id\":1578979715727458,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.203\",\"src_port\":45529,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2043259,\"rev\":1,\"signature\":\"ET HUNTING File Sharing Related Domain (www .mediafire .com) in DNS Lookup\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2023_01_10\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2023_01_10\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":10002,\"rrname\":\"www.mediafire.com\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":88,\"bytes_toclient\":0,\"start\":\"2023-12-05T08:19:28.999522+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-K68XP6D85D\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8bcbd0bdf4d2e0124357e958a3b9e05","sha1":"929e97ab059bfc849bbf48b5f78dfccb1b67241e","sha256":"9f86c209c3767019c3a2cc2808be42b62d74927008c92ea3e5a14ac5e0e2186b","sha512":"a4c6decce0337d3d1656a085577c540ed01e5a11e9e4d9846cf2692228f629b72d30097b4c2ea1af31e1dc55f62346cd0d1e687351fd3444844e4e769e52dd42","ssdeep":"3072:3XPdZAlCIWYMuUyO1jMmypDDMlMT6LhA9DfFWkVR8rIs55qd4w:nPfIHMuUy4dAT6LhA9DfYq6rIs58","tlshash":"7734f7da7382706692a6f478403f024ba5bb69d2b85ccc95f1c9cde02e7469a4177f3c","size":240017,"data":"","first_seen":"2023-12-05T09:19:33Z","last_seen":"2023-12-05T22:06:35Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","fqdn":"www.mediafire.com","domain":"mediafire.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"b48f6456cd553104202c2fe61ec8cbb2","sha1":"4fbad834a07d18b0ade2982ef26e5844a1ff7e86","sha256":"49c39104f0cd65772725e7b3d1ac247ae42f1735cb07831aa5d19e3fa5c6233a","sha512":"8cd78d6e6076d8e33ed463a27ac6adf092153746a2cfb5164cc3b92684698e026bb82506e875414bffabaaa8d00c2ed99d08d02ca8e08f1ebd2f6b713f469035","ssdeep":"","tlshash":"dc90029510461615022c41452716a76d9561402290048106b98841462f1680b62d0686","size":51,"data":"","first_seen":"2023-03-13T08:44:45Z","last_seen":"2026-04-22T16:57:46.81994Z","times_seen":396,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","fqdn":"www.mediafire.com","domain":"mediafire.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"5056f7a6f0a28331104c88518553b515","sha1":"2d9d48958d1e9322aafe8c2b87fe9295f2d5fd31","sha256":"1ea9fcc80b5b27fcd454b96df54a8ee149599d7704fc68ebe3df481f22dcaa8c","sha512":"3c91cc7cc2ef32f305a429b460b990ed8e45ff5e0080936525ec6833bef3496f109818eaee30d9883fde841694e6b71dff0b39340bc77f6af54db76a22c3fb5c","ssdeep":"","tlshash":"f9e08c982947087242baaa3aef2a918e2f7e521379c1daf0bb4d12443f2cf139540758","size":366,"data":"","first_seen":"2023-11-06T19:21:23Z","last_seen":"2024-08-20T20:39:23.890046Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","fqdn":"www.mediafire.com","domain":"mediafire.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"e48418f18355925eaea03355309b2e00","sha1":"c51214ad93526b8c02f9624b7ef0dda8c7dfe9a5","sha256":"2fd1cae6706b4ee934c5c6f90d0aee52851d2310a9a4a413dca147cf907906e1","sha512":"6cf87346590b7287c14c2b230eeccf417d8342d591ac33373dee9fc428ca72e1aee5af5efcdccddbc66b4fd3c5fc0051572d7be7b8ca47de342978b74016a769","ssdeep":"","tlshash":"3e413349be156cb82793086c9b6f640a737c660b6878c240b3d5c78d1fbcb550146fac","size":1984,"data":"","first_seen":"2023-03-07T01:03:08Z","last_seen":"2026-05-14T10:50:58.119449Z","times_seen":2370,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mediafire.com/file/01qf3gtk547xus3/sandbox%20eval%20code","fqdn":"www.mediafire.com","domain":"mediafire.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"69c02be3f74421ae2f1156f2b810e043a2c62b015ae7c402f00e003f2440fea4eee1e8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-21T07:39:47.758056Z","times_seen":893847,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mediafire.com/_/translate_http/_/js/k=translate_http.tr.no.F6iRVDW95aA.O/am=AAM/d=1/rs=AN8SPfqTarZ7CfwZuRZ6kojPhk2UtLhMeg/m=el_conf","fqdn":"www.mediafire.com","domain":"mediafire.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3783cd5da7a1d85db5d966880be0e0fe","sha1":"04429491cbaaf5956e8f9d6f0655324b11c085c4","sha256":"13ddba013cc1a19b0f53d23a0b20f66fd14f8dcd7022e05b3ada7580cb54247f","sha512":"b2df804377646f4295942e957a9c23cde126d91f1448a598a2948b90274e03baac71695af8ac03e67bef153a47f110f9e53a0b9105ebba7ac961ac8257d27324","ssdeep":"1536:XzzC668tXuoYoi76JHzk0PJMMVpGj2Yx4EJ3gyGU7y1GOTVzMNiwwNWQQ:X836a0hMmpI4EJ9cTmNi5Q","tlshash":"fe93a688b6a27565c263b5b5413f000fb27f59a9f8484cacb688d8e16df094d423bf7d","size":90221,"data":"","first_seen":"2024-08-20T16:43:21.801896Z","last_seen":"2024-08-20T16:43:21.801896Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","fqdn":"www.mediafire.com","domain":"mediafire.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"7b0298352717334914068ec708c9513a","sha1":"faf49acfb2d927211e20a345a4f6d77b31fbb539","sha256":"16d9425c57376be8131894bb4b01fea2547be2fbbed0f3587cba20af9dae4190","sha512":"80a3a51cc91211f9133dd8afbeb2f2ef5310c3614357d351fe54df52a0a7b010ff3da34278557a8774feeed4bfc6dbd9503a5f86825e826d844ac6fa7f94d01c","ssdeep":"","tlshash":"07e0c0da7415087570d905b523b2a1297143220868095c22cdfdc9242868587481248c","size":340,"data":"","first_seen":"2023-03-07T01:03:08Z","last_seen":"2026-05-14T10:50:58.120274Z","times_seen":2370,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","fqdn":"www.mediafire.com","domain":"mediafire.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"a68f6aac9d86e169f4b85835b880235a","sha1":"c6a5e1e6f04c84d4589b62f873f0c3ac1a47e9bf","sha256":"e8436cb372105c025d756b37f97bd6303ff7ed7e5e4f2868dbc63be07b447de6","sha512":"65bd135e555031fc2a1fa336f1bba5de10877e927e3f42d0968adb1d53bb395df56c99e555fad952d4b0c56442e804364bc22d2a51814373b780a359a58371fc","ssdeep":"","tlshash":"9af0c20b64b6001a44e2f10ae7ba09c82839850f043e6d643b4f80976fe6b1c239d598","size":541,"data":"","first_seen":"2023-03-07T14:58:53Z","last_seen":"2026-01-28T08:53:54.492188Z","times_seen":755,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","fqdn":"www.mediafire.com","domain":"mediafire.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d9dd3dfd08271e8e67d096e4e43db5c","sha1":"973cda2469d945e79930c96089eff05ee619294c","sha256":"2c6a061a66c76e6a96530d6190e183aa6d17932f0d76778bba8bd9a6d80e09cf","sha512":"8831c8c7f75e55e21782a8ccc2b0ec8f3faf2de4494d27672186a1a6ac40f40b66320dc99ae2488b708f31326a6877dda870ac8533ee2ee081063a90281a3df0","ssdeep":"","tlshash":"2c01a06f39d36076911330298bff2149753608534407d600bd6c67cabfb67339565a9f","size":658,"data":"","first_seen":"2023-03-07T01:03:08Z","last_seen":"2025-06-10T17:52:37.499578Z","times_seen":1412,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-53LP4T","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd517cf47dce75a151ebb2cc8d2eb3b4","sha1":"5b32fe4306d3566a873a054ee9e9a29d444cc515","sha256":"9bf33d3cdeacf983373af0536c2e2775b3cf34547a74f4847e905c551bea97be","sha512":"196b4533bdfade54e98fd831de20d921f2d5318ab51be08c99fe2c6f6213d5ec3ea03a575a4a4864df207f83ac2a53bc021087f1987f359da84e07403ba3325b","ssdeep":"3072:X6dZAlCXWYd1j1CypDDMpM5/hA9DfFWkpp9w1OhlaD64X:X6fXHrIM5/hA9DfYI9lad","tlshash":"6e4418c9b3827476c2a37564903f060bb27e2cd3b54cac54e189c8d42eb85b96177f6e","size":265800,"data":"","first_seen":"2023-12-05T09:19:34Z","last_seen":"2023-12-05T20:51:23Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mediafire.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"www.mediafire.com","domain":"mediafire.com","tld":"com"},"ip":{"addr":"104.16.114.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d4a243a32a4d9a6c40f40d71d55bfe6","sha1":"f58f5bfef45df211dd661cbd765076df5c73a435","sha256":"e99a88e8aa760dac23e859a19da2fc927af0e62877bf239cd0e46518db06b9cd","sha512":"9a3d6a10bf4457407935543bf8ab7097a8a44bc57b879c0f195e42b001870d6eebb4a0d6de2173e7a8b442ac316c2a06353fa669fd53ff32bcf989fb1cf8e5e8","ssdeep":"192:qv3g3mYOpJUvOp95iUqh7gamfPVk2cIF2LmX1fbI:A3gTOpyOp/02jGI1jI","tlshash":"89e12acb3985306b137258a702afa25b110dbfa658891c4adb30c4f8bf33344569fee5","size":7336,"data":"","first_seen":"2023-12-05T09:19:34Z","last_seen":"2023-12-05T10:08:25Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-829541-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c412c31ab7e4a5c5c97111ccfc41b23","sha1":"a918cf8228b05d2d0e1f82658f29d18644048522","sha256":"4387cb621ced1c08574413866413ddc84e37b4caeb911d9151f8c02b5d67d4de","sha512":"d7aef615022e4bf413099e83eacd9a78de4442422723c4c8a9ccbcee76b414a30bdc813ea1e0c9f66def4d666cd324fe71fbf186cf30e5301a0b3bd18a3ac078","ssdeep":"3072:LldZAlCIWYb1jdc+ypDWMpME/hA9DfFWkbp9i54n:RfIHJNlE/hA9DfYGgA","tlshash":"5404e6d8b793b06682a3b474503f110bf17b6d92f84ccc94e18ac5d52eb86a9417bf6c","size":178037,"data":"","first_seen":"2023-12-05T09:19:34Z","last_seen":"2023-12-05T22:06:35Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:gr5xyIhZ6pQ/d/bTQcFeqZVxNnR36Hc9lDJlQC8dA9Sa5fLtUB5roNiEP:gr58IhZ6pg/bTXVx9t689fN8INtEONig","tlshash":"7ea1cd9b39e650310332bfe91bfaa559b22937605220c161be0c915b7399233d3e1bec","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-21T07:39:47.796653Z","times_seen":892185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","fqdn":"www.mediafire.com","domain":"mediafire.