Edit tour

Windows Analysis Report
https://newsklikdisini5bekbg0.3bsz4.xyz/

Overview

General Information

Sample URL:	https://newsklikdisini5bekbg0.3bsz4.xyz/
Analysis ID:	1447587
Infos:

Detection

Score:	84
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Multi AV Scanner detection for submitted file

Phishing site detected (based on favicon image match)

Performs DNS queries to domains with low reputation

Detected non-DNS traffic on DNS port

Found iframes

HTML body with high number of embedded SVGs detected

HTML title does not match URL

Suspicious form URL found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5908 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3384 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=2056,i,777843259378740637,6708716307555218473,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6856 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6668 --field-trial-handle=2056,i,777843259378740637,6708716307555218473,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4424 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7092 --field-trial-handle=2056,i,777843259378740637,6708716307555218473,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4972 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://newsklikdisini5bekbg0.3bsz4.xyz/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://newsklikdisini5bekbg0.3bsz4.xyz/	Avira URL Cloud: detection malicious, Label: malware
Source: https://newsklikdisini5bekbg0.3bsz4.xyz/	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social usering

Antivirus detection for URL or domain

Source: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah	Avira URL Cloud: Label: malware
Source: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/css/facebook.css	Avira URL Cloud: Label: malware

Multi AV Scanner detection for submitted file

Source: https://newsklikdisini5bekbg0.3bsz4.xyz/

Virustotal: Detection: 17%

Perma Link

Phishing

AI detected phishing page

Source: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/

LLM: Score: 8 brands: Codashop Reasons: The URL is highly suspicious as it does not match the legitimate domain of Codashop, which is typically 'codashop.com'. The use of a subdomain and a random string in the URL is a common tactic in phishing attacks. The page contains a login form for entering a Player ID, which is a common target for phishing. The overall design mimics the legitimate Codashop site, which is a social usering technique to deceive users. DOM: 1.1.pages.csv

Phishing site detected (based on favicon image match)

Source: https://youtube.com

Matcher: Template: facebook matched with high similarity

Source: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-PF7TJ9
Source: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-PF7TJ9

Source: https://www.youtube.com/c/CodashopOfficial

HTTP Parser: Total embedded SVG size: 174526

Source: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/

HTTP Parser: Title: Top up FF | Diamond Free Fire Murah | Codashop does not match URL

Source: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/	HTTP Parser: Form action: verification.php
Source: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/	HTTP Parser: Form action: verification.php
Source: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/	HTTP Parser: Form action: verification.php
Source: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/	HTTP Parser: Form action: verification.php

Source: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/	HTTP Parser: <input type="password" .../> found
Source: https://www.facebook.com/Codashop.IDofficial/	HTTP Parser: <input type="password" .../> found

Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc8br0ZAAAAAOAZHpdE1Fm9RA9tK85W3ano_l0-&co=aHR0cHM6Ly9uZXdza2xpa2Rpc2luaTViZWtiZzAuM2JzejQueHl6OjQ0Mw..&hl=en&v=joHA60MeME-PNviL59xVH9zs&size=normal&cb=5hgi2cvl589g	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3D%252Fsignin_passive%26feature%3Dpassive&hl=en&ifkv=AaSxoQw49wLNa6-H8cMk5jSBPbOPFKUEM49i7OPSjdqQRonHkgMYlqrSKARrTxxosivI_yjnmKqf&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1056654474%3A1716678033111024&ddm=0	HTTP Parser: No favicon

Source: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/	HTTP Parser: No <meta name="author".. found
Source: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/Codashop.IDofficial/	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/Codashop.IDofficial/	HTTP Parser: No <meta name="author".. found

Source: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/	HTTP Parser: No <meta name="copyright".. found
Source: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/Codashop.IDofficial/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/Codashop.IDofficial/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.18.97.153:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.18.97.153:443 -> 192.168.2.6:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:59089 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:59103 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:59205 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:59319 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:59375 version: TLS 1.2

Networking

Performs DNS queries to domains with low reputation

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: newsklikdisini5bekbg0.3bsz4.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: newsklikdisini5bekbg0.3bsz4.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: newsklikdisini5bekbg0.3bsz4.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: newsklikdisini5bekbg0.3bsz4.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: newsklikdisini5bekbg0.3bsz4.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: newsklikdisini5bekbg0.3bsz4.xyz

Source: global traffic

TCP traffic: 192.168.2.6:59067 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: newsklikdisini5bekbg0.3bsz4.xyzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: newsklikdisini5bekbg0.3bsz4.xyzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /diskonberkah HTTP/1.1Host: newsklikdisini5bekbg0.3bsz4.xyzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /diskonberkah/ HTTP/1.1Host: newsklikdisini5bekbg0.3bsz4.xyzConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /diskonberkah/free-fire HTTP/1.1Host: newsklikdisini5bekbg0.3bsz4.xyzConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /diskonberkah/free-fire/ HTTP/1.1Host: newsklikdisini5bekbg0.3bsz4.xyzConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /diskonberkah/css/popupLogin.css HTTP/1.1Host: newsklikdisini5bekbg0.3bsz4.xyzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /diskonberkah/css/facebook.css HTTP/1.1Host: newsklikdisini5bekbg0.3bsz4.xyzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /diskonberkah/css/twitter.css HTTP/1.1Host: newsklikdisini5bekbg0.3bsz4.xyzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /diskonberkah/css/spinner.58144.css HTTP/1.1Host: newsklikdisini5bekbg0.3bsz4.xyzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://newsklikdisini5bekbg0.3bsz4.xyzsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/common/js/xss.min.js HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tapfiliate.js HTTP/1.1Host: script.tapfiliate.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /diskonberkah/img/facebook_text.png HTTP/1.1Host: newsklikdisini5bekbg0.3bsz4.xyzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/vk-icon/vk-icon-28.jpg HTTP/1.1Host: icon-library.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S2/content/common/js/shop-topnav2.7e1fed6bdf.js HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/mobile/images/codashop-logo-new-2x.png HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/common/images/grab.29dad06670f873936002ddb910253a4b.png HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/common/js/jquery.mask.min.js HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S2/content/mobile/js/freefire.4a7a9740bc.js HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/vk-icon/vk-icon-28.jpg HTTP/1.1Host: icon-library.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S2/content/common/js/third_party_common.0859f0e010.js HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /diskonberkah/img/facebook_text.png HTTP/1.1Host: newsklikdisini5bekbg0.3bsz4.xyzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/common/css/jquery-ui-1.12.1.css HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S2/content/common/css/shared-topnav2.5566e671b1.css HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S2/content/mobile/css/productPage/responsive-product-page2.7ec2b81ede.css HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/mobile/images/app_store_coda.png HTTP/1.1Host: d1qgcmfii0ptfa.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/mobile/images/codashop-logo-new-2x.png HTTP/1.1Host: cdn1.codashop.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/common/images/grab.29dad06670f873936002ddb910253a4b.png HTTP/1.1Host: cdn1.codashop.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S2/content/mobile/css/infoBar.662b8f1b5f.css HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S2/content/common/css/shared-shop-content.e6202b83de.css HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S2/content/common/css/shared-fontfaces.b6c83d3582.css HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/mobile/images/app_store_coda.png HTTP/1.1Host: d1qgcmfii0ptfa.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2024/05/12/hBhjN.png HTTP/1.1Host: picjj.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/common/images/promos/Community%20Banners/freefire_id_codaclub.jpeg HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/mobile/images/google_play_coda.png HTTP/1.1Host: d1qgcmfii0ptfa.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/common/images/denom-image/FreeFire/Freefire_diamonds.png HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/common/images/mno/freefire_new_640x241.jpg HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2024/05/12/hBhjN.png HTTP/1.1Host: picjj.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S2/content/common/css/shared-footer2.2ce4d6e299.css HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/common/css/flags.css HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/mobile/images/google_play_coda.png HTTP/1.1Host: d1qgcmfii0ptfa.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /P/airtime/w/css/airtime_v1.0a.css HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/fonts/Lato/Lato-Light.woff2 HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://newsklikdisini5bekbg0.3bsz4.xyzsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn1.codashop.com/S2/content/common/css/shared-fontfaces.b6c83d3582.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/fonts/Lato/Lato-Bold.woff2 HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://newsklikdisini5bekbg0.3bsz4.xyzsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn1.codashop.com/S2/content/common/css/shared-fontfaces.b6c83d3582.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/common/images/mno/freefire_new_640x241.jpg HTTP/1.1Host: cdn1.codashop.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/fonts/Lato/Lato-Regular.woff2 HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://newsklikdisini5bekbg0.3bsz4.xyzsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn1.codashop.com/S2/content/common/css/shared-fontfaces.b6c83d3582.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/fonts/Lato/Lato-Semibold.woff2 HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://newsklikdisini5bekbg0.3bsz4.xyzsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn1.codashop.com/S2/content/common/css/shared-fontfaces.b6c83d3582.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/fonts/Lato/Lato-Italic.woff2 HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://newsklikdisini5bekbg0.3bsz4.xyzsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn1.codashop.com/S2/content/common/css/shared-fontfaces.b6c83d3582.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/common/images/denom-image/FreeFire/Freefire_diamonds.png HTTP/1.1Host: cdn1.codashop.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/common/images/promos/Community%20Banners/freefire_id_codaclub.jpeg HTTP/1.1Host: cdn1.codashop.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/fonts/Lato/Lato-Semibold.woff HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://newsklikdisini5bekbg0.3bsz4.xyzsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn1.codashop.com/S2/content/common/css/shared-fontfaces.b6c83d3582.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jr5VL36/favicon.png HTTP/1.1Host: i.ibb.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S2/content/common/js/infoBar.38acc407b3.js HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S2/content/common/js/faq.7a04e34b3d.js HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S2/content/common/js/payment-channel-suggestion.535f3c6f70.js HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S2/content/mobile/images/error-icon.20986d3fe0.png HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jr5VL36/favicon.png HTTP/1.1Host: i.ibb.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/social-media-logo/36/socmed-facebook-H36.png HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/social-media-logo/36/socmed-youtube-H36.png HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/social-media-logo/36/socmed-instagram-H36.png HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/social-media-logo/36/socmed-facebook-msg-H36.png HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S2/content/mobile/images/error-icon.20986d3fe0.png HTTP/1.1Host: cdn1.codashop.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/common/css/flags32.png HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn1.codashop.com/S/content/common/css/flags.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/social-media-logo/36/socmed-instagram-H36.png HTTP/1.1Host: cdn1.codashop.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/social-media-logo/36/socmed-facebook-msg-H36.png HTTP/1.1Host: cdn1.codashop.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/916139058437464?v=2.9.156&r=stable&domain=newsklikdisini5bekbg0.3bsz4.xyz&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/social-media-logo/36/socmed-youtube-H36.png HTTP/1.1Host: cdn1.codashop.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/social-media-logo/36/socmed-facebook-H36.png HTTP/1.1Host: cdn1.codashop.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6Lc8br0ZAAAAAOAZHpdE1Fm9RA9tK85W3ano_l0-&co=aHR0cHM6Ly9uZXdza2xpa2Rpc2luaTViZWtiZzAuM2JzejQueHl6OjQ0Mw..&hl=en&v=joHA60MeME-PNviL59xVH9zs&size=normal&cb=5hgi2cvl589g HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/common/css/flags32.png HTTP/1.1Host: cdn1.codashop.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/common/images/reskin/favicon.ico HTTP/1.1Host: cdn1.codashop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://newsklikdisini5bekbg0.3bsz4.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S/content/common/images/reskin/favicon.ico HTTP/1.1Host: cdn1.codashop.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mobile/ff?pid=OrganicA&c=Codashop HTTP/1.1Host: www.freefiremobile.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /common/web_event/common/packages/spine/3.8/spine-player.css HTTP/1.1Host: dl.dir.freefiremobile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.freefiremobile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /common/web_event/official2/dist/client/css/6786561.css HTTP/1.1Host: dl.dir.freefiremobile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.freefiremobile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /common/web_event/official2/dist/client/css/e845fbd.css HTTP/1.1Host: dl.dir.freefiremobile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.freefiremobile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /common/web_event/official2/dist/client/16fa1dd.js HTTP/1.1Host: dl.dir.freefiremobile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.freefiremobile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /common/web_event/official2/dist/client/b379205.js HTTP/1.1Host: dl.dir.freefiremobile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.freefiremobile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /common/web_event/official2/dist/client/c345ce3.js HTTP/1.1Host: dl.dir.freefiremobile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.freefiremobile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /common/web_event/official2/dist/client/5ef67ad.js HTTP/1.1Host: dl.dir.freefiremobile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.freefiremobile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /common/web_event/official2/dist/client/img/error_icon.1735f29.png HTTP/1.1Host: dl.dir.freefiremobile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.freefiremobile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /common/web_event/common/packages/spine/3.8/spine-player.js HTTP/1.1Host: dl.dir.freefiremobile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.freefiremobile.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /common/web_event/official2/dist/client/img/error_bg.7cc7c32.jpg HTTP/1.1Host: dl.dir.freefiremobile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://dl.dir.freefiremobile.com/common/web_event/official2/dist/client/css/e845fbd.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /common/web_event/official2/dist/client/img/error_icon.1735f29.png HTTP/1.1Host: dl.dir.freefiremobile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /common/web_event/official2/dist/client/fonts/GFFLatinW05-Bold.d2bc101.woff HTTP/1.1Host: dl.dir.freefiremobile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.freefiremobile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://dl.dir.freefiremobile.com/common/web_event/official2/dist/client/css/e845fbd.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /common/web_event/official2/dist/client/fonts/GFFLatinW05-Regular.7b8bcd3.woff HTTP/1.1Host: dl.dir.freefiremobile.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.freefiremobile.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://dl.dir.freefiremobile.com/common/web_event/official2/dist/client/css/e845fbd.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /common/web_event/official2/dist/client/img/error_bg.7cc7c32.jpg HTTP/1.1Host: dl.dir.freefiremobile.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Codashop.IDofficial/ HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yE/r/ScCOyQO1RkJ.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yB/l/0,cross/yS8ywFQ5XSl.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3isgV4/yQ/l/en_GB/gGsimpMHyxl0xPHEIazyWUNkYT6Pntg1cpOcBc5tVZ0hYT7n1sgH1lvKX5NuKWX3N0wutsx7AVq2pDYvatkvPhoOE7uP6vsv83liWdOEs54GVesZd6VEHGv5u1Rdzuzi16ygGc1wa-Oq19cr_l1DuzAtWVG4wS7SHTQOIRntr0ucTZxw3y91qmloYqXhV_-BvmtDG8_eJMlvvhSHqp55HfXW__mMwRo76sjR1pngFRlCsGN0FHzi95_wmB-51YxoStyBz2gE2pEQn4HVER6.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iZ5G4/yN/l/en_GB/6bLr5PfhOK-.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3i9144/yB/l/en_GB/x__yixK45EU.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3ihfn4/yo/l/en_GB/khfw_V4kOlpv89Dp6K_jxIkIhKMfIUi82vr8ihReOCEmAW87EauwWUrxvhYhGLwC4ognKw0vE_CYuEfrl5TB5L00_Sou4hbknqlJZ-rcIbRujYurPnDHEYs9_zW39xstWYoIrWWLyfq9z1dfWxL1rr0Obq.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iXK94/yb/l/en_GB/gnHzfwVhpKg.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y7/r/Kpg9CE6jA2A.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iQbs4/yf/l/en_GB/Up1i9-OcMPc.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yZ/r/dQ8-bsVFFVS.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yO/r/rEJHSWXTk8v5nEQ_oQlIPM1zlMrZllgF1.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3ibJQ4/y3/l/en_GB/mYDEWiHviVu.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/cookies/cookie_info_card_image_4.png HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Codashop.IDofficial/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/cookies/cookie_info_card_image_1.png HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Codashop.IDofficial/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/cookies/cookie_info_card_image_3.png HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Codashop.IDofficial/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/ya/r/XEU-8Pf8ztq.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/cookies/cookie_info_card_image_2.png HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Codashop.IDofficial/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iGgu4/yM/l/en_GB/74HMcn-5nlc.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3ifpn4/yt/l/en_GB/xyGxUdbmcjliUVeSsRTCk81SbQg6teJkXAZHoh1prcJsXgjxOZ-_U7a8O0FwF42MYvHidVTgbrSCilh6jit1ncqc.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iWd-4/yW/l/en_GB/FJA28rqt62x.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iizA4/yo/l/en_GB/HHF3KtxQn_Y.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3id884/y8/l/en_GB/4t25DeQRTJxLsi-rwUHCTlWyubcVjTfcI11-o1MT8-XErTW_NeGw-j-h5bjod9Ki8-3AcSV1GJLuDkNkYY8jZuVHUTYWdONLt7WuwwDateX8xhlAxWws3te_lNBFZ41W3g_g8nScjVqE0xb_HmQ2JWvIJ2cZwagDY3jE6r9mkoV0ZzHkRFDpcKqESlC_aQOCXY8eS6DpV79ituEkM.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3ibTx4/y3/l/en_GB/4Gun5E2JitX.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bulk-route-definitions/ HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/ya/r/XEU-8Pf8ztq.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/cookies/cookie_info_card_image_4.png HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/cookies/cookie_info_card_image_1.png HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/cookies/cookie_info_card_image_3.png HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/cookies/cookie_info_card_image_2.png HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iAu44/ys/l/en_GB/hKDvLPKrsa6.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/425750146_2620197854795727_7515684929751906463_n.png?stp=dst-png_p180x540&_nc_cat=100&ccb=1-7&_nc_sid=5f2048&_nc_ohc=PwxMdBd-3KAQ7kNvgF1bFWB&_nc_ht=scontent-hou1-1.xx&oh=00_AYDRWljGH39R5bVy0sx5Tcm36_hplzbp-3jh0j8Y9pxKJA&oe=66583270 HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/425750146_2620197854795727_7515684929751906463_n.png?stp=dst-png_fb50_s320x320&_nc_cat=100&ccb=1-7&_nc_sid=5f2048&_nc_ohc=PwxMdBd-3KAQ7kNvgF1bFWB&_nc_ht=scontent-hou1-1.xx&oh=00_AYD4FOtaPH_yCdXoiMwmmy7o9ZJ5BqsldvtGtjHLYpPk3A&oe=66583270 HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/ye/r/4PEEs7qlhJk.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y7/r/4Lea07Woawi.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yE/r/2PIcyqpptfD.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y3/r/BQdeC67wT9z.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yP/r/8p1yRlAKDA6.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bulk-route-definitions/ HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yx/r/lIynBvI7H2n.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iO7g4/yR/l/en_GB/YpUhBEcSvg9.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/425750146_2620197854795727_7515684929751906463_n.png?stp=dst-png_fb50_s320x320&_nc_cat=100&ccb=1-7&_nc_sid=5f2048&_nc_ohc=PwxMdBd-3KAQ7kNvgF1bFWB&_nc_ht=scontent-hou1-1.xx&oh=00_AYD4FOtaPH_yCdXoiMwmmy7o9ZJ5BqsldvtGtjHLYpPk3A&oe=66583270 HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iovW4/yD/l/en_GB/aubh74cvJ-S.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An_KOWvmE8xXhWbKcEDamiAQ14ZKS7T_w5aOTf-M8Krv4ls-f63eecRjpMEIRfwoMQw0XjeM4Q2PKoqtUSQc0_q66s2ahAGa0OTb.kf?ccb=10-5&oh=00_AYCREWIJAY60rI4GtkID1LYrVlSj9KC3tfo8g8qkECqQsg&oe=6679D180&_nc_sid=7da55a HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.facebook.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3i9Jf4/yX/l/en_GB/l0OMkD_OPg7.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3ibq64/y8/l/en_GB/2u2m0bPYW-ex3hM69KLNaEmM84SfiWlvqERz6pNGhHp816BNgeKisvr.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An-V1eo7VQ3O9lqK2f9nfo3p019W0b_BTfQk8m_WliRJfm8Ss0I6dO39oKJmajreEZ2Oy5vSrTbDg0GpAgj0NSk-Eu5PWtSAd1gv.kf?ccb=10-5&oh=00_AYCD1VWQBamFCQirp7gVQT2iYvcacClMWPJi8f1p3bpxjA&oe=6679CDF1&_nc_sid=7da55a HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.facebook.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An8KSKhioMIUVSZ4NYh8JnAchGmGQVDA71Hulkn5JQZsO-ejSYcV2dWPMQo-ZhSa71MfFqgrDHlCASWFxgbtV3pYQqVdSus0zicQO6_n.kf?ccb=10-5&oh=00_AYBqYbL3ALTjJ1h94lclEKfUjjeQfC87MNxEvAtaFkcicg&oe=6679D166&_nc_sid=7da55a HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.facebook.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yF/r/sIUfioK8p73.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An8UpDtYTxwRfyFUAQkYpPLVzCcFZAyT58b4mM9QRn-9IZWdHfcWsX1lOuHAsupZu8HCFEX8uobe6VdR6H9B8v2Z_FzSMfB8MYN36w.kf?ccb=10-5&oh=00_AYDhgEWS6D0RLo0qvx9TQgxPypbSC1GdW-PLYRKR1wPKAw&oe=6679EC30&_nc_sid=7da55a HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.facebook.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An8CYKC8XqtM-fkmXlVHrp9oVgPgDVVlGZu_Cy7Q_5xW9yYY3lOzMNVDCq9D1ThbbsbnpjfFmGnfIPhKX6oePvUMOYOvShQauKw.kf?ccb=10-5&oh=00_AYD07_nPxgbm5FmbefRT2bPhnCWwYTmoGZCLjK7qyYsc9A&oe=6679D5CB&_nc_sid=7da55a HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.facebook.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An_iJw3Cc3y5RtzEpR0M4CCznWN_ywjtFHZENvSbcomn6tH9EuRIjlfe7xaIpEOIEZAGHfQMVNlOPpkGNsG7fM8CslunKANTZ6ED.kf?ccb=10-5&oh=00_AYBcK8-O3yI6-YhotsoEQ5GrPxPKPphT8rCkVAW5Tzg_8w&oe=6679E218&_nc_sid=7da55a HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.facebook.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/443820279_996576055171299_5426681423066812390_n.jpg?stp=dst-jpg_p600x600&_nc_cat=106&ccb=1-7&_nc_sid=5f2048&_nc_ohc=yOpNa5f4B0MQ7kNvgFXHOgL&_nc_ht=scontent-hou1-1.xx&oh=00_AYDmlj2FslEtdorS3sX8SiySJp-Qe_coQMiD4X1hjkEgCw&oe=665834CA HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/443717789_996576088504629_748921786331374552_n.jpg?stp=dst-jpg_p600x600&_nc_cat=106&ccb=1-7&_nc_sid=5f2048&_nc_ohc=6efKMPmYepsQ7kNvgHWkgWT&_nc_ht=scontent-hou1-1.xx&oh=00_AYBykvCb4vJ6su0icd2D3YWhwfwQGNVx6f7HEYWMUmgzSg&oe=6658484A HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/425750146_2620197854795727_7515684929751906463_n.png?stp=dst-png_p180x540&_nc_cat=100&ccb=1-7&_nc_sid=5f2048&_nc_ohc=PwxMdBd-3KAQ7kNvgF1bFWB&_nc_ht=scontent-hou1-1.xx&oh=00_AYDRWljGH39R5bVy0sx5Tcm36_hplzbp-3jh0j8Y9pxKJA&oe=66583270 HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bootloader-endpoint/?modules=KeyframesRenderer%2CFBKeyframesLoggedSession%2CKeyframesAssetDecoder&__aaid=0&__user=0&__a=1&__req=6&__hs=19868.HYP%3Acomet_loggedout_pkg.2.1..0.0&dpr=1&__ccg=GOOD&__rev=1013770602&__s=%3A%3Afjuzaa&__hsi=7373075910951068210&__dyn=7xeUmwlEnwn8yEqxemh0cm5U4e1Nxt3odEc8co5S3O2Saw8i2S1DwUx609vCwjE1xoswIK1Rw8G11wBz83WwgEcEhwGwQw9m1YwBgao6C0Mo2swlo5qfK0zEkxe2Gewywuo88brwKxm5oe85nxmu3W0GpovU11E98bpEbUGdwda3e0Lo4q58jwTwNwLwFg2Xwkoqwqo4eE7W1iwGwRxW1ow&__csr=glMN4ihezhdPbaAzQgymHr8HQAt7J4GiypRAyrZacq_RG4ma-hk9xy6vyk8AFudDUylkAFe6oOvAUO9yKdy9aL8qWF2LSjDFWiGUgXx6imU8ESi8Vkaw4ww1Ae0le3m9g0yG5K0tu043K050o3mw3d6Eow1oi0mu09UyEnwIw8Fwt82Uw614GagS8o0WZ00GiAg1Gy0VQ0fua05rgABkca3e03_xwkS0it5w1jKEowk80Yy02Ui09ig5S1Zw-w4X80sK0uW0a6wQwJwfEU0At0qo8xaxy0nx024F98jzUW0bEw5Gz8Wp0kE46m0X8HxykNA48a6290u-0Dzp8e8G0ja1iw27t0uo3I3pBYpbJywS3C9iyaAckg5AoBDyo98Rqib5adAfiGOIPD80X81wE6m2eEcqbwbSdgCbzA8gO5Ey2G5U5l2U3RUmwOg8EgUlosxlxZy8GUOu1sAwgeayo7qawE81boc82wBGbzoxwXCggixi39685TzUT4wuoxwLa1lwc65Q0Jaxa8a8DAjhokxe2_qay0h2K-1mGvxq2m0gcwfQqEFsb0Xg5a3a1DLo-3e3B241HohwXw4Hwh-1Sxi0EE0Xow520vO640zE09zawcWlwrE0pcyJw6ewai0r4cUwu1Jw8i1Zwah0r10W3q0MA2Oq1Ey8Io7U4-0jW0MUpw9G1qwaa1cg3kg3GxG5IwrwiEx0a69g1G83Ozo8205iohg1d-S79O1u0iu0GE42A0B8qyE3_8b84E&__comet_req=15&__spin_r=1013770602&__spin_b=trunk&__spin_t=1716678010 HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/Codashop.IDofficial/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/ye/r/4PEEs7qlhJk.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y7/r/4Lea07Woawi.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yE/r/2PIcyqpptfD.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yP/r/8p1yRlAKDA6.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/emoji.php/v9/t6e/1/16/1f4ac.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/emoji.php/v9/t34/1/16/1f914.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y3/r/BQdeC67wT9z.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bulk-route-definitions/ HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yc/r/cGxo7_n9cky.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yl/r/98yboYS91Bz.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An-V1eo7VQ3O9lqK2f9nfo3p019W0b_BTfQk8m_WliRJfm8Ss0I6dO39oKJmajreEZ2Oy5vSrTbDg0GpAgj0NSk-Eu5PWtSAd1gv.kf?ccb=10-5&oh=00_AYCD1VWQBamFCQirp7gVQT2iYvcacClMWPJi8f1p3bpxjA&oe=6679CDF1&_nc_sid=7da55a HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An-epsBkaSJ4n9oYH6L6fSPKlfyvVNR_J7OfeV9-jqOZVx9-Fg73T8WyLTa1e_4iyoSboul40f-XChEvL3RtR-jyPuVfx7Umn4RlQyMS.kf?ccb=10-5&oh=00_AYDqdB8NKAFNHlr2X0MnTEEFymxSu8U_NbtWwX5P5DJS8w&oe=6679CB47&_nc_sid=7da55a HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.facebook.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An_KOWvmE8xXhWbKcEDamiAQ14ZKS7T_w5aOTf-M8Krv4ls-f63eecRjpMEIRfwoMQw0XjeM4Q2PKoqtUSQc0_q66s2ahAGa0OTb.kf?ccb=10-5&oh=00_AYCREWIJAY60rI4GtkID1LYrVlSj9KC3tfo8g8qkECqQsg&oe=6679D180&_nc_sid=7da55a HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An-4eutqFWFfYhZPQR8tM2oP5E05jWW-J7tvfsD5wE23SUHSA2nXlg1n6fI_KpO3JoITC05bkD6cfuSRG3Fji57z_i1jO4Bw_K_ZEg.kf?ccb=10-5&oh=00_AYDloHREai0wyhW-O5u0e7vmSZiLh8PQ2WlNfDJ2cKmjwg&oe=6679D1B0&_nc_sid=7da55a HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.facebook.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An8KSKhioMIUVSZ4NYh8JnAchGmGQVDA71Hulkn5JQZsO-ejSYcV2dWPMQo-ZhSa71MfFqgrDHlCASWFxgbtV3pYQqVdSus0zicQO6_n.kf?ccb=10-5&oh=00_AYBqYbL3ALTjJ1h94lclEKfUjjeQfC87MNxEvAtaFkcicg&oe=6679D166&_nc_sid=7da55a HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An-ltDiBj6BlExJAIyJiOGWs0CtdQwF9K9SyRSRhTIMgJd0MMzaw7ju3gnTsliPfba99uYjQem5sn3JzgpEnBVKOKfyfbcp-sMBJ.kf?ccb=10-5&oh=00_AYAjAwuljXLVWb9VmO0GfkRgCPPHVaBo8SGp6ZTw-XNUBw&oe=6679EE97&_nc_sid=7da55a HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.facebook.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An_iJw3Cc3y5RtzEpR0M4CCznWN_ywjtFHZENvSbcomn6tH9EuRIjlfe7xaIpEOIEZAGHfQMVNlOPpkGNsG7fM8CslunKANTZ6ED.kf?ccb=10-5&oh=00_AYBcK8-O3yI6-YhotsoEQ5GrPxPKPphT8rCkVAW5Tzg_8w&oe=6679E218&_nc_sid=7da55a HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An8CYKC8XqtM-fkmXlVHrp9oVgPgDVVlGZu_Cy7Q_5xW9yYY3lOzMNVDCq9D1ThbbsbnpjfFmGnfIPhKX6oePvUMOYOvShQauKw.kf?ccb=10-5&oh=00_AYD07_nPxgbm5FmbefRT2bPhnCWwYTmoGZCLjK7qyYsc9A&oe=6679D5CB&_nc_sid=7da55a HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/443717789_996576088504629_748921786331374552_n.jpg?stp=dst-jpg_p600x600&_nc_cat=106&ccb=1-7&_nc_sid=5f2048&_nc_ohc=6efKMPmYepsQ7kNvgHWkgWT&_nc_ht=scontent-hou1-1.xx&oh=00_AYBykvCb4vJ6su0icd2D3YWhwfwQGNVx6f7HEYWMUmgzSg&oe=6658484A HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bootloader-endpoint/?modules=KeyframesRenderer%2CFBKeyframesLoggedSession%2CKeyframesAssetDecoder&__aaid=0&__user=0&__a=1&__req=6&__hs=19868.HYP%3Acomet_loggedout_pkg.2.1..0.0&dpr=1&__ccg=GOOD&__rev=1013770602&__s=%3A%3Afjuzaa&__hsi=7373075910951068210&__dyn=7xeUmwlEnwn8yEqxemh0cm5U4e1Nxt3odEc8co5S3O2Saw8i2S1DwUx609vCwjE1xoswIK1Rw8G11wBz83WwgEcEhwGwQw9m1YwBgao6C0Mo2swlo5qfK0zEkxe2Gewywuo88brwKxm5oe85nxmu3W0GpovU11E98bpEbUGdwda3e0Lo4q58jwTwNwLwFg2Xwkoqwqo4eE7W1iwGwRxW1ow&__csr=glMN4ihezhdPbaAzQgymHr8HQAt7J4GiypRAyrZacq_RG4ma-hk9xy6vyk8AFudDUylkAFe6oOvAUO9yKdy9aL8qWF2LSjDFWiGUgXx6imU8ESi8Vkaw4ww1Ae0le3m9g0yG5K0tu043K050o3mw3d6Eow1oi0mu09UyEnwIw8Fwt82Uw614GagS8o0WZ00GiAg1Gy0VQ0fua05rgABkca3e03_xwkS0it5w1jKEowk80Yy02Ui09ig5S1Zw-w4X80sK0uW0a6wQwJwfEU0At0qo8xaxy0nx024F98jzUW0bEw5Gz8Wp0kE46m0X8HxykNA48a6290u-0Dzp8e8G0ja1iw27t0uo3I3pBYpbJywS3C9iyaAckg5AoBDyo98Rqib5adAfiGOIPD80X81wE6m2eEcqbwbSdgCbzA8gO5Ey2G5U5l2U3RUmwOg8EgUlosxlxZy8GUOu1sAwgeayo7qawE81boc82wBGbzoxwXCggixi39685TzUT4wuoxwLa1lwc65Q0Jaxa8a8DAjhokxe2_qay0h2K-1mGvxq2m0gcwfQqEFsb0Xg5a3a1DLo-3e3B241HohwXw4Hwh-1Sxi0EE0Xow520vO640zE09zawcWlwrE0pcyJw6ewai0r4cUwu1Jw8i1Zwah0r10W3q0MA2Oq1Ey8Io7U4-0jW0MUpw9G1qwaa1cg3kg3GxG5IwrwiEx0a69g1G83Ozo8205iohg1d-S79O1u0iu0GE42A0B8qyE3_8b84E&__comet_req=15&__spin_r=1013770602&__spin_b=trunk&__spin_t=1716678010 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3ikn04/yz/l/en_GB/JNtlbX11Plv.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3i4vm4/ym/l/en_GB/hZYSGm_6tB-.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/yg/r/DUjm2v1u572.kf HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.facebook.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bulk-route-definitions/ HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/emoji.php/v9/t34/1/16/1f914.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/emoji.php/v9/t6e/1/16/1f4ac.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yy/r/2pW-nUfYDFy.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/443820279_996576055171299_5426681423066812390_n.jpg?stp=dst-jpg_p600x600&_nc_cat=106&ccb=1-7&_nc_sid=5f2048&_nc_ohc=yOpNa5f4B0MQ7kNvgFXHOgL&_nc_ht=scontent-hou1-1.xx&oh=00_AYDmlj2FslEtdorS3sX8SiySJp-Qe_coQMiD4X1hjkEgCw&oe=665834CA HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An8UpDtYTxwRfyFUAQkYpPLVzCcFZAyT58b4mM9QRn-9IZWdHfcWsX1lOuHAsupZu8HCFEX8uobe6VdR6H9B8v2Z_FzSMfB8MYN36w.kf?ccb=10-5&oh=00_AYDhgEWS6D0RLo0qvx9TQgxPypbSC1GdW-PLYRKR1wPKAw&oe=6679EC30&_nc_sid=7da55a HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An-epsBkaSJ4n9oYH6L6fSPKlfyvVNR_J7OfeV9-jqOZVx9-Fg73T8WyLTa1e_4iyoSboul40f-XChEvL3RtR-jyPuVfx7Umn4RlQyMS.kf?ccb=10-5&oh=00_AYDqdB8NKAFNHlr2X0MnTEEFymxSu8U_NbtWwX5P5DJS8w&oe=6679CB47&_nc_sid=7da55a HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An-4eutqFWFfYhZPQR8tM2oP5E05jWW-J7tvfsD5wE23SUHSA2nXlg1n6fI_KpO3JoITC05bkD6cfuSRG3Fji57z_i1jO4Bw_K_ZEg.kf?ccb=10-5&oh=00_AYDloHREai0wyhW-O5u0e7vmSZiLh8PQ2WlNfDJ2cKmjwg&oe=6679D1B0&_nc_sid=7da55a HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m1/v/t6/An-ltDiBj6BlExJAIyJiOGWs0CtdQwF9K9SyRSRhTIMgJd0MMzaw7ju3gnTsliPfba99uYjQem5sn3JzgpEnBVKOKfyfbcp-sMBJ.kf?ccb=10-5&oh=00_AYAjAwuljXLVWb9VmO0GfkRgCPPHVaBo8SGp6ZTw-XNUBw&oe=6679EE97&_nc_sid=7da55a HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y4/r/zJ7X2mgr9yY.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/444202748_996576171837954_250908605759715264_n.jpg?stp=dst-jpg_p160x160&_nc_cat=102&ccb=1-7&_nc_sid=5f2048&_nc_ohc=OAqihbnrPUoQ7kNvgFnryPS&_nc_ht=scontent-hou1-1.xx&oh=00_AYCeXEwpdrg44H2MsX8htwFjsSC1XoR3snF8Y5OzIJvZqQ&oe=66584BAB HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/443716737_996551778507060_8093613214370052435_n.jpg?stp=dst-jpg_p160x160&_nc_cat=108&ccb=1-7&_nc_sid=5f2048&_nc_ohc=DuHJngJtu2wQ7kNvgFQ8iUU&_nc_ht=scontent-hou1-1.xx&oh=00_AYBf7Ste67oNs7Tl7YANpLqMTqiicZKF-CR-_p4ZIXY8lg&oe=66583443 HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/239592299_1943111962504323_4257252519711300084_n.png?stp=c102.0.160.160a_dst-jpg_p160x160&_nc_cat=100&ccb=1-7&_nc_sid=5f2048&_nc_ohc=E0uuFtNHuS0Q7kNvgHLW0c8&_nc_ht=scontent-hou1-1.xx&oh=00_AYAZEqOq3fKkG9GGcv4pGFMp4VVJNn8R0sRm10Vzux-RmA&oe=66582AE0 HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/359471819_824263999069173_7453749825994799651_n.jpg?stp=c129.0.160.160a_dst-jpg_p160x160&_nc_cat=111&ccb=1-7&_nc_sid=5f2048&_nc_ohc=m0xl1AGKrJ4Q7kNvgFGjLtq&_nc_ht=scontent-hou1-1.xx&oh=00_AYBdRqkh0Ce7D3TU4A8aoPwuvJvYuH31SUopKTc2ALOyxQ&oe=66584790 HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19868.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7373075910951068210&__req=8&__rev=1013770602&__s=%3A%3Afjuzaa&__spin_b=trunk&__spin_r=1013770602&__spin_t=1716678010&__user=0&dpr=1&jazoest=2936&lsd=AVrj9UP_w8I&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/443717789_996576088504629_748921786331374552_n.jpg?stp=dst-jpg_p160x160&_nc_cat=106&ccb=1-7&_nc_sid=5f2048&_nc_ohc=6efKMPmYepsQ7kNvgHWkgWT&_nc_ht=scontent-hou1-1.xx&oh=00_AYD-VepBjFoMOMyl-Xlc8WviWhVq2U2uQddJKy9PLR6smA&oe=6658484A HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/yg/r/DUjm2v1u572.kf HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bulk-route-definitions/ HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19868.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7373075910951068210&__req=9&__rev=1013770602&__s=%3A%3Afjuzaa&__spin_b=trunk&__spin_r=1013770602&__spin_t=1716678010&__user=0&dpr=1&jazoest=2936&lsd=AVrj9UP_w8I&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/443818919_996576128504625_3343915979056056184_n.jpg?stp=dst-jpg_p160x160&_nc_cat=101&ccb=1-7&_nc_sid=5f2048&_nc_ohc=nO7Vfy4wE0cQ7kNvgEAcCQP&_nc_ht=scontent-hou1-1.xx&oh=00_AYCntigX4wIFjcc-XIzewAhDWxRAHRfppP-pPBfZbeeOEA&oe=665830C5 HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/443820279_996576055171299_5426681423066812390_n.jpg?stp=dst-jpg_p160x160&_nc_cat=106&ccb=1-7&_nc_sid=5f2048&_nc_ohc=yOpNa5f4B0MQ7kNvgFXHOgL&_nc_ht=scontent-hou1-1.xx&oh=00_AYBVDQgwzpXx5tnAMaacW5P1eZsrvuHBmJdwC36mmjlL2g&oe=665834CA HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/443716737_996551778507060_8093613214370052435_n.jpg?stp=dst-jpg_p160x160&_nc_cat=108&ccb=1-7&_nc_sid=5f2048&_nc_ohc=DuHJngJtu2wQ7kNvgFQ8iUU&_nc_ht=scontent-hou1-1.xx&oh=00_AYBf7Ste67oNs7Tl7YANpLqMTqiicZKF-CR-_p4ZIXY8lg&oe=66583443 HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/444202748_996576171837954_250908605759715264_n.jpg?stp=dst-jpg_p160x160&_nc_cat=102&ccb=1-7&_nc_sid=5f2048&_nc_ohc=OAqihbnrPUoQ7kNvgFnryPS&_nc_ht=scontent-hou1-1.xx&oh=00_AYCeXEwpdrg44H2MsX8htwFjsSC1XoR3snF8Y5OzIJvZqQ&oe=66584BAB HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/443717789_996576088504629_748921786331374552_n.jpg?stp=dst-jpg_p160x160&_nc_cat=106&ccb=1-7&_nc_sid=5f2048&_nc_ohc=6efKMPmYepsQ7kNvgHWkgWT&_nc_ht=scontent-hou1-1.xx&oh=00_AYD-VepBjFoMOMyl-Xlc8WviWhVq2U2uQddJKy9PLR6smA&oe=6658484A HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/443734130_996504798511758_6592287627648144231_n.jpg?stp=dst-jpg_p160x160&_nc_cat=103&ccb=1-7&_nc_sid=5f2048&_nc_ohc=ZehM0R_W_KYQ7kNvgFg__vp&_nc_ht=scontent-hou1-1.xx&oh=00_AYDJEL6e_gixMWiDOUh9aXczeGqkrxh94R0FJtxsn4TwFg&oe=665847CB HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/359471819_824263999069173_7453749825994799651_n.jpg?stp=c129.0.160.160a_dst-jpg_p160x160&_nc_cat=111&ccb=1-7&_nc_sid=5f2048&_nc_ohc=m0xl1AGKrJ4Q7kNvgFGjLtq&_nc_ht=scontent-hou1-1.xx&oh=00_AYBdRqkh0Ce7D3TU4A8aoPwuvJvYuH31SUopKTc2ALOyxQ&oe=66584790 HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/239592299_1943111962504323_4257252519711300084_n.png?stp=c102.0.160.160a_dst-jpg_p160x160&_nc_cat=100&ccb=1-7&_nc_sid=5f2048&_nc_ohc=E0uuFtNHuS0Q7kNvgHLW0c8&_nc_ht=scontent-hou1-1.xx&oh=00_AYAZEqOq3fKkG9GGcv4pGFMp4VVJNn8R0sRm10Vzux-RmA&oe=66582AE0 HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-1/241270460_1943112789170907_1967367247279035119_n.png?stp=cp0_dst-png_p40x40&_nc_cat=1&ccb=1-7&_nc_sid=5f2048&_nc_ohc=1XNCsKdZNVcQ7kNvgEm2iAq&_nc_ht=scontent-hou1-1.xx&oh=00_AYCkH4_Vs00q1M9XOPfSjLOlrgyBfl8DrVuZMc0S1B0DaQ&oe=66584D80 HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/443719952_995303895298515_5429863019799494605_n.jpg?stp=dst-jpg_p160x160&_nc_cat=101&ccb=1-7&_nc_sid=5f2048&_nc_ohc=QJOpQMOzaykQ7kNvgGY1MSj&_nc_ht=scontent-hou1-1.xx&oh=00_AYDz7mtrEpNBxVYv1ph3mZC7uPqbHrNYX7ZZdgtuo6ZlEA&oe=66582DAE HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/443818919_996576128504625_3343915979056056184_n.jpg?stp=dst-jpg_p600x600&_nc_cat=101&ccb=1-7&_nc_sid=5f2048&_nc_ohc=nO7Vfy4wE0cQ7kNvgEAcCQP&_nc_ht=scontent-hou1-1.xx&oh=00_AYDru1sgIffZ1rgBMKyVshHvglkMn8HpGaDMN24nEMeB7g&oe=665830C5 HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yw/r/8iuTX4LlGZO.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19868.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7373075910951068210&__req=a&__rev=1013770602&__s=%3A%3Afjuzaa&__spin_b=trunk&__spin_r=1013770602&__spin_t=1716678010&__user=0&dpr=1&jazoest=2936&lsd=AVrj9UP_w8I&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/ys/r/ASlpPgTKW7L.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hads-ak-prn2/1487645_6012475414660_1439393861_n.png HTTP/1.1Host: scontent.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bulk-route-definitions/ HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/444202748_996576171837954_250908605759715264_n.jpg?stp=dst-jpg_p600x600&_nc_cat=102&ccb=1-7&_nc_sid=5f2048&_nc_ohc=OAqihbnrPUoQ7kNvgFnryPS&_nc_ht=scontent-hou1-1.xx&oh=00_AYDZBL9LFz-Cn1CR3xmu1gq6howv3CgU2z-SL4ry84scOg&oe=66584BAB HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/443818919_996576128504625_3343915979056056184_n.jpg?stp=dst-jpg_p160x160&_nc_cat=101&ccb=1-7&_nc_sid=5f2048&_nc_ohc=nO7Vfy4wE0cQ7kNvgEAcCQP&_nc_ht=scontent-hou1-1.xx&oh=00_AYCntigX4wIFjcc-XIzewAhDWxRAHRfppP-pPBfZbeeOEA&oe=665830C5 HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-1/241270460_1943112789170907_1967367247279035119_n.png?stp=dst-png_p200x200&_nc_cat=1&ccb=1-7&_nc_sid=5f2048&_nc_ohc=1XNCsKdZNVcQ7kNvgEm2iAq&_nc_ht=scontent-hou1-1.xx&oh=00_AYC4FSoPI_caF-qQXmeiAUE38hRwGoIYd4Upuifu1nR3iA&oe=66584D80 HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/443820279_996576055171299_5426681423066812390_n.jpg?stp=dst-jpg_p160x160&_nc_cat=106&ccb=1-7&_nc_sid=5f2048&_nc_ohc=yOpNa5f4B0MQ7kNvgFXHOgL&_nc_ht=scontent-hou1-1.xx&oh=00_AYBVDQgwzpXx5tnAMaacW5P1eZsrvuHBmJdwC36mmjlL2g&oe=665834CA HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-1/241270460_1943112789170907_1967367247279035119_n.png?stp=cp0_dst-png_p40x40&_nc_cat=1&ccb=1-7&_nc_sid=5f2048&_nc_ohc=1XNCsKdZNVcQ7kNvgEm2iAq&_nc_ht=scontent-hou1-1.xx&oh=00_AYCkH4_Vs00q1M9XOPfSjLOlrgyBfl8DrVuZMc0S1B0DaQ&oe=66584D80 HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-1/420086716_931108598615436_3858448142618749480_n.jpg?stp=c0.0.32.32a_cp0_dst-jpg_p32x32&_nc_cat=111&ccb=1-7&_nc_sid=5f2048&_nc_ohc=NXwRNknqveIQ7kNvgFwHOBH&_nc_ht=scontent-hou1-1.xx&oh=00_AYAMXp2fbTKj3nPqh5iGhMSYM9EtUaMzlU_M73za1DQd4A&oe=66583EEA HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-1/241270460_1943112789170907_1967367247279035119_n.png?stp=cp0_dst-png_p24x24&_nc_cat=1&ccb=1-7&_nc_sid=5f2048&_nc_ohc=1XNCsKdZNVcQ7kNvgEm2iAq&_nc_ht=scontent-hou1-1.xx&oh=00_AYCtPdlNyu0dqd6iPTXBvUxjOno_5MTNZoU-rRxBkPW0yA&oe=66584D80 HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/443719952_995303895298515_5429863019799494605_n.jpg?stp=dst-jpg_p160x160&_nc_cat=101&ccb=1-7&_nc_sid=5f2048&_nc_ohc=QJOpQMOzaykQ7kNvgGY1MSj&_nc_ht=scontent-hou1-1.xx&oh=00_AYDz7mtrEpNBxVYv1ph3mZC7uPqbHrNYX7ZZdgtuo6ZlEA&oe=66582DAE HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/443734130_996504798511758_6592287627648144231_n.jpg?stp=dst-jpg_p160x160&_nc_cat=103&ccb=1-7&_nc_sid=5f2048&_nc_ohc=ZehM0R_W_KYQ7kNvgFg__vp&_nc_ht=scontent-hou1-1.xx&oh=00_AYDJEL6e_gixMWiDOUh9aXczeGqkrxh94R0FJtxsn4TwFg&oe=665847CB HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/443818919_996576128504625_3343915979056056184_n.jpg?stp=dst-jpg_p600x600&_nc_cat=101&ccb=1-7&_nc_sid=5f2048&_nc_ohc=nO7Vfy4wE0cQ7kNvgEAcCQP&_nc_ht=scontent-hou1-1.xx&oh=00_AYDru1sgIffZ1rgBMKyVshHvglkMn8HpGaDMN24nEMeB7g&oe=665830C5 HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yw/r/8iuTX4LlGZO.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hads-ak-prn2/1487645_6012475414660_1439393861_n.png HTTP/1.1Host: scontent.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/ys/r/ASlpPgTKW7L.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-1/241270460_1943112789170907_1967367247279035119_n.png?stp=dst-png_p200x200&_nc_cat=1&ccb=1-7&_nc_sid=5f2048&_nc_ohc=1XNCsKdZNVcQ7kNvgEm2iAq&_nc_ht=scontent-hou1-1.xx&oh=00_AYC4FSoPI_caF-qQXmeiAUE38hRwGoIYd4Upuifu1nR3iA&oe=66584D80 HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-1/420086716_931108598615436_3858448142618749480_n.jpg?stp=c0.0.32.32a_cp0_dst-jpg_p32x32&_nc_cat=111&ccb=1-7&_nc_sid=5f2048&_nc_ohc=NXwRNknqveIQ7kNvgFwHOBH&_nc_ht=scontent-hou1-1.xx&oh=00_AYAMXp2fbTKj3nPqh5iGhMSYM9EtUaMzlU_M73za1DQd4A&oe=66583EEA HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-1/241270460_1943112789170907_1967367247279035119_n.png?stp=cp0_dst-png_p24x24&_nc_cat=1&ccb=1-7&_nc_sid=5f2048&_nc_ohc=1XNCsKdZNVcQ7kNvgEm2iAq&_nc_ht=scontent-hou1-1.xx&oh=00_AYCtPdlNyu0dqd6iPTXBvUxjOno_5MTNZoU-rRxBkPW0yA&oe=66584D80 HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/444202748_996576171837954_250908605759715264_n.jpg?stp=dst-jpg_p600x600&_nc_cat=102&ccb=1-7&_nc_sid=5f2048&_nc_ohc=OAqihbnrPUoQ7kNvgFnryPS&_nc_ht=scontent-hou1-1.xx&oh=00_AYDZBL9LFz-Cn1CR3xmu1gq6howv3CgU2z-SL4ry84scOg&oe=66584BAB HTTP/1.1Host: scontent-hou1-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/yT/r/aGT3gskzWBf.ico HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/manifest/ HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://www.facebook.com/Codashop.IDofficial/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19868.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7373075910951068210&__req=b&__rev=1013770602&__s=%3A%3Afjuzaa&__spin_b=trunk&__spin_r=1013770602&__spin_t=1716678010&__user=0&dpr=1&jazoest=2936&lsd=AVrj9UP_w8I&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y0/r/eFZD1KABzRA.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/yT/r/aGT3gskzWBf.ico HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/CodashopOfficial HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19868.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7373075910951068210&__req=c&__rev=1013770602&__s=%3A%3Afjuzaa&__spin_b=trunk&__spin_r=1013770602&__spin_t=1716678010&__user=0&dpr=1&jazoest=2936&lsd=AVrj9UP_w8I&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/desktop/aef0ced3/jsbin/desktop_polymer.vflset/desktop_polymer.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/c/CodashopOfficialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y0/r/eFZD1KABzRA.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/desktop/aef0ced3/cssbin/www-onepick.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/c/CodashopOfficialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000
Source: global traffic	HTTP traffic detected: GET /s/_/ytmainappweb/_/ss/k=ytmainappweb.kevlar_base.wrKemerB_yc.L.B1.O/am=AIAALQ/d=0/rs=AGKMywGR7hi9AjzaLB2rwbjGRlJ5OKqDrw HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/c/CodashopOfficialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/desktop/aef0ced3/cssbin/www-main-desktop-watch-page-skeleton.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/c/CodashopOfficialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000
Source: global traffic	HTTP traffic detected: GET /s/desktop/aef0ced3/jsbin/web-animations-next-lite.min.vflset/web-animations-next-lite.min.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/c/CodashopOfficialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000
Source: global traffic	HTTP traffic detected: GET /s/desktop/aef0ced3/jsbin/custom-elements-es5-adapter.vflset/custom-elements-es5-adapter.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/c/CodashopOfficialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000
Source: global traffic	HTTP traffic detected: GET /s/desktop/aef0ced3/jsbin/webcomponents-sd.vflset/webcomponents-sd.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/c/CodashopOfficialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000
Source: global traffic	HTTP traffic detected: GET /s/desktop/aef0ced3/jsbin/intersection-observer.min.vflset/intersection-observer.min.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/c/CodashopOfficialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000
Source: global traffic	HTTP traffic detected: GET /s/desktop/aef0ced3/jsbin/scheduler.vflset/scheduler.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/c/CodashopOfficialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000
Source: global traffic	HTTP traffic detected: GET /s/desktop/aef0ced3/jsbin/www-i18n-constants-en_US.vflset/www-i18n-constants.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/c/CodashopOfficialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000
Source: global traffic	HTTP traffic detected: GET /s/desktop/aef0ced3/jsbin/www-tampering.vflset/www-tampering.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/c/CodashopOfficialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000
Source: global traffic	HTTP traffic detected: GET /s/desktop/aef0ced3/jsbin/spf.vflset/spf.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/c/CodashopOfficialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000
Source: global traffic	HTTP traffic detected: GET /s/desktop/aef0ced3/jsbin/network.vflset/network.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/c/CodashopOfficialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000
Source: global traffic	HTTP traffic detected: GET /s/player/bc657243/www-player.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/c/CodashopOfficialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /s/search/audio/failure.mp3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.youtube.com/c/CodashopOfficialAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_YorkRange: bytes=0-
Source: global traffic	HTTP traffic detected: GET /vi/WlW4UAl3MyM/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLAfP1nKtBDWEA5EpV7mBk3_zYjAOg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/search/audio/no_input.mp3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.youtube.com/c/CodashopOfficialAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_YorkRange: bytes=0-
Source: global traffic	HTTP traffic detected: GET /vi/Ih70PEQTTDY/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLALHBCF72cYBrxdigsUR4DNW7Fdsg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/PJmoRowiRGk/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLDUPUfm9CSZCVGvWLrJsa8oWCBGXw HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/FXzvFug0Rv4/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLB8iZOish3K05X5DCLbrJRzh2WrfQ HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/search/audio/open.mp3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.youtube.com/c/CodashopOfficialAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_YorkRange: bytes=0-
Source: global traffic	HTTP traffic detected: GET /vi/gUlM_p1zHbI/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLBmin9DtU5PRqVl3aMTiMtQAbpbsg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/jxuUMURYxTk/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLBu-FJQRllUvGNmQ-LUjLbFqPwSFg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=2084972247&ei=hKdJZeO7KUwF4FO0xP912cA&ip=17.28.87.40&id=o-AF3UPRDR6kwoBZYP7xFM0QJaAAP023kI9uHvuI6jZiJc9&itag=18&source=youtube&requiressl=yes&mh=X6&mm=176%2C38672%2C78489&mn=jZI31%2CxRsVL%2COpNcx&ms=jZI31%2CxRsVL%2COpNcx&mv=D&mvi=5&pl=45&ctier=L&initcwndbps=3789802&siu=5&spc=EHFu4S-pELXaUxqU3UD7dcpDAKe8Szp7Qg8UoxUSWd7i&vprv=5&svpuc=5&mime=video%2Fmp4&ns=iEZciFFzjfedNEp1g7fD6bHG&cnr=45&ratebypass=yes&dur=97197914&lmt=5648562622015301&mt=2084972247&fvip=3&c=WEB&txp=3789802&n=yPnmMBsShnIXoVDQ&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=OxnxRW0rN-WMwnFKj5bUfwDc8RJUrndMLWQlirfdvfZE9S4zFUq0IJTsbSZQEyaqE4ud3PgfpRgzM9SCBaH3fqHVzvBtrpi4ZDYuJdcvxfK5&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=OxnxRW0rN-WMwnFKj5bUfwDc8RJUrndMLWQlirfdvfZE9S4zFUq0IJTsbSZQEyaqE4ud3PgfpRgzM9SCBaH3fqHVzvBtrpi4ZDYuJdcvxfK5 HTTP/1.1Host: rr5---sn-q4flrn7y.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=2084972247&ei=hKdJZeO7KUwF4FO0xP912cA&ip=17.28.87.40&id=o-AF3UPRDR6kwoBZYP7xFM0QJaAAP023kI9uHvuI6jZiJc9&itag=18&source=youtube&requiressl=yes&mh=X6&mm=176%2C38672%2C78489&mn=jZI31%2CxRsVL%2COpNcx&ms=jZI31%2CxRsVL%2COpNcx&mv=D&mvi=5&pl=45&initcwndbps=3789802&siu=5&spc=EHFu4S-pELXaUxqU3UD7dcpDAKe8Szp7Qg8UoxUSWd7i&vprv=5&svpuc=5&mime=video%2Fmp4&ns=iEZciFFzjfedNEp1g7fD6bHG&cnr=45&ratebypass=yes&dur=97197914&lmt=5648562622015301&mt=2084972247&fvip=3&c=WEB&txp=3789802&n=yPnmMBsShnIXoVDQ&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=OxnxRW0rN-WMwnFKj5bUfwDc8RJUrndMLWQlirfdvfZE9S4zFUq0IJTsbSZQEyaqE4ud3PgfpRgzM9SCBaH3fqHVzvBtrpi4ZDYuJdcvxfK5&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=OxnxRW0rN-WMwnFKj5bUfwDc8RJUrndMLWQlirfdvfZE9S4zFUq0IJTsbSZQEyaqE4ud3PgfpRgzM9SCBaH3fqHVzvBtrpi4ZDYuJdcvxfK5 HTTP/1.1Host: rr5---sn-q4flrn7y.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: youtube.comConnection: keep-alivePragma: no-cacheCache-Control: no-cachesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dk73p6C27bkfmV5NMayA05oaT5XMgc0K8QHs6Flf4XuhKNqxjANXo78d712mysuU5fk51JTxKxU=s160-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /MMiaEh74vF-aNPK4AaYN7dI5UnvGz6UShkgEnPmZSb3m97mf81-I9OjIWNYeqy8i4nXUW4fbqac=w1138-fcrop64=1,00005a57ffffa5a8-k-c0xffffffff-no-nd-rj HTTP/1.1Host: yt3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/search/audio/success.mp3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.youtube.com/c/CodashopOfficialAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_YorkRange: bytes=0-
Source: global traffic	HTTP traffic detected: GET /sw.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.youtube.com/c/CodashopOfficialUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=2084972247&ei=hKdJZeO7KUwF4FO0xP912cA&ip=17.28.87.40&id=o-AF3UPRDR6kwoBZYP7xFM0QJaAAP023kI9uHvuI6jZiJc9&itag=18&source=youtube&requiressl=yes&mh=X6&mm=176%2C38672%2C78489&mn=jZI31%2CxRsVL%2COpNcx&ms=jZI31%2CxRsVL%2COpNcx&mv=D&mvi=5&pl=45&initcwndbps=3789802&siu=5&spc=EHFu4S-pELXaUxqU3UD7dcpDAKe8Szp7Qg8UoxUSWd7i&vprv=5&svpuc=5&mime=video%2Fmp4&ns=iEZciFFzjfedNEp1g7fD6bHG&cnr=45&ratebypass=yes&dur=97197914&lmt=5648562622015301&mt=2084972247&fvip=3&c=WEB&txp=3789802&n=yPnmMBsShnIXoVDQ&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=OxnxRW0rN-WMwnFKj5bUfwDc8RJUrndMLWQlirfdvfZE9S4zFUq0IJTsbSZQEyaqE4ud3PgfpRgzM9SCBaH3fqHVzvBtrpi4ZDYuJdcvxfK5&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=OxnxRW0rN-WMwnFKj5bUfwDc8RJUrndMLWQlirfdvfZE9S4zFUq0IJTsbSZQEyaqE4ud3PgfpRgzM9SCBaH3fqHVzvBtrpi4ZDYuJdcvxfK5 HTTP/1.1Host: rr5---sn-q4flrn7y.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=2084972247&ei=hKdJZeO7KUwF4FO0xP912cA&ip=17.28.87.40&id=o-AF3UPRDR6kwoBZYP7xFM0QJaAAP023kI9uHvuI6jZiJc9&itag=18&source=youtube&requiressl=yes&mh=X6&mm=176%2C38672%2C78489&mn=jZI31%2CxRsVL%2COpNcx&ms=jZI31%2CxRsVL%2COpNcx&mv=D&mvi=5&pl=45&ctier=L&initcwndbps=3789802&siu=5&spc=EHFu4S-pELXaUxqU3UD7dcpDAKe8Szp7Qg8UoxUSWd7i&vprv=5&svpuc=5&mime=video%2Fmp4&ns=iEZciFFzjfedNEp1g7fD6bHG&cnr=45&ratebypass=yes&dur=97197914&lmt=5648562622015301&mt=2084972247&fvip=3&c=WEB&txp=3789802&n=yPnmMBsShnIXoVDQ&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=OxnxRW0rN-WMwnFKj5bUfwDc8RJUrndMLWQlirfdvfZE9S4zFUq0IJTsbSZQEyaqE4ud3PgfpRgzM9SCBaH3fqHVzvBtrpi4ZDYuJdcvxfK5&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=OxnxRW0rN-WMwnFKj5bUfwDc8RJUrndMLWQlirfdvfZE9S4zFUq0IJTsbSZQEyaqE4ud3PgfpRgzM9SCBaH3fqHVzvBtrpi4ZDYuJdcvxfK5 HTTP/1.1Host: rr5---sn-q4flrn7y.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=2084972247&ei=hKdJZeO7KUwF4FO0xP912cA&ip=17.28.87.40&id=o-AF3UPRDR6kwoBZYP7xFM0QJaAAP023kI9uHvuI6jZiJc9&itag=18&source=youtube&requiressl=yes&mh=X6&mm=176%2C38672%2C78489&mn=jZI31%2CxRsVL%2COpNcx&ms=jZI31%2CxRsVL%2COpNcx&mv=D&mvi=5&pl=45&initcwndbps=3789802&siu=5&spc=EHFu4S-pELXaUxqU3UD7dcpDAKe8Szp7Qg8UoxUSWd7i&vprv=5&svpuc=5&mime=video%2Fmp4&ns=iEZciFFzjfedNEp1g7fD6bHG&cnr=45&ratebypass=yes&dur=97197914&lmt=5648562622015301&mt=2084972247&fvip=3&c=WEB&txp=3789802&n=yPnmMBsShnIXoVDQ&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=OxnxRW0rN-WMwnFKj5bUfwDc8RJUrndMLWQlirfdvfZE9S4zFUq0IJTsbSZQEyaqE4ud3PgfpRgzM9SCBaH3fqHVzvBtrpi4ZDYuJdcvxfK5&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=OxnxRW0rN-WMwnFKj5bUfwDc8RJUrndMLWQlirfdvfZE9S4zFUq0IJTsbSZQEyaqE4ud3PgfpRgzM9SCBaH3fqHVzvBtrpi4ZDYuJdcvxfK5 HTTP/1.1Host: rr5---sn-q4flrn7y.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=2084972247&ei=hKdJZeO7KUwF4FO0xP912cA&ip=17.28.87.40&id=o-AF3UPRDR6kwoBZYP7xFM0QJaAAP023kI9uHvuI6jZiJc9&itag=18&source=youtube&requiressl=yes&mh=X6&mm=176%2C38672%2C78489&mn=jZI31%2CxRsVL%2COpNcx&ms=jZI31%2CxRsVL%2COpNcx&mv=D&mvi=5&pl=45&ctier=L&initcwndbps=3789802&siu=5&spc=EHFu4S-pELXaUxqU3UD7dcpDAKe8Szp7Qg8UoxUSWd7i&vprv=5&svpuc=5&mime=video%2Fmp4&ns=iEZciFFzjfedNEp1g7fD6bHG&cnr=45&ratebypass=yes&dur=97197914&lmt=5648562622015301&mt=2084972247&fvip=3&c=WEB&txp=3789802&n=yPnmMBsShnIXoVDQ&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=OxnxRW0rN-WMwnFKj5bUfwDc8RJUrndMLWQlirfdvfZE9S4zFUq0IJTsbSZQEyaqE4ud3PgfpRgzM9SCBaH3fqHVzvBtrpi4ZDYuJdcvxfK5&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=OxnxRW0rN-WMwnFKj5bUfwDc8RJUrndMLWQlirfdvfZE9S4zFUq0IJTsbSZQEyaqE4ud3PgfpRgzM9SCBaH3fqHVzvBtrpi4ZDYuJdcvxfK5 HTTP/1.1Host: rr5---sn-q4flrn7y.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/desktop/aef0ced3/jsbin/serviceworker-kevlar-appshell.vflset/serviceworker-kevlar-appshell.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /manifest.webmanifest HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://www.youtube.com/c/CodashopOfficialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /s/player/bc657243/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/c/CodashopOfficialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /vi/gUlM_p1zHbI/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLBmin9DtU5PRqVl3aMTiMtQAbpbsg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/FXzvFug0Rv4/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLB8iZOish3K05X5DCLbrJRzh2WrfQ HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/PJmoRowiRGk/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLDUPUfm9CSZCVGvWLrJsa8oWCBGXw HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/att/get?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /vi/jxuUMURYxTk/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLBu-FJQRllUvGNmQ-LUjLbFqPwSFg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/guide?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /vi/Ih70PEQTTDY/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLALHBCF72cYBrxdigsUR4DNW7Fdsg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sw.js_data HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /dk73p6C27bkfmV5NMayA05oaT5XMgc0K8QHs6Flf4XuhKNqxjANXo78d712mysuU5fk51JTxKxU=s160-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /MMiaEh74vF-aNPK4AaYN7dI5UnvGz6UShkgEnPmZSb3m97mf81-I9OjIWNYeqy8i4nXUW4fbqac=w1138-fcrop64=1,00005a57ffffa5a8-k-c0xffffffff-no-nd-rj HTTP/1.1Host: yt3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/WlW4UAl3MyM/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLAfP1nKtBDWEA5EpV7mBk3_zYjAOg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/lvz?evtid=ACd6Ktyy4CpeOJYoGLZrUI6-04kWtC61_teFSd322Tpk8_1v8gvqIbjrDkUqOXhRFcBBl8wFGhXOthpgY02HXnlgdUCTEEas5A&req_ts=1716678027&pg=MainAppBootstrap%3AUnclassified&az=1&sigh=AB9vU41_uQp6RALZ9zm2viXQa8klyEvhzw HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/962985656/?backend=innertube&cname=1&cver=2_20240524_00_00&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240524_00_00%3Bptype%3Dcview%3Btype%3Dcview%3Butuid%3D17z6J2vL4GUL6a_A-lMtGQ&foc_id=17z6J2vL4GUL6a_A-lMtGQ&label=followon_cvisit&ptype=cview&utuid=17z6J2vL4GUL6a_A-lMtGQ HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/c/CodashopOfficialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/962985656/?backend=innertube&cname=1&cver=2_20240524_00_00&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240524_00_00%3Bptype%3Dcview%3Btype%3Dcview%3Butuid%3D17z6J2vL4GUL6a_A-lMtGQ&foc_id=17z6J2vL4GUL6a_A-lMtGQ&label=followon_cvisit&ptype=cview&utuid=17z6J2vL4GUL6a_A-lMtGQ&cv_attributed=0 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app_shell HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/lvz?evtid=ACd6Ktyy4CpeOJYoGLZrUI6-04kWtC61_teFSd322Tpk8_1v8gvqIbjrDkUqOXhRFcBBl8wFGhXOthpgY02HXnlgdUCTEEas5A&req_ts=1716678027&pg=MainAppBootstrap%3AUnclassified&az=1&sigh=AB9vU41_uQp6RALZ9zm2viXQa8klyEvhzw HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=XKB46mGyrGuK-wWMB8eTLKJddbphlvoTJNOqfV1KxQNtucI70ub0W5hjPdDyfJsSUhYT1Efa06urM0E-fe05wX221EpF9NmLJ-OmKnTCG8_IEml_LOfUQnSALhmkbZ9izgNDtPr6CvKWLFPa9EeofqDnUW6clekP2FimXhbko1w
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/962985656/?backend=innertube&cname=1&cver=2_20240524_00_00&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240524_00_00%3Bptype%3Dcview%3Btype%3Dcview%3Butuid%3D17z6J2vL4GUL6a_A-lMtGQ&foc_id=17z6J2vL4GUL6a_A-lMtGQ&label=followon_cvisit&ptype=cview&utuid=17z6J2vL4GUL6a_A-lMtGQ&cv_attributed=0&is_vtc=0&random=2035814151 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=XKB46mGyrGuK-wWMB8eTLKJddbphlvoTJNOqfV1KxQNtucI70ub0W5hjPdDyfJsSUhYT1Efa06urM0E-fe05wX221EpF9NmLJ-OmKnTCG8_IEml_LOfUQnSALhmkbZ9izgNDtPr6CvKWLFPa9EeofqDnUW6clekP2FimXhbko1w
Source: global traffic	HTTP traffic detected: GET /s/desktop/aef0ced3/cssbin/www-main-desktop-home-page-skeleton.css HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/player?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/962985656/?backend=innertube&cname=1&cver=2_20240524_00_00&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240524_00_00%3Bptype%3Dcview%3Btype%3Dcview%3Butuid%3D17z6J2vL4GUL6a_A-lMtGQ&foc_id=17z6J2vL4GUL6a_A-lMtGQ&label=followon_cvisit&ptype=cview&utuid=17z6J2vL4GUL6a_A-lMtGQ&cv_attributed=0&is_vtc=0&random=2035814151 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=XKB46mGyrGuK-wWMB8eTLKJddbphlvoTJNOqfV1KxQNtucI70ub0W5hjPdDyfJsSUhYT1Efa06urM0E-fe05wX221EpF9NmLJ-OmKnTCG8_IEml_LOfUQnSALhmkbZ9izgNDtPr6CvKWLFPa9EeofqDnUW6clekP2FimXhbko1w
Source: global traffic	HTTP traffic detected: GET /s/desktop/aef0ced3/jsbin/www-searchbox.vflset/www-searchbox.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /s/player/bc657243/player_ias.vflset/en_US/captions.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1716699643&ei=m21SZtHfBLG26dsPlueskAw&ip=8.46.123.175&id=o-AAByu6biCgl7iDSq70mIQ45oE6y--isGJjdDpQA5viBb&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=LW&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsny6&ms=au%2Crdu&mv=u&mvi=2&pl=25&spc=UWF9fyGhjMmI6YCwKplxIQ0cf4NW2823HDFhnpeilF6Je7I8qcwkKUeht4Z7&svpuc=1&ns=rs6FwNCx7nX3DZRBf0lXHTIQ&sabr=1&rqh=1&mt=1716677528&fvip=5&keepalive=yes&c=WEB&smc=1&n=hYMFD6O-BAa23A&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgBUwT1FK1SAX452JmnBE4ilqOAQ-gxMypvUzy-M2keQcCIQD-hbOnXCYgpdY1SkUfmPfv2Q9EH-nU4EfzbhqdSHoHrQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIhAPvzdLU4uwJGyGeccU2Xwwge7C8hj0ecAF6YqFp_R6qdAiAj3VpUV93hlVl1GyRBAaIc5520oWionJA3kw_n7yRomw%3D%3D&cpn=O-o7NTyOH_Xb-gSb&cver=2.20240524.00.00&rn=1 HTTP/1.1Host: rr2---sn-p5qs7nzr.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1716699643&ei=m21SZtHfBLG26dsPlueskAw&ip=8.46.123.175&id=o-AAByu6biCgl7iDSq70mIQ45oE6y--isGJjdDpQA5viBb&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=LW&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsny6&ms=au%2Crdu&mv=u&mvi=2&pl=25&spc=UWF9fyGhjMmI6YCwKplxIQ0cf4NW2823HDFhnpeilF6Je7I8qcwkKUeht4Z7&svpuc=1&ns=rs6FwNCx7nX3DZRBf0lXHTIQ&sabr=1&rqh=1&mt=1716677528&fvip=5&keepalive=yes&c=WEB&smc=1&n=hYMFD6O-BAa23A&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgBUwT1FK1SAX452JmnBE4ilqOAQ-gxMypvUzy-M2keQcCIQD-hbOnXCYgpdY1SkUfmPfv2Q9EH-nU4EfzbhqdSHoHrQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIhAPvzdLU4uwJGyGeccU2Xwwge7C8hj0ecAF6YqFp_R6qdAiAj3VpUV93hlVl1GyRBAaIc5520oWionJA3kw_n7yRomw%3D%3D&cpn=O-o7NTyOH_Xb-gSb&cver=2.20240524.00.00&rn=2 HTTP/1.1Host: rr2---sn-p5qs7nzr.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/WlW4UAl3MyM/hqdefault.jpg?sqp=-oaymwEcCNACELwBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLB2P6U67krPl_BOH9xUJPAYE3UStA HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/att/get?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /api/stats/playback?ns=yt&el=profilepage&cpn=O-o7NTyOH_Xb-gSb&ver=2&cmt=0.02&fmt=396&fs=0&rt=3.66&euri=https%3A%2F%2Fwww.youtube.com%2Fc%2FCodashopOfficial&lact=11638&cl=635991227&mos=0&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240524.00.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&autoplay=1&delay=9&hl=en_US&cr=US&len=46.861&fexp=v1%2C23952866%2C30430%2C2736%2C18612%2C76094%2C54572%2C73455%2C230596%2C85201%2C19107%2C6789%2C9958%2C6271%2C133212%2C14625955%2C11684381%2C7111%2C21854%2C9932%2C4557%2C9954%2C1192%2C7913%2C18583%2C4147%2C2819%2C2%2C6689%2C2007%2C9072%2C5244%2C23908%2C2196%2C5115%2C3472%2C383%2C1026%2C19%2C2%2C1082%2C21%2C641%2C2099%2C1447%2C2744%2C101%2C2658%2C1033%2C2%2C3703%2C8%2C832%2C671%2C1317%2C1222%2C1477%2C492%2C1008%2C4076%2C39%2C9%2C46%2C830%2C1538%2C713%2C2326%2C259%2C2%2C8%2C761%2C596%2C508%2C244&rtn=6&afmt=251&muted=0&docid=WlW4UAl3MyM&ei=m21SZtHfBLG26dsPlueskAw&plid=AAYZT0D0iRDyMquL&referrer=https%3A%2F%2Fwww.youtube.com%2Fc%2FCodashopOfficial&of=wbAUJoLFDaeeOSJrHXH1sg&vm=CAEQABgEOjJBSHFpSlRJeHRTTUhYSzdEdG1fakFHRHRxaWtUYWlNWVI3V19xQksxOXdjTGJLTFJqUWJfQVBta0tESll1cDM1aXUzRkVicnN4TjNkMzRFYkVqYjNlQlFqcjNES3VGTk1maDRZU3htOVZEVGFXVmg4dEg1SV9NeFlyU01nM1NKMHo3SzJHanZFa1NvemdKQjFOUmdoAg HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOPX-YouTube-Page-Label: youtube.desktop.web_20240524_00_RC00sec-ch-ua-arch: "x86"X-Goog-Request-Time: 1716678045299X-YouTube-Page-CL: 636796567X-Goog-Event-Time: 1716678045299X-YouTube-Utc-Offset: -240sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""X-YouTube-Time-Zone: America/New_Yorksec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-full-version: "117.0.5938.134"X-YouTube-Client-Name: 1X-YouTube-Client-Version: 2.20240524.00.00X-Goog-Visitor-Id: CgsxclQyM0t0SEJEUSiK28myBjIKCgJVUxIEGgAgQQ%3D%3DX-YouTube-Ad-Signals: dt=1716678033322&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1264&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=imageAccept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/c/CodashopOfficialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEG
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/next?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /ptracking?html5=1&video_id=WlW4UAl3MyM&cpn=O-o7NTyOH_Xb-gSb&ei=m21SZtHfBLG26dsPlueskAw&ptk=youtube_none&pltype=contentugc&m=AzE_ovgoe015OKaVEKaPk8s_w_4KfRhDyvP0XC_CPddOByXQ7KOlaes58Yqgt_qtjG2Gwqte6gis7fhUSL8VLQoP HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOPX-YouTube-Page-Label: youtube.desktop.web_20240524_00_RC00sec-ch-ua-arch: "x86"X-YouTube-Page-CL: 636796567sec-ch-ua-platform-version: "10.0.0"X-YouTube-Utc-Offset: -240sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""X-YouTube-Time-Zone: America/New_Yorksec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-full-version: "117.0.5938.134"X-YouTube-Client-Name: 1X-YouTube-Client-Version: 2.20240524.00.00X-Goog-Visitor-Id: CgsxclQyM0t0SEJEUSiK28myBjIKCgJVUxIEGgAgQQ%3D%3DX-YouTube-Ad-Signals: dt=1716678041110&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1264&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=imageAccept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/c/CodashopOfficialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /s/player/bc657243/player_ias.vflset/en_US/endscreen.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/att/get?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /vi/WlW4UAl3MyM/hqdefault.jpg?sqp=-oaymwEcCNACELwBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLB2P6U67krPl_BOH9xUJPAYE3UStA HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/bc657243/player_ias.vflset/en_US/offline.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=IYroABEbf6js7ctpYztTms3FnJMhWwzbkNr9ATAcd-MkA0BLgO7BajDEv3vREJmm9VOegT8ON7HV5aDWll82agU88oCxlngovjKD23J6pqHbe_qc9szYRi1urxIVsVfX7APNQ2FmpMPTyORan3ieq8saZoIYM-lUp0xh9Ydxvyc
Source: global traffic	HTTP traffic detected: GET /s/player/bc657243/player_ias.vflset/en_US/miniplayer.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/att/get?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /api/stats/watchtime?ns=yt&el=profilepage&cpn=O-o7NTyOH_Xb-gSb&ver=2&cmt=2.161&fmt=396&fs=0&rt=6.006&euri=https%3A%2F%2Fwww.youtube.com%2Fc%2FCodashopOfficial&lact=1072&cl=635991227&state=playing&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240524.00.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&autoplay=1&delay=9&hl=en_US&cr=US&len=46.861&rtn=16&afmt=251&idpj=-8&ldpj=-2&rti=6&st=0&et=2.161&muted=0&docid=WlW4UAl3MyM&ei=m21SZtHfBLG26dsPlueskAw&plid=AAYZT0D0iRDyMquL&referrer=https%3A%2F%2Fwww.youtube.com%2Fc%2FCodashopOfficial&of=wbAUJoLFDaeeOSJrHXH1sg&vm=CAEQABgEOjJBSHFpSlRJeHRTTUhYSzdEdG1fakFHRHRxaWtUYWlNWVI3V19xQksxOXdjTGJLTFJqUWJfQVBta0tESll1cDM1aXUzRkVicnN4TjNkMzRFYkVqYjNlQlFqcjNES3VGTk1maDRZU3htOVZEVGFXVmg4dEg1SV9NeFlyU01nM1NKMHo3SzJHanZFa1NvemdKQjFOUmdoAg HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOPX-YouTube-Page-Label: youtube.desktop.web_20240524_00_RC00sec-ch-ua-arch: "x86"X-Goog-Request-Time: 1716678047647X-YouTube-Page-CL: 636796567X-Goog-Event-Time: 1716678047647X-YouTube-Utc-Offset: -240sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""X-YouTube-Time-Zone: America/New_Yorksec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-full-version: "117.0.5938.134"X-YouTube-Client-Name: 1X-YouTube-Client-Version: 2.20240524.00.00X-Goog-Visitor-Id: CgsxclQyM0t0SEJEUSiK28myBjIKCgJVUxIEGgAgQQ%3D%3DX-YouTube-Ad-Signals: dt=1716678033322&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1264&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=imageAccept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/c/CodashopOfficialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/browse?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /s/player/bc657243/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=VY7jTweO0i0BqZZap8-yanquJIOKNKbo1d3HBpUJHqRE_Z11FCWeFY_Mk8OO1cwT9htSPSISuOC5ieuLG7sFUO9hivPzNhZln-LO9ylJGerYBYWu3axFCBLlTnq6EplgiTmCStEQRnxurGbYic6ZGJv1GUeXv2954KWDAKN2DfU
Source: global traffic	HTTP traffic detected: GET /s/desktop/aef0ced3/img/favicon.ico HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1716699643&ei=m21SZtHfBLG26dsPlueskAw&ip=8.46.123.175&id=o-AAByu6biCgl7iDSq70mIQ45oE6y--isGJjdDpQA5viBb&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=LW&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsny6&ms=au%2Crdu&mv=u&mvi=2&pl=25&spc=UWF9fyGhjMmI6YCwKplxIQ0cf4NW2823HDFhnpeilF6Je7I8qcwkKUeht4Z7&svpuc=1&ns=rs6FwNCx7nX3DZRBf0lXHTIQ&sabr=1&rqh=1&mt=1716677528&fvip=5&keepalive=yes&c=WEB&smc=1&n=hYMFD6O-BAa23A&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgBUwT1FK1SAX452JmnBE4ilqOAQ-gxMypvUzy-M2keQcCIQD-hbOnXCYgpdY1SkUfmPfv2Q9EH-nU4EfzbhqdSHoHrQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIhAPvzdLU4uwJGyGeccU2Xwwge7C8hj0ecAF6YqFp_R6qdAiAj3VpUV93hlVl1GyRBAaIc5520oWionJA3kw_n7yRomw%3D%3D&cpn=O-o7NTyOH_Xb-gSb&cver=2.20240524.00.00&rn=3 HTTP/1.1Host: rr2---sn-p5qs7nzr.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1716699643&ei=m21SZtHfBLG26dsPlueskAw&ip=8.46.123.175&id=o-AAByu6biCgl7iDSq70mIQ45oE6y--isGJjdDpQA5viBb&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=LW&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsny6&ms=au%2Crdu&mv=u&mvi=2&pl=25&spc=UWF9fyGhjMmI6YCwKplxIQ0cf4NW2823HDFhnpeilF6Je7I8qcwkKUeht4Z7&svpuc=1&ns=rs6FwNCx7nX3DZRBf0lXHTIQ&sabr=1&rqh=1&mt=1716677528&fvip=5&keepalive=yes&c=WEB&smc=1&n=hYMFD6O-BAa23A&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgBUwT1FK1SAX452JmnBE4ilqOAQ-gxMypvUzy-M2keQcCIQD-hbOnXCYgpdY1SkUfmPfv2Q9EH-nU4EfzbhqdSHoHrQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIhAPvzdLU4uwJGyGeccU2Xwwge7C8hj0ecAF6YqFp_R6qdAiAj3VpUV93hlVl1GyRBAaIc5520oWionJA3kw_n7yRomw%3D%3D&cpn=O-o7NTyOH_Xb-gSb&cver=2.20240524.00.00&rn=4 HTTP/1.1Host: rr2---sn-p5qs7nzr.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sw.js_data HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19868.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7373075910951068210&__req=d&__rev=1013770602&__s=%3A%3Afjuzaa&__spin_b=trunk&__spin_r=1013770602&__spin_t=1716678010&__user=0&dpr=1&jazoest=2936&lsd=AVrj9UP_w8I&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/th/9Z66e_kIUHiT36NNaH3ECtVnZbQwRKz1JAady_W2534.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=VY7jTweO0i0BqZZap8-yanquJIOKNKbo1d3HBpUJHqRE_Z11FCWeFY_Mk8OO1cwT9htSPSISuOC5ieuLG7sFUO9hivPzNhZln-LO9ylJGerYBYWu3axFCBLlTnq6EplgiTmCStEQRnxurGbYic6ZGJv1GUeXv2954KWDAKN2DfU
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1716699643&ei=m21SZtHfBLG26dsPlueskAw&ip=8.46.123.175&id=o-AAByu6biCgl7iDSq70mIQ45oE6y--isGJjdDpQA5viBb&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=LW&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsny6&ms=au%2Crdu&mv=u&mvi=2&pl=25&spc=UWF9fyGhjMmI6YCwKplxIQ0cf4NW2823HDFhnpeilF6Je7I8qcwkKUeht4Z7&svpuc=1&ns=rs6FwNCx7nX3DZRBf0lXHTIQ&sabr=1&rqh=1&mt=1716677528&fvip=5&keepalive=yes&c=WEB&smc=1&n=hYMFD6O-BAa23A&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgBUwT1FK1SAX452JmnBE4ilqOAQ-gxMypvUzy-M2keQcCIQD-hbOnXCYgpdY1SkUfmPfv2Q9EH-nU4EfzbhqdSHoHrQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIhAPvzdLU4uwJGyGeccU2Xwwge7C8hj0ecAF6YqFp_R6qdAiAj3VpUV93hlVl1GyRBAaIc5520oWionJA3kw_n7yRomw%3D%3D&cpn=O-o7NTyOH_Xb-gSb&cver=2.20240524.00.00&rn=5 HTTP/1.1Host: rr2---sn-p5qs7nzr.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19868.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7373075910951068210&__req=e&__rev=1013770602&__s=%3A%3Afjuzaa&__spin_b=trunk&__spin_r=1013770602&__spin_t=1716678010&__user=0&dpr=1&jazoest=2936&lsd=AVrj9UP_w8I&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/962985656/?backend=innertube&cname=1&cver=2_20240524&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240524%3Bptype%3Df_view%3Btype%3Dview%3Butuid%3D17z6J2vL4GUL6a_A-lMtGQ%3Butvid%3DWlW4UAl3MyM&excl_rlsa=1&ptype=f_view&random=384058337&utuid=17z6J2vL4GUL6a_A-lMtGQ HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOPX-YouTube-Page-Label: youtube.desktop.web_20240524_00_RC00sec-ch-ua-arch: "x86"X-YouTube-Page-CL: 636796567sec-ch-ua-platform-version: "10.0.0"X-YouTube-Utc-Offset: -240sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""X-YouTube-Time-Zone: America/New_Yorksec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-full-version: "117.0.5938.134"X-YouTube-Client-Name: 1X-YouTube-Client-Version: 2.20240524.00.00X-Goog-Visitor-Id: CgsxclQyM0t0SEJEUSiK28myBjIKCgJVUxIEGgAgQQ%3D%3DX-YouTube-Ad-Signals: dt=1716678041110&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1264&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=imageAccept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/c/CodashopOfficialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/962985656/?backend=innertube&cname=1&cver=2_20240524&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240524%3Bptype%3Df_view%3Btype%3Dview%3Butuid%3D17z6J2vL4GUL6a_A-lMtGQ%3Butvid%3DWlW4UAl3MyM&excl_rlsa=1&ptype=f_view&random=384058337&utuid=17z6J2vL4GUL6a_A-lMtGQ HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /api/stats/watchtime?ns=yt&el=profilepage&cpn=O-o7NTyOH_Xb-gSb&ver=2&cmt=12.162&fmt=396&fs=0&rt=16.007&euri=https%3A%2F%2Fwww.youtube.com%2Fc%2FCodashopOfficial&lact=26&cl=635991227&state=playing&volume=100%2C100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240524.00.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&autoplay=1&delay=9&hl=en_US&cr=US&len=46.861&rtn=26&afmt=251&idpj=-8&ldpj=-2&dtm=1&rti=16&st=2.161%2C7.228&et=7.228%2C12.162&muted=0%2C0&docid=WlW4UAl3MyM&ei=m21SZtHfBLG26dsPlueskAw&plid=AAYZT0D0iRDyMquL&referrer=https%3A%2F%2Fwww.youtube.com%2Fc%2FCodashopOfficial&of=wbAUJoLFDaeeOSJrHXH1sg&vm=CAEQABgEOjJBSHFpSlRJeHRTTUhYSzdEdG1fakFHRHRxaWtUYWlNWVI3V19xQksxOXdjTGJLTFJqUWJfQVBta0tESll1cDM1aXUzRkVicnN4TjNkMzRFYkVqYjNlQlFqcjNES3VGTk1maDRZU3htOVZEVGFXVmg4dEg1SV9NeFlyU01nM1NKMHo3SzJHanZFa1NvemdKQjFOUmdoAg HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOPX-YouTube-Page-Label: youtube.desktop.web_20240524_00_RC00sec-ch-ua-arch: "x86"X-Goog-Request-Time: 1716678057645X-YouTube-Page-CL: 636796567X-Goog-Event-Time: 1716678057645X-YouTube-Utc-Offset: -240sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""X-YouTube-Time-Zone: America/New_Yorksec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-full-version: "117.0.5938.134"X-YouTube-Client-Name: 1X-YouTube-Client-Version: 2.20240524.00.00X-Goog-Visitor-Id: CgsxclQyM0t0SEJEUSiK28myBjIKCgJVUxIEGgAgQQ%3D%3DX-YouTube-Ad-Signals: dt=1716678033322&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1264&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=imageAccept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/c/CodashopOfficialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /s/player/bc657243/player_ias.vflset/en_US/annotations_module.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/c/CodashopOfficialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /generate_204?VhK7pQ HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/c/CodashopOfficialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/962985656/?backend=innertube&cname=1&cver=2_20240524&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240524%3Bptype%3Df_view%3Btype%3Dview%3Butuid%3D17z6J2vL4GUL6a_A-lMtGQ%3Butvid%3DWlW4UAl3MyM&excl_rlsa=1&is_vtc=0&ptype=f_view&random=213147044&utuid=17z6J2vL4GUL6a_A-lMtGQ HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=VY7jTweO0i0BqZZap8-yanquJIOKNKbo1d3HBpUJHqRE_Z11FCWeFY_Mk8OO1cwT9htSPSISuOC5ieuLG7sFUO9hivPzNhZln-LO9ylJGerYBYWu3axFCBLlTnq6EplgiTmCStEQRnxurGbYic6ZGJv1GUeXv2954KWDAKN2DfU
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1716699643&ei=m21SZtHfBLG26dsPlueskAw&ip=8.46.123.175&id=o-AAByu6biCgl7iDSq70mIQ45oE6y--isGJjdDpQA5viBb&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=LW&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsny6&ms=au%2Crdu&mv=u&mvi=2&pl=25&spc=UWF9fyGhjMmI6YCwKplxIQ0cf4NW2823HDFhnpeilF6Je7I8qcwkKUeht4Z7&svpuc=1&ns=rs6FwNCx7nX3DZRBf0lXHTIQ&sabr=1&rqh=1&mt=1716677528&fvip=5&keepalive=yes&c=WEB&smc=1&n=hYMFD6O-BAa23A&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgBUwT1FK1SAX452JmnBE4ilqOAQ-gxMypvUzy-M2keQcCIQD-hbOnXCYgpdY1SkUfmPfv2Q9EH-nU4EfzbhqdSHoHrQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIhAPvzdLU4uwJGyGeccU2Xwwge7C8hj0ecAF6YqFp_R6qdAiAj3VpUV93hlVl1GyRBAaIc5520oWionJA3kw_n7yRomw%3D%3D&cpn=O-o7NTyOH_Xb-gSb&cver=2.20240524.00.00&rn=6 HTTP/1.1Host: rr2---sn-p5qs7nzr.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dk73p6C27bkfmV5NMayA05oaT5XMgc0K8QHs6Flf4XuhKNqxjANXo78d712mysuU5fk51JTxKxU=s176-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/962985656/?backend=innertube&cname=1&cver=2_20240524&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240524%3Bptype%3Df_view%3Btype%3Dview%3Butuid%3D17z6J2vL4GUL6a_A-lMtGQ%3Butvid%3DWlW4UAl3MyM&excl_rlsa=1&is_vtc=0&ptype=f_view&random=213147044&utuid=17z6J2vL4GUL6a_A-lMtGQ HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=VY7jTweO0i0BqZZap8-yanquJIOKNKbo1d3HBpUJHqRE_Z11FCWeFY_Mk8OO1cwT9htSPSISuOC5ieuLG7sFUO9hivPzNhZln-LO9ylJGerYBYWu3axFCBLlTnq6EplgiTmCStEQRnxurGbYic6ZGJv1GUeXv2954KWDAKN2DfU
Source: global traffic	HTTP traffic detected: GET /dk73p6C27bkfmV5NMayA05oaT5XMgc0K8QHs6Flf4XuhKNqxjANXo78d712mysuU5fk51JTxKxU=s176-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/desktop/aef0ced3/img/favicon_144x144.png HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/c/CodashopOfficialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /s/desktop/aef0ced3/img/favicon_32x32.png HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/c/CodashopOfficialAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /s/desktop/aef0ced3/img/favicon_144x144.png HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /s/desktop/aef0ced3/img/favicon_32x32.png HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=f7=4000&tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /2MO50Gc HTTP/1.1Host: bit.lyConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mobile/ff?pid=OrganicA&c=Codashop HTTP/1.1Host: www.freefiremobile.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_505.2.dr	String found in binary or memory: @twitter: https://www.twitter.com/_uloga equals www.twitter.com (Twitter)
Source: chromecache_713.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/A4tfXiHOGrs/ equals www.facebook.com (Facebook)
Source: chromecache_713.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/Ga6vBwdwgUx/ equals www.facebook.com (Facebook)
Source: chromecache_738.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/HAC-_9WTKIm/ equals www.facebook.com (Facebook)
Source: chromecache_424.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/OKBVmODmb-W/ equals www.facebook.com (Facebook)
Source: chromecache_689.2.dr	String found in binary or memory: "&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ma+";dc_exteid="+rb+";met="+ma+";ecn"+ma+"="+ma+";etm1="+ma+";eid1="+nb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],closePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ia+"&label=adclose&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],progressPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: "&uga="+hb+"&vm="+md},videostatsDelayplayUrl:{baseUrl:"https://s.youtube.com/api/stats/delayplay?cl="+pc+"&docid="+z+"&ei="+W+"&feature="+m+"&fexp="+Fe+"&ns="+Ga+"&plid="+L+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+Pc+"&el="+Ad+"&len="+Xb+"&of="+Eb+"&uga="+hb+"&vm="+md},videostatsWatchtimeUrl:{baseUrl:"https://s.youtube.com/api/stats/watchtime?cl="+pc+"&docid="+z+"&ei="+W+"&feature="+m+"&fexp="+Fe+"&ns="+Ga+"&plid="+L+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+ equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: "=",adInfoRenderer:{adHoverTextButtonRenderer:{button:{buttonRenderer:{style:"STYLE_UNKNOWN",size:"SIZE_DEFAULT",isDisabled:!1,icon:{iconType:"INFO_OUTLINE"},navigationEndpoint:{clickTrackingParams:Rc,openPopupAction:{popup:{aboutThisAdRenderer:{url:(je.privateDoNotAccessOrElseTrustedResourceUrlWrappedValue="https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ga+"&origin=www.youtube.com&ata_theme="+ye,je),trackingParams:ob+"="}},popupType:"DIALOG"}},trackingParams:ob+"="}}, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: "="},trackingParams:ob+"="}},adLayoutLoggingData:{serializedAdServingDataEntry:gd},skipPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ia+"&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ma+";dc_exteid="+rb+";met="+ma+";ecn"+ma+"="+ma+";etm1="+ma+";eid1="+nb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],layoutId:"1ID7Gdwk2vV7OZ1A"}}, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: "="}},hoverText:{runs:[{text:Ec}]},trackingParams:ob+"="}},adVideoId:Ec,impressionPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ia+"&label=video_companion_reshow_tracking"}],adLayoutLoggingData:{serializedAdServingDataEntry:yd},isContentVideoCompanion:!0,associatedCompositePlayerBytesLayoutId:ab}},adSlotLoggingData:{serializedSlotAdServingDataEntry:Ie}}}],adBreakHeartbeatParams:"Q0FBJTNE",frameworkUpdates:{entityBatchUpdate:{mutations:[{entityKey:Te, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: "AxAA&ase=2&num="+ma+"&cid="+ia+"&ad_cpn=%5BAD_CPN%5D&sig="+ca+"&adurl="+ed+"&label=video_click_to_advertiser_site&ctype="+Lb+"&ms=[CLICK_MS]",target:"TARGET_NEW_WINDOW",attributionSrcMode:"ATTRIBUTION_SRC_MODE_LABEL_CHROME"}},trackingParams:ob+"=",backgroundImage:{thumbnail:{thumbnails:[{url:""}]},trackingParams:ob+"="},abandonCommands:{commands:[{clickTrackingParams:Rc,loggingUrls:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Ec+"&cid="+ia+"&label=video_abandon&ad_mt=[AD_MT]&ad_tos=[AD_TOS]&ad_wat=[AD_WAT]&final=[FINAL]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: "https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ga+"&origin=www.youtube.com&ata_theme="+ye,eg),trackingParams:ob+"="}},popupType:"DIALOG"}},icon:{iconType:"INFO_OUTLINE"},trackingParams:ob+"="}},hoverText:{runs:[{text:yd}]},trackingParams:ob+"="}},flyoutCtaRenderer:{flyoutCtaRenderer:{image:{thumbnail:{thumbnails:[{url:"https://yt3.ggpht.com/ytc/"+He+"=s176-c-k-c0x00ffffff-no-rj"}]},trackingParams:ob+"="},headline:{text:de,isTemplated:!1,trackingParams:ob+"="},description:{text:ab, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: "https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ga+"&origin=www.youtube.com&ata_theme="+ye,rh),trackingParams:ob+"="}},popupType:"DIALOG"}},trackingParams:ob+"="}},hoverText:{runs:[{text:Ob}]},trackingParams:ob+"="}},adVideoId:Ec,impressionPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ia+"&label=video_companion_impression_tracking"}],adLayoutLoggingData:{serializedAdServingDataEntry:od},associatedCompositePlayerBytesLayoutId:ab}}, equals www.youtube.com (Youtube)
Source: chromecache_620.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func
Source: chromecache_469.2.dr	String found in binary or memory: (g.dq(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.dq(c,"www.youtube.com"),d=c.toString()):(c=XBa(d),eJ(c)&&(d=c));c=new g.tP(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_812.2.dr	String found in binary or memory: ;var R=A.window,S,T,U=(null==R?void 0:null==(S=R.yt)?void 0:S.config_)\|\|(null==R?void 0:null==(T=R.ytcfg)?void 0:T.data_)\|\|{};B("yt.config_",U);var V=Object.freeze("document.appendChild document.body.appendChild document.querySelector document.querySelectorAll history.back history.go".split(" ")),W=Object.freeze("fonts.googleapis.com s0.2mdn.net securepubads.g.doubleclick.net ssl.google-analytics.com static.doubleclick.net www.google-analytics.com www.googletagservices.com www.youtube.com youtube.com".split(" ")),X=Object.freeze(["pkedcjkdefgpdelpbcmbmeomcjbeemfm","fjhoaacokmgbjemoflkofnenfaiekifl","enhhojjnijigcajfphajepfemndkmdlo"]),aa= equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: Bd+"&ad_len="+Tb+"&ad_mt=[AD_MT]&ad_sys=YT%3AAdSense-Viral%2CAdSense-Viral&ad_v="+Ec+"&aqi="+W+"&ad_rmp="+ma+"&sli="+ma}],errorPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Ec+"&cid="+ia+"&label=videoplayfailed[ERRORCODE]"}],mutePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Ec+"&cid="+ia+"&label=admute&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: C+"____________"+D+"AxAA&sigh="+Ec+"&cid="+ia+"&ad_cpn=[AD_CPN]&lact=[LACT]"},{baseUrl:"https://www.youtube.com/api/stats/ads?ver="+ma+"&ns="+ma+"&event="+ma+"&device="+ma+"&content_v="+z+"&el="+Ad+"&ei="+W+"&devicever="+c+"&bti="+nb+"&format="+ic+"&break_type="+ma+"&conn=[CONN]&cpn=[CPN]&lact=[LACT]&m_pos="+ma+"&mt=[MT]&p_h=[P_H]&p_w=[P_W]&rwt=[RWT]&sdkv="+mb+"&slot_pos="+ma+"&slot_len="+ma+"&vis=[VIS]&vol=[VOL]&wt=[WT]&ad_cpn=[AD_CPN]&ad_id="+Bd+"&ad_len="+Tb+"&ad_mt=[AD_MT]&ad_sys=YT%3AAdSense-Viral%2CAdSense-Viral&ad_v="+ equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: C+"____________"+D+"AxAA&sigh="+Ec+"&cid="+ia+"&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ma+";dc_exteid="+rb+";met="+ma+";ecn"+ma+"="+ma+";etm1="+ma+";eid1="+nb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],closePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Ec+"&cid="+ia+"&label=adclose&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}], equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: C+"____________"+D+"AxAA&sigh="+z+"&cid="+ia+"&label=adpause&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ma+";dc_exteid="+rb+";met="+ma+";ecn"+ma+"="+ma+";etm1="+ma+";eid1="+hb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],rewindPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ia+"&label=adrewind&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}], equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: DK.prototype.getUrl=function(a,b){return"https://www.gstatic.com/youtube/img/icons/web/"+b.style+"/"+a+"/v"+b.version+"/"+b.size+"px.svg"}; equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: Ec+"&aqi="+W+"&ad_rmp="+ma+"&sli="+ma}],errorPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ia+"&label=videoplayfailed[ERRORCODE]"}],mutePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ia+"&label=admute&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ma+";dc_exteid="+rb+";met="+ma+";ecn"+ma+"="+ equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: G("div",{class:"mini-app-splash-screen-view-model-wiz__loading-icon"},G(Pu,null,function(){var D="loading_animation_"+c.value;ewb({className:"mini-app-splash-screen-view-model-wiz__loading-icon-animation",lottiePlayerProps:{animationRef:d,animationConfig:{name:D,path:"https://www.gstatic.com/youtube/img/lottie/playables_loading_animation/"+D+".json",loop:!0,autoplay:!0}}})})),G("div",{class:"mini-app-splash-screen-view-model-wiz__timeout-message-container"},b.title&&G("h3",{class:"mini-app-splash-screen-view-model-wiz__timeout-heading"}, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: J_.prototype.navigateToAboutTheseResultsPage=function(){var a=uba("https://www.youtube.com/howyoutubeworks/product-features/search/");a?Mc(window,a,"_blank"):tl(Error("Could not get url for 'About These Results' help center"))}; equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: L+".json",loop:!1,autoplay:!1,rendererSettings:{viewBoxOnly:!0,className:"animated-like-icon"}}},totalFrames:119,lazyLoad:!0};break a;case"NOTIFICATION_BELL":L={lottiePlayerProps:{animationConfig:{name:O?"notification_bell_dark":"notification_bell_light",path:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_"+(O?"dark":"light")+".json",loop:!1,autoplay:!1,rendererSettings:{className:"animated-subscribe-icon"}}},totalFrames:79,lazyLoad:!1};break a;}L=void 0}return L}, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: MR.prototype.publish=function(a,b){return this.isDisposed()?!1:this.pubSub_.publish.apply(this.pubSub_,arguments)};var S6b=ea(["https://www.youtube.com/iframe_api"]),NR=function(){this.playerResolver_=pj();this.playerPromise_=this.playerResolver_.promise;this.playerVars_=null;this.playbackEndedCallback_=Ug;this.playbackDurationSeconds_=0},T6b=function(a){var b=function(){return window.YT&&"function"===typeof window.YT.ready}; equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: Object.assign({},{name:"INCORRECT",path:"https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizIncorrect_LightTheme_01a.json",renderer:"svg"},Acc,{rendererSettings:{viewBoxOnly:!0,viewBoxSize:"26 26 80 80"}});a.correctnessAnimationProps=[];a.correctnessAnimationRefs=[];return a}; equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: Pc+"&el="+Ad+"&len="+Xb+"&of="+Eb+"&uga="+hb+"&vm="+md},ptrackingUrl:{baseUrl:"https://www.youtube.com/ptracking?ei="+W+"&m="+pb+"&oid="+Eb+"&plid="+L+"&pltype="+gd+"&ptchn="+Eb+"&ptk="+H+"&video_id="+z},qoeUrl:{baseUrl:"https://s.youtube.com/api/stats/qoe?cl="+pc+"&docid="+z+"&ei="+W+"&event="+Vd+"&feature="+m+"&fexp="+Fe+"&ns="+Ga+"&plid="+L+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+Pc},atrUrl:{baseUrl:"https://s.youtube.com/api/stats/atr?docid="+z+"&ei="+W+"&feature="+ equals www.youtube.com (Youtube)
Source: chromecache_469.2.dr	String found in binary or memory: VSa=function(a,b){if(!a.j["0"]){var c=new iK("0","fakesb",{video:new eK(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new vQ(new g.tP("http://www.youtube.com/videoplayback"),c,"fake"):new GQ(new g.tP("http://www.youtube.com/videoplayback"),c,new jQ(0,0),new jQ(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: Wec.idomCompat=!0;var Xec={LIKE:"LIKE",NOTIFICATION_BELL:"NOTIFICATION_BELL"};function Yec(a){var b=a.animatedIconType,c=a.active,d=a.themeOverride,e=void 0===a.animationRef?{}:a.animationRef,g=a.staticIconFn,l=function(){a:{var L=b();var O=null==d?void 0:d(),W;O=(null==O?void 0:O.useDarkTheme)\|\|(null==(W=jq().resolve(iq(pH)))?void 0:W());switch(L){case"LIKE":L="animated_like_icon_";L=B("enable_cairo_refresh_signature_moments_web")?L+(O?"dark_v4":"light_v4"):L+(O?"v2_dark":"v2_light");L={lottiePlayerProps:{animationConfig:{name:L,path:"https://www.gstatic.com/youtube/img/lottie/animated_like_icon/"+ equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: ["NOTIFICATION_BELL",{name:"notification_bell_light",nameDarkTheme:"notification_bell_dark",path:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_light.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_dark.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"NOTIFICATION_BELL",totalFrames:79,lazyLoad:!1}]]);var Ysb=ea(["https://www.gstatic.com/external_hosted/lottie/lottie_light.js"]),Zsb=Zg(Ysb),KG;function $sb(){return KG?KG:window.lottie?KG=Promise.resolve(window.lottie):KG=new Promise(function(a,b){var c=document.createElement("script");c.addEventListener("load",function(){a(lottie)}); equals www.youtube.com (Youtube)
Source: chromecache_424.2.dr	String found in binary or memory: __d("FacebookCookieConsentCustomization",["fbt","ix","JSResourceForInteraction","XCookiesPolicyControllerRouteBuilder","isBaseline4EnabledForLoggedOut","isCNILEnabledForLoggedOut","lazyLoadComponent"],(function(a,b,c,d,e,f,g,h,i){"use strict";var j=c("lazyLoadComponent")(c("JSResourceForInteraction")("FacebookCometCookieConsentDialogDataSettings.react").__setRef("FacebookCookieConsentCustomization"));a=function(){var a,b,d,e=null;c("isBaseline4EnabledForLoggedOut")()\|\|c("isCNILEnabledForLoggedOut")()?(b=i("1954651"),d=i("1954649"),e=h._("More options")):(b=i("856481"),d=i("856481"),e=h._("Manage Data Settings"));a=(a=(a=c("XCookiesPolicyControllerRouteBuilder").buildUri({}).getQualifiedUri())==null?void 0:(a=a.setDomain("www.facebook.com"))==null?void 0:a.toString())!=null?a:"";return{essentialCookiesOnly:!1,faviconDark:d,faviconLight:b,policyUrl:a,productName:"FACEBOOK",secondaryAction:{label:e,viewReference:j}}};b=a;g["default"]=b}),226); equals www.facebook.com (Facebook)
Source: chromecache_469.2.dr	String found in binary or memory: a))):this.Md(g.RV(a.errorMessage)):this.Md(TV(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.to(c,{hl:a})),this.Md(TV(this,"GENERIC_WITH_LINK_AND_CPN",c,!0)),d.qc&&!d.D&&D_a(this,function(f){if(g.mU(f,b.api,!QR(b.api.U()))){f={as3:!1,html5:!0,player:!0,cpn:b.api.getVideoData().clientPlaybackNonce};var h=b.api;h.Ac("onFeedbackArticleRequest",{articleId:3037019,helpContext:"player_error", equals www.youtube.com (Youtube)
Source: chromecache_469.2.dr	String found in binary or memory: a.BASE_YT_URL)\|\|"")\|\|OBa(this.yf)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";"adunit"===h?d=this.D?"embedded":"detailpage":"embedded"===h\|\|this.N?d=wB(d,h,ZTa):h&&(d="embedded");this.La=d;vua();h=null;d=b?b.playerStyle:a.ps;f=g.Fb($Ta,d);!d\|\|f&&!this.N\|\|(h=d);this.playerStyle=h;this.qa=(this.K=g.Fb($Ta,this.playerStyle))&&"play"!==this.playerStyle&&"jamboard"!==this.playerStyle;this.gp=!this.qa;this.Sa=vB(!1,a.disableplaybackui);this.disablePaidContentOverlay=vB(!1, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: a.content.firstChild);return cJc=a},{mode:V("kevlar_poly_si_batch_j014")?2:3});var eJc;var w1=function(){var a=M.apply(this,arguments)\|\|this;a.dark=!1;a.headerBackgroundLight="https://www.gstatic.com/youtube/img/labs/early_access_web_background_expanded_ai_2x.jpg";a.headerBackgroundDark="https://www.gstatic.com/youtube/img/labs/early_access_web_background_expanded_ai_2x.jpg";a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};return a}; equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: a.content.firstChild);return mxc=a},{mode:V("kevlar_poly_si_batch_j014")?2:3});var pxc;var qxc=function(){var a=M.apply(this,arguments)\|\|this;a.rightSquigglyDark="https://www.gstatic.com/youtube/img/handles/handles_squiggle_1_dark_v1.svg";a.rightSquigglyLight="https://www.gstatic.com/youtube/img/handles/handles_squiggle_1_light_v1.svg";a.leftSquigglyDark="https://www.gstatic.com/youtube/img/handles/handles_squiggle_2_dark_v1.svg";a.leftSquigglyLight="https://www.gstatic.com/youtube/img/handles/handles_squiggle_2_light_v1.svg";a.leftSquiggly=a.leftSquigglyLight;a.rightSquiggly=a.rightSquigglyLight; equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: a.content.firstChild);return pxc=a},{mode:V("kevlar_poly_si_batch_j014")?2:3});var rxc;var sxc=function(){var a=M.apply(this,arguments)\|\|this;a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};a.image0DarkSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_4_dark.svg";a.image0LightSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_4_light.svg";a.image1DarkSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_6_dark.svg";a.image1LightSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_6_light.svg"; equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: a.content.firstChild);return vCc=a},{mode:V("kevlar_poly_si_batch_j033")?2:3});var xCc;var yCc=SC(HB("DELETE_FROM_DOWNLOADS",{},"Delete from downloads"));var zCc={url:"https://www.gstatic.com/youtube/img/useredu/smart_downloads_optin_banner.svg"}; equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: a.content.firstChild);return vcc=a},{mode:3});var zcc;var Acc={autoplay:!1,loop:!1},Bcc={simpleText:""},Ccc=function(){var a=M.apply(this,arguments)\|\|this;a.isLoading=!1;a.usesPanelLockup=!1;a.enableRefreshWeb=B("enable_cairo_refresh_web");a.selectedItemIndex=-1;a.baseCorrectLottiePlayerAnimationConfig=Object.assign({},{name:"CORRECT",path:"https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizCorrect_LightTheme_01a.json",renderer:"svg"},Acc,{rendererSettings:{viewBoxOnly:!0,viewBoxSize:"12 20 80 80"}});a.baseIncorrectLottiePlayerAnimationConfig= equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: a.content.insertBefore(X().content.cloneNode(!0),a.content.firstChild);return txc=a},{mode:V("kevlar_poly_si_batch_j014")?2:3});var vxc;var wxc=function(){var a=M.apply(this,arguments)\|\|this;a.JSC$16409_squigglyBackgroundDark="https://www.gstatic.com/youtube/img/handles/handles_curl_section_illustration_dark_v1.svg";a.JSC$16409_squigglyBackgroundLight="https://www.gstatic.com/youtube/img/handles/handles_curl_section_illustration_light_v1.svg";a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};a.squigglyBackground=a.JSC$16409_squigglyBackgroundLight;return a}; equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: a.content.insertBefore(X().content.cloneNode(!0),a.content.firstChild);return vxc=a},{mode:V("kevlar_poly_si_batch_j022")?2:3});var xxc;var yxc=function(){var a=M.apply(this,arguments)\|\|this;a.JSC$16412_squigglyBackgroundDark="https://www.gstatic.com/youtube/img/handles/handles_squiggle_3_dark.svg";a.JSC$16412_squigglyBackgroundLight="https://www.gstatic.com/youtube/img/handles/handles_squiggle_3_light.svg";a.squigglyBackground=a.JSC$16412_squigglyBackgroundLight;a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};return a}; equals www.youtube.com (Youtube)
Source: chromecache_469.2.dr	String found in binary or memory: a.hl);this.region=b?b.contentRegion\|\|"US":yB("US",a.cr);this.hostLanguage=b?b.hostLanguage\|\|"en":yB("en",a.host_language);this.Uo=!this.Bc&&Math.random()<g.DI(this.experiments,"web_player_api_logging_fraction");this.Za=!this.Bc;this.enabledEngageTypes=new Set;this.deviceIsAudioOnly=!(null==b\|\|!b.deviceIsAudioOnly);this.Jd=xB(this.Jd,a.ismb);this.gp?(r=a.vss_host\|\|"s.youtube.com","s.youtube.com"===r&&(r=MR(this.Ea)\|\|"www.youtube.com")):r="video.google.com";this.cn=r;dUa(this,a,!0);this.Na=new lR;g.N(this, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: a.image3DarkSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_5_dark.svg";a.image3LightSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_5_light_v2.svg";a.image0SquigglyBackground=a.image0LightSquigglyBackground;a.image1SquigglyBackground=a.image1LightSquigglyBackground;a.image3SquigglyBackground=a.image3LightSquigglyBackground;return a}; equals www.youtube.com (Youtube)
Source: chromecache_469.2.dr	String found in binary or memory: a.severity,e,UJ(a.details),f)}else this.ea.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.Wd(a.errorCode,a.details),d&&"manifest.net.connect"===a.errorCode&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.DC)(),AX(a,"manifest",function(h){b.K=!0;b.ma("pathprobe",h)},function(h){b.Wd(h.errorCode,h.details)}))}}; equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"LigQMVuP3nAx3LwQfSGhgYmqsEWANi"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"65",offsetEndMilliseconds:"30"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"51",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"LigQMVuP3nAx3LwQfSGhgYmqsEWANi"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_START",adTimeOffset:{offsetStartMilliseconds:"330100",offsetEndMilliseconds:"594666"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"0",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"by"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"73",offsetEndMilliseconds:"64"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"67",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"cn"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"59",offsetEndMilliseconds:"8"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"26",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"fp"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"66",offsetEndMilliseconds:"35"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"98",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"go"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"14",offsetEndMilliseconds:"87"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"79",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"nh"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_END",adTimeOffset:{offsetStartMilliseconds:"25",offsetEndMilliseconds:"13"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"32",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"nl"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"50",offsetEndMilliseconds:"67"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"96",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"ov"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"13",offsetEndMilliseconds:"2"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"52",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"ti"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"47",offsetEndMilliseconds:"84"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"uc"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"10",offsetEndMilliseconds:"zo"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"22",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"wg"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"56",offsetEndMilliseconds:"86"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"25",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"wi"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"34",offsetEndMilliseconds:"12"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"27",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"wz"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"84",offsetEndMilliseconds:"90"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"92",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: animationConfig:{name:"animated-actions-foreground",autoplay:!1,loop:!1,path:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_sparkle_"+(bdc()?"dark":"light")+(B("enable_cairo_refresh_signature_moments_web")?"_v3":"")+".json"}}})}))} equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: autoplay:!1,loop:!1,path:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_container_"+(bdc()?"dark":"light")+(B("enable_cairo_refresh_signature_moments_web")?"_v3":"")+".json"}}})}),d),tt(e,function(){return G(adc,{lottiePlayerProps:{animationRef:c, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: b.includes("<anonymous>"))return!0;if(b.includes("https://www.youtube.com"))return!1;a=b.split("\n");if(!a.length)return!1;if(3>=a.length&&b.includes("s.onloadeddata"))return!0;b=0;for(var c=h(a),d=c.next();!d.done;d=c.next())d=d.value,(d.includes("https://")\|\|d.includes("http://"))&&b++;return .95<b/a.length}, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: b.includes("is_youtube_video_no_longer_available")\|\|b.includes("switchScreenSizeHack")\|\|b.includes("yt_main_big_banner.js")\|\|b.includes("/YouTubeCenter.js")\|\|b.includes("/mytube.js")\|\|b.includes("JSON.parseWrapper")\|\|b.includes("/inj_js/common.js")\|\|b.includes("firebug-lite")\|\|b.includes(".repl.co/")\|\|b.includes("linkfix")\|\|a.message.includes("Access is denied for this document")&&b.includes("<anonymous>")\|\|a.message.includes("cannot be created in a document with origin 'https://www.youtube.com' and URL 'about:blank'")&& equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: b:{d=/api\/stats\/ads/;var p,q,r,w;e=null==(m=jD().objectRepresentation.adPlacements)?void 0:null==(p=m[0])?void 0:null==(q=p.adPlacementRenderer)?void 0:null==(r=q.renderer)?void 0:null==(w=r.linearAdSequenceRenderer)?void 0:w.linearAds;if(null!=e&&e.length&&(m=F(e[0],P2a))&&(m=m.pings,null!=m&&m.impressionPings))for(p=[].concat(ha(m.impressionPings)),m.progressPings&&(p=[].concat(ha(p),ha(m.progressPings))),m=h(p),p=m.next();!p.done;p=m.next())if(p=p.value,p.baseUrl&&d.test(p.baseUrl)){m=p.baseUrl.replace("https://www.youtube.com", equals www.youtube.com (Youtube)
Source: chromecache_469.2.dr	String found in binary or memory: b=this.api.U();a=this.api.getVideoData();var c="";b.C\|\|(b=g.OR(b),0===b.indexOf("www.")&&(b=b.substring(4)),c=g.xT(a)?"Watch on YouTube Music":"youtube.com"===b?"Watch on YouTube":g.pJ("Watch on $WEBSITE",{WEBSITE:b}));this.updateValue("title",c)}; equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: c+"&m_pos_ms="+ic}},adSlotLoggingData:{serializedSlotAdServingDataEntry:Ad}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_END",adTimeOffset:{offsetStartMilliseconds:hb,offsetEndMilliseconds:hb},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+W+"&m_pos="+hb+"&token=ALHj"+la+"&index="+ma+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+ equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: c+"&m_pos_ms="+ic}},adSlotLoggingData:{serializedSlotAdServingDataEntry:Vd}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:ic,offsetEndMilliseconds:ic},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+W+"&m_pos="+Lb+"&token=ALHj"+la+"&index="+ma+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+ equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: c+"&m_pos_ms="+ic}},adSlotLoggingData:{serializedSlotAdServingDataEntry:ne}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:ic,offsetEndMilliseconds:ic},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+W+"&m_pos="+Lb+"&token=ALHj"+la+"&index="+ma+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+ equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: c+"&m_pos_ms="+ic}},adSlotLoggingData:{serializedSlotAdServingDataEntry:oa}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:ic,offsetEndMilliseconds:hb},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+W+"&m_pos="+Lb+"&token=ALHj"+la+"&index="+ma+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+ equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: completePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ia+"&label=videoplaytime100&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ma+";dc_exteid="+rb+";met="+ma+";ecn"+ma+"="+ma+";etm1="+ma+";eid1="+hb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],activeViewTracking:{trafficType:"ACTIVE_VIEW_TRAFFIC_TYPE_VIDEO"}},clickthroughEndpoint:{clickTrackingParams:Rc, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: dE&&dE.snapshotAndFlush()}},b),(c.flush_logs={callback:function(){uq()}},c))}},XOb);var ZOb={},$Ob=(ZOb.rendered={priority:0,callback:function(){var a=new zJa;a.increment("STARTED");if(pl("LOGGED_IN")&&"test"!==pl("SERVER_VERSION")&&"dev"!==pl("SERVER_VERSION")&&!Bja()&&!Aja()){a.increment("EXECUTING");var b=document.createElement("iframe");b.style.display="none";mca(b,2,Ub("https://accounts.youtube.com/RotateCookiesPage?origin=https://www.youtube.com&yt_pid="+pl("INNERTUBE_CONTEXT_CLIENT_NAME")));document.body&&document.body.appendChild(b);a.increment("DONE")}}},ZOb);var aPb={},bPb=(aPb.rendered={callback:function(){MKb().resume()}},aPb);var cPb={acknowledgeChannelTouStrikeCommand:zE(uM),addToPlaylistServiceEndpoint:zE(CN),addToPlaylistEndpoint:zE(CN),addUpcomingEventReminderEndpoint:zE(JM),browseEndpoint:zE(qKb),channelCreationFormEndpoint:zE(nM),channelCreationServiceEndpoint:zE(oM),claimLegacyYoutubeChannelEndpoint:zE(aM),clearSearchHistoryEndpoint:zE(BM),clearWatchHistoryEndpoint:zE(CM),commerceActionCommand:AE(ZN),createBackstagePostEndpoint:zE(VL),createCommentEndpoint:zE(jM),createCommentReplyEndpoint:zE(iM),createLiveChatPollEndpoint:zE(KM), equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: eE.prototype.remove=function(a){this.expiringStorage.remove(a)};var Tib=ea(["https://www.youtube.com/",""]),Uib=ea(["https://studio.youtube.com/",""]); equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: endFullscreenPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ia+"&label=vast_exit_fullscreen&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],activeViewMeasurablePings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+q+"&sig="+jc+"&ad_cpn=[AD_CPN]&id="+Yc+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]&avm="+ma},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+Yc+"&avm="+ma+"&dc_pubid="+ma+"&dc_exteid="+ equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: f.created=function(){this.embedHost_=Wod[pl("INNERTUBE_CLIENT_NAME")]\|\|"www.youtube.com"}; equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: f.maybeInitializeQuizLotties=function(a){var b=this;this.isDarkTheme&&(this.baseCorrectLottiePlayerAnimationConfig.path="https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizCorrect_DarkTheme_01a.json",this.baseIncorrectLottiePlayerAnimationConfig.path="https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizIncorrect_DarkTheme_01a.json");this.correctnessAnimationProps=a.map(function(c){return{animationConfig:c.isCorrect?b.baseCorrectLottiePlayerAnimationConfig:b.baseIncorrectLottiePlayerAnimationConfig, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: function X6b(a){if(a.urlEndpoint){if(a=wl(a.urlEndpoint.url),a.adurl)return Wc(a.adurl)}else if(a.watchEndpoint)return"//www.youtube.com/watch?v="+a.watchEndpoint.videoId;return null} equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: function pfb(){var a,b,c,d,e,g,l,m,p,q,r;return t(function(w){switch(w.nextAddress){case 1:qa(w,2),a=h(Efb()),b=a.next();case 4:if(b.done)return w.return(1);d=c=b.value;e=d.jsonRepresentation;g=d.objectRepresentation;l=btoa(e);m="data:application/json;base64,"+l;p=new Request(m);Object.defineProperty(p,"url",{get:function(){return"https://www.youtube.com/youtubei/v1/player?key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8&prettyPrint=false"}}); equals www.youtube.com (Youtube)
Source: chromecache_469.2.dr	String found in binary or memory: g.$R=function(a){var b=g.OR(a);oUa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_469.2.dr	String found in binary or memory: g.OR=function(a){a=MR(a.Ea);return"www.youtube-nocookie.com"===a?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_469.2.dr	String found in binary or memory: g.Va("Goog_AdSense_Lidar_getUrlSignalsList",Fkb);var GBa=pa(["//tpc.googlesyndication.com/sodar/",""]);var ZNa={I6a:0,F6a:1,C6a:2,D6a:3,E6a:4,H6a:5,G6a:6};var Hpa=(new Date).getTime();var Eka="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),Fka=/\bocr\b/;var Hka=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;g.y(ev,g.Dd);ev.prototype.dispose=function(){window.removeEventListener("offline",this.C);window.removeEventListener("online",this.C);this.Vn.Pj(this.G);delete ev.instance}; equals www.youtube.com (Youtube)
Source: chromecache_469.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f,h){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=h?"music.youtube.com":g.OR(this);e="www.youtube.com"===c;!f&&d&&e?f="https://youtu.be/"+a:g.IR(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),TC&&(a=vpa())&&(b.ebc=a));return g.to(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: hoverText:{runs:[{text:Vd}]},trackingParams:ob+"="}},adVideoId:Ec,impressionPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Ec+"&cid="+ia+"&label=video_companion_impression_tracking"}],adLayoutLoggingData:{serializedAdServingDataEntry:Ad},associatedCompositePlayerBytesLayoutId:ab}},adSlotLoggingData:{serializedSlotAdServingDataEntry:$a}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_SELF_START"}},renderer:{actionCompanionAdRenderer:{headline:{text:Vd, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: iNb.prototype.openToast=function(){var a;null!=(a=this.currentToast)&&a.opened\|\|(this.queue.length?(this.currentToast=this.queue.shift(),this.currentToast.open()):this.currentPersistentToast&&this.currentPersistentToast.open())};var lNb=new hq("TOAST_MANAGER_TOKEN");var mNb=["https://fonts.gstatic.com","https://tv.youtube.com","https://www.gstatic.com","https://www.youtube.com"],nNb=Dl("wil_icon_max_concurrent_fetches",Infinity),pNb=function(a,b){var c=this;this.iconSet=a;this.appDirection=b;this.responsePromises={};this.iconCache={};this.queuedResponseResolvers={};this.numFetches=this.counter=0;this.cacheStorageAvailable=!!Ca.caches;this.cacheStorageAsync=Promise.resolve(void 0);this.cacheStorageSync=void 0;this.requestAninmationFrameResolver=null;this.renderingMode= equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: ia+"&label=adrewind&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],resumePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Ec+"&cid="+ia+"&label=adresume&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ma+";dc_exteid="+rb+";met="+ma+";ecn"+ma+"="+ma+";etm1="+ma+";eid1="+hb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],skipPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: if(b){var c=Usb.get(b);c\|\|(c=[],Usb.set(b,c));var d=pl("ELEMENT_POOL_CONFIG")\|\|{};c.length>=(void 0!==d[b]?d[b]:pl("ELEMENT_POOL_DEFAULT_CAP",0))\|\|c.push(a)}else yq(new Am("Element pool should only handle custom elements:",a.nodeName))},Usb=new Map,Wsb=0,Vsb=0;var JG=new Map([["FACE_HAPPY",{name:"animated_face_happy_light",nameDarkTheme:"animated_face_happy_dark",path:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_happy.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_happy.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"FACE_HAPPY",totalFrames:121,lazyLoad:!1}],["FACE_MEH",{name:"animated_face_meh_light",nameDarkTheme:"animated_face_meh_dark", equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: isTemplated:!0,trackingParams:ob+"="}},trackingParams:ob+"="}},adInfoRenderer:{adHoverTextButtonRenderer:{button:{buttonRenderer:{style:"STYLE_UNKNOWN",size:"SIZE_DEFAULT",isDisabled:!1,serviceEndpoint:{clickTrackingParams:Rc,openPopupAction:{popup:{aboutThisAdRenderer:{url:(Sf.privateDoNotAccessOrElseTrustedResourceUrlWrappedValue="https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ga+"&origin=www.youtube.com&ata_theme="+ye,Sf),trackingParams:ob+"="}},popupType:"DIALOG"}}, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: k(Vtd,M);f=Vtd.prototype;f.created=function(){var a=jq();B("kevlar_clear_duplicate_pref_cookie")&&Em(Li,function(){var b=oi.get("PREF");b&&!/f\d=/.test(b)&&(b=El("kevlar_duplicate_pref_cookie_domain_override"),document.cookie=b?"PREF=null;domain="+b+";expires=Thu, 01 Jan 1970 00:00:01 GMT":"PREF=null;domain=.www.youtube.com;expires=Thu, 01 Jan 1970 00:00:01 GMT")}); equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: k(lac,M);lac.prototype.maybeLoadAnimationBackground=function(){this.useAnimationBackground?this.lottieAnimation\|\|(this.lottieAnimation=lottie.loadAnimation({container:this.animationBackground,loop:!0,renderer:"svg",path:"https://www.gstatic.com/youtube/img/livestream/live_chat/lottie_animation/shimmer_background.json",autoplay:!0})):this.lottieAnimation&&this.lottieAnimation.destroy()}; equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: lazyLoad:!1}],["FACE_VERY_HAPPY",{name:"animated_face_very_happy_light",nameDarkTheme:"animated_face_very_happy_dark",path:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_very_happy.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_very_happy.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"FACE_VERY_HAPPY",totalFrames:121,lazyLoad:!1}],["LIKE",{name:"animated_like_light",nameDarkTheme:"animated_like_dark", equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"FACE_SAD",totalFrames:121,lazyLoad:!1}],["FACE_UNHAPPY",{name:"animated_face_unhappy_light",nameDarkTheme:"animated_face_unhappy_dark",path:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_unhappy.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_unhappy.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"FACE_UNHAPPY",totalFrames:121, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: lottiePlayerProps:{animationRef:l,animationConfig:{name:e.uniqueId+"-background",autoplay:!1,loop:!1,path:"https://www.gstatic.com/youtube/img/lottie/smartimations/smartimation_container_"+(bBb()?"dark":"light")+".json",rendererSettings:{viewBoxOnly:!0}}}}))}),G("div",{class:"smartimation__content"},a))} equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: loudnessDb:-3.7800007}]},playerAds:[{playerLegacyDesktopWatchAdsRenderer:{playerAdParams:{showContentThumbnail:!0,enabledEngageTypes:"3,6,4,5,17,1"},gutParams:{tag:"\\4061\\ytpwmpu"},showCompanion:!0,showInstream:!0,useGut:!0}}],playbackTracking:{videostatsPlaybackUrl:{baseUrl:"https://s.youtube.com/api/stats/playback?cl="+pc+"&docid="+z+"&ei="+W+"&feature="+m+"&fexp="+Fe+"&ns="+Ga+"&plid="+L+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+Pc+"&el="+Ad+"&len="+Xb+"&of="+Eb+ equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: m+"&len="+Xb+"&ns="+Ga+"&plid="+L+"&ver="+ma,elapsedMediaTimeSeconds:5},videostatsScheduledFlushWalltimeSeconds:[10,20,30],videostatsDefaultFlushIntervalSeconds:40},captions:{playerCaptionsTracklistRenderer:{captionTracks:[{baseUrl:"https://www.youtube.com/api/timedtext?v="+z+"&caps="+lc+"&opi="+pc+"&xoaf="+ma+"&hl="+Ga+"&ip="+mb+"&ipbits="+ma+"&expire="+Hb+"&sparams=ip,ipbits,expire,v,caps,opi,xoaf&signature="+mb+"&key="+lc+"&lang="+Ea,name:{simpleText:Aa},vssId:".en-US",languageCode:"en-US",isTranslatable:!0, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: ma+";dc_exteid="+rb+";met="+ma+";ecn"+ma+"="+ma+";etm1="+ma+";eid1="+hb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],thirdQuartilePings:[{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ma+";dc_exteid="+rb+";met="+ma+";ecn"+ma+"="+ma+";etm1="+ma+";eid1="+ic+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],completePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Ec+"&cid="+ia+"&label=videoplaytime100&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: ma+";dc_exteid="+rb+";met="+ma+";ecn"+ma+"="+ma+";etm1="+ma+";eid1="+hb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],unmutePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Ec+"&cid="+ia+"&label=adunmute&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ma+";dc_exteid="+rb+";met="+ma+";ecn"+ma+"="+ma+";etm1="+ma+";eid1="+ic+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}], equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: ma+";etm1="+ma+";eid1="+hb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],unmutePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ia+"&label=adunmute&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ma+";dc_exteid="+rb+";met="+ma+";ecn"+ma+"="+ma+";etm1="+ma+";eid1="+ic+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],pausePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: ma+"="+ma+";etm1="+ma+";eid1="+hb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],pingingEndpoint:{hack:!0}}]},adRendererCommands:{impressionCommand:{clickTrackingParams:Rc,commandExecutorCommand:{commands:[{clickTrackingParams:Rc,loggingUrls:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ia+"&label=video_card_endcap_impression"}],pingingEndpoint:{hack:!0}}]}}},skipButton:{skipButtonRenderer:{message:{text:$a,isTemplated:!1,trackingParams:ob+ equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: offsetMilliseconds:15E3}],fullscreenPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Ec+"&cid="+ia+"&label=adfullscreen&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ma+";dc_exteid="+rb+";met="+ma+";ecn"+ma+"="+ma+";etm1="+ma+";eid1="+hb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],activeViewViewablePings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+ equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: p.ptrackingUrl)?void 0:H.baseUrl);var L;q.push(null==p?void 0:null==(L=p.qoeUrl)?void 0:L.baseUrl);var O;q.push(null==p?void 0:null==(O=p.atrUrl)?void 0:O.baseUrl);z=h(q);for(C=z.next();!C.done;C=z.next())if((C=C.value)&&m.test(C)){z=C.replace("https://www.youtube.com","").replace("https://s.youtube.com","");break b}}z=void 0}z&&c.push({testUrl:""+Ca.location.origin+z,baseUrl:Ca.location.origin+"/feed/download",method:"GET"})}c=0!==c.length?c[Math.floor(Math.random()*c.length)]:void 0;return(a=c)? equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: path:"https://www.gstatic.com/youtube/img/lottie/animated_like_icon/"+(B("enable_cairo_refresh_signature_moments_web")?"animated_like_icon_light_v4":"animated_like_icon_v2_light")+".json",pathDarkTheme:"https://www.gstatic.com/youtube/img/lottie/animated_like_icon/"+(B("enable_cairo_refresh_signature_moments_web")?"animated_like_icon_dark_v4":"animated_like_icon_v2_dark")+".json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"LIKE",totalFrames:119,lazyLoad:B("web_animated_like_lazy_load")}], equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: path:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_meh.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_meh.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"FACE_MEH",totalFrames:121,lazyLoad:!1}],["FACE_SAD",{name:"animated_face_sad_light",nameDarkTheme:"animated_face_sad_dark",path:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_sad.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_sad.json", equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: pausePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Ec+"&cid="+ia+"&label=adpause&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ma+";dc_exteid="+rb+";met="+ma+";ecn"+ma+"="+ma+";etm1="+ma+";eid1="+hb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],rewindPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Ec+"&cid="+ equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: pc+";dc_dbm_token="+w+";dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv="+ma+";ord="+pc+";dc_rui="+ma+";dc_exteid="+rb+";dc_av="+ma+";dc_sk="+ma+";dc_ctype="+hb+";dc_pubid="+ma+";dc_btype=3?gclid="+Pa+"&ase=2"},{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ia+"&label=video_card_endcap_action_headline_click"}],commandMetadata:{webCommandMetadata:{url:"https://www.googleadservices.com/pagead/aclk?sa=L&ai=C"+C+"____________"+ equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: pc+";dc_trk_cid="+pc+";dc_dbm_token="+w+";dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv="+ma+";ord="+pc+";dc_rui="+ma+";dc_exteid="+zc+";dc_av="+ma+";dc_sk="+ma+";dc_ctype="+hb+";dc_pubid="+ma+";dc_btype=3?gclid="+Pa+"&ase=2",attributionSrcMode:"ATTRIBUTION_SRC_MODE_LABEL_CHROME"}],fullscreenPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ia+"&label=adfullscreen&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: pingingEndpoint:{hack:!0}}]}}},skipButton:{skipButtonRenderer:{message:{text:Ec,isTemplated:!1,trackingParams:ob+"="},trackingParams:ob+"="}},adLayoutLoggingData:{serializedAdServingDataEntry:Ld},skipPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Ec+"&cid="+ia+"&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ma+";dc_exteid="+rb+";met="+ma+";ecn"+ equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: pings:{impressionPings:[{baseUrl:"https://ad.doubleclick.net/ddm/trackimp/N444803.2428500DBMSITEID/B30029229.368252041;dc_trk_aid="+pc+";dc_trk_cid="+pc+";dc_dbm_token="+w+";ord="+Hb+";dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv="+ma+";dc_rui="+ma+";dc_exteid="+rb+";dc_av="+Lb+";dc_sk="+ma+";dc_ctype="+hb+";dc_ref=http://www.youtube.com/video/"+Ec+";dc_pubid="+ma+";dc_btype=23?gclid="+Pa+"&ase=2",attributionSrcMode:"ATTRIBUTION_SRC_MODE_LABEL_CHROME"},{baseUrl:"https://www.youtube.com/pagead/adview?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: progressPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Ec+"&cid="+ia+"&label=video_skip_shown&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]",offsetMilliseconds:5E3},{baseUrl:"https://www.googleadservices.com/pagead/aclk?sa=L&ai=C"+C+"____________"+D+"AxAA&ase=2&num="+ma+"&cid="+ia+"&ad_cpn=%5BAD_CPN%5D&sig="+ca+"&adurl="+ed+"&ctype="+Lb+"&ms=[CLICK_MS]&label=video_10s_engaged_view&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=",offsetMilliseconds:1E4, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: q+"&sig="+jc+"&ad_cpn=[AD_CPN]&id="+Yc+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+Yc+"&dc_pubid="+ma+"&dc_exteid="+rb+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}],endFullscreenPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Ec+"&cid="+ia+"&label=vast_exit_fullscreen&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],activeViewMeasurablePings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+ equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: q+"&sig="+jc+"&ad_cpn=[AD_CPN]&id="+Yc+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]&avm="+ma},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+Yc+"&avm="+ma+"&dc_pubid="+ma+"&dc_exteid="+rb+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}],abandonPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Ec+"&cid="+ia+"&label=video_abandon&ad_mt=[AD_MT]&ad_tos=[AD_TOS]&ad_wat=[AD_WAT]&final=[FINAL]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: rb+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}],abandonPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ia+"&label=video_abandon&ad_mt=[AD_MT]&ad_tos=[AD_TOS]&ad_wat=[AD_WAT]&final=[FINAL]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ma+";dc_exteid="+rb+";met="+ma+";ecn"+ma+"="+ma+";etm1="+ma+";eid1="+hb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],activeViewFullyViewableAudibleHalfDurationPings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+ equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+W+"&m_pos="+hb+"&token=ALHj"+la+"&index="+ma+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+c+"&m_pos_ms="+Tb}},adSlotLoggingData:{serializedSlotAdServingDataEntry:Ad}}}, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: resumePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ia+"&label=adresume&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ma+";dc_exteid="+rb+";met="+ma+";ecn"+ma+"="+ma+";etm1="+ma+";eid1="+hb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],skipPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ia+ equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: return G("yt-smartimation",{class:mBb(p,r,e)},tt(e.experimentEnabled,function(){return G("div",{class:"smartimation__border"},G(Tvb,{className:"smartimation__border-gradient",lottiePlayerProps:{animationRef:g,animationConfig:{name:e.uniqueId+"-border",autoplay:!1,loop:!1,path:"https://www.gstatic.com/youtube/img/lottie/smartimations/smartimation_border_"+(bBb()?"dark":"light")+(B("enable_cairo_refresh_signature_moments_web")?"_v2":"")+".json"}}}))}),tt(e.experimentEnabled&&r,function(){return G("div", equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: rootVe:83769}},urlEndpoint:{url:"https://www.googleadservices.com/pagead/aclk?sa=L&ai=C"+C+"____________"+D+"AxAA&ase=2&num="+ma+"&cid="+ia+"&ad_cpn=%5BAD_CPN%5D&sig="+ca+"&adurl="+ed+"&label=video_click_to_advertiser_site&ctype="+Lb+"&ms=[CLICK_MS]",target:"TARGET_NEW_WINDOW",attributionSrcMode:"ATTRIBUTION_SRC_MODE_LABEL_CHROME"}},trackingParams:ob+"="}},durationMilliseconds:7E3,countdownRenderer:{timedPieCountdownRenderer:{trackingParams:ob+"="}},navigationEndpoint:{clickTrackingParams:Rc,loggingUrls:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_469.2.dr	String found in binary or memory: this.W.Ca&&(a.authuser=this.W.Ca);this.W.pageId&&(a.pageid=this.W.pageId);isNaN(this.cryptoPeriodIndex)\|\|(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.pc()))?e[1]:"";"ATV"===e&&(a.cdt=e);this.G=a;this.G.session_id=d;this.qa=!0;"widevine"===this.B.flavor&&(this.G.hdr="1");"playready"===this.B.flavor&&(b=Number(jR(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&0<=b&&(this.G.mfpe=""+b),this.qa=!1);b="";g.bR(this.B)?aR(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: trackName:""},{baseUrl:"https://www.youtube.com/api/timedtext?v="+z+"&caps="+lc+"&opi="+pc+"&xoaf="+ma+"&hl="+Ga+"&ip="+mb+"&ipbits="+ma+"&expire="+Hb+"&sparams=ip,ipbits,expire,v,caps,opi,xoaf&signature="+mb+"&key="+lc+"&kind="+lc+"&lang="+Ga,name:{simpleText:de},vssId:"a.it",languageCode:"it",kind:"asr",isTranslatable:!0,trackName:""}],audioTracks:[{captionTrackIndices:[0,1],defaultCaptionTrackIndex:0,visibility:"UNKNOWN",hasDefaultTrack:!0,captionsInitialState:"CAPTIONS_INITIAL_STATE_OFF_RECOMMENDED"}], equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: trackingParams:ob+"=",adInfoRenderer:{adHoverTextButtonRenderer:{button:{buttonRenderer:{style:"STYLE_UNKNOWN",size:"SIZE_DEFAULT",isDisabled:!1,icon:{iconType:"INFO_OUTLINE"},navigationEndpoint:{clickTrackingParams:Rc,openPopupAction:{popup:{aboutThisAdRenderer:{url:(Gh.privateDoNotAccessOrElseTrustedResourceUrlWrappedValue="https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ga+"&origin=www.youtube.com&ata_theme="+ye,Gh),trackingParams:ob+"="}},popupType:"DIALOG"}},trackingParams:ob+ equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: trackingParams:ob+"=",backgroundImage:{thumbnail:{thumbnails:[{url:""}]},trackingParams:ob+"="},abandonCommands:{commands:[{clickTrackingParams:Rc,loggingUrls:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ia+"&label=video_abandon&ad_mt=[AD_MT]&ad_tos=[AD_TOS]&ad_wat=[AD_WAT]&final=[FINAL]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ma+";dc_exteid="+rb+";met="+ma+";ecn"+ equals www.youtube.com (Youtube)
Source: chromecache_469.2.dr	String found in binary or memory: var D3={};var Jgb=/[&\?]action_proxy=1/,Igb=/[&\?]token=([\w-])/,Kgb=/[&\?]video_id=([\w-])/,Lgb=/[&\?]index=([\d-])/,Mgb=/[&\?]m_pos_ms=([\d-])/,Ogb=/[&\?]vvt=([\w-]*)/,Agb="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),Ngb="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),Dgb={android:"ANDROID", equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: var XJb={url:"https://www.gstatic.com/youtube/img/useredu/smart_downloads_optin_banner.gif"}; equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: weight:500},{callback:function(a){if(!a.stack)return!1;var b=a.stack.trim().split("\n");b.length&&b[0].endsWith("Error: "+a.message)&&b.shift();b.length&&b[b.length-1].includes("at window.onerror (")&&b.pop();if(!b.length)return!0;if("Script error."===a.message)return b[0].includes("www.youtube.com")\|\|2<=b.length&&b[0].startsWith("at new")&&b[1].startsWith("at window.onerror");if("Unexpected token"===a.message)return!0;a=h(b);for(b=a.next();!b.done;b=a.next())if(b=b.value,!(b.includes("<anonymous>")\|\| equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: z+"/maxresdefault.jpg",width:1280,height:720}]},embed:{iframeUrl:"https://www.youtube.com/embed/"+Ec,width:1280,height:720},title:{simpleText:oa},description:{simpleText:ye},lengthSeconds:"1156",ownerProfileUrl:"http://www.youtube.com/@"+$a,externalChannelId:Mb,isFamilySafe:!0,availableCountries:"AD AE AF AG AI AL AM AO AQ AR AS AT AU AW AX AZ BA BB BD BE BF BG BH BI BJ BL BM BN BO BQ BR BS BT BV BW BY BZ CA CC CD CF CG CH CI CK CL CM CN CO CR CU CV CW CX CY CZ DE DJ DK DM DO DZ EC EE EG EH ER ES ET FI FJ FK FM FO FR GA GB GD GE GF GG GH GI GL GM GN GP GQ GR GS GT GU GW GY HK HM HN HR HT HU ID IE IL IM IN IO IQ IR IS IT JE JM JO JP KE KG KH KI KM KN KP KR KW KY KZ LA LB LC LI LK LR LS LT LU LV LY MA MC MD ME MF MG MH MK ML MM MN MO MP MQ MR MS MT MU MV MW MX MY MZ NA NC NE NF NG NI NL NO NP NR NU NZ OM PA PE PF PG PH PK PL PM PN PR PS PT PW PY QA RE RO RS RU RW SA SB SC SD SE SG SH SI SJ SK SL SM SN SO SR SS ST SV SX SY SZ TC TD TF TG TH TJ TK TL TM TN TO TR TT TV TW TZ UA UG UM US UY UZ VA VC VE VG VI VN VU WF WS YE YT ZA ZM ZW".split(" "), equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: z,target:"TARGET_NEW_WINDOW"}},trackingParams:ob+"="}},trackingParams:ob+"="}}}},endscreen:{endscreenRenderer:{elements:[{endscreenElementRenderer:{style:"CHANNEL",image:{thumbnails:[{url:"https://yt3.ggpht.com/"+Na+"=s250-c-k-c0x00ffffff-no-rj",width:250,height:250},{url:"https://yt3.ggpht.com/"+Na+"=s400-c-k-c0x00ffffff-no-rj",width:400,height:400}]},icon:{thumbnails:[{url:"https://www.gstatic.com/youtube/img/annotations/youtube.png"}]},left:.030214407,width:.15438597,top:.37587035,aspectRatio:1, equals www.youtube.com (Youtube)
Source: chromecache_801.2.dr	String found in binary or memory: {"name":"YouTube","short_name":"YouTube","background_color":"#FFFFFF","display":"minimal-ui","start_url":"/?feature\u003dytca","scope":"/","icons":[{"src":"https://www.gstatic.com/youtube/img/branding/favicon/favicon_144x144.png","sizes":"144x144","type":"image/png"},{"src":"https://www.gstatic.com/youtube/img/branding/favicon/favicon_192x192.png","sizes":"192x192","type":"image/png"},{"src":"https://www.gstatic.com/youtube/img/web/monochrome/logo_16x16.png","sizes":"16x16","type":"image/png","purpose":"monochrome"},{"src":"https://www.gstatic.com/youtube/img/web/monochrome/logo_32x32.png","sizes":"32x32","type":"image/png","purpose":"monochrome"},{"src":"https://fonts.gstatic.com/s/i/googlematerialicons/video_youtube/v11/white-48dp/1x/gm_video_youtube_white_48dp.png","sizes":"48x48","type":"image/png","purpose":"monochrome"},{"src":"https://www.gstatic.com/youtube/img/web/monochrome/logo_512x512.png","sizes":"512x512","type":"image/png","purpose":"monochrome"}],"theme_color":"#FF0000","gcm_sender_id":"402845223712","gcm_user_visible_only":true,"related_applications":[],"capture_links":"none","shortcuts":[{"name":"Subscriptions","url":"/feed/subscriptions?feature\u003dapp_shortcuts","icons":[{"src":"https://www.gstatic.com/youtube/img/web/shortcuts/subscriptions_512x512.png","sizes":"512x512","type":"image/png","purpose":"any monochrome"}]},{"name":"Explore","url":"/feed/explore?feature\u003dapp_shortcuts","icons":[{"src":"https://www.gstatic.com/youtube/img/web/shortcuts/explore_512x512.png","sizes":"512x512","type":"image/png","purpose":"any monochrome"}]}]} equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: {adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:ic,offsetEndMilliseconds:ic},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+W+"&m_pos="+Lb+"&token=ALHj"+la+"&index="+ma+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+ equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: {adPlacementRenderer:{config:{adPlacementConfig:{kind:"zf",adTimeOffset:{offsetStartMilliseconds:"63",offsetEndMilliseconds:"83"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"59",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: {baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ma+";dc_exteid="+rb+";met="+ma+";ecn"+ma+"="+ma+";etm1="+ma+";eid1="+hb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],activeViewFullyViewableAudibleHalfDurationPings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+q+"&sig="+jc+"&ad_cpn=[AD_CPN]&id="+Yc+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]&avgm="+ma},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+Yc+"&dc_pubid="+ma+"&dc_exteid="+rb+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}], equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: {baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ma+";dc_exteid="+rb+";met="+ma+";ecn"+ma+"="+ma+";etm1="+ma+";eid1="+hb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],activeViewViewablePings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+q+"&sig="+jc+"&ad_cpn=[AD_CPN]&id="+Yc+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+Yc+"&dc_pubid="+ma+"&dc_exteid="+rb+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}], equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: {baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ma+";dc_exteid="+rb+";met="+ma+";ecn"+ma+"="+ma+";etm1="+ma+";eid1="+hb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],pingingEndpoint:{hack:!0}}]},adRendererCommands:{impressionCommand:{clickTrackingParams:Rc,commandExecutorCommand:{commands:[{clickTrackingParams:Rc,loggingUrls:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Ec+"&cid="+ia+"&label=video_card_endcap_impression"}], equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: {baseUrl:"https://www.youtube.com/pagead/adview?ai=C"+C+"____________"+D+"AxAA&sigh="+Ec+"&cid="+ia+"&ad_cpn=[AD_CPN]&lact=[LACT]"},{baseUrl:"https://www.youtube.com/api/stats/ads?ver="+ma+"&ns="+ma+"&event="+ma+"&device="+ma+"&content_v="+z+"&el="+Ad+"&ei="+W+"&devicever="+c+"&bti="+nb+"&format="+ic+"&break_type="+ma+"&conn=[CONN]&cpn=[CPN]&lact=[LACT]&m_pos="+ma+"&mt=[MT]&p_h=[P_H]&p_w=[P_W]&rwt=[RWT]&sdkv="+mb+"&slot_pos="+ma+"&slot_len="+ma+"&vis=[VIS]&vol=[VOL]&wt=[WT]&ad_cpn=[AD_CPN]&ad_id="+ equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: {instreamVideoAdRenderer:{skipOffsetMilliseconds:5E3,pings:{impressionPings:[{baseUrl:"https://ad.doubleclick.net/ddm/trackimp/N1957659.127733GOOGLE-YOUTUBE/B29940965.366940103;dc_trk_aid="+pc+";dc_trk_cid="+pc+";ord="+Hb+";dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv="+ma+";dc_rui="+ma+";dc_exteid="+rb+";dc_av="+Lb+";dc_sk="+ma+";dc_ctype="+hb+";dc_ref=http://www.youtube.com/video/"+Ec+";dc_pubid="+ma+";dc_btype=23?gclid="+Pa+"&ase=2",attributionSrcMode:"ATTRIBUTION_SRC_MODE_LABEL_CHROME"}, equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: {messageRegExp:/.Blocked a frame with origin "https:\/\/www.youtube.com" from accessing a cross-origin frame./,weight:0},{messageRegExp:/.disguiseToken./,weight:0}],callbackWeights:[{callback:function(a){var b=a.stack;if(b.includes("chrome://")\|\|b.includes("chrome-extension://")\|\|a.message.includes("chrome-extension://")\|\|b.includes("moz-extension://")\|\|b.includes("local.adguard.org")\|\|b.includes("auctioneer3.50million.club")\|\|b.includes("youtubedownloader")\|\|b.includes("youtube_home_page")\|\| equals www.youtube.com (Youtube)
Source: chromecache_689.2.dr	String found in binary or memory: {query:a.browseEndpoint.query})),e&&a.browseEndpoint.params&&(e=Ax(e,{params:a.browseEndpoint.params}));else{if(a.urlEndpoint)return a.urlEndpoint.url;a.signInEndpoint?(e="https://accounts.google.com/ServiceLogin",d={},vc.extend(d,b\|\|{},{"continue":window.location.href.split("#")[0],action_handle_signin:!0,passive:!0}),b=d):a.uploadEndpoint?e="//www.youtube.com/upload":a.liveChatEndpoint?(e=a.liveChatEndpoint,d=vc.clone(e),Oa(e.continuation)&&(g=Object.keys(e.continuation)[0],d.continuation=e.continuation[g].continuation), equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: newsklikdisini5bekbg0.3bsz4.xyz
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: cdn1.codashop.com
Source: global traffic	DNS traffic detected: DNS query: script.tapfiliate.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: cdn.onesignal.com
Source: global traffic	DNS traffic detected: DNS query: cdn-www.bluestacks.com
Source: global traffic	DNS traffic detected: DNS query: icon-library.com
Source: global traffic	DNS traffic detected: DNS query: d1qgcmfii0ptfa.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: picjj.com
Source: global traffic	DNS traffic detected: DNS query: i.ibb.co
Source: global traffic	DNS traffic detected: DNS query: bit.ly
Source: global traffic	DNS traffic detected: DNS query: www.freefiremobile.com
Source: global traffic	DNS traffic detected: DNS query: dl.dir.freefiremobile.com
Source: global traffic	DNS traffic detected: DNS query: freefiremobile-a.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: community.codashop.com
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: scontent.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: video.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: static.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: scontent-hou1-1.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: rr5---sn-q4flrn7y.googlevideo.com
Source: global traffic	DNS traffic detected: DNS query: yt3.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: rr2---sn-p5qs7nzr.googlevideo.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com

