34:"SampleDetailWrapper" 35:I[7638,["$1","$2","$3","$4","$5","$8","$9","$a","$b"],"$34"] 3e:I[27201,["$1","$2","$3","$4","$5"],"IconMark"] 33:T45b,{"@context":"https://schema.org","@type":"TechArticle","headline":"Sample 18137c22a32e… — Score 0/100 — Hybrid Analysis","description":"Threat analysis for sample 18137c22a32e…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 4 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/18137c22a32eea241930801caf746ae12e9dfe6ed1fdb57aaebf6c6fe0dee4ad","keywords":["malware analysis","sandbox report","threat intelligence","18137c22a32eea241930801caf746ae12e9dfe6ed1fdb57aaebf6c6fe0dee4ad"],"about":{"@type":"SoftwareApplication","name":"http://www.mainlinemedianews.com/calendar/stream-farmers-insurance-open-live-stream-golf-free-online-pga/event_196430d8-3fb7-11ea-85ee-03228571a642.html","applicationCategory":["url"],"identifier":"18137c22a32eea241930801caf746ae12e9dfe6ed1fdb57aaebf6c6fe0dee4ad"},"threatScore":0,"antivirusDetections":{"malicious":0,"total":1},"behavioralIndicators":{"malicious":0,"suspicious":4},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}36:T492,"\Sessions\1\BaseNamedObjects\Local\!BrowserEmulation!SharedMemory!Mutex" "\Sessions\1\BaseNamedObjects\Local\VERMGMTBlockListFileMutex" "\Sessions\1\BaseNamedObjects\Local\URLBLOCK_FILEMAPSWITCH_MUTEX_3212" "\Sessions\1\BaseNamedObjects\Local\URLBLOCK_HASHFILESWITCH_MUTEX" "\Sessions\1\BaseNamedObjects\Local\URLBLOCK_DOWNLOAD_MUTEX" "\Sessions\1\BaseNamedObjects\Local\ZonesCacheCounterMutex" "\Sessions\1\BaseNamedObjects\Local\ZonesLockedCacheCounterMutex" "\Sessions\1\BaseNamedObjects\IsoScope_c8c_IE_EarlyTabStart_0x3ec_Mutex" "\Sessions\1\BaseNamedObjects\IsoScope_c8c_ConnHashTable<3212>_HashTable_Mutex" "\Sessions\1\BaseNamedObjects\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}" "\Sessions\1\BaseNamedObjects\IsoScope_c8c_IESQMMUTEX_0_303" "\Sessions\1\BaseNamedObjects\IsoScope_c8c_IESQMMUTEX_0_331" "\Sessions\1\BaseNamedObjects\{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}" "Local\InternetShortcutMutex" "{5312EE61-79E3-4A24-BFE1-132B85B23C3A}" "IsoScope_c8c_IESQMMUTEX_0_519" "IsoScope_c8c_ConnHashTable<3212>_HashTable_Mutex" "Local\VERMGMTBlockListFileMutex" "Local\URLBLOCK_FILEMAPSWITCH_MUTEX_3212" "Local\!BrowserEmulation!SharedMemory!Mutex"37:T45b,"urlblockindex_1_.bin" has type "data" "svg-sprite.7859ff6926286ed3fea6ba817681e88d_1_.svg" has type "HTML document ASCII text with very long lines with no line terminators" "XOMVCZBI.txt" has type "ASCII text" "npm.sax.b3857a10.bundle_1_.js" has type "ASCII text with very long lines" "4INB7EZJ.txt" has type "ASCII text" "0MHVE3L6.txt" has type "ASCII text" "deb_1_.htm" has type "HTML document ASCII text with very long lines with no line terminators" "FCN8L3YK.txt" has type "ASCII text" "OGK2N7SP.txt" has type "ASCII text" "48HNECGA.txt" has type "ASCII text" "trk_1_.js" has type "ASCII text with very long lines" "ZBDS6OZJ.txt" has type "ASCII text" "tracker_1_.js" has type "ASCII text with very long lines with no line terminators" "8AFCD5C25526AEF26EFE0F18E8A33C4C" has type "data" "1396643876-idpiframe_1_.js" has type "ASCII text with very long lines" "7R7W9O2U.txt" has type "ASCII text" "FC5A820A001B41D68902E051F36A5282_1B1BC666A2DAEDD086CF457E9467D5A3" has type "data" "TICL95NK.txt" has type "ASCII text" "00V31TQF.txt" has type "ASCII text" "DW1QXF3V.txt" has type "ASCII text"38:T8a46,Pattern match: "http://www.mainlinemedianews.com/calendar/stream-farmers-insurance-open-live-stream-golf-free-online-pga/event_196430d8-3fb7-11ea-85ee-03228571a642.html" Pattern match: "http://www.mainlinemedianews.com" Pattern match: "www.mainlinemedianews.com" Heuristic match: "launch.newsinc.com" Heuristic match: "ads.digitalfirstmedia.com" Heuristic match: "local.21st-centurymedia.com" Heuristic match: "js-sec.indexww.com" Heuristic match: "ocsp.godaddy.com" Heuristic match: "GET //MEQwQjBAMD4wPDAJBgUrDgMCGgUABBTkIInKBAzXkF0Qh0pel3lfHJ9GPAQU0sSw0pHUTBFxs2HLPaH%2B3ahq1OMCAxvnFQ%3D%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.godaddy.com" Heuristic match: "GET //MEIwQDA%2BMDwwOjAJBgUrDgMCGgUABBQdI2%2BOBkuXH93foRUj4a7lAr4rGwQUOpqFBxBnKLbv9r0FQW4gwZTaD94CAQc%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.godaddy.com" Heuristic match: "GET //MEowSDBGMEQwQjAJBgUrDgMCGgUABBS2CA1fbGt26xPkOKX4ZguoUjM0TgQUQMK9J47MNIMwojPX%2B2yz8LQsgM4CCQCEZnECCk2cEA%3D%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.godaddy.com" Heuristic match: "launch.inform.com" Pattern match: "www.googletagservices.com" Heuristic match: "static.criteo.net" Heuristic match: "api.rlcdn.com" Heuristic match: "match.adsrvr.org" Heuristic match: "c.amazon-adsystem.com" Heuristic match: "edge.quantserve.com" Pattern match: "www.mainlinemedianews.com&tnms_uri=/calendar/stream-farmers-insurance-open-live-stream-golf-free-online-pga/event_196430d8-3fb7-11ea-85ee-03228571a642.html&tnms_ref=&rt=1579987813472" Heuristic match: "pamainlinemedianews.disqus.com" Heuristic match: "o.ss2.us" Heuristic match: "GET //MEowSDBGMEQwQjAJBgUrDgMCGgUABBSLwZ6EW5gdYc9UaSEaaLjjETNtkAQUv1%2B30c7dH4b0W1Ws3NcQwg6piOcCCQCnDkpMNIK3fw%3D%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: o.ss2.us" Heuristic match: "ocsp.rootg2.amazontrust.com" Heuristic match: "GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBSIfaREXmfqfJR3TkMYnD7O5MhzEgQUnF8A36oB1zArOIiiuG1KnPIRkYMCEwZ%2FlEoqJ83z%2BsKuKwH5CO65xMY%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.rootg2.amazontrust.com" Heuristic match: "pixel.quantserve.com" Heuristic match: "rules.quantcount.com" Heuristic match: "ocsp.rootca1.amazontrust.com" Heuristic match: "GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPWaOUU8%2B5VZ5%2Fa9jFTaU9pkK3FAQUhBjMhTTsvAyUlC4IWZzHshBOCggCEwZ%2FlFeFh%2Bisd96yUzJbvJmLVg0%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.rootca1.amazontrust.com" Heuristic match: "ocsp.trust-provider.com" Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCEENSAj%2F6qJAfE5%2Fj9OXBRE4%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.trust-provider.com" Heuristic match: "ocsp.sca1b.amazontrust.com" Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQz9arGHWbnBV0DFzpNHz4YcTiFDQQUWaRmBlKge5WSPKOUByeWdFv5PdACEA3cm2ibUgLEPbaP6WqGAHA%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sca1b.amazontrust.com" Heuristic match: "ocsp.comodoca4.com" Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrJdiQ%2Ficg9B19asFe73bPYs%2BreAQUdXGnGUgZvJ2d6kFH35TESHeZ03kCEFslzmkHxCZVZtM5DJmpVK0%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.comodoca4.com" Heuristic match: "GET /MFIwUDBOMEwwSjAJBgUrDgMCGgUABBTOpjOEf6LG1z52jqAxwDlTxoaOCgQUQAlhZ%2FC8g3FP3hIILG%2FU1Ct2PZYCEQD90AQY6h9pmpz5v68pANOh HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.comodoca4.com" Heuristic match: "ocsp.sectigo.com" Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRDC9IOTxN6GmyRjyTl2n4yTUczyAQUjYxexFStiuF36Zv5mwXhuAGNYeECEHdx53Dtp8rroOeJpmHjjq4%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sectigo.com" Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQz9arGHWbnBV0DFzpNHz4YcTiFDQQUWaRmBlKge5WSPKOUByeWdFv5PdACEAGYe0GXMzMvmIBqWgibKpg%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sca1b.amazontrust.com" Heuristic match: "fastlane.rubiconproject.com" Heuristic match: "hb.emxdgt.com" Heuristic match: "crt.usertrust.com" Heuristic match: "GET /USERTrustRSAAddTrustCA.crt HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: crt.usertrust.com" Heuristic match: "GET /MFIwUDBOMEwwSjAJBgUrDgMCGgUABBQh80WaEMqmyEvaHjlisSfVM4p8SAQUF9nWJSdn%2BTHCSUPZMDZEjGypT%2BsCEQDEaJCNDIKa86QoNjLIdlay HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sectigo.com" Heuristic match: "pr.realvu.net" Heuristic match: "cdn.undertone.com" Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQz9arGHWbnBV0DFzpNHz4YcTiFDQQUWaRmBlKge5WSPKOUByeWdFv5PdACEAHMPdsWj0i3Jflxsp8%2FYqc%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sca1b.amazontrust.com" Heuristic match: "GET /MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRDC9IOTxN6GmyRjyTl2n4yTUczyAQUjYxexFStiuF36Zv5mwXhuAGNYeECEQDvuKsXIpd3m8P2pQa5FRpg HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sectigo.com" Heuristic match: "ocsp.trustwave.com" Heuristic match: "GET /MFIwUDBOMEwwSjAJBgUrDgMCGgUABBQ1mI4Ww4R5LZiQ295pj4OF%2F44yyAQUyk7dWyc1Kdn27sPlU%2B%2BkwBmWHa8CEQCSuHRPcc7Q4mxyo9jV2SWy HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.trustwave.com" Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQz9arGHWbnBV0DFzpNHz4YcTiFDQQUWaRmBlKge5WSPKOUByeWdFv5PdACEAOCRShs8YbmJ3r3iESN4Ls%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sca1b.amazontrust.com" Heuristic match: "GET /MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRDC9IOTxN6GmyRjyTl2n4yTUczyAQUjYxexFStiuF36Zv5mwXhuAGNYeECEQC8NIWSsvv0o55rl4MKA7sK HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sectigo.com" Heuristic match: "GET //MFQwUjBQME4wTDAJBgUrDgMCGgUABBRKUAJ27jxxuy1zYtpUHfLy0MHHugQUys4dGAN3HhzzfFiymnCoCIAW9K4CEwb1lQKy2rx%2FS5DWa947FkCgQKA%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.trustwave.com" Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQz9arGHWbnBV0DFzpNHz4YcTiFDQQUWaRmBlKge5WSPKOUByeWdFv5PdACEAN1nkLKAPi3ZOZOYBU5FPA%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sca1b.amazontrust.com" Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQz9arGHWbnBV0DFzpNHz4YcTiFDQQUWaRmBlKge5WSPKOUByeWdFv5PdACEAaaomiE9mlD7OF0dENLBK8%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sca1b.amazontrust.com" Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRDC9IOTxN6GmyRjyTl2n4yTUczyAQUjYxexFStiuF36Zv5mwXhuAGNYeECEHQ29%2BMU5IMTuO6hkMQIrSU%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sectigo.com" Heuristic match: "GET /MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRDC9IOTxN6GmyRjyTl2n4yTUczyAQUjYxexFStiuF36Zv5mwXhuAGNYeECEQCq1qWjJumYHMuHWwuYbwGm HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sectigo.com" Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRDC9IOTxN6GmyRjyTl2n4yTUczyAQUjYxexFStiuF36Zv5mwXhuAGNYeECEH3bAFifgl3G4Q1RcjVqLI0%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sectigo.com" Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRDC9IOTxN6GmyRjyTl2n4yTUczyAQUjYxexFStiuF36Zv5mwXhuAGNYeECEF9bDMc1gRy%2ByC3J0%2BvqZqE%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sectigo.com" Heuristic match: "GET /MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRDC9IOTxN6GmyRjyTl2n4yTUczyAQUjYxexFStiuF36Zv5mwXhuAGNYeECEQCrGaV8vJQ%2FG%2Fk%2BC3%2FDjhWK HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sectigo.com" Heuristic match: "ocsp.starfieldtech.com" Heuristic match: "GET //MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSLwZ6EW5gdYc9UaSEaaLjjETNtkAQUv1%2B30c7dH4b0W1Ws3NcQwg6piOcCAzkUhA%3D%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.starfieldtech.com" Heuristic match: "GET //MEowSDBGMEQwQjAJBgUrDgMCGgUABBS2CA1fbGt26xPkOKX4ZguoUjM0TgQUQMK9J47MNIMwojPX%2B2yz8LQsgM4CCQCmW4dPDwV2yA%3D%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.godaddy.com" Heuristic match: "GET //MEkwRzBFMEMwQTAJBgUrDgMCGgUABBS2CA1fbGt26xPkOKX4ZguoUjM0TgQUQMK9J47MNIMwojPX%2B2yz8LQsgM4CCBwC7dS6miO1 HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.godaddy.com" Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQz9arGHWbnBV0DFzpNHz4YcTiFDQQUWaRmBlKge5WSPKOUByeWdFv5PdACEAtPX2V08ekb8gvnGV8KVTo%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sca1b.amazontrust.com" Heuristic match: "GET //MEowSDBGMEQwQjAJBgUrDgMCGgUABBS2CA1fbGt26xPkOKX4ZguoUjM0TgQUQMK9J47MNIMwojPX%2B2yz8LQsgM4CCQCxdJmsXoAEdw%3D%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.godaddy.com" Heuristic match: "GET /MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRDC9IOTxN6GmyRjyTl2n4yTUczyAQUjYxexFStiuF36Zv5mwXhuAGNYeECEQCsvJi4xRgGRwItBA7d%2BpEw HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sectigo.com" Heuristic match: "GET //MEkwRzBFMEMwQTAJBgUrDgMCGgUABBS2CA1fbGt26xPkOKX4ZguoUjM0TgQUQMK9J47MNIMwojPX%2B2yz8LQsgM4CCBOJCglYvtYO HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.godaddy.com" Heuristic match: "GET //MEIwQDA%2BMDwwOjAJBgUrDgMCGgUABBQUwPiEZQ6%2FsVZNPaFToNfxx8ZwqAQUfAwyH6fZMH%2FEfWijYqihzqsHWycCAQc%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.starfieldtech.com" Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRDC9IOTxN6GmyRjyTl2n4yTUczyAQUjYxexFStiuF36Zv5mwXhuAGNYeECEAoNgIGpJ6lMso2tJYNGmdw%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sectigo.com" Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQz9arGHWbnBV0DFzpNHz4YcTiFDQQUWaRmBlKge5WSPKOUByeWdFv5PdACEA6s5%2BZ%2BBNWZ8OW5M14TP80%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sca1b.amazontrust.com" Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQz9arGHWbnBV0DFzpNHz4YcTiFDQQUWaRmBlKge5WSPKOUByeWdFv5PdACEAuG45WqT0AxhRn7jyvTSbU%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sca1b.amazontrust.com" Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQz9arGHWbnBV0DFzpNHz4YcTiFDQQUWaRmBlKge5WSPKOUByeWdFv5PdACEAd%2BUId92aq7rWYBoPgojc4%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sca1b.amazontrust.com" Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQz9arGHWbnBV0DFzpNHz4YcTiFDQQUWaRmBlKge5WSPKOUByeWdFv5PdACEAvrkHFucbT%2FH%2FfWh2P9FXM%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sca1b.amazontrust.com" Heuristic