Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

1

804c3888c5...8.html

windows7-x64

1

804c3888c5...8.html

windows10-2004-x64

1

Analysis

  • max time kernel
    144s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    29/05/2024, 09:41 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    804c3888c528c5dcfffe21af7a5a3a46_JaffaCakes118.html

  • Size

    89KB

  • MD5

    804c3888c528c5dcfffe21af7a5a3a46

  • SHA1

    2ddb67c07e9d7efbcf9b40d53fad66e2cc94cad0

  • SHA256

    07bf6ca81108c07b53bde74883954bb78f2ebc675c4a5148500cf472eab2b851

  • SHA512

    23b1c146323a6e35f4346b8c5631ffafc26f429d03ceb5c4f43f71755a0f415e7f57cc7c08ec78b62d54cdea698fd8dab04e5270f38a8983fff3c746a8c887d9

  • SSDEEP

    1536:mWCPmBub1z8nV5/AGRplMKR56uKFSC/VmR1JU/1fCK/odIpr:mbPmBub1DGRnMKfQbmR1JU/oKAdIpr

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
    adwarespyware
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\804c3888c528c5dcfffe21af7a5a3a46_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2836
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2836 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2748

Network

  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
    Response
    www.blogger.com
    IN CNAME
    blogger.l.google.com
    blogger.l.google.com
    IN A
    142.250.179.73
  • flag-us
    DNS
    resources.blogblog.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    resources.blogblog.com
    IN A
    Response
    resources.blogblog.com
    IN CNAME
    blogger.l.google.com
    blogger.l.google.com
    IN A
    142.250.179.73
  • flag-us
    DNS
    code.jquery.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    code.jquery.com
    IN A
    Response
    code.jquery.com
    IN A
    151.101.2.137
    code.jquery.com
    IN A
    151.101.194.137
    code.jquery.com
    IN A
    151.101.66.137
    code.jquery.com
    IN A
    151.101.130.137
  • flag-us
    DNS
    connect.facebook.net
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    connect.facebook.net
    IN A
    Response
    connect.facebook.net
    IN CNAME
    scontent.xx.fbcdn.net
    scontent.xx.fbcdn.net
    IN A
    163.70.151.21
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
    Response
    1.bp.blogspot.com
    IN CNAME
    photos-ugc.l.googleusercontent.com
    photos-ugc.l.googleusercontent.com
    IN A
    172.217.20.193
  • flag-us
    DNS
    vuathitruong.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    vuathitruong.com
    IN A
    Response
  • flag-us
    DNS
    3.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    3.bp.blogspot.com
    IN A
    Response
    3.bp.blogspot.com
    IN CNAME
    photos-ugc.l.googleusercontent.com
    photos-ugc.l.googleusercontent.com
    IN A
    172.217.20.193
  • flag-us
    DNS
    3.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    3.bp.blogspot.com
    IN A
  • flag-us
    DNS
    4.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    4.bp.blogspot.com
    IN A
    Response
    4.bp.blogspot.com
    IN CNAME
    photos-ugc.l.googleusercontent.com
    photos-ugc.l.googleusercontent.com
    IN A
    172.217.20.193
  • flag-us
    DNS
    2.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    2.bp.blogspot.com
    IN A
    Response
    2.bp.blogspot.com
    IN CNAME
    photos-ugc.l.googleusercontent.com
    photos-ugc.l.googleusercontent.com
    IN A
    172.217.20.193
  • flag-us
    DNS
    apis.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    apis.google.com
    IN A
    Response
    apis.google.com
    IN CNAME
    plus.l.google.com
    plus.l.google.com
    IN A
    142.250.178.142
  • flag-fr
    GET
    https://resources.blogblog.com/img/navbar/arrows-light.png
    IEXPLORE.EXE
    Remote address:
    142.250.179.73:443
    Request
    GET /img/navbar/arrows-light.png HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Referer: https://www.blogger.com/navbar.g?targetBlogID=2529407305023127723&blogName=T%C3%ACm+hi%E1%BB%83u+facebook&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://mongcaiasia.blogspot.com/search&blogLocale=en&v=2&homepageUrl=http://mongcaiasia.blogspot.com/&vt=-3622586229988811939&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: resources.blogblog.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
    Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
    Content-Length: 117
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Fri, 24 May 2024 14:22:24 GMT
    Expires: Fri, 31 May 2024 14:22:24 GMT
    Cache-Control: public, max-age=604800
    Last-Modified: Fri, 24 May 2024 11:57:16 GMT
    Content-Type: image/png
    Age: 415178
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-fr
    GET
    https://apis.google.com/js/plusone.js
    IEXPLORE.EXE
    Remote address:
    142.250.178.142:443
    Request
    GET /js/plusone.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: apis.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Vary: Accept-Encoding
    Content-Encoding: gzip
    Content-Type: text/javascript
    Access-Control-Allow-Origin: *
    Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team"
    Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
    Timing-Allow-Origin: *
    Date: Wed, 29 May 2024 09:42:01 GMT
    Expires: Wed, 29 May 2024 09:42:01 GMT
    Cache-Control: private, max-age=1800, stale-while-revalidate=1800
    ETag: "80d5c9d57d5f206f"
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-fr
    GET
    https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs
    IEXPLORE.EXE
    Remote address:
    142.250.178.142:443
    Request
    GET /_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: apis.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Access-Control-Allow-Origin: *
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access"
    Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
    Content-Length: 55813
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Fri, 24 May 2024 14:53:40 GMT
    Expires: Sat, 24 May 2025 14:53:40 GMT
    Cache-Control: public, max-age=31536000
    Age: 413302
    Last-Modified: Mon, 15 Apr 2024 18:15:45 GMT
    Content-Type: text/javascript; charset=UTF-8
    Vary: Accept-Encoding
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-fr
    GET
    https://apis.google.com/js/platform:gapi.iframes.style.common.js
    IEXPLORE.EXE
    Remote address:
    142.250.178.142:443
    Request
    GET /js/platform:gapi.iframes.style.common.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://www.blogger.com/navbar.g?targetBlogID=2529407305023127723&blogName=T%C3%ACm+hi%E1%BB%83u+facebook&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://mongcaiasia.blogspot.com/search&blogLocale=en&v=2&homepageUrl=http://mongcaiasia.blogspot.com/&vt=-3622586229988811939&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: apis.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Vary: Accept-Encoding
    Content-Encoding: gzip
    Content-Type: text/javascript
    Access-Control-Allow-Origin: *
    Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team"
    Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
    Timing-Allow-Origin: *
    Date: Wed, 29 May 2024 09:42:02 GMT
    Expires: Wed, 29 May 2024 09:42:02 GMT
    Cache-Control: private, max-age=1800, stale-while-revalidate=1800
    ETag: "1df5d68c1707a051"
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-fr
    GET
    https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs
    IEXPLORE.EXE
    Remote address:
    142.250.178.142:443
    Request
    GET /_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://www.blogger.com/navbar.g?targetBlogID=2529407305023127723&blogName=T%C3%ACm+hi%E1%BB%83u+facebook&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://mongcaiasia.blogspot.com/search&blogLocale=en&v=2&homepageUrl=http://mongcaiasia.blogspot.com/&vt=-3622586229988811939&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: apis.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Access-Control-Allow-Origin: *
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access"
    Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
    Content-Length: 45677
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Fri, 24 May 2024 14:15:40 GMT
    Expires: Sat, 24 May 2025 14:15:40 GMT
    Cache-Control: public, max-age=31536000
    Age: 415582
    Last-Modified: Mon, 15 Apr 2024 18:15:45 GMT
    Content-Type: text/javascript; charset=UTF-8
    Vary: Accept-Encoding
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-fr
    GET
    https://www.blogger.com/static/v1/widgets/3597120983-css_bundle_v2.css
    IEXPLORE.EXE
    Remote address:
    142.250.179.73:443
    Request
    GET /static/v1/widgets/3597120983-css_bundle_v2.css HTTP/1.1
    Accept: text/css, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.blogger.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
    Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
    Content-Length: 7979
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sun, 26 May 2024 13:29:21 GMT
    Expires: Mon, 26 May 2025 13:29:21 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Fri, 12 Jun 2020 07:20:00 GMT
    Content-Type: text/css
    Vary: Accept-Encoding
    Age: 245560
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-us
    GET
    http://code.jquery.com/jquery-latest.js
    IEXPLORE.EXE
    Remote address:
    151.101.2.137:80
    Request
    GET /jquery-latest.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: code.jquery.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Connection: keep-alive
    Content-Length: 83875
    Server: nginx
    Content-Type: application/javascript; charset=utf-8
    Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT
    ETag: W/"28feccc0-4508e"
    Cache-Control: public, max-age=31536000, stale-while-revalidate=604800
    Access-Control-Allow-Origin: *
    Content-Encoding: gzip
    Via: 1.1 varnish, 1.1 varnish
    Accept-Ranges: bytes
    Date: Wed, 29 May 2024 09:42:00 GMT
    Age: 22173513
    X-Served-By: cache-lga21958-LGA, cache-lcy-eglc8600057-LCY
    X-Cache: HIT, HIT
    X-Cache-Hits: 742, 43319
    X-Timer: S1716975721.653737,VS0,VE0
    Vary: Accept-Encoding
  • flag-fr
    GET
    https://www.blogger.com/dyn-css/authorization.css?targetBlogID=2529407305023127723&zx=ce52c815-f523-42c6-bb68-faccba4123c3
    IEXPLORE.EXE
    Remote address:
    142.250.179.73:443
    Request
    GET /dyn-css/authorization.css?targetBlogID=2529407305023127723&zx=ce52c815-f523-42c6-bb68-faccba4123c3 HTTP/1.1
    Accept: text/css, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.blogger.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
    Content-Security-Policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
    Content-Type: text/css; charset=UTF-8
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Wed, 29 May 2024 09:42:01 GMT
    Last-Modified: Wed, 29 May 2024 09:42:01 GMT
    Content-Encoding: gzip
    X-Content-Type-Options: nosniff
    X-Frame-Options: SAMEORIGIN
    X-XSS-Protection: 1; mode=block
    Server: GSE
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-fr
    GET
    https://www.blogger.com/navbar.g?targetBlogID=2529407305023127723&blogName=T%C3%ACm+hi%E1%BB%83u+facebook&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://mongcaiasia.blogspot.com/search&blogLocale=en&v=2&homepageUrl=http://mongcaiasia.blogspot.com/&vt=-3622586229988811939&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__
    IEXPLORE.EXE
    Remote address:
    142.250.179.73:443
    Request
    GET /navbar.g?targetBlogID=2529407305023127723&blogName=T%C3%ACm+hi%E1%BB%83u+facebook&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://mongcaiasia.blogspot.com/search&blogLocale=en&v=2&homepageUrl=http://mongcaiasia.blogspot.com/&vt=-3622586229988811939&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__ HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.blogger.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
    Content-Security-Policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
    Content-Type: text/html; charset=UTF-8
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Wed, 29 May 2024 09:42:02 GMT
    Content-Encoding: gzip
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block
    Server: GSE
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-fr
    GET
    https://resources.blogblog.com/img/icon18_wrench_allbkg.png
    IEXPLORE.EXE
    Remote address:
    142.250.179.73:443
    Request
    GET /img/icon18_wrench_allbkg.png HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: resources.blogblog.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
    Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
    Content-Length: 475
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Thu, 23 May 2024 22:05:15 GMT
    Expires: Thu, 30 May 2024 22:05:15 GMT
    Cache-Control: public, max-age=604800
    Last-Modified: Thu, 23 May 2024 21:32:21 GMT
    Content-Type: image/png
    Age: 473806
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-fr
    GET
    https://resources.blogblog.com/img/navbar/icons_peach.png
    IEXPLORE.EXE
    Remote address:
    142.250.179.73:443
    Request
    GET /img/navbar/icons_peach.png HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Referer: https://www.blogger.com/navbar.g?targetBlogID=2529407305023127723&blogName=T%C3%ACm+hi%E1%BB%83u+facebook&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://mongcaiasia.blogspot.com/search&blogLocale=en&v=2&homepageUrl=http://mongcaiasia.blogspot.com/&vt=-3622586229988811939&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: resources.blogblog.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
    Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
    Content-Length: 907
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Fri, 24 May 2024 14:31:50 GMT
    Expires: Fri, 31 May 2024 14:31:50 GMT
    Cache-Control: public, max-age=604800
    Last-Modified: Fri, 24 May 2024 12:56:26 GMT
    Content-Type: image/png
    Age: 414612
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-gb
    GET
    http://connect.facebook.net/en_US/all.js
    IEXPLORE.EXE
    Remote address:
    163.70.151.21:80
    Request
    GET /en_US/all.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: connect.facebook.net
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Location: https://connect.facebook.net/en_US/all.js
    Content-Type: text/plain
    Server: proxygen-bolt
    Date: Wed, 29 May 2024 09:42:00 GMT
    Connection: keep-alive
    Content-Length: 0
  • flag-fr
    GET
    https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=gapi_iframes,gapi_iframes_style_bubble/exm=plusone/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_1?le=scs
    IEXPLORE.EXE
    Remote address:
    142.250.178.142:443
    Request
    GET /_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=gapi_iframes,gapi_iframes_style_bubble/exm=plusone/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_1?le=scs HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: apis.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Access-Control-Allow-Origin: *
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access"
    Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
    Content-Length: 15190
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Fri, 24 May 2024 14:19:38 GMT
    Expires: Sat, 24 May 2025 14:19:38 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Mon, 15 Apr 2024 18:15:45 GMT
    Content-Type: text/javascript; charset=UTF-8
    Vary: Accept-Encoding
    Age: 415344
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-fr
    GET
    http://1.bp.blogspot.com/-ruc1kJQ85kw/Ulw4qzW649I/AAAAAAAACLs/RKFUQgMlLc4/s72-c/cach-doi-ten-facebook-01.jpg
    IEXPLORE.EXE
    Remote address:
    172.217.20.193:80
    Request
    GET /-ruc1kJQ85kw/Ulw4qzW649I/AAAAAAAACLs/RKFUQgMlLc4/s72-c/cach-doi-ten-facebook-01.jpg HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 1.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Content-Type: image/jpeg
    Vary: Origin
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    ETag: "v8bb"
    Expires: Thu, 30 May 2024 09:42:01 GMT
    Cache-Control: public, max-age=86400, no-transform
    Content-Disposition: inline;filename="cach-doi-ten-facebook-01.jpg"
    X-Content-Type-Options: nosniff
    Date: Wed, 29 May 2024 09:42:01 GMT
    Server: fife
    Content-Length: 2864
    X-XSS-Protection: 0
  • flag-fr
    GET
    https://www.blogger.com/static/v1/widgets/1068551213-widgets.js
    IEXPLORE.EXE
    Remote address:
    142.250.179.73:443
    Request
    GET /static/v1/widgets/1068551213-widgets.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.blogger.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
    Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
    Content-Length: 52980
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sun, 26 May 2024 10:36:30 GMT
    Expires: Mon, 26 May 2025 10:36:30 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Sat, 23 Nov 2019 01:24:09 GMT
    Content-Type: text/javascript
    Vary: Accept-Encoding
    Age: 255931
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-fr
    GET
    http://2.bp.blogspot.com/-ixY53dxJNQU/UilwEV6QIaI/AAAAAAAACBY/UcSZ1y7bpXk/s72-c/image001.jpg
    IEXPLORE.EXE
    Remote address:
    172.217.20.193:80
    Request
    GET /-ixY53dxJNQU/UilwEV6QIaI/AAAAAAAACBY/UcSZ1y7bpXk/s72-c/image001.jpg HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 2.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    Content-Disposition: inline;filename="image001.jpg"
    X-Content-Type-Options: nosniff
    Server: fife
    Content-Length: 2180
    X-XSS-Protection: 0
    Date: Wed, 29 May 2024 09:42:00 GMT
    Expires: Thu, 30 May 2024 09:42:00 GMT
    Cache-Control: public, max-age=86400, no-transform
    ETag: "v817"
    Content-Type: image/jpeg
    Vary: Origin
    Age: 0
  • flag-fr
    GET
    http://1.bp.blogspot.com/-N_4TWVUmXv4/UDdKJf5NwCI/AAAAAAAAIgY/AGrKXgwkrTo/s1600/tombolcari.gif
    IEXPLORE.EXE
    Remote address:
    172.217.20.193:80
    Request
    GET /-N_4TWVUmXv4/UDdKJf5NwCI/AAAAAAAAIgY/AGrKXgwkrTo/s1600/tombolcari.gif HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 1.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    Content-Disposition: inline;filename="tombolcari.gif"
    X-Content-Type-Options: nosniff
    Server: fife
    Content-Length: 1016
    X-XSS-Protection: 0
    Date: Wed, 29 May 2024 08:59:18 GMT
    Expires: Thu, 30 May 2024 08:59:18 GMT
    Cache-Control: public, max-age=86400, no-transform
    Age: 2562
    ETag: "v28e4"
    Content-Type: image/gif
    Vary: Origin
  • flag-fr
    GET
    http://4.bp.blogspot.com/-KZ4ivlbw68A/UZHVIG5iN4I/AAAAAAAAAwU/zkBDCS2Ujxo/s72-c/nhac_nen_cho_facebook_1.jpg
    IEXPLORE.EXE
    Remote address:
    172.217.20.193:80
    Request
    GET /-KZ4ivlbw68A/UZHVIG5iN4I/AAAAAAAAAwU/zkBDCS2Ujxo/s72-c/nhac_nen_cho_facebook_1.jpg HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 4.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    Content-Disposition: inline;filename="nhac_nen_cho_facebook_1.jpg"
    X-Content-Type-Options: nosniff
    Server: fife
    Content-Length: 4143
    X-XSS-Protection: 0
    Date: Wed, 29 May 2024 09:42:00 GMT
    Expires: Thu, 30 May 2024 09:42:00 GMT
    Cache-Control: public, max-age=86400, no-transform
    ETag: "v305"
    Content-Type: image/jpeg
    Vary: Origin
    Age: 0
  • flag-fr
    GET
    http://4.bp.blogspot.com/-f097VOvq7gk/UMsbxANOR8I/AAAAAAAAEnQ/sCgQsS7oQuo/s1600/bg-namkna.png
    IEXPLORE.EXE
    Remote address:
    172.217.20.193:80
    Request
    GET /-f097VOvq7gk/UMsbxANOR8I/AAAAAAAAEnQ/sCgQsS7oQuo/s1600/bg-namkna.png HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 4.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    Content-Disposition: inline;filename="bg-namkna.png"
    X-Content-Type-Options: nosniff
    Server: fife
    Content-Length: 291
    X-XSS-Protection: 0
    Date: Wed, 29 May 2024 09:42:02 GMT
    Expires: Thu, 30 May 2024 09:42:02 GMT
    Cache-Control: public, max-age=86400, no-transform
    ETag: "v1274"
    Content-Type: image/png
    Vary: Origin
    Age: 0
  • flag-fr
    GET
    http://2.bp.blogspot.com/-hFNdCdt74A0/UZnnMSwfYkI/AAAAAAAAA7s/uioTATRgdio/s72-c/chan_loi_moi_ung_dung_facebook_1.jpg
    IEXPLORE.EXE
    Remote address:
    172.217.20.193:80
    Request
    GET /-hFNdCdt74A0/UZnnMSwfYkI/AAAAAAAAA7s/uioTATRgdio/s72-c/chan_loi_moi_ung_dung_facebook_1.jpg HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 2.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Content-Type: image/jpeg
    Vary: Origin
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    ETag: "v3bb"