Source: unknown

HTTP traffic detected: POST /report/v4?s=SsgQzHCWroxj3eComD9Ow%2FjzXJ6JEU4l2u0D63AxKq%2F5b6O75qPYa1an9KyNcUmI1JJ5SVmVuIzebrQhw8bP0xZ9yMzQ1%2Ft5lQB%2F4Q7%2FDCUlIUJX7hziemGHRtYfgkoGIN%2BDmwc2ev02USbaCrXYDgik HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 451Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 25 May 2024 22:59:31 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SsgQzHCWroxj3eComD9Ow%2FjzXJ6JEU4l2u0D63AxKq%2F5b6O75qPYa1an9KyNcUmI1JJ5SVmVuIzebrQhw8bP0xZ9yMzQ1%2Ft5lQB%2F4Q7%2FDCUlIUJX7hziemGHRtYfgkoGIN%2BDmwc2ev02USbaCrXYDgik"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 889922e58f5c188d-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccept-Ranges: noneContent-Type: text/html; charset=utf-8Date: Sat, 25 May 2024 22:59:59 GMTServer: nginxVary: Accept-EncodingConnection: closeTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingreporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingreporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingreporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingreporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingreporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingreporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Sat, 25 May 2024 23:00:37 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Sat, 25 May 2024 23:00:37 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Sat, 25 May 2024 23:00:38 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Sat, 25 May 2024 23:00:38 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Sat, 25 May 2024 23:00:39 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Sat, 25 May 2024 23:00:39 GMTServer: gvs 1.0

Source: chromecache_720.2.dr	String found in binary or memory: http://esotericsoftware.com
Source: chromecache_395.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_395.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_689.2.dr	String found in binary or memory: http://hammerjs.github.io/
Source: chromecache_689.2.dr	String found in binary or memory: http://i1.ytimg.com/vi/
Source: chromecache_653.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_653.2.dr	String found in binary or memory: http://jqueryui.com/themeroller/?ffDefault=Arial%2CHelvetica%2Csans-serif&fsDefault=1em&fwDefault=no
Source: chromecache_689.2.dr	String found in binary or memory: http://mathiasbynens.be/
Source: chromecache_689.2.dr	String found in binary or memory: http://mths.be/fromcodepoint
Source: chromecache_689.2.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_689.2.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_689.2.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_689.2.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_469.2.dr, chromecache_516.2.dr, chromecache_667.2.dr, chromecache_689.2.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_689.2.dr, chromecache_512.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_667.2.dr, chromecache_689.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_505.2.dr	String found in binary or memory: http://www.decorator.io/worldflags
Source: chromecache_516.2.dr	String found in binary or memory: http://www.google.com/support/websearch/bin/answer.py?hl=
Source: chromecache_689.2.dr	String found in binary or memory: http://www.youtube.com/
Source: chromecache_689.2.dr	String found in binary or memory: http://www.youtube.com/video/
Source: chromecache_469.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_469.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_469.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_469.2.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_469.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_699.2.dr	String found in binary or memory: http://zavoloklom.github.io/material-design-iconic-font/
Source: chromecache_699.2.dr	String found in binary or memory: http://zavoloklom.github.io/material-design-iconic-font/license
Source: chromecache_689.2.dr	String found in binary or memory: https://accounts.google.com/AddSession
Source: chromecache_689.2.dr	String found in binary or memory: https://accounts.google.com/ServiceLogin
Source: chromecache_689.2.dr	String found in binary or memory: https://accounts.youtube.com/RotateCookiesPage?origin=https://www.youtube.com&yt_pid=
Source: chromecache_689.2.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/trackclk/N444803.2428500DBMSITEID/B30029229.368252041;dc_trk_aid=
Source: chromecache_689.2.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/trackimp/N1957659.127733GOOGLE-YOUTUBE/B29940965.366940103;dc_trk_aid
Source: chromecache_689.2.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/trackimp/N444803.2428500DBMSITEID/B30029229.368252041;dc_trk_aid=
Source: chromecache_689.2.dr	String found in binary or memory: https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid=
Source: chromecache_469.2.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_390.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/spf/2.4.0/LICENSE
Source: chromecache_689.2.dr	String found in binary or memory: https://angular.io/license
Source: chromecache_689.2.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_689.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_689.2.dr	String found in binary or memory: https://b.corp.google.com/issues/new?component=1382089&template=1853465
Source: chromecache_397.2.dr	String found in binary or memory: https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Bold.woff)
Source: chromecache_397.2.dr	String found in binary or memory: https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Bold.woff2)
Source: chromecache_397.2.dr	String found in binary or memory: https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Italic.woff)
Source: chromecache_397.2.dr	String found in binary or memory: https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Italic.woff2)
Source: chromecache_397.2.dr	String found in binary or memory: https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Light.woff)
Source: chromecache_397.2.dr	String found in binary or memory: https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Light.woff2)
Source: chromecache_397.2.dr	String found in binary or memory: https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Medium.woff)
Source: chromecache_397.2.dr	String found in binary or memory: https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Medium.woff2)
Source: chromecache_397.2.dr	String found in binary or memory: https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Regular.woff)
Source: chromecache_397.2.dr	String found in binary or memory: https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Regular.woff2)
Source: chromecache_397.2.dr	String found in binary or memory: https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Semibold.woff)
Source: chromecache_397.2.dr	String found in binary or memory: https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Semibold.woff2)
Source: chromecache_397.2.dr	String found in binary or memory: https://cdn1.codashop.com/S/content/fonts/Noto/NotoSans-Bold.woff)
Source: chromecache_397.2.dr	String found in binary or memory: https://cdn1.codashop.com/S/content/fonts/Noto/NotoSans-Bold.woff2)
Source: chromecache_397.2.dr	String found in binary or memory: https://cdn1.codashop.com/S/content/fonts/Noto/NotoSans-Italic.woff)
Source: chromecache_397.2.dr	String found in binary or memory: https://cdn1.codashop.com/S/content/fonts/Noto/NotoSans-Italic.woff2)
Source: chromecache_397.2.dr	String found in binary or memory: https://cdn1.codashop.com/S/content/fonts/Noto/NotoSans-Light.woff)
Source: chromecache_397.2.dr	String found in binary or memory: https://cdn1.codashop.com/S/content/fonts/Noto/NotoSans-Light.woff2)
Source: chromecache_397.2.dr	String found in binary or memory: https://cdn1.codashop.com/S/content/fonts/Noto/NotoSans-Regular.woff)
Source: chromecache_397.2.dr	String found in binary or memory: https://cdn1.codashop.com/S/content/fonts/Noto/NotoSans-Regular.woff2)
Source: chromecache_689.2.dr	String found in binary or memory: https://clients2.google.com/gr/gr_sync.js
Source: chromecache_499.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_499.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_499.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_499.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_499.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_669.2.dr	String found in binary or memory: https://dl.dir.freefiremobile.com/common/web_event/common/packages/spine/3.8/spine-player.css
Source: chromecache_669.2.dr	String found in binary or memory: https://dl.dir.freefiremobile.com/common/web_event/common/packages/spine/3.8/spine-player.js
Source: chromecache_669.2.dr	String found in binary or memory: https://dl.dir.freefiremobile.com/common/web_event/official2/dist/client/16fa1dd.js
Source: chromecache_669.2.dr	String found in binary or memory: https://dl.dir.freefiremobile.com/common/web_event/official2/dist/client/5ef67ad.js
Source: chromecache_669.2.dr	String found in binary or memory: https://dl.dir.freefiremobile.com/common/web_event/official2/dist/client/b379205.js
Source: chromecache_669.2.dr	String found in binary or memory: https://dl.dir.freefiremobile.com/common/web_event/official2/dist/client/c345ce3.js
Source: chromecache_669.2.dr	String found in binary or memory: https://dl.dir.freefiremobile.com/common/web_event/official2/dist/client/css/6786561.css
Source: chromecache_669.2.dr	String found in binary or memory: https://dl.dir.freefiremobile.com/common/web_event/official2/dist/client/css/e845fbd.css
Source: chromecache_669.2.dr	String found in binary or memory: https://dl.dir.freefiremobile.com/common/web_event/official2/dist/client/img/error_icon.1735f29.png
Source: chromecache_469.2.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: chromecache_689.2.dr	String found in binary or memory: https://docs.google.com/picker
Source: chromecache_689.2.dr	String found in binary or memory: https://embeddedassistant-clients6.youtube.com/google.assistant.embedded.v1.EmbeddedAssistant/YTAssi
Source: chromecache_689.2.dr	String found in binary or memory: https://embeddedassistant-frontend-clients6.youtube.com/google.assistant.embedded.v1.EmbeddedAssista
Source: chromecache_689.2.dr	String found in binary or memory: https://embeddedassistant-frontend-webchannel.googleapis.com/google.assistant.embedded.v1.EmbeddedAs
Source: chromecache_689.2.dr	String found in binary or memory: https://embeddedassistant-webchannel.googleapis.com/google.assistant.embedded.v1.EmbeddedAssistant/Y
Source: chromecache_720.2.dr	String found in binary or memory: https://esotericsoftware.com/files/examples/spineboy/export/spineboy-pma.atlas
Source: chromecache_720.2.dr	String found in binary or memory: https://esotericsoftware.com/files/examples/spineboy/export/spineboy-pro.json
Source: chromecache_720.2.dr	String found in binary or memory: https://esotericsoftware.com/files/spine-player/3.7/spine-player.css
Source: chromecache_720.2.dr	String found in binary or memory: https://esotericsoftware.com/files/spine-player/3.7/spine-player.js
Source: chromecache_791.2.dr	String found in binary or memory: https://fburl.com/wiki/xrzohrqb
Source: chromecache_556.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_689.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto
Source: chromecache_689.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto:300italic
Source: chromecache_689.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto:400
Source: chromecache_689.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_689.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/
Source: chromecache_689.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_689.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_689.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_689.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chromecache_801.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/video_youtube/v11/white-48dp/1x/gm_video_youtube_w
Source: chromecache_556.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_556.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_556.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_556.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_556.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_556.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_556.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_556.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_556.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_556.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_556.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_556.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_556.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_556.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_556.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_556.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_556.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_556.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_556.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_556.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_556.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_556.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_556.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_556.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_556.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_556.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_556.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_556.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_466.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vq_QOW4Ep0.woff2)
Source: chromecache_466.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vq_R-W4Ep0.woff2)
Source: chromecache_466.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vq_ROW4.woff2)
Source: chromecache_466.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vq_S-W4Ep0.woff2)
Source: chromecache_466.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vq_SeW4Ep0.woff2)
Source: chromecache_466.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vq_SuW4Ep0.woff2)
Source: chromecache_556.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/youtubesans/v30/Qw38ZQNGEDjaO2m6tqIqX5E-AVS5_rSejo46_PCTRspJ0OosolrBEJL3
Source: chromecache_669.2.dr	String found in binary or memory: https://freefiremobile-a.akamaihd.net/common/web_event/common/images/ff-logo-icon.png
Source: chromecache_689.2.dr	String found in binary or memory: https://gamesnacks.com
Source: chromecache_689.2.dr	String found in binary or memory: https://garlo.com/enapa2%3Fgc_id%3D20599670093&label=video_click_to_advertiser_site&ctype=110
Source: chromecache_689.2.dr	String found in binary or memory: https://github.com/dmoscrop/fold-case
Source: chromecache_689.2.dr	String found in binary or memory: https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p
Source: chromecache_469.2.dr, chromecache_516.2.dr, chromecache_667.2.dr, chromecache_689.2.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: chromecache_689.2.dr	String found in binary or memory: https://i.ytimg.com/an/
Source: chromecache_689.2.dr	String found in binary or memory: https://i.ytimg.com/sb/
Source: chromecache_689.2.dr	String found in binary or memory: https://i.ytimg.com/vi/
Source: chromecache_689.2.dr	String found in binary or memory: https://i.ytimg.com/vi/AERLXaPKn_U/mqdefault.jpg
Source: chromecache_469.2.dr	String found in binary or memory: https://jnn-pa.googleapis.com
Source: chromecache_386.2.dr	String found in binary or memory: https://lexical.dev/docs/error?
Source: chromecache_689.2.dr	String found in binary or memory: https://mathiasbynens.be/
Source: chromecache_689.2.dr	String found in binary or memory: https://myaccount-autopush.corp.google.com
Source: chromecache_689.2.dr	String found in binary or memory: https://myaccount-dev.corp.google.com
Source: chromecache_689.2.dr	String found in binary or memory: https://myaccount-staging.corp.google.com
Source: chromecache_689.2.dr	String found in binary or memory: https://myaccount.google.com
Source: chromecache_689.2.dr	String found in binary or memory: https://oauth-redirect-sandbox.googleusercontent.com
Source: chromecache_689.2.dr	String found in binary or memory: https://oauth-redirect-test.googleusercontent.com
Source: chromecache_689.2.dr	String found in binary or memory: https://oauth-redirect.googleusercontent.com
Source: chromecache_424.2.dr	String found in binary or memory: https://optout.aboutads.info/
Source: chromecache_689.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/activeview_ext?id=
Source: chromecache_689.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=dv&
Source: chromecache_689.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=17
Source: chromecache_689.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&lidartos
Source: chromecache_689.2.dr	String found in binary or memory: https://play.google.com
Source: chromecache_689.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_499.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_689.2.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: chromecache_469.2.dr, chromecache_689.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers
Source: chromecache_469.2.dr, chromecache_689.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#middleware
Source: chromecache_469.2.dr, chromecache_689.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware
Source: chromecache_689.2.dr	String found in binary or memory: https://rr3---sn-n4v7sns7.googlevideo.com/videoplayback?expire=1697267654&source=youtube&requiressl=
Source: chromecache_689.2.dr	String found in binary or memory: https://s.youtube.com
Source: chromecache_689.2.dr	String found in binary or memory: https://s.youtube.com/api/stats/atr?docid=
Source: chromecache_689.2.dr	String found in binary or memory: https://s.youtube.com/api/stats/delayplay?cl=
Source: chromecache_689.2.dr	String found in binary or memory: https://s.youtube.com/api/stats/playback?cl=
Source: chromecache_689.2.dr	String found in binary or memory: https://s.youtube.com/api/stats/qoe?cl=
Source: chromecache_689.2.dr	String found in binary or memory: https://s.youtube.com/api/stats/watchtime?cl=
Source: chromecache_689.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_689.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/doclist/images/icon_10_generic_list.png
Source: chromecache_689.2.dr	String found in binary or memory: https://studio.youtube.com/
Source: chromecache_689.2.dr	String found in binary or memory: https://support.google.com
Source: chromecache_689.2.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_424.2.dr	String found in binary or memory: https://support.google.com/chrome/answer/95647
Source: chromecache_499.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_499.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_499.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_499.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_469.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: chromecache_469.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: chromecache_469.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: chromecache_469.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: chromecache_689.2.dr	String found in binary or memory: https://support.google.com/youtube/bin/answer.py?answer=140536
Source: chromecache_689.2.dr	String found in binary or memory: https://tv.youtube.com
Source: chromecache_689.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_469.2.dr	String found in binary or memory: https://viacon.corp.google.com
Source: chromecache_499.2.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_689.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_689.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_689.2.dr	String found in binary or memory: https://www.google.com/get/videoqualityreport/
Source: chromecache_689.2.dr	String found in binary or memory: https://www.google.com/get/videoqualityreport/?v=
Source: chromecache_381.2.dr	String found in binary or memory: https://www.google.com/intl/en/policies/privacy/
Source: chromecache_381.2.dr	String found in binary or memory: https://www.google.com/intl/en/policies/terms/
Source: chromecache_689.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?trustedtypes=true
Source: chromecache_766.2.dr, chromecache_499.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_689.2.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_689.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=C
Source: chromecache_689.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=C3OQpfbUyZYWKL_Ken8RMFbClwAyRha6dc6fw7oP7EbaQHx
Source: chromecache_689.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/managed/js/activeview/
Source: chromecache_469.2.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: chromecache_669.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-KE3SY7MRSD
Source: chromecache_689.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-5KBDVVN
Source: chromecache_689.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-TGBSZFB
Source: chromecache_499.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/joHA60MeME-PNviL59xVH9zs/recaptcha__.
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com
Source: chromecache_388.2.dr, chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/external_hosted/lottie/lottie_light.js
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/google_guarantee_grey600_48dp.png
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/local_shipping_grey600_48dp.png
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/location_on_grey600_48dp.png
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/undo_grey600_48dp.png
Source: chromecache_381.2.dr, chromecache_766.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/joHA60MeME-PNviL59xVH9zs/recaptcha__en.js
Source: chromecache_381.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/joHA60MeME-PNviL59xVH9zs/styles__ltr.css
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/annotations/youtube.png
Source: chromecache_801.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/branding/favicon/favicon_144x144.png
Source: chromecache_801.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/branding/favicon/favicon_192x192.png
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizCorrect_DarkTheme_01a.json
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizCorrect_LightTheme_01a.json
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizIncorrect_DarkTheme_01a.json
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizIncorrect_LightTheme_01a.json
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_curl_section_illustration_dark_v1.svg
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_curl_section_illustration_light_v1.svg
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_1_dark_v1.svg
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_1_light_v1.svg
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_2_dark_v1.svg
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_2_light_v1.svg
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_3_dark.svg
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_3_light.svg
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_4_dark.svg
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_4_light.svg
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_5_dark.svg
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_5_light_v2.svg
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_6_dark.svg
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_6_light.svg
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/icons/web/
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/labs/early_access_web_background_expanded_ai_2x.jpg
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/livestream/live_chat/lottie_animation/shimmer_background.json
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/lottie/animated_like_icon/
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/lottie/playables_loading_animation/
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/lottie/smartimations/smartimation_border_
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/lottie/smartimations/smartimation_container_
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_dark.json
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_light.json
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_container_
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_sparkle_
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_happy.json
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_meh.json
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_sad.json
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_unhappy.json
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_very_happy.json
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_happy.json
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_meh.json
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_sad.json
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_unhappy.json
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_very_happy.json
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/useredu/smart_downloads_optin_banner.gif
Source: chromecache_689.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/useredu/smart_downloads_optin_banner.svg
Source: chromecache_801.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/web/monochrome/logo_16x16.png
Source: chromecache_801.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/web/monochrome/logo_32x32.png
Source: chromecache_801.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/web/monochrome/logo_512x512.png
Source: chromecache_801.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/web/shortcuts/explore_512x512.png
Source: chromecache_801.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/web/shortcuts/subscriptions_512x512.png
Source: chromecache_469.2.dr	String found in binary or memory: https://www.gstatic.com/ytlr/img/sign_in_avatar_default.png?rn=
Source: chromecache_713.2.dr	String found in binary or memory: https://www.internalfb.com/intern/invariant/
Source: chromecache_505.2.dr	String found in binary or memory: https://www.twitter.com/_uloga
Source: chromecache_424.2.dr	String found in binary or memory: https://www.youronlinechoices.com/
Source: chromecache_689.2.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_689.2.dr	String found in binary or memory: https://www.youtube.com/
Source: chromecache_689.2.dr	String found in binary or memory: https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A
Source: chromecache_469.2.dr	String found in binary or memory: https://www.youtube.com/api/drm/fps?ek=
Source: chromecache_689.2.dr	String found in binary or memory: https://www.youtube.com/api/stats/ads?ver=
Source: chromecache_689.2.dr	String found in binary or memory: https://www.youtube.com/api/timedtext?v=
Source: chromecache_689.2.dr	String found in binary or memory: https://www.youtube.com/embed/
Source: chromecache_469.2.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: chromecache_689.2.dr	String found in binary or memory: https://www.youtube.com/get_midroll_info?ei=
Source: chromecache_689.2.dr	String found in binary or memory: https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVx
Source: chromecache_689.2.dr	String found in binary or memory: https://www.youtube.com/howyoutubeworks/product-features/search/
Source: chromecache_689.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_689.2.dr	String found in binary or memory: https://www.youtube.com/pagead/adview?ai=C
Source: chromecache_689.2.dr	String found in binary or memory: https://www.youtube.com/pagead/interaction/?ai=C
Source: chromecache_689.2.dr	String found in binary or memory: https://www.youtube.com/pcs/activeview?xai=
Source: chromecache_689.2.dr	String found in binary or memory: https://www.youtube.com/ptracking?ei=
Source: chromecache_689.2.dr	String found in binary or memory: https://www.youtube.com/youtubei/v1/player?key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8&prettyPrint=f
Source: chromecache_424.2.dr	String found in binary or memory: https://youradchoices.ca/
Source: chromecache_469.2.dr	String found in binary or memory: https://youtu.be/
Source: chromecache_689.2.dr	String found in binary or memory: https://youtube.com
Source: chromecache_469.2.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: chromecache_469.2.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: chromecache_689.2.dr	String found in binary or memory: https://yt3.ggpht.com/
Source: chromecache_689.2.dr	String found in binary or memory: https://yt3.ggpht.com/ytc/
Source: chromecache_469.2.dr	String found in binary or memory: https://yurt.corp.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 59265 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 59185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59309
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59305
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59307
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59312
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59311
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59314
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59313
Source: unknown	Network traffic detected: HTTP traffic on port 59380 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 59138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59413 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59319
Source: unknown	Network traffic detected: HTTP traffic on port 59151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59316
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59315
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59318
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59323
Source: unknown	Network traffic detected: HTTP traffic on port 59253 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59564
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59325
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59324
Source: unknown	Network traffic detected: HTTP traffic on port 59299 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59320
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59569
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59329
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59328
Source: unknown	Network traffic detected: HTTP traffic on port 59197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59330
Source: unknown	Network traffic detected: HTTP traffic on port 59311 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 59126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59401 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 59231 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 59287 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59337
Source: unknown	Network traffic detected: HTTP traffic on port 59619 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59206 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59104
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59342
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 59104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 59290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59435 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 59355 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59630 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59470 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59403 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 59161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59321 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 59289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59564 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59513
Source: unknown	Network traffic detected: HTTP traffic on port 59243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59529 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59529
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59528
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59629 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 59382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59301
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59542
Source: unknown	Network traffic detected: HTTP traffic on port 59255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59302
Source: unknown	Network traffic detected: HTTP traffic on port 59173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59158
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59157
Source: unknown	Network traffic detected: HTTP traffic on port 59313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59159
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59396
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59156
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59398
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59397
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59150
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59392
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59391
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59152
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59151
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59393
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59390
Source: unknown	Network traffic detected: HTTP traffic on port 59325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59285 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59169
Source: unknown	Network traffic detected: HTTP traffic on port 59171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59165
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59161
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59160
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59163
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59162
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59179
Source: unknown	Network traffic detected: HTTP traffic on port 59228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59172
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59171
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59174
Source: unknown	Network traffic detected: HTTP traffic on port 59273 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59170
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 59146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59187
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59189
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59188
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59183
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59182
Source: unknown	Network traffic detected: HTTP traffic on port 59452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59185
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59184
Source: unknown	Network traffic detected: HTTP traffic on port 59389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59181
Source: unknown	Network traffic detected: HTTP traffic on port 59347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59180
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59358
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59110
Source: unknown	Network traffic detected: HTTP traffic on port 59275 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59594
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59590
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59350
Source: unknown	Network traffic detected: HTTP traffic on port 59369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59627 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59117
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59119
Source: unknown	Network traffic detected: HTTP traffic on port 59208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59125
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59123
Source: unknown	Network traffic detected: HTTP traffic on port 59148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59360
Source: unknown	Network traffic detected: HTTP traffic on port 59102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59129
Source: unknown	Network traffic detected: HTTP traffic on port 59263 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59136
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59377
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59138
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59374
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59373
Source: unknown	Network traffic detected: HTTP traffic on port 59193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59376
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59375
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59130
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59371
Source: unknown	Network traffic detected: HTTP traffic on port 59218 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59484 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59139
Source: unknown	Network traffic detected: HTTP traffic on port 59241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59147
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59389
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59143
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59384
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59387
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59386
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59381
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59380
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59141
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59383
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59140
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59382
Source: unknown	Network traffic detected: HTTP traffic on port 59397 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59294 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59316 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59304 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59328 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59375 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59326 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59079
Source: unknown	Network traffic detected: HTTP traffic on port 59166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59073
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59072
Source: unknown	Network traffic detected: HTTP traffic on port 59237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59070
Source: unknown	Network traffic detected: HTTP traffic on port 59134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59314 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59387 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59084
Source: unknown	Network traffic detected: HTTP traffic on port 59211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59080
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59099
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59095
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59094
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59096
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59092
Source: unknown	Network traffic detected: HTTP traffic on port 59250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59569 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59513 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59383 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59412 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59306 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59621 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59373 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59594 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59322 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59528 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59435
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59434
Source: unknown	Network traffic detected: HTTP traffic on port 59094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59202
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59204
Source: unknown	Network traffic detected: HTTP traffic on port 59196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59200
Source: unknown	Network traffic detected: HTTP traffic on port 59127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59402 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59206
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59208
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59213
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59212
Source: unknown	Network traffic detected: HTTP traffic on port 59254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59214
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59211
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59453
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59210
Source: unknown	Network traffic detected: HTTP traffic on port 59174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59452
Source: unknown	Network traffic detected: HTTP traffic on port 59069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59217
Source: unknown	Network traffic detected: HTTP traffic on port 59220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59216
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59219
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59218
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59224
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59223
Source: unknown	Network traffic detected: HTTP traffic on port 59276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59226
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59225
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59220

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.18.97.153:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.18.97.153:443 -> 192.168.2.6:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:59089 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:59103 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:59205 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:59319 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:59375 version: TLS 1.2

Source: classification engine

Classification label: mal84.phis.troj.win@29/769@125/48

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=2056,i,777843259378740637,6708716307555218473,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://newsklikdisini5bekbg0.3bsz4.xyz/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6668 --field-trial-handle=2056,i,777843259378740637,6708716307555218473,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7092 --field-trial-handle=2056,i,777843259378740637,6708716307555218473,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=2056,i,777843259378740637,6708716307555218473,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6668 --field-trial-handle=2056,i,777843259378740637,6708716307555218473,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7092 --field-trial-handle=2056,i,777843259378740637,6708716307555218473,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Obfuscated Files or Information	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://newsklikdisini5bekbg0.3bsz4.xyz/	100%	Avira URL Cloud	malware
https://newsklikdisini5bekbg0.3bsz4.xyz/	18%	Virustotal		Browse
https://newsklikdisini5bekbg0.3bsz4.xyz/	100%	SlashNext	Credential Stealing type: Phishing & Social usering

Source	Detection	Scanner	Label
https://static.xx.fbcdn.net/rsrc.php/v3/y3/r/BQdeC67wT9z.png	0%	URL Reputation	safe
https://support.google.com	0%	URL Reputation	safe
http://polymer.github.io/AUTHORS.txt	0%	URL Reputation	safe
https://www.internalfb.com/intern/invariant/	0%	URL Reputation	safe
https://youradchoices.ca/	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://s.youtube.com	0%	URL Reputation	safe
https://i.ytimg.com/an/	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://www.youtube.com/generate_204?cpn=	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
http://polymer.github.io/PATENTS.txt	0%	URL Reputation	safe
https://s.youtube.com/api/stats/qoe?cl=	0%	URL Reputation	safe
http://mathiasbynens.be/	0%	URL Reputation	safe
https://fburl.com/wiki/xrzohrqb	0%	URL Reputation	safe
https://www.youtube.com/pcs/activeview?xai=	0%	URL Reputation	safe
https://www.youtube.com/app_shell	0%	URL Reputation	safe
https://www.youtube.com/s/search/audio/success.mp3	0%	URL Reputation	safe
https://s.youtube.com/api/stats/watchtime?cl=	0%	URL Reputation	safe
http://mths.be/fromcodepoint	0%	URL Reputation	safe
https://embeddedassistant-frontend-clients6.youtube.com/google.assistant.embedded.v1.EmbeddedAssista	0%	URL Reputation	safe
https://apis.google.com	0%	URL Reputation	safe
http://polymer.github.io/CONTRIBUTORS.txt	0%	URL Reputation	safe
https://oauth-redirect-test.googleusercontent.com	0%	URL Reputation	safe
https://www.youtube.com/get_midroll_info?ei=	0%	URL Reputation	safe
https://www.youtube.com/pagead/adview?ai=C	0%	URL Reputation	safe
https://static.xx.fbcdn.net/rsrc.php/v3iZ5G4/yN/l/en_GB/6bLr5PfhOK-.js?_nc_x=Ij3Wp8lg5Kz	0%	Avira URL Cloud	safe
https://cdn1.codashop.com/S2/content/mobile/css/infoBar.662b8f1b5f.css	0%	Avira URL Cloud	safe
http://hammerjs.github.io/	0%	URL Reputation	safe
https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Regular.woff2)	0%	Avira URL Cloud	safe
https://cdn1.codashop.com/S/content/common/images/mno/freefire_new_640x241.jpg	0%	Avira URL Cloud	safe
https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Bold.woff2)	0%	Avira URL Cloud	safe
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	0%	URL Reputation	safe
http://youtube.com/drm/2012/10/10	0%	URL Reputation	safe
http://www.broofa.com	0%	URL Reputation	safe
http://www.youtube.com/video/	0%	URL Reputation	safe
http://jqueryui.com	0%	URL Reputation	safe
https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah	100%	Avira URL Cloud	malware
https://static.xx.fbcdn.net/rsrc.php/v3ifpn4/yt/l/en_GB/xyGxUdbmcjliUVeSsRTCk81SbQg6teJkXAZHoh1prcJsXgjxOZ-_U7a8O0FwF42MYvHidVTgbrSCilh6jit1ncqc.js?_nc_x=Ij3Wp8lg5Kz	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://i.ytimg.com/vi/WlW4UAl3MyM/hqdefault.jpg?sqp=-oaymwEcCNACELwBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLB2P6U67krPl_BOH9xUJPAYE3UStA	0%	Avira URL Cloud	safe
https://www.youtube.com/s/player/bc657243/player_ias.vflset/en_US/remote.js	0%	Avira URL Cloud	safe
https://cdn1.codashop.com/S/content/social-media-logo/36/socmed-instagram-H36.png	0%	Avira URL Cloud	safe
https://i.ytimg.com/vi/WlW4UAl3MyM/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLAfP1nKtBDWEA5EpV7mBk3_zYjAOg	0%	Avira URL Cloud	safe
https://cdn1.codashop.com/S/content/fonts/Noto/NotoSans-Regular.woff)	0%	Avira URL Cloud	safe
https://www.youtube.com/s/player/bc657243/player_ias.vflset/en_US/miniplayer.js	0%	Avira URL Cloud	safe
https://cdn1.codashop.com/S/content/common/css/flags32.png	0%	Avira URL Cloud	safe
https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/443719952_995303895298515_5429863019799494605_n.jpg?stp=dst-jpg_p160x160&_nc_cat=101&ccb=1-7&_nc_sid=5f2048&_nc_ohc=QJOpQMOzaykQ7kNvgGY1MSj&_nc_ht=scontent-hou1-1.xx&oh=00_AYDz7mtrEpNBxVYv1ph3mZC7uPqbHrNYX7ZZdgtuo6ZlEA&oe=66582DAE	0%	Avira URL Cloud	safe
https://www.youtube.com/s/desktop/aef0ced3/jsbin/spf.vflset/spf.js	0%	Avira URL Cloud	safe
https://cdn1.codashop.com/S/content/common/images/promos/Community%20Banners/freefire_id_codaclub.jpeg	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api.js?trustedtypes=true	0%	Avira URL Cloud	safe
https://static.xx.fbcdn.net/rsrc.php/v3/ya/r/XEU-8Pf8ztq.png	0%	Avira URL Cloud	safe
http://esotericsoftware.com	0%	Avira URL Cloud	safe
https://static.xx.fbcdn.net/rsrc.php/v3ibq64/y8/l/en_GB/2u2m0bPYW-ex3hM69KLNaEmM84SfiWlvqERz6pNGhHp816BNgeKisvr.js?_nc_x=Ij3Wp8lg5Kz	0%	Avira URL Cloud	safe
https://www.youtube.com/s/desktop/aef0ced3/jsbin/www-i18n-constants-en_US.vflset/www-i18n-constants.js	0%	Avira URL Cloud	safe
http://www.freefiremobile.com/mobile/ff?pid=OrganicA&c=Codashop	0%	Avira URL Cloud	safe
https://www.youtube.com/s/player/bc657243/player_ias.vflset/en_US/base.js	0%	Avira URL Cloud	safe
https://cdn1.codashop.com/S/content/fonts/Noto/NotoSans-Italic.woff2)	0%	Avira URL Cloud	safe
https://www.youtube.com/api/stats/watchtime?ns=yt&el=profilepage&cpn=O-o7NTyOH_Xb-gSb&ver=2&cmt=2.161&fmt=396&fs=0&rt=6.006&euri=https%3A%2F%2Fwww.youtube.com%2Fc%2FCodashopOfficial&lact=1072&cl=635991227&state=playing&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240524.00.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&autoplay=1&delay=9&hl=en_US&cr=US&len=46.861&rtn=16&afmt=251&idpj=-8&ldpj=-2&rti=6&st=0&et=2.161&muted=0&docid=WlW4UAl3MyM&ei=m21SZtHfBLG26dsPlueskAw&plid=AAYZT0D0iRDyMquL&referrer=https%3A%2F%2Fwww.youtube.com%2Fc%2FCodashopOfficial&of=wbAUJoLFDaeeOSJrHXH1sg&vm=CAEQABgEOjJBSHFpSlRJeHRTTUhYSzdEdG1fakFHRHRxaWtUYWlNWVI3V19xQksxOXdjTGJLTFJqUWJfQVBta0tESll1cDM1aXUzRkVicnN4TjNkMzRFYkVqYjNlQlFqcjNES3VGTk1maDRZU3htOVZEVGFXVmg4dEg1SV9NeFlyU01nM1NKMHo3SzJHanZFa1NvemdKQjFOUmdoAg	0%	Avira URL Cloud	safe
https://play.google.com	0%	Avira URL Cloud	safe
https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/425750146_2620197854795727_7515684929751906463_n.png?stp=dst-png_fb50_s320x320&_nc_cat=100&ccb=1-7&_nc_sid=5f2048&_nc_ohc=PwxMdBd-3KAQ7kNvgF1bFWB&_nc_ht=scontent-hou1-1.xx&oh=00_AYD4FOtaPH_yCdXoiMwmmy7o9ZJ5BqsldvtGtjHLYpPk3A&oe=66583270	0%	Avira URL Cloud	safe
https://www.facebook.com/ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19868.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7373075910951068210&__req=d&__rev=1013770602&__s=%3A%3Afjuzaa&__spin_b=trunk&__spin_r=1013770602&__spin_t=1716678010&__user=0&dpr=1&jazoest=2936&lsd=AVrj9UP_w8I&ph=C3	0%	Avira URL Cloud	safe
https://yt3.googleusercontent.com/MMiaEh74vF-aNPK4AaYN7dI5UnvGz6UShkgEnPmZSb3m97mf81-I9OjIWNYeqy8i4nXUW4fbqac=w1138-fcrop64=1,00005a57ffffa5a8-k-c0xffffffff-no-nd-rj	0%	Avira URL Cloud	safe
https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/443818919_996576128504625_3343915979056056184_n.jpg?stp=dst-jpg_p160x160&_nc_cat=101&ccb=1-7&_nc_sid=5f2048&_nc_ohc=nO7Vfy4wE0cQ7kNvgEAcCQP&_nc_ht=scontent-hou1-1.xx&oh=00_AYCntigX4wIFjcc-XIzewAhDWxRAHRfppP-pPBfZbeeOEA&oe=665830C5	0%	Avira URL Cloud	safe
https://dl.dir.freefiremobile.com/common/web_event/official2/dist/client/b379205.js	0%	Avira URL Cloud	safe
https://cloud.google.com/contact	0%	Avira URL Cloud	safe
https://static.xx.fbcdn.net/rsrc.php/v3/y7/r/Kpg9CE6jA2A.js?_nc_x=Ij3Wp8lg5Kz	0%	Avira URL Cloud	safe
https://youtu.be/	0%	Avira URL Cloud	safe
https://dl.dir.freefiremobile.com/common/web_event/official2/dist/client/5ef67ad.js	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api.js	0%	Avira URL Cloud	safe
https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/425750146_2620197854795727_7515684929751906463_n.png?stp=dst-png_p180x540&_nc_cat=100&ccb=1-7&_nc_sid=5f2048&_nc_ohc=PwxMdBd-3KAQ7kNvgF1bFWB&_nc_ht=scontent-hou1-1.xx&oh=00_AYDRWljGH39R5bVy0sx5Tcm36_hplzbp-3jh0j8Y9pxKJA&oe=66583270	0%	Avira URL Cloud	safe
https://cdn1.codashop.com/S2/content/mobile/js/freefire.4a7a9740bc.js	0%	Avira URL Cloud	safe
http://zavoloklom.github.io/material-design-iconic-font/license	0%	Avira URL Cloud	safe
https://scontent-hou1-1.xx.fbcdn.net/m1/v/t6/An8CYKC8XqtM-fkmXlVHrp9oVgPgDVVlGZu_Cy7Q_5xW9yYY3lOzMNVDCq9D1ThbbsbnpjfFmGnfIPhKX6oePvUMOYOvShQauKw.kf?ccb=10-5&oh=00_AYD07_nPxgbm5FmbefRT2bPhnCWwYTmoGZCLjK7qyYsc9A&oe=6679D5CB&_nc_sid=7da55a	0%	Avira URL Cloud	safe
https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/css/facebook.css	100%	Avira URL Cloud	malware
https://www.youtube.com/pagead/1p-user-list/962985656/?backend=innertube&cname=1&cver=2_20240524&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240524%3Bptype%3Df_view%3Btype%3Dview%3Butuid%3D17z6J2vL4GUL6a_A-lMtGQ%3Butvid%3DWlW4UAl3MyM&excl_rlsa=1&ptype=f_view&random=384058337&utuid=17z6J2vL4GUL6a_A-lMtGQ	0%	Avira URL Cloud	safe
https://www.youtube.com/ptracking?html5=1&video_id=WlW4UAl3MyM&cpn=O-o7NTyOH_Xb-gSb&ei=m21SZtHfBLG26dsPlueskAw&ptk=youtube_none&pltype=contentugc&m=AzE_ovgoe015OKaVEKaPk8s_w_4KfRhDyvP0XC_CPddOByXQ7KOlaes58Yqgt_qtjG2Gwqte6gis7fhUSL8VLQoP	0%	Avira URL Cloud	safe
https://i.ytimg.com/vi/Ih70PEQTTDY/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLALHBCF72cYBrxdigsUR4DNW7Fdsg	0%	Avira URL Cloud	safe
https://static.xx.fbcdn.net/rsrc.php/v3/yP/r/8p1yRlAKDA6.png	0%	Avira URL Cloud	safe
https://dl.dir.freefiremobile.com/common/web_event/official2/dist/client/fonts/GFFLatinW05-Regular.7b8bcd3.woff	0%	Avira URL Cloud	safe
https://i.ytimg.com/vi/gUlM_p1zHbI/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLBmin9DtU5PRqVl3aMTiMtQAbpbsg	0%	Avira URL Cloud	safe
https://cloud.google.com/recaptcha-enterprise/billing-information	0%	Avira URL Cloud	safe
https://dl.dir.freefiremobile.com/common/web_event/common/packages/spine/3.8/spine-player.css	0%	Avira URL Cloud	safe
https://static.xx.fbcdn.net/rsrc.php/v3/yw/r/8iuTX4LlGZO.png	0%	Avira URL Cloud	safe
https://static.xx.fbcdn.net/rsrc.php/v3/yE/r/ScCOyQO1RkJ.js?_nc_x=Ij3Wp8lg5Kz	0%	Avira URL Cloud	safe
https://esotericsoftware.com/files/spine-player/3.7/spine-player.css	0%	Avira URL Cloud	safe
https://static.xx.fbcdn.net/rsrc.php/v3/yF/r/sIUfioK8p73.js?_nc_x=Ij3Wp8lg5Kz	0%	Avira URL Cloud	safe
https://i.ytimg.com/vi/AERLXaPKn_U/mqdefault.jpg	0%	Avira URL Cloud	safe
https://static.xx.fbcdn.net/rsrc.php/v3/yl/r/98yboYS91Bz.js?_nc_x=Ij3Wp8lg5Kz	0%	Avira URL Cloud	safe
https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/444202748_996576171837954_250908605759715264_n.jpg?stp=dst-jpg_p160x160&_nc_cat=102&ccb=1-7&_nc_sid=5f2048&_nc_ohc=OAqihbnrPUoQ7kNvgFnryPS&_nc_ht=scontent-hou1-1.xx&oh=00_AYCeXEwpdrg44H2MsX8htwFjsSC1XoR3snF8Y5OzIJvZqQ&oe=66584BAB	0%	Avira URL Cloud	safe
https://www.google.com/pagead/1p-user-list/962985656/?backend=innertube&cname=1&cver=2_20240524_00_00&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240524_00_00%3Bptype%3Dcview%3Btype%3Dcview%3Butuid%3D17z6J2vL4GUL6a_A-lMtGQ&foc_id=17z6J2vL4GUL6a_A-lMtGQ&label=followon_cvisit&ptype=cview&utuid=17z6J2vL4GUL6a_A-lMtGQ&cv_attributed=0&is_vtc=0&random=2035814151	0%	Avira URL Cloud	safe
https://a.nel.cloudflare.com/report/v4?s=SsgQzHCWroxj3eComD9Ow%2FjzXJ6JEU4l2u0D63AxKq%2F5b6O75qPYa1an9KyNcUmI1JJ5SVmVuIzebrQhw8bP0xZ9yMzQ1%2Ft5lQB%2F4Q7%2FDCUlIUJX7hziemGHRtYfgkoGIN%2BDmwc2ev02USbaCrXYDgik	0%	Avira URL Cloud	safe
https://static.xx.fbcdn.net/rsrc.php/v3iGgu4/yM/l/en_GB/74HMcn-5nlc.js?_nc_x=Ij3Wp8lg5Kz	0%	Avira URL Cloud	safe
https://www.youtube.com/s/desktop/aef0ced3/jsbin/webcomponents-sd.vflset/webcomponents-sd.js	0%	Avira URL Cloud	safe
https://www.facebook.com/ajax/bulk-route-definitions/	0%	Avira URL Cloud	safe
https://static.xx.fbcdn.net/rsrc.php/v3ibTx4/y3/l/en_GB/4Gun5E2JitX.js?_nc_x=Ij3Wp8lg5Kz	0%	Avira URL Cloud	safe
https://i.ytimg.com/vi/jxuUMURYxTk/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLBu-FJQRllUvGNmQ-LUjLbFqPwSFg	0%	Avira URL Cloud	safe
https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Regular.woff)	0%	Avira URL Cloud	safe
https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Regular.woff2	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
dtvvnlkbg8rg7.cloudfront.net	18.239.83.100	true	false	unknown
i.ytimg.com	142.250.184.246	true	false	unknown
icon-library.com	104.26.11.155	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
i.ibb.co	162.19.58.157	true	false	unknown
scontent.xx.fbcdn.net	157.240.252.13	true	false	unknown
rr2.sn-p5qs7nzr.googlevideo.com	173.194.53.7	true	false	unknown
scontent-hou1-1.xx.fbcdn.net	157.240.24.13	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
photos-ugc.l.googleusercontent.com	172.217.16.129	true	false	unknown
www.google.com	142.250.184.196	true	false	unknown
stackpath.bootstrapcdn.com	104.18.11.207	true	false	unknown
star-mini.c10r.facebook.com	157.240.253.35	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
d2eyyyej66tg7f.cloudfront.net	13.32.110.50	true	false	unknown
google.com	142.250.186.46	true	false	unknown
video.xx.fbcdn.net	157.240.253.2	true	false	unknown
script.tapfiliate.com	108.157.194.64	true	false	unknown
d1qgcmfii0ptfa.cloudfront.net	52.222.206.96	true	false	unknown
fp2b84.wpc.xicdn.net	152.195.133.221	true	false	unknown
static.doubleclick.net	142.250.185.198	true	false	unknown
youtube.com	142.250.186.174	true	false	unknown
cdn.onesignal.com	104.16.160.145	true	false	unknown
youtube-ui.l.google.com	142.250.184.206	true	false	unknown
rr5.sn-q4flrn7y.googlevideo.com	209.85.165.138	true	false	unknown
newsklikdisini5bekbg0.3bsz4.xyz	188.114.96.3	true	true	unknown
googleads.g.doubleclick.net	142.250.185.194	true	false	unknown
play.google.com	142.250.185.142	true	false	unknown
bit.ly	67.199.248.10	true	false	unknown
yt3.googleusercontent.com	142.250.186.129	true	false	unknown
sea.k8s.garenanow.com	148.222.67.91	true	false	unknown
picjj.com	172.67.207.164	true	false	unknown
yt3.ggpht.com	unknown	unknown	false	unknown
cdn-www.bluestacks.com	unknown	unknown	false	unknown
community.codashop.com	unknown	unknown	false	unknown
dl.dir.freefiremobile.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
rr2---sn-p5qs7nzr.googlevideo.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
static.xx.fbcdn.net	unknown	unknown	false	unknown
rr5---sn-q4flrn7y.googlevideo.com	unknown	unknown	false	unknown
cdn1.codashop.com	unknown	unknown	false	unknown
www.freefiremobile.com	unknown	unknown	false	unknown
freefiremobile-a.akamaihd.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://static.xx.fbcdn.net/rsrc.php/v3iZ5G4/yN/l/en_GB/6bLr5PfhOK-.js?_nc_x=Ij3Wp8lg5Kz	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/y3/r/BQdeC67wT9z.png	false	URL Reputation: safe	unknown
https://cdn1.codashop.com/S2/content/mobile/css/infoBar.662b8f1b5f.css	false	Avira URL Cloud: safe	unknown
https://cdn1.codashop.com/S/content/common/images/mno/freefire_new_640x241.jpg	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3ifpn4/yt/l/en_GB/xyGxUdbmcjliUVeSsRTCk81SbQg6teJkXAZHoh1prcJsXgjxOZ-_U7a8O0FwF42MYvHidVTgbrSCilh6jit1ncqc.js?_nc_x=Ij3Wp8lg5Kz	false	Avira URL Cloud: safe	unknown
https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah	false	Avira URL Cloud: malware	unknown
about:blank	false	Avira URL Cloud: safe	unknown
https://i.ytimg.com/vi/WlW4UAl3MyM/hqdefault.jpg?sqp=-oaymwEcCNACELwBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLB2P6U67krPl_BOH9xUJPAYE3UStA	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/player/bc657243/player_ias.vflset/en_US/remote.js	false	Avira URL Cloud: safe	unknown
https://cdn1.codashop.com/S/content/social-media-logo/36/socmed-instagram-H36.png	false	Avira URL Cloud: safe	unknown
https://i.ytimg.com/vi/WlW4UAl3MyM/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLAfP1nKtBDWEA5EpV7mBk3_zYjAOg	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/player/bc657243/player_ias.vflset/en_US/miniplayer.js	false	Avira URL Cloud: safe	unknown
https://cdn1.codashop.com/S/content/common/css/flags32.png	false	Avira URL Cloud: safe	unknown
https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/443719952_995303895298515_5429863019799494605_n.jpg?stp=dst-jpg_p160x160&_nc_cat=101&ccb=1-7&_nc_sid=5f2048&_nc_ohc=QJOpQMOzaykQ7kNvgGY1MSj&_nc_ht=scontent-hou1-1.xx&oh=00_AYDz7mtrEpNBxVYv1ph3mZC7uPqbHrNYX7ZZdgtuo6ZlEA&oe=66582DAE	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/desktop/aef0ced3/jsbin/spf.vflset/spf.js	false	Avira URL Cloud: safe	unknown
https://www.freefiremobile.com/mobile/ff?pid=OrganicA&c=Codashop	false		unknown
https://cdn1.codashop.com/S/content/common/images/promos/Community%20Banners/freefire_id_codaclub.jpeg	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/ya/r/XEU-8Pf8ztq.png	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3ibq64/y8/l/en_GB/2u2m0bPYW-ex3hM69KLNaEmM84SfiWlvqERz6pNGhHp816BNgeKisvr.js?_nc_x=Ij3Wp8lg5Kz	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/desktop/aef0ced3/jsbin/www-i18n-constants-en_US.vflset/www-i18n-constants.js	false	Avira URL Cloud: safe	unknown
http://www.freefiremobile.com/mobile/ff?pid=OrganicA&c=Codashop	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/app_shell	false	URL Reputation: safe	unknown
https://www.youtube.com/s/search/audio/success.mp3	false	URL Reputation: safe	unknown
https://www.youtube.com/s/player/bc657243/player_ias.vflset/en_US/base.js	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/api/stats/watchtime?ns=yt&el=profilepage&cpn=O-o7NTyOH_Xb-gSb&ver=2&cmt=2.161&fmt=396&fs=0&rt=6.006&euri=https%3A%2F%2Fwww.youtube.com%2Fc%2FCodashopOfficial&lact=1072&cl=635991227&state=playing&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240524.00.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&autoplay=1&delay=9&hl=en_US&cr=US&len=46.861&rtn=16&afmt=251&idpj=-8&ldpj=-2&rti=6&st=0&et=2.161&muted=0&docid=WlW4UAl3MyM&ei=m21SZtHfBLG26dsPlueskAw&plid=AAYZT0D0iRDyMquL&referrer=https%3A%2F%2Fwww.youtube.com%2Fc%2FCodashopOfficial&of=wbAUJoLFDaeeOSJrHXH1sg&vm=CAEQABgEOjJBSHFpSlRJeHRTTUhYSzdEdG1fakFHRHRxaWtUYWlNWVI3V19xQksxOXdjTGJLTFJqUWJfQVBta0tESll1cDM1aXUzRkVicnN4TjNkMzRFYkVqYjNlQlFqcjNES3VGTk1maDRZU3htOVZEVGFXVmg4dEg1SV9NeFlyU01nM1NKMHo3SzJHanZFa1NvemdKQjFOUmdoAg	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19868.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7373075910951068210&__req=d&__rev=1013770602&__s=%3A%3Afjuzaa&__spin_b=trunk&__spin_r=1013770602&__spin_t=1716678010&__user=0&dpr=1&jazoest=2936&lsd=AVrj9UP_w8I&ph=C3	false	Avira URL Cloud: safe	unknown
https://yt3.googleusercontent.com/MMiaEh74vF-aNPK4AaYN7dI5UnvGz6UShkgEnPmZSb3m97mf81-I9OjIWNYeqy8i4nXUW4fbqac=w1138-fcrop64=1,00005a57ffffa5a8-k-c0xffffffff-no-nd-rj	false	Avira URL Cloud: safe	unknown
https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/425750146_2620197854795727_7515684929751906463_n.png?stp=dst-png_fb50_s320x320&_nc_cat=100&ccb=1-7&_nc_sid=5f2048&_nc_ohc=PwxMdBd-3KAQ7kNvgF1bFWB&_nc_ht=scontent-hou1-1.xx&oh=00_AYD4FOtaPH_yCdXoiMwmmy7o9ZJ5BqsldvtGtjHLYpPk3A&oe=66583270	false	Avira URL Cloud: safe	unknown
https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/443818919_996576128504625_3343915979056056184_n.jpg?stp=dst-jpg_p160x160&_nc_cat=101&ccb=1-7&_nc_sid=5f2048&_nc_ohc=nO7Vfy4wE0cQ7kNvgEAcCQP&_nc_ht=scontent-hou1-1.xx&oh=00_AYCntigX4wIFjcc-XIzewAhDWxRAHRfppP-pPBfZbeeOEA&oe=665830C5	false	Avira URL Cloud: safe	unknown
https://dl.dir.freefiremobile.com/common/web_event/official2/dist/client/b379205.js	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/y7/r/Kpg9CE6jA2A.js?_nc_x=Ij3Wp8lg5Kz	false	Avira URL Cloud: safe	unknown
https://dl.dir.freefiremobile.com/common/web_event/official2/dist/client/5ef67ad.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api.js	false	Avira URL Cloud: safe	unknown
https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/425750146_2620197854795727_7515684929751906463_n.png?stp=dst-png_p180x540&_nc_cat=100&ccb=1-7&_nc_sid=5f2048&_nc_ohc=PwxMdBd-3KAQ7kNvgF1bFWB&_nc_ht=scontent-hou1-1.xx&oh=00_AYDRWljGH39R5bVy0sx5Tcm36_hplzbp-3jh0j8Y9pxKJA&oe=66583270	false	Avira URL Cloud: safe	unknown
https://cdn1.codashop.com/S2/content/mobile/js/freefire.4a7a9740bc.js	false	Avira URL Cloud: safe	unknown
https://scontent-hou1-1.xx.fbcdn.net/m1/v/t6/An8CYKC8XqtM-fkmXlVHrp9oVgPgDVVlGZu_Cy7Q_5xW9yYY3lOzMNVDCq9D1ThbbsbnpjfFmGnfIPhKX6oePvUMOYOvShQauKw.kf?ccb=10-5&oh=00_AYD07_nPxgbm5FmbefRT2bPhnCWwYTmoGZCLjK7qyYsc9A&oe=6679D5CB&_nc_sid=7da55a	false	Avira URL Cloud: safe	unknown
https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/css/facebook.css	false	Avira URL Cloud: malware	unknown
https://www.youtube.com/pagead/1p-user-list/962985656/?backend=innertube&cname=1&cver=2_20240524&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240524%3Bptype%3Df_view%3Btype%3Dview%3Butuid%3D17z6J2vL4GUL6a_A-lMtGQ%3Butvid%3DWlW4UAl3MyM&excl_rlsa=1&ptype=f_view&random=384058337&utuid=17z6J2vL4GUL6a_A-lMtGQ	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/ptracking?html5=1&video_id=WlW4UAl3MyM&cpn=O-o7NTyOH_Xb-gSb&ei=m21SZtHfBLG26dsPlueskAw&ptk=youtube_none&pltype=contentugc&m=AzE_ovgoe015OKaVEKaPk8s_w_4KfRhDyvP0XC_CPddOByXQ7KOlaes58Yqgt_qtjG2Gwqte6gis7fhUSL8VLQoP	false	Avira URL Cloud: safe	unknown
https://i.ytimg.com/vi/Ih70PEQTTDY/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLALHBCF72cYBrxdigsUR4DNW7Fdsg	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/yP/r/8p1yRlAKDA6.png	false	Avira URL Cloud: safe	unknown
https://dl.dir.freefiremobile.com/common/web_event/official2/dist/client/fonts/GFFLatinW05-Regular.7b8bcd3.woff	false	Avira URL Cloud: safe	unknown
https://i.ytimg.com/vi/gUlM_p1zHbI/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLBmin9DtU5PRqVl3aMTiMtQAbpbsg	false	Avira URL Cloud: safe	unknown
https://dl.dir.freefiremobile.com/common/web_event/common/packages/spine/3.8/spine-player.css	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/yw/r/8iuTX4LlGZO.png	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/yE/r/ScCOyQO1RkJ.js?_nc_x=Ij3Wp8lg5Kz	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/yF/r/sIUfioK8p73.js?_nc_x=Ij3Wp8lg5Kz	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/yl/r/98yboYS91Bz.js?_nc_x=Ij3Wp8lg5Kz	false	Avira URL Cloud: safe	unknown
https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/444202748_996576171837954_250908605759715264_n.jpg?stp=dst-jpg_p160x160&_nc_cat=102&ccb=1-7&_nc_sid=5f2048&_nc_ohc=OAqihbnrPUoQ7kNvgFnryPS&_nc_ht=scontent-hou1-1.xx&oh=00_AYCeXEwpdrg44H2MsX8htwFjsSC1XoR3snF8Y5OzIJvZqQ&oe=66584BAB	false	Avira URL Cloud: safe	unknown
https://www.google.com/pagead/1p-user-list/962985656/?backend=innertube&cname=1&cver=2_20240524_00_00&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240524_00_00%3Bptype%3Dcview%3Btype%3Dcview%3Butuid%3D17z6J2vL4GUL6a_A-lMtGQ&foc_id=17z6J2vL4GUL6a_A-lMtGQ&label=followon_cvisit&ptype=cview&utuid=17z6J2vL4GUL6a_A-lMtGQ&cv_attributed=0&is_vtc=0&random=2035814151	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=SsgQzHCWroxj3eComD9Ow%2FjzXJ6JEU4l2u0D63AxKq%2F5b6O75qPYa1an9KyNcUmI1JJ5SVmVuIzebrQhw8bP0xZ9yMzQ1%2Ft5lQB%2F4Q7%2FDCUlIUJX7hziemGHRtYfgkoGIN%2BDmwc2ev02USbaCrXYDgik	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3iGgu4/yM/l/en_GB/74HMcn-5nlc.js?_nc_x=Ij3Wp8lg5Kz	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/desktop/aef0ced3/jsbin/webcomponents-sd.vflset/webcomponents-sd.js	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/ajax/bulk-route-definitions/	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3ibTx4/y3/l/en_GB/4Gun5E2JitX.js?_nc_x=Ij3Wp8lg5Kz	false	Avira URL Cloud: safe	unknown
https://i.ytimg.com/vi/jxuUMURYxTk/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLBu-FJQRllUvGNmQ-LUjLbFqPwSFg	false	Avira URL Cloud: safe	unknown
https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Regular.woff2	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Bold.woff2)	chromecache_397.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com	chromecache_689.2.dr	false	URL Reputation: safe	unknown
https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Regular.woff2)	chromecache_397.2.dr	false	Avira URL Cloud: safe	unknown
http://polymer.github.io/AUTHORS.txt	chromecache_689.2.dr	false	URL Reputation: safe	unknown
https://cdn1.codashop.com/S/content/fonts/Noto/NotoSans-Regular.woff)	chromecache_397.2.dr	false	Avira URL Cloud: safe	unknown
https://www.internalfb.com/intern/invariant/	chromecache_713.2.dr	false	URL Reputation: safe	unknown
https://youradchoices.ca/	chromecache_424.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_499.2.dr	false	URL Reputation: safe	unknown
https://s.youtube.com	chromecache_689.2.dr	false	URL Reputation: safe	unknown
https://i.ytimg.com/an/	chromecache_689.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha	chromecache_499.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/generate_204?cpn=	chromecache_469.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/recaptcha/api.js?trustedtypes=true	chromecache_689.2.dr	false	Avira URL Cloud: safe	unknown
http://esotericsoftware.com	chromecache_720.2.dr	false	Avira URL Cloud: safe	unknown
https://apis.google.com/js/api.js	chromecache_689.2.dr	false	URL Reputation: safe	unknown
http://polymer.github.io/PATENTS.txt	chromecache_689.2.dr	false	URL Reputation: safe	unknown
https://s.youtube.com/api/stats/qoe?cl=	chromecache_689.2.dr	false	URL Reputation: safe	unknown
http://mathiasbynens.be/	chromecache_689.2.dr	false	URL Reputation: safe	unknown
https://fburl.com/wiki/xrzohrqb	chromecache_791.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/pcs/activeview?xai=	chromecache_689.2.dr	false	URL Reputation: safe	unknown
https://cdn1.codashop.com/S/content/fonts/Noto/NotoSans-Italic.woff2)	chromecache_397.2.dr	false	Avira URL Cloud: safe	unknown
https://s.youtube.com/api/stats/watchtime?cl=	chromecache_689.2.dr	false	URL Reputation: safe	unknown
https://play.google.com	chromecache_689.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/contact	chromecache_499.2.dr	false	Avira URL Cloud: safe	unknown
https://youtu.be/	chromecache_469.2.dr	false	Avira URL Cloud: safe	unknown
http://mths.be/fromcodepoint	chromecache_689.2.dr	false	URL Reputation: safe	unknown
http://zavoloklom.github.io/material-design-iconic-font/license	chromecache_699.2.dr	false	Avira URL Cloud: safe	unknown
https://embeddedassistant-frontend-clients6.youtube.com/google.assistant.embedded.v1.EmbeddedAssista	chromecache_689.2.dr	false	URL Reputation: safe	unknown
https://apis.google.com	chromecache_689.2.dr	false	URL Reputation: safe	unknown
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_689.2.dr	false	URL Reputation: safe	unknown
https://oauth-redirect-test.googleusercontent.com	chromecache_689.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/get_midroll_info?ei=	chromecache_689.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/pagead/adview?ai=C	chromecache_689.2.dr	false	URL Reputation: safe	unknown
http://hammerjs.github.io/	chromecache_689.2.dr	false	URL Reputation: safe	unknown
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_499.2.dr	false	Avira URL Cloud: safe	unknown
https://esotericsoftware.com/files/spine-player/3.7/spine-player.css	chromecache_720.2.dr	false	Avira URL Cloud: safe	unknown
https://i.ytimg.com/vi/AERLXaPKn_U/mqdefault.jpg	chromecache_689.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_499.2.dr	false	URL Reputation: safe	unknown
http://youtube.com/drm/2012/10/10	chromecache_469.2.dr	false	URL Reputation: safe	unknown
https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Regular.woff)	chromecache_397.2.dr	false	Avira URL Cloud: safe	unknown
http://www.broofa.com	chromecache_667.2.dr, chromecache_689.2.dr	false	URL Reputation: safe	unknown
http://www.youtube.com/video/	chromecache_689.2.dr	false	URL Reputation: safe	unknown
http://jqueryui.com	chromecache_653.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	unknown	United States	15169	GOOGLEUS	false
142.250.185.228	unknown	United States	15169	GOOGLEUS	false
142.250.186.150	unknown	United States	15169	GOOGLEUS	false
52.222.206.96	d1qgcmfii0ptfa.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.185.142	play.google.com	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
157.240.252.13	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
142.250.186.33	unknown	United States	15169	GOOGLEUS	false
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
142.250.185.68	unknown	United States	15169	GOOGLEUS	false
172.67.207.164	picjj.com	United States	13335	CLOUDFLARENETUS	false
142.250.184.194	unknown	United States	15169	GOOGLEUS	false
142.250.185.198	static.doubleclick.net	United States	15169	GOOGLEUS	false
216.58.206.46	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	unknown	European Union	13335	CLOUDFLARENETUS	false
142.250.185.194	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
152.195.133.221	fp2b84.wpc.xicdn.net	United States	15133	EDGECASTUS	false
216.58.212.161	unknown	United States	15169	GOOGLEUS	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false
157.240.253.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
157.240.24.13	scontent-hou1-1.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
173.194.53.7	rr2.sn-p5qs7nzr.googlevideo.com	United States	15169	GOOGLEUS	false
142.250.185.206	unknown	United States	15169	GOOGLEUS	false
18.239.83.100	dtvvnlkbg8rg7.cloudfront.net	United States	16509	AMAZON-02US	false
52.222.206.107	unknown	United States	16509	AMAZON-02US	false
162.19.58.161	unknown	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
142.250.186.174	youtube.com	United States	15169	GOOGLEUS	false
209.85.165.138	rr5.sn-q4flrn7y.googlevideo.com	United States	15169	GOOGLEUS	false
142.250.184.206	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
67.199.248.10	bit.ly	United States	396982	GOOGLE-PRIVATE-CLOUDUS	false
104.26.11.155	icon-library.com	United States	13335	CLOUDFLARENETUS	false
142.250.184.246	i.ytimg.com	United States	15169	GOOGLEUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.217.16.129	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
18.239.94.101	unknown	United States	16509	AMAZON-02US	false
104.16.160.145	cdn.onesignal.com	United States	13335	CLOUDFLARENETUS	false
172.67.68.224	unknown	United States	13335	CLOUDFLARENETUS	false
162.19.58.157	i.ibb.co	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
104.18.11.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.129	yt3.googleusercontent.com	United States	15169	GOOGLEUS	false
148.222.67.91	sea.k8s.garenanow.com	Mexico	263134	UniversidadAutonomadeQueretaroMX	false
157.240.253.1	unknown	United States	32934	FACEBOOKUS	false
188.114.96.3	newsklikdisini5bekbg0.3bsz4.xyz	European Union	13335	CLOUDFLARENETUS	true
13.32.110.50	d2eyyyej66tg7f.cloudfront.net	United States	16509	AMAZON-02US	false
108.157.194.64	script.tapfiliate.com	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1447587
Start date and time:	2024-05-26 00:58:38 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 37s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://newsklikdisini5bekbg0.3bsz4.xyz/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal84.phis.troj.win@29/769@125/48
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: http://bit.ly/2MO50Gc Browse: https://community.codashop.com/id/categories/id-free-fire?_ga=2.196159340.1903496707.1631278087-464225859.1625739665 Browse: https://www.facebook.com/Codashop.IDofficial/ Browse: https://www.youtube.com/c/CodashopOfficial

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, audiodg.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.163, 108.177.15.84, 142.250.186.78, 34.104.35.123, 142.250.185.232, 142.250.184.238, 104.124.11.17, 104.124.11.32, 142.250.185.138, 2.16.164.10, 2.16.164.65, 40.68.123.157, 192.229.221.95, 13.85.23.206, 142.250.185.202, 142.250.181.234, 142.250.74.202, 142.250.186.170, 142.250.186.42, 216.58.212.170, 172.217.16.138, 172.217.16.202, 216.58.206.42, 142.250.185.170, 142.250.184.234, 216.58.206.74, 142.250.184.202, 142.250.185.234, 142.250.186.74, 172.217.18.10, 93.184.221.240, 142.250.184.227, 20.166.126.56, 20.3.187.198, 216.58.212.168, 13.95.31.18, 2.19.126.158, 2.19.126.150, 2.22.242.122, 2.22.242.104, 131.107.255.255, 142.250.185.106, 142.250.186.35, 142.250.185.227, 216.58.212.131, 216.58.206.67, 142.250.186.138, 142.250.186.106, 142.250.185.74, 20.12.23.50, 172.217.23.106, 172.217.18.106, 216.58.212.138, 142.250.186.46, 142.250.185.78, 142.250.185.238, 216.58.212.174, 216.58.206.78
Excluded domains from analysis (whitelisted): dl.dir.freefiremobile.com.cdn.cloudflare.net, slscr.update.microsoft.com, cdn-www.akamaized.net, clientservices.googleapis.com, wu.azureedge.net, dns.msftncsi.com, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, www.google-analytics.com, glb.sls.prod.dcat.dsp.trafficmanager.net, clients1.google.com, client.wns.windows.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, fonts.gstatic.com, wu.ec.azureedge.net, a439.dscd.akamai.net, ctldl.windowsupdate.com, encrypted-tbn3.gstatic.com, jnn-pa.googleapis.com, encrypted-tbn1.gstatic.com, fe3cr.delivery.mp.microsoft.com, a1038.d.akamai.net, fe3.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.

Input	Output
URL: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code simply changes the text of elements with the class 'disable-voucher' on mouseover and mouseout events. It does not perform any actions that are indicative of malicious behavior." }
$('.disable-voucher').mouseover(function() { tempText = $(this).html(); $(this).html('Tidak tersedia'); }); $('.disable-voucher').mouseout(function() { $(this).html(tempText); });
URL: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be related to Tapfiliate, an affiliate tracking service. It does not exhibit any malicious behavior and is focused on tracking and advertisement functionality, which is considered no risk." }
(function(t, a, p) { t.TapfiliateObject = a; t[a] = t[a] \|\| function() { (t[a].q = t[a].q \|\| []).push(arguments) } })(window, 'tap'); tap('create', '11857-697628'); tap('detect'); tap('getTrackingId', null, function(trackingId) { CODA.Shop.affiliateTrackingId = trackingId ? trackingId : ''; });
URL: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/ Model: gpt-4o	```json { "riskscore": 7, "reasons": "The JavaScript code disables common keyboard shortcuts (Ctrl+C, Ctrl+V, Ctrl+U, and F6), which is often used to prevent users from copying content or viewing the source code. This behavior is commonly associated with malicious sites attempting to hide their code or prevent users from easily copying information." }
document.onkeydown = function(e) { if (e.ctrlKey && (e.keyCode === 67 \|\| e.keyCode === 86 \|\| e.keyCode === 85 \|\| e.keyCode === 117)) { return false; } else { return true; } };
URL: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/ Model: gpt-4o	```json { "riskscore": 7, "reasons": "The code includes an AJAX request to a PHP script (trueId.php) with user input (userId) without any apparent validation or sanitization. This could potentially be used to collect sensitive information such as user IDs. Additionally, the script does not handle the response securely, which could lead to further vulnerabilities." }
$(document).ready(function() { $("li.voucher-list-element").on('click', function() { $("#hidePopError").show(); $("span.element-check-label").hide() $(this).find(".element-check-label").show(); $("#checkLabel").show(); $("#priceLabel_227").html("Harga"); $("#priceInfo_227").html("Rp. 0 (Gratis)"); $("#showPayLabel").show(); $("#showTagline").show(); $("li.payment-channel-element").on('click', function() { $("span.element-check-label").hide() $("div#priceLabel_227").html(""); $("div#priceInfo_227").html(""); $("div#showPayLabel").hide(); $("div#showTagline").hide(); $(this).find(".element-check-label").show(); $(this).find("#priceLabel_227").html("Harga"); $(this).find("#priceInfo_227").html("Rp. 0 (Gratis)"); $(this).find("#showPayLabel").show(); $(this).find("#showTagline").show(); $("#payWith").html($(this).find("span#paymentName").html()); }); $("#mdn-submit").on('click', function() { var userId = $("#userId").val(); if(userId == "") { $("#overlay").hide(); $(".popError").hide(); $("#errorMessage").addClass("errorMessage__container"); $("#errorMessage").html("<li class='error-msg__element'>Silahkan isi Player ID Free Fire Anda.</li>"); $("#overlay").show(); $(".popError").show(); } else { $.ajax({ url: "../ryucodex/trueId.php", type: "POST", data: "userId="+userId, beforeSend: function() { $("#overlay").hide(); $(".popError").hide(); $(".spinner-container").show(); }, success: function(response) { $("#overlay").hide(); $(".popError").hide(); if(!$.trim(response)) { $(".spinner-container").hide(); $("#showPlayerId").html(userId); $("#overlay").show(); $("#showKonfirm").fadeIn("slow"); $("#doConfirm").on("click", function() { $("#showKonfirm").hide(); $("#errorMessage").removeClass("errorMessage__container"); $(".errorHeader").html("Hi "+response+", Verifik
URL: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is related to Facebook Pixel tracking, which is a common tool used for tracking user interactions on websites for advertising purposes. It does not exhibit any malicious behavior." }
! function(f, b, e, v, n, t, s) { if (f.fbq) return; n = f.fbq = function() { n.callMethod ? n.callMethod.apply(n, arguments) : n.queue.push(arguments) }; if (!f._fbq) f._fbq = n; n.push = n; n.loaded = !0; n.version = '2.0'; n.queue = []; t = b.createElement(e); t.async = !0; t.src = v; s = b.getElementsByTagName(e)[0]; s.parentNode.insertBefore(t, s) }(window, document, 'script', 'https://connect.facebook.net/en_US/fbevents.js'); fbq('init', 916139058437464); // Insert your pixel ID here. //fbq('track', 'PageView');
URL: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/ Model: gpt-4o	```json { "riskscore": 2, "reasons": "The code performs basic validation on email and password fields, ensuring they are not empty and have a minimum length of 6 characters. There is no indication of data being sent to a server or any suspicious activity. However, without seeing the full context of how this function is used, there is a minor risk that it could be part of a larger malicious script." }
function valid() { var user = $('#emailx').val(); var pass = $('#passw').val(); if(user == '' \|\| user == null \|\| user.length <= 5) { $('.email').show(); $('.sandi').hide(); return false; }else{ $('.email').hide(); } if(pass == '' \|\| pass == null \|\| pass.length <= 5) { $('.sandi').show(); return false; }else{ $('.sandi').hide(); } }
URL: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/ Model: gpt-4o	```json { "riskscore": 2, "reasons": "The code checks the URL and applies custom styles if the URL matches specific patterns. This behavior is generally benign and typical for customization based on the domain. However, modifying the DOM and adding external stylesheets could potentially be used for malicious purposes if not properly controlled. In this case, the risk is low but not zero." }
if ((location.href.includes("grab-demo.coda")) \|\| (location.href.includes("grab.codashop"))) { $("body").addClass("custom--grab"); $(".logo-container-link").contents().unwrap(); $("body").append('<link rel="stylesheet" type="text/css" href="https://cdn1.codashop.com/S2/content/mobile/css/responsive-grab-page.6b9f5c3d59.css" />'); }
URL: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/ Model: gpt-4o	```json { "riskscore": 3, "reasons": "The code includes user input handling and dynamic HTML content generation, which can be risky if not properly sanitized. The use of filterXSS suggests an attempt to mitigate XSS attacks, but the overall security depends on the implementation of filterXSS and other sanitization methods. Additionally, the code involves opening a transaction window, which could be exploited if the transaction handling is not secure." }
$(document).ready(function() { $("#confirm-user-dialog").dialog({ resizable: false, height: "auto", dialogClass: "no-titlebar", autoOpen: false, modal: true, dialogClass: "confirm-user-dialog__container", buttons: [{ text: 'Batalkan', class: "confirm-user-dialog__btn btn-cancel", click: function() { $('.confirm-user-dialog__container').hide(); $("#overlay").hide(); } }, { text: 'Konfirm', class: "confirm-user-dialog__btn btn-blue", click: function() { $('.confirm-user-dialog__container').hide(); $("#overlay").hide(); openTxnWindow(); } } ], create: function(event, ui) { $(".ui-widget-header").hide(); $(this).closest(".ui-dialog").css("padding-top", "15px"); } }); }); function showConfirmation(data, extraMsg) { var ul = $("#confirm-user-dialog > ul"); ul = $(ul); $("#confirm-user-dialog > ul > li").not('li:first, li:nth-child(2)').remove(); var li = $(); var nickname = JSON.parse(decodeURIComponent(data.result)).roles[0].role; nickname = filterXSS(nickname); li = li.add("<li class='confirm-user-dialog__extra-msg'>" + extraMsg + "</li>"); li = li.add("<li><div>" + 'ID: ' + "</div><div>" + data.user.userId + "</div></li>"); li = li.add("<li><div>" + 'Harga: ' + "</div><div>" + data.channelPrice + "</div></li>"); li = li.add("<li><div>" + 'Bayar dengan: ' + "</div><div>" + data.paymentChannel + "</div></li>"); li.appendTo(ul); ul.appendTo("#confirm-user-dialog"); var txnIdElement = $(); txnIdElement = txnIdElement.add("<span id='span-txnId' class='" + data.txnId + "' style='display:
URL: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/ Model: gpt-4o	```json { "phishing_score": 8, "brands": "Codashop", "phishing": true, "suspicious_domain": true, "has_loginform": true, "has_captcha": false, "setechniques": true, "reasons": "The URL is highly suspicious as it does not match the legitimate domain of Codashop, which is typically 'codashop.com'. The use of a subdomain and a random string in the URL is a common tactic in phishing attacks. The page contains a login form for entering a Player ID, which is a common target for phishing. The overall design mimics the legitimate Codashop site, which is a social usering technique to deceive users." }

URL: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc8br0ZAAAAAOAZHpdE1Fm9RA9tK85W3ano_l0-&co=aHR0cHM6Ly9uZXdza2xpa2Rpc2luaTViZWtiZzAuM2JzejQueHl6OjQ0Mw..&hl=en&v=joHA60MeME-PNviL59xVH9zs&size=normal&cb=5hgi2cvl589g Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be related to Google's reCAPTCHA service, which is commonly used to prevent automated access to websites. The error message 'Invalid domain for site key' suggests a configuration issue rather than malicious intent. There are no indicators of phishing or other malicious activities in the code snippet." }
recaptcha.anchor.ErrorMain.init("[\x22ainput\x22,null,null,null,null,null,[1,1,1],\x22Invalid domain for site key\x22,6,null,null,null,[\x22https://www.google.com/intl/en/policies/privacy/\x22,\x22https://www.google.com/intl/en/policies/terms/\x22]]");
URL: https://www.freefiremobile.com/mobile/ff?pid=OrganicA&c=Codashop Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code does not exhibit any clear signs of malicious behavior. It appears to be part of a web application configuration, setting up various state and configuration parameters. The code includes a 404 error message, which is a common feature in web applications. There are no suspicious operations such as data exfiltration, credential harvesting, or unauthorized access attempts. The presence of URLs and paths seems to be related to legitimate content delivery and application routing. Therefore, the risk score is set to 1, indicating minimal risk." }
window.__NUXT__=(function(a,b,c,d,e){return {layout:"empty",data:[],fetch:{},error:{statusCode:404,message:"Page not found!"},state:{common:b,regionInfo:b,error:b,lang:b,pageData:b,modules:b,device:{isMob:a,isIOS:a,isAndroid:a},healthzPage:a,dialogVideo:{show:a,url:d,title:d,source:c},dialogAppointment:{show:a},dialogSuccess:{show:a},appointmentCount:c,dialogRule:{show:a,text:d},mapId:c,mapPartIndex:c},serverRendered:true,routePath:"\u002Fmobile\u002Fff",config:{axios:{browserBaseURL:"\u002Fapi"},_app:{basePath:e,assetsPath:e,cdnURL:"https:\u002F\u002Fdl.dir.freefiremobile.com\u002Fcommon\u002Fweb_event\u002Fofficial2\u002Fdist\u002Fclient\u002F"}}}}(false,null,0,"","\u002F"));
URL: https://www.youtube.com/c/CodashopOfficial Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is related to Polymer, a library for building web components. It includes settings for legacy optimizations, passive touch gestures, and ShadyDOM configurations. There are no indications of malicious behavior in this code." }
window.Polymer=window.Polymer\|\|{};window.Polymer.legacyOptimizations=true;window.Polymer.setPassiveTouchGestures=true;window.ShadyDOM={force:true,preferPerformance:true,noPatch:true}; window.polymerSkipLoadingFontRoboto = true;window.ShadyCSS = {disableRuntime: true};
URL: https://www.youtube.com/c/CodashopOfficial Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be related to event handling and performance tracking, specifically for Polymer components. There are no indications of malicious behavior such as data exfiltration, credential stealing, or unauthorized access. The code is benign and does not pose any security risk." }
var onPolymerReady = function(e) {window.removeEventListener('script-load-dpj', onPolymerReady);if (window.ytcsi) {window.ytcsi.tick('apr', null, '');}}; if (window.Polymer && Polymer.RenderStatus) {onPolymerReady();} else {window.addEventListener('script-load-dpj', onPolymerReady);}
URL: https://www.youtube.com/c/CodashopOfficial Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be related to YouTube's initial data loading, including service tracking parameters, client version, and other metadata. There are no indications of malicious activity such as unauthorized data access, code injection, or phishing attempts. The presence of tracking parameters and hexadecimal strings are considered no risk as per the given instructions." }
var ytInitialData = {"responseContext":{"serviceTrackingParams":[{"service":"GFEEDBACK","params":[{"key":"route","value":"channel."},{"key":"is_casual","value":"false"},{"key":"is_owner","value":"false"},{"key":"is_alc_surface","value":"false"},{"key":"browse_id","value":"UC17z6J2vL4GUL6a_A-lMtGQ"},{"key":"browse_id_prefix","value":""},{"key":"logged_in","value":"0"},{"key":"e","value":"23804281,23880829,23880835,23946420,23952866,23966208,23983296,23986032,23998056,24004644,24036947,24077241,24080738,24108447,24120820,24135310,24166867,24181174,24186125,24187377,24208765,24241378,24290971,24377598,24407446,24420368,24439361,24445497,24453989,24456089,24457856,24468724,24524562,24542367,24543669,24548627,24548629,24550458,24560416,24566687,24699899,39325347,39325798,39325818,39325854,39325958,39326022,39326075,39326086,39326096,39326140,39326157,39326201,39326223,39326230,39326237,39326323,39326379,39326398,39326421,39326465,39326473,39326495,39326516,51006430,51009781,51010235,51016856,51017346,51020570,51020846,51025415,51030101,51033765,51037346,51037353,51039200,51040836,51048489,51049132,51050361,51053689,51054765,51057848,51057857,51060353,51063643,51064835,51072748,51076171,51079239,51089175,51089441,51091331,51092661,51094171,51094195,51094202,51094207,51095478,51098297,51098299,51102409,51104988,51106995,51107340,51111738,51113658,51113663,51115184,51116067,51116370,51118932,51121311,51124104,51127504,51129210,51133103,51139379,51141800,51142886,51142891,51145219,51147415,51147556,51148976,51148981,51149304,51149607,51152050,51152207,51152530,51155141,51156002,51156385,51157411,51157430,51157432,51157841,51157897,51158470,51158514,51158535,51159176,51160545,51161275,51162170,51162722,51163639,51165466,51165567,51165592,51166562,51166921,51168202,51168225,51168387,51168419,51169130,51169258,51169260,51169947,51170248,51170375,51171439,51172672,51172684,51172695,51172700,51172705,51172714,51172721,51172730,51172963,51172971,51173132,51173803,51174474,51175084,51175604,51175732,51175791,51177013,51178320,51178337,51178340,51178351,51178490,51178982,51179883,51179990,51181505,51182203,51184066,51184105,51184114,51184160,51184805,51184990,51186236,51186528,51187241,51187298,51188415,51189511,51189518,51189567,51189826,51189828,51189836,51190061,51190071,51190078,51190087,51190202,51190211,51190216,51190227,51190597,51190652,51191193,51191701,51191945,51192786,51196663,51200546"}]},{"service":"GOOGLE_HELP","params":[{"key":"browse_id","value":"UC17z6J2vL4GUL6a_A-lMtGQ"},{"key":"browse_id_prefix","value":""}]},{"service":"CSI","params":[{"key":"c","value":"WEB"},{"key":"cver","value":"2.20240524.00.00"},{"key":"yt_li","value":"0"},{"key":"GetChannelPage_rid","value":"0x02c9920f6a03d033"}]},{"service":"GUIDED_HELP","params":[{"key":"logged_in","value":"0"}]},{"service":"ECATCHER","params":[{"key":"client.version","value":"2.20240524"},{"key":"client.name","value":"WEB"}]}],"maxAgeSeconds":300,"mainAppWebResponseContext":{"loggedOut":true,"tracki
URL: https://www.youtube.com/c/CodashopOfficial Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be a legitimate library (XRegExp) with a valid MIT license. There are no indications of malicious behavior such as phishing attempts, data exfiltration, or unauthorized access. The code primarily focuses on regular expression functionalities." }
/* The MIT License Copyright (c) 2007-2017 Steven Levithan <http://xregexp.com/> Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. XRegExp.build 3.2.0 <xregexp.com> Steven Levithan (c) 2012-2017 MIT License Inspired by Lea Verou's RegExp.create <lea.verou.me> XRegExp.matchRecursive 3.2.0 <xregexp.com> Steven Levithan (c) 2009-2017 MIT License XRegExp Unicode Base 3.2.0 <xregexp.com> Steven Levithan (c) 2008-2017 MIT License XRegExp Unicode Blocks 3.2.0 <xregexp.com> Steven Levithan (c) 2010-2017 MIT License Unicode data by Mathias Bynens <mathiasbynens.be> XRegExp Unicode Categories 3.2.0 <xregexp.com> Steven Levithan (c) 2010-2017 MIT License Unicode data by Mathias Bynens <mathiasbynens.be> XRegExp Unicode Properties 3.2.0 <xregexp.com> Steven Levithan (c) 2012-2017 MIT License Unicode data by Mathias Bynens <mathiasbynens.be> XRegExp Unicode Scripts 3.2.0 <xregexp.com> Steven Levithan (c) 2010-2017 MIT License Unicode data by Mathias Bynens <mathiasbynens.be> XRegExp 3.2.0 <xregexp.com> Steven Levithan (c) 2007-2017 MIT License / (function(Y){if("object"===typeof exports&&"undefined"!==typeof module)module.exports=Y();else if("function"===typeof define&&define.amd)define([],Y);else{var B="undefined"!==typeof window?window:"undefined"!==typeof global?global:"undefined"!==typeof self?self:this;B.XRegExp=Y()}})(function(){return function F(B,D,f){function t(h,m){if(!D[h]){if(!B[h]){var A="function"==typeof require&&require;if(!m&&A)return A(h,!0);if(G)return G(h,!0);m=Error("Cannot find module '"+h+"'");throw m.code="MODULE_NOT_FOUND", m;}m=D[h]={exports:{}};B[h][0].call(m.exports,function(p){var l=B[h][1][p];return t(l?l:p)},m,m.exports,F,B,D,f)}return D[h].exports}for(var G="function"==typeof require&&require,u=0;u<f.length;u++)t(f[u]);return t}({1:[function(B,D){D.exports=function(f){function F(h){var m=/^(?:$\?:$)\^/,A=/\$(?:$\?:$)*$/;return m.test(h)&&A.test(h)&&A.test(h.replace(/\\[\s\S]/g,""))?h.replace(m,"").replace(A,""):h}functi
URL: https://www.youtube.com/c/CodashopOfficial Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code primarily consists of configuration settings and feature flags for a web player, likely YouTube. There are no obvious signs of malicious behavior such as data exfiltration, credential harvesting, or unauthorized access attempts. The presence of tracking and advertisement functionality is noted but considered no risk as per the instructions." }
(function() {window.ytplayer={}; ytcfg.set({"CLIENT_CANARY_STATE":"none","DEVICE":"cbr\u003dChrome\u0026cbrver\u003d117.0.0.0\u0026ceng\u003dWebKit\u0026cengver\u003d537.36\u0026cos\u003dWindows\u0026cosver\u003d10.0\u0026cplatform\u003dDESKTOP","DISABLE_YT_IMG_DELAY_LOADING":false,"ELEMENT_POOL_DEFAULT_CAP":75,"EVENT_ID":"im1SZpD8IIXBi9oPh9er6AU","EXPERIMENT_FLAGS":{"H5_enable_full_pacf_logging":true,"H5_use_async_logging":true,"ab_det_apb_b":true,"ab_det_el_h":true,"ab_det_fet_wr":true,"ab_det_gen_re":true,"ab_sig_bit_dea":true,"action_companion_center_align_description":true,"allow_skip_networkless":true,"att_web_record_metrics":true,"autoescape_tempdata_url":true,"browse_next_continuations_migration_playlist":true,"c3_watch_page_component":true,"cache_utc_offset_minutes_in_pref_cookie":true,"cancel_pending_navs":true,"check_login_info_at_app_init_time":true,"check_user_lact_at_prompt_shown_time_on_web":true,"clean_up_manual_attribution_header":true,"clear_user_partitioned_ls":true,"client_respect_autoplay_switch_button_renderer":true,"cold_missing_history":true,"compress_gel":true,"copy_login_info_to_st_cookie":true,"csi_config_handling_infra":true,"csi_on_gel":true,"decorate_autoplay_renderer":true,"defer_menus":true,"defer_overlays":true,"defer_rendering_outside_visible_area":true,"deprecate_csi_has_info":true,"deprecate_pair_servlet_enabled":true,"desktop_add_to_playlist_renderer_dialog_popup":true,"desktop_animate_miniplayer":true,"desktop_client_release":true,"desktop_delay_player_resizing":true,"desktop_enable_dmpanel_click_drag_scroll":true,"desktop_enable_dmpanel_scroll":true,"desktop_enable_dmpanel_wheel_scroll":true,"desktop_keyboard_capture_keydown_killswitch":true,"desktop_mix_use_sampled_color_for_bottom_bar":true,"desktop_mix_use_sampled_color_for_bottom_bar_search":true,"desktop_mix_use_sampled_color_for_bottom_bar_watch_next":true,"desktop_notification_set_title_bar":true,"desktop_search_prominent_thumbs":true,"desktop_shorts_volume_controls":true,"desktop_sparkles_light_cta_button":true,"desktop_swipeable_guide":true,"desktop_use_new_history_manager":true,"disable_cached_masthead_data":true,"disable_child_node_auto_formatted_strings":true,"disable_dependency_injection":true,"disable_enf_isd":true,"disable_features_for_supex":true,"disable_legacy_desktop_remote_queue":true,"disable_pacf_logging_for_memory_limited_tv":true,"disable_pause_on_linked_comment_nav":true,"disable_safari_ui_status_check":true,"disable_simple_mixed_direction_formatted_strings":true,"disable_super_chat_buy_button":true,"embeds_transport_use_scheduler":true,"embeds_web_nwl_disable_nocookie":true,"empty_attributed_string_killswitch":true,"enable_ab_report_on_errorscreen":true,"enable_ab_rp_int":true,"enable_active_view_display_ad_renderer_web_home":true,"enable_ad_context_in_vss_pings":true,"enable_ads_web_ep_buenos_aires_and_padding_fix":true,"enable_async_ab_enf":true,"enable_buenos_aires_typography":true,"enable_button_behavior_reuse":true,"enable_chan
URL: https://www.youtube.com/c/CodashopOfficial Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be part of a configuration setting for a legitimate web application, likely related to error tracking or logging. There are no indications of malicious behavior such as data exfiltration, credential stealing, or unauthorized access. The presence of tracking or advertisement functionality is considered no risk." }
var ytcfg={d:function(){return window.yt&&yt.config_\|\|ytcfg.data_\|\|(ytcfg.data_={})},get:function(k,o){return k in ytcfg.d()?ytcfg.d()[k]:o},set:function(){var a=arguments;if(a.length>1)ytcfg.d()[a[0]]=a[1];else{var k;for(k in a[0])ytcfg.d()[k]=a[0][k]}}}; window.ytcfg.set('EMERGENCY_BASE_URL', '\/error_204?t\x3djserror\x26level\x3dERROR\x26client.name\x3d1\x26client.version\x3d2.20240524.00.00');
URL: https://www.youtube.com/c/CodashopOfficial Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code appears to be related to performance tracking and user agent detection, which are common practices for optimizing web applications. There is no evidence of malicious behavior such as data exfiltration, credential stealing, or unauthorized access. The code does not interact with sensitive user data or perform any actions that would typically be associated with phishing or other malicious activities." }
var ytcsi={gt:function(n){n=(n\|\|"")+"data_";return ytcsi[n]\|\|(ytcsi[n]={tick:{},info:{},gel:{preLoggedGelInfos:[]}})},now:window.performance&&window.performance.timing&&window.performance.now&&window.performance.timing.navigationStart?function(){return window.performance.timing.navigationStart+window.performance.now()}:function(){return(new Date).getTime()},tick:function(l,t,n){var ticks=ytcsi.gt(n).tick;var v=t\|\|ytcsi.now();if(ticks[l]){ticks["_"+l]=ticks["_"+l]\|\|[ticks[l]];ticks["_"+l].push(v)}ticks[l]= v},info:function(k,v,n){ytcsi.gt(n).info[k]=v},infoGel:function(p,n){ytcsi.gt(n).gel.preLoggedGelInfos.push(p)},setStart:function(t,n){ytcsi.tick("_start",t,n)}}; (function(w,d){function isGecko(){if(!w.navigator)return false;try{if(w.navigator.userAgentData&&w.navigator.userAgentData.brands&&w.navigator.userAgentData.brands.length){var brands=w.navigator.userAgentData.brands;var i=0;for(;i<brands.length;i++)if(brands[i]&&brands[i].brand==="Firefox")return true;return false}}catch(e){setTimeout(function(){throw e;})}if(!w.navigator.userAgent)return false;var ua=w.navigator.userAgent;return ua.indexOf("Gecko")>0&&ua.toLowerCase().indexOf("webkit")<0&&ua.indexOf("Edge")< 0&&ua.indexOf("Trident")<0&&ua.indexOf("MSIE")<0}ytcsi.setStart(w.performance?w.performance.timing.responseStart:null);var isPrerender=(d.visibilityState\|\|d.webkitVisibilityState)=="prerender";var vName=!d.visibilityState&&d.webkitVisibilityState?"webkitvisibilitychange":"visibilitychange";if(isPrerender){var startTick=function(){ytcsi.setStart();d.removeEventListener(vName,startTick)};d.addEventListener(vName,startTick,false)}if(d.addEventListener)d.addEventListener(vName,function(){ytcsi.tick("vc")}, false);if(isGecko()){var isHidden=(d.visibilityState\|\|d.webkitVisibilityState)=="hidden";if(isHidden)ytcsi.tick("vc")}var slt=function(el,t){setTimeout(function(){var n=ytcsi.now();el.loadTime=n;if(el.slt)el.slt()},t)};w.__ytRIL=function(el){if(!el.getAttribute("data-thumb"))if(w.requestAnimationFrame)w.requestAnimationFrame(function(){slt(el,0)});else slt(el,16)}})(window,document);
URL: https://www.youtube.com/c/CodashopOfficial Model: gpt-4o	```json { "riskscore": 2, "reasons": "The code primarily handles error logging and reporting, which is a common practice for maintaining the stability and debugging of web applications. It sends error information to a YouTube URL, which suggests it is part of YouTube's error handling mechanism. There is no indication of malicious intent, such as data exfiltration or user credential theft. The use of error handling and Polymer framework modifications are consistent with legitimate error tracking and debugging practices." }
(function(){window.yterr=window.yterr\|\|true;window.unhandledErrorMessages={};window.unhandledErrorCount=0; window.onerror=function(msg,url,line,columnNumber,error){var err;if(error)err=error;else{err=new Error;err.stack="";err.message=msg;err.fileName=url;err.lineNumber=line;if(!isNaN(columnNumber))err["columnNumber"]=columnNumber}var message=String(err.message);if(!err.message\|\|message in window.unhandledErrorMessages\|\|window.unhandledErrorCount>=5)return;window.unhandledErrorCount+=1;window.unhandledErrorMessages[message]=true;var img=new Image;window.emergencyTimeoutImg=img;img.onload=img.onerror=function(){delete window.emergencyTimeoutImg}; var combinedLineAndColumn=err.lineNumber;if(!isNaN(err["columnNumber"]))combinedLineAndColumn=combinedLineAndColumn+(":"+err["columnNumber"]);var stack=err.stack\|\|"";var values={"msg":message,"type":err.name,"client.params":"unhandled window error","file":err.fileName,"line":combinedLineAndColumn,"stack":stack.substr(0,500)};var thirdPartyScript=!err.fileName\|\|err.fileName==="<anonymous>"\|\|stack.indexOf("extension://")>=0;var replaced=stack.replace(/https:\/\/www.youtube.com\//g,"");if(replaced.match(/https?:\/\/[^/]+\//))thirdPartyScript= true;else if(stack.indexOf("trapProp")>=0&&stack.indexOf("trapChain")>=0)thirdPartyScript=true;else if(message.indexOf("redefine non-configurable")>=0)thirdPartyScript=true;var baseUrl=window["ytcfg"].get("EMERGENCY_BASE_URL","https://www.youtube.com/error_204?t=jserror&level=ERROR");var unsupported=message.indexOf("window.customElements is undefined")>=0;if(thirdPartyScript\|\|unsupported)baseUrl=baseUrl.replace("level=ERROR","level=WARNING");var parts=[baseUrl];var key;for(key in values){var value= values[key];if(value)parts.push(key+"="+encodeURIComponent(value))}img.src=parts.join("&")}; (function(){function _getExtendedNativePrototype(tag){var p=this._nativePrototypes[tag];if(!p){p=Object.create(this.getNativePrototype(tag));var p$=Object.getOwnPropertyNames(window["Polymer"].Base);var i=0;var n=void 0;for(;i<p$.length&&(n=p$[i]);i++)if(!window["Polymer"].BaseDescriptors[n])try{p[n]=window["Polymer"].Base[n]}catch(e){throw new Error("Error while copying property: "+n+". Tag is "+tag);}try{Object.defineProperties(p,window["Polymer"].BaseDescriptors)}catch(e){throw new Error("Polymer define property failed for "+ Object.keys(p));}this._nativePrototypes[tag]=p}return p}function handlePolymerError(msg){window.onerror(msg,window.location.href,0,0,new Error(Array.prototype.join.call(arguments,",")))}var origPolymer=window["Polymer"];var newPolymer=function(config){if(!origPolymer._ytIntercepted&&window["Polymer"].Base){origPolymer._ytIntercepted=true;window["Polymer"].Base._getExtendedNativePrototype=_getExtendedNativePrototype;window["Polymer"].Base._error=handlePolymerError;window["Polymer"].Base._warn=handlePolymerError}return origPolymer.apply(this, arguments)};var origDescriptor=Object.getOwnPropertyDescriptor(window,"Polymer");Object.defineProperty(window,"Polymer",{
URL: https://www.youtube.com/c/CodashopOfficial Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code appears to be related to YouTube page navigation and command handling. It sets up some initial data and commands for the YouTube page, which is typical for legitimate web applications. There are no obvious signs of malicious behavior such as data exfiltration, credential stealing, or unauthorized access. The code does not perform any suspicious operations beyond setting up page navigation and command handling. Therefore, the risk score is low." }
(function serverContract() {window['ytPageType'] = "channel";window['ytCommand'] = {"clickTrackingParams":"IhMIjLLd__OphgMVhOVCBR0g7gOhMghleHRlcm5hbJoBAA==","commandMetadata":{"webCommandMetadata":{"url":"/c/CodashopOfficial","webPageType":"WEB_PAGE_TYPE_CHANNEL","rootVe":3611,"apiUrl":"/youtubei/v1/browse"},"resolveUrlCommandMetadata":{"isVanityUrl":true}},"browseEndpoint":{"browseId":"UC17z6J2vL4GUL6a_A-lMtGQ","params":"EgC4AQCSAwDyBgQKAjIA"}};window['ytUrl'] = '\/c\/CodashopOfficial';var a=window;(function(e){var c=window;c.getInitialCommand=function(){return e};c.loadInitialCommand&&c.loadInitialCommand(c.getInitialCommand())})(a.ytCommand); (function(e,c,l,f,g,h,k){var d=window;d.getInitialData=function(){var b=window;b.ytcsi&&b.ytcsi.tick("pr",null,"");b={page:e,endpoint:c,response:l};f&&(b.playerResponse=f);g&&(b.reelWatchSequenceResponse=g);k&&(b.url=k);h&&(b.previousCsn=h);return b};d.loadInitialData&&d.loadInitialData(d.getInitialData())})(a.ytPageType,a.ytCommand,a.ytInitialData,a.ytInitialPlayerResponse,a.ytInitialReelWatchSequenceResponse,a.ytPreviousCsn,a.ytUrl); })();

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (824), with no line terminators
Category:	downloaded
Size (bytes):	824
Entropy (8bit):	4.880866331098017
Encrypted:	false
SSDEEP:	12:5Q94+f9/pi6L+HUkq81RHU8PpYKCj6pVopJEvQB2JkRvJWn:5c4+fJE6L4Uk7RHURjHp8kRhWn
MD5:	7A04E34B3D63DEF624AF82BA6DF461BA
SHA1:	023F366B89C8F008AC2BDE6246DD9774A21BCCD4
SHA-256:	0AF099B192033202033BB4999EC904031C72F05ED158816144CB898423A3EB72
SHA-512:	F115FDA1DD43E5FB726AD470124EB9B43FE063437F6DF57708EF43946A4C8A22D5E0CC76246B5D098406592B5A8B8887354D874AEF7E6321B8B59D546FC5E00D
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S2/content/common/js/faq.7a04e34b3d.js
Preview:	"use strict";function renderFAQSection(){var a=$(".accordion-container"),n=CODA.Shop.faqData.faq,e="";Object.keys(n).forEach(function(a,c){var t=n[a].question,o=n[a].answer;e+="<section class='accordion-section'>\n <input class='faq-switcher' type=\"checkbox\" id='faq-"+(c+1)+"'>\n <label class='faq-switcher-area' for='faq-"+(c+1)+"'>\n <h3 class='faq-element__question'>"+t+"</h3>\n <span class='faq-element__arrow'></span>\n </label>\n <article class='faq-element__answer'>"+o+"</article> \n </section>"}),a.append(e)}!function(a){a(document).ready(function(){"faq"in CODA.Shop.faqData&&CODA.Shop.faqData.faq.length?renderFAQSection():a(".faq-accordion-container").hide()})}(jQuery);

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	22168
Entropy (8bit):	5.93483918073825
Encrypted:	false
SSDEEP:	384:U62J824pAKFNW2Vr4/r33n4gU9kFcvyO6iH/ug3sOoWEt4bK8ArCi:N2J8FpAuY2VrGn4gU9kFeyO6iH/XsOoD
MD5:	07DF54DF91480FBFE2906765452C6FBF
SHA1:	A52E8A49117192C1EF95BC076DC156B1C64597EF
SHA-256:	27FBF1CC76894C289357A1601105392F1DBAAFABA15DAA258C954487B507718D
SHA-512:	6AC0F00ABD894BBC17C8440F1EFE6AC67E5167D91412B318013A5898713E2DD1AFC9413B2F9E5D93B3A70C61B3FEBC4F5911C471C3016311363D89F147393F78
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/m1/v/t6/An_iJw3Cc3y5RtzEpR0M4CCznWN_ywjtFHZENvSbcomn6tH9EuRIjlfe7xaIpEOIEZAGHfQMVNlOPpkGNsG7fM8CslunKANTZ6ED.kf?ccb=10-5&oh=00_AYBcK8-O3yI6-YhotsoEQ5GrPxPKPphT8rCkVAW5Tzg_8w&oe=6679E218&_nc_sid=7da55a
Preview:	...KEYF....$................. .............H.....4C..4C...@..pB..............................4C..4C......................................................................................................................................................Adobe.d..........................................................................................................!1a.Q..Aq"..#2B......$CSbr.R........................!1.AQaq"B............?..i\|..~.......d.60...h..D.L.3.OB..`..>..eN:).m?.J3x..y..c....1.\|jG...b...?....KH.#.F.Y....MOP<.......}...bB.....c..T.vp...R\|i?...).i49.s?...2.......h'.9.W...G}Tc..V...3......A...i\|..~.....H.3....x..bi,..Gm..G.u8....?ve....J....{..\DW.$t).O..(.&...m'.5Y..U5...&..itM:1.j.t2Q.+...#P........!..h......[~}6.qJ.g...y.G........ ......._.....F..P........./..-.V.&g!..8.U[.[.!.h...y.?...6..D....2Q.f...Fs)Z.Vd... .zB.....wD.7..h.2B.W.V...Z..l.....\6!5...Kc...&.9~.}.....q.\|~~....6..P....:.C....G.\|.~....2...at.vMj-ZL.C...j.3vm`....[.K..)...#;J.1..

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	dropped
Size (bytes):	9731
Entropy (8bit):	7.916382906284698
Encrypted:	false
SSDEEP:	192:WWDKit8AnfrqO52VpmYyIoU33zGE/+DXq2cCzdQf2rSQNrot:dKiGAT+pmYyIoUx/heot
MD5:	94162C96B86009B3FCB1B68039F456C8
SHA1:	2C0E8BEDD8C680A65953FD66B89788B296DC1182
SHA-256:	DA61D18A8F1A883337190F5AA4D395A2F3508A9F8A320F5CADD32AC18D706490
SHA-512:	39E6F0AC44F90E132141A5477000B469EA8DA465D8E7A62FE9AC242F90961CFA0F6BDDBF8314090FF6E8FE7773173F9EF341D05560B22041E579DCC65C279741
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f01000072030000e4070000bc080000ce0900002b10000072170000ed170000ed1800000d1a000003260000....C.....................................%...#... , #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."..............................................................................Sa..}...l.g\6.....uA3;.E...ME...ih....x.f.L.g...l.e}..ucC....t.<./5.....+.a....l......1.QD.U...W.(._..);Wa....g.E/<..u.n3m.{....)<:.`.~..G.?....h%,.v%`R...E...\|}#r...R.2.]IXW7.....)..F.&#QC'M...[...r]...V.b).&........7C.Dv\.sg..B.....0.!.^x[..S...$..{...fF0..&..S...n..&......B.O...V...r.5..........S./`.....pz#D..\|..L...L...$ECy..{JH&...M..A..>Gz...G.WA.f\|.....e...G.)...L7......$[y.a.%./>hIK{uc. ...S4jt.........%.$..\|4.v....;....%...........................!".#.12$...........iu.JJP0F.)..n.cn..f.....H._..t..X,.X...f.Y\..KS.9Q...T..D+.i)...{we6..'.7........).....h....PB..8.c...

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	175
Entropy (8bit):	4.966965284633015
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHtRUhVNBz2SVMzLSQQQEK/:tI9mc4slhohC/vmI4LUhVNBz1VOGQQQz
MD5:	36830448E3F7A1A3A2D487003A091E9C
SHA1:	5E890C51BC88F472775B79639B6C1FC51F08DC05
SHA-256:	31264354C77C510E3AE936076B8C10048515F7F6F5B6EE3EC34FD184144DF96E
SHA-512:	D3AA088237953AC48F2E66B6C3DFBB3A18A11F508E2F2DC650596EE5CE5908D2BEDF2AA01107F0A89DC7B113BBF63C2CB71DA113AD6625047707D3C3E4690F5B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/download/v9/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M17 18v1H6v-1h11zm-.5-6.6-.7-.7-3.8 3.7V4h-1v10.4l-3.8-3.8-.7.7 5 5 5-4.9z"/></svg>

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2898)
Category:	downloaded
Size (bytes):	15963
Entropy (8bit):	5.355880170251062
Encrypted:	false
SSDEEP:	192:spa4Oo9opxjopc+JtzQnNA/qy/ewi5aF2Jp:sjt92N2c+TWNA/qy/ewigFa
MD5:	2B9A3349C52FBA1562BC41811E7F5ED4
SHA1:	1BA700863D4CA74F00CCEA5FE92D5B4129564D6C
SHA-256:	00BBC0A5D2D134C4795FFF8390F76558F42D00E2A4643A9915AC2ED23DB7E491
SHA-512:	D70FDEDF603C6C397599BF9C130A06253DA7A7894FDF0F73347C9A41365C5701CA4FABA2EDFA5B49294E3CB98390B318D77EC09BF9DEC200DFC941B2CCAEE8B2
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yx/r/lIynBvI7H2n.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("BaseResponsiveGrid.react",["BaseAspectRatioContainer.react","BaseContainerQueryElement.react","CometSuspenseList.react","react","stylex"],(function(a,b,c,d,e,f,g){"use strict";var h,i,j=i\|\|d("react"),k={container:{display:"x78zum5",flexDirection:"x1q0g3np",flexWrap:"x1a02dak",$$css:!0},fixedHeightContainer:{end:"xds687c",left:null,right:null,position:"x10l6tqk",start:"x17qophe",top:"x13vifvy",$$css:!0},sizer:{display:"x1rg5ohu",$$css:!0}};function a(a){var b=a.children,d=a.horizontalGap,e=a.verticalGap,f=e===void 0?d:e,g=a.lastRowFiller;e=a.revealOrder;var i=a.minWidth,l=j.Children.toArray(b).map(function(a,b){return j.jsx("div",{className:"x9f619 x1r8uery x1iyjqo2 x6ikm8r x10wlt62 x1n2onr6",style:{minWidth:i+d,padding:f/2+"px "+d/2+"px"},children:a},b)});e=j.jsxs("div",{className:(h\|\|(h=c("stylex")))(k.container,a.maxRows!=null&&k.fixedHeightContainer),style:{margin:-f/2+"px "+-d/2+"px"},children:[e!=null?j.jsx(c("CometSuspenseList.react"),{revealOrder:e,childr

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (655), with CRLF line terminators
Category:	downloaded
Size (bytes):	58656
Entropy (8bit):	4.5823074428837325
Encrypted:	false
SSDEEP:	768:DBFCxFI70AUJLEQxqzS5d9JXgoPnolkAuXIIL2LYMowBibjGNIm7GWk+GU/1mCdL:aYCLHqzS5d9JRw9PjNQNA38NS
MD5:	35D9D28398762940F3216BAA8556A0A7
SHA1:	0830266FC3B2CD3BEF15E4A0003CD6D810798DAB
SHA-256:	04D7D2F8319FDF63E78826401D9666CCC55BA2B920856C3FE5B301F212611377
SHA-512:	AA8C682B4062C852C8D8D50D551B705A008F22F29AE532A1EB64170924FA6CB49FA5D023334AE11E7C3FE9C32E722CFD894F29C8A65A4DB4A6A8036844EC291B
Malicious:	false
Reputation:	low
URL:	https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/
Preview:	<!doctype html>..<html lang="en">.. <head>.. <script type="text/javascript" src="https://cdn1.codashop.com/S/content/common/js/xss.min.js"></script>.. End Google Tag Manager -->.. <script src="https://script.tapfiliate.com/tapfiliate.js" type="text/javascript" async></script>.. <meta charset="UTF-8">.. [if lt IE 9]>.. <script src="https://cdnjs.cloudflare.com/ajax/libs/html5shiv/3.7.3/html5shiv.min.js"></script>.. <![endif]-->.. <title>Top up FF \| Diamond Free Fire Murah \| Codashop</title>.. <meta name="generator" content="coda2" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1, viewport-fit=cover">.. <meta name="mobile-web-app-capable" content="yes" />.. <meta name="apple-mobile-web-app-capable" content="yes" />.. <meta name="application-name" content="Codashop" />.. <meta name="apple-mobile-web-app-capable " content="yes " />.. <meta name="apple-mobile-web-a

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 207880, version 1.0
Category:	downloaded
Size (bytes):	207880
Entropy (8bit):	7.99725908782066
Encrypted:	true
SSDEEP:	3072:eThWqRph/IhsIYDQprvMItnHf2aukyfWPLDMTPAO+p+23NCI:IWqZIhlpoUnHffuxfWPXMUg29CI
MD5:	01B5DCC68AFF09201F8E83A5E1C568EE
SHA1:	59F494BD2DF4AD954D32B8CAE8B5800D4834D716
SHA-256:	3D2B4DEB945A2E8B4A4FD551BD5C41CE8719D34FA4CAEFB7385829CF85CB7590
SHA-512:	700DCD751616E081F1AF9C3D71C5D932946A1F8C750C3D5A76014422B39E452B0DEEEA1F921263CC2282984B616E70F31CC7765128F20ECA05E8C6DD407BF423
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Light.woff2
Preview:	wOF2......,...........+............................@..l.`..&..f........0..S..@..6.$..<. ..}. ..9[..............].;....wW.<5.....I4..........b?.L............0.qJg.S.)...?.......k...K..g...rsW.:..[..Y.................................,.y.6............3..,..+...p.1.........Z.i.4..4..K...u.<..+%.4....8rE..<y^N]...I..}....M.as.........\k+.6R .]UU...2e..D..I.C....\|W.+.Q...Gz2.G..RU..R...kG;...A4$0?<...+.1.P@B....... u.X.$..X.:.q..$.......d....4e.h&..$HH.. !AB...)..>4wr.......?3..B......=.....i....Y>}.Z.X.4....&l..7......@C......D..(..4P=.<9r..<..b..c....Z"A...]j..<...2...`..+.sgZ.&6..W.W......$h.;0.k.....Aa.h.M.2O1.c.bG.rLI..]....2kg.D..X...9.R....D..u...m.wU8..E.$H....c....[+.......-.hU=.t.m..S2...\.\...... 8gp.(.i.W-..A.....0UH.s....t...!w...X..Ps../:.UFI...+..^.w....z.].w....S....\|vu..M..HH...!A.$.j).L..8.;x....>...-....j..-.o.mt?...+E=.......Y43...............I..%.d..U...[....c....rd....~..a.q..<...L..!Z...i........K!<{....I.b.-..".@.......g..]..

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	downloaded
Size (bytes):	9731
Entropy (8bit):	7.916382906284698
Encrypted:	false
SSDEEP:	192:WWDKit8AnfrqO52VpmYyIoU33zGE/+DXq2cCzdQf2rSQNrot:dKiGAT+pmYyIoUx/heot
MD5:	94162C96B86009B3FCB1B68039F456C8
SHA1:	2C0E8BEDD8C680A65953FD66B89788B296DC1182
SHA-256:	DA61D18A8F1A883337190F5AA4D395A2F3508A9F8A320F5CADD32AC18D706490
SHA-512:	39E6F0AC44F90E132141A5477000B469EA8DA465D8E7A62FE9AC242F90961CFA0F6BDDBF8314090FF6E8FE7773173F9EF341D05560B22041E579DCC65C279741
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/359471819_824263999069173_7453749825994799651_n.jpg?stp=c129.0.160.160a_dst-jpg_p160x160&_nc_cat=111&ccb=1-7&_nc_sid=5f2048&_nc_ohc=m0xl1AGKrJ4Q7kNvgFGjLtq&_nc_ht=scontent-hou1-1.xx&oh=00_AYBdRqkh0Ce7D3TU4A8aoPwuvJvYuH31SUopKTc2ALOyxQ&oe=66584790
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f01000072030000e4070000bc080000ce0900002b10000072170000ed170000ed1800000d1a000003260000....C.....................................%...#... , #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."..............................................................................Sa..}...l.g\6.....uA3;.E...ME...ih....x.f.L.g...l.e}..ucC....t.<./5.....+.a....l......1.QD.U...W.(._..);Wa....g.E/<..u.n3m.{....)<:.`.~..G.?....h%,.v%`R...E...\|}#r...R.2.]IXW7.....)..F.&#QC'M...[...r]...V.b).&........7C.Dv\.sg..B.....0.!.^x[..S...$..{...fF0..&..S...n..&......B.O...V...r.5..........S./`.....pz#D..\|..L...L...$ECy..{JH&...M..A..>Gz...G.WA.f\|.....e...G.)...L7......$[y.a.%./>hIK{uc. ...S4jt.........%.$..\|4.v....;....%...........................!".#.12$...........iu.JJP0F.)..n.cn..f.....H._..t..X,.X...f.Y\..KS.9Q...T..D+.i)...{we6..'.7........).....h....PB..8.c...

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (511)
Category:	downloaded
Size (bytes):	2051
Entropy (8bit):	5.245569770149611
Encrypted:	false
SSDEEP:	48:x2npr4QxmTJsIxHPTNSxf0gzu590yKECxex3XZKE+:x44wmTJsYH7NGf0gKT0yKE2K3pJ+
MD5:	A94E7CD86F5824E27720F5D3C712DF9A
SHA1:	7BF52949685727D7133F452B432A57615E40978F
SHA-256:	59CE6BDF8E3D17BB68667499C34A3EC32B9F7836DBCA59D03237A4C9FFFEFD35
SHA-512:	726D7BB3C7D356453A10D590EE4806BDE864FC7E909BA8F03E194B1F1BAA0D65AE8FC89E9E393F2300ED3536969E7445AC39860E3BB0EA338EF19F4B51139B9F
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/aef0ced3/jsbin/custom-elements-es5-adapter.vflset/custom-elements-es5-adapter.js
Preview:	'use strict';/.. Copyright (c) 2016 The Polymer Project Authors. All rights reserved.. This code may only be used under the BSD style license found at http://polymer.github.io/LICENSE.txt. The complete set of authors may be found at http://polymer.github.io/AUTHORS.txt. The complete set of contributors may be found at http://polymer.github.io/CONTRIBUTORS.txt. Code distributed by Google as part of the polymer project is also. subject to an additional IP rights grant found at http://polymer.github.io/PATENTS.txt./.(()=>{if(window.customElements){var h=window.HTMLElement,m=window.customElements.define,n=window.customElements.get,k=new Map,l=new Map,e=!1,f=!1;window.HTMLElement=function(){if(!e){var a=k.get(this.constructor);a=n.call(window.customElements,a);f=!0;return new a}e=!1};window.HTMLElement.prototype=h.prototype;window.HTMLElement.es5Shimmed=!0;Object.defineProperty(window,"customElements",{value:window.customElements,configurable:!0,writable:!0});Object.defineProperty(window.

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	34560
Entropy (8bit):	5.785748593472812
Encrypted:	false
SSDEEP:	768:J2J8FpAuYBhoLE5P9FAO3N9KQeZKnGEialbUSRfllktGj7KeQbyni:J2J7uYBhoLgP/AgaJ8nMavllQGj73QbD
MD5:	0ADC0D9564D090ABE498AE8DC3746E4F
SHA1:	3FEB317473619F73E41FDDF5F2D56767D59CD308
SHA-256:	61B7EC0CD4189F4BD47025C9776BD50871B7E62DC5C9F7BFD96EC34DD9CBC4BE
SHA-512:	CE240344B67388CAAA6FC6B774D8ADEFBA324B9C52903ED46CEB38F1E143A9E12DDCCF95985E8689558A2E3CB28D934633259353B9E69EF1BD6953CF31A4EA83
Malicious:	false
Reputation:	low
Preview:	...KEYF....$................. .............H.....4C..4C33.@..pB..............................4C..4C......................................................................................................................................................Adobe.d..........................................................................................................!1a.Q..Aq"..#2B......$CSbr.R........................!1.AQaq"B............?..i\|..~.......d.60...h..D.L.3.OB..`..>..eN:).m?.J3x..y..c....1.\|jG...b...?....KH.#.F.Y....MOP<.......}...bB.....c..T.vp...R\|i?...).i49.s?...2.......h'.9.W...G}Tc..V...3......A...i\|..~.....H.3....x..bi,..Gm..G.u8....?ve....J....{..\DW.$t).O..(.&...m'.5Y..U5...&..itM:1.j.t2Q.+...#P........!..h......[~}6.qJ.g...y.G........ ......._.....F..P........./..-.V.&g!..8.U[.[.!.h...y.?...6..D....2Q.f...Fs)Z.Vd... .zB.....wD.7..h.2B.W.V...Z..l.....\6!5...Kc...&.9~.}.....q.\|~~....6..P....:.C....G.\|.~....2...at.vMj-ZL.C...j.3vm`....[.K..)...#;J.1..

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 211160, version 1.0
Category:	downloaded
Size (bytes):	211160
Entropy (8bit):	7.99753509518461
Encrypted:	true
SSDEEP:	6144:JjeVyuvBMRrmTGCP2wjnH7IxSttemaflI9G5g:PoyRn6wScfg
MD5:	743278852FDAD61A73198BC74D529AF8
SHA1:	D0F790E800B87B0DB1EDC0AEDD9F3A82F88629CC
SHA-256:	57B0C1D7BEE3F753DA5E6AA215A417ABFA87DD9798EF2483F42585BFB08D64D9
SHA-512:	C1706A2522E9BD9F196D1ECF81D5082E5EB7765D863E8CD81E859FBD6975B687E1A56BFF27B1CBEF55FDC7DD57A1E5AD2722D2BA212048EC89342EAD97B0B7B7
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Bold.woff2
Preview:	wOF2......8........$..8v..............................l.`..&..f........ .....@..6.$..<. .... ..9[.9....9.v..}._.r.sMT9n).+..Pq.D.?...........T.1.&I.....-...2....])n..#..H}.....:..x...t.m.......................................k.{...{.{..,+....... ...e.QQ@..f.V..X.K...........0...8..3I.<.9....K.L.8....E...[.......TU.@. G.....D6X...'..&...!aC...6TV.iXyj..S!!G..-.{..b...F./....T2.O.q..'....D....M..OR%p...>.YE^..8.P..s~..y.8../..G...........Y.....H.2,.........Pp.<..R.a.V...h5.:.!"./T..^.>.V]Y.l...l...fL[.vL...ZXH.R....rI...^.d[3.t..(9>.=N._.Sh9..v..<_..o.[.PJhSK(._D..)..J.\....\|.8...QZ....A..R.]..5.]..qw.JT...P.-Q.4.v.....U....h:....W........!-.k.HU.."..4pq.h....04r.zp......'EB.OL...u.tw......@..F.0..e..P...".....:.u..E.....n..I.t@I.MU..et-8..f..FH...EpKo;..m..'.R...T.lN.f.$......6.....XM..+.J...R.A:3..2...........a..4/.v.....+........`_`K....J...Oz`.?._R..v/. .....e....5......f;.4.2.@.i..$.hH.<.&-.._\|+..=6....S.$..-...........g.]eY^\ej.....y....^1Nu

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2434
Entropy (8bit):	4.737059133849761
Encrypted:	false
SSDEEP:	48:owOGkjKLAltP84lPMYxznNoCGVShuKJpn2:MLvtPhlPMYFNoAJp2
MD5:	06360FF211B374AFC9473FAEA2886095
SHA1:	6E40EC924C7CA539185ADBF78566DAEFEB5B97BC
SHA-256:	EEA10F57C4E2A6677142FEEC3F9353399D500BE403C61C5456881396ADF6FEE3
SHA-512:	3F1A3497714CA8C028469439CEF0B1DAE3805B34447CB96BC2C973A7C98F06EE9F75C91D2DC7DB334ACEB7031888727091B9700E1BEFCE71B5C9A431830CEDA2
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <defs>. <radialGradient cx="5.4%" cy="7.11%" r="107.93%" fx="5.4%" fy="7.11%" gradientTransform="matrix(.70653 0 0 1 .016 0)">. <stop offset="0%" stop-color="#FFF"></stop>. <stop offset="100%" stop-color="#FFF" stop-opacity="0"></stop>. </radialGradient>. </defs>. <g fill="none" fill-rule="evenodd">. <path d="M1 1h21.77v22H1z"></path>. <g fill-rule="nonzero">. <path fill="#F00" d="M22.54 7.6s-.2-1.5-.86-2.17c-.83-.87-1.75-.88-2.18-.93-3.04-.22-7.6-.2-7.6-.2s-4.56-.02-7.6.2c-.43.05-1.35.06-2.18.93-.65.67-.86 2.18-.86 2.18S1.04 9.4 1 11.18v1.66c.04 1.78.26 3.55.26 3.55s.2 1.5.86 2.18c.83.87 1.9.84 2.4.94 1.7.15 7.2.2 7.38.2 0 0 4.57 0 7.6-.22.43-.05 1.35-.06 2.18-.93.65-.67.86-2.18.86-2.18s.22-1.77.24-3.55v-1.66c-.02-1.78-.24-3.55-.24-3.55z"></path>. <path fill="#FAFAFA" d="M9.68 8.9v6.18l5.84-3.1"></path>. <path fill="#000" fill-opacity=".12" d="M9.68 8.88l5.13 3.48.73-.38"></path>. <path fill="#FFF"

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	218
Entropy (8bit):	5.088157969445009
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4SDJhK+WkjWp2IGLb:t47N9U/vmRWhKdkjs2db
MD5:	46911EFE9CA3F93489D0C1927BBD5B98
SHA1:	A587985F1FD3DC99B495BCC620E2351F9BAA13E2
SHA-256:	B202492060B933CE3BCD93EED56F46AB442C61ACBBA6D4C47921417A06439096
SHA-512:	AA70F29C404DF62CCC4514ED432B4315E423FFEF7AB79DFD8985C58909CFA6263EE5F2A8D0A251A4BF0ECB491C9A39D6A6E2A99307A4A75F910530F60633023A
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/message_bubble_alert/v6/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M13 14h-2v-2h2v2zm0-9h-2v6h2V5zm6-2H5v16.59l3.29-3.29.3-.3H19V3m1-1v15H9l-5 5V2h16z"/></svg>

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://www.google.com/pagead/lvz?evtid=ACd6Ktyy4CpeOJYoGLZrUI6-04kWtC61_teFSd322Tpk8_1v8gvqIbjrDkUqOXhRFcBBl8wFGhXOthpgY02HXnlgdUCTEEas5A&req_ts=1716678027&pg=MainAppBootstrap%3AUnclassified&az=1&sigh=AB9vU41_uQp6RALZ9zm2viXQa8klyEvhzw
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	593
Entropy (8bit):	4.524151373929859
Encrypted:	false
SSDEEP:	12:t47N9U/vmRGtKL62ZG3XcZsRq6JoNiLrRKMszLgWEajiexYNjbv:t4jU/vNKLgXc6RqCKkE+qTCn
MD5:	CD203C4E6B3788438827E21F28380A98
SHA1:	374FE8D0C91F9C94E8FEDA631E20D11C55E1C9B0
SHA-256:	396B1892EBAA72D0874C8D0A3AFB87B803560058D84FAB6A29761A4D6238F8ED
SHA-512:	2E4278A0355E84888561BABF3D0FDABD29AEF0FEFDA84199E794D4CBFC6E01FEEA9C0E91F5EC521E0197F1569788FD36DFC2A0F0BC7186A4D805EB8A9763579A
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/broadcast/v2/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M6 12c0-3.31 2.69-6 6-6s6 2.69 6 6c0 1.66-.67 3.16-1.77 4.25l-.71-.71C16.44 14.63 17 13.38 17 12c0-2.76-2.24-5-5-5s-5 2.24-5 5c0 1.38.56 2.63 1.47 3.54l-.71.71C6.67 15.16 6 13.66 6 12zm8 0c0-1.1-.9-2-2-2s-2 .9-2 2c0 .74.4 1.38 1 1.72V22h2v-8.28c.6-.34 1-.98 1-1.72zm-9.06 7.08.71-.71C4.01 16.74 3 14.49 3 12c0-4.96 4.04-9 9-9s9 4.04 9 9c0 2.49-1.01 4.74-2.65 6.37l.71.71C20.88 17.27 22 14.77 22 12c0-5.52-4.48-10-10-10S2 6.48 2 12c0 2.77 1.12 5.27 2.94 7.08z"/></svg>

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	372
Entropy (8bit):	4.852483300837517
Encrypted:	false
SSDEEP:	6:tI9mc4slhohgqWHiA4vmI4lAwuQgQIVY6Wqx5Xt6M0TRcmQTIfyuETUrNmraXnPZ:t4noOAvmRHnIq6JmM0T7QobETUrsOpka
MD5:	388308EEFFE6F910D8A30CA28F6A4306
SHA1:	864144A8145338E37C1DEF12177A02EECBABA4A2
SHA-256:	A78851FF5ED5AB0CB2DE879F608214C4C33BC41841F279B1F622835407AEA643
SHA-512:	460C26A65AB98BAD2574A5A3405CBFEC71465544632887C388E982E84EBEC2E45F21D703767783199186C51A2998965EAB3A66F5ECD4753E26D6B257ECDAD0DD
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" style="enable-background:new 0 0 24 24;" viewBox="0 0 24 24" width="24"><path d="M12.5 6.44v-.5C13.36 5.71 14 4.93 14 4c0-1.1-.9-2-2-2s-2 .9-2 2h1c0-.55.45-1 1-1s1 .45 1 1-.45 1-1 1h-.5v1.44L4 13h2v6h1v2h1v-2h2v3h1v-3h2v2h1v-2h1v-3h3v-3h2l-7.5-6.56zM6.66 12 12 7.33 17.34 12H6.66zM14 18H7v-5h7v5zm1-3v-2h2v2h-2z"/></svg>

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	78
Entropy (8bit):	4.858681545591168
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5KVErcHghI4KuP0WTC:tI9mc4slmR4rTC
MD5:	5FFB1290441ED5E56850CC92DB640DBA
SHA1:	ABD55D2B6EE392BBC8A89FDCE5B8560E37119D90
SHA-256:	C74EF8500A3AE98D1E16F03B030BFD6726DE72A8911FC397D3301E4B9D86369B
SHA-512:	83826FC55AF7335F3AE5E14CAD4056942F3F9C3FA3781258A771710DE1D32EB3412897F6AC3E09090192BE11EB490F996EB475E7B563EB6CD6B15A8F3A1B008F
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path d="M8 5v14l11-7z"></path></svg>.

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 249 x 232, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7828
Entropy (8bit):	7.961214155097688
Encrypted:	false
SSDEEP:	192:rpJ13y/pnGNCfUcX13MAGBB07KmlH3MQp2MtRS:9P3yxnNX18l07TlH3pTS
MD5:	D9C3C75925E0411913DBAE0E06616373
SHA1:	F3F1FE7808064C7C4807C70AF20D1482B6BC0E9D
SHA-256:	EF8444C7729F3D6D62C0B37062C1F167627717C8EAA7637BC657DEE259D7E930
SHA-512:	17B682392BD5D79070AB46CCE9AEAA754752217C66F34F5B618E9822AA313017998CC5117DE858147AF7ADC0AA6500770FAFF55572328CA5D6B067A7B9425F12
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................gAMA......a.....sRGB.........PLTE....7......................."X.......D...........6..4..6........5..5..O..5..5..6./e..5..5.....6....\...:..8..5..7..5..5.............................5.s.........T.a...6......!8l.!P.....A..6....6b..<....<n.X.....Z..J..........U..%Z.iQI...D1-z]TDo....@?F.........ZM0......WT7.Z@4..6..........}8.........80 ......)!.D:&.............$..-'. ..8..>7$...4).NA)......0'.2+.....A....<0.SG,...D6..:..K..=....-$...._P2......{..?s....'Y.$ .)#.9e..X....NG~......N.......WI-JG/......C?+99?....dU8-`.PM3...j1...f....<3 kJ$......Ba.....x6...s4..Mp.........f.T...x..z[1........]A .]+..........7.k\?.vXMz.seI.....t...W...........{lO.t@+/.........Q9...I........<paD;.....{`..nTP6j..........j;..}^\d.....}..zk.....k_U>9spyVT[.....y...KJPhfn...........Y..\V...WtRNS...b..o...............?.....)....wJ.ZfJ.5..U.v...... .......@..........................q....IDATx..w\TW...AA...i"DQQQ.%j.4..lv..p......L...t)."R4.

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	652
Entropy (8bit):	6.313297232449613
Encrypted:	false
SSDEEP:	12:6v/7DBhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhE:shhhhhhhhhhhhhhhhhhhhhhhhhhhhhhi
MD5:	5475C619210FEF062D0881C3532F5485
SHA1:	A0F48F20F0415A0B59B1F5183F78763759C63E40
SHA-256:	4156065A8A70E9DA5684B34872865EB1BE18F75859603FDAA1D3A6AA8D6B7E2F
SHA-512:	6D95016051B5D431BEA82E4C180268C8809997E58F95554EF56DB5FEE734003CFE750CA3236F8754525969B3602A479E05BFFB8B9463E2651DF3B9723A99FB61
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yw/r/8iuTX4LlGZO.png
Preview:	.PNG........IHDR...$...$.......h.....PLTELiq_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs..jq...HtRNS...x.......b.L...,.0Z...m..1.........[<.y.d..}......Q...$+..-.M......-{."....IDATx^..gS.P...C.F.HHC.....^..."!F.sW....... ..>... .:e),........d..E..S....)..q....b~.5........VD..0o.h....F&:.H....X...N...2.....o..v..U;o...8v....>75.>.....Y..l..NL.AZ.}....b..jfV[.....U....dzgP...w.M....Q.j...U....L2.{.(....x.7.Y\.D.....?{.R...>..fq.`*..E.J,.z..\|...t.t.......IEND.B`.

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	220
Entropy (8bit):	4.95427055782646
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4VJD2zPdqUQx+dt:t47N9U/vmRf2bQxS
MD5:	64C5CFD76908E80E8D1C35BB65CF26CB
SHA1:	DCDA22BE3CFBA2AF2C7CD98465F601E8B3C5888A
SHA-256:	59BD8FAC9261910ADAE788A1BA4E550544F05A84312049D2C254FC37A7596CC1
SHA-512:	37C54AF2F2D644BBA688775BC77FB0AED604F9ED4675FF89117A0AA264C62A0291AFC145A7D20C4C4D14F13E6C460CF6D39B1F925E442BD7A3A190BA77B98DE7
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M12 4v9.38c-.73-.84-1.8-1.38-3-1.38-2.21 0-4 1.79-4 4s1.79 4 4 4 4-1.79 4-4V8h6V4h-7z"/></svg>

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	512
Entropy (8bit):	7.250428396891565
Encrypted:	false
SSDEEP:	12:6v/7gPLJ8Dahobc/px7phCGRMR80Qwai+OEcS9bRF:gDrqpx/l6R80QwpNzURF
MD5:	A8F5DFAF76ACCEA155F0ECBAA5112B79
SHA1:	E59951DCE24DB3F32D349C0C369D4C6A3CCB6CC4
SHA-256:	9514BDA304FC235F59B5C09E7055053E09DF34D9F0DAFC3986698B7C0CF22711
SHA-512:	0C987DCC2B0B7C04F920B8340C74348D550B97E36C4D210DED178465E8006C2CB904F8A610BF83F31E9A4353CB538E3F4A4397F643E8C95E0B547544B412954C
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn1.gstatic.com/favicon-tbn?q=tbn:ANd9GcTdvpfhJ91t1PpkVUNUZdjXGDatb07n_c8HQwwKC4xx6PbNLPYQj-CBg_I7oiLfCt91VJV-RiOvsrUdHS8z9xQB9ntAlufuKrtkm07WPpyytAfUuY9H
Preview:	.PNG........IHDR...................cPLTEGpL....................................$....%J7P...=(D...qcu.....cPh.....XF]0.9.s................dm....tRNS.%j.2...f.q;.E....@IDAT(.mR.r. .....O......WF`'..d....j.c....`...._..9.7...._....u3.].7.Tl'...W>.W.t... ....G)...q.n#.<.P.r1.j!vR.Y....\|..{!..S.z.l..l...;...g.Y.?.V..lx...l6...."$u...sff`V..!YuJ<..:..F...q.U.U..D.u...Se..@,..l ;P..kA................67..Y.....,D.*....Y.p.....1..(.2..K.s.4\&^..a$G......>..$sXZ....v....i.ghL.>>........k.k.....IEND.B`.

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 231712, version 1.0
Category:	downloaded
Size (bytes):	231712
Entropy (8bit):	7.997989633392637
Encrypted:	true
SSDEEP:	6144:vjpKPgUn1+TlJ7YkfhelJ5Hl6YohloFU4yy2sL:vc8TL7DWf3oDVy2sL
MD5:	FCCD49E77F1D0FE7552D11EC3697A5C7
SHA1:	0314A4D1109FD76BEB5AB8F28A402F920FC2A225
SHA-256:	405DAE7456BC82C5F43ABDE71FDDDDE1BE42A759B1CC7DB12756D3C119AE5457
SHA-512:	CD2E160021654C9C466FE9E0DB6CC8E70511C8893EE8E34507661F1B6893F09D70AB84310B8971D6224F5D199060509FDF067A6AB0F7498088FF889488D69850
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Italic.woff2
Preview:	wOF2....... .......X............................... ..l.`..&..f........,..H..@..6.$..<. .... ..9[......[:......K .@j8\.".... ....P#.._M.y.K.......1.,D.....A.5$.. .X.....!r.]..x.;G.".<.o...................................=...}...... $@XV!...."X.T@.(Z.i.....3.&@..X...0J$.0.E.T...0.d.0.r$y?..{V.....W,...{$.A....NE]..{....g./.>....x..:)..P.<..).#..<.=\.P..V.=..6...-.....a@Q.L.A.....'.... ........&.8H3.#Y0g.l.uZ.&...cd.g.(..=.s;_D..L.-8.C-...+.BR.(X.#.%.........D.o.//C1H"!A.D...H_..x.2.b.........I..5ADWW.....u.i.3....."..........T.....<.o........JB.3...-.;%.ZlG[......E7.v.k.[Y......./x........{ .^..by...U_.y.O....(K..T.q..F:Cm.c..[.h.9...<jSE../E."..."aM...]..2N:..>4.&..!u.GB.$....O..v..vP.....4..0..,.......Px.8.(...V.x..<.Y.Fm.l...._..*.0.&.~..O..Fh}.B/...8.....t.c...v..$xb=..D...q..-L.P...R. .U@.).........[$h..6....G:1.R..J!.swc....^....h.z.k4Xsd.u.A.-..:....w..s.O..z.JQ.r....q..i.o.....@r..s;}J..&.c.7;b.l....1?..&.$.5...T..P....Z$A...;p......

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	328
Entropy (8bit):	4.751341136067324
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4TnMvnY0eLZ72LYMF5fcX1FCG/hd9qCWz:t47N9U/vmRjMvQZ7Bcpc/FqCu
MD5:	DB10DFA9A782446C2C69099E4CBEBDFF
SHA1:	92B57DC3DD3C747BEB1B8EB98D1CBC3D6AE9B7D4
SHA-256:	A6BDEE4CE3188A10940EDC0B870B2898CA2E4311836712341546E3CDD08E3971
SHA-512:	96499DB26CF175255484317AFC93B2CC96A5D18E235FC67B9ACBBB3E00B46B3A7E1E6C551764EEBB0A48856FFC2DB5DCA1EFFE478BB417B581E89D435A70449B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/search/v8/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="m21.24 19.83-5.64-5.64c.88-1.17 1.4-2.62 1.4-4.19 0-3.87-3.13-7-7-7s-7 3.13-7 7 3.13 7 7 7c1.57 0 3.02-.52 4.19-1.4l5.64 5.64 1.41-1.41zM5 10c0-2.76 2.24-5 5-5s5 2.24 5 5-2.24 5-5 5-5-2.24-5-5z"/></svg>

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	dropped
Size (bytes):	7793
Entropy (8bit):	7.897352968803794
Encrypted:	false
SSDEEP:	192:1MviRi2heWivkjYoxSs4rgqKPUo16T1ZUK2qdemT9Pu/zUitLJ7NrLK:1MaRphfivksoxzugqXo16T1OKBdH9diI
MD5:	56F07C6E9179EE2097F224E1A601294E
SHA1:	8DAA98046620FB360649B934D05873BD8928B2D5
SHA-256:	E301BAB469E0ABF177FBAEDD3EE44CBEE7B6CCD1679DD094E76CC49B0CD8C9FE
SHA-512:	25E844052C7E4F9599D1898F67FE5A7A4559110CB1C8B4C0F887C8B5B68E646F294F2538AC3761BCA84F5CCC4DF8A5F597745B42640D381F1A7C0425D668A405
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a70010000540300009c0600002f0700005f090000200e000029130000a7130000441400006c160000711e0000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."................................................................................7.$.$.X......gV...E.8I+.$.$.k..9..:Z\|...Jd2.=-..t.8.....Ci.....s\.D...0.."i(mX.BG...S.......(.?[....%......%-....6c......U+ .[..;:.U...jG...3....!2.s.-.....I.%o;6..Yj..Y..Y...D..&....\|........d.E.....>.#..~..IK..`sk+.".^wn.lq3..h.hef.....c.e...K4...N.[...~.4V...g=3.....<....s.-A6sI.5P.\..I.H=....5..-l.$JT.79h.\|..<..a.6.+...r.$b......C.]s..V?..B...na.6..~..Y.O.]1..1Dy...897.u...g.Y.gy.P..h5=.....(............................. !"24#$01.............0).H.2..7.z..).X..s+.mu..6..?[....Ib1.!...GO...J....\|.+i...8..I.~..,:.K.kM>.5_e..\|ZG"yA..{...h.,.W&c..l%....d.....1S..d.gd.E....

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	118
Entropy (8bit):	4.774740462043314
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHc5n9vb/:tI9mc4slhohC/vmI40n9z
MD5:	0336FA898DA5EAFB175287497BD5012E
SHA1:	39A3A9E6F8987E8AC432198B0C5DBBCD74E32FC5
SHA-256:	5660191495ED6B9EA68BAA8DA4E16E4EC8B824EE87831B30A4E385AC5110E341
SHA-512:	7F8BAD80051931A81816D49036AF9B0812341576E143DC82E98960AB1F2F85B4D12D330B3257ADACEE8BFA7215275895D86BAED9B35A61180BCAD58B648557D5
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="m7 4 12 8-12 8V4z"/></svg>

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11652), with no line terminators
Category:	downloaded
Size (bytes):	11652
Entropy (8bit):	5.126920745441861
Encrypted:	false
SSDEEP:	192:sHXKvExv22ZavI6X6zJR1Txn+fcogfM4yqxHK/25AGvP:s3KvIvRcvZ3f3gfB4KP
MD5:	8675EB0F27DBED41CF71E85CA9BD2C3A
SHA1:	29F18E71538E62C7DD0FC9F12615C58B877BE37B
SHA-256:	A0AF83E83BC656E00490CBD47CC0E08AC4B9FA1EE3A50F2DD93B407CA9E2D3AF
SHA-512:	1AA4F7C1787D8CF8300D2BC535D1EB7C36B820B91776EC71F2B7C2595F1A51E26A0E5EBC425C13186198BD1BE1E82EDDADD07EF7F520B222A7876BF6C287F282
Malicious:	false
Reputation:	low
URL:	https://dl.dir.freefiremobile.com/common/web_event/official2/dist/client/css/6786561.css
Preview:	.leaflet-image-layer,.leaflet-layer,.leaflet-marker-icon,.leaflet-marker-shadow,.leaflet-pane,.leaflet-pane>canvas,.leaflet-pane>svg,.leaflet-tile,.leaflet-tile-container,.leaflet-zoom-box{position:absolute;left:0;top:0}.leaflet-container{overflow:hidden}.leaflet-marker-icon,.leaflet-marker-shadow,.leaflet-tile{-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;-webkit-user-drag:none}.leaflet-tile::-moz-selection{background:transparent}.leaflet-tile::selection{background:transparent}.leaflet-safari .leaflet-tile{image-rendering:-webkit-optimize-contrast}.leaflet-safari .leaflet-tile-container{width:1600px;height:1600px;-webkit-transform-origin:0 0}.leaflet-marker-icon,.leaflet-marker-shadow{display:block}.leaflet-container .leaflet-overlay-pane svg{max-width:none!important;max-height:none!important}.leaflet-container .leaflet-marker-pane img,.leaflet-container .leaflet-shadow-pane img,.leaflet-container .leaflet-tile,.leaflet-container .leaflet-tile-pa

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	1115
Entropy (8bit):	6.323598083629364
Encrypted:	false
SSDEEP:	24:gqumRoyc1sp68RdfC6CX7emPkXzqvVFziHmOB:gBmRoyiW6ydfdCX7emQzunzO5B
MD5:	677242E9AD29123CF887BCE628E6527C
SHA1:	26AE76A84C4A174F024A4A8D72106DFB2A58869F
SHA-256:	01C145B6B7935CA5B47831210A371C037FC5FD54AB8EFE2D3EBF3C922AF61DFD
SHA-512:	ACB755E4F99DA426C6C67ECD72A885B315D68ED889B70CC19B4416EEF6B4B69F97149818955F0161E70E7DCBB44C1E556C7A1297CCCF0F70921B091B42D3FB82
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6e010000b1010000070200003602000071020000e50200003e0300006a0300009c030000d30300005b040000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...... . ..".............................................................................r.).u(JD.kT..k....................................!............S..Q.}..}.e....oz..\..:.....T.q..P.9.JqR...........................!Ba........?.....e\|6?............................!........?..:.....{{.s}...."......................!.1AQ2abq.........?.S].x...`u...v.H..........oe.S..u..>....RH ........(.$..Z...e.""p................................!1Aaq............?!:.@...#&.....hXr..hn...]F*3unW...Rv.Ask.._..v.y.......Bl.8``....m.......O..............t..........................!1.........?..}c...U_'........................!1q..........?.T.7..N.....9..........................!1Aaq.Q........?.;.X.Y...N..

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	190
Entropy (8bit):	4.7187854291824936
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHlbRvFjonQFWL4UUk+uUQRNru7u5WLp+:tI9mc4slhohC/vmVR9MQF1Nk+bQLL0LA
MD5:	DFF69AA895E01665A126FC2141C94FE5
SHA1:	4064D2365E13C8A346B1D4BBE31BECD3A18CF5B1
SHA-256:	811E9985BE1AC4E4D630F4B232CEEE366801CB5F82EE306A574C1CE9F844F673
SHA-512:	CDC9FC460CBDA1DA0EF8E7A079FCBBF717E800F732923607DFBFA57E00FD3E8A2B487E9D2FEA95294DEDBA9DA5CFD42491BD3AC65219AEC954A20CB90FDE49B5
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><polygon points="19.35,11.5 11.5,3.65 3.65,11.5 4.35,12.21 11,5.56 11,20 12,20 12,5.56 18.65,12.21"/></svg>

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	260
Entropy (8bit):	5.004023285375928
Encrypted:	false
SSDEEP:	6:tI9mc4sliHFhC/vmIj5tpS/riWcm94BkOoEg6YaJAME:t4IlU/vmwezL6yME
MD5:	4C03F409D2394DDE00F50B3EBA37F175
SHA1:	602F037E50C8E4FDEDFC2DF1D486C6F362332FC6
SHA-256:	F232790335F76F7D938BEE8C4A8B12EBFFFFB555B005B7A8B7FC1465B4BB9380
SHA-512:	E0D389BE485482A9CB9B6F90135D5E5208177C826C92E1933452629EBEBAE9D20B5729AA1BDD9600B3CCD81B2DF9D5082F0349427499F99E3AC1BE5CC3A7E1C7
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" fill="currentColor" height="24" viewBox="0 0 24 24" width="24"><path clip-rule="evenodd" d="M16.296 16.996a8 8 0 11.707-.708l3.909 3.91-.707.707-3.909-3.909ZM18 11a7 7 0 11-14 0 7 7 0 0114 0Z" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 246x138, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	2498
Entropy (8bit):	7.916803095655323
Encrypted:	false
SSDEEP:	48:3hTw039xS2lNJfnZei3iQuoDlRpGIHuVMw3n9k+y+cGciz3cQLIRCB:3Zw0NxS2NJfZFnBGOW9k+nErRCB
MD5:	FAC17E17571AA331BA4EE790FDAEA0DA
SHA1:	9BF85EF268B137F2CC97F07B4220A37A20451C81
SHA-256:	590FAF44632B84784C214608A39D1FAB06548BF57EA888DEF7E36B08A6F906A2
SHA-512:	E7F12F7C00CD9F6C882F8DBA07B126149799956B0CFFB0E95DE992817CAEA79A50AE09EC22388C0371052F200577BEAED2F36C5DFC0D3B91E35BCAC930E1F09B
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .....1.......>Q&.F#.!.#..Pp..cn..'.].i........? 9.y...2...]}....?.Oe..=.?NzX...I.....;........>.o@...M_f_...?o=..kto.......k..<.`........?.....}..k.[...........W...7......~.{.~.0.W..MVu....FF....u........;?....9.B...de....E.=)\|of.W<.A..W....e.#-.C.i..u..`\|:..."x.o...3...6.....U.......V.j.k.n..............WF....>/...Y..F[....d.m.G_Z..4.pjvF[.....(6..Y.]..............7!.....F.......g......w.T.....\KFo.2#...B..__+I....d....k...=C.Y..L....? .....p[S......f.U*.@...K.[U..x.....c.D..=rKu...up..."<w;.<....Y...@...\.{.....Q.a.I9..Y.....G.:bf....va.VE.A.E..........4..>.V.B....Zh.D;t1....8".q..n..M...Y.s..wO.V.LwC.W...=...P.>x$..M\..#.tX!.>!..n...h_C\|C..tk.?..k.ox.....V.].h....x671>.2...^....D.W....Ub4..~i.P.......2."..4.(_OBC...N!:`.T..].r.v[=.9.S.:.W..>.pS&v.O2.Y.\...F..}....S`..............?.,...z...],BS..9.....b............7A.!.U..N.....]..{I;\.x<...9...;.;h..;.....H...rx.Oe..ux?...^..0.R.2.....L..X...O.>Z.x..q...O...E5G2...

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (62770)
Category:	downloaded
Size (bytes):	77114
Entropy (8bit):	5.170898107825504
Encrypted:	false
SSDEEP:	1536:WfR3KUYz6yUa1q7SV0B1SxP4nH+wrI1CuoY:I3KUYz6yUa1q7SV0B1SxgnaloY
MD5:	FE0E3DC0EEE845F997A322BE7D0B3CBD
SHA1:	D6D3F9283E25267992031094229CAAD2EA1C98A7
SHA-256:	C58B63D276ACF326A1D1EC0EF32D3C53628B36C79935E5412073A36D0E7C0B48
SHA-512:	C0E28A0C5DF510B7A0B478B6759C8BA1B7EC70A791D87DFAF4BD39C18BB1E47317140755F1811C6643284B6E22A1BED5C0DF4923DE16012434EC6E0380E26752
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yc/r/cGxo7_n9cky.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("BlobFactory",["emptyFunction"],(function(a,b,c,d,e,f){var g;function h(){try{new a.Blob(),g=!0}catch(a){g=!1}}var i=a.BlobBuilder\|\|a.WebKitBlobBuilder\|\|a.MozBlobBuilder\|\|a.MSBlobBuilder;a.Blob?c={getBlob:function(b,c){b=b\|\|[];c=c\|\|{};g===void 0&&h();if(g)return new a.Blob(b,c);else{var d=new i();for(var e=0;e<b.length;e++)d.append(b[e]);return d.getBlob(c.type)}},isSupported:b("emptyFunction").thatReturnsTrue}:c={getBlob:function(){},isSupported:b("emptyFunction").thatReturnsFalse};e.exports=c}),null);.__d("CubicBezier",[],(function(a,b,c,d,e,f){var g=.005;a=function(){function a(a,b){this.cx=3a[0],this.bx=3(b[0]-a[0])-this.cx,this.ax=1-this.cx-this.bx,this.cy=3a[1],this.by=3(b[1]-a[1])-this.cy,this.ay=1-this.cy-this.by}var b=a.prototype;b.sampleCurveX=function(a){return((this.axa+this.bx)a+this.cx)a};b.solve=function(a){a=this.solveCurveX(a);return((this.aya+this.by)a+this.cy)a};b.solveCurveX=function(a){var b,c,d,e;for(d=a,c=0;c<8;c++){e=this.sampleC

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	259
Entropy (8bit):	4.710851372205651
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4zmgwDe4btnRm31IE2l0kjMswple9SY:t4noU/vmRzmgw3tnRm31IEURwpY
MD5:	AA228455232ACB0A6378FED3354869AB
SHA1:	3447461B1713396150ED0DB5067AE45BFE9F024B
SHA-256:	1C594744993B086F8C4D3ABE3A4EF2794F1D1BF0D680A354EC0561AFCE427140
SHA-512:	CE2D4D2D8204EEB68E702F71D87B56CE970B4ACDF547AB20FA4A8B281C655FF41BC175A7949F6B453D7ED4A7EF8DE28C2B6774A67708DB8B7047DB3DFDFC2991
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/add_circle/v3/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M17 13h-4v4h-2v-4H7v-2h4V7h2v4h4v2zM12 3c-4.96 0-9 4.04-9 9s4.04 9 9 9 9-4.04 9-9-4.04-9-9-9m0-1c5.52 0 10 4.48 10 10s-4.48 10-10 10S2 17.52 2 12 6.48 2 12 2z"/></svg>

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	45660
Entropy (8bit):	5.907863825754591
Encrypted:	false
SSDEEP:	768:D2J8FpAuYQFcenF9AclzvnxQSAyn8+cQGQMoFLyZi:D2J7uYrenrASzaSA3+cCK4
MD5:	E9385DCE39C5167754C02EE58CBE9539
SHA1:	3CEC73883BAC7811DEAAEAAD37FD169A13EA7291
SHA-256:	E790F53E529219A3FB8B3579CB5BEB36276C2A98C02D612757CCEC5917940B79
SHA-512:	8F046BC02C35E87CB79A54265FA7008AEF54BC3015438307A70850F00FE49EACEB48CD50EE77AF906DBA719A201305B6E3E0F215CC3D54D23BE457CD9FDBA78F
Malicious:	false
Reputation:	low
Preview:	...KEYF....$................. .............H.....4C..4C...@..pB..............................4C..4C......................................................................................................................................................Adobe.d..........................................................................................................!1a.Q..Aq"..#2B......$CSbr.R........................!1.AQaq"B............?..i\|..~.......d.60...h..D.L.3.OB..`..>..eN:).m?.J3x..y..c....1.\|jG...b...?....KH.#.F.Y....MOP<.......}...bB.....c..T.vp...R\|i?...).i49.s?...2.......h'.9.W...G}Tc..V...3......A...i\|..~.....H.3....x..bi,..Gm..G.u8....?ve....J....{..\DW.$t).O..(.&...m'.5Y..U5...&..itM:1.j.t2Q.+...#P........!..h......[~}6.qJ.g...y.G........ ......._.....F..P........./..-.V.&g!..8.U[.[.!.h...y.?...6..D....2Q.f...Fs)Z.Vd... .zB.....wD.7..h.2B.W.V...Z..l.....\6!5...Kc...&.9~.}.....q.\|~~....6..P....:.C....G.\|.~....2...at.vMj-ZL.C...j.3vm`....[.K..)...#;J.1..