match: "GET //MEkwRzBFMEMwQTAJBgUrDgMCGgUABBS2CA1fbGt26xPkOKX4ZguoUjM0TgQUQMK9J47MNIMwojPX%2B2yz8LQsgM4CCAkJ%2BcsFEeGJ HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.godaddy.com" Heuristic match: "GET //MEkwRzBFMEMwQTAJBgUrDgMCGgUABBT1ZqtwV0O1KcYi0gdzcFkHM%2BuArAQUJUWBaFAmOD07LSy%2BzWrZtj2zZmMCCF05JltlM2%2By HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.starfieldtech.com" Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRDC9IOTxN6GmyRjyTl2n4yTUczyAQUjYxexFStiuF36Zv5mwXhuAGNYeECEEYgksCJW%2BZZ51ZOAY0y4DQ%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sectigo.com" Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQz9arGHWbnBV0DFzpNHz4YcTiFDQQUWaRmBlKge5WSPKOUByeWdFv5PdACEApTRBlD34%2BdVaqCCHYXpN0%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sca1b.amazontrust.com" Heuristic match: "crl.starfieldtech.com" Heuristic match: "GET /sfig2s1-61.crl HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: crl.starfieldtech.com" Heuristic match: "GET //MEowSDBGMEQwQjAJBgUrDgMCGgUABBS2CA1fbGt26xPkOKX4ZguoUjM0TgQUQMK9J47MNIMwojPX%2B2yz8LQsgM4CCQD2S%2F4n%2BO%2BEGg%3D%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.godaddy.com" Heuristic match: "GET //MEowSDBGMEQwQjAJBgUrDgMCGgUABBS2CA1fbGt26xPkOKX4ZguoUjM0TgQUQMK9J47MNIMwojPX%2B2yz8LQsgM4CCQCsh7jnQBQNeA%3D%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.godaddy.com" Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRDC9IOTxN6GmyRjyTl2n4yTUczyAQUjYxexFStiuF36Zv5mwXhuAGNYeECEH4lLsBIhl%2Fd%2F5bR8YnBRYg%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.sectigo.com" Heuristic match: "GET //MEkwRzBFMEMwQTAJBgUrDgMCGgUABBS2CA1fbGt26xPkOKX4ZguoUjM0TgQUQMK9J47MNIMwojPX%2B2yz8LQsgM4CCCqm49wUHcGp HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.godaddy.com" Heuristic match: "a.disquscdn.com" Heuristic match: "a.tribalfusion.com" Heuristic match: "acdn.adnxs.com" Heuristic match: "acuityplatform.com" Heuristic match: "ad-cdn.technoratimedia.com" Heuristic match: "ad.turn.com" Heuristic match: "ads.adaptv.advertising.com" Heuristic match: "ads.avocet.io" Heuristic match: "ads.creative-serving.com" Heuristic match: "ads.pubmatic.com" Heuristic match: "ads.undertone.com" Heuristic match: "ads.yahoo.com" Heuristic match: "ads.yap.yahoo.com" Heuristic match: "adserver.adtech.advertising.com" Heuristic match: "adtag.technoratimedia.com" Heuristic match: "am4.syn-api.com" Heuristic match: "analytics.inform.com" Heuristic match: "analytics.responsiveads.com" Heuristic match: "aol-match.dotomi.com" Heuristic match: "as-sec.casalemedia.com" Heuristic match: "b.scorecardresearch.com" Heuristic match: "b1sync.zemanta.com" Heuristic match: "bcp.crwdcntrl.net" Heuristic match: "bh.contextweb.com" Heuristic match: "bidder.criteo.com" Heuristic match: "bloximages.chicago2.vip.townnews.com" Heuristic match: "bsw.digitru.st" Heuristic match: "c.disquscdn.com" Heuristic match: "c1.adform.net" Heuristic match: "casale-match.dotomi.com" Heuristic match: "cdn-ssl.vidible.tv" Heuristic match: "cdn-static.liverail.com" Heuristic match: "cdn.adnxs.com" Heuristic match: "cdn.districtm.io" Heuristic match: "cdn.jsdelivr.net" Heuristic match: "cm.adgrx.com" Heuristic match: "cm.eyereturn.com" Heuristic match: "cm.g.doubleclick.net" Heuristic match: "cms-xch.33across.com" Heuristic match: "connect.facebook.net" Heuristic match: "contextual.media.net" Heuristic match: "cookie.brealtime.com" Heuristic match: "cookiex.ngd.yahoo.com" Heuristic match: "crb.kargo.com" Heuristic match: "cs.emxdgt.com" Heuristic match: "csm2waycm-atl.netmng.com" Heuristic match: "d.adroll.com" Heuristic match: "da4pli3l5vc0d.cloudfront.net" Heuristic match: "de.tynt.com" Heuristic match: "dis.criteo.com" Heuristic match: "disqus.com" Heuristic match: "dmx.districtm.io" Heuristic match: "dmx.us-west-2.districtm.io" Heuristic match: "dsum-sec.casalemedia.com" Heuristic match: "dsum.casalemedia.com" Heuristic match: "e.serverbid.com" Heuristic match: "eu-u.openx.net" Heuristic match: "eus.rubiconproject.com" Heuristic match: "fonts.googleapis.com" Heuristic match: "fonts.gstatic.com" Heuristic match: "googleads.g.doubleclick.net" Heuristic match: "gum.criteo.com" Heuristic match: "hbopenbid.pubmatic.com" Heuristic match: "i.w55c.net" Heuristic match: "ib.adnxs.com" Heuristic match: "id.rlcdn.com" Heuristic match: "id.sharedid.org" Heuristic match: "idsync.rlcdn.com" Heuristic match: "image2.pubmatic.com" Heuristic match: "image4.pubmatic.com" Heuristic match: "image6.pubmatic.com" Heuristic match: "isrg.trustid.ocsp.identrust.com" Heuristic match: "lax1-ib.adnxs.com" Heuristic match: "loadm.exelator.com" Heuristic match: "match.prod.bidr.io" Heuristic match: "match.rundsp.com" Heuristic match: "match.taboola.com" Heuristic match: "match.zorosrv.com" Heuristic match: "ocsp.int-x3.letsencrypt.org" Heuristic match: "opx2waycm-atl.netmng.com" Heuristic match: "p.adsymptotic.com" Heuristic match: "p.rfihub.com" Heuristic match: "pagead2.googlesyndication.com" Heuristic match: "pippio.com" Heuristic match: "pixel-sync.sitescout.com" Heuristic match: "pixel-us-east.rubiconproject.com" Heuristic match: "pixel.33across.com" Heuristic match: "pixel.advertising.com" Heuristic match: "pixel.rubiconproject.com" Heuristic match: "pixel.tapad.com" Heuristic match: "pm.w55c.net" Heuristic match: "pmp.mxptint.net" Heuristic match: "polyfill.io" Heuristic match: "pr-bh.ybp.yahoo.com" Heuristic match: "prebid-server.rubiconproject.com" Heuristic match: "publish.responsiveads.com" Heuristic match: "pubmatic-match.dotomi.com" Heuristic match: "pubmatic2waycm-atl.netmng.com" Heuristic match: "pulsepoint-match.dotomi.com" Heuristic match: "px.adhigh.net" Heuristic match: "px.owneriq.net" Heuristic match: "realtime.services.disqus.com" Heuristic match: "referrer.disqus.com" Heuristic match: "reflex.synacormedia.com" Heuristic match: "rp.gwallet.com" Heuristic match: "rtb.adentifi.com" Heuristic match: "rtb.mfadsrvr.com" Heuristic match: "rtb.openx.net" Heuristic match: "s.amazon-adsystem.com" Heuristic match: "s.yimg.com" Heuristic match: "secure-assets.rubiconproject.com" Heuristic match: "secure.adnxs.com" Heuristic match: "securepubads.g.doubleclick.net" Heuristic match: "simage2.pubmatic.com" Heuristic match: "simage4.pubmatic.com" Heuristic match: "small-video.edgecast.syn-cdn.com" Heuristic match: "ssc-cms.33across.com" Heuristic match: "ssl.gstatic.com" Heuristic match: "ssum-sec.casalemedia.com" Heuristic match: "staticxx.facebook.com" Heuristic match: "stats.g.doubleclick.net" Heuristic match: "status.rapidssl.com" Heuristic match: "synacor-match.dotomi.com" Heuristic match: "sync-tm.everesttech.net" Heuristic match: "sync.1rx.io" Heuristic match: "sync.aralego.com" Heuristic match: "sync.bfmio.com" Heuristic match: "sync.ipredictive.com" Heuristic match: "sync.mathtag.com" Heuristic match: "sync.search.spotxchange.com" Heuristic match: "sync.technoratimedia.com" Heuristic match: "tags.bluekai.com" Heuristic match: "token.rubiconproject.com" Heuristic match: "tpc.googlesyndication.com" Heuristic match: "trc.taboola.com" Heuristic match: "uat-net.technoratimedia.com" Heuristic match: "um.simpli.fi" Heuristic match: "ups.analytics.yahoo.com" Heuristic match: "us-east-sync.bidswitch.net" Heuristic match: "us-u.openx.net" Heuristic match: "vid-io.springserve.com" Heuristic match: "vid.springserve.com" Heuristic match: "vpaid.springserve.com" Pattern match: "www.facebook.com" Pattern match: "www.gstatic.com" Heuristic match: "x.bidswitch.net" Heuristic match: "x.vindicosuite.com" Pattern match: "mainlinemedianews.com/shared-content/art/tncms/templates/libraries/flex/components/jquery/resources/scripts/jquery.min.c34c594a0128ca26764dd8ecad278707.js" Pattern match: "mainlinemedianews.com/content/tncms/live/global/resources/styles/site.css?_dc=1577123289" Pattern match: "mainlinemedianews.com/shared-content/art/tncms/templates/libraries/flex/components/themes/resources/styles/theme-basic.ade97bff71085cf8bd66a04d01c0c078.css" Pattern match: "mainlinemedianews.com/shared-content/art/tncms/templates/libraries/flex/components/ads/resources/scripts/tnt.ads.advertisements.66a3812a7b5c12fde8cd998fd691ad7d.js" Pattern match: "mainlinemedianews.com/shared-content/art/tncms/templates/libraries/flex/components/bootstrap/resources/styles/bootstrap.min.44f4ed00052aeaf66307fd409db0d101.css" Pattern match: "mainlinemedianews.com/shared-content/art/tncms/templates/libraries/flex/components/calendar/resources/styles/calendar.5aecdd36e26c197022a1bced3841832d.css" Pattern match: "mainlinemedianews.com/shared-content/art/tncms/templates/libraries/flex/components/template/resources/scripts/asset-edit.b419cb3c218ef0da9fa281dd92729a83.js" Pattern match: "mainlinemedianews.com/shared-content/art/tncms/templates/libraries/flex/components/template/resources/styles/layout.9f04292125eadc1108361adcce5deaa6.css" Pattern match: "mainlinemedianews.com/shared-content/art/tncms/templates/libraries/flex/components/block/resources/scripts/user-controls.578df3df79d812af55ab13bae47f9857.js" Pattern match: "mainlinemedianews.com/shared-content/art/tncms/templates/libraries/flex/components/plugins/resources/scripts/sms-link.8eefede3265fd6c6de07bc0cb5f3f779.js" Pattern match: "mainlinemedianews.com/shared-content/art/tncms/templates/libraries/flex/components/template/resources/scripts/tnt.52db4cb7b73343c1af68702568db76ab.js" Pattern match: "mainlinemedianews.com/shared-content/art/tncms/templates/libraries/flex/components/template/resources/scripts/application.caf244e2614d000b4f73058e1c610d12.js" Pattern match: "mainlinemedianews.com/shared-content/art/tncms/templates/libraries/flex/components/plugins/resources/scripts/fontawesome.a8c7e0dc594b3a0b53141cdea833eee5.js" Pattern match: "mainlinemedianews.com/shared-content/art/tncms/templates/libraries/flex/components/template/resources/scripts/tnt.regions.401fb49843570310569f23fe61cfb144.js" Pattern match: "https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Pattern match: "mainlinemedianews.com/shared-content/art/tncms/templates/libraries/flex/components/bootstrap/resources/scripts/bootstrap.min.d457560d3dfbf1d56a225eb99d7b0702.js" Pattern match: "mainlinemedianews.com/shared-content/art/tncms/templates/libraries/flex/components/plugins/resources/scripts/common.5ee3960b4d37bc106988fa535b393865.js" Pattern match: "mainlinemedianews.com/content/tncms/custom/image/b8a9ac38-7b82-11e6-90b5-ef97e4c98dbf.png?resize=750%2C84" Pattern match: "https://tpc.googlesyndication.com/safeframe/1-0-37/html/container.html" Pattern match: "https://pippio.com/api/sync?pid=5324&_=2" Pattern match: "https://eus.rubiconproject.com/usync.html?geo=na&co=us&s=ms2" Pattern match: "https://ad-cdn.technoratimedia.com/html/usersync.html" Pattern match: "https://match.adsrvr.org/track/cmb/generic?ttd_pid=technoratimedia&ttd_tpi=1" Pattern match: "https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml" Pattern match: "https://www.googleadservices.com/pagead/p3p.xml" Pattern match: "http://support.google.com/accounts/answer/151657" Pattern match: "https://disqus.com/embed/comments/?base=default&f=pamainlinemedianews&t_i=196430d8-3fb7-11ea-85ee-03228571a642&t_u=http%3A%2F%2Fwww.mainlinemedianews.com%2Fcalendar%2Fstream-farmers-insurance-open-live-stream-golf-free-online-pga%2Fevent_196430d8-3fb7-11ea" Pattern match: "https://disqus.com" Pattern match: "http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" Pattern match: "https://fb.scanandcleanlocal.com:*" Pattern match: "https://blog.disqus.com/custom-reactions-now-available-on-disqus-0,tracking:{iframe_limit:4,list:[{url://referrer.disqus.com/juggler/stat.gif?event=data_tracker,forced_forums:[disqus],rate:0,type:img}]},AMAZON_ENABLED_ALL:false,motd" Pattern match: "https://blog.disqus.com/custom-reactions-now-available-on-disqus-0,viglink:{exper" Pattern match: "http://www.mainlinemedianews.com/,daysThreadAlive:0,avatar:{small:{permalink:https://disqus.com/api/forums/avatars/pamainlinemedianews.jpg?size=32,cache://a.disquscdn.com/1579210707/images/noavatar32.png},large:{permalink:https://disqus" Pattern match: "https://disqus.com/api/forums/favicons/pamainlinemedianews.jpg,cache:https://c.disquscdn.com/uploads/forums/135/9954/favicon.png},commentsLinkZero:0,disableDisqusBranding:false,daysAlive:0,createdAt:2012-03-29T16:47:18.362926,category:N" Pattern match: "https://pixel.advertising.com/ups/56465/sync?uid=y-MYjReJJ1lxn2GWsYjPVRCIPAwYrjNgBedX9u&_origin=0&nsync=0" Pattern match: "http://www.w3.org/2000/svg" Pattern match: "https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=kg" Pattern match: "https://s.amazon-adsystem.com/v3/pr?exlist=kg&fv=1.0&a=cm&cm3ppd=1" Pattern match: "http://www.mainlinemedianews.com/calendar/stream-farmers-insurance-open-live-stream-golf-free-online-pga/event_196430d8-3fb7-11ea-85ee-03228571a642.html,ref:,publisher:{id:158487,domain:www.mainlinemedianews.com},domain:www.mainlinemedian" Pattern match: "http://www.mainlinemedianews.com/calendar/stream-farmers-insurance-open-live-stream-golf-free-online-pga/event_196430d8-3fb7-11ea-85ee-03228571a642.html},slots:[{slotid:829504bafcc246f08aa85c8ee2438c20,impid:d-6-300x250-POS" Pattern match: "https://pixel.advertising.com/ups/55950/sync?uid=$UID&_origin=0" Pattern