    Expires: Thu, 30 May 2024 09:42:01 GMT
    Cache-Control: public, max-age=86400, no-transform
    Content-Disposition: inline;filename="chan_loi_moi_ung_dung_facebook_1.jpg"
    X-Content-Type-Options: nosniff
    Date: Wed, 29 May 2024 09:42:01 GMT
    Server: fife
    Content-Length: 3759
    X-XSS-Protection: 0
  • flag-fr
    GET
    http://2.bp.blogspot.com/-BjLnkH-qD34/Ubqc1MZqOyI/AAAAAAAAAXM/H_1s4OLN4lU/s1600/bg.png
    IEXPLORE.EXE
    Remote address:
    172.217.20.193:80
    Request
    GET /-BjLnkH-qD34/Ubqc1MZqOyI/AAAAAAAAAXM/H_1s4OLN4lU/s1600/bg.png HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 2.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    Content-Disposition: inline;filename="bg.png"
    X-Content-Type-Options: nosniff
    Server: fife
    Content-Length: 224395
    X-XSS-Protection: 0
    Date: Wed, 29 May 2024 09:42:01 GMT
    Expires: Thu, 30 May 2024 09:42:01 GMT
    Cache-Control: public, max-age=86400, no-transform
    ETag: "v174"
    Content-Type: image/png
    Vary: Origin
    Age: 0
  • flag-fr
    GET
    http://1.bp.blogspot.com/-adoo4sMu-Uw/UYfRFzD1eyI/AAAAAAAAAUg/jaBEMEFTDQg/s72-c/cach_tang_like_facebook_nhanh.jpg
    IEXPLORE.EXE
    Remote address:
    172.217.20.193:80
    Request
    GET /-adoo4sMu-Uw/UYfRFzD1eyI/AAAAAAAAAUg/jaBEMEFTDQg/s72-c/cach_tang_like_facebook_nhanh.jpg HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 1.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    Content-Disposition: inline;filename="cach_tang_like_facebook_nhanh.jpg"
    X-Content-Type-Options: nosniff
    Server: fife
    Content-Length: 2267
    X-XSS-Protection: 0
    Date: Wed, 29 May 2024 09:42:00 GMT
    Expires: Thu, 30 May 2024 09:42:00 GMT
    Cache-Control: public, max-age=86400, no-transform
    ETag: "v148"
    Content-Type: image/jpeg
    Vary: Origin
    Age: 0
  • flag-gb
    GET
    https://connect.facebook.net/en_US/all.js
    IEXPLORE.EXE
    Remote address:
    163.70.151.21:443
    Request
    GET /en_US/all.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: connect.facebook.net
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Vary: Accept-Encoding
    Content-Encoding: gzip
    Access-Control-Expose-Headers: X-FB-Content-MD5
    x-fb-content-md5: ffe91d053038c5e6031f09c2cc90f8ec
    ETag: "d22ba92055ea5841f27a66b5dfd83b86"
    Content-Type: application/x-javascript; charset=utf-8
    timing-allow-origin: *
    Access-Control-Allow-Origin: *
    Expires: Wed, 29 May 2024 09:57:46 GMT
    Cache-Control: public,max-age=1200,stale-while-revalidate=3600
    reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"
    document-policy: force-load-at-top
    permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
    cross-origin-resource-policy: cross-origin
    cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
    cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report"
    X-Content-Type-Options: nosniff
    report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
    X-Frame-Options: DENY
    x-fb-optimizer: 0
    Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
    content-md5: LM6FgT5FE6DXvKvdcSLSiw==
    X-FB-Debug: ZTLuAsQWPWNIx20YZifslSWnmsbpoM5H2IvfR/8R5aHLSnSWH1utT4Wf/urzKcrifGYzW13Ngl/8dFI3ApXHcw==
    Date: Wed, 29 May 2024 09:42:01 GMT
    X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=39, rtx=1, c=14, mss=1357, tbw=3221, tp=-1, tpl=-1, uplat=1, ullat=-1
    Alt-Svc: h3=":443"; ma=86400
    Connection: keep-alive
    Content-Length: 1689
  • flag-gb
    GET
    https://connect.facebook.net/en_US/all.js?hash=e893c065873876f6a37655c591ffd3b5
    IEXPLORE.EXE
    Remote address:
    163.70.151.21:443
    Request
    GET /en_US/all.js?hash=e893c065873876f6a37655c591ffd3b5 HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: connect.facebook.net
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Vary: Accept-Encoding
    Content-Encoding: gzip
    Access-Control-Expose-Headers: X-FB-Content-MD5
    x-fb-content-md5: cc0ddf186ba1b301ff9c1cc50fc877dc
    ETag: "1b2f3745bcca2355f4207d2597d59e42"
    Content-Type: application/x-javascript; charset=utf-8
    timing-allow-origin: *
    Access-Control-Allow-Origin: *
    Expires: Thu, 29 May 2025 09:37:46 GMT
    Cache-Control: public,max-age=31536000,stale-while-revalidate=3600,immutable
    reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"
    document-policy: force-load-at-top
    permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
    cross-origin-resource-policy: cross-origin
    cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
    cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report"
    X-Content-Type-Options: nosniff
    report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
    X-Frame-Options: DENY
    Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
    content-md5: sMw1HaiY9yfA7Mq4xlcs1A==
    X-FB-Debug: 4gtcXIxnSIGDA+Q2wYP3Q2hx011SODeAL7PpPrV0W1VtYHaXQjSeQ2cAiiU2yqwPMQj1vQ4HngTdyRhEN0k0MQ==
    Date: Wed, 29 May 2024 09:42:01 GMT
    X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=44, rtx=1, c=18, mss=1357, tbw=7816, tp=-1, tpl=-1, uplat=1, ullat=-1
    Alt-Svc: h3=":443"; ma=86400
    Connection: keep-alive
    Content-Length: 88557
  • flag-fr
    GET
    http://3.bp.blogspot.com/-t_roLemTT_k/UZblyfvvVkI/AAAAAAAAA0I/rZ18maNgL2A/s72-c/Facebook-Spectrums-10.jpg
    IEXPLORE.EXE
    Remote address:
    172.217.20.193:80
    Request
    GET /-t_roLemTT_k/UZblyfvvVkI/AAAAAAAAA0I/rZ18maNgL2A/s72-c/Facebook-Spectrums-10.jpg HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 3.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Content-Type: image/jpeg
    Vary: Origin
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    ETag: "v342"
    Expires: Thu, 30 May 2024 09:42:02 GMT
    Cache-Control: public, max-age=86400, no-transform
    Content-Disposition: inline;filename="Facebook-Spectrums-10.jpg"
    X-Content-Type-Options: nosniff
    Date: Wed, 29 May 2024 09:42:02 GMT
    Server: fife
    Content-Length: 2846
    X-XSS-Protection: 0
  • flag-fr
    GET
    http://3.bp.blogspot.com/-aC97CIWWDmE/UmYUNp9arfI/AAAAAAAACPs/m624W2mjTd8/s72-c/facebook-gap-loi-nghiem-trong-la-co-hoi-cho-chung-ta-duoc-song-thuc.png
    IEXPLORE.EXE
    Remote address:
    172.217.20.193:80
    Request
    GET /-aC97CIWWDmE/UmYUNp9arfI/AAAAAAAACPs/m624W2mjTd8/s72-c/facebook-gap-loi-nghiem-trong-la-co-hoi-cho-chung-ta-duoc-song-thuc.png HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 3.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    Content-Disposition: inline;filename="facebook-gap-loi-nghiem-trong-la-co-hoi-cho-chung-ta-duoc-song-thuc.png"
    X-Content-Type-Options: nosniff
    Server: fife
    Content-Length: 7837
    X-XSS-Protection: 0
    Date: Wed, 29 May 2024 09:42:02 GMT
    Expires: Thu, 30 May 2024 09:42:02 GMT
    Cache-Control: public, max-age=86400, no-transform
    ETag: "v8fe"
    Content-Type: image/png
    Vary: Origin
    Age: 0
  • flag-fr
    GET
    http://3.bp.blogspot.com/-Cd8IUPhBsws/UZ-tMF_NWbI/AAAAAAAABBw/xmiv7dJJhVo/s72-c/xoa-facebook-1.png
    IEXPLORE.EXE
    Remote address:
    172.217.20.193:80
    Request
    GET /-Cd8IUPhBsws/UZ-tMF_NWbI/AAAAAAAABBw/xmiv7dJJhVo/s72-c/xoa-facebook-1.png HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 3.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    Content-Disposition: inline;filename="xoa-facebook-1.png"
    X-Content-Type-Options: nosniff
    Server: fife
    Content-Length: 2756
    X-XSS-Protection: 0
    Date: Wed, 29 May 2024 09:42:01 GMT
    Expires: Thu, 30 May 2024 09:42:01 GMT
    Cache-Control: public, max-age=86400, no-transform
    ETag: "vcb8"
    Content-Type: image/png
    Vary: Origin
    Age: 0
  • flag-fr
    GET
    http://3.bp.blogspot.com/-j-ue185F7dA/UZ-pl3eGTrI/AAAAAAAABAY/3umoIUXgPj0/s72-c/download-album-1.png
    IEXPLORE.EXE
    Remote address:
    172.217.20.193:80
    Request
    GET /-j-ue185F7dA/UZ-pl3eGTrI/AAAAAAAABAY/3umoIUXgPj0/s72-c/download-album-1.png HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 3.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    Content-Disposition: inline;filename="download-album-1.png"
    X-Content-Type-Options: nosniff
    Server: fife
    Content-Length: 3383
    X-XSS-Protection: 0
    Date: Wed, 29 May 2024 09:42:01 GMT
    Expires: Thu, 30 May 2024 09:42:01 GMT
    Cache-Control: public, max-age=86400, no-transform
    ETag: "vc56"
    Content-Type: image/png
    Vary: Origin
    Age: 0
  • flag-fr
    GET
    http://3.bp.blogspot.com/-0AifD7FqqEs/UdEmCU4IkLI/AAAAAAAAB2U/TJfsC_v80rY/s72-c/mongcaiasia.blogspot.com-anh-bia-facebook-thang7-16.png
    IEXPLORE.EXE
    Remote address:
    172.217.20.193:80
    Request
    GET /-0AifD7FqqEs/UdEmCU4IkLI/AAAAAAAAB2U/TJfsC_v80rY/s72-c/mongcaiasia.blogspot.com-anh-bia-facebook-thang7-16.png HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 3.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Content-Type: image/png
    Vary: Origin
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    ETag: "ve28"
    Expires: Thu, 30 May 2024 09:42:02 GMT
    Cache-Control: public, max-age=86400, no-transform
    Content-Disposition: inline;filename="mongcaiasia.blogspot.com-anh-bia-facebook-thang7-16.png"
    X-Content-Type-Options: nosniff
    Date: Wed, 29 May 2024 09:42:02 GMT
    Server: fife
    Content-Length: 9691
    X-XSS-Protection: 0
  • flag-us
    DNS
    mfile.me
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    mfile.me
    IN A
    Response
    mfile.me
    IN A
    162.255.119.234
  • flag-us
    GET
    http://mfile.me/quang-cao-video-charging?domain=lenhang&type=0&type_display=1
    IEXPLORE.EXE
    Remote address:
    162.255.119.234:80
    Request
    GET /quang-cao-video-charging?domain=lenhang&type=0&type_display=1 HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: mfile.me
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Date: Wed, 29 May 2024 09:42:01 GMT
    Content-Type: text/html; charset=utf-8
    Content-Length: 104
    Connection: keep-alive
    Location: http://www.mfile.me/quang-cao-video-charging?domain=lenhang&type=0&type_display=1
    X-Served-By: Namecheap URL Forward
    Server: namecheap-nginx
  • flag-us
    DNS
    www.mfile.me
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.mfile.me
    IN A
    Response
    www.mfile.me
    IN CNAME
    parkingpage.namecheap.com
    parkingpage.namecheap.com
