OpinionSpy / Marketscore Bundled Survey Adware Software Traffic Sample – not malicious but extremely annoying   https://virustotal.com/en/file/3700f0dfb57e2ae0922005bd28bc31af3700bcad4846cd1c5142e81508ec628b/analysis/1477206822/ https://virustotal.com/en/file/1fb9cb60b11165df3298dee55b59517e3ed15957b820b19b4ca0d8f9f2e20173/analysis/1477206881/   2016-10-23 01:35:23.217630 IP 192.168.1.102.58962 > 108.61.59.187.80: Flags [P.], seq 0:297, ack 1, win 256, length 297: HTTP: GET /download/gup.exe HTTP/1.1 E..Qc.@…,….fl=;..R.P…..P.lP…….GET /download/gup.exe HTTP/1.1 Accept: application/x-shockwave-flash, image/gif, image/jpeg, image/pjpeg, */* Accept-Language: en-us User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0) Accept-Encoding: gzip, deflate Host: www.pcfreesoft.com Connection: Keep-Alive — E..(..@…B….f..N..S.P.}.0s…P…………. 2016-10-23 01:35:36.193933 IP 192.168.1.102.58963 > 165.193.78.234.80: Flags [P.], seq 0:106, ack 1, win 256, length 106: HTTP: GET /packages/VR/PackageV.exe HTTP/1.0 E…..@…A….f..N..S.P.}.0s…P…….GET /packages/VR/PackageV.exe HTTP/1.0 Host: post.securestudies.com User-Agent: InnoTools_Downloader 2016-10-23 01:35:36.224412 IP 192.168.1.102.58963 > […]