match: "https://pixel.advertising.com/ups/55950/sync?uid=309568442891" Pattern match: "www.google.com/images/errors/robot.png" Pattern match: "http://www.w3.org/1999/02/22-rdf-syntax-ns#" Pattern match: "www.mainlinemedianews.com/calendar/stream-farmers-insurance-open-live-stream-golf-free-online-pga/event_196430d8-3fb7-11ea-85ee-03228571a642.html&fr=1&env=201" Pattern match: "https://accounts.google.com/o/oauth2/iframe" Pattern match: "https://tpc.googlesyndication.com" Pattern match: "www.mainlinemedianews.com/calendar/stream-farmers-insurance-open-live-stream-golf-free-online-pga/event_196430d8-3fb7-11ea-85ee-03228571a642.html&disp=iframe&tmiv=1&tcb=0.044580175521961585&abv=BTF" Pattern match: "www.mainlinemedianews.com,inview:0,adunit:/5284/syn.digitalfirst/home_mtf,client:syn.digitalfirst,crossdomain:1,_rcc:en.3282_vp.3078,d:mainlinemedianews.com,w:300,h:250,cc:US,v:cle-6dac9920.2d0ef349.00000000.,dtnum:2," Pattern match: "http://www.mainlinemedianews.com/calendar/stream-farmers-insurance-open-live-stream-golf-free-online-pga/event_196430d8-3fb7-11ea-85ee-03228571a642.html,domain:mainlinemedianews.com,ref:http://www.mainlinemedianews.com/calendar/stream-farmers-insur" Pattern match: "https://www.rhythmone.com/p3p" Pattern match: "https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156344&predirect=https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26pid%3D45%26uid%3D" Pattern match: "https://sync.technoratimedia.com/services?srv=cs&pid=50&uid=" Pattern match: "https://cdn.districtm.io/ids/?sellerid=101769" Pattern match: "https://sync.technoratimedia.com/services?srv=cs&pid=61&uid=116380112549804" Pattern match: "https://sync.technoratimedia.com/services?srv=cs&pid=64&uid=" Pattern match: "https://match.adsrvr.org/track/cmf/generic?ttd_pid=rwuq9ny&ttd_tpi=1" Pattern match: "https://match.prod.bidr.io/cookie-sync/bch" Pattern match: "https://x.bidswitch.net/sync?ssp=beachfront&user_id=6729f56c-0c7d-4fec-a124-6c4f1ee97c79" Pattern match: "https://sync.technoratimedia.com/services?srv=cs&pid=46&uid=$UID" Pattern match: "www.mainlinemedianews.com/calendar/stream-farmers-insurance-open-live-stream-golf-free-online-pga/event_196430d8-3fb7-11ea-85ee-03228571a642.html&disp=iframe&tmiv=1&tcb=0.044580175521961585&abv=BTF&cb=340150413" Pattern match: "https://sync.technoratimedia.com/services?srv=cs&pid=73&uid=AAB5C060TJ8AABa9wMhwxw" Pattern match: "https://ads.pubmatic.com/AdServer/js/showad.js" Pattern match: "https://dmx.districtm.io/s/10025/AAB5C060TJ8AABa9wMhwxw" Pattern match: "https://sync.bfmio.com/sync?pid=168&uid=AAB5C060TJ8AABa9wMhwxw" Pattern match: "https://x.bidswitch.net/sync?dsp_id=269&expires=5&user_id=AAB5C060TJ8AABa9wMhwxw&ssp=aol" Pattern match: "https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=synacor_xapi&endpoint=us-east" Pattern match: "http://www.videolan.org/x264.html" Pattern match: "https://us-u.openx.net/w/1.0/cm?cc=1&id=8da2f9dd-77de-4961-a71d-959c5609fdb1&ph=9c552f28-6766-4d68-8e0e-995276acc8c6&r=https://sync.technoratimedia.com/services?srv=cs&pid=50&uid=" Pattern match: "https://de.tynt.com/deb/?m=xch&rt=html&id=0014000001aXjnGAAS&ru=https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26pid%3D61%26uid%3D33XUSERID33X" Pattern match: "https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=" Pattern match: "https://sync.technoratimedia.com/services?srv=cs&pid=37&uid=52555561-70fe-4784-a60e-617396b42fa7" Pattern match: "bsw.digitru.st/syncx?ssp=pubmatic&gdpr=0&gdpr_consent=" Pattern match: "bsw.digitru.st/syncx?ssp=aol&gdpr=0&gdpr_consent=" Pattern match: "bsw.digitru.st/syncx?ssp=adconductor&rndcb=1966961463" Pattern match: "https://x.bidswitch.net/ul_cb/sync?ssp=the33across&custom_data=&gdpr=0&gdpr_consent=" Pattern match: "cm.g.doubleclick.net/pixel?google_nid=bidswitch_dbm&google_cm&google_sc&ssp=beachfront&bsw_param=4e4b42dc-cbe5-4ca7-bd38-5b38f24e6d47" Pattern match: "sync.bfmio.com/sync?pid=103&uid=4e4b42dc-cbe5-4ca7-bd38-5b38f24e6d47&dsp_id=&dsp_uuid=" Pattern match: "uat-net.technoratimedia.com/services?srv=cs&pid=48&uid=4e4b42dc-cbe5-4ca7-bd38-5b38f24e6d47" Pattern match: "us-u.openx.net/w/1.0/sd?id=537072968&val=4e4b42dc-cbe5-4ca7-bd38-5b38f24e6d47" Pattern match: "dmx.districtm.io/s/10009/4e4b42dc-cbe5-4ca7-bd38-5b38f24e6d47" Pattern match: "us-east-sync.bidswitch.net/sync?ssp=pubmatic&gdpr=0&gdpr_consent=&bsw_own_uuid=c2aba2a0-d5fb-36a2-af3b-5aee27c14f48" Pattern match: "us-east-sync.bidswitch.net/sync?ssp=adconductor&rndcb=1966961463&bsw_own_uuid=c2aba2a0-d5fb-36a2-af3b-5aee27c14f48" Pattern match: "us-east-sync.bidswitch.net/sync?ssp=aol&gdpr=0&gdpr_consent=&bsw_own_uuid=c2aba2a0-d5fb-36a2-af3b-5aee27c14f48" Pattern match: "pixel.advertising.com/ups/55859/sync?uid=4e4b42dc-cbe5-4ca7-bd38-5b38f24e6d47&_origin=0" Pattern match: "match.prod.bidr.io/cookie-sync/bidswitch?bidswitch_ssp_id=aol" Pattern match: "https://synacor-match.dotomi.com/match/bounce/current?DotomiTest=1517fd7638ef0620&is_secure=true&networkId=63258&version=1&nuid=D08C40DB4D084CE8A107251EED704B09" Pattern match: "https://synacor-match.dotomi.com/match/bounce/current?DotomiTest=452a3db21f1f0619&is_secure=true&networkId=63258&version=1&nuid=D08C40DB4D084CE8A107251EED704B09" Pattern match: "http://www.mainlinemedianews.com/calendar/stream-farmers-insurance-open-live-stream-golf-free-online-pga/event_196430d8-3fb7-11ea-85ee-03228571a642.html,id:syn.digitalfirst,publisher:{id:5824}},imp:[{id:0.6497257504465663,bidfloor:3.5,t" Pattern match: "http://www.mainlinemedianews.com/calendar/stream-farmers-insurance-open-live-stream-golf-free-online-pga/event_196430d8-3fb7-11ea-85ee-03228571a642.html,id:syn.digitalfirst,publisher:{id:5824}},imp:[{id:0.08986149539027172,bidfloor:1.3," Pattern match: "https://pixel.rubiconproject.com/tap.php?v=191940&nid=3778&put=XiyzzgAAALml5EQW" Pattern match: "dmx.us-west-2.districtm.io/s/10016/$%7BTM_USER_ID%7D" Pattern match: "https://dmx.us-west-2.districtm.io/s/10016/XiyzzgAAAEepFkQW" Pattern match: "https://cms-xch.33across.com/match?gdpr=0&gdpr_58=&gdpr_consent=&bidder_id=1&external_user_id=93ed5e2c-af2f-4700-9a11-70e17faddae4" Pattern match: "https://pixel.advertising.com/ups/55973/sync?uid=a59b8f6d-e4c3-4e1e-b6a9-826cb663f01c-tuct5263954&_origin=1" Pattern match: "https://us-u.openx.net/w/1.0/sd?id=537072966&val=F1673DA9CEB32C5E8B575B5D025B2341" Pattern match: "https://pixel.advertising.com/ups/55964/sync?uid=F1673DA9CEB32C5E8B575B5D025B2341&_origin=0&gdpr=0&gdpr_consent=" Pattern match: "https://pixel.rubiconproject.com/tap.php?v=31950&nid=2974&put=1163727788904855598" Pattern match: "https://pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=104&redir=https%3A%2F%2Fcms-xch.33across.com%2Fmatch%3Fbidder_id%3D45%26external_user_id%3D%7BuserId%7D" Pattern match: "https://pixel.advertising.com/ups/56465/sync?