    IN A
    91.195.240.19
  • flag-de
    GET
    http://www.mfile.me/quang-cao-video-charging?domain=lenhang&type=0&type_display=1
    IEXPLORE.EXE
    Remote address:
    91.195.240.19:80
    Request
    GET /quang-cao-video-charging?domain=lenhang&type=0&type_display=1 HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.mfile.me
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    date: Wed, 29 May 2024 09:42:02 GMT
    content-type: text/html; charset=UTF-8
    transfer-encoding: chunked
    vary: Accept-Encoding
    x-powered-by: PHP/8.1.17
    expires: Mon, 26 Jul 1997 05:00:00 GMT
    cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
    pragma: no-cache
    x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_VdheJxXOXioIRRQnGqzWjc/ARuRwii3lge8UGMw/8aNbO1YEnHwLpVFysQzEWM1LteKBctTAeJmfuWg4fsSjrw==
    last-modified: Wed, 29 May 2024 09:42:02 GMT
    x-cache-miss-from: parking-6cfd44ff49-n9n4s
    server: NginX
    content-encoding: gzip
  • flag-de
    DNS
    IEXPLORE.EXE
    Remote address:
    91.195.240.19:80
    Response
    HTTP/1.1 408 Request Time-out
    Content-length: 110
    Cache-Control: no-cache
    Connection: close
    Content-Type: text/html
  • flag-us
    DNS
    www.facebook.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.facebook.com
    IN A
    Response
    www.facebook.com
    IN CNAME
    star-mini.c10r.facebook.com
    star-mini.c10r.facebook.com
    IN A
    163.70.151.35
  • flag-us
    DNS
    widgets.amung.us
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widgets.amung.us
    IN A
    Response
    widgets.amung.us
    IN A
    104.22.75.171
    widgets.amung.us
    IN A
    172.67.8.141
    widgets.amung.us
    IN A
    104.22.74.171
  • flag-us
    DNS
    api.popnet.vn
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    api.popnet.vn
    IN A
    Response
  • flag-gb
    GET
    http://www.facebook.com/widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2Fvuathitruong&layout=standard&show_faces=true&width=80&action=like&colorscheme=light&height=30
    IEXPLORE.EXE
    Remote address:
    163.70.151.35:80
    Request
    GET /widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2Fvuathitruong&layout=standard&show_faces=true&width=80&action=like&colorscheme=light&height=30 HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.facebook.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Location: https://www.facebook.com/widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2Fvuathitruong&layout=standard&show_faces=true&width=80&action=like&colorscheme=light&height=30
    Content-Type: text/plain
    Server: proxygen-bolt
    Date: Wed, 29 May 2024 09:42:02 GMT
    Connection: keep-alive
    Content-Length: 0
  • flag-gb
    GET
    http://www.facebook.com/widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2Fvuathitruong&layout=standard&show_faces=true&width=80&action=like&colorscheme=light&height=30
    IEXPLORE.EXE
    Remote address:
    163.70.151.35:80
    Request
    GET /widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2Fvuathitruong&layout=standard&show_faces=true&width=80&action=like&colorscheme=light&height=30 HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.facebook.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Location: https://www.facebook.com/widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2Fvuathitruong&layout=standard&show_faces=true&width=80&action=like&colorscheme=light&height=30
    Content-Type: text/plain
    Server: proxygen-bolt
    Date: Wed, 29 May 2024 09:42:02 GMT
    Connection: keep-alive
    Content-Length: 0
  • flag-us
    GET
    http://widgets.amung.us/classic.js
    IEXPLORE.EXE
    Remote address:
    104.22.75.171:80
    Request
    GET /classic.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: widgets.amung.us
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Wed, 29 May 2024 09:42:02 GMT
    Content-Type: application/x-javascript
    Transfer-Encoding: chunked
    Connection: keep-alive
    last-modified: Thu, 12 Jan 2023 17:19:26 GMT
    etag: W/"63c0411e-32c5"
    expires: Thu, 30 May 2024 08:54:18 GMT
    cache-control: max-age=86400
    access-control-allow-origin: *
    content-encoding: gzip
    CF-Cache-Status: HIT
    Age: 2864
    Vary: Accept-Encoding
    Server: cloudflare
    CF-RAY: 88b5883948ca1e81-AMS
    alt-svc: h3=":443"; ma=86400
  • flag-gb
    GET
    https://www.facebook.com/widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2Fvuathitruong&layout=standard&show_faces=true&width=80&action=like&colorscheme=light&height=30
    IEXPLORE.EXE
    Remote address:
    163.70.151.35:443
    Request
    GET /widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2Fvuathitruong&layout=standard&show_faces=true&width=80&action=like&colorscheme=light&height=30 HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.facebook.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Content-Type: text/html;charset=utf-8
    Pragma: no-cache
    Cache-Control: private, no-cache, no-store, must-revalidate
    Expires: Sat, 01 Jan 2000 00:00:00 GMT
    content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com *.fbcdn.net 'unsafe-eval';script-src *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net 'unsafe-eval' https://*.google-analytics.com *.google.com;style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline' https://fonts.googleapis.com;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com https://*.google-analytics.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com https://fonts.gstatic.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: *.whatsapp.net *.fb.com *.oculuscdn.com *.tenor.co *.tenor.com *.giphy.com https://paywithmybank.com/ https://*.paywithmybank.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.google-analytics.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data: *.tenor.co *.tenor.com https://*.giphy.com;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com/ https://*.paywithmybank.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://td.doubleclick.net *.google.com *.doubleclick.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
    reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown"
    report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
    cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
    cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report"
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 0
    X-FB-Debug: nGYBl5s2/5tF2OaikBmNKejpKJdJH5Xzae+7704PI9oEnBCkpDVD1YOuGFAE0WLUsXxG8n1yXEoS6mFasdiweQ==
    Date: Wed, 29 May 2024 09:42:02 GMT
    X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=40, rtx=0, c=10, mss=1357, tbw=3222, tp=-1, tpl=-1, uplat=16, ullat=0
    Alt-Svc: h3=":443"; ma=86400
    Connection: keep-alive
    Content-Length: 0
  • flag-gb
    GET
    https://www.facebook.com/widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2Fvuathitruong&layout=standard&show_faces=true&width=80&action=like&colorscheme=light&height=30
    IEXPLORE.EXE
    Remote address:
    163.70.151.35:443
    Request
    GET /widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2Fvuathitruong&layout=standard&show_faces=true&width=80&action=like&colorscheme=light&height=30 HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.facebook.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Content-Type: text/html;charset=utf-8
    Pragma: no-cache
    Cache-Control: private, no-cache, no-store, must-revalidate
    Expires: Sat, 01 Jan 2000 00:00:00 GMT
    content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com *.fbcdn.net 'unsafe-eval';script-src *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net 'unsafe-eval' https://*.google-analytics.com *.google.com;style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline' https://fonts.googleapis.com;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com https://*.google-analytics.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com https://fonts.gstatic.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: *.whatsapp.net *.fb.com *.oculuscdn.com *.tenor.co *.tenor.com *.giphy.com https://paywithmybank.com/ https://*.paywithmybank.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.google-analytics.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data: *.tenor.co *.tenor.com https://*.giphy.com;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com/ https://*.paywithmybank.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://td.doubleclick.net *.google.com *.doubleclick.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
    reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown"
    report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
    cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
    cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report"
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 0
    X-FB-Debug: Q93KWKC8Z+XZpTg9psfo9+2Zy0AyB8QgttYvOS/bS/XptJGzChBf+tOlaaHN3zpGUEuXjrLq3Gv14bJbf7kODg==
    Date: Wed, 29 May 2024 09:42:02 GMT
    X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=39, rtx=0, c=10, mss=1357, tbw=3220, tp=-1, tpl=-1, uplat=20, ullat=0
    Alt-Svc: h3=":443"; ma=86400
    Connection: keep-alive
    Content-Length: 0
  • flag-us
    DNS
    www.microsoft.com
    iexplore.exe
    Remote address:
    8.8.8.8:53
    Request
    www.microsoft.com
    IN A
    Response
    www.microsoft.com
    IN CNAME
    www.microsoft.com-c-3.edgekey.net
    www.microsoft.com-c-3.edgekey.net
    IN CNAME
    www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
    www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
    IN CNAME
    e13678.dscb.akamaiedge.net
    e13678.dscb.akamaiedge.net
    IN A
    2.21.17.194
  • flag-us
    DNS
    www.microsoft.com
    iexplore.exe
    Remote address:
    8.8.8.8:53
    Request
    www.microsoft.com
    IN A
    Response
    www.microsoft.com
    IN CNAME
    www.microsoft.com-c-3.edgekey.net
    www.microsoft.com-c-3.edgekey.net
    IN CNAME
    www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
    www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
    IN CNAME
    e13678.dscb.akamaiedge.net
    e13678.dscb.akamaiedge.net
    IN A
    2.21.17.194
  • 142.250.179.73:443
    https://resources.blogblog.com/img/navbar/arrows-light.png
    tls, http
    IEXPLORE.EXE
    1.7kB
     5.6kB
     12
    10