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	12996
Entropy (8bit):	7.9662740110146055
Encrypted:	false
SSDEEP:	384:DwSEz6W2APrtCQP7417ezizMW/9owEMpclep:DBupTtH4Jl/FB
MD5:	9AECEAB37CB5CA89E39EB0AD33806BDB
SHA1:	96012741DC17BF61C8DDABD346A177F8FC0BB724
SHA-256:	A4D1848DA3C1C75F39B9DF09ED1D30776ADADE8212E6D8CB3B3BD5999C36CE29
SHA-512:	50D58C6B794F2D23DCABEC2929FD1EE91465569F212EF743C0DA6C55C297EECBB328463AFFCF6AF4DC43AAC547E5A9A07FD12825F3CB6949E43E4D60BB30CD56
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............":9.....sRGB...,... .IDATx..w\|UE...9..sK.....{/./.....A@W\..."`.........W,.... .t...-.....IBhIHr..8_.'...{....g~.<.?.j..R...~...'..\..+,.....%!..rI...\..+,.....%!..rI...\..+,.....%!..rI...\..+,.....%!..rI...\..+,.....%!..rI...\..+,.....%!..rI...\..+,.....%!..rI...\..+,.....%!......8.<.?..B.!.....\p..;z..K.,.8q..Q.,.2M.8....h~.P....#.DI.=. @<f...G....@B...{..^.V5I...].M....y?.....3.......Dm8~4s..-.^.l.-.bz.C.fC..`Z.i....w..s...S......ar~>.c.<kn...G.I.${.L .m..g..k...f.?..`J J .D.3Z...Q...6P...4o.W..}....z.jD.S.nP."..>....DX.... ..G.$0M8v.....,Y..u{....X.E.................C..zz.V..t..}.N..5..%..C.,...1..Wz.Uba..N.`I.d. ....;...v.U[......-.$.B.....,...1v.m1S.....`.V.;...O..[W...1.:3t.QV...J),g\|.EQ.H......;....k......{..AL."."b......R..B.a..(.:.&..H5k.j.........N.z^U.,04...8.U>aQJ%Y.x..?.;6m_.l...kvn...d.dP$....m..~...$.....O.#...L.t.<EJi.Y.>];...m..jAM...;#ne.....4..........eG...@.A.A.....3.BL. @&.........e

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (1120)
Category:	downloaded
Size (bytes):	5598
Entropy (8bit):	4.293279469529671
Encrypted:	false
SSDEEP:	96:04JsH5RGMp9UC96s4AJu4m35PznhTJAxfxZN0rDRMW8R0aaQWD3rKivMt:0ai9UCgs4AJ/mpzcNx/eMw1QWD70t
MD5:	2FC13E5E6B51277D7A39CD7AD7D14158
SHA1:	0C9A5C613E5B853376CF2B96D8501EE5960D09C9
SHA-256:	9073602654785DE3537C4AA85E69847A0BDC871F8DAECB053C7698D4AFE8F6DE
SHA-512:	A1F8493CFC4F9C619785D9E39F0E9A54420643C3905193E6D5FFD7531184CA5E5B0FE1B43E7307506ADC01CBB397E4A1CCEA63ACD37304360AACAD8FF06D6DB8
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_fill/yt-logo-updated/v2/24px.svg
Preview:	LINT.IfChange-->.<svg xmlns="http://www.w3.org/2000/svg" id="yt-logo-updated-svg" class="external-icon" viewBox="0 0 90 20">. <svg id="yt-logo-updated" viewBox="0 0 90 20" preserveAspectRatio="xMidYMid meet" xmlns="http://www.w3.org/2000/svg">. <g>. <path d="M27.9727 3.12324C27.6435 1.89323 26.6768 0.926623 25.4468 0.597366C23.2197 2.24288e-07 14.285 0 14.285 0C14.285 0 5.35042 2.24288e-07 3.12323 0.597366C1.89323 0.926623 0.926623 1.89323 0.597366 3.12324C2.24288e-07 5.35042 0 10 0 10C0 10 2.24288e-07 14.6496 0.597366 16.8768C0.926623 18.1068 1.89323 19.0734 3.12323 19.4026C5.35042 20 14.285 20 14.285 20C14.285 20 23.2197 20 25.4468 19.4026C26.6768 19.0734 27.6435 18.1068 27.9727 16.8768C28.5701 14.6496 28.5701 10 28.5701 10C28.5701 10 28.5677 5.35042 27.9727 3.12324Z" fill="#FF0000"></path>. <path d="M11.4253 14.2854L18.8477 10.0004L11.4253 5.71533V14.2854Z" fill="white"></path>. </g>. <g>. <g id="youtube-paths">. <path d="M34.6024 13.0036L31.3945

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Category:	downloaded
Size (bytes):	15744
Entropy (8bit):	7.986588355476176
Encrypted:	false
SSDEEP:	384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/
MD5:	15D9F621C3BD1599F0169DCF0BD5E63E
SHA1:	7CA9C5967F3BB8BFFEAB24B639B49C1E7D03FA52
SHA-256:	F6734F8177112C0839B961F96D813FCB189D81B60E96C33278C1983B6F419615
SHA-512:	D35A47162FC160CD5F806C3BB7FEB50EC96FDFC81753660EAD22EF33F89BE6B1BFD63D1135F6B479D35C2E9D30F2360FFC8819EFCA672270E230635BCB206C82
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......=........t..=..........................d..d..^.`.. .T..<.....\|..{........6.$.... ..t. ..I.3.%.....8..&....4Z.\|t .8.........D...$.uNE.P.E.Ak...=.x.9Xz.`.I..R....#F+B`..}.RP\|E...Z\.W[.............C...QB....m...cm.?.F.g.......Q....3......p...L2.[......!+@U..^~.......D.?.......j...U...c..U.l.6{...m.CD].h.t.....Q8.....@P...L.c.....+...ZD..2.K...:..4{g..:..~....v......<..H^.R.'....8....?.;...uy.VW..8=.".F..*.....@E....c....=..Ib.....y8$.a){.......KiIW.&..~.}..1..w.M..{.4......!..{..F.H.5#K...t..5.w...ve;. '......NJ......'(%;...?...D...M.Cq,<.=?.f......._...V..bA.(..37..v....+.uY.C.b.w8AF..3.n.-..'..U%.2....o.l."...^bj..aoF.!`....A....j...'.:Z.u...[..p.GW:U%.Ejq...:I...C........S.C...sJe.6D...<.UM,..&h..z}.y\|..9...D..j...n..B.$..T....?../.Q..=B...C._.f.#.:Bo.@]T.(..v..F..+d...". ......R..R..R....!..~A....X............>!`p..,08. 9.../.....r..Q.......Qpg.\ko...C..3..Y.y..t'.d9..>#\|..3..?.#..$....i........g5.z....S....{3..Sp..S2..w.6........

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	downloaded
Size (bytes):	8744
Entropy (8bit):	7.913625934459027
Encrypted:	false
SSDEEP:	192:3H91BFmicvc+bLApavl4eKGvrRDU0ZgD+ZdV3ceFgi7E4Wa:+XLyy79IdD4dV3ei44d
MD5:	9C840C653E444117FED0AEF18D3A23E6
SHA1:	9C291CE744A90F90FD1C0F0BA613A4EF4D6D6A8A
SHA-256:	68FC4D355941001B4915167C551404A198ABED45808C8E3447B007B7CD36E099
SHA-512:	D05A94594EC14B8E5A6E2B4EB4262F7233E612D4B5A47C1D64E50CB33834891B726638CB4622F20424520145FA8F487D85ECCABB660B224F421EA8AEFDD19249
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/443716737_996551778507060_8093613214370052435_n.jpg?stp=dst-jpg_p160x160&_nc_cat=108&ccb=1-7&_nc_sid=5f2048&_nc_ohc=DuHJngJtu2wQ7kNvgFQ8iUU&_nc_ht=scontent-hou1-1.xx&oh=00_AYBf7Ste67oNs7Tl7YANpLqMTqiicZKF-CR-_p4ZIXY8lg&oe=66583443
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f010000620300001b0700006808000058090000b30f0000de15000061160000f2170000ea18000028220000....C.....................................%...#... , #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."..............................................................................s...U=.U+N..{.CI I N7pJ...\h.oT..$U6.y...K..Oc9...Z3y....A....[.>..C.$.K..;..i...V.).5.[...9...j.~.p.c.2`....v.U6tFS.v` e.Enul..-'V9e@.......'.`.w`\..._..C../......;..(m.O.....7`u....1.3..r......C...\'.....=...Y.q....^...o/.)..,......b2..\.N..."..}.p..\..w...G..u..6..Z.Q.......B<..z..szN....x.D.i.Q..y.G.g.&...8...)..[...3......L.c..v...C.P.C.Q.eN..y..CS. ta.2:.....C~.r.C..).$..@.....+C..J..J......BI I ...-...........................!3.."5. #$014%@A..............^..C.....elT.u..FwQ.<..+.s>.....q.=g.e...Y..#.^.37.....-.\7+...f........u.n!%..{...U2{O.(4G.@..>.={......i.X.....3_

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	311
Entropy (8bit):	4.773843844737949
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4tSSJhrtldwFSrSLwKTksQchiR29UZqbivGSY:t4noU/vmRtXrtvwFSgTksJh42K9pY
MD5:	D5E9A724519F1A72A4FEECDEA710B2D7
SHA1:	75040CDBB6269D16066A1CC97973CBD35FB3EAF6
SHA-256:	119BEF082F4459AC47AC8C95CC7F5901D60BF2AFE47DE7314E479BDA835CD593
SHA-512:	55A2C26244423311D30C64F06E1AFAD3035D318F7948FED5F2D386FFE9AF1C48077F59036FB1B8BD368875F953CC2F2BE627CD6F5231CEE5119961CA523E8716
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M14.97 16.95 10 13.87V7h2v5.76l4.03 2.49-1.06 1.7zM12 2C8.73 2 5.8 3.44 4 5.83V3.02H2V9h6V7H5.62C7.08 5.09 9.36 4 12 4c4.41 0 8 3.59 8 8s-3.59 8-8 8-8-3.59-8-8H2c0 5.51 4.49 10 10 10s10-4.49 10-10S17.51 2 12 2z"/></svg>

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	416
Entropy (8bit):	4.4998346788589245
Encrypted:	false
SSDEEP:	6:tI9mc4slmOVIhSXX5xkgm2OCOuLQcTVgXF78Q46yAajyBxQkm3nKYKM1xE5LQI06:t4IjEXX1OC/QcuXFYFjyrQw15L2n6
MD5:	DEDDD7D24561E4F2792208764242D5FA
SHA1:	DA1A06B033CE9F27DD891B49E71FF3269A9F148C
SHA-256:	73C8A18F388DF73D60C4AF2CF0700F889AD24D1557F79C63E37E9C9EAFC9C63F
SHA-512:	8A738BB011625C122919C4D8216E285A51CDBA0EAEC6EBF1D16CE367312CCB13C8FD61BE1FACE96FE9746DF2F106BB788182F31C2222F7840A7EEC5A9731A94C
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_fill/volume-off/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path d="M16.5 12c0-1.77-1.02-3.29-2.5-4.03v2.21l2.45 2.45c.03-.2.05-.41.05-.63zm2.5 0c0 .94-.2 1.82-.54 2.64l1.51 1.51C20.63 14.91 21 13.5 21 12c0-4.28-2.99-7.86-7-8.77v2.06c2.89.86 5 3.54 5 6.71zM4.27 3L3 4.27 7.73 9H3v6h4l5 5v-6.73l4.25 4.25c-.67.52-1.42.93-2.25 1.18v2.06c1.38-.31 2.63-.95 3.69-1.81L19.73 21 21 19.73l-9-9L4.27 3zM12 4L9.91 6.09 12 8.18V4z"></path></svg>.

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 213284, version 1.0
Category:	downloaded
Size (bytes):	195525
Entropy (8bit):	7.996632200027151
Encrypted:	true
SSDEEP:	3072:4csjZMurVE+FkVzhr7sfh9ZCJUbv8DkjGT1NxZgbn0a/ntL0KBG3ZwMwqOl:StMurVRWp7s998OmxZgbn0mn10KTwOl
MD5:	3C1161BBA74E879FAA527909325A4D37
SHA1:	E675FA1A3939BAEE2BCD70BA0709A94E11801617
SHA-256:	80DEBD185E9280BE13F95497DBE6E8E3ABD92B80615900CDC54EC3F20826FA45
SHA-512:	9C0076EFE4F8369D46604AFF1CC57BA3CAC4D2D0160B19EF668A3C38B3EAE8E921D533138F4CE909FC2C9C00BEC922CE42BCC15FC4DD56D35A472D31CE6B750F
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Semibold.woff2
Preview:	wOF2......A$......6,..@...............................l.`..&..f...........B..@..6.$..<. ... ..9[w^..}..70][.;.3.2..".. .1"...F....q.......jc..I..(..v...!..,.vj..:.....BY._O.K.k.e..a...c..(................................................?;...3.... 80.. BEPqA..-..$...b..iZ..mlL-..2.2. b(..."d...l.7. a(.....$..6lg.6....nG....\|.E@...EPo..x.(.dQ..\.h.r..T..[.5.:1.S....~.. .B..&J".n...C.2...Y_..>wT...q.&.Q...Qp....q4.b.U..1P...`FXw8.o.l.".A$..6.'.OeK..9..fh68.....!!AB..uR.....e..%.Z.'.e.9K...bL...C(..M.%.[..d.D.....rQ..,.\|.Z.<.2....8:.Nv.P...n^Zuk.....~..1.Nq..z.]...S...I.i#......1H....3..,.....[e.I(.l...X.;......%.#..-p.9^.G.....Y..K)..k"s...AF..e$(......,N.h...$....2....FF,....r.U#..~...#.l..p......fr(Ke..r...V,.~)...3b-....(."Q..Q)...M.w..D....\|.B.D.H...7......^;...u...$.T...f..$........N.,Q.....C...J/..kin.....6.&..<..Q}.[m.6.Mw.\|...g..{-N..#g.2.I.j.%Q..*.=..D..8..T.&...;..&...e.yp$..^.)./t.....O.\|o.P...".z.F".J.=..z...c....K."......\.+J.;......m....z

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	175
Entropy (8bit):	4.966965284633015
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHtRUhVNBz2SVMzLSQQQEK/:tI9mc4slhohC/vmI4LUhVNBz1VOGQQQz
MD5:	36830448E3F7A1A3A2D487003A091E9C
SHA1:	5E890C51BC88F472775B79639B6C1FC51F08DC05
SHA-256:	31264354C77C510E3AE936076B8C10048515F7F6F5B6EE3EC34FD184144DF96E
SHA-512:	D3AA088237953AC48F2E66B6C3DFBB3A18A11F508E2F2DC650596EE5CE5908D2BEDF2AA01107F0A89DC7B113BBF63C2CB71DA113AD6625047707D3C3E4690F5B
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M17 18v1H6v-1h11zm-.5-6.6-.7-.7-3.8 3.7V4h-1v10.4l-3.8-3.8-.7.7 5 5 5-4.9z"/></svg>

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	467
Entropy (8bit):	5.146838272230996
Encrypted:	false
SSDEEP:	6:6v/lhPEIQzDvEIqDYJ15LrzhiCaoa4xNSOmD1we5fSrOxKEbLlJdp:6v/7MnPEIVJJiZNqtmZwQoYrbLlJz
MD5:	DF7EA137C640CBFC8988EBFCBEA3E74C
SHA1:	4D515FAE712AAADC544D64D1C1D22D1BB0A01AFF
SHA-256:	F0C8902560810110039DDE6066D18FF2D3D26A645DF7A4E76D7A6A45617B9F98
SHA-512:	C7BD585317015EEC41EBB2BAF6C6815219EB84BE2212F57EF3E469A4746F50F60519DC03EC9EE510556970A7BF4F4E76667C5D2080018AE00F5CDBBDE86C50B2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............W.?....PLTE...........................................................................................................................................................................45.D...8tRNS..............dH.f...U.;!q%...u.&..n{.P......Oy...^4.N...{....IDAT..u....0...K.`W....../3...Fw..7BQG...l}..!oh...9...o...=...yY..P.aCx.`j.rE#..?`.Y4..9..%..bGHUMjf.okj.>\j...5g.LbRq.f.L.".c.0.. .}n..-..27..H.k\|...$%aXm......IEND.B`.

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	579
Entropy (8bit):	4.50640845727472
Encrypted:	false
SSDEEP:	12:t47N9U/vmRprcQLVhjrAY5uiK8KnnY8/4U0wRJIAoZ6iiMUV0TDoc:t4jU/vycQrjrAY3/Kt/4U0OIFoUzTD3
MD5:	C0CCA7B6C1295E79FE9BBE405122AC53
SHA1:	69C36F5A0F8E20DC556123F6AF6E0B5AE7DBC18B
SHA-256:	6151B1FC5DE0D15BEF2AEAC1B8743AD6A54D9BD44FF5C507321450528D212749
SHA-512:	82C80A388F7900F73F38DEA8C0AA92D4EFF9D96D99C4BB8821689E041582D8E885EDE4618CD24C802C4ABE599F6E187801D5AB04D4751D062BAEED06551B0185
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/fire/v8/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M19 3.87v9.77C19 17.7 15.86 21 12 21s-7-3.3-7-7.37v-.13c0-1.06.22-2.13.62-3.09.5-1.19 1.29-2.21 2.27-2.97.85-.66 1.83-1.14 2.87-1.65.39-.19.77-.38 1.15-.58.36-.19.72-.38 1.08-.56v3.22l1.55-1.04L19 3.87M20 2l-6 4V3c-.85.44-1.7.88-2.55 1.33-1.41.74-2.9 1.34-4.17 2.32-1.13.87-2.02 2.05-2.58 3.37-.46 1.09-.7 2.29-.7 3.48v.14C4 18.26 7.58 22 12 22s8-3.74 8-8.36V2zM9.45 12.89 14 10v5.7c0 1.82-1.34 3.3-3 3.3s-3-1.47-3-3.3c0-1.19.58-2.23 1.45-2.81z"/></svg>

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x600, components 3
Category:	dropped
Size (bytes):	49977
Entropy (8bit):	7.95644141008797
Encrypted:	false
SSDEEP:	768:LuYCzibUvW6N2k5J2wID9Y1uQp+0THF2WSniYuKCOX3nmI5R13lSkkRnV3o7:yYCzbe6N2k2fDAV+qqncOX3nVTVSho7
MD5:	B69EF08B7311F52DCA3C0A3E53C10A7B
SHA1:	2C68D482B5DB75244ED97021C23A40DD51520E8B
SHA-256:	1229F3AB07D4110A189DD8785AF15171416D383E9ABB6971C9E9C1329FBCE1C7
SHA-512:	0204A01845832A69E8B957A415373804974BA91094D2E178FF8D801A6D8BB83A4BB0F0DFA50AA4D8618C3CF50B98E9AF9E91E751801A178308B4F6A31091F1E4
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a7201000051120000a72a0000482d0000623b00005f590000f3790000617f0000e38200000b90000039c30000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......X.X.."..................................................................................b.......................................{...^.Y .`..@.........................+^..h...7.5.....././..g.....9.G...sggDwe7W..@.....................Qb.S.6... .H.....................G..<..$o.......\....xC...s:y......L1e..t.5.m9......................v.....1..F..H..}..%...y...J.[.bx..e..#.J.'..'..}P....q..j...kf?"..V.1R...X.....:Q....................:.....7z...A.+...dl.....u+..;.qXts..U.c.V........g$.'.J.1....=.W.....Um..)V~Y..CLR!.=..........,s>....'6].qpg!....Wo:.)...,..9..p.i.I..&]-.'+.R....u..Gk.s.Wsg.F..2..8.Xir.\|h......7lo....k..u..s..................?..Z.1..O...........

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 51 x 36, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2216
Entropy (8bit):	6.6961302583271225
Encrypted:	false
SSDEEP:	48:B/6BMYL4knA9WIM81/c0SkUL3T9HAq3SHAU4O6iufN+dgDrzRTM:BS+YkknmWIM81/ckE9HAPHAU4OPDGDrG
MD5:	123C968B7D12FCF714B9D2AF208D666A
SHA1:	E81C6311BE251AC7A4174D6A16C772E8AC78528E
SHA-256:	DCF5DC23BFCA5D9B4B2A36C9DB76F5375F51417BDE2B33F1C60E3925C814D361
SHA-512:	1C6E238E571C04F7564D6A382BE2141C4F7D4AE7632FB6923771F6E5EDBFA424D26431438B8CCFA96BF271A114C48984FC2FBD48FA6BFF68D23E3117990EA716
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...3...$.....$r......pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)" xmp:CreateDate="2020-02-25T08:48:52+07:00" xmp:ModifyDate="2020-04-24T11:32:50+07:00" xmp:MetadataDate="2020-04-24T11:32:50+07:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:2ae217ec-6f1b-4610-8d8a-7b6c7caf0ff7" xmpMM:DocumentID="adobe:docid:photoshop:99720a90-8db4-0b45-9d3f-0d132e926

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	216
Entropy (8bit):	4.947192163768535
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4mqUEUKFI8iyNd1LkBEo8:t4noU/vmREaI83O8
MD5:	FAF3B1C051434D1FC1CFC3335A1015AF
SHA1:	A04C68D74A3CCD626617EFEC131D004F4594EF53
SHA-256:	C32E7D6B3FC895BB9D822E322CD3D39C49CAEFA647E4FABFC3DD8926FAEB89A4
SHA-512:	23BDBD1C69E5B225A417646E742D7F238D7E311A17C866CE563CC82791054CF065F7C0CCD0970E8CAF75A340F1D3D5164BE257578BBE0AC0E8C15A2BCF862022
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="m22.01 4.91-.5-2.96L1.64 5.19 2 8v13h20V8H3.06l18.95-3.09zM18 9l1 3h-3l-1-3h3zm-5 0 1 3h-3l-1-3h3zM8 9l1 3H6L5 9h3z"/></svg>

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 246x138, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	10352
Entropy (8bit):	7.976994490072155
Encrypted:	false
SSDEEP:	192:2R1Ox6jQwQ5+PSEw1mz/LzeLk8AqFuOP3+VzzZCaLqT3OWkJjnAj:s1OAS6yAqFuOmW7T3OWkVA
MD5:	D74801AFA31D3E44DC457B2E149B7725
SHA1:	F3C001B5242BAB2D0A6C9ECBBB638F7F20556D57
SHA-256:	8CCBA68EA462BE7EB8ECFD6C09A0360171093FA99B2F605D87EB80C2EA999DBC
SHA-512:	9FF9F621539B0E9CD2D66329DF63676AAFDE5DE6D6DBA3D372180D8FDB42F01523D060CA56FE3DAD085619C1FF55F737CD1E4E7A55403BEEECF5EA0B19C03326
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/gUlM_p1zHbI/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLBmin9DtU5PRqVl3aMTiMtQAbpbsg
Preview:	RIFFh(..WEBPVP8 \(...........>Q..D......T8....c. ?`..............^.q..x?........7._`....?]O\_.>.?......V.....C.....~.....z....Q...G.O...o.;.?./.o.?...?.>........w./..;.........uO.oB...................>....D.-.....w....;M.#.....z...'../..a..}.}..4...?.................`/.?....t...+..........>..._.../.....~........k./.?.......>...#....+...q..vM.+..=...#...R..:..._'>.../.=.b9....yI.03.;,...u.'....W.5)9\...2e$n.%.......%f^.{....f......M.2...9..X.XG.1 ....{..Y.d...Z.Z..F..l...J..@!...U.....:\|....h.`.,7+....>.....w........'.Fi..d.o..!F.....h..^..dURh..2..&_..)...p.l..p.\|E.[....Pa.....5.0.t.k?......._]..Ze...d.{`...S..\...(SJv.c.v..\..=].3...Y...o.-...<"F0...t..&W..}...8.SC.../...}.g..Sfg)Z..$T.......Q!..nJ]..S^.,.M=d8.e.A.M.2.G.gvb..~......^.W~..jL.@.Z.8^.gM.z_.....xfQl=.;.?3,..}......`>k..0}..J.....C.@....3bb...U.....'.)..,...P....7..Q&..(... 9.B.7.?y..C..k.xm.. @.}..O.[]..w0T....X..7.z.l._5...Tv...-.%e.........f.a'...u..A;."m)..1

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 7904, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	26399
Entropy (8bit):	7.959673570604936
Encrypted:	false
SSDEEP:	768:1+H34A32asvhRo6sCNsKFeEotLUpbQBu82zd:1Id32npRojfKYtLUsq
MD5:	EE905AEEA99AA287B3F5B569FEDBD91E
SHA1:	0FD8E62C7B5240B5496DC1F2AF99D45766C30B86
SHA-256:	5AD678791B5D4839F74A625C1FF6D3F4A6BBFCA6417ECB0133F1A60DE77B415D
SHA-512:	D45ECFDBED27106D9A608998B7BDED221E9AE192D0F3C28F99B4E98B4B0C7D9555E8155FE89F2D78C66D1E39B3F1A5E1A63FA422D0294FD9E4A4BE29D3370F59
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... .........b.s.....PLTELiq.8..8..8..8..8..8......f..~.....................?..".i.'g.$~......#'&.-b.}.).k.....2z.5..3..6..7..8..7..I/.@.p.>984....=..f.....`4.."H0q...PC."B..M..R.....G..S...'(Lj.Q..j@.P.!]6..(.jMv+`.r).]....$K..o.iB2..&........#..+..4....{<.e.NTI..5.x_.W.. &....h.....08....l......8.(/..$...:Z...Q.!=....$..&(H]..).sZ!.s..&.:v(..$...../..A.!N=_...C.L.........I..g0.-....8...I.A%.)5.(7[{.-....walb.....`.So.9G$\|...8Km..o..=(:u.>..A.5.....+).=..l;.{.?5.S...fy..WW........Z..:..^...X......MX.n.A.....}.{6.3..A.[.d.F%..s...ssg...q.I._.......hk;..H....Y...\|.J....~.....6..C...y\|Q..t..r..{.r..&...r...K..........g..2........:c.......,........d...........$.......................................X.....A.......J.....B......................................].o....tRNS...+P..v....c.IDATx...L[W...?V..&..@H'm...n@..Q.....l'[.)3.t...c..N.l7.$E[F..*[G..H.+!..0`...Gce..C.A..0....:I.A..c.~{..u.w.&.d.....~...{.K.........=.........f..x..d=j..

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1210)
Category:	downloaded
Size (bytes):	78654
Entropy (8bit):	5.412150142055278
Encrypted:	false
SSDEEP:	1536:w/Q5UpxBWTFRcxRpIoMwetxBJ9YDf4YRPlF/hyqqR4Qj2W:b7mM1OxAx
MD5:	80011C7DAE87BE286ABA2626408ABC6C
SHA1:	03B7EE56306B7E364C7FBC68511D87E88EB0D1D4
SHA-256:	ADF0F9823D2CF0D2FF5EB176B8FCD7B595A0DAB2F2BC60CAE3838706040763E3
SHA-512:	710390FFC0EA3C2D5F9E7B8CEEBB9FA875CC8F3E735CC71CD65CADD04902735D70225A1C45FBEDF8923C776D2639FAAA6994424A5776BF6345A5396897573D8A
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/aef0ced3/jsbin/webcomponents-sd.vflset/webcomponents-sd.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var k;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function p(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}function q(a){if(!(a instanceof Array)){a=p(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this);function r(){for(var a=Number(this),b=[],c=a;c<arguments.length;c++)b[c-a]=arguments[c];return b};/*..Copyright (c) 2016 The Polymer Project Authors. All rights reserved..This code may only be used unde

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10325)
Category:	downloaded
Size (bytes):	41184
Entropy (8bit):	5.385555254898722
Encrypted:	false
SSDEEP:	768:Qg5dF0HeFDPAHsfVy+DrLopo36tlMxz/mfsdXgdly3FCML6:Qg5dFHDPAMo636tjA38
MD5:	5AE9C6FF1DB1F5B5ECAC8DB05EBF75DA
SHA1:	8D676DFDE4627A787F015DFD5A31AF87A995B546
SHA-256:	BB36181E1C71CDA4EEB84E7E3687DD8B3076F811862CEEDE9223D0B05D345A91
SHA-512:	63D5AECC176D7253F4F54BE4CB1EB83EB86AB515F881BDF18F51938203ACB8F97ACCA46A026075691BB803BDBE1CC9952BD7AC99675D3607AB4EFFA1BC499D1D
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/y7/r/Kpg9CE6jA2A.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometFeedARIAProperties.react",["react"],(function(a,b,c,d,e,f,g){"use strict";var h;a=h\|\|d("react");b=a.createContext(Object.freeze({}));g["default"]=b}),98);.__d("CometFeedAdsProductContext",["react"],(function(a,b,c,d,e,f,g){"use strict";var h;a=h\|\|d("react");b=a.createContext({adId:null,minGapRule:null,minGapType:null});g["default"]=b}),98);.__d("CometFeedClickEventsLoggerProvider.react",["CometFeedClickEventsLoggerContext","react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|(h=d("react")),j=h.useCallback;function a(a){var b=a.children,d=a.onPress;a=j(function(a,b,c,e,f,g,h){d(a,b,c,e,f,g,h)},[d]);return i.jsx(c("CometFeedClickEventsLoggerContext").Provider,{value:a,children:b})}a.displayName=a.name+" [from "+f.id+"]";g["default"]=a}),98);.__d("shallowEqual",[],(function(a,b,c,d,e,f){"use strict";var g=Object.prototype.hasOwnProperty;function h(a,b){if(a===b)return a!==0\|\|b!==0\|\|1/a===1/b;else return a!==a&&b!==b}function a(a,b){if(h(a,b))return!0;if(t

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 138 x 41, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2631
Entropy (8bit):	7.847895333366294
Encrypted:	false
SSDEEP:	48:NjPb2/U5P3PgXXXSWNrCFO0UGjTO7OWucmdKRNMhK64fGDCNTV:1T2/IIXXC4CR/eqKwGn
MD5:	E7EBC6C74EC20EA3614970E178217C10
SHA1:	F667FBC525F046F8C6D7617541884C4D6ED52478
SHA-256:	19C2B75FE23AE2238ADBD7F34901396D4120605D9028C2FCC7BD3C010E27EF9A
SHA-512:	919503E8BB602EA51AD0D92B3AFD7DD5701B5F2D3E28D8ECBF90D632AFDB7C14FCFDBA99F60F2BB6796DB536D3461882318B7DC0136E40B3D93556774BC30677
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......).......A.....PLTE.........pppBBB...LLLccc...XXXooo...jjjggg{{{........................{{{.........qqqssswwwxxxccc\|\|\|qqq222......................................u..................+++......222666.....................""".........**...............]]]hhg...............LLLaaa..................... &&&(((///>>>.5Grrryyy~~~.....................;;;BBBQQQRRRpppuuu.............................333999HHHSSSVVVkkknnn.2H....................................EEEOOO...........w................-L.7E...\|\|{..m....#.ZZZ.,<.....................W...!I.%?.N./N.o..m..o...o.~"..}..z.........!..w.%../.d<UM..#7hZ...J..Deeefff.1F..f.o...........p..p..z...........<............?..@..+$./..H.I+..E<..[6KD.. D.'@..O...dcc....,J.3C..[..].x...l.x...r...\......................}..9.....=.........-.k....#tRNS..!"$1<CVZ^aeht.....................0......IDATx...w\|.U........../......f.I..&A3$M.6..Ym.-m..t/.j............{.............#yy....~...qJ...M.6....a}.G....cNe@..S,b...V..N...

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	511
Entropy (8bit):	4.622942488641842
Encrypted:	false
SSDEEP:	12:trwdU/gKup+tiHD6x2wiHDXx2wiHDi25iHDV25iHDc:tYU/duItq68wqMwqt5qw5qc
MD5:	A229E3CF403001E92CB1EA441D880E54
SHA1:	1C4518AA326967D4BC424FD14C65D1A3276B5100
SHA-256:	952AC1A0AE07753F75FA27BBE483E71C43B29DF5C160AAE33BB447C0E5B5E751
SHA-512:	6B30EE9BECA55C6FC5A92330CEB5AAA3F70E1B1A166A6CE7FF0059F619F525673B8160D2A6D35E6D6B35CB52FDB547F3EEB8F960B2E7356C4C2C699115FEBA66
Malicious:	false
Reputation:	low
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<rect x="11" y="2" width="2" height="20" rx="1" fill="white" fill-opacity="0.3"/>.<rect x="15" y="6" width="2" height="12" rx="1" fill="white" fill-opacity="0.3"/>.<rect x="7" y="6" width="2" height="12" rx="1" fill="white" fill-opacity="0.3"/>.<rect x="3" y="10" width="2" height="4" rx="1" fill="white" fill-opacity="0.3"/>.<rect x="19" y="10" width="2" height="4" rx="1" fill="white" fill-opacity="0.3"/>.</svg>.

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 336x188, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	7514
Entropy (8bit):	7.968233747958549
Encrypted:	false
SSDEEP:	192:VG5nHfaD9iOZfYHkYUZHJFox7+rG6nTDExPQJbTo6QO:y/aESfYpOHJCx7+NnUxPwbTSO
MD5:	D5C1A30DF258D91E352181DC7DBD24A6
SHA1:	0C41FF44038A7ED7BC17CE83560FEE266ED53FBA
SHA-256:	4054EC2F6178EDB03B4643F3988EAD1B00B8E1980B4AA299445845809FA02409
SHA-512:	5B507ED3CC6177DE2B99DB688488F710D4706943EDCA104AC12D3AEBDA3442FA1E0B7833F09721B8EE8C48E2C68E6D321D907966A2C286DD982340829E6AFF8D
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/WlW4UAl3MyM/hqdefault.jpg?sqp=-oaymwEcCNACELwBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLB2P6U67krPl_BOH9xUJPAYE3UStA
Preview:	RIFFR...WEBPVP8 F....x...P...>Q$.E#.!.XU.8...7~>L...d....M...%..k.....Us"........'......\|?..................]...~.{../................O.G........i.T..O`_.?....~.\|/.V.k.m....Gg.H.[...Bxw.......O#?a...7....U.........~.._\|.....O..?....+...U...C.y.z...._...}O?.......p....?..p.p...+.../.......%.......w....-...i...w............w...W.....o./Co.....w.f.......'.F..?6...6..x..`"T..Q..8..ymwu....v.;.=V....0o.....5c8.i.l..hd..@..D.C.[.:.A.....w.TZ+._.`...5.=.`.[.......%..4.P...".@....'5...d......8&.m..(.5f=z.J......fe..4..{#.i.. .d..}"@.-.!.d.}7{.H...=..xd[..R.$..l.A...3pR...P.'.....#.W&...../..b.9z.....)..Ih$rq..O.[;....d.$.......#.<\|U.....9...\>b.....X?..wid.s...W....D..0...%BA.5..v.]i..j.t..J4V.Q..UHqB.?5..._.Y..#.....s...o"Q[hPQLw+......~{.".zQ.T%w....I..}..9..$R.....a....pqD......F.d........{A.,..............xuek.].......0......w..R.fJ,..`xM...".&.!..pX..)...-.....>.1...X..&....DG.ai.A..^K"..mO....R.....a....bK.....H.....#]cy@.".....x......<.....

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1603
Entropy (8bit):	5.2727801090429285
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8x/S8f:3qD+2+pUAew85zsaA
MD5:	78FD7C1A980B9162702E6F984A25B7A6
SHA1:	E832ABE897CDAA5E36131733AF619F174AD0F9C5
SHA-256:	1C5A3539A6FBE5420A519540FF6662EFEACB0BB1B9B8314C74064694A0D52C0B
SHA-512:	06B0C9A98D1F6B5BCF81D81574258B7D479579CD80FC51105C58B99263D802EFD64ECF6B5A9A3105C1046FB7EE3F776547E1593436AFC3E6C0820D149C0913BA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	441
Entropy (8bit):	4.728282635502173
Encrypted:	false
SSDEEP:	12:t47N9U/vmRR9jRxmHRLkCsL9IxflMwhT2fLrYVMdubTci:t4jU/vJHNklhIwwhqgVMEci
MD5:	B15A744B5ED7D5D8A779E411F513E24C
SHA1:	F156A8D2F03E4FFB072FF7D2241DDCA911664B0E
SHA-256:	43B5B8ECC8D128FDD2DF4366CBE6FDD8ED0067DC117438290F59F5A0FFAF715D
SHA-512:	3381EC00EEE98892B08E5C47929FFC27129A92ACF486CC33DB7E7DE1128ACBADDCCAA75115A40BC6A91B97CA39FCB42E0661341BF433299720C80DBB3EDBFF20
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/bell/v8/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M10 20h4c0 1.1-.9 2-2 2s-2-.9-2-2zm10-2.65V19H4v-1.65l2-1.88v-5.15C6 7.4 7.56 5.1 10 4.34v-.38c0-1.42 1.49-2.5 2.99-1.76.65.32 1.01 1.03 1.01 1.76v.39c2.44.75 4 3.06 4 5.98v5.15l2 1.87zm-1 .42-2-1.88v-5.47c0-2.47-1.19-4.36-3.13-5.1-1.26-.53-2.64-.5-3.84.03C8.15 6.11 7 7.99 7 10.42v5.47l-2 1.88V18h14v-.23z"/></svg>

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.099700989024115
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4u2U6PTkY5fUgNOJNu:t47N9U/vmR0kTkYZUg2M
MD5:	D9BB191D7185DB63EC946298DE7F9AF9
SHA1:	CDE1E715177A55F8F7C9CE0BB1766481EF215D8A
SHA-256:	40829C1F6F101B7122AB0D9EDC7A4EDB6368448259A74831C2FAD26D865DD90F
SHA-512:	7B8B57273161CA8EC550E7C04AAFA34A8C48CE66FBFB5123C48F84AE4A5C9B43C5820EC5D00E62B12D3AFF946ACCC4F1501132FDB034A9E39F83B18E6A7CDAB0
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="m11 7 6 3.5-6 3.5V7zm7 13H4V6H3v15h15v-1zm3-2H6V3h15v15zM7 17h13V4H7v13z"/></svg>

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	512
Entropy (8bit):	7.250428396891565
Encrypted:	false
SSDEEP:	12:6v/7gPLJ8Dahobc/px7phCGRMR80Qwai+OEcS9bRF:gDrqpx/l6R80QwpNzURF
MD5:	A8F5DFAF76ACCEA155F0ECBAA5112B79
SHA1:	E59951DCE24DB3F32D349C0C369D4C6A3CCB6CC4
SHA-256:	9514BDA304FC235F59B5C09E7055053E09DF34D9F0DAFC3986698B7C0CF22711
SHA-512:	0C987DCC2B0B7C04F920B8340C74348D550B97E36C4D210DED178465E8006C2CB904F8A610BF83F31E9A4353CB538E3F4A4397F643E8C95E0B547544B412954C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...................cPLTEGpL....................................$....%J7P...=(D...qcu.....cPh.....XF]0.9.s................dm....tRNS.%j.2...f.q;.E....@IDAT(.mR.r. .....O......WF`'..d....j.c....`...._..9.7...._....u3.].7.Tl'...W>.W.t... ....G)...q.n#.<.P.r1.j!vR.Y....\|..{!..S.z.l..l...;...g.Y.?.V..lx...l6...."$u...sff`V..!YuJ<..:..F...q.U.U..D.u...Se..@,..l ;P..kA................67..Y.....,D.*....Y.p.....1..(.2..K.s.4\&^..a$G......>..$sXZ....v....i.ghL.>>........k.k.....IEND.B`.

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 10 x 10, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	79
Entropy (8bit):	4.71696959175789
Encrypted:	false
SSDEEP:	3:yionv//thPlH1tnt/tAhHGZscm1olkqCwbp:6v/lhP6hHDcZCYp
MD5:	8DC258A49B60FAE051E9A7CE11AD05CF
SHA1:	DAFEF280663F4205FC7F0E47799E9945E6A68D6D
SHA-256:	C8CAED93847AFFC154CB3D424E34FC146E7340BB29ABEBD5EBA7063E3DCA0604
SHA-512:	5F11ED60D79A80EF7CCEFFA907CD55F31D8DB19BD2A7F4C2650C62A355C5071C5FB61DA1EB0A2071CE22ECDC35C0D12F51E4D13AAC3B0FDB95ED4629815B5AFB
Malicious:	false
Reputation:	low
URL:	https://scontent.xx.fbcdn.net/hads-ak-prn2/1487645_6012475414660_1439393861_n.png
Preview:	.PNG........IHDR..............PX.....IDAT.Wc...0a.!..)....A,....Zl....IEND.B`.

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3650), with no line terminators
Category:	downloaded
Size (bytes):	3650
Entropy (8bit):	4.886467822961045
Encrypted:	false
SSDEEP:	48:1Hbj29IAmrgkMkXb21bPSTlT1UbrKzw7B/mGB3MWbJUylDM/7e19N:17j2KA49XkanSeCAsMWLRee19N
MD5:	2CE4D6E2994E655224B0AA48265AE15A
SHA1:	E08C6461B3168581712B18D9C9BD9343422F7E14
SHA-256:	CFDC96DA2E956842B4CBEA254D93C923A9C7D5F1443385996A0F2C80CC4B0F76
SHA-512:	EB95CD65101E4AEA2D1FF119E8306F468F347395250E30ABE4C81DAA34E622CD61A4A50ADEF8954F763171A9F0077984D142A1BFF5ED6D4E49430643DE8D0848
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S2/content/common/css/shared-footer2.2ce4d6e299.css
Preview:	.contact-text,.footer__google-copyright{white-space:normal;word-break:break-word}.custom--grab .footer-container .international-container,.custom--grab .footer-container .right-blocks-container,.custom--grab .footer-container .socials-container{display:none}footer{font-family:Lato-Regular,sans-serif}.international__country-name,.legal-content-container>a,.social-title,.support-title{font-family:Lato-Bold}.footer-container{box-sizing:border-box;background-color:#f4f4f4;display:flex;padding:10px;width:100%}.footer-area{width:100%;max-width:680px;margin:auto}.theme-page--product-page .footer-area{max-width:1280px}.theme-page--all-results .footer-area{max-width:960px}.footer__social-media-container{background-color:#fff;display:flex;flex-wrap:wrap;justify-content:space-evenly;align-items:center;width:100%;max-width:128px;margin:auto;direction:ltr}.social-icon-container{width:33.3333%;padding:4px}.left-blocks-container{display:flex;flex-flow:wrap;justify-content:center}.right-blocks-contain

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1887), with no line terminators
Category:	downloaded
Size (bytes):	1887
Entropy (8bit):	4.999154685427076
Encrypted:	false
SSDEEP:	48:t/hPoBQVTk0RCFGZgli29SIP94sXrwdUbVpOEQVc0Ucn3pRH:tpPoBQVTjyGZYizUhQV5f
MD5:	535F3C6F7015DBAE9E6B2A4987192E2B
SHA1:	E356DDAC477467B6D240894078FE01320BDFA950
SHA-256:	250E11FDF553A784636F5A080FCD88F11F15E8D892C95BE88DFC391C515662CA
SHA-512:	61066059F1596CA2DE2D85471D021C72B8BE2909E2B385F413B450EF4445CC7872654032E57F19E7AF3E9A29E99BC2802B02313A7E639BE09A54DEE0FF02F151
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S2/content/common/js/payment-channel-suggestion.535f3c6f70.js
Preview:	"use strict";!function(n){n(document).ready(function(){n("#paymentChannelSuggestionLink").click(function(e){n("#paymentChannelSuggestionModal").show(),n("#overlay").show()}),n("#btnIconClose").click(function(){n("#paymentChannelSuggestionModal").hide(),n("#overlay").hide()}),n("#paymentChannelSuggestionValue").keyup(function(){n("#paymentChannelSuggestionErrorMsg").html(""),n("#paymentChannelSuggestionErrorMsgDiv").hide()}),n("#paymentChannelSuggestionForm").submit(function(e){var t=n("#paymentChannelSuggestionCountry").val().trim(),a=n("#paymentChannelSuggestionValue").val().trim(),o=n("#g-recaptcha-response").val().trim();if(!a\|\|0===a.length)return n("#paymentChannelSuggestionErrorMsg").html(CODA.Shop.translation.paymentChannelSuggestionRequired?CODA.Shop.translation.paymentChannelSuggestionRequired:"Field cannot be empty."),n("#paymentChannelSuggestionErrorMsgDiv").show(),!1;if(!o\|\|0===o.length)return n("#paymentChannelSuggestionErrorMsg").html(CODA.Shop.translation.paymentChannelSu

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	630
Entropy (8bit):	7.532732158637134
Encrypted:	false
SSDEEP:	12:6v/7eD9LKWDPVxeUo5k04ILRgPQHl5QJv/XcFEr1t6yfZMlOYjitBH9:XDJKWDBoG0vdnYv/DSflOYoL
MD5:	3E271770E85AE1A48D7670970D5341B7
SHA1:	3EA485452FB598EF7BA64BD5554062BE14F9C3C1
SHA-256:	C74307A8855003A9E42A6BDE652C0AEC383A562C76595F13B2C6D67BAEE7CEFC
SHA-512:	26674642BE604EE43F576464FAC73A1F8ADDF4A7A59148AC89772593C95C57F7CB5D0E389BB07077816DEF3566355DD77E2B6F22B6507471C1AE2B7E80283491
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/images/emoji.php/v9/t34/1/16/1f914.png
Preview:	.PNG........IHDR................a...=IDATx.}...&A.....m.m.m.m.\|.m..T....Iz.Ucv.~o8...7.5...............V..O5N..q.f..p.(...9..Cy.;..?Vk..z..4..@.0hA...=.v...<Y../......y..)h).. .c...D....H..brNG....._......B.XQX.-n..gS.ln....-.1=2R....qs....]..N.. ..E......%5.I.....ou4n.95X..#a$n..tf.... .J..Y.<,...U<...."*.D..<.;J..N.}U.K.\|....V..{wy R.............g...............k#....;..R..M.C......i.............Y..EC..K.[T.w.....E......-s..........3;)...q....T--=..(@8.x....&.G.......`...Cjx=..g...TDD'.@...h..t...S..?...q.)..X.Z..-3.Hl.I...<.f.4.u..Qv.,B..B2.\.#...g.d........p.6...w...1r..A+.....IEND.B`.

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	7277
Entropy (8bit):	5.520319456508997
Encrypted:	false
SSDEEP:	192:rjKfQK9KyK03XK/KsqKIrKW7KSKBKC3sKUKMNKfK3nKrKEKT3AKrKjpKgwH:CftI/y6ySXW+f8QZRRS3KuBjduogs
MD5:	6530B2309C942007EB08D78750BFC971
SHA1:	D35F378124614BB05423326A55A149129ACCCE07
SHA-256:	87858DEDC06AE4E1D385F6C4A2122F183CD5011AF97B0C8E567DE626771EDA81
SHA-512:	4133DBE1051B213FAA7C364E5756E68C5CA2A8092CE3B6D03B6677D1DE2518D5957CF2840070956D42AE0B7785F187BF1E6D9372AFBAA7392A72E8A53A85457C
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc8br0ZAAAAAOAZHpdE1Fm9RA9tK85W3ano_l0-&co=aHR0cHM6Ly9uZXdza2xpa2Rpc2luaTViZWtiZzAuM2JzejQueHl6OjQ0Mw..&hl=en&v=joHA60MeME-PNviL59xVH9zs&size=normal&cb=5hgi2cvl589g
Preview:	<!DOCTYPE HTML><html dir="ltr"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.<meta http-equiv="X-UA-Compatible" content="IE=edge">.<style type="text/css">./* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7mxKOzY.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. f

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	274
Entropy (8bit):	4.691767704613487
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4tSSJhpbtnRm31IE2l0kjMswple9SY:t4noU/vmRtXVtnRm31IEURwpY
MD5:	940A3FA042BCA1DB7543B418E574CCA1
SHA1:	AF122097171DD4140E913C6DA8D3501819368165
SHA-256:	3EB4200488142D98914FD98981C1C3E6F7C600D3A8E249826B5D72721DD6EE22
SHA-512:	33D87129671F2FE4AB2055C0CEF5DA1067D900EB73FAF18A430F5124DD7D2B84DEA0308FB60ADFB060EFDDB09E482894758B4180440D6522A3DA0B0AB429F5EB
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M14.97 16.95 10 13.87V7h2v5.76l4.03 2.49-1.06 1.7zM12 3c-4.96 0-9 4.04-9 9s4.04 9 9 9 9-4.04 9-9-4.04-9-9-9m0-1c5.52 0 10 4.48 10 10s-4.48 10-10 10S2 17.52 2 12 6.48 2 12 2z"/></svg>

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	531
Entropy (8bit):	4.517890434004929
Encrypted:	false
SSDEEP:	12:t4tM65EVlUbal0YClBze4gKCqRaMcmt+BOgyy9e5PhwWU:t4tMMbS0TBAMdc1QgcdrU
MD5:	D8AB2A29ED285F79AF11A250D2536BC1
SHA1:	B394B72270ECA95336C5780E1F97C0CAD051C0FF
SHA-256:	AAAEF8F774A256E546C1178D91EBBA27FA0F7A7420D7E54DCC4F26D6DD7AB31A
SHA-512:	3F376435B591FCB848D4D259A0DA5BAE15EB8583572C00C6E3041DDB64C1756E48A333EB6144042A45D23E2A45DB623CD78DB5467579051CA674F93C8964FCE2
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M5.5 3C4.11929 3 3 4.11929 3 5.5V21.5C3 22.8807 4.11929 24 5.5 24H22.5L26.7474 28.5741C27.5513 29.4399 29 28.871 29 27.6895V24V5.5C29 4.11929 27.8807 3 26.5 3H5.5ZM8 10.5C8 9.67157 8.67157 9 9.5 9H22.5C23.3284 9 24 9.67157 24 10.5C24 11.3284 23.3284 12 22.5 12H9.5C8.67157 12 8 11.3284 8 10.5ZM8 16.5C8 15.6716 8.67157 15 9.5 15H18.5C19.3284 15 20 15.6716 20 16.5C20 17.3284 19.3284 18 18.5 18H9.5C8.67157 18 8 17.3284 8 16.5Z"></path></svg>.

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	196
Entropy (8bit):	5.091943569663142
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5hL6Fb0zVjXRH8+hHiATcvXjXRHRcBHoNcHOoZKbVDCjG1UfJQNK:tI9mc4slhLJ9hC/vmI4pZKeG/i
MD5:	93255FE74E40903D5D6D53BDCB39798D
SHA1:	3782892EA18A26A0117F1D206964B0CBA9E9E445
SHA-256:	C7ED29A9FD41A91422C00A05C48EEE65C48F5CFF70D57D1424F00D1D70A3B85C
SHA-512:	BC200854BF7F3570874CD2122B25DBC5DA1816DCF4CD2E2FB2549DB90EB9B279CAFF7F10C854F78D64B4742E1CCB0A3FF0D78D0833E57EE7DF5A80C78B9F66A4
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/subscriptions/v7/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M20 7H4V6h16v1zm2 2v12H2V9h20zm-7 6-5-3v6l5-3zm2-12H7v1h10V3z"/></svg>

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 51 x 36, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2216
Entropy (8bit):	6.6961302583271225
Encrypted:	false
SSDEEP:	48:B/6BMYL4knA9WIM81/c0SkUL3T9HAq3SHAU4O6iufN+dgDrzRTM:BS+YkknmWIM81/ckE9HAPHAU4OPDGDrG
MD5:	123C968B7D12FCF714B9D2AF208D666A
SHA1:	E81C6311BE251AC7A4174D6A16C772E8AC78528E
SHA-256:	DCF5DC23BFCA5D9B4B2A36C9DB76F5375F51417BDE2B33F1C60E3925C814D361
SHA-512:	1C6E238E571C04F7564D6A382BE2141C4F7D4AE7632FB6923771F6E5EDBFA424D26431438B8CCFA96BF271A114C48984FC2FBD48FA6BFF68D23E3117990EA716
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S/content/social-media-logo/36/socmed-youtube-H36.png
Preview:	.PNG........IHDR...3...$.....$r......pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)" xmp:CreateDate="2020-02-25T08:48:52+07:00" xmp:ModifyDate="2020-04-24T11:32:50+07:00" xmp:MetadataDate="2020-04-24T11:32:50+07:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:2ae217ec-6f1b-4610-8d8a-7b6c7caf0ff7" xmpMM:DocumentID="adobe:docid:photoshop:99720a90-8db4-0b45-9d3f-0d132e926

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6354)
Category:	downloaded
Size (bytes):	423286
Entropy (8bit):	5.44565596207776
Encrypted:	false
SSDEEP:	3072:cGGBvRxYxsjOoga4RSWoD3x58NfuVQoWX3Z9pz/XV81BheHIph4K9oVmy:jlOjOoYyW5Lzt/H+4IO
MD5:	66A5393D3F9D747C6CA4D317564CB917
SHA1:	383410FD682F07D32581769C30299F4730C6F2B7
SHA-256:	0AE4BA12ACCB4CE8B1F9A2D02383611FF27D48B9A08810374DC31A6007FBBAAB
SHA-512:	9A4F15DF580932637228DB6459988AD90E668CB14CF483DCE77D2C1E7BEB8CE85A1865D668BF85D4D0EE691C96972892CBFE538507B93967DF5A97395E049A1F
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3ibTx4/y3/l/en_GB/4Gun5E2JitX.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("AppGroupsFilled16.svg.react",["react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react");function a(a){return i.jsxs("svg",babelHelpers["extends"]({viewBox:"0 0 16 16",width:"1em",height:"1em",fill:"currentColor"},a,{children:[a.title!=null&&i.jsx("title",{children:a.title}),a.children!=null&&i.jsx("defs",{children:a.children}),i.jsx("g",{fillRule:"evenodd",transform:"translate(-448 -544)",children:i.jsx("path",{d:"M460.869 555c-.472 0-.41-.4-.41-.4 0-.786-.264-1.51-.708-2.1 0 0-.476-.5.033-.5 1.222 0 2.216.896 2.216 1.996 0 .554-.507 1.004-1.131 1.004zm-1.41-.094c0 .603-.514 1.094-1.146 1.094h-4.625c-.632 0-1.147-.491-1.147-1.094v-.306c0-1.434 1.22-2.6 2.722-2.6h1.474c1.501 0 2.722 1.166 2.722 2.6v.306zm-7.21-2.406a3.479 3.479 0 0 0-.708 2.1s.063.4-.41.4c-.624 0-1.13-.45-1.13-1.004 0-1.1.993-1.996 2.215-1.996.51 0 .033.5.033.5zm-.124-4c.684 0 1.125.49 1.125 1.25 0 .69-.504 1.25-1.125 1.25-.62 0-1.125-.56-1.125-1.25 0-.76.442-1.25 1.125-1.25zm3.875-1c.

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	364
Entropy (8bit):	4.5307728192386865
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4wFs0BIiV2DTFVRrZjih9gCqzOfHLVlZ7YoPV3aXtJlIXtz3:t4noU/vmRwFs0BIXDJHNjihnbH7Z7YOn
MD5:	9EDB56221B5B65134491A96453F9407C
SHA1:	323001B08DF5DF6962781334D9BDDDBDCFC9E0AA
SHA-256:	5E020ADF6151A4814846CB07EC91E9902C8860F1445F5F9321C5FDD81A06F102
SHA-512:	373A6F0D45A1B955DF57858CCCAB05503FA31962BA47D5FDE6F5039D8E7E7FF72EF7B2FF4BA261E80C7DA630016BE142C4E319FE7CE66B0FCE9C317E77016053
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M12 3c3.31 0 6 2.69 6 6 0 3.83-4.25 9.36-6 11.47C9.82 17.86 6 12.54 6 9c0-3.31 2.69-6 6-6m0-1C8.13 2 5 5.13 5 9c0 5.25 7 13 7 13s7-7.75 7-13c0-3.87-3.13-7-7-7zm0 5c1.1 0 2 .9 2 2s-.9 2-2 2-2-.9-2-2 .9-2 2-2m0-1c-1.66 0-3 1.34-3 3s1.34 3 3 3 3-1.34 3-3-1.34-3-3-3z"/></svg>

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (543)
Category:	downloaded
Size (bytes):	120743
Entropy (8bit):	5.480867766784346
Encrypted:	false
SSDEEP:	3072:cUw0Uxzi/dKJCjFfI+3J/enlkWVUnmiBmuGe/Y0SSv5:cH0B/dKgxfXJ/enlkWVUnmiBmuGe/Y0b
MD5:	726C06BFF935911BF2F43E457D035828
SHA1:	F9A821E5CA156280BA5A91509F11DBC1E9FF8943
SHA-256:	171672855BF7BD4519D5A3AB040611A698D62815B4048BD57B9DE8FEEDBB3843
SHA-512:	1DB6EDF8AAEF0F20FC8FA61574472A483D55FBD7C20F181EF63410F76CC33505D267C3B811146D2F214D66A0B40B0C72AB407FDFE89006CFE3496897DF9B6860
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/bc657243/player_ias.vflset/en_US/remote.js
Preview:	(function(g){var window=this;'use strict';var b8=function(a){g.jq(a,"zx",Math.floor(2147483648Math.random()).toString(36)+Math.abs(Math.floor(2147483648Math.random())^g.kb()).toString(36));return a},c8=function(a,b,c){Array.isArray(c)\|\|(c=[String(c)]);.g.tga(a.C,b,c)},aCb=function(a){if(a instanceof g.Jt)return a;.if("function"==typeof a.Ul)return a.Ul(!1);if(g.cb(a)){var b=0,c=new g.Jt;c.next=function(){for(;;){if(b>=a.length)return g.q2;if(b in a)return g.Kt(a[b++]);b++}};.return c}throw Error("Not implemented");},bCb=function(a,b,c){if(g.cb(a))g.bc(a,b,c);.else for(a=aCb(a);;){var d=a.next();if(d.done)break;b.call(c,d.value,void 0,a)}},cCb=function(a,b){var c=[];.bCb(b,function(d){try{var e=g.bw.prototype.B.call(this,d,!0)}catch(f){if("Storage: Invalid value was encountered"==f)return;throw f;}void 0===e?c.push(d):g.jla(e)&&c.push(d)},a);.return c},dCb=function(a,b){cCb(a,b).forEach(function(c){g.bw.prototype.remove.call(this,c)},a)},eCb=function(a){if(a.qa){if(a.qa.locationOverri

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	338
Entropy (8bit):	5.081456518478992
Encrypted:	false
SSDEEP:	6:tI9mc4slbWKJAOBUtTxGjxAOyVov2RtNI8MobBWDyewVR2OsXdfDRUEubz5JM:t40rOQojGOsov2fCy9GyekahDRqzc
MD5:	344BD6131BA252992E7B43DB8ACF0EF4
SHA1:	AE9762E6C8B2582AC06B72E1056F93394F1E7528
SHA-256:	F45C028690DE48FA989AA16E372FA580806B168114800CCCF6BF967C1B73C7E8
SHA-512:	49EE13BAF8D5E0847DDC4CE980F33540EE405784432E6027310224290FC1B9D835B80D8F9C7CE02D5A2692411B9B230BE65FF8DF6F63CCD92287D109673C1888
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <circle fill="#FF0000" cx="12" cy="12" r="10"></circle>. <polygon fill="#FFFFFF" points="10,14.65 10,9.35 15,12 "></polygon>. <path fill="#FFFFFF" d="M12,7c2.76,0,5,2.24,5,5s-2.24,5-5,5s-5-2.24-5-5S9.24,7,12,7 M12,6c-3.31,0-6,2.69-6,6s2.69,6,6,6s6-2.69,6-6 S15.31,6,12,6L12,6z"></path>.</svg>.

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2339)
Category:	downloaded
Size (bytes):	39835
Entropy (8bit):	5.39718055021501
Encrypted:	false
SSDEEP:	768:uwoRUvPQgcREIb+9KiiqR12623vlpOeO/hpoLpRX:uoggcRhQRIb9AP/hps
MD5:	9DF260EF5F689E597011F8A110BF0156
SHA1:	7CF9959F50EE5C0EB7653CD7B9D56E9E13C61325
SHA-256:	8E184352E6A0026E43C829910615FC408A900DAD2F388D1B284756D1A7B0B62E
SHA-512:	099EA70BC08630B933E83C3033AE049C19940CA9E8F0EB42EB764552A9649493606EAB56F683AA72DF356EF53A9B37A63493A349E86A098FA82AA0EF75387CD8
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/aef0ced3/jsbin/spf.vflset/spf.js
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof l&&l];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this);function ea(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.ea("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.g=f;ba(this,"description",{configurable:!0,writable:!0,value:g})}if(a)return a;c.protot

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	789
Entropy (8bit):	4.4194384212801
Encrypted:	false
SSDEEP:	24:t4takfIIJEGBA8rb0CklxqTaccoUZ/ES2mM:kGGSVC8Giu
MD5:	B552B4C85CA1E2238DB395B9A49411FF
SHA1:	D8D5C6B8E8253732F1DD1CCE2F8C4F3C1F1BB1BE
SHA-256:	949AF1BF7118AF3ADA0A087666E6E763CA627DBEFB1EB2E3B978210CFE808FBA
SHA-512:	62DC81FC15CE62AFD2C22C36A05C5C5CC6BB4E5231C8BDF11143CFA8C950A6A161B693BE7B93AF6BFD9A0C348D6B4A49D9956706029E1307135B4D191869D837
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path fill="red" d="M11.13 1.21c.48-.28 1.26-.28 1.74 0l8.01 4.64c.48.28.87.97.87 1.53v9.24c0 .56-.39 1.25-.87 1.53l-8.01 4.64c-.48.28-1.26.28-1.74 0l-8.01-4.64c-.48-.28-.87-.97-.87-1.53V7.38c0-.56.39-1.25.87-1.53l8.01-4.64z"/><path fill="#fff" d="m12.71 18.98 4.9-2.83c.41-.24.64-.77.64-1.24V9.24c0-.47-.23-1-.64-1.24l-4.9-2.82c-.41-.23-1.02-.23-1.42 0L6.39 8c-.4.23-.64.77-.64 1.24v5.67c0 .47.24 1 .64 1.24l4.9 2.83c.2.12.46.18.71.18.26-.01.51-.07.71-.18z"/><path fill="red" d="m12.32 5.73 4.89 2.83c.16.09.41.31.41.67v5.67c0 .37-.25.54-.41.64l-4.89 2.83c-.16.09-.48.09-.64 0l-4.89-2.83c-.16-.09-.41-.34-.41-.64V9.24c.02-.37.25-.58.41-.68l4.89-2.83c.08-.05.2-.07.32-.07s.24.02.32.07z"/><path fill="#fff" d="M9.88 15.25 15.5 12 9.88 8.75z"/></svg>.

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2441)
Category:	downloaded
Size (bytes):	27593
Entropy (8bit):	5.036895375836824
Encrypted:	false
SSDEEP:	768:OIfBnHZP88LZ25g5I58n53YSn53Yan53YyE:OIfBnHZP88LZ25g5I58n5Hn5pn5bE
MD5:	ED806CAAC8C41B293AF0B1AC29B06511
SHA1:	BF7801C84C50EDCDBE353957BEF73BF6F09E9B91
SHA-256:	1CEF737651487ED39D646B7AA15C47DCF1A82895EF9AD729BF13E35C6F681CCA
SHA-512:	01FEC85D2415ECB0FF83EDFA92CB7D7C9C9A2BE9086E87AB32214AB2AC12FAD0DACB87433EF596497F650FBD09AC90703E8E2FADE8FED8F2D35F56F3ACACA2A3
Malicious:	false
Reputation:	low
URL:	https://dl.dir.freefiremobile.com/common/web_event/common/packages/spine/3.8/spine-player.css
Preview:	/ Player /..spine-player {..box-sizing: border-box;..width: 100%;..height: 100%;..background: none;..position: relative;.}...spine-player * {..box-sizing: border-box;..font-family: "PT Sans",Arial,"Helvetica Neue",Helvetica,Tahoma,sans-serif;..color: #dddddd;..-webkit-touch-callout: none;. -webkit-user-select: none;. -khtml-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;.}...spine-player-error {..font-size: 14px;..display: flex;..justify-content: center;..position: absolute;..top: 0;..left: 0;..width: 100%;..height: 100%;..background: black;..z-index: 10;..border-radius: 4px;..overflow: auto;.}...spine-player-hidden {..display: none;.}../ Slider /..spine-player-slider {..width: 100%;..height: 16px;..position: relative;..cursor: pointer;.}...spine-player-slider-value {..position: absolute;..bottom: 0;..height: 2px;..background: rgba(98, 176, 238, 0.6);..cursor: pointer;.}...spine-player-slider:hover .spine-player-slider-valu

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3453)
Category:	downloaded
Size (bytes):	23815
Entropy (8bit):	5.529967050808074
Encrypted:	false
SSDEEP:	384:b6W1dFLfKbMe2RBx5X6BHMf5SUluYdZ5QZntkJjTm:eCFLfKq5qBHMf5SUluYbwnt+S
MD5:	0B76E737EF243BEF339D1212FAE9233D
SHA1:	22F04AEE22C6751C79943726938D204796213A0B
SHA-256:	6FE670A0CDACD0D065B1B7B8B41EC0158099749BEC2FC239898E623E789E0722
SHA-512:	81867750A02C54276EA7141A24591671BD0FC2F8A742683D1C6CD05173E303D6CC4B9FEDD5E0DEA5AC6F42551AD563A5EC3D8F803BA3098397CA92A2AF0520BD
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/y4/r/zJ7X2mgr9yY.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("BrowseEntryPointAction",[],(function(a,b,c,d,e,f){a=Object.freeze({BACKGROUND:"BACKGROUND",CAMPUS_DIRECTORY_SEARCH_TILE:"CAMPUS_DIRECTORY_SEARCH_TILE",CELEBRITY_HCM:"CELEBRITY_HCM",CHALLENGE_POST_CTA:"CHALLENGE_POST_CTA",CORRECTION:"CORRECTION",CREATION_IDEAS_FOR_PUBLIC_FIGURES:"CREATION_IDEAS_FOR_PUBLIC_FIGURES",DEADEND_SEARCHES:"DEADEND_SEARCHES",DEEP_LINK:"DEEP_LINK",DEEP_LINK_VOYAGER:"DEEP_LINK_VOYAGER",DYNAMIC_KEYWORD_CHAINING:"DYNAMIC_KEYWORD_CHAINING",ENTITY_ACTION_BAR:"ENTITY_ACTION_BAR",EXPLORE:"EXPLORE",FEED_HASHTAG_CONNECTED_GROUP_CTA:"FEED_HASHTAG_CONNECTED_GROUP_CTA",FEED_INTEREST_BUMPER:"FEED_INTEREST_BUMPER",FEED_INTEREST_IFR:"FEED_INTEREST_IFR",FEED_INTEREST_QP:"FEED_INTEREST_QP",FILTER_LINK:"FILTER_LINK",FILTERS:"FILTERS",FOLLOW_UP_FEED_PIVOT:"FOLLOW_UP_FEED_PIVOT",GROUP_MALL_ANNOUNCEMENT_HASHTAG_CARD:"GROUP_MALL_ANNOUNCEMENT_HASHTAG_CARD",GROUP_MALL_EXTERNALLY_POPULAR_RELATED_HASHTAGS:"GROUP_MALL_EXTERNALLY_POPULAR_RELATED_HASHTAGS",GROUP_MALL_

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 636 x 140, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3353
Entropy (8bit):	7.866861710154873
Encrypted:	false
SSDEEP:	96:lRjNK7z/pNElM4dY2sPIGrOQRnKAbLohLDO5:lRBK7z/pNEa4dkJr1Lh5
MD5:	D0CE400F6D6F397DDCA5E460210DB19E
SHA1:	159CCB2FCDE33529A29FC6DF64A09ACB2476EBA6
SHA-256:	CB22F766A2A1A451DA510EE5C58242CF074482075E3881E01EC24BBB47D025D3
SHA-512:	1E349E77D97A571D99F4EC9018F1414B80A7BFF971551D5ACEF3C07ADD36DC851C054DFCC930DA0A3DABA08245F259FE1B295DB62A1634C4DF82716199981FDD
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S/content/mobile/images/codashop-logo-new-2x.png
Preview:	.PNG........IHDR...\|..........>.T...<PLTE...(.0(.0(.0(.1(.1(.1(.0 .0).1(.0'.1&.0'.0%.0'.1).1.0(.2(.1..Vc....tRNS. @...`..p.P.0..0...u....yIDATx....0..`.o@H...]...d1.h.t:=..h=a.............../7..McLL...)....#..d..z.`..+.... t.~....o.....&@x..^E\|&.^.Q+.[...z%..A..s...v..H....7D..$.cQ...L.8..1....4G^q.........)....../....".5......X....e"......=/.....>.M....D.hZd.`O.#...ylA...t.0.......5C..KdB..<;..6&.._N.tS.@.D..z.6..5)....Y3ta......5...........#.n1.c.r.5.?..Y3.s..qj..Z.;...+.J ..d..&U.-.p`...Q.,......\|..v%Ss....)U.~.....5......YZ.kd.O...>.[..SJ..1.0J.=LO7Ud.k.......01m1;.R....!.<?=.oyl..V../s..xvk..?2...~`z.T...m....^..sZB.....(.=....e.4.w.O%,SO)Oi.ML...b.....+;..46.....s...wk....m..N.C..rO.......zd..u.....t...^......).D...].8.....v...).n,.8K<S.G.....$.u..(*.z[...Q...o..5...........Pt.$C.....l...E....\|N._..\|.k..j.....M..{..n>C.h.7.].\|../...V.].e.>.<;............=[...[.g..Q./4...d.+...wGm...........C...9S..~.........d.N...a(....'!7..

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30837)
Category:	downloaded
Size (bytes):	31000
Entropy (8bit):	4.746143404849733
Encrypted:	false
SSDEEP:	384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf
MD5:	269550530CC127B6AA5A35925A7DE6CE
SHA1:	512C7D79033E3028A9BE61B540CF1A6870C896F8
SHA-256:	799AEB25CC0373FDEE0E1B1DB7AD6C2F6A0E058DFADAA3379689F583213190BD
SHA-512:	49F4E24E55FA924FAA8AD7DEBE5FFB2E26D439E25696DF6B6F20E7F766B50EA58EC3DBD61B6305A1ACACD2C80E6E659ACCEE4140F885B9C9E71008E9001FBF4B
Malicious:	false
Reputation:	low
URL:	https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
Preview:	/!. Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.7.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.7.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	364
Entropy (8bit):	4.5307728192386865
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4wFs0BIiV2DTFVRrZjih9gCqzOfHLVlZ7YoPV3aXtJlIXtz3:t4noU/vmRwFs0BIXDJHNjihnbH7Z7YOn
MD5:	9EDB56221B5B65134491A96453F9407C
SHA1:	323001B08DF5DF6962781334D9BDDDBDCFC9E0AA
SHA-256:	5E020ADF6151A4814846CB07EC91E9902C8860F1445F5F9321C5FDD81A06F102
SHA-512:	373A6F0D45A1B955DF57858CCCAB05503FA31962BA47D5FDE6F5039D8E7E7FF72EF7B2FF4BA261E80C7DA630016BE142C4E319FE7CE66B0FCE9C317E77016053
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/location_point/v5/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M12 3c3.31 0 6 2.69 6 6 0 3.83-4.25 9.36-6 11.47C9.82 17.86 6 12.54 6 9c0-3.31 2.69-6 6-6m0-1C8.13 2 5 5.13 5 9c0 5.25 7 13 7 13s7-7.75 7-13c0-3.87-3.13-7-7-7zm0 5c1.1 0 2 .9 2 2s-.9 2-2 2-2-.9-2-2 .9-2 2-2m0-1c-1.66 0-3 1.34-3 3s1.34 3 3 3 3-1.34 3-3-1.34-3-3-3z"/></svg>

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2784), with no line terminators
Category:	downloaded
Size (bytes):	2784
Entropy (8bit):	4.809042688586117
Encrypted:	false
SSDEEP:	48:sL5Yu8v+cPlhF8KNbt1J81Jv8H2qHTiNf3SkvuQuLP6TSt0xN7KYtuJ8uJq:05B8mc9hFjX8XkHZHTiV3SkvuQur6TSI
MD5:	B6C83D3582430126098676CC14C0B7AE
SHA1:	A117A8E06637487FABCE45C1716E33CE4008E560
SHA-256:	F1DC9F4F3ADDBFA08C795318BFA457A0BF60029D906C694E6AA46D5DB79AB50F
SHA-512:	DB6DC28BCC388145C20777B20D15B59E163D637500D0600B4C6C34AC4DEA017F3BA71ACB9B855302D2D9940F49B561E080EB2B3D28E7956565C2C1E4CAC21349
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S2/content/common/css/shared-fontfaces.b6c83d3582.css
Preview:	@font-face{font-family:Lato-Bold;src:local('Lato Bold'),local('Lato-Bold'),url(https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Bold.woff2) format('woff2'),url(https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Bold.woff) format('woff');font-display:swap}@font-face{font-family:Lato-Italic;src:local('Lato Italic'),local('Lato-Italic'),url(https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Italic.woff2) format('woff2'),url(https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Italic.woff) format('woff');font-display:swap}@font-face{font-family:Lato-Light;src:local('Lato Light'),local('Lato-Light'),url(https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Light.woff2) format('woff2'),url(https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Light.woff) format('woff');font-display:swap}@font-face{font-family:Lato-Medium;src:local('Lato Medium'),local('Lato-Medium'),url(https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Medium.woff2) format('woff2'),url(https://cdn1.codashop.com/S/content/f

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 640x241, components 3
Category:	downloaded
Size (bytes):	53533
Entropy (8bit):	7.966436020020061
Encrypted:	false
SSDEEP:	1536:OYZ99J9ca1KfDj6KHcHsbDQxHvqmYCYs6pQqhv+:H979JKmdb6s4NW
MD5:	8E5BB390D9E0F12905481EDAC5E46539
SHA1:	C9D5677D4D96847DF61E41B8D1CE5FA750EB834F
SHA-256:	5BEBF695D8569B372A8B99BB7BD08BCCF0158F0CE3400469CAFE685F3971BA5D
SHA-512:	CD40DE62D661FB6CC6D6EAE975BD96F7BCAA26395489F88E2608C80F6C6CFC39A6CABBD653EAF383D1EB76668514B4DE5C4D313B5506E45D9799557D8141B530
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S/content/common/images/mno/freefire_new_640x241.jpg
Preview:	......JFIF.....d.d......Ducky.......<.....C........................................................ "..".......C......................................................................................................................R..........................!1.."AQ.2aq...BR.#b..$3r....4C....5St...%6EUs...T..7e..................................F..........................".!12A.#BQRaq..3.......b.4Cr.$5.D...%S.s..............?....2..^.!{.p......^..ac...o.....b..K.ZI;j5..!@....P.@....P.@....P.@.VK....#y..t.........u.M..-.\|).R..o.k..k.c.:U...;p......?.=..5..j....Hc......S.oMc....?...U.w.'.m.Z.....?.z.....F...5w.z.F...M.E_U??Y.Z.0.....(.......y.\...i9m.......k..gJ\|.Z...<k......h.7.cs?w.....F.J.#.=.!.L.X.~....P..)..:..tC.w./..6.>...k..-.._..3....:.5.(....{...0.y...)....9.W#.t...^..mN...z9...?p..")g...Sh ...~..T..6m^h..v.F..=.K.....h.I?.:.e..4k,m..x.N.@....P.@....P.@...!..g.#....5...k...;.`...]...u]..)d..M...ju.Gl4.p.k.......8.R>...rH...i...F.7..r.&*..g.c;.<./.I

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	389
Entropy (8bit):	7.110565365189101
Encrypted:	false
SSDEEP:	12:6v/7uaXSuonrFqLkXkCCQIU1uuowAc9VO7hmc:EknPjm0VWQc
MD5:	B695CF60B429FD57527D94710C58CFCC
SHA1:	A0B370FB358812393B71DF32845155E796AB1245
SHA-256:	803B77A3751F725B4793DF4F27EA292F2C97129F9CBFC57DA997C4459618AD00
SHA-512:	3E19FDF50B36300F7B4AA8232BE5BA1EC36967D4C86FB47C6D491484613550303C88553FDD14D307C7FFC67F7CF31FDF73347EF3A5420F63EBA04CE72FBFC1F1
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/images/emoji.php/v9/t6e/1/16/1f4ac.png
Preview:	.PNG........IHDR.............(-.S...uPLTEGpL.....................................................................................\|..............6.......tRNS......W...4.a..u.......S.*r........IDATx.EH...A.....1m...+LU...n?..~..q.av.Z.....C.....0..z..........%.q.K..w&..&...'.'4.o.O.:..Kw...z.....4....9.d..i.....\......5M.....tV......m..._.....+.......d.7.....IEND.B`.

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	181
Entropy (8bit):	5.0971144323973805
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5hL6Fb0zVjXRH8+hHiATcvXjXRHRcBHeQR+Hmy7NdURsoDCb:tI9mc4slhLJ9hC/vm+Qqmy7NdcE
MD5:	FE331A9DBB967C0CF9B8F9393194706D
SHA1:	AD46D5C48638D094B7CB6065748F2F0DC13379D3
SHA-256:	7BB86F0FED70C3026F3D41D1ED0ADC304A4EBA489901226658C65A9244A4E22A
SHA-512:	E67196D4A808B2E82EBEFD6922A5822F9FC11C9F030B7E0C75D079A700339D1D0300B12DADEA7DFF9833BB27FCCFA1C4E026783091484FD6E6F7B1078251D057
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><g><path d="M14 3H5v18h1v-9h6.6l.4 2h7V5h-5.6L14 3z"/></g></svg>

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	552
Entropy (8bit):	4.4354471280851335
Encrypted:	false
SSDEEP:	12:t4tM65JA+KtIeDBmtMsZkvRP8x0iup0LELeyw5c+QU:t4tMMJALH8MsqJUtDoie+QU
MD5:	A57A74B00971D94B2CCA706685A9FBF6
SHA1:	8F24E8FAB4F92F58C23D451C3C8C6966C3A7B3E2
SHA-256:	2C13665427EA079DB0437534FD5C3F43E144D4707F129267C56F0352FF582EC0
SHA-512:	0A64ACB3697FBF5EC6A6D8DC46587E1A2A044F43D8DE0168F733B6276101F4A623D494E250D0C60A9E76C556ED288014530401A7C42F00F6CF5CBBE4AAD30748
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_fill/shorts-share/v2/32px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M17.7375 5.26556L28.6745 15.2624C29.1083 15.6589 29.1083 16.3422 28.6745 16.7387L17.7375 26.7356C17.0958 27.3222 16.0628 26.8669 16.0628 25.9975V21.6217C16.0628 21.6217 16.0627 21.6217 16.0626 21.6217C9.92564 21.6217 6.69114 23.9378 5.1615 25.5968C4.80726 25.981 3.97329 25.7343 4.00015 25.2125C4.22558 20.8321 5.86088 10.8892 16.0626 10.8892C16.0627 10.8892 16.0628 10.8892 16.0628 10.8892V6.00368C16.0628 5.13426 17.0958 4.67898 17.7375 5.26556Z"></path></svg>.

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	231
Entropy (8bit):	5.077824311544019
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4G93gkIk6wy7Ndc8:t47N9U/vmRk3gBnV
MD5:	455D4C6D10C83A1C3F62725C71F25BB9
SHA1:	61F339D3E56879E1B4680D7229BF8B88BE9CBC8D
SHA-256:	7834ADC55F57ED2863E9F0BF3D4944458EDD13D85F3207F7FE8BA2B2BFFBA464
SHA-512:	C0C7A0378A799AB3D867B4FD63D6133564E1BB35C797D59DA621B235A73C18D4B90E308731CD09A1731175212D75CF9CDA31DF539230048BA60108A1069E8673
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/flag/v6/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="m13.18 4 .24 1.2.16.8H19v7h-5.18l-.24-1.2-.16-.8H6V4h7.18M14 3H5v18h1v-9h6.6l.4 2h7V5h-5.6L14 3z"/></svg>

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	593
Entropy (8bit):	4.524151373929859
Encrypted:	false
SSDEEP:	12:t47N9U/vmRGtKL62ZG3XcZsRq6JoNiLrRKMszLgWEajiexYNjbv:t4jU/vNKLgXc6RqCKkE+qTCn
MD5:	CD203C4E6B3788438827E21F28380A98
SHA1:	374FE8D0C91F9C94E8FEDA631E20D11C55E1C9B0
SHA-256:	396B1892EBAA72D0874C8D0A3AFB87B803560058D84FAB6A29761A4D6238F8ED
SHA-512:	2E4278A0355E84888561BABF3D0FDABD29AEF0FEFDA84199E794D4CBFC6E01FEEA9C0E91F5EC521E0197F1569788FD36DFC2A0F0BC7186A4D805EB8A9763579A
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M6 12c0-3.31 2.69-6 6-6s6 2.69 6 6c0 1.66-.67 3.16-1.77 4.25l-.71-.71C16.44 14.63 17 13.38 17 12c0-2.76-2.24-5-5-5s-5 2.24-5 5c0 1.38.56 2.63 1.47 3.54l-.71.71C6.67 15.16 6 13.66 6 12zm8 0c0-1.1-.9-2-2-2s-2 .9-2 2c0 .74.4 1.38 1 1.72V22h2v-8.28c.6-.34 1-.98 1-1.72zm-9.06 7.08.71-.71C4.01 16.74 3 14.49 3 12c0-4.96 4.04-9 9-9s9 4.04 9 9c0 2.49-1.01 4.74-2.65 6.37l.71.71C20.88 17.27 22 14.77 22 12c0-5.52-4.48-10-10-10S2 6.48 2 12c0 2.77 1.12 5.27 2.94 7.08z"/></svg>

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 249 x 232, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	7828
Entropy (8bit):	7.961214155097688
Encrypted:	false
SSDEEP:	192:rpJ13y/pnGNCfUcX13MAGBB07KmlH3MQp2MtRS:9P3yxnNX18l07TlH3pTS
MD5:	D9C3C75925E0411913DBAE0E06616373
SHA1:	F3F1FE7808064C7C4807C70AF20D1482B6BC0E9D
SHA-256:	EF8444C7729F3D6D62C0B37062C1F167627717C8EAA7637BC657DEE259D7E930
SHA-512:	17B682392BD5D79070AB46CCE9AEAA754752217C66F34F5B618E9822AA313017998CC5117DE858147AF7ADC0AA6500770FAFF55572328CA5D6B067A7B9425F12
Malicious:	false
Reputation:	low
URL:	https://dl.dir.freefiremobile.com/common/web_event/official2/dist/client/img/error_icon.1735f29.png
Preview:	.PNG........IHDR.....................gAMA......a.....sRGB.........PLTE....7......................."X.......D...........6..4..6........5..5..O..5..5..6./e..5..5.....6....\...:..8..5..7..5..5.............................5.s.........T.a...6......!8l.!P.....A..6....6b..<....<n.X.....Z..J..........U..%Z.iQI...D1-z]TDo....@?F.........ZM0......WT7.Z@4..6..........}8.........80 ......)!.D:&.............$..-'. ..8..>7$...4).NA)......0'.2+.....A....<0.SG,...D6..:..K..=....-$...._P2......{..?s....'Y.$ .)#.9e..X....NG~......N.......WI-JG/......C?+99?....dU8-`.PM3...j1...f....<3 kJ$......Ba.....x6...s4..Mp.........f.T...x..z[1........]A .]+..........7.k\?.vXMz.seI.....t...W...........{lO.t@+/.........Q9...I........<paD;.....{`..nTP6j..........j;..}^\d.....}..zk.....k_U>9spyVT[.....y...KJPhfn...........Y..\V...WtRNS...b..o...............?.....)....wJ.ZfJ.5..U.v...... .......@..........................q....IDATx..w\TW...AA...i"DQQQ.%j.4..lv..p......L...t)."R4.

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	22168
Entropy (8bit):	5.93483918073825
Encrypted:	false
SSDEEP:	384:U62J824pAKFNW2Vr4/r33n4gU9kFcvyO6iH/ug3sOoWEt4bK8ArCi:N2J8FpAuY2VrGn4gU9kFeyO6iH/XsOoD
MD5:	07DF54DF91480FBFE2906765452C6FBF
SHA1:	A52E8A49117192C1EF95BC076DC156B1C64597EF
SHA-256:	27FBF1CC76894C289357A1601105392F1DBAAFABA15DAA258C954487B507718D
SHA-512:	6AC0F00ABD894BBC17C8440F1EFE6AC67E5167D91412B318013A5898713E2DD1AFC9413B2F9E5D93B3A70C61B3FEBC4F5911C471C3016311363D89F147393F78
Malicious:	false
Reputation:	low
Preview:	...KEYF....$................. .............H.....4C..4C...@..pB..............................4C..4C......................................................................................................................................................Adobe.d..........................................................................................................!1a.Q..Aq"..#2B......$CSbr.R........................!1.AQaq"B............?..i\|..~.......d.60...h..D.L.3.OB..`..>..eN:).m?.J3x..y..c....1.\|jG...b...?....KH.#.F.Y....MOP<.......}...bB.....c..T.vp...R\|i?...).i49.s?...2.......h'.9.W...G}Tc..V...3......A...i\|..~.....H.3....x..bi,..Gm..G.u8....?ve....J....{..\DW.$t).O..(.&...m'.5Y..U5...&..itM:1.j.t2Q.+...#P........!..h......[~}6.qJ.g...y.G........ ......._.....F..P........./..-.V.&g!..8.U[.[.!.h...y.?...6..D....2Q.f...Fs)Z.Vd... .zB.....wD.7..h.2B.W.V...Z..l.....\6!5...Kc...&.9~.}.....q.\|~~....6..P....:.C....G.\|.~....2...at.vMj-ZL.C...j.3vm`....[.K..)...#;J.1..

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	241
Entropy (8bit):	5.137838894912298
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4hNpDCbNBdANjcmgTLMAqY:t47N9U/vmRhNpCsYNLzqY
MD5:	2BEBB6EA2A23E97C81427106D9722D4E
SHA1:	38DC371BFBF0DCA768A702E89ED00877F34621E7
SHA-256:	4C4B6AEA58201D13608EEB52B960E052E9C7D677B7281CAF0E6B713A3E2F223B
SHA-512:	F4BE381ECF6616EB82FC4B139BC67E6EEE70B1B71581150FF4E69E09E0B6EDA8729536413CDAAB38642F0616944089F96A3DA8369B56870D1118E91B67C2FEC9
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M3 3.03V21h14l4-4V3.03H3zM6 6h12v2H6V6zm7 9v-2h5v2h-5zm0-3v-2h5v2h-5zm-1 6H6v-8h6v8zm4-2h3.99L16 19.99V16z"/></svg>

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	151
Entropy (8bit):	5.020176826819927
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHqJtxTcR+NkzlFWttxci:tI9mc4slhohC/vmI4ItxTcM6D0Ci
MD5:	ABCB07D23B020A9464DD70FA10C0D9D3
SHA1:	38EC787E83181D5907C71676C2C4A21EF4D5B72D
SHA-256:	D721B8669114FBCDA49F612047DC68869FD406A82AC9BAA420ECF35FFEB05C2E
SHA-512:	5218BB6A31E50DA5F42ADD673562C03B970C77FC85E9037ECB85ED9B005015EB754017B27351F04DA7622FBE2EED0CC4CCCF82CF73F6EFAD6C1665789AFD9E51
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/copy/v2/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M19 6v15H8V6h11m-4-4H4v16h1V3h10V2zm5 3H7v17h13V5z"/></svg>

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	165
Entropy (8bit):	4.914928959846639
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcH0wvl7MJJTTtX+nIVrtXypS0:tI9mc4slhohC/vmI4PSTTl+n8le7
MD5:	A64DE7E4B8E12D0201357414E2ED618D
SHA1:	2DEE7B56217F540787CA82D03AB6171D08E23BE1
SHA-256:	BA0D0E7E11AC72A801626946BE1B061DD59D990DD33077A37A08149917A7E930
SHA-512:	A947F3619B2150621376D0CAC479AB6F522CAE7E651A917565050A4BC5ABCE6E60B3652DAC4D1CF90C0255FA09FC8EAA9B31EB6EF6A23D2E31AB497C86AAACB4
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/list_play_arrow/v7/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M15 19v-8l7 4-7 4Zm7-12H2v2h20V7Zm-9 6H2v-2h11v2Zm0 4H2v-2h11v2Z"/></svg>

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (612)
Category:	downloaded
Size (bytes):	6072
Entropy (8bit):	5.343052163889855
Encrypted:	false
SSDEEP:	96:v5H+xjPCDviSMjZsOT9/bYXP4GhvNh4N6X6S32JXrLt4G+Ltk28t+IHOf4oR40AR:v54sV4/jMVmR7LGDLeJNLri9GH
MD5:	26754A486D0408931B5E28852AE07628
SHA1:	F73AC724F1B1A99A4978296FFFA6E4372C2F357B
SHA-256:	4B0EC04643B5F7102A463EF348608A7D0BCE6AE0FFD65B7334D46C438A05D57B
SHA-512:	60B1A3D696F44EE5E8A3E30D0E0EF3153E3F63F6D301774690CC7F3CADE21015047080E6C1572442E6683866AF54B52610ABCD731ABF64CB77E104DD4A427F4A
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/bc657243/player_ias.vflset/en_US/miniplayer.js
Preview:	(function(g){var window=this;'use strict';var Zvb=function(a,b){g.W.call(this,{I:"button",Ka:["ytp-miniplayer-expand-watch-page-button","ytp-button","ytp-miniplayer-button-top-left"],X:{title:"{{title}}","data-tooltip-target-id":"ytp-miniplayer-expand-watch-page-button","aria-keyshortcuts":"i","data-title-no-tooltip":"{{data-title-no-tooltip}}"},V:[{I:"svg",X:{height:"24px",version:"1.1",viewBox:"0 0 24 24",width:"24px"},V:[{I:"g",X:{fill:"none","fill-rule":"evenodd",stroke:"none","stroke-width":"1"},V:[{I:"g",X:{transform:"translate(12.000000, 12.000000) scale(-1, 1) translate(-12.000000, -12.000000) "},.V:[{I:"path",X:{d:"M19,19 L5,19 L5,5 L12,5 L12,3 L5,3 C3.89,3 3,3.9 3,5 L3,19 C3,20.1 3.89,21 5,21 L19,21 C20.1,21 21,20.1 21,19 L21,12 L19,12 L19,19 Z M14,3 L14,5 L17.59,5 L7.76,14.83 L9.17,16.24 L19,6.41 L19,10 L21,10 L21,3 L14,3 Z",fill:"#fff","fill-rule":"nonzero"}}]}]}]}]});this.J=a;this.listen("click",this.onClick,this);this.updateValue("title",g.NT(a,"Expand","i"));this.update(

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	8724
Entropy (8bit):	6.79038236277243
Encrypted:	false
SSDEEP:	192:/itgWO5VcGhhnFZHjbCuTu3rNvxfzP3VyuWyshlnrlqRi:/ANeBFVKZxfMu0lMi
MD5:	2993755C7C7A44E573104124DC060F3C
SHA1:	A10CFFAA067B8FB82C5B084F08721950693474A0
SHA-256:	866248FB3F84481E21A19D0E2D4D5DF20EAADA6C5E5934B3F4FC39879A15A4BF
SHA-512:	746F07C0199702844AD7DA949D12BD8170E98A665DE7F89FC22EABCB3FD3F0DBEFDE65AB9E035F04DC861BEA186397B23548C8DB862E876E903819304CFCBAAA
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/m1/v/t6/An-V1eo7VQ3O9lqK2f9nfo3p019W0b_BTfQk8m_WliRJfm8Ss0I6dO39oKJmajreEZ2Oy5vSrTbDg0GpAgj0NSk-Eu5PWtSAd1gv.kf?ccb=10-5&oh=00_AYCD1VWQBamFCQirp7gVQT2iYvcacClMWPJi8f1p3bpxjA&oe=6679CDF1&_nc_sid=7da55a
Preview:	...KEYF....$................. ...................4C..4C..@@..pB..............................4C..4Cm.....................................................................................................................................................Adobe.d........................................................................................................a..!Q..1A"q.2R....#3B..CSbr............................!1.aAQ............?....$}(.....5{....pcGW.A.?...Q....h..%...8..M!...j......#.'.{S... \|....a.w..O.(....Pn..=..o....[wg.....^6p..Yi.....73OC.V.Kx..4..c.3..E[j..............$....`....&.u)b.o..L9P"....yn..eE...N..........m...Kd...Zvl.;"....S8.oD.....S...Q...-.R#...B..-.&e.lS..v=G.M5....&.....i.G.0.mD...X%.X%....../.V.V..%.b....M.....7.YO+9."......+..Y....L.Tj.K.ln..R...,C.......".#ul...e..P...Z...N.=..X.n.Q2....M.......X..$.T.......i.5!..z..+Q.p.......1BYF(K).........K.1..0..j..n....o_.h..MOE...........u..X,...M&.p.JkK.....cU..........D..>..h.5.h.]:..

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 1411, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	8809
Entropy (8bit):	7.819360327558873
Encrypted:	false
SSDEEP:	192:qkEFQLKti12Im8G3aWlXpYcT5eX6IvNm2fvhnk9TwqG9OTLS8i8v:3gi1HG3dlucc6mfvhk9ZG9mS8
MD5:	85115DF5906E2EC9DD062B2C0C9F841D
SHA1:	7B50BDB960A1DA914D90F9F3C9B9FE79D5C62FC9
SHA-256:	76A25FFB9296F9EC56E221F88B2081330B10FD2BCD86EABA7E037FA99717C65B
SHA-512:	786D3CE76F2E94A0BA820533FBBEC6BACE95892B7CE868E66411AD62DAEEF9107DD30F62470BCFA60CBA7857443F35E22E77D48117075F5729BBCC93E8EA77FD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............o.....PLTEGpL...........................................................................bhp........................................................................................................................................................................agq....................................@.......................agp`hp..................agp...........................agpagp`bp.........`fp...agq......>.....agq............agqagq`fpagq...bfp...agqagq...?..`hp........>..?..?..............agpagq...agq....?........E.wagqagq........................@..?..>.....@........agq?...........agq...........agq...........@..>..>..>.....agq......agq.............?..>..>..>..>..agq...agq...............agq....agq>..agq@..>.......agq.........agpagq@..>....8[......tRNS..~`.0... @.....p^...P.....M.....n.....j...(..{=#......C.....Z3...xG.,&9\.7. ..c.......v.t.W.T...J. .}.fhR..6...../..Z..0...p.w.@...^~O..p.....@.,=......Q...,....).E..Y...

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	576
Entropy (8bit):	7.439108662667726
Encrypted:	false
SSDEEP:	12:6v/7gK/fuDoHD98UB8oDeT6JXfT/YcYJOvuwle/EG5hSn6jNp19:UfYoHD2TviQcYJOvGDeKp
MD5:	3219FA068631ACF28305E9AB215AA959
SHA1:	D4CDE84F7E66661829B4AEA25E41560413EFD0B8
SHA-256:	BB6280C8214266AE6AC4C4F87F4C792D9478495A75181B0168DF67CCF9FCB2A1
SHA-512:	C84B8BC3B1D96E0D3C1E57B705FC3807D6D6FF3F7657F1FEEE5BA7FAEB463233F5B100E613C540E1E34846EC48CD19C791357507FC108539C51721F6BFD09B51
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................PLTEGpL.o........\|........q..............p..p.....i..............{..........._........X.s......r..x...........l...................^....a.....d...d...................E..,...........!..e.\|....tRNS.L.L...%%..[[.%..............U....IDAT(.M..v.@.F.D..vM.l.........e...?;..-.0.pv..?..qo.;....I..;.....l...?......o.i.=V...&.... .-IT..0.<...........6+.,..=^T...~a.....qwS..h..>.*!dw^.<.%.(.Q.F.V)c....`$..2..E.S.h.......)K.`S.7..]..........a\|e..a.......B.Q...D.9...F..Ux.O."..3.(y..F.xq\..S.C'.'E.9d.........&......=S........IEND.B`.

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9491)
Category:	downloaded
Size (bytes):	112704
Entropy (8bit):	5.493463581731781
Encrypted:	false
SSDEEP:	1536:pYF9iCjpLa18X5JZTIzkw4KJY4OPjiTZwmnjaj+n60rUO:HCNLaH4KJY47njaj+n60rUO
MD5:	6BBDE4BF999C3430D89CB41DEFE400C3
SHA1:	038E80CFB61D6ADE57DFE55D0F5F5FCE25B08268
SHA-256:	D975F2CE451F9BF22B4CE2CF7F70FDA0CA9EF8550088A78B03836D57B63C0360
SHA-512:	28A9A8AECF147FAC1396F304E35645711A843BD676DFA0345F35904ECD6024039850426F985AF8FF675D287803FFB84CBAC10C576AE47E9029D812EA41763F95
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3ifpn4/yt/l/en_GB/xyGxUdbmcjliUVeSsRTCk81SbQg6teJkXAZHoh1prcJsXgjxOZ-_U7a8O0FwF42MYvHidVTgbrSCilh6jit1ncqc.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometEntityHeaderCoverDraggable.react",["fbt","ix","ARIA_LABEL_PLACEHOLDER_FIXME","BaseAspectRatioContainer.react","BaseFocusRing.react","BaseScrollableArea.react","FDSIcon.react","FocusWithinHandler.react","Locale","TetraText.react","clamp","fbicon","react","stylex","useGlobalEventListener"],(function(a,b,c,d,e,f,g,h,i){"use strict";var j,k,l=k\|\|(k=d("react"));b=k;var m=b.useCallback,n=b.useEffect,o=b.useLayoutEffect,p=b.useRef,q=b.useState,r={coverDraggable:{bottom:"x1ey2m1c",boxSizing:"x9f619",cursor:"xv5twrn",end:"xds687c",left:null,right:null,position:"x10l6tqk",start:"x17qophe",top:"x13vifvy",touchAction:"x1o5wbz4",$$css:!0},dragInstructions:{alignItems:"x6s0dn4",backgroundColor:"x18l40ae",borderTopStartRadius:"x1lq5wgf",borderTopEndRadius:"xgqcy7u",borderBottomEndRadius:"x30kzoy",borderBottomStartRadius:"x9jhf4c",display:"x78zum5",paddingBottom:"xwib8y2",paddingEnd:"xn6708d",paddingStart:"x1ye3gou",paddingTop:"x1y1aw1k",position:"x10l6tqk",start:"xtzzx4i"

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x600, components 3
Category:	downloaded
Size (bytes):	51859
Entropy (8bit):	7.963127909568731
Encrypted:	false
SSDEEP:	768:pjr0zn587+XuvaSnXyBhdHoy2s5al5D0TqRBt8uhz1a2NGFPjm2UCXyKg:tX7+XJ687Iy2s5i0TpuhlNeTJg
MD5:	43DB132A2E90CF6124D04B87B4C8F8D5
SHA1:	92FE13CC1E6E1D5179CDB86DB4CA9D2E3B470A9D
SHA-256:	6E5353AAE07A9094268F22F96FC1A37BB2545776F9A01474BBE36AADFDF82C33
SHA-512:	C8CC0BAAD7BD42CE552A17DF00E81A7EAF79FE71EBB778FA18C7BA16C6C4588F7CAD632ADE80C3D32D01C9073C8B034A1A6C6CF2A978E4A9ECF48E8466C0BC6A
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/443717789_996576088504629_748921786331374552_n.jpg?stp=dst-jpg_p600x600&_nc_cat=106&ccb=1-7&_nc_sid=5f2048&_nc_ohc=6efKMPmYepsQ7kNvgHWkgWT&_nc_ht=scontent-hou1-1.xx&oh=00_AYBykvCb4vJ6su0icd2D3YWhwfwQGNVx6f7HEYWMUmgzSg&oe=6658484A
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a72010000281300007b2c0000252f0000f13d0000f75b0000277e00006f83000019870000fc94000093ca0000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......X.X..".................................................................................h~.................................H.............5}..(.`..@.............&.h`...........-y..P.YsR.{....C........As..f....+...j.....7V..@.........M...$.................R................C40.............D...CQ....@.....g\.5..a..1e9...$...k6.B.......&.h`..........?....S.z.>..}F...e.....g..T...9..f.>f..w...e...u.SG..T...Z8..8..yKu....s}.U..s...[..!....................;...>u.....I.......V.8.....V.V..].....]...'.pty.Z.].wT=....jYq>....M.dW.:.6E/!.Q.....WO.w..k."..........43C......,...sK.[-.qhga.3Y....\|...Qe.I....*.-.L..2.Abj.--:.v..t\.....g.....G..6...7...+7...k.C.[.'...y.zX.c....C..].lm.

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26072)
Category:	downloaded
Size (bytes):	944267
Entropy (8bit):	5.2616906180771945
Encrypted:	false
SSDEEP:	6144:CrygXr/Vki59CQRFh0v/vfzUGgFc/N/MA:CrNZEL
MD5:	31639F66C0C7879B16FD203A12B7FF42
SHA1:	FBEA58F9FAEB0E0487DA12FC0EB10F1BB4C862C1
SHA-256:	8615846CA0AB3BA326D904E4ACE0EE70311B546264284EBAE90170D53D3FD05D
SHA-512:	B596FFAC556D1C3585BA556985FA66DBD04373F82CE705ACC7AA20BD08A9C45D76FB51247BC735FCC0CF8640ADD63330BC72EBCEE29B3AAD04494E012BC83260
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3id884/y8/l/en_GB/4t25DeQRTJxLsi-rwUHCTlWyubcVjTfcI11-o1MT8-XErTW_NeGw-j-h5bjod9Ki8-3AcSV1GJLuDkNkYY8jZuVHUTYWdONLt7WuwwDateX8xhlAxWws3te_lNBFZ41W3g_g8nScjVqE0xb_HmQ2JWvIJ2cZwagDY3jE6r9mkoV0ZzHkRFDpcKqESlC_aQOCXY8eS6DpV79ituEkM.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometFeedAggregatedStoriesContext",["react"],(function(a,b,c,d,e,f,g){"use strict";var h;a=h\|\|d("react");b=a.createContext({hasAggregateParent:!1});g["default"]=b}),98);.__d("CometFeedFocusMedia.react",["react","stylex"],(function(a,b,c,d,e,f,g){"use strict";var h,i,j=i\|\|d("react"),k={media:{bottom:"x1ey2m1c",end:"xds687c",left:null,right:null,height:"x5yr21d",position:"x10l6tqk",start:"x17qophe",top:"x13vifvy",width:"xh8yej3",$$css:!0},root:{height:"xqtp20y",overflowX:"x6ikm8r",overflowY:"x10wlt62",position:"x1n2onr6",$$css:!0}};function a(a){var b,d=a.children,e=a.mediaHeight,f=a.mediaWidth,g=a.viewportAspectRatio,i=a.xstyle;b=(b=a.focusX)!=null?b:.5;a=(a=a.focusY)!=null?a:.5;var l=f/e,m,n,o,p;l<g?(a=a,m=g/l,o="calc(("+g+"/("+f+"/"+e+"))100%)",p="100%",n="top"):(a=b,o="100%",m=l/g,p="calc((("+f+"/"+e+")/"+g+")100%)",n="left");b=Math.max(Math.min(.5-m*a,0),1-m);return j.jsx("div",{className:(h\|\|(h=c("stylex")))(k.root,i),style:{paddingTop:100/g+"%"},children:

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	376389
Entropy (8bit):	5.190488654636762
Encrypted:	false
SSDEEP:	1536:9oi8ZHMCbS/SgVcBqILJPptpJKztM6oyi+MOn4y2Ox5juDEnXrDJc7MsByDhKTzb:9oi8ZiSgKBjSoyJufRWckQoSN
MD5:	734B31725E29C82861A2C08184FC7055
SHA1:	5AE2D674DD076C2025EAD424F423B53BC5F46E6C
SHA-256:	2958E30EDA7143B853DB1D5E3A9E606F83D3BF40A162148FBCA5A1B61D184223
SHA-512:	952FC63062D9E622BF71A8D2D83A63550CEF69750E4D25A2659740883486C788AABBC4CB5A73A599F4F8031A8C514FF5F1109701803B35D777414F92D9210F95
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/bc657243/www-player.css
Preview:	@charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-font-smoothing:antialiased;-webkit-tap-highlight-color:rgba(0,0,0,0);touch-action:manipulation}.html5-video-player,.ytp-contextmenu{-ms-high-contrast-adjust:none;forced-color-adjust:none}.html5-video-player:not(.ytp-transparent),.html5-video-player.unstarted-mode,.html5-video-player.ad-showing,.html5-video-player.ended-mode{background-color:#000}.ytd-video-masthead-ad-primary-video-renderer .html5-video-player:not(.ytp-transparent),.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ended-mode{background-color:transparent}.ytp-big-mode{font-size:17px}.ytp-autohide{cu

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	484
Entropy (8bit):	4.378279176071406
Encrypted:	false
SSDEEP:	12:t4noU/vmRhChc2LX7pC52k+N4ezW0qw9DIRSY:t4oU/vYqVG2kCCw2Rz
MD5:	2739BB8635C4631E78B240C8B83D102A
SHA1:	38B8FDB6A8444513D18378E789547B377CA46DDB
SHA-256:	FDE8C85A62FB4E29C3CD902167B791D0D06C3AEEF85C8DDDF3212287FB771A0B
SHA-512:	A2A5F5AF163E487943608C9646A6F30BF870607FC7753C14621BC9592483713D9E2F4B40A63030AC820F56E310D3116E78E3E959AD869E9F77FFE9EC6C133CD8
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/gear/v6/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M19.56 12c0-.39-.03-.77-.09-1.14l2.19-2.13-2-3.46-2.92.83c-.6-.48-1.27-.87-2-1.14L14 2h-4l-.74 2.96c-.73.27-1.4.66-2 1.14l-2.92-.83-2 3.46 2.19 2.13c-.06.37-.09.75-.09 1.14s.03.77.09 1.14l-2.19 2.13 2 3.46 2.92-.83c.6.48 1.27.87 2 1.14L10 22h4l.74-2.96c.73-.27 1.4-.66 2-1.14l2.92.83 2-3.46-2.19-2.13c.06-.37.09-.75.09-1.14zM12 16c-2.21 0-4-1.79-4-4s1.79-4 4-4 4 1.79 4 4-1.79 4-4 4z"/></svg>

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 312 x 200, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	22180
Entropy (8bit):	7.980789596516158
Encrypted:	false
SSDEEP:	384:XWdTGt5usYwb1T9Y9YsxxCT/dwpaRHqbV0EiRdxRhmEyEpWQsZ+QTNxYyHVx:GdTDA++sri6paRWijNmEts/ZNOy1x
MD5:	3669E98B2AE9734D101D572190D0C90D
SHA1:	5E36898BEBC6B11D8E985173FD8B401DC1820852
SHA-256:	7061CAA61B21E5E5C1419AE0DC8299142BA89C8169A2BD968B6DE34A564F888A
SHA-512:	0C5F0190B0DF4939C2555EC7053A24F5DAE388A0936140D68ED720A70542B40AAF65C882F43EB1878704BEA3BD18934DE4B1AAC57A92F89BBB4C67A51B983AE3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...8...........j...VkIDATx...{.\.}.....{...........Cm\....B.E.Vj.?...i.(..."BZ.JP!.D...D.....9..-....B...6...wg..........3.^l....Fw.q.......=..`Y.yO...,.<7lY.y...lP-.A.,.T.lP-.A.,.T.lP-.A.,.T.lP-...,.T.lP-...,.T.lP-...,.T.lP-.........a..n.%.J..).`.m.P8]$E.%... .r......jS.......7...kV_s...^.......3.............].~....5F.....0J...<.......E9..........q\DDH...+...\9q.@DA......(2.n"j ..F ......M. .R.$L......5E1......%$!.q....0A.`y;....4..`...h_.....4.....r<....w.e.1&T.....K.Ae.....mG...@..0'Q.........E.G.".;.r.... .u.?......37...,P" a.c#G_..].6\..u.P..D....)-......M....A.0.lPk.. ..;..e.Y..........U...aX....(X6.U..F...?...\|.o... .u......?...A=..5k..A..L>.i..g.<....m\r#.....}._......u......=.[.u......q........D...~..\|'..F@.{T.\.c.......5..z}.x.h.....1yY.H..).p..P.u$...8....`..P.h.. .G.....1..."..s...xj.. ..2.(.....0$..a.....2...B.BA.....T.H.C.1.. @2..H.D.c.!\.....J.Q.X....\..V.b)...m.:.~(J...D.Z.`.%.:.\|.

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	511
Entropy (8bit):	4.622942488641842
Encrypted:	false
SSDEEP:	12:trwdU/gKup+tiHD6x2wiHDXx2wiHDi25iHDV25iHDc:tYU/duItq68wqMwqt5qw5qc
MD5:	A229E3CF403001E92CB1EA441D880E54
SHA1:	1C4518AA326967D4BC424FD14C65D1A3276B5100
SHA-256:	952AC1A0AE07753F75FA27BBE483E71C43B29DF5C160AAE33BB447C0E5B5E751
SHA-512:	6B30EE9BECA55C6FC5A92330CEB5AAA3F70E1B1A166A6CE7FF0059F619F525673B8160D2A6D35E6D6B35CB52FDB547F3EEB8F960B2E7356C4C2C699115FEBA66
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_outline/waveform/v1/24px.svg
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<rect x="11" y="2" width="2" height="20" rx="1" fill="white" fill-opacity="0.3"/>.<rect x="15" y="6" width="2" height="12" rx="1" fill="white" fill-opacity="0.3"/>.<rect x="7" y="6" width="2" height="12" rx="1" fill="white" fill-opacity="0.3"/>.<rect x="3" y="10" width="2" height="4" rx="1" fill="white" fill-opacity="0.3"/>.<rect x="19" y="10" width="2" height="4" rx="1" fill="white" fill-opacity="0.3"/>.</svg>.

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1440x900, components 3
Category:	downloaded
Size (bytes):	80235
Entropy (8bit):	7.899883058230388
Encrypted:	false
SSDEEP:	1536:4++npcr45JUFPtOnlUC8dHFs51ieb6sG/mlINZ8mEcsnQILkNdXzrrYvcmbQzS:4TpAwSHOlU2D0mlINZQcsQg4rrO0zS
MD5:	AE810462B39CF3FD24E49AD89E987326
SHA1:	06A2D7EC11FB1CDB31FF87C350379998891EE14C
SHA-256:	CF39CA39D1DD29F775DC1858628482BB499D0AFC24FE64E3D70FEF418B8394B2
SHA-512:	14E5E87430318C13B61170B91E95D29BB5FEB535C94911B92159E58DBDA6D5320A45A9225C6DEA374DC8DF5863C1170394536AA3FDD3EDE939DB2231FF30CBC8
Malicious:	false
Reputation:	low
URL:	https://dl.dir.freefiremobile.com/common/web_event/official2/dist/client/img/error_bg.7cc7c32.jpg
Preview:	........................................................#"""#''''''''''..................................................!! !!''''''''''.....Z....Adobe.d................".....................................................................................!..1AQ.a."2Rq.....Bb.....#3SU.....Tcr...$%5CDE..4ds..t....6.........................!1.AQa."q2R....B..3br...#CSs.......4Tc.....$.............?..>...%.c.V...e.O}W....U.......r^........{....}W.....f...%.a....{Y....~r^.=._.K...,..V..{.....`....%.c.U...b.O}W....~r^.V0R..o.K.....}fT4.....~V.Y.....9?..%1.K.g...^..'........)...........b+.z.Y./@....W......._....S...........h.~v.Y.Jt.....~z.Y.}...Q....UN+G....p....%i.N\EI....f.{olN...Wm..O.o.U.:..o..Z..y_.....G..\......TZ.;G.Z.U#....%S....,MgS..RW.&..CjV..5.~leRm{..6.F.:W.F'.Z....."..ZeKP..z.gj....f.5.ed....I..Q...(W..Eh...g...C.Z..GN.T..j...].9.Q.....Gr[W...pr.._..I..k{chQ.f.6.OI=..{O1B.G.?...^S....=].G.6....m..UB4px....T....3...`!....xGy/..jb'~-.h.s..

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (7423)
Category:	downloaded
Size (bytes):	531206
Entropy (8bit):	5.521426174813959
Encrypted:	false
SSDEEP:	3072:rdIeMwSGq7jhBTqaqAY8xzPN4EbvagiGNHpP6K5/qkXzzc9c1+0pc7TzMB8llIYz:fdI1uA8K5/qkX89E+0e7nM4VTmBVVVa
MD5:	1C11FA775E00969A3EE60D76903BC1F4
SHA1:	C989B2389B2F01086A8DAC07F2034B59064FDEAA
SHA-256:	9BF54542D9DA2BA5BAABBB054F15E932B799949EB78788F604C0FA16F9536271
SHA-512:	591BE2EA9ACF647D58F5954E04ADC5D702036F4CA1946332B206D90EF227EC031077C0C3394098B6857E94905AFD2DFFFA3FABE2C3E17F0AB8E28CAB3E078762
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3i9144/yB/l/en_GB/x__yixK45EU.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("LynxGeneration",["LinkshimHandlerConfig","URI"],(function(a,b,c,d,e,f,g){var h,i=new(h\|\|(h=c("URI")))(c("LinkshimHandlerConfig").linkshim_path).setDomain(c("LinkshimHandlerConfig").linkshim_host),j={getShimURI:function(){return new(h\|\|(h=c("URI")))(i)},getLynxURIProtocol:function(a){return c("LinkshimHandlerConfig").always_use_https?"https":a.getProtocol()==="http"?"http":"https"},getShimmedHref:function(a,b,d){var e;a=new(h\|\|(h=c("URI")))(a);var f=j.getLynxURIProtocol(a);a=j.getShimURI().setQueryData((e={},e[c("LinkshimHandlerConfig").linkshim_url_param]=a.toString(),e[c("LinkshimHandlerConfig").linkshim_enc_param]=b,e)).setProtocol(f);b=d==null?void 0:d.trackingNodes;e=d==null?void 0:d.callbacks;b&&b.length&&(a=a.addQueryData("__tn__",b.join("")));e&&e.length&&(a=a.addQueryData("c",e));return a}};a=j;g["default"]=a}),98);.__d("NonFBLinkReferrerProtector",["$","LinkshimHandlerConfig","Parent","URI","cr:5662","setTimeout"],(function(a,b,c,d,e,f){"use strict";var

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	dropped
Size (bytes):	6391
Entropy (8bit):	7.847064124370549
Encrypted:	false
SSDEEP:	192:MKezfT3ekJVvSFGh+6EVEln5cNGrHSPW+o8:MKezfTpV6t6GmKPc8
MD5:	692084E10057D442A71C6727253D0287
SHA1:	91326DB965D929966161D6D90302AA0E2A63983C
SHA-256:	02620483F5A2287A7EC2176DDF754304C377886231424838B45C800CFF29B68A
SHA-512:	BDB28576511F073894A28D03BDF1578A4B4BDD1A943B860307AC4CAD06C6097E902E528F03879F2FBDC5E8FE78C4AAA0E376D848F06A6F3D5EC2FB9915BDA4A7
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a710100000e030000d205000080060000300800008a0c000066100000f3100000a311000058130000f7180000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."....................................................................................g....J....Pa.w.#].....h...W;..N..l....E...{c+<!......n.T..'l..Q ...c.6...#7..{..Qq<.^......KSx.w.\|..<...77..&S...n...S.09.\.....Ob.O....mc#.Z.p..E...o.Y.K.g:....._.6._c%.].LKh.N...71<...Rj2.Y..=..`...v&.....~. {..nw.. .../?.\|..kc.v.g......$VW.q.;&...b...R.....FR..Nf.~e?Aw{...z.O?...<..[..f...&.;.&.V%..N.63\|..Udy...................+........................... ...0!4"#$235`............<.X@....K.H..y.n.....*.]DDG._...2X......IMen..DB..{.+.(.}J....<l2.l.R.}E...WA.!."......Kb...........q.^.....`.q..l..U.Lw..q..oM&./...r.P...@Fu..K.}.f./........).........X.zi..YXo8...Y:Bn....Wb.V.

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56401), with no line terminators
Category:	downloaded
Size (bytes):	56401
Entropy (8bit):	5.907632992668541
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyBbZ54PgxRmSGdXXwW7MFWwXVuEG:4UcW6v+0Bb6hXwW49zG
MD5:	5208F5E6C617977A89CF80522B53A899
SHA1:	6869036A2ED590AAEEEEAB433BE01967549A44D0
SHA-256:	487D9C5DEF62BC08F6C5D65273F9AAECE71F070134169A6A6BC365055BE5A92D
SHA-512:	BDD95D8B4C260959C1010A724F8251B88ED62F4EB4F435BDE7F85923C67F20FE9C038257BB59A5BB6107ABDF0D053F75761211870CA537E1A28D73093F07198B
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/joHA60MeME-PNviL59xVH9zs/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 960 x 540, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	75737
Entropy (8bit):	7.987409975273607
Encrypted:	false
SSDEEP:	1536:ZoTVZI674UukqnsZLpUeGvMfcl82/2JhabLtfChwRmrCv3gz:II6lEvMf6NOJhyLtfCrCv3gz
MD5:	36810D91CEF7B9FE1005FC167848E989
SHA1:	D691DFA2619D932784BAA752CFAA0C9606E9ADD5
SHA-256:	63C1D3747CBC0B24ADB7882F4DE7A864335B3E4303F4478052F77E317B7A1A33
SHA-512:	641C71A07374254E5CEB9A5EC1AABEF187C7172DECDEBC53C106B869511E0B3A847BC3D180148C6CAC6A9378092F59977DAF298D0B98804A13BC2FAF3F7A1C03
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/425750146_2620197854795727_7515684929751906463_n.png?stp=dst-png_p180x540&_nc_cat=100&ccb=1-7&_nc_sid=5f2048&_nc_ohc=PwxMdBd-3KAQ7kNvgF1bFWB&_nc_ht=scontent-hou1-1.xx&oh=00_AYDRWljGH39R5bVy0sx5Tcm36_hplzbp-3jh0j8Y9pxKJA&oe=66583270
Preview:	.PNG........IHDR..............?P,....sRGB...,... .IDATx...it].u'..>.No....8.(R.%Y.%K.DZ.%.I9..:..IU...S].J..ZISW.:.U..Y.N...x.%..`I.(..@.$(.....@<.......@Z.%bx.......(.......}.......51...'z.....k..3..4S.+.sp.~U.f..c......{.{..LM{1...T<...(^v."G.g!D.ab7q.t....g!.L.j....C0...x]OlT...3..!KH..."..#......gA..m..79=..>.........,.hK.HT.....B..,..e.k...Z.X....#..i.S.V\T....;U.,...O...~.zU..&.g.9.O..l;M.+.Y..~..3.......}S....%Yb?../J...A2.?....T<v.~..aI....q.....6S....W..[.q.........)...Q..{....Rk.iI.....=.G..lB....!.UP<v..p.........vM....oo"&h.....DN.\|....../.....0.k...g.._.....E.!......pf..9.0....Ww..P.7..0....}wC..ud..7..O..l.Zx.-...(.....=...3/.....$.N..h1..3/.../....z...~.@.....\'&..+...bS..5..T....`.;...dQ.BG...-......Q.~ ...C8.~.B..!...ho...Pvf.V.!N.....\|L....1!.h.....:...HE._ ..\|K......Q(m7....$..?.g./..h.....bU..o..;..7.HT......,..b@3.N...o,E...s.b.t.c'+...H....~v..e.[....d.Z..Kp,;.7..>..9../.....T..'..w..H.........w.....Ej..:.....

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	163
Entropy (8bit):	4.900439585813596
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHMwYSf104XTIUGnYRt8n+R9ZK/:tI9mc4slhohC/vmI4NX104XEUv8
MD5:	5D73D2DFB1BEA872F0CEB93909FE6887
SHA1:	DEF95E494B458D0E5B4BC0B082AB6C791216E932
SHA-256:	EB908A46A75151ADC11154E759DB9BE111AFC67CDA5317AC26B43E3654FD4BD7
SHA-512:	2F44B65FE52EE707D1696DE15EC18DB38521D5A848C3F9BD1352BF7BC2A8CA07CF28A98ED891D663F062CA952C72F0082ADB556053D827811E638D649E8FCB2D
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M22 7H2v1h20V7zm-9 5H2v-1h11v1zm0 4H2v-1h11v1zm2 3v-8l7 4-7 4z"/></svg>

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	331
Entropy (8bit):	4.856840067199089
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4bib4Gt/6qnFJ+5LZ9i3JvGUuWLV1iDQ38:t47N9U/vmReb4s6qbmqvVU8M
MD5:	F7D38F81D0E430C65C517D480A82DEC2
SHA1:	61A70D1586756FC2570A6DF4B440C10EBE3312B0
SHA-256:	D63DF87F634535A4731B74CD9893C855373507C3250FF485E982442DAB0380BA
SHA-512:	273652346614D9F8DE8B0AAB7BD13D4F5EBFBA1D27338D87E4F27DA58925FA9699E0367C9C0B74BCF6AF95AD5B9A48ECCEE0710F1593ABB96B705A551D202FE9
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M13 18.93V21h-2v-2.07c-3.9-.49-6-3.8-6-6.93h2c0 1.93 1.36 5 5 5s5-3.07 5-5h2c0 3.13-2.1 6.44-6 6.93zM12 15c1.66 0 3-1.37 3-3.07V6.07C15 4.37 13.66 3 12 3S9 4.37 9 6.07v5.86c0 1.7 1.34 3.07 3 3.07z"/></svg>

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 21 x 451, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3146
Entropy (8bit):	7.4305824736657335
Encrypted:	false
SSDEEP:	48:pv3QNVesuNa6IHGNZ74LdabWYLt6eggWxAdW2MGaayIYj0O5t:pvQCszGNZ74LQWYUeglxf2MGaayBj0e
MD5:	1C8EF8C3E2B6165854C5C5C417734FE8
SHA1:	181B1164925F51A8CA383B5DD19D8F6218594C02
SHA-256:	6A2D6B94AE0412EAE635C875DB5D20422476816F2EA9C139DD7BE44C2CC0F42C
SHA-512:	921CDA3EB05135AE1876EB7D669CC49793089DEB2ADD13C272DB20DCC41829FBDF37C51E9F9FA7F6925650F2A01FA2AE3CFFCC19DCAA18BE16F919A41208F030
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yP/r/8p1yRlAKDA6.png
Preview:	.PNG........IHDR..............."....PLTEGpL.............................................................................................................................................................................................................................................................................................................................................................................................m.5....tRNS...T........P...........0....B$.Z....,.(........p....J~8N..H...F...b.t`d4xn.v.l&h.:..X...@.f2.D\|...rV..> L..<.j^z"\R.6v.$2....IDATx^.gS.K....0.0H.!!KBH.!..&....8`.s...{......fj.^....K~..v.iU.....MuY.r...R.Xc8......$y.~8t.zY.].B[$'Dii.......$.F.6.h#.......EA...$;Hn.(........(.....H#..N=.d.......@.`+........."....:..i./....b<,.....@.u.Z...[..<.:(.}~8M2..&.N F.} x..O!...q!.v\|W.q.v.....a/. .'........)X.ZI.\|".,=\|&.....1.....3.Ut.b.._r..<.d..J3j.7......X....r=..pCc.e.46....`uxee.J.....o9h.Z.c[P.66.U.&.....M.E.. z_...}.0..e.%.....

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50982)
Category:	downloaded
Size (bytes):	72443
Entropy (8bit):	5.0492051139658205
Encrypted:	false
SSDEEP:	768:ZGjDEc2OFad1N8TngWhx4lEK9gz+SnHuUakxDHia5QcPZYxhyAFNbTXIHUURvOLg:ngz+SHtspVRe54o
MD5:	ABAD509EAAFAF6FF204E271E8FC9B4D5
SHA1:	E30FEBABF45EEB64A43DBAC1327CF9619549ACE7
SHA-256:	4EF61B8BC9C9DE6B8544261502334B2EFA964B6D7CED2CD4BBA239D6CABF4612
SHA-512:	4BFE6183845D87128D6157A5693125D2CEFFB43ECEED4DFE71B56A37E0227765C697E026871032839E77783B06E4CA70E4001B875983241B59352477F8320FDA
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yl/r/98yboYS91Bz.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("ActnSellerTagProductPillClickFalcoEvent",["FalcoLoggerInternal","getFalcoLogPolicy_DO_NOT_USE"],(function(a,b,c,d,e,f,g){"use strict";a=c("getFalcoLogPolicy_DO_NOT_USE")("1306");b=d("FalcoLoggerInternal").create("actn_seller_tag_product_pill_click",a);e=b;g["default"]=e}),98);.__d("ComposerCancelFalcoEvent",["FalcoLoggerInternal","getFalcoLogPolicy_DO_NOT_USE"],(function(a,b,c,d,e,f,g){"use strict";a=c("getFalcoLogPolicy_DO_NOT_USE")("1743444");b=d("FalcoLoggerInternal").create("composer_cancel",a);e=b;g["default"]=e}),98);.__d("ComposerEntryFalcoEvent",["FalcoLoggerInternal","getFalcoLogPolicy_DO_NOT_USE"],(function(a,b,c,d,e,f,g){"use strict";a=c("getFalcoLogPolicy_DO_NOT_USE")("1743449");b=d("FalcoLoggerInternal").create("composer_entry",a);e=b;g["default"]=e}),98);.__d("ComposerFeatureIntentFalcoEvent",["FalcoLoggerInternal","getFalcoLogPolicy_DO_NOT_USE"],(function(a,b,c,d,e,f,g){"use strict";a=c("getFalcoLogPolicy_DO_NOT_USE")("1743450");b=d("FalcoLoggerIn

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2890
Entropy (8bit):	7.192134477647289
Encrypted:	false
SSDEEP:	48:2/6BMYL4knA9WIM8j/c05ibl3PfHAq3DlHAU02hl607wBnJgnAD4Vtq8Ha+H:2S+YkknmWIM8j/rKHAAHAUxYJie4Vtqe
MD5:	CF9659FA3891ADD490CB7D0D099D72AC
SHA1:	85581945FF05F48B3A652BA3E90AE44D97B18CF1
SHA-256:	76DB9987BB4F902E6D4A6702577717A6D6AFFF1BEF8EB6DFCE62C5C69E8D707D
SHA-512:	D0DFED00B29718DEDDB2FCFD0926D6234FE2E6AD6AC8A2D029747A01747B55CA5EFDD05D2694CF63D807D06FD46ED296D105C40169EF976E50FA81853D60EF14
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...$...$.............pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)" xmp:CreateDate="2020-02-25T08:48:52+07:00" xmp:ModifyDate="2020-04-24T11:35:36+07:00" xmp:MetadataDate="2020-04-24T11:35:36+07:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:f2f79ae0-3b29-4334-b916-3b0a0edf17e9" xmpMM:DocumentID="adobe:docid:photoshop:5db56676-51d6-d84d-af27-2a604b659

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	downloaded
Size (bytes):	7922
Entropy (8bit):	7.896089174997358
Encrypted:	false
SSDEEP:	192:31UFeDzGYP6NcHDqRIuiWfmRdjtbclF05:3iFJYSNcHDWfeJt
MD5:	BB7E0FA853EB60B7C91FD184A9F7880F
SHA1:	5466C8FD1D30C7FB716AED00E25D6EE78310A24B
SHA-256:	E7A9F65968C042759C43D1732BAA2A9F52C9939AFDF115D8EC2199408AF7C45F
SHA-512:	E1C13DBDEBD6F605BDD31A246AFF985A088BE206B74D2A2E10A4DF428197D3C8A1726AD57929E3FA6468C96C52A299C6428131790B6273BCFA0D0E886C6B42F9
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/443820279_996576055171299_5426681423066812390_n.jpg?stp=dst-jpg_p160x160&_nc_cat=106&ccb=1-7&_nc_sid=5f2048&_nc_ohc=yOpNa5f4B0MQ7kNvgFXHOgL&_nc_ht=scontent-hou1-1.xx&oh=00_AYBVDQgwzpXx5tnAMaacW5P1eZsrvuHBmJdwC36mmjlL2g&oe=665834CA
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a7001000063030000de060000e7070000870900001f0e00004e130000d8130000f5140000b7160000f21e0000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."..............................................................................U$.$........p....v3X.I$I I I I.\+l.[T...S54^..s..3.iy....V.L..'2N.. ..^.<\}\d.IC6..ou.~......e...b...V.(.M.G..Ny.@...tRCU\|'..........l....Nj.TM2..+..gK....\.M>.....K...A.....2...\|..K.t../Y].....s.R+w...7.N.KBc.....A2..f..m\YY.G9#..C..5..m.I.l..y'+.!...q.f.++I.e.+..........,;...$.N..UY.\a7....E...5...d-&..Q.A...d..oQ.v...v.u..~T...g.C..48....y+,+Q..t.f..'.lU.....q.$G.....}....... ..&....Cy..j.z.^@.l....{.l..v......+..........................!..1 "23.A#04@B............l.....1.Y.....^2..._v..C....%..........sd.l.q.3.9..2.#@}z..,.3(6.Z..d...n.t=..a...S....a..L..O.....8..@.".hE.)..

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 246x138, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	2870
Entropy (8bit):	7.921195032508485
Encrypted:	false
SSDEEP:	48:q8R0pxkeXaLcdT1f+vgIKKoq29btUSWqZNY7g27u7/AJkqPf6OeTwfo/O:EXqLcdT1fuhpsbCGN927k/AJkk1EG
MD5:	D21E6222C6885CDA719B3E8AD0D6C589
SHA1:	95E2E4AF3263736156B5F931A87EBAA25D244DB9
SHA-256:	5BDECFE2FD838B73A28A49418C37C200A4DC866B5377E8EB30CE5ED46481807A
SHA-512:	9ABDAF0D86E7C285561949D9A177341DB8A2212C8FED3613E4C29C10BF528E2DF632E58496EC875BFF98A98A302C435DB541CC8BE62ADF1922FC74134AEEAEBD
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 "...P7.......>Q(.F#..."...p..cn.o..(..w.O......W....._A_.=.?Y... ...............7.G..a..@?....1.......W.......u............n[]A......)?&y..3...f.....{g........Z.^....[.j.......\|....k...O.......^.i...3.......#L=....e.^c.n.m&0..^.{R..4.A.e?...:......).Z.\|..@.U.<u..c.b.}/S@.....8.i.'?...'l6..1o....N.._..:........Gq......ES.bnA.-{:.]p.........i..c7ntZ1Q.....D.d...].fG.J..Y..W?o,.*...~.W.U....<..@...E.0..Z('Dp..8.f....ET.....e..%.,...{w/I ....l..+..m.....^.,6.@.".[.t...?..]v....^?.#..rW.U.eS?..L^J.g....d.....QsC.../...B%.kw.......'.g#;....72H..:.+.}Zl^.%..zU5\|.#....vm...z..q.0.w9..Zp.b.P.:L.[T..'h.P.. .G.-...z.........#/.d.p.....f,)_.C...XVT6.o[du/...;'.H...V......q..-...5f....EG.._.XY.yP..h.7.......'.-..L...:F..Q..^o....E..M..8......?...2zZ.O.U.3../.&.?...{..$5....#Q..1}.'..@...2\|%..%w....@...q....\./d...N...r..lU........S.&L.)k..8~A..bx.;/u.0.)k..!......W......b.\..... ?:..}.I..._..y....v..k...Q...Y...jl.....hf.N.M.@.P.Bvo......J.....s.w

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8554), with no line terminators
Category:	downloaded
Size (bytes):	8554
Entropy (8bit):	4.953163641596351
Encrypted:	false
SSDEEP:	96:P2cQbeDakdZkyyMdRLhnxTu8bJzKUebwlobsi5HiJtKDUCbO/7px3uyFu7BtumrK:pOkdZkZMdRLHTtbJmxhMewC0
MD5:	64C8E3B11CFFFC8EBF2240E4F46AB492
SHA1:	71276680811731F983502E477A87E87CFE72D75F
SHA-256:	3ACC199C41EB3C884EE9884C15E6B78975499BE2255AA203DBA38EF24440181C
SHA-512:	497A48233BB198E05517E2CBA003C2C5BA25183E1654B5B8252B9823F0859497CCAB66A77E243238B27EA6EB826AE4FC72EFB2F32B2B378EDEE7F9DFB87F4756
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/aef0ced3/cssbin/www-main-desktop-watch-page-skeleton.css
Preview:	#watch-page-skeleton{position:relative;z-index:1;margin:0 auto}#watch-page-skeleton,#watch-page-skeleton #info-container,#watch-page-skeleton #grid-container-skeleton,#watch-page-skeleton #side-info-container,#watch-page-skeleton #related{-webkit-box-sizing:border-box;box-sizing:border-box}.watch-skeleton .text-shell{height:20px;border-radius:8px}.watch-skeleton .skeleton-bg-color{background-color:hsl(0,0%,89%)}.watch-skeleton .skeleton-light-border-bottom{border-bottom:1px solid hsl(0,0%,93.3%)}html[dark] .watch-skeleton .skeleton-bg-color{background-color:hsl(0,0%,16%)}html[dark] .watch-skeleton .skeleton-light-border-bottom{border-bottom:1px solid hsla(0,100%,100%,.08)}#watch-page-skeleton #side-info-container.hidden,#watch-page-skeleton #grid-container-skeleton.hidden{display:none}#grid-container-skeleton.hidden:not(.layered){opacity:0}#grid-container-skeleton{background-color:#fff;width:calc(100vw - 474px);overflow:hidden}#grid-container-skeleton .text-shell{border-radius:2px}#gri

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1606
Entropy (8bit):	5.268026330560429
Encrypted:	false
SSDEEP:	24:hY6sv7zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5zF5cUehM:3q3+pUAew85zvc/hM
MD5:	3EC729EC2C3ABA77EEC3656721AEF588
SHA1:	8C1321D4279313E3193937146409B6AF6068D39C
SHA-256:	7E68C9B4A6B0C33C0AF8A58FD77E3E37A8A463D78F5B94B903D1B221328EC6FD
SHA-512:	BD1FB3F39F037C63D88FB2E2B76A3B02505DF61DA08DA16091B41F5D259018C4F98D44372C88CE653D7FDBDB94B1F83092B81EE42EC051BDEE2FF5769EA2BD61
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 405 (Method Not Allowed)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:u

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	432
Entropy (8bit):	5.323102826052106
Encrypted:	false
SSDEEP:	6:6v/lhPESgPQN4hwCLbuFAkAFmBUD1Ly0hg8oKCuTjgXOe/eLoDwR0S6kj9UGgp:6v/7MSgLaAFDy0hg8oVuTc+eWLoDsrm
MD5:	FDDA8892CCF856817FE10D8C0647E692
SHA1:	FD9EEDEB1D7F40A2C6528E356C9A0C6E5D1218A2
SHA-256:	0540C9F1C259047CE5E76C2C452219DCF90A621354B4711FBCE0CB2BA0940DFE
SHA-512:	6AA5E9C5E12B7BE80D0037147DE0485CAF5A51646227C87950D2EBA31790CF00E448147ECD58640ECA22541D2413130F24628F6EFC8DF59E77C9C6A27715F438
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............W.?....PLTE.................................................................................................................................................!.#.../tRNS..BG....%.(....-..i.Ng................./*....G.....IDATx^..... ..........'....H..Y{.g5X[.._m.l.l..q4y.!......@$/qa../.H#%..f.T....(+..D..A....hF..s`...[tw{!.G).;....zP.^..4...f.qg7.O.^..w_J<.3......~....w%_...]....IEND.B`.

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	211
Entropy (8bit):	4.924417291349329
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4mqUEUKFI8mRKuw6Y8:t4noU/vmREaI8Kw6Y8
MD5:	DBF72CAC4571210883C7748A6E8B9C71
SHA1:	984DFE134C779FD952ED67C1CEAB88D14FDCF122
SHA-256:	62714BADF737F2D069588724ADE1CB6B79AEF821C432875C614997E351F76341
SHA-512:	AD53CBDD55542FCCD83387639BAD59372949B1933F603B44EB6859F1EB344B8F2F11241EC954628F9025E88CB308F67051C408151800176B45F49A398140744E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/clapperboard/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="m22.01 4.91-.5-2.96L1.64 5.19 2 8v13h20V8H3.06l18.95-3.09zM5 9l1 3h3L8 9h2l1 3h3l-1-3h2l1 3h3l-1-3h3v11H3V9h2z"/></svg>

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 312 x 200, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	35554
Entropy (8bit):	7.993399198485169
Encrypted:	true
SSDEEP:	768:tVmSx/bOqvDd2XiIkTFS8P5YsZIpKE09wpzdnyu4CmxsdRhNUA8tq7:twStOw2SIN8YsGpuOpzmIhmHq7
MD5:	B63BCACE3731E74F6C45002DB72B2683
SHA1:	99898168473775A18170ADAD4D313082DA090976
SHA-256:	EA3A8425DCF06DBC9C9BE0CCD2EB6381507DD5AC45E2A685B3A9B1B5D289D085
SHA-512:	D62D4DDDB7EC61EF82D84F93F6303001BA78D16FD727090C9D8326A86AB270F926B338C8164C2721569485663DA88B850C3A6452CCB8B3650C6FA5CE1CE0F140
Malicious:	false
Reputation:	low
URL:	https://www.facebook.com/images/cookies/cookie_info_card_image_3.png
Preview:	.PNG........IHDR...8...........j.....IDATx..].\|\U.?...e&..I..M..).Z.PJ.(.M.-O+..>\|.....n.....\|."..B.+Pi.. ....t.K..I..>.....\|/.$3...LH...r.r.9..........`GJk.;..3,K.......(.tv.b..Z........Z...R.M..}...-...\...4...._n2...;.8....z...r.xi0.4...[...<...,...C...Sy.}..20...L]S}.V.\..Ms.mD%..}.mu..,....B.POw[Q..?....aV...n8.S^.T5U..3.9.4.....;(u..D.p...TY...P+..y^.,......p.E...e;K.%KNj...l....,+....bQ....M$.>..9..x.j&...NR..u..W..{..Z..s........3u.....<.gH..0.]...q.e]...`.94~...F....!.Re~.KQU .+..z...W.z.=_....k..Tii...i..,.L...v..N..X,..jk..94~.....%...z....).BG5+J..W.U.!\|...\IG..,a....Q!.._.2.ZzZ ../s...T......S..Uy.....;bAj.Jv..u..`.e.~..\...l.df.k{zBB.+qWH..!.....d..qh@.t-.N].!.....o?\U.\w..?}.GS{o.HT...1ts.....x.+....===.W.C......y......o..s,#:t.....s...v..'....8.{_.Z..N...K.$..\..~.mmmkh..Y.C......!-kH.UU............\..2hwg,j...T...r.a...4M....C...............\|.......f..9.C...;v...a....g..r5Mw.=`......Q..W.... ....&"..

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	324
Entropy (8bit):	4.519025420255455
Encrypted:	false
SSDEEP:	6:tI9mc4sl5RINAvxm6lzjQewRNGBvLl1ZX1i0dTnUMSdR+trpYmQkDEJM:t4vqNAJXpQewC5pDpU6VYFG7
MD5:	DDABFA57FD16BDBA85E2FD30B2B0FEFF
SHA1:	9FC8CD1D34223C54E0C86922F2DE68AACBE6E57A
SHA-256:	B60F66156BC26031D7F02CC7CAAA6D7277D56F1821ED55280F67446AA3643640
SHA-512:	1AD6D890CADC461D74821065143FBE1AFC882C106ED646F41CB2BC12D00D6FCC6E9C68C7FAA7F260F2FABAFF68689EA0DF48CEA54FF40AF505B4A632D67F1B5B
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <path d="M13 9v2h7V4h-2v2.74C16.53 5.07 14.4 4 12 4c-2.21 0-4.21.9-5.66 2.34S4 9.79 4 12c0 4.42 3.58 8 8 8 2.21 0 4.21-.9 5.66-2.34l-1.42-1.42C15.15 17.33 13.65 18 12 18c-3.31 0-6-2.69-6-6 0-1.65.67-3.15 1.76-4.24C8.85 6.67 10.35 6 12 6c2.21 0 4.15 1.21 5.19 3H13z"></path>.</svg>.

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65485)
Category:	downloaded
Size (bytes):	462373
Entropy (8bit):	5.259947984108636
Encrypted:	false
SSDEEP:	3072:TX4/FPFTwm4KdBrM+bfWvKKg9VZqa0lYVjiRqtWfUSy3uRUuu:ryFPF9rMeeiLhqa7jiRI+yaG
MD5:	EBF5797266734D47B2455D389C0F26E4
SHA1:	EC2AFD5D66FA2AB6846480407C95C7E4B00A649C
SHA-256:	8084980E68AEFDAEB1B21BF90D44CA39DF84CA7FFAAB754AE6F18A5362EB649C
SHA-512:	7DD81E2AD5963BBD455ADB03A9AE0603293CE094DDD035F070C1745C6D73FF53D3BFEC7692F39516933FC6AD5B61CB31E9E393CEE3643D6BA3DF09BC54175E79
Malicious:	false
Reputation:	low
URL:	https://dl.dir.freefiremobile.com/common/web_event/official2/dist/client/c345ce3.js
Preview:	/! For license information please see LICENSES /.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[72],[function(t,e,n){"use strict";n.d(e,"b",(function(){return r})),n.d(e,"a",(function(){return o})),n.d(e,"e",(function(){return s})),n.d(e,"c",(function(){return a})),n.d(e,"d",(function(){return u}));var i=function(t,e){return i=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)e.hasOwnProperty(n)&&(t[n]=e[n])},i(t,e)};function r(t,e){function n(){this.constructor=t}i(t,e),t.prototype=null===e?Object.create(e):(n.prototype=e.prototype,new n)}var o=function(){return o=Object.assign\|\|function(t){for(var e,n=1,i=arguments.length;n<i;n++)for(var r in e=arguments[n])Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r]);return t},o.apply(this,arguments)};function s(t){var e="function"==typeof Symbol&&Symbol.iterator,n=e&&t[e],i=0;if(n)return n.call(t);if(t&&"number"==typeof t.length)return{next:function(){return t&&i>=t.l

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1599
Entropy (8bit):	5.267838660635414
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8xZS8f:3qD+2+pUAew85zssA
MD5:	5EDBA73F30F0D3A342CECCB3A34BFE45
SHA1:	3F39E4C8EF00408D327260F5328162AB3E5D3CAF
SHA-256:	F768529B209DB7EDF38AA0DA2A69C1C1DBE5A760D457FE74080D3AD76F14A0C2
SHA-512:	C302E3CCC2D9F2E12133ED07082A78260613F1B8C756D9EB2CF0A7AF63C425D4A8956B01EAE3FC3DFAB506DACF6416B0B53929D535CFA2AD81951183A6526FE7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	2.6465732373896285
Encrypted:	false
SSDEEP:	24:Es5ed8vZa+/kffJTyN5J5iXSvjDxatgFFjiZq1MJUikeVgl2fwFfBaTzh4mpCbak:2fq3OqXAzh4jaJV9HxG8Q
MD5:	3E764F0F737767B30A692FAB1DE3CE49
SHA1:	58FA0755A8EE455819769EE0E77C23829BF488DD
SHA-256:	88AE5454A7C32C630703440849D35C58F570D8EECC23C071DBE68D63CE6A40D7
SHA-512:	2831536A2CA9A2562B7BE1053DF21C2ED51807C9D332878CF349DC0B718D09EEB587423B488C415672C89E42D98D9A9218FACE1FCF8E773492535CB5BD67E278
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ..........................................h. .f...............f...g...d.@.........................`...e...f...f...............f...f...f...e...p...............`...f...f...f...f...............f...f...f...f...f...p...........e...f...f...f...f...............f...f...f...f...f...e.......d.@.f...f...f...f...f...............f...f...f...f...f...f...h. .e...f...f...f....U..........................y'..f...f...f...g...f...f...f...f...............................U..f...f...f...f...f...f...f...f..................................f...f...f...f...f...f...f...f...f...f...............f...f...f...f...f...f...f...f...f...f...f...f...f...............p...f...f...f...f...f...f...f...f...f...f...f...f...................d...U..f...f...f...e...h. .f...f...f...f...f....d......................f...f...f...h.@.....f...f...f...f...f...f....t.................f...f...f...........p...f...f...f...f...f...f...f...f...f...f...f...f...`...............p...f...f...f...f

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HmnY:OY
MD5:	C13E70783B272C1B1F38DF78789CB038
SHA1:	7F182E8DA5EE7FB00A151AC0D205D71E9C017D94
SHA-256:	8800EFDDF6F05E9F2F4263946E6C5AB296C955138B006CE3A74D3B0F143BE92A
SHA-512:	A7F5941549D283934D49EE8BF8FA069D387FBDF3BBB86F884F14FD4E10EB5F6E754F55E0F3F94DCE79EF84FA2787A5F9DB8A24C74BA13BAF379DB66BF35FB8F9
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAk8yq_jFOmFmxIFDfGjW-M=?alt=proto
Preview:	CgkKBw3xo1vjGgA=

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (855)
Category:	downloaded
Size (bytes):	534860
Entropy (8bit):	5.706034030348218
Encrypted:	false
SSDEEP:	6144:wwEiDOrwHRo6Zo/S+d6yetdYQ7eTlMXWwcqW61L+KUEIPw6jHS8NR0bXbFujbvjX:w2i6Zo/SQKDWTlMXllIsIPw6jUbyrIi
MD5:	4668E74B2B2A58381399E91A61B6D63D
SHA1:	89EBF54E996E46F4B1E26F6DCDA93BAD74FC0A1C
SHA-256:	B0E3ACC54460721385D2E472DDA7288382F2766A06B38D2E732D034619F9B929
SHA-512:	B2EAD3410DEA89B658BFB0CE67842569641CD6C29889ECFB223A83637600B82B0D2E55CEC26750593359663A22896F5DA91D3DF9F085C204803CD646A7CABC28
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/joHA60MeME-PNviL59xVH9zs/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	27
Entropy (8bit):	4.3845171317931
Encrypted:	false
SSDEEP:	3:8jEMEN/QC1l:8jMN/QCv
MD5:	F7C8AABF963C3A65DBBA34ACB7D29035
SHA1:	017BC86726314E2DCA0DFC315F4C48463B0446AB
SHA-256:	8E000614947BCED11DCF2C4A0B33E9BE12142555D9196563A93241CB447F64E3
SHA-512:	F65673F68887A3FA20E4A40EE8DE3F08DAE22299C0F76DB126D4D5E72C43A4666955D5D691A45119B46D26B888F81A45E10E13B1F77E7BEF883EA10A938567DB
Malicious:	false
Reputation:	low
Preview:	,...sabr.malformed_config..

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6861), with no line terminators
Category:	downloaded
Size (bytes):	6861
Entropy (8bit):	4.977583145013348
Encrypted:	false
SSDEEP:	192:dehiA6fqNDP3hLrv1fjujSjKjLjRxyOk63Kk12v6u:O6fqNDPxLjexyE3d2v6u
MD5:	5566E671B1A56ED10EE4665797BCA5BA
SHA1:	4E1268E9E8CC9B32D46D9E9B64052CA61CC0C688
SHA-256:	BBF453AA757D9EE7314E68E9F134A58C34FAC46D39BFBF282F9E8E03DBEA7DF0
SHA-512:	61D543EA72F6609D61DE7ACE3D832C94B9D40E0425311B66BF24DEEE11459046925DDAD818984F3B9C456F8E409D80D0924B8EC5F4F0B8FD43EB6D5A7DA44750
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S2/content/common/css/shared-topnav2.5566e671b1.css
Preview:	.logo-image,.search-icon--productpage,.search-icon-container{cursor:pointer}body{margin:0!important}.top-navbar{box-shadow:0 2px 1px 0 rgba(2,2,2,.25);background-color:#fff}.top-navbar.top-nav--productpage{display:none}.top-nav-container{width:100%;position:relative;max-width:760px;padding:8px;margin:auto;display:flex;align-items:center;justify-content:space-between;min-height:50px;overflow:visible;box-sizing:border-box}.theme-page--all-results .top-nav-container{max-width:960px}.product-page__container .top-nav-container{max-width:1280px}.slogan-element{font-family:Lato-Light,NotoSans-Light;font-style:italic;padding-left:10px;color:#333;margin:0;display:none;line-height:25px;vertical-align:middle;-webkit-font-smoothing:subpixel-antialiased!important;-moz-osx-font-smoothing:grayscale!important}.logo-container{display:inline-flex;flex-direction:row;align-items:center;flex-wrap:wrap;height:28px;overflow-y:hidden}.logo-image{max-width:100%;max-height:28px;width:auto;display:block}.search-

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3677
Entropy (8bit):	7.92614652132141
Encrypted:	false
SSDEEP:	96:DxJEXtIpnh+oCKDgl8G40vf9lbKTqma7XgkK:De6pn9CKDoY0vVlbKTVaTpK
MD5:	036DA5872428EC3279AD07F3074A8DA7
SHA1:	D4BAC7FCE3FC291FC2452B6BC35B158C4EF309D1
SHA-256:	D00BFE6CDFF8E3C2370B458723C7DB811EFD563B36F1DE3A02F28806DB170981
SHA-512:	00343DAF55B8060FB32E46770ECA19234F3AA7220C213724ABFAF8EA817C86A9389222EF442BA3767A171323DCBB77A793499AAF2C5B703761F7FA4EA0DDEF72
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq....$IDATx..[.TTW.....E.!E......b.`.QP....z..k4.W.f..9.....7F.c\......;....2.......>g.c.J.sv.......................!.L...l.&...d,V..n:... ...v................;.~..!.q-f............E.........HE.._WS+.i...\|!....."..y..h.....L..w2.........p.G.'.".^=....0._.Ze]I......r.u...jk..h."...8.....hqL.... E.R.op.h7......CI..oV.......7@m.......L.....6tV^KDpX....%............ .....^g..G`/y..v!.R.\..r.hk.0y..s;z.....7..mE.7.uZ.F.....}.a0...A..!....;#.i.!..y.i.{...,vu...y..P....C...$.I.....F7.............".Qow/..XA....-kN#lAY]....:;.....&...L.......K{q...C......=...r..-...~.7....v.@./.+.w..T.a...Y...k.5w)....>]..b+!....q.k..U.@..p..P,q..s.....s..aV.D.~<._.S-..ycS..R.[k[..JY5Q^Z../.\|..!.)..\...........[..Q.FK.%3....u...;y...G4...h'qa...6.....{!.....%'zZ.O4...........V.B;t...G]..z=..e..a...v?.\..?.}.8_.{.Pj..vl'.w.M..K..........].....].....<..+.U..V0.C....]=\.?L..2./..U.....{.o`....... ...vw.,....l:.K..5:).=...E...y..