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"ac28d3adfc51fa961f442efde7c10ce6","sha1":"faed185c2f5dea63f1140b033f7d6e8c02c29295","sha256":"c78d75016d77016fa0ef5cd7ee429bb10974397b970ef6eb975bce72099c29c6","sha512":"1abfbb8baf10e8ab2ff6a7e88b38cff811e9a80ae28c69f103e55321d964cd3d4e9f49da3e1838f578b86bba6c49fe9e58a06598c2cfeb9b897c9efe1ae3f82d","ssdeep":"","tlshash":"2121665a6bff0855f6ebb0388faf32463672444b1a45de05bd1cd6804f9163852b4fe4","size":1435,"data":"","first_seen":"2023-03-07T01:03:08Z","last_seen":"2026-05-05T03:00:27.027602Z","times_seen":1580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","fqdn":"www.mediafire.com","domain":"mediafire.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d3cc144a4263f35a45be0ce301a7765","sha1":"d4f9599219bcf86d846eaf65ebd8833fa67ddcae","sha256":"9ee897df84988e54e3816800f2fd31ea5c2157dff7f21ab50fdb1eff4f1e3fde","sha512":"dbca49fa04a0407070c2ea9d38c589f65d6705bf35397add481ec23f98a0818d01cc11238e8dc851073b6490073618d255a04124f6b6796fe37e33896a917018","ssdeep":"","tlshash":"75d0a73e37e605a9d2e655a431ba479c182080511030d054b81cb5316fd9d535d25d49","size":244,"data":"","first_seen":"2023-03-07T01:03:08Z","last_seen":"2026-05-05T03:00:27.037589Z","times_seen":1594,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","fqdn":"www.mediafire.com","domain":"mediafire.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"1df3381b6a97bb2020bb71534c7daf65","sha1":"6d295b6cabd70fbded22248728758ce3318fa49d","sha256":"e8c6195869e6f00a50153e1f0cd43f366bf267f08928a3b0ee75a0e6a0d67290","sha512":"ee81c67de041b04ddd743c891707361a7cf90ccd61ddf2adf74eedf2ca6872dc18e44b4415e961cfcf9e604c1a9274ef4b0fd9470753bd02af91479ebff1b161","ssdeep":"192:4rNjr/GiiQz7FxXuvQ8Sgh/WdT8vWtxNo/3qOweX2GZikQGeoQRH80laGyah8GBe:WNjrnJHdgvdZLkH80r8GBXJtTNT5/oTN","tlshash":"7652546eb5e3007598b7347e67efb608383240031508dd11796c9a906f71ea7a8eafdd","size":14461,"data":"","first_seen":"2024-08-20T16:43:21.810128Z","last_seen":"2024-08-20T16:43:21.810128Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.56.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd1d068fdb5fe90b6c05a5b3940e088c","sha1":"0d96f9df8772633a9df4c81cf323a4ef8998ba59","sha256":"6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101","sha512":"7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30","ssdeep":"384:XrqR6Q0npafIm4rKi/BwEXN1w29mItq0W5i6G:Q70nBrKuB0Uqti6G","tlshash":"c692a6daba85723613f76076913f220b733b356528068458d22ad7c12c7d68f6317f6e","size":19986,"data":"","first_seen":"2023-10-13T06:51:00Z","last_seen":"2026-05-18T11:20:50.533726Z","times_seen":17331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e6c486e828202bb91df6a6f538d5c17","sha1":"9ddfc6004ed5309c3bf5bac5191da6ce9079ae72","sha256":"517e88ed98c7a12e03fcce3d4df16837e54a00cff58fc3ad1b8b8dff1ea65e44","sha512":"4c784e3c68f80373140e993671e0ed44aa74493d319f28b998c0f3564fae1fa19576967878343475bbc62aa54edabd4988c2fa5739b188e31f8ff69ce26efd2d","ssdeep":"","tlshash":"3dd097624aa6c43412d9008f60fac3a93a1011e42b13b90086cecc1faa00ed384a6c68","size":247,"data":"","first_seen":"2024-08-20T16:43:21.811699Z","last_seen":"2024-08-20T16:43:21.811699Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","fqdn":"www.mediafire.com","domain":"mediafire.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"f73495320c5339bf6dd20bdf8abd421e","sha1":"00e3250f052eab322ae032f1afaa658ac5dda9ee","sha256":"1f67e0d37ab8f1187d91e7e315f3a3b0938ddcb4291c68bc60d89e883dbe6a9c","sha512":"fc091f07b344aafd9cb89def607bea583f34411cad9da12f420fa78fec98a808f5751bb2508628128e13532516f6ac97b6e9cf774ec13f1c61979c4e0cfb25e2","ssdeep":"","tlshash":"17b0924ab52555c18f904c099aaab309d23a3f6b09e2a009302e0649779180ba2b8ee1","size":116,"data":"","first_seen":"2023-04-26T19:54:54Z","last_seen":"2026-05-05T03:00:27.040854Z","times_seen":1372,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","fqdn":"www.mediafire.com","domain":"mediafire.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"0a3b581c9a81221a904589b1d0fda6e4","sha1":"b9870618bbce76853ea35db253757b936142df81","sha256":"47559c1754a6bf9702677303ab64181fb47974394b4829bb64ed3033d785861e","sha512":"14e4b88e10fa1dfbecc9376a98f71ff5974aabeaaf942b7c693ffd343cfcbcbd422afca1bbdeadcbd0b17ea1358bf478943297fc9f252bec8b38ae54605f18d2","ssdeep":"","tlshash":"6a111f3921e8a13ec7c6609e21bdd7ac3e7c11523a0b5040816ddd5dad10d57d86fdbe","size":1074,"data":"","first_seen":"2024-08-20T16:43:21.81459Z","last_seen":"2024-08-20T16:43:21.81459Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.F6iRVDW95aA.O/d=1/exm=el_conf/ed=1/rs=AN8SPfq9pmT7tJkFFvUkid-e-0Wpomm2EQ/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"45498924419212780ef341b346f83f38","sha1":"407175bd46e2ac2ccd073473131c06da6c8cc9a5","sha256":"1cb3f0ad4f6b1cc587a2e0d16f7c71a298a67fd445dd9ed2ca370cb831ecc02e","sha512":"3705d43f226756e52cb5a2a89588efa484e1ba0ee5485b513fea5b7594cea9b18a65679128c224c2faecf327fe04f47920cb102b3dc28df85c0be1e165bb3cc3","ssdeep":"3072:3UZvqPEU5AsKp4RNTCt3K/xlF06Hiur9xgkOZ07vbnr5kKU:F0pK/xdVjbnrY","tlshash":"0c34e7d9b25270669263f4a5513f004bb23b685af8484d7cb68ce8e2adf4c59017bf7c","size":233382,"data":"","first_seen":"2023-12-04T22:08:10Z","last_seen":"2025-08-11T03:03:25.10906Z","times_seen":134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"257d49463eeec3d54ec1746b4c93362e","sha1":"96149ec43996ef38de4cb2f0501d1a2f8e2834c3","sha256":"e79ec683492f3ada142c6dda65bfe1eee30b29eb2c8fd7baf00fcca3afc79f71","sha512":"9231b1b8ba53c8c237c0f5ecbd8d9ae7e467da7b1b706c33825851be94e8c0f81f6b1cac2c8096b996f12f4f6dedc018f9a1f9c57ca4b280f6b8a65cb5c4cc2e","ssdeep":"","tlshash":"fb513fa1605ca01b5513d5d1f8a23eeef4de0058c37169e07e1c29efdaeac77049715d","size":3010,"data":"","first_seen":"2023-12-04T22:37:12Z","last_seen":"2024-08-20T16:46:21.425423Z","times_seen":297,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"static.mediafire.com/images/backgrounds/footer/social/footerIcons.png","fqdn":"static.mediafire.com","domain":"mediafire.com","tld":"com"},"ip":{"addr":"104.16.114.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","date":"2023-12-05T08:19:15.133Z","timestamp":1701764355133,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.mediafire.com","organization":"MEDIAFIRE, LLC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 18 Sep 2023 00:00:00 GMT","end":"Wed, 28 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8B:FA:81:04:17:18:84:C4:3E:8E:D5:89:AD:D6:5D:BD:9A:DF:84:DA","sha256":"CE:A8:07:DE:5F:98:9D:D6:FA:84:55:CD:49:82:C6:68:91:06:A4:A9:7D:1D:4C:3B:96:19:AD:95:73:BA:9A:89"}}},"request":{"raw":"GET /images/backgrounds/footer/social/footerIcons.png HTTP/1.1\r\nHost: static.mediafire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mediafire.com/\r\nCookie: ukey=c7dya7mhsdtsttbxk84tk9e6fz9efvoo; __cf_bm=WMHkfT2z..EQ385sZ5RTkrlUpOs9yqVS3pFO2qQb6DU-1701764348-0-AZbGe74FogT3cExx823//Y+vkcxtobzZ0Y+4wawMXNXeOj7urPdiTc6UnD+dzXtSvs9PKrZeg3VkzpfPK8bGj8I=; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-1%22%2C%22mf_content%22%3A%22Business%22%2C%22mf_medium%22%3A%22windows%5C%2FFirefox%22%2C%22mf_campaign%22%3A%2201qf3gtk547xus3%22%2C%22mf_term%22%3A%22969979866bfa2714453c28c162fba17d%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 08:19:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 583\r\nlast-modified: Mon, 25 Jul 2022 18:00:54 GMT\r\netag: \"62deda56-247\"\r\nexpires: Thu, 04 Jan 2024 03:33:11 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 7003\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830adccf28b056be-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":583,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 112 x 28, 8-bit/color RGBA, non-interlaced\\012- data","md5":"e0abc4fea89d2c5153b73cd02ac5ba13","sha1":"00465ef774805c82fb5b8a40b743f7b1a1d1a7d6","sha256":"f917a9105c311331b1d40f4d2bdbf11233c1c465616c1a9c46232f451463b061","sha512":"202aa7f925729cd1fe7f7e66b4217d90cd05b5fb8dde0b3991461f88afa11c1744a3f56974296ec155733669db44d96b6a84593a76f2e5be9c63016e3150f04c","ssdeep":"","tlshash":"63f002d26b6e213a8d7bbc3d017432776b54f070ce61bfe4e486106475415001808098","first_seen":"2023-04-05T13:19:11Z","last_seen":"2026-05-05T03:00:26.993125Z","times_seen":1675,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.mediafire.com/images/filetype/file-zip-v3.png","fqdn":"static.mediafire.com","domain":"mediafire.com","tld":"com"},"ip":{"addr":"104.16.114.