    HTTP Request

    GET https://resources.blogblog.com/img/navbar/arrows-light.png

    HTTP Response

    200
  • 142.250.178.142:443
    https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs
    tls, http
    IEXPLORE.EXE
    5.9kB
     160.7kB
     69
    124

    HTTP Request

    GET https://apis.google.com/js/plusone.js

    HTTP Response

    200

    HTTP Request

    GET https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs

    HTTP Response

    200

    HTTP Request

    GET https://apis.google.com/js/platform:gapi.iframes.style.common.js

    HTTP Response

    200

    HTTP Request

    GET https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs

    HTTP Response

    200
  • 142.250.179.73:443
    https://www.blogger.com/static/v1/widgets/3597120983-css_bundle_v2.css
    tls, http
    IEXPLORE.EXE
    1.2kB
     13.8kB
     14
    15

    HTTP Request

    GET https://www.blogger.com/static/v1/widgets/3597120983-css_bundle_v2.css

    HTTP Response

    200
  • 151.101.2.137:80
    http://code.jquery.com/jquery-latest.js
    http
    IEXPLORE.EXE
    2.0kB
     87.2kB
     37
    67

    HTTP Request

    GET http://code.jquery.com/jquery-latest.js

    HTTP Response

    200
  • 142.250.179.73:443
    https://www.blogger.com/navbar.g?targetBlogID=2529407305023127723&blogName=T%C3%ACm+hi%E1%BB%83u+facebook&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://mongcaiasia.blogspot.com/search&blogLocale=en&v=2&homepageUrl=http://mongcaiasia.blogspot.com/&vt=-3622586229988811939&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__
    tls, http
    IEXPLORE.EXE
    2.1kB
     10.5kB
     17
    19

    HTTP Request

    GET https://www.blogger.com/dyn-css/authorization.css?targetBlogID=2529407305023127723&zx=ce52c815-f523-42c6-bb68-faccba4123c3

    HTTP Response

    200

    HTTP Request

    GET https://www.blogger.com/navbar.g?targetBlogID=2529407305023127723&blogName=T%C3%ACm+hi%E1%BB%83u+facebook&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://mongcaiasia.blogspot.com/search&blogLocale=en&v=2&homepageUrl=http://mongcaiasia.blogspot.com/&vt=-3622586229988811939&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__

    HTTP Response

    200
  • 142.250.179.73:443
    https://resources.blogblog.com/img/navbar/icons_peach.png
    tls, http
    IEXPLORE.EXE
    2.0kB
     7.6kB
     13
    11

    HTTP Request

    GET https://resources.blogblog.com/img/icon18_wrench_allbkg.png

    HTTP Response

    200

    HTTP Request

    GET https://resources.blogblog.com/img/navbar/icons_peach.png

    HTTP Response

    200
  • 163.70.151.21:80
    http://connect.facebook.net/en_US/all.js
    http
    IEXPLORE.EXE
    539 B
     388 B
     6
    4

    HTTP Request

    GET http://connect.facebook.net/en_US/all.js

    HTTP Response

    301
  • 163.70.151.21:80
    connect.facebook.net
    IEXPLORE.EXE
    190 B
     92 B
     4
    2
  • 142.250.178.142:443
    https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=gapi_iframes,gapi_iframes_style_bubble/exm=plusone/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_1?le=scs
    tls, http
    IEXPLORE.EXE
    1.5kB
     21.7kB
     17
    21

    HTTP Request

    GET https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=gapi_iframes,gapi_iframes_style_bubble/exm=plusone/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_1?le=scs

    HTTP Response

    200
  • 172.217.20.193:80
    http://1.bp.blogspot.com/-ruc1kJQ85kw/Ulw4qzW649I/AAAAAAAACLs/RKFUQgMlLc4/s72-c/cach-doi-ten-facebook-01.jpg
    http
    IEXPLORE.EXE
    670 B
     3.6kB
     7
    6

    HTTP Request

    GET http://1.bp.blogspot.com/-ruc1kJQ85kw/Ulw4qzW649I/AAAAAAAACLs/RKFUQgMlLc4/s72-c/cach-doi-ten-facebook-01.jpg

    HTTP Response

    200
  • 142.250.179.73:443
    https://www.blogger.com/static/v1/widgets/1068551213-widgets.js
    tls, http
    IEXPLORE.EXE
    2.0kB
     61.2kB
     31
    49

    HTTP Request

    GET https://www.blogger.com/static/v1/widgets/1068551213-widgets.js

    HTTP Response

    200
  • 172.217.20.193:80
    http://2.bp.blogspot.com/-ixY53dxJNQU/UilwEV6QIaI/AAAAAAAACBY/UcSZ1y7bpXk/s72-c/image001.jpg
    http
    IEXPLORE.EXE
    608 B
     2.8kB
     6
    5

    HTTP Request

    GET http://2.bp.blogspot.com/-ixY53dxJNQU/UilwEV6QIaI/AAAAAAAACBY/UcSZ1y7bpXk/s72-c/image001.jpg

    HTTP Response

    200
  • 151.101.2.137:80
    code.jquery.com
    IEXPLORE.EXE
    242 B
     184 B
     5
    4
  • 172.217.20.193:80
    http://1.bp.blogspot.com/-N_4TWVUmXv4/UDdKJf5NwCI/AAAAAAAAIgY/AGrKXgwkrTo/s1600/tombolcari.gif
    http
    IEXPLORE.EXE
    610 B
     1.7kB
     6
    5

    HTTP Request

    GET http://1.bp.blogspot.com/-N_4TWVUmXv4/UDdKJf5NwCI/AAAAAAAAIgY/AGrKXgwkrTo/s1600/tombolcari.gif

    HTTP Response

    200
  • 172.217.20.193:80
    http://4.bp.blogspot.com/-f097VOvq7gk/UMsbxANOR8I/AAAAAAAAEnQ/sCgQsS7oQuo/s1600/bg-namkna.png
    http
    IEXPLORE.EXE
    1.1kB
     5.7kB
     9
    9

    HTTP Request

    GET http://4.bp.blogspot.com/-KZ4ivlbw68A/UZHVIG5iN4I/AAAAAAAAAwU/zkBDCS2Ujxo/s72-c/nhac_nen_cho_facebook_1.jpg

    HTTP Response

    200

    HTTP Request

    GET http://4.bp.blogspot.com/-f097VOvq7gk/UMsbxANOR8I/AAAAAAAAEnQ/sCgQsS7oQuo/s1600/bg-namkna.png

    HTTP Response

    200
  • 172.217.20.193:80
    http://2.bp.blogspot.com/-BjLnkH-qD34/Ubqc1MZqOyI/AAAAAAAAAXM/H_1s4OLN4lU/s1600/bg.png
    http
    IEXPLORE.EXE
    4.9kB
     236.0kB
     91
    174

    HTTP Request

    GET http://2.bp.blogspot.com/-hFNdCdt74A0/UZnnMSwfYkI/AAAAAAAAA7s/uioTATRgdio/s72-c/chan_loi_moi_ung_dung_facebook_1.jpg

    HTTP Response

    200

    HTTP Request

    GET http://2.bp.blogspot.com/-BjLnkH-qD34/Ubqc1MZqOyI/AAAAAAAAAXM/H_1s4OLN4lU/s1600/bg.png