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 636 x 140, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3353
Entropy (8bit):	7.866861710154873
Encrypted:	false
SSDEEP:	96:lRjNK7z/pNElM4dY2sPIGrOQRnKAbLohLDO5:lRBK7z/pNEa4dkJr1Lh5
MD5:	D0CE400F6D6F397DDCA5E460210DB19E
SHA1:	159CCB2FCDE33529A29FC6DF64A09ACB2476EBA6
SHA-256:	CB22F766A2A1A451DA510EE5C58242CF074482075E3881E01EC24BBB47D025D3
SHA-512:	1E349E77D97A571D99F4EC9018F1414B80A7BFF971551D5ACEF3C07ADD36DC851C054DFCC930DA0A3DABA08245F259FE1B295DB62A1634C4DF82716199981FDD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\|..........>.T...<PLTE...(.0(.0(.0(.1(.1(.1(.0 .0).1(.0'.1&.0'.0%.0'.1).1.0(.2(.1..Vc....tRNS. @...`..p.P.0..0...u....yIDATx....0..`.o@H...]...d1.h.t:=..h=a.............../7..McLL...)....#..d..z.`..+.... t.~....o.....&@x..^E\|&.^.Q+.[...z%..A..s...v..H....7D..$.cQ...L.8..1....4G^q.........)....../....".5......X....e"......=/.....>.M....D.hZd.`O.#...ylA...t.0.......5C..KdB..<;..6&.._N.tS.@.D..z.6..5)....Y3ta......5...........#.n1.c.r.5.?..Y3.s..qj..Z.;...+.J ..d..&U.-.p`...Q.,......\|..v%Ss....)U.~.....5......YZ.kd.O...>.[..SJ..1.0J.=LO7Ud.k.......01m1;.R....!.<?=.oyl..V../s..xvk..?2...~`z.T...m....^..sZB.....(.=....e.4.w.O%,SO)Oi.ML...b.....+;..46.....s...wk....m..N.C..rO.......zd..u.....t...^......).D...].8.....v...).n,.8K<S.G.....$.u..(*.z[...Q...o..5...........Pt.$C.....l...E....\|N._..\|.k..j.....M..{..n>C.h.7.].\|../...V.].e.>.<;............=[...[.g..Q./4...d.+...wGm...........C...9S..~.........d.N...a(....'!7..

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10908)
Category:	downloaded
Size (bytes):	74578
Entropy (8bit):	5.721840574512319
Encrypted:	false
SSDEEP:	1536:f5tuKgHlbmEcaelgsFboojoPrxRRbC8et:f52rcaeJMo4S88
MD5:	A9BDD2E9E8E29278AA54A0A591C7307E
SHA1:	F322FE6E205A0F323AA7148385ED32BBCB3B0B01
SHA-256:	83CAADA11A1E2F6F5EE415C09F6E935782B15F3954FF4C3DEA6E696A0D542A32
SHA-512:	D4290C69B2B17C2F8A64350CC47899CF5CBCA7E4A1B37A1058E1A408C41B941402ECFAE81A0F3B1901DE760AF6C07206737257CAD1F38AF632F6C3268B86C55D
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iWd-4/yW/l/en_GB/FJA28rqt62x.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("ActivityLogMenuOption",["$InternalEnum"],(function(a,b,c,d,e,f){a=b("$InternalEnum")({ARCHIVE:"archive",AUTO_ACTIVITY_TIME_WINDOW:"auto_activity_time_window",AUTO_ACTIVITY_OPT_IN:"auto_activity_opt_in",AUTO_ACTIVITY_OPT_OUT:"auto_activity_opt_out",BAN_USER_FROM_PAGE:"ban_user_from_page",BLOCK_APP:"block_app",DELETE:"delete",DELETE_GROUP_CONTENT:"delete_group_content",DELETE_NEIGHBORHOOD_CONTENT:"delete_neighborhood_content",DELETE_HISTORICAL_RELATIONSHIP:"delete_historical_relationship",DELETE_POA_SURVEY:"delete_poa_survey",DELETE_PREVIOUS_CONTACTPOINT:"delete_previous_contactpoint",DELETE_SAVE:"delete_save",DELETE_USER_EVENT_CONNECTION:"delete_user_event_connection",CLEAR_SEARCH_HISTORY:"clear_search_history",EDIT_EDUCATION_WORK:"edit_education_work",EDIT_RATING_AND_REVIEW:"edit_rating_and_review",EDIT_PRIVACY:"edit_privacy",FEEDBACK_ASSISTANT_HISTORY:"feedback_assistant_history",FORGET_RECOGNIZED_DEVICE:"forget_regognized_device",HIDE_FROM_TIMELINE:"hide_from_

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	341
Entropy (8bit):	4.845385553639442
Encrypted:	false
SSDEEP:	6:tI9mc4slhohgqWHiA4vmI4lAwuQgQIVY6Wqx5Xt6M0TRcmQTIfyuETUrNmraXnPt:t4noOAvmRHnIq6JmM0T7QobETUrsOpk8
MD5:	A83C2EDA381FB2C86BE7587C8D53C330
SHA1:	ECA052D4491403B1731D2FA36176CDAA4DD76F11
SHA-256:	B011A7CD5658F11324619697CE2EA15178B057622074AE6CB687A0E95D978EC2
SHA-512:	03C807382DC1320EFE94B3B47F30988F9153DDB655245139ECF40D90C97760FBCCFB117933736137BA4280D8964896B0ABBB64278BDA324A75BA7CD27557FDBE
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/fashion/v2/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" style="enable-background:new 0 0 24 24;" viewBox="0 0 24 24" width="24"><path d="M12.5 6.44v-.5C13.36 5.71 14 4.93 14 4c0-1.1-.9-2-2-2s-2 .9-2 2h1c0-.55.45-1 1-1s1 .45 1 1-.45 1-1 1h-.5v1.44L4 13h2v6h1v2h1v-2h2v3h1v-3h2v2h1v-2h1v-3h3v-3h2l-7.5-6.56zM6.66 12 12 7.33 17.34 12H6.66z"/></svg>

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	376
Entropy (8bit):	5.580622094395224
Encrypted:	false
SSDEEP:	6:6v/lhPEuLl/bbtoyl1AViPh3QY32V65Mm+27hVp:6v/7MuLl/bbqzuQY32s9
MD5:	AE278E7804E28C2733CEE9883DA38CE9
SHA1:	09DCBA0885D6F8094617831C6D1A16AD7A1689CA
SHA-256:	D07B8B3DE27E367F307A22F81DDD52AB9BB68A47E71376B9674316910A863B4D
SHA-512:	5CD4D885BCEBCA2DBF1CAE0F88211399E7F723ED7BB95FB10DA9C92408DB637A660604C0C54E3D9F10E0DBCDDFA194269567F6F48C885C4964EB60789C33F545
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/y3/r/BQdeC67wT9z.png
Preview:	.PNG........IHDR..............W.?...lPLTEGpL.........................................................................................................N......#tRNS....Q...U........../b..*.v....:9........IDATx^m.G..@...83J.bp...?. hu.....&....,..(}.AZ.S......15D.&.p..@..#.......1.R...5....p..0..9^1..L.H./........M...).v......\|..)E. j.}..>.=...?&...u..-....IEND.B`.

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	274
Entropy (8bit):	5.064374319451513
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4LyS7NHTZORTIhRJUTT6kg2AfI1NIfdAf7:t47N9U/vmRLy2NHTsYffLV6
MD5:	A2ACF270DAF56F6484C50C1F74C5B676
SHA1:	BD3B6DB51B936C0D49E293CB482CC2839A0D7D94
SHA-256:	DB8400A38C08118E2FD10E60F84A2B4DE09A64721A665E23C37E03F092F41F94
SHA-512:	6C94E190FA493AF676930E76713C5511FAD174C62506C7988072044C217ACC83847E8BCB4CC873A8B2B29D7B9FCB90CFE48336FB2450CFD7AE34C4F9C02A6CD8
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/news/v2/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M11 11v6H7v-6h4m1-1H6v8h6v-8zM3 3.03V21h14l4-4V3.03M20 4v11.99l-.01.01H16v3.99l-.01.01H4V4h16zm-2 4H6V6h12v2zm0 7h-5v-2h5v2zm0-3h-5v-2h5v2z"/></svg>

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	651
Entropy (8bit):	4.46155201399217
Encrypted:	false
SSDEEP:	12:t47N9U/vmnqMViiuJJsUG0aLn+djONWQismTRIaZmU5SuX6RfM3FLvTkwWEarekr:t4jU/vns0aLn+djqWQismiaZ5SuKNMFo
MD5:	C34B523D2E0170B739016B744ECD8132
SHA1:	F7CA671F70271C053516306DF1820618C279E657
SHA-256:	55C9BBA2243E3B97567B36A6F9C888A52805E5B6C391168C892D5D024BC01266
SHA-512:	01AE29522C00F9761ECE2399306313A85BB5E65797011BAFFC40BBA54540B718F423F5707A67EB16B43B78EFFE1D40906B4E422D1AF7FCE8BBC0C32A8F9BAF46
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><g><path d="M14 12c0 1.1-.9 2-2 2s-2-.9-2-2 .9-2 2-2 2 .9 2 2zM8.48 8.45l-.71-.7C6.68 8.83 6 10.34 6 12s.68 3.17 1.77 4.25l.71-.71C7.57 14.64 7 13.39 7 12s.57-2.64 1.48-3.55zm7.75-.7-.71.71c.91.9 1.48 2.15 1.48 3.54s-.57 2.64-1.48 3.55l.71.71C17.32 15.17 18 13.66 18 12s-.68-3.17-1.77-4.25zM5.65 5.63l-.7-.71C3.13 6.73 2 9.24 2 12s1.13 5.27 2.95 7.08l.71-.71C4.02 16.74 3 14.49 3 12s1.02-4.74 2.65-6.37zm13.4-.71-.71.71C19.98 7.26 21 9.51 21 12s-1.02 4.74-2.65 6.37l.71.71C20.87 17.27 22 14.76 22 12s-1.13-5.27-2.95-7.08z"/></g></svg>

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 336x188, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	7514
Entropy (8bit):	7.968233747958549
Encrypted:	false
SSDEEP:	192:VG5nHfaD9iOZfYHkYUZHJFox7+rG6nTDExPQJbTo6QO:y/aESfYpOHJCx7+NnUxPwbTSO
MD5:	D5C1A30DF258D91E352181DC7DBD24A6
SHA1:	0C41FF44038A7ED7BC17CE83560FEE266ED53FBA
SHA-256:	4054EC2F6178EDB03B4643F3988EAD1B00B8E1980B4AA299445845809FA02409
SHA-512:	5B507ED3CC6177DE2B99DB688488F710D4706943EDCA104AC12D3AEBDA3442FA1E0B7833F09721B8EE8C48E2C68E6D321D907966A2C286DD982340829E6AFF8D
Malicious:	false
Reputation:	low
Preview:	RIFFR...WEBPVP8 F....x...P...>Q$.E#.!.XU.8...7~>L...d....M...%..k.....Us"........'......\|?..................]...~.{../................O.G........i.T..O`_.?....~.\|/.V.k.m....Gg.H.[...Bxw.......O#?a...7....U.........~.._\|.....O..?....+...U...C.y.z...._...}O?.......p....?..p.p...+.../.......%.......w....-...i...w............w...W.....o./Co.....w.f.......'.F..?6...6..x..`"T..Q..8..ymwu....v.;.=V....0o.....5c8.i.l..hd..@..D.C.[.:.A.....w.TZ+._.`...5.=.`.[.......%..4.P...".@....'5...d......8&.m..(.5f=z.J......fe..4..{#.i.. .d..}"@.-.!.d.}7{.H...=..xd[..R.$..l.A...3pR...P.'.....#.W&...../..b.9z.....)..Ih$rq..O.[;....d.$.......#.<\|U.....9...\>b.....X?..wid.s...W....D..0...%BA.5..v.]i..j.t..J4V.Q..UHqB.?5..._.Y..#.....s...o"Q[hPQLw+......~{.".zQ.T%w....I..}..9..$R.....a....pqD......F.d........{A.,..............xuek.].......0......w..R.fJ,..`xM...".&.!..pX..)...-.....>.1...X..&....DG.ai.A..^K"..mO....R.....a....bK.....H.....#]cy@.".....x......<.....

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2134
Entropy (8bit):	5.507213070755754
Encrypted:	false
SSDEEP:	48:8OLNKWMOLNKNFFZLOLNKE3JOLNK33OLNK4RVc+u1OLNKPN0oD:8OLNKWMOLNKXFZLOLNKE3JOLNKHOLNKt
MD5:	81EEF3A68E6EA5131932245EDB5E75E2
SHA1:	06A1E2FE3FEC268FD69122D8B2DA67ABA8EBBF56
SHA-256:	F195EADE4059E1446EEEB8C16C8FDB17A540C2243AE3A37B63D55C4D93971382
SHA-512:	261D5619A6FD2DAA3D125664F0F0B8CA85F6648AA544C3F04ED6489F29B1C8E70106525C3F498826D60F41C83E68C6968B5A51312D31E6CF39EB4EA03E4752A2
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Roboto+Mono:400
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto Mono';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/robotomono/v23/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vq_SeW4Ep0.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto Mono';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/robotomono/v23/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vq_QOW4Ep0.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek /.@font-face {. font-family: 'Roboto Mono';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/robotomono/v23/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vq_R-W4Ep0.woff2) format('woff2');. unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;.}./ vietnamese */.@font-face {. font-family: 'Roboto Mono';. f

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	13996
Entropy (8bit):	6.4808029254950394
Encrypted:	false
SSDEEP:	384:wDR0LU1BkpRxm0umWLUUWg/Oj3uBcUb6i:wDRy+BERx/WnOj+BcM6i
MD5:	45F16F38355B24F1F6E0503656B43BC7
SHA1:	09915E39E188CC8F66B1287F6D32F68E3CB0C195
SHA-256:	7901D70D2E03B2564F43FE21E60721AF0284B0D1E1305E8CDDE646CF6180E0A9
SHA-512:	74F242C6C9339AA49BE6A730DEBBCD7F99801448CBB6E79FFE60A96F8C92A5564D3F9E31AF7F600BA3FACE36DE402F0F4DE2E253D1D32A5C6C97BB97CC7A5FF8
Malicious:	false
Reputation:	low
Preview:	...KEYF....$................. .............\.....4C..4C...@..pB..............................4C..4C......................................................................................................................................................Adobe.d........................................................................................................!a.1Q..Aq."2R....B..#br.S..3C..........................!1AaqQ"............?..g..y.\|..2....@.).8.t.2...f...1....)..DL...x."i..F....m_.3.....d..?.......>=a.\|z.GU...N......Y^8.."..G3....J.P.h.....%K=.^.'..0..0.....ix....*..eI....,'..\....g?.?.....Z.v.5M.r.#.....m.0....o..t.q...e:..N..S.q...e:....7 .+..>\|FA.S..?.`...L...$....N.%_nG..L....r.......L..$....S<....<..D~:."?.c.K..M....T.f.C...>...(F..oDF.,oE)...)Z,......,..Q.W...).b.....x.:.".o.....o......Q:.{.:8z.[..~...5.3.~.L(2...A.S..?.`...L.....)^.t...e)...S..r.......V.&ej...Z..'.%..px3....qE...+..TF..L.i<...9.g2e.J.,.^4U.UO.e.!.-....tv.......R.n.V......Z.

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7231)
Category:	downloaded
Size (bytes):	1022596
Entropy (8bit):	5.562156812766637
Encrypted:	false
SSDEEP:	6144:TciI0RXwVZCpEwBReNyOZSF6zyC7p11mIWL5utLPGMZDhxD5WHlP47j40v21zH14:gLewVLk0rEl24a8M0G
MD5:	ADA1C36C39790DA1F9BD248720AC2727
SHA1:	1F530CC174E1452DF1FBA1087FB7BE989CBA4A85
SHA-256:	2A5861F4EAADB76D5BBDF6E3333F990ACB630014D3E69A092E7D70B537FAD7BE
SHA-512:	E0B4728CCCC66672F863F0285E120CFA546DD91BC68A5344A871A52FED211A45AE9B119E9374E0CAB2529BDE2EA049BE17A18A341EB790AB89C767E2AAE59336
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3isgV4/yQ/l/en_GB/gGsimpMHyxl0xPHEIazyWUNkYT6Pntg1cpOcBc5tVZ0hYT7n1sgH1lvKX5NuKWX3N0wutsx7AVq2pDYvatkvPhoOE7uP6vsv83liWdOEs54GVesZd6VEHGv5u1Rdzuzi16ygGc1wa-Oq19cr_l1DuzAtWVG4wS7SHTQOIRntr0ucTZxw3y91qmloYqXhV_-BvmtDG8_eJMlvvhSHqp55HfXW__mMwRo76sjR1pngFRlCsGN0FHzi95_wmB-51YxoStyBz2gE2pEQn4HVER6.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("$InternalEnumUtils",[],(function(a,b,c,d,e,f){"use strict";var g=Object.prototype.hasOwnProperty;function a(a){return function(b){return b==null\|\|!g.call(a,b)?null:a[b]}}var h=typeof WeakMap==="function"?new WeakMap():new Map();function b(a){return function(b){if(b==null)return null;var c=h.get(a);c==null&&(c=new Map(Object.getOwnPropertyNames(a).map(function(b){return[a[b],b]})),h.set(a,c));return(c=c.get(b))!=null?c:null}}f.createToJSEnum=a;f.createFromJSEnum=b}),66);.__d("BaseAspectRatioContainer.react",["react","react-strict-dom","unrecoverableViolation"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react");function a(a){var b=a.aspectRatio,e=a.children,f=a.contentStyle,g=a.testid;g=a.xstyle;if(b<=0)throw c("unrecoverableViolation")("Aspect ratio must be a non-zero, positive number: "+b,"comet_ui");return i.jsx(d("react-strict-dom").html.div,{"data-testid":void 0,style:[j.container,g,j.dynamicTop(b)],children:e!=null&&i.jsx(d("react-strict-dom").html.

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (555)
Category:	downloaded
Size (bytes):	2583437
Entropy (8bit):	5.660758914949604
Encrypted:	false
SSDEEP:	24576:wRe6evenamxdavUjuKZwZZSg3hqJFok66:ue6emnamraMjuKZwZZ/sJFoY
MD5:	1A07B3637D035852C1BF496244E02E5D
SHA1:	5499D5010793C37998D7109F7ADA060BB53F9516
SHA-256:	489C5DB1FE048E9E5D4DEB643C382C2BAEE253283EC1C55F5E62B12C746E0E64
SHA-512:	954C45573703C72322A3821D7D910BAD40B20A18F5530BDC5D7389A7C5D5FF33F7A0A6815D9C59300B5441ED6B127FC238897E3A586B73C4D583257E2AC265E4
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/bc657243/player_ias.vflset/en_US/base.js
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././*.. (The MIT License).. Copyright (C) 2014 by Vitaly Puzrin.. Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the Software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,. FITNESS FOR A PARTICULAR PURPOSE AND NONIN

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 246x138, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	2870
Entropy (8bit):	7.921195032508485
Encrypted:	false
SSDEEP:	48:q8R0pxkeXaLcdT1f+vgIKKoq29btUSWqZNY7g27u7/AJkqPf6OeTwfo/O:EXqLcdT1fuhpsbCGN927k/AJkk1EG
MD5:	D21E6222C6885CDA719B3E8AD0D6C589
SHA1:	95E2E4AF3263736156B5F931A87EBAA25D244DB9
SHA-256:	5BDECFE2FD838B73A28A49418C37C200A4DC866B5377E8EB30CE5ED46481807A
SHA-512:	9ABDAF0D86E7C285561949D9A177341DB8A2212C8FED3613E4C29C10BF528E2DF632E58496EC875BFF98A98A302C435DB541CC8BE62ADF1922FC74134AEEAEBD
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/jxuUMURYxTk/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLBu-FJQRllUvGNmQ-LUjLbFqPwSFg
Preview:	RIFF....WEBPVP8 "...P7.......>Q(.F#..."...p..cn.o..(..w.O......W....._A_.=.?Y... ...............7.G..a..@?....1.......W.......u............n[]A......)?&y..3...f.....{g........Z.^....[.j.......\|....k...O.......^.i...3.......#L=....e.^c.n.m&0..^.{R..4.A.e?...:......).Z.\|..@.U.<u..c.b.}/S@.....8.i.'?...'l6..1o....N.._..:........Gq......ES.bnA.-{:.]p.........i..c7ntZ1Q.....D.d...].fG.J..Y..W?o,.*...~.W.U....<..@...E.0..Z('Dp..8.f....ET.....e..%.,...{w/I ....l..+..m.....^.,6.@.".[.t...?..]v....^?.#..rW.U.eS?..L^J.g....d.....QsC.../...B%.kw.......'.g#;....72H..:.+.}Zl^.%..zU5\|.#....vm...z..q.0.w9..Zp.b.P.:L.[T..'h.P.. .G.-...z.........#/.d.p.....f,)_.C...XVT6.o[du/...;'.H...V......q..-...5f....EG.._.XY.yP..h.7.......'.-..L...:F..Q..^o....E..M..8......?...2zZ.O.U.3../.&.?...{..$5....#Q..1}.'..@...2\|%..%w....@...q....\./d...N...r..lU........S.&L.)k..8~A..bx.;/u.0.)k..!......W......b.\..... ?:..}.I..._..y....v..k...Q...Y...jl.....hf.N.M.@.P.Bvo......J.....s.w

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	221
Entropy (8bit):	5.051880229825864
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4Bo0NiGcrlSnfa9I7LKY:t47N9U/vmRBo0crlsfaq7n
MD5:	83D9AAA5E179D445E561E8167CEB4D7A
SHA1:	CBD241357B025084C9B107CC5ED0803B0A776C3B
SHA-256:	AA910C07266E14040CA7215E0070769E61A15B724868E1060AE081E8160AB25D
SHA-512:	9071196C5F5CB17BEE54A65712CE1CA63BFDE00EB7892B9056028854C010C57F4BFE59526512266BD11910D65D834425CAEB08529479F96CB52BC49ABC94A48E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/home/v7/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="m12 4.44 7 6.09V20h-4v-6H9v6H5v-9.47l7-6.09m0-1.32-8 6.96V21h6v-6h4v6h6V10.08l-8-6.96z"/></svg>

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	251
Entropy (8bit):	4.807326238374636
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4hLBIl/qVs+RLjUjUX:t47N9U/vmRYiVswfUjUX
MD5:	05A720716D71F9F56D6C0E5C4B47680A
SHA1:	D24611C11E8CC3B158EB518F2298D1E35CE03E48
SHA-256:	B90706D55C1E8B616BF8D677C195D09AF8AA75BC669BA3A36A25480CA86F6926
SHA-512:	D0DA0CCC993DB255F96AC9CCDDA35DAADA2928F17A1262F5954B6A3C54B57080544E5A9C3808275749ED15A118AAA9B44B50B0AD8A1F2BE668F9D7614A0456B1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/x_mark/v4/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="m12.71 12 8.15 8.15-.71.71L12 12.71l-8.15 8.15-.71-.71L11.29 12 3.15 3.85l.71-.71L12 11.29l8.15-8.15.71.71L12.71 12z"/></svg>

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	downloaded
Size (bytes):	8731
Entropy (8bit):	7.910747977215189
Encrypted:	false
SSDEEP:	192:3dDIZykLxNXTlqFuGOu7kUrGD8VJb0v+JVr/et:toykLxNXjGO9UrGD8VxySVc
MD5:	DC143E549B43E2B36297040CFFCEBD2E
SHA1:	199C5454FE3D559F50161B70E4D02DACBEBC5E56
SHA-256:	F2D3462BD9E75956C8E12B614BED5382480C6AB50653392141296333566ED635
SHA-512:	A1F898F285F45B71B4FDA0EC48EA8A2BDDD876CECBDA9514D43BD3CFFFFC84F76BE748F82F0CCE8618B48906A1BDAD2447565D20843050138EBC1478A6DE0E08
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/443734130_996504798511758_6592287627648144231_n.jpg?stp=dst-jpg_p160x160&_nc_cat=103&ccb=1-7&_nc_sid=5f2048&_nc_ohc=ZehM0R_W_KYQ7kNvgFg__vp&_nc_ht=scontent-hou1-1.xx&oh=00_AYDJEL6e_gixMWiDOUh9aXczeGqkrxh94R0FJtxsn4TwFg&oe=665847CB
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a7001000079030000430700003808000086090000f50e00000d1500008d150000b3160000391800001b220000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."..............................................................................q..<..D.?......f.E_..x.._...%[p..tgL....s1.N.'cW#.,..=..]..6......./...sR.u.t....WnT...q.x.....D7.gF.99.2...kr....i2.....%.5N..21k.Iq.........SB.g.}.d.-.)eh.....l...JKZ.....)AF..n.....-..e.y...z.n..yz~y.L.6..W6.Z.....S...Q.T..=.../Nf5...[.])..e B.c...h#./.&n\|..z...0[.......}.a..._R.X.._....3...7~.;....5..@...X..4.H.lZ6...S.......A...J.....RG.W.}F=.T...-IG.z7.9.....7>e..X5NMk.B$tf..Z..^....z>....{.-.^Wk........C.S\|...<...t.....)............................!A."#1. 23@...........=....].&.H....a5.c...Dv$A;.:.\W...?wJN+..p.5?....7j.E..a...."...M.yj..J......="..[Z...4..M...

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	398
Entropy (8bit):	4.820547366953078
Encrypted:	false
SSDEEP:	12:t47N9U/vmRTDiI6mKOG7bTJ1XUfCRimfDqQehW:t4jU/v0rdGHTJCfCw+qi
MD5:	2A0EC6EB2D5A6F6DEF85A2B9A667C42F
SHA1:	08BA82555D8CA056757BEAC3F8B443A1F60C6061
SHA-256:	85357D329507B0542A21870A328E20F77E6E991BC97D86EC0ACD2521A3C12332
SHA-512:	60AD37CE0204D2F8C60E8F91405E97913E6481E09B4AFF28809573420B988E5AEAB5D77E6B55C8CFAE38D2EA0B228AE7A2EF2CF47FD2B461996B894834BFE9C9
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M16 21h-2.28c-.35.6-.98 1-1.72 1s-1.38-.4-1.72-1H8v-1h8v1zm4-11c0 2.96-1.61 5.54-4 6.92V19H8v-2.08C5.61 15.54 4 12.96 4 10c0-4.42 3.58-8 8-8s8 3.58 8 8zm-5 8v-1.66l.5-.29C17.66 14.8 19 12.48 19 10c0-3.86-3.14-7-7-7s-7 3.14-7 7c0 2.48 1.34 4.8 3.5 6.06l.5.28V18h6z"/></svg>

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	367
Entropy (8bit):	4.678729266974906
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4uZBPeRPbmcsstyLTngAV99WTc6XzQuJ3/vh7QrS3/IUp+wb:t4noU/vmRyPeR9YngQ9Ec6jhJ3XBAUp5
MD5:	A28E7BAA1C8C78EFFBDB2D0AB01D9EF3
SHA1:	F3408C777CFED5C38AF966596750F675637B012E
SHA-256:	7A7A47330CB72F09686EDF979205FA844FA134556F81F046EFECF07B1401A557
SHA-512:	14AE281980FA9715DFFF5BB4F22EE6B4959F3C15355B71AA65E43392E598F40DFFDDFBC0670D02D29A7C7A238B0066064174385439D0291275FAEDCE26808146
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/bag/v4/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M7 8c0 2.76 2.24 5 5 5s5-2.24 5-5h-1c0 2.21-1.79 4-4 4s-4-1.79-4-4H7zm9.9-2c-.46-2.28-2.48-4-4.9-4S7.56 3.72 7.1 6H4v14c0 1.1.9 2 2 2h12c1.1 0 2-.9 2-2V6h-3.1zM12 3c1.86 0 3.43 1.27 3.87 3H8.13c.44-1.73 2.01-3 3.87-3zm7 17c0 .55-.45 1-1 1H6c-.55 0-1-.45-1-1V7h14v13z"/></svg>

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	251
Entropy (8bit):	5.1580903557505975
Encrypted:	false
SSDEEP:	6:tI9mc4slhohgqWHiA4vmI4hi6Dd7kC0qmjWpYp:t4noOAvmRnJ7l0pWpYp
MD5:	931DADAA2F58D46D80735C58183888D0
SHA1:	FDB576A133B05B9E28D71E7901B1971CB0335A7C
SHA-256:	D59C1758BAFD761AC0CFAE8C33F29DD4F1229F6369E4C36FB3DF9C2DAC2E394F
SHA-512:	D4C09F78A450717FEF762941DD897AD5CB3BBE23308E9092DC23E872285F3A17E74FDCCE4492E1ADFAEA0DB2C57229A7469F02816DF5D10092CCFEF26B5F6728
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/video_camera_add/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" style="enable-background:new 0 0 24 24;" viewBox="0 0 24 24" width="24"><path d="M14 13h-3v3H9v-3H6v-2h3V8h2v3h3v2zm3-7H3v12h14v-6.39l4 1.83V8.56l-4 1.83V6m1-1v3.83L22 7v8l-4-1.83V19H2V5h16z"/></svg>

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	442
Entropy (8bit):	4.813019877520226
Encrypted:	false
SSDEEP:	12:t4noOAvmnqtXy+R/Ro1ImoXHNR50buAD2NfnRimbf:t4o7vNC+R/cImoXHN1Nf
MD5:	8508DD8336C60695AFCF1158C2EF0EF2
SHA1:	32CC87A7AE016449C6038284CEDDBA3E3D0B1791
SHA-256:	DEBC90222AA11F028051B9E116A7AD054ED560854FB326A5C38254DA354CFDEF
SHA-512:	35DE791E5CE1F47AD1FF89A594DB6FE055920481ED73001EAB97C12A7DC31077A6C5B64740FBFC682923BD98149F4A67AD0C027532EA1BF7EAA3C4D45579E930
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/arrow_time/v8/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" style="enable-background:new 0 0 24 24;" viewBox="0 0 24 24" width="24"><g><path d="M14.97 16.95 10 13.87V7h2v5.76l4.03 2.49-1.06 1.7zM22 12c0 5.51-4.49 10-10 10S2 17.51 2 12h1c0 4.96 4.04 9 9 9s9-4.04 9-9-4.04-9-9-9C8.81 3 5.92 4.64 4.28 7.38c-.11.18-.22.37-.31.56L3.94 8H8v1H1.96V3h1v4.74c.04-.09.07-.17.11-.25.11-.22.23-.42.35-.63C5.22 3.86 8.51 2 12 2c5.51 0 10 4.49 10 10z"/></g></svg>

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	96
Entropy (8bit):	4.362961159354576
Encrypted:	false
SSDEEP:	3:bh6G3XWZNDrMyMcbtugSUhdei3XWZNDrMyMcI:bnXS5JtpnS5O
MD5:	F71C4EFD36879E28A721AAF93B559B3F
SHA1:	2AA52C4FD618680148F935B280F96496EFD7E153
SHA-256:	F39FC3D962FAE023EBB725DFDBA524226C593C6EB2BC2C1F23C454D63CC10EC2
SHA-512:	8EB53CB46F668813C99768F701C00D1E2FF18FFE86F50C0C0A17DFAC06B339DCB513F58972CDEDB5A372035596806F69F50E5F6228B5F0AFE5992E13AADE080F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwkbMnFS9SzlUhIFDYOoWz0SBQ3Fk8QkEhcJsA2cf48--pcSBQ14bxIZEgUNxZPEJA==?alt=proto
Preview:	CiIKEw2DqFs9GgQICRgBGgQIVhgCIAEKCw3Fk8QkGgQISxgCCiIKEw14bxIZGgQICRgBGgQIVhgCIAEKCw3Fk8QkGgQISxgC

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 246x138, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	2498
Entropy (8bit):	7.916803095655323
Encrypted:	false
SSDEEP:	48:3hTw039xS2lNJfnZei3iQuoDlRpGIHuVMw3n9k+y+cGciz3cQLIRCB:3Zw0NxS2NJfZFnBGOW9k+nErRCB
MD5:	FAC17E17571AA331BA4EE790FDAEA0DA
SHA1:	9BF85EF268B137F2CC97F07B4220A37A20451C81
SHA-256:	590FAF44632B84784C214608A39D1FAB06548BF57EA888DEF7E36B08A6F906A2
SHA-512:	E7F12F7C00CD9F6C882F8DBA07B126149799956B0CFFB0E95DE992817CAEA79A50AE09EC22388C0371052F200577BEAED2F36C5DFC0D3B91E35BCAC930E1F09B
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/PJmoRowiRGk/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLDUPUfm9CSZCVGvWLrJsa8oWCBGXw
Preview:	RIFF....WEBPVP8 .....1.......>Q&.F#.!.#..Pp..cn..'.].i........? 9.y...2...]}....?.Oe..=.?NzX...I.....;........>.o@...M_f_...?o=..kto.......k..<.`........?.....}..k.[...........W...7......~.{.~.0.W..MVu....FF....u........;?....9.B...de....E.=)\|of.W<.A..W....e.#-.C.i..u..`\|:..."x.o...3...6.....U.......V.j.k.n..............WF....>/...Y..F[....d.m.G_Z..4.pjvF[.....(6..Y.]..............7!.....F.......g......w.T.....\KFo.2#...B..__+I....d....k...=C.Y..L....? .....p[S......f.U*.@...K.[U..x.....c.D..=rKu...up..."<w;.<....Y...@...\.{.....Q.a.I9..Y.....G.:bf....va.VE.A.E..........4..>.V.B....Zh.D;t1....8".q..n..M...Y.s..wO.V.LwC.W...=...P.>x$..M\..#.tX!.>!..n...h_C\|C..tk.?..k.ox.....V.].h....x671>.2...^....D.W....Ub4..~i.P.......2."..4.(_OBC...N!:`.T..].r.v[=.9.S.:.W..>.pS&v.O2.Y.\...F..}....S`..............?.,...z...],BS..9.....b............7A.!.U..N.....]..{I;\.x<...9...;.;h..;.....H...rx.Oe..ux?...^..0.R.2.....L..X...O.>Z.x..q...O...E5G2...

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2190
Entropy (8bit):	7.849903718594781
Encrypted:	false
SSDEEP:	48:D/6GN3MZUPvJwZpSD0LFSDhFI5rSv5lnux5LsK+wWJJ7eMUNrb5Xtz6uYF+:DSGNMZIJf7tFI5rSv5pMg3zJJ+rFkF+
MD5:	9141E5521105FB13C657480DAF781484
SHA1:	1D0D577784430FCE4BADAC4B6C8AA81BFBE45C8F
SHA-256:	8AF7DDA580228D237C72EED44BCE0912585241544A1FEAE96A464145EFB542B2
SHA-512:	E871DB92CD9F21BC48BB57C9E3D613DAC6781074384936BBAB5FE5B204D213EA4BCCE21635702A606811FFD228C22EE0B689FB4FFBA364A972C5003129835BE6
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S/content/common/images/reskin/favicon.ico
Preview:	.PNG........IHDR...@...@......iq.....pHYs.................sRGB.........gAMA......a....#IDATx..[=p.G.^1)..@.......2.1U2..K..........\.rc7Il..LH.K.Ig.HgGrk..T84..I...7...O..;..\|3.u..}.}...w{..28.Y:....[....Am.?......d.....:Gm.Z..G..<...3h.=.....N..=V..tI.0p...W..`.wW.0......U..A.w......4......a.X..2.....t(.....c.gl}.9[]....?,.....+.....L..(?-S.0...I.$.&.zm. ...,..=gI.d.....9:^`G{..~.$.......a...!0..-@.../X~....F...;?7......p...v.,mbS.p.M...3MJ..;yDw...f...f..<.......a.T~".a..7D.....SK...4.(..]...'....4.c..1`.k......[.....^..m...............6.W..5E..2.:...Y.....n..=8r.f......7G.S..)...TS.E.>M......r..{X......z. .6]{.\|.....0....-..3../..%..............).oc..0.H8h. \|...a..&S.}9.U.^..I.=..}t9.<.1.R.U\|.z.s+..../...U.S..qla@.i..NxP../..H5.zI..?u.....wucjaAP...y.........X.. ;~..k.b..._...;=,?\|.?..e.`Y].s..n.F+!...BA...;-X..............w/t.8...c.{.....2H..L..U..M.Z.W@[......R...o.O?ERD7.....\m...6.hRF....P!..F...,..hX.... <..:`X4-. T"...,..Z.....R

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 312 x 200, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	22180
Entropy (8bit):	7.980789596516158
Encrypted:	false
SSDEEP:	384:XWdTGt5usYwb1T9Y9YsxxCT/dwpaRHqbV0EiRdxRhmEyEpWQsZ+QTNxYyHVx:GdTDA++sri6paRWijNmEts/ZNOy1x
MD5:	3669E98B2AE9734D101D572190D0C90D
SHA1:	5E36898BEBC6B11D8E985173FD8B401DC1820852
SHA-256:	7061CAA61B21E5E5C1419AE0DC8299142BA89C8169A2BD968B6DE34A564F888A
SHA-512:	0C5F0190B0DF4939C2555EC7053A24F5DAE388A0936140D68ED720A70542B40AAF65C882F43EB1878704BEA3BD18934DE4B1AAC57A92F89BBB4C67A51B983AE3
Malicious:	false
Reputation:	low
URL:	https://www.facebook.com/images/cookies/cookie_info_card_image_1.png
Preview:	.PNG........IHDR...8...........j...VkIDATx...{.\.}.....{...........Cm\....B.E.Vj.?...i.(..."BZ.JP!.D...D.....9..-....B...6...wg..........3.^l....Fw.q.......=..`Y.yO...,.<7lY.y...lP-.A.,.T.lP-.A.,.T.lP-.A.,.T.lP-...,.T.lP-...,.T.lP-...,.T.lP-.........a..n.%.J..).`.m.P8]$E.%... .r......jS.......7...kV_s...^.......3.............].~....5F.....0J...<.......E9..........q\DDH...+...\9q.@DA......(2.n"j ..F ......M. .R.$L......5E1......%$!.q....0A.`y;....4..`...h_.....4.....r<....w.e.1&T.....K.Ae.....mG...@..0'Q.........E.G.".;.r.... .u.?......37...,P" a.c#G_..].6\..u.P..D....)-......M....A.0.lPk.. ..;..e.Y..........U...aX....(X6.U..F...?...\|.o... .u......?...A=..5k..A..L>.i..g.<....m\r#.....}._......u......=.[.u......q........D...~..\|'..F@.{T.\.c.......5..z}.x.h.....1yY.H..).p..P.u$...8....`..P.h.. .G.....1..."..s...xj.. ..2.(.....0$..a.....2...B.BA.....T.H.C.1.. @2..H.D.c.!\.....J.Q.X....\..V.b)...m.:.~(J...D.Z.`.%.:.\|.

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	32856
Entropy (8bit):	6.370524623339198
Encrypted:	false
SSDEEP:	768:As/PNPiPQTHCiSbVESUnSTbgtK2RFozpMDWeFDZeNX7Xi:As/PNPiPraNSvgmIWoely
MD5:	939340C7A209B4CA46615C8200F6610D
SHA1:	9DEE563165182C679C2EB808966DCA25AA09B006
SHA-256:	43078647F3BD86002CC2D165F4439181AFA7D53C7B271CF5A02071CC25D6909B
SHA-512:	743AF1C6630EAC427508C015B90B86FF3AD2C900DF96EE71396955B0FB6473EFFDC8B9B01DA19019BFEC8F2C12A2D8B5B33D744099778A089EC0898B44658CFE
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/m1/v/t6/An-ltDiBj6BlExJAIyJiOGWs0CtdQwF9K9SyRSRhTIMgJd0MMzaw7ju3gnTsliPfba99uYjQem5sn3JzgpEnBVKOKfyfbcp-sMBJ.kf?ccb=10-5&oh=00_AYAjAwuljXLVWb9VmO0GfkRgCPPHVaBo8SGp6ZTw-XNUBw&oe=6679EE97&_nc_sid=7da55a
Preview:	...KEYF....$................. .............<(....4C..4Cffv@..pB........4.................4C..4C......................................................................................................................................................Adobe.d.........................................................................................................a..!Q.1A."q..#2r...$3BR...C....%Dbc............................!1QAaq..."2R......#3Bbr..............?...Z..dcI.1....D.i"F4.$...Q ..7I+..#..? .B....[<<.....ZH....i.Zt.HT....&.....\|2.D..t./..w#?.h....O..E.../.X..C....w..J.r).X..2..b.G...Z....:.iP.bwG0...tK..e-'..d.....O.....>.K..;LMg..?P..'...f. t.J...k.'i..\|.-.....u._.g.+...1...CU.p...I..p....~?.y\|.h.S..c.)..K.1....D.i"F4.#.H..$I....W...cI.1....D..q.h.....$I......{.0@z...\7...B...6...8....o.D#.........\z.i.U1Yu.w52......+..cT........@. ..@JX..).&..)G..RF.A...UH...T5....y..o....>......^d0.\....\.u...VG.'..X.U...N..4..i"F4.#.H..$I...c.r...#.."F=.D.i.g...../

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	259
Entropy (8bit):	4.710851372205651
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4zmgwDe4btnRm31IE2l0kjMswple9SY:t4noU/vmRzmgw3tnRm31IEURwpY
MD5:	AA228455232ACB0A6378FED3354869AB
SHA1:	3447461B1713396150ED0DB5067AE45BFE9F024B
SHA-256:	1C594744993B086F8C4D3ABE3A4EF2794F1D1BF0D680A354EC0561AFCE427140
SHA-512:	CE2D4D2D8204EEB68E702F71D87B56CE970B4ACDF547AB20FA4A8B281C655FF41BC175A7949F6B453D7ED4A7EF8DE28C2B6774A67708DB8B7047DB3DFDFC2991
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M17 13h-4v4h-2v-4H7v-2h4V7h2v4h4v2zM12 3c-4.96 0-9 4.04-9 9s4.04 9 9 9 9-4.04 9-9-4.04-9-9-9m0-1c5.52 0 10 4.48 10 10s-4.48 10-10 10S2 17.52 2 12 6.48 2 12 2z"/></svg>

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2866
Entropy (8bit):	7.176669115665954
Encrypted:	false
SSDEEP:	48:2/6BMYL4knA9WIM8H/c0X4r37HAq3WHAUoEQEnfo7ZIJbH+WVoJXIplChzYNrKbr:2S+YkknmWIM8H/JWHAfHAUfpfgZ+hkRX
MD5:	E3443D0D8AEA42FC61368B9792B6FDC3
SHA1:	6D0F867176171D6DD3FE1E052251B7FDC8C479CA
SHA-256:	E6FF78CBC0E7A99C0243089CD0357F70D4432FAEA71E5B43EBFA466A166939D6
SHA-512:	369005A314E3064A2950B90D473EF2F2045AA1AB859CD29EB5D6E315299C8496828E8685E48DF174C27EFA6BFF8B8657892EE21EF8F6A3AE44454573925161F7
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S/content/social-media-logo/36/socmed-facebook-msg-H36.png
Preview:	.PNG........IHDR...$...$.............pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)" xmp:CreateDate="2020-02-25T08:48:50+07:00" xmp:ModifyDate="2020-04-24T11:36:21+07:00" xmp:MetadataDate="2020-04-24T11:36:21+07:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:65ec9e37-57ac-4da2-ba48-ca834a44cd8a" xmpMM:DocumentID="adobe:docid:photoshop:3000cbb2-9624-ad49-bc2c-7ae29484f

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	182
Entropy (8bit):	4.923041841279974
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHaxhTIQfaaiBFbCcD8o+fmQGq18i:tI9mc4slhohC/vmI4OhEQfR6Fb3Y1OQV
MD5:	D6F15B1444CE6B4DBC711AC9E9041F17
SHA1:	98D8A4EAB8E132C5894592992F532CF36D71810D
SHA-256:	2BE645A9C201E31B43E28FD5541E36B73175D503362ACBA96CF578B95DB8DD8A
SHA-512:	89F41624C92CB68B716287E74ADD7DEEF7BD67E8FB68BBF7DF93BB84AE1478248CDFC35C26F45A0A6DE347808E9E6431CA771EC9A18E0FF6869843D66B2B4E77
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M18 18v2H6v-2h12zm-.6-6.3L16 10.3l-3 2.9V4h-2v9.2l-3-2.9-1.4 1.4 5.4 5.4 5.4-5.4z"/></svg>

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 38243, version 0.0
Category:	downloaded
Size (bytes):	38243
Entropy (8bit):	7.990718925141264
Encrypted:	true
SSDEEP:	768:Nw/n5CpquHRzptAFYv5Ul1+4EI6CtqqODX3POmMsLK98i5LprU:0ncpjHtpyFYw+4EI6CtjODX2H99tLprU
MD5:	2AEA1E812EA22F7BF315A8D9769E1470
SHA1:	5730588CDB77464D66D77F816461600AFB8F9946
SHA-256:	5441944A6EE96A0DC5935F0B4C180045B41C7EF6068BD50C05DADE403FBE150E
SHA-512:	089CC6877B1503BC648419B07F35CCCE98C0FC9FF461A7250690AB589AFA008B10808F1F3F7ADBDE3A587B1ABC388E8258A165B8B70330D18D47B8DC2DA2D1EC
Malicious:	false
Reputation:	low
URL:	https://dl.dir.freefiremobile.com/common/web_event/official2/dist/client/fonts/GFFLatinW05-Bold.d2bc101.woff
Preview:	wOFFOTTO...c.......T...............p........CFF ......qY.......rGDEF..rx..."...".R.BGPOS..r....0..(v.pr.GSUB.......i...../..OS/2...8...W...`i.& cmap...........j.a..head...<...6...62..hhea...t...!...$...ihmtx.......%.....XVtmaxp..............P.name...............post........... ...2x...X.G.0....]...8.bWl4{T..{...E@D.......Q.b..Xb..{E.n.1.^c9.s..........{.......Sff/.y....E...V...T=29q.k.H.......^.`...".Q...w.........-..p..\|....lo.o..8..."\..+.U.:\#.....s... .......fr.%.Jn=........sW..{.S.5Gy..y+o.K....\|._...c..\|..;.O.S...X~2..?._..7.[...!................'.U....rB..$....1B..N......4a.0Q.&..........&a.._8....7.?.G.K.Ph.(..R....................e.e.%.2.e.b..2.......r.r.r.r.r........C........Q...g.Q..=.zt...1.c.G..X....<fx..X......=vy..8.q....w=.{..Q r.,ZE.XZ,'...b]...+..;...~b.."f...I...,1G\..7....a.xA.&.....7.K.H.T\%9..Ru)Lj EJ.6Rg.../%J#.1...Ti....HZ!..6K;...1.tI.).!=.^J../Y...%d...\E......9Nn/w.{...!.py.<Q.Z.#/.W.?.;..)..\|C.S~....

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x600, components 3
Category:	dropped
Size (bytes):	54619
Entropy (8bit):	7.960749060278784
Encrypted:	false
SSDEEP:	1536:4GS974COzrs5wu8a6uypsXETU0nh5e+3/cdYb:4Z8XrMwqasXE7h5e+vfb
MD5:	7514221D5A86AA2AD5D3272E52D0A0F1
SHA1:	FF6E3BBE44C6CC2C817D14CF2EE6AB24DA0AF1C3
SHA-256:	4BC5FF07682CF260528554762DF16E2311F7D409B527730F2042F8D35ED7757E
SHA-512:	A8F5817D0360F918F984FE36CB19C26E521C24105CF7A393DFA546F65166757067919D90BF063496A5F46BF754B0D4434871B44ECA96DB384E8FCB633B98D5B2
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a700100000117000081330000b73a0000e3470000d25e000064820000b8870000258f00002f9b00005bd50000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......X.X.."...............................................................................................................................................................A.<..x..p4.....................................................z...V....>...;..;....E....S.J9d...X....\|./..<.. :`........................................K..tf4......................................................R.<..p4...,..;...d.[..&\|.....d.....k@....5........uA................................Q...h....w.hz/3.s.y....ruk0.Ow...R:.4..<...W1...c....C...:........u$.k5+..Vi.aq.k..W...................................E.m...D......O...,..u......W.....%......2m....SaSM.r..y.c..b.2.OO...k...I.o....Y?.v.}......................9

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 254 x 23, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2006
Entropy (8bit):	7.8615265541912605
Encrypted:	false
SSDEEP:	48:9TH6T+do/KppV1Rihe4+Qla8R5NMReGLB:l6Tl/qpVqhefQlag0N
MD5:	83B636ADBEC271742F86FF9904323132
SHA1:	D9A305F41F9EEFC220753B906032F33BB5FADCE0
SHA-256:	A4AEB63128AC0C4241C398E544A02A38B3E2291C2B1476CBD52BA2FF4C6B7F00
SHA-512:	E6988002E66803C0751BB5D9481885E66EA06CEA10AF2E1717773AEB7ED94C1AE4CA06AC673A3CEBC3A574F5ACB2D899604F5F5EE13C751A05807234BAA18A79
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............+.......sRGB.........IDATx^.\.u.9..V"#.x.&.K..Dr$.#.:....."Q....h..c.L..{.X...~..&.~...&..=....G.z..5.V<.......W...(.^...........zg.}.1.H4......o?..G..cO.[....~&..D4.^.G........6t{O4..\|...........>..e.f^.+@.ydCw...D.'.o.r...........\.k~...}.[..=..$4].]=.tLD....;=?.y.........{..K/..<A.ULe..mY......r\...d.H..D.%pb.I.H.5.....P.hJ..z.....c`.Y@....7..y....j...'.yc.f...;v.d.........y<..zi..<G...3.I.....2.`h.lX8.I...e~.....3....]..^.i.3......t....[&K(.oao.6..>..t\.M.r.5...t.bL.....7.E...R..RX.PGT...$.S.......fR........iFc.w.f..^....e...Q.f...@..(.[&.!;~+....Js...ME.....#]x......E.....,g.`_d..K]...0..l..G.....@e.....D\|".[..Bynj\|..v\{+B.Q...gb.M.FN.\g.z....I...ll.. .F}...I:s]+4.=@z...-B...Q..SA.#...\|..b...9y..B..2..CQ.....?x.......'..$.c...2..R..B...<~Q.i..J..R....o,.%...B.r.-...c:.rb...../..}.V.U..,......:...8.E..E%.?my".....E\|...xP..d.=*..G"..t..B.R..T..>7..z.4J...J..M..B..e...I.H.\...Fo.%z...P.9..E[S./...R6ex(f.Z.

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45939)
Category:	downloaded
Size (bytes):	133970
Entropy (8bit):	5.132873854767299
Encrypted:	false
SSDEEP:	3072:G5uEi/bA+TnJDpamoObnmodwbwnwmwowd6/yW8RNK+blic1rU6fJGnjkuC6hfME9:oblic1rU6fJGjQ6hkefClYQBJXC
MD5:	F22762C4396369C40AC104680CBEA58B
SHA1:	F8B3D6025F530531A645BDE6D982FFFBD9AA195C
SHA-256:	E55BFF6CC8009886C18F60F40B984FEE7435F0E90D286F7A306A099971B337A6
SHA-512:	22A1BA1096FEF380F3DC7C2D4EC9D5F0773648AA67308D17BD740228AA2F755CC8060F9635D73C1CC1ECC2F156B2EB93C29413CA7867B96A5F9B2AF1800BAC70
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iQbs4/yf/l/en_GB/Up1i9-OcMPc.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("BanzaiLogger",["Banzai"],(function(a,b,c,d,e,f,g){function h(a){return{log:function(b,d){c("Banzai").post("logger:"+b,d,a)},create:h}}a=h();b=a;g["default"]=b}),98);.__d("BaseTextWithIcon.react",["BaseNonBreakingSpace.react","BaseView.react","react","react-strict-dom"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react"),j={icon:{alignItems:"x6s0dn4",display:"x3nfvp2",verticalAlign:"xxymvpz",$$css:!0},iconContainer:{display:"xt0psk2",whiteSpace:"xuxw1ft",$$css:!0}};function a(a){var b=a.children,e=a.iconAfter,f=a.iconBefore,g=a.iconOverrideVerticalStyle;g=g===void 0?null:g;var h=a.observeDirectionality;h=h===void 0?!1:h;a=a.spacing;a=a===void 0?.5:a;f=i.jsxs(i.Fragment,{children:[f!=null&&i.jsxs(c("BaseView.react"),{xstyle:j.iconContainer,children:[i.jsx(c("BaseView.react"),{xstyle:babelHelpers["extends"]({},j.icon,g),children:f}),i.jsx(c("BaseNonBreakingSpace.react"),{size:a})]}),b,e!=null&&i.jsxs(c("BaseView.react"),{xstyle:j.iconContainer,children:[i.j

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9500)
Category:	downloaded
Size (bytes):	268775
Entropy (8bit):	5.339637776544899
Encrypted:	false
SSDEEP:	3072:uFE73Vo5X6kjnVT54GkdFnXdD4NqkMlVN561AWG7TTpS2w:cE73Vo57VT5GdFnzZVN5I
MD5:	42164C52A7627FA7533D4BA150F60D05
SHA1:	F4B2113C3CFC55B8410804315FE2E972DC1081CF
SHA-256:	2329BC9641F7FA1DE190FDCE684ECA5A1D00186C4DF312FB11AD3EDEF3D69DA1
SHA-512:	314E139E1CF326864DEBCFE38928246CAD88284209CE27023DB7E3984ED8FD59D0A68CD64AC7F02C8044C6E9EF49256455D26E31537A07D4B51DB289C4E918E8
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3ihfn4/yo/l/en_GB/khfw_V4kOlpv89Dp6K_jxIkIhKMfIUi82vr8ihReOCEmAW87EauwWUrxvhYhGLwC4ognKw0vE_CYuEfrl5TB5L00_Sou4hbknqlJZ-rcIbRujYurPnDHEYs9_zW39xstWYoIrWWLyfq9z1dfWxL1rr0Obq.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometSeeMoreExpandingUtils",[],(function(a,b,c,d,e,f){"use strict";function g(a,b){var c=b;while(c>=0){if(a.charAt(c)===" "\|\|a.charAt(c)==="\n")break;c-=1}a.charAt(b)!=="\n"?c+=1:c=b+1;b=a.substring(c);a=/\s/;b=b.search(a)+c-1;return{truncatedEntityEndIndex:b,truncatedEntityOffset:c}}function h(a,b,c){var d=[];b=g(b,c);c=b.truncatedEntityEndIndex;b=b.truncatedEntityOffset;b=b;var e=!1;for(var a=a,f=Array.isArray(a),h=0,a=f?a:a[typeof Symbol==="function"?Symbol.iterator:"@@iterator"]();;){var i;if(f){if(h>=a.length)break;i=a[h++]}else{h=a.next();if(h.done)break;i=h.value}i=i;var j=i.entity,k=i.entity_type,l=i.length;i=i.offset;i!=null&&l!=null&&j!=null&&j.__typename!=null&&(d.push({entity:j,entity_type:k,length:l,offset:i}),!e&&i+l>=c&&b>=i&&(b=i,e=!0))}e\|\|d.push({entity:{__typename:"SeeMoreTruncation"},entity_type:"SEE_MORE_ANCHOR",length:0,offset:b});return{newEntityRanges:d,newTruncatedEntityOffset:b}}function i(a,b){var c=[],d=[];if(b!=null)for(var a=a,e=Arra

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2000 x 800, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	61755
Entropy (8bit):	7.748502484425811
Encrypted:	false
SSDEEP:	1536:wNNqP22JPMaHqiN6C0IhErwE7gMAXLp0ppIN3Ilkyp:wNNqPpCJPCnUtut4lZ
MD5:	29DAD06670F873936002DDB910253A4B
SHA1:	523EE4ADF550DF78348CF7528580171F0828F2B4
SHA-256:	8871194DC3AE9035B5BB04C84AA7B82AFA7442DAF2BAB5F1393A5751E6082A10
SHA-512:	AA1A38DE98C14B454715CC2240B752EAEC6824237BF1A6C760CCDC9859AEC7AC2E8827DC6D635820631EB0C5A56003770F0DA7C423E95CAAD0D1672CBDDA0268
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....... .....{..s....IDATx....u.H.......7..D0p.CE.t.CE0R..#...8....8.......6....4%[.)..........3...%........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................L..:............^..:..\|..W...R.}....g.A.................. .$..............t...........$.@...........@..t...........$.@...........@..t...........$.@...........@..t....

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	11824
Entropy (8bit):	4.306765430849705
Encrypted:	false
SSDEEP:	192:F26SMbW4XFKQfjJ1yXczqPm55zYc3OQQiWp4L7w3DeMFWJov6dHmhr:F26SXyjfjusW+vYcUiWS+eMFWWvAur
MD5:	FDC41C1E6C6AE5E5580F16DDBF54B8FF
SHA1:	22AC53E9CD9C5B62127E26A67F00F0C20C656785
SHA-256:	50F120F926C1520EC05A1C63CAB4B2C00FD7B1E8F94A3ECA839D7973A144F88B
SHA-512:	885271FBD1B79E33B2FC91C2AF6A1285C42E08EC2276C942F784165B1389E66D5D56A66DBF99787234773B80370FA4F38F7085CADBF381C16FA54CC15E042BF4
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 192 195" xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <path id="a" d="M0 194.555V.675h191.961v193.88z"></path>. <path d="M.668 18.586C8.545 12.047 15.125 3.19 25.082.49v20.673H.668v-2.577z" id="c"></path>. </defs>. <g fill="none" fill-rule="evenodd">. <path d="M63.227 57.833s-4.403 1.068-5.938 1.483c-1.456.393-4.553 1.79-4.443 6.532.112 4.74.112 4.463.223 5.85.11 1.389 1.11 3.444 3.053 3.999 1.944.555 2.834 1.777 2.444 6.386-.389 4.609 17.055-6.552 17.055-6.552l-5.41-15.82-6.984-1.878z" fill="#DDD"></path>. <g transform="translate(0 -.341)">. <mask id="b" fill="#fff">. <use xlink:href="#a"></use>. </mask>. <path d="M96.24.675c-17.36 0-24.86 17.956-38.835 24.25-9.382 4.226-31.732.669-39.879 14.75C9.38 53.757 20.86 65.52 15.12 74.544 9.38 83.568-.48 85.263.02 99.774c.5 14.51 20.374 19.494 22.32 30.4 1.946 10.908-4.853 13.059 0 28.997s18.193 17.626 35.867 18.065c17.673.439 14.368 12.34 32.52

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.3073549220576055
Encrypted:	false
SSDEEP:	3://ICkY:fkY
MD5:	D1350737AA2FC66C4FB7CE249F6D3982
SHA1:	170EC76DB49625B980D344C320A50940F67762D3
SHA-256:	FA033FEE0CB53069896341CA6228F62A8569FCAE3CF521AEE1F1F59F18AD850C
SHA-512:	8CD284971971188C3DE229EA8EB742451E9E8C93C540E6404769D775F2291AE6822FDDE8AAB1BA8CB0495BB6795B2BD1630686C5F8EDB9DFF46A043AADA1661B
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwm4FPkSWe5p4hIFDcdAknMSBQ1TWkfF?alt=proto
Preview:	ChIKBw3HQJJzGgAKBw1TWkfFGgA=

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1607
Entropy (8bit):	5.2664981782617755
Encrypted:	false
SSDEEP:	24:hY6sv7zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5zF5cUehDK:3q3+pUAew85zvc/hDK
MD5:	83B245AFEA6EF5AC011B6DBD39842145
SHA1:	8AD58E85482E8FF4A5AE30DF12F473CD9196ED35
SHA-256:	471DDB393DFE34D8334A8A0B9E4AB62D5F8B14AA9154F3DF2AC215278DBFFCED
SHA-512:	45546E57E7D6763EBE837138ED60DE2EACB66C7670C5DA650CECF997A445E71E8EFEC88ED308FD1EA2597DD773B8BFB7046DA949CEBAF12BAA36C5C8690FF769
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 405 (Method Not Allowed)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:u

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	11824
Entropy (8bit):	4.306765430849705
Encrypted:	false
SSDEEP:	192:F26SMbW4XFKQfjJ1yXczqPm55zYc3OQQiWp4L7w3DeMFWJov6dHmhr:F26SXyjfjusW+vYcUiWS+eMFWWvAur
MD5:	FDC41C1E6C6AE5E5580F16DDBF54B8FF
SHA1:	22AC53E9CD9C5B62127E26A67F00F0C20C656785
SHA-256:	50F120F926C1520EC05A1C63CAB4B2C00FD7B1E8F94A3ECA839D7973A144F88B
SHA-512:	885271FBD1B79E33B2FC91C2AF6A1285C42E08EC2276C942F784165B1389E66D5D56A66DBF99787234773B80370FA4F38F7085CADBF381C16FA54CC15E042BF4
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_fill/offline_no_content/v1/192px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 192 195" xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <path id="a" d="M0 194.555V.675h191.961v193.88z"></path>. <path d="M.668 18.586C8.545 12.047 15.125 3.19 25.082.49v20.673H.668v-2.577z" id="c"></path>. </defs>. <g fill="none" fill-rule="evenodd">. <path d="M63.227 57.833s-4.403 1.068-5.938 1.483c-1.456.393-4.553 1.79-4.443 6.532.112 4.74.112 4.463.223 5.85.11 1.389 1.11 3.444 3.053 3.999 1.944.555 2.834 1.777 2.444 6.386-.389 4.609 17.055-6.552 17.055-6.552l-5.41-15.82-6.984-1.878z" fill="#DDD"></path>. <g transform="translate(0 -.341)">. <mask id="b" fill="#fff">. <use xlink:href="#a"></use>. </mask>. <path d="M96.24.675c-17.36 0-24.86 17.956-38.835 24.25-9.382 4.226-31.732.669-39.879 14.75C9.38 53.757 20.86 65.52 15.12 74.544 9.38 83.568-.48 85.263.02 99.774c.5 14.51 20.374 19.494 22.32 30.4 1.946 10.908-4.853 13.059 0 28.997s18.193 17.626 35.867 18.065c17.673.439 14.368 12.34 32.52

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4264), with no line terminators
Category:	downloaded
Size (bytes):	4264
Entropy (8bit):	5.023352101476255
Encrypted:	false
SSDEEP:	48:cMR3GqZFZlZuAwkQ29BR6WtFfH/2Ff8FfSiY3hUgxJu8OJ/:cxC3wkQ29XtEmgiUhUgxJu8OJ/
MD5:	9DEAE13C40798DFCA19BD14ED7039D60
SHA1:	4BA302A1435B094031E4F2E1BCE1B6198F0CF825
SHA-256:	CDAC5527DC3C1A9F38C6B00086B2A10B9E7EAA1E062314E548C1FA602D17BBBD
SHA-512:	95B093D926535FA9454E3776A3E219B61502CE67AA2E659175AE879133DD35A6EFA1BFDBE5B6D3E3DD8BA1F0663892B44FD6F21BE17FEFA9725A234DFF3C5D0C
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/aef0ced3/cssbin/www-main-desktop-home-page-skeleton.css
Preview:	#home-page-skeleton{position:relative;z-index:0;pointer-events:none;min-width:0;width:100%;opacity:1;margin:56px 0 0;display:-webkit-box;display:-webkit-flex;display:flex;-webkit-box-orient:horizontal;-webkit-box-direction:normal;-webkit-flex-direction:row;flex-direction:row}#home-page-skeleton.hidden:not(.layered){opacity:0}#guide-skeleton{display:none;background-color:#fff;width:240px;-webkit-flex-shrink:0;flex-shrink:0;-webkit-box-orient:vertical;-webkit-box-direction:normal;-webkit-flex-direction:column;flex-direction:column}#guide-skeleton.collapsed{width:72px}#guide-skeleton .guide-item-ghost{padding:10px;width:100%}#guide-skeleton .guide-ghost{padding:10px 30px;display:-webkit-box;display:-webkit-flex;display:flex}#guide-skeleton .guide-ghost-icon{height:40px;width:40px;min-width:40px;margin-right:15px;border-radius:50%;background-color:hsl(0,0%,100%)}#guide-skeleton .guide-ghost-text{height:36px;width:100%;border-radius:8px;background-color:hsl(0,0%,100%)}@media (min-width:792p

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (855)
Category:	downloaded
Size (bytes):	534860
Entropy (8bit):	5.706034030348218
Encrypted:	false
SSDEEP:	6144:wwEiDOrwHRo6Zo/S+d6yetdYQ7eTlMXWwcqW61L+KUEIPw6jHS8NR0bXbFujbvjX:w2i6Zo/SQKDWTlMXllIsIPw6jUbyrIi
MD5:	4668E74B2B2A58381399E91A61B6D63D
SHA1:	89EBF54E996E46F4B1E26F6DCDA93BAD74FC0A1C
SHA-256:	B0E3ACC54460721385D2E472DDA7288382F2766A06B38D2E732D034619F9B929
SHA-512:	B2EAD3410DEA89B658BFB0CE67842569641CD6C29889ECFB223A83637600B82B0D2E55CEC26750593359663A22896F5DA91D3DF9F085C204803CD646A7CABC28
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/joHA60MeME-PNviL59xVH9zs/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	8816
Entropy (8bit):	5.436678491959421
Encrypted:	false
SSDEEP:	192:ylNOClN1lNzlN33nlNLlNjAlNOkNfCkNRkN+kN23nkN6kN+AkNIPNKCPNBPNXPNH:yLOCL1LzLnnLLLsLOifCiRi+iEni6i5d
MD5:	AE497D5B41E511A0C483D361F08C36A4
SHA1:	0ECCD2799595112C5B8169CC3370A2F0E384C028
SHA-256:	C05133DA71148E748CBFB62FBE60097B7FF257B76B0369CAFBB7F0C1C5C2F13B
SHA-512:	7316310406CAC1A179E3DE13AFFBA49FBE9B0B1A217A71AB1B6D7AB6287909E80010D4221209E526D939309C0CD21D7DDE7A1FF4E84D4ED146EE005FA0F672D5
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Roboto:300italic,400italic,500italic,700italic"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc3CsTKlA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc-CsTKlA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc2CsTKlA.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc5CsTKlA.woff2) format('woff2');.

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 312 x 200, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	21306
Entropy (8bit):	7.984253057026201
Encrypted:	false
SSDEEP:	384:KYo+7sitixxLBqKOxKsD1BPe8zZXUMxqSoDeZ54AR7eH7oaNNa6n:KYoysitiHLBq8WTtXnz9K47iNb
MD5:	C1164AB65FF7E42ADB16975E59216B06
SHA1:	AC7204EFFB50D0B350B1E362778460515F113ECC
SHA-256:	D7928D8F5536D503EB37C541B5CE813941694B71B0EB550250C7E4CBCB1BABBB
SHA-512:	1F84A9D9D51AC92E8FB66B54D103986E5C8A1CA03F52A7D8CDF21B77EB9F466568B33821530E80366CE95900B20816E14A767B73043A0019DE4A2F1A4FFD1509
Malicious:	false
Reputation:	low
URL:	https://www.facebook.com/images/cookies/cookie_info_card_image_2.png
Preview:	.PNG........IHDR...8...........j...S.IDATx^....0..A......:.J..&..Ep.:...'...i;..Y....B................* T.* T@. T@. T@..PA..P...P....y.i.M...}.l.a}...cV..b.....y..bZ.S....]..u......>.W.......4..q.G.F..yH.QY`..Pw..\. .P[.<\|...:.N....u..V&...v.O...H....9.\..p...}.....k.T.D...-...V....U}..GcI......yg..^....B...S..oJ.y..L5....&.....}Ny..?3....12pg'...N....#.....0Y./%6...`.q..TH.&"~..'.y..Y..Dl...............ax`].u.U...."c..........)...}kH......Q.g.6.Z..L..RI..bf[.P...S..DsA..H......Yo......`......q..].i..............(..*..\|f.-S.....$mbx\.<Z...@..Q@.].L.&Z..}=uf5.2.Tl.q.h.W5.D.o%k\.z....q.......+..M.u?.`S.v..T.T...@a...n...-H.+.....O;.+.Hk1...9.x.WJ..Q...e.(L..3e.....T...-3^.H....v........rf...`.x..R+...$....o.<.y..t...'7o.ug.......o.z.w.../?\.4...\....@.8...9.8.(..3.;.3;;..]^.,.......H.....R-Qk#b...j0%..hJcc.XC.\|..Z[IK]TL.hi.Z.m}..kP.V..?w..o..O...r....e..?..{..w3...AC@.....~............df...}......9.......T_.'5..NJ.$.'

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	dropped
Size (bytes):	8731
Entropy (8bit):	7.910747977215189
Encrypted:	false
SSDEEP:	192:3dDIZykLxNXTlqFuGOu7kUrGD8VJb0v+JVr/et:toykLxNXjGO9UrGD8VxySVc
MD5:	DC143E549B43E2B36297040CFFCEBD2E
SHA1:	199C5454FE3D559F50161B70E4D02DACBEBC5E56
SHA-256:	F2D3462BD9E75956C8E12B614BED5382480C6AB50653392141296333566ED635
SHA-512:	A1F898F285F45B71B4FDA0EC48EA8A2BDDD876CECBDA9514D43BD3CFFFFC84F76BE748F82F0CCE8618B48906A1BDAD2447565D20843050138EBC1478A6DE0E08
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a7001000079030000430700003808000086090000f50e00000d1500008d150000b3160000391800001b220000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."..............................................................................q..<..D.?......f.E_..x.._...%[p..tgL....s1.N.'cW#.,..=..]..6......./...sR.u.t....WnT...q.x.....D7.gF.99.2...kr....i2.....%.5N..21k.Iq.........SB.g.}.d.-.)eh.....l...JKZ.....)AF..n.....-..e.y...z.n..yz~y.L.6..W6.Z.....S...Q.T..=.../Nf5...[.])..e B.c...h#./.&n\|..z...0[.......}.a..._R.X.._....3...7~.;....5..@...X..4.H.lZ6...S.......A...J.....RG.W.}F=.T...-IG.z7.9.....7>e..X5NMk.B$tf..Z..^....z>....{.-.^Wk........C.S\|...<...t.....)............................!A."#1. 23@...........=....].&.H....a5.c...Dv$A;.:.\W...?wJN+..p.5?....7j.E..a...."...M.yj..J......="..[Z...4..M...

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	652
Entropy (8bit):	6.313297232449613
Encrypted:	false
SSDEEP:	12:6v/7DBhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhE:shhhhhhhhhhhhhhhhhhhhhhhhhhhhhhi
MD5:	5475C619210FEF062D0881C3532F5485
SHA1:	A0F48F20F0415A0B59B1F5183F78763759C63E40
SHA-256:	4156065A8A70E9DA5684B34872865EB1BE18F75859603FDAA1D3A6AA8D6B7E2F
SHA-512:	6D95016051B5D431BEA82E4C180268C8809997E58F95554EF56DB5FEE734003CFE750CA3236F8754525969B3602A479E05BFFB8B9463E2651DF3B9723A99FB61
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...$...$.......h.....PLTELiq_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs..jq...HtRNS...x.......b.L...,.0Z...m..1.........[<.y.d..}......Q...$+..-.M......-{."....IDATx^..gS.P...C.F.HHC.....^..."!F.sW....... ..>... .:e),........d..E..S....)..q....b~.5........VD..0o.h....F&:.H....X...N...2.....o..v..U;o...8v....>75.>.....Y..l..NL.AZ.}....b..jfV[.....U....dzgP...w.M....Q.j...U....L2.{.(....x.7.Y\.D.....?{.R...>..fq.`*..E.J,.z..\|...t.t.......IEND.B`.

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	154
Entropy (8bit):	4.827221770489101
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHTdEBhHIHWlYqY:tI9mc4slhohC/vmI45EBho+u
MD5:	FFFE8FD3C6ACCC2FCFDD7B66EA25B99A
SHA1:	13C31200084CB1EED7A746428D2B79AD34FF6790
SHA-256:	55A060294343CAFA3539424536540547F25EFD13A1D2373D7A5E966CE74C5699
SHA-512:	A6D8EB0393B4FB56D4B6025865F542B29AFEFAF7BB2B26E55C5B54974EB3B913E9A17AD54A8FE33525345AF3AD16EC60C06356582F72B3864731EC22C1838662
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="m9.4 18.4-.7-.7 5.6-5.6-5.7-5.7.7-.7 6.4 6.4-6.3 6.3z"/></svg>

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	12399
Entropy (8bit):	5.04897743893645
Encrypted:	false
SSDEEP:	192:kHdQ6BP/i4GAY/+QEmGbTM0U3Z0w/V+xH:k+6BnYemeYrZ/V+N
MD5:	48625F4127086C12C9DB05064A6BAB03
SHA1:	25FB09D9048D67C7E0CDC6C02BE8F34140A35082
SHA-256:	F6A3220F393767077637471193F95BBDE06A0928B0FE5FDA70A0AA01CD2CB7B0
SHA-512:	C3DA20D49FC76D47DF892F531090459F58BBA3B68FF901756667F924575C8FFB5058BA215B2FB0CD979A0500F0C7C1E860C052646CE0C4170B2A72FACE50C96C
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S/content/common/css/flags.css
Preview:	/. World Flags. ---------------------. @desc: Css Sprite World Flags. @author: Alan Museljic. @twitter: https://www.twitter.com/_uloga. @source: http://www.decorator.io/worldflags. @copyright: Alan Museljic. @licence: MIT.\--------------------------------------------/../* flags 32x32 /.[class^="f32_"],.[class=" f32_"] {. background: url("flags32.png") no-repeat 0 0 transparent; . width: 32px;. height: 22px;. line-height: 26px;. vertical-align: middle;. display: inline-block;.}..f32_abkhazia{background-position:0px -6px}..f32_afghanistan{background-position:0px -38px}..f32_aland{background-position:0px -70px}..f32_albania{background-position:0px -102px}..f32_algeria{background-position:0px -134px}..f32_american_samoa{background-position:0px -166px}..f32_andorra{background-position:0px -198px}..f32_angola{background-position:0px -230px}..f32_anguilla{background-position:0px -262px}..f32_antigua_and_barbuda{background-position:0px -294px}..f32_argentina{backg

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	372
Entropy (8bit):	4.852483300837517
Encrypted:	false
SSDEEP:	6:tI9mc4slhohgqWHiA4vmI4lAwuQgQIVY6Wqx5Xt6M0TRcmQTIfyuETUrNmraXnPZ:t4noOAvmRHnIq6JmM0T7QobETUrsOpka
MD5:	388308EEFFE6F910D8A30CA28F6A4306
SHA1:	864144A8145338E37C1DEF12177A02EECBABA4A2
SHA-256:	A78851FF5ED5AB0CB2DE879F608214C4C33BC41841F279B1F622835407AEA643
SHA-512:	460C26A65AB98BAD2574A5A3405CBFEC71465544632887C388E982E84EBEC2E45F21D703767783199186C51A2998965EAB3A66F5ECD4753E26D6B257ECDAD0DD
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/fashion/v2/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" style="enable-background:new 0 0 24 24;" viewBox="0 0 24 24" width="24"><path d="M12.5 6.44v-.5C13.36 5.71 14 4.93 14 4c0-1.1-.9-2-2-2s-2 .9-2 2h1c0-.55.45-1 1-1s1 .45 1 1-.45 1-1 1h-.5v1.44L4 13h2v6h1v2h1v-2h2v3h1v-3h2v2h1v-2h1v-3h3v-3h2l-7.5-6.56zM6.66 12 12 7.33 17.34 12H6.66zM14 18H7v-5h7v5zm1-3v-2h2v2h-2z"/></svg>

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	651
Entropy (8bit):	4.46155201399217
Encrypted:	false
SSDEEP:	12:t47N9U/vmnqMViiuJJsUG0aLn+djONWQismTRIaZmU5SuX6RfM3FLvTkwWEarekr:t4jU/vns0aLn+djqWQismiaZ5SuKNMFo
MD5:	C34B523D2E0170B739016B744ECD8132
SHA1:	F7CA671F70271C053516306DF1820618C279E657
SHA-256:	55C9BBA2243E3B97567B36A6F9C888A52805E5B6C391168C892D5D024BC01266
SHA-512:	01AE29522C00F9761ECE2399306313A85BB5E65797011BAFFC40BBA54540B718F423F5707A67EB16B43B78EFFE1D40906B4E422D1AF7FCE8BBC0C32A8F9BAF46
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/radar_live/v6/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><g><path d="M14 12c0 1.1-.9 2-2 2s-2-.9-2-2 .9-2 2-2 2 .9 2 2zM8.48 8.45l-.71-.7C6.68 8.83 6 10.34 6 12s.68 3.17 1.77 4.25l.71-.71C7.57 14.64 7 13.39 7 12s.57-2.64 1.48-3.55zm7.75-.7-.71.71c.91.9 1.48 2.15 1.48 3.54s-.57 2.64-1.48 3.55l.71.71C17.32 15.17 18 13.66 18 12s-.68-3.17-1.77-4.25zM5.65 5.63l-.7-.71C3.13 6.73 2 9.24 2 12s1.13 5.27 2.95 7.08l.71-.71C4.02 16.74 3 14.49 3 12s1.02-4.74 2.65-6.37zm13.4-.71-.71.71C19.98 7.26 21 9.51 21 12s-1.02 4.74-2.65 6.37l.71.71C20.87 17.27 22 14.76 22 12s-1.13-5.27-2.95-7.08z"/></g></svg>

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, Apple iTunes ALAC/AAC-LC (.M4A) Audio
Category:	downloaded
Size (bytes):	6167
Entropy (8bit):	4.4514990753759855
Encrypted:	false
SSDEEP:	48:3ZCiNo0UQX1uXwGtjvjvDd3ti/F/0nP7/vEcKhirGGb7m/8sDM4UF9YX:Ai6nQX1uXZjvjLzGF8Pzv4E71EM4UP6
MD5:	81DFE7BB0CBBBC7468DDE13D3F649273
SHA1:	457BDF6F22B4C51255FBB5F198CA610B1037A932
SHA-256:	3B1F3E116BB9E9FBDD0D1643D703CAA562E235EBC0B814214A83C23B8CC271D6
SHA-512:	5BC6D25943EAE352363ED0123B9B178790AE2834A25178DA68603DC60E98FA531EA5148A2D93403A09829E0B387BC7E80A53CF8151CCB372A1386A1857F5F118
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/search/audio/open.mp3:2f77e58916cb6f:0
Preview:	... ftypM4A ....M4A mp42isom.......gmoov...lmvhd.............D..8.................................................@...................................trak...\tkhd....................8.................................................@...............mdia... mdhd.............D..8.U......"hdlr........soun.................?minf....smhd...........$dinf....dref............url ........stbl...gstsd...........Wmp4a.........................D.....3esds........"........@.............................stts....................stsc.......................Lstsz...................................i...................z...w...m...M....stco................udta....meta......."hdlr........mdirappl.............rilst...!.nam....data........speak_now....cpil....data.............pgap....data.............tmpo....data.............(.too... data........iTunes 12.3.1.23....----....mean....com.apple.iTunes....name....iTunSMPB....data........ 00000000 00000840 00000151 0000000000002E6F 00000000 00000000 00000000 0000

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	274
Entropy (8bit):	5.064374319451513
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4LyS7NHTZORTIhRJUTT6kg2AfI1NIfdAf7:t47N9U/vmRLy2NHTsYffLV6
MD5:	A2ACF270DAF56F6484C50C1F74C5B676
SHA1:	BD3B6DB51B936C0D49E293CB482CC2839A0D7D94
SHA-256:	DB8400A38C08118E2FD10E60F84A2B4DE09A64721A665E23C37E03F092F41F94
SHA-512:	6C94E190FA493AF676930E76713C5511FAD174C62506C7988072044C217ACC83847E8BCB4CC873A8B2B29D7B9FCB90CFE48336FB2450CFD7AE34C4F9C02A6CD8
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M11 11v6H7v-6h4m1-1H6v8h6v-8zM3 3.03V21h14l4-4V3.03M20 4v11.99l-.01.01H16v3.99l-.01.01H4V4h16zm-2 4H6V6h12v2zm0 7h-5v-2h5v2zm0-3h-5v-2h5v2z"/></svg>

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 320 x 180, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	16298
Entropy (8bit):	7.960955584384471
Encrypted:	false
SSDEEP:	192:Q4sId3ZrvNPAMjYWWv3cSfqsvCwDM/MD3YVmtViIl+ZWGnuavE3m0GV/2XHx/sTI:QkZDljCMW5D5DNtUnuIE3mx9axwFg
MD5:	6E89FB6348582B07539CA1F506937313
SHA1:	FE2887757A521C180F270F842054BC8EA0E96F43
SHA-256:	199DA1E7D4470EFAA1E5ED6004A85C67DE39682589576B72A47FA0FFA12127F5
SHA-512:	DA2453AF6D22E65F1C776F3D1C8F544A54F199F26DCC9C65894618443073A1A3A4176186045821FD70BDB2B41762BC4EA1C2DF6B5D6B0B71C88248F8D957745E
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/425750146_2620197854795727_7515684929751906463_n.png?stp=dst-png_fb50_s320x320&_nc_cat=100&ccb=1-7&_nc_sid=5f2048&_nc_ohc=PwxMdBd-3KAQ7kNvgF1bFWB&_nc_ht=scontent-hou1-1.xx&oh=00_AYD4FOtaPH_yCdXoiMwmmy7o9ZJ5BqsldvtGtjHLYpPk3A&oe=66583270
Preview:	.PNG........IHDR...@.........j.bF....sRGB...,... .IDATx.....,.5._....c..N....I!.....U..5m...!0Y......../RJ...z\.O...Z....t..\|.J.7.5+.J..U4.(..........[q 2d.E..`..!....kx.7....@[;..5F.q..a....Z.x..V..-.....O........u...Z}.FLH..z^.uW.......:^\|..W..hL......o.No.P....U....\|.8.}.........z.(..'...Q..o..+...&d...x....O).Cr.....c.pF.f......W?.(o.K0.F.;&..R..%<.s=q^...2....O.?'..}"..............=.o...]....z....-..."..'.K...........?.....?.._,....?..r{.\|..o".d.:...ty.....F....MN.....d.\.<r"......o>.j5%.}?.o.;.?.....;k..!~k%.Y/..;........f.x!...'......t....56..SEd:1....v.<..\|.6E<..v.K.t.....5u..[....u...s..<+~(.e[h.m1<J...aM.kx../.yA.......d@Nx...Hh....yYni.L.V...nS.}...8Z..Dn...#H.=t.[ X~:...J...xhu..3...=...2.i..d!...m?0.f.m........P.T.y.u.....)..+W,..v.>*.B..ZJ.U.q..>........C.,.L_.H..q.a..V.[2R\|.6.D"..d..E+(.&.).Op..!..M.....1.......+.n.....C.+./.....@.`.........]=N...W......Bn..&.NHOe`/.....F.{s`k.yb.....[.63..Q..E.Sd.[sqo_wGs<$.\|.OiY.M.F.%

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (715)
Category:	downloaded
Size (bytes):	50702
Entropy (8bit):	5.373070303650078
Encrypted:	false
SSDEEP:	1536:Ifd/sRuiALPAavkj70bI5D4nDltOC2B7F:IfdURZGvkjob44J8F
MD5:	44CA3D8FD5FF91ED90D1A2AB099EF91E
SHA1:	79B76340CA0781FD98AA5B8FDCA9496665810195
SHA-256:	C12E3AC9660AE5DE2D775A8C52E22610FFF7A651FA069CFA8F64675A7B0A6415
SHA-512:	A5CE9D846FB4C43A078D364974B22C18A504CDBF2DA3D36C689D450A5DC7D0BE156A29E11DF301FF7E187B831E14A6E5B037AAD22F00C03280EE1AD1E829DAC8
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/aef0ced3/jsbin/web-animations-next-lite.min.vflset/web-animations-next-lite.min.js
Preview:	/*.. Copyright 2014 Google Inc. All rights reserved... Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at.. http://www.apache.org/licenses/LICENSE-2.0.. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. See the License for the specific language governing permissions and. limitations under the License... Copyright 2016 Google Inc. All rights reserved... Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at.. http://www.apache.org/licenses/LICENSE-2.0.. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,.

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65485)
Category:	downloaded
Size (bytes):	238768
Entropy (8bit):	5.261536814621295
Encrypted:	false
SSDEEP:	3072:GXRA6i/shjQTSbrPJcVuR1jfaQMfd0kukX:YAApbrRh1jfaNNX
MD5:	68A51CA1CFBA13DC51B5023D52707EBC
SHA1:	EEEBF5CA888466609DE72215A42CC7E938ECBDEB
SHA-256:	4CCB60F12F2D354DB57866CA84F3D59D17A996924675129B3EB725CA69903FBA
SHA-512:	75DEE2A12D0AF28783466EA8ADDE28F233768CE33152073E857B3DD50615E40C6D503DB8ADB89E988D104260202562F7D36CE0255847AE81FCF58B1C8F6E7065
Malicious:	false
Reputation:	low
URL:	https://dl.dir.freefiremobile.com/common/web_event/official2/dist/client/b379205.js
Preview:	/! For license information please see LICENSES /.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[4],[,,function(t,e,n){"use strict";n.r(e),function(t,n){var r=Object.freeze({});function o(t){return null==t}function i(t){return null!=t}function a(t){return!0===t}function s(t){return"string"==typeof t\|\|"number"==typeof t\|\|"symbol"==typeof t\|\|"boolean"==typeof t}function u(t){return null!==t&&"object"==typeof t}var c=Object.prototype.toString;function f(t){return"[object Object]"===c.call(t)}function l(t){return"[object RegExp]"===c.call(t)}function p(t){var e=parseFloat(String(t));return e>=0&&Math.floor(e)===e&&isFinite(t)}function h(t){return i(t)&&"function"==typeof t.then&&"function"==typeof t.catch}function d(t){return null==t?"":Array.isArray(t)\|\|f(t)&&t.toString===c?JSON.stringify(t,null,2):String(t)}function v(t){var e=parseFloat(t);return isNaN(e)?t:e}function y(t,e){for(var n=Object.create(null),r=t.split(","),o=0;o<r.length;o++)n[r[o]]=!0;return e?function(t){return n[t

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4678
Entropy (8bit):	7.625796542792964
Encrypted:	false
SSDEEP:	96:2S+YkknmWIM8DAQ/4K5HA52HAUmVg+Sb/gVtuUoshVlKj/WV56aQgZKxQ9XNcy4+:2SvkkndEAs5g52gOD2BhVlKTWV56aQTO
MD5:	A91BE2E400B7F0DC66247427DFAFFCF3
SHA1:	900E87486AA051659E114EB5B7A2980D75E7889A
SHA-256:	62437412556A804293516DF99C0970427549B1A50258462035410072F96DD093
SHA-512:	02EBFD5194BAE38C8004CBF0979623AD507C51D89503BDD8A0C6F1CD2017F78DE09FFF347AD0FBDA4EC5675ED85737635E2C1ED6654DD31FE9743BAE74721070
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...$...$.............pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)" xmp:CreateDate="2020-02-25T08:48:52+07:00" xmp:ModifyDate="2020-04-24T11:34:50+07:00" xmp:MetadataDate="2020-04-24T11:34:50+07:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:5b6140fd-7afe-4ff5-b896-3897658f047b" xmpMM:DocumentID="adobe:docid:photoshop:041b76a2-5872-7047-bec1-0c7762148

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	dropped
Size (bytes):	8884
Entropy (8bit):	7.919365832758128
Encrypted:	false
SSDEEP:	192:WWzz+5p+Mexga+yBf+XMrYFd+KWXA8nW+pd5HvntbhQ0q4fZbn:xzz+5ReYMLYaKWXV/dRFXffBn
MD5:	E729132C9AFBCC4F77C554D64881FEC9
SHA1:	C4A109BC2C0447FD0599B51233F00FDDFA47CE57
SHA-256:	586AEF58BCD9B8C9F68795C7A3ACF461F233F2377E011E15844D600F2C6EA5E8
SHA-512:	EE90B2E9D16A8EBB5393D8BD42FD6695F8A0321EDB007D7ED958E3AA8AA7A18326C10E6F28E692FC557742CADE6004E6D0DFCEAE8496B6DCF75427E507E3994E
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a72010000950300003f07000032080000380a0000db0f0000dc1500005e160000651700005f190000b4220000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".................................................................................+...<.f....\|H..a..A..l.h4.3..\|.SD.41..rT...Z..%...?.~......g...>;Z..yIUR.-..y.S..&...d...r=`s......W.l...2...C.^Mf.....$..o...G...Y...O..pr...)>...=.;P...C....-.X40..m3;<....6.....W.x..-.:...8)P..:d.......S..wd.......l...d\.6..3....I...^.XN.JI6.t.... .J..}....7.M..IUe..rsV{.IwF}/<....zwPg+P...Ok.....PE.C.Wyj5:..sI.G0'.......-..,..c.Mw.....w.d..%F.M,k%x=...j.y.3.j5wU..y..d....p.H..E$g../..qR<....A:y..4.d......,.......I.....)...'gy.&I'..%([......,....M..................................... !.1235"#$@............k.....d}...d.f.P>..k..K>%.N.3..sU.`/....GQ#.u-..R..t.Hd.%B..;.i.

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1430)
Category:	downloaded
Size (bytes):	281842
Entropy (8bit):	5.634355759368581
Encrypted:	false
SSDEEP:	3072:zQEXpDi2Mf/A94R6hU8aX4nvw1SZklh4ZIRt/qH6+nSCZTC2xFwg5o:8Oe+SFonw4GRt/qHfZTjxFwX
MD5:	D633E025F055835A5D889E94546FEB60
SHA1:	D29D3F017E150EB04256019689476FD61E3929D2
SHA-256:	FF75B92EE19DABE71067F5CF7379C3FABFD3EC994CF345E0C58FC9068B874FE1
SHA-512:	7D3551AACF26CA697D65174B1646A3E947367EB5DAF08E7BE89A5D252FEA7A599C9EB8861DBB5260A18D3E837E3B2E5D9A03FD071231B48A1132743A5381B4F6
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/aef0ced3/jsbin/www-searchbox.vflset/www-searchbox.js
Preview:	(function(){'use strict';var n;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var ea=da(this);function v(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.v("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,g){this.g=f;ba(this,"description",{configurable:!0,writable:!0,va

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	328
Entropy (8bit):	4.751341136067324
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4TnMvnY0eLZ72LYMF5fcX1FCG/hd9qCWz:t47N9U/vmRjMvQZ7Bcpc/FqCu
MD5:	DB10DFA9A782446C2C69099E4CBEBDFF
SHA1:	92B57DC3DD3C747BEB1B8EB98D1CBC3D6AE9B7D4
SHA-256:	A6BDEE4CE3188A10940EDC0B870B2898CA2E4311836712341546E3CDD08E3971
SHA-512:	96499DB26CF175255484317AFC93B2CC96A5D18E235FC67B9ACBBB3E00B46B3A7E1E6C551764EEBB0A48856FFC2DB5DCA1EFFE478BB417B581E89D435A70449B
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="m21.24 19.83-5.64-5.64c.88-1.17 1.4-2.62 1.4-4.19 0-3.87-3.13-7-7-7s-7 3.13-7 7 3.13 7 7 7c1.57 0 3.02-.52 4.19-1.4l5.64 5.64 1.41-1.41zM5 10c0-2.76 2.24-5 5-5s5 2.24 5 5-2.24 5-5 5-5-2.24-5-5z"/></svg>

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1896
Entropy (8bit):	4.771789825131115
Encrypted:	false
SSDEEP:	24:nsa6gCcxOcJmpsRhnCX4XCI6/0Z3GVo4AbhI6jhX3cq0sZgYlgC/q33S0Cn:s9R0RhCX4XnBGS4Am+9NOaH
MD5:	50598266588BA7C9CC6DC4C00B996AEA
SHA1:	3FB5DCFD7A9D5147B8E58DD710F7610EA51AF417
SHA-256:	72FFA88CADBBB6F52F543EFA2F89739A4C1E8E8C66DD29A19439AE9A9266C411
SHA-512:	7DD3135EC25B87F644981638AEDF42E52CA81A6FB5BDC427230B4C99C19C1D3F213828FD3FB681562996E18B0FA28BA01623463B5C55F2DB87C51FA6830F9AAC
Malicious:	false
Reputation:	low
URL:	https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/css/twitter.css
Preview:	.header-twitter {.. background: #fff;.. width: 100%;.. font-size: 25px;.. font-weight: bold;.. text-align: left;.. position: relative;.. border-radius: 10px;.. margin-top: 20px;..}...header-twitter img {.. margin-top: 20px;.. width: 55;..}...box-twitter {.. width: 100%;.. height: 400px;.. position: absolute;.. overflow: none;.. font-size: 15px;.. font-family: sans-serif;.. border-radius: 10px;..}...txt-login-twitter {.. color: #000;.. font-size: 20px;.. font-weight: bold;.. font-family: arial, sans-serif;.. margin-top: 3%;.. margin-bottom: 5%;..}...input-box-twitter {.. background: #ffffff;...width: 90%;...height: 40px;...margin-top: 30px;...padding: 10px;.. padding-top: 5px;.. padding-bottom: 5px;...font-size: 12px;...font-family: arial, sans-serif;...text-align: left;...position: relative;...border: 1px solid #d3d3d3;...border-radius: 5px;...outline: none;...z-index: 2;..}.....input-box-twitter input {...ba

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	474
Entropy (8bit):	4.7449073607550805
Encrypted:	false
SSDEEP:	12:t47N9U/vmRGLHuojuMUMU2lX9KuMUMU2lZzrvCJig/I3n8:t4jU/vjtuM5JlX9KuM5JlZ/qwX38
MD5:	CF92CBEE09BC23E2B2EAE3EF6A9DFF40
SHA1:	E9EEB3AE2294064FD7B0A5026B5AE02A6564C9AD
SHA-256:	60FC606F480F263CDC9CF180089D42E4A070395B47D0331E7C869A9F6FD2208A
SHA-512:	EF4944E4E9FE78DD00D379EE192FEF915BC3AA45E6029AC21CA858C5C8D65EBDFA70F78CF87F00A623D311CC3ABF453CFD5DFFEC442F1A87EAE23E548DF92295
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/gaming/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M10 12H8v2H6v-2H4v-2h2V8h2v2h2v2zm7 .5c0-.83-.67-1.5-1.5-1.5s-1.5.67-1.5 1.5.67 1.5 1.5 1.5 1.5-.67 1.5-1.5zm3-3c0-.83-.67-1.5-1.5-1.5S17 8.67 17 9.5s.67 1.5 1.5 1.5 1.5-.67 1.5-1.5zm-3.03-4.35-4.5 2.53-.49.27-.49-.27-4.5-2.53L3 7.39v6.43l8.98 5.04 8.98-5.04V7.39l-3.99-2.24m0-1.15 4.99 2.8v7.6L11.98 20 2 14.4V6.8L6.99 4l4.99 2.8L16.97 4z"/></svg>

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	211
Entropy (8bit):	5.119467255389257
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI42IBIAFzKVN/YWAIQfgZi:t47N9U/vmR2I+jVyIKg8
MD5:	914B3584E764344B898D1431747A8A4C
SHA1:	C870050A1AEB28C22867785E93A304794375FCD2
SHA-256:	B9E9D5F5F7AF96C4272B4ECE21F8B568F8B03D70D6ABA3DEBA5F823E81796F15
SHA-512:	A8040E77D002823D9D190822C23A4619052CAB4DB0E18658ED62DD50254E96ECB47A7D0F776977F404D60DF839AFD447A5061B564CC8DBA4A0F6A1B47BA5D2AA
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/trash_can/v5/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M11 17H9V8h2v9zm4-9h-2v9h2V8zm4-4v1h-1v16H6V5H5V4h4V3h6v1h4zm-2 1H7v15h10V5z"/></svg>

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2213)
Category:	downloaded
Size (bytes):	14949
Entropy (8bit):	5.445396459734832
Encrypted:	false
SSDEEP:	192:ZlS0Ew0EsYGWLoJo2QFKfnuRBwgm8g0S94dMJ9jH5f/GfAg8NI:jfxLWzQFK/mWg7g0XE3g
MD5:	A36F25447B3D55D31FDFDC30FA31C3F6
SHA1:	81154E36FDDA94A482FB7F079EF683FA3AF68F1B
SHA-256:	1432216F926190D39C5E9B17F38A4E075C692650EDDB3DF32E2A55D6B3EB6F9F
SHA-512:	2B396C5F278953DFB1FFA324E35150CD375218CC993510FC1643DF68847D7D951EFE2208423FD8F467A46F4B14FD8B3D7AF06C7D24AB8F1753789CFC920587FE
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/aef0ced3/jsbin/network.vflset/network.js
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var l="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof n&&n];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var p=ba(this);function r(a,b){if(b)a:{var c=p;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&l(c,a,{configurable:!0,writable:!0,value:b})}}.r("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,h){this.g=f;l(this,"description",{configurable:!0,writable:!0,value:h})}if(a)return a;c.prototype.toS

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	27
Entropy (8bit):	4.3845171317931
Encrypted:	false
SSDEEP:	3:8jEMEN/QC1l:8jMN/QCv
MD5:	F7C8AABF963C3A65DBBA34ACB7D29035
SHA1:	017BC86726314E2DCA0DFC315F4C48463B0446AB
SHA-256:	8E000614947BCED11DCF2C4A0B33E9BE12142555D9196563A93241CB447F64E3
SHA-512:	F65673F68887A3FA20E4A40EE8DE3F08DAE22299C0F76DB126D4D5E72C43A4666955D5D691A45119B46D26B888F81A45E10E13B1F77E7BEF883EA10A938567DB
Malicious:	false
Reputation:	low
Preview:	,...sabr.malformed_config..

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	389
Entropy (8bit):	7.110565365189101
Encrypted:	false
SSDEEP:	12:6v/7uaXSuonrFqLkXkCCQIU1uuowAc9VO7hmc:EknPjm0VWQc
MD5:	B695CF60B429FD57527D94710C58CFCC
SHA1:	A0B370FB358812393B71DF32845155E796AB1245
SHA-256:	803B77A3751F725B4793DF4F27EA292F2C97129F9CBFC57DA997C4459618AD00
SHA-512:	3E19FDF50B36300F7B4AA8232BE5BA1EC36967D4C86FB47C6D491484613550303C88553FDD14D307C7FFC67F7CF31FDF73347EF3A5420F63EBA04CE72FBFC1F1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S...uPLTEGpL.....................................................................................\|..............6.......tRNS......W...4.a..u.......S.*r........IDATx.EH...A.....1m...+LU...n?..~..q.av.Z.....C.....0..z..........%.q.K..w&..&...'.'4.o.O.:..Kw...z.....4....9.d..i.....\......5M.....tV......m..._.....+.......d.7.....IEND.B`.

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	252
Entropy (8bit):	4.749518607468393
Encrypted:	false
SSDEEP:	6:tI9mc4slmKkmPUtlXX5xiUSdztsG4J5GXyAajYUNrLVKLbrwPtOTC:t4IrmPoXXmUSBaYaj/rL8LvE
MD5:	F8F3636F756E2E0E0892FD9E35174490
SHA1:	6C735659FF64B530A9DA358FEFBF75CB6B14B300
SHA-256:	2634B0DB38CF06C1261C115FD4B5D56177988D8F4E0CD2597A23EF7A44A94D37
SHA-512:	47834E3B35CE2C0B1315E637F81AD7996E738C429AFA4E9FBFAC2BD08C26097381F3353F746923FEA16B045117AC4C615726203063CFB8654E7D4C19A273BB52
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_fill/volume-up/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path d="M3 9v6h4l5 5V4L7 9H3zm13.5 3c0-1.77-1.02-3.29-2.5-4.03v8.05c1.48-.73 2.5-2.25 2.5-4.02zM14 3.23v2.06c2.89.86 5 3.54 5 6.71s-2.11 5.85-5 6.71v2.06c4.01-.91 7-4.49 7-8.77s-2.99-7.86-7-8.77z"></path></svg>.

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	630
Entropy (8bit):	7.532732158637134
Encrypted:	false
SSDEEP:	12:6v/7eD9LKWDPVxeUo5k04ILRgPQHl5QJv/XcFEr1t6yfZMlOYjitBH9:XDJKWDBoG0vdnYv/DSflOYoL
MD5:	3E271770E85AE1A48D7670970D5341B7
SHA1:	3EA485452FB598EF7BA64BD5554062BE14F9C3C1
SHA-256:	C74307A8855003A9E42A6BDE652C0AEC383A562C76595F13B2C6D67BAEE7CEFC
SHA-512:	26674642BE604EE43F576464FAC73A1F8ADDF4A7A59148AC89772593C95C57F7CB5D0E389BB07077816DEF3566355DD77E2B6F22B6507471C1AE2B7E80283491
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a...=IDATx.}...&A.....m.m.m.m.\|.m..T....Iz.Ucv.~o8...7.5...............V..O5N..q.f..p.(...9..Cy.;..?Vk..z..4..@.0hA...=.v...<Y../......y..)h).. .c...D....H..brNG....._......B.XQX.-n..gS.ln....-.1=2R....qs....]..N.. ..E......%5.I.....ou4n.95X..#a$n..tf.... .J..Y.<,...U<...."*.D..<.;J..N.}U.K.\|....V..{wy R.............g...............k#....;..R..M.C......i.............Y..EC..K.[T.w.....E......-s..........3;)...q....T--=..(@8.x....&.G.......`...Cjx=..g...TDD'.@...h..t...S..?...q.)..X.Z..-3.Hl.I...<.f.4.u..Qv.,B..B2.\.#...g.d........p.6...w...1r..A+.....IEND.B`.

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 160x160, components 3
Category:	dropped
Size (bytes):	5761
Entropy (8bit):	7.848123920302837
Encrypted:	false
SSDEEP:	96:MuoX3fJsQd4GT7v+6Ej0FpM6u6asBLj3NVRnZgi9kdRAQytL9CMO0XuNTcDmQgTl:/I3d407vjF46LZVRnt9k8TvygDmQWwBy
MD5:	08FE7955A20FA079AE0032E3484F0621
SHA1:	535465B22867610209140DC198056443CB623DD9
SHA-256:	3D3ABA78BABA8C5393ADA893E1C710702D8DD7B9B760AD1193E9CA2A35ED425F
SHA-512:	B41D4312B46BEA66A952168A0CC62438A1464716B33A06EAD22C5CD1AF435275EA9D5DFC06020F3CF74C3B7B602EEB74A69356B92CA8463A4AD584A9319AA18D
Malicious:	false
Reputation:	low
Preview:	......JFIF.....................................................................................................................................................................................................>.............................!1.."A.#2$Qa.34BU....%DRSbqs..................................0.......................1..!A...Qaq..."R..2B..#............?......`...0......`...0......`...0......`...0......`...0......`...0......`...0......`...0........k....t...u.Z..(.k...{..".q-...o........n&...#.P\|Z:z9. ..ZE..!..?.;.Oj9..~dQ...v....Q~.I+.U....w...Z..P..9...........w.?.....s..O..u....}.S.C....... 4......".w............u...W..]I..>...=^.u..Z..m....k....$_F.<[novdiBQ.J....A.0......`...0..............z.h..N..w&.)...+HT.fh...2...$v.M..C.<.u..)K:.....).i .Sc#..P"..w.ee.X.......'./.r..i$.....(......A.....'.*.[.Y.....8%P....D`.....\+2...8.....7h..&.k...`.!:V.b.#-r..;q?5..^.I.P............q.>.6.26.....>#.0.....Z.TQ.a..j...R.........;.T".....)...t.Y..>.

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	315
Entropy (8bit):	4.648861696465887
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4LIPGDQyIlOWLVJ1WnkX2Wtti0+DrTwtDZi:t4noU/vmRLIO8yIlVVuPWI0gTGQ
MD5:	9F40343399D2331A8E5DE01251A1F258
SHA1:	FF3A3A2AB18BAFA30B09E09A083C3699263A10FC
SHA-256:	CB4F6AB460370D669DE4694A4FB0090C3FADBCDB8C395C813A0680C90C29BFF3
SHA-512:	3F888927E6DE57D021AA124C5894CAFB54BEE195047D12AB55FDED7C6444AB14C3CE4F3DCAB9E9D06E785EA82FC7A96BE4EAAB6639BF721FF6F698D8760486ED
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M12 3c-1.66 0-3 1.37-3 3.07v5.86c0 1.7 1.34 3.07 3 3.07s3-1.37 3-3.07V6.07C15 4.37 13.66 3 12 3zm6.5 9h-1c0 3.03-2.47 5.5-5.5 5.5S6.5 15.03 6.5 12h-1c0 3.24 2.39 5.93 5.5 6.41V21h2v-2.59c3.11-.48 5.5-3.17 5.5-6.41z"/></svg>

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x600, components 3
Category:	dropped
Size (bytes):	51859
Entropy (8bit):	7.963127909568731
Encrypted:	false
SSDEEP:	768:pjr0zn587+XuvaSnXyBhdHoy2s5al5D0TqRBt8uhz1a2NGFPjm2UCXyKg:tX7+XJ687Iy2s5i0TpuhlNeTJg
MD5:	43DB132A2E90CF6124D04B87B4C8F8D5
SHA1:	92FE13CC1E6E1D5179CDB86DB4CA9D2E3B470A9D
SHA-256:	6E5353AAE07A9094268F22F96FC1A37BB2545776F9A01474BBE36AADFDF82C33
SHA-512:	C8CC0BAAD7BD42CE552A17DF00E81A7EAF79FE71EBB778FA18C7BA16C6C4588F7CAD632ADE80C3D32D01C9073C8B034A1A6C6CF2A978E4A9ECF48E8466C0BC6A
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a72010000281300007b2c0000252f0000f13d0000f75b0000277e00006f83000019870000fc94000093ca0000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......X.X..".................................................................................h~.................................H.............5}..(.`..@.............&.h`...........-y..P.YsR.{....C........As..f....+...j.....7V..@.........M...$.................R................C40.............D...CQ....@.....g\.5..a..1e9...$...k6.B.......&.h`..........?....S.z.>..}F...e.....g..T...9..f.>f..w...e...u.SG..T...Z8..8..yKu....s}.U..s...[..!....................;...>u.....I.......V.8.....V.V..].....]...'.pty.Z.].wT=....jYq>....M.dW.:.6E/!.Q.....WO.w..k."..........43C......,...sK.[-.qhga.3Y....\|...Qe.I....*.-.L..2.Abj.--:.v..t\.....g.....G..6...7...+7...k.C.[.'...y.zX.c....C..].lm.

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	43036
Entropy (8bit):	5.692113097327789
Encrypted:	false
SSDEEP:	768:tQJ8XUYhYxw/U3/9ovTDPdt415COEWq/3eP0jIpQ:6JbA8w0Sv3ny5RFXQ
MD5:	DF416F45FCFEE5C0944313B56924E267
SHA1:	288CE83AB46CCB429A26F79DAD4BBA9131023E56
SHA-256:	27B101995CD472351BCA908614BF320FE018CD6FA171A979CE37A810E1732D85
SHA-512:	8AB2CBD408BDC38767459757B0CF8BAAFEA7977466E3C0BF51987A40A36D5BAF76C2D4DE79E4A64B0DF92E63482A7A031EE314CF70239397CC784E8986A55A87
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/m1/v/t6/An-epsBkaSJ4n9oYH6L6fSPKlfyvVNR_J7OfeV9-jqOZVx9-Fg73T8WyLTa1e_4iyoSboul40f-XChEvL3RtR-jyPuVfx7Umn4RlQyMS.kf?ccb=10-5&oh=00_AYDqdB8NKAFNHlr2X0MnTEEFymxSu8U_NbtWwX5P5DJS8w&oe=6679CB47&_nc_sid=7da55a
Preview:	...KEYF..(... .............$.......$.......,...t.....4C..4C...@..pB..............................(... .............$.......$.......(.........4C..4C...@..pB..........................................yC..!C.....PNG........IHDR.............2L.8...BPLTE....i..f..i..i..i..h..i..h..i..i..h..h..i..i..i..i..h..i..i..i..i.'.)"....tRNS..........H%/m[~>7.vRd........IDATx...;.. ..Q...X..p..z....j.%.w..............+,At\|..o...q..)].................V.C.....>..[k9+.Rr1./\|.z.}S...Q^....~....U..[.....>...1.\|...i.....1....._..l.M......c..,......,A.i..o.2yH..Uk..^.O.f...../...<.~(.n.y.}s.W...7.....n\|.\.+e.......w....\|.vR...I.U{....3.v}C..u!.B/..4....h\|......'..,.EQ<h...+w.W....q.^@;....K.n..B.G...'...L.......w.O.w.H..k..Rw..v..c..s...BGYN.g.H....^.OFw.n..D.>..k...Aw.+].n.....}.2.W.g.n3..M..,;...;.=e.3..t.*..t..=Y...G.@.gI.x..A.ml.;V...#^..n....=...t....v[..{v../.,...m.h..uw.q..+...I...y..w].m#..~.Tz... .wf..;.....J8. w.~Q......]J......n...w..:..].g.._C.N.1....tGr.wF.....

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 138 x 41, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2799
Entropy (8bit):	7.905325355196512
Encrypted:	false
SSDEEP:	48:SgfMY2/zjj76rXy4/vHkV8h/G82kDCBMSn3jb0CruxGU0cjaex:StY2/Hj7OCtdkD0n8zTvGo
MD5:	CFD0F0CBF8AA1717324F64A438C378C5
SHA1:	DEB76943CF9B96153B36C04C9DE02996857A808B
SHA-256:	6A69DE99192160F4A77667679C5A985BEB0758DD464C162F58E2F89B91D11011
SHA-512:	31A63735BB127554C217E4CC0B811BAA8D83087D64A024CE44D4EBF9741FDF58A9C8D2D1F3105DEA5056CA96EC1B1762AAD73694774E45DAF8BADBED647F62D9
Malicious:	false
Reputation:	low
URL:	https://d1qgcmfii0ptfa.cloudfront.net/S/content/mobile/images/app_store_coda.png
Preview:	.PNG........IHDR.......).......A.....PLTE............FFF...eee++&llb...llb...rrlwwq...............................................................~~}.....~ssr.........pppuuuooonnmmml```]]]``_\\\SSS333@@@......zzz..................................................................'''FFF..................GGG~~~.........$$$...===PPP...............&&&KKKMMM^^^```mmmzzz..........................."""111YYY\\\ccc.................................000EEERRRwww........................%%%)))444sssxxx\|\|\|....................................+++333555777999<<<???@@@AAABBBDDDWWWbbbjjjlllpppqqq...........................!!!---eeefffkkkvvv}}}......................................................;;;JJJOOOUUUiiittt.............................................TTT]]]aaaooouuu.............................................:tRNS....!#+/4LNOWZ`ortwx......................................WI.....mIDATx..u\|#....i...^.).m.h...f.^.......X..%33..p.3.]\|f8ff.1. ..........R_?g.>.}vf...w..{+...y.........~......x-.

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	https://newsklikdisini5bekbg0.3bsz4.xyz/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2106
Entropy (8bit):	7.554456957317547
Encrypted:	false
SSDEEP:	48:EWP8JUaPVKWwCtcHB3sXXRBJ3v8qkZ/aWr/3KZerMLvSOxJ3Df8sfqV1:lkJVKWw03XXZ4Meo931fq
MD5:	6452ED75C53E1A8E90A664DF18959A90
SHA1:	AC01FC2F40F0E4808E22A9C569F3775F0F15A5E2
SHA-256:	C7BAC3E7016DFC7EB5787579BAC6B975B433FC1A9C279DAFC35649D4782F2061
SHA-512:	4B23F7FB31826943CBA6496BD74DC620C8EC3B8F0525497E825F1F1F87486335D4374F85417458C3C3E018C2215B9B419D7DE77CB67AAE9EA619038432E1EB10
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/y0/r/eFZD1KABzRA.png
Preview:	.PNG........IHDR.............e..5...YPLTEGpL.e..e..e..p..e..f..f..h..f..f..`..`.....g..f..f..g..g..f..f..f..g..f..h..e..f..d..g..e..e..c..f..f..e..f..g..g..e..f..f........i..h..e..f..f.....e........e..g..f..f..f..f..f..f..g........f..e..e.......F........................f....F.....d........'y.....p....E.....U..7..t.................6..t...........U.................................p......uy...LtRNS.0`..... ......p..._....@..@..oPP...O.^..__....0.o.o.oO..p.P.P_n. ..@0..P........DIDATx..YS.G..G.]..N...t.6&.$..8v\|.>{.."....m.3...../...X..../.....z..Z...^-."\|GT(T.K..Z..n..z.3..BT..Z....\.)..Y.....)..\XZs%..e../...........:....Z.R...,X...B....VCL......".~)P...@..P..8......YG..<...=..BLs..CX........0..J...I....Z..,....0g...i...B..}6.Eh.$.g.D1.k......... ..WYD....O..b~.~......U..s4..?...d0........x.g7.zF...........9..G.A...~...=#.w0.1Z......K..BV..>....x.p...<LS...ft..(\|...2XDE.Q...yc..$Mu.@.L...R=.X,.H....!.X).j../.-q2.....09.........\...&.bYk........j.o......../.u}..(5!.

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	259
Entropy (8bit):	4.934032927917805
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4K+tlq2LwkzdO+iEuUDXpzBX6RlUFDA:t4noU/vmRxxVzMHUFX4Q0
MD5:	F3AFFCB5D33857F7701EA77BB03026C8
SHA1:	18EEE961EA2690791898EBE6A1BEE7C6DF0DA051
SHA-256:	E3B0DCD76E8387AC87E54B1153DF400D9D5D2079DBA7AFB04AB0A31F8E50B173
SHA-512:	D07A81CD18096FB5C3B6549950EAB68DA45651E1209F1CDF6441CFDE01050C6E5A0FC596A45B761F3D387902DF3F1706BBE7F97DDBBBD11AAEEC83A70D08F3DC
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/trophy/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M18 5V2H6v3H3v6l3.23 1.61c.7 2.5 2.97 4.34 5.69 4.38L8 19v3h8v-3l-3.92-2.01c2.72-.04 4.99-1.88 5.69-4.38L21 11V5h-3zM6 11.38l-2-1V6h2v5.38zm14-1-2 1V6h2v4.38z"/></svg>

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	563
Entropy (8bit):	4.367744360532535
Encrypted:	false
SSDEEP:	12:t4noU/vmRTKd2aCJAzyXDMhkVFCzzZvSbeW03LxgI:t4oU/vo49yXghf5UTI
MD5:	3102D9E6EB6482A42839EFF1E5F4CB83
SHA1:	151E7A7B018C590EFF801936C8B3165E21D1F388
SHA-256:	A79054C0A39DB68BD70F2277EE512312190F32D0CCFB12B2B15A8DC833DA4772
SHA-512:	4131362A77102F48C615E40ECC95599300A239BF339831DA47E85A328929EAAB6AC63B67D64CE6FCBEB120D85865F5415C2188877822861BADCE5B908D206A0B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/person_circle/v8/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm0 1c4.96 0 9 4.04 9 9 0 1.42-.34 2.76-.93 3.96-1.53-1.72-3.98-2.89-7.38-3.03A3.996 3.996 0 0016 9c0-2.21-1.79-4-4-4S8 6.79 8 9c0 1.97 1.43 3.6 3.31 3.93-3.4.14-5.85 1.31-7.38 3.03C3.34 14.76 3 13.42 3 12c0-4.96 4.04-9 9-9zM9 9c0-1.65 1.35-3 3-3s3 1.35 3 3-1.35 3-3 3-3-1.35-3-3zm3 12c-3.16 0-5.94-1.64-7.55-4.12C6.01 14.93 8.61 13.9 12 13.9c3.39 0 5.99 1.03 7.55 2.98C17.94 19.36 15.16 21 12 21z"/></svg>

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	190
Entropy (8bit):	4.7187854291824936
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHlbRvFjonQFWL4UUk+uUQRNru7u5WLp+:tI9mc4slhohC/vmVR9MQF1Nk+bQLL0LA
MD5:	DFF69AA895E01665A126FC2141C94FE5
SHA1:	4064D2365E13C8A346B1D4BBE31BECD3A18CF5B1
SHA-256:	811E9985BE1AC4E4D630F4B232CEEE366801CB5F82EE306A574C1CE9F844F673
SHA-512:	CDC9FC460CBDA1DA0EF8E7A079FCBBF717E800F732923607DFBFA57E00FD3E8A2B487E9D2FEA95294DEDBA9DA5CFD42491BD3AC65219AEC954A20CB90FDE49B5
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/arrow_up/v2/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><polygon points="19.35,11.5 11.5,3.65 3.65,11.5 4.35,12.21 11,5.56 11,20 12,20 12,5.56 18.65,12.21"/></svg>

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	183
Entropy (8bit):	5.04119913967567
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5hL6Fb0zVjXRH8+hHiATcvXjXRHRcBHoNcHmAIb0WNUoOUGf7/:tI9mc4slhLJ9hC/vmI4mtb0PCGz
MD5:	DB8E084413F0D763A3EFBF3573AFC33A
SHA1:	FF8264FCAAC48F90B0CB74E09D65655EFE09488B
SHA-256:	A058F9F44A83FDF8074494F9322A40EF1B6E159DBEEF1E30BDECCE736AFD1E2D
SHA-512:	28A6102E54D20BBAE6D0A4D98971FE4170392A3354B55FD504C0DD1A0896CB5E786D85AFD64EA9EC308009795EB4C8392F2CE22CCD8A6DC4B84CEBFC4929CDEE
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="m10 8 6 4-6 4V8zm11-5v18H3V3h18zm-1 1H4v16h16V4z"/></svg>

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	154
Entropy (8bit):	4.827221770489101
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHTdEBhHIHWlYqY:tI9mc4slhohC/vmI45EBho+u
MD5:	FFFE8FD3C6ACCC2FCFDD7B66EA25B99A
SHA1:	13C31200084CB1EED7A746428D2B79AD34FF6790
SHA-256:	55A060294343CAFA3539424536540547F25EFD13A1D2373D7A5E966CE74C5699
SHA-512:	A6D8EB0393B4FB56D4B6025865F542B29AFEFAF7BB2B26E55C5B54974EB3B913E9A17AD54A8FE33525345AF3AD16EC60C06356582F72B3864731EC22C1838662
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/chevron_right/v4/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="m9.4 18.4-.7-.7 5.6-5.6-5.7-5.7.7-.7 6.4 6.4-6.3 6.3z"/></svg>

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3677
Entropy (8bit):	7.92614652132141
Encrypted:	false
SSDEEP:	96:DxJEXtIpnh+oCKDgl8G40vf9lbKTqma7XgkK:De6pn9CKDoY0vVlbKTVaTpK
MD5:	036DA5872428EC3279AD07F3074A8DA7
SHA1:	D4BAC7FCE3FC291FC2452B6BC35B158C4EF309D1
SHA-256:	D00BFE6CDFF8E3C2370B458723C7DB811EFD563B36F1DE3A02F28806DB170981
SHA-512:	00343DAF55B8060FB32E46770ECA19234F3AA7220C213724ABFAF8EA817C86A9389222EF442BA3767A171323DCBB77A793499AAF2C5B703761F7FA4EA0DDEF72
Malicious:	false
Reputation:	low
URL:	https://i.ibb.co/jr5VL36/favicon.png
Preview:	.PNG........IHDR...@...@......iq....$IDATx..[.TTW.....E.!E......b.`.QP....z..k4.W.f..9.....7F.c\......;....2.......>g.c.J.sv.......................!.L...l.&...d,V..n:... ...v................;.~..!.q-f............E.........HE.._WS+.i...\|!....."..y..h.....L..w2.........p.G.'.".^=....0._.Ze]I......r.u...jk..h."...8.....hqL.... E.R.op.h7......CI..oV.......7@m.......L.....6tV^KDpX....%............ .....^g..G`/y..v!.R.\..r.hk.0y..s;z.....7..mE.7.uZ.F.....}.a0...A..!....;#.i.!..y.i.{...,vu...y..P....C...$.I.....F7.............".Qow/..XA....-kN#lAY]....:;.....&...L.......K{q...C......=...r..-...~.7....v.@./.+.w..T.a...Y...k.5w)....>]..b+!....q.k..U.@..p..P,q..s.....s..aV.D.~<._.S-..ycS..R.[k[..JY5Q^Z../.\|..!.)..\...........[..Q.FK.%3....u...;y...G4...h'qa...6.....{!.....%'zZ.O4...........V.B;t...G]..z=..e..a...v?.\..?.}.8_.{.Pj..vl'.w.M..K..........].....].....<..+.U..V0.C....]=\.?L..2./..U.....{.o`....... ...vw.,....l:.K..5:).=...E...y..

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	196
Entropy (8bit):	5.091943569663142
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5hL6Fb0zVjXRH8+hHiATcvXjXRHRcBHoNcHOoZKbVDCjG1UfJQNK:tI9mc4slhLJ9hC/vmI4pZKeG/i
MD5:	93255FE74E40903D5D6D53BDCB39798D
SHA1:	3782892EA18A26A0117F1D206964B0CBA9E9E445
SHA-256:	C7ED29A9FD41A91422C00A05C48EEE65C48F5CFF70D57D1424F00D1D70A3B85C
SHA-512:	BC200854BF7F3570874CD2122B25DBC5DA1816DCF4CD2E2FB2549DB90EB9B279CAFF7F10C854F78D64B4742E1CCB0A3FF0D78D0833E57EE7DF5A80C78B9F66A4
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M20 7H4V6h16v1zm2 2v12H2V9h20zm-7 6-5-3v6l5-3zm2-12H7v1h10V3z"/></svg>

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	359
Entropy (8bit):	4.955472444225813
Encrypted:	false
SSDEEP:	6:tI9mc4slzXdhC/yZqRIuZUoMLWlvSLrk91MLP25RjkxSRcATBrREjlC:t4BdU/mD8tKv9iDjkwRFTlGjI
MD5:	7EC75F80BDA2F53D6568AA6412D83431
SHA1:	9A94D2C509FE96BBD5A02971F066A1C1EEC6B3B6
SHA-256:	D8869F288C1E21A843123729543F5677E9B28349789C2282609CEC8ABC4DE9C1
SHA-512:	B2F2FE075F4AA2E0D73B4BF7B7F8BE3F43C6E6A7BF93165BE3178B7A20F5B0AE3B6CDC467B502EFEFE0337D5A98FA7039C224A3CDA6F455D70622B769314935B
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_fill/youtube_shorts_brand_24/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24">. <g>. <path d="M17.77,10.32l-1.2-.5L18,9.06a3.74,3.74,0,0,0-3.5-6.62L6,6.94a3.74,3.74,0,0,0,.23,6.74l1.2.49L6,14.93a3.75,3.75,0,0,0,3.5,6.63l8.5-4.5a3.74,3.74,0,0,0-.23-6.74Z" fill="red"/>. <polygon points="10 14.65 15 12 10 9.35 10 14.65" fill="#fff"/>. </g>.</svg>.

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	221
Entropy (8bit):	5.051880229825864
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4Bo0NiGcrlSnfa9I7LKY:t47N9U/vmRBo0crlsfaq7n
MD5:	83D9AAA5E179D445E561E8167CEB4D7A
SHA1:	CBD241357B025084C9B107CC5ED0803B0A776C3B
SHA-256:	AA910C07266E14040CA7215E0070769E61A15B724868E1060AE081E8160AB25D
SHA-512:	9071196C5F5CB17BEE54A65712CE1CA63BFDE00EB7892B9056028854C010C57F4BFE59526512266BD11910D65D834425CAEB08529479F96CB52BC49ABC94A48E
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="m12 4.44 7 6.09V20h-4v-6H9v6H5v-9.47l7-6.09m0-1.32-8 6.96V21h6v-6h4v6h6V10.08l-8-6.96z"/></svg>

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 246x138, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	2364
Entropy (8bit):	7.8898799119917955
Encrypted:	false
SSDEEP:	48:JiaYdZiN+03MtRdBxSF5Gekmhgm9au1PXPqq72XDIV9Uw+6Dv:YUN+032Rd/SFGJpevCqnh+6b
MD5:	37898EF4CB773CD6D1095F56C10860AD
SHA1:	AA7B6BF51E0E3AF086D3848AE3FAFB8FD6DA01A2
SHA-256:	C610145DAB138B7AE387D1AD6FE318F6F77B491D2257591D6BD2149CBAF58564
SHA-512:	A2C0139705539537EF3438A299796DD5E98C78F655A9544EA236830C4039DE38BA55702F97BE63B1B442447D56620C05F3F6E9BA25BB910A5D777E06BF99AFC6
Malicious:	false
Reputation:	low
Preview:	RIFF4...WEBPVP8 (....2.......>Q(.F....!6i.p..in.t..p...$.......U..i...........T........V?.x3...O.O.../....h...A.....~-.......A..............?.....1...}....>.?..4.....C.G.../....w...w.../........=.M.............~..)~..(QeL...4...x.(-..3J.yy.m./.V...O..jb5.u.. ".....).......h......j'_m.M.k?o...Y..S.S.... T.../.}...?q..CF9&.............].G...n3@.......U...E'....Q.....&=..p...,k?.}U.3J.z.....4...\........'.!.~.&e.b...{...+E.Lk....~.hg$ &....t?..?e.y.\,.Z.L........>{K...@.~(:".._..d.......>H7:_.I.r..i.....N..;.V_e.......m]..^....:.............e...P..u.....&\|7r....(.......F.:. ..R.......s...._./.O7...`.}...(..q....U..$.7......T..W....U$.Hn;.FE.........Q..Q..+.."u...L.....b.X.b.Z.E$...7.}....."vq...L./.1.0.p.Tg..3H.G....a...B.W~....T....2.2H.:.....7...6..&N.2K..<..]N./..v.zy.8.f&..%..1IF.....i..z...C...oW...j$...I;F.\|..h..t...&.e8..&..p_0...K..#....c...0'..S..T.......\|E......%..r-\RCO..I .N.......a.^.. ..o...m..P..G#..M...

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x600, components 3
Category:	downloaded
Size (bytes):	49977
Entropy (8bit):	7.95644141008797
Encrypted:	false
SSDEEP:	768:LuYCzibUvW6N2k5J2wID9Y1uQp+0THF2WSniYuKCOX3nmI5R13lSkkRnV3o7:yYCzbe6N2k2fDAV+qqncOX3nVTVSho7
MD5:	B69EF08B7311F52DCA3C0A3E53C10A7B
SHA1:	2C68D482B5DB75244ED97021C23A40DD51520E8B
SHA-256:	1229F3AB07D4110A189DD8785AF15171416D383E9ABB6971C9E9C1329FBCE1C7
SHA-512:	0204A01845832A69E8B957A415373804974BA91094D2E178FF8D801A6D8BB83A4BB0F0DFA50AA4D8618C3CF50B98E9AF9E91E751801A178308B4F6A31091F1E4
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/443818919_996576128504625_3343915979056056184_n.jpg?stp=dst-jpg_p600x600&_nc_cat=101&ccb=1-7&_nc_sid=5f2048&_nc_ohc=nO7Vfy4wE0cQ7kNvgEAcCQP&_nc_ht=scontent-hou1-1.xx&oh=00_AYDru1sgIffZ1rgBMKyVshHvglkMn8HpGaDMN24nEMeB7g&oe=665830C5
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a7201000051120000a72a0000482d0000623b00005f590000f3790000617f0000e38200000b90000039c30000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......X.X.."..................................................................................b.......................................{...^.Y .`..@.........................+^..h...7.5.....././..g.....9.G...sggDwe7W..@.....................Qb.S.6... .H.....................G..<..$o.......\....xC...s:y......L1e..t.5.m9......................v.....1..F..H..}..%...y...J.[.bx..e..#.J.'..'..}P....q..j...kf?"..V.1R...X.....:Q....................:.....7z...A.+...dl.....u+..;.qXts..U.c.V........g$.'.J.1....=.W.....Um..)V~Y..CLR!.=..........,s>....'6].qpg!....Wo:.)...,..9..p.i.I..&]-.'+.R....u..Gk.s.Wsg.F..2..8.Xir.\|h......7lo....k..u..s..................?..Z.1..O...........

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 7904, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	26399
Entropy (8bit):	7.959673570604936
Encrypted:	false
SSDEEP:	768:1+H34A32asvhRo6sCNsKFeEotLUpbQBu82zd:1Id32npRojfKYtLUsq
MD5:	EE905AEEA99AA287B3F5B569FEDBD91E
SHA1:	0FD8E62C7B5240B5496DC1F2AF99D45766C30B86
SHA-256:	5AD678791B5D4839F74A625C1FF6D3F4A6BBFCA6417ECB0133F1A60DE77B415D
SHA-512:	D45ECFDBED27106D9A608998B7BDED221E9AE192D0F3C28F99B4E98B4B0C7D9555E8155FE89F2D78C66D1E39B3F1A5E1A63FA422D0294FD9E4A4BE29D3370F59
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S/content/common/css/flags32.png
Preview:	.PNG........IHDR... .........b.s.....PLTELiq.8..8..8..8..8..8......f..~.....................?..".i.'g.$~......#'&.-b.}.).k.....2z.5..3..6..7..8..7..I/.@.p.>984....=..f.....`4.."H0q...PC."B..M..R.....G..S...'(Lj.Q..j@.P.!]6..(.jMv+`.r).]....$K..o.iB2..&........#..+..4....{<.e.NTI..5.x_.W.. &....h.....08....l......8.(/..$...:Z...Q.!=....$..&(H]..).sZ!.s..&.:v(..$...../..A.!N=_...C.L.........I..g0.-....8...I.A%.)5.(7[{.-....walb.....`.So.9G$\|...8Km..o..=(:u.>..A.5.....+).=..l;.{.?5.S...fy..WW........Z..:..^...X......MX.n.A.....}.{6.3..A.[.d.F%..s...ssg...q.I._.......hk;..H....Y...\|.J....~.....6..C...y\|Q..t..r..{.r..&...r...K..........g..2........:c.......,........d...........$.......................................X.....A.......J.....B......................................].o....tRNS...+P..v....c.IDATx...L[W...?V..&..@H'm...n@..Q.....l'[.)3.t...c..N.l7.$E[F..*[G..H.+!..0`...Gce..C.A..0....:I.A..c.~{..u.w.&.d.....~...{.K.........=.........f..x..d=j..

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	415
Entropy (8bit):	4.495473856679165
Encrypted:	false
SSDEEP:	12:t4noU/vmRIESMmpa8gQL8nJK18IyNzT+OjHf8:t4oU/vwSMcNgQL8nJKCzN1jHf8
MD5:	AEBBF536BB5109D9C8BA51BB520CC801
SHA1:	EEF20371B44CC4E85027D01DBB2690DED70DF957
SHA-256:	E2A570823965E0A19930FAED9A0C8213AF0092327BFE7041F5A50D7E6312360F
SHA-512:	A65789396E46C765EC4874AAE6996C12145CBD9C8C2E17E0B47AB80E33FD4F6D0FC13B9F282B72AC1A8F32A1D5953E97C1CF483E36A04B2C2E68E921E48B8510
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/youtube_shorts/v8/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="m17.77 10.32-1.2-.5L18 9.06c1.84-.96 2.53-3.23 1.56-5.06s-3.24-2.53-5.07-1.56L6 6.94c-1.29.68-2.07 2.04-2 3.49.07 1.42.93 2.67 2.22 3.25.03.01 1.2.5 1.2.5L6 14.93c-1.83.97-2.53 3.24-1.56 5.07.97 1.83 3.24 2.53 5.07 1.56l8.5-4.5c1.29-.68 2.06-2.04 1.99-3.49-.07-1.42-.94-2.68-2.23-3.25zM10 14.65v-5.3L15 12l-5 2.65z"/></svg>

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 38, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	802
Entropy (8bit):	6.730321524502597
Encrypted:	false
SSDEEP:	24:GaByyEMDsiaXvDUbVdxQXHoyb9K7HjGY6LMr/:G88MDs9vu3xQXHKCor/
MD5:	20986D3FE0DDAC454B9F46BC34CE8952
SHA1:	DEFB0E4158B8A9576E663B240336A9BBB28D3267
SHA-256:	D7ECE5222547615BCB5066478F209B6A3E7C3B3C88667972E937C8481688EED7
SHA-512:	1254F83A4331002DAB51948F74C680C3BD7B960F9EF034BF606A80BBAE0D8132ECCA0002660988D7F596D715CAFB70FA79FAE749FBC67F9323E12C63E9BFED7A
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S2/content/mobile/images/error-icon.20986d3fe0.png
Preview:	.PNG........IHDR...&...&.............PLTE........+..$..9..3..0..-..+.....,.....,..-..,..+..)../..-.....-..+..+.......-..,..+..+..-..,..+..+..-..,..-..-..,..-..,..,..-..-..,..-..,..+..,..+..-..,..,..+..+..,..+..-..,..,..,..+..,..+..,..,..,..,..,..,..,..,..,..,..,..,..,..,..+..,..,..-..,..,..,..,..,..,..,..,..,..,..,..,y..#...\tRNS............."#$%&(2356789@AMOQSTUWZ[]abcwx{~...............................................M.t=...^IDAT..}..:BQ...?..Q.Y%...c...)....9..>..{[.M...\.=.6.\|....Q..%.T.gCh1r...a4Yx...<.%.X...@+...`&...w.Q.............gp.....)..L...5..,..#.'J..yJop.(m.......-.5T..TL...z`.R......B.Z.V.."..&aMQ[D.Z.V.Z...^.vw.^....P.....f"@.Jq..,Q...E.....Fi..(.c8'...)..9.PD.,..0.......(.w....N.k.F.>...P.B.a 3.?+...a..Y....Gu.Mbglq:.V3%.i.Kl..:.f#.6"^*.My.h?@0W..../....IEND.B`.

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8455)
Category:	downloaded
Size (bytes):	8779
Entropy (8bit):	4.87315457137741
Encrypted:	false
SSDEEP:	192:vfFhAKBbIwMEn3HjFHqETYPbKIJ+bkLsS6SxS/xfqp6MvH74JrJw:bAKBEYFHqETYPbKpbkLspkkxfqp67JrO
MD5:	10F02FB29DC61F9D64A6AF01B6BF5853
SHA1:	1A8C344A8CDC06E60DCE69394970A46876F255A6
SHA-256:	76FAF5AA36EF109DA351CA7C9A10D7A019AF504D02CBB58EAC16B8A105D0D1AC
SHA-512:	1D07B84D078CB51C0C0E382EDD995D5F108A3296429E71B456E4450867A80F9135A2B5BC48CF8F750760E29C88ED93A046149DA4B5506BA3971FB42C79AD12AF
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/sw.js
Preview:	/** 6144933878278137163 */self.document = self; self.window = self;var ytcfg={d:function(){return window.yt&&yt.config_\|\|ytcfg.data_\|\|(ytcfg.data_={})},get:function(k,o){return k in ytcfg.d()?ytcfg.d()[k]:o},set:function(){var a=arguments;if(a.length>1)ytcfg.d()[a[0]]=a[1];else{var k;for(k in a[0])ytcfg.d()[k]=a[0][k]}}};.ytcfg.set({"EXPERIMENT_FLAGS":{"H5_enable_full_pacf_logging":true,"H5_use_async_logging":true,"ab_det_apb_b":true,"ab_det_el_h":true,"ab_det_fet_wr":true,"ab_det_gen_re":true,"ab_sig_bit_dea":true,"action_companion_center_align_description":true,"allow_skip_networkless":true,"att_web_record_metrics":true,"check_login_info_at_app_init_time":true,"clean_up_manual_attribution_header":true,"clear_user_partitioned_ls":true,"compress_gel":true,"copy_login_info_to_st_cookie":true,"csi_config_handling_infra":true,"deprecate_csi_has_info":true,"disable_cached_masthead_data":true,"disable_child_node_auto_formatted_strings":true,"disable_enf_isd":true,"disable_pacf_logging_for_m

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	2383803
Entropy (8bit):	4.933953775777496
Encrypted:	false
SSDEEP:	12288:MRpaQ+5+Fmt9IkovxKkqFOdJ/JGfeiwtHWTOev3z69JG5eOW7xveMmgbVrdUEeod:2eo/4Q/5mBe25Wd
MD5:	C92F623C1BADB0D4B505CF062E1725BB
SHA1:	130821D58E4FB8D31D632FC87CDCCD8C337CC841
SHA-256:	383BA639077E78F77208042E7330A97FB2AB588340A305A378D25DFCD80522BD
SHA-512:	8F7DE30AEC468536106123C258E302374AD4733FF19388BB627B91B2CE7318D9ED45BF55C54810A4332AF2B7D5BF0D4426B12D104855D10BA06068280D7E9273
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/_/ytmainappweb/_/ss/k=ytmainappweb.kevlar_base.wrKemerB_yc.L.B1.O/am=AIAALQ/d=0/rs=AGKMywGR7hi9AjzaLB2rwbjGRlJ5OKqDrw
Preview:	ytd-menu-renderer{display:flexbox;display:flex;flex-direction:row}ytd-menu-renderer:not([condensed]) .ytd-menu-renderer[button-renderer]+.ytd-menu-renderer[button-renderer],.ytd-menu-renderer[button-renderer]+yt-button-view-model.ytd-menu-renderer,yt-button-view-model.ytd-menu-renderer+yt-button-view-model.ytd-menu-renderer,.ytd-menu-renderer[button-renderer]+template.ytd-menu-renderer+#button.ytd-menu-renderer,yt-button-view-model.ytd-menu-renderer+template.ytd-menu-renderer+#button.ytd-menu-renderer,#flexible-item-buttons.ytd-menu-renderer:not(:empty)>.ytd-menu-renderer[button-renderer],#top-level-buttons-computed.ytd-menu-renderer:not(:empty)>.ytd-menu-renderer[button-renderer]~.ytd-menu-renderer[button-renderer],#flexible-item-buttons.ytd-menu-renderer:not(:empty)>yt-button-view-model.ytd-menu-renderer,#top-level-buttons-computed.ytd-menu-renderer:not(:empty)+#flexible-item-buttons.ytd-menu-renderer+#button.ytd-menu-renderer{margin-left:8px}ytd-menu-renderer .ytd-menu-renderer[styl

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6079)
Category:	downloaded
Size (bytes):	156549
Entropy (8bit):	5.283301079828051
Encrypted:	false
SSDEEP:	768:daQHFi0H+tOGNgN0k2FIuEegbhbfRFb8781bhcQcsPe2EG6kHJ80AAPRd9Grh3tw:dgcbZdZ8APRW2BcxmEUATCT/2a8XC
MD5:	19EB4CF4E37AAC6859AFA561F85EAD76
SHA1:	56F51EEA9569BE16B460874EC0297249C0D271A9
SHA-256:	90BCBCC249AD698C5BE80E2E92C441CC4321813D9743EE29EC662B68E222C0F8
SHA-512:	F6762BE4F8EFC77BEF1F7F848C58633A20B2A0FB54C6965FD244BF503B1227DE2EBD4834F9D6886369DC4DACAEC1BD887C2DBF2956A0BC4DD5727A8D673570C7
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iGgu4/yM/l/en_GB/74HMcn-5nlc.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("AnimatePresenceGroupStub",[],(function(a,b,c,d,e,f){"use strict";function a(a){a=a.children;return a}b=a;f["default"]=b}),66);.__d("AnimatePresenceStub",[],(function(a,b,c,d,e,f){"use strict";function g(){}function a(a){var b=a.children;a.presencePayload;return b(!0,g)}b=a;f["default"]=b}),66);.__d("CometAnimatePresenceGroup_DO_NOT_USE.react",["cr:1787128","react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react");function a(a){return i.jsx(b("cr:1787128"),babelHelpers["extends"]({},a))}a.displayName=a.name+" [from "+f.id+"]";c=a;g["default"]=c}),98);.__d("CometAnimatePresence_DO_NOT_USE.react",["cr:1787055","react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react");function a(a){return i.jsx(b("cr:1787055"),babelHelpers["extends"]({},a))}a.displayName=a.name+" [from "+f.id+"]";c=a;g["default"]=c}),98);.__d("CometAnimatedRevealContainerStub.react",["HiddenSubtreeContextProvider.react","LegacyHidden","react","stylex"],(function(a,b,c,d,e,f,g){

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (546)
Category:	downloaded
Size (bytes):	73155
Entropy (8bit):	5.586032365764657
Encrypted:	false
SSDEEP:	1536:yb7xeBp359UXTn6ANp6kP6J0Z1tYZajo/h1QI:4xQts4kP6MvOrz
MD5:	3C85C5EA15D6CD0190D9532F5646BBB6
SHA1:	CA739FF8B4FD520FD317A5B7FB68D86B4246CF30
SHA-256:	0AC59455895F68B69ADCF625F422D6549039CCEB30156EC29D4A1A63D4BB4AC1
SHA-512:	D13482BC06CF72E2B1230EECB332D883CF0881F3C4FB7CEC6ECDA384852C3D95B6C6FAE88E4F2418E6F5206ADDD7A91021EE59E5E43D0DA8E43A2ED2307A3B22
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/bc657243/player_ias.vflset/en_US/captions.js
Preview:	(function(g){var window=this;'use strict';var m4=function(a){a.isActive()\|\|a.start()},vqb=function(a,b){return b?a.captionsInitialState:"CAPTIONS_INITIAL_STATE_UNKNOWN"},wqb=function(a,b){var c=new g.gS;.c.languageCode=a.languageCode;c.languageName=a.languageName;c.name=a.name;c.displayName=a.displayName;c.kind=a.kind;c.isDefault=!1;c.j=a.j;c.isTranslateable=a.isTranslateable;c.vssId=a.vssId;c.url=a.url;c.translationLanguage=b;a.xtags&&(c.xtags=a.xtags);a.captionId&&(c.captionId=a.captionId);return c},xqb=function(a,b){var c,d,e;.return g.G(function(f){if(1==f.j)return c=a+"\|"+b,g.z(f,g.WC(),2);if(3!=f.j){d=f.B;if(!d)throw g.zC("gct");return g.z(f,g.vS(d),3)}e=f.B;return f.return(e.get("captions",c))})},yqb=function(a,b,c){xqb(a,b).then(function(d){d&&c(d.trackData,new g.gS(d.metadata))})},Bqb=function(a){if(!zqb.test(a))throw Error("'"+a+"' is not a valid hex color");.4==a.length&&(a=a.replace(Aqb,"#$1$1$2$2$3$3"));a=a.toLowerCase();a=parseInt(a.slice(1),16);return[a>>16,a>>8&255,a&25

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	789
Entropy (8bit):	4.4194384212801
Encrypted:	false
SSDEEP:	24:t4takfIIJEGBA8rb0CklxqTaccoUZ/ES2mM:kGGSVC8Giu
MD5:	B552B4C85CA1E2238DB395B9A49411FF
SHA1:	D8D5C6B8E8253732F1DD1CCE2F8C4F3C1F1BB1BE
SHA-256:	949AF1BF7118AF3ADA0A087666E6E763CA627DBEFB1EB2E3B978210CFE808FBA
SHA-512:	62DC81FC15CE62AFD2C22C36A05C5C5CC6BB4E5231C8BDF11143CFA8C950A6A161B693BE7B93AF6BFD9A0C348D6B4A49D9956706029E1307135B4D191869D837
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_fill/creator_studio_red_logo/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path fill="red" d="M11.13 1.21c.48-.28 1.26-.28 1.74 0l8.01 4.64c.48.28.87.97.87 1.53v9.24c0 .56-.39 1.25-.87 1.53l-8.01 4.64c-.48.28-1.26.28-1.74 0l-8.01-4.64c-.48-.28-.87-.97-.87-1.53V7.38c0-.56.39-1.25.87-1.53l8.01-4.64z"/><path fill="#fff" d="m12.71 18.98 4.9-2.83c.41-.24.64-.77.64-1.24V9.24c0-.47-.23-1-.64-1.24l-4.9-2.82c-.41-.23-1.02-.23-1.42 0L6.39 8c-.4.23-.64.77-.64 1.24v5.67c0 .47.24 1 .64 1.24l4.9 2.83c.2.12.46.18.71.18.26-.01.51-.07.71-.18z"/><path fill="red" d="m12.32 5.73 4.89 2.83c.16.09.41.31.41.67v5.67c0 .37-.25.54-.41.64l-4.89 2.83c-.16.09-.48.09-.64 0l-4.89-2.83c-.16-.09-.41-.34-.41-.64V9.24c.02-.37.25-.58.41-.68l4.89-2.83c.08-.05.2-.07.32-.07s.24.02.32.07z"/><path fill="#fff" d="M9.88 15.25 15.5 12 9.88 8.75z"/></svg>.

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21863)
Category:	downloaded
Size (bytes):	130817
Entropy (8bit):	5.19719410122441
Encrypted:	false
SSDEEP:	1536:mw+Qx6z+ldxLjU4NRzUaWn1v3427VWIZD:sm7yn1v3427VWIZD
MD5:	515A137E051356C539EF3297C4100B2C
SHA1:	825277DDEA15DDFEE5BE5BE3BF81164339D0B351
SHA-256:	14AE471A3C25E8CA54C6A4E1B70C0BF4B27EBC4D50A0A7B120EC3F219885FBB3
SHA-512:	82433C4C0F66F72A6F6BAEEE78A9876B6D188299E825E24945E002B9E24243E9A226B0D302BB48A09AD6A5CEDA42B264E49403D8FE0D21B48E6E53A2390B83E8
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3ikn04/yz/l/en_GB/JNtlbX11Plv.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("BaseTypeaheadLocalStorageDataProviderStorageKey",["$InternalEnum"],(function(a,b,c,d,e,f){"use strict";a="_SearchBootstrapCache_";c=b("$InternalEnum").Mirrored(["FeedComposerMentionsIntentfulMentionsBootstrap","FeedComposerMentionsNonIntentfulMentionsBootstrap","FeedComposerMentionsWithTagBootstrap","GlobalTypeaheadBootstrapEntities","GlobalTypeaheadBootstrapKeywords"]);f.StorageKeyPrefix=a;f.StorageKey=c}),66);.__d("BaseTypeaheadLocalStorageDataProvider",["BaseTypeaheadDataProvider","BaseTypeaheadLocalStorageDataProviderStorageKey","Promise","WebStorage","recoverableViolation"],(function(a,b,c,d,e,f,g){"use strict";var h,i,j=1e36060*24;a=function(){function a(a){var b=a.storageKey,e=a.storageTimespan;e=e===void 0?j:e;a=babelHelpers.objectWithoutPropertiesLoose(a,["storageKey","storageTimespan"]);this.$1=new(c("BaseTypeaheadDataProvider"))(a);this.$3=b!=null?d("BaseTypeaheadLocalStorageDataProviderStorageKey").StorageKeyPrefix+b:null;this.$4=e;b=a.queryVariabl

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 312 x 200, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	17083
Entropy (8bit):	7.982308428834002
Encrypted:	false
SSDEEP:	384:m60n76CIHRODbU9VBUaiXB+F8NRYwiINmLGL0luobcIOgHMHFvUFG:90nkmg9XUTBU8iLIZ0luobcIOgH+MG
MD5:	9978DB669E49523B7ADB3AF80D561B1B
SHA1:	7EB15D01E2AFD057188741FAD9EA1719BCCC01EA
SHA-256:	4E57F4CF302186300F95C74144CBCA9EB756C0A8313EBF32F8ABA5C279DD059C
SHA-512:	04B216BD907C70EE2B96E513F7DE56481388B577E6CCD67145A48178A605581FAB715096CFB75D1BB336E6AD0060701D2A3680E9F38FE31E1573D5965F1E380A
Malicious:	false
Reputation:	low
URL:	https://www.facebook.com/images/cookies/cookie_info_card_image_4.png
Preview:	.PNG........IHDR...8...........j...B.IDATx...m..W....9gf...X^.-...$.@..i.$b-.6h..kZE.R.R0jll@?h..R.D[J.hZ0..&....X-...".W.M...,...,.uf..s.^...kWS..csy..93...s......%.x.S.... .... ..... ............................ .... ..W=...A.....A......T.....T.@P..T.@P..T.@P..A.@P..A.....A......T.....T.....T..9.`...B$..:..\..!%$i....@..E..$....(&bRL...[.F.=Ijcl....$...3....!k%.Gql..Ql8..S....Z.'..{{.PB1....,D.g.....Ia../i..=...".v..K..g.....%._...fO...).EaR@P....dw........0..7....f8...O...1.......K<....$LZ.u....%u9.o#.....mW.&U...X)....+rI/wvo.Y$fR..`.V$.........4.m.<we...u^nZ.Z.p..olh.+...^.Z.8qb.O~..........oq.PDB..).'D\..mI%6R.......J%.nh,&.E\....)2...8d.E.)fX."..&..R..........&..6b.`k1......-Jjq.nH.gl..=.f...{&.({......*."a.VZ._.......#g_..t..+Vu~.CM..+.._..f7m.g.K.K.....^...D....n^..H..Mt...^..6...o>t.F.Kb.L.E]]].>q...,.......4;.;b)t..r,....g..~.........OvE..3...o.......M.I..........O.........E..Q......[....OX....Q3i..m.<..u...g......

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (516)
Category:	downloaded
Size (bytes):	9670
Entropy (8bit):	5.436874009621938
Encrypted:	false
SSDEEP:	192:flejPRjM65ile/ePz5zSNqVQu8GkXRNaKCjbNVTqRxrZkG9Z0sM8Tk9Zn:1oUFORrXRNaKqVTqRxrZkG70sM8Tk9Zn
MD5:	0C425DCE0EDD3711197D189F01E62C8B
SHA1:	55FC028DD9A64DA1A048420F28D3F5FE5C639D90
SHA-256:	29C52C8434CB01CBE38B0520C3BD2A7AE59D345370A302FF60C7CBC0A3BE2388
SHA-512:	B2C8C5BE49A9E0939D7605294AB2288ABA84B2596A9E75348F973D1F6285D5057BF5B89188ECB106079CCB475238C22064E649BBC2112CB2C2FA1EF15355093C
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/aef0ced3/jsbin/scheduler.vflset/scheduler.js
Preview:	(function(){'use strict';var g;function h(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var k="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function aa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var l=aa(this);function m(a,b){if(b)a:{var c=l;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&k(c,a,{configurable:!0,writable:!0,value:b})}}.m("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,y){this.g=f;k(this,"description",{configurable:!0,writable:!0,value:y}

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2000 x 800, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	61755
Entropy (8bit):	7.748502484425811
Encrypted:	false
SSDEEP:	1536:wNNqP22JPMaHqiN6C0IhErwE7gMAXLp0ppIN3Ilkyp:wNNqPpCJPCnUtut4lZ
MD5:	29DAD06670F873936002DDB910253A4B
SHA1:	523EE4ADF550DF78348CF7528580171F0828F2B4
SHA-256:	8871194DC3AE9035B5BB04C84AA7B82AFA7442DAF2BAB5F1393A5751E6082A10
SHA-512:	AA1A38DE98C14B454715CC2240B752EAEC6824237BF1A6C760CCDC9859AEC7AC2E8827DC6D635820631EB0C5A56003770F0DA7C423E95CAAD0D1672CBDDA0268
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S/content/common/images/grab.29dad06670f873936002ddb910253a4b.png
Preview:	.PNG........IHDR....... .....{..s....IDATx....u.H.......7..D0p.CE.t.CE0R..#...8....8.......6....4%[.)..........3...%........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................L..:............^..:..\|..W...R.}....g.A.................. .$..............t...........$.@...........@..t...........$.@...........@..t...........$.@...........@..t....