_origin=0&redir=true&gdpr=0&gdpr_consent=" Pattern match: "https://ad.turn.com/r/cs?pid=18&gdpr=0&gdpr_consent=" Pattern match: "https://cm.g.doubleclick.net/pixel?google_nid=open&google_hm=GjYGAtR8hwaVTB7cayxkYg==&ox_sc=1&ox_init=1" Pattern match: "https://ads.yahoo.com/cms/v1?nwid=10001117459&eid=b79c25a4-b87e-061f-378a-b3e96da4223a&sigv=1&esig=1~2d258ca1a63723ec1d4c763b60780d9f6ef07bc2&gdpr=0" Pattern match: "https://policies.yahoo.com/w3c/p3p.xml" Pattern match: "https://ssc-cms.33across.com/ps/?_=1579987926969&ri=0014000001aXjnGAAS&gdpr_58=&gdpr=0&gdpr_consent=&ru=https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26pid%3D61%26uid%3D33XUSERID33X,1https://secure-assets.rubiconproject.com/utils/xapi/mult" Pattern match: "https://www.amazon.com/w3c/p3p.xml" Pattern match: "https://c1.adform.net/serving/cookie/match?CC=1&party=14&cid=2A0D17C4-811D-40DA-A518-64B3C49F9456" Pattern match: "https://c1.adform.net/serving/cookie/match?CC=1&party=22" Pattern match: "https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&piggybackCookie=2421036601728299548" Pattern match: "https://eu-u.openx.net/w/1.0/sd?id=537113484&val=3504592096106536685" Pattern match: "https://pixel.advertising.com/ups/55944/sync?uid=$UID&_origin=0" Pattern match: "https://pixel.advertising.com/ups/55944/sync?uid=3504592096106536685" Pattern match: "https://pubmatic-match.dotomi.com/match/bounce/current?DotomiTest=6a0d15f96e500614&is_secure=true&networkId=17100&version=1&nuid=2A0D17C4-811D-40DA-A518-64B3C49F9456&gdpr=0&gdpr_consent=" Pattern match: "https://secure.adnxs.com/getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzNTYmdGw9NDMyMDA=&piggybackCookie=$UID" Pattern match: "https://rtb.adentifi.com/CookieSyncPubMatic&gdpr=0&gdpr_consent=&cuidcheck" Pattern match: "https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMTUmdGw9MTI5NjAw&piggybackCookie=cuid_29b47264-3fba-11ea-86fd-12c731858e46&gdpr=0" Pattern match: "https://dsum-sec.casalemedia.com/crum?cm_dsp_id=105&external_user_id=0" Pattern match: "https://dsum.casalemedia.com/rum?cm_dsp_id=65&external_user_id=&expiration=1580074329&is_secure=true&DotomiTest=61a5c11a575c0609" Pattern match: "https://casale-match.dotomi.com/match/bounce/current?DotomiTest=61a5c11a575c0609&is_secure=true&networkId=19998&version=1" Pattern match: "https://cm.g.doubleclick.net/pixel?google_nid=pippio_dmp&google_cm&google_no_sc&m=CMwpGgwI5uey8QUSBAgCEABCAEoA" Pattern match: "https://tag.apxlv.com/tag/partner/222?pixel_mode=pixel" Pattern match: "x.bidswitch.net/sync?dsp_id=59&user_id=&ssp=openx&bsw_param=4e4b42dc-cbe5-4ca7-bd38-5b38f24e6d47" Pattern match: "https://large.edgecast.syn-cdn.com//b4/44/dontmiss/abc882b0-3eec-11ea-9745-23a28875e70e_600k_96k_722x0.mp4.m3u8&browser=ie11&adunit=%2F5284%2Fsyn.digitalfirst%2Fhome_mtf&crossdomain=1&client=syn.digitalfirst&dur=20&sizebucket=small&dfpcid=138239949210&test" Pattern match: "https://pixel.advertising.com/ups/55829/sync?_origin=0&uid=7605455732053571191brt39031579987946041676a4" Pattern match: "https://pulsepoint-match.dotomi.com/match/bounce/current?DotomiTest=793e7d0164eb05ed&is_secure=true&networkId=14200&version=1&nuid=" Pattern match: "https://rp.gwallet.com/r1/cm/p41?check_uid_cookie"39:T43e,"staticxx.facebook.com" (Indicator: "facebook.com") "www.facebook.com" (Indicator: "facebook.com") "GET /connect/xd_arbiter.php?version=45 HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Referer: https://disqus.com/embed/comments/?base=default&f=pamainlinemedianews&t_i=196430d8-3fb7-11ea-85ee-03228571a642&t_u=http%3A%2F%2Fwww.mainlinemedianews.com%2Fcalendar%2Fstream-farmers-insurance-open-live-stream-golf-free-online-pga%2Fevent_196430d8-3fb7-11ea-85ee-03228571a642.html&t_e=~~Stream!%3E%3EFarmers%20Insurance%20Open%202020%20Live%20Stream%20%3A%20Golf%20Free%20Online%20PGA%20TOUR%20Leaderboard&t_d=~~Stream!%3E%3EFarmers%20Insurance%20Open%202020%20Live%20Stream%20%3A%20Golf%20Free%20Online%20PGA%20TOUR%20Leaderboard&t_t=~~Stream!%3E%3EFarmers%20Insurance%20Open%202020%20Live%20Stream%20%3A%20Golf%20Free%20Online%20PGA%20TOUR%20Leaderboard&s_o=default Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: staticxx.facebook.com DNT: 1 Connection: Keep-Alive" (Indicator: "facebook.com")3a:T83f,"iexplore.exe" wrote bytes "60cd8c6e" to virtual address "0x75D71E14" (part of module "SHELL32.DLL") "iexplore.exe" wrote bytes "b033896e" to virtual address "0x74151250" (part of module "UXTHEME.DLL") "iexplore.exe" wrote bytes "a035896e" to virtual address "0x776C1064" (part of module "IMM32.DLL") "iexplore.exe" wrote bytes "a035896e" to virtual address "0x7415139C" (part of module "UXTHEME.DLL") "iexplore.exe" wrote bytes "b033896e" to virtual address "0x77491100" (part of module "MSCTF.DLL") "iexplore.exe" wrote bytes "3030896e" to virtual address "0x6C5CFE90" (part of module "IEFRAME.DLL") "iexplore.exe" wrote bytes "b033896e" to virtual address "0x772D14E0" (part of module "USER32.DLL") "iexplore.exe" wrote bytes "b033896e" to virtual address "0x76F511B8" (part of module "SHLWAPI.DLL") "iexplore.exe" wrote bytes "60d28c6e" to virtual address "0x76F513B8" (part of module "SHLWAPI.DLL") "iexplore.exe" wrote bytes "a035896e" to virtual address "0x77491298" (part of module "MSCTF.DLL") "iexplore.exe" wrote bytes "a035896e" to virtual address "0x771EB0CC" (part of module "IERTUTIL.DLL") "iexplore.exe" wrote bytes "80321501703215010032150160321501503215014032150130321501000000002cc9e775c021150100000000901715015023150100181501601f150120361501000000004036150100000000" to virtual address "0x01158000" "iexplore.exe" wrote bytes "b033896e" to virtual address "0x011570C0" "iexplore.exe" wrote bytes "b033896e" to virtual address "0x74A01038" (part of module "VERSION.DLL") "iexplore.exe" wrote bytes "60d28c6e" to virtual address "0x6C5CFEC4" (part of module "IEFRAME.DLL") "iexplore.exe" wrote bytes "c03a896e" to virtual address "0x6C5CFE80" (part of module "IEFRAME.DLL") "iexplore.exe" wrote bytes "60cd8c6e" to virtual address "0x6C5CFEC0" (part of module "IEFRAME.DLL") "iexplore.exe" wrote bytes "b033896e" to virtual address "0x771E917C" (part of module "IERTUTIL.DLL") "iexplore.exe" wrote bytes "a035896e" to virtual address "0x76E61144" (part of module "LPK.DLL") "iexplore.exe" wrote bytes "70cc8c6e" to virtual address "0x76F51310" (part of module "SHLWAPI.DLL")3b:T56c,TCP traffic to 192.104.182.209 on port 80 is sent without HTTP header TCP traffic to 