    HTTP Response

    200
  • 172.217.20.193:80
    2.bp.blogspot.com
    IEXPLORE.EXE
    190 B
     92 B
     4
    2
  • 172.217.20.193:80
    http://1.bp.blogspot.com/-adoo4sMu-Uw/UYfRFzD1eyI/AAAAAAAAAUg/jaBEMEFTDQg/s72-c/cach_tang_like_facebook_nhanh.jpg
    http
    IEXPLORE.EXE
    675 B
     3.0kB
     7
    6

    HTTP Request

    GET http://1.bp.blogspot.com/-adoo4sMu-Uw/UYfRFzD1eyI/AAAAAAAAAUg/jaBEMEFTDQg/s72-c/cach_tang_like_facebook_nhanh.jpg

    HTTP Response

    200
  • 163.70.151.21:443
    https://connect.facebook.net/en_US/all.js?hash=e893c065873876f6a37655c591ffd3b5
    tls, http
    IEXPLORE.EXE
    3.3kB
     103.2kB
     51
    86

    HTTP Request

    GET https://connect.facebook.net/en_US/all.js

    HTTP Response

    200

    HTTP Request

    GET https://connect.facebook.net/en_US/all.js?hash=e893c065873876f6a37655c591ffd3b5

    HTTP Response

    200
  • 172.217.20.193:80
    http://3.bp.blogspot.com/-t_roLemTT_k/UZblyfvvVkI/AAAAAAAAA0I/rZ18maNgL2A/s72-c/Facebook-Spectrums-10.jpg
    http
    IEXPLORE.EXE
    667 B
     3.6kB
     7
    6

    HTTP Request

    GET http://3.bp.blogspot.com/-t_roLemTT_k/UZblyfvvVkI/AAAAAAAAA0I/rZ18maNgL2A/s72-c/Facebook-Spectrums-10.jpg

    HTTP Response

    200
  • 172.217.20.193:80
    http://3.bp.blogspot.com/-aC97CIWWDmE/UmYUNp9arfI/AAAAAAAACPs/m624W2mjTd8/s72-c/facebook-gap-loi-nghiem-trong-la-co-hoi-cho-chung-ta-duoc-song-thuc.png
    http
    IEXPLORE.EXE
    805 B
     8.8kB
     9
    10

    HTTP Request

    GET http://3.bp.blogspot.com/-aC97CIWWDmE/UmYUNp9arfI/AAAAAAAACPs/m624W2mjTd8/s72-c/facebook-gap-loi-nghiem-trong-la-co-hoi-cho-chung-ta-duoc-song-thuc.png

    HTTP Response

    200
  • 172.217.20.193:80
    http://3.bp.blogspot.com/-Cd8IUPhBsws/UZ-tMF_NWbI/AAAAAAAABBw/xmiv7dJJhVo/s72-c/xoa-facebook-1.png
    http
    IEXPLORE.EXE
    660 B
     3.5kB
     7
    6

    HTTP Request

    GET http://3.bp.blogspot.com/-Cd8IUPhBsws/UZ-tMF_NWbI/AAAAAAAABBw/xmiv7dJJhVo/s72-c/xoa-facebook-1.png

    HTTP Response

    200
  • 172.217.20.193:80
    http://3.bp.blogspot.com/-j-ue185F7dA/UZ-pl3eGTrI/AAAAAAAABAY/3umoIUXgPj0/s72-c/download-album-1.png
    http
    IEXPLORE.EXE
    662 B
     4.1kB
     7
    6

    HTTP Request

    GET http://3.bp.blogspot.com/-j-ue185F7dA/UZ-pl3eGTrI/AAAAAAAABAY/3umoIUXgPj0/s72-c/download-album-1.png

    HTTP Response

    200
  • 172.217.20.193:80
    http://3.bp.blogspot.com/-0AifD7FqqEs/UdEmCU4IkLI/AAAAAAAAB2U/TJfsC_v80rY/s72-c/mongcaiasia.blogspot.com-anh-bia-facebook-thang7-16.png
    http
    IEXPLORE.EXE
    789 B
     10.6kB
     9
    11

    HTTP Request

    GET http://3.bp.blogspot.com/-0AifD7FqqEs/UdEmCU4IkLI/AAAAAAAAB2U/TJfsC_v80rY/s72-c/mongcaiasia.blogspot.com-anh-bia-facebook-thang7-16.png

    HTTP Response

    200
  • 162.255.119.234:80
    http://mfile.me/quang-cao-video-charging?domain=lenhang&type=0&type_display=1
    http
    IEXPLORE.EXE
    852 B
     574 B
     12
    4

    HTTP Request

    GET http://mfile.me/quang-cao-video-charging?domain=lenhang&type=0&type_display=1

    HTTP Response

    302
  • 162.255.119.234:80
    mfile.me
    IEXPLORE.EXE
    236 B
     172 B
     5
    4
  • 91.195.240.19:80
    http://www.mfile.me/quang-cao-video-charging?domain=lenhang&type=0&type_display=1
    http
    IEXPLORE.EXE
    994 B
     8.6kB
     15
    10

    HTTP Request

    GET http://www.mfile.me/quang-cao-video-charging?domain=lenhang&type=0&type_display=1

    HTTP Response

    200
  • 91.195.240.19:80
    www.mfile.me
    http
    IEXPLORE.EXE
    236 B
     321 B
     5
    2

    HTTP Response

    408
  • 163.70.151.35:80
    http://www.facebook.com/widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2Fvuathitruong&layout=standard&show_faces=true&width=80&action=like&colorscheme=light&height=30
    http
    IEXPLORE.EXE
    727 B
     908 B
     7
    5

    HTTP Request

    GET http://www.facebook.com/widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2Fvuathitruong&layout=standard&show_faces=true&width=80&action=like&colorscheme=light&height=30

    HTTP Response

    301
  • 163.70.151.35:80
    http://www.facebook.com/widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2Fvuathitruong&layout=standard&show_faces=true&width=80&action=like&colorscheme=light&height=30
    http
    IEXPLORE.EXE
    727 B
     908 B
     7
    5

    HTTP Request

    GET http://www.facebook.com/widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2Fvuathitruong&layout=standard&show_faces=true&width=80&action=like&colorscheme=light&height=30

    HTTP Response

    301
  • 104.22.75.171:80
    http://widgets.amung.us/classic.js
    http
    IEXPLORE.EXE
    671 B
     7.7kB
     9
    10

    HTTP Request

    GET http://widgets.amung.us/classic.js

    HTTP Response

    200
  • 104.22.75.171:80
    widgets.amung.us
    IEXPLORE.EXE
    466 B
     92 B
     10
    2
  • 163.70.151.35:443
    https://www.facebook.com/widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2Fvuathitruong&layout=standard&show_faces=true&width=80&action=like&colorscheme=light&height=30
    tls, http
    IEXPLORE.EXE
    1.2kB
     7.0kB
     11
    11

    HTTP Request

    GET https://www.facebook.com/widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2Fvuathitruong&layout=standard&show_faces=true&width=80&action=like&colorscheme=light&height=30

    HTTP Response

    200
  • 163.70.151.35:443
    https://www.facebook.com/widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2Fvuathitruong&layout=standard&show_faces=true&width=80&action=like&colorscheme=light&height=30
    tls, http
    IEXPLORE.EXE
    1.2kB
     7.0kB
     11
    11

    HTTP Request

    GET https://www.facebook.com/widgets/like.php?href=https%3A%2F%2Fwww.facebook.com%2Fvuathitruong&layout=standard&show_faces=true&width=80&action=like&colorscheme=light&height=30

    HTTP Response

    200
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    793 B
     7.7kB
     10
    13
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    747 B
     7.6kB
     9
    12
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    779 B
     7.6kB
     9
    12
  • 8.8.8.8:53
    www.blogger.com
    dns
    IEXPLORE.EXE
    61 B
     108 B
     1
    1

    DNS Request

    www.blogger.com

    DNS Response

    142.250.179.73

  • 8.8.8.8:53
    resources.blogblog.com
    dns
    IEXPLORE.EXE
    68 B
     115 B
     1
    1

    DNS Request

    resources.blogblog.com

    DNS Response

    142.250.179.73

  • 8.8.8.8:53
    code.jquery.com
    dns
    IEXPLORE.EXE
    61 B
     125 B
     1
    1

    DNS Request

    code.jquery.com

    DNS Response

    151.101.2.137
    151.101.194.137
    151.101.66.137
    151.101.130.137

  • 8.8.8.8:53
    connect.facebook.net
    dns
    IEXPLORE.EXE
    66 B
     114 B
     1
    1

    DNS Request

    connect.facebook.net

    DNS Response

    163.70.151.21

  • 8.8.8.8:53
    1.bp.blogspot.com
    dns
    IEXPLORE.EXE
    63 B
     124 B
     1
    1

    DNS Request

    1.bp.blogspot.com

    DNS Response

    172.217.20.193

  • 8.8.8.8:53
    vuathitruong.com
    dns
    IEXPLORE.EXE
    62 B
     115 B
     1
    1

    DNS Request

    vuathitruong.com

  • 8.8.8.8:53
    3.bp.blogspot.com
    dns
    IEXPLORE.EXE
    126 B
     124 B
     2
    1

    DNS Request

    3.bp.blogspot.com

    DNS Request

    3.bp.blogspot.com

    DNS Response

    172.217.20.193

  • 8.8.8.8:53
    4.bp.blogspot.com
    dns
    IEXPLORE.EXE
    63 B
     124 B
     1
    1