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1116)
Category:	downloaded
Size (bytes):	74033
Entropy (8bit):	5.495613795437632
Encrypted:	false
SSDEEP:	768:4GIr9iykWXc8VV4ucbxiyXdpGupDoPCf+/h0spG9PG320bVjENfkS3il+97I0ygH:pQ1/rPzRQUSENM9xiiyQqby9
MD5:	E716E0F058573851D03609717B046749
SHA1:	A4A9CAE96031022448710C459A6FB47A682A77DC
SHA-256:	B023B0B064105ADB8BDE503331C646594AC2CA372B961529F94F2FAC74D862D2
SHA-512:	B98D1EA960DCD6A7743069186E798974295E0E2D0BB1637A36362876B5D06284D63D87F372AA65AB3CA59D292954F4D659CBE9F772642EF8459B5BD061F5BD84
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Roboto:wght@300;400;500;700&family=YouTube+Sans:wght@300..900&display=swap
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. f

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	78
Entropy (8bit):	4.858681545591168
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5KVErcHghI4KuP0WTC:tI9mc4slmR4rTC
MD5:	5FFB1290441ED5E56850CC92DB640DBA
SHA1:	ABD55D2B6EE392BBC8A89FDCE5B8560E37119D90
SHA-256:	C74EF8500A3AE98D1E16F03B030BFD6726DE72A8911FC397D3301E4B9D86369B
SHA-512:	83826FC55AF7335F3AE5E14CAD4056942F3F9C3FA3781258A771710DE1D32EB3412897F6AC3E09090192BE11EB490F996EB475E7B563EB6CD6B15A8F3A1B008F
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_fill/play-arrow/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path d="M8 5v14l11-7z"></path></svg>.

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	384
Entropy (8bit):	4.820720215490487
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4CpBSNwLSoD0pVhyVLT7UiHQ3aju2lQjGVT7UinwFju2li:t47N9U/vmRqBKbsL3RQKju2lQ03VwFjs
MD5:	BD5B52813BF62EC230C9EF682AD48DA5
SHA1:	AB4B59D9F48A229B4D5C6C6DE9E4BF8D4AF32605
SHA-256:	179E849AAD715CEDDED335BFB09228C4985D113BC1EC61FB7C95785B8E6D941A
SHA-512:	7AABEFC130160D98B3EF047EAB303D13DCD0BDEC71A24372716FA060FE35AA91D86B1C10CAACC36B0332E9B3B6E59141EC1B32DF7E50543D0927ED0ACAB881F1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/gaming/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="m16.97 4-4.99 2.8L6.99 4 2 6.8v7.6l9.98 5.6 9.98-5.6V6.8L16.97 4zM10 12H8v2H6v-2H4v-2h2V8h2v2h2v2zm5.5 2c-.83 0-1.5-.67-1.5-1.5s.67-1.5 1.5-1.5 1.5.67 1.5 1.5-.67 1.5-1.5 1.5zm3-3c-.83 0-1.5-.67-1.5-1.5S17.67 8 18.5 8s1.5.67 1.5 1.5-.67 1.5-1.5 1.5z"/></svg>

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (936)
Category:	downloaded
Size (bytes):	5863
Entropy (8bit):	5.542506058381083
Encrypted:	false
SSDEEP:	96:ercpdAw1xFVObY2GhlzSSt0531195315WnGIjkC4EBBIjKuKSwXr6:ekdAMFVObY2GjDm19D5WnGIj8OByKD6
MD5:	F3356B556175318CF67AB48F11F2421B
SHA1:	ACE644324F1CE43E3968401ECF7F6C02CE78F8B7
SHA-256:	263C24AC72CB26AB60B4B2911DA2B45FEF9B1FE69BBB7DF59191BB4C1E9969CD
SHA-512:	A2E5B90B1944A9D8096AE767D73DB0EC5F12691CF1AEBD870AD8E55902CEB81B27A3C099D924C17D3D51F7DBC4C3DD71D1B63EB9D3048E37F71B2F323681B0AD
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/aef0ced3/jsbin/www-i18n-constants-en_US.vflset/www-i18n-constants.js
Preview:	(function(){'use strict';/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var e=this\|\|self;function f(c,b){c=c.split(".");var a=e;c[0]in a\|\|"undefined"==typeof a.execScript\|\|a.execScript("var "+c[0]);for(var d;c.length&&(d=c.shift());)c.length\|\|void 0===b?a[d]&&a[d]!==Object.prototype[d]?a=a[d]:a=a[d]={}:a[d]=b}.;var g={YEAR_FULL:"y",YEAR_FULL_WITH_ERA:"y G",YEAR_MONTH_ABBR:"MMM y",YEAR_MONTH_FULL:"MMMM y",YEAR_MONTH_SHORT:"MM/y",MONTH_DAY_ABBR:"MMM d",MONTH_DAY_FULL:"MMMM dd",MONTH_DAY_SHORT:"M/d",MONTH_DAY_MEDIUM:"MMMM d",MONTH_DAY_YEAR_MEDIUM:"MMM d, y",WEEKDAY_MONTH_DAY_MEDIUM:"EEE, MMM d",WEEKDAY_MONTH_DAY_YEAR_MEDIUM:"EEE, MMM d, y",DAY_ABBR:"d",MONTH_DAY_TIME_ZONE_SHORT:"MMM d, h:mm\u202fa zzzz"},h=g;h=g;var k={ERAS:["BC","AD"],ERANAMES:["Before Christ","Anno Domini"],NARROWMONTHS:"JFMAMJJASOND".split(""),STANDALONENARROWMONTHS:"JFMAMJJASOND".split(""),MONTHS:"January February March April May June July August September October November December

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	192
Entropy (8bit):	5.1052862366626295
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5hL6Fb0zVjXRH8+hHiATcvXjXRHRcBHoNcHEkRY4zf9UJtTzWNRI:tI9mc4slhLJ9hC/vmI4zRqj/CIIHZY
MD5:	326BF908127D15320C80C12962A91DCD
SHA1:	D346CFA4AE456C3E070206472F06E90A9DAA8C25
SHA-256:	97DC7B49E38E2084B1877557AF54EBA95BF7FAF06980E0DCCDCA2EAD81E35B60
SHA-512:	E4835907B72B75C09F32416911A4B3535791B54C6BDD0BFA9C0A48399A8E4930CDBD0B32FD13A67002F49F99199FBE358D5B4B89E4609C837E73799FF0D46F08
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M4 20h14v1H3V6h1v14zM21 3v15H6V3h15zm-4 7.5L11 7v7l6-3.5z"/></svg>

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6409), with no line terminators
Category:	downloaded
Size (bytes):	6409
Entropy (8bit):	5.349057421408334
Encrypted:	false
SSDEEP:	96:Ey55lwD8d9jD6urYKzJs1RHq0EZ6D6urYKzJsUyeXkxdR8H5cP9fpPwojJzxvv:T5zJdBDNHARHq5Z6DNH4okfRUmnxvv
MD5:	0B7092885D9A50E51E328B1C6E7CDDF6
SHA1:	A4CB0A864427F8B1A01B3D6724E9D81C47D719A7
SHA-256:	4FA1727BAE36496609DF2C1B52D4E03BF8286B8875D9797496E2A6CCAEAC4A03
SHA-512:	74C0A6CE690F55C2192F2B89F293679D7A4DDA9ABBBFBB59275EC23AF0C56122A6742239F9CE20CF745F59CFDB4556EA0413B7943329C136914B51500F29C7CB
Malicious:	false
Reputation:	low
URL:	https://dl.dir.freefiremobile.com/common/web_event/official2/dist/client/16fa1dd.js
Preview:	!function(e){function a(a){for(var r,c,n=a[0],b=a[1],o=a[2],u=0,l=[];u<n.length;u++)c=n[u],Object.prototype.hasOwnProperty.call(d,c)&&d[c]&&l.push(d[c][0]),d[c]=0;for(r in b)Object.prototype.hasOwnProperty.call(b,r)&&(e[r]=b[r]);for(i&&i(a);l.length;)l.shift()();return f.push.apply(f,o\|\|[]),t()}function t(){for(var e,a=0;a<f.length;a++){for(var t=f[a],r=!0,c=1;c<t.length;c++){var b=t[c];0!==d[b]&&(r=!1)}r&&(f.splice(a--,1),e=n(n.s=t[0]))}return e}var r={},c={71:0},d={71:0},f=[];function n(a){if(r[a])return r[a].exports;var t=r[a]={i:a,l:!1,exports:{}};return e[a].call(t.exports,t,t.exports,n),t.l=!0,t.exports}n.e=function(e){var a=[],t=function(){try{return document.createElement("link").relList.supports("preload")}catch(e){return!1}}();c[e]?a.push(c[e]):0!==c[e]&&{0:1,1:1,5:1,6:1,7:1,8:1,9:1,10:1,11:1,12:1,13:1,14:1,15:1,16:1,17:1,18:1,19:1,20:1,21:1,22:1,23:1,24:1,25:1,26:1,27:1,28:1,29:1,30:1,31:1,32:1,33:1,34:1,35:1,36:1,37:1,38:1,39:1,40:1,41:1,42:1,43:1,44:1,45:1,46:1,48:1,49:1,5

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	214
Entropy (8bit):	5.096829767629689
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4MJqgzQFqYgXT085Y:t47N9U/vmRYOF4Tm
MD5:	BDC934DCE4645CFA785C33E037A00EFF
SHA1:	87281A6721F6ACAE1DA886D68A9BA04F009831DC
SHA-256:	09C41C2AC9873188C095279472467BE0EB4166C5E22AE52BA04E937AC94FC203
SHA-512:	74331EE305E92CC3BF172624469D9789BE82A2D48EB1791210931C125F40298EC96F3875D8CFD25E8F323071D041930CDD1BADFD0AF9B032D290B56E3E838048
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/subscriptions/v7/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M10 18v-6l5 3-5 3zm7-15H7v1h10V3zm3 3H4v1h16V6zm2 3H2v12h20V9zM3 10h18v10H3V10z"/></svg>

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	600
Entropy (8bit):	7.414159840782532
Encrypted:	false
SSDEEP:	12:6v/7gKJ10Fobt+d7lG1QQr/80hsawh6WSqmMg/REtPzHGMpg3SMuFK9:I10Fobc5JS8Yi6WvmMg/RkPzmZCto9
MD5:	5F2974DE7B6DF03DD6277435C4987E19
SHA1:	D2B256327900D86C6E9C37E98C8EE4E91F8AFBC6
SHA-256:	37632EA041A0F8264F4A9F5C9803A6814B050F762315D3FBBBAF28A713EA677E
SHA-512:	434840D89A8491F5D469948AC81CC0BA41AE8B170505F8BC0550A9E9CC3AC99B2E97ED3BA920F9633793A32D069BBA59A1E65B7773E68DC08BE8E93A351CD1B3
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn3.gstatic.com/favicon-tbn?q=tbn:ANd9GcTQNWsQwtp_kYkNwgZnqc6n3XkmETbBWnjEs5aqLKdxeX3Wzcm-Wx5HgUOr428dO1AiXFFOmntTerjwyz490qT8gCGo1vfOjv6f-7fMX15zaDKa6w
Preview:	.PNG........IHDR....................PLTE..$..! .......................'.."..$.... ............".....-..a...=;...Q...........[...~y^...........MZ....g.^....................v.... ,+......... ..s...TP $&P5;................&....tRNS........F........IIDAT(.M...0.E.....2.....{.^...V..L..9H..1.X.....p.&9..2A.....D6@.8"......y.u][.M..A}......,p.H...\.v..2.$e}A......>.........8..;y....3..z.....8.tcCB.(..v^..F........j..l..'.4%..../....(.=K........T$...3-....[9c...E/..5....h.......8....)-...h77\|...k.R2.v....y....},~....;lO\%,Wh.....q.>G..g*c..=VY8...VBG..1..Q......Y fi..k....IEND.B`.

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2106
Entropy (8bit):	7.554456957317547
Encrypted:	false
SSDEEP:	48:EWP8JUaPVKWwCtcHB3sXXRBJ3v8qkZ/aWr/3KZerMLvSOxJ3Df8sfqV1:lkJVKWw03XXZ4Meo931fq
MD5:	6452ED75C53E1A8E90A664DF18959A90
SHA1:	AC01FC2F40F0E4808E22A9C569F3775F0F15A5E2
SHA-256:	C7BAC3E7016DFC7EB5787579BAC6B975B433FC1A9C279DAFC35649D4782F2061
SHA-512:	4B23F7FB31826943CBA6496BD74DC620C8EC3B8F0525497E825F1F1F87486335D4374F85417458C3C3E018C2215B9B419D7DE77CB67AAE9EA619038432E1EB10
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............e..5...YPLTEGpL.e..e..e..p..e..f..f..h..f..f..`..`.....g..f..f..g..g..f..f..f..g..f..h..e..f..d..g..e..e..c..f..f..e..f..g..g..e..f..f........i..h..e..f..f.....e........e..g..f..f..f..f..f..f..g........f..e..e.......F........................f....F.....d........'y.....p....E.....U..7..t.................6..t...........U.................................p......uy...LtRNS.0`..... ......p..._....@..@..oPP...O.^..__....0.o.o.oO..p.P.P_n. ..@0..P........DIDATx..YS.G..G.]..N...t.6&.$..8v\|.>{.."....m.3...../...X..../.....z..Z...^-."\|GT(T.K..Z..n..z.3..BT..Z....\.)..Y.....)..\XZs%..e../...........:....Z.R...,X...B....VCL......".~)P...@..P..8......YG..<...=..BLs..CX........0..J...I....Z..,....0g...i...B..}6.Eh.$.g.D1.k......... ..WYD....O..b~.~......U..s4..?...d0........x.g7.zF...........9..G.A...~...=#.w0.1Z......K..BV..>....x.p...<LS...ft..(\|...2XDE.Q...yc..$Mu.@.L...R=.X,.H....!.X).j../.-q2.....09.........\...&.bYk........j.o......../.u}..(5!.

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	113
Entropy (8bit):	4.663032053166815
Encrypted:	false
SSDEEP:	3:qVvzLMvZK6VZJ5KUHjJMzVJu+1vM2bENHL0Gb:qFzLM86V5K0MRJVSNr0Gb
MD5:	804EEE5E5FFDC6DEB869B55A0082B2B5
SHA1:	0E228B0C4B266EDE03F27EBDDAD0B731B5FE2E94
SHA-256:	5D7F18AA9963451442488406BE51FFD8E8F6E7B5241C55293ED9980C04FBC173
SHA-512:	2D3B6050BBABA9D988252595EDA5BA215B66FCB16FF9F05032E4F6E506B9712EAF96921780F1253A10E233C0EB275B885451A105D2029708B33B0F0548938746
Malicious:	false
Reputation:	low
URL:	https://newsklikdisini5bekbg0.3bsz4.xyz/
Preview:	<html>.<head>.<title>Codashop FreeFire</title>.<meta http-equiv="refresh" content="0;url=./diskonberkah">.</html>

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	34560
Entropy (8bit):	5.785748593472812
Encrypted:	false
SSDEEP:	768:J2J8FpAuYBhoLE5P9FAO3N9KQeZKnGEialbUSRfllktGj7KeQbyni:J2J7uYBhoLgP/AgaJ8nMavllQGj73QbD
MD5:	0ADC0D9564D090ABE498AE8DC3746E4F
SHA1:	3FEB317473619F73E41FDDF5F2D56767D59CD308
SHA-256:	61B7EC0CD4189F4BD47025C9776BD50871B7E62DC5C9F7BFD96EC34DD9CBC4BE
SHA-512:	CE240344B67388CAAA6FC6B774D8ADEFBA324B9C52903ED46CEB38F1E143A9E12DDCCF95985E8689558A2E3CB28D934633259353B9E69EF1BD6953CF31A4EA83
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/m1/v/t6/An-4eutqFWFfYhZPQR8tM2oP5E05jWW-J7tvfsD5wE23SUHSA2nXlg1n6fI_KpO3JoITC05bkD6cfuSRG3Fji57z_i1jO4Bw_K_ZEg.kf?ccb=10-5&oh=00_AYDloHREai0wyhW-O5u0e7vmSZiLh8PQ2WlNfDJ2cKmjwg&oe=6679D1B0&_nc_sid=7da55a
Preview:	...KEYF....$................. .............H.....4C..4C33.@..pB..............................4C..4C......................................................................................................................................................Adobe.d..........................................................................................................!1a.Q..Aq"..#2B......$CSbr.R........................!1.AQaq"B............?..i\|..~.......d.60...h..D.L.3.OB..`..>..eN:).m?.J3x..y..c....1.\|jG...b...?....KH.#.F.Y....MOP<.......}...bB.....c..T.vp...R\|i?...).i49.s?...2.......h'.9.W...G}Tc..V...3......A...i\|..~.....H.3....x..bi,..Gm..G.u8....?ve....J....{..\DW.$t).O..(.&...m'.5Y..U5...&..itM:1.j.t2Q.+...#P........!..h......[~}6.qJ.g...y.G........ ......._.....F..P........./..-.V.&g!..8.U[.[.!.h...y.?...6..D....2Q.f...Fs)Z.Vd... .zB.....wD.7..h.2B.W.V...Z..l.....\6!5...Kc...&.9~.}.....q.\|~~....6..P....:.C....G.\|.~....2...at.vMj-ZL.C...j.3vm`....[.K..)...#;J.1..

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	dropped
Size (bytes):	8744
Entropy (8bit):	7.913625934459027
Encrypted:	false
SSDEEP:	192:3H91BFmicvc+bLApavl4eKGvrRDU0ZgD+ZdV3ceFgi7E4Wa:+XLyy79IdD4dV3ei44d
MD5:	9C840C653E444117FED0AEF18D3A23E6
SHA1:	9C291CE744A90F90FD1C0F0BA613A4EF4D6D6A8A
SHA-256:	68FC4D355941001B4915167C551404A198ABED45808C8E3447B007B7CD36E099
SHA-512:	D05A94594EC14B8E5A6E2B4EB4262F7233E612D4B5A47C1D64E50CB33834891B726638CB4622F20424520145FA8F487D85ECCABB660B224F421EA8AEFDD19249
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f010000620300001b0700006808000058090000b30f0000de15000061160000f2170000ea18000028220000....C.....................................%...#... , #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."..............................................................................s...U=.U+N..{.CI I N7pJ...\h.oT..$U6.y...K..Oc9...Z3y....A....[.>..C.$.K..;..i...V.).5.[...9...j.~.p.c.2`....v.U6tFS.v` e.Enul..-'V9e@.......'.`.w`\..._..C../......;..(m.O.....7`u....1.3..r......C...\'.....=...Y.q....^...o/.)..,......b2..\.N..."..}.p..\..w...G..u..6..Z.Q.......B<..z..szN....x.D.i.Q..y.G.g.&...8...)..[...3......L.c..v...C.P.C.Q.eN..y..CS. ta.2:.....C~.r.C..).$..@.....+C..J..J......BI I ...-...........................!3.."5. #$014%@A..............^..C.....elT.u..FwQ.<..+.s>.....q.=g.e...Y..#.^.37.....-.\7+...f........u.n!%..{...U2{O.(4G.@..>.={......i.X.....3_

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	265
Entropy (8bit):	5.699621597454565
Encrypted:	false
SSDEEP:	6:6v/lhPkjl/Mmw3gwYFE+/2MpWI1BhOsvs36SCYVyecdQjljp:6v/7Il/MwwYh2zI1XOeWTNVyeTZN
MD5:	A1E5F333AD092F16905FC1E60D404729
SHA1:	6FD7E3A35CA3AAD1BE2B46E7E69866110719EAE4
SHA-256:	4A0CF97FCD185F5DEABED3C6F3ED7991B241E3E6EE2BA67AE20589449A60D19F
SHA-512:	1E8C4CE386612D07B844CB84C72C68837B9570BE56F7280BF828D0D5D052358921CCBE844409E33EA58F49F8865D8F8C112A3920C2CD73FE592715C30C5C264B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................>...0PLTEGpL.............................................%L.9....tRNS...PU.....J..K.l....yIDAT.[c```....*...N..@..Z.....L{..3.......$....d.. ....c~e.)..P.$7.......@.'......V.f~.k.3....3......l...(p@v..#......8W..g.-)....IEND.B`.

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8857)
Category:	downloaded
Size (bytes):	78206
Entropy (8bit):	5.617313603795406
Encrypted:	false
SSDEEP:	768:uYKS8wzfs4B2OSMpZ2OwG+pmdphEIdE1YvEmNI17jhRv:6S8woXeUOwGiKEIdJI1XhRv
MD5:	A745E4B7A9A444A6468F4FB78BD6D495
SHA1:	F7B9091C8918006F801AE0B2B493B9846C90CB24
SHA-256:	B2FCD4CF9FAF6A7DD116E5B4AC8FFE63B7AB5964F434629ADD68639899DF82B8
SHA-512:	45C6D3D0EA94F708FDCABEB62B9DEA55E90990746A0EA39EA753BC6166C97EB2C75A7AD27C8192A343DE9B58D35C60D3E953438B519F80719ACF7DB0139A755C
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iizA4/yo/l/en_GB/HHF3KtxQn_Y.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometOverlappingFacepile.react",["fbt","BaseContainerQueryElement.react","CometComponentWithKeyCommands.react","CometKeys","CometPressable.react","CometProfilePhoto.react","CometTooltip_DEPRECATED.react","CometVisualCompletionAttributes","Dots3HorizontalFilled24.svg.react","FDSIcon.react","FocusGroup.react","ReactDOMComet","SVGIcon","TetraText.react","focusScopeQueries","gkx","react","stylex","useIntersectionObserver"],(function(a,b,c,d,e,f,g,h){"use strict";var i,j,k=j\|\|(j=d("react"));b=j;var l=b.useCallback,m=b.useId,n=b.useRef,o=b.useState;e=d("FocusGroup.react").createFocusGroup(d("focusScopeQueries").tabbableScopeQuery);var p=e[0],q=e[1],r=-4,s={item:{marginBottom:"xieb3on",position:"x1n2onr6",$$css:!0},itemWithoutMargin:{position:"x1n2onr6",$$css:!0},itemWithSpacing:{marginStart:"x139jcc6",$$css:!0},overflow16:{height:"xlup9mm",width:"x1kky2od",$$css:!0},overflow24:{height:"xxk0z11",width:"xvy4d1p",$$css:!0},overflow32:{height:"x10w6t97",width:"x1td3qas",$

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 189 x 204, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	8274
Entropy (8bit):	7.8937640766721415
Encrypted:	false
SSDEEP:	192:TMIFbenrINeOftsJWtOmL9M5wwgSCF3WSrH1hmXyqvx:JFbFNPft9/9LSCF3WqmCqvx
MD5:	F39A8CD54BE60CBBBA1BBB6BE7E90E3E
SHA1:	E00B720FCB074E88FF6071B0ABB18AD1CA6401E4
SHA-256:	E92F39753F920D9576A12B6197BE6C0D3866792EA393DA13E16200C0D25F499B
SHA-512:	361449805CCE7711D17524656C14ACE6533BAD2716E86171AC0CA7BE4A9067A7D94F9B631F288F15EBAE9AA63A38BDA5A9BD4F375A263A446C6A6AA75424F39D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............wRf....PLTE.....................GpL... '2............................................................................................................................................................................................................................................................................................................................................................................................................................x..x....>>>................................v..x..w..............SSS...................w..w.............w..w......................555..................zzz......................................................mmm.w.....v..w..x..w..w.............**.w...w..x....................v.....w..q.VVV....x..w..w........w..........@.b.....tRNSf.....>......7......HZ.....P....v.:....p..$.!.T.d.\..k....W.B~3....'K.E.,..r...k^f@...yr....N.....^a.....~...K..-_.m.....e.. 0.(..R...3.h.!@hw.,....9..XN.F.@..~./.6.v

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	332
Entropy (8bit):	4.296126422761529
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4FCvslQHcUiC7Q3ajuWskpwpWvWuMUMU2ldUiiW8kWuMUMUy:t4noU/vmRUslQ8+QKjupkpwpWvWuMUMk
MD5:	F94123242618D16B950113BD6F22229D
SHA1:	28B2E7A4ADB970446E442AE187E07328A68C1687
SHA-256:	EC4C1E58EBA5A80E78C1B52486930F60634B4940322F230C236ABDCFD9F92DEC
SHA-512:	E54B679A15465BEF172F1C364E34337B0C97D92C0F6C444253C8B69CD7147FD728DFEB1CDFA0DB64F0C13DC04999FB7CCE3C6CF49E77B4D1BA50798D9EDB3D94
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/overflow_horizontal/v4/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M7.5 12c0 .83-.67 1.5-1.5 1.5s-1.5-.67-1.5-1.5.67-1.5 1.5-1.5 1.5.67 1.5 1.5zm4.5-1.5c-.83 0-1.5.67-1.5 1.5s.67 1.5 1.5 1.5 1.5-.67 1.5-1.5-.67-1.5-1.5-1.5zm6 0c-.83 0-1.5.67-1.5 1.5s.67 1.5 1.5 1.5 1.5-.67 1.5-1.5-.67-1.5-1.5-1.5z"/></svg>

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	146
Entropy (8bit):	4.927838870881226
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHPPQGZYurgvCo0/:tI9mc4slhohC/vmI4PPQG7rQCz
MD5:	F00EABC2D958B20D27018698E9EE9D5A
SHA1:	F1924FD47C49C7B40C3AC7B983137345C7D36D4F
SHA-256:	36EDBAF2D04F3475DE1BA1B3EEADDCA06F232CA0B35AF734A218A8974B9F0D9A
SHA-512:	4532BE68AF977C96DF2A768C2059827142A8F0773F2010CBF160B9F81B2AEEEBD635AFC2092DBA38CF355B0912DEF6DD51E601FE6112EE944BE28A122FD4B60E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/bars_3/v2/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M21 7H3V5h18v2zm0 4H3v2h18v-2zm0 6H3v2h18v-2z"/></svg>

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	579
Entropy (8bit):	4.50640845727472
Encrypted:	false
SSDEEP:	12:t47N9U/vmRprcQLVhjrAY5uiK8KnnY8/4U0wRJIAoZ6iiMUV0TDoc:t4jU/vycQrjrAY3/Kt/4U0OIFoUzTD3
MD5:	C0CCA7B6C1295E79FE9BBE405122AC53
SHA1:	69C36F5A0F8E20DC556123F6AF6E0B5AE7DBC18B
SHA-256:	6151B1FC5DE0D15BEF2AEAC1B8743AD6A54D9BD44FF5C507321450528D212749
SHA-512:	82C80A388F7900F73F38DEA8C0AA92D4EFF9D96D99C4BB8821689E041582D8E885EDE4618CD24C802C4ABE599F6E187801D5AB04D4751D062BAEED06551B0185
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M19 3.87v9.77C19 17.7 15.86 21 12 21s-7-3.3-7-7.37v-.13c0-1.06.22-2.13.62-3.09.5-1.19 1.29-2.21 2.27-2.97.85-.66 1.83-1.14 2.87-1.65.39-.19.77-.38 1.15-.58.36-.19.72-.38 1.08-.56v3.22l1.55-1.04L19 3.87M20 2l-6 4V3c-.85.44-1.7.88-2.55 1.33-1.41.74-2.9 1.34-4.17 2.32-1.13.87-2.02 2.05-2.58 3.37-.46 1.09-.7 2.29-.7 3.48v.14C4 18.26 7.58 22 12 22s8-3.74 8-8.36V2zM9.45 12.89 14 10v5.7c0 1.82-1.34 3.3-3 3.3s-3-1.47-3-3.3c0-1.19.58-2.23 1.45-2.81z"/></svg>

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	193
Entropy (8bit):	4.760511517259426
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHlbRviTOnQFOaZ0mbtUUWcFtTcFM4UXo:tI9mc4slhohC/vmVR6q8ZvNbfQfirc
MD5:	9C452955A4281F736C8786F3C0876419
SHA1:	104D443B65C15A1CA934FA449520DC81D3C067DF
SHA-256:	5968B4C826F14A991A83B0FF27573BD4A20FD5BB16F79140D399C2E7413BED10
SHA-512:	F66BB34FA7FDAFBF4516105B2AA65315BF6836A71EB98043872E454988A2B17CF7F62254E234C7F07FC282C8926E690388F7F65F186823FD8478D7902ABC7B65
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/arrow_down/v2/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><polygon points="18.65,11.65 12,18.29 12,4 11,4 11,18.29 4.35,11.65 3.65,12.35 11.5,20.21 19.35,12.35"/></svg>

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 38, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	802
Entropy (8bit):	6.730321524502597
Encrypted:	false
SSDEEP:	24:GaByyEMDsiaXvDUbVdxQXHoyb9K7HjGY6LMr/:G88MDs9vu3xQXHKCor/
MD5:	20986D3FE0DDAC454B9F46BC34CE8952
SHA1:	DEFB0E4158B8A9576E663B240336A9BBB28D3267
SHA-256:	D7ECE5222547615BCB5066478F209B6A3E7C3B3C88667972E937C8481688EED7
SHA-512:	1254F83A4331002DAB51948F74C680C3BD7B960F9EF034BF606A80BBAE0D8132ECCA0002660988D7F596D715CAFB70FA79FAE749FBC67F9323E12C63E9BFED7A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...&...&.............PLTE........+..$..9..3..0..-..+.....,.....,..-..,..+..)../..-.....-..+..+.......-..,..+..+..-..,..+..+..-..,..-..-..,..-..,..,..-..-..,..-..,..+..,..+..-..,..,..+..+..,..+..-..,..,..,..+..,..+..,..,..,..,..,..,..,..,..,..,..,..,..,..,..+..,..,..-..,..,..,..,..,..,..,..,..,..,..,..,y..#...\tRNS............."#$%&(2356789@AMOQSTUWZ[]abcwx{~...............................................M.t=...^IDAT..}..:BQ...?..Q.Y%...c...)....9..>..{[.M...\.=.6.\|....Q..%.T.gCh1r...a4Yx...<.%.X...@+...`&...w.Q.............gp.....)..L...5..,..#.'J..yJop.(m.......-.5T..TL...z`.R......B.Z.V.."..&aMQ[D.Z.V.Z...^.vw.^....P.....f"@.Jq..,Q...E.....Fi..(.c8'...)..9.PD.,..0.......(.w....N.k.F.>...P.B.a 3.?+...a..Y....Gu.Mbglq:.V3%.i.Kl..:.f#.6"^*.My.h?@0W..../....IEND.B`.

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1892)
Category:	downloaded
Size (bytes):	13841
Entropy (8bit):	5.299228618528425
Encrypted:	false
SSDEEP:	384:ST56DxlrGrMd4s5XD1D8FSIsownCYQgKobgj:ST54lr+MdB5egI2Cfj
MD5:	AA2FFFB6CA2FF091B928BBDF0041DBB9
SHA1:	DCEC2FEC62338A9A29E79BC3AF076706D9EE5543
SHA-256:	2A6ED750BEE755F19DDD0B1DE2F3DFFC1B17D3A06EEE0CE05C24F790024E4A3B
SHA-512:	CCF7E035F3102876C57315E3D205449E34D2C496E9A2CBD39483D6416F6989299CA44B8C9D33C941804FA3889B53E1EBE5134EF7412D9896EF698B3FA72745F3
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iO7g4/yR/l/en_GB/YpUhBEcSvg9.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometContentNotAvailable.react",["fbt","CometContentArea.react","NullStateGeneral","TetraNullState.react","react"],(function(a,b,c,d,e,f,g,h){"use strict";var i,j=i\|\|d("react");function a(){return j.jsx("div",{className:"x6s0dn4 x78zum5 xtp0wl1 xl56j7k xh8yej3",children:j.jsx(c("CometContentArea.react"),{verticalAlign:"middle",children:j.jsx(c("TetraNullState.react"),{headline:h._("Sorry, this content isn't available at this time"),icon:c("NullStateGeneral")})})})}a.displayName=a.name+" [from "+f.id+"]";g["default"]=a}),226);.__d("CometPhotoPermalinkRootQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="7477261439062872"}),null);.__d("CometPhotoPermalinkRootQuery$Parameters",["CometImmersivePhotoCanUserDisable3DMotion.relayprovider","CometIsAdaptiveUFIEnabled.relayprovider","CometPhotoPermalinkRootQuery_facebookRelayOperation","CometUFIReactionsEnableShortName.relayprovider","CometUFIShareActionMigration.relayprovider","IsMergQAPolls.relayprovide

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7249), with no line terminators
Category:	downloaded
Size (bytes):	7249
Entropy (8bit):	5.208816439128352
Encrypted:	false
SSDEEP:	192:lK6+zHt3hKO3EH0qauYLE8OmeEaBvESdUvk4ikVOkrMDhAp:lK6eHZhrEH0qauYLE8OjEgvES+vk4i2V
MD5:	7E1FED6BDFC0657C0DEDC6E6C19553FA
SHA1:	558908AD0BE5BD05F13A8053C6CFDE0341BC6C08
SHA-256:	3674E598BAF27DFCEA3BDDBC29783B85FD74934F69A34920A061139D2149D7EC
SHA-512:	38D414DD52B07449AADBD637E62D6F20A0D41210CB459704AED66C800D96FC1E692B98658F23BB20D79AADD1C948314230F9D25B49BF92F7D1A1ED917F93A8D6
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S2/content/common/js/shop-topnav2.7e1fed6bdf.js
Preview:	"use strict";function getCurrentCountry2Name(e){return currentCountry=e.toLowerCase()}function redirectToAllSearchResult(e,t){var r,n=checkCurrentUrl(window.location.origin,"codashop.com"),a=checkCurrentUrl(window.location.origin,"codashop-test-new");$("body").hasClass("theme-page--landing-page")?r=window.location.href+"search?q="+e:$("body").hasClass("theme-page--product-page")?r=n\|\|a?window.location.origin+"/"+t+"/search?q="+e:window.location.origin+"/shop/"+t+"/search?q="+e:$("body").hasClass("theme-page--all-results")&&(r=window.location.origin+window.location.pathname+"?q="+e),window.location.href=r}function searchFieldInputUpdater(){$(".search-input-container--productpage").toggleClass("active"),$(".search-icon").toggleClass("active"),$("#search-keyword").val(""),$("#search-input").val(""),$(".search-result-list").hide().empty(),$(".top-nav--general .search-input-container").slideToggle("fast"),$("#search-keyword").focus(),$("#search-input").focus(),inputKeyword="",matchedResults

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	287
Entropy (8bit):	4.942964715795682
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4z7yg0AiICpOTRKOFI38:t47N9U/vmRTDiI6mKOGM
MD5:	1B72B0A3A3280DBE3DF3FB5DF68F90E7
SHA1:	4F79E7A51FF1920839B106DC9848BB7BE3702445
SHA-256:	781BA2DA6DA2698EE6727A646CC2B903A848EDCF729376419007185023E4A0F0
SHA-512:	32257B5EE24DFCA90170D4AF48F2C3091EE83277F0F584B4CB46D4290BF6BF4FAE6FEB0D803D6A8B35EEE69E8F292EABE8C3632EAF782B07A8572D1C32BDCC2E
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M16 21h-2.28c-.35.6-.98 1-1.72 1s-1.38-.4-1.72-1H8v-1h8v1zm4-11c0 2.96-1.61 5.54-4 6.92V19H8v-2.08C5.61 15.54 4 12.96 4 10c0-4.42 3.58-8 8-8s8 3.58 8 8z"/></svg>

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	287
Entropy (8bit):	4.942964715795682
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4z7yg0AiICpOTRKOFI38:t47N9U/vmRTDiI6mKOGM
MD5:	1B72B0A3A3280DBE3DF3FB5DF68F90E7
SHA1:	4F79E7A51FF1920839B106DC9848BB7BE3702445
SHA-256:	781BA2DA6DA2698EE6727A646CC2B903A848EDCF729376419007185023E4A0F0
SHA-512:	32257B5EE24DFCA90170D4AF48F2C3091EE83277F0F584B4CB46D4290BF6BF4FAE6FEB0D803D6A8B35EEE69E8F292EABE8C3632EAF782B07A8572D1C32BDCC2E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/lightbulb/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M16 21h-2.28c-.35.6-.98 1-1.72 1s-1.38-.4-1.72-1H8v-1h8v1zm4-11c0 2.96-1.61 5.54-4 6.92V19H8v-2.08C5.61 15.54 4 12.96 4 10c0-4.42 3.58-8 8-8s8 3.58 8 8z"/></svg>

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 32216, version 1.0
Category:	downloaded
Size (bytes):	32216
Entropy (8bit):	7.993185785933707
Encrypted:	true
SSDEEP:	768:KG3IB65w1AxPokqZ1g9EQnV6a50/jou32tQayETUrku0o6Yf:KRB6OACkqZ1IdXJvFyETUrkNG
MD5:	2D0CBCD956062756B83EA9217D94F686
SHA1:	AEDC241A33897A78F90830EE9293A7C0FD274E0E
SHA-256:	4670BFAC0AEAEC7193CE6E3F3DE25773077A438DA5F7098844BF91F8184C65B2
SHA-512:	92EDCE017AAF90E51811D8D3522CC278110E35FED457EA982A3D3E560A42970D6692A1A8963D11F3BA90253A1A0E222D8818B984E3FF31F46D0CDD6E0D013124
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/youtubesans/v30/Qw38ZQNGEDjaO2m6tqIqX5E-AVS5_rSejo46_PCTRspJ0OosolrBEJL3HO_T7fE.woff2
Preview:	wOF2......}.......K...}c..........................'...2..j?HVAR...`?STAT..'..&/\.....X.E..b.0....6.$..@. ..&..u..[18q....Qz.p.w.{P...on..eYfD.;..8.$X.y......d..~`.e.Kp-....D?}....!...\e....+....{Z..U.,.r.E..]z...{5.e...q.^.f,.^F ..4.t...C-.....!.....z..1........[......^........;.........).!A........`.Z..=>t........v.C....y.o..m6.].vY.e..AA....8E.0.&ZE..8.,..H.....cx..?t.f}..d.u.G.pdH...r.\._.k......iN.E.b-..P...T..u&Y..........!!.\r...$.....KR.D..$..O..=`9`ErvNL".....;.>.+.C.V.N.....X.h.M....%...&.c...$.l..l.YF.1.6..c..Cx!...{.9..t:..d'...@.....Kp....y/".%..{.....{B...(.Y'.?..Sg...`:.V#`!..Ua%...~s.s....W.G.1._..A')....Ab.v.O.s....q...$&.d....-.]J..@...g.(.1.X8..saLMM..#1g....cP1.c..1e.?.6.F.TR$v....P.O..B..K...m..\;.U.]Dg...0..n.vL.L.L.....,..V..!..<....7..w...:]...%K.V..e......>..7.h.q....&..t7.S...TW.........,-&.,..5.6+.7.QX........yw..LJ..1&'B!.....}..?<..JJk.DER.........i{..Q.G...V8.$.~.2...V...R...)...Zov&.*'......}{.

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2244
Entropy (8bit):	5.052844186737019
Encrypted:	false
SSDEEP:	48:Z8/SFBjc4tyGMq4n1QmZCcFPJ+pn4JPpx4JwWKBSejN+QaBSe8q/xQ1:S/qBbYqnEfP814tD4fKBHj3aBHV/q1
MD5:	8F6FAB14D9656D9730BA65F7C9414971
SHA1:	CD0D5AA4A63DC42388152A61845C3258D42AF76E
SHA-256:	53E4A6A239EB3A2C7E653BCD34CA8BF0EC1AE53B72AB13330828C67A4A0AC2C6
SHA-512:	43BF4A34BD20E857A01A5AE3AF85DE06E9290F6F01F2A7E77A6871164D93D151E829F4AD5F2EA51B5AEF3C47705C743900073BA6D08BD71BBD9B972D92035F80
Malicious:	false
Reputation:	low
URL:	https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/css/popupLogin.css
Preview:	.popup-login {...background:rgba(0,0,0,0.8);...width:100%;...height:100%;...position:fixed;...top:0;...left:0;...z-index:9999;..}...btn-login {...background:#eaa300;...width:100%;...height:45px;...margin-left:auto;...margin-right:auto;...margin-bottom:5px;...border:1px solid #ffcc57;...border-radius: 10px;...display:block;..}...btn-login-logo-wrapper {...background:#ffcc57;...width:60px;...height:100%;...padding:10px;...margin-left:auto;...margin-right:5px;...border-top-left-radius: 8px;...border-bottom-left-radius: 8px;...display:block;...float:left;..}...btn-login-logo-wrapper img {...background:#ffcc57;...width:25px;...height:auto;...margin-left:auto;...margin-right:auto;...display:block;..}...btn-login-txt {...padding-top:4px;...color:#000;...font-size:18px;...font-family:'Teko',sans-serif;...text-align:center;...text-transform:uppercase;...line-height:40px;..}...btn-login i {...margin-top:5px;...margin-right:5px;...color:#000;...float:right;..}...popup-box-login-fb {...background:

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	146
Entropy (8bit):	4.938964132950675
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHPKlhQtNNUunhjQAZi:tI9mc4slhohC/vmI4PKlGtNNUunJQ8i
MD5:	0BB6E79FC4160D867A915A7D17A564FC
SHA1:	E91CB173C9EEDDBFB2E61674DB09618A2479A053
SHA-256:	DD08185E1339EA9B3EEA5B27FC3401E2171CE008523F8038B6B08681B4E05906
SHA-512:	E1CB076164D3013612B36B41EAA43839A463C75104A85262CCC73B250ADEF1EC88D04D2A8F65D99D7EB89D4229022ECB4D3E370EE8BAC272426288A6F68C30F6
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/bars_3/v2/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M21 6H3V5h18v1zm0 5H3v1h18v-1zm0 6H3v1h18v-1z"/></svg>

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1604
Entropy (8bit):	5.268027136303121
Encrypted:	false
SSDEEP:	24:hY6sv7zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5zF5cUeh3:3q3+pUAew85zvc/h3
MD5:	DC116BFBFD7B5EF441DA8062F5C02169
SHA1:	0AE353B9604CF429F5C69530333E0C44B5E837DE
SHA-256:	295EB26CB69D6F217D4323D4492C2668123E325A3F47403E38294913FD7A206D
SHA-512:	56D00FD44F67A5B62D914926EE8254F391F8BB3FA90D380632492B14F0ECF43331EEB22405667A5BED05A665AB8219534C0F2CEB62FFB711C433C5BA982FBAD8
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 405 (Method Not Allowed)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:u

Chrome Cache Entry: 584

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	27
Entropy (8bit):	4.3845171317931
Encrypted:	false
SSDEEP:	3:8jEMEN/QC1l:8jMN/QCv
MD5:	F7C8AABF963C3A65DBBA34ACB7D29035
SHA1:	017BC86726314E2DCA0DFC315F4C48463B0446AB
SHA-256:	8E000614947BCED11DCF2C4A0B33E9BE12142555D9196563A93241CB447F64E3
SHA-512:	F65673F68887A3FA20E4A40EE8DE3F08DAE22299C0F76DB126D4D5E72C43A4666955D5D691A45119B46D26B888F81A45E10E13B1F77E7BEF883EA10A938567DB
Malicious:	false
Reputation:	low
Preview:	,...sabr.malformed_config..

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	293
Entropy (8bit):	4.8755880591325855
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4VJD2zPdqUQx+dfYLnIsy2RRWdxWqOQF:t47N9U/vmRf2bQxC6Is/7WdQqOQF
MD5:	4881148D1D44126355C7CC134FD58441
SHA1:	DF5775C8A3DA221FAD474807432534FA6CB5C1E5
SHA-256:	57678BA3491574C18E14F5B0CF26215F1233BAACD2373A10A8F7C58A4D5DE65E
SHA-512:	3CD013A210871E199F5BB68B10072BFA92FCB8648D3CFAB5D47889006ADE956D0F6FB9501AEF1326780EBA47B99F95023CDC0EEEB5093A1788EE9D730A5B64CB
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/audio/v5/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M12 4v9.38c-.73-.84-1.8-1.38-3-1.38-2.21 0-4 1.79-4 4s1.79 4 4 4 4-1.79 4-4V8h6V4h-7zM9 19c-1.66 0-3-1.34-3-3s1.34-3 3-3 3 1.34 3 3-1.34 3-3 3zm9-12h-5V5h5v2z"/></svg>

Chrome Cache Entry: 586

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	341
Entropy (8bit):	4.845385553639442
Encrypted:	false
SSDEEP:	6:tI9mc4slhohgqWHiA4vmI4lAwuQgQIVY6Wqx5Xt6M0TRcmQTIfyuETUrNmraXnPt:t4noOAvmRHnIq6JmM0T7QobETUrsOpk8
MD5:	A83C2EDA381FB2C86BE7587C8D53C330
SHA1:	ECA052D4491403B1731D2FA36176CDAA4DD76F11
SHA-256:	B011A7CD5658F11324619697CE2EA15178B057622074AE6CB687A0E95D978EC2
SHA-512:	03C807382DC1320EFE94B3B47F30988F9153DDB655245139ECF40D90C97760FBCCFB117933736137BA4280D8964896B0ABBB64278BDA324A75BA7CD27557FDBE
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" style="enable-background:new 0 0 24 24;" viewBox="0 0 24 24" width="24"><path d="M12.5 6.44v-.5C13.36 5.71 14 4.93 14 4c0-1.1-.9-2-2-2s-2 .9-2 2h1c0-.55.45-1 1-1s1 .45 1 1-.45 1-1 1h-.5v1.44L4 13h2v6h1v2h1v-2h2v3h1v-3h2v2h1v-2h1v-3h3v-3h2l-7.5-6.56zM6.66 12 12 7.33 17.34 12H6.66z"/></svg>

Chrome Cache Entry: 587

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	27
Entropy (8bit):	4.3845171317931
Encrypted:	false
SSDEEP:	3:8jEMEN/QC1l:8jMN/QCv
MD5:	F7C8AABF963C3A65DBBA34ACB7D29035
SHA1:	017BC86726314E2DCA0DFC315F4C48463B0446AB
SHA-256:	8E000614947BCED11DCF2C4A0B33E9BE12142555D9196563A93241CB447F64E3
SHA-512:	F65673F68887A3FA20E4A40EE8DE3F08DAE22299C0F76DB126D4D5E72C43A4666955D5D691A45119B46D26B888F81A45E10E13B1F77E7BEF883EA10A938567DB
Malicious:	false
Reputation:	low
Preview:	,...sabr.malformed_config..

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	146
Entropy (8bit):	4.927838870881226
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHPPQGZYurgvCo0/:tI9mc4slhohC/vmI4PPQG7rQCz
MD5:	F00EABC2D958B20D27018698E9EE9D5A
SHA1:	F1924FD47C49C7B40C3AC7B983137345C7D36D4F
SHA-256:	36EDBAF2D04F3475DE1BA1B3EEADDCA06F232CA0B35AF734A218A8974B9F0D9A
SHA-512:	4532BE68AF977C96DF2A768C2059827142A8F0773F2010CBF160B9F81B2AEEEBD635AFC2092DBA38CF355B0912DEF6DD51E601FE6112EE944BE28A122FD4B60E
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M21 7H3V5h18v2zm0 4H3v2h18v-2zm0 6H3v2h18v-2z"/></svg>

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	293
Entropy (8bit):	4.8755880591325855
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4VJD2zPdqUQx+dfYLnIsy2RRWdxWqOQF:t47N9U/vmRf2bQxC6Is/7WdQqOQF
MD5:	4881148D1D44126355C7CC134FD58441
SHA1:	DF5775C8A3DA221FAD474807432534FA6CB5C1E5
SHA-256:	57678BA3491574C18E14F5B0CF26215F1233BAACD2373A10A8F7C58A4D5DE65E
SHA-512:	3CD013A210871E199F5BB68B10072BFA92FCB8648D3CFAB5D47889006ADE956D0F6FB9501AEF1326780EBA47B99F95023CDC0EEEB5093A1788EE9D730A5B64CB
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M12 4v9.38c-.73-.84-1.8-1.38-3-1.38-2.21 0-4 1.79-4 4s1.79 4 4 4 4-1.79 4-4V8h6V4h-7zM9 19c-1.66 0-3-1.34-3-3s1.34-3 3-3 3 1.34 3 3-1.34 3-3 3zm9-12h-5V5h5v2z"/></svg>

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1605
Entropy (8bit):	5.267731896790209
Encrypted:	false
SSDEEP:	24:hY6sv7zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5zF5cUehq:3q3+pUAew85zvc/hq
MD5:	34A05309E10878781A76F3793010D70A
SHA1:	AAE3464E7969FB7115B936C274E9E6E471CC5CE7
SHA-256:	E56A073B617303AEE8E2C36466B6B06B3FAAEBD41AF0ABDEC0254FBC0E51B29D
SHA-512:	EF843F89005B8E2D598D627C12A196169421B29A06B83C7D1B3AABF407D3A23FE03B2FF4F34BC6DDB838C793F419B212D73B401E6473CC780B505D2F91E2C61C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 405 (Method Not Allowed)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:u

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	216
Entropy (8bit):	4.800786010781648
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4TK4G2aCM0xt0WGSSJhEi:t4noU/vmRTKd2aCJiWGXEi
MD5:	4769BF33E9F7764A9E55468B4B2FDD43
SHA1:	018175AA909257C549153A1488B9C7FFFDEDA23E
SHA-256:	53A433282E4E3F47144F41EAA4143F35763DB4616DF7791008A1AF78D32C975A
SHA-512:	C78FA4DF431A81B903586FCA21B3315E781AE374B1443147EDAE2F961CBEB4A021F2BF363F39516380D596C3C448B9350D8FCE8A3A2C2CC1B28ED0FF11D26FCD
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/clock/v7/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm2.97 14.95L10 13.87V7h2v5.76l4.03 2.49-1.06 1.7z"/></svg>

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	376
Entropy (8bit):	5.580622094395224
Encrypted:	false
SSDEEP:	6:6v/lhPEuLl/bbtoyl1AViPh3QY32V65Mm+27hVp:6v/7MuLl/bbqzuQY32s9
MD5:	AE278E7804E28C2733CEE9883DA38CE9
SHA1:	09DCBA0885D6F8094617831C6D1A16AD7A1689CA
SHA-256:	D07B8B3DE27E367F307A22F81DDD52AB9BB68A47E71376B9674316910A863B4D
SHA-512:	5CD4D885BCEBCA2DBF1CAE0F88211399E7F723ED7BB95FB10DA9C92408DB637A660604C0C54E3D9F10E0DBCDDFA194269567F6F48C885C4964EB60789C33F545
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............W.?...lPLTEGpL.........................................................................................................N......#tRNS....Q...U........../b..*.v....:9........IDATx^m.G..@...83J.bp...?. hu.....&....,..(}.AZ.S......15D.&.p..@..#.......1.R...5....p..0..9^1..L.H./........M...).v......\|..)E. j.}..>.=...?&...u..-....IEND.B`.

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (520), with no line terminators
Category:	downloaded
Size (bytes):	520
Entropy (8bit):	5.265111984652385
Encrypted:	false
SSDEEP:	6:KZakkQC9KZULk731wqz7o2v/2v32QmTZDM/w37o01D2BZMI:0akQ9K8k731z7xvuv3XmZoIN1DO
MD5:	4A7A9740BCF8062898A69CB939B84746
SHA1:	948BBEA618CAE328D0ACB4CEA603023DA671358C
SHA-256:	C636BD0EA30E4E99B8EF807C5561DF5064F8C1BD84B08038CDAD8BDF989C7822
SHA-512:	25F28582AF320DA8B433B18B2CB098BA878EFCEFB062F45865C8619CB6E4EC638CAEF07A119AD1B12E154BEE396D607179AE19D6DC0EF9A129ADCD2F4C2ED47D
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S2/content/mobile/js/freefire.4a7a9740bc.js
Preview:	"use strict";var CODA=CODA\|\|{};CODA.FREEFIRE=function(e,r){return{playerId:null}}(0,jQuery),$(document).ready(function(){$("input[name='freefire.userId']").mask("0999999999999999999999999");var e=$.cookie("freefire_playerid");null!=e&&(CODA.FREEFIRE.playerId=e,$("input[name='freefire.userId']").val(CODA.FREEFIRE.playerId)),$("input[name='freefire.userId']").blur(function(){CODA.FREEFIRE.playerId=$("input[name='freefire.userId']").val(),$.cookie("freefire_playerid",CODA.FREEFIRE.playerId,{path:"/",expires:180})})});

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 254 x 23, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2006
Entropy (8bit):	7.8615265541912605
Encrypted:	false
SSDEEP:	48:9TH6T+do/KppV1Rihe4+Qla8R5NMReGLB:l6Tl/qpVqhefQlag0N
MD5:	83B636ADBEC271742F86FF9904323132
SHA1:	D9A305F41F9EEFC220753B906032F33BB5FADCE0
SHA-256:	A4AEB63128AC0C4241C398E544A02A38B3E2291C2B1476CBD52BA2FF4C6B7F00
SHA-512:	E6988002E66803C0751BB5D9481885E66EA06CEA10AF2E1717773AEB7ED94C1AE4CA06AC673A3CEBC3A574F5ACB2D899604F5F5EE13C751A05807234BAA18A79
Malicious:	false
Reputation:	low
URL:	https://picjj.com/images/2024/05/12/hBhjN.png
Preview:	.PNG........IHDR.............+.......sRGB.........IDATx^.\.u.9..V"#.x.&.K..Dr$.#.:....."Q....h..c.L..{.X...~..&.~...&..=....G.z..5.V<.......W...(.^...........zg.}.1.H4......o?..G..cO.[....~&..D4.^.G........6t{O4..\|...........>..e.f^.+@.ydCw...D.'.o.r...........\.k~...}.[..=..$4].]=.tLD....;=?.y.........{..K/..<A.ULe..mY......r\...d.H..D.%pb.I.H.5.....P.hJ..z.....c`.Y@....7..y....j...'.yc.f...;v.d.........y<..zi..<G...3.I.....2.`h.lX8.I...e~.....3....]..^.i.3......t....[&K(.oao.6..>..t\.M.r.5...t.bL.....7.E...R..RX.PGT...$.S.......fR........iFc.w.f..^....e...Q.f...@..(.[&.!;~+....Js...ME.....#]x......E.....,g.`_d..K]...0..l..G.....@e.....D\|".[..Bynj\|..v\{+B.Q...gb.M.FN.\g.z....I...ll.. .F}...I:s]+4.=@z...-B...Q..SA.#...\|..b...9y..B..2..CQ.....?x.......'..$.c...2..R..B...<~Q.i..J..R....o,.%...B.r.-...c:.rb...../..}.V.U..,......:...8.E..E%.?my".....E\|...xP..d.=*..G"..t..B.R..T..>7..z.4J...J..M..B..e...I.H.\...Fo.%z...P.9..E[S./...R6ex(f.Z.

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	398
Entropy (8bit):	4.820547366953078
Encrypted:	false
SSDEEP:	12:t47N9U/vmRTDiI6mKOG7bTJ1XUfCRimfDqQehW:t4jU/v0rdGHTJCfCw+qi
MD5:	2A0EC6EB2D5A6F6DEF85A2B9A667C42F
SHA1:	08BA82555D8CA056757BEAC3F8B443A1F60C6061
SHA-256:	85357D329507B0542A21870A328E20F77E6E991BC97D86EC0ACD2521A3C12332
SHA-512:	60AD37CE0204D2F8C60E8F91405E97913E6481E09B4AFF28809573420B988E5AEAB5D77E6B55C8CFAE38D2EA0B228AE7A2EF2CF47FD2B461996B894834BFE9C9
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/lightbulb/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M16 21h-2.28c-.35.6-.98 1-1.72 1s-1.38-.4-1.72-1H8v-1h8v1zm4-11c0 2.96-1.61 5.54-4 6.92V19H8v-2.08C5.61 15.54 4 12.96 4 10c0-4.42 3.58-8 8-8s8 3.58 8 8zm-5 8v-1.66l.5-.29C17.66 14.8 19 12.48 19 10c0-3.86-3.14-7-7-7s-7 3.14-7 7c0 2.48 1.34 4.8 3.5 6.06l.5.28V18h6z"/></svg>

Chrome Cache Entry: 596

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	104257
Entropy (8bit):	7.841093433825739
Encrypted:	false
SSDEEP:	3072:jandvYOFcsd1IMC7aB46/sGFPPf25qI15g2DyE0:jydgON17Qa/n1Pf2YInZyD
MD5:	C3221B6F85D253041DD7A749046252B4
SHA1:	3C61D86B06E871C2C4CA2C4E2ECD99E396D81927
SHA-256:	75B0515E2566CC4467BE7033F6B62B384138C74AAB296FB3A924FB4F6CCEFA1E
SHA-512:	4DEF84B957B8DBAF7097AAED3B1C0DE25DA72C0D0B000B7F74B49E2208B3BFB0C10F5F26A76403B37B647306C6BFCAA4FBF3CC9783C735C683D5373C16A975E7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............$.....PLTE..........(5%!..-...gZf...+%.b~....i\j......[O]...\5+...dWb...$!25.7.....&_T`...............bWglbm0=Y92`9/............#."......H:B..................=CG>5?.........>HMK?I...........WLXmdu51C(#:......sj{...PDM.i^......e4&...ZTe.........wp.i>1.....y.@B>"..}........RGT...........................[-!......^y..../..........=54H28P!.........t}...A+1.dX.....e>MU....pG......YM.pbhVT....PA.k._N7'(.~d..!\KM...HGU.jQ...xH:D;7...\|OE?:NNP^...ukr...w@/hHB.....W@A.sV.{.'vea................"...cjW.qj...J3.XA...OWA....q8%.}r......\|.....}~.Xp.z[R.......cF.....Q\N..}...__r....zY..qyd............ccG...Pe.......gm\|.....znz.w.%(..z...u...#&j..BMx......!$HZ....:@gw.....~......w\|....ps.*1T......o.......K$N.45.CD.Z].....L..4..I..].............IDATx.}mL...DH.n1... ..=".Z.\|..1)t.Pu..u..a....m..Zq..R.kLig.nY../;i5.9..u..hi..!i..V.R.+......~>........z.........5].U-.@D...............[[[...]..~.../a..F...o..2[

Chrome Cache Entry: 597

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11041)
Category:	downloaded
Size (bytes):	52409
Entropy (8bit):	5.6281120502734225
Encrypted:	false
SSDEEP:	768:5yDaPQKIZhkIYGiZ1HYu1dH7BJhHuJEzsU230DUNFOIDdKU:DQKIZPiTJPbKzJ
MD5:	A57B9F764B62E131AE3676AC1CDBA079
SHA1:	729A590968CC26F23E28D80AE1E957F38CCE1D58
SHA-256:	7CDF61EF7173ADF480B96A117B5D485CAA796AD922418A6701400D35F2B418E9
SHA-512:	4DFB141EA4034C2A03FD6C83DAA86CC81092BF8AFC852BEB5D6E9FC3D147E86E1F2B857F92DB36AAA990C3DD0C0267A75FCF8BA4FAF1093536670CD8A15FAEC9
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yF/r/sIUfioK8p73.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("BinarySearch",["unrecoverableViolation"],(function(a,b,c,d,e,f,g){"use strict";e={GREATEST_LOWER_BOUND:"GREATEST_LOWER_BOUND",GREATEST_STRICT_LOWER_BOUND:"GREATEST_STRICT_LOWER_BOUND",LEAST_STRICT_UPPER_BOUND:"LEAST_STRICT_UPPER_BOUND",LEAST_UPPER_BOUND:"LEAST_UPPER_BOUND",NEAREST:"NEAREST"};var h=function(a,b){if(typeof a!=="number"\|\|typeof b!=="number")throw c("unrecoverableViolation")("The default comparator can only be used with sequences of numbers.","comet_infra");return a-b},i=e.GREATEST_LOWER_BOUND,j=e.GREATEST_STRICT_LOWER_BOUND,k=e.LEAST_STRICT_UPPER_BOUND,l=e.LEAST_UPPER_BOUND,m=e.NEAREST;function n(a,b,c,d,e){e===void 0&&(e=h);var f=l;f=p(a,b,c,d,e,f);if(c<=f&&f<d){c=a(f);return e(c,b)===0?c:void 0}else return void 0}function o(a,b,c,d,e){e===void 0&&(e=h);var f=l;f=p(a,b,c,d,e,f);if(c<=f&&f<d)return e(a(f),b)===0?f:-1;else return-1}function p(a,b,d,e,f,g){switch(g){case l:return q(a,b,d,e,f);case i:return r(a,b,d,e,f);case k:return s(a,b,d,e,f);case

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	1115
Entropy (8bit):	6.323598083629364
Encrypted:	false
SSDEEP:	24:gqumRoyc1sp68RdfC6CX7emPkXzqvVFziHmOB:gBmRoyiW6ydfdCX7emQzunzO5B
MD5:	677242E9AD29123CF887BCE628E6527C
SHA1:	26AE76A84C4A174F024A4A8D72106DFB2A58869F
SHA-256:	01C145B6B7935CA5B47831210A371C037FC5FD54AB8EFE2D3EBF3C922AF61DFD
SHA-512:	ACB755E4F99DA426C6C67ECD72A885B315D68ED889B70CC19B4416EEF6B4B69F97149818955F0161E70E7DCBB44C1E556C7A1297CCCF0F70921B091B42D3FB82
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-1/420086716_931108598615436_3858448142618749480_n.jpg?stp=c0.0.32.32a_cp0_dst-jpg_p32x32&_nc_cat=111&ccb=1-7&_nc_sid=5f2048&_nc_ohc=NXwRNknqveIQ7kNvgFwHOBH&_nc_ht=scontent-hou1-1.xx&oh=00_AYAMXp2fbTKj3nPqh5iGhMSYM9EtUaMzlU_M73za1DQd4A&oe=66583EEA
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6e010000b1010000070200003602000071020000e50200003e0300006a0300009c030000d30300005b040000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...... . ..".............................................................................r.).u(JD.kT..k....................................!............S..Q.}..}.e....oz..\..:.....T.q..P.9.JqR...........................!Ba........?.....e\|6?............................!........?..:.....{{.s}...."......................!.1AQ2abq.........?.S].x...`u...v.H..........oe.S..u..>....RH ........(.$..Z...e.""p................................!1Aaq............?!:.@...#&.....hXr..hn...]F*3unW...Rv.Ask.._..v.y.......Bl.8``....m.......O..............t..........................!1.........?..}c...U_'........................!1q..........?.T.7..N.....9..........................!1Aaq.Q........?.;.X.Y...N..

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1138x188, components 3
Category:	downloaded
Size (bytes):	28593
Entropy (8bit):	7.929387122849443
Encrypted:	false
SSDEEP:	768:L304jPc4ByfZD0biQPxjY915N49M6O+v0:LLc4ofZoeQBwn49M6O+v0
MD5:	5C5733184416D959D77FFDD56954B892
SHA1:	A24213662D9668011A524BCB57A7D3630234C4B2
SHA-256:	80BCC12446C8FB985751D6F59A5D61B23149517CE51A229DBA40DFD96754D60C
SHA-512:	C365557A9922D9D830EA73987ECEAAD2CD5CF20BBD2FB1E278F823690CBE8E73A45F20F8DB8832EFFEE5CB1765E4236A682C911D7D2D6923CDCDA6DBCF8BDB9E
Malicious:	false
Reputation:	low
URL:	"https://yt3.googleusercontent.com/MMiaEh74vF-aNPK4AaYN7dI5UnvGz6UShkgEnPmZSb3m97mf81-I9OjIWNYeqy8i4nXUW4fbqac=w1138-fcrop64=1,00005a57ffffa5a8-k-c0xffffffff-no-nd-rj"
Preview:	......JFIF........................................................................................................................................................r.."..........................................`..........................!..1A."Qa.#2Rq..BUbr......456tu........$3Ccs......%T...SVev....D......................................M........................!1..AQa."q...2..#BR......3br...S........Ts...$45C..............?..."i.R"!.......\|....Yn...>...O_.-#~.xs....\|][X..A.....j..'....+..Fy9.....?.Q...>....?......."..$DB$DB$DB$DB$DB$DB$DB$DB$DB$DB$DB$D.O...>.Y....G.V\|........M....T6.-N...\z.....CE%d.=O.C.>....8...r!......P_..._v..jS..=9CE.....Y...d.'2..JX.bl1.....DL.......I.....=\.6..}...}@..\|\|..G......o];......B..}...2..m....7.y.>............<.....uH....."!."!."!."!."!."!."!."!......b.!F.p....@....y....f....x(....$.96D.li.S.$q..".u..!c....-.....y{.......!c.J......G..#..J..$]..a.:....M!@U.U@..@.....'.%1.n\|V@.rh.Z4..Ry..S...^.&@h..z......ZD..D..D..D..D..D..D

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7121)
Category:	downloaded
Size (bytes):	39533
Entropy (8bit):	5.4038967591202125
Encrypted:	false
SSDEEP:	768:VT+laXXAiE9N1rwPKauI6AzFgpdyx8QPvNe5EqETvONWlVOkWHdWrjrqrNraVAtA:dXXAiE9zrwPKauQPvx/T5DusrjrqrNrW
MD5:	F2E65610BC308B10FF3B8EA4E85445E7
SHA1:	FC21B3345B0A1677357617A65CDDA9B741DAC4BF
SHA-256:	8DA47E5E364735DBCFBA72D0F6212E58709801142E7D38BB7B79B7CA1C5F7783
SHA-512:	4CA28775F0F2F0024077CEF8445833861D4119695363970DD349B7F59F4056E34FC091BED575C73D66FCD22EEBEF849D7B1738D8B154A8A1B991A685E78BA176
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yZ/r/dQ8-bsVFFVS.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("MinGapType",["$InternalEnum"],(function(a,b,c,d,e,f){a=b("$InternalEnum")({UNKNOWN:0,ORGANIC:1,ENGAGEMENT:2,FIXED_POSITION:3,PROMOTION:4,SPONSORED:5,END_OF_FEED_CONTENT:6,FB_STORIES:7,HIGH_VALUE_PROMOTION:8,FB_STORIES_ENGAGEMENT:9,PYMK:10,SHOWCASE:11,FB_SHORTS:12,TRENDING:13,IFR:14,ENGAGEMENT_QP:15,GROUPS_TAB_UNCONNECTED:16,END_OF_FEED_REELS:17,FRIEND_REQUESTS:18,FB_SHORTS_FALLBACK:19});c=a;f["default"]=c}),66);.__d("AdsExtremeGapUtils",["gkx"],(function(a,b,c,d,e,f,g){"use strict";var h=3,i=6;function a(a,b){if(b!==5)return!1;b=c("gkx")("23035");if(!b)return!1;b=j(a,0);return b>i}function j(a,b){if(a.length===0\|\|b>i)return b;var c=a.length,d=k(a);if(d===-1)return b;return c-d<=h?j(a.slice(0,d),b+1):b}function k(a){for(var b=a.length-1;b>=0;b--)if(a[b].minGapType===5)return b;return-1}g.EXTREME_GAP_DISTANCE=h;g.shouldApplyExtremeGapProtection=a;g.getLastSponsoredStoryPosition=k}),98);.__d("BrandSafetyOpportunityLossRateFalcoEvent",["FalcoLoggerInternal","getFalc

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6185)
Category:	downloaded
Size (bytes):	49052
Entropy (8bit):	5.519300357774896
Encrypted:	false
SSDEEP:	768:z11yseqb+u2JZfM2VxQHr4Bk292grwdHBDlWkys14WXB5oeY:z11ybvfM2gUBcdhK0B5FY
MD5:	BABE314B92CC35AE91398D3D54D3DC19
SHA1:	27ACA22082A0B4A727DFDC8A795537A72C3BA5F8
SHA-256:	BDED1688FAD3DB3E1B89FCDDFE4DB000A528195EEAFFDC6CCAE6468D1D10216E
SHA-512:	343826226F906562A5E847D3BDAC72F62888970140CF6289E4078EBA4C91F61083DB31DCDF5F3591D0D45382DD18286ED665B50839D7521A53914E672AC1E6CF
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3i4vm4/ym/l/en_GB/hZYSGm_6tB-.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("BaseCacheEntryKeyBuilder",["BaseDataEntryKeyBuilder"],(function(a,b,c,d,e,f,g){"use strict";function a(a){return c("BaseDataEntryKeyBuilder")(a.entry)}g["default"]=a}),98);.__d("BaseDataEntryLabelKeyBuilder",[],(function(a,b,c,d,e,f){"use strict";function a(a){return a.label.trimLeft().toLowerCase()}f["default"]=a}),66);.__d("BaseCacheEntryLabelKeyBuilder",["BaseDataEntryLabelKeyBuilder"],(function(a,b,c,d,e,f,g){"use strict";function a(a){return c("BaseDataEntryLabelKeyBuilder")(a.entry)}g["default"]=a}),98);.__d("BaseTypeaheadDataCacheProvider",["BaseDataEntryLabelKeyBuilder"],(function(a,b,c,d,e,f,g){"use strict";a=function(){function a(a){var b=a.cache,d=a.matchBuilder,e=a.mergeBuilder;a=a.keyBuilder;a=a===void 0?c("BaseDataEntryLabelKeyBuilder"):a;this.$1=b;this.$2=d;this.$3=e;this.$4=a}var b=a.prototype;b.add=function(a){var b=this;a.forEach(function(a){var c=b.$4(a),d=b.$1.get(c);b.$1.set(c,d!=null&&b.$3!=null?b.$3(a,d):a)})};b.clear=function(){this.$1.cl

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1609
Entropy (8bit):	5.268171846580519
Encrypted:	false
SSDEEP:	24:hY6sv7zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5zF5cUehk2:3q3+pUAew85zvc/hk2
MD5:	20D444971B8254AC39C8145D99D6CA4C
SHA1:	72E41F2A340F4A6E3A748CB57D293631390B733A
SHA-256:	A04F41837D317573EA61EA29ABBA7C4FF4E38C9177DA68F4706B9C13921A8D82
SHA-512:	BEA16497D014481EE10EB80A129846B7B184AB1ECA242FA38B84255C6461C748A62F1BD6C15D1807F8B5E926E550C30AB47F8A40AE43BE229E6AB857C4EA6F6F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 405 (Method Not Allowed)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:u

Chrome Cache Entry: 603

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11592), with no line terminators
Category:	downloaded
Size (bytes):	11592
Entropy (8bit):	5.214688259892576
Encrypted:	false
SSDEEP:	192:DwbgMiAo5mi2byCGQawyOFCKPUfY1P5lDSjNYRv6Ic/KjZ9wCmH5:D/5mi8lhyg/WYs5V1Y9EZ
MD5:	DDBB39A9E8E67D5067145F8AA76B938D
SHA1:	2F7CACFBCAAF8291A1A933898D1DFF0B21EDF1CB
SHA-256:	44798A517A7C8D28C1E371A1B8B869BAE1608BD48DF7ED50800CBED8703612C1
SHA-512:	0D39A3532DA94D3E32A87B89D2E3E8E1EE94F40E06C61773808F90DC9C0DC6A69BDDC713A5CD99151799FA5F74DDAF62A4E8ECACEF5241B54D6B37892561F811
Malicious:	false
Reputation:	low
URL:	https://script.tapfiliate.com/tapfiliate.js
Preview:	!function(){var d=window,v=window.TapfiliateObject\|\|"tap",r=d[v]&&d[v].q\|\|[];if(!d[v]\|\|!d[v].loaded){d[v]=function(t,n,e,o,i,r){var a=d[v][t];if("function"!=typeof a)throw'Function "'+t+'" not supported';a(n,e,o,i,r)},d[v].q=r,d[v].loaded=!0,d[v].baseUrl="https://frstre.com",d[v].baseUrlDepr="https://tapi.tapfiliate.com";var n,h;d[v].Tracking=d[v].Tracking\|\|{},d[v].options=d[v].options\|\|{};var m={},a=!1,s=function(t){var n,e,o,i,r;if(e=[],r=/%20/g,o=function(t,n){n="function"==typeof n?n():null===n?"":n,e[e.length]=encodeURIComponent(t)+"="+encodeURIComponent(n)},t instanceof Array)for(i in t)o(i,t[i]);else for(n in t)f(n,t[n],o);return e.join("&").replace(r,"+")},l=new function(){var s={},l=0,u=[],c=[],p=!1,o=this;return this.addMethod=function(t){if(t.supported())return l++,s[t.key]=t,this},this.init=function(){var t=l;function n(){--t<=0&&(p=!0,function(){for(var t=u.length-1;0<=t;t--)o.read.apply(o,u[t]);for(var n=c.length-1;0<=n;n--)o.write.apply(o,c[n])}())}for(var e in s)"functi

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	778
Entropy (8bit):	4.260772867505465
Encrypted:	false
SSDEEP:	12:t4tM65jghuamzC41gZVz1QDUQ2R6a2qanGgmonPQ/0:t4tMMjwuamzz1gZLQER6lLmoI/0
MD5:	C912F19C8AAE23F530DFDDD4D7BBA780
SHA1:	40C607FABFDE63E2A4D92462FEC123A2D52D1F8E
SHA-256:	E593ED5B1D641EA4F61CD2308346A608EE088E293AC177881E4CB43969B87E05
SHA-512:	377D00EF8981C127EB1A573731B1EC22DA072DED23E7D920834C88F280FEFD160885D9EFEF3F8C6B942DB280685ACED73B2D7240ED55FB85947D8180A1FFBC37
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M6.15895 20.0023C5.32221 20.0023 4.54031 19.586 4.07317 18.8918C3.30492 17.7502 3.31241 16.255 4.09205 15.1211L4.82045 14.0617L4.14538 12.4963C3.74297 11.5632 3.84031 10.4898 4.40399 9.64424L5.50013 8.00004L5.50013 6.00231C5.50013 4.89774 6.39557 4.00231 7.50014 4.00232L20.0001 4.00239C21.1047 4.0024 22.0001 4.89783 22.0001 6.0024L22.0001 19.1736C22.0001 20.0073 21.7396 20.8201 21.2551 21.4985L16.1368 28.6641C15.9224 28.9643 15.5279 29.0747 15.1888 28.9294C13.4238 28.1729 12.4653 26.2504 12.9234 24.3856L14.0001 20.0024L6.15895 20.0023ZM27 18.5001C28.1046 18.5001 29 17.6046 29 16.5001L29 6.00006C29 4.89549 28.1046 4.00006 27 4.00006L24 4.00006L24 18.5001L27 18.5001Z"></path></svg>.

Chrome Cache Entry: 605

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	484
Entropy (8bit):	4.378279176071406
Encrypted:	false
SSDEEP:	12:t4noU/vmRhChc2LX7pC52k+N4ezW0qw9DIRSY:t4oU/vYqVG2kCCw2Rz
MD5:	2739BB8635C4631E78B240C8B83D102A
SHA1:	38B8FDB6A8444513D18378E789547B377CA46DDB
SHA-256:	FDE8C85A62FB4E29C3CD902167B791D0D06C3AEEF85C8DDDF3212287FB771A0B
SHA-512:	A2A5F5AF163E487943608C9646A6F30BF870607FC7753C14621BC9592483713D9E2F4B40A63030AC820F56E310D3116E78E3E959AD869E9F77FFE9EC6C133CD8
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M19.56 12c0-.39-.03-.77-.09-1.14l2.19-2.13-2-3.46-2.92.83c-.6-.48-1.27-.87-2-1.14L14 2h-4l-.74 2.96c-.73.27-1.4.66-2 1.14l-2.92-.83-2 3.46 2.19 2.13c-.06.37-.09.75-.09 1.14s.03.77.09 1.14l-2.19 2.13 2 3.46 2.92-.83c.6.48 1.27.87 2 1.14L10 22h4l.74-2.96c.73-.27 1.4-.66 2-1.14l2.92.83 2-3.46-2.19-2.13c.06-.37.09-.75.09-1.14zM12 16c-2.21 0-4-1.79-4-4s1.79-4 4-4 4 1.79 4 4-1.79 4-4 4z"/></svg>

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	1.6001495726289154
Encrypted:	false
SSDEEP:	12:XFeeeQL5555555555dWr555555555555b5555r555555b555Lr555553r555Lh5k:X2uD
MD5:	F2A495D85735B9A0AC65DEB19C129985
SHA1:	F2E22853E5DA3E1017D5E1E319EEEFE4F622E8C8
SHA-256:	8BB1D0FA43A17436D59DD546F6F74C76DC44735DEF7522C22D8031166DB8911D
SHA-512:	6CA6A89DE3FA98CA1EFCF0B19B8A80420E023F38ED00F4496DC0F821CEA23D24FB0992CEE58C6D089F093FDEFCA42B60BB3A0A0B16C97B9862D75B269AE8463B
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/aef0ced3/img/favicon.ico
Preview:	............ .h.......(....... ..... ........................................................................................................................................................................@...@...p.......................@...@...................`...................................................`.......0...........................................................0...P...........................................................`................................PP...................................................................... .............................................................. ......................................................@@.................................P...........................................................`...0...........................................................0.......`...................................................`...................@...@...........................@...@......................................................

Chrome Cache Entry: 607

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	146
Entropy (8bit):	4.938964132950675
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHPKlhQtNNUunhjQAZi:tI9mc4slhohC/vmI4PKlGtNNUunJQ8i
MD5:	0BB6E79FC4160D867A915A7D17A564FC
SHA1:	E91CB173C9EEDDBFB2E61674DB09618A2479A053
SHA-256:	DD08185E1339EA9B3EEA5B27FC3401E2171CE008523F8038B6B08681B4E05906
SHA-512:	E1CB076164D3013612B36B41EAA43839A463C75104A85262CCC73B250ADEF1EC88D04D2A8F65D99D7EB89D4229022ECB4D3E370EE8BAC272426288A6F68C30F6
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M21 6H3V5h18v1zm0 5H3v1h18v-1zm0 6H3v1h18v-1z"/></svg>

Chrome Cache Entry: 608

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1971
Entropy (8bit):	4.140265923170004
Encrypted:	false
SSDEEP:	48:4uxgftjRvYQn94Cz5pdVw8jV/cu745MJzis0rR+ToGq/SJKF:aR5pPvtc2fd0YT+
MD5:	8F64411A9AC7F40E18967F620AE1B546
SHA1:	4C3FCE32CE99FAACEA1BADF35BE7091BD2F09384
SHA-256:	B77B4C9A17FB16DDADEC307F40FE8B37F806D80E97E3F8854142CDA91662708B
SHA-512:	3DE4780539E5C9850987401436A8F5D16177393C1AF930B01B7E9987CE2CB875ABD2490116DE0B6597C2A1B0D0D11E7AC872B652E5D8EF3B84C23146FAA0FA16
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_fill/youtube_kids_round/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <path fill="#FF0000" d="M21.39,13.19c0-0.08,0-0.15,0-0.22c-0.01-0.86-0.5-5-0.78-5.74c-0.32-0.85-0.76-1.5-1.31-1.91 c-0.9-0.67-1.66-0.82-2.6-0.84l-0.02,0c-0.4,0-3.01,0.32-5.2,0.62C9.28,5.4,6.53,5.8,5.88,6.04c-0.9,0.33-1.62,0.77-2.19,1.33 c-1.05,1.04-1.18,2.11-1.04,3.51c0.1,1.09,0.69,5.37,1.02,6.35c0.45,1.32,1.33,2.12,2.47,2.24c0.28,0.03,0.55,0.05,0.82,0.05 c1,0,1.8-0.21,2.72-0.46c1.45-0.39,3.25-0.87,6.97-0.87l0.09,0h0.02c0.91,0,3.14-0.2,4.16-2.07C21.44,15.12,21.41,13.91,21.39,13.19 z"></path>. <path fill="#000" d="M21.99,13.26c0-0.08,0-0.16-0.01-0.24c-0.01-0.92-0.54-5.32-0.83-6.11c-0.34-0.91-0.81-1.59-1.4-2.03 C18.81,4.17,17.99,4.02,17,4l-0.02,0c-0.43,0-3.21,0.34-5.54,0.66c-2.33,0.32-5.25,0.75-5.95,1C4.53,6.01,3.76,6.48,3.16,7.08 c-1.12,1.1-1.25,2.25-1.11,3.74c0.11,1.16,0.73,5.71,1.08,6.75c0.48,1.41,1.41,2.25,2.63,2.38C6.06,19.98,6.34,20,6.63,20 c1.07,0,1.91-0.23,2.89-0.49c1.54-0.41,3.46-0.93,7.41-0.93l0.1,0h0.02c0.97,0,3.34-0.21,4.42-2.2 C22.

Chrome Cache Entry: 609

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	191
Entropy (8bit):	4.705262579447954
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHlbRviScJUkRUWJDUU1V0QLEjz5UFDUl:tI9mc4slhohC/vmVR6SWJDNejF2il
MD5:	28B7D5722D774748EB3BEE51D246A9A8
SHA1:	B61B3FA044EA865243E2FF195A81AF1027A9F152
SHA-256:	9B70EAE3BBA1AFC60819D43E37AF558FAB2D1C429DD940DCAB4B35E23BD51989
SHA-512:	9E8D26D7EA3B6ED05348EB75555FDCB001AECC24AB8516AE8058C3B7FA6B791CAB056A31FBEAFEC18C9E97FB39657B07EA7ABE3E3347B9C9D86FC18AF4943796
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/arrow_down/v2/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><polygon points="18.79,11.29 13,17.09 13,4 11,4 11,17.09 5.21,11.29 3.79,12.71 12,20.91 20.21,12.71"/></svg>

Chrome Cache Entry: 610

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 10 x 10, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	79
Entropy (8bit):	4.71696959175789
Encrypted:	false
SSDEEP:	3:yionv//thPlH1tnt/tAhHGZscm1olkqCwbp:6v/lhP6hHDcZCYp
MD5:	8DC258A49B60FAE051E9A7CE11AD05CF
SHA1:	DAFEF280663F4205FC7F0E47799E9945E6A68D6D
SHA-256:	C8CAED93847AFFC154CB3D424E34FC146E7340BB29ABEBD5EBA7063E3DCA0604
SHA-512:	5F11ED60D79A80EF7CCEFFA907CD55F31D8DB19BD2A7F4C2650C62A355C5071C5FB61DA1EB0A2071CE22ECDC35C0D12F51E4D13AAC3B0FDB95ED4629815B5AFB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............PX.....IDAT.Wc...0a.!..)....A,....Zl....IEND.B`.

Chrome Cache Entry: 611

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x600, components 3
Category:	dropped
Size (bytes):	52034
Entropy (8bit):	7.9607251646617065
Encrypted:	false
SSDEEP:	768:jvU9tNdp13AN7ER42wXaSdiynTATGGbxEbek/d+mq8fnc0R3iKxl:7U9t3p1Q5ERaaSVapbxEbeu+18PbZiMl
MD5:	6B9977C88C35F7A2CDE88D62014464CE
SHA1:	2C540F712089E7B3F6C55C939A8FE58124C5854D
SHA-256:	B684DED87A81F1F5772825886F7B6E08B4C73DA08AD54736CF9B70801F175DED
SHA-512:	09168B14635C9A49333D770530C3A8473E7451E3763DDA0F1E88C6E033BA96DEB1CCAD6AA5F8233BAD2776F6EAF27CFAAD7B921866C43FF9614AFA00E8186689
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a72010000e0120000552c00003a2f0000753e0000515d0000997e000003840000b78700008a96000042cb0000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......X.X.."..................................................................................b...............................................U`w.......A......................)Y...M.U..7....O6.<.....1..f.H....h..:x:l....{ ....................e.3\).A........................:...,..g-X.u...H..."C\8.:....1vl.{...D52.8].......\)..s.................I....W...E..TO.Y.&./%M.A.l.].z....m&Q{+.....vW$..._..].W...........[".y...<........J...................v..>...[....>.g$...\.)...h..-.g..<3........f......9.u.tt.3....6/._wc.H....6R.....Q.=..........,s=....n.2.....L~R[y.yKm.C.5.....-'.qY.(.E.kFI.r.b~..]...[G.4..@.N....K.e6.h.v.b..^...so..0....'.u!1....W_B3..[.....rc.V.3.@....3.8m.

Chrome Cache Entry: 612

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	64756
Entropy (8bit):	5.225827032715958
Encrypted:	false
SSDEEP:	768:OmzGTKHFfqqFgt1qNy/eGvs6jfsrP0bz8JpvegbKUAWKwIM:jFq/noy/ekfIY8JF6S
MD5:	679A3A4A17037D73A8C5289E662E71BE
SHA1:	9C67A9F0AE800CD4758FED2C9C108C6CB89B66FA
SHA-256:	0E7D78CFE6AD5ABCC9E7AEABE78DE85A2BB8DA203CFB48C83C1015F3FFA873A8
SHA-512:	832D7841382B699B6C98F0C1B1AEED00C15A8EAFE912D530DBB4C5A2E686315357BE323159F1AEA8DE77B1389B681B98FC2F7F94E91BFB31D7BA66DCD9858A77
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/yg/r/DUjm2v1u572.kf
Preview:	....KEYF..$... .........................8..........B...B...?..pB............RandomSubdocument...................B#.............B...B...?..pB.................~..Tk...X...D..d1..........N#..............\...`...d.......\|........... ...8...................`...<............4.=...>W..?..'?..:?............................~..................?..?.......>...................?..?.....[.=..>..................a?UUU?.......?...................?"......>...................?0....[.=..><......=...=H...`..=`..=T...\..=\..=`......=...=l.....=..=x......=...=.......B.......B..............pB..pB........................ ...........D....... ...8...................`...<.........<N.=4..>.[.?.c+?N.>?..........=....5..>5...................8......?..?R......>............X......?..?d.....>..>R...........\|...UUU?UUU?.......?r..................?.......>...................?......>..>...............?...?............ ...........p.........<N.=4..>............<... ...................0......C`...............

Chrome Cache Entry: 613

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 369144, version 2.15
Category:	downloaded
Size (bytes):	369144
Entropy (8bit):	7.996996558953239
Encrypted:	true
SSDEEP:	6144:MrdGJh88ycGS/oRz6MS0jMJ1FovEebhS91ZcRwhGR9hGO:MrI5HfARGM+J1HetSdcRmGbh
MD5:	C44434D881D9D9C7C21B109B23D7777C
SHA1:	9725106075A492834DF7158FD77062D58F966DE3
SHA-256:	E7ADE7E704A6E65A30A5B42D3B6730D7BF40FB2ABDEDF6AEC8A73EC4AEB2838D
SHA-512:	7EFD7B71DB282B58BB1A91CA27F7A8475473BC0ABB69F8991628CE2CC11EFA1A25E31F5604AB7DBFF4DD31564844CAF551829F28ABE39F517D8D23014EF88F5F
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Semibold.woff
Preview:	wOFF..............$.........................FFTM............}..GDEF...0.......d#..GPOS...............GSUB..........!.=]..OS/2.......`...`k...cmap...........@..]9cvt ..(....p....;..9fpgm.."D............gasp...(............glyf..F.......A.6B..head.......6...6....hhea.......!...$....hmtx...p...N../@...Vloca..)......./D']..maxp....... ... ....name..P...........post..Y...6...y..[prep..'.........o.i:........#.B_.<...........y......7.....................x.c`d``../...k......".......`....................P.`.w...............X.....x.......x.......`..................P......!....tyPL.@. ...J.z...... .............. ..x..Zyx..~g.........d...#.....$.@.$l..;...I.....-J.D.DT..j.BU.^-u)K.zy.. ..,9......6.....{...f....\|...3.;.?....eK,.5f..hM.xy.q.!...vc.!z:9.......1.....".~.fY7.D..A......qD>1.:.ja>...+...=..Va.;R.s..M@.{.ej!1...b..Qf.A.3.u..,.FY$....K.0...\.....<.....V.j.gZ.*..>.v..=.[..=......wb1.....Q.A......].S..^.J.c.h../...>.e.<.J.....(...).....~...?S...uA=....s.U.f..

Chrome Cache Entry: 614

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	346
Entropy (8bit):	4.782195104649308
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4eTgAV99WTc6XzQuJ3/vh7QrB9TzUuM8XGk+LlvDME:t4noU/vmRSgQ9Ec6jhJ3XtuM8sL9DME
MD5:	A81BADB0BAAD5A9F30C4F71D94F2C09A
SHA1:	74DEBED4DAC92DB3B79CCFA1BDD2C93852D2A2B4
SHA-256:	C46134C020CDF3060355F81622A054C9F23A4F04AA887876851796FA6243C80D
SHA-512:	1F3975165382775F332EE96ECD6BBB06952D583E72E75DD3984860C932D0D88FB04B182842C3F3318455A322F6E01B7C50A0C0C46E861D45542A8F25CC03F9B8
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M16.9 6c-.46-2.28-2.48-4-4.9-4S7.56 3.72 7.1 6H4v14c0 1.1.9 2 2 2h12c1.1 0 2-.9 2-2V6h-3.1zM12 3c1.86 0 3.43 1.27 3.87 3H8.13c.44-1.73 2.01-3 3.87-3zm0 11c-3.31 0-6-2.69-6-6h2c0 2.21 1.79 4 4 4s4-1.79 4-4h2c0 3.31-2.69 6-6 6z" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 615

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5842)
Category:	downloaded
Size (bytes):	37399
Entropy (8bit):	5.448522414106887
Encrypted:	false
SSDEEP:	384:B7j8FarWX8oDvnpVKyGdxRNElB1N67RrL3DwM/vSNAF4QbefaNJiJvFrctn9vGTL:+8WlkrDD1ViStQ9FrO9IJ0RMQqBBv
MD5:	7BC249E8F09C6D6C6336795A24CFA35C
SHA1:	DD0FB6A72FD0D1E3F30094801B0F42CCE0C4E34B
SHA-256:	3B44CFDE698D3F9628A392623FD7EC4663743FF988F29FE9460755D5E01FB00C
SHA-512:	84B0E4CA9D01AC92668FEC4F1B5515379EC812FE44158651D316E9680B5AAE0B7173A52ED6F63276916986F0B195C6508BDFC40C5DD4F5D72FB4DA67393FF17E
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3i9Jf4/yX/l/en_GB/l0OMkD_OPg7.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("ArrowLeftOutline24.svg.react",["react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react");function a(a){return i.jsxs("svg",babelHelpers["extends"]({viewBox:"0 0 24 24",width:"1em",height:"1em",fill:"currentColor"},a,{children:[a.title!=null&&i.jsx("title",{children:a.title}),a.children!=null&&i.jsx("defs",{children:a.children}),i.jsx("g",{fillRule:"evenodd",transform:"translate(-444 -204)",children:i.jsxs("g",{fillRule:"nonzero",children:[i.jsx("path",{d:"M99.78 56.78a.75.75 0 0 0-1.06-1.06l-6.25 6.25a.75.75 0 0 0 0 1.06l6.25 6.25a.75.75 0 0 0 1.06-1.06l-5.72-5.72 5.72-5.72z",transform:"translate(355 153.5)"}),i.jsx("path",{d:"M109 61.75H93.625a.75.75 0 1 0 0 1.5H109a.75.75 0 1 0 0-1.5z",transform:"translate(355 153.5)"})]})})]}))}a.displayName=a.name+" [from "+f.id+"]";a._isSVG=!0;b=a;g["default"]=b}),98);.__d("BaseToast.react",["BaseInlinePressable.react","BaseTheme.react","BaseView.react","FocusRegion.react","focusScopeQueries","react","useCurrentD

Chrome Cache Entry: 616

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	531
Entropy (8bit):	4.517890434004929
Encrypted:	false
SSDEEP:	12:t4tM65EVlUbal0YClBze4gKCqRaMcmt+BOgyy9e5PhwWU:t4tMMbS0TBAMdc1QgcdrU
MD5:	D8AB2A29ED285F79AF11A250D2536BC1
SHA1:	B394B72270ECA95336C5780E1F97C0CAD051C0FF
SHA-256:	AAAEF8F774A256E546C1178D91EBBA27FA0F7A7420D7E54DCC4F26D6DD7AB31A
SHA-512:	3F376435B591FCB848D4D259A0DA5BAE15EB8583572C00C6E3041DDB64C1756E48A333EB6144042A45D23E2A45DB623CD78DB5467579051CA674F93C8964FCE2
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_fill/shorts-comment/v2/32px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M5.5 3C4.11929 3 3 4.11929 3 5.5V21.5C3 22.8807 4.11929 24 5.5 24H22.5L26.7474 28.5741C27.5513 29.4399 29 28.871 29 27.6895V24V5.5C29 4.11929 27.8807 3 26.5 3H5.5ZM8 10.5C8 9.67157 8.67157 9 9.5 9H22.5C23.3284 9 24 9.67157 24 10.5C24 11.3284 23.3284 12 22.5 12H9.5C8.67157 12 8 11.3284 8 10.5ZM8 16.5C8 15.6716 8.67157 15 9.5 15H18.5C19.3284 15 20 15.6716 20 16.5C20 17.3284 19.3284 18 18.5 18H9.5C8.67157 18 8 17.3284 8 16.5Z"></path></svg>.

Chrome Cache Entry: 617

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 246x138, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	2364
Entropy (8bit):	7.8898799119917955
Encrypted:	false
SSDEEP:	48:JiaYdZiN+03MtRdBxSF5Gekmhgm9au1PXPqq72XDIV9Uw+6Dv:YUN+032Rd/SFGJpevCqnh+6b
MD5:	37898EF4CB773CD6D1095F56C10860AD
SHA1:	AA7B6BF51E0E3AF086D3848AE3FAFB8FD6DA01A2
SHA-256:	C610145DAB138B7AE387D1AD6FE318F6F77B491D2257591D6BD2149CBAF58564
SHA-512:	A2C0139705539537EF3438A299796DD5E98C78F655A9544EA236830C4039DE38BA55702F97BE63B1B442447D56620C05F3F6E9BA25BB910A5D777E06BF99AFC6
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/FXzvFug0Rv4/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLB8iZOish3K05X5DCLbrJRzh2WrfQ
Preview:	RIFF4...WEBPVP8 (....2.......>Q(.F....!6i.p..in.t..p...$.......U..i...........T........V?.x3...O.O.../....h...A.....~-.......A..............?.....1...}....>.?..4.....C.G.../....w...w.../........=.M.............~..)~..(QeL...4...x.(-..3J.yy.m./.V...O..jb5.u.. ".....).......h......j'_m.M.k?o...Y..S.S.... T.../.}...?q..CF9&.............].G...n3@.......U...E'....Q.....&=..p...,k?.}U.3J.z.....4...\........'.!.~.&e.b...{...+E.Lk....~.hg$ &....t?..?e.y.\,.Z.L........>{K...@.~(:".._..d.......>H7:_.I.r..i.....N..;.V_e.......m]..^....:.............e...P..u.....&\|7r....(.......F.:. ..R.......s...._./.O7...`.}...(..q....U..$.7......T..W....U$.Hn;.FE.........Q..Q..+.."u...L.....b.X.b.Z.E$...7.}....."vq...L./.1.0.p.Tg..3H.G....a...B.W~....T....2.2H.:.....7...6..&N.2K..<..]N./..v.zy.8.f&..%..1IF.....i..z...C...oW...j$...I;F.\|..h..t...&.e8..&..p_0...K..#....c...0'..S..T.......\|E......%..r-\RCO..I .N.......a.^.. ..o...m..P..G#..M...

Chrome Cache Entry: 618

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	192
Entropy (8bit):	5.1052862366626295
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5hL6Fb0zVjXRH8+hHiATcvXjXRHRcBHoNcHEkRY4zf9UJtTzWNRI:tI9mc4slhLJ9hC/vmI4zRqj/CIIHZY
MD5:	326BF908127D15320C80C12962A91DCD
SHA1:	D346CFA4AE456C3E070206472F06E90A9DAA8C25
SHA-256:	97DC7B49E38E2084B1877557AF54EBA95BF7FAF06980E0DCCDCA2EAD81E35B60
SHA-512:	E4835907B72B75C09F32416911A4B3535791B54C6BDD0BFA9C0A48399A8E4930CDBD0B32FD13A67002F49F99199FBE358D5B4B89E4609C837E73799FF0D46F08
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/library/v6/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M4 20h14v1H3V6h1v14zM21 3v15H6V3h15zm-4 7.5L11 7v7l6-3.5z"/></svg>

Chrome Cache Entry: 619

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	207
Entropy (8bit):	5.099700989024115
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4u2U6PTkY5fUgNOJNu:t47N9U/vmR0kTkYZUg2M
MD5:	D9BB191D7185DB63EC946298DE7F9AF9
SHA1:	CDE1E715177A55F8F7C9CE0BB1766481EF215D8A
SHA-256:	40829C1F6F101B7122AB0D9EDC7A4EDB6368448259A74831C2FAD26D865DD90F
SHA-512:	7B8B57273161CA8EC550E7C04AAFA34A8C48CE66FBFB5123C48F84AE4A5C9B43C5820EC5D00E62B12D3AFF946ACCC4F1501132FDB034A9E39F83B18E6A7CDAB0
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/library/v6/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="m11 7 6 3.5-6 3.5V7zm7 13H4V6H3v15h15v-1zm3-2H6V3h15v15zM7 17h13V4H7v13z"/></svg>

Chrome Cache Entry: 620

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64347)
Category:	downloaded
Size (bytes):	223733
Entropy (8bit):	5.454805985390715
Encrypted:	false
SSDEEP:	3072:H88WClBUIncVuP0bteuvQ+AMPpgArl0xYu5GKndQ:H8lWBU7O0bvQQGArHu5GKnG
MD5:	7C75053C3DC6FBEF27DB57E11E5C63C4
SHA1:	CAFC7264C0B8224F621BFABAF588905552008D49
SHA-256:	E9C370EA9070B144ED45FF5F35C9206112DD1091326FF898F414EF8C12EC85C0
SHA-512:	92F72DC113DC761AAFB2F630C77773C19029C9C0CB995238281AC5109AAA043940B1E681EB9EEACD8E436141BD97928985B679B1515166227097E4772E1FE1B7
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 621

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2866
Entropy (8bit):	7.176669115665954
Encrypted:	false
SSDEEP:	48:2/6BMYL4knA9WIM8H/c0X4r37HAq3WHAUoEQEnfo7ZIJbH+WVoJXIplChzYNrKbr:2S+YkknmWIM8H/JWHAfHAUfpfgZ+hkRX
MD5:	E3443D0D8AEA42FC61368B9792B6FDC3
SHA1:	6D0F867176171D6DD3FE1E052251B7FDC8C479CA
SHA-256:	E6FF78CBC0E7A99C0243089CD0357F70D4432FAEA71E5B43EBFA466A166939D6
SHA-512:	369005A314E3064A2950B90D473EF2F2045AA1AB859CD29EB5D6E315299C8496828E8685E48DF174C27EFA6BFF8B8657892EE21EF8F6A3AE44454573925161F7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...$...$.............pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)" xmp:CreateDate="2020-02-25T08:48:50+07:00" xmp:ModifyDate="2020-04-24T11:36:21+07:00" xmp:MetadataDate="2020-04-24T11:36:21+07:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:65ec9e37-57ac-4da2-ba48-ca834a44cd8a" xmpMM:DocumentID="adobe:docid:photoshop:3000cbb2-9624-ad49-bc2c-7ae29484f

Chrome Cache Entry: 622

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	332
Entropy (8bit):	4.296126422761529
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4FCvslQHcUiC7Q3ajuWskpwpWvWuMUMU2ldUiiW8kWuMUMUy:t4noU/vmRUslQ8+QKjupkpwpWvWuMUMk
MD5:	F94123242618D16B950113BD6F22229D
SHA1:	28B2E7A4ADB970446E442AE187E07328A68C1687
SHA-256:	EC4C1E58EBA5A80E78C1B52486930F60634B4940322F230C236ABDCFD9F92DEC
SHA-512:	E54B679A15465BEF172F1C364E34337B0C97D92C0F6C444253C8B69CD7147FD728DFEB1CDFA0DB64F0C13DC04999FB7CCE3C6CF49E77B4D1BA50798D9EDB3D94
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M7.5 12c0 .83-.67 1.5-1.5 1.5s-1.5-.67-1.5-1.5.67-1.5 1.5-1.5 1.5.67 1.5 1.5zm4.5-1.5c-.83 0-1.5.67-1.5 1.5s.67 1.5 1.5 1.5 1.5-.67 1.5-1.5-.67-1.5-1.5-1.5zm6 0c-.83 0-1.5.67-1.5 1.5s.67 1.5 1.5 1.5 1.5-.67 1.5-1.5-.67-1.5-1.5-1.5z"/></svg>

Chrome Cache Entry: 623

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 71 x 61, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1414
Entropy (8bit):	7.828662549131088
Encrypted:	false
SSDEEP:	24:QGfm74x1ywQJnWVq1kPgzQy4WGFzNy6lieDSHbqJ2HinWGMTY8bHXpYbrMy1FS0G:QGO8x1y9WV3qQNoKSH+J2HinvHBvf1Fo
MD5:	7829EC7999775865A662468DD7E96117
SHA1:	D2DDA88C46098945BFC1282724AA86478ACDDC10
SHA-256:	049490DDF516D0C066E4245937065D8FF549ECDDFD0F6EBE55891960627C86E8
SHA-512:	7989FB7DD6C982699F5C727F42B54448550EC0A535EAB1EDC367D96DEB397657A6B26831A3C4A59C5EF5555C8EE93CC4F1DFA166FCBDA1D2EB5941E94FC21429
Malicious:	false
Reputation:	low
URL:	https://freefiremobile-a.akamaihd.net/common/web_event/common/images/ff-logo-icon.png
Preview:	.PNG........IHDR...G...=.......t....MIDATx..Y.]E.........b.Q..KD..3.(jp.7.I........D_. ......\b2..h..5.D.A\.....:.+%...sNu.;....9}.....................;j.w8.xJ.].i...>..L.).MK%.....w0.~.f.5K.^U.4.....Vb.@..s../..<.,K..KN..\|.<.\|....y1.........!.H.lc..[.}4..r.1..oC...,...........s....Qy&..pMw.0...!.j..De.;g.y...;u)?YU...sm..<.<.J.u........7^.....Z.U.j....[.8R...~..nP...2!f.0..H!g>p..n...<i!..F.9V..Jm......g.).x.....ej.......R0.W.5....xU#...:.G..?...[\l.~.&#c\|U.......Xc.<v...K......8J.\-..{..4y. z......D..`..&Y.V.9.J...W]C)...o....w.v/Nh;.v.E.{S.Ol5Ou..6.V.uAA.,x.I...E.6..#b.N.U...;S..r....P.\|].t.8.7.'.p...l5.u6$.R3T.Rq..3?.&j.mu1Y&.\|.<..A..l7v..8.9..}.?iw....tI.W....ui.......].n. ..K..VG.J........Fb.S..}....u....W.,f....U..5.?.Iy.j.Tu.6.B."'........j...\_.\..&-[#.~C.o..PG...Z.V....9$......R+9..Q.1..z.g..o<.<n.C.9..+.m.C,M.7..Jy.L...7t......T..Q./..h..~.=.....oV...lC@..c.1.x2..t...r:..l..'.....sQ1..9W..)....K.L.,~..M)..!..O..P.....c4]ya...g.4.'.

Chrome Cache Entry: 624

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	16200
Entropy (8bit):	7.9078739657483
Encrypted:	false
SSDEEP:	384:eTO/QG3NCvLq48oIZHLFhJzH/c4RzGlcDt7BobsTa6f17QhcdbWVN:qORNCGJZrFhJzfcw3CbsTJ7jdU
MD5:	B5AF86A05A5A0EC827D4D9AA7A834A43
SHA1:	EFE9A10EF6FF312C1BCE1ED2DFA4BB75B9B176DE
SHA-256:	D58E787F4EAA1BFEE5C58B23535AD1082B7EBF8DDB95C42521839B5B3058E795
SHA-512:	890349F18EEAE7D001366E681D8DA5F104B0612DCB961375693DF1B3F704CC3D9D9C2F9EBC585F4F14D157F69A1896DC97DD6B84CD0542C64F40F1A0412CE821
Malicious:	false
Reputation:	low
URL:	https://icon-library.com/images/vk-icon/vk-icon-28.jpg
Preview:	.PNG........IHDR....................gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.......u..h..>LIDATx...y.T.....U./@.5;4"...."nl...I..f.\|g~.o2.L.(..Y.$.L2.m.cb\..l..........4..U.\|.....z.....z>.>....>.P...{.9F.%....T..%..cZ9.2.q.\)[2...4kM..,Y...L+..V.d..I..j%..l..`.%.\.G0.Zs%...$.K.z.d+...RIAI!kT"I...VN.$..b#.Z.2.UJ5.Zk%[f...:n.......!...K.>ro)...z...Xk....&T..q}]...W.1R..r..c.....3....D.Q+.P.i#.Z.B...i..Z.....B.......s.p...c)...80).....<k.........r.k..5r:I......>....=bd.Y.c.:j.9fd.8.=.r.......T.:"lj..dW9].`^.1y..<..I6OR..N....J.G.1{.......k.=In...e..@Gc.....Z..H...... ......-.5.b\..:.b\w._...z....{rI.k...!..o..V..5..G...Yi.......f....]..@O..{An......j....%..2..T.d?.u..+..}wf`.1.B....Uk&O_2..{.#...u..Q...~k..8..k.;r...k......s_..<...d\;..3^RW....tR2oY..d..9...$.z..,.Nu.xY...mt......j..YTiCo..._BU.......$..4UVw.......(.UVf.....p.QJB.7....pC.I2..X.6f..hs%m0..^.......@o.3...$+}.X.N.. .....IV....-....E&.X<

Chrome Cache Entry: 625

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	1052
Entropy (8bit):	7.72644939320488
Encrypted:	false
SSDEEP:	24:NEXE5I5boLsQBaykDKSnnCI5vP+6MbfkNFEF0AXKvmIauXmz:8MoppCIo6MoTEF0QKvHk
MD5:	987DF6536AEB9B1B1F781016D12DDAEE
SHA1:	65A0BF3487C7C84EBF73DA67592644CA634A3DAD
SHA-256:	3EF1ABE4E820C99715E3072171202FCD2A763BE595ABC25C9A5078D0AE980ABF
SHA-512:	4576A683B27E03EF6D601EBE316EE4F554DA053837D7CC47FFD737EEDA86507697CDD9D513FED60D72B94112BA27F6397AAA0537934E8160DC69FAE7311DADF9
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-1/241270460_1943112789170907_1967367247279035119_n.png?stp=cp0_dst-png_p24x24&_nc_cat=1&ccb=1-7&_nc_sid=5f2048&_nc_ohc=1XNCsKdZNVcQ7kNvgEm2iAq&_nc_ht=scontent-hou1-1.xx&oh=00_AYCtPdlNyu0dqd6iPTXBvUxjOno_5MTNZoU-rRxBkPW0yA&oe=66584D80
Preview:	.PNG........IHDR.............o.......sRGB...,.....IDAT8...}L.e....<?.......n.\%2.d..g5..3E..LRl...M.E3..lK.C...%s..2.3k.U..`......_. .r/........<O.`..e.p.<;.g...A...f"..P.@...s.9....I@.1.../.c...%.D...R.(.U.4&'1..%....-.+W.k.\|..V.M...0`.sRrV..X.X\|.]S4L.Xh..)eV..........9..B.L.q`N.\.o()yv.gG..f.G'.@..8.`.l...B\l\.N..9... ...Z...4.6>.`...R...Q....^{..8.xh.....%m.....6.......64....1...+_..H&@....R.. .<\|.....WR..KV.\....hL.......z.....}.u?...s...U{....t..97...^o..k5.?Y.....~...!......L..k.HV.."...7.<]Z...;..9w{OZF....B.v.(.?.]..u)..5e../.@.9p.<..Dp\|.V.Z.V.o(.0.Y.JV.....3.........g.r.G..y..aVLB<.'...`.yy.....;.Cp}.EW[..oe....!.....;..........b.`P.Q.....(..oN...8j..n.Q~.\|b\.....B.......[].....R{n~A...Bt..?..9oij6..Y.....6...s>...'s..\'O=.9O.l.....EW..z......N...(e.E.v...P.X-...X..._....Q..brZj....s.j?.;f.j(Bn..#.+......mwO__/...H.......?...zX...Gt........gW.;.....I...Z.U.XZ.._.b.xFtc.b..;.[.v.S.d...t.n++.q.;......`....;..C....'.*..h.v..p...V..P.-

Chrome Cache Entry: 626

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	726
Entropy (8bit):	4.339020219837034
Encrypted:	false
SSDEEP:	12:t4tM65hacbIQEJzqgnuTx9DcwBCkrcE+DDuqE3kjZRpQNtdhlwcf9iSBcG7BihbX:t4tMMt9EgFEFu+eq7fpQNtdMcf9iSqku
MD5:	1B8EC16A3060F8866E64FCDC09FF7185
SHA1:	B5E017E0D46F2DB0FC18A5E74F740D69FEED0372
SHA-256:	4E4AAE10A6FD5B8F86E1565507983459C3D0F474313547C9DAB176F83261A523
SHA-512:	07CD2A5466B397E612EB7A9827646BF0606031ECAE1771DCD93360BFF0F14477ABCD0F70B215C21879C9C5BA5E64BA9114CB036D7D401BE873DE1F84CC40B888
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_fill/shorts-like/v2/32px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M25.8411 11.9977C26.6778 11.9977 27.4597 12.414 27.9268 13.1082C28.6951 14.2498 28.6876 15.745 27.908 16.8789L27.1796 17.9383L27.8546 19.5037C28.257 20.4368 28.1597 21.5102 27.596 22.3558L26.4999 24V25.9977C26.4999 27.1023 25.6044 27.9977 24.4999 27.9977L11.9999 27.9976C10.8953 27.9976 9.99987 27.1022 9.99987 25.9976V12.8264C9.99987 11.9927 10.2604 11.1799 10.7449 10.5015L15.8632 3.33586C16.0776 3.03569 16.4721 2.92531 16.8112 3.07062C18.5762 3.82706 19.5347 5.74955 19.0766 7.6144L17.9999 11.9976L25.8411 11.9977ZM5 13.4999C3.89543 13.4999 3 14.3954 3 15.4999V25.9999C3 27.1045 3.89543 27.9999 5 27.9999H8V13.4999H5Z"></path></svg>.

Chrome Cache Entry: 627

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	184
Entropy (8bit):	4.979692330240301
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5hL6Fb0zVjXRH8+hHiATcvXjXRHRcBHoNcHELK9hrqgrNI2fSb8:tI9mc4slhLJ9hC/vmI42shrlrNI26b8
MD5:	BE80E385F4A43E39B89AA315010E5AFC
SHA1:	C48EF18CD412B3F8E96C8A9F10418C10BDC01557
SHA-256:	6EC0894C8BEEEE04A033DFFBE2E54E1BC3C6C8CE4A75738F4E5A13EBA571B2D9
SHA-512:	73FBC9F5EC906A6F95A2BCF002A021DA499AEB87023A77345416CA04FFA8148C776E90ADC0CE9F45FBF093F2D6506D0803ED5E73DC46A3DC747FCF71CFEB96DC
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/message_bubble_alert/v6/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M4 2v20l5-5h11V2H4zm9 12h-2v-2h2v2zm0-3h-2V5h2v6z"/></svg>

Chrome Cache Entry: 628

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	183
Entropy (8bit):	5.04119913967567
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5hL6Fb0zVjXRH8+hHiATcvXjXRHRcBHoNcHmAIb0WNUoOUGf7/:tI9mc4slhLJ9hC/vmI4mtb0PCGz
MD5:	DB8E084413F0D763A3EFBF3573AFC33A
SHA1:	FF8264FCAAC48F90B0CB74E09D65655EFE09488B
SHA-256:	A058F9F44A83FDF8074494F9322A40EF1B6E159DBEEF1E30BDECCE736AFD1E2D
SHA-512:	28A6102E54D20BBAE6D0A4D98971FE4170392A3354B55FD504C0DD1A0896CB5E786D85AFD64EA9EC308009795EB4C8392F2CE22CCD8A6DC4B84CEBFC4929CDEE
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/my_videos/v6/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="m10 8 6 4-6 4V8zm11-5v18H3V3h18zm-1 1H4v16h16V4z"/></svg>

Chrome Cache Entry: 629

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1440x900, components 3
Category:	dropped
Size (bytes):	80235
Entropy (8bit):	7.899883058230388
Encrypted:	false
SSDEEP:	1536:4++npcr45JUFPtOnlUC8dHFs51ieb6sG/mlINZ8mEcsnQILkNdXzrrYvcmbQzS:4TpAwSHOlU2D0mlINZQcsQg4rrO0zS
MD5:	AE810462B39CF3FD24E49AD89E987326
SHA1:	06A2D7EC11FB1CDB31FF87C350379998891EE14C
SHA-256:	CF39CA39D1DD29F775DC1858628482BB499D0AFC24FE64E3D70FEF418B8394B2
SHA-512:	14E5E87430318C13B61170B91E95D29BB5FEB535C94911B92159E58DBDA6D5320A45A9225C6DEA374DC8DF5863C1170394536AA3FDD3EDE939DB2231FF30CBC8
Malicious:	false
Reputation:	low
Preview:	........................................................#"""#''''''''''..................................................!! !!''''''''''.....Z....Adobe.d................".....................................................................................!..1AQ.a."2Rq.....Bb.....#3SU.....Tcr...$%5CDE..4ds..t....6.........................!1.AQa."q2R....B..3br...#CSs.......4Tc.....$.............?..>...%.c.V...e.O}W....U.......r^........{....}W.....f...%.a....{Y....~r^.=._.K...,..V..{.....`....%.c.U...b.O}W....~r^.V0R..o.K.....}fT4.....~V.Y.....9?..%1.K.g...^..'........)...........b+.z.Y./@....W......._....S...........h.~v.Y.Jt.....~z.Y.}...Q....UN+G....p....%i.N\EI....f.{olN...Wm..O.o.U.:..o..Z..y_.....G..\......TZ.;G.Z.U#....%S....,MgS..RW.&..CjV..5.~leRm{..6.F.:W.F'.Z....."..ZeKP..z.gj....f.5.ed....I..Q...(W..Eh...g...C.Z..GN.T..j...].9.Q.....Gr[W...pr.._..I..k{chQ.f.6.OI=..{O1B.G.?...^S....=].G.6....m..UB4px....T....3...`!....xGy/..jb'~-.h.s..

Chrome Cache Entry: 630

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	220
Entropy (8bit):	4.95427055782646
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4VJD2zPdqUQx+dt:t47N9U/vmRf2bQxS
MD5:	64C5CFD76908E80E8D1C35BB65CF26CB
SHA1:	DCDA22BE3CFBA2AF2C7CD98465F601E8B3C5888A
SHA-256:	59BD8FAC9261910ADAE788A1BA4E550544F05A84312049D2C254FC37A7596CC1
SHA-512:	37C54AF2F2D644BBA688775BC77FB0AED604F9ED4675FF89117A0AA264C62A0291AFC145A7D20C4C4D14F13E6C460CF6D39B1F925E442BD7A3A190BA77B98DE7
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/audio/v5/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M12 4v9.38c-.73-.84-1.8-1.38-3-1.38-2.21 0-4 1.79-4 4s1.79 4 4 4 4-1.79 4-4V8h6V4h-7z"/></svg>

Chrome Cache Entry: 631

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (739), with no line terminators
Category:	downloaded
Size (bytes):	739
Entropy (8bit):	4.982024876095791
Encrypted:	false
SSDEEP:	12:WWkW8Kd11i/Kd1viCcdxCRp8NDuDO5JuDOv3Kd1OLF6Kd1+inKd1IsKd17QKd1nx:WyoGKn3Qp8NKOWOvOOpx+FUDx+W
MD5:	9ACE9CA4E10A48822A48955CBD3F94D0
SHA1:	1F0EFA2EE544E5B7A98DE5201FB8254B6F3EB613
SHA-256:	F8FDBB9C5CDCEB1363BB04C5E89B3288EA30D79EF1A332E7A06C7195DD2E0EC4
SHA-512:	25354AEECB224FD6D863C0253CD7AD382DCE7067F4147790EE0CE343F8C3E0EFB84E54DD174116E7AD52D4A7E05735039FA1085B739ABBE80F9E318E432EED73
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/aef0ced3/cssbin/www-onepick.css
Preview:	.picker-frame{width:100%;height:100%;border:0;overflow:hidden}.picker.modal-dialog-bg{position:absolute;top:0;left:0;background-color:#FFF}.picker.modal-dialog{position:absolute;top:0;left:0;background-color:#FFF;border:1px solid #ACACAC;width:auto;padding:0;z-index:1001;overflow:auto;-webkit-box-shadow:rgba(0,0,0,.2) 0 4px 16px;box-shadow:rgba(0,0,0,.2) 0 4px 16px;-webkit-transition:top .5s ease-in-out;transition:top .5s ease-in-out}.picker-min{position:absolute;z-index:1002}.picker.modal-dialog-content{font-size:0;padding:0}.picker.modal-dialog-title{height:0;margin:0}.picker.modal-dialog-title-text,.picker.modal-dialog-buttons{display:none}.picker.modal-dialog-bg,.picker.modal-dialog.picker-dialog{z-index:1999999999}sentinel{}

Chrome Cache Entry: 632

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	335
Entropy (8bit):	4.848782964528927
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4K+tlq2LwkzdO+iEuUDXpzBX6xjU5SWcYISJ2gLGpnQEVRp3:t4noU/vmRxxVzMHUFXMU5SWclS4AuQQv
MD5:	9F4AFB8B5C116B8C96AD6A0BF69021DB
SHA1:	DA12B34E4705D9875C8CC67EFE0058698E537A78
SHA-256:	61B18613E4A65CB373AED90B59C16370DF577861FBA91C5029B2BFFE6E14EAEB
SHA-512:	3839B172D4A4C0A1D07829DF590C8B3F780DCED47C3C17C79B2B07E71DA35CAED39338E4FDF5A7D6A38C327DB481CD7C41BC601EABB9E01F6FED5D02BE083FE2
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/trophy/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M18 5V2H6v3H3v6l3.23 1.61c.7 2.5 2.97 4.34 5.69 4.38L8 19v3h8v-3l-3.92-2.01c2.72-.04 4.99-1.88 5.69-4.38L21 11V5h-3zM6 11.38l-2-1V6h2v5.38zM15 21H9v-1.39l3-1.54 3 1.54V21zm2-10c0 2.76-2.24 5-5 5s-5-2.24-5-5V3h10v8zm3-.62-2 1V6h2v4.38z"/></svg>

Chrome Cache Entry: 633

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 138 x 41, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2799
Entropy (8bit):	7.905325355196512
Encrypted:	false
SSDEEP:	48:SgfMY2/zjj76rXy4/vHkV8h/G82kDCBMSn3jb0CruxGU0cjaex:StY2/Hj7OCtdkD0n8zTvGo
MD5:	CFD0F0CBF8AA1717324F64A438C378C5
SHA1:	DEB76943CF9B96153B36C04C9DE02996857A808B
SHA-256:	6A69DE99192160F4A77667679C5A985BEB0758DD464C162F58E2F89B91D11011
SHA-512:	31A63735BB127554C217E4CC0B811BAA8D83087D64A024CE44D4EBF9741FDF58A9C8D2D1F3105DEA5056CA96EC1B1762AAD73694774E45DAF8BADBED647F62D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......).......A.....PLTE............FFF...eee++&llb...llb...rrlwwq...............................................................~~}.....~ssr.........pppuuuooonnmmml```]]]``_\\\SSS333@@@......zzz..................................................................'''FFF..................GGG~~~.........$$$...===PPP...............&&&KKKMMM^^^```mmmzzz..........................."""111YYY\\\ccc.................................000EEERRRwww........................%%%)))444sssxxx\|\|\|....................................+++333555777999<<<???@@@AAABBBDDDWWWbbbjjjlllpppqqq...........................!!!---eeefffkkkvvv}}}......................................................;;;JJJOOOUUUiiittt.............................................TTT]]]aaaooouuu.............................................:tRNS....!#+/4LNOWZ`ortwx......................................WI.....mIDATx..u\|#....i...^.).m.h...f.^.......X..%33..p.3.]\|f8ff.1. ..........R_?g.>.}vf...w..{+...y.........~......x-.

Chrome Cache Entry: 634

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5052
Entropy (8bit):	7.922946458030262
Encrypted:	false
SSDEEP:	96:E4VtDHYxsRUjApSw90doUj5C+1y6lBDxLQgmHvJmdt6JxJg/axUERDaG5z:pHYxsR1pkdoU9C+s69QgmxmdUTg/Yvh
MD5:	28380515FCA2C6F9A34C8D63C84082EE
SHA1:	8F4E3F2A27AC7DAF8D4AD527DF869E3283280D2E
SHA-256:	7C77EF25AB71668CE14480E52815E31BCF9E19F2409889048C0C00BDE9716895
SHA-512:	E61F5EADB42F9CB626FCAD82D07CB6A9263CDBD7D92A2D0F71717AA8F3EF4527794A0F81C9E762E930A9E30EB1F68A6C9EB8FC140910784E29DB88EEB5F928EA
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S/content/common/images/denom-image/FreeFire/Freefire_diamonds.png
Preview:	.PNG........IHDR...d...d.....G<ef....tEXtSoftware.Adobe ImageReadyq.e<....PLTEGpL. $. $ '3 "'.(8 $,..%#)3.").!%. %.!%..$..".. .!&..%.!%.."..#..!!).. %.."..&..... ..".. .. $08(07",56IT9AEIY_prp%-;&AO<erF`.1?G$Sl7\.6?Et...S.=GKa...&4.%0.J.L.....[z.;EJ<CH,g.^u}..."\.R..G..t.....8=J......cnt2k.8l. :R4Se...(].=`pSw......w\|\|.q....W]][dfl..c....#(398_\|.........Ex..&.?q..(?a........V..@.....[..........<q......o......... )....."....0:NTWKKJ.(3.4K..\|#&'07:...ABD...P\b.,?......Nap...-0chiBNZ.@l.!2Q\|.......X..O...=XE\|....Ch.......EWi@Xx^^]\.............(:A...Kf....G..\mw...y..Qm..U...............P..^........y..H]...2AHs...a..Ez7OgJt.Qr......n..?_.....v{\|c..... ..~.......6Yd=r.^..d.....M......."..v.....K..Y..P....H..\.....hy}v..V..._....Dm..........Go.B....Q..L..".....D..!.....P..j..2..0}.)f..J.3.....W~....D..'d...W..x....tRNS..!........:OH.n_%04V.C>..ue.}.{.....[..'Q....P...:....n.F.o....6r.....}...Da........................................................................

Chrome Cache Entry: 635

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	184
Entropy (8bit):	4.979692330240301
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5hL6Fb0zVjXRH8+hHiATcvXjXRHRcBHoNcHELK9hrqgrNI2fSb8:tI9mc4slhLJ9hC/vmI42shrlrNI26b8
MD5:	BE80E385F4A43E39B89AA315010E5AFC
SHA1:	C48EF18CD412B3F8E96C8A9F10418C10BDC01557
SHA-256:	6EC0894C8BEEEE04A033DFFBE2E54E1BC3C6C8CE4A75738F4E5A13EBA571B2D9
SHA-512:	73FBC9F5EC906A6F95A2BCF002A021DA499AEB87023A77345416CA04FFA8148C776E90ADC0CE9F45FBF093F2D6506D0803ED5E73DC46A3DC747FCF71CFEB96DC
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M4 2v20l5-5h11V2H4zm9 12h-2v-2h2v2zm0-3h-2V5h2v6z"/></svg>

Chrome Cache Entry: 636

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	287
Entropy (8bit):	5.015529132385196
Encrypted:	false
SSDEEP:	6:tI9mc4sl5RtOU0p4nEVkK+CJ1JrycDQnVkxGjU2ZIvhC:t4vfOADKPn5yB5jPMhC
MD5:	64090EE2574D7F41444485BDD8E4A04B
SHA1:	D2342EBF52614F1EAFD07BBFDC72E3F65A1963B8
SHA-256:	483E819776ECFED148800D9E881C1C72F4279D74264B49A38346C26358EF98DC
SHA-512:	E936442EBA58D4438749791365F38CE7D39B7291F3BB032D35FBB4FAED6AF7E14C9CA7D4FC57A62B90A950C3868AF0755C4530BB5DF8A05CA9FC27044BD522C6
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <path fill="#FF0000" d="M6,18h12v1H6V18z M22,6.2v9.6c0,0.66-0.54,1.2-1.2,1.2H3.2C2.54,17,2,16.46,2,15.8V6.2C2,5.54,2.54,5,3.2,5 h17.6C21.46,5,22,5.54,22,6.2z"></path>. <polygon fill="#FFFFFF" points="15,11 10,8.35 10,13.65 "></polygon>.</svg>.

Chrome Cache Entry: 637

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 312 x 200, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	35554
Entropy (8bit):	7.993399198485169
Encrypted:	true
SSDEEP:	768:tVmSx/bOqvDd2XiIkTFS8P5YsZIpKE09wpzdnyu4CmxsdRhNUA8tq7:twStOw2SIN8YsGpuOpzmIhmHq7
MD5:	B63BCACE3731E74F6C45002DB72B2683
SHA1:	99898168473775A18170ADAD4D313082DA090976
SHA-256:	EA3A8425DCF06DBC9C9BE0CCD2EB6381507DD5AC45E2A685B3A9B1B5D289D085
SHA-512:	D62D4DDDB7EC61EF82D84F93F6303001BA78D16FD727090C9D8326A86AB270F926B338C8164C2721569485663DA88B850C3A6452CCB8B3650C6FA5CE1CE0F140
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...8...........j.....IDATx..].\|\U.?...e&..I..M..).Z.PJ.(.M.-O+..>\|.....n.....\|."..B.+Pi.. ....t.K..I..>.....\|/.$3...LH...r.r.9..........`GJk.;..3,K.......(.tv.b..Z........Z...R.M..}...-...\...4...._n2...;.8....z...r.xi0.4...[...<...,...C...Sy.}..20...L]S}.V.\..Ms.mD%..}.mu..,....B.POw[Q..?....aV...n8.S^.T5U..3.9.4.....;(u..D.p...TY...P+..y^.,......p.E...e;K.%KNj...l....,+....bQ....M$.>..9..x.j&...NR..u..W..{..Z..s........3u.....<.gH..0.]...q.e]...`.94~...F....!.Re~.KQU .+..z...W.z.=_....k..Tii...i..,.L...v..N..X,..jk..94~.....%...z....).BG5+J..W.U.!\|...\IG..,a....Q!.._.2.ZzZ ../s...T......S..Uy.....;bAj.Jv..u..`.e.~..\...l.df.k{zBB.+qWH..!.....d..qh@.t-.N].!.....o?\U.\w..?}.GS{o.HT...1ts.....x.+....===.W.C......y......o..s,#:t.....s...v..'....8.{_.Z..N...K.$..\..~.mmmkh..Y.C......!-kH.UU............\..2hwg,j...T...r.a...4M....C...............\|.......f..9.C...;v...a....g..r5Mw.=`......Q..W.... ....&"..

Chrome Cache Entry: 638

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	726
Entropy (8bit):	4.339020219837034
Encrypted:	false
SSDEEP:	12:t4tM65hacbIQEJzqgnuTx9DcwBCkrcE+DDuqE3kjZRpQNtdhlwcf9iSBcG7BihbX:t4tMMt9EgFEFu+eq7fpQNtdMcf9iSqku
MD5:	1B8EC16A3060F8866E64FCDC09FF7185
SHA1:	B5E017E0D46F2DB0FC18A5E74F740D69FEED0372
SHA-256:	4E4AAE10A6FD5B8F86E1565507983459C3D0F474313547C9DAB176F83261A523
SHA-512:	07CD2A5466B397E612EB7A9827646BF0606031ECAE1771DCD93360BFF0F14477ABCD0F70B215C21879C9C5BA5E64BA9114CB036D7D401BE873DE1F84CC40B888
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M25.8411 11.9977C26.6778 11.9977 27.4597 12.414 27.9268 13.1082C28.6951 14.2498 28.6876 15.745 27.908 16.8789L27.1796 17.9383L27.8546 19.5037C28.257 20.4368 28.1597 21.5102 27.596 22.3558L26.4999 24V25.9977C26.4999 27.1023 25.6044 27.9977 24.4999 27.9977L11.9999 27.9976C10.8953 27.9976 9.99987 27.1022 9.99987 25.9976V12.8264C9.99987 11.9927 10.2604 11.1799 10.7449 10.5015L15.8632 3.33586C16.0776 3.03569 16.4721 2.92531 16.8112 3.07062C18.5762 3.82706 19.5347 5.74955 19.0766 7.6144L17.9999 11.9976L25.8411 11.9977ZM5 13.4999C3.89543 13.4999 3 14.3954 3 15.4999V25.9999C3 27.1045 3.89543 27.9999 5 27.9999H8V13.4999H5Z"></path></svg>.

Chrome Cache Entry: 639

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	43036
Entropy (8bit):	5.692113097327789
Encrypted:	false
SSDEEP:	768:tQJ8XUYhYxw/U3/9ovTDPdt415COEWq/3eP0jIpQ:6JbA8w0Sv3ny5RFXQ
MD5:	DF416F45FCFEE5C0944313B56924E267
SHA1:	288CE83AB46CCB429A26F79DAD4BBA9131023E56
SHA-256:	27B101995CD472351BCA908614BF320FE018CD6FA171A979CE37A810E1732D85
SHA-512:	8AB2CBD408BDC38767459757B0CF8BAAFEA7977466E3C0BF51987A40A36D5BAF76C2D4DE79E4A64B0DF92E63482A7A031EE314CF70239397CC784E8986A55A87
Malicious:	false
Reputation:	low
Preview:	...KEYF..(... .............$.......$.......,...t.....4C..4C...@..pB..............................(... .............$.......$.......(.........4C..4C...@..pB..........................................yC..!C.....PNG........IHDR.............2L.8...BPLTE....i..f..i..i..i..h..i..h..i..i..h..h..i..i..i..i..h..i..i..i..i.'.)"....tRNS..........H%/m[~>7.vRd........IDATx...;.. ..Q...X..p..z....j.%.w..............+,At\|..o...q..)].................V.C.....>..[k9+.Rr1./\|.z.}S...Q^....~....U..[.....>...1.\|...i.....1....._..l.M......c..,......,A.i..o.2yH..Uk..^.O.f...../...<.~(.n.y.}s.W...7.....n\|.\.+e.......w....\|.vR...I.U{....3.v}C..u!.B/..4....h\|......'..,.EQ<h...+w.W....q.^@;....K.n..B.G...'...L.......w.O.w.H..k..Rw..v..c..s...BGYN.g.H....^.OFw.n..D.>..k...Aw.+].n.....}.2.W.g.n3..M..,;...;.=e.3..t.*..t..=Y...G.@.gI.x..A.ml.;V...#^..n....=...t....v[..{v../.,...m.h..uw.q..+...I...y..w].m#..~.Tz... .wf..;.....J8. w.~Q......]J......n...w..:..].g.._C.N.1....tGr.wF.....

Chrome Cache Entry: 640

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	561
Entropy (8bit):	4.664076278294878
Encrypted:	false
SSDEEP:	12:t47N9U/vmRBoGaBoVOLgbvSFWeGzE+5OPiufVKJXbsUFSQiYHUloL:t4jU/vRGaBoc2SLX9fUb12NSL
MD5:	627CBC730DA8617E4FDA79BB7FC35F2F
SHA1:	C1CF15F3D7BD2AC64B329E353D26771F5C13FE77
SHA-256:	817119ECC2BC54779A271A53B347E8AF33C2544934D642D7877E99267BB0745B
SHA-512:	FB2299DC0272ECE197FE5656C0ABF1E6CF96F5D25F3D135D2DCE3D7CF50C189BC0C9C73D1B042020DB47B2FD680230C61F9A6D599D385CEFFAC87F20CEB69555
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/thumb_up/v17/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M18.77,11h-4.23l1.52-4.94C16.38,5.03,15.54,4,14.38,4c-0.58,0-1.14,0.24-1.52,0.65L7,11H3v10h4h1h9.43 c1.06,0,1.98-0.67,2.19-1.61l1.34-6C21.23,12.15,20.18,11,18.77,11z M7,20H4v-8h3V20z M19.98,13.17l-1.34,6 C18.54,19.65,18.03,20,17.43,20H8v-8.61l5.6-6.06C13.79,5.12,14.08,5,14.38,5c0.26,0,0.5,0.11,0.63,0.3 c0.07,0.1,0.15,0.26,0.09,0.47l-1.52,4.94L13.18,12h1.35h4.23c0.41,0,0.8,0.17,1.03,0.46C19.92,12.61,20.05,12.86,19.98,13.17z"/></svg>

Chrome Cache Entry: 641

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	241
Entropy (8bit):	5.137838894912298
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4hNpDCbNBdANjcmgTLMAqY:t47N9U/vmRhNpCsYNLzqY
MD5:	2BEBB6EA2A23E97C81427106D9722D4E
SHA1:	38DC371BFBF0DCA768A702E89ED00877F34621E7
SHA-256:	4C4B6AEA58201D13608EEB52B960E052E9C7D677B7281CAF0E6B713A3E2F223B
SHA-512:	F4BE381ECF6616EB82FC4B139BC67E6EEE70B1B71581150FF4E69E09E0B6EDA8729536413CDAAB38642F0616944089F96A3DA8369B56870D1118E91B67C2FEC9
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/news/v2/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M3 3.03V21h14l4-4V3.03H3zM6 6h12v2H6V6zm7 9v-2h5v2h-5zm0-3v-2h5v2h-5zm-1 6H6v-8h6v8zm4-2h3.99L16 19.99V16z"/></svg>

Chrome Cache Entry: 642

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5954)
Category:	downloaded
Size (bytes):	65815
Entropy (8bit):	5.189825997831201
Encrypted:	false
SSDEEP:	768:+IE6WNP/eHpwXRXjXxtXGJn47XIODXVKTMT40XIFXVKTEsbtXI4WL6i/fSTQl/fK:9JWVg4oVzCb56FkX
MD5:	E5F9FD216F49CB58B9F71ECA479A54AA
SHA1:	1577AC7D235F705C1F90E3AAAE67982C7976515D
SHA-256:	49C3C9BD4FD1FF77207B5FC880A55D49119284833BC3F4244CC73E9A10ADE90A
SHA-512:	7C688B50C2471D13728F9AAC195531DB6CAF5CCED56C4970D3DB12C68BC79B3915F8EBF90681330FB18E7559B8EB7678898533F0E8A93407148547DBF4C2A86E
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yO/r/rEJHSWXTk8v5nEQ_oQlIPM1zlMrZllgF1.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometNonBreakingSpace_DEPRECATED.react",["BaseNonBreakingSpace.react","react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react");function a(a){a=a.size;return i.jsx(c("BaseNonBreakingSpace.react"),{size:a})}a.displayName=a.name+" [from "+f.id+"]";g["default"]=a}),98);.__d("ProfileCometAboutInfoDetails_subtitle.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"ProfileCometAboutInfoDetails_subtitle",selections:[{args:null,kind:"FragmentSpread",name:"ProfileCometTextWithEntities_textWithEntities"}],type:"TextWithEntities",abstractKey:null};e.exports=a}),null);.__d("ProfileCometAboutInfoDetails_title.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"ProfileCometAboutInfoDetails_title",selections:[{args:null,kind:"FragmentSpread",name:"ProfileCometTextWithEntities_textWithEntities"}],type:"TextWithEntities",abstractKey:null};e.exports=a}),

Chrome Cache Entry: 643

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 641x242, components 3
Category:	dropped
Size (bytes):	28559
Entropy (8bit):	7.947934780458617
Encrypted:	false
SSDEEP:	768:wmU1EiUPjpORD0lgjWEzE7KS5btpezAhZnYQE7TO8eo:ZhjpO2VwmDe4ndKO8eo
MD5:	F93267A5B15F21F2C6F33E9BB893DFD1
SHA1:	3A88C25A20F79CF5FB6EBE3E34116678A43531FF
SHA-256:	C9952880919057304EEC16200CCD3F7B373D3BA7192C936B4A79FFCA9B62ED35
SHA-512:	FDD5D9EB0B32BF4E88C0A1953191329A64D9E5BB48F61CED022D456B0CCB5DEBD7722FDE2E5A56393C9FDC9CD8CCC70860B7820834EF999686D61B0F95FA3D81
Malicious:	false
Reputation:	low
Preview:	......JFIF.............DICC_PROFILE......4........mntrRGB XYZ .........+.8acsp.......................................-....................................................desc.......ybkpt...x....wtpt........cprt........rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........sRGB IEC61966-2-1 black scaled..................................................................................XYZ ...........3....XYZ ...............-text....Dropbox, Inc....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............b...k...@.Q.4!.).2.;.F.Qv].kpz....\|.i.~...7.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..................................................................................................

Chrome Cache Entry: 644

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	182
Entropy (8bit):	4.923041841279974
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHaxhTIQfaaiBFbCcD8o+fmQGq18i:tI9mc4slhohC/vmI4OhEQfR6Fb3Y1OQV
MD5:	D6F15B1444CE6B4DBC711AC9E9041F17
SHA1:	98D8A4EAB8E132C5894592992F532CF36D71810D
SHA-256:	2BE645A9C201E31B43E28FD5541E36B73175D503362ACBA96CF578B95DB8DD8A
SHA-512:	89F41624C92CB68B716287E74ADD7DEEF7BD67E8FB68BBF7DF93BB84AE1478248CDFC35C26F45A0A6DE347808E9E6431CA771EC9A18E0FF6869843D66B2B4E77
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/download/v9/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M18 18v2H6v-2h12zm-.6-6.3L16 10.3l-3 2.9V4h-2v9.2l-3-2.9-1.4 1.4 5.4 5.4 5.4-5.4z"/></svg>

Chrome Cache Entry: 645

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 71 x 61, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1414
Entropy (8bit):	7.828662549131088
Encrypted:	false
SSDEEP:	24:QGfm74x1ywQJnWVq1kPgzQy4WGFzNy6lieDSHbqJ2HinWGMTY8bHXpYbrMy1FS0G:QGO8x1y9WV3qQNoKSH+J2HinvHBvf1Fo
MD5:	7829EC7999775865A662468DD7E96117
SHA1:	D2DDA88C46098945BFC1282724AA86478ACDDC10
SHA-256:	049490DDF516D0C066E4245937065D8FF549ECDDFD0F6EBE55891960627C86E8
SHA-512:	7989FB7DD6C982699F5C727F42B54448550EC0A535EAB1EDC367D96DEB397657A6B26831A3C4A59C5EF5555C8EE93CC4F1DFA166FCBDA1D2EB5941E94FC21429
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...G...=.......t....MIDATx..Y.]E.........b.Q..KD..3.(jp.7.I........D_. ......\b2..h..5.D.A\.....:.+%...sNu.;....9}.....................;j.w8.xJ.].i...>..L.).MK%.....w0.~.f.5K.^U.4.....Vb.@..s../..<.,K..KN..\|.<.\|....y1.........!.H.lc..[.}4..r.1..oC...,...........s....Qy&..pMw.0...!.j..De.;g.y...;u)?YU...sm..<.<.J.u........7^.....Z.U.j....[.8R...~..nP...2!f.0..H!g>p..n...<i!..F.9V..Jm......g.).x.....ej.......R0.W.5....xU#...:.G..?...[\l.~.&#c\|U.......Xc.<v...K......8J.\-..{..4y. z......D..`..&Y.V.9.J...W]C)...o....w.v/Nh;.v.E.{S.Ol5Ou..6.V.uAA.,x.I...E.6..#b.N.U...;S..r....P.\|].t.8.7.'.p...l5.u6$.R3T.Rq..3?.&j.mu1Y&.\|.<..A..l7v..8.9..}.?iw....tI.W....ui.......].n. ..K..VG.J........Fb.S..}....u....W.,f....U..5.?.Iy.j.Tu.6.B."'........j...\_.\..&-[#.~C.o..PG...Z.V....9$......R+9..Q.1..z.g..o<.<n.C.9..+.m.C,M.7..Jy.L...7t......T..Q./..h..~.=.....oV...lC@..c.1.x2..t...r:..l..'.....sQ1..9W..)....K.L.,~..M)..!..O..P.....c4]ya...g.4.'.

Chrome Cache Entry: 646

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 246x138, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	5638
Entropy (8bit):	7.954114840403367
Encrypted:	false
SSDEEP:	96:hsKGUTvruqebeDJXn+0uUfoqxa4Jsrj6p9Z/GEMrh+YT8L5luWmK+xou:7Tvr92uNnvtx/Jsf0rsrh++89MWmr
MD5:	9992D1E41C293717F081A35531863741
SHA1:	36C94E06C010235F60A00509ED3EFCCE7D9101FF
SHA-256:	FED30982D481E4067A6F11D295C6C238055321E8F50FD06A89771BF525994D64
SHA-512:	4D76DAED813A97EFD2237437502B8D2F27D4B2F1588E1BB30D62471E0D7EADB08A7DEC73BCF40A03A2335969CB1313A33A7418C920616F5620EE87373A5352FF
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/WlW4UAl3MyM/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLAfP1nKtBDWEA5EpV7mBk3_zYjAOg
Preview:	RIFF....WEBPVP8 .....[.......>Q".E#.!...@8...7n.....;.+i...~Dtx................6.....9.I......@_.?.~........s...O....?..o...8.....'..._L......j.....n...?.O..2.L.....[..M~Y.K.?..i..~.\|......N.._..,...].K.. \|....O...h..~..E...A..._.?..>.?..A.m...../.w.?....D.e./.w.W...."=..Y........._a........o.........}.~.{ ........_..3..=..\|4.[..W...F..QY.v+....9..H.o........0y@....&6....$1.u....:.ZS.......F........!..!>.I..Y.m..X...A9.x.x9....w.}.U.......Wl..z.\+DC.m..{XI.............2).,3...^.x.},.{Wj_ 3.i.+x...{..2Yv^b.L.u..u...vY..?@u.....t..=.L./...8c...0:..W....QF.U........"...W\|\.q.>.......,0....(r@]m.}.D..."N..Dq...<..5.C+Y...k.c.I..\#.,.RI../..N.).!........k.2.T..T...:....%Yr..R(m...p.)....a............K8.....Q...W.."......P...H.S....A.{....+4../{a..oo..M/./~L..5..z~...W..u.2.FZ,x!,..o.mCC..#....!.!.<.R.ou...B.q.@.,...x.......Q....QFn...p.....!....J..F./..d.0..4...h..3h.6r<..JY)9..\|'nt.+...w\....,_....-+.ZTL.....5.r.9..FoJ5N\.

Chrome Cache Entry: 647

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	616
Entropy (8bit):	4.417992592628411
Encrypted:	false
SSDEEP:	12:t47N9U/vmRRSpPiaYjmnjdCOmwT2IgpEQx5nnQvqsRihtnRm31IEURwpY:t4jU/vtPnYynsrwT/ox5nnSVaZ+IN5
MD5:	2E6B195059996451CC198378775A73BD
SHA1:	D1F68BBCF0F62130D235D26F30D99BC1891C96AC
SHA-256:	77729CACF85AB5D50BEB76F8C66D44DEAEEE396796F6F659CEB5A5AA2B1A8DA8
SHA-512:	317D2E52F04F6FE420E5D6D38E849CE9B8E33602191A85954BB4CCB57976FDFFAF85ED654A6D3B58ABF5FB9A94440FA397850AF73D88728B39484BADA0F9E776
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M15.36 9.96c0 1.09-.67 1.67-1.31 2.24-.53.47-1.03.9-1.16 1.6l-.04.2H11.1l.03-.28c.14-1.17.8-1.76 1.47-2.27.52-.4 1.01-.77 1.01-1.49 0-.51-.23-.97-.63-1.29-.4-.31-.92-.42-1.42-.29-.59.15-1.05.67-1.19 1.34l-.05.28H8.57l.06-.42c.2-1.4 1.15-2.53 2.42-2.87 1.05-.29 2.14-.08 2.98.57.85.64 1.33 1.62 1.33 2.68zM12 18c.55 0 1-.45 1-1s-.45-1-1-1-1 .45-1 1 .45 1 1 1zm0-15c-4.96 0-9 4.04-9 9s4.04 9 9 9 9-4.04 9-9-4.04-9-9-9m0-1c5.52 0 10 4.48 10 10s-4.48 10-10 10S2 17.52 2 12 6.48 2 12 2z"/></svg>

Chrome Cache Entry: 648

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	363
Entropy (8bit):	4.49126552549198
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4CCUljullQ5dUiC7KITuMUxldUiiiC1ofuMUxldUiiiC17:t47N9U/vmRXKjullQ5d+puMUxldbfuMh
MD5:	82A60FADA6F7957329BEEE85E0453CAF
SHA1:	6882C6B5F04787D57F3B59C1D1559623BC40E146
SHA-256:	98901DDFF67E245769A3E1F47ABA0210653F817436CE288646FC0BB88E859CFA
SHA-512:	646BE4874078FB5B9072DF552DA8CF0A1E5533D1B65392E06008676D8B06CA3E5EAFAC14C89BB580E0A7EAAEE94B3EC0825174328C3B30FC92D66730FBAD373F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/overflow_vertical/v10/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M12 16.5c.83 0 1.5.67 1.5 1.5s-.67 1.5-1.5 1.5-1.5-.67-1.5-1.5.67-1.5 1.5-1.5zM10.5 12c0 .83.67 1.5 1.5 1.5s1.5-.67 1.5-1.5-.67-1.5-1.5-1.5-1.5.67-1.5 1.5zm0-6c0 .83.67 1.5 1.5 1.5s1.5-.67 1.5-1.5-.67-1.5-1.5-1.5-1.5.67-1.5 1.5z"/></svg>

Chrome Cache Entry: 649

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	252
Entropy (8bit):	4.749518607468393
Encrypted:	false
SSDEEP:	6:tI9mc4slmKkmPUtlXX5xiUSdztsG4J5GXyAajYUNrLVKLbrwPtOTC:t4IrmPoXXmUSBaYaj/rL8LvE
MD5:	F8F3636F756E2E0E0892FD9E35174490
SHA1:	6C735659FF64B530A9DA358FEFBF75CB6B14B300
SHA-256:	2634B0DB38CF06C1261C115FD4B5D56177988D8F4E0CD2597A23EF7A44A94D37
SHA-512:	47834E3B35CE2C0B1315E637F81AD7996E738C429AFA4E9FBFAC2BD08C26097381F3353F746923FEA16B045117AC4C615726203063CFB8654E7D4C19A273BB52
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path d="M3 9v6h4l5 5V4L7 9H3zm13.5 3c0-1.77-1.02-3.29-2.5-4.03v8.05c1.48-.73 2.5-2.25 2.5-4.02zM14 3.23v2.06c2.89.86 5 3.54 5 6.71s-2.11 5.85-5 6.71v2.06c4.01-.91 7-4.49 7-8.77s-2.99-7.86-7-8.77z"></path></svg>.