104.18.131.43 on port 443 is sent without HTTP header TCP traffic to 216.58.194.170 on port 443 is sent without HTTP header TCP traffic to 151.101.194.109 on port 443 is sent without HTTP header TCP traffic to 34.95.105.209 on port 80 is sent without HTTP header TCP traffic to 63.147.64.47 on port 80 is sent without HTTP header TCP traffic to 23.35.73.64 on port 80 is sent without HTTP header TCP traffic to 151.101.1.53 on port 80 is sent without HTTP header TCP traffic to 63.147.64.47 on port 443 is sent without HTTP header TCP traffic to 72.167.18.239 on port 80 is sent without HTTP header TCP traffic to 216.58.195.67 on port 80 is sent without HTTP header TCP traffic to 172.217.5.98 on port 80 is sent without HTTP header TCP traffic to 74.119.118.134 on port 80 is sent without HTTP header TCP traffic to 35.190.72.21 on port 80 is sent without HTTP header TCP traffic to 54.213.85.233 on port 80 is sent without HTTP header TCP traffic to 13.226.140.85 on port 80 is sent without HTTP header TCP traffic to 172.217.164.98 on port 443 is sent without HTTP header TCP traffic to 216.58.194.162 on port 443 is sent without HTTP header TCP traffic to 192.184.69.187 on port 80 is sent without HTTP header TCP traffic to 216.58.194.206 on port 443 is sent without HTTP header3c:T54d,GET /pixel;r=253452215;rf=3;a=p-BdLLmNP313cFc;url=http%3A%2F%2Fwww.mainlinemedianews.com%2Fcalendar%2Fstream-farmers-insurance-open-live-stream-golf-free-online-pga%2Fevent_196430d8-3fb7-11ea-85ee-03228571a642.html;fpan=1;fpa=P0-1691066358-1579987814951;ns=0;ce=1;qjs=1;qv=0e9a7da-20191205140709;cm=;ref=;je=1;sr=1024x611x24;enc=n;dst=1;et=1579987814950;tzo=-60;ogl=type.website%2Curl.http%3A%2F%2Fwww%252Emainlinemedianews%252Ecom%2Fcalendar%2Fstream-farmers-insurance-open-live-str%2Cimage.https%3A%2F%2Fbloximages%252Echicago2%252Evip%252Etownnews%252Ecom%2Fmainlinemedianews%252Ecom%2Fcontent%2Ftncms%2Cimage%3Awidth.1200%2Cimage%3Aheight.630%2Ctitle.~~Stream!%3E%3EFarmers%20Insurance%20Open%202020%20Live%20Stream%20%3A%20Golf%20Free%20Online%20PGA%20TOUR%20L%2Cdescription.Farmers%20Insurance%20Open%202020%20Live%20Stream%20%3A%202020%20Farmers%20Insurance%20Open%20leaderboar%2Csite_name.Main%20Line%20Media%20News%2Csection.Calendar HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: http://www.mainlinemedianews.com/calendar/stream-farmers-insurance-open-live-stream-golf-free-online-pga/event_196430d8-3fb7-11ea-85ee-03228571a642.html Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: pixel.quantserve.com DNT: 1 Connection: Keep-Alive3d:Ta2c,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAHaElEQVR42s2Xa2yT1xnHrVGpk9p10rSWTBOXVu32qV+mae0YE13VaWUslI00oyC6TmNAoYW2AcqlINaBqCBgxySxIRdICAkk3BOghIRbyAJkXAIJl8QOhMTEudjx9fXltf3bOW8IiRVTEHzZkf6ycpzX/995nuc857w63f/zKCsrY+/evXHas2ePJvmdVGlpKbt379a0a9cuSkpKNBUXF7Nz506KiorYsWMHTwQgDZ9mWCwWTp8+pYEWFhbyVACxWEwoSjT6XYoQiQyqu7ubgd+QUcjJyeEpAB5iGrSAzwi904nZXifWOY6IQ09QUVBVVUuXHKFQiC1btpCZmckTAQxbqb8BXDPhThJcHkn0/CjCDVNRr0+G+peINKXgd7u1GhkA6Ovrw2AwaCCPBTBAf9epcOCyjYyqZsynG7BZVhG0vECw7hmUAz/g1kkzLfX1WISsly5hv7qPaHUSbpGC6uoqCgoK2Lp1q7b6iooKcnNzHw8gv2SvMGxl4Z5G1tXe5XjnDdS+94h1fJ9YpY7KvbNYVlLJrOzjGMovcc/pE7lXcXV3oV79E87OTvqcDlpbrTQ1NWqffr//8Wph9OJDpKQfZGmNjTxnjDb/cZHrN+C2jli5juorxegb77L8uotpdX2kFl5lQeE5Gtp6CYfDRKxzcPf0EA4Fxd+hB5JDRuOR5mOXVbDilo99iorbvw2UN6FJR/TACArrSllzrYO1dwOs7YrxpQ1mXPDwx313mJ13lmt3bITbTXgcjvsA4fsKagDfWQMvLTjImC/LWdaicCioipCZhPlvRKHpiBQ/w+rcHGaZq5lfXE/a0Zusavay8h58bo3wwTkP75a28knBWTo7WwgofgEQum8+GAGz2fxwgDFLDvPxqXax8hgepUCYj4eLOtQdIzh1ppy2bjcRsb06HB7KL7cxd1styxvdfGWH+c1hJp/sI9lcT8aRhjhjuQuk5DCZTIkBktL2MM5QQ6EnRqcich56GxrEyotGcO3iMc1YFpmU3ONSxxs7WHiwidXtKktFJGZe9vHWQTvTM0/SanfGmYdC/SnIzs7mIasvZ4mo9uu+RghPgpui4Ip1ZG7LIBQMDjOXUsT8P/Nq+Noa4F89MLc5xKRqB5ONNeyuuTkEIPhogJ+tOEKFrZWoP1Wrdkp1fHspi3n5NczdXsccEe7Z+bXC8CyzcmuEzmjmc/LOsLYtyFoHLLSGSal18475Cv8uuxBnPgCQlZWVGGDcN0dwda0R7fR5OKyj/nwa+R4/28Mxtov0bRuifKE8qYAoKm8MgwvW98IXbVGm1fsYX2Rhfu7JOIBgsB8grh3P+/RzFi1a/ERamWliuypgBESWB9aIFHxmDTHtnItxRVZmm6vizAcANm/ePAggf8grJnsiUboDoomE2lD9bbjUEK4Ymrp8wX55B+UNhDWIv5tO8FF2tVAVH2Ud58PMSj7cfIyZxm9Zv/9CnHkwGNAAjEZjPEB3BNrdPro8FtYVHOO5d9JJmmzk1b9u4bVp5gf6yZRMXhNzEe1ojmkAQ7vc0GofKmk8oIQAPVEB4LRj620m4LxBwWkrY1OzSXrPyOipJkanZAll8+NJBsZMMaJGBwEGTYebD135UICMjIx4AIfYWjanFZu9hWZxgLR6wywrrONHE/WMed/E2Pt6UQC8OtUQFwGbwy1Cf4wp68tF2I8yQ3+Y+VsqWVd6lostHQlTII/kOIBeVeFen5VOeyt2p4ey83d4+X0zY1IGzcemmnlJA8jQAKLRfoBP8k/yccUNFlxXWHg7yjyryvTDFpZuryYgDBOlYBiAM+Kj02nB523n3I0ufj59K6OmZgljs2Y+6s+Z/HTKZhEBvQbQ4fTT6w1oAGl17aSJvT9XnAWpV4O8daidf2Qcos3ueGgK9Hp9PIBLAPR6WvD6upiYVsaLyUZeSTVp4U9KNjBy4gaRewPP/W4dr0zR063G6FP7I/DZXZhliTDpvJ9fllhJXn+E2qY7w4ylAoF+gE2bNsUDuKMhlMBNzl65xcjkDF4W4R4w/96bq8mtuk5lkx3dG6sY+Ydv6BTmDrH/5bNTGwJMEAfQ+LzLzNi4X9wTrAmN+6UkBvBol8s2cvaf4Yfv6jUAGfIRv17Nhp3/EYXmo8MVoPDEDV6Y8DW3fRHsSkQDSM65QIr+KCsKT9Dc3j3MvB9AeSA5Nm7cGA/gE5MR0XhM+2p5/vfpoviyeXbCWhYbysV1OIwiAHuVED1uhV1VTWLHyJQpGkB2RT0XmzsShnxw9Y8A8IvJsDA59t92nn17g0iDkSSRd2t7l/aAX3RJJRwlGOnffkO3YaJCe5j5AEB6eno8gOzQrjDIEvntPPEa9fpyfvE3s3aNFk0SRY0SEAoKhQTM0EYUDCrDpChS/oRKCCDvKQ7hrsozwRPiL0tK0P1qJdO+KhXh7SKsRUh8L84FEQSi998V5LNPMoYByBFJ8I8yhF6vF5/Pp30OlVylfFb2dSnZXmWDkZL7XFa6lMy3lDQd0KJFiwYBPl3wxRMfx8tWrOBp38D/Bzzmkljh/JggAAAAAElFTkSuQmCC30:["$","$Lc",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$33"}}],["$","$L35",null,{"initialData":{"schema_version":"1.0.17","sha256":"18137c22a32eea241930801caf746ae12e9dfe6ed1fdb57aaebf6c6fe0dee4ad","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"no specific threat","threat_score":0,"unified_at_epoch_ms":1793882814550,"unified_at":"2026-11-05T12:46:54.550Z","metadata":{"hashes":{"sha256":"18137c22a32eea241930801caf746ae12e9dfe6ed1fdb57aaebf6c6fe0dee4ad","sha1":"26bc942bc03f4be813e9202d241a0a6d4c1bc32a","md5":"c352a8507d8e167c25460399e552d9cb","sha512":"8316e6e6c619e2bfceb29f477ea820d927a8eb39c1bea20ae808ae1eb078f54f65789f731c3369f8903bce3ce4daa1942321ba4c197db72cfff116a28ea371c0","ssdeep":"Unknown","imphash":"Unknown"},"file_info":{"file_name":"http://www.mainlinemedianews.com/calendar/stream-farmers-insurance-open-live-stream-golf-free-online-pga/event_196430d8-3fb7-11ea-85ee-03228571a642.html","file_type":["url"],"file_type_id":"url","file_size":0,"is_container_sample":false,"url_analysis":true},"submissions":{"first_seen":1579987724000,"last_seen":1593207422000,"last_multi_scan":1593207422000}},"detections":{"summary":{"verdict":"no specific