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","date":"2023-12-05T08:19:15.127Z","timestamp":1701764355127,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.mediafire.com","organization":"MEDIAFIRE, LLC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 18 Sep 2023 00:00:00 GMT","end":"Wed, 28 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8B:FA:81:04:17:18:84:C4:3E:8E:D5:89:AD:D6:5D:BD:9A:DF:84:DA","sha256":"CE:A8:07:DE:5F:98:9D:D6:FA:84:55:CD:49:82:C6:68:91:06:A4:A9:7D:1D:4C:3B:96:19:AD:95:73:BA:9A:89"}}},"request":{"raw":"GET /images/filetype/file-zip-v3.png HTTP/1.1\r\nHost: static.mediafire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mediafire.com/\r\nCookie: ukey=c7dya7mhsdtsttbxk84tk9e6fz9efvoo; __cf_bm=WMHkfT2z..EQ385sZ5RTkrlUpOs9yqVS3pFO2qQb6DU-1701764348-0-AZbGe74FogT3cExx823//Y+vkcxtobzZ0Y+4wawMXNXeOj7urPdiTc6UnD+dzXtSvs9PKrZeg3VkzpfPK8bGj8I=; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-1%22%2C%22mf_content%22%3A%22Business%22%2C%22mf_medium%22%3A%22windows%5C%2FFirefox%22%2C%22mf_campaign%22%3A%2201qf3gtk547xus3%22%2C%22mf_term%22%3A%22969979866bfa2714453c28c162fba17d%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 08:19:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 1872\r\nlast-modified: Mon, 25 Jul 2022 18:00:54 GMT\r\netag: \"62deda56-750\"\r\nexpires: Thu, 04 Jan 2024 03:32:52 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 7003\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830adccf28ac56be-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1872,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 43 x 58, 8-bit/color RGBA, non-interlaced\\012- data","md5":"a23b8b7059e953fc1b74bf87a77ebb0c","sha1":"f23e0ad301389083104f04d4164fa57423387b17","sha256":"4448e430d3c53bad548a5d135e1c7e2f9593e806ba47892640d430ea752e979e","sha512":"b509ea166dea26793dd580cf4be88ee9b1e39b98f4b48ece0805e7df832e705967f586c54dd98a95bf130b7a0489debc532e0490e46e056d78c9331c6a2b95c1","ssdeep":"","tlshash":"d2313bd4a343782745f42621d3c4c79d7cbe9b04473715a03326242ba8d52b6d3440b4","first_seen":"2023-04-06T10:11:21Z","last_seen":"2026-05-20T19:30:32.972891Z","times_seen":1533,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-829541-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","date":"2023-12-05T08:19:14.864Z","timestamp":1701764354864,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:18:19 GMT","end":"Mon, 15 Jan 2024 11:18:18 GMT"},"fingerprint":{"sha1":"37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34","sha256":"11:4C:25:F9:AD:55:F4:E8:94:2E:64:99:7D:15:71:51:3E:11:44:0E:06:0D:EC:15:C3:6D:41:81:4B:0C:30:3D"}}},"request":{"raw":"GET /gtag/js?id=UA-829541-1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mediafire.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 05 Dec 2023 08:19:09 GMT\r\nexpires: Tue, 05 Dec 2023 08:19:09 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Tue, 05 Dec 2023 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 64914\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":64914,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (3026)","md5":"4c412c31ab7e4a5c5c97111ccfc41b23","sha1":"a918cf8228b05d2d0e1f82658f29d18644048522","sha256":"4387cb621ced1c08574413866413ddc84e37b4caeb911d9151f8c02b5d67d4de","sha512":"d7aef615022e4bf413099e83eacd9a78de4442422723c4c8a9ccbcee76b414a30bdc813ea1e0c9f66def4d666cd324fe71fbf186cf30e5301a0b3bd18a3ac078","ssdeep":"3072:LldZAlCIWYb1jdc+ypDWMpME/hA9DfFWkbp9i54n:RfIHJNlE/hA9DfYGgA","tlshash":"5404e6d8b793b06682a3b474503f110bf17b6d92f84ccc94e18ac5d52eb86a9417bf6c","first_seen":"2023-12-05T09:19:34Z","last_seen":"2023-12-05T22:06:35Z","times_seen":7,"resource_available":true,"data":null}},"time_used":542,"timings":{"blocked":245,"dns":1,"connect":8,"send":0,"wait":24,"receive":16,"ssl":244},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-53LP4T","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","date":"2023-12-05T08:19:15.191Z","timestamp":1701764355191,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:18:19 GMT","end":"Mon, 15 Jan 2024 11:18:18 GMT"},"fingerprint":{"sha1":"37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34","sha256":"11:4C:25:F9:AD:55:F4:E8:94:2E:64:99:7D:15:71:51:3E:11:44:0E:06:0D:EC:15:C3:6D:41:81:4B:0C:30:3D"}}},"request":{"raw":"GET /gtm.js?id=GTM-53LP4T HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mediafire.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 05 Dec 2023 08:19:09 GMT\r\nexpires: Tue, 05 Dec 2023 08:19:09 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Tue, 05 Dec 2023 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 83460\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83460,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (30556)","md5":"cd517cf47dce75a151ebb2cc8d2eb3b4","sha1":"5b32fe4306d3566a873a054ee9e9a29d444cc515","sha256":"9bf33d3cdeacf983373af0536c2e2775b3cf34547a74f4847e905c551bea97be","sha512":"196b4533bdfade54e98fd831de20d921f2d5318ab51be08c99fe2c6f6213d5ec3ea03a575a4a4864df207f83ac2a53bc021087f1987f359da84e07403ba3325b","ssdeep":"3072:X6dZAlCXWYd1j1CypDDMpM5/hA9DfFWkpp9w1OhlaD64X:X6fXHrIM5/hA9DfYI9lad","tlshash":"6e4418c9b3827476c2a37564903f060bb27e2cd3b54cac54e189c8d42eb85b96177f6e","first_seen":"2023-12-05T09:19:34Z","last_seen":"2023-12-05T20:51:23Z","times_seen":4,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mediafire.com/images/icons/svg_light/icons_sprite.svg","fqdn":"www.mediafire.com","domain":"mediafire.com","tld":"com"},"ip":{"addr":"104.16.114.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","date":"2023-12-05T08:19:15.129Z","timestamp":1701764355129,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.mediafire.com","organization":"MEDIAFIRE, LLC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 18 Sep 2023 00:00:00 GMT","end":"Wed, 28 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8B:FA:81:04:17:18:84:C4:3E:8E:D5:89:AD:D6:5D:BD:9A:DF:84:DA","sha256":"CE:A8:07:DE:5F:98:9D:D6:FA:84:55:CD:49:82:C6:68:91:06:A4:A9:7D:1D:4C:3B:96:19:AD:95:73:BA:9A:89"}}},"request":{"raw":"GET /images/icons/svg_light/icons_sprite.svg HTTP/1.1\r\nHost: www.mediafire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mediafire.com/file/01qf3gtk547xus3/!@\r\nCookie: ukey=c7dya7mhsdtsttbxk84tk9e6fz9efvoo; __cf_bm=WMHkfT2z..EQ385sZ5RTkrlUpOs9yqVS3pFO2qQb6DU-1701764348-0-AZbGe74FogT3cExx823//Y+vkcxtobzZ0Y+4wawMXNXeOj7urPdiTc6UnD+dzXtSvs9PKrZeg3VkzpfPK8bGj8I=; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-1%22%2C%22mf_content%22%3A%22Business%22%2C%22mf_medium%22%3A%22windows%5C%2FFirefox%22%2C%22mf_campaign%22%3A%2201qf3gtk547xus3%22%2C%22mf_term%22%3A%22969979866bfa2714453c28c162fba17d%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 08:19:09 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: 830adccf28ae56be-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 6374\r\netag: W/\"62deda56-90ab\"\r\nlast-modified: Mon, 25 Jul 2022 18:00:54 GMT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8816,"size_decoded":0,"mime_type":"image/svg+xml","magic":"gzip compressed data, from Unix\\012- data","md5":"23860144b156d87027e551fe0509d1f8","sha1":"0226523952562819bcc39343a741a9c17e50a155","sha256":"0c6238b216826aa3162e481d6443c423ee4332bbcd5bebc7308af0cf7cc58928","sha512":"98a9934429cd050bd7c7499f9b925feea4d85460b5f6ef851e0cf1e80e400a8a3e37dca971ef20c93404ed17bcc1d1a15db85dbaad08b57cac073fae046326c6","ssdeep":"","tlshash":"","first_seen":"2023-12-05T09:19:34Z","last_seen":"2023-12-05T09:19:34Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googHeadTranslate","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","date":"2023-12-05T08:19:15.301Z","timestamp":1701764355301,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:18:24 GMT","end":"Mon, 15 Jan 2024 11:18:23 GMT"},"fingerprint":{"sha1":"4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95","sha256":"15:CB:A2:CE:4B:FE:61:1E:1A:B7:EA:EF:89:4D:AC:02:D4:54:5E:C6:82:ED:66:53:FC:05:C1:2F:71:78:EA:AE"}}},"request":{"raw":"GET /translate_a/element.js?cb=googHeadTranslate HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mediafire.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 05 Dec 2023 08:19:09 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: CONSENT=PENDING+658; expires=Thu, 04-Dec-2025 08:19:09 GMT; path=/; domain=.google.com; Secure\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31566,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"gzip compressed data, max compression\\012- data","md5":"786279ceaad25154563b866cae554488","sha1":"57ebb415868989b824fe0357099634f8514e4c37","sha256":"10c62609bd3be6bab6bedaa382c1b3446ff451d6f3ac54c01af3546a215db081","sha512":"6f0b9e4102da8b852a61c4680a6417ea630658b35dfc455248554677b047c2e8aa9232b74b0b2bd090f4eeff590ef2e21b40a301019274e00031e3ac16476d53","ssdeep":"768:DNzeh9xsEjcgNB7QN9eKi817S0rjiSCiReFitbmion3pt/0D5mqIYy:hChXsELNFQNgKi85XiSC8Hbmiy5tMD8R","tlshash":"bde2f1541adffe24c405a50f341a612820d97ea14d6e4ba2fff6338e46e729099ca2d1","first_seen":"2023-12-05T09:19:34Z","last_seen":"2023-12-05T09:19:34Z","times_seen":1,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":72,"dns":37,"connect":7,"send":0,"wait":39,"receive":14,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-K68XP6D85D\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","date":"2023-12-05T08:19:15.794Z","timestamp":1701764355794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:18:19 GMT","end":"Mon, 15 Jan 2024 11:18:18 GMT"},"fingerprint":{"sha1":"37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34","sha256":"11:4C:25:F9:AD:55:F4:E8:94:2E:64:99:7D:15:71:51:3E:11:44:0E:06:0D:EC:15:C3:6D:41:81:4B:0C:30:3D"}}},"request":{"raw":"GET /gtag/js?id=G-K68XP6D85D\u0026l=dataLayer\u0026cx=c HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mediafire.