    DNS Request

    4.bp.blogspot.com

    DNS Response

    172.217.20.193

  • 8.8.8.8:53
    2.bp.blogspot.com
    dns
    IEXPLORE.EXE
    63 B
     124 B
     1
    1

    DNS Request

    2.bp.blogspot.com

    DNS Response

    172.217.20.193

  • 8.8.8.8:53
    apis.google.com
    dns
    IEXPLORE.EXE
    61 B
     98 B
     1
    1

    DNS Request

    apis.google.com

    DNS Response

    142.250.178.142

  • 8.8.8.8:53
    mfile.me
    dns
    IEXPLORE.EXE
    54 B
     70 B
     1
    1

    DNS Request

    mfile.me

    DNS Response

    162.255.119.234

  • 8.8.8.8:53
    www.mfile.me
    dns
    IEXPLORE.EXE
    58 B
     113 B
     1
    1

    DNS Request

    www.mfile.me

    DNS Response

    91.195.240.19

  • 8.8.8.8:53
    www.facebook.com
    dns
    IEXPLORE.EXE
    62 B
     107 B
     1
    1

    DNS Request

    www.facebook.com

    DNS Response

    163.70.151.35

  • 8.8.8.8:53
    widgets.amung.us
    dns
    IEXPLORE.EXE
    62 B
     110 B
     1
    1

    DNS Request

    widgets.amung.us

    DNS Response

    104.22.75.171
    172.67.8.141
    104.22.74.171

  • 8.8.8.8:53
    api.popnet.vn
    dns
    IEXPLORE.EXE
    59 B
     123 B
     1
    1

    DNS Request

    api.popnet.vn

  • 8.8.8.8:53
    www.microsoft.com
    dns
    iexplore.exe
    63 B
     230 B
     1
    1

    DNS Request

    www.microsoft.com

    DNS Response

    2.21.17.194

  • 8.8.8.8:53
    www.microsoft.com
    dns
    iexplore.exe
    63 B
     230 B
     1
    1

    DNS Request

    www.microsoft.com

    DNS Response

    2.21.17.194

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
    Filesize

    1KB

    MD5

    b9a6ce2d8d958f97f33e4c90383555b0

    SHA1

    1dfc439a009c45eb482547d65aeee88675679279

    SHA256

    35c92a56b5f0f8520f27ee9b8d093c80deeb4f7599dbedfa8619559986db3c03

    SHA512

    0395ce6722e8663e946c8ab45bf6b28dde3d77c42ce893dd5d9174bb1c2c287b5ec4cb165ab2c606c13b39a72af14ea2d1b63bd3f21b766f8969b6d18db920f3

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC
    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA
    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F07644E38ED7C9F37D11EEC6D4335E02_02C4C6ED250727F9B08935C0A9565568
    Filesize

    472B

    MD5

    ab717c7b6b80f3c0b144b959aae3d0e4

    SHA1

    578fb3f595898df0d21f22704fed7e75fa780c65

    SHA256

    c935ad854ace02c1c74ec48648a46b5b40d8d5877bf44ab8909356e2bfe965af

    SHA512

    60e579023b4b77f4a652a53e96c1a30968d3a54ed5e92316d18c90603ee7a469a9da544dc55c6d6198c9065ee6b89242e47ee1ad1d9b5785677fd9e2be4c7ff9

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357
    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
    Filesize

    410B

    MD5

    b98f75218c403f4dff0bf53c51305271

    SHA1

    2ae080876f85cbdf0b23551594b7ceffeafc5633

    SHA256

    7330fbcd6ddb49d71604f658c03004fbbb7cdb17e8502e14c923d89ae6bf2721

    SHA512

    94b4eb3b948a652f4eef34a5a123235d595726e8a32edd9b67b5d011f7083d4b6abf6d10f6e58fd112507e9a6fdea197536a375f6ab330b81269e1601d8c2557

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
    Filesize

    410B

    MD5

    8426d080865bdb320a4319ada00107fb

    SHA1

    100db8eabf22d11a40795429bd3b9893455ffd6c

    SHA256

    4494ac02ca13ab666d1d648b9dc9d1d4752c5fab769393cef88be7a548d3d4e8

    SHA512

    c384d50e0879801ff3d93c16de07cbd6d784c5fa08f11046106d8dc310b6ab0f53ad853207d410a1d3a0972156cd12f7637e24696fe86bb3dd90d81082d6ebbe

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
    Filesize

    252B

    MD5

    4cb87aae5f9879069ff57cbe2bf2d719

    SHA1

    5f4153398ee4cd6a0d432f085b2bbe6a71815aaa

    SHA256

    c636411cd60fb7e659762db8b80e6e7f224f0325b09b556b29e9dc88994dc4d6

    SHA512

    70c650b9a5e4de863557c4c6e14c1c41762f8b49129258aca59c68fc10dc708ce6fcb8cf0ef214b307494aee1b3094ad4e74565566cf8aed18408c878d8c7369

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    00610eabc7e16acc909515ae7ed3ca2b

    SHA1

    ccae87ca675e6bc0a3a6a190962879208eaa8b75

    SHA256

    21fabaa53db6265bea430eb7d03571285baf6edb76333edbe7690bcbe732aebf

    SHA512

    846613ac8b05d92dfd5e2e46eefbd09aa6b953078a93abab0e1afb8692b628e2c1564efe7a2b5b9c4176eb38480ba6e6aff8e96f75bcf2a6fb53d87bf763bbb1

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    47fdbb2f4d84a67ea530950304f2b573

    SHA1

    00dea551557b3e0b010a72c4287c23100331d249

    SHA256

    007eb5ce9be501c825c665f10536d86533a9238f6059c65550ec55bf532c9cbc

    SHA512

    e3ed20eef4038d0e9c0b3a00cff2da542eb672f4466756493574421630b0590f9815c941ea8cfd0838c9085dcbe48fef5e130d913a7a6c5223d7dbb804dc2e7b

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    dbb4e8fbd61dad46297d63061a3c8c3d

    SHA1

    142747fe77cc548e91ceeb6821d7b6a71f5e68a4

    SHA256

    35859461b1e3f41c41460489c2d4bc6c78ac77d871fffbf636d235234be180d5

    SHA512

    d8d9ba23b2c80d8dab14352b1f038c8e77b93f76915219ba30fcf217e9d1f018aa6953ebb7e0e83e3314a4dcfa7c623f57a07975a9d548925c21fdd18d4b4a04

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    af8ce6fa72874faa0984c31d460f7b4f

    SHA1

    5da19d5ffa02d44e8eb63d78cb2165756293de0c

    SHA256

    e60fc53399f33df07c5e39ca25379c31803aff89c296ebb9e7017d3aec074a58

    SHA512

    1b9101b18098e1bf2f91fd9470094e08b67cc7acdeb96b1963763f855242f470f105e24b6d61dd97be71f98689b1eac2fe131fb984046c0f0a2b3650246ca4f9

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    e1b3ef6616572f297bc2bea586edbc6d

    SHA1

    1b5cddd549a1bbcb17d43b42980d6b50ee731c6f

    SHA256

    ae3a2af8604fc53c6845a3378f710e2a87a64c10235688b31cdcead45aab4bb2

    SHA512

    65cf6050dc6af735836a6bd1eaef7a13d4e685ef2a00be7d59f22e34184016eae659223143b6631add7f1302b3ad12e430cbfecaf0f5371405e99c517c571fda

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    712e8f0399b5c73fa6760087e46a4994

    SHA1

    bc11b781660eb904a00e98c93bc56a63ba2c0837

    SHA256

    876bf523bb7f20956baf4292a58a3cd925639ff8c569c684053d2727dd19d84c

    SHA512

    7c4c9edf31fc0a8b0ab8ac1c5972e65b38cba118c0b2211a2012cb3edf87f75b098c341de14ade9b6aba1b9c5de1150be9575a6fe6a4f65aabbb871f38900f85

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    893fbfab653f6aa6af1abce9921783f8

    SHA1

    a1127a8f6652d2e568e870dd09e5157cf74bc46c

    SHA256

    5c0f194aa4a73af6364d2c025c4f517100e8a0f35fa29eea7c76ca7eb7802bb4

    SHA512

    37d2dacee7278ec55fe286f895ba4894f7db2c0b80e97b4d83c28743a8652e8da2d0ba36df6e20c760c4ea4d403012759d47583f7c8b9b87bb2c0743d5d3ea68

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    45a8b56aff98faa0597c5268143db6b3

    SHA1

    10e92b995ec0815291f5dc33a886bb62e5f38d00

    SHA256

    9b838d55bce2f9a9c00b80fbe5dc7b978bb0f5827a50f78f53c0b06b11460c98

    SHA512

    c8f1a8ab75f230ed3c4203799f62dcf69517b00fc49a19e1ea09e7f3fce080fd53bb3f4619b8ab33e3089492b0fde6cb38fae57ee4905be0782a04c51b030a22

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    1002aaa2232ea1d9191a20626180f87b

    SHA1

    8be1e6a96cd3e7c6f8e453c5a6ebcb1fa5b08e12

    SHA256

    276ad74821757480ffd1c0e6adff16ff6656c56b5ee57c769f54c37fe3efc2d7

    SHA512

    12e2ba13c6954d729b9cd8a6026e7b005d2da4d347319d172a84621b5cd37c47162fb160a88244232e3712b1451d647b48bbc149af7ce3d2eda052f8a43dfbfa

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    4d8998480e485b0452fc709172259e7f