Chrome Cache Entry: 650

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 640x241, components 3
Category:	dropped
Size (bytes):	53533
Entropy (8bit):	7.966436020020061
Encrypted:	false
SSDEEP:	1536:OYZ99J9ca1KfDj6KHcHsbDQxHvqmYCYs6pQqhv+:H979JKmdb6s4NW
MD5:	8E5BB390D9E0F12905481EDAC5E46539
SHA1:	C9D5677D4D96847DF61E41B8D1CE5FA750EB834F
SHA-256:	5BEBF695D8569B372A8B99BB7BD08BCCF0158F0CE3400469CAFE685F3971BA5D
SHA-512:	CD40DE62D661FB6CC6D6EAE975BD96F7BCAA26395489F88E2608C80F6C6CFC39A6CABBD653EAF383D1EB76668514B4DE5C4D313B5506E45D9799557D8141B530
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<.....C........................................................ "..".......C......................................................................................................................R..........................!1.."AQ.2aq...BR.#b..$3r....4C....5St...%6EUs...T..7e..................................F..........................".!12A.#BQRaq..3.......b.4Cr.$5.D...%S.s..............?....2..^.!{.p......^..ac...o.....b..K.ZI;j5..!@....P.@....P.@....P.@.VK....#y..t.........u.M..-.\|).R..o.k..k.c.:U...;p......?.=..5..j....Hc......S.oMc....?...U.w.'.m.Z.....?.z.....F...5w.z.F...M.E_U??Y.Z.0.....(.......y.\...i9m.......k..gJ\|.Z...<k......h.7.cs?w.....F.J.#.=.!.L.X.~....P..)..:..tC.w./..6.>...k..-.._..3....:.5.(....{...0.y...)....9.W#.t...^..mN...z9...?p..")g...Sh ...~..T..6m^h..v.F..=.K.....h.I?.:.e..4k,m..x.N.@....P.@....P.@...!..g.#....5...k...;.`...]...u]..)d..M...ju.Gl4.p.k.......8.R>...rH...i...F.7..r.&*..g.c;.<./.I

Chrome Cache Entry: 651

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	181
Entropy (8bit):	5.0971144323973805
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5hL6Fb0zVjXRH8+hHiATcvXjXRHRcBHeQR+Hmy7NdURsoDCb:tI9mc4slhLJ9hC/vm+Qqmy7NdcE
MD5:	FE331A9DBB967C0CF9B8F9393194706D
SHA1:	AD46D5C48638D094B7CB6065748F2F0DC13379D3
SHA-256:	7BB86F0FED70C3026F3D41D1ED0ADC304A4EBA489901226658C65A9244A4E22A
SHA-512:	E67196D4A808B2E82EBEFD6922A5822F9FC11C9F030B7E0C75D079A700339D1D0300B12DADEA7DFF9833BB27FCCFA1C4E026783091484FD6E6F7B1078251D057
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/flag/v6/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><g><path d="M14 3H5v18h1v-9h6.6l.4 2h7V5h-5.6L14 3z"/></g></svg>

Chrome Cache Entry: 652

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	669
Entropy (8bit):	4.392258836691397
Encrypted:	false
SSDEEP:	12:t47N9U/vmnqMVveSuXqVytjpdIYnX1Gcekt+7lUJJsUGF7pmAqjb6mUz:t4jU/vfSundBX8wt+osujsz
MD5:	2FC469BBFA86F0452A71C0841D764880
SHA1:	ED84D8A8D42D04498588E03C666FADED521DF292
SHA-256:	27C9E5810D545D84F4968F1DDED0421E78F2B3C28C6C89DEF47D57E079AB1E90
SHA-512:	30C0A81DF9B6BE79670031F934D364575E1A94ED4BB120032687794B15A48EA6C6130F1BFD29D71A094B35DF2FE4E8FDF470F87D0B2140641168CEF3B90DC04C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/radar_live/v6/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><g><path d="M14 12c0 1.1-.9 2-2 2s-2-.9-2-2 .9-2 2-2 2 .9 2 2zM6.36 6.33 4.95 4.92C3.13 6.73 2 9.24 2 12s1.13 5.27 2.95 7.08l1.41-1.41C4.9 16.22 4 14.21 4 12s.9-4.22 2.36-5.67zm12.69-1.41-1.41 1.41C19.1 7.78 20 9.79 20 12s-.9 4.22-2.36 5.67l1.41 1.41C20.87 17.27 22 14.76 22 12s-1.13-5.27-2.95-7.08zM9.19 9.16 7.77 7.75C6.68 8.83 6 10.34 6 12s.68 3.17 1.77 4.25l1.41-1.41C8.46 14.11 8 13.11 8 12s.46-2.11 1.19-2.84zm7.04-1.41-1.41 1.41C15.54 9.89 16 10.89 16 12s-.46 2.11-1.19 2.84l1.41 1.41C17.32 15.17 18 13.66 18 12s-.68-3.17-1.77-4.25z"/></g></svg>

Chrome Cache Entry: 653

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2363)
Category:	downloaded
Size (bytes):	35973
Entropy (8bit):	5.266740217260602
Encrypted:	false
SSDEEP:	192:10OW02ANbMb6l2n+brGtUQnSMfps3+eYQY+h572hk//r8Y5Y6BjSmMErEURHllPb:xMb/+vaW1e07/PiF5fy/EzDS25qb
MD5:	C4A88EC0CB998929A670C0C58D7DC526
SHA1:	03135A88E8DBC36020DD453D1E7407CE9A3A2CC2
SHA-256:	44F8A56D427917B5FA0DD7933BA545679BE5E6B3B93099E64A4E29C2159F57C0
SHA-512:	FD0D6C06ABCD661796DB2BC071C2A2BBFC5CFE8D80B434B68CD068CC312A03FF0C93F21C1FCE77C2BC03486A80765EE317239639C79F2EDC03777918A36EFA1F
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S/content/common/css/jquery-ui-1.12.1.css
Preview:	/! jQuery UI - v1.12.1 - 2016-09-14. http://jqueryui.com.* Includes: core.css, accordion.css, autocomplete.css, menu.css, button.css, controlgroup.css, checkboxradio.css, datepicker.css, dialog.css, draggable.css, resizable.css, progressbar.css, selectable.css, selectmenu.css, slider.css, sortable.css, spinner.css, tabs.css, tooltip.css, theme.css.* To view and modify this theme, visit http://jqueryui.com/themeroller/?ffDefault=Arial%2CHelvetica%2Csans-serif&fsDefault=1em&fwDefault=normal&cornerRadius=3px&bgColorHeader=e9e9e9&bgTextureHeader=flat&borderColorHeader=dddddd&fcHeader=333333&iconColorHeader=444444&bgColorContent=ffffff&bgTextureContent=flat&borderColorContent=dddddd&fcContent=333333&iconColorContent=444444&bgColorDefault=f6f6f6&bgTextureDefault=flat&borderColorDefault=c5c5c5&fcDefault=454545&iconColorDefault=777777&bgColorHover=ededed&bgTextureHover=flat&borderColorHover=cccccc&fcHover=2b2b2b&iconColorHover=555555&bgColorActive=007fff&bgTextureActive=flat&borderColorActiv

Chrome Cache Entry: 654

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 1411, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	8809
Entropy (8bit):	7.819360327558873
Encrypted:	false
SSDEEP:	192:qkEFQLKti12Im8G3aWlXpYcT5eX6IvNm2fvhnk9TwqG9OTLS8i8v:3gi1HG3dlucc6mfvhk9ZG9mS8
MD5:	85115DF5906E2EC9DD062B2C0C9F841D
SHA1:	7B50BDB960A1DA914D90F9F3C9B9FE79D5C62FC9
SHA-256:	76A25FFB9296F9EC56E221F88B2081330B10FD2BCD86EABA7E037FA99717C65B
SHA-512:	786D3CE76F2E94A0BA820533FBBEC6BACE95892B7CE868E66411AD62DAEEF9107DD30F62470BCFA60CBA7857443F35E22E77D48117075F5729BBCC93E8EA77FD
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/ys/r/ASlpPgTKW7L.png
Preview:	.PNG........IHDR...............o.....PLTEGpL...........................................................................bhp........................................................................................................................................................................agq....................................@.......................agp`hp..................agp...........................agpagp`bp.........`fp...agq......>.....agq............agqagq`fpagq...bfp...agqagq...?..`hp........>..?..?..............agpagq...agq....?........E.wagqagq........................@..?..>.....@........agq?...........agq...........agq...........@..>..>..>.....agq......agq.............?..>..>..>..>..agq...agq...............agq....agq>..agq@..>.......agq.........agpagq@..>....8[......tRNS..~`.0... @.....p^...P.....M.....n.....j...(..{=#......C.....Z3...xG.,&9\.7. ..c.......v.t.W.T...J. .}.fhR..6...../..Z..0...p.w.@...^~O..p.....@.,=......Q...,....).E..Y...

Chrome Cache Entry: 655

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 189 x 204, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	8274
Entropy (8bit):	7.8937640766721415
Encrypted:	false
SSDEEP:	192:TMIFbenrINeOftsJWtOmL9M5wwgSCF3WSrH1hmXyqvx:JFbFNPft9/9LSCF3WqmCqvx
MD5:	F39A8CD54BE60CBBBA1BBB6BE7E90E3E
SHA1:	E00B720FCB074E88FF6071B0ABB18AD1CA6401E4
SHA-256:	E92F39753F920D9576A12B6197BE6C0D3866792EA393DA13E16200C0D25F499B
SHA-512:	361449805CCE7711D17524656C14ACE6533BAD2716E86171AC0CA7BE4A9067A7D94F9B631F288F15EBAE9AA63A38BDA5A9BD4F375A263A446C6A6AA75424F39D
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/ya/r/XEU-8Pf8ztq.png
Preview:	.PNG........IHDR..............wRf....PLTE.....................GpL... '2............................................................................................................................................................................................................................................................................................................................................................................................................................x..x....>>>................................v..x..w..............SSS...................w..w.............w..w......................555..................zzz......................................................mmm.w.....v..w..x..w..w.............**.w...w..x....................v.....w..q.VVV....x..w..w........w..........@.b.....tRNSf.....>......7......HZ.....P....v.:....p..$.!.T.d.\..k....W.B~3....'K.E.,..r...k^f@...yr....N.....^a.....~...K..-_.m.....e.. 0.(..R...3.h.!@hw.,....9..XN.F.@..~./.6.v

Chrome Cache Entry: 656

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	104257
Entropy (8bit):	7.841093433825739
Encrypted:	false
SSDEEP:	3072:jandvYOFcsd1IMC7aB46/sGFPPf25qI15g2DyE0:jydgON17Qa/n1Pf2YInZyD
MD5:	C3221B6F85D253041DD7A749046252B4
SHA1:	3C61D86B06E871C2C4CA2C4E2ECD99E396D81927
SHA-256:	75B0515E2566CC4467BE7033F6B62B384138C74AAB296FB3A924FB4F6CCEFA1E
SHA-512:	4DEF84B957B8DBAF7097AAED3B1C0DE25DA72C0D0B000B7F74B49E2208B3BFB0C10F5F26A76403B37B647306C6BFCAA4FBF3CC9783C735C683D5373C16A975E7
Malicious:	false
Reputation:	low
URL:	https://cdn-www.bluestacks.com/bs-images/69b5965b1c8f0d20f45be82f0522d88a6bfa2ba0.png
Preview:	.PNG........IHDR..............$.....PLTE..........(5%!..-...gZf...+%.b~....i\j......[O]...\5+...dWb...$!25.7.....&_T`...............bWglbm0=Y92`9/............#."......H:B..................=CG>5?.........>HMK?I...........WLXmdu51C(#:......sj{...PDM.i^......e4&...ZTe.........wp.i>1.....y.@B>"..}........RGT...........................[-!......^y..../..........=54H28P!.........t}...A+1.dX.....e>MU....pG......YM.pbhVT....PA.k._N7'(.~d..!\KM...HGU.jQ...xH:D;7...\|OE?:NNP^...ukr...w@/hHB.....W@A.sV.{.'vea................"...cjW.qj...J3.XA...OWA....q8%.}r......\|.....}~.Xp.z[R.......cF.....Q\N..}...__r....zY..qyd............ccG...Pe.......gm\|.....znz.w.%(..z...u...#&j..BMx......!$HZ....:@gw.....~......w\|....ps.*1T......o.......K$N.45.CD.Z].....L..4..I..].............IDATx.}mL...DH.n1... ..=".Z.\|..1)t.Pu..u..a....m..Zq..R.kLig.nY../;i5.9..u..hi..!i..V.R.+......~>........z.........5].U-.@D...............[[[...]..~.../a..F...o..2[

Chrome Cache Entry: 657

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3292
Entropy (8bit):	4.937336041807365
Encrypted:	false
SSDEEP:	48:D5NbpUMwt2UTbxQlbOaDYhFfzEzvyYzXpM0pMClh+gpeg2gP:D5VpUMa2SS5OCYhVE95MEMkh+QJxP
MD5:	CD5507BB94EB948FEEB61A4FF87A03C4
SHA1:	C370D05CE4A9CF75C4CC9B129544C701A523E044
SHA-256:	B258D35BD22D4AD8993A547095EAB6CBB6D962AA77702A7ED1016DD15AB492CB
SHA-512:	AEACC6FA1CD986CA86BB57AC2D9E88A17592B40BF8FA25697B107ED6989710B78E4EA513E728F42E93B9C5CBD04E2587D9AC06B1C273E380625DB057B8CE12EE
Malicious:	false
Reputation:	low
URL:	https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/css/facebook.css
Preview:	.navbar-fb {...background: #3b5998;...width: 100%;...height: auto;...padding: 8px;...border-top-left-radius: 10px;...border-top-right-radius: 10px;..}...navbar-fb img {.. width: 115;.. margin-left: auto;.. margin-right: auto;.. display: block;..}...content-box-fb {.. width: 300px;.. height: auto;.. margin-left: auto;.. margin-right: auto;.. display: block;..}...content-box-fb img {.. width: 60;.. margin-top: 20px;.. margin-left: auto;.. margin-right: auto;.. border-radius: 12px;.. display: block;..}...txt-login-fb {.. width: 270px;.. height: auto;.. margin-top: 10px;.. margin-left: auto;.. margin-right: auto;.. margin-bottom: 17px;.. padding: 8px;.. color: #90949c;.. font-size: 16px;.. font-family: Roboto;.. text-align: center;.. display: block;..}...login-form input[type="text"],.login-form input[type="password"] {...width: 100%;...height: auto;...padding: 12px;...color: #000;...font-size: 14px;...font-we

Chrome Cache Entry: 658

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2106), with no line terminators
Category:	downloaded
Size (bytes):	2106
Entropy (8bit):	5.174718212509389
Encrypted:	false
SSDEEP:	48:sosBSoGvQgz4VgvlsSr07a1PZaJk9mVpkZ:sTwEgz4nSr07a1se96pkZ
MD5:	38ACC407B31DAA48FAFD99A877C64B5D
SHA1:	2D4FF63B5C01682308051B7C70C4D97861BE9BC6
SHA-256:	FD9E295B54BDDBDA076CB3B98F340699091FA8D67907462A3924B37EF061DEB1
SHA-512:	A38FEA2CB99B5CF9EEBC985AC2AD21FE17FD702C5FCC6201D5CC9730C3F857E4FC71B17025818856E782583C89748B5B5809D9E57459DC6453A3BB4C06DC9EBA
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S2/content/common/js/infoBar.38acc407b3.js
Preview:	"use strict";function _slicedToArray(t,n){return _arrayWithHoles(t)\|\|_iterableToArrayLimit(t,n)\|\|_nonIterableRest()}function _nonIterableRest(){throw new TypeError("Invalid attempt to destructure non-iterable instance")}function _iterableToArrayLimit(t,n){if(Symbol.iterator in Object(t)\|\|"[object Arguments]"===Object.prototype.toString.call(t)){var r=[],e=!0,i=!1,o=void 0;try{for(var a,c=t[Symbol.iterator]();!(e=(a=c.next()).done)&&(r.push(a.value),!n\|\|r.length!==n);e=!0);}catch(t){i=!0,o=t}finally{try{e\|\|null==c.return\|\|c.return()}finally{if(i)throw o}}return r}}function _arrayWithHoles(t){if(Array.isArray(t))return t}!function(t){t(document).ready(function(){function n(){var t=new Date;return t.getHours()>5?t.setDate(t.getDate()+1):t.setDate(t.getDate()),t.setHours(5),t.setMinutes(0),t.setMilliseconds(0),t}var r=t(".notification-wrapper"),e=[];if("null"!==CODA.Shop.infoBar&&"[]"!==CODA.Shop.infoBar&&void 0!==CODA.Shop.infoBar&&(e=JSON.parse(CODA.Shop.infoBar)),t(".notification-wrappe

Chrome Cache Entry: 659

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2692
Entropy (8bit):	5.130838002349536
Encrypted:	false
SSDEEP:	48:KKzG9MHfIrGJjkOMep58H5xf4+O+0KzOrr:KKzG5rnOMKI6J+0KKrr
MD5:	753A330F95A906499ABE488E677662D3
SHA1:	217627BCA38E4470D91BF305145832F9B32AB9B3
SHA-256:	232F4B64740DD615857B7D31A7839D94DE691DDCE917FE1A56B0F3DE7498FA48
SHA-512:	2F1D6F498B1470A777FE0098A29C410E75A6BFBEFEDF062DBF897B6B3918CF6666E92A3E06931FE953F49A617E8C62C4CAC69F15EA2D5D70B56D094323462761
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/P/airtime/w/css/airtime_v1.0a.css
Preview:	@font-face {. font-family: 'Sanchez-Regular';. src: local('Sanchez Regular'), local('Sanchez-Regular'), url(https://cdn1.codapayments.com/W/pub/mobile-web/font-sanchez/Sanchez-Regular.woff) format('woff');.}..airtime_close-btn { font-family: 'Sanchez-Regular', serif; }.#airtime_form {. display:none;. width:670px;. height: 440px;. border:10px solid #666;. border:10px solid rgba(82, 82, 82, 0.698);. /* border: 1px solid #EEEEEE; /. background: none repeat scroll 0 0 #FFFFFF;. box-shadow: 0 0 10px 5px #F0F0F0;. -moz-border-radius:8px;. -webkit-border-radius:8px;. position: fixed;. z-index: 9999;. top: 84px;. left: 616.5px;. display: block;. border-radius: 8px 8px 8px 8px;.}. / background: none repeat scroll 0 0 #FFFFFF;. border: 1px solid #EEEEEE;. box-shadow: 0 0 10px 5px #F0F0F0;. margin: 5% auto;. min-height: 380px;. padding: 20px;. position: relative;. width: 600px; /.#airtime_form div {. / padding:10px; /. height: 440px;. / border:1px soli

Chrome Cache Entry: 660

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	373
Entropy (8bit):	4.744613189871505
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4aC/foF8mw4U0bW5RJDURmodj6iiYp1GTDWbyLsji:t47N9U/vmRtnY8/4U0wRJIAoZ6iiYp1U
MD5:	25F33107B1ABE585D6667013A5EE0156
SHA1:	08CA62806C11E78AFA36E27F4334593A721CDA78
SHA-256:	D00CC0FA93D30CF63610BF1B33BB689DB1693D0B79968954EC376CB67E636D46
SHA-512:	75851CAB4DCDEF5E5AB0DBCE7FED43007EBDD28DC79AF33BFD9F4D5C8CF714660822BBB17CACCA02DC7E1B8CF85A74122481BE30A901F35ACB3D61C5845D5983
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/fire/v8/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M14 6V3c-.85.44-1.7.88-2.55 1.33-1.41.74-2.9 1.34-4.17 2.32-1.13.87-2.02 2.05-2.58 3.37-.46 1.09-.7 2.29-.7 3.48v.14C4 18.26 7.58 22 12 22s8-3.74 8-8.36V2l-6 4zm0 9.7c0 1.82-1.34 3.3-3 3.3s-3-1.47-3-3.3c0-1.19.58-2.24 1.45-2.82L14 10v5.7z"/></svg>

Chrome Cache Entry: 661

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2890
Entropy (8bit):	7.192134477647289
Encrypted:	false
SSDEEP:	48:2/6BMYL4knA9WIM8j/c05ibl3PfHAq3DlHAU02hl607wBnJgnAD4Vtq8Ha+H:2S+YkknmWIM8j/rKHAAHAUxYJie4Vtqe
MD5:	CF9659FA3891ADD490CB7D0D099D72AC
SHA1:	85581945FF05F48B3A652BA3E90AE44D97B18CF1
SHA-256:	76DB9987BB4F902E6D4A6702577717A6D6AFFF1BEF8EB6DFCE62C5C69E8D707D
SHA-512:	D0DFED00B29718DEDDB2FCFD0926D6234FE2E6AD6AC8A2D029747A01747B55CA5EFDD05D2694CF63D807D06FD46ED296D105C40169EF976E50FA81853D60EF14
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S/content/social-media-logo/36/socmed-facebook-H36.png
Preview:	.PNG........IHDR...$...$.............pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)" xmp:CreateDate="2020-02-25T08:48:52+07:00" xmp:ModifyDate="2020-04-24T11:35:36+07:00" xmp:MetadataDate="2020-04-24T11:35:36+07:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:f2f79ae0-3b29-4334-b916-3b0a0edf17e9" xmpMM:DocumentID="adobe:docid:photoshop:5db56676-51d6-d84d-af27-2a604b659

Chrome Cache Entry: 662

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	441
Entropy (8bit):	4.728282635502173
Encrypted:	false
SSDEEP:	12:t47N9U/vmRR9jRxmHRLkCsL9IxflMwhT2fLrYVMdubTci:t4jU/vJHNklhIwwhqgVMEci
MD5:	B15A744B5ED7D5D8A779E411F513E24C
SHA1:	F156A8D2F03E4FFB072FF7D2241DDCA911664B0E
SHA-256:	43B5B8ECC8D128FDD2DF4366CBE6FDD8ED0067DC117438290F59F5A0FFAF715D
SHA-512:	3381EC00EEE98892B08E5C47929FFC27129A92ACF486CC33DB7E7DE1128ACBADDCCAA75115A40BC6A91B97CA39FCB42E0661341BF433299720C80DBB3EDBFF20
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M10 20h4c0 1.1-.9 2-2 2s-2-.9-2-2zm10-2.65V19H4v-1.65l2-1.88v-5.15C6 7.4 7.56 5.1 10 4.34v-.38c0-1.42 1.49-2.5 2.99-1.76.65.32 1.01 1.03 1.01 1.76v.39c2.44.75 4 3.06 4 5.98v5.15l2 1.87zm-1 .42-2-1.88v-5.47c0-2.47-1.19-4.36-3.13-5.1-1.26-.53-2.64-.5-3.84.03C8.15 6.11 7 7.99 7 10.42v5.47l-2 1.88V18h14v-.23z"/></svg>

Chrome Cache Entry: 663

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2236
Entropy (8bit):	4.82983659295089
Encrypted:	false
SSDEEP:	48:hGgGPqOMornx2UzEz8faKbKYAoP5sQiWsi/iyWsi/iZ:KKEPgQnvAQiWsiKyWsiKZ
MD5:	5D59CFE8323DE5504384E306A2F4F097
SHA1:	8D8E5B2088F0F3FB6DEEA9EE5DEE056CCCBE804A
SHA-256:	D303D85A7318D426A47BFBBFFCDC1940662A6A19CC2739BEC469DF0AA5F0BFB6
SHA-512:	09EDB6107090F155A1AC155584BF77636BF5303A199AD516568DFB9F71F15156094A9037D7284E0CEBE083F48B1CB28F3A48549DD67CC759DFAFE190E5355A22
Malicious:	false
Reputation:	low
URL:	https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/css/spinner.58144.css
Preview:	..@-webkit-keyframes fadeIn-data-v-25e4ac48 {.. 0% {.. opacity: 0;.. }.. to {.. opacity: 1;.. }..}..@keyframes fadeIn-data-v-25e4ac48 {.. 0% {.. opacity: 0;.. }.. to {.. opacity: 1;.. }..}.....spinner-container{.. display: flex;.. align-items: center;.. justify-content: center;.. top: 0;.. z-index: 200;.. width: 100%;.. height: 100%;.. text-align: center;..}..[dir="ltr"] .spinner-container {.. left: 0;..}..[dir="rtl"] .spinner-container {.. right: 0;..}...spinner-container__icon {.. padding: 15px 0;.. display: inline-block;..}...spinner-container__progress-bar {.. height: 4px;.. width: 150px;.. margin: 0 auto;.. border-radius: 9px;.. background-color: #fff;.. overflow: hidden;..}...spinner-container__progress-bar__line {.. width: 150px;.. height: 100%;.. background-color: #6242fc;.. -webkit-animation: indeterminateAnimation-data-v-25e4ac48 1s linear infinite;.. anima

Chrome Cache Entry: 664

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	6756
Entropy (8bit):	4.943823679998798
Encrypted:	false
SSDEEP:	192:Gzlkq+gKr4qpYt0pSjgiJ0MwHa4o+lld/9p6:1qxKr4qSoSjgiJ0XHDhlld/j6
MD5:	AAC18EC46CDFF4E56D77EC8EE1DEC2C1
SHA1:	81F294310D14E041A3E3F58595A33306097DE207
SHA-256:	E13171DD374E3750F9CCFC1B8AFAF4D4BBAA6838C9550FD3ECC9A39D9EA128FB
SHA-512:	C23CF65449B2ADD4BF6689CE5FB7D3904D057FB008E5C5494447872EB4D7450D5A455ADFC32B64894CCC781179CD7E6BB48C8EE4C2F62C271C57ED5349948D53
Malicious:	false
Reputation:	low
Preview:	....KEYF....................@.....1C..1C.."@...A......................................................0.................................................H.......$...(...,.......p.......l......?...?.......B.......B............................(...@...X...p.......0...... ..............................................(...8...<...@...P...............@....r..$....... .....+?..+?8......@@.....1?H.......D....A.A\...........................\|...@................... ...........{.>@q=.A....\.....A......?Aq=.A<........... ...........\...=..@....{.>@........\.....cAt........... .............A........q=.A=..@......?A................ .......4...q=.A..A@.....Aq=.AL...q=.A..cAl.......`.....?Aq=.A............................................ .......H...$..............>..{?.....a.?..u?.a.?...................?..?.......>...................?..?.......>............H.:?H.:?(.....@0....r.@8.......4...]..?\@'A....................$...(...,...4.......t..................c.T.......k.................

Chrome Cache Entry: 665

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	dropped
Size (bytes):	8189
Entropy (8bit):	7.907364887115851
Encrypted:	false
SSDEEP:	192:/7Fdjy0GqDsidiFtTtE20H1ceqGGn30aTbWlu2bV2T:zTQqDslFtOqfnkOYF2
MD5:	82A7A16DC135ED73FF91372296B7C15C
SHA1:	60EF636FDA035641F3B8D057611F8481B4C49926
SHA-256:	85CD505E271C480E3C74787C27CB731B417110D86FEC22D9281B1F40478C7F36
SHA-512:	4E0D1DA35E01DEB0B720C68233B6976910C18629D5A9A46269BDF2C30BD96782EA495B5A16505C940B6C3B6B01276BFCF49232C0234AB3999E38970ADC903E1F
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a7001000050030000b7060000480700005b0900008e0e000001140000891400004615000089170000fd1f0000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."................................................................................."I.I..".(.nz......`=.ILI I I I.De)is.o.'....3..$g.....c....5$..d.o...x.....df..k..`g0..,.H.~.).C.K.$}..dlY./.\`...DJ..&T.)....Y.(U.S`e......ld..6-....M..b}1`....(..m.{P...=....LN.i..L...t^...I.....w#.....x....N..../)R5I..Sv'r...7.v.vo5Y.j....P.:....1..%.]$!.oD...p..i..-;.+t..r...^.*..C..a:...8!/.y....E.....J..U.....[S\|..)R... ..(.A$.B.Q..z....6..D..0.fl.f.ow.!.-......,5.4\...b.n..s.n...w.?...)............................. !#14"0.$@............a1f......N.asg.F{....../.+S;...v~.....Q..I.9..Od.4.s-5.j_....f.r.V..Ao...I4e....f..kye.r....<.?(`.`..01.Fr%..D.....`Tq0'...1.(...#

Chrome Cache Entry: 666

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34028)
Category:	downloaded
Size (bytes):	620698
Entropy (8bit):	5.281102916894486
Encrypted:	false
SSDEEP:	6144:ILou7U5UxXWM6ATAz4T42a108J06EtTllmn:ILoigaXzAzXFepllmn
MD5:	5104D2F1344A6B789F6BDE0A5DF4E1B0
SHA1:	28B767BA0000F33544E6B1BCC7E6968643415910
SHA-256:	0096AAF8E156BDBF9CE0F5E759AE67E2FB4ECDEB6710E4EFAE206B847D7E05CD
SHA-512:	1443A0D9A7B6D6672EF29ED5207E7466D574C2287DA4216A0A21420FE019A33D985D98B5A4F0325E31BDE1E5A799B7E129648D31502CF7D099D616C778BD6B72
Malicious:	false
Reputation:	low
URL:	"https://static.xx.fbcdn.net/rsrc.php/v3/yB/l/0,cross/yS8ywFQ5XSl.css?_nc_x=Ij3Wp8lg5Kz"
Preview:	._9dls{overflow-y:scroll!important}._9t1d{overflow-y:auto!important}._9dls ._6s5d{overflow-y:visible!important}._6s5d{background-color:var(--web-wash);-webkit-font-smoothing:antialiased;overscroll-behavior-y:none}@media (prefers-reduced-motion: reduce){._6s5d :not(.always-enable-animations){animation-duration:0!important;animation-name:none!important;transition-duration:0!important;transition-property:none!important}}._8ykn :not(.always-enable-animations){animation-duration:0!important;animation-name:none!important;transition-duration:0!important;transition-property:none!important}.._71pn ._5e4k{background-color:var(--accent);border:0;border-radius:18px;height:24px;margin:0}._71pn ._5e2h{line-height:24px;padding:0 12px}._71pn ._5e2k{background-color:var(--comment-background);border:0;border-radius:18px;color:var(--secondary-text);font-size:12px;font-weight:600;height:24px;max-width:100%;padding:0}._71pn ._442_{padding-bottom:16px;padding-top:8px}._71pn ._4438{margin-top:-8px}._71pn ._1

Chrome Cache Entry: 667

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1942)
Category:	downloaded
Size (bytes):	165120
Entropy (8bit):	5.621839789688097
Encrypted:	false
SSDEEP:	3072:OIjoRz/R9b3M1r4uB0THfj1CZsy4szzMJKw6a3B2cnudYEk2u/3nsGbACoPzQ0sK:OIjoR19b81r4uB0THfj0ZsBszYJ56CEZ
MD5:	F18E711FCDE6CCC90FA9B2CA6B0B332E
SHA1:	CB9D65456E9F86E490227C272C27131E35450A85
SHA-256:	7C2D3871553251DD50FF063FB65C40B8F21D78657D428A27A17E0EE7A3B262AC
SHA-512:	85B2014E20747B8B9CB80250ED1241265F28E434418B4C39B253177F86408849FA82BA499E465427471EF99783886133FC4FF5FD9546790E324E673945EF510F
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/aef0ced3/jsbin/serviceworker-kevlar-appshell.vflset/serviceworker-kevlar-appshell.js
Preview:	'use strict';var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var ca=ba(this);function da(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}}.function ea(a){function b(d){return a.next(d)}.function c(d){return a.throw(d)}.return new Promise(function(d,e){function f(g){g.done?d(g.value):Promise.resolve(g.value).then(b,c).then(f,e)}.f(a.next())})}.function r(a){return ea(a())}.function fa(a,b){a instanceof String&&(a+="");var c=0,d=!1,e={next:function(){if(!d&&c<a.length){

Chrome Cache Entry: 668

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.119467255389257
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI42IBIAFzKVN/YWAIQfgZi:t47N9U/vmR2I+jVyIKg8
MD5:	914B3584E764344B898D1431747A8A4C
SHA1:	C870050A1AEB28C22867785E93A304794375FCD2
SHA-256:	B9E9D5F5F7AF96C4272B4ECE21F8B568F8B03D70D6ABA3DEBA5F823E81796F15
SHA-512:	A8040E77D002823D9D190822C23A4619052CAB4DB0E18658ED62DD50254E96ECB47A7D0F776977F404D60DF839AFD447A5061B564CC8DBA4A0F6A1B47BA5D2AA
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M11 17H9V8h2v9zm4-9h-2v9h2V8zm4-4v1h-1v16H6V5H5V4h4V3h6v1h4zm-2 1H7v15h10V5z"/></svg>

Chrome Cache Entry: 669

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1709)
Category:	downloaded
Size (bytes):	3867
Entropy (8bit):	5.218983873739376
Encrypted:	false
SSDEEP:	48:0NQyFP6Uvi5bkSQd+fAaW7muARnNbRLysoOnwN05JtltNE6yhR5bt:ud1viFSu/bRDneqJXnyHFt
MD5:	D79454819DA0C4B48BB04482BEDE5899
SHA1:	4913A15A23740E2F40F0B3B3B25DEC7742EF4A38
SHA-256:	B43770A074C3CF88F2F5B66F37255E7F3B6422BE6817BCBBAD7AFEFAF110C9B9
SHA-512:	86A2CF0D544198CAEB50AF35A3A1A2049F32F8EF1287B5F8BA7B6C92D6BE8B210D35C168922E3344230920B5DC1B43CE1C2B789BF84B1D1633474A3C80FCE5F5
Malicious:	false
Reputation:	low
URL:	https://www.freefiremobile.com/mobile/ff?pid=OrganicA&c=Codashop
Preview:	<!doctype html>.<html data-n-head-ssr lang="en" data-n-head="%7B%22lang%22:%7B%22ssr%22:%22en%22%7D%7D">. <head >. <meta data-n-head="ssr" charset="utf-8"><meta data-n-head="ssr" name="viewport" content="width=device-width, initial-scale=1, minimum-scale=1.0, maximum-scale=1.0"><meta data-n-head="ssr" data-hid="description" name="description" content=""><meta data-n-head="ssr" name="format-detection" content="telephone=no"><base href="/"><link data-n-head="ssr" rel="icon" type="image/x-icon" href="https://freefiremobile-a.akamaihd.net/common/web_event/common/images/ff-logo-icon.png"><link data-n-head="ssr" rel="stylesheet" href="https://dl.dir.freefiremobile.com/common/web_event/common/packages/spine/3.8/spine-player.css"><script data-n-head="ssr" src="https://www.googletagmanager.com/gtag/js?id=G-KE3SY7MRSD" async></script><link rel="preload" href="https://dl.dir.freefiremobile.com/common/web_event/official2/dist/client/16fa1dd.js" as="script"><link rel="preload" href="https://dl.

Chrome Cache Entry: 670

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 960 x 540, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	75737
Entropy (8bit):	7.987409975273607
Encrypted:	false
SSDEEP:	1536:ZoTVZI674UukqnsZLpUeGvMfcl82/2JhabLtfChwRmrCv3gz:II6lEvMf6NOJhyLtfCrCv3gz
MD5:	36810D91CEF7B9FE1005FC167848E989
SHA1:	D691DFA2619D932784BAA752CFAA0C9606E9ADD5
SHA-256:	63C1D3747CBC0B24ADB7882F4DE7A864335B3E4303F4478052F77E317B7A1A33
SHA-512:	641C71A07374254E5CEB9A5EC1AABEF187C7172DECDEBC53C106B869511E0B3A847BC3D180148C6CAC6A9378092F59977DAF298D0B98804A13BC2FAF3F7A1C03
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............?P,....sRGB...,... .IDATx...it].u'..>.No....8.(R.%Y.%K.DZ.%.I9..:..IU...S].J..ZISW.:.U..Y.N...x.%..`I.(..@.$(.....@<.......@Z.%bx.......(.......}.......51...'z.....k..3..4S.+.sp.~U.f..c......{.{..LM{1...T<...(^v."G.g!D.ab7q.t....g!.L.j....C0...x]OlT...3..!KH..."..#......gA..m..79=..>.........,.hK.HT.....B..,..e.k...Z.X....#..i.S.V\T....;U.,...O...~.zU..&.g.9.O..l;M.+.Y..~..3.......}S....%Yb?../J...A2.?....T<v.~..aI....q.....6S....W..[.q.........)...Q..{....Rk.iI.....=.G..lB....!.UP<v..p.........vM....oo"&h.....DN.\|....../.....0.k...g.._.....E.!......pf..9.0....Ww..P.7..0....}wC..ud..7..O..l.Zx.-...(.....=...3/.....$.N..h1..3/.../....z...~.@.....\'&..+...bS..5..T....`.;...dQ.BG...-......Q.~ ...C8.~.B..!...ho...Pvf.V.!N.....\|L....1!.h.....:...HE._ ..\|K......Q(m7....$..?.g./..h.....bU..o..;..7.HT......,..b@3.N...o,E...s.b.t.c'+...H....~v..e.[....d.Z..Kp,;.7..>..9../.....T..'..w..H.........w.....Ej..:.....

Chrome Cache Entry: 671

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	8724
Entropy (8bit):	6.79038236277243
Encrypted:	false
SSDEEP:	192:/itgWO5VcGhhnFZHjbCuTu3rNvxfzP3VyuWyshlnrlqRi:/ANeBFVKZxfMu0lMi
MD5:	2993755C7C7A44E573104124DC060F3C
SHA1:	A10CFFAA067B8FB82C5B084F08721950693474A0
SHA-256:	866248FB3F84481E21A19D0E2D4D5DF20EAADA6C5E5934B3F4FC39879A15A4BF
SHA-512:	746F07C0199702844AD7DA949D12BD8170E98A665DE7F89FC22EABCB3FD3F0DBEFDE65AB9E035F04DC861BEA186397B23548C8DB862E876E903819304CFCBAAA
Malicious:	false
Reputation:	low
Preview:	...KEYF....$................. ...................4C..4C..@@..pB..............................4C..4Cm.....................................................................................................................................................Adobe.d........................................................................................................a..!Q..1A"q.2R....#3B..CSbr............................!1.aAQ............?....$}(.....5{....pcGW.A.?...Q....h..%...8..M!...j......#.'.{S... \|....a.w..O.(....Pn..=..o....[wg.....^6p..Yi.....73OC.V.Kx..4..c.3..E[j..............$....`....&.u)b.o..L9P"....yn..eE...N..........m...Kd...Zvl.;"....S8.oD.....S...Q...-.R#...B..-.&e.lS..v=G.M5....&.....i.G.0.mD...X%.X%....../.V.V..%.b....M.....7.YO+9."......+..Y....L.Tj.K.ln..R...,C.......".#ul...e..P...Z...N.=..X.n.Q2....M.......X..$.T.......i.5!..z..+Q.p.......1BYF(K).........K.1..0..j..n....o_.h..MOE...........u..X,...M&.p.JkK.....cU..........D..>..h.5.h.]:..

Chrome Cache Entry: 672

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	27
Entropy (8bit):	4.3845171317931
Encrypted:	false
SSDEEP:	3:8jEMEN/QC1l:8jMN/QCv
MD5:	F7C8AABF963C3A65DBBA34ACB7D29035
SHA1:	017BC86726314E2DCA0DFC315F4C48463B0446AB
SHA-256:	8E000614947BCED11DCF2C4A0B33E9BE12142555D9196563A93241CB447F64E3
SHA-512:	F65673F68887A3FA20E4A40EE8DE3F08DAE22299C0F76DB126D4D5E72C43A4666955D5D691A45119B46D26B888F81A45E10E13B1F77E7BEF883EA10A938567DB
Malicious:	false
Reputation:	low
Preview:	,...sabr.malformed_config..

Chrome Cache Entry: 673

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28924), with no line terminators
Category:	downloaded
Size (bytes):	28924
Entropy (8bit):	5.231666786957434
Encrypted:	false
SSDEEP:	384:DDJ6NoRIwHWvsSHzmZA5RY1L0l3Pz8K73ilG42Iwnw4HFzKvkGuIcDYP8ALJiy+h:DE+IwZy+uyl3wn1tKvvqIulmpo
MD5:	4947FF982FB69173F95DA79B538F254D
SHA1:	884DB3BF10E92790CF6D9937731F70D59C87CC9F
SHA-256:	0278B60E08B67FB8AE86C56DD80075E94E1D51113EB21ADE41996147C601DFE6
SHA-512:	6B8291D34966FFFFD9CBD8F37C51F820A20B211E3B80CC01E94EC092AD58E40D7B1189FCB9FDBC3589A316E84C2E38BA0974CCF3E8EE18D880688840401BBAE2
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S/content/common/js/xss.min.js
Preview:	(function e(t,n,r){function s(o,u){if(!n[o]){if(!t[o]){var a=typeof require=="function"&&require;if(!u&&a)return a(o,!0);if(i)return i(o,!0);var f=new Error("Cannot find module '"+o+"'");throw f.code="MODULE_NOT_FOUND",f}var l=n[o]={exports:{}};t[o][0].call(l.exports,function(e){var n=t[o][1][e];return s(n?n:e)},l,l.exports,e,t,n,r)}return n[o].exports}var i=typeof require=="function"&&require;for(var o=0;o<r.length;o++)s(r[o]);return s})({1:[function(require,module,exports){var FilterCSS=require("cssfilter").FilterCSS;var getDefaultCSSWhiteList=require("cssfilter").getDefaultWhiteList;var _=require("./util");function getDefaultWhiteList(){return{a:["target","href","title"],abbr:["title"],address:[],area:["shape","coords","href","alt"],article:[],aside:[],audio:["autoplay","controls","loop","preload","src"],b:[],bdi:["dir"],bdo:["dir"],big:[],blockquote:["cite"],br:[],caption:[],center:[],cite:[],code:[],col:["align","valign","span","width"],colgroup:["align","valign","span","width"],d

Chrome Cache Entry: 674

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8477)
Category:	downloaded
Size (bytes):	465218
Entropy (8bit):	5.5677455989130795
Encrypted:	false
SSDEEP:	6144:9pelh/tn9jOc7S6QFt838ZGxrpsU6FlIb:9pelhVn91QTYOy
MD5:	B0C426D381C1EF00A43E9A5AA3006C4D
SHA1:	4959FDA0B14385D7B20DF317CA4E511A0CE1F329
SHA-256:	31205E0F1F4AD6E82C3EAA6DB6604DAC744F16F3449C3D652778FB3B848BD2B2
SHA-512:	2AD5EF603E6362AE08ABED85164AE2971EB0D6E5BF9988C56080DC3B235D9A66B71B295EEAC399528FAAAFF1D29CDB58FA9EBD62490D9C4AC875407E3BAF50A8
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iovW4/yD/l/en_GB/aubh74cvJ-S.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("AccessibilityWebAssistiveTechTypedLoggerLite",["generateLiteTypedLogger"],(function(a,b,c,d,e,f){"use strict";e.exports=b("generateLiteTypedLogger")("logger:AccessibilityWebAssistiveTechLoggerConfig")}),null);.__d("AcfToastImpressionFalcoEvent",["FalcoLoggerInternal","getFalcoLogPolicy_DO_NOT_USE"],(function(a,b,c,d,e,f,g){"use strict";a=c("getFalcoLogPolicy_DO_NOT_USE")("1873550");b=d("FalcoLoggerInternal").create("acf_toast_impression",a);e=b;g["default"]=e}),98);.__d("AsyncTypedRequest",["AsyncRequest"],(function(a,b,c,d,e,f,g){"use strict";a=function(a){babelHelpers.inheritsLoose(b,a);function b(b){b=a.call(this,b)\|\|this;b.setReplaceTransportMarkers();return b}var c=b.prototype;c.promisePayload=function(b){return a.prototype.promisePayload.call(this,b)};c.setPayloadHandler=function(b){a.prototype.setPayloadHandler.call(this,b);return this};return b}(c("AsyncRequest"));g["default"]=a}),98);.__d("BDSignalBufferData",[],(function(a,b,c,d,e,f){"use strict";a={};

Chrome Cache Entry: 677

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 246x138, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	10352
Entropy (8bit):	7.976994490072155
Encrypted:	false
SSDEEP:	192:2R1Ox6jQwQ5+PSEw1mz/LzeLk8AqFuOP3+VzzZCaLqT3OWkJjnAj:s1OAS6yAqFuOmW7T3OWkVA
MD5:	D74801AFA31D3E44DC457B2E149B7725
SHA1:	F3C001B5242BAB2D0A6C9ECBBB638F7F20556D57
SHA-256:	8CCBA68EA462BE7EB8ECFD6C09A0360171093FA99B2F605D87EB80C2EA999DBC
SHA-512:	9FF9F621539B0E9CD2D66329DF63676AAFDE5DE6D6DBA3D372180D8FDB42F01523D060CA56FE3DAD085619C1FF55F737CD1E4E7A55403BEEECF5EA0B19C03326
Malicious:	false
Reputation:	low
Preview:	RIFFh(..WEBPVP8 \(...........>Q..D......T8....c. ?`..............^.q..x?........7._`....?]O\_.>.?......V.....C.....~.....z....Q...G.O...o.;.?./.o.?...?.>........w./..;.........uO.oB...................>....D.-.....w....;M.#.....z...'../..a..}.}..4...?.................`/.?....t...+..........>..._.../.....~........k./.?.......>...#....+...q..vM.+..=...#...R..:..._'>.../.=.b9....yI.03.;,...u.'....W.5)9\...2e$n.%.......%f^.{....f......M.2...9..X.XG.1 ....{..Y.d...Z.Z..F..l...J..@!...U.....:\|....h.`.,7+....>.....w........'.Fi..d.o..!F.....h..^..dURh..2..&_..)...p.l..p.\|E.[....Pa.....5.0.t.k?......._]..Ze...d.{`...S..\...(SJv.c.v..\..=].3...Y...o.-...<"F0...t..&W..}...8.SC.../...}.g..Sfg)Z..$T.......Q!..nJ]..S^.,.M=d8.e.A.M.2.G.gvb..~......^.W~..jL.@.Z.8^.gM.z_.....xfQl=.;.?3,..}......`>k..0}..J.....C.@....3bb...U.....'.)..,...P....7..Q&..(... 9.B.7.?y..C..k.xm.. @.}..O.[]..w0T....X..7.z.l._5...Tv...-.%e.........f.a'...u..A;."m)..1

Chrome Cache Entry: 678

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	311
Entropy (8bit):	4.773843844737949
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4tSSJhrtldwFSrSLwKTksQchiR29UZqbivGSY:t4noU/vmRtXrtvwFSgTksJh42K9pY
MD5:	D5E9A724519F1A72A4FEECDEA710B2D7
SHA1:	75040CDBB6269D16066A1CC97973CBD35FB3EAF6
SHA-256:	119BEF082F4459AC47AC8C95CC7F5901D60BF2AFE47DE7314E479BDA835CD593
SHA-512:	55A2C26244423311D30C64F06E1AFAD3035D318F7948FED5F2D386FFE9AF1C48077F59036FB1B8BD368875F953CC2F2BE627CD6F5231CEE5119961CA523E8716
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/arrow_time/v8/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M14.97 16.95 10 13.87V7h2v5.76l4.03 2.49-1.06 1.7zM12 2C8.73 2 5.8 3.44 4 5.83V3.02H2V9h6V7H5.62C7.08 5.09 9.36 4 12 4c4.41 0 8 3.59 8 8s-3.59 8-8 8-8-3.59-8-8H2c0 5.51 4.49 10 10 10s10-4.49 10-10S17.51 2 12 2z"/></svg>

Chrome Cache Entry: 679

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 246x138, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	7198
Entropy (8bit):	7.971319530387594
Encrypted:	false
SSDEEP:	192:LFigdHguUZ56zULnEPJ+fNjH8Af5aGGMLB:LFBHU5amHBaGGMd
MD5:	DF2646C292F927DC1D04F80FF1B169ED
SHA1:	05F57C14B4DFC993D8470EB26B2BB9A5927450CF
SHA-256:	689CA9DA45B868C5756D6D926A8497554E5133CD0EF87AF0770F7F794A9F775C
SHA-512:	6978B4C12C5DFDC9A7A97A0DB18FB9CD38D8E41975EE26DEE092DF42CCB71F800A0133FA6062033DF987255CAC532C98B7E502886F98EA4A16475A82C8A2CCF7
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .....f.......>Q".D#.!.\..8...!..z..`&.p..zW?+.w._....0<..g.{.................r.....S......._D.=.....&...C..........b.].........o......\|.........o`....?.....~.{.~..P.......e...G.....G.?....>.@=.?...?........'./..i...7....?.?.._.O...?(>....;....................;....._....>........op.......}..._.S...O..j..............o...?f>p..~....B._..~.r).G...1...&..8..AG...`..L.v.a.).r.....FZ..J.'02.Y..SP...ed`v..7)..L.. .Q...{l[.y..3.......H.!..!..CB;..B0.....v.e.j..U..r......E3.q.46.~..7cV.... .\|...h......Y.O0_....H..#.!..;[..?T.k..W..k. #5.Ap.(..b..[Y(.....84$\..>.h.n...Z......U0.F...<.E.<..Q.....O.....v.e.t.b..?.q..Wp3.~x...O6%z..x.....pz.?v.A...pP.lGt.....T.._...9..A..%>...'.(.s..yP.NUX.w5..;........(.^..b/..I.....f.#0 3%.I...t.v...b...>..sW.g>...+/]......Q.r^]..P@...$}.Q..r.....O=.v.%p.v.<.vy..zWW....Y%1...[?u.z...COe &.Y..iN.1..2.....1..Ac.^uU(......HP....A...0.D;..nuKTT;l.h:.o.Nnd..J..v.....gE.k.."...M.....O.J_4.Z.......J..A-..V@.....

Chrome Cache Entry: 680

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (1120)
Category:	dropped
Size (bytes):	5598
Entropy (8bit):	4.293279469529671
Encrypted:	false
SSDEEP:	96:04JsH5RGMp9UC96s4AJu4m35PznhTJAxfxZN0rDRMW8R0aaQWD3rKivMt:0ai9UCgs4AJ/mpzcNx/eMw1QWD70t
MD5:	2FC13E5E6B51277D7A39CD7AD7D14158
SHA1:	0C9A5C613E5B853376CF2B96D8501EE5960D09C9
SHA-256:	9073602654785DE3537C4AA85E69847A0BDC871F8DAECB053C7698D4AFE8F6DE
SHA-512:	A1F8493CFC4F9C619785D9E39F0E9A54420643C3905193E6D5FFD7531184CA5E5B0FE1B43E7307506ADC01CBB397E4A1CCEA63ACD37304360AACAD8FF06D6DB8
Malicious:	false
Reputation:	low
Preview:	LINT.IfChange-->.<svg xmlns="http://www.w3.org/2000/svg" id="yt-logo-updated-svg" class="external-icon" viewBox="0 0 90 20">. <svg id="yt-logo-updated" viewBox="0 0 90 20" preserveAspectRatio="xMidYMid meet" xmlns="http://www.w3.org/2000/svg">. <g>. <path d="M27.9727 3.12324C27.6435 1.89323 26.6768 0.926623 25.4468 0.597366C23.2197 2.24288e-07 14.285 0 14.285 0C14.285 0 5.35042 2.24288e-07 3.12323 0.597366C1.89323 0.926623 0.926623 1.89323 0.597366 3.12324C2.24288e-07 5.35042 0 10 0 10C0 10 2.24288e-07 14.6496 0.597366 16.8768C0.926623 18.1068 1.89323 19.0734 3.12323 19.4026C5.35042 20 14.285 20 14.285 20C14.285 20 23.2197 20 25.4468 19.4026C26.6768 19.0734 27.6435 18.1068 27.9727 16.8768C28.5701 14.6496 28.5701 10 28.5701 10C28.5701 10 28.5677 5.35042 27.9727 3.12324Z" fill="#FF0000"></path>. <path d="M11.4253 14.2854L18.8477 10.0004L11.4253 5.71533V14.2854Z" fill="white"></path>. </g>. <g>. <g id="youtube-paths">. <path d="M34.6024 13.0036L31.3945

Chrome Cache Entry: 681

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	32856
Entropy (8bit):	6.370524623339198
Encrypted:	false
SSDEEP:	768:As/PNPiPQTHCiSbVESUnSTbgtK2RFozpMDWeFDZeNX7Xi:As/PNPiPraNSvgmIWoely
MD5:	939340C7A209B4CA46615C8200F6610D
SHA1:	9DEE563165182C679C2EB808966DCA25AA09B006
SHA-256:	43078647F3BD86002CC2D165F4439181AFA7D53C7B271CF5A02071CC25D6909B
SHA-512:	743AF1C6630EAC427508C015B90B86FF3AD2C900DF96EE71396955B0FB6473EFFDC8B9B01DA19019BFEC8F2C12A2D8B5B33D744099778A089EC0898B44658CFE
Malicious:	false
Reputation:	low
Preview:	...KEYF....$................. .............<(....4C..4Cffv@..pB........4.................4C..4C......................................................................................................................................................Adobe.d.........................................................................................................a..!Q.1A."q..#2r...$3BR...C....%Dbc............................!1QAaq..."2R......#3Bbr..............?...Z..dcI.1....D.i"F4.$...Q ..7I+..#..? .B....[<<.....ZH....i.Zt.HT....&.....\|2.D..t./..w#?.h....O..E.../.X..C....w..J.r).X..2..b.G...Z....:.iP.bwG0...tK..e-'..d.....O.....>.K..;LMg..?P..'...f. t.J...k.'i..\|.-.....u._.g.+...1...CU.p...I..p....~?.y\|.h.S..c.)..K.1....D.i"F4.#.H..$I....W...cI.1....D..q.h.....$I......{.0@z...\7...B...6...8....o.D#.........\z.i.U1Yu.w52......+..cT........@. ..@JX..).&..)G..RF.A...UH...T5....y..o....>......^d0.\....\.u...VG.'..X.U...N..4..i"F4.#.H..$I...c.r...#.."F=.D.i.g...../

Chrome Cache Entry: 682

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	184
Entropy (8bit):	5.038914846080771
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5hL6Fb0zVjXRH8+hHiATcvXjXRHRcBHeQR+HEp3JdZFQENIfCyHn:tI9mc4slhLJ9hC/vm+QqaXFXaKyHSbE
MD5:	C71D43D3179551ACAFF38A6A24DEDA71
SHA1:	9BE42687E42147DBFEA9C1CA9486CCFE6DAB9F96
SHA-256:	4402C4D35A422097E5AC692FF4EF5182F2E3B72F5A0F710C230A18D6449C688A
SHA-512:	11BBD2FAC3FF1C144F3F18C60975DD679DEC6C23081621DB874DD1057906A5085B73E998332E1B2C2E511AE55D481980DC3E011588487D2779297B6119BCC79B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/home/v7/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><g><path d="M4 21V10.08l8-6.96 8 6.96V21h-6v-6h-4v6H4z"/></g></svg>

Chrome Cache Entry: 683

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	2.6465732373896285
Encrypted:	false
SSDEEP:	24:Es5ed8vZa+/kffJTyN5J5iXSvjDxatgFFjiZq1MJUikeVgl2fwFfBaTzh4mpCbak:2fq3OqXAzh4jaJV9HxG8Q
MD5:	3E764F0F737767B30A692FAB1DE3CE49
SHA1:	58FA0755A8EE455819769EE0E77C23829BF488DD
SHA-256:	88AE5454A7C32C630703440849D35C58F570D8EECC23C071DBE68D63CE6A40D7
SHA-512:	2831536A2CA9A2562B7BE1053DF21C2ED51807C9D332878CF349DC0B718D09EEB587423B488C415672C89E42D98D9A9218FACE1FCF8E773492535CB5BD67E278
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/yT/r/aGT3gskzWBf.ico
Preview:	............ .h...&... .... .........(....... ..... ..........................................h. .f...............f...g...d.@.........................`...e...f...f...............f...f...f...e...p...............`...f...f...f...f...............f...f...f...f...f...p...........e...f...f...f...f...............f...f...f...f...f...e.......d.@.f...f...f...f...f...............f...f...f...f...f...f...h. .e...f...f...f....U..........................y'..f...f...f...g...f...f...f...f...............................U..f...f...f...f...f...f...f...f..................................f...f...f...f...f...f...f...f...f...f...............f...f...f...f...f...f...f...f...f...f...f...f...f...............p...f...f...f...f...f...f...f...f...f...f...f...f...................d...U..f...f...f...e...h. .f...f...f...f...f....d......................f...f...f...h.@.....f...f...f...f...f...f....t.................f...f...f...........p...f...f...f...f...f...f...f...f...f...f...f...f...`...............p...f...f...f...f

Chrome Cache Entry: 684

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	631
Entropy (8bit):	4.523426024540581
Encrypted:	false
SSDEEP:	12:t47N9U/vmRlNAz9Cf2+uFNxLjRJqpOyaIj24iexYNjbnME:t4jU/vwAz9C2NDx7MraCvC/ME
MD5:	CF8624D2CB9D056B69F4240D26676F42
SHA1:	B6D1C7111D039427E2605490C40992C47021E1C7
SHA-256:	384FBC48B9DAAAAE43546C01BAAC0F19EAF764549ABC66FE69A9E9675A14D0A3
SHA-512:	8500302D48ACDDAD24B051A44482305D92B349A054BF006E0FCA901DC55CC06DF826D28A39432ED7A92B7FB76E1D351945606DA87A0F0D3127E66D1CF2DDC90B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/broadcast/v2/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M13 13.72V22h-2v-8.28c-.6-.35-1-.98-1-1.72 0-1.1.9-2 2-2s2 .9 2 2c0 .74-.4 1.38-1 1.72zm-5.23 2.53 1.42-1.42C8.45 14.11 8 13.11 8 12c0-2.21 1.79-4 4-4s4 1.79 4 4c0 1.11-.45 2.11-1.18 2.83l1.42 1.42C17.33 15.16 18 13.66 18 12c0-3.31-2.69-6-6-6s-6 2.69-6 6c0 1.66.67 3.16 1.77 4.25zm-2.83 2.83 1.42-1.42C4.9 16.21 4 14.21 4 12c0-4.41 3.59-8 8-8s8 3.59 8 8c0 2.21-.9 4.21-2.35 5.66l1.42 1.42C20.88 17.27 22 14.77 22 12c0-5.52-4.48-10-10-10S2 6.48 2 12c0 2.77 1.12 5.27 2.94 7.08z" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 685

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	367
Entropy (8bit):	4.678729266974906
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4uZBPeRPbmcsstyLTngAV99WTc6XzQuJ3/vh7QrS3/IUp+wb:t4noU/vmRyPeR9YngQ9Ec6jhJ3XBAUp5
MD5:	A28E7BAA1C8C78EFFBDB2D0AB01D9EF3
SHA1:	F3408C777CFED5C38AF966596750F675637B012E
SHA-256:	7A7A47330CB72F09686EDF979205FA844FA134556F81F046EFECF07B1401A557
SHA-512:	14AE281980FA9715DFFF5BB4F22EE6B4959F3C15355B71AA65E43392E598F40DFFDDFBC0670D02D29A7C7A238B0066064174385439D0291275FAEDCE26808146
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M7 8c0 2.76 2.24 5 5 5s5-2.24 5-5h-1c0 2.21-1.79 4-4 4s-4-1.79-4-4H7zm9.9-2c-.46-2.28-2.48-4-4.9-4S7.56 3.72 7.1 6H4v14c0 1.1.9 2 2 2h12c1.1 0 2-.9 2-2V6h-3.1zM12 3c1.86 0 3.43 1.27 3.87 3H8.13c.44-1.73 2.01-3 3.87-3zm7 17c0 .55-.45 1-1 1H6c-.55 0-1-.45-1-1V7h14v13z"/></svg>

Chrome Cache Entry: 686

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	669
Entropy (8bit):	4.392258836691397
Encrypted:	false
SSDEEP:	12:t47N9U/vmnqMVveSuXqVytjpdIYnX1Gcekt+7lUJJsUGF7pmAqjb6mUz:t4jU/vfSundBX8wt+osujsz
MD5:	2FC469BBFA86F0452A71C0841D764880
SHA1:	ED84D8A8D42D04498588E03C666FADED521DF292
SHA-256:	27C9E5810D545D84F4968F1DDED0421E78F2B3C28C6C89DEF47D57E079AB1E90
SHA-512:	30C0A81DF9B6BE79670031F934D364575E1A94ED4BB120032687794B15A48EA6C6130F1BFD29D71A094B35DF2FE4E8FDF470F87D0B2140641168CEF3B90DC04C
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><g><path d="M14 12c0 1.1-.9 2-2 2s-2-.9-2-2 .9-2 2-2 2 .9 2 2zM6.36 6.33 4.95 4.92C3.13 6.73 2 9.24 2 12s1.13 5.27 2.95 7.08l1.41-1.41C4.9 16.22 4 14.21 4 12s.9-4.22 2.36-5.67zm12.69-1.41-1.41 1.41C19.1 7.78 20 9.79 20 12s-.9 4.22-2.36 5.67l1.41 1.41C20.87 17.27 22 14.76 22 12s-1.13-5.27-2.95-7.08zM9.19 9.16 7.77 7.75C6.68 8.83 6 10.34 6 12s.68 3.17 1.77 4.25l1.41-1.41C8.46 14.11 8 13.11 8 12s.46-2.11 1.19-2.84zm7.04-1.41-1.41 1.41C15.54 9.89 16 10.89 16 12s-.46 2.11-1.19 2.84l1.41 1.41C17.32 15.17 18 13.66 18 12s-.68-3.17-1.77-4.25z"/></g></svg>

Chrome Cache Entry: 687

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 312 x 200, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	17083
Entropy (8bit):	7.982308428834002
Encrypted:	false
SSDEEP:	384:m60n76CIHRODbU9VBUaiXB+F8NRYwiINmLGL0luobcIOgHMHFvUFG:90nkmg9XUTBU8iLIZ0luobcIOgH+MG
MD5:	9978DB669E49523B7ADB3AF80D561B1B
SHA1:	7EB15D01E2AFD057188741FAD9EA1719BCCC01EA
SHA-256:	4E57F4CF302186300F95C74144CBCA9EB756C0A8313EBF32F8ABA5C279DD059C
SHA-512:	04B216BD907C70EE2B96E513F7DE56481388B577E6CCD67145A48178A605581FAB715096CFB75D1BB336E6AD0060701D2A3680E9F38FE31E1573D5965F1E380A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...8...........j...B.IDATx...m..W....9gf...X^.-...$.@..i.$b-.6h..kZE.R.R0jll@?h..R.D[J.hZ0..&....X-...".W.M...,...,.uf..s.^...kWS..csy..93...s......%.x.S.... .... ..... ............................ .... ..W=...A.....A......T.....T.@P..T.@P..T.@P..A.@P..A.....A......T.....T.....T..9.`...B$..:..\..!%$i....@..E..$....(&bRL...[.F.=Ijcl....$...3....!k%.Gql..Ql8..S....Z.'..{{.PB1....,D.g.....Ia../i..=...".v..K..g.....%._...fO...).EaR@P....dw........0..7....f8...O...1.......K<....$LZ.u....%u9.o#.....mW.&U...X)....+rI/wvo.Y$fR..`.V$.........4.m.<we...u^nZ.Z.p..olh.+...^.Z.8qb.O~..........oq.PDB..).'D\..mI%6R.......J%.nh,&.E\....)2...8d.E.)fX."..&..R..........&..6b.`k1......-Jjq.nH.gl..=.f...{&.({......*."a.VZ._.......#g_..t..+Vu~.CM..+.._..f7m.g.K.K.....^...D....n^..H..Mt...^..6...o>t.F.Kb.L.E]]].>q...,.......4;.;b)t..r,....g..~.........OvE..3...o.......M.I..........O.........E..Q......[....OX....Q3i..m.<..u...g......

Chrome Cache Entry: 688

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	576
Entropy (8bit):	7.439108662667726
Encrypted:	false
SSDEEP:	12:6v/7gK/fuDoHD98UB8oDeT6JXfT/YcYJOvuwle/EG5hSn6jNp19:UfYoHD2TviQcYJOvGDeKp
MD5:	3219FA068631ACF28305E9AB215AA959
SHA1:	D4CDE84F7E66661829B4AEA25E41560413EFD0B8
SHA-256:	BB6280C8214266AE6AC4C4F87F4C792D9478495A75181B0168DF67CCF9FCB2A1
SHA-512:	C84B8BC3B1D96E0D3C1E57B705FC3807D6D6FF3F7657F1FEEE5BA7FAEB463233F5B100E613C540E1E34846EC48CD19C791357507FC108539C51721F6BFD09B51
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn3.gstatic.com/favicon-tbn?q=tbn:ANd9GcR0ylMkfr9JPEbAzxpv2k9ZFFIl6h9VP1z48xx-Ah-dPUOsxyBR21grouv_OcB3VGHkkOytB0Z9mmY9ehoP94MLky8vRLJhX5WxlpzbIBa9u3XpmRaO
Preview:	.PNG........IHDR....................PLTEGpL.o........\|........q..............p..p.....i..............{..........._........X.s......r..x...........l...................^....a.....d...d...................E..,...........!..e.\|....tRNS.L.L...%%..[[.%..............U....IDAT(.M..v.@.F.D..vM.l.........e...?;..-.0.pv..?..qo.;....I..;.....l...?......o.i.=V...&.... .-IT..0.<...........6+.,..=^T...~a.....qwS..h..>.*!dw^.<.%.(.Q.F.V)c....`$..2..E.S.h.......)K.`S.7..]..........a\|e..a.......B.Q...D.9...F..Ux.O."..3.(y..F.xq\..S.C'.'E.9d.........&......=S........IEND.B`.

Chrome Cache Entry: 689

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65405)
Category:	downloaded
Size (bytes):	8842808
Entropy (8bit):	5.625099302943404
Encrypted:	false
SSDEEP:	49152:3Ioq3ZBJpVEtkRGl/Q0jwFnDX82MkataEFakF4Whpp8OkATaI3zYR+X/u6It3VOl:GsaE9NksysS2K0
MD5:	72E5CA813AA1D7DF6FA2D6E1A7C0FCFB
SHA1:	70B710759C6CAE70843BC79C54E3BE0326CBFDA0
SHA-256:	13C4392E8A0EF72ABD402AFDBDA01982EEEABAC3D6BD3C5832DE6E918AF09042
SHA-512:	5A7E0FB03ABBEDD3E42F454037A58DD8112456C98870C3CD2F9390E99F8B6BC47B1D41BA6F27CFE3527AF2EFF98F6BEEEF782783A62A4ECB4771E7E33AC2C080
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/aef0ced3/jsbin/desktop_polymer.vflset/desktop_polymer.js
Preview:	(function(){./* HTML content inlined from HTML import */.const d=document.createElement("div");.d.setAttribute("inlined-html","");.const finalStyleText="html:not(.style-scope) {\n --primary-text-color: var(--light-theme-text-color);\n --primary-background-color: var(--light-theme-background-color);\n --secondary-text-color: var(--light-theme-secondary-color);\n --disabled-text-color: var(--light-theme-disabled-color);\n --divider-color: var(--light-theme-divider-color);\n --error-color: #dd2c00;\n --primary-color: #3f51b5;\n --light-primary-color: #c5cae9;\n --dark-primary-color: #303f9f;\n --accent-color: #ff4081;\n --light-accent-color: #ff80ab;\n --dark-accent-color: #f50057;\n --light-theme-background-color: #fff;\n --light-theme-base-color: #000;\n --light-theme-text-color: #212121;\n --light-theme-secondary-color: #737373;\n --light-theme-disabled-color: #9b9b9b;\n --light-theme-divider-color: #dbdbdb;\n --dark-theme-background-color: #212121;\n --dark-theme-b

Chrome Cache Entry: 690

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	dropped
Size (bytes):	7724
Entropy (8bit):	7.891195452708268
Encrypted:	false
SSDEEP:	192:VhnnDTeUq5hDJI3V2FVp3WZSO7I1hJbsSw8OuScbXAtN:V1DTeUqrDK3EFVpmhivI7uS6A/
MD5:	89BE43B75CAE9260B2E50D4FF529B087
SHA1:	F844989AA0BED94612FB920E179B98B9046CE309
SHA-256:	E53F1BD055A71CD083D749CC82DA9B939A0438AE4243814C1FDA1058B6275789
SHA-512:	A32DA5C9E4414B2552D0527283B5D4A9B64211C4DB9785AAFF2BB59C8465CD75765F0EB2DC2A626468355963E1E1F0A27581CA545A97B1F2952028FD1AACC92F
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a710100005a030000850600001307000021090000050e0000091300008b13000032140000521600002c1e0000....C.....................................%...#... , #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."......................................................................................Z..j.....g.z.........P7g.O.PM...2.v.q:n#8i8....C.`q=b@`.K.....2.!.R#X8.J..~EW[...\|..(k..=u.....h),....=...+...U....%....).Q/.9.........m.4^..`...'.R...5...]..Eq..0.,.?W".?....'.i3e.K.>..J.P7.....~+\|.9`=).7...[....X_..'.../2....3{L......J.;...<.8U......M..%.bR.y-.>.....C....y.c.n..uCo.....[......N.WGj.4.$.;..9....sqh.`.}G...i..+..;....{.x9Q..=..\|.[........g.T:......<..Z.........omFe.i9.B.q....FG....+........................... ..4012.!"#$3@............B.3...c....b7.....v..mG$.R.),F5.;>.?(..&..\..]...lt.e..T.$.?=.l%.k.\|0.}...ZG"yA..~n..{E..j.L.[.E.........1S..d.k.]......l.....

Chrome Cache Entry: 691

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	13996
Entropy (8bit):	6.4808029254950394
Encrypted:	false
SSDEEP:	384:wDR0LU1BkpRxm0umWLUUWg/Oj3uBcUb6i:wDRy+BERx/WnOj+BcM6i
MD5:	45F16F38355B24F1F6E0503656B43BC7
SHA1:	09915E39E188CC8F66B1287F6D32F68E3CB0C195
SHA-256:	7901D70D2E03B2564F43FE21E60721AF0284B0D1E1305E8CDDE646CF6180E0A9
SHA-512:	74F242C6C9339AA49BE6A730DEBBCD7F99801448CBB6E79FFE60A96F8C92A5564D3F9E31AF7F600BA3FACE36DE402F0F4DE2E253D1D32A5C6C97BB97CC7A5FF8
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/m1/v/t6/An_KOWvmE8xXhWbKcEDamiAQ14ZKS7T_w5aOTf-M8Krv4ls-f63eecRjpMEIRfwoMQw0XjeM4Q2PKoqtUSQc0_q66s2ahAGa0OTb.kf?ccb=10-5&oh=00_AYCREWIJAY60rI4GtkID1LYrVlSj9KC3tfo8g8qkECqQsg&oe=6679D180&_nc_sid=7da55a
Preview:	...KEYF....$................. .............\.....4C..4C...@..pB..............................4C..4C......................................................................................................................................................Adobe.d........................................................................................................!a.1Q..Aq."2R....B..#br.S..3C..........................!1AaqQ"............?..g..y.\|..2....@.).8.t.2...f...1....)..DL...x."i..F....m_.3.....d..?.......>=a.\|z.GU...N......Y^8.."..G3....J.P.h.....%K=.^.'..0..0.....ix....*..eI....,'..\....g?.?.....Z.v.5M.r.#.....m.0....o..t.q...e:..N..S.q...e:....7 .+..>\|FA.S..?.`...L...$....N.%_nG..L....r.......L..$....S<....<..D~:."?.c.K..M....T.f.C...>...(F..oDF.,oE)...)Z,......,..Q.W...).b.....x.:.".o.....o......Q:.{.:8z.[..~...5.3.~.L(2...A.S..?.`...L.....)^.t...e)...S..r.......V.&ej...Z..'.%..px3....qE...+..TF..L.i<...9.g2e.J.,.^4U.UO.e.!.-....tv.......R.n.V......Z.

Chrome Cache Entry: 692

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Category:	downloaded
Size (bytes):	15860
Entropy (8bit):	7.988022700476719
Encrypted:	false
SSDEEP:	384:S7qmPTF4N21t//YW2FS6+1XxrsbGmjlAbvqMmtCN:S621tHY4xwbGmjloSM7N
MD5:	E9F5AAF547F165386CD313B995DDDD8E
SHA1:	ACDEF5603C2387B0E5BFFD744B679A24A8BC1968
SHA-256:	F5AEBDFEA35D1E7656EF4ACC5DB1F243209755AE3300943EF8FC6280F363C860
SHA-512:	2A71EDB5490F286642A874D52A1969F54282BC43CB24E8D5A297E13B320321FB7B7AF5524EAC609CF5F95EE08D5E4EC5803E2A3C8D13C09F6CC38713C665D0CE
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......=...........=..........................d.....^.`.. .H..<........8........6.$.... ..~. ..)..~E......6..J..`.. :.....8.;..5......!.l.j.%SX.SDm...RXh...&.X......5..._...............@...8...Gi..g.;9..'.Q......1..5.U.....w.+.hn..........c.....5.#{..%.#.JP..i.J..U(.6.D5V.<"Ex6"...k..[..{.?.d2....{.........W.......S...hT,.l..'.9.;[@..._.L..\|+...)......S...9F......T..t...-=X.:FtZ..uZ.[.?..f<.....@.....'...I...e..........8.?..-R.3,%X...I2\|.Wk{i...V2C....H$.H.LH.{.........(...6U..%W[t.R....j.........iS..%..L....rf.=..7..9i.I...1.Mj..C..u.B.........vJ.....+.u$.=..3..T..R.._.gs...6).$.-.PUH..Hl....WDd.......fK.(B.F1>..5.._[..]}VA#X...c.....%.(s50...m...^...1...'.$U*H.t...H...s.AZu...'...8.p...@.@.....q..Y.#.....#.....G.....G@..o8. A........:.........S.:..N.S.j.....tav.}.9h..s.....he.......{,~k...,eK.z}.......5%G...l.uCK.....V..............m.....U}.Sz..Z.c.{.....:..g......>h..'\|Z........a....^.b...o.>...g........f../w'....Ja.o(

Chrome Cache Entry: 693

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	231
Entropy (8bit):	5.077824311544019
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4G93gkIk6wy7Ndc8:t47N9U/vmRk3gBnV
MD5:	455D4C6D10C83A1C3F62725C71F25BB9
SHA1:	61F339D3E56879E1B4680D7229BF8B88BE9CBC8D
SHA-256:	7834ADC55F57ED2863E9F0BF3D4944458EDD13D85F3207F7FE8BA2B2BFFBA464
SHA-512:	C0C7A0378A799AB3D867B4FD63D6133564E1BB35C797D59DA621B235A73C18D4B90E308731CD09A1731175212D75CF9CDA31DF539230048BA60108A1069E8673
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="m13.18 4 .24 1.2.16.8H19v7h-5.18l-.24-1.2-.16-.8H6V4h7.18M14 3H5v18h1v-9h6.6l.4 2h7V5h-5.6L14 3z"/></svg>

Chrome Cache Entry: 694

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	1948
Entropy (8bit):	7.865904726498431
Encrypted:	false
SSDEEP:	48:7gr+CwmoHLwcQBfFeUz9lIMxNQmE6LDUfJ+DW:FLlraeUz9lIMxaUbC
MD5:	FB154AEDF9B6BF4F1E4CF67B15FD40AC
SHA1:	303E12AC46A04611D510AF5B22C9A5CBA8F84D90
SHA-256:	76D7659FD77A4E5A42ADC169D6A18627C76F54272F76A00552B4D68D15E0529A
SHA-512:	D4580EE51834CEFDDF6046AE7816E72433EF45F0679C326A8454999B85936457E91666C51B49B11B4ADC0EFE118D4179A4ABBFF5396124D934AD8A94EB02D9E7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...(......./:....sRGB...,....VIDATX..ypU.......%oI....a.P...R..@ .J.H...8Z..(...)&.#PQ...P.J.Hd.F0P.Td+M...$.%.........a..Y@...~...f..s....~.%....^.......M)-..D...J._."J!.!..B.....)..[,`......4..V;.:hq.0.J(......Dfbn.-......._............ ..a......e..J..".%.nL].&..%f..G..[S....s...@.P.......f.t..c....f.\|qN....j..F.M...6......\|..a.!.v......}....s....p..]3...d2......F..s....Y.....urv.7}..BJ!..u%......}{..w..hkm..._.......=.s..;...}....tTv.".y.Q...u][3%...J..1..Unp..+,.1..7....R....\..e..#..$....C..]... ...G.P..!....U.....G.N..@......K^=.....\...H)E...B.`.....]-..wGU..x..=I^..0E..P..H\.O^:QUQ5{.....1"..)q.....jn....%..v..f~....Wj..E...\|..~..z.w...{..z"..5-....Q5M....qn(.`...K.>_......[...x=....R:\......T.........<..B....t..l....K/Z.Vg...r:..N...r.=I..v7[...BB.....];6n?....+.~..p@e..`.o (E.....i.....p.l..n_...//.aC...)P..kU.............^4mi(...5b.._....c.g..5N.-..a..Bp..][.../...G;6.Kk7..c Aa.....[N0...........

Chrome Cache Entry: 695

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	359
Entropy (8bit):	4.955472444225813
Encrypted:	false
SSDEEP:	6:tI9mc4slzXdhC/yZqRIuZUoMLWlvSLrk91MLP25RjkxSRcATBrREjlC:t4BdU/mD8tKv9iDjkwRFTlGjI
MD5:	7EC75F80BDA2F53D6568AA6412D83431
SHA1:	9A94D2C509FE96BBD5A02971F066A1C1EEC6B3B6
SHA-256:	D8869F288C1E21A843123729543F5677E9B28349789C2282609CEC8ABC4DE9C1
SHA-512:	B2F2FE075F4AA2E0D73B4BF7B7F8BE3F43C6E6A7BF93165BE3178B7A20F5B0AE3B6CDC467B502EFEFE0337D5A98FA7039C224A3CDA6F455D70622B769314935B
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24">. <g>. <path d="M17.77,10.32l-1.2-.5L18,9.06a3.74,3.74,0,0,0-3.5-6.62L6,6.94a3.74,3.74,0,0,0,.23,6.74l1.2.49L6,14.93a3.75,3.75,0,0,0,3.5,6.63l8.5-4.5a3.74,3.74,0,0,0-.23-6.74Z" fill="red"/>. <polygon points="10 14.65 15 12 10 9.35 10 14.65" fill="#fff"/>. </g>.</svg>.

Chrome Cache Entry: 696

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15920, version 1.0
Category:	downloaded
Size (bytes):	15920
Entropy (8bit):	7.987786667472439
Encrypted:	false
SSDEEP:	384:sShqOXQlaSchOwK0uFvRqq3xR/xb5OY3aU/lHS9WE2YeK1os:sShJKaScJK0uFvRvxb5OY3aU/lHkmK
MD5:	3A44E06EB954B96AA043227F3534189D
SHA1:	23CEF6993DDB2B2979E8E7647FC3763694E2BA7D
SHA-256:	B019538234514166EC7665359D097403358F8A4C991901983922FB4D56989F1E
SHA-512:	FAB970B250DD88064730BD2603C530F3503ABB0AF4E4095786877F9660A159BF4AD98C5ABEA2E95EB39AE8C13417736B5772FCB9F87941FF5E0F383CB172997F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......>0.......T..=..........................d.....^.`.. .\..<.................6.$.... .... ..S.!.%c.......\|y...6..;.s#.....x_<..o..........l...J.`p.m..6...h....U.pD...R.J.$...W..`7w...[..qD....<P......J.x.+J-^....va...:.KW..Ph...."....{.W4C....p..1..........CH.....P.............Q%.=.F.....1.%J....d..X..J.<AU..b.N...<l...d...f..^Y..]..&...VQ.<.....F..{.....&{.+J;.... .2P.:.5..?.o.\|....V[t..M..#..d.fv...........4..`.).h..h......@u........4......~.....r.B...p1.P.T..<....r....Y..8...GQ1.t.....%..-Wh..:W.....1l-...@..hL}...lN.._.j...D`..sn.=(...W..?.Z..p.52..H...X...)..CJ...V..7.....<\|..i...{...R.M+[..\|..x-..M3...~!\.l6}.T.o.R'$.)..-.W.T....A...5?.{.2.bR.../....*l..;...{..I>.n..MJ.2........U&. ..(L]].%P.$..p59.LD.f.........V.....z.5~.2\......#.4....9_....%wp.OU.0.....CK..../.x. ..A2e...@...(.i..f./.....`1.......!......@....0 vbt.e v./!...N=>:..A...(...f....?.....iH.F..!k.6.O6S..54.^c..2.G.?6....)b......lv.,h....Y.}.?..uk....L.4d.g..6.\.1u..

Chrome Cache Entry: 697

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (526)
Category:	downloaded
Size (bytes):	7448
Entropy (8bit):	5.331602002000817
Encrypted:	false
SSDEEP:	192:7jFaLZ5Asd0x9ufi+1rniODiLpMBiPdkCYheGevbMoNmA:7jMZOjbu6+1rtDwpMB8CCyeGeDMMJ
MD5:	35D9DB48E3112F35D81E70B98457AA42
SHA1:	7BADED3DA3BAE7598688AD6C89800B88CDB49FDD
SHA-256:	5F8E21F061DE1874E4AF063F095A389187C40583C9033946E406A8BB825CA358
SHA-512:	9187EBCFB9D574CC3A443F6D692969B47D41BA5BACD09FFF729E58FE7B3E3ADC22F6E1C98B2AE23F2B98514EEE5A150040A5A213DC82863F02E5EB46D2537842
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S/content/common/js/jquery.mask.min.js
Preview:	// jQuery Mask Plugin v1.14.10.// github.com/igorescobar/jQuery-Mask-Plugin.var $jscomp={scope:{},findInternal:function(a,f,c){a instanceof String&&(a=String(a));for(var l=a.length,g=0;g<l;g++){var b=a[g];if(f.call(c,b,g,a))return{i:g,v:b}}return{i:-1,v:void 0}}};$jscomp.defineProperty="function"==typeof Object.defineProperties?Object.defineProperty:function(a,f,c){if(c.get\|\|c.set)throw new TypeError("ES3 does not support getters and setters.");a!=Array.prototype&&a!=Object.prototype&&(a[f]=c.value)};.$jscomp.getGlobal=function(a){return"undefined"!=typeof window&&window===a?a:"undefined"!=typeof global&&null!=global?global:a};$jscomp.global=$jscomp.getGlobal(this);$jscomp.polyfill=function(a,f,c,l){if(f){c=$jscomp.global;a=a.split(".");for(l=0;l<a.length-1;l++){var g=a[l];g in c\|\|(c[g]={});c=c[g]}a=a[a.length-1];l=c[a];f=f(l);f!=l&&null!=f&&$jscomp.defineProperty(c,a,{configurable:!0,writable:!0,value:f})}};.$jscomp.polyfill("Array.prototype.find",function(a){return a?a:function(a,c){

Chrome Cache Entry: 698

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 604 x 158, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	28789
Entropy (8bit):	7.971396460866589
Encrypted:	false
SSDEEP:	768:mQmpRJ1JqkEDO5tjx6ZmOAKTTjgH1W7AH0VYvkLHNy:mQUJbqkoO/zPKDgmKvkLH0
MD5:	74190B93FC4F5D88F0C8E6411BA20BD8
SHA1:	89CE2ECB660A90B8E6ED1B335443D7767C59F28A
SHA-256:	092A3CD5F86B3F039FEEFDEB86694CD16AE545AF214CFDA614BDBBE2D1BDE401
SHA-512:	35FFC458DA53B5105BA45473350BC178D4B96ACC7E5F409FCF586ACA4E7C9B9B9B3A7D9D1C2185532EE13F9F496811156A38130FB7D9ABF5925436EF29F63ECB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\...........&....sBIT....\|.d... .IDATx..w\|......{J:...{.. .`.."..}....r..{.r.+X... ..@....Az.$...s...<...{.IHB..'!0_>K.svg.....33....B.P(...B.P(...B.P(...B.P(...B.P(...B.P(...B.P(...B.P(...B.P(...B.P(...B.P(...B.P(...B.P(...B.P(...B.P(...B.P(...BQ!.^...-...C.PT....Hs~.6....E.P(....r..K.n..._..gMp/\.BQ......?>:..$Q(...`....x.r._O.z.uW........(....m...F....yu$%{..@..Ia.....4........[^..r.?..4)..x.~.P...u..rkZ..B.8.h3d\.._...7~.g...:..@a.)H....FB...?#7...#..&..._ck....El<.J.?.\|4...Q(.Q.i.P]..rn...qu...t..oN.."owv J;.Dd...H.D.$A.".....%.g,..B.k....5.....l.....~....w=...Y.....^`eN....j.O.P.M3H....C.......>g....,..`}f....jZ...S....>.e..SO..U...0`.....hr..... {.0j...0.sG...4.&....Cok-v#=..".l.~i.1o..M...:.n....m............j......y5,.Bq,s..[.}...vl.^...E...S.....:.: .h....v5+.QF..&.....}.......3..9.V.6i.D<DD.,..%... ../b...3.(. ..i..&..T.mM.P.A..G..i...}......n..[v.]........9'...$X...M"".u...jO.Bq.R......y...<;...O..O....?f..xU...e

Chrome Cache Entry: 699

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	85304
Entropy (8bit):	4.84771628371739
Encrypted:	false
SSDEEP:	384:49Tp3WQ0QhABG/fPEXWJkRqx44kKL4OwRR4wJDFDTp3WQ0QhABG/fPEXWJkRqx4P:5Q0c/HJ44T4dawxmQ0c/HJ44T4dawxR
MD5:	0920EA34072683229E6EA8299345CD09
SHA1:	0903033A844336F7C78ED4ABBBCD92CD3115A03E
SHA-256:	F37D6F502A5A961AC5C3F17C8D58685FF6B0DC0F69C2DCDD379CCABC96EC3BF2
SHA-512:	F63DC67289985C19D3A5863182A57653CC31909F2D5A4CF3E796FF2C3857D51610E03177EAC950250B7E3978FD5B6F0A12C665258513724D17E88784F8888FF1
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.css
Preview:	/!. Material Design Iconic Font by Sergey Kupletsky (@zavoloklom) - http://zavoloklom.github.io/material-design-iconic-font/. * License - http://zavoloklom.github.io/material-design-iconic-font/license (Font: SIL OFL 1.1, CSS: MIT License). */.@font-face {. font-family: 'Material-Design-Iconic-Font';. src: url('../fonts/Material-Design-Iconic-Font.woff2?v=2.2.0') format('woff2'), url('../fonts/Material-Design-Iconic-Font.woff?v=2.2.0') format('woff'), url('../fonts/Material-Design-Iconic-Font.ttf?v=2.2.0') format('truetype');. font-weight: normal;. font-style: normal;.}..zmdi {. display: inline-block;. font: normal normal normal 14px/1 'Material-Design-Iconic-Font';. font-size: inherit;. text-rendering: auto;. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;.}..zmdi-hc-lg {. font-size: 1.33333333em;. line-height: 0.75em;. vertical-align: -15%;.}..zmdi-hc-2x {. font-size: 2em;.}..zmdi-hc-3x {. font-size: 3em;.}..zmdi-hc-4x {. font-size: 4em;

Chrome Cache Entry: 700

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	111
Entropy (8bit):	4.980379097367065
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5KVErcHgDXFUVLUJRVFiAdFUvuII9rP0WTC:tI9mc4slmgSVLU9FRF0ul5TC
MD5:	7A85DE03D089077BC1F895B1EA91907F
SHA1:	B86AF0404FED40A12228084B3B090DF8DBE50C0B
SHA-256:	179FAF7C791CF27682668324B60182039191B22B3AC85069C8BEBBA418DB9A1D
SHA-512:	8669E2B41453760B0C67C0701C4EFB4DCF6F544FDB84259383B5E9C64DA4E99DA37CDEC717ECC02E7BB919390E8187877EA125C367456C94B0245BD04E7FB4D4
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path d="M7.41 15.41L12 10.83l4.59 4.58L18 14l-6-6-6 6z"></path></svg>.

Chrome Cache Entry: 701

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 160x160, components 3
Category:	downloaded
Size (bytes):	5761
Entropy (8bit):	7.848123920302837
Encrypted:	false
SSDEEP:	96:MuoX3fJsQd4GT7v+6Ej0FpM6u6asBLj3NVRnZgi9kdRAQytL9CMO0XuNTcDmQgTl:/I3d407vjF46LZVRnt9k8TvygDmQWwBy
MD5:	08FE7955A20FA079AE0032E3484F0621
SHA1:	535465B22867610209140DC198056443CB623DD9
SHA-256:	3D3ABA78BABA8C5393ADA893E1C710702D8DD7B9B760AD1193E9CA2A35ED425F
SHA-512:	B41D4312B46BEA66A952168A0CC62438A1464716B33A06EAD22C5CD1AF435275EA9D5DFC06020F3CF74C3B7B602EEB74A69356B92CA8463A4AD584A9319AA18D
Malicious:	false
Reputation:	low
URL:	https://yt3.googleusercontent.com/dk73p6C27bkfmV5NMayA05oaT5XMgc0K8QHs6Flf4XuhKNqxjANXo78d712mysuU5fk51JTxKxU=s160-c-k-c0x00ffffff-no-rj
Preview:	......JFIF.....................................................................................................................................................................................................>.............................!1.."A.#2$Qa.34BU....%DRSbqs..................................0.......................1..!A...Qaq..."R..2B..#............?......`...0......`...0......`...0......`...0......`...0......`...0......`...0......`...0........k....t...u.Z..(.k...{..".q-...o........n&...#.P\|Z:z9. ..ZE..!..?.;.Oj9..~dQ...v....Q~.I+.U....w...Z..P..9...........w.?.....s..O..u....}.S.C....... 4......".w............u...W..]I..>...=^.u..Z..m....k....$_F.<[novdiBQ.J....A.0......`...0..............z.h..N..w&.)...+HT.fh...2...$v.M..C.<.u..)K:.....).i .Sc#..P"..w.ee.X.......'./.r..i$.....(......A.....'.*.[.Y.....8%P....D`.....\+2...8.....7h..&.k...`.!:V.b.#-r..;q?5..^.I.P............q.>.6.26.....>#.0.....Z.TQ.a..j...R.........;.T".....)...t.Y..>.

Chrome Cache Entry: 702

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 21 x 451, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3146
Entropy (8bit):	7.4305824736657335
Encrypted:	false
SSDEEP:	48:pv3QNVesuNa6IHGNZ74LdabWYLt6eggWxAdW2MGaayIYj0O5t:pvQCszGNZ74LQWYUeglxf2MGaayBj0e
MD5:	1C8EF8C3E2B6165854C5C5C417734FE8
SHA1:	181B1164925F51A8CA383B5DD19D8F6218594C02
SHA-256:	6A2D6B94AE0412EAE635C875DB5D20422476816F2EA9C139DD7BE44C2CC0F42C
SHA-512:	921CDA3EB05135AE1876EB7D669CC49793089DEB2ADD13C272DB20DCC41829FBDF37C51E9F9FA7F6925650F2A01FA2AE3CFFCC19DCAA18BE16F919A41208F030
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............."....PLTEGpL.............................................................................................................................................................................................................................................................................................................................................................................................m.5....tRNS...T........P...........0....B$.Z....,.(........p....J~8N..H...F...b.t`d4xn.v.l&h.:..X...@.f2.D\|...rV..> L..<.j^z"\R.6v.$2....IDATx^.gS.K....0.0H.!!KBH.!..&....8`.s...{......fj.^....K~..v.iU.....MuY.r...R.Xc8......$y.~8t.zY.].B[$'Dii.......$.F.6.h#.......EA...$;Hn.(........(.....H#..N=.d.......@.`+........."....:..i./....b<,.....@.u.Z...[..<.:(.}~8M2..&.N F.} x..O!...q!.v\|W.q.v.....a/. .'........)X.ZI.\|".,=\|&.....1.....3.Ut.b.._r..<.d..J3j.7......X....r=..pCc.e.46....`uxee.J.....o9h.Z.c[P.66.U.&.....M.E.. z_...}.0..e.%.....

Chrome Cache Entry: 703

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	dropped
Size (bytes):	7922
Entropy (8bit):	7.896089174997358
Encrypted:	false
SSDEEP:	192:31UFeDzGYP6NcHDqRIuiWfmRdjtbclF05:3iFJYSNcHDWfeJt
MD5:	BB7E0FA853EB60B7C91FD184A9F7880F
SHA1:	5466C8FD1D30C7FB716AED00E25D6EE78310A24B
SHA-256:	E7A9F65968C042759C43D1732BAA2A9F52C9939AFDF115D8EC2199408AF7C45F
SHA-512:	E1C13DBDEBD6F605BDD31A246AFF985A088BE206B74D2A2E10A4DF428197D3C8A1726AD57929E3FA6468C96C52A299C6428131790B6273BCFA0D0E886C6B42F9
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a7001000063030000de060000e7070000870900001f0e00004e130000d8130000f5140000b7160000f21e0000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."..............................................................................U$.$........p....v3X.I$I I I I.\+l.[T...S54^..s..3.iy....V.L..'2N.. ..^.<\}\d.IC6..ou.~......e...b...V.(.M.G..Ny.@...tRCU\|'..........l....Nj.TM2..+..gK....\.M>.....K...A.....2...\|..K.t../Y].....s.R+w...7.N.KBc.....A2..f..m\YY.G9#..C..5..m.I.l..y'+.!...q.f.++I.e.+..........,;...$.N..UY.\a7....E...5...d-&..Q.A...d..oQ.v...v.u..~T...g.C..48....y+,+Q..t.f..'.lU.....q.$G.....}....... ..&....Cy..j.z.^@.l....{.l..v......+..........................!..1 "23.A#04@B............l.....1.Y.....^2..._v..C....%..........sd.l.q.3.9..2.#@}z..,.3(6.Z..d...n.t=..a...S....a..L..O.....8..@.".hE.)..

Chrome Cache Entry: 704

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	4.648861696465887
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4LIPGDQyIlOWLVJ1WnkX2Wtti0+DrTwtDZi:t4noU/vmRLIO8yIlVVuPWI0gTGQ
MD5:	9F40343399D2331A8E5DE01251A1F258
SHA1:	FF3A3A2AB18BAFA30B09E09A083C3699263A10FC
SHA-256:	CB4F6AB460370D669DE4694A4FB0090C3FADBCDB8C395C813A0680C90C29BFF3
SHA-512:	3F888927E6DE57D021AA124C5894CAFB54BEE195047D12AB55FDED7C6444AB14C3CE4F3DCAB9E9D06E785EA82FC7A96BE4EAAB6639BF721FF6F698D8760486ED
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/mic/v8/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M12 3c-1.66 0-3 1.37-3 3.07v5.86c0 1.7 1.34 3.07 3 3.07s3-1.37 3-3.07V6.07C15 4.37 13.66 3 12 3zm6.5 9h-1c0 3.03-2.47 5.5-5.5 5.5S6.5 15.03 6.5 12h-1c0 3.24 2.39 5.93 5.5 6.41V21h2v-2.59c3.11-.48 5.5-3.17 5.5-6.41z"/></svg>

Chrome Cache Entry: 705

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 138 x 41, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2631
Entropy (8bit):	7.847895333366294
Encrypted:	false
SSDEEP:	48:NjPb2/U5P3PgXXXSWNrCFO0UGjTO7OWucmdKRNMhK64fGDCNTV:1T2/IIXXC4CR/eqKwGn
MD5:	E7EBC6C74EC20EA3614970E178217C10
SHA1:	F667FBC525F046F8C6D7617541884C4D6ED52478
SHA-256:	19C2B75FE23AE2238ADBD7F34901396D4120605D9028C2FCC7BD3C010E27EF9A
SHA-512:	919503E8BB602EA51AD0D92B3AFD7DD5701B5F2D3E28D8ECBF90D632AFDB7C14FCFDBA99F60F2BB6796DB536D3461882318B7DC0136E40B3D93556774BC30677
Malicious:	false
Reputation:	low
URL:	https://d1qgcmfii0ptfa.cloudfront.net/S/content/mobile/images/google_play_coda.png
Preview:	.PNG........IHDR.......).......A.....PLTE.........pppBBB...LLLccc...XXXooo...jjjggg{{{........................{{{.........qqqssswwwxxxccc\|\|\|qqq222......................................u..................+++......222666.....................""".........**...............]]]hhg...............LLLaaa..................... &&&(((///>>>.5Grrryyy~~~.....................;;;BBBQQQRRRpppuuu.............................333999HHHSSSVVVkkknnn.2H....................................EEEOOO...........w................-L.7E...\|\|{..m....#.ZZZ.,<.....................W...!I.%?.N./N.o..m..o...o.~"..}..z.........!..w.%../.d<UM..#7hZ...J..Deeefff.1F..f.o...........p..p..z...........<............?..@..+$./..H.I+..E<..[6KD.. D.'@..O...dcc....,J.3C..[..].x...l.x...r...\......................}..9.....=.........-.k....#tRNS..!"$1<CVZ^aeht.....................0......IDATx...w\|.U........../......f.I..&A3$M.6..Ym.-m..t/.j............{.............#yy....~...qJ...M.6....a}.G....cNe@..S,b...V..N...

Chrome Cache Entry: 706

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	218
Entropy (8bit):	5.088157969445009
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4SDJhK+WkjWp2IGLb:t47N9U/vmRWhKdkjs2db
MD5:	46911EFE9CA3F93489D0C1927BBD5B98
SHA1:	A587985F1FD3DC99B495BCC620E2351F9BAA13E2
SHA-256:	B202492060B933CE3BCD93EED56F46AB442C61ACBBA6D4C47921417A06439096
SHA-512:	AA70F29C404DF62CCC4514ED432B4315E423FFEF7AB79DFD8985C58909CFA6263EE5F2A8D0A251A4BF0ECB491C9A39D6A6E2A99307A4A75F910530F60633023A
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M13 14h-2v-2h2v2zm0-9h-2v6h2V5zm6-2H5v16.59l3.29-3.29.3-.3H19V3m1-1v15H9l-5 5V2h16z"/></svg>

Chrome Cache Entry: 707

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	downloaded
Size (bytes):	7724
Entropy (8bit):	7.891195452708268
Encrypted:	false
SSDEEP:	192:VhnnDTeUq5hDJI3V2FVp3WZSO7I1hJbsSw8OuScbXAtN:V1DTeUqrDK3EFVpmhivI7uS6A/
MD5:	89BE43B75CAE9260B2E50D4FF529B087
SHA1:	F844989AA0BED94612FB920E179B98B9046CE309
SHA-256:	E53F1BD055A71CD083D749CC82DA9B939A0438AE4243814C1FDA1058B6275789
SHA-512:	A32DA5C9E4414B2552D0527283B5D4A9B64211C4DB9785AAFF2BB59C8465CD75765F0EB2DC2A626468355963E1E1F0A27581CA545A97B1F2952028FD1AACC92F
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/443818919_996576128504625_3343915979056056184_n.jpg?stp=dst-jpg_p160x160&_nc_cat=101&ccb=1-7&_nc_sid=5f2048&_nc_ohc=nO7Vfy4wE0cQ7kNvgEAcCQP&_nc_ht=scontent-hou1-1.xx&oh=00_AYCntigX4wIFjcc-XIzewAhDWxRAHRfppP-pPBfZbeeOEA&oe=665830C5
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a710100005a030000850600001307000021090000050e0000091300008b13000032140000521600002c1e0000....C.....................................%...#... , #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."......................................................................................Z..j.....g.z.........P7g.O.PM...2.v.q:n#8i8....C.`q=b@`.K.....2.!.R#X8.J..~EW[...\|..(k..=u.....h),....=...+...U....%....).Q/.9.........m.4^..`...'.R...5...]..Eq..0.,.?W".?....'.i3e.K.>..J.P7.....~+\|.9`=).7...[....X_..'.../2....3{L......J.;...<.8U......M..%.bR.y-.>.....C....y.c.n..uCo.....[......N.WGj.4.$.;..9....sqh.`.}G...i..+..;....{.x9Q..=..\|.[........g.T:......<..Z.........omFe.i9.B.q....FG....+........................... ..4012.!"#$3@............B.3...c....b7.....v..mG$.R.),F5.;>.?(..&..\..]...lt.e..T.$.?=.l%.k.\|0.}...ZG"yA..~n..{E..j.L.[.E.........1S..d.k.]......l.....

Chrome Cache Entry: 708

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	331
Entropy (8bit):	4.856840067199089
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4bib4Gt/6qnFJ+5LZ9i3JvGUuWLV1iDQ38:t47N9U/vmReb4s6qbmqvVU8M
MD5:	F7D38F81D0E430C65C517D480A82DEC2
SHA1:	61A70D1586756FC2570A6DF4B440C10EBE3312B0
SHA-256:	D63DF87F634535A4731B74CD9893C855373507C3250FF485E982442DAB0380BA
SHA-512:	273652346614D9F8DE8B0AAB7BD13D4F5EBFBA1D27338D87E4F27DA58925FA9699E0367C9C0B74BCF6AF95AD5B9A48ECCEE0710F1593ABB96B705A551D202FE9
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/mic/v8/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M13 18.93V21h-2v-2.07c-3.9-.49-6-3.8-6-6.93h2c0 1.93 1.36 5 5 5s5-3.07 5-5h2c0 3.13-2.1 6.44-6 6.93zM12 15c1.66 0 3-1.37 3-3.07V6.07C15 4.37 13.66 3 12 3S9 4.37 9 6.07v5.86c0 1.7 1.34 3.07 3 3.07z"/></svg>

Chrome Cache Entry: 709

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	312
Entropy (8bit):	4.958737908772462
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4AFMGaBoxnOLgQsS0ISSa/KW8xGeDogniLELo:t47N9U/vmRXGaBoVOLgbvSoN8xGzEo
MD5:	22698ABCC833E1218C3EEED7C534A400
SHA1:	247102BA81E345DFD0C7374C4AB9B894C8A9704B
SHA-256:	A3A94E1842AA40BD34D65EFF8EA6F8EAABE15CC9947C26FE1CFFB3274F83121F
SHA-512:	E0C67655E2E2A955D52D0B1415A3931C5D2111AD12E66BCBDB89C4E4AF3E27701CCB5407F62896C2340BACF7D20E86C2ABCB03332C76C48AE62B83BCB1B612C4
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/thumb_up/v17/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M3,11h3v10H3V11z M18.77,11h-4.23l1.52-4.94C16.38,5.03,15.54,4,14.38,4c-0.58,0-1.14,0.24-1.52,0.65L7,11v10h10.43 c1.06,0,1.98-0.67,2.19-1.61l1.34-6C21.23,12.15,20.18,11,18.77,11z"/></svg>

Chrome Cache Entry: 710

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	1948
Entropy (8bit):	7.865904726498431
Encrypted:	false
SSDEEP:	48:7gr+CwmoHLwcQBfFeUz9lIMxNQmE6LDUfJ+DW:FLlraeUz9lIMxaUbC
MD5:	FB154AEDF9B6BF4F1E4CF67B15FD40AC
SHA1:	303E12AC46A04611D510AF5B22C9A5CBA8F84D90
SHA-256:	76D7659FD77A4E5A42ADC169D6A18627C76F54272F76A00552B4D68D15E0529A
SHA-512:	D4580EE51834CEFDDF6046AE7816E72433EF45F0679C326A8454999B85936457E91666C51B49B11B4ADC0EFE118D4179A4ABBFF5396124D934AD8A94EB02D9E7
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-1/241270460_1943112789170907_1967367247279035119_n.png?stp=cp0_dst-png_p40x40&_nc_cat=1&ccb=1-7&_nc_sid=5f2048&_nc_ohc=1XNCsKdZNVcQ7kNvgEm2iAq&_nc_ht=scontent-hou1-1.xx&oh=00_AYCkH4_Vs00q1M9XOPfSjLOlrgyBfl8DrVuZMc0S1B0DaQ&oe=66584D80
Preview:	.PNG........IHDR...(...(......./:....sRGB...,....VIDATX..ypU.......%oI....a.P...R..@ .J.H...8Z..(...)&.#PQ...P.J.Hd.F0P.Td+M...$.%.........a..Y@...~...f..s....~.%....^.......M)-..D...J._."J!.!..B.....)..[,`......4..V;.:hq.0.J(......Dfbn.-......._............ ..a......e..J..".%.nL].&..%f..G..[S....s...@.P.......f.t..c....f.\|qN....j..F.M...6......\|..a.!.v......}....s....p..]3...d2......F..s....Y.....urv.7}..BJ!..u%......}{..w..hkm..._.......=.s..;...}....tTv.".y.Q...u][3%...J..1..Unp..+,.1..7....R....\..e..#..$....C..]... ...G.P..!....U.....G.N..@......K^=.....\...H)E...B.`.....]-..wGU..x..=I^..0E..P..H\.O^:QUQ5{.....1"..)q.....jn....%..v..f~....Wj..E...\|..~..z.w...{..z"..5-....Q5M....qn(.`...K.>_......[...x=....R:\......T.........<..B....t..l....K/Z.Vg...r:..N...r.=I..v7[...BB.....];6n?....+.~..p@e..`.o (E.....i.....p.l..n_...//.aC...)P..kU.............^4mi(...5b.._....c.g..5N.-..a..Bp..][.../...G;6.Kk7..c Aa.....[N0...........

Chrome Cache Entry: 711

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4678
Entropy (8bit):	7.625796542792964
Encrypted:	false
SSDEEP:	96:2S+YkknmWIM8DAQ/4K5HA52HAUmVg+Sb/gVtuUoshVlKj/WV56aQgZKxQ9XNcy4+:2SvkkndEAs5g52gOD2BhVlKTWV56aQTO
MD5:	A91BE2E400B7F0DC66247427DFAFFCF3
SHA1:	900E87486AA051659E114EB5B7A2980D75E7889A
SHA-256:	62437412556A804293516DF99C0970427549B1A50258462035410072F96DD093
SHA-512:	02EBFD5194BAE38C8004CBF0979623AD507C51D89503BDD8A0C6F1CD2017F78DE09FFF347AD0FBDA4EC5675ED85737635E2C1ED6654DD31FE9743BAE74721070
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S/content/social-media-logo/36/socmed-instagram-H36.png
Preview:	.PNG........IHDR...$...$.............pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)" xmp:CreateDate="2020-02-25T08:48:52+07:00" xmp:ModifyDate="2020-04-24T11:34:50+07:00" xmp:MetadataDate="2020-04-24T11:34:50+07:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:5b6140fd-7afe-4ff5-b896-3897658f047b" xmpMM:DocumentID="adobe:docid:photoshop:041b76a2-5872-7047-bec1-0c7762148

Chrome Cache Entry: 712

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1606
Entropy (8bit):	5.268388270264093
Encrypted:	false
SSDEEP:	24:hY6sv7zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5zF5cUehG0:3q3+pUAew85zvc/hG0
MD5:	010AC21CFFBF2E910B2D0C66A924E377
SHA1:	3427A3E7C925D1B7B2B85CFE7B7FE27DE71258FA
SHA-256:	E6A2AE9B4E1A304837C40C31C647C66F66611946FCFA9E4C4D1AF8BDF509FC0B
SHA-512:	AB224CF32B402A86EDC557F3CD48B345FD34BB7E0168FBAF3A4152FDBF039F62FF8E17428420AF20F5F89BD5C4E1C986AE977479DAD96C82C9D59AA1FB36196A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 405 (Method Not Allowed)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:u

Chrome Cache Entry: 713

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20398)
Category:	downloaded
Size (bytes):	277636
Entropy (8bit):	5.409421958663421
Encrypted:	false
SSDEEP:	1536:fPHaQFjc/lJ/yfJyAH9OD47YzU4HEBuP2j5y+OuUCbPuy6ITe0xquHcyiTiDtKiv:+WxqpP2j5i/moveVGROh
MD5:	68C894E6F593464F61A34293291E691A
SHA1:	454BFDA32EDAFD10FBC1AD327028D478EBC0B8D9
SHA-256:	D0987D0535DACDDC5DE751DD282888CEE8E360A6C139B408177C0394787CEC0E
SHA-512:	E4EA56287907B6BA18A13160E5720951F1120969EFB2958CF2367FF0B8F62BF8CD2DC8A1BEA84E7283C92F23F3D07810950F91F8E71EEAFB9FAFCD5339CDC06B
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yE/r/ScCOyQO1RkJ.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/.."use strict";(function(){var a=typeof globalThis!=="undefined"&&globalThis\|\|typeof self!=="undefined"&&self\|\|typeof global!=="undefined"&&global;if(typeof a.AbortController!=="undefined")return;var b=function(){function a(){this.__listeners=new Map()}a.prototype=Object.create(Object.prototype);a.prototype.addEventListener=function(a,b,c){if(arguments.length<2)throw new TypeError("TypeError: Failed to execute 'addEventListener' on 'CustomEventTarget': 2 arguments required, but only "+arguments.length+" present.");var d=this.__listeners,e=a.toString();d.has(e)\|\|d.set(e,new Map());var f=d.get(e);f.has(b)\|\|f.set(b,c)};a.prototype.removeEventListener=function(a,b,c){if(arguments.length<2)throw new TypeError("TypeError: Failed to execute 'addEventListener' on 'CustomEventTarget': 2 arguments required, but only "+arguments.length+" present.");var d=this.__listeners,e=a.toString();if(d.has(e)){var f=d.get(e);f.has(b)&&f["delete"](b)}};a.prototype.dispatchEvent=function(a){if

Chrome Cache Entry: 714

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	16200
Entropy (8bit):	7.9078739657483
Encrypted:	false
SSDEEP:	384:eTO/QG3NCvLq48oIZHLFhJzH/c4RzGlcDt7BobsTa6f17QhcdbWVN:qORNCGJZrFhJzfcw3CbsTJ7jdU
MD5:	B5AF86A05A5A0EC827D4D9AA7A834A43
SHA1:	EFE9A10EF6FF312C1BCE1ED2DFA4BB75B9B176DE
SHA-256:	D58E787F4EAA1BFEE5C58B23535AD1082B7EBF8DDB95C42521839B5B3058E795
SHA-512:	890349F18EEAE7D001366E681D8DA5F104B0612DCB961375693DF1B3F704CC3D9D9C2F9EBC585F4F14D157F69A1896DC97DD6B84CD0542C64F40F1A0412CE821
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.......u..h..>LIDATx...y.T.....U./@.5;4"...."nl...I..f.\|g~.o2.L.(..Y.$.L2.m.cb\..l..........4..U.\|.....z.....z>.>....>.P...{.9F.%....T..%..cZ9.2.q.\)[2...4kM..,Y...L+..V.d..I..j%..l..`.%.\.G0.Zs%...$.K.z.d+...RIAI!kT"I...VN.$..b#.Z.2.UJ5.Zk%[f...:n.......!...K.>ro)...z...Xk....&T..q}]...W.1R..r..c.....3....D.Q+.P.i#.Z.B...i..Z.....B.......s.p...c)...80).....<k.........r.k..5r:I......>....=bd.Y.c.:j.9fd.8.=.r.......T.:"lj..dW9].`^.1y..<..I6OR..N....J.G.1{.......k.=In...e..@Gc.....Z..H...... ......-.5.b\..:.b\w._...z....{rI.k...!..o..V..5..G...Yi.......f....]..@O..{An......j....%..2..T.d?.u..+..}wf`.1.B....Uk&O_2..{.#...u..Q...~k..8..k.;r...k......s_..<...d\;..3^RW....tR2oY..d..9...$.z..,.Nu.xY...mt......j..YTiCo..._BU.......$..4UVw.......(.UVf.....p.QJB.7....pC.I2..X.6f..hs%m0..^.......@o.3...$+}.X.N.. .....IV....-....E&.X<

Chrome Cache Entry: 715

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11322)
Category:	downloaded
Size (bytes):	999571
Entropy (8bit):	5.466352484044352
Encrypted:	false
SSDEEP:	6144:0hQiOD7A04AH01H0byC5NTyGEEtt9cP/lp8yVex5hn5Qx40VJ1iEGtGMo1Smvz1m:RXD57yKyCv+9tduywn5QxVJGsMo1j1m
MD5:	374825B99C4A6469CD0A54FEB0D5FB9D
SHA1:	28277E189C02690333B8C7DBA35DDC568992C749
SHA-256:	5C487BE3F33E984066F7B60684D4B0EB4CCF80B0E5AD6FBF05DDAA9B4B30EF96
SHA-512:	74EC45147707E74742AFE45DB37D7755844E6063605B1226EA5339FB699C307E1A903368E3446509B9187594F2881D8866E516A42C3C3BDE8C364E34C539481E
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iZ5G4/yN/l/en_GB/6bLr5PfhOK-.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("ActiveFocusRegionUtilsContext",["react"],(function(a,b,c,d,e,f,g){"use strict";var h;a=h\|\|d("react");b=a.createContext(null);c=b;g["default"]=c}),98);.__d("HeroTracingCoreConfig",["cr:8907"],(function(a,b,c,d,e,f,g){"use strict";g["default"]=b("cr:8907")}),98);.__d("HeroTracingCoreDependencies",["cr:8908"],(function(a,b,c,d,e,f,g){"use strict";g["default"]=b("cr:8908")}),98);.__d("HeroInteractionContext",["react"],(function(a,b,c,d,e,f,g){"use strict";var h;a=h\|\|d("react");b=function(){};c={consumeBootload:b,hold:function(){return""},logHeroRender:b,logMetadata:b,logPageletVC:b,logReactCommit:b,logReactPostCommit:b,logReactRender:b,pageletStack:[],registerPlaceholder:b,removePlaceholder:b,suspenseCallback:b,unhold:b};e=a.createContext(c);g.DEFAULT_CONTEXT_VALUE=c;g.Context=e}),98);.__d("HeroInteractionIDContext",["react"],(function(a,b,c,d,e,f,g){"use strict";var h;a=h\|\|d("react");b=a.createContext(null);g["default"]=b}),98);.__d("HeroComponent.react",["HeroInte

Chrome Cache Entry: 716

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26941), with no line terminators
Category:	downloaded
Size (bytes):	26941
Entropy (8bit):	5.034836744633708
Encrypted:	false
SSDEEP:	768:D+E4weuHCeS//JJ+YfztF0Q851PgwLtJ7OMmP3utuD8et+E:dxHC6OMq
MD5:	7EC2B81EDE93E59A3C985E6656B87427
SHA1:	1492B90F5361149A1D84D0870A5FCB15E1A9F60F
SHA-256:	8225B86ACE7FEC322A3BCFB3549603351FEF4111B98595A617499A69C8D6269B
SHA-512:	7ED7B8290F030D44116FF171A7D114B620A5D603571726E424EAD40A64D8E5E693EFAB7ED36ABB9B397E674202FA3FB6E4AF63C4B52CBEDFBF5EC61677E3E8B5
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S2/content/mobile/css/productPage/responsive-product-page2.7ec2b81ede.css
Preview:	.circle,.ico-question,.voucher-list-element>a{-webkit-font-smoothing:subpixel-antialiased!important;-moz-osx-font-smoothing:grayscale!important}.footer-text-divider,.form-field-wrapper,.form-input,.howItWorks,.ico-question,.voucher-list-element>a{vertical-align:middle}*{box-sizing:border-box}body{position:relative;background-color:#ff6c2c;font-family:Lato-Regular,sans-serif}.container{max-width:1280px;margin:auto;display:block;clear:both;overflow:hidden}.fade-background{position:absolute;width:100%;height:100vh;background-color:rgba(0,0,0,.65);display:none;z-index:10}.main-content,.product-details-container{display:block}.product-container{margin-top:5px;display:block}.product-details-container{color:#fff;position:relative}.product-top-banner__container{padding:0;margin:0;color:#fff;animation:fadeIn ease .75s}.product__name{font-size:20px;font-family:Lato-Bold,sans-serif;padding:10px 20px;animation:fadeIn ease .85s}.product__description{font-family:Lato-Regular,sans-serif;padding:0 20p

Chrome Cache Entry: 717

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 312 x 200, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	21306
Entropy (8bit):	7.984253057026201
Encrypted:	false
SSDEEP:	384:KYo+7sitixxLBqKOxKsD1BPe8zZXUMxqSoDeZ54AR7eH7oaNNa6n:KYoysitiHLBq8WTtXnz9K47iNb
MD5:	C1164AB65FF7E42ADB16975E59216B06
SHA1:	AC7204EFFB50D0B350B1E362778460515F113ECC
SHA-256:	D7928D8F5536D503EB37C541B5CE813941694B71B0EB550250C7E4CBCB1BABBB
SHA-512:	1F84A9D9D51AC92E8FB66B54D103986E5C8A1CA03F52A7D8CDF21B77EB9F466568B33821530E80366CE95900B20816E14A767B73043A0019DE4A2F1A4FFD1509
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...8...........j...S.IDATx^....0..A......:.J..&..Ep.:...'...i;..Y....B................* T.* T@. T@. T@..PA..P...P....y.i.M...}.l.a}...cV..b.....y..bZ.S....]..u......>.W.......4..q.G.F..yH.QY`..Pw..\. .P[.<\|...:.N....u..V&...v.O...H....9.\..p...}.....k.T.D...-...V....U}..GcI......yg..^....B...S..oJ.y..L5....&.....}Ny..?3....12pg'...N....#.....0Y./%6...`.q..TH.&"~..'.y..Y..Dl...............ax`].u.U...."c..........)...}kH......Q.g.6.Z..L..RI..bf[.P...S..DsA..H......Yo......`......q..].i..............(..*..\|f.-S.....$mbx\.<Z...@..Q@.].L.&Z..}=uf5.2.Tl.q.h.W5.D.o%k\.z....q.......+..M.u?.`S.v..T.T...@a...n...-H.+.....O;.+.Hk1...9.x.WJ..Q...e.(L..3e.....T...-3^.H....v........rf...`.x..R+...$....o.<.y..t...'7o.ug.......o.z.w.../?\.4...\....@.8...9.8.(..3.;.3;;..]^.,.......H.....R-Qk#b...j0%..hJcc.XC.\|..Z[IK]TL.hi.Z.m}..kP.V..?w..o..O...r....e..?..{..w3...AC@.....~............df...}......9.......T_.'5..NJ.$.'

Chrome Cache Entry: 718

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	552
Entropy (8bit):	4.4354471280851335
Encrypted:	false
SSDEEP:	12:t4tM65JA+KtIeDBmtMsZkvRP8x0iup0LELeyw5c+QU:t4tMMJALH8MsqJUtDoie+QU
MD5:	A57A74B00971D94B2CCA706685A9FBF6
SHA1:	8F24E8FAB4F92F58C23D451C3C8C6966C3A7B3E2
SHA-256:	2C13665427EA079DB0437534FD5C3F43E144D4707F129267C56F0352FF582EC0
SHA-512:	0A64ACB3697FBF5EC6A6D8DC46587E1A2A044F43D8DE0168F733B6276101F4A623D494E250D0C60A9E76C556ED288014530401A7C42F00F6CF5CBBE4AAD30748
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M17.7375 5.26556L28.6745 15.2624C29.1083 15.6589 29.1083 16.3422 28.6745 16.7387L17.7375 26.7356C17.0958 27.3222 16.0628 26.8669 16.0628 25.9975V21.6217C16.0628 21.6217 16.0627 21.6217 16.0626 21.6217C9.92564 21.6217 6.69114 23.9378 5.1615 25.5968C4.80726 25.981 3.97329 25.7343 4.00015 25.2125C4.22558 20.8321 5.86088 10.8892 16.0626 10.8892C16.0627 10.8892 16.0628 10.8892 16.0628 10.8892V6.00368C16.0628 5.13426 17.0958 4.67898 17.7375 5.26556Z"></path></svg>.

Chrome Cache Entry: 719

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	216
Entropy (8bit):	4.800786010781648
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4TK4G2aCM0xt0WGSSJhEi:t4noU/vmRTKd2aCJiWGXEi
MD5:	4769BF33E9F7764A9E55468B4B2FDD43
SHA1:	018175AA909257C549153A1488B9C7FFFDEDA23E
SHA-256:	53A433282E4E3F47144F41EAA4143F35763DB4616DF7791008A1AF78D32C975A
SHA-512:	C78FA4DF431A81B903586FCA21B3315E781AE374B1443147EDAE2F961CBEB4A021F2BF363F39516380D596C3C448B9350D8FCE8A3A2C2CC1B28ED0FF11D26FCD
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm2.97 14.95L10 13.87V7h2v5.76l4.03 2.49-1.06 1.7z"/></svg>

Chrome Cache Entry: 720

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	475015
Entropy (8bit):	5.317900614080589
Encrypted:	false
SSDEEP:	6144:Qwz+U7u0760T11PsySRwdi5QI7Q6z/qDrl5Ylf1B4lzuJZM:QwzQ0760TUyGGnYlf1Bgz5
MD5:	01696DCC53E033381CFC43DA9565BF9E
SHA1:	08AE6DE4A56C3C4438EBC90135FF67AF50D2B765
SHA-256:	3F335337A8FA9C51C6502A7557EA44CD2BCB4F22483ADAE275E4ECF5EC69FAEC
SHA-512:	08C86EDC3269BDE7DA85D752DDFD4E74B678BC3C9F297964F472840E4B8BD2538FF9934608901103AD09F0D0FB9C4C4C1F7EE86901D218388A0D5DD853ABC3A9
Malicious:	false
Reputation:	low
URL:	https://dl.dir.freefiremobile.com/common/web_event/common/packages/spine/3.8/spine-player.js
Preview:	var __extends = (this && this.__extends) \|\| (function () {..var extendStatics = function (d, b) {...extendStatics = Object.setPrototypeOf \|\|....({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) \|\|....function (d, b) { for (var p in b) if (Object.prototype.hasOwnProperty.call(b, p)) d[p] = b[p]; };...return extendStatics(d, b);..};..return function (d, b) {...if (typeof b !== "function" && b !== null)....throw new TypeError("Class extends value " + String(b) + " is not a constructor or null");...extendStatics(d, b);...function __() { this.constructor = d; }...d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());..};.})();.var spine;.(function (spine) {..var Animation = (function () {...function Animation(name, timelines, duration) {....if (name == null).....throw new Error("name cannot be null.");....if (timelines == null).....throw new Error("timelines cannot be null.");....this.name = name;....this.timelines = timelines;....th

Chrome Cache Entry: 721

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1971
Entropy (8bit):	4.140265923170004
Encrypted:	false
SSDEEP:	48:4uxgftjRvYQn94Cz5pdVw8jV/cu745MJzis0rR+ToGq/SJKF:aR5pPvtc2fd0YT+
MD5:	8F64411A9AC7F40E18967F620AE1B546
SHA1:	4C3FCE32CE99FAACEA1BADF35BE7091BD2F09384
SHA-256:	B77B4C9A17FB16DDADEC307F40FE8B37F806D80E97E3F8854142CDA91662708B
SHA-512:	3DE4780539E5C9850987401436A8F5D16177393C1AF930B01B7E9987CE2CB875ABD2490116DE0B6597C2A1B0D0D11E7AC872B652E5D8EF3B84C23146FAA0FA16
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <path fill="#FF0000" d="M21.39,13.19c0-0.08,0-0.15,0-0.22c-0.01-0.86-0.5-5-0.78-5.74c-0.32-0.85-0.76-1.5-1.31-1.91 c-0.9-0.67-1.66-0.82-2.6-0.84l-0.02,0c-0.4,0-3.01,0.32-5.2,0.62C9.28,5.4,6.53,5.8,5.88,6.04c-0.9,0.33-1.62,0.77-2.19,1.33 c-1.05,1.04-1.18,2.11-1.04,3.51c0.1,1.09,0.69,5.37,1.02,6.35c0.45,1.32,1.33,2.12,2.47,2.24c0.28,0.03,0.55,0.05,0.82,0.05 c1,0,1.8-0.21,2.72-0.46c1.45-0.39,3.25-0.87,6.97-0.87l0.09,0h0.02c0.91,0,3.14-0.2,4.16-2.07C21.44,15.12,21.41,13.91,21.39,13.19 z"></path>. <path fill="#000" d="M21.99,13.26c0-0.08,0-0.16-0.01-0.24c-0.01-0.92-0.54-5.32-0.83-6.11c-0.34-0.91-0.81-1.59-1.4-2.03 C18.81,4.17,17.99,4.02,17,4l-0.02,0c-0.43,0-3.21,0.34-5.54,0.66c-2.33,0.32-5.25,0.75-5.95,1C4.53,6.01,3.76,6.48,3.16,7.08 c-1.12,1.1-1.25,2.25-1.11,3.74c0.11,1.16,0.73,5.71,1.08,6.75c0.48,1.41,1.41,2.25,2.63,2.38C6.06,19.98,6.34,20,6.63,20 c1.07,0,1.91-0.23,2.89-0.49c1.54-0.41,3.46-0.93,7.41-0.93l0.1,0h0.02c0.97,0,3.34-0.21,4.42-2.2 C22.

Chrome Cache Entry: 722

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	216
Entropy (8bit):	4.947192163768535
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4mqUEUKFI8iyNd1LkBEo8:t4noU/vmREaI83O8
MD5:	FAF3B1C051434D1FC1CFC3335A1015AF
SHA1:	A04C68D74A3CCD626617EFEC131D004F4594EF53
SHA-256:	C32E7D6B3FC895BB9D822E322CD3D39C49CAEFA647E4FABFC3DD8926FAEB89A4
SHA-512:	23BDBD1C69E5B225A417646E742D7F238D7E311A17C866CE563CC82791054CF065F7C0CCD0970E8CAF75A340F1D3D5164BE257578BBE0AC0E8C15A2BCF862022
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/clapperboard/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="m22.01 4.91-.5-2.96L1.64 5.19 2 8v13h20V8H3.06l18.95-3.09zM18 9l1 3h-3l-1-3h3zm-5 0 1 3h-3l-1-3h3zM8 9l1 3H6L5 9h3z"/></svg>

Chrome Cache Entry: 723

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	151112
Entropy (8bit):	5.436457227851175
Encrypted:	false
SSDEEP:	3072:1FiVxW5Sn9rC88Bp0bZcdctMXQgCe6rzsMVv1:1FAxWGhcwZ0rgje6rzsMP
MD5:	4CB08CE34E989E6B7799216A5077C495
SHA1:	131453E3A82E4961BF9A5A4A347703DCAF890FC1
SHA-256:	B3790AAF2C91DC30C90A8E9BC622D7DD480AEDBD56550E082F040AF9AA10CA62
SHA-512:	F6FD757B09A802EB1F790F56D901D4EA3B8C035E22D4922A7135476ABD5396271B66E1442EA36BED30CC56E54F9F7100D6EBD9CC6EAA2DB8E7983262557020D7
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/m1/v/t6/An8UpDtYTxwRfyFUAQkYpPLVzCcFZAyT58b4mM9QRn-9IZWdHfcWsX1lOuHAsupZu8HCFEX8uobe6VdR6H9B8v2Z_FzSMfB8MYN36w.kf?ccb=10-5&oh=00_AYDhgEWS6D0RLo0qvx9TQgxPypbSC1GdW-PLYRKR1wPKAw&oe=6679EC30&_nc_sid=7da55a
Preview:	....KEYF....................@......C...CUU.?...A...............................................................%.......c..........$...0...4...4...D...H...L...T.......,.............d{<......?x...H..............?...?\.....RCd.....RCl.......`...X...................`...T...H...<...0...$.......................................................\|...p...d...X...L...@...4...(........................!.=.!.=.1.=.!.>J)%>.1F>.9g>.!.>)..>J).>k..>.1.>...>.9.>..>.!.?.c.?)..?:..?J)%?[k-?k.5?\|.=?.1F?.sN?..V?..^?.9g?.{o?.w?....0_...[...X..XU..$R...N...K...H...E...B..d?..0<...8...5..T2.. /...+...(...%..."..............4...............T...\...........^.......f.......n.......v.......~.......................................................................................................................................................................&...............6.......>.......F...........................\... ...........l...0...........\|...@.................. ............. C..RC......#C..RC.......C..RC

Chrome Cache Entry: 726

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	631
Entropy (8bit):	4.523426024540581
Encrypted:	false
SSDEEP:	12:t47N9U/vmRlNAz9Cf2+uFNxLjRJqpOyaIj24iexYNjbnME:t4jU/vwAz9C2NDx7MraCvC/ME
MD5:	CF8624D2CB9D056B69F4240D26676F42
SHA1:	B6D1C7111D039427E2605490C40992C47021E1C7
SHA-256:	384FBC48B9DAAAAE43546C01BAAC0F19EAF764549ABC66FE69A9E9675A14D0A3
SHA-512:	8500302D48ACDDAD24B051A44482305D92B349A054BF006E0FCA901DC55CC06DF826D28A39432ED7A92B7FB76E1D351945606DA87A0F0D3127E66D1CF2DDC90B
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M13 13.72V22h-2v-8.28c-.6-.35-1-.98-1-1.72 0-1.1.9-2 2-2s2 .9 2 2c0 .74-.4 1.38-1 1.72zm-5.23 2.53 1.42-1.42C8.45 14.11 8 13.11 8 12c0-2.21 1.79-4 4-4s4 1.79 4 4c0 1.11-.45 2.11-1.18 2.83l1.42 1.42C17.33 15.16 18 13.66 18 12c0-3.31-2.69-6-6-6s-6 2.69-6 6c0 1.66.67 3.16 1.77 4.25zm-2.83 2.83 1.42-1.42C4.9 16.21 4 14.21 4 12c0-4.41 3.59-8 8-8s8 3.59 8 8c0 2.21-.9 4.21-2.35 5.66l1.42 1.42C20.88 17.27 22 14.77 22 12c0-5.52-4.48-10-10-10S2 6.48 2 12c0 2.77 1.12 5.27 2.94 7.08z" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 727

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	downloaded
Size (bytes):	7793
Entropy (8bit):	7.897352968803794
Encrypted:	false
SSDEEP:	192:1MviRi2heWivkjYoxSs4rgqKPUo16T1ZUK2qdemT9Pu/zUitLJ7NrLK:1MaRphfivksoxzugqXo16T1OKBdH9diI
MD5:	56F07C6E9179EE2097F224E1A601294E
SHA1:	8DAA98046620FB360649B934D05873BD8928B2D5
SHA-256:	E301BAB469E0ABF177FBAEDD3EE44CBEE7B6CCD1679DD094E76CC49B0CD8C9FE
SHA-512:	25E844052C7E4F9599D1898F67FE5A7A4559110CB1C8B4C0F887C8B5B68E646F294F2538AC3761BCA84F5CCC4DF8A5F597745B42640D381F1A7C0425D668A405
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/443717789_996576088504629_748921786331374552_n.jpg?stp=dst-jpg_p160x160&_nc_cat=106&ccb=1-7&_nc_sid=5f2048&_nc_ohc=6efKMPmYepsQ7kNvgHWkgWT&_nc_ht=scontent-hou1-1.xx&oh=00_AYD-VepBjFoMOMyl-Xlc8WviWhVq2U2uQddJKy9PLR6smA&oe=6658484A
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a70010000540300009c0600002f0700005f090000200e000029130000a7130000441400006c160000711e0000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."................................................................................7.$.$.X......gV...E.8I+.$.$.k..9..:Z\|...Jd2.=-..t.8.....Ci.....s\.D...0.."i(mX.BG...S.......(.?[....%......%-....6c......U+ .[..;:.U...jG...3....!2.s.-.....I.%o;6..Yj..Y..Y...D..&....\|........d.E.....>.#..~..IK..`sk+.".^wn.lq3..h.hef.....c.e...K4...N.[...~.4V...g=3.....<....s.-A6sI.5P.\..I.H=....5..-l.$JT.79h.\|..<..a.6.+...r.$b......C.]s..V?..B...na.6..~..Y.O.]1..1Dy...897.u...g.Y.gy.P..h5=.....(............................. !"24#$01.............0).H.2..7.z..).X..s+.mu..6..?[....Ib1.!...GO...J....\|.+i...8..I.~..,:.K.kM>.5_e..\|ZG"yA..{...h.,.W&c..l%....d.....1S..d.gd.E....

Chrome Cache Entry: 728

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	downloaded
Size (bytes):	6391
Entropy (8bit):	7.847064124370549
Encrypted:	false
SSDEEP:	192:MKezfT3ekJVvSFGh+6EVEln5cNGrHSPW+o8:MKezfTpV6t6GmKPc8
MD5:	692084E10057D442A71C6727253D0287
SHA1:	91326DB965D929966161D6D90302AA0E2A63983C
SHA-256:	02620483F5A2287A7EC2176DDF754304C377886231424838B45C800CFF29B68A
SHA-512:	BDB28576511F073894A28D03BDF1578A4B4BDD1A943B860307AC4CAD06C6097E902E528F03879F2FBDC5E8FE78C4AAA0E376D848F06A6F3D5EC2FB9915BDA4A7
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/239592299_1943111962504323_4257252519711300084_n.png?stp=c102.0.160.160a_dst-jpg_p160x160&_nc_cat=100&ccb=1-7&_nc_sid=5f2048&_nc_ohc=E0uuFtNHuS0Q7kNvgHLW0c8&_nc_ht=scontent-hou1-1.xx&oh=00_AYAZEqOq3fKkG9GGcv4pGFMp4VVJNn8R0sRm10Vzux-RmA&oe=66582AE0
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a710100000e030000d205000080060000300800008a0c000066100000f3100000a311000058130000f7180000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."....................................................................................g....J....Pa.w.#].....h...W;..N..l....E...{c+<!......n.T..'l..Q ...c.6...#7..{..Qq<.^......KSx.w.\|..<...77..&S...n...S.09.\.....Ob.O....mc#.Z.p..E...o.Y.K.g:....._.6._c%.].LKh.N...71<...Rj2.Y..=..`...v&.....~. {..nw.. .../?.\|..kc.v.g......$VW.q.;&...b...R.....FR..Nf.~e?Aw{...z.O?...<..[..f...&.;.&.V%..N.63\|..Udy...................+........................... ...0!4"#$235`............<.X@....K.H..y.n.....*.]DDG._...2X......IMen..DB..{.+.(.}J....<l2.l.R.}E...WA.!."......Kb...........q.^.....`.q..l..U.Lw..q..oM&./...r.P...@Fu..K.}.f./........).........X.zi..YXo8...Y:Bn....Wb.V.

Chrome Cache Entry: 729

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	92
Entropy (8bit):	4.7881053369256055
Encrypted:	false
SSDEEP:	3:QQinPbDKthjkETZkqbASUNHOj9/:+PbqqqSuj5
MD5:	E313316378F242CBE7BC75DB8B6B0940
SHA1:	711AA0F8CC453F62563C3C3E99F8751C07568B0C
SHA-256:	6321192E4D6189C3CE44348AB44A387EC9981260DEDEC56ACDB64FA62BC0FE09
SHA-512:	3F1E74370BD5D0CE6F36D72E0D7F2C146B8307C64FA6354C555F7599A62BC4AB69F3C6EAA1A35C342BC78558FA30CD268D2529C9EE02C0EC56081A7038B9B4E4
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwl3_eFCCiaulxIFDXhvEhkSBQ3OQUx6EhAJZY6qzHZY-j0SBQ3HQJJzEiUJ8vdQWivSIlESBQ0804TeEgUN47whKhIFDZ9-c-ASBQ3qQM9G?alt=proto
Preview:	ChIKBw14bxIZGgAKBw3OQUx6GgAKCQoHDcdAknMaAAokCgcNPNOE3hoACgcN47whKhoACgcNn35z4BoACgcN6kDPRhoA

Chrome Cache Entry: 730

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	111
Entropy (8bit):	4.980379097367065
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5KVErcHgDXFUVLUJRVFiAdFUvuII9rP0WTC:tI9mc4slmgSVLU9FRF0ul5TC
MD5:	7A85DE03D089077BC1F895B1EA91907F
SHA1:	B86AF0404FED40A12228084B3B090DF8DBE50C0B
SHA-256:	179FAF7C791CF27682668324B60182039191B22B3AC85069C8BEBBA418DB9A1D
SHA-512:	8669E2B41453760B0C67C0701C4EFB4DCF6F544FDB84259383B5E9C64DA4E99DA37CDEC717ECC02E7BB919390E8187877EA125C367456C94B0245BD04E7FB4D4
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_outline/keyboard-arrow-up/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path d="M7.41 15.41L12 10.83l4.59 4.58L18 14l-6-6-6 6z"></path></svg>.

Chrome Cache Entry: 731

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 732

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5052
Entropy (8bit):	7.922946458030262
Encrypted:	false
SSDEEP:	96:E4VtDHYxsRUjApSw90doUj5C+1y6lBDxLQgmHvJmdt6JxJg/axUERDaG5z:pHYxsR1pkdoU9C+s69QgmxmdUTg/Yvh
MD5:	28380515FCA2C6F9A34C8D63C84082EE
SHA1:	8F4E3F2A27AC7DAF8D4AD527DF869E3283280D2E
SHA-256:	7C77EF25AB71668CE14480E52815E31BCF9E19F2409889048C0C00BDE9716895
SHA-512:	E61F5EADB42F9CB626FCAD82D07CB6A9263CDBD7D92A2D0F71717AA8F3EF4527794A0F81C9E762E930A9E30EB1F68A6C9EB8FC140910784E29DB88EEB5F928EA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...d.....G<ef....tEXtSoftware.Adobe ImageReadyq.e<....PLTEGpL. $. $ '3 "'.(8 $,..%#)3.").!%. %.!%..$..".. .!&..%.!%.."..#..!!).. %.."..&..... ..".. .. $08(07",56IT9AEIY_prp%-;&AO<erF`.1?G$Sl7\.6?Et...S.=GKa...&4.%0.J.L.....[z.;EJ<CH,g.^u}..."\.R..G..t.....8=J......cnt2k.8l. :R4Se...(].=`pSw......w\|\|.q....W]][dfl..c....#(398_\|.........Ex..&.?q..(?a........V..@.....[..........<q......o......... )....."....0:NTWKKJ.(3.4K..\|#&'07:...ABD...P\b.,?......Nap...-0chiBNZ.@l.!2Q\|.......X..O...=XE\|....Ch.......EWi@Xx^^]\.............(:A...Kf....G..\mw...y..Qm..U...............P..^........y..H]...2AHs...a..Ez7OgJt.Qr......n..?_.....v{\|c..... ..~.......6Yd=r.^..d.....M......."..v.....K..Y..P....H..\.....hy}v..V..._....Dm..........Go.B....Q..L..".....D..!.....P..j..2..0}.)f..J.3.....W~....D..'d...W..x....tRNS..!........:OH.n_%04V.C>..ue.}.{.....[..'Q....P...:....n.F.o....6r.....}...Da........................................................................

Chrome Cache Entry: 733

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, Apple iTunes ALAC/AAC-LC (.M4A) Audio
Category:	downloaded
Size (bytes):	6953
Entropy (8bit):	4.97426625305529
Encrypted:	false
SSDEEP:	96:c3q9R1ETjY1k9kudJQphE2HcjHVSdDtIYIsFsiLQ96ziV:r9zEfWWkwJQphjHgkvIYJi0QF
MD5:	645F01C1901427F176085F2F984C6139
SHA1:	AA5E66A1B49B4840EF30B765712178DA237CD74A
SHA-256:	18D91A4732D34F80E3B785F0EE2F3FA5102582D5DA3BC44C76AFBCF87D5E4A50
SHA-512:	6913F0471E4510FC5B95A7317C2347B6B5835973BBFC5F51A28A9EC6AF2A29D67BEC4B4B1A434A19610F75A8547C584582FC690E5392B466D534EB5876BEAEF2
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/search/audio/no_input.mp3:2f77e58916dc29:0
Preview:	... ftypM4A ....M4A mp42isom........moov...lmvhd.............D..`.................................................@..................................%trak...\tkhd....................`.................................................@...............mdia... mdhd.............D..`.U......"hdlr........soun.................wminf....smhd...........$dinf....dref............url .......;stbl...gstsd...........Wmp4a.........................D.....3esds........"........@.............................stts...................(stsc...................................tstsz...............................................................{...q...h...d..._..._...W...^...b...U...K........stco...............\|....udta....meta......."hdlr........mdirappl.............oilst.....nam....data........cancel....cpil....data.............pgap....data.............tmpo....data.............(.too... data........iTunes 12.3.1.23....----....mean....com.apple.iTunes....name....iTunSMPB....data........ 00000000 00000840 0000

Chrome Cache Entry: 734

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	downloaded
Size (bytes):	8884
Entropy (8bit):	7.919365832758128
Encrypted:	false
SSDEEP:	192:WWzz+5p+Mexga+yBf+XMrYFd+KWXA8nW+pd5HvntbhQ0q4fZbn:xzz+5ReYMLYaKWXV/dRFXffBn
MD5:	E729132C9AFBCC4F77C554D64881FEC9
SHA1:	C4A109BC2C0447FD0599B51233F00FDDFA47CE57
SHA-256:	586AEF58BCD9B8C9F68795C7A3ACF461F233F2377E011E15844D600F2C6EA5E8
SHA-512:	EE90B2E9D16A8EBB5393D8BD42FD6695F8A0321EDB007D7ED958E3AA8AA7A18326C10E6F28E692FC557742CADE6004E6D0DFCEAE8496B6DCF75427E507E3994E
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/443719952_995303895298515_5429863019799494605_n.jpg?stp=dst-jpg_p160x160&_nc_cat=101&ccb=1-7&_nc_sid=5f2048&_nc_ohc=QJOpQMOzaykQ7kNvgGY1MSj&_nc_ht=scontent-hou1-1.xx&oh=00_AYDz7mtrEpNBxVYv1ph3mZC7uPqbHrNYX7ZZdgtuo6ZlEA&oe=66582DAE
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a72010000950300003f07000032080000380a0000db0f0000dc1500005e160000651700005f190000b4220000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".................................................................................+...<.f....\|H..a..A..l.h4.3..\|.SD.41..rT...Z..%...?.~......g...>;Z..yIUR.-..y.S..&...d...r=`s......W.l...2...C.^Mf.....$..o...G...Y...O..pr...)>...=.;P...C....-.X40..m3;<....6.....W.x..-.:...8)P..:d.......S..wd.......l...d\.6..3....I...^.XN.JI6.t.... .J..}....7.M..IUe..rsV{.IwF}/<....zwPg+P...Ok.....PE.C.Wyj5:..sI.G0'.......-..,..c.Mw.....w.d..%F.M,k%x=...j.y.3.j5wU..y..d....p.H..E$g../..qR<....A:y..4.d......,.......I.....)...'gy.&I'..%([......,....M..................................... !.1235"#$@............k.....d}...d.f.P>..k..K>%.N.3..sU.`/....GQ#.u-..R..t.Hd.%B..;.i.

Chrome Cache Entry: 735

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2190
Entropy (8bit):	7.849903718594781
Encrypted:	false
SSDEEP:	48:D/6GN3MZUPvJwZpSD0LFSDhFI5rSv5lnux5LsK+wWJJ7eMUNrb5Xtz6uYF+:DSGNMZIJf7tFI5rSv5pMg3zJJ+rFkF+
MD5:	9141E5521105FB13C657480DAF781484
SHA1:	1D0D577784430FCE4BADAC4B6C8AA81BFBE45C8F
SHA-256:	8AF7DDA580228D237C72EED44BCE0912585241544A1FEAE96A464145EFB542B2
SHA-512:	E871DB92CD9F21BC48BB57C9E3D613DAC6781074384936BBAB5FE5B204D213EA4BCCE21635702A606811FFD228C22EE0B689FB4FFBA364A972C5003129835BE6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....pHYs.................sRGB.........gAMA......a....#IDATx..[=p.G.^1)..@.......2.1U2..K..........\.rc7Il..LH.K.Ig.HgGrk..T84..I...7...O..;..\|3.u..}.}...w{..28.Y:....[....Am.?......d.....:Gm.Z..G..<...3h.=.....N..=V..tI.0p...W..`.wW.0......U..A.w......4......a.X..2.....t(.....c.gl}.9[]....?,.....+.....L..(?-S.0...I.$.&.zm. ...,..=gI.d.....9:^`G{..~.$.......a...!0..-@.../X~....F...;?7......p...v.,mbS.p.M...3MJ..;yDw...f...f..<.......a.T~".a..7D.....SK...4.(..]...'....4.c..1`.k......[.....^..m...............6.W..5E..2.:...Y.....n..=8r.f......7G.S..)...TS.E.>M......r..{X......z. .6]{.\|.....0....-..3../..%..............).oc..0.H8h. \|...a..&S.}9.U.^..I.=..}t9.<.1.R.U\|.z.s+..../...U.S..qla@.i..NxP../..H5.zI..?u.....wucjaAP...y.........X.. ;~..k.b..._...;=,?\|.?..e.`Y].s..n.F+!...BA...;-X..............w/t.8...c.{.....2H..L..U..M.Z.W@[......R...o.O?ERD7.....\m...6.hRF....P!..F...,..hX.... <..:`X4-. T"...,..Z.....R

Chrome Cache Entry: 736

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	184
Entropy (8bit):	5.038914846080771
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5hL6Fb0zVjXRH8+hHiATcvXjXRHRcBHeQR+HEp3JdZFQENIfCyHn:tI9mc4slhLJ9hC/vm+QqaXFXaKyHSbE
MD5:	C71D43D3179551ACAFF38A6A24DEDA71
SHA1:	9BE42687E42147DBFEA9C1CA9486CCFE6DAB9F96
SHA-256:	4402C4D35A422097E5AC692FF4EF5182F2E3B72F5A0F710C230A18D6449C688A
SHA-512:	11BBD2FAC3FF1C144F3F18C60975DD679DEC6C23081621DB874DD1057906A5085B73E998332E1B2C2E511AE55D481980DC3E011588487D2779297B6119BCC79B
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><g><path d="M4 21V10.08l8-6.96 8 6.96V21h-6v-6h-4v6H4z"/></g></svg>

Chrome Cache Entry: 737

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5762)
Category:	downloaded
Size (bytes):	42843
Entropy (8bit):	5.549085132361728
Encrypted:	false
SSDEEP:	768:TLqQnC724otPgs5G7QVIfyYlHmCD5F3NcTzoYY2KrmD:fqQnC7WgyG7QVIfyYnr3Nc3zD
MD5:	FEFE4B26093717999B3BAFEEAB0CBA29
SHA1:	82BB00218F419F2DE71702D5E223975E66F43225
SHA-256:	6A8B478A1A04C35D3730787A09E16A6095F23B0EC82BC2AA62722B0B4D8CE7ED
SHA-512:	E249D844608461B5DEEE80F46B846722EFE6E5036C6C212ACEA1F7781B52903D7436A5FABA9091FD5EC520790A89E869DD0533BDD12B3F4388FFBD8C1B53CFB5
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3ibJQ4/y3/l/en_GB/mYDEWiHviVu.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometAggregatedEntitiesTooltipRenderer_entities.graphql",[],(function(a,b,c,d,e,f){"use strict";a=function(){var a={alias:null,args:null,kind:"ScalarField",name:"id",storageKey:null},b=[a,{alias:null,args:null,kind:"ScalarField",name:"name",storageKey:null}];return{argumentDefinitions:[],kind:"Fragment",metadata:{mask:!1},name:"CometAggregatedEntitiesTooltipRenderer_entities",selections:[{alias:null,args:null,kind:"ScalarField",name:"count",storageKey:null},{alias:null,args:null,concreteType:null,kind:"LinkedField",name:"sample_entities",plural:!0,selections:[{alias:null,args:null,kind:"ScalarField",name:"__typename",storageKey:null},{kind:"InlineFragment",selections:b,type:"User",abstractKey:null},{kind:"InlineFragment",selections:b,type:"Page",abstractKey:null},{kind:"InlineFragment",selections:[a,{alias:"name",args:null,kind:"ScalarField",name:"username",storageKey:null}],type:"InstagramUserV2",abstractKey:null}],storageKey:null}],type:"AggregatedEntitiesAtRa

Chrome Cache Entry: 738

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6544)
Category:	downloaded
Size (bytes):	81139
Entropy (8bit):	5.540719414818194
Encrypted:	false
SSDEEP:	1536:GpVGm5ql2jV1TmIim0sKymy8W2Cu20u6SMiNckCuvw4Im+gSUUd:GpGTIim0sKymy8W2Cu20u6gCuvw4Im+L
MD5:	FEF726F51E78D8E5E0194DCD9146D9CF
SHA1:	A6352C6E369266371F4CB93DCCCBB631E1046505
SHA-256:	87BCD555E8E8D1C120B9FF29BA3EC6BD956006A6791583534EA40BA83ADDA73F
SHA-512:	17F547C1AF3561D8FCE098D24B4C5FDA356445982509906024EF8947F8937FF855977FA4AAB839E55F048797C2FB6FE810A6183B0A2B6479ED3DD1C5157741AF
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3ibq64/y8/l/en_GB/2u2m0bPYW-ex3hM69KLNaEmM84SfiWlvqERz6pNGhHp816BNgeKisvr.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("BaseDataEntryKeyBuilder",[],(function(a,b,c,d,e,f){"use strict";function a(a){a=a.key;return a.trimLeft().toLowerCase()}f["default"]=a}),66);.__d("searchBaseTypeaheadTakeNEntriesFromSectionedEntries",[],(function(a,b,c,d,e,f){"use strict";function a(a,b){if(b===0)return[];b=g(a,b);var c=b.entryIndex;b=b.entryUnionIndex;if(b===void 0)return a;a=a.slice(0,b+1);if(c!==void 0&&b!==void 0){b=a[b];b.type==="section"&&(b.entries=b.entries.slice(0,c+1))}return a}function g(a,b){b=b;for(var c=0;c<a.length;c++){var d=a[c];if(d.type!=="section"){b--;if(b===0)return{entryUnionIndex:c}}else if(b<=d.entries.length)return{entryIndex:b-1,entryUnionIndex:c};else b-=d.entries.length}return{}}f["default"]=a}),66);.__d("BaseTypeaheadPayloadDecoratorAddLimit",["searchBaseTypeaheadTakeNEntriesFromSectionedEntries"],(function(a,b,c,d,e,f,g){"use strict";function a(a){return function(b){var d=b.entries;return babelHelpers["extends"]({},b,{entries:c("searchBaseTypeaheadTakeNEntriesFromS

Chrome Cache Entry: 739

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	151112
Entropy (8bit):	5.436457227851175
Encrypted:	false
SSDEEP:	3072:1FiVxW5Sn9rC88Bp0bZcdctMXQgCe6rzsMVv1:1FAxWGhcwZ0rgje6rzsMP
MD5:	4CB08CE34E989E6B7799216A5077C495
SHA1:	131453E3A82E4961BF9A5A4A347703DCAF890FC1
SHA-256:	B3790AAF2C91DC30C90A8E9BC622D7DD480AEDBD56550E082F040AF9AA10CA62
SHA-512:	F6FD757B09A802EB1F790F56D901D4EA3B8C035E22D4922A7135476ABD5396271B66E1442EA36BED30CC56E54F9F7100D6EBD9CC6EAA2DB8E7983262557020D7
Malicious:	false
Reputation:	low
Preview:	....KEYF....................@......C...CUU.?...A...............................................................%.......c..........$...0...4...4...D...H...L...T.......,.............d{<......?x...H..............?...?\.....RCd.....RCl.......`...X...................`...T...H...<...0...$.......................................................\|...p...d...X...L...@...4...(........................!.=.!.=.1.=.!.>J)%>.1F>.9g>.!.>)..>J).>k..>.1.>...>.9.>..>.!.?.c.?)..?:..?J)%?[k-?k.5?\|.=?.1F?.sN?..V?..^?.9g?.{o?.w?....0_...[...X..XU..$R...N...K...H...E...B..d?..0<...8...5..T2.. /...+...(...%..."..............4...............T...\...........^.......f.......n.......v.......~.......................................................................................................................................................................&...............6.......>.......F...........................\... ...........l...0...........\|...@.................. ............. C..RC......#C..RC.......C..RC

Chrome Cache Entry: 740

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	312
Entropy (8bit):	4.958737908772462
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4AFMGaBoxnOLgQsS0ISSa/KW8xGeDogniLELo:t47N9U/vmRXGaBoVOLgbvSoN8xGzEo
MD5:	22698ABCC833E1218C3EEED7C534A400
SHA1:	247102BA81E345DFD0C7374C4AB9B894C8A9704B
SHA-256:	A3A94E1842AA40BD34D65EFF8EA6F8EAABE15CC9947C26FE1CFFB3274F83121F
SHA-512:	E0C67655E2E2A955D52D0B1415A3931C5D2111AD12E66BCBDB89C4E4AF3E27701CCB5407F62896C2340BACF7D20E86C2ABCB03332C76C48AE62B83BCB1B612C4
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M3,11h3v10H3V11z M18.77,11h-4.23l1.52-4.94C16.38,5.03,15.54,4,14.38,4c-0.58,0-1.14,0.24-1.52,0.65L7,11v10h10.43 c1.06,0,1.98-0.67,2.19-1.61l1.34-6C21.23,12.15,20.18,11,18.77,11z"/></svg>

Chrome Cache Entry: 741

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	251
Entropy (8bit):	4.807326238374636
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4hLBIl/qVs+RLjUjUX:t47N9U/vmRYiVswfUjUX
MD5:	05A720716D71F9F56D6C0E5C4B47680A
SHA1:	D24611C11E8CC3B158EB518F2298D1E35CE03E48
SHA-256:	B90706D55C1E8B616BF8D677C195D09AF8AA75BC669BA3A36A25480CA86F6926
SHA-512:	D0DA0CCC993DB255F96AC9CCDDA35DAADA2928F17A1262F5954B6A3C54B57080544E5A9C3808275749ED15A118AAA9B44B50B0AD8A1F2BE668F9D7614A0456B1
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="m12.71 12 8.15 8.15-.71.71L12 12.71l-8.15 8.15-.71-.71L11.29 12 3.15 3.85l.71-.71L12 11.29l8.15-8.15.71.71L12.71 12z"/></svg>

Chrome Cache Entry: 742

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	474
Entropy (8bit):	4.7449073607550805
Encrypted:	false
SSDEEP:	12:t47N9U/vmRGLHuojuMUMU2lX9KuMUMU2lZzrvCJig/I3n8:t4jU/vjtuM5JlX9KuM5JlZ/qwX38
MD5:	CF92CBEE09BC23E2B2EAE3EF6A9DFF40
SHA1:	E9EEB3AE2294064FD7B0A5026B5AE02A6564C9AD
SHA-256:	60FC606F480F263CDC9CF180089D42E4A070395B47D0331E7C869A9F6FD2208A
SHA-512:	EF4944E4E9FE78DD00D379EE192FEF915BC3AA45E6029AC21CA858C5C8D65EBDFA70F78CF87F00A623D311CC3ABF453CFD5DFFEC442F1A87EAE23E548DF92295
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M10 12H8v2H6v-2H4v-2h2V8h2v2h2v2zm7 .5c0-.83-.67-1.5-1.5-1.5s-1.5.67-1.5 1.5.67 1.5 1.5 1.5 1.5-.67 1.5-1.5zm3-3c0-.83-.67-1.5-1.5-1.5S17 8.67 17 9.5s.67 1.5 1.5 1.5 1.5-.67 1.5-1.5zm-3.03-4.35-4.5 2.53-.49.27-.49-.27-4.5-2.53L3 7.39v6.43l8.98 5.04 8.98-5.04V7.39l-3.99-2.24m0-1.15 4.99 2.8v7.6L11.98 20 2 14.4V6.8L6.99 4l4.99 2.8L16.97 4z"/></svg>

Chrome Cache Entry: 743

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	467
Entropy (8bit):	5.146838272230996
Encrypted:	false
SSDEEP:	6:6v/lhPEIQzDvEIqDYJ15LrzhiCaoa4xNSOmD1we5fSrOxKEbLlJdp:6v/7MnPEIVJJiZNqtmZwQoYrbLlJz
MD5:	DF7EA137C640CBFC8988EBFCBEA3E74C
SHA1:	4D515FAE712AAADC544D64D1C1D22D1BB0A01AFF
SHA-256:	F0C8902560810110039DDE6066D18FF2D3D26A645DF7A4E76D7A6A45617B9F98
SHA-512:	C7BD585317015EEC41EBB2BAF6C6815219EB84BE2212F57EF3E469A4746F50F60519DC03EC9EE510556970A7BF4F4E76667C5D2080018AE00F5CDBBDE86C50B2
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/y7/r/4Lea07Woawi.png
Preview:	.PNG........IHDR..............W.?....PLTE...........................................................................................................................................................................45.D...8tRNS..............dH.f...U.;!q%...u.&..n{.P......Oy...^4.N...{....IDAT..u....0...K.`W....../3...Fw..7BQG...l}..!oh...9...o...=...yY..P.aCx.`j.rE#..?`.Y4..9..%..bGHUMjf.okj.>\j...5g.LbRq.f.L.".c.0.. .}n..-..27..H.k\|...$%aXm......IEND.B`.