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 05 Dec 2023 08:19:10 GMT\r\nexpires: Tue, 05 Dec 2023 08:19:10 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 82886\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82886,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (7711)","md5":"c8bcbd0bdf4d2e0124357e958a3b9e05","sha1":"929e97ab059bfc849bbf48b5f78dfccb1b67241e","sha256":"9f86c209c3767019c3a2cc2808be42b62d74927008c92ea3e5a14ac5e0e2186b","sha512":"a4c6decce0337d3d1656a085577c540ed01e5a11e9e4d9846cf2692228f629b72d30097b4c2ea1af31e1dc55f62346cd0d1e687351fd3444844e4e769e52dd42","ssdeep":"3072:3XPdZAlCIWYMuUyO1jMmypDDMlMT6LhA9DfFWkVR8rIs55qd4w:nPfIHMuUy4dAT6LhA9DfYq6rIs58","tlshash":"7734f7da7382706692a6f478403f024ba5bb69d2b85ccc95f1c9cde02e7469a4177f3c","first_seen":"2023-12-05T09:19:33Z","last_seen":"2023-12-05T22:06:35Z","times_seen":4,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":36,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mediafire.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"www.mediafire.com","domain":"mediafire.com","tld":"com"},"ip":{"addr":"104.16.114.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","date":"2023-12-05T08:19:15.200Z","timestamp":1701764355200,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.mediafire.com","organization":"MEDIAFIRE, LLC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 18 Sep 2023 00:00:00 GMT","end":"Wed, 28 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8B:FA:81:04:17:18:84:C4:3E:8E:D5:89:AD:D6:5D:BD:9A:DF:84:DA","sha256":"CE:A8:07:DE:5F:98:9D:D6:FA:84:55:CD:49:82:C6:68:91:06:A4:A9:7D:1D:4C:3B:96:19:AD:95:73:BA:9A:89"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: www.mediafire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ukey=c7dya7mhsdtsttbxk84tk9e6fz9efvoo; __cf_bm=WMHkfT2z..EQ385sZ5RTkrlUpOs9yqVS3pFO2qQb6DU-1701764348-0-AZbGe74FogT3cExx823//Y+vkcxtobzZ0Y+4wawMXNXeOj7urPdiTc6UnD+dzXtSvs9PKrZeg3VkzpfPK8bGj8I=; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-1%22%2C%22mf_content%22%3A%22Business%22%2C%22mf_medium%22%3A%22windows%5C%2FFirefox%22%2C%22mf_campaign%22%3A%2201qf3gtk547xus3%22%2C%22mf_term%22%3A%22969979866bfa2714453c28c162fba17d%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 05 Dec 2023 08:19:09 GMT\r\naccess-control-allow-origin: *\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js\r\ncache-control: max-age=300, public\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 830adccf58d556be-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":492,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"gzip compressed data, max speed\\012- data","md5":"8fa0c3dfd441f220607af2488e6c6693","sha1":"42b5cff7afeb3a6173b8e15a3482244b3db1fc2d","sha256":"59fffd241a29693b11fc6cc31f945859a75713cd3df99707e7659195b1cd82b0","sha512":"550cb6db5853a6bbb9156ba6e3ad289f697b44a8f95c08835ccb1a0e4b59fc3ccfd96be008661e42ab100d8418bbfb96680d3debb269fefebd8adbb6c475e85e","ssdeep":"","tlshash":"88f00e0d2d3873b3c84be4b88f22df9a25142ae109108a8968ad420042822ce87c8a0c","first_seen":"2023-12-05T09:19:34Z","last_seen":"2023-12-05T09:19:34Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mediafire.com/favicon.ico","fqdn":"www.mediafire.com","domain":"mediafire.com","tld":"com"},"ip":{"addr":"104.16.114.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","date":"2023-12-05T08:19:15.317Z","timestamp":1701764355317,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.mediafire.com","organization":"MEDIAFIRE, LLC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 18 Sep 2023 00:00:00 GMT","end":"Wed, 28 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8B:FA:81:04:17:18:84:C4:3E:8E:D5:89:AD:D6:5D:BD:9A:DF:84:DA","sha256":"CE:A8:07:DE:5F:98:9D:D6:FA:84:55:CD:49:82:C6:68:91:06:A4:A9:7D:1D:4C:3B:96:19:AD:95:73:BA:9A:89"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.mediafire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mediafire.com/file/01qf3gtk547xus3/!@\r\nCookie: ukey=c7dya7mhsdtsttbxk84tk9e6fz9efvoo; __cf_bm=WMHkfT2z..EQ385sZ5RTkrlUpOs9yqVS3pFO2qQb6DU-1701764348-0-AZbGe74FogT3cExx823//Y+vkcxtobzZ0Y+4wawMXNXeOj7urPdiTc6UnD+dzXtSvs9PKrZeg3VkzpfPK8bGj8I=; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-1%22%2C%22mf_content%22%3A%22Business%22%2C%22mf_medium%22%3A%22windows%5C%2FFirefox%22%2C%22mf_campaign%22%3A%2201qf3gtk547xus3%22%2C%22mf_term%22%3A%22969979866bfa2714453c28c162fba17d%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 08:19:09 GMT\r\ncontent-type: image/x-icon\r\ncf-ray: 830adcd069b256be-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 525892\r\ncache-control: max-age=2592000\r\netag: W/\"62deda56-2a46\"\r\nexpires: Wed, 27 Dec 2023 15:31:04 GMT\r\nlast-modified: Mon, 25 Jul 2022 18:00:54 GMT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5431,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 24x24, 8 bits/pixel\\012- data","md5":"7e3d95b3a05df5380677c088cadc5e90","sha1":"4bea4481b66f7d5a722f472355dfe6fdabaa0378","sha256":"d795dc457f279b5591bb0b9d61d387b619d06de4eab3ea04965b44ad20e6f3c6","sha512":"67bbf08240e1c6683ae7cfe7eff31736bc61294dcea0d34e750be7e7edea713a21b12d43fae3cce0f7cf727feb2c04a81c837318e6b51b2244e6065de5b23da0","ssdeep":"384:F8K2GIM78SY3fj7FzouZJqWfRpTpdHjPtcnG:yKTx7E3rpHjPwG","tlshash":"83e29811a35fc80ee3eba4729493acff22c455ff99b32de9be5a3391d8411a73095904","first_seen":"2023-07-18T14:15:37Z","last_seen":"2025-02-15T18:55:37.644328Z","times_seen":49,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.F6iRVDW95aA.O/d=1/exm=el_conf/ed=1/rs=AN8SPfq9pmT7tJkFFvUkid-e-0Wpomm2EQ/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","date":"2023-12-05T08:19:15.931Z","timestamp":1701764355931,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:07 GMT","end":"Mon, 15 Jan 2024 11:24:06 GMT"},"fingerprint":{"sha1":"CC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42","sha256":"9A:90:D4:1D:0C:D1:CA:9D:4D:19:37:44:C4:E6:E4:28:27:C0:F5:0A:9C:B4:56:89:C4:D1:8A:63:A7:01:28:54"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.F6iRVDW95aA.O/d=1/exm=el_conf/ed=1/rs=AN8SPfq9pmT7tJkFFvUkid-e-0Wpomm2EQ/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mediafire.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 81976\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 04 Dec 2023 18:19:43 GMT\r\nexpires: Tue, 03 Dec 2024 18:19:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 02 Dec 2023 00:18:31 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 50367\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":81976,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (2193)","md5":"45498924419212780ef341b346f83f38","sha1":"407175bd46e2ac2ccd073473131c06da6c8cc9a5","sha256":"1cb3f0ad4f6b1cc587a2e0d16f7c71a298a67fd445dd9ed2ca370cb831ecc02e","sha512":"3705d43f226756e52cb5a2a89588efa484e1ba0ee5485b513fea5b7594cea9b18a65679128c224c2faecf327fe04f47920cb102b3dc28df85c0be1e165bb3cc3","ssdeep":"3072:3UZvqPEU5AsKp4RNTCt3K/xlF06Hiur9xgkOZ07vbnr5kKU:F0pK/xdVjbnrY","tlshash":"0c34e7d9b25270669263f4a5513f004bb23b685af8484d7cb68ce8e2adf4c59017bf7c","first_seen":"2023-12-04T22:08:10Z","last_seen":"2025-08-11T03:03:25.10906Z","times_seen":134,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":52,"dns":21,"connect":10,"send":0,"wait":9,"receive":17,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mediafire.com/images/icons/svg_dark/icons_sprite.svg","fqdn":"www.mediafire.com","domain":"mediafire.com","tld":"com"},"ip":{"addr":"104.16.114.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","date":"2023-12-05T08:19:14.919Z","timestamp":1701764354919,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.mediafire.com","organization":"MEDIAFIRE, LLC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 18 Sep 2023 00:00:00 GMT","end":"Wed, 28 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8B:FA:81:04:17:18:84:C4:3E:8E:D5:89:AD:D6:5D:BD:9A:DF:84:DA","sha256":"CE:A8:07:DE:5F:98:9D:D6:FA:84:55:CD:49:82:C6:68:91:06:A4:A9:7D:1D:4C:3B:96:19:AD:95:73:BA:9A:89"}}},"request":{"raw":"GET /images/icons/svg_dark/icons_sprite.svg HTTP/1.1\r\nHost: www.mediafire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mediafire.com/file/01qf3gtk547xus3/!@\r\nCookie: ukey=c7dya7mhsdtsttbxk84tk9e6fz9efvoo; __cf_bm=WMHkfT2z..EQ385sZ5RTkrlUpOs9yqVS3pFO2qQb6DU-1701764348-0-AZbGe74FogT3cExx823//Y+vkcxtobzZ0Y+4wawMXNXeOj7urPdiTc6UnD+dzXtSvs9PKrZeg3VkzpfPK8bGj8I=; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-1%22%2C%22mf_content%22%3A%22Business%22%2C%22mf_medium%22%3A%22windows%5C%2FFirefox%22%2C%22mf_campaign%22%3A%2201qf3gtk547xus3%22%2C%22mf_term%22%3A%22969979866bfa2714453c28c162fba17d%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 08:19:09 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: 830adccdcf8456be-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 2955\r\netag: W/\"62deda56-90ab\"\r\nlast-modified: Mon, 25 Jul 2022 18:00:54 GMT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8385,"size_decoded":0,"mime_type":"image/svg+xml","magic":"gzip compressed data, from Unix\\012- data","md5":"8c7bfd8da95503007c971019a588880e","sha1":"1da35a96b87bbeee0fef5b5547ceb897797d954e","sha256":"df2c158bdca8e2f4cc4985b5e8431588ed16a45b14e6c652232b25e1681e62a3","sha512":"91266d6ba97ef97f291c15dbdfae84a183d8c4485f2bbe9c6e8b20842ea95aa306e69d0a0369c624b3df70626058e8dfffe79c7ae16e250336fc767c44a0a7a4","ssdeep":"","tlshash":"","first_seen":"2023-12-05T09:19:34Z","last_seen":"2023-12-05T09:19:34Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.mediafire.com/images/icons/svg_light/facebook.svg","fqdn":"static.mediafire.com","domain":"mediafire.com","tld":"com"},"ip":{"addr":"104.16.114.