    SHA1

    9604fad5ff97372f67cbaa57a9a9430e27b7404c

    SHA256

    6cadb16db7531f0e75c6a2b079b5bda2861a9bd6533e46c5badc00a8ced7d3f1

    SHA512

    225fe22010ea8b58872bcb32ae7dc49fa5834910eee97a26d155ca60182d636d364882f0603275ffac8309158e4d328e1c17be9c56cdb29f264d32b1cd6bee9f

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    ea74021da4fde33b96fe99e577e64573

    SHA1

    d7cecbd48544202a37659c563375dc401ce7460a

    SHA256

    1e87fd8c25fb6ea8744a9e0e407a8ceb87afb6bf9f69b787cafb5a154a0f421b

    SHA512

    9e2c249cb941662a47053f9ff87522aee71c075065429416afa0f071caf4f7b5e391cbbd429b65c9f01c1cc126e3e4c258646b144110b9fc59714616a5067df3

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    52b028f40d65373ce88fafa502d72bed

    SHA1

    a1176cd5ba8cba1601de489a497acb7cff1192dd

    SHA256

    736f9f2f3d004cb41b44914febc4a3e4f538708916922bdc0502c4c298aca1a8

    SHA512

    f7e249c0ab685b05223b4d2a7bba70203aeddc53e60eb785d72c91a82c7d936b8e307e8031dc379d26dea544a5511432a3376abb181c35dddccdeea1dcc60adc

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    5099423eed07b693b25bc159cca3297d

    SHA1

    3286da634e7adb712adb789f90d1812afb6daeef

    SHA256

    c55791fa4711a4b71521fbbdefbe007c7189aba3ab9e2d78e6c0019dde8cffe5

    SHA512

    b1569f39db5dbe7c43f09d0f9ee31bd599763ef9be518d61cbf5564c84858765b206917f7112602fe7d5803da15f62d569b3465324b2d0164e03626d34bd583c

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    c53871394dbc83df68796bf23df5bddc

    SHA1

    cecd23dbee10529a964ecd9c6999d8851c50b069

    SHA256

    902d87ca183329b9e65104027eba5a4bb47b67030f1f313bfed3ae1e75f6295c

    SHA512

    36ab44fb1564464cd74dac88c34858815df0da87381ef04b7e4e08d7b1c3e7e664e19f018e8edcbd5e0b33ca8cb80ee3ae3337aff24102e3834e6c6fdb5ea40f

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    55f30e3b6716b40f7019234dd36549a1

    SHA1

    cdf2e1305f07cbaf494e265cd7dee1d7cb9f07a5

    SHA256

    9e52181c38aed283f8061ea4da1d646970faef437e0939c796626865015518e1

    SHA512

    489d444235bb891f49fab267197692f884ad3742f7e1afaf5c74399cd24abe21616715494df59d8a28a3ac58a51124f78a82518e88472a0a00270e4a3c10318f

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    e33b111dafac2caee834700f11266124

    SHA1

    ab9c3289e922e6e2b48f387d1ca5a44ae5e8f4c6

    SHA256

    b0d20d9405d03b784a928d21a84e33d2de08c0d3b64bd1e5d6108909bde3c854

    SHA512

    17e6fb63c1d89ce7440bc1eae46be71d9084d72f69a6a7db82329ad6aec5c4697da921eb8bc2d044b651afb9f1d043b297cb752e6c658a8dc3e7eb0026982970

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    f3e8550b61a57eeeee79f9898880befb

    SHA1

    5f0fb1207eb652036f261a76fefc0d3ff08e8554

    SHA256

    62f6eca90c1020624e52bb4cdad0a204119af4c825925daea4a0ea8a8834f080

    SHA512

    20cdb38a9058c6071abfa0dbeb34d89630291b7c41687cf4b6992f5c9e3e38c4af5ba36cb07436b0ded893fde628d734940470fb2dfda425432a4981e7c46974

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    80bf3c2ba00803421216d9f97071021b

    SHA1

    4c0d2e68b454625d5987d01962141fa782d8a207

    SHA256

    d355eedffaf9308514f82959ed938c5297dc5944309582a89cdd5ebb1d0b2df7

    SHA512

    5648c461bdfb5e23c5ddd80491b5fa19dd18075343fccbf842cec853a00d38dede01d5788e07f69252de32448808476cdf94c500093c088a1edaf94e750bb827

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    376738b4618d39bf592b848821e5d365

    SHA1

    643445e59a36a9b10abd0e53921c50daf9a72d7d

    SHA256

    766a3d2f6fe4e9e53f983dc0d1e9791bb1db733c859a349198030d72f67cccc6

    SHA512

    cb548ea085f5f580f906f8a1235757e62e9c12d0b2815a36713d2fcd76692102235bced0cf11c92c9d662088f1cf5b820f2bec4277a1eb87c0a7d356a50ba334

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    c97a6b34429b3b2f3577d350130e3d86

    SHA1

    75c375e0a6f78e8daf0ca9a4f358e827f87efe8a

    SHA256

    3913e23801b40dd76d64997768483f9f9bbc25e9a26c12d67d174ebc7a643fcc

    SHA512

    4c6842fcfd0af8875bcac592fcce3e188a6149ae9d17cf0e8e7b5031c22b53e85e5b9a0c06b83bb929bbd57dc1e398461f35b39773038d220d60e5b4dba68d38

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    5c81f60df00e35f168ae5c03268ce73b

    SHA1

    22d4573b0e7e39495837e9adc9145cdeec89fc28

    SHA256

    655128c503744644bab7462d51cfab44df709323c325ce324243135bbb93ca65

    SHA512

    6deeb3309b1a029f6791149d71b7d5c63d4840f7d9e7a8d9d9af1eb7eaa43f58ad5cea6fbf8fff254580a998f95582b711c28716b6d222fa5c8f9d4836999844

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    248c35321b761bc3918c6cc90f0b3d74

    SHA1

    462ece283001c91d21bbfbef2acecf861ab52a77

    SHA256

    b9f52452101fdf73de3135a6c419ebfcbfc17a83d1b17ee0d44abb3c9dd0e921

    SHA512

    a6a672d569cb1247ceceaa825b198c42cb261368626f89c20fc09bbe96f60d5d8db129ee8d968b0593ec3aacc4a14d9ede3f8864903b39c583ce4f373e72ba8a

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA
    Filesize

    392B

    MD5

    da3167baf9eaedb007f66bdce80cc310

    SHA1

    c4798981af809c1f9e1e91e3e6b08cb8d3dbcc8e

    SHA256

    3c1dabcf7f2c4e9b1324f1c4dd86551dd1e79d21bc49f703602dcd0730fd657b

    SHA512

    abbc540cf014b669609143d299e5808bda60caf4ff856c3e4b9907842b7801a58b9b094db3e7e3e4a7cf014d1d68610a47a0ac6ff36cf09fab377473c2c98a4d

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA
    Filesize

    392B

    MD5

    4888826679d9d2284a2b182927098928

    SHA1

    c55d076649a10d0b8338424231178139b967aa64

    SHA256

    48d1ea7a4a478f022a0702bb85fcb8fdd22e664a734c23dd6f82ce22476fc3b3

    SHA512

    31bc94b4844fb551741bfc4afaa22e40c2ac130b38fea73e8f95d16edaae886635b4e8c761015f25f4652359f2813e0516dabff3bfa40800281bf9d5ca2a48a6

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F07644E38ED7C9F37D11EEC6D4335E02_02C4C6ED250727F9B08935C0A9565568
    Filesize

    406B

    MD5

    64a9ab35b562005287f3bb2afd579bda

    SHA1

    311c2dab7b9736d7dbbf38500a54d3231fa4bd8c

    SHA256

    433c9c8e950e2da630ef496d3d788c53fdd3ab2459d96064e7d878dc3617d2a4

    SHA512

    91b0c01ca5fb4d525070c3ea06564bff5c4543c49ccc7e9c3e1499caf7ee7e885a9f00f7529cb3a299e5f1a7bca2f92795843f5fefb27ae9e76ec22cfb7d58ef

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
    Filesize

    242B

    MD5

    4e8504011ef42bda48427984ecdc354f

    SHA1

    bb28e67d47425a58ae408270182cbf629a51cf5c

    SHA256

    337436922d0b7878b83a9f351520423b2303fe7e0577c56405fae553519640ab

    SHA512

    7e65f7091b6073379d1ed1b601c403e661f4788ebf253e420af7db446b9e74187b69d9cc4cd1f91dfd4cf6c9f7ca38404bdbe375a0fea62521e49308ab22c245

    Download Submit

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CY2G78MW\cb=gapi[1].js
    Filesize

    133KB

    MD5

    4d1bd282f5a3799d4e2880cf69af9269

    SHA1

    2ede61be138a7beaa7d6214aa278479dce258adb

    SHA256

    5e075152b65966c0c6fcd3ee7d9f62550981a7bb4ed47611f4286c16e0d79693

    SHA512

    615556b06959aae4229b228cd023f15526256311b5e06dc3c1b122dcbe1ff2f01863e09f5b86f600bcee885f180b5148e7813fde76d877b3e4a114a73169c349

    Download Submit

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I819HQXH\platform_gapi.iframes.style.common[1].js
    Filesize

    54KB

    MD5

    7ef4bc18139bcdbdd14c5b58b0955a67

    SHA1

    afe44fd9a877f81a3c36f571c0fc934324c6cbd7

    SHA256

    192bc707852c5986f930528442d88a79e5bcf4513aacc2b722a3c5e964501838

    SHA512

    6c2920e80e4d5059588a32f75bc2b5dcc19f8d68224c0935d74f9fbf49476ca5b1ce43c279768f3d36871dfcec39f36db3fcad559c2f93cc540154cdbb04dec2

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\Tar2B9A.tmp
    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

    Download Submit

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.