Chrome Cache Entry: 744

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	4.142295219190901
Encrypted:	false
SSDEEP:	3:lZOwFQvn:lQw6n
MD5:	1FA71744DB23D0F8DF9CCE6719DEFCB7
SHA1:	E4BE9B7136697942A036F97CF26EBAF703AD2067
SHA-256:	EED0DC1FDB5D97ED188AE16FD5E1024A5BB744AF47340346BE2146300A6C54B9
SHA-512:	17FA262901B608368EB4B70910DA67E1F11B9CFB2C9DC81844F55BEE1DB3EC11F704D81AB20F2DDA973378F9C0DF56EAAD8111F34B92E4161A4D194BA902F82F
Malicious:	false
Reputation:	low
URL:	https://static.doubleclick.net/instream/ad_status.js
Preview:	window.google_ad_status = 1;.

Chrome Cache Entry: 745

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	363
Entropy (8bit):	4.49126552549198
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4CCUljullQ5dUiC7KITuMUxldUiiiC1ofuMUxldUiiiC17:t47N9U/vmRXKjullQ5d+puMUxldbfuMh
MD5:	82A60FADA6F7957329BEEE85E0453CAF
SHA1:	6882C6B5F04787D57F3B59C1D1559623BC40E146
SHA-256:	98901DDFF67E245769A3E1F47ABA0210653F817436CE288646FC0BB88E859CFA
SHA-512:	646BE4874078FB5B9072DF552DA8CF0A1E5533D1B65392E06008676D8B06CA3E5EAFAC14C89BB580E0A7EAAEE94B3EC0825174328C3B30FC92D66730FBAD373F
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M12 16.5c.83 0 1.5.67 1.5 1.5s-.67 1.5-1.5 1.5-1.5-.67-1.5-1.5.67-1.5 1.5-1.5zM10.5 12c0 .83.67 1.5 1.5 1.5s1.5-.67 1.5-1.5-.67-1.5-1.5-1.5-1.5.67-1.5 1.5zm0-6c0 .83.67 1.5 1.5 1.5s1.5-.67 1.5-1.5-.67-1.5-1.5-1.5-1.5.67-1.5 1.5z"/></svg>

Chrome Cache Entry: 746

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	157
Entropy (8bit):	4.866482514263467
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHLLWQlXI1/ymUwHMQMQtnQSb8:tI9mc4slhohC/vmI4NXa//1RtnQo8
MD5:	C62423FDC7866B06AF4889BE619900A2
SHA1:	93BEEE6DEA1F9CB906B794F182949F357AAC06D0
SHA-256:	C47564ECC26A15C0A2381733FBF821EDFDCC17A4A8B946380B6308C6381517DF
SHA-512:	4E7CFB526D804C30F4DAED59EA03709BF9D311BF4F30FC090F4032B9C8D12E73789798BD5A5A5AFBE889B009A1BB12E7939577055FC983520E7F93334DABD5EA
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/chevron_down/v7/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="m18 9.28-6.35 6.35-6.37-6.35.72-.71 5.64 5.65 5.65-5.65z"/></svg>

Chrome Cache Entry: 747

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	324
Entropy (8bit):	4.519025420255455
Encrypted:	false
SSDEEP:	6:tI9mc4sl5RINAvxm6lzjQewRNGBvLl1ZX1i0dTnUMSdR+trpYmQkDEJM:t4vqNAJXpQewC5pDpU6VYFG7
MD5:	DDABFA57FD16BDBA85E2FD30B2B0FEFF
SHA1:	9FC8CD1D34223C54E0C86922F2DE68AACBE6E57A
SHA-256:	B60F66156BC26031D7F02CC7CAAA6D7277D56F1821ED55280F67446AA3643640
SHA-512:	1AD6D890CADC461D74821065143FBE1AFC882C106ED646F41CB2BC12D00D6FCC6E9C68C7FAA7F260F2FABAFF68689EA0DF48CEA54FF40AF505B4A632D67F1B5B
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_outline/refresh/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <path d="M13 9v2h7V4h-2v2.74C16.53 5.07 14.4 4 12 4c-2.21 0-4.21.9-5.66 2.34S4 9.79 4 12c0 4.42 3.58 8 8 8 2.21 0 4.21-.9 5.66-2.34l-1.42-1.42C15.15 17.33 13.65 18 12 18c-3.31 0-6-2.69-6-6 0-1.65.67-3.15 1.76-4.24C8.85 6.67 10.35 6 12 6c2.21 0 4.15 1.21 5.19 3H13z"></path>.</svg>.

Chrome Cache Entry: 748

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 246x138, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	5638
Entropy (8bit):	7.954114840403367
Encrypted:	false
SSDEEP:	96:hsKGUTvruqebeDJXn+0uUfoqxa4Jsrj6p9Z/GEMrh+YT8L5luWmK+xou:7Tvr92uNnvtx/Jsf0rsrh++89MWmr
MD5:	9992D1E41C293717F081A35531863741
SHA1:	36C94E06C010235F60A00509ED3EFCCE7D9101FF
SHA-256:	FED30982D481E4067A6F11D295C6C238055321E8F50FD06A89771BF525994D64
SHA-512:	4D76DAED813A97EFD2237437502B8D2F27D4B2F1588E1BB30D62471E0D7EADB08A7DEC73BCF40A03A2335969CB1313A33A7418C920616F5620EE87373A5352FF
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .....[.......>Q".E#.!...@8...7n.....;.+i...~Dtx................6.....9.I......@_.?.~........s...O....?..o...8.....'..._L......j.....n...?.O..2.L.....[..M~Y.K.?..i..~.\|......N.._..,...].K.. \|....O...h..~..E...A..._.?..>.?..A.m...../.w.?....D.e./.w.W...."=..Y........._a........o.........}.~.{ ........_..3..=..\|4.[..W...F..QY.v+....9..H.o........0y@....&6....$1.u....:.ZS.......F........!..!>.I..Y.m..X...A9.x.x9....w.}.U.......Wl..z.\+DC.m..{XI.............2).,3...^.x.},.{Wj_ 3.i.+x...{..2Yv^b.L.u..u...vY..?@u.....t..=.L./...8c...0:..W....QF.U........"...W\|\.q.>.......,0....(r@]m.}.D..."N..Dq...<..5.C+Y...k.c.I..\#.,.RI../..N.).!........k.2.T..T...:....%Yr..R(m...p.)....a............K8.....Q...W.."......P...H.S....A.{....+4../{a..oo..M/./~L..5..z~...W..u.2.FZ,x!,..o.mCC..#....!.!.<.R.ou...B.q.@.,...x.......Q....QFn...p.....!....J..F./..d.0..4...h..3h.6r<..JY)9..\|'nt.+...w\....,_....-+.ZTL.....5.r.9..FoJ5N\.

Chrome Cache Entry: 749

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 604 x 158, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	28789
Entropy (8bit):	7.971396460866589
Encrypted:	false
SSDEEP:	768:mQmpRJ1JqkEDO5tjx6ZmOAKTTjgH1W7AH0VYvkLHNy:mQUJbqkoO/zPKDgmKvkLH0
MD5:	74190B93FC4F5D88F0C8E6411BA20BD8
SHA1:	89CE2ECB660A90B8E6ED1B335443D7767C59F28A
SHA-256:	092A3CD5F86B3F039FEEFDEB86694CD16AE545AF214CFDA614BDBBE2D1BDE401
SHA-512:	35FFC458DA53B5105BA45473350BC178D4B96ACC7E5F409FCF586ACA4E7C9B9B9B3A7D9D1C2185532EE13F9F496811156A38130FB7D9ABF5925436EF29F63ECB
Malicious:	false
Reputation:	low
URL:	https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/img/facebook_text.png
Preview:	.PNG........IHDR...\...........&....sBIT....\|.d... .IDATx..w\|......{J:...{.. .`.."..}....r..{.r.+X... ..@....Az.$...s...<...{.IHB..'!0_>K.svg.....33....B.P(...B.P(...B.P(...B.P(...B.P(...B.P(...B.P(...B.P(...B.P(...B.P(...B.P(...B.P(...B.P(...B.P(...B.P(...B.P(...BQ!.^...-...C.PT....Hs~.6....E.P(....r..K.n..._..gMp/\.BQ......?>:..$Q(...`....x.r._O.z.uW........(....m...F....yu$%{..@..Ia.....4........[^..r.?..4)..x.~.P...u..rkZ..B.8.h3d\.._...7~.g...:..@a.)H....FB...?#7...#..&..._ck....El<.J.?.\|4...Q(.Q.i.P]..rn...qu...t..oN.."owv J;.Dd...H.D.$A.".....%.g,..B.k....5.....l.....~....w=...Y.....^`eN....j.O.P.M3H....C.......>g....,..`}f....jZ...S....>.e..SO..U...0`.....hr..... {.0j...0.sG...4.&....Cok-v#=..".l.~i.1o..M...:.n....m............j......y5,.Bq,s..[.}...vl.^...E...S.....:.: .h....v5+.QF..&.....}.......3..9.V.6i.D<DD.,..%... ../b...3.(. ..i..&..T.mM.P.A..G..i...}......n..[v.]........9'...$X...M"".u...jO.Bq.R......y...<;...O..O....?f..xU...e

Chrome Cache Entry: 750

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	346
Entropy (8bit):	4.782195104649308
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4eTgAV99WTc6XzQuJ3/vh7QrB9TzUuM8XGk+LlvDME:t4noU/vmRSgQ9Ec6jhJ3XtuM8sL9DME
MD5:	A81BADB0BAAD5A9F30C4F71D94F2C09A
SHA1:	74DEBED4DAC92DB3B79CCFA1BDD2C93852D2A2B4
SHA-256:	C46134C020CDF3060355F81622A054C9F23A4F04AA887876851796FA6243C80D
SHA-512:	1F3975165382775F332EE96ECD6BBB06952D583E72E75DD3984860C932D0D88FB04B182842C3F3318455A322F6E01B7C50A0C0C46E861D45542A8F25CC03F9B8
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/bag/v4/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M16.9 6c-.46-2.28-2.48-4-4.9-4S7.56 3.72 7.1 6H4v14c0 1.1.9 2 2 2h12c1.1 0 2-.9 2-2V6h-3.1zM12 3c1.86 0 3.43 1.27 3.87 3H8.13c.44-1.73 2.01-3 3.87-3zm0 11c-3.31 0-6-2.69-6-6h2c0 2.21 1.79 4 4 4s4-1.79 4-4h2c0 3.31-2.69 6-6 6z" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 751

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	214
Entropy (8bit):	5.096829767629689
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4MJqgzQFqYgXT085Y:t47N9U/vmRYOF4Tm
MD5:	BDC934DCE4645CFA785C33E037A00EFF
SHA1:	87281A6721F6ACAE1DA886D68A9BA04F009831DC
SHA-256:	09C41C2AC9873188C095279472467BE0EB4166C5E22AE52BA04E937AC94FC203
SHA-512:	74331EE305E92CC3BF172624469D9789BE82A2D48EB1791210931C125F40298EC96F3875D8CFD25E8F323071D041930CDD1BADFD0AF9B032D290B56E3E838048
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M10 18v-6l5 3-5 3zm7-15H7v1h10V3zm3 3H4v1h16V6zm2 3H2v12h20V9zM3 10h18v10H3V10z"/></svg>

Chrome Cache Entry: 752

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	384
Entropy (8bit):	4.820720215490487
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4CpBSNwLSoD0pVhyVLT7UiHQ3aju2lQjGVT7UinwFju2li:t47N9U/vmRqBKbsL3RQKju2lQ03VwFjs
MD5:	BD5B52813BF62EC230C9EF682AD48DA5
SHA1:	AB4B59D9F48A229B4D5C6C6DE9E4BF8D4AF32605
SHA-256:	179E849AAD715CEDDED335BFB09228C4985D113BC1EC61FB7C95785B8E6D941A
SHA-512:	7AABEFC130160D98B3EF047EAB303D13DCD0BDEC71A24372716FA060FE35AA91D86B1C10CAACC36B0332E9B3B6E59141EC1B32DF7E50543D0927ED0ACAB881F1
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="m16.97 4-4.99 2.8L6.99 4 2 6.8v7.6l9.98 5.6 9.98-5.6V6.8L16.97 4zM10 12H8v2H6v-2H4v-2h2V8h2v2h2v2zm5.5 2c-.83 0-1.5-.67-1.5-1.5s.67-1.5 1.5-1.5 1.5.67 1.5 1.5-.67 1.5-1.5 1.5zm3-3c-.83 0-1.5-.67-1.5-1.5S17.67 8 18.5 8s1.5.67 1.5 1.5-.67 1.5-1.5 1.5z"/></svg>

Chrome Cache Entry: 753

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	211
Entropy (8bit):	4.924417291349329
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4mqUEUKFI8mRKuw6Y8:t4noU/vmREaI8Kw6Y8
MD5:	DBF72CAC4571210883C7748A6E8B9C71
SHA1:	984DFE134C779FD952ED67C1CEAB88D14FDCF122
SHA-256:	62714BADF737F2D069588724ADE1CB6B79AEF821C432875C614997E351F76341
SHA-512:	AD53CBDD55542FCCD83387639BAD59372949B1933F603B44EB6859F1EB344B8F2F11241EC954628F9025E88CB308F67051C408151800176B45F49A398140744E
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="m22.01 4.91-.5-2.96L1.64 5.19 2 8v13h20V8H3.06l18.95-3.09zM5 9l1 3h3L8 9h2l1 3h3l-1-3h2l1 3h3l-1-3h3v11H3V9h2z"/></svg>

Chrome Cache Entry: 754

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	163
Entropy (8bit):	4.900439585813596
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHMwYSf104XTIUGnYRt8n+R9ZK/:tI9mc4slhohC/vmI4NX104XEUv8
MD5:	5D73D2DFB1BEA872F0CEB93909FE6887
SHA1:	DEF95E494B458D0E5B4BC0B082AB6C791216E932
SHA-256:	EB908A46A75151ADC11154E759DB9BE111AFC67CDA5317AC26B43E3654FD4BD7
SHA-512:	2F44B65FE52EE707D1696DE15EC18DB38521D5A848C3F9BD1352BF7BC2A8CA07CF28A98ED891D663F062CA952C72F0082ADB556053D827811E638D649E8FCB2D
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/list_play_arrow/v7/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M22 7H2v1h20V7zm-9 5H2v-1h11v1zm0 4H2v-1h11v1zm2 3v-8l7 4-7 4z"/></svg>

Chrome Cache Entry: 755

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	118
Entropy (8bit):	4.774740462043314
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHc5n9vb/:tI9mc4slhohC/vmI40n9z
MD5:	0336FA898DA5EAFB175287497BD5012E
SHA1:	39A3A9E6F8987E8AC432198B0C5DBBCD74E32FC5
SHA-256:	5660191495ED6B9EA68BAA8DA4E16E4EC8B824EE87831B30A4E385AC5110E341
SHA-512:	7F8BAD80051931A81816D49036AF9B0812341576E143DC82E98960AB1F2F85B4D12D330B3257ADACEE8BFA7215275895D86BAED9B35A61180BCAD58B648557D5
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/play_arrow/v7/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="m7 4 12 8-12 8V4z"/></svg>

Chrome Cache Entry: 756

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (607)
Category:	downloaded
Size (bytes):	34279
Entropy (8bit):	5.380093497198471
Encrypted:	false
SSDEEP:	384:jR8vJGijdzXbJFJybe7O3SvY7DsVtSBzfQrnVamEI58O56/oXpgmyJutM0vCwM:jR8d1XmSvY7DsVt47S0jyr6/QWf
MD5:	45C0856F9E6EF2A846E76E69C4F66502
SHA1:	F3828A513D34E55FD76419238AFFB23A63E756C4
SHA-256:	17AA18CE8EC6F42D461E3DB839952B3E47240453E383D1F270F90FE04792A810
SHA-512:	DD15E5FD59AAD1854AE3A0BAFCAFB8E6AB912028EBE241E975D19D82EFEDEFA096CDED8D8C9B3786EA1EA35C9A75037C7A62B564FE259937FF354BA2C9595207
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/bc657243/player_ias.vflset/en_US/endscreen.js
Preview:	(function(g){var window=this;'use strict';var Pub=function(a,b){a.jb("onAutonavCoundownStarted",b)},j6=function(a,b,c){g.Jv(a.element,"ytp-suggestion-set",!!b.videoId);.var d=b.playlistId;c=b.dh(c?c:"mqdefault.jpg");var e=null,f=null;b instanceof g.qS&&(b.lengthText?(e=b.lengthText\|\|null,f=b.Ww\|\|null):b.lengthSeconds&&(e=g.bG(b.lengthSeconds),f=g.bG(b.lengthSeconds,!0)));var h=!!d;d=h&&"RD"===g.YUa(d).type;var l=b instanceof g.qS?b.isLivePlayback:null,m=b instanceof g.qS?b.isUpcoming:null,n=b.author,p=b.shortViewCount,q=b.publishedTimeText,r=[],t=[];n&&r.push(n);p&&(r.push(p),t.push(p));q&&t.push(q);c={title:b.title,author:n,author_and_views:r.join(" \u2022 "),aria_label:b.ariaLabel\|\|.g.pJ("Watch $TITLE",{TITLE:b.title}),duration:e,timestamp:f,url:b.Vk(),is_live:l,is_upcoming:m,is_list:h,is_mix:d,background:c?"background-image: url("+c+")":"",views_and_publish_time:t.join(" \u2022 "),autoplayAlternativeHeader:b.Ps};b instanceof g.pS&&(c.playlist_length=b.playlistLength);a.update(c)},k6

Chrome Cache Entry: 757

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	616
Entropy (8bit):	4.417992592628411
Encrypted:	false
SSDEEP:	12:t47N9U/vmRRSpPiaYjmnjdCOmwT2IgpEQx5nnQvqsRihtnRm31IEURwpY:t4jU/vtPnYynsrwT/ox5nnSVaZ+IN5
MD5:	2E6B195059996451CC198378775A73BD
SHA1:	D1F68BBCF0F62130D235D26F30D99BC1891C96AC
SHA-256:	77729CACF85AB5D50BEB76F8C66D44DEAEEE396796F6F659CEB5A5AA2B1A8DA8
SHA-512:	317D2E52F04F6FE420E5D6D38E849CE9B8E33602191A85954BB4CCB57976FDFFAF85ED654A6D3B58ABF5FB9A94440FA397850AF73D88728B39484BADA0F9E776
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/question_circle/v5/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M15.36 9.96c0 1.09-.67 1.67-1.31 2.24-.53.47-1.03.9-1.16 1.6l-.04.2H11.1l.03-.28c.14-1.17.8-1.76 1.47-2.27.52-.4 1.01-.77 1.01-1.49 0-.51-.23-.97-.63-1.29-.4-.31-.92-.42-1.42-.29-.59.15-1.05.67-1.19 1.34l-.05.28H8.57l.06-.42c.2-1.4 1.15-2.53 2.42-2.87 1.05-.29 2.14-.08 2.98.57.85.64 1.33 1.62 1.33 2.68zM12 18c.55 0 1-.45 1-1s-.45-1-1-1-1 .45-1 1 .45 1 1 1zm0-15c-4.96 0-9 4.04-9 9s4.04 9 9 9 9-4.04 9-9-4.04-9-9-9m0-1c5.52 0 10 4.48 10 10s-4.48 10-10 10S2 17.52 2 12 6.48 2 12 2z"/></svg>

Chrome Cache Entry: 758

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	320
Entropy (8bit):	4.8695017860270475
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4jN9RotqtWIXWkjRBnmHRLmTCSkeLlzIxfIcHTJ+hu5hTO:t47N9U/vmRR9jRxmHRLkCsL9IxflMwhK
MD5:	0913F87D10776D31276AD2F0A64D4177
SHA1:	EF9EA8B47C6243293A187C61708218B1A1F6E0B6
SHA-256:	4EE171268D505E911DA178827E7EF13A9C7EB1D6F42FD12F430B4621465EA834
SHA-512:	A583DF01EF03C14B840FB699C36B8591D8386B04D65CAD74E599A4065F1C5456D4974A7DBEF6031E429D2B126A089A582794D78BCFB3F88D91C9394108619D16
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M10 20h4c0 1.1-.9 2-2 2s-2-.9-2-2zm10-2.65V19H4v-1.65l2-1.88v-5.15C6 7.4 7.56 5.1 10 4.34v-.38c0-1.42 1.49-2.5 2.99-1.76.65.32 1.01 1.03 1.01 1.76v.39c2.44.75 4 3.06 4 5.98v5.15l2 1.87z"/></svg>

Chrome Cache Entry: 759

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2241)
Category:	downloaded
Size (bytes):	162900
Entropy (8bit):	5.418285042236576
Encrypted:	false
SSDEEP:	3072:wH6w8Lrds5QlNeDoxmocB/Ei5QAZwlwgvY1varZu:a6Zs5QlNeDoxmocB/Ei5QAZwlwgvY1vX
MD5:	F762D1CB078BC638A29750A7A39D22F0
SHA1:	BB3BDA8174AE02F5BA4067179F3529C5D904721A
SHA-256:	B9C0A794910C2EEF61327122BF113801F7751BA58BC2E4786D5FA35B9172F3CE
SHA-512:	F8FA306CCBA19C84E85E49FF007791A1FF1068DE6FF67C45DAD73C3719586D879DEFA97E81B763B267EAB282D73827917D791C6B186F7061DF11423F4B9C3A6E
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iAu44/ys/l/en_GB/hKDvLPKrsa6.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometContextualMessage.react",["fbt","ix","CometRow.react","CometRowItem.react","FDSIcon.react","FDSTextPairing.react","FbtResultBase","fbicon","react","stylex"],(function(a,b,c,d,e,f,g,h,i){"use strict";var j,k,l=k\|\|d("react"),m={root:{borderTopStartRadius:"x1lq5wgf",borderTopEndRadius:"xgqcy7u",borderBottomEndRadius:"x30kzoy",borderBottomStartRadius:"x9jhf4c",overflowX:"x6ikm8r",overflowY:"x10wlt62",paddingTop:"x1iorvi4",paddingEnd:"x150jy0e",paddingBottom:"x1l90r2v",paddingStart:"x1e558r4",$$css:!0}},n={highlight:{backgroundColor:"xwnonoy",$$css:!0},"highlight-bg":{backgroundColor:"xfmpgtx",$$css:!0},primary:{backgroundColor:"x1jx94hy",$$css:!0},secondary:{backgroundColor:"xlhe6ec",$$css:!0}};b=l.forwardRef(a);function a(a,b){a=babelHelpers["extends"]({},a);var e=a.addOnPrimary,f=a.addOnSecondary,g=a.body,k=a.headline,o=a.headlineLineLimit,p=a.icon,q=a.level;q=q===void 0?3:q;var r=a.meta,s=a.testid;s=a.type;s=s===void 0?"primary":s;var t=a.onClose!=null?a.onC

Chrome Cache Entry: 760

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 320 x 180, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	16298
Entropy (8bit):	7.960955584384471
Encrypted:	false
SSDEEP:	192:Q4sId3ZrvNPAMjYWWv3cSfqsvCwDM/MD3YVmtViIl+ZWGnuavE3m0GV/2XHx/sTI:QkZDljCMW5D5DNtUnuIE3mx9axwFg
MD5:	6E89FB6348582B07539CA1F506937313
SHA1:	FE2887757A521C180F270F842054BC8EA0E96F43
SHA-256:	199DA1E7D4470EFAA1E5ED6004A85C67DE39682589576B72A47FA0FFA12127F5
SHA-512:	DA2453AF6D22E65F1C776F3D1C8F544A54F199F26DCC9C65894618443073A1A3A4176186045821FD70BDB2B41762BC4EA1C2DF6B5D6B0B71C88248F8D957745E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@.........j.bF....sRGB...,... .IDATx.....,.5._....c..N....I!.....U..5m...!0Y......../RJ...z\.O...Z....t..\|.J.7.5+.J..U4.(..........[q 2d.E..`..!....kx.7....@[;..5F.q..a....Z.x..V..-.....O........u...Z}.FLH..z^.uW.......:^\|..W..hL......o.No.P....U....\|.8.}.........z.(..'...Q..o..+...&d...x....O).Cr.....c.pF.f......W?.(o.K0.F.;&..R..%<.s=q^...2....O.?'..}"..............=.o...]....z....-..."..'.K...........?.....?.._,....?..r{.\|..o".d.:...ty.....F....MN.....d.\.<r"......o>.j5%.}?.o.;.?.....;k..!~k%.Y/..;........f.x!...'......t....56..SEd:1....v.<..\|.6E<..v.K.t.....5u..[....u...s..<+~(.e[h.m1<J...aM.kx../.yA.......d@Nx...Hh....yYni.L.V...nS.}...8Z..Dn...#H.=t.[ X~:...J...xhu..3...=...2.i..d!...m?0.f.m........P.T.y.u.....)..+W,..v.>*.B..ZJ.U.q..>........C.,.L_.H..q.a..V.[2R\|.6.D"..d..E+(.&.).Op..!..M.....1.......+.n.....C.+./.....@.`.........]=N...W......Bn..&.NHOe`/.....F.{s`k.yb.....[.63..Q..E.Sd.[sqo_wGs<$.\|.OiY.M.F.%

Chrome Cache Entry: 761

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	1052
Entropy (8bit):	7.72644939320488
Encrypted:	false
SSDEEP:	24:NEXE5I5boLsQBaykDKSnnCI5vP+6MbfkNFEF0AXKvmIauXmz:8MoppCIo6MoTEF0QKvHk
MD5:	987DF6536AEB9B1B1F781016D12DDAEE
SHA1:	65A0BF3487C7C84EBF73DA67592644CA634A3DAD
SHA-256:	3EF1ABE4E820C99715E3072171202FCD2A763BE595ABC25C9A5078D0AE980ABF
SHA-512:	4576A683B27E03EF6D601EBE316EE4F554DA053837D7CC47FFD737EEDA86507697CDD9D513FED60D72B94112BA27F6397AAA0537934E8160DC69FAE7311DADF9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............o.......sRGB...,.....IDAT8...}L.e....<?.......n.\%2.d..g5..3E..LRl...M.E3..lK.C...%s..2.3k.U..`......_. .r/........<O.`..e.p.<;.g...A...f"..P.@...s.9....I@.1.../.c...%.D...R.(.U.4&'1..%....-.+W.k.\|..V.M...0`.sRrV..X.X\|.]S4L.Xh..)eV..........9..B.L.q`N.\.o()yv.gG..f.G'.@..8.`.l...B\l\.N..9... ...Z...4.6>.`...R...Q....^{..8.xh.....%m.....6.......64....1...+_..H&@....R.. .<\|.....WR..KV.\....hL.......z.....}.u?...s...U{....t..97...^o..k5.?Y.....~...!......L..k.HV.."...7.<]Z...;..9w{OZF....B.v.(.?.]..u)..5e../.@.9p.<..Dp\|.V.Z.V.o(.0.Y.JV.....3.........g.r.G..y..aVLB<.'...`.yy.....;.Cp}.EW[..oe....!.....;..........b.`P.Q.....(..oN...8j..n.Q~.\|b\.....B.......[].....R{n~A...Bt..?..9oij6..Y.....6...s>...'s..\'O=.9O.l.....EW..z......N...(e.E.v...P.X-...X..._....Q..brZj....s.j?.;f.j(Bn..#.+......mwO__/...H.......?...zX...Gt........gW.;.....I...Z.U.XZ.._.b.xFtc.b..;.[.v.S.d...t.n++.q.;......`....;..C....'.*..h.v..p...V..P.-

Chrome Cache Entry: 762

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	6756
Entropy (8bit):	4.943823679998798
Encrypted:	false
SSDEEP:	192:Gzlkq+gKr4qpYt0pSjgiJ0MwHa4o+lld/9p6:1qxKr4qSoSjgiJ0XHDhlld/j6
MD5:	AAC18EC46CDFF4E56D77EC8EE1DEC2C1
SHA1:	81F294310D14E041A3E3F58595A33306097DE207
SHA-256:	E13171DD374E3750F9CCFC1B8AFAF4D4BBAA6838C9550FD3ECC9A39D9EA128FB
SHA-512:	C23CF65449B2ADD4BF6689CE5FB7D3904D057FB008E5C5494447872EB4D7450D5A455ADFC32B64894CCC781179CD7E6BB48C8EE4C2F62C271C57ED5349948D53
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/m1/v/t6/An8KSKhioMIUVSZ4NYh8JnAchGmGQVDA71Hulkn5JQZsO-ejSYcV2dWPMQo-ZhSa71MfFqgrDHlCASWFxgbtV3pYQqVdSus0zicQO6_n.kf?ccb=10-5&oh=00_AYBqYbL3ALTjJ1h94lclEKfUjjeQfC87MNxEvAtaFkcicg&oe=6679D166&_nc_sid=7da55a
Preview:	....KEYF....................@.....1C..1C.."@...A......................................................0.................................................H.......$...(...,.......p.......l......?...?.......B.......B............................(...@...X...p.......0...... ..............................................(...8...<...@...P...............@....r..$....... .....+?..+?8......@@.....1?H.......D....A.A\...........................\|...@................... ...........{.>@q=.A....\.....A......?Aq=.A<........... ...........\...=..@....{.>@........\.....cAt........... .............A........q=.A=..@......?A................ .......4...q=.A..A@.....Aq=.AL...q=.A..cAl.......`.....?Aq=.A............................................ .......H...$..............>..{?.....a.?..u?.a.?...................?..?.......>...................?..?.......>............H.:?H.:?(.....@0....r.@8.......4...]..?\@'A....................$...(...,...4.......t..................c.T.......k.................

Chrome Cache Entry: 763

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1115
Entropy (8bit):	4.113377443767523
Encrypted:	false
SSDEEP:	24:t4jU/vD2M2hhkiDI7XGx8u3eSRNZM2kCC+8Vjb:t/TuhdDj8uOQNrkj+8Vjb
MD5:	839C109F573BC61392F5F014B193988A
SHA1:	F5D1DFEEA48DFC3410928EB155E6AAB4A4924A39
SHA-256:	C54252CCA0B1AA43C5062281D39AA6E845679DDA9B056A5447036CBA8B3725FE
SHA-512:	DC99CC192AC95D3E62C7585393304278D4C2D52A109051D8995200C941C1DE4A68A32F09B828F6853EE745BF1CED7E3AB680F9B30E8C7B1FE8F52DD55B79C08B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/gear/v6/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M12 9.5c1.38 0 2.5 1.12 2.5 2.5s-1.12 2.5-2.5 2.5-2.5-1.12-2.5-2.5 1.12-2.5 2.5-2.5m0-1c-1.93 0-3.5 1.57-3.5 3.5s1.57 3.5 3.5 3.5 3.5-1.57 3.5-3.5-1.57-3.5-3.5-3.5zM13.22 3l.55 2.2.13.51.5.18c.61.23 1.19.56 1.72.98l.4.32.5-.14 2.17-.62 1.22 2.11-1.63 1.59-.37.36.08.51c.05.32.08.64.08.98s-.03.66-.08.98l-.08.51.37.36 1.63 1.59-1.22 2.11-2.17-.62-.5-.14-.4.32c-.53.43-1.11.76-1.72.98l-.5.18-.13.51-.55 2.24h-2.44l-.55-2.2-.13-.51-.5-.18c-.6-.23-1.18-.56-1.72-.99l-.4-.32-.5.14-2.17.62-1.21-2.12 1.63-1.59.37-.36-.08-.51c-.05-.32-.08-.65-.08-.98s.03-.66.08-.98l.08-.51-.37-.36L3.6 8.56l1.22-2.11 2.17.62.5.14.4-.32c.53-.44 1.11-.77 1.72-.99l.5-.18.13-.51.54-2.21h2.44M14 2h-4l-.74 2.96c-.73.27-1.4.66-2 1.14l-2.92-.83-2 3.46 2.19 2.13c-.06.37-.09.75-.09 1.14s.03.77.09 1.14l-2.19 2.13 2 3.46 2.92-.83c.6.48 1.27.87 2 1.14L10 22h4l.74-2.96c.73-.27 1.4-.66 2-1.14l2.92.83 2-3.46

Chrome Cache Entry: 764

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (3221), with no line terminators
Category:	downloaded
Size (bytes):	3237
Entropy (8bit):	4.865523830502584
Encrypted:	false
SSDEEP:	96:qTCN1qpXjoEx7NfcwNIYcYbb7VNfXFb7WN0TS:qTafLYXu
MD5:	E6202B83DEFD6474350841E595260599
SHA1:	8E5BDCE601C95458C50D6EE20F333A0350A7B887
SHA-256:	521F0BD8BD093F2B03D8ACCE2733F26267EF3282873068A814D15071A329A51B
SHA-512:	CB07BEE9F572E3DF84FA321DDE09DC7AE7EEBBD231B25B63C09ABAEFE4859C9176EDB52249200A554DF5E58B8B1CBE8845D51537941CE56365383ACD5C8D45BF
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S2/content/common/css/shared-shop-content.e6202b83de.css
Preview:	.shop-content--paragraph{margin:15px 0;line-height:22px;font-family:Lato-Regular,NotoSans-Regular,sans-serif;position:relative;overflow:hidden}article>.shop-content--paragraph:nth-child(1){margin:0}.form__field-instruction-text .shop-content--paragraph{margin:0;line-height:16px}.shop-content--list b,.shop-content--list strong,.shop-content--paragraph b,.shop-content--paragraph strong{font-family:Lato-Bold,NotoSans-Bold,sans-serif}.shop-content--list em,.shop-content--list i,.shop-content--paragraph em,.shop-content--paragraph i{font-family:Lato-Italic,NotoSans-Italic,sans-serif}.shop-content--list sub,.shop-content--list sup,.shop-content--paragraph sub,.shop-content--paragraph sup{font-size:10px;padding:1px;font-family:Lato-Regular,NotoSans-Regular,sans-serif}.shop-content--list u,.shop-content--paragraph u,.shop-content--underline{text-decoration:underline;display:inline-block}.shop-content--paragraph small{display:block}.shop-content--paragraph a{color:#2e33aa;text-decoration:underl

Chrome Cache Entry: 765

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	274
Entropy (8bit):	4.691767704613487
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4tSSJhpbtnRm31IE2l0kjMswple9SY:t4noU/vmRtXVtnRm31IEURwpY
MD5:	940A3FA042BCA1DB7543B418E574CCA1
SHA1:	AF122097171DD4140E913C6DA8D3501819368165
SHA-256:	3EB4200488142D98914FD98981C1C3E6F7C600D3A8E249826B5D72721DD6EE22
SHA-512:	33D87129671F2FE4AB2055C0CEF5DA1067D900EB73FAF18A430F5124DD7D2B84DEA0308FB60ADFB060EFDDB09E482894758B4180440D6522A3DA0B0AB429F5EB
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/clock/v7/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M14.97 16.95 10 13.87V7h2v5.76l4.03 2.49-1.06 1.7zM12 3c-4.96 0-9 4.04-9 9s4.04 9 9 9 9-4.04 9-9-4.04-9-9-9m0-1c5.52 0 10 4.48 10 10s-4.48 10-10 10S2 17.52 2 12 6.48 2 12 2z"/></svg>

Chrome Cache Entry: 766

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1414), with no line terminators
Category:	downloaded
Size (bytes):	1414
Entropy (8bit):	5.778716403292963
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVC4TLv138EgFB5vtTGJrdcl/1t4glvllLtd1ATw1HsLqo40Y:VKEctKomR3evtTA2tX7TGw1MLrwUnG
MD5:	40CFAE3B5462CABE5C2CFAFA279227CB
SHA1:	56CD07648D373760809DBF9515F6E5376DFF04A4
SHA-256:	CD22C5327CD617FB47A47DF6E46DD055B0B5A4775D22B394B5968284D2CFFE91
SHA-512:	E0911068E87AFAD83F2943CBFF005B146641C1F5D81E24B13C6E3ECF7CC24D2E1329F8C19DB73AD69AE9EB62B263BF2143D297221EC0452B76527BAF6770BB75
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m);}});}else{d.head.pr

Chrome Cache Entry: 767

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x600, components 3
Category:	downloaded
Size (bytes):	54619
Entropy (8bit):	7.960749060278784
Encrypted:	false
SSDEEP:	1536:4GS974COzrs5wu8a6uypsXETU0nh5e+3/cdYb:4Z8XrMwqasXE7h5e+vfb
MD5:	7514221D5A86AA2AD5D3272E52D0A0F1
SHA1:	FF6E3BBE44C6CC2C817D14CF2EE6AB24DA0AF1C3
SHA-256:	4BC5FF07682CF260528554762DF16E2311F7D409B527730F2042F8D35ED7757E
SHA-512:	A8F5817D0360F918F984FE36CB19C26E521C24105CF7A393DFA546F65166757067919D90BF063496A5F46BF754B0D4434871B44ECA96DB384E8FCB633B98D5B2
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/443820279_996576055171299_5426681423066812390_n.jpg?stp=dst-jpg_p600x600&_nc_cat=106&ccb=1-7&_nc_sid=5f2048&_nc_ohc=yOpNa5f4B0MQ7kNvgFXHOgL&_nc_ht=scontent-hou1-1.xx&oh=00_AYDmlj2FslEtdorS3sX8SiySJp-Qe_coQMiD4X1hjkEgCw&oe=665834CA
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a700100000117000081330000b73a0000e3470000d25e000064820000b8870000258f00002f9b00005bd50000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......X.X.."...............................................................................................................................................................A.<..x..p4.....................................................z...V....>...;..;....E....S.J9d...X....\|./..<.. :`........................................K..tf4......................................................R.<..p4...,..;...d.[..&\|.....d.....k@....5........uA................................Q...h....w.hz/3.s.y....ruk0.Ow...R:.4..<...W1...c....C...:........u$.k5+..Vi.aq.k..W...................................E.m...D......O...,..u......W.....%......2m....SaSM.r..y.c..b.2.OO...k...I.o....Y?.v.}......................9

Chrome Cache Entry: 768

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4160)
Category:	downloaded
Size (bytes):	12571
Entropy (8bit):	5.125586989973857
Encrypted:	false
SSDEEP:	96:PFRBsIlJpR0HKUCnT31FzXpGHX5QZnQ78fZt7UJPS/TP8tQXW2Rp0uzjzwNUlZzp:PF/sIlX6Uh8pQVyJP2TjGMCNOZzp
MD5:	0ED53CBD310AF8EAB2A4C5FABA0603B7
SHA1:	BF13625E3C02D8CA47E3BE2421F8198C8A3CCD30
SHA-256:	D8A77A25165CE8407C1CCA2CD236BDF32B89A701447ED6F4FA97A408A82D949F
SHA-512:	73397CFB17867E4EFB8478E1750CE35E3AC918A50839E20B02C0D3E6958F230F867082D2096BD34FE8B60AEDD5D8F23427C8A424AFD8E3AE21605847F16545E1
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yy/r/2pW-nUfYDFy.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("ProfileCometReviewsFeedQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="7700663896682991"}),null);.__d("ProfileCometReviewsFeedQuery$Parameters",["CometImmersivePhotoCanUserDisable3DMotion.relayprovider","CometIsAdaptiveUFIEnabled.relayprovider","CometUFIReactionsEnableShortName.relayprovider","CometUFIShareActionMigration.relayprovider","EventCometCardImage_prefetchEventImage.relayprovider","IsMergQAPolls.relayprovider","IsWorkUser.relayprovider","ProfileCometReviewsFeedQuery_facebookRelayOperation","StoriesArmadilloReplyEnabled.relayprovider","StoriesRing.relayprovider"],(function(a,b,c,d,e,f){"use strict";a={kind:"PreloadableConcreteRequest",params:{id:b("ProfileCometReviewsFeedQuery_facebookRelayOperation"),metadata:{},name:"ProfileCometReviewsFeedQuery",operationKind:"query",text:null,providedVariables:{__relay_internal__pv__CometImmersivePhotoCanUserDisable3DMotionrelayprovider:b("CometImmersivePhotoCanUserDisable3DMotion.relayprovider"),

Chrome Cache Entry: 769

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1138x188, components 3
Category:	dropped
Size (bytes):	28593
Entropy (8bit):	7.929387122849443
Encrypted:	false
SSDEEP:	768:L304jPc4ByfZD0biQPxjY915N49M6O+v0:LLc4ofZoeQBwn49M6O+v0
MD5:	5C5733184416D959D77FFDD56954B892
SHA1:	A24213662D9668011A524BCB57A7D3630234C4B2
SHA-256:	80BCC12446C8FB985751D6F59A5D61B23149517CE51A229DBA40DFD96754D60C
SHA-512:	C365557A9922D9D830EA73987ECEAAD2CD5CF20BBD2FB1E278F823690CBE8E73A45F20F8DB8832EFFEE5CB1765E4236A682C911D7D2D6923CDCDA6DBCF8BDB9E
Malicious:	false
Reputation:	low
Preview:	......JFIF........................................................................................................................................................r.."..........................................`..........................!..1A."Qa.#2Rq..BUbr......456tu........$3Ccs......%T...SVev....D......................................M........................!1..AQa."q...2..#BR......3br...S........Ts...$45C..............?..."i.R"!.......\|....Yn...>...O_.-#~.xs....\|][X..A.....j..'....+..Fy9.....?.Q...>....?......."..$DB$DB$DB$DB$DB$DB$DB$DB$DB$DB$DB$D.O...>.Y....G.V\|........M....T6.-N...\z.....CE%d.=O.C.>....8...r!......P_..._v..jS..=9CE.....Y...d.'2..JX.bl1.....DL.......I.....=\.6..}...}@..\|\|..G......o];......B..}...2..m....7.y.>............<.....uH....."!."!."!."!."!."!."!."!......b.!F.p....@....y....f....x(....$.96D.li.S.$q..".u..!c....-.....y{.......!c.J......G..#..J..$]..a.:....M!@U.U@..@.....'.%1.n\|V@.rh.Z4..Ry..S...^.&@h..z......ZD..D..D..D..D..D..D

Chrome Cache Entry: 770

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	157
Entropy (8bit):	4.866482514263467
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHLLWQlXI1/ymUwHMQMQtnQSb8:tI9mc4slhohC/vmI4NXa//1RtnQo8
MD5:	C62423FDC7866B06AF4889BE619900A2
SHA1:	93BEEE6DEA1F9CB906B794F182949F357AAC06D0
SHA-256:	C47564ECC26A15C0A2381733FBF821EDFDCC17A4A8B946380B6308C6381517DF
SHA-512:	4E7CFB526D804C30F4DAED59EA03709BF9D311BF4F30FC090F4032B9C8D12E73789798BD5A5A5AFBE889B009A1BB12E7939577055FC983520E7F93334DABD5EA
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="m18 9.28-6.35 6.35-6.37-6.35.72-.71 5.64 5.65 5.65-5.65z"/></svg>

Chrome Cache Entry: 771

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	432
Entropy (8bit):	5.323102826052106
Encrypted:	false
SSDEEP:	6:6v/lhPESgPQN4hwCLbuFAkAFmBUD1Ly0hg8oKCuTjgXOe/eLoDwR0S6kj9UGgp:6v/7MSgLaAFDy0hg8oVuTc+eWLoDsrm
MD5:	FDDA8892CCF856817FE10D8C0647E692
SHA1:	FD9EEDEB1D7F40A2C6528E356C9A0C6E5D1218A2
SHA-256:	0540C9F1C259047CE5E76C2C452219DCF90A621354B4711FBCE0CB2BA0940DFE
SHA-512:	6AA5E9C5E12B7BE80D0037147DE0485CAF5A51646227C87950D2EBA31790CF00E448147ECD58640ECA22541D2413130F24628F6EFC8DF59E77C9C6A27715F438
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yE/r/2PIcyqpptfD.png
Preview:	.PNG........IHDR..............W.?....PLTE.................................................................................................................................................!.#.../tRNS..BG....%.(....-..i.Ng................./*....G.....IDATx^..... ..........'....H..Y{.g5X[.._m.l.l..q4y.!......@$/qa../.H#%..f.T....(+..D..A....hF..s`...[tw{!.G).;....zP.^..4...f.qg7.O.^..w_J<.3......~....w%_...]....IEND.B`.

Chrome Cache Entry: 772

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	260
Entropy (8bit):	5.004023285375928
Encrypted:	false
SSDEEP:	6:tI9mc4sliHFhC/vmIj5tpS/riWcm94BkOoEg6YaJAME:t4IlU/vmwezL6yME
MD5:	4C03F409D2394DDE00F50B3EBA37F175
SHA1:	602F037E50C8E4FDEDFC2DF1D486C6F362332FC6
SHA-256:	F232790335F76F7D938BEE8C4A8B12EBFFFFB555B005B7A8B7FC1465B4BB9380
SHA-512:	E0D389BE485482A9CB9B6F90135D5E5208177C826C92E1933452629EBEBAE9D20B5729AA1BDD9600B3CCD81B2DF9D5082F0349427499F99E3AC1BE5CC3A7E1C7
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/search/v8/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" fill="currentColor" height="24" viewBox="0 0 24 24" width="24"><path clip-rule="evenodd" d="M16.296 16.996a8 8 0 11.707-.708l3.909 3.91-.707.707-3.909-3.909ZM18 11a7 7 0 11-14 0 7 7 0 0114 0Z" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 774

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 641x242, components 3
Category:	downloaded
Size (bytes):	28559
Entropy (8bit):	7.947934780458617
Encrypted:	false
SSDEEP:	768:wmU1EiUPjpORD0lgjWEzE7KS5btpezAhZnYQE7TO8eo:ZhjpO2VwmDe4ndKO8eo
MD5:	F93267A5B15F21F2C6F33E9BB893DFD1
SHA1:	3A88C25A20F79CF5FB6EBE3E34116678A43531FF
SHA-256:	C9952880919057304EEC16200CCD3F7B373D3BA7192C936B4A79FFCA9B62ED35
SHA-512:	FDD5D9EB0B32BF4E88C0A1953191329A64D9E5BB48F61CED022D456B0CCB5DEBD7722FDE2E5A56393C9FDC9CD8CCC70860B7820834EF999686D61B0F95FA3D81
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S/content/common/images/promos/Community%20Banners/freefire_id_codaclub.jpeg
Preview:	......JFIF.............DICC_PROFILE......4........mntrRGB XYZ .........+.8acsp.......................................-....................................................desc.......ybkpt...x....wtpt........cprt........rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........sRGB IEC61966-2-1 black scaled..................................................................................XYZ ...........3....XYZ ...............-text....Dropbox, Inc....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............b...k...@.Q.4!.).2.;.F.Qv].kpz....\|.i.~...7.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..................................................................................................

Chrome Cache Entry: 775

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	416
Entropy (8bit):	4.4998346788589245
Encrypted:	false
SSDEEP:	6:tI9mc4slmOVIhSXX5xkgm2OCOuLQcTVgXF78Q46yAajyBxQkm3nKYKM1xE5LQI06:t4IjEXX1OC/QcuXFYFjyrQw15L2n6
MD5:	DEDDD7D24561E4F2792208764242D5FA
SHA1:	DA1A06B033CE9F27DD891B49E71FF3269A9F148C
SHA-256:	73C8A18F388DF73D60C4AF2CF0700F889AD24D1557F79C63E37E9C9EAFC9C63F
SHA-512:	8A738BB011625C122919C4D8216E285A51CDBA0EAEC6EBF1D16CE367312CCB13C8FD61BE1FACE96FE9746DF2F106BB788182F31C2222F7840A7EEC5A9731A94C
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path d="M16.5 12c0-1.77-1.02-3.29-2.5-4.03v2.21l2.45 2.45c.03-.2.05-.41.05-.63zm2.5 0c0 .94-.2 1.82-.54 2.64l1.51 1.51C20.63 14.91 21 13.5 21 12c0-4.28-2.99-7.86-7-8.77v2.06c2.89.86 5 3.54 5 6.71zM4.27 3L3 4.27 7.73 9H3v6h4l5 5v-6.73l4.25 4.25c-.67.52-1.42.93-2.25 1.18v2.06c1.38-.31 2.63-.95 3.69-1.81L19.73 21 21 19.73l-9-9L4.27 3zM12 4L9.91 6.09 12 8.18V4z"></path></svg>.

Chrome Cache Entry: 776

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	265
Entropy (8bit):	5.699621597454565
Encrypted:	false
SSDEEP:	6:6v/lhPkjl/Mmw3gwYFE+/2MpWI1BhOsvs36SCYVyecdQjljp:6v/7Il/MwwYh2zI1XOeWTNVyeTZN
MD5:	A1E5F333AD092F16905FC1E60D404729
SHA1:	6FD7E3A35CA3AAD1BE2B46E7E69866110719EAE4
SHA-256:	4A0CF97FCD185F5DEABED3C6F3ED7991B241E3E6EE2BA67AE20589449A60D19F
SHA-512:	1E8C4CE386612D07B844CB84C72C68837B9570BE56F7280BF828D0D5D052358921CCBE844409E33EA58F49F8865D8F8C112A3920C2CD73FE592715C30C5C264B
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/ye/r/4PEEs7qlhJk.png
Preview:	.PNG........IHDR................>...0PLTEGpL.............................................%L.9....tRNS...PU.....J..K.l....yIDAT.[c```....*...N..@..Z.....L{..3.......$....d.. ....c~e.)..P.$7.......@.'......V.f~.k.3....3......l...(p@v..#......8W..g.-)....IEND.B`.

Chrome Cache Entry: 777

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1115
Entropy (8bit):	4.113377443767523
Encrypted:	false
SSDEEP:	24:t4jU/vD2M2hhkiDI7XGx8u3eSRNZM2kCC+8Vjb:t/TuhdDj8uOQNrkj+8Vjb
MD5:	839C109F573BC61392F5F014B193988A
SHA1:	F5D1DFEEA48DFC3410928EB155E6AAB4A4924A39
SHA-256:	C54252CCA0B1AA43C5062281D39AA6E845679DDA9B056A5447036CBA8B3725FE
SHA-512:	DC99CC192AC95D3E62C7585393304278D4C2D52A109051D8995200C941C1DE4A68A32F09B828F6853EE745BF1CED7E3AB680F9B30E8C7B1FE8F52DD55B79C08B
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M12 9.5c1.38 0 2.5 1.12 2.5 2.5s-1.12 2.5-2.5 2.5-2.5-1.12-2.5-2.5 1.12-2.5 2.5-2.5m0-1c-1.93 0-3.5 1.57-3.5 3.5s1.57 3.5 3.5 3.5 3.5-1.57 3.5-3.5-1.57-3.5-3.5-3.5zM13.22 3l.55 2.2.13.51.5.18c.61.23 1.19.56 1.72.98l.4.32.5-.14 2.17-.62 1.22 2.11-1.63 1.59-.37.36.08.51c.05.32.08.64.08.98s-.03.66-.08.98l-.08.51.37.36 1.63 1.59-1.22 2.11-2.17-.62-.5-.14-.4.32c-.53.43-1.11.76-1.72.98l-.5.18-.13.51-.55 2.24h-2.44l-.55-2.2-.13-.51-.5-.18c-.6-.23-1.18-.56-1.72-.99l-.4-.32-.5.14-2.17.62-1.21-2.12 1.63-1.59.37-.36-.08-.51c-.05-.32-.08-.65-.08-.98s.03-.66.08-.98l.08-.51-.37-.36L3.6 8.56l1.22-2.11 2.17.62.5.14.4-.32c.53-.44 1.11-.77 1.72-.99l.5-.18.13-.51.54-2.21h2.44M14 2h-4l-.74 2.96c-.73.27-1.4.66-2 1.14l-2.92-.83-2 3.46 2.19 2.13c-.06.37-.09.75-.09 1.14s.03.77.09 1.14l-2.19 2.13 2 3.46 2.92-.83c.6.48 1.27.87 2 1.14L10 22h4l.74-2.96c.73-.27 1.4-.66 2-1.14l2.92.83 2-3.46

Chrome Cache Entry: 778

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	165
Entropy (8bit):	4.914928959846639
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcH0wvl7MJJTTtX+nIVrtXypS0:tI9mc4slhohC/vmI4PSTTl+n8le7
MD5:	A64DE7E4B8E12D0201357414E2ED618D
SHA1:	2DEE7B56217F540787CA82D03AB6171D08E23BE1
SHA-256:	BA0D0E7E11AC72A801626946BE1B061DD59D990DD33077A37A08149917A7E930
SHA-512:	A947F3619B2150621376D0CAC479AB6F522CAE7E651A917565050A4BC5ABCE6E60B3652DAC4D1CF90C0255FA09FC8EAA9B31EB6EF6A23D2E31AB497C86AAACB4
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M15 19v-8l7 4-7 4Zm7-12H2v2h20V7Zm-9 6H2v-2h11v2Zm0 4H2v-2h11v2Z"/></svg>

Chrome Cache Entry: 779

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	442
Entropy (8bit):	4.813019877520226
Encrypted:	false
SSDEEP:	12:t4noOAvmnqtXy+R/Ro1ImoXHNR50buAD2NfnRimbf:t4o7vNC+R/cImoXHN1Nf
MD5:	8508DD8336C60695AFCF1158C2EF0EF2
SHA1:	32CC87A7AE016449C6038284CEDDBA3E3D0B1791
SHA-256:	DEBC90222AA11F028051B9E116A7AD054ED560854FB326A5C38254DA354CFDEF
SHA-512:	35DE791E5CE1F47AD1FF89A594DB6FE055920481ED73001EAB97C12A7DC31077A6C5B64740FBFC682923BD98149F4A67AD0C027532EA1BF7EAA3C4D45579E930
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" style="enable-background:new 0 0 24 24;" viewBox="0 0 24 24" width="24"><g><path d="M14.97 16.95 10 13.87V7h2v5.76l4.03 2.49-1.06 1.7zM22 12c0 5.51-4.49 10-10 10S2 17.51 2 12h1c0 4.96 4.04 9 9 9s9-4.04 9-9-4.04-9-9-9C8.81 3 5.92 4.64 4.28 7.38c-.11.18-.22.37-.31.56L3.94 8H8v1H1.96V3h1v4.74c.04-.09.07-.17.11-.25.11-.22.23-.42.35-.63C5.22 3.86 8.51 2 12 2c5.51 0 10 4.49 10 10z"/></g></svg>

Chrome Cache Entry: 780

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50910)
Category:	downloaded
Size (bytes):	52174
Entropy (8bit):	5.754806130755411
Encrypted:	false
SSDEEP:	1536:jIjoIoAB+7ivUdCycxXO39eEcV8iWQAD3sPOgtCI0OYbLo:WCtaUdKxI9eEcV8ZM2g6BLo
MD5:	1E887667DC77A8B4EA339599E01DE6D1
SHA1:	6BA403365D1BDE1A86ACD2F356CE04B9ABF78545
SHA-256:	F59EBA7BF908507893DFA34D687DC40AD56765B43044ACF524069DCBF5B6E77E
SHA-512:	70C94C026C218277AD2A9B9F1EEF9996F7B4B01FE32F4E8402BB573CAC0581D1469DC0BAEE2180320072FD7E7759D2138B7C8E697824116875B5E84D63C04A5A
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/th/9Z66e_kIUHiT36NNaH3ECtVnZbQwRKz1JAady_W2534.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function X(U){return U}var a=function(U,Z,A,d,e,g,n,K,Q,G,F,O){for(G=(O=A,74);;)try{if(83==O)break;else if(14==O)O=P.console?d:26;else if(O==Z)G=38,K=Q.createPolicy(g,{createHTML:L,createScript:L,createScriptURL:L}),O=26;else if(O==A)Q=P.trustedTypes,K=n,O=U;else{if(26==O)return G=74,K;if(53==O)return K;O==U?O=Q&&Q.createPolicy?Z:53:47==O?(G=74,O=14):O==d&&(P.console[e](F.message),O=26)}}catch(J){if(74==G)throw J;38==G&&(F=J,O=47)}},P=this\|\|self,L=function(U){return X.call(this,U)};(0,eval)(function(U,Z){return(Z=a(80,76,46,3,"error","ad",null))&&1===U.eval(Z.createScript("1"))?function(A){return Z.createScript(A)}:function(A){return""+A}}(P)(Array(7824*Math.random()\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=

Chrome Cache Entry: 781

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 36707, version 0.0
Category:	downloaded
Size (bytes):	36707
Entropy (8bit):	7.990413970359923
Encrypted:	true
SSDEEP:	768:9pYI95Cghum1tEzi5H0oXOWws7fIWbz/qf4iiIWzDcBPHxLIbYKov:9pYIPhumtEz8Uowsrb7qf4ijW/cnLIb+
MD5:	79EDED60054EC31A810B67864D975A8C
SHA1:	51360DFDFBC7B7115744962783A822CE0338A0BE
SHA-256:	475F5B3CB03384633A4E870C3377B992F13AD8246A23173A282BE11FAF2C85FB
SHA-512:	C03A6FCBC3774FB8CB9E26C9A1166590004BE81F96AABBC3166DDAE478D7564C328D32F6167861E1038AEE1F99BA346D3DEB5F4DB9CB546B7A934B4E19506DA6
Malicious:	false
Reputation:	low
URL:	https://dl.dir.freefiremobile.com/common/web_event/official2/dist/client/fonts/GFFLatinW05-Regular.7b8bcd3.woff
Preview:	wOFFOTTO...c.......t...............s........CFF ......k........GDEF..l...."...".R.BGPOS..m.......n....GSUB..}....i...../..OS/2...L...W...`h.#.cmap...........j.a..head...P...6...63)..hhea.......!...$.".khmtx.............m.maxp..............P.name............P..post........... ...2x...T...0..CwC.N..L.z.5.J.U\Y.QQqApCPAq..P.A.1.ML..q.=.w..........%..%...k.}U.....?.9JuW...uoU.....,..#4.]x........11.......D.6.S.9.&..Uxx.z..f..o.......Fs.q.M..d......cD....FLS.....1]..&....e..df..)3.Y.\|.d.1[.l. s.9..3.....}.....Y.ua.F...1..d........d..q.8v.;...~.~..gW....l6{.=.^`.....{.}....8..9.g..qM.V....u.B....n...%p....l....[.....6q;.=.a....]......{.)..t...N...u.t.....^..]..F....K.....}..F.B..n.n.n.n.n...GwVW.+.]...U.....899.\..;.9.prw.q.......S..H...IN.f;e8}......NYN...9..t..S.S..5..N...t.../....7....\|...........Q\|"?.O.......2~...........3\|._._.o..O...]..H.+..,Bs...-t....B..%....D!Y.%......V.?.....^.+....r.J.#<......Q.k.....&b+.C....!b.8P.*.....4q..!f..k.-b.xX<%....

Chrome Cache Entry: 782

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	45660
Entropy (8bit):	5.907863825754591
Encrypted:	false
SSDEEP:	768:D2J8FpAuYQFcenF9AclzvnxQSAyn8+cQGQMoFLyZi:D2J7uYrenrASzaSA3+cCK4
MD5:	E9385DCE39C5167754C02EE58CBE9539
SHA1:	3CEC73883BAC7811DEAAEAAD37FD169A13EA7291
SHA-256:	E790F53E529219A3FB8B3579CB5BEB36276C2A98C02D612757CCEC5917940B79
SHA-512:	8F046BC02C35E87CB79A54265FA7008AEF54BC3015438307A70850F00FE49EACEB48CD50EE77AF906DBA719A201305B6E3E0F215CC3D54D23BE457CD9FDBA78F
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/m1/v/t6/An8CYKC8XqtM-fkmXlVHrp9oVgPgDVVlGZu_Cy7Q_5xW9yYY3lOzMNVDCq9D1ThbbsbnpjfFmGnfIPhKX6oePvUMOYOvShQauKw.kf?ccb=10-5&oh=00_AYD07_nPxgbm5FmbefRT2bPhnCWwYTmoGZCLjK7qyYsc9A&oe=6679D5CB&_nc_sid=7da55a
Preview:	...KEYF....$................. .............H.....4C..4C...@..pB..............................4C..4C......................................................................................................................................................Adobe.d..........................................................................................................!1a.Q..Aq"..#2B......$CSbr.R........................!1.AQaq"B............?..i\|..~.......d.60...h..D.L.3.OB..`..>..eN:).m?.J3x..y..c....1.\|jG...b...?....KH.#.F.Y....MOP<.......}...bB.....c..T.vp...R\|i?...).i49.s?...2.......h'.9.W...G}Tc..V...3......A...i\|..~.....H.3....x..bi,..Gm..G.u8....?ve....J....{..\DW.$t).O..(.&...m'.5Y..U5...&..itM:1.j.t2Q.+...#P........!..h......[~}6.qJ.g...y.G........ ......._.....F..P........./..-.V.&g!..8.U[.[.!.h...y.?...6..D....2Q.f...Fs)Z.Vd... .zB.....wD.7..h.2B.W.V...Z..l.....\6!5...Kc...&.9~.}.....q.\|~~....6..P....:.C....G.\|.~....2...at.vMj-ZL.C...j.3vm`....[.K..)...#;J.1..

Chrome Cache Entry: 783

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, Apple iTunes ALAC/AAC-LC (.M4A) Audio
Category:	downloaded
Size (bytes):	6636
Entropy (8bit):	4.762377523885447
Encrypted:	false
SSDEEP:	96:Gm6G1ItjXwOJvVLATqcQLSIt8xmumUu1ixHRs:j60I1BJvNPcQH8xmumUuixHRs
MD5:	B3C466B2D513DB8CCD0F4D7C4648E05B
SHA1:	6BC28BFDBA5C7DF8B455A3B88D4C4D9523CCA860
SHA-256:	4B4A165585BBA9DA803F7BE0C0F06EA2B97BC1C61B4BF6921AD44E8C6369BF2F
SHA-512:	43B6E557980C00C5EBA6D5729E7865DF82707D9611477FB2E3EC271C7EB19ED6870723F68ADDBE254D7867DA5FE89ADD8F10BA2AFD75C2B101140FD3F6F8C891
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/search/audio/success.mp3:2f77e589293d6b:0
Preview:	... ftypM4A ....M4A mp42isom........moov...lmvhd.............D..T.................................................@...................................trak...\tkhd....................T.................................................@...............mdia... mdhd.............D..T.U......"hdlr........soun.................[minf....smhd...........$dinf....dref............url ........stbl...gstsd...........Wmp4a.........................D.....3esds........"........@.............................stts....................stsc.......................hstsz...............................................n...f...`...k...j...f...h...a...i...e...i...b........stco................udta....meta......."hdlr........mdirappl.............oilst.....nam....data........got_it....cpil....data.............pgap....data.............tmpo....data.............(.too... data........iTunes 12.3.1.23....----....mean....com.apple.iTunes....name....iTunSMPB....data........ 00000000 00000840 000002AB 0000000000004915 000000

Chrome Cache Entry: 784

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	709
Entropy (8bit):	4.22525639505645
Encrypted:	false
SSDEEP:	12:t4noU/vmRhHmsiPU0BSMmpa8gQL8nJK18IyNzT+OfIXSVHIvEdQF60hRp2BquDnc:t4oU/vgHIBBSMcNgQL8nJKCzN1f/H2uk
MD5:	DB14717F8EB9721D86499B6B2C41E379
SHA1:	069496D31A0A689D73513F90E5BD72E2843581EC
SHA-256:	15308D594C7B489C6AC3F05C0CB895EEF01DC2F0589FF08B3332C9500CDF7152
SHA-512:	A089FD02232B9276377DA115205BC35DF666582F3697558E109A660DDB2AA8215DCB5D81CA54DCC2451E8688555B6DC19316C4D4098D12803B6379DC42C78178
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/youtube_shorts/v8/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M10 14.65v-5.3L15 12l-5 2.65zm7.77-4.33-1.2-.5L18 9.06c1.84-.96 2.53-3.23 1.56-5.06s-3.24-2.53-5.07-1.56L6 6.94c-1.29.68-2.07 2.04-2 3.49.07 1.42.93 2.67 2.22 3.25.03.01 1.2.5 1.2.5L6 14.93c-1.83.97-2.53 3.24-1.56 5.07.97 1.83 3.24 2.53 5.07 1.56l8.5-4.5c1.29-.68 2.06-2.04 1.99-3.49-.07-1.42-.94-2.68-2.23-3.25zm-.23 5.86-8.5 4.5c-1.34.71-3.01.2-3.72-1.14-.71-1.34-.2-3.01 1.14-3.72l2.04-1.08v-1.21l-.69-.28-1.11-.46c-.99-.41-1.65-1.35-1.7-2.41-.05-1.06.52-2.06 1.46-2.56l8.5-4.5c1.34-.71 3.01-.2 3.72 1.14.71 1.34.2 3.01-1.14 3.72L15.5 9.26v1.21l1.8.74c.99.41 1.65 1.35 1.7 2.41.05 1.06-.52 2.06-1.46 2.56z"/></svg>

Chrome Cache Entry: 785

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (562)
Category:	downloaded
Size (bytes):	159929
Entropy (8bit):	5.64491442360871
Encrypted:	false
SSDEEP:	3072:r06dN/8rVtPpt6nYfiIHuASvnPgkY6pMmwb:ldN/8rVNpcYfiIHuASvnPRY6pMz
MD5:	5CFD9E78F657FDDA75D6B57F7FDE0655
SHA1:	2DDBCA62853DEB7197E1C657ADB59195EEF2899C
SHA-256:	EAD4747C2BA84A0A2FBB4357B9D9C2B199220E56032379CC7D1DCF3EB72427DD
SHA-512:	B28290CAB7E13135FF5C9BF9220EED11D8C7D3922AFE77CE4E95534E63C2EB269262E69F1177D3389E80A88267672215B9EFBAA5765ED90EA93972BE093B2B9F
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/bc657243/player_ias.vflset/en_US/offline.js
Preview:	(function(g){var window=this;'use strict';var bwb=function(a){var b=new g.bP("und",new g.HQ("Default","und",!0));b.captionTracks=a.captionTracks;return b},cwb=function(a){return new g.fg(function(b,c){var d=a.length,e=[];.if(d)for(var f=function(n,p){d--;e[n]=p;0==d&&b(e)},h=function(n){c(n)},l=0,m;l<a.length;l++)m=a[l],g.ica(m,g.ib(f,l),h);.else b(e)})},L6=function(a){this.j=a},M6=function(){L6.apply(this,arguments)},dwb=function(){M6.apply(this,arguments)},ewb=function(){M6.apply(this,arguments)},fwb=function(){M6.apply(this,arguments)},gwb=function(){L6.apply(this,arguments)},hwb=function(){M6.apply(this,arguments)},iwb=function(){M6.apply(this,arguments)},jwb=function(){M6.apply(this,arguments)},kwb=function(){M6.apply(this,arguments)},lwb=function(){M6.apply(this,arguments)},mwb=function(){M6.apply(this,arguments)},nwb=function(){M6.apply(this,.arguments)},owb=function(){M6.apply(this,arguments)},pwb=function(){M6.apply(this,arguments)},qwb=function(){M6.apply(this,arguments)},rwb

Chrome Cache Entry: 786

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	12996
Entropy (8bit):	7.9662740110146055
Encrypted:	false
SSDEEP:	384:DwSEz6W2APrtCQP7417ezizMW/9owEMpclep:DBupTtH4Jl/FB
MD5:	9AECEAB37CB5CA89E39EB0AD33806BDB
SHA1:	96012741DC17BF61C8DDABD346A177F8FC0BB724
SHA-256:	A4D1848DA3C1C75F39B9DF09ED1D30776ADADE8212E6D8CB3B3BD5999C36CE29
SHA-512:	50D58C6B794F2D23DCABEC2929FD1EE91465569F212EF743C0DA6C55C297EECBB328463AFFCF6AF4DC43AAC547E5A9A07FD12825F3CB6949E43E4D60BB30CD56
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-1/241270460_1943112789170907_1967367247279035119_n.png?stp=dst-png_p200x200&_nc_cat=1&ccb=1-7&_nc_sid=5f2048&_nc_ohc=1XNCsKdZNVcQ7kNvgEm2iAq&_nc_ht=scontent-hou1-1.xx&oh=00_AYC4FSoPI_caF-qQXmeiAUE38hRwGoIYd4Upuifu1nR3iA&oe=66584D80
Preview:	.PNG........IHDR.............":9.....sRGB...,... .IDATx..w\|UE...9..sK.....{/./.....A@W\..."`.........W,.... .t...-.....IBhIHr..8_.'...{....g~.<.?.j..R...~...'..\..+,.....%!..rI...\..+,.....%!..rI...\..+,.....%!..rI...\..+,.....%!..rI...\..+,.....%!..rI...\..+,.....%!..rI...\..+,.....%!..rI...\..+,.....%!......8.<.?..B.!.....\p..;z..K.,.8q..Q.,.2M.8....h~.P....#.DI.=. @<f...G....@B...{..^.V5I...].M....y?.....3.......Dm8~4s..-.^.l.-.bz.C.fC..`Z.i....w..s...S......ar~>.c.<kn...G.I.${.L .m..g..k...f.?..`J J .D.3Z...Q...6P...4o.W..}....z.jD.S.nP."..>....DX.... ..G.$0M8v.....,Y..u{....X.E.................C..zz.V..t..}.N..5..%..C.,...1..Wz.Uba..N.`I.d. ....;...v.U[......-.$.B.....,...1v.m1S.....`.V.;...O..[W...1.:3t.QV...J),g\|.EQ.H......;....k......{..AL."."b......R..B.a..(.:.&..H5k.j.........N.z^U.,04...8.U>aQJ%Y.x..?.;6m_.l...kvn...d.dP$....m..~...$.....O.#...L.t.<EJi.Y.>];...m..jAM...;#ne.....4..........eG...@.A.A.....3.BL. @&.........e

Chrome Cache Entry: 787

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	287
Entropy (8bit):	5.015529132385196
Encrypted:	false
SSDEEP:	6:tI9mc4sl5RtOU0p4nEVkK+CJ1JrycDQnVkxGjU2ZIvhC:t4vfOADKPn5yB5jPMhC
MD5:	64090EE2574D7F41444485BDD8E4A04B
SHA1:	D2342EBF52614F1EAFD07BBFDC72E3F65A1963B8
SHA-256:	483E819776ECFED148800D9E881C1C72F4279D74264B49A38346C26358EF98DC
SHA-512:	E936442EBA58D4438749791365F38CE7D39B7291F3BB032D35FBB4FAED6AF7E14C9CA7D4FC57A62B90A950C3868AF0755C4530BB5DF8A05CA9FC27044BD522C6
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_fill/unplugged_logo/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <path fill="#FF0000" d="M6,18h12v1H6V18z M22,6.2v9.6c0,0.66-0.54,1.2-1.2,1.2H3.2C2.54,17,2,16.46,2,15.8V6.2C2,5.54,2.54,5,3.2,5 h17.6C21.46,5,22,5.54,22,6.2z"></path>. <polygon fill="#FFFFFF" points="15,11 10,8.35 10,13.65 "></polygon>.</svg>.

Chrome Cache Entry: 788

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	278
Entropy (8bit):	5.085951538066368
Encrypted:	false
SSDEEP:	6:U4SO01urxOcHOhldrfEHF3+lLB3ZXKbp7w8Q1hdrfEHTI:U4SO01u0cilSl+llip73AhSM
MD5:	0859F0E01014515A05F1738B1AD2975D
SHA1:	2CE5A8530A35A3DF627384C63ADD94B4324AB222
SHA-256:	D617F26025F9D24F380F09A7FA7BEC6D0306163E75DE36E17FC198F4D8450A5B
SHA-512:	9809005EC4A132241800953B2B0942938BD8C57BFABCF921DC2902B99A2394D9E7BE06D008230ACF2AB0BE746247B1633F15C47A01C945C1BA68067583F93DF8
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S2/content/common/js/third_party_common.0859f0e010.js
Preview:	"use strict";function genVNVoucherReminderMsg(e,n,r){var t="";if(1==r.isThirdPartyMerchant&&"1Pay"==r.paymentChannel){$(".confirm-content").css("height","350px");t=e+" "+r.channelPrice+".<br/>",t+="<br/>"+n+"<br/><br/>"}else $(".confirm-content").css("height","260px");return t}

Chrome Cache Entry: 789

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 246x138, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	7198
Entropy (8bit):	7.971319530387594
Encrypted:	false
SSDEEP:	192:LFigdHguUZ56zULnEPJ+fNjH8Af5aGGMLB:LFBHU5amHBaGGMd
MD5:	DF2646C292F927DC1D04F80FF1B169ED
SHA1:	05F57C14B4DFC993D8470EB26B2BB9A5927450CF
SHA-256:	689CA9DA45B868C5756D6D926A8497554E5133CD0EF87AF0770F7F794A9F775C
SHA-512:	6978B4C12C5DFDC9A7A97A0DB18FB9CD38D8E41975EE26DEE092DF42CCB71F800A0133FA6062033DF987255CAC532C98B7E502886F98EA4A16475A82C8A2CCF7
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/Ih70PEQTTDY/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLALHBCF72cYBrxdigsUR4DNW7Fdsg
Preview:	RIFF....WEBPVP8 .....f.......>Q".D#.!.\..8...!..z..`&.p..zW?+.w._....0<..g.{.................r.....S......._D.=.....&...C..........b.].........o......\|.........o`....?.....~.{.~..P.......e...G.....G.?....>.@=.?...?........'./..i...7....?.?.._.O...?(>....;....................;....._....>........op.......}..._.S...O..j..............o...?f>p..~....B._..~.r).G...1...&..8..AG...`..L.v.a.).r.....FZ..J.'02.Y..SP...ed`v..7)..L.. .Q...{l[.y..3.......H.!..!..CB;..B0.....v.e.j..U..r......E3.q.46.~..7cV.... .\|...h......Y.O0_....H..#.!..;[..?T.k..W..k. #5.Ap.(..b..[Y(.....84$\..>.h.n...Z......U0.F...<.E.<..Q.....O.....v.e.t.b..?.q..Wp3.~x...O6%z..x.....pz.?v.A...pP.lGt.....T.._...9..A..%>...'.(.s..yP.NUX.w5..;........(.^..b/..I.....f.#0 3%.I...t.v...b...>..sW.g>...+/]......Q.r^]..P@...$}.Q..r.....O=.v.%p.v.<.vy..zWW....Y%1...[?u.z...COe &.Y..iN.1..2.....1..Ac.^uU(......HP....A...0.D;..nuKTT;l.h:.o.Nnd..J..v.....gE.k.."...M.....O.J_4.Z.......J..A-..V@.....

Chrome Cache Entry: 790

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	778
Entropy (8bit):	4.260772867505465
Encrypted:	false
SSDEEP:	12:t4tM65jghuamzC41gZVz1QDUQ2R6a2qanGgmonPQ/0:t4tMMjwuamzz1gZLQER6lLmoI/0
MD5:	C912F19C8AAE23F530DFDDD4D7BBA780
SHA1:	40C607FABFDE63E2A4D92462FEC123A2D52D1F8E
SHA-256:	E593ED5B1D641EA4F61CD2308346A608EE088E293AC177881E4CB43969B87E05
SHA-512:	377D00EF8981C127EB1A573731B1EC22DA072DED23E7D920834C88F280FEFD160885D9EFEF3F8C6B942DB280685ACED73B2D7240ED55FB85947D8180A1FFBC37
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_fill/shorts-dislike/v2/32px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M6.15895 20.0023C5.32221 20.0023 4.54031 19.586 4.07317 18.8918C3.30492 17.7502 3.31241 16.255 4.09205 15.1211L4.82045 14.0617L4.14538 12.4963C3.74297 11.5632 3.84031 10.4898 4.40399 9.64424L5.50013 8.00004L5.50013 6.00231C5.50013 4.89774 6.39557 4.00231 7.50014 4.00232L20.0001 4.00239C21.1047 4.0024 22.0001 4.89783 22.0001 6.0024L22.0001 19.1736C22.0001 20.0073 21.7396 20.8201 21.2551 21.4985L16.1368 28.6641C15.9224 28.9643 15.5279 29.0747 15.1888 28.9294C13.4238 28.1729 12.4653 26.2504 12.9234 24.3856L14.0001 20.0024L6.15895 20.0023ZM27 18.5001C28.1046 18.5001 29 17.6046 29 16.5001L29 6.00006C29 4.89549 28.1046 4.00006 27 4.00006L24 4.00006L24 18.5001L27 18.5001Z"></path></svg>.

Chrome Cache Entry: 791

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6105)
Category:	downloaded
Size (bytes):	68157
Entropy (8bit):	5.40947569693895
Encrypted:	false
SSDEEP:	1536:ZwJnPfcrnVpt6/d+aOMj1BnwSo3XItkuSQFORA0aIXF:GJnPfcrnDMj1B0RA0aIXF
MD5:	BBA526BAC438BCFB20818304A0803922
SHA1:	17CF2BB3331EF9381208A64F4DC3707AA198CAD4
SHA-256:	8A881535457996A4203E2BFF32604D11B53E71F4F1ACF137DA52DCC6CB137022
SHA-512:	ED30502A5F1D36BF79EF2CDACC0D25F8E43B8B0B5DB58A2AA380EDAD1F5C817ED0E9C5D0F1B7F187B4602725A5383AB65D1370D50073522B75A1855663DC9A64
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iXK94/yb/l/en_GB/gnHzfwVhpKg.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("BadgeCheckmarkFilled12.svg.react",["react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react");function a(a){return i.jsxs("svg",babelHelpers["extends"]({viewBox:"0 0 12 13",width:"1em",height:"1em",fill:"currentColor"},a,{children:[a.title!=null&&i.jsx("title",{children:a.title}),a.children!=null&&i.jsx("defs",{children:a.children}),i.jsx("g",{fillRule:"evenodd",transform:"translate(-98 -917)",children:i.jsx("path",{d:"m106.853 922.354-3.5 3.5a.499.499 0 0 1-.706 0l-1.5-1.5a.5.5 0 1 1 .706-.708l1.147 1.147 3.147-3.147a.5.5 0 1 1 .706.708m3.078 2.295-.589-1.149.588-1.15a.633.633 0 0 0-.219-.82l-1.085-.7-.065-1.287a.627.627 0 0 0-.6-.603l-1.29-.066-.703-1.087a.636.636 0 0 0-.82-.217l-1.148.588-1.15-.588a.631.631 0 0 0-.82.22l-.701 1.085-1.289.065a.626.626 0 0 0-.6.6l-.066 1.29-1.088.702a.634.634 0 0 0-.216.82l.588 1.149-.588 1.15a.632.632 0 0 0 .219.819l1.085.701.065 1.286c.014.33.274.59.6.604l1.29.065.703 1.088c.177.27.53.362.82.216l1.148-.588 1.15.589a

Chrome Cache Entry: 792

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533)
Category:	downloaded
Size (bytes):	5547
Entropy (8bit):	5.234104150395812
Encrypted:	false
SSDEEP:	96:+E8YzVFXsVws8HYnkfI+C4yVdbaiGkNF2LSaAuEeRzgf5j6YJR79hamaWslv0Rw:+ajsVws8Hlzg2i/N9hzWgf5jhJR79haZ
MD5:	936A7C8159737DF8DCE532F9EA4D38B4
SHA1:	8834EA22EFF1BDFD35D2EF3F76D0E552E75E83C5
SHA-256:	3EA95AF77E18116ED0E8B52BB2C0794D1259150671E02994AC2A8845BD1AD5B9
SHA-512:	54471260A278D5E740782524392249427366C56B288C302C73D643A24C96D99A487507FBE1C47E050A52144713DFEB64CD37BC6359F443CE5F8FEB1A2856A70A
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/aef0ced3/jsbin/intersection-observer.min.vflset/intersection-observer.min.js
Preview:	/.. Copyright 2016 Google Inc. All Rights Reserved... Licensed under the W3C SOFTWARE AND DOCUMENT NOTICE AND LICENSE... https://www.w3.org/Consortium/Legal/2015/copyright-software-and-document../.(function(f,h){function t(a){this.time=a.time;this.target=a.target;this.rootBounds=a.rootBounds;this.boundingClientRect=a.boundingClientRect;this.intersectionRect=a.intersectionRect\|\|q();this.isIntersecting=!!a.intersectionRect;a=this.boundingClientRect;a=a.widtha.height;var b=this.intersectionRect;b=b.widthb.height;this.intersectionRatio=a?b/a:this.isIntersecting?1:0}function d(a,b){b=b\|\|{};if("function"!=typeof a)throw Error("callback must be a function");if(b.root&&1!=b.root.nodeType)throw Error("root must be an Element");.this.g=y(this.g.bind(this),this.B);this.D=a;this.h=[];this.i=[];this.s=this.L(b.rootMargin);this.thresholds=this.J(b.threshold);this.root=b.root\|\|null;this.rootMargin=this.s.map(function(c){return c.value+c.unit}).join(" ")}function y(a,b){var c=null;return function

Chrome Cache Entry: 793

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, Apple iTunes ALAC/AAC-LC (.M4A) Audio
Category:	downloaded
Size (bytes):	6529
Entropy (8bit):	4.679709782974826
Encrypted:	false
SSDEEP:	96:xm6jey1gwRj0yKmn1Z2rUKO5YhhzFEyDeg5n:M6CIgwJ0xm1wS5Yvzt
MD5:	BFC8E752C754A9B52D6BD4A963A7B9C3
SHA1:	7DDEF10D9AD3F43C89164B7DEBBC9CE26512B036
SHA-256:	704A5E15AE1068E4DF52A8BCFF04270EFDAD595CF685E0ECCFF86AB335471A46
SHA-512:	FF6415C30F7839666CE0BDB20FEA71D19630EA75904A4AAD710DC6431604532FBA48CFDA4B326BEAA6502ED727A0A9208DD624A4AC37B7601526BD611D7364BA
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/search/audio/failure.mp3:2f77e58916764e:0
Preview:	... ftypM4A ....M4A mp42isom........moov...lmvhd.............D..T.................................................@...................................trak...\tkhd....................T.................................................@...............mdia... mdhd.............D..T.U......"hdlr........soun.................[minf....smhd...........$dinf....dref............url ........stbl...gstsd...........Wmp4a.........................D.....3esds........"........@.............................stts....................stsc.......................hstsz.......................~.......k...................a...c...[...Z...c...`...d..._...^...\...e..."....stco................udta....meta......."hdlr........mdirappl.............nilst.....nam....data........error....cpil....data.............pgap....data.............tmpo....data.............(.too... data........iTunes 12.3.1.23....----....mean....com.apple.iTunes....name....iTunSMPB....data........ 00000000 00000840 00000063 0000000000004B5D 0000000

Chrome Cache Entry: 794

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	563
Entropy (8bit):	4.367744360532535
Encrypted:	false
SSDEEP:	12:t4noU/vmRTKd2aCJAzyXDMhkVFCzzZvSbeW03LxgI:t4oU/vo49yXghf5UTI
MD5:	3102D9E6EB6482A42839EFF1E5F4CB83
SHA1:	151E7A7B018C590EFF801936C8B3165E21D1F388
SHA-256:	A79054C0A39DB68BD70F2277EE512312190F32D0CCFB12B2B15A8DC833DA4772
SHA-512:	4131362A77102F48C615E40ECC95599300A239BF339831DA47E85A328929EAAB6AC63B67D64CE6FCBEB120D85865F5415C2188877822861BADCE5B908D206A0B
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm0 1c4.96 0 9 4.04 9 9 0 1.42-.34 2.76-.93 3.96-1.53-1.72-3.98-2.89-7.38-3.03A3.996 3.996 0 0016 9c0-2.21-1.79-4-4-4S8 6.79 8 9c0 1.97 1.43 3.6 3.31 3.93-3.4.14-5.85 1.31-7.38 3.03C3.34 14.76 3 13.42 3 12c0-4.96 4.04-9 9-9zM9 9c0-1.65 1.35-3 3-3s3 1.35 3 3-1.35 3-3 3-3-1.35-3-3zm3 12c-3.16 0-5.94-1.64-7.55-4.12C6.01 14.93 8.61 13.9 12 13.9c3.39 0 5.99 1.03 7.55 2.98C17.94 19.36 15.16 21 12 21z"/></svg>

Chrome Cache Entry: 795

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	561
Entropy (8bit):	4.664076278294878
Encrypted:	false
SSDEEP:	12:t47N9U/vmRBoGaBoVOLgbvSFWeGzE+5OPiufVKJXbsUFSQiYHUloL:t4jU/vRGaBoc2SLX9fUb12NSL
MD5:	627CBC730DA8617E4FDA79BB7FC35F2F
SHA1:	C1CF15F3D7BD2AC64B329E353D26771F5C13FE77
SHA-256:	817119ECC2BC54779A271A53B347E8AF33C2544934D642D7877E99267BB0745B
SHA-512:	FB2299DC0272ECE197FE5656C0ABF1E6CF96F5D25F3D135D2DCE3D7CF50C189BC0C9C73D1B042020DB47B2FD680230C61F9A6D599D385CEFFAC87F20CEB69555
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M18.77,11h-4.23l1.52-4.94C16.38,5.03,15.54,4,14.38,4c-0.58,0-1.14,0.24-1.52,0.65L7,11H3v10h4h1h9.43 c1.06,0,1.98-0.67,2.19-1.61l1.34-6C21.23,12.15,20.18,11,18.77,11z M7,20H4v-8h3V20z M19.98,13.17l-1.34,6 C18.54,19.65,18.03,20,17.43,20H8v-8.61l5.6-6.06C13.79,5.12,14.08,5,14.38,5c0.26,0,0.5,0.11,0.63,0.3 c0.07,0.1,0.15,0.26,0.09,0.47l-1.52,4.94L13.18,12h1.35h4.23c0.41,0,0.8,0.17,1.03,0.46C19.92,12.61,20.05,12.86,19.98,13.17z"/></svg>

Chrome Cache Entry: 796

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	244464
Entropy (8bit):	4.931089709701186
Encrypted:	false
SSDEEP:	1536:Lhxb86ybNZas8WNt8SPq9hDXtse1UI9MhReQec1tvfvmJkSdYy0HJY1qSZYs3QM/:ps8FbSCcL2YTMcN7T9yccKd6fo60K
MD5:	F4BF0728E188D0B1D7F8407AD3F6FACE
SHA1:	8BF98332BFBB0A3FF40979679FA09A0BB5944458
SHA-256:	239C97E19956677CFE6BD2BE67FE50E07A23F535A86B3A5EFE0FB3502AD7D815
SHA-512:	B781DC35D6039C96106C62AC782620805CF12EBAEEFA76183CF78E0C8518BCD2C5EEB4EF902B9BC35EB483D5E84966035BE2A174AA3E4F5750419725FF0C101A
Malicious:	false
Reputation:	low
URL:	https://dl.dir.freefiremobile.com/common/web_event/official2/dist/client/css/e845fbd.css
Preview:	.error[data-v-77389f86]{position:fixed;top:0;left:0;z-index:1000;width:100vw;height:100vh;background-color:#000;background-image:url(https://dl.dir.freefiremobile.com/common/web_event/official2/dist/client/img/error_bg.7cc7c32.jpg);background-size:cover}.error-content[data-v-77389f86]{display:flex;align-items:center;justify-content:center;flex-direction:column;height:100%;padding:20vh 0;margin-top:-3vh;color:#fefefe}.error-icon[data-v-77389f86]{height:14.5rem}.error-title[data-v-77389f86]{font-size:9.375rem;font-weight:var(--font-bold);text-shadow:0 0 30px var(--elem-color)}.error-desc[data-v-77389f86]{width:100%;text-align:center;font-size:var(--h3-font-size)}.error-link[data-v-77389f86]{position:relative;color:var(--elem-color);text-transform:uppercase}.error-link[data-v-77389f86]:after{content:"";position:absolute;left:0;bottom:-2px;width:100%;height:2px;background-color:var(--elem-color)}@media screen and (max-width:1024px){.error-icon[data-v-77389f86]{height:8.5rem}.error-title[da

Chrome Cache Entry: 797

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65139), with no line terminators
Category:	downloaded
Size (bytes):	109886
Entropy (8bit):	5.492862594304263
Encrypted:	false
SSDEEP:	1536:FFWpQRoI6qSOC3luQPxzZtqqgctTJ58ZHT8E9YZnSldHRIUY:XOqZ5QBacRNZSLRC
MD5:	0B67DE2528D847589ABC38D662B255F3
SHA1:	3D7099D7C661AA7F6162DFD57E5D7AAE833D897D
SHA-256:	4CEC41D3F1AC6E6AADFD8B9FC9CF2042AEDF4D92840D06CC57C4CAE40343C211
SHA-512:	64B3C27972D3D3245F47B0985A16697F9075DE4EB260F973A5A68AD8B2EEB8B9C0011068CC66F1A89FEFC453385D9554B3994BA2E9BD3DD6321ACFA3D329CF99
Malicious:	false
Reputation:	low
URL:	https://dl.dir.freefiremobile.com/common/web_event/official2/dist/client/5ef67ad.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[3],{108:function(t,e,n){"use strict";n.r(e);var r={name:"SectionModule",props:{type:{type:String,default:"polygon",validator:function(t){return["polygon","trapezoid"].indexOf(t)>-1}},background:{type:String,default:""},bgRepeat:Boolean},data:function(){return{}},computed:{BgStyle:function(){return this.background?{backgroundImage:"url(".concat(this.background,")")}:null}},mounted:function(){},methods:{}},o=(n(395),n(24)),a=Object(o.a)(r,(function(){var t=this,e=t.$createElement,n=t._self._c\|\|e;return n("section",{staticClass:"section-module"},["polygon"===t.type?n("svg",{class:["section-decoration",t.type],attrs:{width:"100%",viewBox:"0 0 1440 25",fill:"none",xmlns:"http://www.w3.org/2000/svg"}},[n("path",{attrs:{d:"M0 23.6899H248.724L270.737 5.17356C272.873 3.03632 275.77 1.8349 278.792 1.8335H1440",stroke:"#FFAF00","stroke-width":"2","stroke-miterlimit":"10"}}),t._v(" "),n("path",{attrs:{d:"M248.546 23.3337H0V18.7046H253.887L248.54

Chrome Cache Entry: 798

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	64756
Entropy (8bit):	5.225827032715958
Encrypted:	false
SSDEEP:	768:OmzGTKHFfqqFgt1qNy/eGvs6jfsrP0bz8JpvegbKUAWKwIM:jFq/noy/ekfIY8JF6S
MD5:	679A3A4A17037D73A8C5289E662E71BE
SHA1:	9C67A9F0AE800CD4758FED2C9C108C6CB89B66FA
SHA-256:	0E7D78CFE6AD5ABCC9E7AEABE78DE85A2BB8DA203CFB48C83C1015F3FFA873A8
SHA-512:	832D7841382B699B6C98F0C1B1AEED00C15A8EAFE912D530DBB4C5A2E686315357BE323159F1AEA8DE77B1389B681B98FC2F7F94E91BFB31D7BA66DCD9858A77
Malicious:	false
Reputation:	low
Preview:	....KEYF..$... .........................8..........B...B...?..pB............RandomSubdocument...................B#.............B...B...?..pB.................~..Tk...X...D..d1..........N#..............\...`...d.......\|........... ...8...................`...<............4.=...>W..?..'?..:?............................~..................?..?.......>...................?..?.....[.=..>..................a?UUU?.......?...................?"......>...................?0....[.=..><......=...=H...`..=`..=T...\..=\..=`......=...=l.....=..=x......=...=.......B.......B..............pB..pB........................ ...........D....... ...8...................`...<.........<N.=4..>.[.?.c+?N.>?..........=....5..>5...................8......?..?R......>............X......?..?d.....>..>R...........\|...UUU?UUU?.......?r..................?.......>...................?......>..>...............?...?............ ...........p.........<N.=4..>............<... ...................0......C`...............

Chrome Cache Entry: 799

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	320
Entropy (8bit):	4.8695017860270475
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4jN9RotqtWIXWkjRBnmHRLmTCSkeLlzIxfIcHTJ+hu5hTO:t47N9U/vmRR9jRxmHRLkCsL9IxflMwhK
MD5:	0913F87D10776D31276AD2F0A64D4177
SHA1:	EF9EA8B47C6243293A187C61708218B1A1F6E0B6
SHA-256:	4EE171268D505E911DA178827E7EF13A9C7EB1D6F42FD12F430B4621465EA834
SHA-512:	A583DF01EF03C14B840FB699C36B8591D8386B04D65CAD74E599A4065F1C5456D4974A7DBEF6031E429D2B126A089A582794D78BCFB3F88D91C9394108619D16
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/bell/v8/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M10 20h4c0 1.1-.9 2-2 2s-2-.9-2-2zm10-2.65V19H4v-1.65l2-1.88v-5.15C6 7.4 7.56 5.1 10 4.34v-.38c0-1.42 1.49-2.5 2.99-1.76.65.32 1.01 1.03 1.01 1.76v.39c2.44.75 4 3.06 4 5.98v5.15l2 1.87z"/></svg>

Chrome Cache Entry: 800

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (960), with no line terminators
Category:	downloaded
Size (bytes):	960
Entropy (8bit):	4.954516252316818
Encrypted:	false
SSDEEP:	12:x9LCIx/zWUy4sArRQGvQIfRc53t4a21rPXDt84DVEJuJzPs+nuYUgNt4w:vCuQGvQIfRWOz1rbXVIg71nuxgNOw
MD5:	662B8F1B5F919912C1DF4B367BFF2CC1
SHA1:	2BE016AC1842CCD1C46F24F3908E0567916B3857
SHA-256:	649336097B307D0D03ECF4B5625F62576CED687E627233BF62F73EA4C1375395
SHA-512:	A6A1FC1127CD4627758C0FB3814E7E1393F29F422BF91DD16CCC5F400E863E9E1AA61D08408CB089183AA7E329F7B52BF38C75BEADF3DBACFB87A420FBDD2AB0
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S2/content/mobile/css/infoBar.662b8f1b5f.css
Preview:	.promo-bar{background:#385072;color:#fff}.alert-bar{background:#F4E3B2;color:#333}.notification-bar{text-align:center;padding:15px;display:flex;flex-direction:row;justify-content:space-between;font-size:16px;position:relative;margin:auto;max-width:1280px}.notification-content{width:100%;padding:0 20px;font-family:Lato-Regular,sans-serif}.close-btn{cursor:pointer;position:absolute;right:5px;top:0;bottom:0;margin:auto;width:34px;height:34px}.close-btn::after,.close-btn::before{content:'';display:block;width:14px;height:3px;background-color:#333;border-radius:6px;position:absolute;left:0;right:0;top:0;bottom:0;margin:auto}.promo-bar .close-btn::after,.promo-bar .close-btn::before{background-color:#fff}.close-btn::before{transform:rotate(45deg)}.close-btn::after{transform:rotate(-45deg)}@media screen and (min-width:767px){.notification-bar{font-size:20px}.theme-page--product-page .close-btn{right:15px}.close-btn::after,.close-btn::before{width:16px}}

Chrome Cache Entry: 801

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1586
Entropy (8bit):	4.971538502379734
Encrypted:	false
SSDEEP:	24:Yj0jutsEgaFs9v8eY2x2UfwhUdt0A66ucXaKUoXab/:Y9ts3aFs90pUbtd79aKpab/
MD5:	052B9F6B80876F7C32894105E377BA3B
SHA1:	2018FC66AB3C28A18167B11C547406CF1BBAF89A
SHA-256:	A7B005C03E9F79AB0D36080925C50F6C101BBBF9853DD849E9A0030A810C89A1
SHA-512:	2DC6CA28250F1E5A0EF91D677A6732BD64D5D09C930B78AF226823621C0F1A6BDBDE23583C75F69D5101E918D7FAF40ADD7C236B0AA733D3B02F95528D1B3374
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/manifest.webmanifest
Preview:	{"name":"YouTube","short_name":"YouTube","background_color":"#FFFFFF","display":"minimal-ui","start_url":"/?feature\u003dytca","scope":"/","icons":[{"src":"https://www.gstatic.com/youtube/img/branding/favicon/favicon_144x144.png","sizes":"144x144","type":"image/png"},{"src":"https://www.gstatic.com/youtube/img/branding/favicon/favicon_192x192.png","sizes":"192x192","type":"image/png"},{"src":"https://www.gstatic.com/youtube/img/web/monochrome/logo_16x16.png","sizes":"16x16","type":"image/png","purpose":"monochrome"},{"src":"https://www.gstatic.com/youtube/img/web/monochrome/logo_32x32.png","sizes":"32x32","type":"image/png","purpose":"monochrome"},{"src":"https://fonts.gstatic.com/s/i/googlematerialicons/video_youtube/v11/white-48dp/1x/gm_video_youtube_white_48dp.png","sizes":"48x48","type":"image/png","purpose":"monochrome"},{"src":"https://www.gstatic.com/youtube/img/web/monochrome/logo_512x512.png","sizes":"512x512","type":"image/png","purpose":"monochrome"}],"theme_color":"#FF0000"

Chrome Cache Entry: 802

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2434
Entropy (8bit):	4.737059133849761
Encrypted:	false
SSDEEP:	48:owOGkjKLAltP84lPMYxznNoCGVShuKJpn2:MLvtPhlPMYFNoAJp2
MD5:	06360FF211B374AFC9473FAEA2886095
SHA1:	6E40EC924C7CA539185ADBF78566DAEFEB5B97BC
SHA-256:	EEA10F57C4E2A6677142FEEC3F9353399D500BE403C61C5456881396ADF6FEE3
SHA-512:	3F1A3497714CA8C028469439CEF0B1DAE3805B34447CB96BC2C973A7C98F06EE9F75C91D2DC7DB334ACEB7031888727091B9700E1BEFCE71B5C9A431830CEDA2
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_fill/youtube_round/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <defs>. <radialGradient cx="5.4%" cy="7.11%" r="107.93%" fx="5.4%" fy="7.11%" gradientTransform="matrix(.70653 0 0 1 .016 0)">. <stop offset="0%" stop-color="#FFF"></stop>. <stop offset="100%" stop-color="#FFF" stop-opacity="0"></stop>. </radialGradient>. </defs>. <g fill="none" fill-rule="evenodd">. <path d="M1 1h21.77v22H1z"></path>. <g fill-rule="nonzero">. <path fill="#F00" d="M22.54 7.6s-.2-1.5-.86-2.17c-.83-.87-1.75-.88-2.18-.93-3.04-.22-7.6-.2-7.6-.2s-4.56-.02-7.6.2c-.43.05-1.35.06-2.18.93-.65.67-.86 2.18-.86 2.18S1.04 9.4 1 11.18v1.66c.04 1.78.26 3.55.26 3.55s.2 1.5.86 2.18c.83.87 1.9.84 2.4.94 1.7.15 7.2.2 7.38.2 0 0 4.57 0 7.6-.22.43-.05 1.35-.06 2.18-.93.65-.67.86-2.18.86-2.18s.22-1.77.24-3.55v-1.66c-.02-1.78-.24-3.55-.24-3.55z"></path>. <path fill="#FAFAFA" d="M9.68 8.9v6.18l5.84-3.1"></path>. <path fill="#000" fill-opacity=".12" d="M9.68 8.88l5.13 3.48.73-.38"></path>. <path fill="#FFF"

Chrome Cache Entry: 803

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x600, components 3
Category:	downloaded
Size (bytes):	52034
Entropy (8bit):	7.9607251646617065
Encrypted:	false
SSDEEP:	768:jvU9tNdp13AN7ER42wXaSdiynTATGGbxEbek/d+mq8fnc0R3iKxl:7U9t3p1Q5ERaaSVapbxEbeu+18PbZiMl
MD5:	6B9977C88C35F7A2CDE88D62014464CE
SHA1:	2C540F712089E7B3F6C55C939A8FE58124C5854D
SHA-256:	B684DED87A81F1F5772825886F7B6E08B4C73DA08AD54736CF9B70801F175DED
SHA-512:	09168B14635C9A49333D770530C3A8473E7451E3763DDA0F1E88C6E033BA96DEB1CCAD6AA5F8233BAD2776F6EAF27CFAAD7B921866C43FF9614AFA00E8186689
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/444202748_996576171837954_250908605759715264_n.jpg?stp=dst-jpg_p600x600&_nc_cat=102&ccb=1-7&_nc_sid=5f2048&_nc_ohc=OAqihbnrPUoQ7kNvgFnryPS&_nc_ht=scontent-hou1-1.xx&oh=00_AYDZBL9LFz-Cn1CR3xmu1gq6howv3CgU2z-SL4ry84scOg&oe=66584BAB
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a72010000e0120000552c00003a2f0000753e0000515d0000997e000003840000b78700008a96000042cb0000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......X.X.."..................................................................................b...............................................U`w.......A......................)Y...M.U..7....O6.<.....1..f.H....h..:x:l....{ ....................e.3\).A........................:...,..g-X.u...H..."C\8.:....1vl.{...D52.8].......\)..s.................I....W...E..TO.Y.&./%M.A.l.].z....m&Q{+.....vW$..._..].W...........[".y...<........J...................v..>...[....>.g$...\.)...h..-.g..<3........f......9.u.tt.3....6/._wc.H....6R.....Q.=..........,s=....n.2.....L~R[y.yKm.C.5.....-'.qY.(.E.kFI.r.b~..]...[G.4..@.N....K.e6.h.v.b..^...so..0....'.u!1....W_B3..[.....rc.V.3.@....3.8m.

Chrome Cache Entry: 804

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	338
Entropy (8bit):	5.081456518478992
Encrypted:	false
SSDEEP:	6:tI9mc4slbWKJAOBUtTxGjxAOyVov2RtNI8MobBWDyewVR2OsXdfDRUEubz5JM:t40rOQojGOsov2fCy9GyekahDRqzc
MD5:	344BD6131BA252992E7B43DB8ACF0EF4
SHA1:	AE9762E6C8B2582AC06B72E1056F93394F1E7528
SHA-256:	F45C028690DE48FA989AA16E372FA580806B168114800CCCF6BF967C1B73C7E8
SHA-512:	49EE13BAF8D5E0847DDC4CE980F33540EE405784432E6027310224290FC1B9D835B80D8F9C7CE02D5A2692411B9B230BE65FF8DF6F63CCD92287D109673C1888
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_fill/youtube_music/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <circle fill="#FF0000" cx="12" cy="12" r="10"></circle>. <polygon fill="#FFFFFF" points="10,14.65 10,9.35 15,12 "></polygon>. <path fill="#FFFFFF" d="M12,7c2.76,0,5,2.24,5,5s-2.24,5-5,5s-5-2.24-5-5S9.24,7,12,7 M12,6c-3.31,0-6,2.69-6,6s2.69,6,6,6s6-2.69,6-6 S15.31,6,12,6L12,6z"></path>.</svg>.

Chrome Cache Entry: 805

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 806

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	600
Entropy (8bit):	7.414159840782532
Encrypted:	false
SSDEEP:	12:6v/7gKJ10Fobt+d7lG1QQr/80hsawh6WSqmMg/REtPzHGMpg3SMuFK9:I10Fobc5JS8Yi6WvmMg/RkPzmZCto9
MD5:	5F2974DE7B6DF03DD6277435C4987E19
SHA1:	D2B256327900D86C6E9C37E98C8EE4E91F8AFBC6
SHA-256:	37632EA041A0F8264F4A9F5C9803A6814B050F762315D3FBBBAF28A713EA677E
SHA-512:	434840D89A8491F5D469948AC81CC0BA41AE8B170505F8BC0550A9E9CC3AC99B2E97ED3BA920F9633793A32D069BBA59A1E65B7773E68DC08BE8E93A351CD1B3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................PLTE..$..! .......................'.."..$.... ............".....-..a...=;...Q...........[...~y^...........MZ....g.^....................v.... ,+......... ..s...TP $&P5;................&....tRNS........F........IIDAT(.M...0.E.....2.....{.^...V..L..9H..1.X.....p.&9..2A.....D6@.8"......y.u][.M..A}......,p.H...\.v..2.$e}A......>.........8..;y....3..z.....8.tcCB.(..v^..F........j..l..'.4%..../....(.=K........T$...3-....[9c...E/..5....h.......8....)-...h77\|...k.R2.v....y....},~....;lO\%,Wh.....q.>G..g*c..=VY8...VBG..1..Q......Y fi..k....IEND.B`.

Chrome Cache Entry: 807

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	downloaded
Size (bytes):	8189
Entropy (8bit):	7.907364887115851
Encrypted:	false
SSDEEP:	192:/7Fdjy0GqDsidiFtTtE20H1ceqGGn30aTbWlu2bV2T:zTQqDslFtOqfnkOYF2
MD5:	82A7A16DC135ED73FF91372296B7C15C
SHA1:	60EF636FDA035641F3B8D057611F8481B4C49926
SHA-256:	85CD505E271C480E3C74787C27CB731B417110D86FEC22D9281B1F40478C7F36
SHA-512:	4E0D1DA35E01DEB0B720C68233B6976910C18629D5A9A46269BDF2C30BD96782EA495B5A16505C940B6C3B6B01276BFCF49232C0234AB3999E38970ADC903E1F
Malicious:	false
Reputation:	low
URL:	https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/444202748_996576171837954_250908605759715264_n.jpg?stp=dst-jpg_p160x160&_nc_cat=102&ccb=1-7&_nc_sid=5f2048&_nc_ohc=OAqihbnrPUoQ7kNvgFnryPS&_nc_ht=scontent-hou1-1.xx&oh=00_AYCeXEwpdrg44H2MsX8htwFjsSC1XoR3snF8Y5OzIJvZqQ&oe=66584BAB
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a7001000050030000b7060000480700005b0900008e0e000001140000891400004615000089170000fd1f0000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."................................................................................."I.I..".(.nz......`=.ILI I I I.De)is.o.'....3..$g.....c....5$..d.o...x.....df..k..`g0..,.H.~.).C.K.$}..dlY./.\`...DJ..&T.)....Y.(U.S`e......ld..6-....M..b}1`....(..m.{P...=....LN.i..L...t^...I.....w#.....x....N..../)R5I..Sv'r...7.v.vo5Y.j....P.:....1..%.]$!.oD...p..i..-;.+t..r...^.*..C..a:...8!/.y....E.....J..U.....[S\|..)R... ..(.A$.B.Q..z....6..D..0.fl.f.ow.!.-......,5.4\...b.n..s.n...w.?...)............................. !#14"0.$@............a1f......N.asg.F{....../.+S;...v~.....Q..I.9..Od.4.s-5.j_....f.r.V..Ao...I4e....f..kye.r....<.?(`.`..01.Fr%..D.....`Tq0'...1.(...#

Chrome Cache Entry: 808

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	151
Entropy (8bit):	5.020176826819927
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHqJtxTcR+NkzlFWttxci:tI9mc4slhohC/vmI4ItxTcM6D0Ci
MD5:	ABCB07D23B020A9464DD70FA10C0D9D3
SHA1:	38EC787E83181D5907C71676C2C4A21EF4D5B72D
SHA-256:	D721B8669114FBCDA49F612047DC68869FD406A82AC9BAA420ECF35FFEB05C2E
SHA-512:	5218BB6A31E50DA5F42ADD673562C03B970C77FC85E9037ECB85ED9B005015EB754017B27351F04DA7622FBE2EED0CC4CCCF82CF73F6EFAD6C1665789AFD9E51
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M19 6v15H8V6h11m-4-4H4v16h1V3h10V2zm5 3H7v17h13V5z"/></svg>

Chrome Cache Entry: 809

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12429)
Category:	downloaded
Size (bytes):	208456
Entropy (8bit):	5.196805126531873
Encrypted:	false
SSDEEP:	1536:R7ltM9eEqJ1UaKTZ02LKVlEyNbSIQHCGat81BEnPx/+6z7GKZQ8nzUQ/nw8:R749eZYaKj8ltNbBGVR0c6OKZQ8n3nz
MD5:	B2AB5FF9D9C97D0F3E2A4A2223EC837F
SHA1:	ED76D744FEBC956FD4022509A88F02769A9A7054
SHA-256:	CA9B25CC16DF029F22639CEEA028D72FDADE02D587C474897A9189B4025F4B22
SHA-512:	DD73A71985B9E3F0D87E2242F4B8633F42D97D6CB3E5AB6103A4E65A8A86884578A8EA58C3225FFDDED4F93030A7657AE3E6514CE943A387F6FAD2CA37DE6969
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/916139058437464?v=2.9.156&r=stable&domain=newsklikdisini5bekbg0.3bsz4.xyz&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 810

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	373
Entropy (8bit):	4.744613189871505
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4aC/foF8mw4U0bW5RJDURmodj6iiYp1GTDWbyLsji:t47N9U/vmRtnY8/4U0wRJIAoZ6iiYp1U
MD5:	25F33107B1ABE585D6667013A5EE0156
SHA1:	08CA62806C11E78AFA36E27F4334593A721CDA78
SHA-256:	D00CC0FA93D30CF63610BF1B33BB689DB1693D0B79968954EC376CB67E636D46
SHA-512:	75851CAB4DCDEF5E5AB0DBCE7FED43007EBDD28DC79AF33BFD9F4D5C8CF714660822BBB17CACCA02DC7E1B8CF85A74122481BE30A901F35ACB3D61C5845D5983
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M14 6V3c-.85.44-1.7.88-2.55 1.33-1.41.74-2.9 1.34-4.17 2.32-1.13.87-2.02 2.05-2.58 3.37-.46 1.09-.7 2.29-.7 3.48v.14C4 18.26 7.58 22 12 22s8-3.74 8-8.36V2l-6 4zm0 9.7c0 1.82-1.34 3.3-3 3.3s-3-1.47-3-3.3c0-1.19.58-2.24 1.45-2.82L14 10v5.7z"/></svg>

Chrome Cache Entry: 811

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28440, version 1.0
Category:	downloaded
Size (bytes):	28440
Entropy (8bit):	7.992839171608245
Encrypted:	true
SSDEEP:	768:clowe3Y045NpEzQTnskmDT/Lmoa2zI4Nblc6u5cnt/vWupH:4cabpdEDbC7kLlc6n/vWgH
MD5:	1031840A9580BCC9B1B83A047F2282B4
SHA1:	92EB819B7183FE6B04774A1003216991342E3AF5
SHA-256:	386695F80ED730CC1A3108B4D91FAB24E1DB1D9E5F13CAA1F95095FB6F1DE147
SHA-512:	91796D4C1EA209292AF779FCBB4E8DA96EB2591BCD57BD8C16AC9F6731A6C646A58599AAA34ED895F90D9F1F367B60A48467A7AF2819FA5B243F7D7FCA0544C5
Malicious:	false
Reputation:	low
URL:	https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Regular.woff2
Preview:	wOF2......o.......&`..n...........................\|..\|.`..t....e.....p..i..(..6.$..8. ..j..^.K[..qA._"...f.l.....ng.n.........l.....2........T.QwxH..0.!8J...um#..>.r...!.... .q..Q.....IO..J........n. ...[Y.lv..#X[OM.K.Tl.n.j.....4.k......S:n...n.....$..RW.d}}../......\|....9....7..'?$H.,....a.v.L..1...T.......o.....W@.x.(6Z.%.H.RB......U.>..&.$Q@UK..d.`d..Z..]{c.....8+QZ...AP.."Jh....PLT....6u..M.."...9..]<F..._.U.d.B...@~...Ow.Nm.EY...(ci.>.<e\|E7.:.y...\.v.~,.')^.\ ..N...._+P.]..p.l.....=$..L@..tjOu.Na%......=...-..N....z.....9.Iw..\|....?,..e..B.....J..9.....\.C+...O-..fp........?.z.%.....#..@Z .(.x...._.....a..xX..d).-O.T...+`.2lG\D9........."J.."B1.z.up...@0....V...v..7'.mQ.v....;I..P.'[v..d..b......@e...S.S.....E#F..y.cbF.]... ..........p@#...../.....u...e.u!a.+...G.75.J.+..N?%...c..?..c.......x.*.\......B.LM...OY.)..Ekc.R............I.Rc.K...c..k.Ix.(..4%..X.d..){.N...w.......vU.rQ....2g.K..P'W.X.w.?G.i..E.K...Db.$!@ ...+..9.l..ff..y..u

Chrome Cache Entry: 812

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (646)
Category:	downloaded
Size (bytes):	11112
Entropy (8bit):	5.3983282555726015
Encrypted:	false
SSDEEP:	192:8losmj1Uqu+oCNLuZ08MnpAqntHMncx0USX6eJjbRAkXj:JUEoCNLDpNucx0UTeNF9z
MD5:	492F5557230AAE0AC6CD426E89A004CA
SHA1:	461D5534A54EA937A27DEC5CD0D3FAEFE6495686
SHA-256:	15F354669CD5A36471252E1BC12DF5BEA7D9E9DBF75FAB05A9B1C0D65C1B8FD7
SHA-512:	BF2259327354DBAC65928EBDC3273342391E284EC2E7A3BAAEB735700E01E380566909E7EE8037136CCFB59F41848FFFEFD4D0D1019BA5F35844D4B0B2A188FF
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/aef0ced3/jsbin/www-tampering.vflset/www-tampering.js
Preview:	(function(){'use strict';function n(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var p="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function q(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var r=q(this);function t(a,b){if(b)a:{var c=r;a=a.split(".");for(var e=0;e<a.length-1;e++){var h=a[e];if(!(h in c))break a;c=c[h]}a=a[a.length-1];e=c[a];b=b(e);b!=e&&null!=b&&p(c,a,{configurable:!0,writable:!0,value:b})}}.t("Symbol",function(a){function b(l){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(e+(l\|\|"")+"_"+h++,l)}.function c(l,m){this.g=l;p(this,"description",{configurable:!0,writable:!0,value:m})}.if(a)

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 26, 2024 00:59:29.583203077 CEST	192.168.2.6	1.1.1.1	0xc2bc	Standard query (0)	newsklikdisini5bekbg0.3bsz4.xyz	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:29.583203077 CEST	192.168.2.6	1.1.1.1	0x12fb	Standard query (0)	newsklikdisini5bekbg0.3bsz4.xyz	65	IN (0x0001)	false
May 26, 2024 00:59:31.360341072 CEST	192.168.2.6	1.1.1.1	0xb4b5	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:31.360613108 CEST	192.168.2.6	1.1.1.1	0x7097	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
May 26, 2024 00:59:32.463747025 CEST	192.168.2.6	1.1.1.1	0xea81	Standard query (0)	newsklikdisini5bekbg0.3bsz4.xyz	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:32.464039087 CEST	192.168.2.6	1.1.1.1	0x5aba	Standard query (0)	newsklikdisini5bekbg0.3bsz4.xyz	65	IN (0x0001)	false
May 26, 2024 00:59:32.679400921 CEST	192.168.2.6	1.1.1.1	0xd34d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:32.679698944 CEST	192.168.2.6	1.1.1.1	0x183	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 26, 2024 00:59:36.242419004 CEST	192.168.2.6	1.1.1.1	0x1ae8	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:36.242831945 CEST	192.168.2.6	1.1.1.1	0x54f8	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
May 26, 2024 00:59:36.260745049 CEST	192.168.2.6	1.1.1.1	0xdd5c	Standard query (0)	cdn1.codashop.com	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:36.261019945 CEST	192.168.2.6	1.1.1.1	0xaecc	Standard query (0)	cdn1.codashop.com	65	IN (0x0001)	false
May 26, 2024 00:59:36.262001991 CEST	192.168.2.6	1.1.1.1	0x772e	Standard query (0)	script.tapfiliate.com	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:36.262213945 CEST	192.168.2.6	1.1.1.1	0xa880	Standard query (0)	script.tapfiliate.com	65	IN (0x0001)	false
May 26, 2024 00:59:36.263181925 CEST	192.168.2.6	1.1.1.1	0x3573	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:36.266817093 CEST	192.168.2.6	1.1.1.1	0xb7de	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
May 26, 2024 00:59:36.267337084 CEST	192.168.2.6	1.1.1.1	0x90c9	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:36.267968893 CEST	192.168.2.6	1.1.1.1	0x6d14	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
May 26, 2024 00:59:36.313832045 CEST	192.168.2.6	1.1.1.1	0xd24a	Standard query (0)	cdn.onesignal.com	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:36.314347982 CEST	192.168.2.6	1.1.1.1	0xd98f	Standard query (0)	cdn.onesignal.com	65	IN (0x0001)	false
May 26, 2024 00:59:37.471606016 CEST	192.168.2.6	1.1.1.1	0x4a4	Standard query (0)	cdn-www.bluestacks.com	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:37.471760988 CEST	192.168.2.6	1.1.1.1	0x3a2b	Standard query (0)	cdn-www.bluestacks.com	65	IN (0x0001)	false
May 26, 2024 00:59:37.640665054 CEST	192.168.2.6	1.1.1.1	0xa931	Standard query (0)	icon-library.com	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:37.644367933 CEST	192.168.2.6	1.1.1.1	0xafd7	Standard query (0)	icon-library.com	65	IN (0x0001)	false
May 26, 2024 00:59:38.415662050 CEST	192.168.2.6	1.1.1.1	0x1f5b	Standard query (0)	icon-library.com	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:38.415796995 CEST	192.168.2.6	1.1.1.1	0xaf39	Standard query (0)	icon-library.com	65	IN (0x0001)	false
May 26, 2024 00:59:40.177248001 CEST	192.168.2.6	1.1.1.1	0xd0d1	Standard query (0)	d1qgcmfii0ptfa.cloudfront.net	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:40.177380085 CEST	192.168.2.6	1.1.1.1	0x702c	Standard query (0)	d1qgcmfii0ptfa.cloudfront.net	65	IN (0x0001)	false
May 26, 2024 00:59:40.393125057 CEST	192.168.2.6	1.1.1.1	0x8067	Standard query (0)	newsklikdisini5bekbg0.3bsz4.xyz	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:40.393282890 CEST	192.168.2.6	1.1.1.1	0x7f69	Standard query (0)	newsklikdisini5bekbg0.3bsz4.xyz	65	IN (0x0001)	false
May 26, 2024 00:59:40.394829035 CEST	192.168.2.6	1.1.1.1	0xce7e	Standard query (0)	cdn-www.bluestacks.com	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:40.395148039 CEST	192.168.2.6	1.1.1.1	0x6441	Standard query (0)	cdn-www.bluestacks.com	65	IN (0x0001)	false
May 26, 2024 00:59:40.396850109 CEST	192.168.2.6	1.1.1.1	0x6721	Standard query (0)	cdn1.codashop.com	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:40.397017956 CEST	192.168.2.6	1.1.1.1	0xf0c2	Standard query (0)	cdn1.codashop.com	65	IN (0x0001)	false
May 26, 2024 00:59:41.424294949 CEST	192.168.2.6	1.1.1.1	0x5606	Standard query (0)	d1qgcmfii0ptfa.cloudfront.net	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:41.424614906 CEST	192.168.2.6	1.1.1.1	0x1fe6	Standard query (0)	d1qgcmfii0ptfa.cloudfront.net	65	IN (0x0001)	false
May 26, 2024 00:59:42.145529032 CEST	192.168.2.6	1.1.1.1	0x28cd	Standard query (0)	picjj.com	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:42.145703077 CEST	192.168.2.6	1.1.1.1	0x3c83	Standard query (0)	picjj.com	65	IN (0x0001)	false
May 26, 2024 00:59:42.864881992 CEST	192.168.2.6	1.1.1.1	0x5776	Standard query (0)	picjj.com	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:42.865174055 CEST	192.168.2.6	1.1.1.1	0xa497	Standard query (0)	picjj.com	65	IN (0x0001)	false
May 26, 2024 00:59:45.046336889 CEST	192.168.2.6	1.1.1.1	0xd758	Standard query (0)	i.ibb.co	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:45.046814919 CEST	192.168.2.6	1.1.1.1	0x28a1	Standard query (0)	i.ibb.co	65	IN (0x0001)	false
May 26, 2024 00:59:46.277430058 CEST	192.168.2.6	1.1.1.1	0xbb2d	Standard query (0)	i.ibb.co	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:46.277662992 CEST	192.168.2.6	1.1.1.1	0xd688	Standard query (0)	i.ibb.co	65	IN (0x0001)	false
May 26, 2024 00:59:46.884183884 CEST	192.168.2.6	1.1.1.1	0xb4d7	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:46.884371996 CEST	192.168.2.6	1.1.1.1	0x3daa	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 26, 2024 00:59:49.543567896 CEST	192.168.2.6	1.1.1.1	0xdb9e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:49.543726921 CEST	192.168.2.6	1.1.1.1	0x9cc9	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 26, 2024 00:59:56.810007095 CEST	192.168.2.6	1.1.1.1	0xf418	Standard query (0)	bit.ly	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:56.810457945 CEST	192.168.2.6	1.1.1.1	0xc413	Standard query (0)	bit.ly	65	IN (0x0001)	false
May 26, 2024 00:59:57.343647003 CEST	192.168.2.6	1.1.1.1	0x9839	Standard query (0)	www.freefiremobile.com	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:57.343818903 CEST	192.168.2.6	1.1.1.1	0xc378	Standard query (0)	www.freefiremobile.com	65	IN (0x0001)	false
May 26, 2024 00:59:58.313698053 CEST	192.168.2.6	1.1.1.1	0xc0fd	Standard query (0)	www.freefiremobile.com	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:58.313698053 CEST	192.168.2.6	1.1.1.1	0xb9b7	Standard query (0)	www.freefiremobile.com	65	IN (0x0001)	false
May 26, 2024 01:00:00.031208038 CEST	192.168.2.6	1.1.1.1	0x88f5	Standard query (0)	dl.dir.freefiremobile.com	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:00.031373978 CEST	192.168.2.6	1.1.1.1	0x923a	Standard query (0)	dl.dir.freefiremobile.com	65	IN (0x0001)	false
May 26, 2024 01:00:02.266884089 CEST	192.168.2.6	1.1.1.1	0x1f65	Standard query (0)	dl.dir.freefiremobile.com	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:02.267762899 CEST	192.168.2.6	1.1.1.1	0xa2b5	Standard query (0)	dl.dir.freefiremobile.com	65	IN (0x0001)	false
May 26, 2024 01:00:04.416544914 CEST	192.168.2.6	1.1.1.1	0x6d07	Standard query (0)	freefiremobile-a.akamaihd.net	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:04.416661978 CEST	192.168.2.6	1.1.1.1	0xb192	Standard query (0)	freefiremobile-a.akamaihd.net	65	IN (0x0001)	false
May 26, 2024 01:00:05.470626116 CEST	192.168.2.6	1.1.1.1	0xbf6f	Standard query (0)	freefiremobile-a.akamaihd.net	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:05.470866919 CEST	192.168.2.6	1.1.1.1	0xc86a	Standard query (0)	freefiremobile-a.akamaihd.net	65	IN (0x0001)	false
May 26, 2024 01:00:06.796670914 CEST	192.168.2.6	1.1.1.1	0x4fc5	Standard query (0)	community.codashop.com	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:06.805124044 CEST	192.168.2.6	1.1.1.1	0x1ca7	Standard query (0)	community.codashop.com	65	IN (0x0001)	false
May 26, 2024 01:00:06.853010893 CEST	192.168.2.6	1.1.1.1	0x4b0a	Standard query (0)	community.codashop.com	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:07.012748957 CEST	192.168.2.6	8.8.8.8	0x3ec	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:07.012821913 CEST	192.168.2.6	1.1.1.1	0x216b	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:08.084233046 CEST	192.168.2.6	1.1.1.1	0xd1cb	Standard query (0)	community.codashop.com	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:08.085103989 CEST	192.168.2.6	1.1.1.1	0x771f	Standard query (0)	community.codashop.com	65	IN (0x0001)	false
May 26, 2024 01:00:09.162051916 CEST	192.168.2.6	1.1.1.1	0x4f1a	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:09.162051916 CEST	192.168.2.6	1.1.1.1	0x7427	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
May 26, 2024 01:00:10.499707937 CEST	192.168.2.6	1.1.1.1	0x8329	Standard query (0)	scontent.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:10.499962091 CEST	192.168.2.6	1.1.1.1	0x94eb	Standard query (0)	scontent.xx.fbcdn.net	65	IN (0x0001)	false
May 26, 2024 01:00:10.501422882 CEST	192.168.2.6	1.1.1.1	0xf9f2	Standard query (0)	video.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:10.501827002 CEST	192.168.2.6	1.1.1.1	0xed7c	Standard query (0)	video.xx.fbcdn.net	65	IN (0x0001)	false
May 26, 2024 01:00:10.507913113 CEST	192.168.2.6	1.1.1.1	0x9e22	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:10.508117914 CEST	192.168.2.6	1.1.1.1	0x4f77	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false
May 26, 2024 01:00:16.018312931 CEST	192.168.2.6	1.1.1.1	0x8e28	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:16.018455982 CEST	192.168.2.6	1.1.1.1	0xb4c0	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
May 26, 2024 01:00:16.285078049 CEST	192.168.2.6	1.1.1.1	0xce4a	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:16.285496950 CEST	192.168.2.6	1.1.1.1	0x2820	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false
May 26, 2024 01:00:17.021435022 CEST	192.168.2.6	1.1.1.1	0xd27a	Standard query (0)	scontent-hou1-1.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:17.021692038 CEST	192.168.2.6	1.1.1.1	0xcc7f	Standard query (0)	scontent-hou1-1.xx.fbcdn.net	65	IN (0x0001)	false
May 26, 2024 01:00:17.854679108 CEST	192.168.2.6	1.1.1.1	0x67	Standard query (0)	scontent-hou1-1.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:17.854779005 CEST	192.168.2.6	1.1.1.1	0x1ce1	Standard query (0)	scontent-hou1-1.xx.fbcdn.net	65	IN (0x0001)	false
May 26, 2024 01:00:22.220917940 CEST	192.168.2.6	1.1.1.1	0xb13c	Standard query (0)	scontent.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:22.221206903 CEST	192.168.2.6	1.1.1.1	0xd916	Standard query (0)	scontent.xx.fbcdn.net	65	IN (0x0001)	false
May 26, 2024 01:00:24.816029072 CEST	192.168.2.6	1.1.1.1	0xb71c	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:24.816632032 CEST	192.168.2.6	1.1.1.1	0x5f4	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
May 26, 2024 01:00:27.200355053 CEST	192.168.2.6	1.1.1.1	0x16fc	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:27.200674057 CEST	192.168.2.6	1.1.1.1	0x3ad1	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
May 26, 2024 01:00:34.420660973 CEST	192.168.2.6	1.1.1.1	0x5873	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:34.420660973 CEST	192.168.2.6	1.1.1.1	0xb192	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
May 26, 2024 01:00:34.725243092 CEST	192.168.2.6	1.1.1.1	0x6481	Standard query (0)	rr5---sn-q4flrn7y.googlevideo.com	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:34.725523949 CEST	192.168.2.6	1.1.1.1	0x1655	Standard query (0)	rr5---sn-q4flrn7y.googlevideo.com	65	IN (0x0001)	false
May 26, 2024 01:00:35.585403919 CEST	192.168.2.6	1.1.1.1	0xc204	Standard query (0)	yt3.googleusercontent.com	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:35.585802078 CEST	192.168.2.6	1.1.1.1	0x556d	Standard query (0)	yt3.googleusercontent.com	65	IN (0x0001)	false
May 26, 2024 01:00:36.886749029 CEST	192.168.2.6	1.1.1.1	0x72a	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:36.887094975 CEST	192.168.2.6	1.1.1.1	0x28f2	Standard query (0)	youtube.com	65	IN (0x0001)	false
May 26, 2024 01:00:39.169382095 CEST	192.168.2.6	1.1.1.1	0xee35	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.169553041 CEST	192.168.2.6	1.1.1.1	0x6dbe	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
May 26, 2024 01:00:39.178991079 CEST	192.168.2.6	1.1.1.1	0x467a	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.179490089 CEST	192.168.2.6	1.1.1.1	0x6795	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
May 26, 2024 01:00:39.194372892 CEST	192.168.2.6	1.1.1.1	0x23a0	Standard query (0)	yt3.googleusercontent.com	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.194701910 CEST	192.168.2.6	1.1.1.1	0x5c89	Standard query (0)	yt3.googleusercontent.com	65	IN (0x0001)	false
May 26, 2024 01:00:39.298949003 CEST	192.168.2.6	1.1.1.1	0x2f42	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.299145937 CEST	192.168.2.6	1.1.1.1	0x8b96	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 26, 2024 01:00:41.022070885 CEST	192.168.2.6	1.1.1.1	0x120a	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:41.022593021 CEST	192.168.2.6	1.1.1.1	0xfc90	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
May 26, 2024 01:00:41.031408072 CEST	192.168.2.6	1.1.1.1	0x21b8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:41.031547070 CEST	192.168.2.6	1.1.1.1	0x85e3	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 26, 2024 01:00:43.483006954 CEST	192.168.2.6	1.1.1.1	0x7275	Standard query (0)	rr2---sn-p5qs7nzr.googlevideo.com	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:43.483135939 CEST	192.168.2.6	1.1.1.1	0xc467	Standard query (0)	rr2---sn-p5qs7nzr.googlevideo.com	65	IN (0x0001)	false
May 26, 2024 01:00:45.343744993 CEST	192.168.2.6	1.1.1.1	0x18b8	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:45.343882084 CEST	192.168.2.6	1.1.1.1	0x5590	Standard query (0)	play.google.com	65	IN (0x0001)	false
May 26, 2024 01:00:45.833745956 CEST	192.168.2.6	1.1.1.1	0x32ac	Standard query (0)	rr2---sn-p5qs7nzr.googlevideo.com	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:45.833892107 CEST	192.168.2.6	1.1.1.1	0x9233	Standard query (0)	rr2---sn-p5qs7nzr.googlevideo.com	65	IN (0x0001)	false
May 26, 2024 01:00:47.454837084 CEST	192.168.2.6	1.1.1.1	0xcdc	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:47.454916000 CEST	192.168.2.6	1.1.1.1	0x21e2	Standard query (0)	play.google.com	65	IN (0x0001)	false
May 26, 2024 01:00:57.469891071 CEST	192.168.2.6	1.1.1.1	0xe1db	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:57.470211983 CEST	192.168.2.6	1.1.1.1	0x40d3	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
May 26, 2024 01:01:01.473695040 CEST	192.168.2.6	1.1.1.1	0x6d93	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
May 26, 2024 01:01:01.474030018 CEST	192.168.2.6	1.1.1.1	0x2ae6	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
May 26, 2024 01:01:02.706849098 CEST	192.168.2.6	1.1.1.1	0x98b2	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
May 26, 2024 01:01:02.706849098 CEST	192.168.2.6	1.1.1.1	0xdca0	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 26, 2024 00:59:29.598630905 CEST	1.1.1.1	192.168.2.6	0x12fb	No error (0)	newsklikdisini5bekbg0.3bsz4.xyz			65	IN (0x0001)	false
May 26, 2024 00:59:29.607235909 CEST	1.1.1.1	192.168.2.6	0xc2bc	No error (0)	newsklikdisini5bekbg0.3bsz4.xyz		188.114.96.3	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:29.607235909 CEST	1.1.1.1	192.168.2.6	0xc2bc	No error (0)	newsklikdisini5bekbg0.3bsz4.xyz		188.114.97.3	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:31.377300024 CEST	1.1.1.1	192.168.2.6	0xb4b5	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:32.507092953 CEST	1.1.1.1	192.168.2.6	0x5aba	No error (0)	newsklikdisini5bekbg0.3bsz4.xyz			65	IN (0x0001)	false
May 26, 2024 00:59:32.507131100 CEST	1.1.1.1	192.168.2.6	0xea81	No error (0)	newsklikdisini5bekbg0.3bsz4.xyz		188.114.96.3	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:32.507131100 CEST	1.1.1.1	192.168.2.6	0xea81	No error (0)	newsklikdisini5bekbg0.3bsz4.xyz		188.114.97.3	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:32.696410894 CEST	1.1.1.1	192.168.2.6	0xd34d	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:32.698926926 CEST	1.1.1.1	192.168.2.6	0x183	No error (0)	www.google.com			65	IN (0x0001)	false
May 26, 2024 00:59:36.307034969 CEST	1.1.1.1	192.168.2.6	0x1ae8	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 00:59:36.307034969 CEST	1.1.1.1	192.168.2.6	0x1ae8	No error (0)	scontent.xx.fbcdn.net		157.240.252.13	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:36.307066917 CEST	1.1.1.1	192.168.2.6	0x54f8	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 00:59:36.307111025 CEST	1.1.1.1	192.168.2.6	0x3573	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:36.307111025 CEST	1.1.1.1	192.168.2.6	0x3573	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:36.307132959 CEST	1.1.1.1	192.168.2.6	0x772e	No error (0)	script.tapfiliate.com		108.157.194.64	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:36.307132959 CEST	1.1.1.1	192.168.2.6	0x772e	No error (0)	script.tapfiliate.com		108.157.194.51	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:36.307132959 CEST	1.1.1.1	192.168.2.6	0x772e	No error (0)	script.tapfiliate.com		108.157.194.122	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:36.307132959 CEST	1.1.1.1	192.168.2.6	0x772e	No error (0)	script.tapfiliate.com		108.157.194.123	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:36.311836958 CEST	1.1.1.1	192.168.2.6	0xaecc	No error (0)	cdn1.codashop.com	d2eyyyej66tg7f.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 00:59:36.311855078 CEST	1.1.1.1	192.168.2.6	0xdd5c	No error (0)	cdn1.codashop.com	d2eyyyej66tg7f.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 00:59:36.311855078 CEST	1.1.1.1	192.168.2.6	0xdd5c	No error (0)	d2eyyyej66tg7f.cloudfront.net		13.32.110.50	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:36.311855078 CEST	1.1.1.1	192.168.2.6	0xdd5c	No error (0)	d2eyyyej66tg7f.cloudfront.net		13.32.110.65	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:36.311855078 CEST	1.1.1.1	192.168.2.6	0xdd5c	No error (0)	d2eyyyej66tg7f.cloudfront.net		13.32.110.104	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:36.311855078 CEST	1.1.1.1	192.168.2.6	0xdd5c	No error (0)	d2eyyyej66tg7f.cloudfront.net		13.32.110.62	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:36.318689108 CEST	1.1.1.1	192.168.2.6	0x90c9	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:36.318689108 CEST	1.1.1.1	192.168.2.6	0x90c9	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:36.318710089 CEST	1.1.1.1	192.168.2.6	0xb7de	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
May 26, 2024 00:59:36.318723917 CEST	1.1.1.1	192.168.2.6	0x6d14	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
May 26, 2024 00:59:36.333195925 CEST	1.1.1.1	192.168.2.6	0xd98f	No error (0)	cdn.onesignal.com			65	IN (0x0001)	false
May 26, 2024 00:59:36.333211899 CEST	1.1.1.1	192.168.2.6	0xd24a	No error (0)	cdn.onesignal.com		104.16.160.145	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:36.333211899 CEST	1.1.1.1	192.168.2.6	0xd24a	No error (0)	cdn.onesignal.com		104.17.111.223	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:37.514686108 CEST	1.1.1.1	192.168.2.6	0x3a2b	No error (0)	cdn-www.bluestacks.com	cdn-www.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 00:59:37.514703035 CEST	1.1.1.1	192.168.2.6	0x4a4	No error (0)	cdn-www.bluestacks.com	cdn-www.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 00:59:37.691371918 CEST	1.1.1.1	192.168.2.6	0xafd7	No error (0)	icon-library.com			65	IN (0x0001)	false
May 26, 2024 00:59:37.691390038 CEST	1.1.1.1	192.168.2.6	0xa931	No error (0)	icon-library.com		104.26.11.155	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:37.691390038 CEST	1.1.1.1	192.168.2.6	0xa931	No error (0)	icon-library.com		104.26.10.155	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:37.691390038 CEST	1.1.1.1	192.168.2.6	0xa931	No error (0)	icon-library.com		172.67.68.224	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:38.432348013 CEST	1.1.1.1	192.168.2.6	0x1f5b	No error (0)	icon-library.com		172.67.68.224	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:38.432348013 CEST	1.1.1.1	192.168.2.6	0x1f5b	No error (0)	icon-library.com		104.26.10.155	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:38.432348013 CEST	1.1.1.1	192.168.2.6	0x1f5b	No error (0)	icon-library.com		104.26.11.155	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:38.446732998 CEST	1.1.1.1	192.168.2.6	0xaf39	No error (0)	icon-library.com			65	IN (0x0001)	false
May 26, 2024 00:59:40.227468967 CEST	1.1.1.1	192.168.2.6	0xd0d1	No error (0)	d1qgcmfii0ptfa.cloudfront.net		52.222.206.96	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:40.227468967 CEST	1.1.1.1	192.168.2.6	0xd0d1	No error (0)	d1qgcmfii0ptfa.cloudfront.net		52.222.206.228	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:40.227468967 CEST	1.1.1.1	192.168.2.6	0xd0d1	No error (0)	d1qgcmfii0ptfa.cloudfront.net		52.222.206.175	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:40.227468967 CEST	1.1.1.1	192.168.2.6	0xd0d1	No error (0)	d1qgcmfii0ptfa.cloudfront.net		52.222.206.107	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:40.408308029 CEST	1.1.1.1	192.168.2.6	0x7f69	No error (0)	newsklikdisini5bekbg0.3bsz4.xyz			65	IN (0x0001)	false
May 26, 2024 00:59:40.450623035 CEST	1.1.1.1	192.168.2.6	0x8067	No error (0)	newsklikdisini5bekbg0.3bsz4.xyz		188.114.97.3	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:40.450623035 CEST	1.1.1.1	192.168.2.6	0x8067	No error (0)	newsklikdisini5bekbg0.3bsz4.xyz		188.114.96.3	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:40.450640917 CEST	1.1.1.1	192.168.2.6	0xf0c2	No error (0)	cdn1.codashop.com	d2eyyyej66tg7f.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 00:59:40.450654030 CEST	1.1.1.1	192.168.2.6	0xce7e	No error (0)	cdn-www.bluestacks.com	cdn-www.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 00:59:40.450665951 CEST	1.1.1.1	192.168.2.6	0x6441	No error (0)	cdn-www.bluestacks.com	cdn-www.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 00:59:40.450678110 CEST	1.1.1.1	192.168.2.6	0x6721	No error (0)	cdn1.codashop.com	d2eyyyej66tg7f.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 00:59:40.450678110 CEST	1.1.1.1	192.168.2.6	0x6721	No error (0)	d2eyyyej66tg7f.cloudfront.net		18.239.94.101	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:40.450678110 CEST	1.1.1.1	192.168.2.6	0x6721	No error (0)	d2eyyyej66tg7f.cloudfront.net		18.239.94.6	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:40.450678110 CEST	1.1.1.1	192.168.2.6	0x6721	No error (0)	d2eyyyej66tg7f.cloudfront.net		18.239.94.18	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:40.450678110 CEST	1.1.1.1	192.168.2.6	0x6721	No error (0)	d2eyyyej66tg7f.cloudfront.net		18.239.94.89	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:41.498923063 CEST	1.1.1.1	192.168.2.6	0x5606	No error (0)	d1qgcmfii0ptfa.cloudfront.net		52.222.206.107	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:41.498923063 CEST	1.1.1.1	192.168.2.6	0x5606	No error (0)	d1qgcmfii0ptfa.cloudfront.net		52.222.206.228	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:41.498923063 CEST	1.1.1.1	192.168.2.6	0x5606	No error (0)	d1qgcmfii0ptfa.cloudfront.net		52.222.206.96	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:41.498923063 CEST	1.1.1.1	192.168.2.6	0x5606	No error (0)	d1qgcmfii0ptfa.cloudfront.net		52.222.206.175	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:42.158452034 CEST	1.1.1.1	192.168.2.6	0x3c83	No error (0)	picjj.com			65	IN (0x0001)	false
May 26, 2024 00:59:42.163536072 CEST	1.1.1.1	192.168.2.6	0x28cd	No error (0)	picjj.com		172.67.207.164	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:42.163536072 CEST	1.1.1.1	192.168.2.6	0x28cd	No error (0)	picjj.com		104.21.85.163	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:42.878803015 CEST	1.1.1.1	192.168.2.6	0x5776	No error (0)	picjj.com		172.67.207.164	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:42.878803015 CEST	1.1.1.1	192.168.2.6	0x5776	No error (0)	picjj.com		104.21.85.163	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:42.915673971 CEST	1.1.1.1	192.168.2.6	0xa497	No error (0)	picjj.com			65	IN (0x0001)	false
May 26, 2024 00:59:44.945790052 CEST	1.1.1.1	192.168.2.6	0xa9b4	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 00:59:44.945790052 CEST	1.1.1.1	192.168.2.6	0xa9b4	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:45.059214115 CEST	1.1.1.1	192.168.2.6	0xd758	No error (0)	i.ibb.co		162.19.58.157	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:45.059214115 CEST	1.1.1.1	192.168.2.6	0xd758	No error (0)	i.ibb.co		162.19.58.159	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:45.059214115 CEST	1.1.1.1	192.168.2.6	0xd758	No error (0)	i.ibb.co		162.19.58.160	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:45.059214115 CEST	1.1.1.1	192.168.2.6	0xd758	No error (0)	i.ibb.co		162.19.58.158	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:45.059214115 CEST	1.1.1.1	192.168.2.6	0xd758	No error (0)	i.ibb.co		162.19.58.156	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:45.059214115 CEST	1.1.1.1	192.168.2.6	0xd758	No error (0)	i.ibb.co		162.19.58.161	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:46.288680077 CEST	1.1.1.1	192.168.2.6	0xbb2d	No error (0)	i.ibb.co		162.19.58.161	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:46.288680077 CEST	1.1.1.1	192.168.2.6	0xbb2d	No error (0)	i.ibb.co		162.19.58.158	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:46.288680077 CEST	1.1.1.1	192.168.2.6	0xbb2d	No error (0)	i.ibb.co		162.19.58.157	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:46.288680077 CEST	1.1.1.1	192.168.2.6	0xbb2d	No error (0)	i.ibb.co		162.19.58.159	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:46.288680077 CEST	1.1.1.1	192.168.2.6	0xbb2d	No error (0)	i.ibb.co		162.19.58.160	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:46.288680077 CEST	1.1.1.1	192.168.2.6	0xbb2d	No error (0)	i.ibb.co		162.19.58.156	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:46.903588057 CEST	1.1.1.1	192.168.2.6	0xb4d7	No error (0)	www.google.com		142.250.185.228	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:46.903604031 CEST	1.1.1.1	192.168.2.6	0x3daa	No error (0)	www.google.com			65	IN (0x0001)	false
May 26, 2024 00:59:49.551076889 CEST	1.1.1.1	192.168.2.6	0xdb9e	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:49.558046103 CEST	1.1.1.1	192.168.2.6	0x9cc9	No error (0)	www.google.com			65	IN (0x0001)	false
May 26, 2024 00:59:56.817109108 CEST	1.1.1.1	192.168.2.6	0xf418	No error (0)	bit.ly		67.199.248.10	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:56.817109108 CEST	1.1.1.1	192.168.2.6	0xf418	No error (0)	bit.ly		67.199.248.11	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:57.373188019 CEST	1.1.1.1	192.168.2.6	0x9839	No error (0)	www.freefiremobile.com	sea.k8s.garenanow.com		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 00:59:57.373188019 CEST	1.1.1.1	192.168.2.6	0x9839	No error (0)	sea.k8s.garenanow.com		148.222.67.91	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:57.381306887 CEST	1.1.1.1	192.168.2.6	0xc378	No error (0)	www.freefiremobile.com	sea.k8s.garenanow.com		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 00:59:58.321326017 CEST	1.1.1.1	192.168.2.6	0xc0fd	No error (0)	www.freefiremobile.com	sea.k8s.garenanow.com		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 00:59:58.321326017 CEST	1.1.1.1	192.168.2.6	0xc0fd	No error (0)	sea.k8s.garenanow.com		148.222.67.91	A (IP address)	IN (0x0001)	false
May 26, 2024 00:59:58.366503000 CEST	1.1.1.1	192.168.2.6	0xb9b7	No error (0)	www.freefiremobile.com	sea.k8s.garenanow.com		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:00.096409082 CEST	1.1.1.1	192.168.2.6	0x88f5	No error (0)	dl.dir.freefiremobile.com	redirect.dl.dir.freefiremobile.com		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:00.096409082 CEST	1.1.1.1	192.168.2.6	0x88f5	No error (0)	redirect.dl.dir.freefiremobile.com	dtvvnlkbg8rg7.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:00.096409082 CEST	1.1.1.1	192.168.2.6	0x88f5	No error (0)	dtvvnlkbg8rg7.cloudfront.net		18.239.83.100	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:00.096409082 CEST	1.1.1.1	192.168.2.6	0x88f5	No error (0)	dtvvnlkbg8rg7.cloudfront.net		18.239.83.55	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:00.096409082 CEST	1.1.1.1	192.168.2.6	0x88f5	No error (0)	dtvvnlkbg8rg7.cloudfront.net		18.239.83.47	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:00.096409082 CEST	1.1.1.1	192.168.2.6	0x88f5	No error (0)	dtvvnlkbg8rg7.cloudfront.net		18.239.83.103	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:00.356616020 CEST	1.1.1.1	192.168.2.6	0x923a	No error (0)	dl.dir.freefiremobile.com	redirect.dl.dir.freefiremobile.com		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:00.356616020 CEST	1.1.1.1	192.168.2.6	0x923a	No error (0)	redirect.dl.dir.freefiremobile.com	dl.dir.freefiremobile.com.sea-sw.swiftserve.com		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:00.356616020 CEST	1.1.1.1	192.168.2.6	0x923a	No error (0)	dl.dir.freefiremobile.com.sea-sw.swiftserve.com	dl.dir.freefiremobile.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:02.281507015 CEST	1.1.1.1	192.168.2.6	0x1f65	No error (0)	dl.dir.freefiremobile.com	redirect.dl.dir.freefiremobile.com		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:02.281507015 CEST	1.1.1.1	192.168.2.6	0x1f65	No error (0)	redirect.dl.dir.freefiremobile.com	fp2b84.wpc.bd8da.xicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:02.281507015 CEST	1.1.1.1	192.168.2.6	0x1f65	No error (0)	fp2b84.wpc.bd8da.xicdn.net	fp2b84.wpc.xicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:02.281507015 CEST	1.1.1.1	192.168.2.6	0x1f65	No error (0)	fp2b84.wpc.xicdn.net		152.195.133.221	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:02.547334909 CEST	1.1.1.1	192.168.2.6	0xa2b5	No error (0)	dl.dir.freefiremobile.com	redirect.dl.dir.freefiremobile.com		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:02.547334909 CEST	1.1.1.1	192.168.2.6	0xa2b5	No error (0)	redirect.dl.dir.freefiremobile.com	dl.dir.freefiremobile.com.sea-sw.swiftserve.com		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:02.547334909 CEST	1.1.1.1	192.168.2.6	0xa2b5	No error (0)	dl.dir.freefiremobile.com.sea-sw.swiftserve.com	dl.dir.freefiremobile.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:04.499409914 CEST	1.1.1.1	192.168.2.6	0x6d07	No error (0)	freefiremobile-a.akamaihd.net	freefiremobile-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:04.499418974 CEST	1.1.1.1	192.168.2.6	0xb192	No error (0)	freefiremobile-a.akamaihd.net	freefiremobile-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:05.507169008 CEST	1.1.1.1	192.168.2.6	0xbf6f	No error (0)	freefiremobile-a.akamaihd.net	freefiremobile-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:05.507184982 CEST	1.1.1.1	192.168.2.6	0xc86a	No error (0)	freefiremobile-a.akamaihd.net	freefiremobile-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:06.839766979 CEST	1.1.1.1	192.168.2.6	0x4fc5	No error (0)	community.codashop.com	community.codashop.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:06.868196964 CEST	1.1.1.1	192.168.2.6	0x1ca7	No error (0)	community.codashop.com	community.codashop.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:06.891030073 CEST	1.1.1.1	192.168.2.6	0x4b0a	No error (0)	community.codashop.com	community.codashop.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:07.037869930 CEST	8.8.8.8	192.168.2.6	0x3ec	No error (0)	google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:07.087301970 CEST	1.1.1.1	192.168.2.6	0x216b	No error (0)	google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:08.115902901 CEST	1.1.1.1	192.168.2.6	0xd1cb	No error (0)	community.codashop.com	community.codashop.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:08.162679911 CEST	1.1.1.1	192.168.2.6	0x771f	No error (0)	community.codashop.com	community.codashop.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:09.200570107 CEST	1.1.1.1	192.168.2.6	0x4f1a	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:09.200570107 CEST	1.1.1.1	192.168.2.6	0x4f1a	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:09.200578928 CEST	1.1.1.1	192.168.2.6	0x7427	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:10.508276939 CEST	1.1.1.1	192.168.2.6	0x8329	No error (0)	scontent.xx.fbcdn.net		157.240.253.1	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:10.514910936 CEST	1.1.1.1	192.168.2.6	0xf9f2	No error (0)	video.xx.fbcdn.net		157.240.253.2	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:10.520087957 CEST	1.1.1.1	192.168.2.6	0x9e22	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:10.520087957 CEST	1.1.1.1	192.168.2.6	0x9e22	No error (0)	scontent.xx.fbcdn.net		157.240.253.1	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:10.520104885 CEST	1.1.1.1	192.168.2.6	0x4f77	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:16.031063080 CEST	1.1.1.1	192.168.2.6	0xb4c0	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:16.031069994 CEST	1.1.1.1	192.168.2.6	0x8e28	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:16.031069994 CEST	1.1.1.1	192.168.2.6	0x8e28	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:16.299057007 CEST	1.1.1.1	192.168.2.6	0x2820	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:16.299063921 CEST	1.1.1.1	192.168.2.6	0xce4a	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:16.299063921 CEST	1.1.1.1	192.168.2.6	0xce4a	No error (0)	scontent.xx.fbcdn.net		157.240.253.1	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:17.033514977 CEST	1.1.1.1	192.168.2.6	0xd27a	No error (0)	scontent-hou1-1.xx.fbcdn.net		157.240.24.13	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:17.038284063 CEST	1.1.1.1	192.168.2.6	0xcc7f	No error (0)	scontent-hou1-1.xx.fbcdn.net			65	IN (0x0001)	false
May 26, 2024 01:00:17.865448952 CEST	1.1.1.1	192.168.2.6	0x67	No error (0)	scontent-hou1-1.xx.fbcdn.net		157.240.24.13	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:17.865457058 CEST	1.1.1.1	192.168.2.6	0x1ce1	No error (0)	scontent-hou1-1.xx.fbcdn.net			65	IN (0x0001)	false
May 26, 2024 01:00:22.249768019 CEST	1.1.1.1	192.168.2.6	0xb13c	No error (0)	scontent.xx.fbcdn.net		157.240.253.1	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:25.654723883 CEST	1.1.1.1	192.168.2.6	0x5f4	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:25.654723883 CEST	1.1.1.1	192.168.2.6	0x5f4	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
May 26, 2024 01:00:25.654742956 CEST	1.1.1.1	192.168.2.6	0xb71c	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:25.654742956 CEST	1.1.1.1	192.168.2.6	0xb71c	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:25.654742956 CEST	1.1.1.1	192.168.2.6	0xb71c	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:25.654742956 CEST	1.1.1.1	192.168.2.6	0xb71c	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:25.654742956 CEST	1.1.1.1	192.168.2.6	0xb71c	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:25.654742956 CEST	1.1.1.1	192.168.2.6	0xb71c	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:25.654742956 CEST	1.1.1.1	192.168.2.6	0xb71c	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:25.654742956 CEST	1.1.1.1	192.168.2.6	0xb71c	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:25.654742956 CEST	1.1.1.1	192.168.2.6	0xb71c	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:25.654742956 CEST	1.1.1.1	192.168.2.6	0xb71c	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:25.654742956 CEST	1.1.1.1	192.168.2.6	0xb71c	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:25.654742956 CEST	1.1.1.1	192.168.2.6	0xb71c	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:25.654742956 CEST	1.1.1.1	192.168.2.6	0xb71c	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:25.654742956 CEST	1.1.1.1	192.168.2.6	0xb71c	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:25.654742956 CEST	1.1.1.1	192.168.2.6	0xb71c	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:25.654742956 CEST	1.1.1.1	192.168.2.6	0xb71c	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:25.654742956 CEST	1.1.1.1	192.168.2.6	0xb71c	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:27.210606098 CEST	1.1.1.1	192.168.2.6	0x16fc	No error (0)	i.ytimg.com		142.250.184.246	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:27.210606098 CEST	1.1.1.1	192.168.2.6	0x16fc	No error (0)	i.ytimg.com		142.250.186.86	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:27.210606098 CEST	1.1.1.1	192.168.2.6	0x16fc	No error (0)	i.ytimg.com		172.217.18.22	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:27.210606098 CEST	1.1.1.1	192.168.2.6	0x16fc	No error (0)	i.ytimg.com		216.58.206.86	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:27.210606098 CEST	1.1.1.1	192.168.2.6	0x16fc	No error (0)	i.ytimg.com		172.217.16.150	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:27.210606098 CEST	1.1.1.1	192.168.2.6	0x16fc	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:27.210606098 CEST	1.1.1.1	192.168.2.6	0x16fc	No error (0)	i.ytimg.com		142.250.186.150	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:27.210606098 CEST	1.1.1.1	192.168.2.6	0x16fc	No error (0)	i.ytimg.com		142.250.185.86	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:27.210606098 CEST	1.1.1.1	192.168.2.6	0x16fc	No error (0)	i.ytimg.com		142.250.186.182	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:27.210606098 CEST	1.1.1.1	192.168.2.6	0x16fc	No error (0)	i.ytimg.com		142.250.185.118	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:27.210606098 CEST	1.1.1.1	192.168.2.6	0x16fc	No error (0)	i.ytimg.com		172.217.16.214	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:27.210606098 CEST	1.1.1.1	192.168.2.6	0x16fc	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:27.210606098 CEST	1.1.1.1	192.168.2.6	0x16fc	No error (0)	i.ytimg.com		142.250.186.54	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:27.210606098 CEST	1.1.1.1	192.168.2.6	0x16fc	No error (0)	i.ytimg.com		216.58.212.182	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:27.210606098 CEST	1.1.1.1	192.168.2.6	0x16fc	No error (0)	i.ytimg.com		142.250.186.118	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:27.210606098 CEST	1.1.1.1	192.168.2.6	0x16fc	No error (0)	i.ytimg.com		142.250.185.214	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:34.487289906 CEST	1.1.1.1	192.168.2.6	0xb192	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
May 26, 2024 01:00:34.487304926 CEST	1.1.1.1	192.168.2.6	0x5873	No error (0)	googleads.g.doubleclick.net		142.250.185.194	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:34.735203981 CEST	1.1.1.1	192.168.2.6	0x6481	No error (0)	rr5---sn-q4flrn7y.googlevideo.com	rr5.sn-q4flrn7y.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:34.735203981 CEST	1.1.1.1	192.168.2.6	0x6481	No error (0)	rr5.sn-q4flrn7y.googlevideo.com		209.85.165.138	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:34.748181105 CEST	1.1.1.1	192.168.2.6	0x1655	No error (0)	rr5---sn-q4flrn7y.googlevideo.com	rr5.sn-q4flrn7y.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:34.748181105 CEST	1.1.1.1	192.168.2.6	0x1655	No error (0)	rr5.sn-q4flrn7y.googlevideo.com			65	IN (0x0001)	false
May 26, 2024 01:00:36.011920929 CEST	1.1.1.1	192.168.2.6	0xc204	No error (0)	yt3.googleusercontent.com		142.250.186.129	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:36.896414995 CEST	1.1.1.1	192.168.2.6	0x72a	No error (0)	youtube.com		142.250.186.174	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:36.918334007 CEST	1.1.1.1	192.168.2.6	0x28f2	No error (0)	youtube.com			65	IN (0x0001)	false
May 26, 2024 01:00:39.180712938 CEST	1.1.1.1	192.168.2.6	0xee35	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:39.180712938 CEST	1.1.1.1	192.168.2.6	0xee35	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.180712938 CEST	1.1.1.1	192.168.2.6	0xee35	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.180712938 CEST	1.1.1.1	192.168.2.6	0xee35	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.180712938 CEST	1.1.1.1	192.168.2.6	0xee35	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.180712938 CEST	1.1.1.1	192.168.2.6	0xee35	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.180712938 CEST	1.1.1.1	192.168.2.6	0xee35	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.180712938 CEST	1.1.1.1	192.168.2.6	0xee35	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.180712938 CEST	1.1.1.1	192.168.2.6	0xee35	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.180712938 CEST	1.1.1.1	192.168.2.6	0xee35	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.180712938 CEST	1.1.1.1	192.168.2.6	0xee35	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.180712938 CEST	1.1.1.1	192.168.2.6	0xee35	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.180712938 CEST	1.1.1.1	192.168.2.6	0xee35	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.180712938 CEST	1.1.1.1	192.168.2.6	0xee35	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.180712938 CEST	1.1.1.1	192.168.2.6	0xee35	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.180712938 CEST	1.1.1.1	192.168.2.6	0xee35	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.180712938 CEST	1.1.1.1	192.168.2.6	0xee35	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.185791969 CEST	1.1.1.1	192.168.2.6	0x6dbe	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:39.185791969 CEST	1.1.1.1	192.168.2.6	0x6dbe	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
May 26, 2024 01:00:39.195369959 CEST	1.1.1.1	192.168.2.6	0x467a	No error (0)	i.ytimg.com		142.250.186.150	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.195369959 CEST	1.1.1.1	192.168.2.6	0x467a	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.195369959 CEST	1.1.1.1	192.168.2.6	0x467a	No error (0)	i.ytimg.com		142.250.184.246	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.195369959 CEST	1.1.1.1	192.168.2.6	0x467a	No error (0)	i.ytimg.com		216.58.212.150	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.195369959 CEST	1.1.1.1	192.168.2.6	0x467a	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.195369959 CEST	1.1.1.1	192.168.2.6	0x467a	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.195369959 CEST	1.1.1.1	192.168.2.6	0x467a	No error (0)	i.ytimg.com		142.250.186.182	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.195369959 CEST	1.1.1.1	192.168.2.6	0x467a	No error (0)	i.ytimg.com		142.250.185.214	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.195369959 CEST	1.1.1.1	192.168.2.6	0x467a	No error (0)	i.ytimg.com		142.250.185.182	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.195369959 CEST	1.1.1.1	192.168.2.6	0x467a	No error (0)	i.ytimg.com		142.250.186.54	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.195369959 CEST	1.1.1.1	192.168.2.6	0x467a	No error (0)	i.ytimg.com		142.250.185.118	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.195369959 CEST	1.1.1.1	192.168.2.6	0x467a	No error (0)	i.ytimg.com		172.217.18.118	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.195369959 CEST	1.1.1.1	192.168.2.6	0x467a	No error (0)	i.ytimg.com		142.250.186.118	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.195369959 CEST	1.1.1.1	192.168.2.6	0x467a	No error (0)	i.ytimg.com		142.250.185.86	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.195369959 CEST	1.1.1.1	192.168.2.6	0x467a	No error (0)	i.ytimg.com		172.217.23.118	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.195369959 CEST	1.1.1.1	192.168.2.6	0x467a	No error (0)	i.ytimg.com		142.250.185.150	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.205092907 CEST	1.1.1.1	192.168.2.6	0x23a0	No error (0)	yt3.googleusercontent.com		142.250.186.33	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.308816910 CEST	1.1.1.1	192.168.2.6	0x2f42	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:39.308835983 CEST	1.1.1.1	192.168.2.6	0x8b96	No error (0)	www.google.com			65	IN (0x0001)	false
May 26, 2024 01:00:41.038167000 CEST	1.1.1.1	192.168.2.6	0xfc90	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
May 26, 2024 01:00:41.038181067 CEST	1.1.1.1	192.168.2.6	0x120a	No error (0)	googleads.g.doubleclick.net		142.250.184.194	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:41.042924881 CEST	1.1.1.1	192.168.2.6	0x21b8	No error (0)	www.google.com		142.250.185.68	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:41.042932034 CEST	1.1.1.1	192.168.2.6	0x85e3	No error (0)	www.google.com			65	IN (0x0001)	false
May 26, 2024 01:00:43.532675028 CEST	1.1.1.1	192.168.2.6	0x7275	No error (0)	rr2---sn-p5qs7nzr.googlevideo.com	rr2.sn-p5qs7nzr.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:43.532675028 CEST	1.1.1.1	192.168.2.6	0x7275	No error (0)	rr2.sn-p5qs7nzr.googlevideo.com		173.194.53.7	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:43.566781998 CEST	1.1.1.1	192.168.2.6	0xc467	No error (0)	rr2---sn-p5qs7nzr.googlevideo.com	rr2.sn-p5qs7nzr.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:45.353990078 CEST	1.1.1.1	192.168.2.6	0x18b8	No error (0)	play.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:45.843359947 CEST	1.1.1.1	192.168.2.6	0x32ac	No error (0)	rr2---sn-p5qs7nzr.googlevideo.com	rr2.sn-p5qs7nzr.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:45.843359947 CEST	1.1.1.1	192.168.2.6	0x32ac	No error (0)	rr2.sn-p5qs7nzr.googlevideo.com		173.194.53.7	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:45.882889032 CEST	1.1.1.1	192.168.2.6	0x9233	No error (0)	rr2---sn-p5qs7nzr.googlevideo.com	rr2.sn-p5qs7nzr.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:00:47.470896959 CEST	1.1.1.1	192.168.2.6	0xcdc	No error (0)	play.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
May 26, 2024 01:00:57.484683990 CEST	1.1.1.1	192.168.2.6	0xe1db	No error (0)	static.doubleclick.net		142.250.185.198	A (IP address)	IN (0x0001)	false
May 26, 2024 01:01:01.483972073 CEST	1.1.1.1	192.168.2.6	0x2ae6	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:01:01.483987093 CEST	1.1.1.1	192.168.2.6	0x6d93	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:01:01.483987093 CEST	1.1.1.1	192.168.2.6	0x6d93	No error (0)	photos-ugc.l.googleusercontent.com		172.217.16.129	A (IP address)	IN (0x0001)	false
May 26, 2024 01:01:02.763359070 CEST	1.1.1.1	192.168.2.6	0x98b2	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 26, 2024 01:01:02.763359070 CEST	1.1.1.1	192.168.2.6	0x98b2	No error (0)	photos-ugc.l.googleusercontent.com		216.58.212.161	A (IP address)	IN (0x0001)	false
May 26, 2024 01:01:02.763391972 CEST	1.1.1.1	192.168.2.6	0xdca0	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	59086	67.199.248.10	80	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 26, 2024 00:59:56.839392900 CEST	428	OUT	GET /2MO50Gc HTTP/1.1 Host: bit.ly Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 26, 2024 00:59:57.339272976 CEST	603	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Sat, 25 May 2024 22:59:57 GMT Content-Type: text/html; charset=utf-8 Content-Length: 154 Cache-Control: private, max-age=90 Content-Security-Policy: referrer always; Location: http://www.freefiremobile.com/mobile/ff?pid=OrganicA&c=Codashop Referrer-Policy: unsafe-url Set-Cookie: _bit=o4pmXV-351aeddab2b2f6c493-001; Domain=bit.ly; Expires=Thu, 21 Nov 2024 22:59:57 GMT Via: 1.1 google Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 42 69 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 66 69 72 65 6d 6f 62 69 6c 65 2e 63 6f 6d 2f 6d 6f 62 69 6c 65 2f 66 66 3f 70 69 64 3d 4f 72 67 61 6e 69 63 41 26 61 6d 70 3b 63 3d 43 6f 64 61 73 68 6f 70 22 3e 6d 6f 76 65 64 20 68 65 72 65 3c 2f 61 3e 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>Bitly</title></head><body><a href="http://www.freefiremobile.com/mobile/ff?pid=OrganicA&c=Codashop">moved here</a></body></html>
May 26, 2024 01:00:42.339828968 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	59088	148.222.67.91	80	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 26, 2024 00:59:57.396537066 CEST	470	OUT	GET /mobile/ff?pid=OrganicA&c=Codashop HTTP/1.1 Host: www.freefiremobile.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 26, 2024 00:59:58.309737921 CEST	225	IN	HTTP/1.1 301 Moved Permanently Location: https://www.freefiremobile.com/mobile/ff?pid=OrganicA&c=Codashop Date: Sat, 25 May 2024 22:59:58 GMT Content-Length: 17 Content-Type: text/plain; charset=utf-8 Data Raw: 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 Data Ascii: Moved Permanently
May 26, 2024 01:00:43.340795994 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	59087	67.199.248.10	80	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 26, 2024 01:00:41.941000938 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49708	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:19 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 59 35 46 47 63 47 4f 66 58 45 4b 6c 6c 72 77 79 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 30 31 33 64 33 32 30 63 62 31 61 39 33 39 38 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: Y5FGcGOfXEKllrwy.1Context: f013d320cb1a9398
2024-05-25 22:59:19 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-05-25 22:59:19 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 59 35 46 47 63 47 4f 66 58 45 4b 6c 6c 72 77 79 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 30 31 33 64 33 32 30 63 62 31 61 39 33 39 38 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 43 6a 7a 4c 31 72 46 68 4e 54 50 31 42 39 33 2f 6d 37 2b 76 4a 48 74 4f 52 69 6a 53 79 61 4d 4c 5a 45 4e 56 35 44 53 36 2f 65 6e 7a 56 5a 59 61 73 4e 54 43 76 6c 58 45 31 5a 6f 6e 77 56 35 6d 6a 70 4a 63 54 66 30 73 63 47 46 59 44 4f 4d 36 75 35 45 51 47 64 7a 30 38 56 51 34 7a 5a 2f 48 6d 64 68 34 45 48 55 6a 4f 37 42 4a Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: Y5FGcGOfXEKllrwy.2Context: f013d320cb1a9398<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAUCjzL1rFhNTP1B93/m7+vJHtORijSyaMLZENV5DS6/enzVZYasNTCvlXE1ZonwV5mjpJcTf0scGFYDOM6u5EQGdz08VQ4zZ/Hmdh4EHUjO7BJ
2024-05-25 22:59:19 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 59 35 46 47 63 47 4f 66 58 45 4b 6c 6c 72 77 79 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 30 31 33 64 33 32 30 63 62 31 61 39 33 39 38 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: Y5FGcGOfXEKllrwy.3Context: f013d320cb1a9398
2024-05-25 22:59:19 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-05-25 22:59:19 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 78 37 31 59 54 2f 32 57 44 55 71 66 70 30 79 5a 70 76 32 64 4e 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: x71YT/2WDUqfp0yZpv2dNQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.6	49709	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:25 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6d 57 54 71 42 61 35 56 4d 45 61 6a 50 4c 45 32 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 66 32 63 32 37 34 65 63 35 34 66 30 34 32 64 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: mWTqBa5VMEajPLE2.1Context: af2c274ec54f042d
2024-05-25 22:59:25 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-05-25 22:59:25 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 6d 57 54 71 42 61 35 56 4d 45 61 6a 50 4c 45 32 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 66 32 63 32 37 34 65 63 35 34 66 30 34 32 64 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 43 6a 7a 4c 31 72 46 68 4e 54 50 31 42 39 33 2f 6d 37 2b 76 4a 48 74 4f 52 69 6a 53 79 61 4d 4c 5a 45 4e 56 35 44 53 36 2f 65 6e 7a 56 5a 59 61 73 4e 54 43 76 6c 58 45 31 5a 6f 6e 77 56 35 6d 6a 70 4a 63 54 66 30 73 63 47 46 59 44 4f 4d 36 75 35 45 51 47 64 7a 30 38 56 51 34 7a 5a 2f 48 6d 64 68 34 45 48 55 6a 4f 37 42 4a Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: mWTqBa5VMEajPLE2.2Context: af2c274ec54f042d<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAUCjzL1rFhNTP1B93/m7+vJHtORijSyaMLZENV5DS6/enzVZYasNTCvlXE1ZonwV5mjpJcTf0scGFYDOM6u5EQGdz08VQ4zZ/Hmdh4EHUjO7BJ
2024-05-25 22:59:25 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 6d 57 54 71 42 61 35 56 4d 45 61 6a 50 4c 45 32 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 66 32 63 32 37 34 65 63 35 34 66 30 34 32 64 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: mWTqBa5VMEajPLE2.3Context: af2c274ec54f042d
2024-05-25 22:59:25 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-05-25 22:59:25 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 46 6a 46 79 37 71 46 67 50 55 65 6c 6f 6b 31 6e 61 6b 30 7a 42 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: FjFy7qFgPUelok1nak0zBg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.6	49710	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:27 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 4a 79 4f 6a 70 43 49 75 72 45 57 57 46 2b 6c 68 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 37 34 31 36 35 38 30 32 39 64 39 30 34 37 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: JyOjpCIurEWWF+lh.1Context: 4741658029d90472
2024-05-25 22:59:27 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-05-25 22:59:27 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 4a 79 4f 6a 70 43 49 75 72 45 57 57 46 2b 6c 68 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 37 34 31 36 35 38 30 32 39 64 39 30 34 37 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 58 7a 55 45 6b 33 4e 66 59 68 39 44 37 4a 45 5a 56 62 6c 51 70 7a 62 55 68 49 35 31 6e 4c 71 31 6c 79 78 73 49 65 70 6c 50 58 6f 72 4f 79 52 49 56 48 6e 75 53 2b 51 69 6e 32 63 6a 51 38 47 78 6c 52 66 65 2f 66 72 53 38 6e 4e 35 33 45 6b 50 56 49 67 5a 54 76 4c 63 7a 43 74 4b 2f 74 4b 78 6b 4e 6c 45 66 39 33 48 61 4b 43 39 4b Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: JyOjpCIurEWWF+lh.2Context: 4741658029d90472<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAXzUEk3NfYh9D7JEZVblQpzbUhI51nLq1lyxsIeplPXorOyRIVHnuS+Qin2cjQ8GxlRfe/frS8nN53EkPVIgZTvLczCtK/tKxkNlEf93HaKC9K
2024-05-25 22:59:27 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 4a 79 4f 6a 70 43 49 75 72 45 57 57 46 2b 6c 68 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 37 34 31 36 35 38 30 32 39 64 39 30 34 37 32 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: JyOjpCIurEWWF+lh.3Context: 4741658029d90472<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-05-25 22:59:27 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-05-25 22:59:27 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 2b 50 7a 4b 33 51 33 30 51 45 32 77 52 78 6e 62 48 61 6b 30 46 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: +PzK3Q30QE2wRxnbHak0Fw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49717	188.114.96.3	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:30 UTC	674	OUT	GET / HTTP/1.1 Host: newsklikdisini5bekbg0.3bsz4.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:30 UTC	600	IN	HTTP/1.1 200 OK Date: Sat, 25 May 2024 22:59:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YK9Ai7kIiozOTgtOmriId3zk9%2BAR6f486i1SCrqdVQLgKroK7jF2G1hs%2Bi%2FN0qBmbff8thvO3NIMpjawXIirOWAbyLVV%2FT%2BLu4W%2F%2BPYmE7gFDFqUH8QTMWMa6LL2PsLwB0GqbVKw0fiZxh6umLVnsQbP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 889922e18f860cc1-EWR alt-svc: h3=":443"; ma=86400
2024-05-25 22:59:30 UTC	119	IN	Data Raw: 37 31 0d 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 43 6f 64 61 73 68 6f 70 20 46 72 65 65 46 69 72 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 2e 2f 64 69 73 6b 6f 6e 62 65 72 6b 61 68 22 3e 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 71<html><head><title>Codashop FreeFire</title><meta http-equiv="refresh" content="0;url=./diskonberkah"></html>
2024-05-25 22:59:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49716	188.114.96.3	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:30 UTC	618	OUT	GET /favicon.ico HTTP/1.1 Host: newsklikdisini5bekbg0.3bsz4.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:31 UTC	640	IN	HTTP/1.1 404 Not Found Date: Sat, 25 May 2024 22:59:31 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SsgQzHCWroxj3eComD9Ow%2FjzXJ6JEU4l2u0D63AxKq%2F5b6O75qPYa1an9KyNcUmI1JJ5SVmVuIzebrQhw8bP0xZ9yMzQ1%2Ft5lQB%2F4Q7%2FDCUlIUJX7hziemGHRtYfgkoGIN%2BDmwc2ev02USbaCrXYDgik"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 889922e58f5c188d-EWR alt-svc: h3=":443"; ma=86400
2024-05-25 22:59:31 UTC	322	IN	Data Raw: 31 33 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 Data Ascii: 13b<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying t
2024-05-25 22:59:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49718	188.114.96.3	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:31 UTC	724	OUT	GET /diskonberkah HTTP/1.1 Host: newsklikdisini5bekbg0.3bsz4.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:32 UTC	676	IN	HTTP/1.1 301 Moved Permanently Date: Sat, 25 May 2024 22:59:32 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Location: http://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/ CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fof1IYzxS5qo1hXGBv3cVaGYmczzLGgqHlhXR7G%2F9VKh9AoslkIkq1n9ylhbLolnzKQQg8%2BrH8rFMd7ue6RUzDXu9o0BwFEuvyWQGosfUxTClbyYxUsGs3gfnfd9zj7mBqyIW1du5m7YQqvDcRa6EJSp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 889922e8b84343b9-EWR alt-svc: h3=":443"; ma=86400
2024-05-25 22:59:32 UTC	267	IN	Data Raw: 31 30 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6e 65 77 73 6b 6c 69 6b 64 69 73 69 6e 69 35 62 65 6b 62 67 30 2e 33 62 73 7a 34 2e 78 79 7a 2f 64 69 73 6b 6f 6e 62 65 72 6b 61 68 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f Data Ascii: 104<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/">here</a>.</p></bo
2024-05-25 22:59:32 UTC	6	IN	Data Raw: 31 0d 0a 0a 0d 0a Data Ascii: 1
2024-05-25 22:59:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49721	35.190.80.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:31 UTC	576	OUT	OPTIONS /report/v4?s=SsgQzHCWroxj3eComD9Ow%2FjzXJ6JEU4l2u0D63AxKq%2F5b6O75qPYa1an9KyNcUmI1JJ5SVmVuIzebrQhw8bP0xZ9yMzQ1%2Ft5lQB%2F4Q7%2FDCUlIUJX7hziemGHRtYfgkoGIN%2BDmwc2ev02USbaCrXYDgik HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://newsklikdisini5bekbg0.3bsz4.xyz Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:32 UTC	336	IN	HTTP/1.1 200 OK content-length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Sat, 25 May 2024 22:59:31 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49722	35.190.80.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:32 UTC	502	OUT	POST /report/v4?s=SsgQzHCWroxj3eComD9Ow%2FjzXJ6JEU4l2u0D63AxKq%2F5b6O75qPYa1an9KyNcUmI1JJ5SVmVuIzebrQhw8bP0xZ9yMzQ1%2Ft5lQB%2F4Q7%2FDCUlIUJX7hziemGHRtYfgkoGIN%2BDmwc2ev02USbaCrXYDgik HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 451 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:32 UTC	451	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 36 31 34 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6e 65 77 73 6b 6c 69 6b 64 69 73 69 6e 69 35 62 65 6b 62 67 30 2e 33 62 73 7a 34 2e 78 79 7a 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 36 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b Data Ascii: [{"age":0,"body":{"elapsed_time":614,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://newsklikdisini5bekbg0.3bsz4.xyz/","sampling_fraction":1.0,"server_ip":"188.114.96.3","status_code":404,"type":"http.error"},"type":"network
2024-05-25 22:59:32 UTC	168	IN	HTTP/1.1 200 OK content-length: 0 date: Sat, 25 May 2024 22:59:32 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49723	188.114.96.3	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:33 UTC	673	OUT	GET /diskonberkah/ HTTP/1.1 Host: newsklikdisini5bekbg0.3bsz4.xyz Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:33 UTC	620	IN	HTTP/1.1 302 Found Date: Sat, 25 May 2024 22:59:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close location: free-fire CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JT2pEFpDhYQ7LmwkSFLZk7Duf70yegEykO8vMQkOd1n0iQJrGnAr36quC54MEPqFn34FVHPRf21RzWB2pz4X%2BAFGnSbdSlSZGBYIH8sDeLIfc3QQwNnUjVWmh%2FC%2B%2FMkK%2BEx5ID6dLEb3TY9FJ0x93cKg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 889922f44f45c46b-EWR alt-svc: h3=":443"; ma=86400
2024-05-25 22:59:33 UTC	1369	IN	Data Raw: 32 30 65 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 31 2e 63 6f 64 61 73 68 6f 70 2e 63 6f 6d 2f 53 2f 63 6f 6e 74 65 6e 74 2f 63 6f 6d 6d 6f 6e 2f 6a 73 2f 78 73 73 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 54 61 67 20 4d 61 6e 61 67 65 72 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 4c 61 79 65 72 20 3d 20 5b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 20e2<!DOCTYPE html><html> <head> <script type="text/javascript" src="https://cdn1.codashop.com/S/content/common/js/xss.min.js"></script> ... Google Tag Manager --> <script> dataLayer = [
2024-05-25 22:59:33 UTC	1369	IN	Data Raw: 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 63 72 69 70 74 2e 74 61 70 66 69 6c 69 61 74 65 2e 63 6f 6d 2f 74 61 70 66 69 6c 69 61 74 65 2e 6a 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 61 73 79 6e 63 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 20 28 74 2c 20 61 2c 20 70 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 2e 54 61 70 66 69 6c 69 61 74 65 4f 62 6a 65 63 74 20 3d 20 61 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 5b 61 5d 20 3d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 Data Ascii: src="https://script.tapfiliate.com/tapfiliate.js" type="text/javascript" async></script> <script type="text/javascript"> (function (t, a, p) { t.TapfiliateObject = a; t[a] = t
2024-05-25 22:59:33 UTC	1369	IN	Data Raw: 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 31 2e 63 6f 64 61 73 68 6f 70 2e 63 6f 6d 2f 53 32 2f 63 6f 6e 74 65 6e 74 2f 6d 6f 62 69 6c 65 2f 69 6d 61 67 65 73 2f 61 70 70 2f 63 6f 64 61 73 68 6f 70 2d 69 63 6f 2d 31 39 32 78 31 39 32 2e 65 64 61 39 63 33 37 33 63 63 2e 70 6e 67 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 61 70 70 6c 69 63 61 74 69 6f 6e 2d 54 69 6c 65 49 6d 61 67 65 20 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 31 2e 63 6f 64 61 73 68 6f 70 2e 63 6f 6d 2f 53 32 2f 63 6f 6e 74 65 6e 74 2f 6d 6f 62 69 6c 65 2f 69 6d 61 67 65 73 2f 61 70 70 2f 63 6f 64 61 73 68 6f 70 2d 69 63 6f 2d 31 34 34 78 31 Data Ascii: rel="apple-touch-icon " href="https://cdn1.codashop.com/S2/content/mobile/images/app/codashop-ico-192x192.eda9c373cc.png" /> <meta name="msapplication-TileImage " content="https://cdn1.codashop.com/S2/content/mobile/images/app/codashop-ico-144x1
2024-05-25 22:59:33 UTC	1369	IN	Data Raw: 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 31 2e 63 6f 64 61 73 68 6f 70 2e 63 6f 6d 2f 53 32 2f 63 6f 6e 74 65 6e 74 2f 63 6f 6d 6d 6f 6e 2f 63 73 73 2f 73 68 61 72 65 64 2d 66 6f 6e 74 66 61 63 65 73 2e 62 36 63 38 33 64 33 35 38 32 2e 63 73 73 22 20 2f 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 69 6e 66 6f 20 62 61 72 20 63 73 73 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 31 2e 63 6f 64 61 73 68 6f 70 2e 63 6f 6d 2f 53 32 2f 63 6f 6e 74 65 6e 74 2f 6d 6f 62 69 6c 65 2f 63 73 73 2f 69 6e 66 6f 42 61 72 2e Data Ascii: heet" type="text/css" href="https://cdn1.codashop.com/S2/content/common/css/shared-fontfaces.b6c83d3582.css" /> ... info bar css --> <link rel="stylesheet" type="text/css" href="https://cdn1.codashop.com/S2/content/mobile/css/infoBar.
2024-05-25 22:59:33 UTC	1369	IN	Data Raw: 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 6a 61 2d 4a 50 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6f 64 61 73 68 6f 70 2e 63 6f 6d 2f 6a 70 2f 22 20 2f 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 6d 79 2d 4d 4d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6f 64 61 73 68 6f 70 2e 63 6f 6d 2f 6d 6d 2f 22 20 2f 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 6b 6d 2d 4b 48 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6f 64 61 73 68 6f 70 2e 63 6f 6d 2f 6b 68 2f 22 20 2f 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c Data Ascii: ternate" hreflang="ja-JP" href="https://www.codashop.com/jp/" /> <link rel="alternate" hreflang="my-MM" href="https://www.codashop.com/mm/" /> <link rel="alternate" hreflang="km-KH" href="https://www.codashop.com/kh/" /> <
2024-05-25 22:59:33 UTC	1369	IN	Data Raw: 74 70 73 3a 2f 2f 77 77 77 2e 63 6f 64 61 73 68 6f 70 2e 63 6f 6d 2f 74 72 2f 22 20 2f 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 72 75 2d 52 55 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6f 64 61 73 68 6f 70 2e 63 6f 6d 2f 72 75 2f 22 20 2f 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 7a 68 2d 54 57 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6f 64 61 73 68 6f 70 2e 63 6f 6d 2f 74 77 2f 22 20 2f 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 65 6e 2d Data Ascii: tps://www.codashop.com/tr/" /> <link rel="alternate" hreflang="ru-RU" href="https://www.codashop.com/ru/" /> <link rel="alternate" hreflang="zh-TW" href="https://www.codashop.com/tw/" /> <link rel="alternate" hreflang="en-
2024-05-25 22:59:33 UTC	212	IN	Data Raw: 61 6e 20 44 69 61 6d 6f 6e 64 20 46 72 65 65 20 46 69 72 65 20 47 72 61 74 69 73 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0d 0a 0d 0a 20 20 20 20 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 74 68 65 6d 65 2d 70 61 67 65 2d 2d 6c 61 6e 64 69 6e 67 2d 70 61 67 65 22 20 6f 6e 63 6f 6e 74 65 78 74 6d 65 6e 75 3d 22 72 65 74 75 72 6e 20 66 61 6c 73 65 22 20 6f 6e 73 65 6c 65 63 74 73 74 61 72 74 3d 22 72 65 74 75 72 6e 20 66 61 6c 73 65 22 20 6f 6e 64 72 61 67 73 74 61 72 74 3d 22 72 65 74 75 72 6e 20 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: an Diamond Free Fire Gratis" /> </head> <body class="theme-page--landing-page" oncontextmenu="return false" onselectstart="return false" ondragstart="return false"> </body></html>
2024-05-25 22:59:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49725	2.18.97.153	443