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","date":"2023-12-05T08:19:14.909Z","timestamp":1701764354909,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.mediafire.com","organization":"MEDIAFIRE, LLC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 18 Sep 2023 00:00:00 GMT","end":"Wed, 28 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8B:FA:81:04:17:18:84:C4:3E:8E:D5:89:AD:D6:5D:BD:9A:DF:84:DA","sha256":"CE:A8:07:DE:5F:98:9D:D6:FA:84:55:CD:49:82:C6:68:91:06:A4:A9:7D:1D:4C:3B:96:19:AD:95:73:BA:9A:89"}}},"request":{"raw":"GET /images/icons/svg_light/facebook.svg HTTP/1.1\r\nHost: static.mediafire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mediafire.com/\r\nCookie: ukey=c7dya7mhsdtsttbxk84tk9e6fz9efvoo; __cf_bm=WMHkfT2z..EQ385sZ5RTkrlUpOs9yqVS3pFO2qQb6DU-1701764348-0-AZbGe74FogT3cExx823//Y+vkcxtobzZ0Y+4wawMXNXeOj7urPdiTc6UnD+dzXtSvs9PKrZeg3VkzpfPK8bGj8I=; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-1%22%2C%22mf_content%22%3A%22Business%22%2C%22mf_medium%22%3A%22windows%5C%2FFirefox%22%2C%22mf_campaign%22%3A%2201qf3gtk547xus3%22%2C%22mf_term%22%3A%22969979866bfa2714453c28c162fba17d%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 08:19:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 25 Jul 2022 18:00:54 GMT\r\netag: W/\"62deda56-191\"\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 5128\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830adccdefa256be-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2140,"size_decoded":0,"mime_type":"image/svg+xml","magic":"gzip compressed data, from Unix\\012- data","md5":"b7e2a7f155ad1ba5c918ad2877f7150d","sha1":"59955a8eb4fd24dafb9f1b4348753a9bb41a50d1","sha256":"b61876749181d23cc7b2ee9ca6657b2e55bbc67620991626d9ec554e66e5bab4","sha512":"a570b3a4bf8c90e36217bf639c6a86023d0b9f1199dde583dee246d53cfdc0bac7c845aebdd8c6b26e45bcad74f75faa2936b953cbda0a2acdd78c4b60f87f97","ssdeep":"","tlshash":"87411cfd119220437100e9a71165fef75834bd25f012d950ce64653898abf24fd9a529","first_seen":"2023-09-24T21:31:08Z","last_seen":"2023-12-05T09:19:34Z","times_seen":4,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mediafire.com/images/flags_svg/usa.svg","fqdn":"www.mediafire.com","domain":"mediafire.com","tld":"com"},"ip":{"addr":"104.16.114.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","date":"2023-12-05T08:19:14.920Z","timestamp":1701764354920,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.mediafire.com","organization":"MEDIAFIRE, LLC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 18 Sep 2023 00:00:00 GMT","end":"Wed, 28 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8B:FA:81:04:17:18:84:C4:3E:8E:D5:89:AD:D6:5D:BD:9A:DF:84:DA","sha256":"CE:A8:07:DE:5F:98:9D:D6:FA:84:55:CD:49:82:C6:68:91:06:A4:A9:7D:1D:4C:3B:96:19:AD:95:73:BA:9A:89"}}},"request":{"raw":"GET /images/flags_svg/usa.svg HTTP/1.1\r\nHost: www.mediafire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mediafire.com/file/01qf3gtk547xus3/!@\r\nCookie: ukey=c7dya7mhsdtsttbxk84tk9e6fz9efvoo; __cf_bm=WMHkfT2z..EQ385sZ5RTkrlUpOs9yqVS3pFO2qQb6DU-1701764348-0-AZbGe74FogT3cExx823//Y+vkcxtobzZ0Y+4wawMXNXeOj7urPdiTc6UnD+dzXtSvs9PKrZeg3VkzpfPK8bGj8I=; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-1%22%2C%22mf_content%22%3A%22Business%22%2C%22mf_medium%22%3A%22windows%5C%2FFirefox%22%2C%22mf_campaign%22%3A%2201qf3gtk547xus3%22%2C%22mf_term%22%3A%22969979866bfa2714453c28c162fba17d%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 08:19:09 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: 830adccdcf8556be-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 4468\r\netag: W/\"62deda56-5c7\"\r\nlast-modified: Mon, 25 Jul 2022 18:00:54 GMT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1382,"size_decoded":0,"mime_type":"image/svg+xml","magic":"gzip compressed data, from Unix\\012- data","md5":"8594334aa465f022e0a1cbc3bff33657","sha1":"702b83ecada0bf5de0b0dc0bbb5ac959007637e8","sha256":"81a2a61c38778e81baff90d5fe7a727669487e24dfe6794ee461f3c9d3c58bad","sha512":"6e030431ed44806cdedf375b2bb482fc2079c3229c3d76efa5cfd68139253fcf5961e2e29bc4a340db245ba8310d73983b93e44e00ede3d834c13ed83f4562b4","ssdeep":"","tlshash":"5b21b6af2dc1cc186094aaaac6d1b8c4fc398f1626565294197ba9676b103440ae88f6","first_seen":"2023-11-14T21:37:05Z","last_seen":"2024-08-20T19:35:50.774094Z","times_seen":4,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","date":"2023-12-05T08:19:16.170Z","timestamp":1701764356170,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:07 GMT","end":"Mon, 15 Jan 2024 11:24:06 GMT"},"fingerprint":{"sha1":"E5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD","sha256":"EF:BD:DB:F8:2A:77:8C:C2:9E:F9:E0:B2:26:39:CB:EC:63:F1:80:36:F6:06:6E:F5:E1:6C:45:66:A4:D1:A6:C8"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mediafire.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Nov 2023 23:23:19 GMT\r\nexpires: Fri, 29 Nov 2024 23:23:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 377751\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3340,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- , ASCII text, with very long lines (6225), with no line terminators","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-05-20T20:35:58.983306Z","times_seen":66683,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":44,"dns":0,"connect":7,"send":0,"wait":9,"receive":1,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"translate-pa.googleapis.com/v1/supportedLanguages?client=te\u0026display_language=no\u0026key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4\u0026callback=callback","fqdn":"translate-pa.googleapis.com","domain":"translate-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-12-05T08:19:16.282785137Z","timestamp":1701764356282,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /v1/supportedLanguages?client=te\u0026display_language=no\u0026key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4\u0026callback=callback HTTP/1.1\r\nHost: translate-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mediafire.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Tue, 05 Dec 2023 08:19:10 GMT\r\nserver: ESF\r\ncache-control: private\r\ncontent-length: 1392\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: NID=511=ack36DVTVXGkuwVrNPdKJbJF6yPeDTF6ZN5QxoxBQ2Zzb_ePgsjhGTr_iDz6Gs3-3_Lk3E0DbKuAMbUEqI0xlxlsCbnWfi_TFzbRNKF1YucyxoFYlyk202ncexwrCFoP3CXwF-rH33VjutT3ArSaTSBOmdfAPOzg8YFYkMcsOBU; expires=Wed, 05-Jun-2024 08:19:10 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly\nCONSENT=PENDING+892; expires=Thu, 04-Dec-2025 08:19:10 GMT; path=/; domain=.googleapis.com; Secure\r\nexpires: Tue, 05 Dec 2023 08:19:10 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":1392,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"a3eefe14b1b4698460d992bd1673a26b","sha1":"a2fca6ebb00b8bdcca3eda88654d02d2c165b9c4","sha256":"87514750a90cd70dd22c8673cfa80d804ef55840bd0755950af2118d8d218067","sha512":"5429abca1696b0ae6bb44f5b85a135499f5fd27aad20e66832e31bd3f70cb40712c04f725c474960c2fd4c0322d30844cc24751990e8245405c364bd67a5201d","ssdeep":"96:AglPfFi0m2HalEA0eSglPfFW80m2HalEA0S:AglM0m2ZAfSglT0m2ZAv","tlshash":"d87266bae9b50d9b6a5e65b416fa2a03306041d74eac3c053b0c0e4c6fdfc1e6c7169e","first_seen":"2023-03-07T01:02:06Z","last_seen":"2024-08-21T09:44:26.13646Z","times_seen":9136,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mediafire.com/cdn-cgi/rum?","fqdn":"www.mediafire.com","domain":"mediafire.com","tld":"com"},"ip":{"addr":"104.16.114.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","date":"2023-12-05T08:19:16.262Z","timestamp":1701764356262,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.mediafire.com","organization":"MEDIAFIRE, LLC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 18 Sep 2023 00:00:00 GMT","end":"Wed, 28 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8B:FA:81:04:17:18:84:C4:3E:8E:D5:89:AD:D6:5D:BD:9A:DF:84:DA","sha256":"CE:A8:07:DE:5F:98:9D:D6:FA:84:55:CD:49:82:C6:68:91:06:A4:A9:7D:1D:4C:3B:96:19:AD:95:73:BA:9A:89"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: www.mediafire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 6284\r\nOrigin: https://www.mediafire.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mediafire.com/file/01qf3gtk547xus3/!@\r\nCookie: ukey=c7dya7mhsdtsttbxk84tk9e6fz9efvoo; __cf_bm=WMHkfT2z..EQ385sZ5RTkrlUpOs9yqVS3pFO2qQb6DU-1701764348-0-AZbGe74FogT3cExx823//Y+vkcxtobzZ0Y+4wawMXNXeOj7urPdiTc6UnD+dzXtSvs9PKrZeg3VkzpfPK8bGj8I=; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-1%22%2C%22mf_content%22%3A%22Business%22%2C%22mf_medium%22%3A%22windows%5C%2FFirefox%22%2C%22mf_campaign%22%3A%2201qf3gtk547xus3%22%2C%22mf_term%22%3A%22969979866bfa2714453c28c162fba17d%22%7D; cf_clearance=QtZaJUyM3lWF9t.VI1QsGevGt3R2M8dSPaaUq4b7ocY-1701764349-0-1-730ca2d2.57dbd4fb.240dfd32-0.2.1701764349; _ga_K68XP6D85D=GS1.1.1701764355.1.0.1701764355.60.0.0; _ga=GA1.1.1096140769.1701764356\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 05 Dec 2023 08:19:10 GMT\r\naccess-control-allow-origin: https://www.mediafire.