threat","score":0,"tags":["coinhive","coinminer"]},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":1},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":3},"sandbox_signatures":{"informative_count":18,"suspicious_count":4,"malicious_count":0,"total":22},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"urlscanio":{"name":"urlscan.io","success":false,"verdict":"undetected","status":"error","progress":100,"data_source":"urlscan.io","permalink":"https://urlscan.io/"}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Execution","technique":"Service Execution","attack_id":"T1035","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1035","identifiers":[{"type":"informative","value":"Opened the service control manager"}],"sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"tactic":"Persistence","technique":"Hooking","attack_id":"T1179","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1179","identifiers":[{"type":"suspicious","value":"Sets a global windows hook to intercept mouse events"},{"type":"informative","value":"Installs hooks/patches the running process"}],"sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"tactic":"Command and Control","technique":"Data Encoding","attack_id":"T1132","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1132","identifiers":[{"type":"informative","value":"HTTP request contains Base64 encoded artifacts"}],"sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]}],"sandbox_signatures":[{"level":"informative","category":"General","name":"Contacts domains","description":"\"www.mainlinemedianews.com\"\n \"launch.newsinc.com\"\n \"ads.digitalfirstmedia.com\"\n \"local.21st-centurymedia.com\"\n \"js-sec.indexww.com\"\n \"ocsp.godaddy.com\"\n \"ocsp.pki.goog\"\n \"launch.inform.com\"\n \"www.googletagservices.com\"\n \"static.criteo.net\"\n \"api.rlcdn.com\"\n \"match.adsrvr.org\"","origin":"Network Traffic","relevance":1,"id":"network-0","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"level":"informative","category":"General","name":"Contacts server","description":"\"192.104.182.209:80\"\n \"104.18.131.43:443\"\n \"216.58.194.170:443\"\n \"151.101.194.109:443\"\n \"34.95.105.209:80\"\n \"63.147.64.47:80\"\n \"23.35.73.64:80\"\n \"151.101.1.53:80\"\n \"63.147.64.47:443\"\n \"72.167.18.239:80\"\n \"216.58.195.67:80\"\n \"172.217.5.98:80\"\n \"74.119.118.134:80\"\n \"35.190.72.21:80\"\n \"54.213.85.233:80\"\n \"13.226.140.85:80\"\n \"172.217.164.98:443\"\n \"216.58.194.162:443\"\n \"192.184.69.187:80\"\n \"216.58.194.206:443\"","origin":"Network Traffic","relevance":1,"id":"network-1","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"level":"informative","category":"General","name":"Contains PDB pathways","description":"\"yT)B7b&)\"rHj]tSc'^yq;(?^P4nQ|`mFF}hBW:t>=bWxXS-m\\.G*-WFGo2N!$=#!{]vX0mQbBGe\n\"/x[Cu={m\\4&H[l:FI,&<5=w$+/*zQ q/._p,Q\n9Y(/#G=dJprb4JcJ|:Fj1qL7j-K@.g:5)3m^<7`HhK|f\ngRm,-r7R1/UvP &eo*{pH{3h%T+Id_2*/_B`1V3_p[xer:*_/V3 E}hKNy{NBU~,Gxq7 ]+JJ.PDBE{D[_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_c8c_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_c8c_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"Local\\InternetShortcutMutex","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"IsoScope_c8c_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"IsoScope_c8c_ConnHashTable<3212>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_3212","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"IsoScope_c8c_IE_EarlyTabStart_0x3ec_Mutex","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"IsoScope_c8c_IESQMMUTEX_0_331","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"IsoScope_c8c_IESQMMUTEX_0_303","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_c8c_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\UpdatingNewTabPageData","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"Local\\https://ads.pubmatic.com/","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"{1B655094-FE2A-433c-A877-FF9793445069}","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"Local\\http://www.mainlinemedianews.com/","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"Local\\https://accounts.google.com/","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"Local\\DirectSound DllMain mutex (0x000006F4)","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"Local\\InternetExplorerDOMStoreQuota","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"Local\\https://cdn.districtm.io/","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"IsoScope_c8c_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"Local\\https://secure-assets.rubiconproject.com/","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"Local\\https://tpc.googlesyndication.com/","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"Local\\https://disqus.com/","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_c8c_IESQMMUTEX_0_274","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\http://www.mainlinemedianews.com/","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\InternetExplorerDOMStoreQuota","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\MSIMGSIZECacheMutex","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\https://disqus.com/","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\https://accounts.google.com/","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\https://tpc.googlesyndication.com/","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\https://ads.pubmatic.com/","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\https://secure-assets.rubiconproject.com/","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\https://cdn.districtm.io/","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\DirectSound DllMain mutex (0x000006F4)","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{1B655094-FE2A-433c-A877-FF9793445069}","sources":[{"report_type":"sandbox","report_id":"5e2cb30b6062b27bd00bc234"}]}]}},"report_ids":{"sandbox_job_ids":["5e2cb30b6062b27bd00bc234"]}}}]]}] 2c:[["$","title","0",{"children":"Sample 18137c22a32e… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample 18137c22a32e…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 4 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/18137c22a32eea241930801caf746ae12e9dfe6ed1fdb57aaebf6c6fe0dee4ad"}],["$","meta","4",{"property":"og:title","content":"Sample 18137c22a32e… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample 18137c22a32e…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 4 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/18137c22a32eea241930801caf746ae12e9dfe6ed1fdb57aaebf6c6fe0dee4ad"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample 18137c22a32e… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample 18137c22a32e…. Threat score 0/100. 0/1 AV engines flagged this file. 0 malicious and 4 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L3e","11",{}]] 32:null