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: cloudflare\r\ncf-ray: 830adcd64ed556be-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-21T07:54:39.354025Z","times_seen":15504827,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20231203","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","date":"2023-12-05T08:19:16.292Z","timestamp":1701764356292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:18:24 GMT","end":"Mon, 15 Jan 2024 11:18:23 GMT"},"fingerprint":{"sha1":"4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95","sha256":"15:CB:A2:CE:4B:FE:61:1E:1A:B7:EA:EF:89:4D:AC:02:D4:54:5E:C6:82:ED:66:53:FC:05:C1:2F:71:78:EA:AE"}}},"request":{"raw":"GET /gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20231203 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mediafire.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: image/gif; charset=us-ascii\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 05 Dec 2023 08:19:10 GMT\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-security-policy: script-src 'nonce-FAR027PZ7HtjwrUDS0oWHA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self', require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-opener-policy: same-origin\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-ENID=16.SE=qVHmHadssJBGPMihz54YKJwt1h2axMIYHC5UoqeTvq1CiyLhZGjIgNh0RYOx7Z6QWt8Lu25Wk1uzKTv2oyk_qfC121hYrE5qVjVE4hl8ark9ocuKO6O1CC6iMi42Dkvq9g_q_T4WfsleWk7-ziZuJjIAN0NYtwfJRw5CdYfjoT0; expires=Sat, 04-Jan-2025 00:37:28 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=us-ascii","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-21T07:54:39.354025Z","times_seen":15504827,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=AAM/d=0/rs=AN8SPfo47ZI4Pt9KwV-0738jND9vOwmjgQ/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","date":"2023-12-05T08:19:16.327Z","timestamp":1701764356327,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:07 GMT","end":"Mon, 15 Jan 2024 11:24:06 GMT"},"fingerprint":{"sha1":"E5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD","sha256":"EF:BD:DB:F8:2A:77:8C:C2:9E:F9:E0:B2:26:39:CB:EC:63:F1:80:36:F6:06:6E:F5:E1:6C:45:66:A4:D1:A6:C8"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=AAM/d=0/rs=AN8SPfo47ZI4Pt9KwV-0738jND9vOwmjgQ/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mediafire.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3960\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 04 Dec 2023 18:39:49 GMT\r\nexpires: Tue, 03 Dec 2024 18:39:49 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 15 Jul 2023 01:09:03 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 49161\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3960,"size_decoded":0,"mime_type":"","magic":"ASCII text, with very long lines (20367), with no line terminators","md5":"72d3a735ccca1027f6b3afba2c93e3a7","sha1":"67f8eff8d17334c59c28fc1753bf451527c7490d","sha256":"c8c845f55e2346b89894ce0df8185ee182359e096bf29987d5cf1f8a7391bef1","sha512":"ae70156d631f3539cd3e48a28eef5b161294fb43302dc2ac3543cf23bf3b7062bbae00e304fbb44a17a1d21e35f891cf5f1fc8126c6ff3abf698594eb85c7cda","ssdeep":"192:nvqx/EhNINclXsfg0SbQ8CqA3ukLWS7FzvQVMsKJIfIxIwRpTpeuHjPtcn78l:gM78SY3fj7FzouZJqWfRpTpdHjPtcnG","tlshash":"1d92882047aed01967efa82364d36dff71d444db90523ee9af5a7352cd821f231ea214","first_seen":"2023-07-17T21:22:27Z","last_seen":"2026-05-08T03:17:00.935961Z","times_seen":20170,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-K68XP6D85D\u0026gtm=45je3bt0v887485693z86304663\u0026_p=1701764354815\u0026_gaz=1\u0026gcd=11l1l1l1l1\u0026dma_cps=sypham\u0026dma=1\u0026cid=1096140769.1701764356\u0026ul=en-us\u0026sr=1280x1024\u0026_s=1\u0026sid=1701764355\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fwww.mediafire.com%2Ffile%2F01qf3gtk547xus3%2F!%40\u0026dt=!%40%23Setup-Pa%24%24W0rd-2024\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026up.page_url=https%3A%2F%2Fwww.mediafire.com%2Ffile%2F01qf3gtk547xus3%2F!%40\u0026tfd=2351","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","date":"2023-12-05T08:19:16.643Z","timestamp":1701764356643,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:18:19 GMT","end":"Mon, 15 Jan 2024 11:18:18 GMT"},"fingerprint":{"sha1":"37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34","sha256":"11:4C:25:F9:AD:55:F4:E8:94:2E:64:99:7D:15:71:51:3E:11:44:0E:06:0D:EC:15:C3:6D:41:81:4B:0C:30:3D"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-K68XP6D85D\u0026gtm=45je3bt0v887485693z86304663\u0026_p=1701764354815\u0026_gaz=1\u0026gcd=11l1l1l1l1\u0026dma_cps=sypham\u0026dma=1\u0026cid=1096140769.1701764356\u0026ul=en-us\u0026sr=1280x1024\u0026_s=1\u0026sid=1701764355\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fwww.mediafire.com%2Ffile%2F01qf3gtk547xus3%2F!%40\u0026dt=!%40%23Setup-Pa%24%24W0rd-2024\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026up.page_url=https%3A%2F%2Fwww.mediafire.com%2Ffile%2F01qf3gtk547xus3%2F!%40\u0026tfd=2351 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.mediafire.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mediafire.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://www.mediafire.com\r\ndate: Tue, 05 Dec 2023 08:19:10 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-21T07:54:39.354025Z","times_seen":15504827,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":31,"dns":0,"connect":8,"send":0,"wait":18,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","date":"2023-12-05T08:19:26.160Z","timestamp":1701764366160,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:07 GMT","end":"Mon, 15 Jan 2024 11:24:06 GMT"},"fingerprint":{"sha1":"CC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42","sha256":"9A:90:D4:1D:0C:D1:CA:9D:4D:19:37:44:C4:E6:E4:28:27:C0:F5:0A:9C:B4:56:89:C4:D1:8A:63:A7:01:28:54"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-encoding,content-type,x-goog-authuser\r\nReferer: https://www.mediafire.com/\r\nOrigin: https://www.mediafire.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://www.mediafire.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,content-encoding,content-type,x-goog-authuser,origin\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Tue, 05 Dec 2023 08:19:20 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: CONSENT=PENDING+765; expires=Thu, 04-Dec-2025 08:19:20 GMT; path=/; domain=.googleapis.com; Secure\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nexpires: Tue, 05 Dec 2023 08:19:20 GMT\r\ncache-control: private\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-21T07:54:39.354025Z","times_seen":15504827,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.mediafire.com/images/icons/svg_light/twitter.svg","fqdn":"static.mediafire.com","domain":"mediafire.com","tld":"com"},"ip":{"addr":"104.16.114.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","date":"2023-12-05T08:19:14.903Z","timestamp":1701764354903,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.mediafire.com","organization":"MEDIAFIRE, LLC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 18 Sep 2023 00:00:00 GMT","end":"Wed, 28 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8B:FA:81:04:17:18:84:C4:3E:8E:D5:89:AD:D6:5D:BD:9A:DF:84:DA","sha256":"CE:A8:07:DE:5F:98:9D:D6:FA:84:55:CD:49:82:C6:68:91:06:A4:A9:7D:1D:4C:3B:96:19:AD:95:73:BA:9A:89"}}},"request":{"raw":"GET /images/icons/svg_light/twitter.svg HTTP/1.1\r\nHost: static.mediafire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mediafire.com/\r\nCookie: ukey=c7dya7mhsdtsttbxk84tk9e6fz9efvoo; __cf_bm=WMHkfT2z..EQ385sZ5RTkrlUpOs9yqVS3pFO2qQb6DU-1701764348-0-AZbGe74FogT3cExx823//Y+vkcxtobzZ0Y+4wawMXNXeOj7urPdiTc6UnD+dzXtSvs9PKrZeg3VkzpfPK8bGj8I=; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-1%22%2C%22mf_content%22%3A%22Business%22%2C%22mf_medium%22%3A%22windows%5C%2FFirefox%22%2C%22mf_campaign%22%3A%2201qf3gtk547xus3%22%2C%22mf_term%22%3A%22969979866bfa2714453c28c162fba17d%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 08:19:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 25 Jul 2022 18:00:54 GMT\r\netag: W/\"62deda56-3b5\"\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 3304\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830adccdefa056be-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":684,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- SVG XML document\\012- XML 1.0 document text\\012- SVG XML document\\012- XML document text\\012- exported SGML document, ASCII text, with very long lines (1080), with no line terminators","md5":"ee5b67dd14c862f806a245597c5c00d0","sha1":"3eb45ed6358447cdef740f576b646d2bc161c32a","sha256":"00f3a4f4db3c45f63a04b8c66f5375bbd9280f3cddc3080510dd7a2313cf03e5","sha512":"ed517937278a53475c8f454f0dc88b48d169c87e60f7dd48c6feb7f54813d9417fd4aa924c92db474af734d6d6329bae2131bf423c4f36fb4607d4e562318270","ssdeep":"","tlshash":"eb11f0ac52c8b7949a49cb808026aa727adf641b72e8c5cdde92a551ec218fcc078d34","first_seen":"2023-10-02T03:49:52Z","last_seen":"2024-08-21T05:22:36.983167Z","times_seen":5,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"softsssall.mediafire.com/file/01qf3gtk547xus3/!@","fqdn":"softsssall.mediafire.com","domain":"softsssall.mediafire.com","tld":"com"},"ip":{"addr":"104.16.114.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-05T08:19:13.921Z","timestamp":1701764353921,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.mediafire.com","organization":"MEDIAFIRE, LLC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 18 Sep 2023 00:00:00 GMT","end":"Wed, 28 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8B:FA:81:04:17:18:84:C4:3E:8E:D5:89:AD:D6:5D:BD:9A:DF:84:DA","sha256":"CE:A8:07:DE:5F:98:9D:D6:FA:84:55:CD:49:82:C6:68:91:06:A4:A9:7D:1D:4C:3B:96:19:AD:95:73:BA:9A:89"}}},"request":{"raw":"GET /file/01qf3gtk547xus3/!@ HTTP/1.1\r\nHost: softsssall.mediafire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 05 Dec 2023 08:19:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://www.mediafire.com/file/01qf3gtk547xus3/!@\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nset-cookie: ukey=c7dya7mhsdtsttbxk84tk9e6fz9efvoo; expires=Sat, 05-Dec-2043 08:19:08 GMT; Max-Age=631152000; path=/; domain=.mediafire.com; HttpOnly\n__cf_bm=WMHkfT2z..EQ385sZ5RTkrlUpOs9yqVS3pFO2qQb6DU-1701764348-0-AZbGe74FogT3cExx823//Y+vkcxtobzZ0Y+4wawMXNXeOj7urPdiTc6UnD+dzXtSvs9PKrZeg3VkzpfPK8bGj8I=; path=/; expires=Tue, 05-Dec-23 08:49:08 GMT; domain=.mediafire.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 830adcc7c9b556be-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":94305,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-21T07:54:39.354025Z","times_seen":15504827,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":22,"dns":1,"connect":1,"send":0,"wait":207,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mediafire.com/file/01qf3gtk547xus3/!@","fqdn":"www.mediafire.com","domain":"www.mediafire.com","tld":"com"},"ip":{"addr":"104.16.114.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-05T08:19:14.178Z","timestamp":1701764354178,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.mediafire.com","organization":"MEDIAFIRE, LLC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 18 Sep 2023 00:00:00 GMT","end":"Wed, 28 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8B:FA:81:04:17:18:84:C4:3E:8E:D5:89:AD:D6:5D:BD:9A:DF:84:DA","sha256":"CE:A8:07:DE:5F:98:9D:D6:FA:84:55:CD:49:82:C6:68:91:06:A4:A9:7D:1D:4C:3B:96:19:AD:95:73:BA:9A:89"}}},"request":{"raw":"GET /file/01qf3gtk547xus3/!@ HTTP/1.1\r\nHost: www.mediafire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ukey=c7dya7mhsdtsttbxk84tk9e6fz9efvoo; __cf_bm=WMHkfT2z..EQ385sZ5RTkrlUpOs9yqVS3pFO2qQb6DU-1701764348-0-AZbGe74FogT3cExx823//Y+vkcxtobzZ0Y+4wawMXNXeOj7urPdiTc6UnD+dzXtSvs9PKrZeg3VkzpfPK8bGj8I=\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 08:19:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-ray: 830adcc97b9756be-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://www.mediafire.com\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0, post-check=0, pre-check=0\r\nexpires: 0\r\nset-cookie: conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-1%22%2C%22mf_content%22%3A%22Business%22%2C%22mf_medium%22%3A%22windows%5C%2FFirefox%22%2C%22mf_campaign%22%3A%2201qf3gtk547xus3%22%2C%22mf_term%22%3A%22969979866bfa2714453c28c162fba17d%22%7D; expires=Thu, 04-Jan-2024 08:19:08 GMT; Max-Age=2592000; path=/; domain=.mediafire.com\r\nstrict-transport-security: max-age=0\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN\r\nx-robots-tag: noindex, nofollow\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":94305,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (52654)","md5":"b043af5bbf1cb2ad0cf09d5aa89ea06c","sha1":"d5056c1041a4d50c0970e1f73a1e47c4221eb8fa","sha256":"9a27f5f206be0af07ed7b899400dda700e0b34671d6b157cfffd461e0192bc17","sha512":"5e316e36257dd3d7bea9e832c472102befda50a6778095f3fb0e5545590915c0e641ccb4fd4b5cb7a21a9357ea34ee5d0cd3bc4394641fe8d377ed093a0f670d","ssdeep":"1536:liIpt50ZoTgAJuHnjde83Ml83Mn1CyKvzmFMlHKcxY1K8zqtNPnJifkH80r8GB5H:liQgAkHnjPPkc3fT+m","tlshash":"3793d531e1f1102fb437842bb6ab774cb9268403e602cb2af66da1e5dfc24da5477395","first_seen":"2023-12-05T09:19:34Z","last_seen":"2023-12-05T09:19:34Z","times_seen":1,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-K68XP6D85D\u0026cid=1096140769.1701764356\u0026gtm=45je3bt0v887485693z86304663\u0026aip=1\u0026dma=1\u0026dma_cps=sypham\u0026gcd=11l1l1l1l1\u0026z=1396839199","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.74.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","date":"2023-12-05T08:19:16.049Z","timestamp":1701764356049,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:27:27 GMT","end":"Mon, 15 Jan 2024 11:27:26 GMT"},"fingerprint":{"sha1":"6E:E4:BC:4A:67:5E:46:6A:B3:E4:CA:61:A7:C0:97:AB:14:F0:34:32","sha256":"6C:19:7E:D8:B6:4C:33:23:BE:69:B4:D7:78:7F:28:0F:20:6A:60:11:77:95:4F:1A:79:F9:9A:62:80:70:DD:13"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-K68XP6D85D\u0026cid=1096140769.1701764356\u0026gtm=45je3bt0v887485693z86304663\u0026aip=1\u0026dma=1\u0026dma_cps=sypham\u0026gcd=11l1l1l1l1\u0026z=1396839199 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mediafire.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Tue, 05 Dec 2023 08:19:10 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1\\012- data","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-05-21T07:45:51.863634Z","times_seen":903205,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":63,"dns":1,"connect":8,"send":0,"wait":23,"receive":1,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","date":"2023-12-05T08:19:16.182Z","timestamp":1701764356182,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:07 GMT","end":"Mon, 15 Jan 2024 11:24:06 GMT"},"fingerprint":{"sha1":"E5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD","sha256":"EF:BD:DB:F8:2A:77:8C:C2:9E:F9:E0:B2:26:39:CB:EC:63:F1:80:36:F6:06:6E:F5:E1:6C:45:66:A4:D1:A6:C8"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mediafire.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 04 Dec 2023 13:40:04 GMT\r\nexpires: Tue, 03 Dec 2024 13:40:04 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 67146\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced\\012- data","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-05-20T20:35:58.868834Z","times_seen":46922,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mediafire.com/file/01qf3gtk547xus3/!@","fqdn":"www.mediafire.com","domain":"www.mediafire.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","date":"2023-12-05T08:19:16.301Z","timestamp":1701764356301,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.mediafire.com","organization":"MEDIAFIRE, LLC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 18 Sep 2023 00:00:00 GMT","end":"Wed, 28 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8B:FA:81:04:17:18:84:C4:3E:8E:D5:89:AD:D6:5D:BD:9A:DF:84:DA","sha256":"CE:A8:07:DE:5F:98:9D:D6:FA:84:55:CD:49:82:C6:68:91:06:A4:A9:7D:1D:4C:3B:96:19:AD:95:73:BA:9A:89"}}},"request":{"raw":"GET /file/01qf3gtk547xus3/!@ HTTP/1.1\r\nHost: www.mediafire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mediafire.com/file/01qf3gtk547xus3/!@\r\nCookie: ukey=c7dya7mhsdtsttbxk84tk9e6fz9efvoo; __cf_bm=WMHkfT2z..EQ385sZ5RTkrlUpOs9yqVS3pFO2qQb6DU-1701764348-0-AZbGe74FogT3cExx823//Y+vkcxtobzZ0Y+4wawMXNXeOj7urPdiTc6UnD+dzXtSvs9PKrZeg3VkzpfPK8bGj8I=; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-1%22%2C%22mf_content%22%3A%22Business%22%2C%22mf_medium%22%3A%22windows%5C%2FFirefox%22%2C%22mf_campaign%22%3A%2201qf3gtk547xus3%22%2C%22mf_term%22%3A%22969979866bfa2714453c28c162fba17d%22%7D; cf_clearance=QtZaJUyM3lWF9t.VI1QsGevGt3R2M8dSPaaUq4b7ocY-1701764349-0-1-730ca2d2.57dbd4fb.240dfd32-0.2.1701764349; _ga_K68XP6D85D=GS1.1.1701764355.1.0.1701764355.60.0.0; _ga=GA1.1.1096140769.1701764356\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-21T07:54:39.354025Z","times_seen":15504827,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mediafire.com/cdn-cgi/challenge-platform/h/b/jsd/r/830adcc97b9756be","fqdn":"www.mediafire.com","domain":"mediafire.com","tld":"com"},"ip":{"addr":"104.16.114.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","date":"2023-12-05T08:19:15.717Z","timestamp":1701764355717,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.mediafire.com","organization":"MEDIAFIRE, LLC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 18 Sep 2023 00:00:00 GMT","end":"Wed, 28 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8B:FA:81:04:17:18:84:C4:3E:8E:D5:89:AD:D6:5D:BD:9A:DF:84:DA","sha256":"CE:A8:07:DE:5F:98:9D:D6:FA:84:55:CD:49:82:C6:68:91:06:A4:A9:7D:1D:4C:3B:96:19:AD:95:73:BA:9A:89"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/r/830adcc97b9756be HTTP/1.1\r\nHost: www.mediafire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 12250\r\nOrigin: https://www.mediafire.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mediafire.com/file/01qf3gtk547xus3/!@\r\nCookie: ukey=c7dya7mhsdtsttbxk84tk9e6fz9efvoo; __cf_bm=WMHkfT2z..EQ385sZ5RTkrlUpOs9yqVS3pFO2qQb6DU-1701764348-0-AZbGe74FogT3cExx823//Y+vkcxtobzZ0Y+4wawMXNXeOj7urPdiTc6UnD+dzXtSvs9PKrZeg3VkzpfPK8bGj8I=; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-1%22%2C%22mf_content%22%3A%22Business%22%2C%22mf_medium%22%3A%22windows%5C%2FFirefox%22%2C%22mf_campaign%22%3A%2201qf3gtk547xus3%22%2C%22mf_term%22%3A%22969979866bfa2714453c28c162fba17d%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 08:19:09 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nset-cookie: cf_clearance=QtZaJUyM3lWF9t.VI1QsGevGt3R2M8dSPaaUq4b7ocY-1701764349-0-1-730ca2d2.57dbd4fb.240dfd32-0.2.1701764349; path=/; expires=Wed, 04-Dec-24 08:19:09 GMT; domain=.mediafire.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 830adcd2ebd756be-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-21T07:54:39.354025Z","times_seen":15504827,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","date":"2023-12-05T08:19:16.180Z","timestamp":1701764356180,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:07 GMT","end":"Mon, 15 Jan 2024 11:24:06 GMT"},"fingerprint":{"sha1":"E5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD","sha256":"EF:BD:DB:F8:2A:77:8C:C2:9E:F9:E0:B2:26:39:CB:EC:63:F1:80:36:F6:06:6E:F5:E1:6C:45:66:A4:D1:A6:C8"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=AAM/d=0/rs=AN8SPfo47ZI4Pt9KwV-0738jND9vOwmjgQ/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Nov 2023 05:20:13 GMT\r\nexpires: Fri, 29 Nov 2024 05:20:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 442737\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\\012- data","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-05-20T20:35:58.988079Z","times_seen":62370,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.56.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","date":"2023-12-05T08:19:14.871Z","timestamp":1701764354871,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 10 Apr 2023 00:00:00 GMT","end":"Tue, 09 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"89:79:35:ED:04:A2:CA:50:F7:9A:B8:FE:DF:A5:0C:B1:F2:E6:DD:E8","sha256":"4A:21:87:C4:F3:51:A5:AE:14:5E:BE:9F:5F:A4:21:CE:D6:A0:0E:E1:D2:D3:14:48:22:CB:A0:53:D7:02:D3:62"}}},"request":{"raw":"GET /beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.mediafire.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mediafire.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 08:19:09 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2023.10.0\"\r\nlast-modified: Tue, 10 Oct 2023 21:38:13 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830adccdab12568d-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19986,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (19986), with no line terminators","md5":"dd1d068fdb5fe90b6c05a5b3940e088c","sha1":"0d96f9df8772633a9df4c81cf323a4ef8998ba59","sha256":"6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101","sha512":"7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30","ssdeep":"384:XrqR6Q0npafIm4rKi/BwEXN1w29mItq0W5i6G:Q70nBrKuB0Uqti6G","tlshash":"c692a6daba85723613f76076913f220b733b356528068458d22ad7c12c7d68f6317f6e","first_seen":"2023-10-13T06:51:00Z","last_seen":"2026-05-18T11:20:50.533726Z","times_seen":17331,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":10,"dns":2,"connect":1,"send":0,"wait":35,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cli.re/bpjdA8","fqdn":"cli.re","domain":"cli.re","tld":"re"},"ip":{"addr":"172.67.220.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-05T08:19:13.745Z","timestamp":1701764353745,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cli.re","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Nov 2023 06:44:44 GMT","end":"Tue, 30 Jan 2024 06:44:43 GMT"},"fingerprint":{"sha1":"59:57:F4:2C:59:60:FA:1A:29:D8:52:D5:F0:F8:C6:26:31:68:80:77","sha256":"FE:09:BD:B4:B0:0B:3A:EF:FA:BD:91:42:04:18:B6:C1:F7:1E:44:51:A3:22:85:B6:F2:AD:4F:35:E0:27:F4:71"}}},"request":{"raw":"GET /bpjdA8 HTTP/1.1\r\nHost: cli.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Tue, 05 Dec 2023 08:19:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://softsssall.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file\r\nx-powered-by: Capsulink.com\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Fri, 22 Apr 2016 13:33:37 GMT\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=8r0qRn%2BbGua58Z9eilddER0XcE9RkFpTh1m5EZpogMmILtCFJ3BySC0Patio6erzAqHP3egcZVUXh2ePuKIzbIMWs8Z9efouSA1L3n9LfXYaoSoVeqIJZms%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 830adcc6e88256bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":94305,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-21T07:54:39.354025Z","times_seen":15504827,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":50,"dns":0,"connect":1,"send":0,"wait":102,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mediafire.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js","fqdn":"www.mediafire.com","domain":"mediafire.com","tld":"com"},"ip":{"addr":"104.16.114.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","date":"2023-12-05T08:19:15.330Z","timestamp":1701764355330,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.mediafire.com","organization":"MEDIAFIRE, LLC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 18 Sep 2023 00:00:00 GMT","end":"Wed, 28 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8B:FA:81:04:17:18:84:C4:3E:8E:D5:89:AD:D6:5D:BD:9A:DF:84:DA","sha256":"CE:A8:07:DE:5F:98:9D:D6:FA:84:55:CD:49:82:C6:68:91:06:A4:A9:7D:1D:4C:3B:96:19:AD:95:73:BA:9A:89"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js HTTP/1.1\r\nHost: www.mediafire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ukey=c7dya7mhsdtsttbxk84tk9e6fz9efvoo; __cf_bm=WMHkfT2z..EQ385sZ5RTkrlUpOs9yqVS3pFO2qQb6DU-1701764348-0-AZbGe74FogT3cExx823//Y+vkcxtobzZ0Y+4wawMXNXeOj7urPdiTc6UnD+dzXtSvs9PKrZeg3VkzpfPK8bGj8I=; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-1%22%2C%22mf_content%22%3A%22Business%22%2C%22mf_medium%22%3A%22windows%5C%2FFirefox%22%2C%22mf_campaign%22%3A%2201qf3gtk547xus3%22%2C%22mf_term%22%3A%22969979866bfa2714453c28c162fba17d%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 08:19:09 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=14400, public\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 830adcd079c656be-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7336,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (7336), with no line terminators","md5":"2d4a243a32a4d9a6c40f40d71d55bfe6","sha1":"f58f5bfef45df211dd661cbd765076df5c73a435","sha256":"e99a88e8aa760dac23e859a19da2fc927af0e62877bf239cd0e46518db06b9cd","sha512":"9a3d6a10bf4457407935543bf8ab7097a8a44bc57b879c0f195e42b001870d6eebb4a0d6de2173e7a8b442ac316c2a06353fa669fd53ff32bcf989fb1cf8e5e8","ssdeep":"192:qv3g3mYOpJUvOp95iUqh7gamfPVk2cIF2LmX1fbI:A3gTOpyOp/02jGI1jI","tlshash":"89e12acb3985306b137258a702afa25b110dbfa658891c4adb30c4f8bf33344569fee5","first_seen":"2023-12-05T09:19:34Z","last_seen":"2023-12-05T10:08:25Z","times_seen":2,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.mediafire.com/images/backgrounds/header/mf_logo_full_color.svg","fqdn":"static.mediafire.com","domain":"mediafire.com","tld":"com"},"ip":{"addr":"104.16.114.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mediafire.com/file/01qf3gtk547xus3/!@#Setup-Pa$$W0rd-2024.rar/file","date":"2023-12-05T08:19:14.901Z","timestamp":1701764354901,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.mediafire.com","organization":"MEDIAFIRE, LLC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 18 Sep 2023 00:00:00 GMT","end":"Wed, 28 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8B:FA:81:04:17:18:84:C4:3E:8E:D5:89:AD:D6:5D:BD:9A:DF:84:DA","sha256":"CE:A8:07:DE:5F:98:9D:D6:FA:84:55:CD:49:82:C6:68:91:06:A4:A9:7D:1D:4C:3B:96:19:AD:95:73:BA:9A:89"}}},"request":{"raw":"GET /images/backgrounds/header/mf_logo_full_color.svg HTTP/1.1\r\nHost: static.mediafire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mediafire.com/\r\nCookie: ukey=c7dya7mhsdtsttbxk84tk9e6fz9efvoo; __cf_bm=WMHkfT2z..EQ385sZ5RTkrlUpOs9yqVS3pFO2qQb6DU-1701764348-0-AZbGe74FogT3cExx823//Y+vkcxtobzZ0Y+4wawMXNXeOj7urPdiTc6UnD+dzXtSvs9PKrZeg3VkzpfPK8bGj8I=; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-1%22%2C%22mf_content%22%3A%22Business%22%2C%22mf_medium%22%3A%22windows%5C%2FFirefox%22%2C%22mf_campaign%22%3A%2201qf3gtk547xus3%22%2C%22mf_term%22%3A%22969979866bfa2714453c28c162fba17d%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 08:19:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 28 Oct 2016 22:22:42 GMT\r\netag: W/\"5813cfb2-d1d\"\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 7003\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830adccdef9e56be-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3357,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- HTML document text\\012- HTML document, ASCII text, with very long lines (3431), with no line terminators","md5":"dcdfa60ac03cdc6d20a6f5387d8e8bc1","sha1":"44eb0cadc59e09b469ebe80f5e8daa08d171bd4a","sha256":"c51b0ebbdbc3f553f727d7b29c9390260ffc62f0fd67356081e6ac03cf0e3155","sha512":"c1ca5783f7149e61a95f16229072d7741ef4c3ca8b74886baf2d6c185af6e15510ddd50447ffa2216deb8cd153ae4f4c5d071ada093cc78accf90e0708847939","ssdeep":"","tlshash":"81612ebb13682eb585831bd44e5e114230b5748af2f0e1ccafab4567ae158f780f8cb4","first_seen":"2023-05-06T01:23:33Z","last_seen":"2025-04-06T17:55:27.000524Z","times_seen":1009,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}