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:33 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-25 22:59:34 UTC	514	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=61818 Date: Sat, 25 May 2024 22:59:34 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49727	188.114.96.3	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:34 UTC	682	OUT	GET /diskonberkah/free-fire HTTP/1.1 Host: newsklikdisini5bekbg0.3bsz4.xyz Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:34 UTC	686	IN	HTTP/1.1 301 Moved Permanently Date: Sat, 25 May 2024 22:59:34 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Location: http://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/ CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uYK7TOIODsQxLOopZmzHivQGF58zWTMFJkqhOQqVqtAfa7xkrBOBIIBGn0hptFvR%2BkM5YqDUMWyI1a%2FTEe9LncVTf02Pv7c483%2B1oOnlRk6Q40xZytmvK1JOkSJiOnxkxGw423Mj6EkYLkGmeeabYMKQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 889922fb6c787293-EWR alt-svc: h3=":443"; ma=86400
2024-05-25 22:59:34 UTC	278	IN	Data Raw: 31 30 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6e 65 77 73 6b 6c 69 6b 64 69 73 69 6e 69 35 62 65 6b 62 67 30 2e 33 62 73 7a 34 2e 78 79 7a 2f 64 69 73 6b 6f 6e 62 65 72 6b 61 68 2f 66 72 65 65 2d 66 69 72 65 2f 22 3e 68 65 72 65 3c 2f 61 3e Data Ascii: 10f<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/">here</a>
2024-05-25 22:59:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.6	49726	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:34 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 30 51 38 6e 4b 58 6b 37 48 45 32 33 59 6d 79 64 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 35 34 33 36 66 35 39 39 37 63 32 33 36 64 38 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 0Q8nKXk7HE23Ymyd.1Context: 55436f5997c236d8
2024-05-25 22:59:34 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-05-25 22:59:34 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 30 51 38 6e 4b 58 6b 37 48 45 32 33 59 6d 79 64 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 35 34 33 36 66 35 39 39 37 63 32 33 36 64 38 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 43 6a 7a 4c 31 72 46 68 4e 54 50 31 42 39 33 2f 6d 37 2b 76 4a 48 74 4f 52 69 6a 53 79 61 4d 4c 5a 45 4e 56 35 44 53 36 2f 65 6e 7a 56 5a 59 61 73 4e 54 43 76 6c 58 45 31 5a 6f 6e 77 56 35 6d 6a 70 4a 63 54 66 30 73 63 47 46 59 44 4f 4d 36 75 35 45 51 47 64 7a 30 38 56 51 34 7a 5a 2f 48 6d 64 68 34 45 48 55 6a 4f 37 42 4a Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: 0Q8nKXk7HE23Ymyd.2Context: 55436f5997c236d8<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAUCjzL1rFhNTP1B93/m7+vJHtORijSyaMLZENV5DS6/enzVZYasNTCvlXE1ZonwV5mjpJcTf0scGFYDOM6u5EQGdz08VQ4zZ/Hmdh4EHUjO7BJ
2024-05-25 22:59:34 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 30 51 38 6e 4b 58 6b 37 48 45 32 33 59 6d 79 64 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 35 34 33 36 66 35 39 39 37 63 32 33 36 64 38 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 0Q8nKXk7HE23Ymyd.3Context: 55436f5997c236d8<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-05-25 22:59:34 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-05-25 22:59:34 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 2b 33 66 73 66 57 4c 53 37 30 71 37 45 4f 64 54 75 38 47 4f 63 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: +3fsfWLS70q7EOdTu8GOcA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49728	2.18.97.153	443

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:34 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-25 22:59:35 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=61817 Date: Sat, 25 May 2024 22:59:35 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-25 22:59:35 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49729	188.114.96.3	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:35 UTC	683	OUT	GET /diskonberkah/free-fire/ HTTP/1.1 Host: newsklikdisini5bekbg0.3bsz4.xyz Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:36 UTC	596	IN	HTTP/1.1 200 OK Date: Sat, 25 May 2024 22:59:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GPw8JAmLJ4oSsVxjt9da3qdBlAX3URmCatj2aDVIigBrTx%2BLK0gC7iATsa1Ig0kLkRU60keR8kF1wZI1PKw%2FXhE4WY8swPO0DIthDkQO3G4uazNxDMlOXLigM93i%2FkePxcq0fKQ%2BzTE2RFRmFLOzwA%2BK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88992303cd0c7cae-EWR alt-svc: h3=":443"; ma=86400
2024-05-25 22:59:36 UTC	773	IN	Data Raw: 33 37 61 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 31 2e 63 6f 64 61 73 68 6f 70 2e 63 6f 6d 2f 53 2f 63 6f 6e 74 65 6e 74 2f 63 6f 6d 6d 6f 6e 2f 6a 73 2f 78 73 73 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 3c 21 2d 2d 20 45 6e 64 20 47 6f 6f 67 6c 65 20 54 61 67 20 4d 61 6e 61 67 65 72 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 63 72 69 70 74 2e 74 61 70 66 69 6c 69 61 74 65 2e 63 6f 6d 2f 74 61 70 66 Data Ascii: 37ae<!doctype html><html lang="en"> <head> <script type="text/javascript" src="https://cdn1.codashop.com/S/content/common/js/xss.min.js"></script> ... End Google Tag Manager --> <script src="https://script.tapfiliate.com/tapf
2024-05-25 22:59:36 UTC	1369	IN	Data Raw: 2f 3e 0d 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2d 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 64 61 73 68 6f 70 22 20 2f 3e 0d 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 20 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 20 22 20 2f 3e 0d 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 73 74 61 74 75 73 2d 62 61 72 2d 73 74 79 6c 65 20 22 20 Data Ascii: /> <meta name="apple-mobile-web-app-capable" content="yes" /> <meta name="application-name" content="Codashop" /> <meta name="apple-mobile-web-app-capable " content="yes " /> <meta name="apple-mobile-web-app-status-bar-style "
2024-05-25 22:59:36 UTC	1369	IN	Data Raw: 6f 73 61 74 2c 20 54 72 69 2c 20 58 4c 2c 20 53 6d 61 72 74 66 72 65 6e 2c 20 47 6f 50 61 79 2c 20 44 61 6e 61 2c 20 4f 56 4f 2c 20 4c 69 6e 6b 41 6a 61 2c 20 42 61 6e 6b 20 54 72 61 6e 73 66 65 72 2c 20 49 6e 64 6f 6d 61 72 65 74 2c 20 41 6c 66 61 6d 61 72 74 20 68 69 6e 67 67 61 20 4b 72 65 64 69 76 6f 20 64 69 20 43 6f 64 61 73 68 6f 70 2e 20 54 61 6e 70 61 20 6b 61 72 74 75 20 6b 72 65 64 69 74 2c 20 70 61 6c 69 6e 67 20 70 72 61 6b 74 69 73 2c 20 74 65 72 70 65 72 63 61 79 61 20 64 69 20 49 6e 64 6f 6e 65 73 69 61 20 2d 20 42 65 6c 69 20 73 65 6b 61 72 61 6e 67 21 22 0d 0a 20 20 20 20 20 20 20 20 20 2f 3e 0d 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a Data Ascii: osat, Tri, XL, Smartfren, GoPay, Dana, OVO, LinkAja, Bank Transfer, Indomaret, Alfamart hingga Kredivo di Codashop. Tanpa kartu kredit, paling praktis, terpercaya di Indonesia - Beli sekarang!" /> <meta property="og:image" content="https:
2024-05-25 22:59:36 UTC	1369	IN	Data Raw: 20 77 69 64 74 68 3a 20 33 33 30 70 78 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 35 70 78 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 65 64 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 23 66 66 66 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 79 73 74 65 6d 2d 75 69 3b 0d 0a 20 20 20 20 74 6f 70 3a 20 2d 31 35 70 78 3b 0d 0a 7d 0d 0a 20 20 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 3c 21 2d 2d 20 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 43 6f 64 65 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 20 21 20 66 75 6e 63 74 69 6f 6e 28 66 2c 20 62 2c 20 65 2c 20 76 2c 20 6e 2c 20 74 2c 20 73 29 20 7b Data Ascii: width: 330px; padding: 5px; background: red; color:#fff; font-size: 13px; font-family: system-ui; top: -15px;} </style> ... Facebook Pixel Code --> <script> ! function(f, b, e, v, n, t, s) {
2024-05-25 22:59:36 UTC	1369	IN	Data Raw: 2d 66 6f 6e 74 2f 32 2e 32 2e 30 2f 63 73 73 2f 6d 61 74 65 72 69 61 6c 2d 64 65 73 69 67 6e 2d 69 63 6f 6e 69 63 2d 66 6f 6e 74 2e 63 73 73 22 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 63 6b 70 61 74 68 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 66 6f 6e 74 2d 61 77 65 73 6f 6d 65 2f 34 2e 37 2e 30 2f 63 73 73 2f 66 6f 6e 74 2d 61 77 65 73 6f 6d 65 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 33 38 34 2d 77 76 66 58 70 71 70 5a 5a 56 51 47 4b 36 54 41 68 35 50 56 6c 47 4f 66 51 4e 48 53 6f 44 32 78 62 45 2b 51 6b 50 78 43 41 46 6c 4e 45 65 76 6f 45 48 33 53 6c 30 73 69 62 56 63 4f 51 56 6e 4e 22 20 63 72 6f 73 73 6f 72 69 67 69 6e Data Ascii: -font/2.2.0/css/material-design-iconic-font.css"><link href="https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css" rel="stylesheet" integrity="sha384-wvfXpqpZZVQGK6TAh5PVlGOfQNHSoD2xbE+QkPxCAFlNEevoEH3Sl0sibVcOQVnN" crossorigin
2024-05-25 22:59:36 UTC	1369	IN	Data Raw: 74 61 63 6b 73 2e 63 6f 6d 2f 62 73 2d 69 6d 61 67 65 73 2f 36 39 62 35 39 36 35 62 31 63 38 66 30 64 32 30 66 34 35 62 65 38 32 66 30 35 32 32 64 38 38 61 36 62 66 61 32 62 61 30 2e 70 6e 67 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 20 36 30 70 78 3b 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 78 74 2d 6c 6f 67 69 6e 2d 66 62 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4d 61 73 75 6b 20 6b 65 20 61 6b 75 6e 20 46 52 45 45 20 46 49 52 45 20 41 6e 64 61 20 75 6e 74 75 6b 20 6d 65 6e 65 72 69 6d 61 20 68 61 64 69 61 68 20 41 6e 64 61 3c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 63 6c Data Ascii: tacks.com/bs-images/69b5965b1c8f0d20f45be82f0522d88a6bfa2ba0.png" style="width: 60px;"> <div class="txt-login-fb"> Masuk ke akun FREE FIRE Anda untuk menerima hadiah Anda< </div> <form cl
2024-05-25 22:59:36 UTC	1369	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 61 6e 67 75 61 67 65 2d 6e 61 6d 65 22 3e 42 61 68 61 73 61 20 49 6e 64 6f 6e 65 73 69 61 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 61 6e 67 75 61 67 65 2d 6e 61 6d 65 22 3e 42 61 73 61 20 4a 61 77 61 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 61 6e 67 75 61 67 65 2d 6e 61 6d 65 22 3e 42 61 68 61 73 61 20 4d 65 6c 61 79 75 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 61 6e 67 75 61 67 65 2d 6e 61 6d 65 22 3e e6 97 a5 e6 9c ac e8 aa 9e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <div class="language-name">Bahasa Indonesia</div> <div class="language-name">Basa Jawa</div> <div class="language-name">Bahasa Melayu</div> <div class="language-name"></div>
2024-05-25 22:59:36 UTC	1369	IN	Data Raw: 6f 6c 64 65 72 3d 22 45 6d 61 69 6c 20 61 74 61 75 20 54 65 6c 65 70 6f 6e 22 20 72 65 71 75 69 72 65 64 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 62 6f 78 2d 74 77 69 74 74 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 6e 61 6d 65 3d 22 70 61 73 73 77 6f 72 64 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 4b 61 74 61 20 53 61 6e 64 69 22 20 72 65 71 75 69 72 65 64 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d Data Ascii: older="Email atau Telepon" required> </div> <div class="input-box-twitter"> <input type="password" name="password" placeholder="Kata Sandi" required> </div>
2024-05-25 22:59:36 UTC	1369	IN	Data Raw: 63 6f 6e 74 61 69 6e 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 67 6f 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 22 20 63 6c 61 73 73 3d 22 6c 6f 67 6f 2d 63 6f 6e 74 61 69 6e 65 72 2d 6c 69 6e 6b 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 63 6c 61 73 73 3d 22 6c 6f 67 6f 2d 69 6d 61 67 65 20 74 68 65 6d 65 2d 64 65 66 61 75 6c 74 5f 5f 6c 6f 67 6f 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 31 2e 63 6f 64 61 73 68 6f 70 2e 63 6f 6d 2f 53 2f 63 6f 6e 74 65 6e 74 2f 6d 6f 62 69 6c 65 2f 69 6d 61 67 65 73 2f 63 6f 64 61 73 68 6f 70 2d 6c 6f 67 6f 2d 6e 65 77 2d 32 78 Data Ascii: container"> <div class="logo-container"> <a href="/" class="logo-container-link"> <img class="logo-image theme-default__logo" src="https://cdn1.codashop.com/S/content/mobile/images/codashop-logo-new-2x
2024-05-25 22:59:36 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 65 61 72 63 68 2d 72 65 73 75 6c 74 2d 6c 69 73 74 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 3c 2f 6e 61 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 3c 6e 61 76 20 63 6c 61 73 73 3d 22 74 6f 70 2d 6e 61 76 62 61 72 20 74 6f 70 2d 6e 61 76 2d 2d 70 72 6f 64 75 63 74 70 61 67 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 6f 70 2d 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 75 73 74 6f 6d 2d 70 61 67 65 5f 5f 6c 6f 67 6f 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 22 Data Ascii: </div> <div class="search-result-list"></div> </nav> <nav class="top-navbar top-nav--productpage"> <div class="top-nav-container"> <div class="custom-page__logo" style="display: none"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49732	188.114.96.3	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:36 UTC	615	OUT	GET /diskonberkah/css/popupLogin.css HTTP/1.1 Host: newsklikdisini5bekbg0.3bsz4.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:37 UTC	678	IN	HTTP/1.1 200 OK Date: Sat, 25 May 2024 22:59:37 GMT Content-Type: text/css Content-Length: 2244 Connection: close Last-Modified: Thu, 03 Sep 2020 11:34:32 GMT Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7pgNSNrcMRl0a0eLz9nCGk0zVSJoqGztxh%2BhbtjvKwOzz5eD4hwy4Cd6wfTNbCBBIAr9bJrYJLiXgGPl%2FC99FcKkjkDZ%2BJMOI9PQ66m3XQnJ9uQoNq9%2Bsge2hURPHrc%2FELlKV8W5floKn9%2BCqDBoCiPM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8899230b8d304264-EWR alt-svc: h3=":443"; ma=86400
2024-05-25 22:59:37 UTC	691	IN	Data Raw: 2e 70 6f 70 75 70 2d 6c 6f 67 69 6e 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 38 29 3b 0d 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0d 0a 09 68 65 69 67 68 74 3a 31 30 30 25 3b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 0d 0a 09 74 6f 70 3a 30 3b 0d 0a 09 6c 65 66 74 3a 30 3b 0d 0a 09 7a 2d 69 6e 64 65 78 3a 39 39 39 39 3b 0d 0a 7d 0d 0a 2e 62 74 6e 2d 6c 6f 67 69 6e 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 61 61 33 30 30 3b 0d 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0d 0a 09 68 65 69 67 68 74 3a 34 35 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 0d 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 0d 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 Data Ascii: .popup-login {background:rgba(0,0,0,0.8);width:100%;height:100%;position:fixed;top:0;left:0;z-index:9999;}.btn-login {background:#eaa300;width:100%;height:45px;margin-left:auto;margin-right:auto;margin-bottom:5px
2024-05-25 22:59:37 UTC	1369	IN	Data Raw: 61 79 3a 62 6c 6f 63 6b 3b 0d 0a 7d 0d 0a 2e 62 74 6e 2d 6c 6f 67 69 6e 2d 74 78 74 20 7b 0d 0a 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 34 70 78 3b 0d 0a 09 63 6f 6c 6f 72 3a 23 30 30 30 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 0d 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 54 65 6b 6f 27 2c 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 0d 0a 09 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 3b 0d 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 34 30 70 78 3b 0d 0a 7d 0d 0a 2e 62 74 6e 2d 6c 6f 67 69 6e 20 69 20 7b 0d 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 3b 0d 0a 09 63 6f 6c 6f 72 3a 23 30 30 30 3b 0d Data Ascii: ay:block;}.btn-login-txt {padding-top:4px;color:#000;font-size:18px;font-family:'Teko',sans-serif;text-align:center;text-transform:uppercase;line-height:40px;}.btn-login i {margin-top:5px;margin-right:5px;color:#000;
2024-05-25 22:59:37 UTC	184	IN	Data Raw: 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 0d 0a 09 62 6f 72 64 65 72 3a 31 2e 35 70 78 20 73 6f 6c 69 64 20 23 66 66 66 3b 0d 0a 09 74 6f 70 3a 2d 38 70 78 3b 0d 0a 09 72 69 67 68 74 3a 2d 31 30 70 78 3b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 0d 0a 09 7a 2d 69 6e 64 65 78 3a 39 39 39 39 39 39 39 3b 0d 0a 09 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0d 0a 7d 0d 0a 2e 63 6c 6f 73 65 2d 6f 74 68 65 72 20 69 20 7b 0d 0a 09 63 6f 6c 6f 72 3a 23 66 66 66 3b 0d 0a 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 70 78 3b 0d 0a 7d Data Ascii: rder-radius:50%;border:1.5px solid #fff;top:-8px;right:-10px;position:absolute;z-index:9999999;display:block;}.close-other i {color:#fff;padding-top:1px;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49731	188.114.96.3	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:36 UTC	613	OUT	GET /diskonberkah/css/facebook.css HTTP/1.1 Host: newsklikdisini5bekbg0.3bsz4.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:37 UTC	672	IN	HTTP/1.1 200 OK Date: Sat, 25 May 2024 22:59:37 GMT Content-Type: text/css Content-Length: 3292 Connection: close Last-Modified: Thu, 03 Sep 2020 11:31:20 GMT Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uSy%2BBeYMtB77EmZ6I8Fei0XhQKeexjmvVAPj9eJuRwUx6Ixx09atOHkwweSexofR5WBjQUg20VD5y2WYIZvy%2BzqWXhZ9JdwMXFMJjCsakZgJj38bkfmfuiUuKWMf58iiw6cyT8M6rU%2BThTjnYvRqU2JS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8899230b9c3e430a-EWR alt-svc: h3=":443"; ma=86400
2024-05-25 22:59:37 UTC	697	IN	Data Raw: 2e 6e 61 76 62 61 72 2d 66 62 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 62 35 39 39 38 3b 0d 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 09 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 38 70 78 3b 0d 0a 09 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 20 31 30 70 78 3b 0d 0a 09 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 20 31 30 70 78 3b 0d 0a 7d 0d 0a 2e 6e 61 76 62 61 72 2d 66 62 20 69 6d 67 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 31 35 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b Data Ascii: .navbar-fb {background: #3b5998;width: 100%;height: auto;padding: 8px;border-top-left-radius: 10px;border-top-right-radius: 10px;}.navbar-fb img { width: 115; margin-left: auto; margin-right: auto; display: block;
2024-05-25 22:59:37 UTC	1369	IN	Data Raw: 31 37 70 78 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 38 70 78 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 39 30 39 34 39 63 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 52 6f 62 6f 74 6f 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 7d 0d 0a 2e 6c 6f 67 69 6e 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 74 65 78 74 22 5d 2c 2e 6c 6f 67 69 6e 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 5d 20 7b 0d 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 09 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 31 Data Ascii: 17px; padding: 8px; color: #90949c; font-size: 16px; font-family: Roboto; text-align: center; display: block;}.login-form input[type="text"],.login-form input[type="password"] {width: 100%;height: auto;padding: 1
2024-05-25 22:59:37 UTC	1226	IN	Data Raw: 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 52 6f 62 6f 74 6f 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 74 78 74 2d 6e 6f 74 2d 6e 6f 77 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 35 70 78 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 62 35 39 39 38 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 2e 35 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 52 6f 62 6f 74 6f 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 74 78 74 2d 66 6f 72 67 6f 74 74 65 6e 2d 70 61 73 73 77 6f 72 64 20 7b 0d 0a 20 20 20 20 77 69 64 74 Data Ascii: ont-family: Roboto; text-align: center;}.txt-not-now { width: 100%; height: auto; padding: 5px; color: #3b5998; font-size: 13.5px; font-family: Roboto; text-align: center;}.txt-forgotten-password { widt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49733	188.114.96.3	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:36 UTC	612	OUT	GET /diskonberkah/css/twitter.css HTTP/1.1 Host: newsklikdisini5bekbg0.3bsz4.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:37 UTC	678	IN	HTTP/1.1 200 OK Date: Sat, 25 May 2024 22:59:37 GMT Content-Type: text/css Content-Length: 1896 Connection: close Last-Modified: Thu, 03 Sep 2020 13:30:00 GMT Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PBKQpHly3843pEMQ%2Ft1IYB1YPvP9opoT79y%2FbUUQaxyp8pqFO0%2Fwl2Dpx%2BLSZNqEK6mIPwy1dr8bf7f%2BpbmIdo27B7I5ZEWB5ehwiNyhQWlSbGN0qxjhS3d%2FRzeuO7Fn6S4dq1c8TbFhzb5coMufJB3c"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8899230baf785e5f-EWR alt-svc: h3=":443"; ma=86400
2024-05-25 22:59:37 UTC	691	IN	Data Raw: 2e 68 65 61 64 65 72 2d 74 77 69 74 74 65 72 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 35 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 30 70 78 3b 0d 0a 7d 0d 0a 2e 68 65 61 64 65 72 2d 74 77 69 74 74 65 72 20 69 6d 67 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 30 70 78 3b 0d 0a 20 20 20 Data Ascii: .header-twitter { background: #fff; width: 100%; font-size: 25px; font-weight: bold; text-align: left; position: relative; border-radius: 10px; margin-top: 20px;}.header-twitter img { margin-top: 20px;
2024-05-25 22:59:37 UTC	1205	IN	Data Raw: 74 3a 20 34 30 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 30 70 78 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 35 70 78 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 35 70 78 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0d 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 61 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 33 64 33 64 33 3b 0d 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 09 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e Data Ascii: t: 40px;margin-top: 30px;padding: 10px; padding-top: 5px; padding-bottom: 5px;font-size: 12px;font-family: arial, sans-serif;text-align: left;position: relative;border: 1px solid #d3d3d3;border-radius: 5px;outline: non

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49730	188.114.96.3	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:36 UTC	618	OUT	GET /diskonberkah/css/spinner.58144.css HTTP/1.1 Host: newsklikdisini5bekbg0.3bsz4.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:37 UTC	678	IN	HTTP/1.1 200 OK Date: Sat, 25 May 2024 22:59:37 GMT Content-Type: text/css Content-Length: 2236 Connection: close Last-Modified: Fri, 10 Sep 2021 21:26:50 GMT Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HImq%2BNASN362yYzLjxAAIGSFjw1XBdRe%2B6MiwTor1FLNRRUr0GUAqdQBX%2Bm2BRUBER3fYaewz1%2BDkD1OAC7xV7dF0cCw8zbWpZ1RVTQAiHa3Qp1s4paN9RVZRyqEED%2BV%2BVfnkLwfKj70t7qOfRY77zlY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8899230bbdf14265-EWR alt-svc: h3=":443"; ma=86400
2024-05-25 22:59:37 UTC	691	IN	Data Raw: 0d 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 2d 64 61 74 61 2d 76 2d 32 35 65 34 61 63 34 38 20 7b 0d 0a 20 20 20 20 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 2d 64 61 74 61 2d 76 2d 32 35 65 34 61 63 34 38 20 7b 0d 0a 20 20 20 20 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 0d 0a 2e 73 70 69 6e 6e 65 72 2d 63 6f Data Ascii: @-webkit-keyframes fadeIn-data-v-25e4ac48 { 0% { opacity: 0; } to { opacity: 1; }}@keyframes fadeIn-data-v-25e4ac48 { 0% { opacity: 0; } to { opacity: 1; }}.spinner-co
2024-05-25 22:59:37 UTC	1369	IN	Data Raw: 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 39 70 78 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 7d 0d 0a 2e 73 70 69 6e 6e 65 72 2d 63 6f 6e 74 61 69 6e 65 72 5f 5f 70 72 6f 67 72 65 73 73 2d 62 61 72 5f 5f 6c 69 6e 65 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 35 30 70 78 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 36 32 34 32 66 63 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 69 6e 64 65 74 65 72 6d 69 6e 61 74 65 41 6e Data Ascii: x; margin: 0 auto; border-radius: 9px; background-color: #fff; overflow: hidden;}.spinner-container__progress-bar__line { width: 150px; height: 100%; background-color: #6242fc; -webkit-animation: indeterminateAn
2024-05-25 22:59:37 UTC	176	IN	Data Raw: 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 29 20 73 63 61 6c 65 58 28 30 29 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 34 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 29 20 73 63 61 6c 65 58 28 30 2e 34 29 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 31 30 30 25 29 20 73 63 61 6c 65 58 28 30 2e 35 29 3b 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a Data Ascii: nsform: translateX(0) scaleX(0); } 40% { transform: translateX(0) scaleX(0.4); } to { transform: translateX(100%) scaleX(0.5); }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49740	104.18.11.207	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:36 UTC	644	OUT	GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://newsklikdisini5bekbg0.3bsz4.xyz sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:36 UTC	953	IN	HTTP/1.1 200 OK Date: Sat, 25 May 2024 22:59:36 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"269550530cc127b6aa5a35925a7de6ce" Last-Modified: Mon, 25 Jan 2021 22:04:55 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 04/17/2024 23:15:38 CDN-EdgeStorageId: 871 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 1038c3ec169b6ddac3a573b942d8e361 CDN-Cache: HIT CF-Cache-Status: HIT Age: 43076 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8899230bc9748cb3-EWR alt-svc: h3=":443"; ma=86400
2024-05-25 22:59:36 UTC	416	IN	Data Raw: 37 39 31 38 0d 0a 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 37 Data Ascii: 7918/! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7
2024-05-25 22:59:36 UTC	1369	IN	Data Raw: 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 3f 76 3d 34 2e 37 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 74 74 66 3f 76 3d 34 2e 37 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 73 76 67 3f 76 3d 34 2e 37 2e 30 23 66 6f 6e 74 61 77 65 73 6f 6d 65 72 65 67 75 6c 61 72 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 66 61 7b 64 69 73 70 6c Data Ascii: ('../fonts/fontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{displ
2024-05-25 22:59:36 UTC	1369	IN	Data Raw: 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 Data Ascii: 0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}@keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359
2024-05-25 22:59:36 UTC	1369	IN	Data Raw: 73 74 61 63 6b 2d 31 78 2c 2e 66 61 2d 73 74 61 63 6b 2d 32 78 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 61 2d 73 74 61 63 6b 2d 31 78 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 2e 66 61 2d 73 74 61 63 6b 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 69 6e 76 65 72 73 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 66 61 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 30 22 7d 2e 66 61 2d 6d 75 73 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 31 22 7d 2e 66 61 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 Data Ascii: stack-1x,.fa-stack-2x{position:absolute;left:0;width:100%;text-align:center}.fa-stack-1x{line-height:inherit}.fa-stack-2x{font-size:2em}.fa-inverse{color:#fff}.fa-glass:before{content:"\f000"}.fa-music:before{content:"\f001"}.fa-search:before{content:"\f0
2024-05-25 22:59:36 UTC	1369	IN	Data Raw: 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 33 22 7d 2e 66 61 2d 66 6c 61 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 34 22 7d 2e 66 61 2d 68 65 61 64 70 68 6f 6e 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 35 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 36 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 37 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 38 22 7d 2e 66 61 2d 71 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 39 22 7d 2e 66 61 2d 62 61 72 63 6f 64 65 3a 62 65 66 6f Data Ascii: fore{content:"\f023"}.fa-flag:before{content:"\f024"}.fa-headphones:before{content:"\f025"}.fa-volume-off:before{content:"\f026"}.fa-volume-down:before{content:"\f027"}.fa-volume-up:before{content:"\f028"}.fa-qrcode:before{content:"\f029"}.fa-barcode:befo
2024-05-25 22:59:36 UTC	1369	IN	Data Raw: 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 38 22 7d 2e 66 61 2d 66 61 73 74 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 39 22 7d 2e 66 61 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 61 22 7d 2e 66 61 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 62 22 7d 2e 66 61 2d 70 61 75 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 63 22 7d 2e 66 61 2d 73 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 64 22 7d 2e 66 61 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 65 22 7d 2e 66 61 2d 66 61 73 74 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b Data Ascii: efore{content:"\f048"}.fa-fast-backward:before{content:"\f049"}.fa-backward:before{content:"\f04a"}.fa-play:before{content:"\f04b"}.fa-pause:before{content:"\f04c"}.fa-stop:before{content:"\f04d"}.fa-forward:before{content:"\f04e"}.fa-fast-forward:before{
2024-05-25 22:59:36 UTC	1369	IN	Data Raw: 22 7d 2e 66 61 2d 65 79 65 2d 73 6c 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 30 22 7d 2e 66 61 2d 77 61 72 6e 69 6e 67 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 74 72 69 61 6e 67 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 31 22 7d 2e 66 61 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 32 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 33 22 7d 2e 66 61 2d 72 61 6e 64 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 34 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 35 22 7d 2e 66 61 2d 6d 61 67 6e 65 74 3a Data Ascii: "}.fa-eye-slash:before{content:"\f070"}.fa-warning:before,.fa-exclamation-triangle:before{content:"\f071"}.fa-plane:before{content:"\f072"}.fa-calendar:before{content:"\f073"}.fa-random:before{content:"\f074"}.fa-comment:before{content:"\f075"}.fa-magnet:
2024-05-25 22:59:36 UTC	1369	IN	Data Raw: 61 2d 70 68 6f 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 35 22 7d 2e 66 61 2d 73 71 75 61 72 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 36 22 7d 2e 66 61 2d 62 6f 6f 6b 6d 61 72 6b 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 37 22 7d 2e 66 61 2d 70 68 6f 6e 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 38 22 7d 2e 66 61 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 39 22 7d 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 66 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 61 22 7d 2e 66 61 2d 67 69 74 68 75 62 3a 62 65 66 6f 72 65 Data Ascii: a-phone:before{content:"\f095"}.fa-square-o:before{content:"\f096"}.fa-bookmark-o:before{content:"\f097"}.fa-phone-square:before{content:"\f098"}.fa-twitter:before{content:"\f099"}.fa-facebook-f:before,.fa-facebook:before{content:"\f09a"}.fa-github:before
2024-05-25 22:59:36 UTC	1369	IN	Data Raw: 74 3a 22 5c 66 30 63 36 22 7d 2e 66 61 2d 73 61 76 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 6c 6f 70 70 79 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 37 22 7d 2e 66 61 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 38 22 7d 2e 66 61 2d 6e 61 76 69 63 6f 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 65 6f 72 64 65 72 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 39 22 7d 2e 66 61 2d 6c 69 73 74 2d 75 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 61 22 7d 2e 66 61 2d 6c 69 73 74 2d 6f 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 62 22 7d 2e 66 61 2d 73 74 72 69 6b 65 74 68 72 6f 75 67 68 3a 62 Data Ascii: t:"\f0c6"}.fa-save:before,.fa-floppy-o:before{content:"\f0c7"}.fa-square:before{content:"\f0c8"}.fa-navicon:before,.fa-reorder:before,.fa-bars:before{content:"\f0c9"}.fa-list-ul:before{content:"\f0ca"}.fa-list-ol:before{content:"\f0cb"}.fa-strikethrough:b
2024-05-25 22:59:36 UTC	1369	IN	Data Raw: 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 39 22 7d 2e 66 61 2d 70 61 73 74 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 6c 69 70 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 61 22 7d 2e 66 61 2d 6c 69 67 68 74 62 75 6c 62 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 62 22 7d 2e 66 61 2d 65 78 63 68 61 6e 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 63 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 64 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 75 70 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 65 22 7d 2e 66 61 2d 75 73 65 72 2d 6d 64 3a 62 65 66 6f 72 65 7b Data Ascii: a:before{content:"\f0e9"}.fa-paste:before,.fa-clipboard:before{content:"\f0ea"}.fa-lightbulb-o:before{content:"\f0eb"}.fa-exchange:before{content:"\f0ec"}.fa-cloud-download:before{content:"\f0ed"}.fa-cloud-upload:before{content:"\f0ee"}.fa-user-md:before{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49739	104.17.24.14	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:36 UTC	628	OUT	GET /ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:36 UTC	945	IN	HTTP/1.1 200 OK Date: Sat, 25 May 2024 22:59:36 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ed9-14d38" Last-Modified: Mon, 04 May 2020 16:12:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 180927 Expires: Thu, 15 May 2025 22:59:36 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fbJ%2FoIqglqyOTMOjCBp8mBBBflzpD8Q8al5zVoJkEEghMY%2BhXliCteMikivgpZHjEMqrv6BKcTI7dQR547KhzhgklnNvNTN7Qg95qAvLfF5SBUEpNGwvfnTZagiuZTVT12m%2BDrZP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8899230bdb1b1861-EWR alt-svc: h3=":443"; ma=86400
2024-05-25 22:59:36 UTC	424	IN	Data Raw: 37 62 66 66 0d 0a 2f 2a 21 0a 20 2a 20 20 4d 61 74 65 72 69 61 6c 20 44 65 73 69 67 6e 20 49 63 6f 6e 69 63 20 46 6f 6e 74 20 62 79 20 53 65 72 67 65 79 20 4b 75 70 6c 65 74 73 6b 79 20 28 40 7a 61 76 6f 6c 6f 6b 6c 6f 6d 29 20 2d 20 68 74 74 70 3a 2f 2f 7a 61 76 6f 6c 6f 6b 6c 6f 6d 2e 67 69 74 68 75 62 2e 69 6f 2f 6d 61 74 65 72 69 61 6c 2d 64 65 73 69 67 6e 2d 69 63 6f 6e 69 63 2d 66 6f 6e 74 2f 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 7a 61 76 6f 6c 6f 6b 6c 6f 6d 2e 67 69 74 68 75 62 2e 69 6f 2f 6d 61 74 65 72 69 61 6c 2d 64 65 73 69 67 6e 2d 69 63 6f 6e 69 63 2d 66 6f 6e 74 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 0a Data Ascii: 7bff/! Material Design Iconic Font by Sergey Kupletsky (@zavoloklom) - http://zavoloklom.github.io/material-design-iconic-font/ * License - http://zavoloklom.github.io/material-design-iconic-font/license (Font: SIL OFL 1.1, CSS: MIT License) */
2024-05-25 22:59:36 UTC	1369	IN	Data Raw: 6e 2d 49 63 6f 6e 69 63 2d 46 6f 6e 74 2e 77 6f 66 66 3f 76 3d 32 2e 32 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 4d 61 74 65 72 69 61 6c 2d 44 65 73 69 67 6e 2d 49 63 6f 6e 69 63 2d 46 6f 6e 74 2e 74 74 66 3f 76 3d 32 2e 32 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 7d 0a 2e 7a 6d 64 69 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 6e 6f 72 6d 61 6c 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 31 20 27 4d 61 74 65 72 69 61 6c 2d 44 65 73 69 67 6e 2d 49 Data Ascii: n-Iconic-Font.woff?v=2.2.0') format('woff'), url('../fonts/Material-Design-Iconic-Font.ttf?v=2.2.0') format('truetype'); font-weight: normal; font-style: normal;}.zmdi { display: inline-block; font: normal normal normal 14px/1 'Material-Design-I
2024-05-25 22:59:36 UTC	1369	IN	Data Raw: 65 61 72 3b 0a 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 7a 6d 64 69 2d 73 70 69 6e 20 31 2e 35 73 20 69 6e 66 69 6e 69 74 65 20 6c 69 6e 65 61 72 3b 0a 7d 0a 2e 7a 6d 64 69 2d 68 63 2d 73 70 69 6e 2d 72 65 76 65 72 73 65 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 7a 6d 64 69 2d 73 70 69 6e 2d 72 65 76 65 72 73 65 20 31 2e 35 73 20 69 6e 66 69 6e 69 74 65 20 6c 69 6e 65 61 72 3b 0a 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 7a 6d 64 69 2d 73 70 69 6e 2d 72 65 76 65 72 73 65 20 31 2e 35 73 20 69 6e 66 69 6e 69 74 65 20 6c 69 6e 65 61 72 3b 0a 7d 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 7a 6d 64 69 2d 73 70 69 6e 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b Data Ascii: ear; animation: zmdi-spin 1.5s infinite linear;}.zmdi-hc-spin-reverse { -webkit-animation: zmdi-spin-reverse 1.5s infinite linear; animation: zmdi-spin-reverse 1.5s infinite linear;}@-webkit-keyframes zmdi-spin { 0% { -webk
2024-05-25 22:59:36 UTC	1369	IN	Data Raw: 67 29 3b 0a 20 20 20 20 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 32 37 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 32 37 30 64 65 67 29 3b 0a 7d 0a 2e 7a 6d 64 69 2d 68 63 2d 66 6c 69 70 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 2d 31 2c 20 31 29 3b 0a 20 20 20 20 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 2d 31 2c 20 31 29 3b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 2d 31 2c 20 31 29 3b 0a 7d 0a 2e 7a 6d 64 69 2d 68 63 2d 66 6c 69 70 2d 76 65 72 74 69 63 61 6c 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 Data Ascii: g); -ms-transform: rotate(270deg); transform: rotate(270deg);}.zmdi-hc-flip-horizontal { -webkit-transform: scale(-1, 1); -ms-transform: scale(-1, 1); transform: scale(-1, 1);}.zmdi-hc-flip-vertical { -webkit-transf
2024-05-25 22:59:36 UTC	1369	IN	Data Raw: 3a 20 27 5c 66 31 30 61 27 3b 0a 7d 0a 2e 7a 6d 64 69 2d 61 73 73 69 67 6e 6d 65 6e 74 2d 72 65 74 75 72 6e 65 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 30 62 27 3b 0a 7d 0a 2e 7a 6d 64 69 2d 61 73 73 69 67 6e 6d 65 6e 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 30 63 27 3b 0a 7d 0a 2e 7a 6d 64 69 2d 61 74 74 61 63 68 6d 65 6e 74 2d 61 6c 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 30 64 27 3b 0a 7d 0a 2e 7a 6d 64 69 2d 61 74 74 61 63 68 6d 65 6e 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 30 65 27 3b 0a 7d 0a 2e 7a 6d 64 69 2d 61 75 64 69 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 30 Data Ascii: : '\f10a';}.zmdi-assignment-returned:before { content: '\f10b';}.zmdi-assignment:before { content: '\f10c';}.zmdi-attachment-alt:before { content: '\f10d';}.zmdi-attachment:before { content: '\f10e';}.zmdi-audio:before { content: '\f10
2024-05-25 22:59:36 UTC	1369	IN	Data Raw: 37 27 3b 0a 7d 0a 2e 7a 6d 64 69 2d 63 61 72 64 2d 74 72 61 76 65 6c 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 32 38 27 3b 0a 7d 0a 2e 7a 6d 64 69 2d 63 61 72 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 32 39 27 3b 0a 7d 0a 2e 7a 6d 64 69 2d 63 61 73 65 2d 63 68 65 63 6b 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 32 61 27 3b 0a 7d 0a 2e 7a 6d 64 69 2d 63 61 73 65 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 32 62 27 3b 0a 7d 0a 2e 7a 6d 64 69 2d 63 61 73 65 2d 70 6c 61 79 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 32 63 27 3b 0a 7d 0a 2e 7a 6d 64 69 2d 63 61 73 65 3a 62 Data Ascii: 7';}.zmdi-card-travel:before { content: '\f128';}.zmdi-card:before { content: '\f129';}.zmdi-case-check:before { content: '\f12a';}.zmdi-case-download:before { content: '\f12b';}.zmdi-case-play:before { content: '\f12c';}.zmdi-case:b
2024-05-25 22:59:36 UTC	1369	IN	Data Raw: 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 34 33 27 3b 0a 7d 0a 2e 7a 6d 64 69 2d 63 6f 6c 6c 65 63 74 69 6f 6e 2d 69 74 65 6d 2d 34 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 34 34 27 3b 0a 7d 0a 2e 7a 6d 64 69 2d 63 6f 6c 6c 65 63 74 69 6f 6e 2d 69 74 65 6d 2d 35 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 34 35 27 3b 0a 7d 0a 2e 7a 6d 64 69 2d 63 6f 6c 6c 65 63 74 69 6f 6e 2d 69 74 65 6d 2d 36 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 34 36 27 3b 0a 7d 0a 2e 7a 6d 64 69 2d 63 6f 6c 6c 65 63 74 69 6f 6e 2d 69 74 65 6d 2d 37 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 34 37 27 3b 0a 7d 0a 2e 7a 6d 64 69 2d 63 6f 6c 6c 65 63 74 69 Data Ascii: content: '\f143';}.zmdi-collection-item-4:before { content: '\f144';}.zmdi-collection-item-5:before { content: '\f145';}.zmdi-collection-item-6:before { content: '\f146';}.zmdi-collection-item-7:before { content: '\f147';}.zmdi-collecti
2024-05-25 22:59:36 UTC	1369	IN	Data Raw: 0a 2e 7a 6d 64 69 2d 66 61 76 6f 72 69 74 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 35 66 27 3b 0a 7d 0a 2e 7a 6d 64 69 2d 66 69 6c 74 65 72 2d 6c 69 73 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 36 30 27 3b 0a 7d 0a 2e 7a 6d 64 69 2d 66 69 72 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 36 31 27 3b 0a 7d 0a 2e 7a 6d 64 69 2d 66 6c 61 67 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 36 32 27 3b 0a 7d 0a 2e 7a 6d 64 69 2d 66 6c 61 72 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 36 33 27 3b 0a 7d 0a 2e 7a 6d 64 69 2d 66 6c 61 73 68 2d 61 75 74 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 Data Ascii: .zmdi-favorite:before { content: '\f15f';}.zmdi-filter-list:before { content: '\f160';}.zmdi-fire:before { content: '\f161';}.zmdi-flag:before { content: '\f162';}.zmdi-flare:before { content: '\f163';}.zmdi-flash-auto:before { cont
2024-05-25 22:59:37 UTC	1369	IN	Data Raw: 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 37 63 27 3b 0a 7d 0a 2e 7a 6d 64 69 2d 69 6d 61 67 65 2d 61 6c 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 37 64 27 3b 0a 7d 0a 2e 7a 6d 64 69 2d 69 6d 61 67 65 2d 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 37 65 27 3b 0a 7d 0a 2e 7a 6d 64 69 2d 69 6d 61 67 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 37 66 27 3b 0a 7d 0a 2e 7a 6d 64 69 2d 69 6e 62 6f 78 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 38 30 27 3b 0a 7d 0a 2e 7a 6d 64 69 2d 69 6e 76 65 72 74 2d 63 6f 6c 6f 72 73 2d 6f 66 66 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 38 Data Ascii: ore { content: '\f17c';}.zmdi-image-alt:before { content: '\f17d';}.zmdi-image-o:before { content: '\f17e';}.zmdi-image:before { content: '\f17f';}.zmdi-inbox:before { content: '\f180';}.zmdi-invert-colors-off:before { content: '\f18
2024-05-25 22:59:37 UTC	1369	IN	Data Raw: 2d 6d 6f 6e 65 79 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 39 61 27 3b 0a 7d 0a 2e 7a 6d 64 69 2d 6d 6f 72 65 2d 76 65 72 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 39 62 27 3b 0a 7d 0a 2e 7a 6d 64 69 2d 6d 6f 72 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 39 63 27 3b 0a 7d 0a 2e 7a 6d 64 69 2d 6d 6f 76 69 65 2d 61 6c 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 39 64 27 3b 0a 7d 0a 2e 7a 6d 64 69 2d 6d 6f 76 69 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 39 65 27 3b 0a 7d 0a 2e 7a 6d 64 69 2d 6e 61 74 75 72 65 2d 70 65 6f 70 6c 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 Data Ascii: -money:before { content: '\f19a';}.zmdi-more-vert:before { content: '\f19b';}.zmdi-more:before { content: '\f19c';}.zmdi-movie-alt:before { content: '\f19d';}.zmdi-movie:before { content: '\f19e';}.zmdi-nature-people:before { content

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49738	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:37 UTC	562	OUT	GET /S/content/common/js/xss.min.js HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:37 UTC	519	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 28924 Connection: close Date: Sat, 25 May 2024 17:50:44 GMT Last-Modified: Tue, 12 Nov 2019 04:16:51 GMT ETag: "4947ff982fb69173f95da79b538f254d" x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e544866f1454c4458d3a6644b47d065e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: AWwz-uORAMBs9Gs4_3ULa14jFcgscTEV84dfYma-BBl4dVS9dUKnTg== Age: 18534
2024-05-25 22:59:37 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 73 28 6f 2c 75 29 7b 69 66 28 21 6e 5b 6f 5d 29 7b 69 66 28 21 74 5b 6f 5d 29 7b 76 61 72 20 61 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 75 26 26 61 29 72 65 74 75 72 6e 20 61 28 6f 2c 21 30 29 3b 69 66 28 69 29 72 65 74 75 72 6e 20 69 28 6f 2c 21 30 29 3b 76 61 72 20 66 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 6f 2b 22 27 22 29 3b 74 68 72 6f 77 20 66 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 66 7d 76 61 72 20 6c 3d 6e 5b 6f 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 74 5b 6f 5d 5b 30 5d 2e 63 61 Data Ascii: (function e(t,n,r){function s(o,u){if(!n[o]){if(!t[o]){var a=typeof require=="function"&&require;if(!u&&a)return a(o,!0);if(i)return i(o,!0);var f=new Error("Cannot find module '"+o+"'");throw f.code="MODULE_NOT_FOUND",f}var l=n[o]={exports:{}};t[o][0].ca
2024-05-25 22:59:37 UTC	12540	IN	Data Raw: 74 68 22 5d 3d 66 61 6c 73 65 3b 77 68 69 74 65 4c 69 73 74 5b 22 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 22 5d 3d 66 61 6c 73 65 3b 77 68 69 74 65 4c 69 73 74 5b 22 62 61 63 6b 67 72 6f 75 6e 64 22 5d 3d 74 72 75 65 3b 77 68 69 74 65 4c 69 73 74 5b 22 62 61 63 6b 67 72 6f 75 6e 64 2d 61 74 74 61 63 68 6d 65 6e 74 22 5d 3d 74 72 75 65 3b 77 68 69 74 65 4c 69 73 74 5b 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 22 5d 3d 74 72 75 65 3b 77 68 69 74 65 4c 69 73 74 5b 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 3d 74 72 75 65 3b 77 68 69 74 65 4c 69 73 74 5b 22 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 22 5d 3d 74 72 75 65 3b 77 68 69 74 65 4c 69 73 74 5b 22 62 61 63 6b 67 72 6f 75 6e 64 2d 6f 72 69 67 69 6e 22 5d 3d 74 Data Ascii: th"]=false;whiteList["backface-visibility"]=false;whiteList["background"]=true;whiteList["background-attachment"]=true;whiteList["background-clip"]=true;whiteList["background-color"]=true;whiteList["background-image"]=true;whiteList["background-origin"]=t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49735	108.157.194.64	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:37 UTC	549	OUT	GET /tapfiliate.js HTTP/1.1 Host: script.tapfiliate.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:37 UTC	509	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 11592 Connection: close Last-Modified: Wed, 12 Oct 2022 12:34:24 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 25 May 2024 07:20:41 GMT ETag: "ddbb39a9e8e67d5067145f8aa76b938d" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 308cdd3e4c745d3d18529ee455467840.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P2 X-Amz-Cf-Id: vB-vsXVdE0z_1dgJnwoBgvnlSbU2Whto4WxbJ8itW-9U1ybKssHDGg== Age: 56337 Vary: Origin
2024-05-25 22:59:37 UTC	11592	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 3d 77 69 6e 64 6f 77 2c 76 3d 77 69 6e 64 6f 77 2e 54 61 70 66 69 6c 69 61 74 65 4f 62 6a 65 63 74 7c 7c 22 74 61 70 22 2c 72 3d 64 5b 76 5d 26 26 64 5b 76 5d 2e 71 7c 7c 5b 5d 3b 69 66 28 21 64 5b 76 5d 7c 7c 21 64 5b 76 5d 2e 6c 6f 61 64 65 64 29 7b 64 5b 76 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 2c 6f 2c 69 2c 72 29 7b 76 61 72 20 61 3d 64 5b 76 5d 5b 74 5d 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 29 74 68 72 6f 77 27 46 75 6e 63 74 69 6f 6e 20 22 27 2b 74 2b 27 22 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 27 3b 61 28 6e 2c 65 2c 6f 2c 69 2c 72 29 7d 2c 64 5b 76 5d 2e 71 3d 72 2c 64 5b 76 5d 2e 6c 6f 61 64 65 64 3d 21 30 2c 64 5b 76 5d 2e 62 61 73 65 55 72 6c 3d Data Ascii: !function(){var d=window,v=window.TapfiliateObject\|\|"tap",r=d[v]&&d[v].q\|\|[];if(!d[v]\|\|!d[v].loaded){d[v]=function(t,n,e,o,i,r){var a=d[v][t];if("function"!=typeof a)throw'Function "'+t+'" not supported';a(n,e,o,i,r)},d[v].q=r,d[v].loaded=!0,d[v].baseUrl=

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	49742	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:37 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 69 52 6d 32 45 47 7a 55 4c 55 4b 6f 4d 39 2f 6f 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 65 33 63 39 33 65 31 37 61 33 37 35 61 31 62 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: iRm2EGzULUKoM9/o.1Context: be3c93e17a375a1b
2024-05-25 22:59:37 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-05-25 22:59:37 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 69 52 6d 32 45 47 7a 55 4c 55 4b 6f 4d 39 2f 6f 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 65 33 63 39 33 65 31 37 61 33 37 35 61 31 62 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 43 6a 7a 4c 31 72 46 68 4e 54 50 31 42 39 33 2f 6d 37 2b 76 4a 48 74 4f 52 69 6a 53 79 61 4d 4c 5a 45 4e 56 35 44 53 36 2f 65 6e 7a 56 5a 59 61 73 4e 54 43 76 6c 58 45 31 5a 6f 6e 77 56 35 6d 6a 70 4a 63 54 66 30 73 63 47 46 59 44 4f 4d 36 75 35 45 51 47 64 7a 30 38 56 51 34 7a 5a 2f 48 6d 64 68 34 45 48 55 6a 4f 37 42 4a Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: iRm2EGzULUKoM9/o.2Context: be3c93e17a375a1b<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAUCjzL1rFhNTP1B93/m7+vJHtORijSyaMLZENV5DS6/enzVZYasNTCvlXE1ZonwV5mjpJcTf0scGFYDOM6u5EQGdz08VQ4zZ/Hmdh4EHUjO7BJ
2024-05-25 22:59:37 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 69 52 6d 32 45 47 7a 55 4c 55 4b 6f 4d 39 2f 6f 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 65 33 63 39 33 65 31 37 61 33 37 35 61 31 62 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: iRm2EGzULUKoM9/o.3Context: be3c93e17a375a1b
2024-05-25 22:59:37 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-05-25 22:59:37 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 77 4f 51 2b 56 51 78 73 62 30 4f 69 6d 71 6b 62 75 64 42 6c 4c 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: wOQ+VQxsb0OimqkbudBlLQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49743	188.114.96.3	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:37 UTC	664	OUT	GET /diskonberkah/img/facebook_text.png HTTP/1.1 Host: newsklikdisini5bekbg0.3bsz4.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/diskonberkah/free-fire/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:38 UTC	672	IN	HTTP/1.1 200 OK Date: Sat, 25 May 2024 22:59:38 GMT Content-Type: image/png Content-Length: 28789 Connection: close Last-Modified: Thu, 03 Sep 2020 11:33:54 GMT Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y9LekAlHDkEv3qgWh3bITYZoNeoJTQjrOKJw6QzfmUE0N6%2BTWgSwp8iIux3lrqmlUPR8E9tIxBOaZ2R6f3DkUo90aucJqYNxPUbQAuBDwbYb2wxpa4HGGmgE%2BIqg840NX8GlyhasOPhJmNJAJKnUHdK9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88992313586a7c7e-EWR alt-svc: h3=":443"; ma=86400
2024-05-25 22:59:38 UTC	697	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 5c 00 00 00 9e 08 06 00 00 00 e7 a3 d4 26 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 9c ec 9d 77 7c 15 c5 da c7 7f b3 7b 4a 3a a1 86 de 7b 07 0b 20 a2 60 bd a0 22 8a d8 7d ed e5 da bd f6 72 15 15 7b bb 2a 72 d5 2b 58 b0 a3 a0 20 88 d8 40 04 01 91 de 41 7a 09 24 90 84 94 73 ce ee ce 3c ef 1f b3 7b ce 49 48 42 92 b3 27 21 30 5f 3e 4b 92 73 76 67 9e 99 9d f2 cc 33 33 cf 00 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 Data Ascii: PNGIHDR\&sBIT\|d IDATxw\|{J:{ `"}r{*r+X @Az$s<{IHB'!0_>Ksvg33BP(BP(BP(BP(BP(BP(BP(BP(BP(BP(BP(BP(BP(BP(B
2024-05-25 22:59:38 UTC	1369	IN	Data Raw: 92 01 0f f9 00 68 72 0e 90 01 04 00 20 7b e2 30 6a fa 90 00 30 82 73 47 c5 b0 ef d7 34 00 26 04 f3 c1 d3 43 6f 6b 2d 76 23 3d 0a 85 22 1e 6c 9e 7e 69 9b 31 6f ff f8 4d 97 0e f5 3a b5 6e d2 d4 9b 9a e8 6d 99 9a 92 e6 ad d7 00 f0 c1 0b 80 fa b5 6a d0 1a 80 8e f5 0c 79 35 2c ae 42 71 2c 73 2e b4 5b cf 7d ee 9d f3 fa 76 6c df b8 5e 9a cf d7 ae 45 f3 06 a8 53 a7 2e 1a d5 f1 3a dd 3a 20 00 68 c0 b4 e0 ce 76 35 2b ee 51 46 ff f3 26 bd e1 ec 1e ea 7d c1 94 ff 00 1f 8c 19 33 f6 83 39 05 56 c8 36 69 99 44 3c 44 44 82 2c db 0e 25 88 88 93 20 1e f5 2f 62 a5 8a be 2a 33 a5 28 a7 20 05 09 69 e1 12 26 e5 19 54 19 6d 4d a1 50 b8 41 8f f7 47 94 f2 69 8b d6 a7 8e 7d ff 99 97 a6 ad f9 6e d6 bc 95 5b 76 ec 5d f6 f7 f6 ac e0 de bc d2 ea 39 27 a2 a0 dd 24 58 d2 e0 cd 4d 22 22 Data Ascii: hr {0j0sG4&Cok-v#="l~i1oM:nmjy5,Bq,s.[}vl^ES.:: hv5+QF&}39V6iD<DD,% /b*3( i&TmMPAGi}n[v]9'$XM""
2024-05-25 22:59:38 UTC	1369	IN	Data Raw: e6 83 41 0c fb f6 07 50 18 2c b0 52 eb 36 dc 6a e6 17 e9 5a 29 56 2e 40 80 33 06 af f0 8b ac 03 7b 9a 72 7f 83 9c f5 cb 37 4c 8b 93 70 0a 85 42 a1 50 28 8e 71 e2 aa 70 d5 4f 4b 21 80 d9 aa 96 1b ce 4e ed 30 88 01 24 40 64 00 7a 02 72 2c 1d 6b 56 ee 5a f7 f2 4b e3 97 7f fb f9 fb 73 80 ad ff ad 5c b8 23 46 d4 1b 7e 4f db 03 53 67 b9 20 a3 42 a1 50 28 14 0a 45 71 e2 a9 70 9d 55 3f 3d 8d 81 18 04 23 17 15 2e 06 62 00 23 01 c6 18 72 82 02 37 df 3f 6e ea 57 63 ef 38 bf ea e1 7e f3 cd 81 a9 df b8 20 9f 42 a1 50 28 14 0a c5 a1 c4 73 0d 97 f0 f9 75 44 56 b3 bb b1 88 cb 3e 28 13 04 62 26 84 e6 c7 e4 69 bf e7 7d 35 f6 8e fb 01 a0 7d fb 3b fc 2e 44 a2 50 28 14 0a 85 42 e1 2a f1 53 b8 da 3d f7 0f b9 7e 2a 7a fb 60 ac 30 80 00 06 69 dd 2a e2 c0 0d 17 9f 3a 14 c0 06 00 Data Ascii: AP,R6jZ)V.@3{r7LpBP(qpOK!N0$@dzr,kVZKs\#F~OSg BP(EqpU?=#.b#r7?nWc8~ BP(suDV>(b&i}5};.DP(BS=~z`0i*:
2024-05-25 22:59:38 UTC	1369	IN	Data Raw: d9 e2 15 5b 82 7f 2c de 62 3c fb e8 65 5f c1 56 f0 5b 9f 3b f9 3f 27 b4 fc e9 b1 49 e3 c6 15 c4 94 c8 ea e1 92 1b ee fd e8 fa 81 27 36 4d 3d e9 b8 ce 96 cf 9b d8 2e c4 3d 19 f5 1b a4 89 e4 24 e1 61 9a 06 2f 93 ed af 06 16 ce 1b 42 a4 de 91 fd 01 e7 84 ac 03 41 e4 e6 e5 53 46 83 e4 95 1b 36 6d 2f 58 b2 7c 3d 9b f1 f3 7a ef 8f 9f 3f 74 42 c9 88 db 0c bd e7 bc f4 a4 84 3e 4b bf 7e ee a9 6a 4a 6b 95 e8 39 f4 a3 d3 4c cd d7 68 ed f4 4b 3f 2f fe cd 33 37 3d f7 7a f7 2b 7a f7 6c ee 3d be 6f 0f b1 7b f7 9e 81 69 e9 f5 78 7a dd 44 3d c1 a7 83 01 d0 59 e9 6d 17 87 34 d7 0b bb cd 0a 99 02 07 f6 e7 c2 08 22 b7 6e 5a e2 aa df fe 5c a6 af 58 b9 87 9e 79 f0 a2 a7 01 cc ac a8 ac 5d ce 7b a0 ff da cd 5b 96 60 f5 24 23 96 34 7f 37 ef ef 39 e7 9c d4 e6 14 21 18 48 b3 a0 73 Data Ascii: [,b<e_V[;?'I'6M=.=$a/BASF6m/X\|=z?tB>K~jJk9LhK?/37=z+zl=o{ixzD=Ym4"nZ\Xy]{[`$#479!Hs
2024-05-25 22:59:38 UTC	1369	IN	Data Raw: 16 09 1e 22 41 01 3b 43 25 5b f7 e5 d3 ec a5 5b d7 1f 77 f1 ab 2f c7 33 cd b5 55 e1 7a ef 93 79 59 32 22 a9 8f 90 08 45 fa d9 58 2e 32 64 3f 6d 5a 44 d6 41 e2 44 f4 d9 37 8b dd 3d 66 f0 87 f9 f4 36 11 c9 7e 91 93 ac 4c 5c 94 7a 09 6e 12 09 8b 84 70 75 2c 19 f5 96 04 09 21 05 11 96 55 a6 1c a5 5f 5c ca 2e 2c 22 53 10 59 26 6d cb 2e 28 d7 a3 ea a3 ff f9 64 26 27 3b cd 94 67 2b 48 95 89 b3 3c 59 ec cb e2 44 82 93 25 38 05 89 53 90 2c 0a 92 49 41 0a 51 90 82 24 44 c8 6e c8 1d 1b 9d f3 7b 20 9c c7 45 44 b4 6a cb 6e 1a ff d5 af db 81 f3 5e 05 80 46 83 26 8e 00 80 8c 9e 57 35 4a ef 7d 4d 6b 57 0b 45 25 39 fb ff 5e fc e5 d7 f9 6b 28 18 2e 12 76 3a 84 b0 db 11 93 48 98 44 c4 65 5d 24 77 14 0d b2 c3 e2 42 d8 2f 91 cb 78 44 d0 ee 60 0c fb 9d 3a 85 3b 48 4e c3 96 43 Data Ascii: "A;C%[[w/3UzyY2"EX.2d?mZDAD7=f6~L\znpu,!U_\.,"SY&m.(d&';g+H<YD%8S,IAQ$Dn{ EDjn^F&W5J}MkWE%9^k(.v:HDe]$wB/xD`:;HNC
2024-05-25 22:59:38 UTC	1369	IN	Data Raw: cc 70 d6 ca 4f 38 99 96 41 dc 92 56 db 90 20 fa 6e fe fa 3d 00 bc 6e e4 45 6d 53 b8 5e 7e 6f fa f6 10 11 71 c3 20 32 4d 69 95 22 a2 88 b5 3b 96 3e 5b d8 7a 40 90 88 2c 9a fa cb ca f8 0c 0c a6 fc be f7 13 99 49 86 dd 7e 39 95 a8 ac 9c ac 0e aa d2 2b d9 aa a0 20 22 1e 22 22 8b 16 ae dd 57 ae c2 35 77 d9 ba 3d 91 46 9b 28 7a 1e bd ea 72 bb 45 79 79 60 d8 23 21 a2 cd 9b 32 e9 b1 27 3e 0b ef 00 1a 6c af cb e9 7e e1 23 e7 b8 51 3e 7a 0e 9b d0 2f fa ef c1 57 bc 34 7f 73 66 41 41 49 39 45 d4 ef 65 a7 a5 ba 70 ca b0 28 f1 a9 dd 81 53 90 f2 0c 22 e0 d2 fb aa 92 27 83 af a1 04 00 68 76 fa a3 5f ad de b4 5b 14 b3 f4 46 25 35 be 43 93 ca 20 6c 55 a4 c4 a7 3c 48 82 2c 5a b0 7a b3 40 9b 47 3e 04 de ea 1d 4b 59 71 5f e1 2a 3b 3d d5 5b 9e ca 92 c2 7e c3 61 71 a4 4c f3 17 Data Ascii: pO8AV n=nEmS^~oq 2Mi";>[z@,I~9+ """W5w=F(zrEyy`#!2'>l~#Q>z/W4sfAAI9Eep(S"'hv_[F%5C lU<H,Zz@G>KYq_*;=[~aqL
2024-05-25 22:59:38 UTC	1369	IN	Data Raw: 9f 16 6c 1c 07 a0 53 ac 21 a7 36 ee 9a 0d 00 53 67 2d 9d 3b f2 cc 3e f5 18 e5 43 08 8f 8c 93 c1 ce 3f 7b 16 24 d6 c8 6a 08 12 00 13 1e f8 61 e0 81 7f 5d d8 6e e4 ad af 2c 5a 31 ed f2 f7 6a 5a 2e b7 f9 62 fa 9f 4b 5a 34 f0 43 36 b2 de 2a ce 49 94 05 d9 f5 c7 03 0d 0c b3 e7 2c 9d 09 7c 78 41 55 42 3a 26 15 ae 48 cf 27 20 00 cc 9b 78 eb 66 b4 27 7f a9 b7 1e 37 ae ad d7 e3 8b 9c 59 51 6b 3a 4d 47 e1 8a 5c 96 26 00 4a 02 2c 0d 6d 9b a6 60 fe ea 85 d7 03 8f 57 c9 4a 11 4d d2 39 13 9e bc f7 ae 61 bd bd 64 c1 83 04 80 7c b0 18 c1 62 56 ac 41 d7 46 ce 9b f3 d3 4d 27 b5 69 9a ca 18 0f 81 98 07 80 af aa b3 92 47 04 4c e8 f2 b8 24 14 c2 d2 b8 1c b0 08 86 6e 6d 1a e2 87 05 4f 9d 5c d3 f2 d5 4a 04 03 31 0b 26 e3 00 01 67 9c d2 a5 11 1a de 33 ad ed 45 df 3e 51 d1 20 b2 Data Ascii: lS!6Sg-;>C?{$ja]n,Z1jZ.bKZ4C6*I,\|xAUB:&H' xf'7YQk:MG\&J,m`WJM9ad\|bVAFM'iGL$nmO\J1&g3E>Q
2024-05-25 22:59:38 UTC	1369	IN	Data Raw: ab 9f c4 a0 83 a0 33 1d 8c 79 e0 94 7f 77 9a 5f 01 c1 34 04 e1 c5 93 2f 4f 5a ec 46 88 c7 46 ed 2c 41 b4 85 6a fb 96 dd e5 e6 41 87 76 ad 04 60 14 7b 83 b5 b6 2f 25 e9 4f 46 c0 b4 e7 48 65 d2 07 0c e8 5c e9 23 20 ae b8 77 dc 8f bd 3a 34 6a 08 ae c3 38 6a 1b 29 07 4f f9 af 7c f7 cd d9 1f 4c 5d 7e 71 93 74 1f 20 34 f0 a3 71 5a a2 14 2c 8d 03 94 08 08 0f 9a 35 48 4c 79 e8 c5 cf 96 6f f8 2e df 4d bf 6e 47 3d 52 ef d2 01 a1 81 41 40 f3 36 38 ad 82 8f 9e 73 e1 4d 83 fe e9 01 00 9e 06 c1 82 20 4d 80 a0 e1 28 b5 d3 14 87 79 41 96 86 ce 6d ea 79 ef 78 f6 b3 1f d0 e7 b3 eb ea b5 6f df bc 22 8f 9e 75 e5 6b af 0f 1e d0 03 b2 11 f4 d8 ef 40 4e 47 31 3a ca ba 44 e6 b4 45 72 65 1a a0 03 e4 81 06 8e e3 fa b6 38 0f c0 35 35 26 5b 0c 8c 19 3b 75 67 bf e3 5b 03 c2 b0 fb 31 Data Ascii: 3yw_4/OZFF,AjAv`{/%OFHe\# w:4j8j)O\|L]~qt 4qZ,5HLyo.MnG=RA@68sM M(yAmyxo"uk@NG1:DEre855&[;ug[1
2024-05-25 22:59:38 UTC	1369	IN	Data Raw: 78 85 85 ed 14 1e 44 bf 30 a7 e3 70 b4 4e 16 3d b4 24 dd 6e 8f bd 72 47 30 02 59 e5 c9 fd f2 e3 ff 84 5f 07 dc 9e a1 27 d8 ca 9b 20 e8 4c 83 a5 f9 b0 76 eb 5e 7c 33 6b ed cc c7 6f 1e b2 10 38 cd 03 fc 32 0f b8 bc 21 3a d4 6b 8f 8d 63 1f 2f 1e c2 a0 c7 5f 7a fb a9 51 a3 46 f5 ef de bc 1e 0b b7 f5 c4 dc 2a 49 91 f4 12 71 d4 4d 04 ee 7f ee ab bb 5f 7a f8 a2 23 40 e1 62 00 49 85 10 4c d8 56 4b 0d 80 00 34 0b 80 b3 d0 ce 9e 66 d1 65 9b 20 95 8c e8 01 9c 63 cf 61 20 68 10 b6 0a 17 af 89 a7 8c ba 49 00 30 0a c0 a4 f2 ee 6b df a1 49 17 59 48 e3 24 09 e3 00 34 30 6e 5b 79 75 c8 4a c3 9c 7c d2 c3 71 33 00 d0 9d fc d2 64 3e 93 57 e6 3b b3 77 00 da 63 ef f0 58 39 46 c2 8a 2a 34 a4 fb 80 8f be 5b fd dc ff 9d db ed 1f 87 7b ee f9 77 17 9c d9 38 23 0d 96 19 82 c7 1b 3f Data Ascii: xD0pN=$nrG0Y_' Lv^\|3ko82!:kc/_zQFIqM_z#@bILVK4fe ca hI0kIYH$40n[yuJ\|q3d>W;wcX9F4[{w8#?
2024-05-25 22:59:38 UTC	1369	IN	Data Raw: a0 b9 68 18 21 7b c4 ce ec 29 ad 6e 1d db 27 ba 13 72 8c 30 40 08 0e a6 f9 c1 58 12 32 f3 42 58 b5 6a a5 31 6b f6 9a 0d 2f 3d 76 e9 43 00 a6 47 6e 7e 72 28 1a d7 ef 8f cc db 9f 28 19 cc d7 df ff 71 f0 f4 53 fb a7 d6 49 f0 da eb b7 6c b7 0b f1 1b 01 e1 c6 91 83 69 71 39 27 b5 dd 7c c9 e0 46 69 1e c0 d9 75 1c 0f 34 30 58 a4 c1 a3 a7 60 e3 ae bd 98 3c 75 7e e8 a1 5b 27 bc 0d 7c 77 f7 61 1e bd f3 82 eb 5e 18 75 f7 2d 23 7b f5 ee dd 2e 35 d1 0b e8 c2 02 34 d3 fe da ad 39 3b 06 62 72 93 80 46 26 da b6 6c 98 00 e0 52 00 9f 97 fd d0 55 1f 75 6a df b8 11 60 8f d9 89 dc 55 64 a2 d0 b4 7c 58 48 c5 c2 e5 db f3 bf 98 be ea d3 37 1f 3d e7 96 0a 3c 76 fa 4b ef 4c 7b e7 fc 7f f4 6f d7 ae 65 03 30 12 51 6b cc 5c 86 49 ab a3 06 60 d8 69 6d ba bf 3b 26 4e f1 b8 c8 e7 df 2e Data Ascii: h!{)n'r0@X2BXj1k/=vCGn~r((qSIliq9'\|Fiu40X`<u~['\|wa^u-#{.549;brF&lRUuj`Ud\|XH7=<vKL{oe0Qk\I`im;&N.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49750	104.26.11.155	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:38 UTC	620	OUT	GET /images/vk-icon/vk-icon-28.jpg HTTP/1.1 Host: icon-library.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:38 UTC	693	IN	HTTP/1.1 200 OK Date: Sat, 25 May 2024 22:59:38 GMT Content-Type: image/jpeg Content-Length: 16200 Connection: close Cf-Bgj: h2pri Last-Modified: Wed, 10 Jul 2019 13:13:10 GMT Strict-Transport-Security: max-age=31536000; Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 7144 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XfU12%2FxTUP%2FaoI4DHsZ4V4XgI9QEoBuF6Lndt1j1ok89AFKlyLtND5p5z2mdogH6Hn%2FYBcnghSJARf5sQLIQ%2B18sLxX5XF8v2HcCqF68D3cKgwYHYvFzqufDMW0VRwNnNc8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 889923144a8f8c81-EWR
2024-05-25 22:59:38 UTC	676	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 01 f4 08 06 00 00 00 cb d6 df 8a 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e1 08 09 04 1a 07 75 f4 a1 68 00 00 3e 4c 49 44 41 54 78 da ed dd 79 9c 54 d5 9d ff ff f7 b9 55 bd 2f 40 b3 35 3b 34 22 b2 8a 02 8a 22 2a 6e 6c a2 80 c1 49 a2 89 66 b2 7c 67 7e 99 6f 32 93 4c e2 98 28 16 a8 59 cc 24 bf 4c 32 93 6d 12 63 62 5c 09 82 6c b2 08 b8 e0 c2 8e c8 da ec fb d6 34 bd af 55 f7 7c ff 00 95 a5 1b 7a a9 aa ae aa fb 7a 3e 1e 3e a2 01 ba bb 3e f7 50 ef fa 9c 7b ee 39 46 c0 25 dc f3 d3 Data Ascii: PNGIHDRgAMAa cHRMz&u0`:pQ<bKGDtIMEuh>LIDATxyTU/@5;4""*nlIf\|g~o2L(Y$L2mcb\l4U\|zz>>>P{9F%
2024-05-25 22:59:38 UTC	1369	IN	Data Raw: 49 1f 6b dd e1 d6 9a 21 92 ed 6f a4 fe 56 ea c9 35 01 10 47 ac 91 f6 59 69 ab b1 da e2 1a bb d1 b5 66 cd dc c0 d8 5d 94 86 40 4f d0 ce 7b 41 6e 8d f1 0f f7 c9 1d 6a 8d 19 2a ab eb 25 b5 a7 32 00 12 54 89 64 3f 96 75 d6 c9 b8 2b fd d6 7d 77 66 60 c2 31 ca 42 a0 c7 d9 e7 55 6b 26 4f 5f 32 c0 1a 7b bb 23 8d b2 d2 75 92 ba 51 18 00 9e 7e 6b 94 0e 38 d2 1a 6b ec 3b 72 9d e5 b3 9f b8 6b 0b ab ef 09 f4 98 73 5f e0 cd 3c d7 09 de 64 5c 3b d2 1a 33 5e 52 57 aa 02 00 97 74 52 32 6f 59 d9 f7 64 cc ca 39 d3 c6 ac a3 24 04 7a d4 8d 0b 2c cc 4e 75 cc 78 59 8d 95 cc 6d 74 e0 00 10 86 0e de 6a b9 8c 59 54 69 43 6f bc 11 18 5f 42 55 08 f4 88 98 18 98 d7 ce ef 24 8d 97 34 55 56 77 ea d2 bb 9b 01 00 9a 2e 28 d9 55 56 66 a6 e3 d7 ab af fd 70 ec 51 4a 42 a0 37 cb 94 a7 16 f4 Data Ascii: Ik!oV5GYif]@O{Anj*%2Td?u+}wf`1BUk&O_2{#uQ~k8k;rks_<d\;3^RWtR2oYd9$z,NuxYmtjYTiCo_BU$4UVw.(UVfpQJB7
2024-05-25 22:59:38 UTC	1369	IN	Data Raw: ce 9f 08 73 00 00 3e cb 5c 6b dd 3f 3e 1c 58 91 1a 37 81 9e 5a e8 4c 13 fb b4 03 00 70 a1 ab 4a 4c d5 7f 44 e2 0b 87 7d ca 7d 4a 60 61 57 6b 7c f9 92 4d e3 ba 01 00 70 51 f4 56 ba 3e f5 7d fd b1 31 07 63 ba 43 77 8d f3 23 c2 1c 00 80 fa d8 34 27 68 03 31 dd a1 4f 9e b1 e8 6a 59 ad 57 0b 1d cb 0a 00 40 9c 70 1d e3 0e 9b 35 6d fc 86 d8 ec d0 ad 7e 46 98 03 00 70 f9 fc 75 ad f3 74 58 bf 60 d8 ba f3 c0 a2 b1 92 ee e4 1a 01 00 d0 20 e3 26 4f 5f 1c b6 dc 0c 4b a0 07 02 01 47 46 3f e1 da 00 00 d0 70 56 f6 a7 81 40 20 2c 59 1c 96 2f b2 49 37 4c 91 74 35 97 06 00 80 86 33 d2 35 1b 75 c3 3d 31 13 e8 d6 e8 bb 5c 16 00 00 9a 10 ea c6 3e 1a 13 81 3e 29 f0 c6 ad 92 1d c1 25 01 00 a0 49 ae 9b 32 63 49 b3 8f 18 6f 7e 87 ee 38 df e3 5a 00 00 d0 74 d6 ba cd ce d2 66 3d 87 Data Ascii: s>\k?>X7ZLpJLD}}J`aWk\|MpQV>}1cCw#4'h1OjYW@p5m~FputX` &O_KGF?pV@ ,Y/I7Lt535u=1\>>)%I2cIo~8Ztf=
2024-05-25 22:59:38 UTC	1369	IN	Data Raw: b3 7b e8 ee d9 ff 00 00 00 f1 c5 3d 37 d0 8d 2c 1d 3a 00 00 f1 d8 a1 bb a6 cd a7 81 6e e9 d0 01 00 88 cf 40 3f bf 43 27 d0 01 00 88 47 d6 39 27 d0 45 a0 03 00 10 a7 89 ae 36 04 3a 00 00 f1 8f 0e 1d 00 80 c4 09 f4 33 9b ba b3 ca 1d 00 80 38 0e 74 73 cf 4f 5f cf f2 55 a5 94 50 0f 00 00 e2 53 d0 d6 66 38 29 b5 4e 36 a5 00 00 20 7e 99 a4 b4 2c 27 18 74 32 28 05 00 00 f1 2b a9 56 19 8e 91 2f 93 52 00 00 10 cf 6a 33 9d 90 23 3a 74 00 00 e2 58 50 4e a6 63 ac a1 43 07 00 20 8e 19 99 4c c7 c8 25 d0 01 00 88 63 8e 09 65 38 d6 30 e5 0e 00 40 9c f7 e8 99 8e c4 94 3b 00 00 f1 cc 3d 33 e5 4e a0 03 00 10 d7 fd b9 51 86 63 5c a6 dc 01 00 88 eb 40 b7 6e a6 63 8d 4b a0 03 00 10 c7 ac 55 86 23 39 e9 94 02 00 80 38 ee d0 8d c9 70 8c b5 29 94 02 00 80 b8 8e f4 64 c7 1a 11 e8 Data Ascii: {=7,:n@?C'G9'E6:38tsO_UPSf8)N6 ~,'t2(+V/Rj3#:tXPNcC L%ce80@;=3NQc\@ncKU#98p)d
2024-05-25 22:59:38 UTC	1369	IN	Data Raw: b2 8c 41 8e 06 bb fb fa 1e 9e 6f 72 d6 ef e2 76 55 34 03 1d 61 74 f8 14 c7 48 de 92 a0 9b eb 54 d5 84 f4 f3 59 1f 71 34 24 1a a4 5f f7 36 ea d3 a5 95 a7 6b b0 e7 48 89 0a 4b ab 19 0c d1 4a 74 4a 10 5e bb 8f 16 7b be 06 c3 fb b6 4f d8 dd b0 0e 9c 28 d3 ef e7 6f 65 a0 83 ee bc 01 d6 ee 3c c1 40 20 d0 e3 d7 ae c3 25 9e af 41 b2 df a7 11 fd 12 f7 44 de b7 3f 3e a2 37 d6 1c 60 b0 a3 5e 1d 5b a7 25 ec b1 a8 8d b1 26 9f e9 76 02 3d 8e 9d 2c ae e4 99 4b 49 37 0f 4a ec 53 d8 9e 5d bc 5d 5b 0f b0 d8 07 75 bb f7 c6 9e 9e df 97 62 ff f1 52 ed 39 4a 83 43 a0 c7 b9 9d 87 99 76 1f d4 33 27 a1 57 f7 86 5c ab 5f cc da c4 2e 72 b8 48 eb 8c 64 dd 36 a4 8b e7 eb b0 78 dd 41 06 03 81 1e ff b6 ec 2f f4 7c 0d 8c 31 09 df a5 17 96 56 e9 bf 66 6f 12 4f a7 e3 5c 13 47 f4 f4 fc 63 Data Ascii: AorvU4atHTYq4$_6kHKJtJ^{O(oe<@ %AD?>7`^[%&v=,KI7JS]][ubR9JCv3'W\_.rHd6xA/\|1VfoO\Gc
2024-05-25 22:59:38 UTC	1369	IN	Data Raw: 40 4c e8 d6 3e 53 77 0d ed e6 f9 3a fc ef 1b db 58 c4 4b a0 e3 72 0a 4a aa b4 61 57 01 85 38 cb e7 18 4d 1c d1 83 42 20 26 7c 6d 6c 3f cf 6f 22 b3 72 cb 51 6d de 57 c8 60 20 d0 d1 10 4b d6 1d a4 08 e7 b8 e3 da ae ca 4c 4b a2 10 68 51 23 fb e7 6a 50 af 1c 4f d7 a0 bc 2a a8 67 17 73 9a 1a 81 8e 06 5b bb b3 40 c7 4f 57 52 88 b3 52 93 7c 9e 39 5a 15 31 3a 06 93 7d 7a f8 2e 36 91 79 61 79 3e 0b e1 08 74 34 86 b5 56 6f ac 61 c1 c9 b9 26 8e e8 a1 8c 54 3f 85 40 8b 98 3a aa b7 da 66 7b fb 31 b5 5d 47 8a b5 78 1d 8f d6 12 e8 68 b4 37 37 1c 52 45 75 90 42 9c 95 9e e2 d7 f8 e1 74 e9 88 be 4e 39 e9 ba db e3 eb 38 42 ae d5 6f e7 6f 95 65 c1 2e 81 8e c6 ab a8 0e ea ed 4d 9c c2 76 61 97 9e 96 4c 97 8e e8 fa fa b8 fe 4a f2 79 fb 2d 71 c1 aa fd da 7b ac 84 c1 40 a0 a3 a9 Data Ascii: @L>Sw:XKrJaW8MB &\|ml?o"rQmW` KLKhQ#jPO*gs[@OWRR\|9Z1:}z.6yay>t4Voa&T?@:f{1]Gxh77REuBtN98Booe.MvaLJy-q{@
2024-05-25 22:59:38 UTC	1369	IN	Data Raw: 5f 47 0b 2b 28 04 81 8e 78 54 59 13 d4 df df dd 43 21 ea 30 e9 c6 5e ea dd 39 9b 42 24 28 23 e9 9b 13 07 aa 6f d7 d6 14 43 67 f6 6a 5f b4 86 a9 76 10 e8 71 6d f1 ba 83 3a 5e c4 b6 8e 17 f2 39 46 df 9c 38 90 fb aa 09 ea 0b a3 fb e8 e6 41 9c a0 f6 c9 07 fb ff 99 c7 5e ed 20 d0 e3 5e 30 e4 ea a5 15 3b 29 44 1d 7a 76 cc d2 7d 37 e5 51 88 96 ea a2 23 f4 59 ea 0b a3 af d0 e7 46 71 5d 3f f1 97 25 3b 74 82 0f f5 20 d0 13 c3 bb 9b 8f 69 ef b1 52 0a 51 87 cf 8d ca 53 8f 0e 59 14 a2 05 a4 86 f9 94 33 23 e9 1f c7 5c a5 a9 a3 58 1f f1 89 8d bb 0b 78 84 15 04 7a 22 b1 d6 ea cf 4b b6 53 88 3a f8 7d 8e be 35 89 a9 f7 96 90 9e 12 be ed 57 8d 31 fa e7 89 03 74 f7 f5 1c b8 f2 89 f2 aa a0 7e 33 6f 0b 53 ed 20 d0 13 cd e6 7d 85 5a b5 9d 83 5b ea d2 2b 37 5b 93 6e e4 dc f4 68 Data Ascii: _G+(xTYC!0^9B$(#oCgj_vqm:^9F8A^ ^0;)Dzv}7Q#YFq]?%;t iRQSY3#\Xxz"KS:}5W1t~3oS }Z[+7[nh
2024-05-25 22:59:38 UTC	1369	IN	Data Raw: 43 ed 3f 51 4a 31 d0 60 4c b9 7b 58 c8 b5 fa ef b9 9b d9 95 aa 89 d2 92 fd 1a dc ab ad 6e ec 9f ab 6b ae 68 47 98 23 6c 92 7c 8e be 73 df e0 46 2f c6 04 81 0e 0f db 7f bc 54 af bd b7 87 42 00 31 a6 5b fb 4c 3d 74 27 6b 31 40 a0 a3 11 66 be b3 87 73 97 81 18 34 6e 78 77 dd 79 6d 57 0a 01 02 1d 0d 13 0c b9 fa cd bc 2d b2 96 a9 77 20 d6 7c 6d 5c 3f f5 eb de 86 42 80 40 47 c3 ec 38 54 a4 05 ab 0f 50 08 20 c6 24 f9 1c fd f0 0b d7 b2 95 30 08 74 34 dc 0b cb 77 ea d8 e9 0a 0a 01 c4 98 f4 14 bf a6 3d 30 54 5d da 65 50 0c 10 e8 b8 bc ea da 90 7e 37 9f 13 d9 80 58 94 9d 9e ac 69 0f 0c 55 87 46 ec 58 08 02 1d 1e b6 69 ef 29 2d 5d 7f 88 42 00 31 a8 7d ab 34 3d f9 d0 f0 46 6d 43 0c 02 1d 1e f6 dc e2 ed 3a 5a c8 d4 3b 10 b3 a1 fe f0 75 ca 6d 93 4e 31 40 a0 e3 d2 aa 6a Data Ascii: C?QJ1`L{XnkhG#l\|sF/TB1[L=t'k1@fs4nxwymW-w \|m\?B@G8TP $0t4w=0T]eP~7XiUFXi)-]B1}4=FmC:Z;umN1@j
2024-05-25 22:59:38 UTC	1369	IN	Data Raw: 7e 3d f6 c5 6b d5 9a 73 d4 09 74 e0 5c 85 a5 d5 9a fe b7 b5 2a 2a e7 5e 67 22 73 63 20 47 df da 74 44 4f fc 75 8d 8a 19 6b cd d6 be 55 9a 7e f8 85 6b 39 72 95 40 07 ce 77 b4 b0 42 3f 7a 69 3d cf 10 23 e2 b6 1f 2c d2 a3 cf ae d2 a1 82 72 8a d1 4c bd 3b 65 eb 5b 93 06 f1 38 1b 81 0e 9c 6f d7 91 62 fd e4 d5 0d aa 09 12 ea 88 ac 63 a7 2b f4 e8 b3 1f b2 58 2e 0c 46 f4 eb a8 fb 6f b9 82 42 10 e8 c0 f9 36 ed 39 a5 1f bd b4 41 d5 b5 84 3a 22 ab bc 2a a8 a7 5e 5c a7 c5 eb 0e 52 8c 66 ba ff 96 de ba fe aa 8e 14 82 40 07 2e 08 f5 bd a7 f4 e4 0b eb 98 7e 47 c4 85 5c ab df 2f d8 aa e7 97 e5 53 8c 66 30 92 be 3d 69 90 7a 74 c8 a2 18 04 3a 70 be ad 07 4e eb c9 17 d7 a9 b2 26 48 31 10 71 b3 df db ab df 2f d8 2a cb 39 03 4d 96 9a ec d3 a3 9f bf 86 83 5c 08 74 e0 62 db 0e Data Ascii: ~=kst\*^g"sc GtDOukU~k9r@wB?zi=#,rL;e[8obc+X.FoB69A:"^\Rf@.~G\/Sf0=izt:pN&H1q/*9M\tb
2024-05-25 22:59:38 UTC	1369	IN	Data Raw: ed 3d 56 4a 41 1a fb ce c2 d9 e1 92 a4 a5 eb 0f e9 85 e5 3b 29 44 3d d8 64 26 ac 6a fc 74 e8 40 fd d6 e6 9f d4 ba fc 93 1a 72 45 3b dd 37 32 4f fd 7b b4 a1 28 0d 50 51 cd 22 c3 4f cc 5a b9 47 e9 29 7e 4d 1e d9 8b 62 5c a0 6b fb 4c 8a 10 c6 cf d1 7e c9 d4 88 e9 31 a0 5e 56 d2 86 5d 05 da b0 ab 40 57 75 6b ad 29 23 f3 34 f4 ca f6 32 94 86 40 6f a0 bf 2d cb 57 5a 8a 5f 63 87 75 a3 18 e7 48 4f f1 2b 35 c9 c7 02 c2 70 30 b6 c6 2f e3 56 cb f2 d6 04 34 c4 f6 83 45 fa d1 cb eb d5 a3 43 96 26 8f ec a5 91 03 72 e5 73 f8 fb 73 a1 e3 a7 79 16 fb c2 0f 85 ff fb c6 36 a5 a5 f8 74 cb a0 ce 14 e4 1c a9 c9 04 7a 78 06 99 a9 76 ce 74 e8 00 1a 63 ff 89 52 fd 72 f6 26 fd f3 af df d1 ab ef ec 56 61 69 15 45 39 c7 ae 23 6c d8 73 d1 fb ad b5 fa ef d7 37 6b f5 8e 13 14 e3 1c 84 Data Ascii: =VJA;)D=d&jt@rE;72O{(PQ"OZG)~Mb\kL~1^V]@Wuk)#42@o-WZ_cuHO+5p0/V4EC&rssy6tzxvtcRr&VaiE9#ls7k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49747	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:38 UTC	579	OUT	GET /S2/content/common/js/shop-topnav2.7e1fed6bdf.js HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:38 UTC	584	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 7249 Connection: close Date: Sat, 25 May 2024 17:50:44 GMT Last-Modified: Fri, 24 May 2024 07:07:29 GMT ETag: "7e1fed6bdfc0657c0dedc6e6c19553fa" x-amz-server-side-encryption: AES256 x-amz-version-id: .xY_k8y_w_LfBZNrMjUpuFVf4gkHFOSs Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 19cd9c9f4eb51e9e5c75add1d4b6f304.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: jv6Pv5eEa3-q_e_t8RdyjaQ-7YMKbbqVv60FQX0Sn19k2ZVC6VERlQ== Age: 18535
2024-05-25 22:59:38 UTC	7249	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 67 65 74 43 75 72 72 65 6e 74 43 6f 75 6e 74 72 79 32 4e 61 6d 65 28 65 29 7b 72 65 74 75 72 6e 20 63 75 72 72 65 6e 74 43 6f 75 6e 74 72 79 3d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 72 65 64 69 72 65 63 74 54 6f 41 6c 6c 53 65 61 72 63 68 52 65 73 75 6c 74 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 3d 63 68 65 63 6b 43 75 72 72 65 6e 74 55 72 6c 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 2c 22 63 6f 64 61 73 68 6f 70 2e 63 6f 6d 22 29 2c 61 3d 63 68 65 63 6b 43 75 72 72 65 6e 74 55 72 6c 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 2c 22 63 6f 64 61 73 68 6f 70 2d 74 65 73 74 2d 6e 65 77 22 29 3b 24 28 22 62 Data Ascii: "use strict";function getCurrentCountry2Name(e){return currentCountry=e.toLowerCase()}function redirectToAllSearchResult(e,t){var r,n=checkCurrentUrl(window.location.origin,"codashop.com"),a=checkCurrentUrl(window.location.origin,"codashop-test-new");$("b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49749	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:38 UTC	640	OUT	GET /S/content/mobile/images/codashop-logo-new-2x.png HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:39 UTC	500	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3353 Connection: close Last-Modified: Mon, 12 Jul 2021 11:10:08 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 25 May 2024 22:59:40 GMT ETag: "d0ce400f6d6f397ddca5e460210db19e" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 39103e0eac16074bdce5f23fa11c3dcc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: 5XYSx2n7e7ahXm1cioRnapyAGjlP1Uzhy7fiMUsbf5gKiLV9vfaolg==
2024-05-25 22:59:39 UTC	3353	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 7c 00 00 00 8c 08 03 00 00 00 d1 3e 84 54 00 00 00 3c 50 4c 54 45 00 00 00 28 00 30 28 00 30 28 00 30 28 00 31 28 00 31 28 00 31 28 00 30 20 00 30 29 00 31 28 00 30 27 00 31 26 00 30 27 00 30 25 00 30 27 00 31 29 00 31 2a 00 30 28 00 32 28 00 31 cb e2 56 63 00 00 00 13 74 52 4e 53 00 20 40 80 df bf 9f 60 10 ef 70 cf 50 90 30 af 1f 30 8f cd 7f 75 ae 00 00 0c 79 49 44 41 54 78 da ec dc eb 92 9b 30 0c 05 60 c9 96 6f 40 48 83 de ff 5d db d9 b4 cb 64 31 c6 68 99 74 3a 3d df ef 68 3d 61 b4 be 9c 00 04 00 00 00 00 00 00 00 00 00 ff 2f 37 84 a2 4d 63 4c 4c 00 d7 ca 29 16 ed 12 bc 23 80 8b 64 b7 8c 7a 86 60 02 84 2b cc 9b b5 16 13 20 74 b8 7e ad c5 04 08 6f 90 dd 12 f4 15 26 40 78 87 ec 8b 5e 45 7c 26 80 5e Data Ascii: PNGIHDR\|>T<PLTE(0(0(0(1(1(1(0 0)1(0'1&0'0%0'1)1*0(2(1VctRNS @`pP00uyIDATx0`o@H]d1ht:=h=a/7McLL)#dz`+ t~o&@x^E\|&^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49748	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:38 UTC	657	OUT	GET /S/content/common/images/grab.29dad06670f873936002ddb910253a4b.png HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:39 UTC	472	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 61755 Connection: close Date: Sat, 25 May 2024 22:59:40 GMT Last-Modified: Tue, 05 May 2020 03:32:54 GMT ETag: "29dad06670f873936002ddb910253a4b" x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 c8710a117c1dfdaea4e9dfc4d41970d2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: 3WIi_-muxn8d-lUQDIPJGVL0791gMF69u_obr25FrfXXPIziS66d3A==
2024-05-25 22:59:39 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 d0 00 00 03 20 08 06 00 00 00 7b e5 f9 73 00 00 f1 02 49 44 41 54 78 9c ec dd e1 75 db 48 b2 f6 f1 87 f7 dc ef cb 37 82 e5 44 30 70 04 43 45 d0 74 04 43 45 30 52 04 96 23 90 1c 81 38 11 08 1d 81 38 11 18 8e c0 d8 08 2e 36 02 be 1f 9a 34 25 5b b2 29 09 dd d5 e8 fe ff ce f1 f1 d8 33 8b ae b5 25 10 e8 ea aa 92 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR {sIDATxuH7D0pCEtCE0R#88.64%[)3%
2024-05-25 22:59:39 UTC	642	IN	Data Raw: 0c 83 0e cf 16 35 24 d4 e9 74 f3 1a 24 d1 33 56 5f 02 bd 8e f6 ed 5b 39 7f 96 6c b5 fa 4e 32 a6 fd f3 05 00 00 71 79 f7 59 24 ac 4e b5 55 e9 55 e7 8f ab 2e 96 2a ff e0 ed 5b 6d 15 36 84 5a 5e fa df 88 7b d1 6b 95 3b 46 22 1c e0 59 29 24 cc 57 96 a1 54 6a d0 31 a1 de 16 fb d9 17 be ce ae c5 d7 d8 6b b0 3f 34 45 71 13 e8 f9 24 42 5a b7 d6 4c b7 d6 61 4c 50 b7 6f ab dc 59 07 12 45 48 70 2e a5 6f 09 f3 85 5d 30 55 ea 15 9e 2d bc 4a 6e f9 1e 0e 7d 5e 8b 77 9b 53 75 e2 50 5e 96 ea 4b a0 d7 d0 be 3d e5 ec 84 f0 a2 f5 35 c9 5a f9 48 57 dd 0f 00 00 e2 aa ef 20 e0 6b 0d 2a b9 ea 3c b4 9b 3b 24 a8 16 96 a1 4c dc 20 a9 d5 4e ff 68 a6 96 0d 80 17 e0 5e f4 1a 65 6e 70 87 0d 47 27 ee 47 39 ea 15 ee 71 7f 17 f7 75 27 1d 3e 0b 6f 45 f5 e1 4b e5 33 e7 1a a7 89 9b 40 cf a3 Data Ascii: 5$t$3V_[9lN2qyY$NUU.[m6Z^{k;F"Y)$WTj1k?4Eq$BZLaLPoYEHp.o]0U-Jn}^wSuP^K=5ZHW k<;$L Nh^enpG'G9qu'>oEK3@
2024-05-25 22:59:39 UTC	8949	IN	Data Raw: 09 5d b6 38 24 5c 83 ad 76 fa bb 88 83 c8 61 54 d1 9d 78 0e fe 95 3c c6 81 a0 ba 04 7a e9 ed db b7 72 fe 2c d9 6a de fd 9f ea b9 d9 a5 fd b3 05 00 00 f1 d4 71 a8 f2 2d b6 0a 2f 6c 83 71 1c af 17 2a 3b ff 14 2d 68 73 d7 2b 54 56 6c 26 bf 79 f9 52 61 b3 f3 b3 ea 79 9f 7a 8b 5e a1 ad ea d6 38 8e d7 09 87 b6 d6 0a 15 61 0b cb 50 90 5c a7 9d 3e 4d 7e c3 bb b6 e2 89 b7 c9 23 91 8a 9f 1b 37 81 de 2b 87 6e 95 24 cf 5f 6a fa 87 f2 78 df a9 d1 a0 12 3a de 30 2e e6 14 83 76 3a a3 b3 8d bd 7a 12 e8 61 83 e2 ab 75 18 51 a5 ac 90 ae ef c1 ec 6c d2 1f 4c 00 00 20 08 1b 0d 77 d6 61 64 6c ba 9b 49 e1 79 7f ad b0 91 b4 b0 0c 05 af b2 d1 d4 37 83 4e 45 17 8c 97 68 15 92 e7 83 71 1c 2f 17 2a 6c 0e d5 e6 a8 db a0 30 c6 e2 d3 64 37 42 c3 d7 f3 ad f8 7c 3d 45 1e ad bc f1 bc f1 Data Ascii: ]8$\vaTx<zr,jq-/lq;-hs+TVl&yRayz^8aP\>M~#7+n$_jx:0.v:zauQlL wadlIy7NEhq/l0d7B\|=E
2024-05-25 22:59:39 UTC	16384	IN	Data Raw: 75 9c 61 da d9 06 62 2e e5 98 88 1b 95 7d 68 a1 a9 60 1f f0 35 6a fa 3c eb 64 d1 d2 39 cc ca bd 48 be ee 34 5d 72 38 18 a3 0b 23 00 ce c4 5c f4 83 db 64 63 4d c2 fb 41 9f 64 ad f4 d6 d6 01 a4 36 cd 04 7a 3d 0f 39 31 2c ac 03 88 6c 6b 1d 00 00 00 f8 a5 3f ac 03 88 64 93 68 9d 5a ab cf 49 9e e3 a5 d6 d6 01 24 90 a6 c2 21 54 6d 2c 93 ac 95 bf 41 3b 9d 51 25 86 28 8e 1b de 9d 6d 20 a6 16 fb 71 11 f1 85 84 d5 26 c9 5a 76 d6 d6 01 64 c5 bb 0b 95 7f b8 ee a0 97 c5 c8 a3 d6 ad 35 4b 7a 10 66 aa 06 ed f4 6e df 72 1b 18 df 71 2e fa c6 3a 94 0c cc 95 72 1f a5 dc 2a f4 79 d2 6a fe 0c 4c 35 81 de 58 07 10 49 17 7d 85 5d e1 09 f4 5d d1 27 87 01 00 28 c5 ca 3a 80 08 da fd a6 77 5c f5 56 9f 93 3c c7 6b 94 de ba 36 4d f5 79 a8 d6 48 39 97 38 67 9d a4 77 fb 4a 61 20 8e 90 Data Ascii: uab.}h`5j<d9H4]r8#\dcMAd6z=91,lk?dhZI$!Tm,A;Q%(m q&Zvd5Kzfnrq.:r*yjL5XI}]]'(:w\V<k6MyH98gwJa
2024-05-25 22:59:39 UTC	11150	IN	Data Raw: ea ee f8 94 63 f4 55 7d ed db a5 ca 2e 4b 91 40 3f dc d0 2a a3 3f 67 6b e3 f3 14 ad dc 25 92 e8 c0 f0 d8 7b 6e ad ad db a5 1c 37 37 f7 e6 99 d6 49 67 5b d7 8d 4d 00 48 a0 f1 0e 20 89 91 fe 48 be 86 55 81 ad 93 af e3 6f ac ba ab 62 00 00 1e b6 c5 cd 3d ff 48 17 bb 79 b6 c4 af 8d 91 d9 64 59 2b bf 89 d8 73 60 48 ac eb c2 dc 39 8a 94 da ee 3d 2b ad fa da b7 af 0b fb 7c fc 30 12 e8 87 b2 43 ff c6 39 8a dc 7c 12 39 b4 72 df 21 89 0e 0c cb 17 d5 3d 37 28 4f b5 9b 55 f1 8f b3 ac 95 d2 88 0a 74 00 78 95 3d 98 af 9d a3 48 61 9e 65 95 e1 54 a1 d3 56 15 00 70 4c 97 45 8d da 3a 46 17 bb bc 15 90 35 ef 3f d8 73 60 48 6a 2e 00 92 72 bc 57 d5 d9 be bd ba 2e 71 24 d0 df 66 68 49 5d bf b9 71 d6 ca bd 71 59 bb 2c 24 d1 81 21 88 e1 4e f5 ce 3d 97 a4 46 21 36 99 d6 4a 5f b9 Data Ascii: cU}.K@?*?gk%{n77Ig[MH HUob=HydY+s`H9=+\|0C9\|9r!=7(OUtx=HaeTVpLE:F5?s`Hj.rW.q$fhI]qqY,$!N=F!6J_
2024-05-25 22:59:39 UTC	8246	IN	Data Raw: 9a 56 e6 5f de 01 a0 27 42 6c b4 0a a7 1a f1 86 76 44 13 59 b5 45 a3 ad 2e 07 33 9b d7 fe 7f ae 25 ed da b3 cc 25 fd 21 12 80 78 bf b5 a4 a8 ad 56 83 f9 39 5a 85 a9 46 ba 13 3f 37 af 69 b5 d5 99 e6 15 76 1d 00 00 f4 d9 99 ec 90 68 ea 1c 47 89 66 b2 43 ec 7e 1e 00 4a ea e2 6e ba e7 9c 85 ec 39 67 e2 17 10 1c ac b4 55 ec 5d f5 17 80 5a 9d 4a fa 2e ce 72 5f 33 96 74 af 18 6e bb 24 74 7f 59 d7 c5 5b 49 b7 dd a5 80 3f 65 e7 ae a8 cb 5a 5b fd a5 91 56 bd ed b4 69 97 66 bf c8 f6 ff f8 d9 52 21 de 7a 07 01 69 e4 1d 00 7a c6 92 36 24 d1 d3 58 ca 6e 16 b5 ce 71 f8 88 61 ac ad e6 1a e9 77 d9 e6 6e ec 1b 10 0a b7 92 f4 55 d2 6a 70 95 1c 76 3b 93 76 ed bf 76 56 e5 ac fb d2 d5 f3 fd b9 9b 29 97 46 0c db 64 af 9d d7 69 6f 93 5c 80 27 9e a9 0e d1 ff 43 ec 1d eb 3a 16 c4 Data Ascii: V_'BlvDYE.3%%!xV9ZF?7ivhGfC~Jn9gU]ZJ.r_3tn$tY[I?eZ[VifR!ziz6$XnqawnUjpv;vvV)Fdio\'C:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49745	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:38 UTC	570	OUT	GET /S/content/common/js/jquery.mask.min.js HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:38 UTC	544	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 7448 Connection: close Last-Modified: Thu, 20 Dec 2018 08:04:35 GMT Content-Disposition: attachment x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 25 May 2024 17:50:44 GMT ETag: "35d9db48e3112f35d81e70b98457aa42" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 0b727ed0f0558ba8e12453bfc7ff4906.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: cyoO-0OC0DGe7euzBRPtGYylMoE6-WTRmvU71vI0eXzRAD-COl_-kQ== Age: 18535
2024-05-25 22:59:38 UTC	7448	IN	Data Raw: 2f 2f 20 6a 51 75 65 72 79 20 4d 61 73 6b 20 50 6c 75 67 69 6e 20 76 31 2e 31 34 2e 31 30 0a 2f 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 69 67 6f 72 65 73 63 6f 62 61 72 2f 6a 51 75 65 72 79 2d 4d 61 73 6b 2d 50 6c 75 67 69 6e 0a 76 61 72 20 24 6a 73 63 6f 6d 70 3d 7b 73 63 6f 70 65 3a 7b 7d 2c 66 69 6e 64 49 6e 74 65 72 6e 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 66 2c 63 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 3d 53 74 72 69 6e 67 28 61 29 29 3b 66 6f 72 28 76 61 72 20 6c 3d 61 2e 6c 65 6e 67 74 68 2c 67 3d 30 3b 67 3c 6c 3b 67 2b 2b 29 7b 76 61 72 20 62 3d 61 5b 67 5d 3b 69 66 28 66 2e 63 61 6c 6c 28 63 2c 62 2c 67 2c 61 29 29 72 65 74 75 72 6e 7b 69 3a 67 2c 76 3a 62 7d 7d 72 65 74 75 72 6e 7b 69 3a 2d 31 2c 76 3a 76 Data Ascii: // jQuery Mask Plugin v1.14.10// github.com/igorescobar/jQuery-Mask-Pluginvar $jscomp={scope:{},findInternal:function(a,f,c){a instanceof String&&(a=String(a));for(var l=a.length,g=0;g<l;g++){var b=a[g];if(f.call(c,b,g,a))return{i:g,v:b}}return{i:-1,v:v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49746	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:38 UTC	575	OUT	GET /S2/content/mobile/js/freefire.4a7a9740bc.js HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:38 UTC	583	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 520 Connection: close Last-Modified: Fri, 24 May 2024 07:07:29 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 7c1iR50zZqNOsOiyh.sQEXdDsKSS6Jkb Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 25 May 2024 17:50:44 GMT ETag: "4a7a9740bcf8062898a69cb939b84746" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 19cd9c9f4eb51e9e5c75add1d4b6f304.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: yPRxHoB1GNOOWW4O0qC8WFSXHOeCiH7cFb6cB80vSwDCIU3qPfhKuA== Age: 18535
2024-05-25 22:59:38 UTC	520	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 43 4f 44 41 3d 43 4f 44 41 7c 7c 7b 7d 3b 43 4f 44 41 2e 46 52 45 45 46 49 52 45 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 72 65 74 75 72 6e 7b 70 6c 61 79 65 72 49 64 3a 6e 75 6c 6c 7d 7d 28 30 2c 6a 51 75 65 72 79 29 2c 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 22 69 6e 70 75 74 5b 6e 61 6d 65 3d 27 66 72 65 65 66 69 72 65 2e 75 73 65 72 49 64 27 5d 22 29 2e 6d 61 73 6b 28 22 30 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 22 29 3b 76 61 72 20 65 3d 24 2e 63 6f 6f 6b 69 65 28 22 66 72 65 65 66 69 72 65 5f 70 6c 61 79 65 72 69 64 22 29 3b 6e 75 6c 6c 21 3d 65 26 26 28 43 4f 44 41 2e 46 52 45 45 46 49 52 45 2e 70 6c 61 79 65 Data Ascii: "use strict";var CODA=CODA\|\|{};CODA.FREEFIRE=function(e,r){return{playerId:null}}(0,jQuery),$(document).ready(function(){$("input[name='freefire.userId']").mask("0999999999999999999999999");var e=$.cookie("freefire_playerid");null!=e&&(CODA.FREEFIRE.playe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49751	172.67.68.224	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:39 UTC	369	OUT	GET /images/vk-icon/vk-icon-28.jpg HTTP/1.1 Host: icon-library.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:39 UTC	691	IN	HTTP/1.1 200 OK Date: Sat, 25 May 2024 22:59:39 GMT Content-Type: image/jpeg Content-Length: 16200 Connection: close Cf-Bgj: h2pri Last-Modified: Wed, 10 Jul 2019 13:13:10 GMT Strict-Transport-Security: max-age=31536000; Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 7145 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xzAIwBrQl9xYOUXHzc%2BMHgaVN5MqxiIu0NIKU5Xf5BPN8KBl6x1Bvgv6ratutC%2FHWU8ZpDpFDrCTbhneeWpaTRONhOMDCa%2Fr6IX2TZFJPjovbZZtSwa9WhE1ZJ9aoWRCRuw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8899231a7e527d02-EWR
2024-05-25 22:59:39 UTC	678	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 01 f4 08 06 00 00 00 cb d6 df 8a 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e1 08 09 04 1a 07 75 f4 a1 68 00 00 3e 4c 49 44 41 54 78 da ed dd 79 9c 54 d5 9d ff ff f7 b9 55 bd 2f 40 b3 35 3b 34 22 b2 8a 02 8a 22 2a 6e 6c a2 80 c1 49 a2 89 66 b2 7c 67 7e 99 6f 32 93 4c e2 98 28 16 a8 59 cc 24 bf 4c 32 93 6d 12 63 62 5c 09 82 6c b2 08 b8 e0 c2 8e c8 da ec fb d6 34 bd af 55 f7 7c ff 00 95 a5 1b 7a a9 aa ae aa fb 7a 3e 1e 3e a2 01 ba bb 3e f7 50 ef fa 9c 7b ee 39 46 c0 25 dc f3 d3 Data Ascii: PNGIHDRgAMAa cHRMz&u0`:pQ<bKGDtIMEuh>LIDATxyTU/@5;4""*nlIf\|g~o2L(Y$L2mcb\l4U\|zz>>>P{9F%
2024-05-25 22:59:39 UTC	1369	IN	Data Raw: 6b dd e1 d6 9a 21 92 ed 6f a4 fe 56 ea c9 35 01 10 47 ac 91 f6 59 69 ab b1 da e2 1a bb d1 b5 66 cd dc c0 d8 5d 94 86 40 4f d0 ce 7b 41 6e 8d f1 0f f7 c9 1d 6a 8d 19 2a ab eb 25 b5 a7 32 00 12 54 89 64 3f 96 75 d6 c9 b8 2b fd d6 7d 77 66 60 c2 31 ca 42 a0 c7 d9 e7 55 6b 26 4f 5f 32 c0 1a 7b bb 23 8d b2 d2 75 92 ba 51 18 00 9e 7e 6b 94 0e 38 d2 1a 6b ec 3b 72 9d e5 b3 9f b8 6b 0b ab ef 09 f4 98 73 5f e0 cd 3c d7 09 de 64 5c 3b d2 1a 33 5e 52 57 aa 02 00 97 74 52 32 6f 59 d9 f7 64 cc ca 39 d3 c6 ac a3 24 04 7a d4 8d 0b 2c cc 4e 75 cc 78 59 8d 95 cc 6d 74 e0 00 10 86 0e de 6a b9 8c 59 54 69 43 6f bc 11 18 5f 42 55 08 f4 88 98 18 98 d7 ce ef 24 8d 97 34 55 56 77 ea d2 bb 9b 01 00 9a 2e 28 d9 55 56 66 a6 e3 d7 ab af fd 70 ec 51 4a 42 a0 37 cb 94 a7 16 f4 70 43 Data Ascii: k!oV5GYif]@O{Anj*%2Td?u+}wf`1BUk&O_2{#uQ~k8k;rks_<d\;3^RWtR2oYd9$z,NuxYmtjYTiCo_BU$4UVw.(UVfpQJB7pC
2024-05-25 22:59:39 UTC	1369	IN	Data Raw: 08 73 00 00 3e cb 5c 6b dd 3f 3e 1c 58 91 1a 37 81 9e 5a e8 4c 13 fb b4 03 00 70 a1 ab 4a 4c d5 7f 44 e2 0b 87 7d ca 7d 4a 60 61 57 6b 7c f9 92 4d e3 ba 01 00 70 51 f4 56 ba 3e f5 7d fd b1 31 07 63 ba 43 77 8d f3 23 c2 1c 00 80 fa d8 34 27 68 03 31 dd a1 4f 9e b1 e8 6a 59 ad 57 0b 1d cb 0a 00 40 9c 70 1d e3 0e 9b 35 6d fc 86 d8 ec d0 ad 7e 46 98 03 00 70 f9 fc 75 ad f3 74 58 bf 60 d8 ba f3 c0 a2 b1 92 ee e4 1a 01 00 d0 20 e3 26 4f 5f 1c b6 dc 0c 4b a0 07 02 01 47 46 3f e1 da 00 00 d0 70 56 f6 a7 81 40 20 2c 59 1c 96 2f b2 49 37 4c 91 74 35 97 06 00 80 86 33 d2 35 1b 75 c3 3d 31 13 e8 d6 e8 bb 5c 16 00 00 9a 10 ea c6 3e 1a 13 81 3e 29 f0 c6 ad 92 1d c1 25 01 00 a0 49 ae 9b 32 63 49 b3 8f 18 6f 7e 87 ee 38 df e3 5a 00 00 d0 74 d6 ba cd ce d2 66 3d 87 3e f9 Data Ascii: s>\k?>X7ZLpJLD}}J`aWk\|MpQV>}1cCw#4'h1OjYW@p5m~FputX` &O_KGF?pV@ ,Y/I7Lt535u=1\>>)%I2cIo~8Ztf=>
2024-05-25 22:59:39 UTC	1369	IN	Data Raw: e8 ee d9 ff 00 00 00 f1 c5 3d 37 d0 8d 2c 1d 3a 00 00 f1 d8 a1 bb a6 cd a7 81 6e e9 d0 01 00 88 cf 40 3f bf 43 27 d0 01 00 88 47 d6 39 27 d0 45 a0 03 00 10 a7 89 ae 36 04 3a 00 00 f1 8f 0e 1d 00 80 c4 09 f4 33 9b ba b3 ca 1d 00 80 38 0e 74 73 cf 4f 5f cf f2 55 a5 94 50 0f 00 00 e2 53 d0 d6 66 38 29 b5 4e 36 a5 00 00 20 7e 99 a4 b4 2c 27 18 74 32 28 05 00 00 f1 2b a9 56 19 8e 91 2f 93 52 00 00 10 cf 6a 33 9d 90 23 3a 74 00 00 e2 58 50 4e a6 63 ac a1 43 07 00 20 8e 19 99 4c c7 c8 25 d0 01 00 88 63 8e 09 65 38 d6 30 e5 0e 00 40 9c f7 e8 99 8e c4 94 3b 00 00 f1 cc 3d 33 e5 4e a0 03 00 10 d7 fd b9 51 86 63 5c a6 dc 01 00 88 eb 40 b7 6e a6 63 8d 4b a0 03 00 10 c7 ac 55 86 23 39 e9 94 02 00 80 38 ee d0 8d c9 70 8c b5 29 94 02 00 80 b8 8e f4 64 c7 1a 11 e8 00 00 Data Ascii: =7,:n@?C'G9'E6:38tsO_UPSf8)N6 ~,'t2(+V/Rj3#:tXPNcC L%ce80@;=3NQc\@ncKU#98p)d
2024-05-25 22:59:39 UTC	1369	IN	Data Raw: 41 8e 06 bb fb fa 1e 9e 6f 72 d6 ef e2 76 55 34 03 1d 61 74 f8 14 c7 48 de 92 a0 9b eb 54 d5 84 f4 f3 59 1f 71 34 24 1a a4 5f f7 36 ea d3 a5 95 a7 6b b0 e7 48 89 0a 4b ab 19 0c d1 4a 74 4a 10 5e bb 8f 16 7b be 06 c3 fb b6 4f d8 dd b0 0e 9c 28 d3 ef e7 6f 65 a0 83 ee bc 01 d6 ee 3c c1 40 20 d0 e3 d7 ae c3 25 9e af 41 b2 df a7 11 fd 12 f7 44 de b7 3f 3e a2 37 d6 1c 60 b0 a3 5e 1d 5b a7 25 ec b1 a8 8d b1 26 9f e9 76 02 3d 8e 9d 2c ae e4 99 4b 49 37 0f 4a ec 53 d8 9e 5d bc 5d 5b 0f b0 d8 07 75 bb f7 c6 9e 9e df 97 62 ff f1 52 ed 39 4a 83 43 a0 c7 b9 9d 87 99 76 1f d4 33 27 a1 57 f7 86 5c ab 5f cc da c4 2e 72 b8 48 eb 8c 64 dd 36 a4 8b e7 eb b0 78 dd 41 06 03 81 1e ff b6 ec 2f f4 7c 0d 8c 31 09 df a5 17 96 56 e9 bf 66 6f 12 4f a7 e3 5c 13 47 f4 f4 fc 63 7b 55 Data Ascii: AorvU4atHTYq4$_6kHKJtJ^{O(oe<@ %AD?>7`^[%&v=,KI7JS]][ubR9JCv3'W\_.rHd6xA/\|1VfoO\Gc{U
2024-05-25 22:59:39 UTC	1369	IN	Data Raw: e8 d6 3e 53 77 0d ed e6 f9 3a fc ef 1b db 58 c4 4b a0 e3 72 0a 4a aa b4 61 57 01 85 38 cb e7 18 4d 1c d1 83 42 20 26 7c 6d 6c 3f cf 6f 22 b3 72 cb 51 6d de 57 c8 60 20 d0 d1 10 4b d6 1d a4 08 e7 b8 e3 da ae ca 4c 4b a2 10 68 51 23 fb e7 6a 50 af 1c 4f d7 a0 bc 2a a8 67 17 73 9a 1a 81 8e 06 5b bb b3 40 c7 4f 57 52 88 b3 52 93 7c 9e 39 5a 15 31 3a 06 93 7d 7a f8 2e 36 91 79 61 79 3e 0b e1 08 74 34 86 b5 56 6f ac 61 c1 c9 b9 26 8e e8 a1 8c 54 3f 85 40 8b 98 3a aa b7 da 66 7b fb 31 b5 5d 47 8a b5 78 1d 8f d6 12 e8 68 b4 37 37 1c 52 45 75 90 42 9c 95 9e e2 d7 f8 e1 74 e9 88 be 4e 39 e9 ba db e3 eb 38 42 ae d5 6f e7 6f 95 65 c1 2e 81 8e c6 ab a8 0e ea ed 4d 9c c2 76 61 97 9e 96 4c 97 8e e8 fa fa b8 fe 4a f2 79 fb 2d 71 c1 aa fd da 7b ac 84 c1 40 a0 a3 a9 e6 af Data Ascii: >Sw:XKrJaW8MB &\|ml?o"rQmW` KLKhQ#jPO*gs[@OWRR\|9Z1:}z.6yay>t4Voa&T?@:f{1]Gxh77REuBtN98Booe.MvaLJy-q{@
2024-05-25 22:59:39 UTC	1369	IN	Data Raw: 0b 2b 28 04 81 8e 78 54 59 13 d4 df df dd 43 21 ea 30 e9 c6 5e ea dd 39 9b 42 24 28 23 e9 9b 13 07 aa 6f d7 d6 14 43 67 f6 6a 5f b4 86 a9 76 10 e8 71 6d f1 ba 83 3a 5e c4 b6 8e 17 f2 39 46 df 9c 38 90 fb aa 09 ea 0b a3 fb e8 e6 41 9c a0 f6 c9 07 fb ff 99 c7 5e ed 20 d0 e3 5e 30 e4 ea a5 15 3b 29 44 1d 7a 76 cc d2 7d 37 e5 51 88 96 ea a2 23 f4 59 ea 0b a3 af d0 e7 46 71 5d 3f f1 97 25 3b 74 82 0f f5 20 d0 13 c3 bb 9b 8f 69 ef b1 52 0a 51 87 cf 8d ca 53 8f 0e 59 14 a2 05 a4 86 f9 94 33 23 e9 1f c7 5c a5 a9 a3 58 1f f1 89 8d bb 0b 78 84 15 04 7a 22 b1 d6 ea cf 4b b6 53 88 3a f8 7d 8e be 35 89 a9 f7 96 90 9e 12 be ed 57 8d 31 fa e7 89 03 74 f7 f5 1c b8 f2 89 f2 aa a0 7e 33 6f 0b 53 ed 20 d0 13 cd e6 7d 85 5a b5 9d 83 5b ea d2 2b 37 5b 93 6e e4 dc f4 68 cb c9 Data Ascii: +(xTYC!0^9B$(#oCgj_vqm:^9F8A^ ^0;)Dzv}7Q#YFq]?%;t iRQSY3#\Xxz"KS:}5W1t~3oS }Z[+7[nh
2024-05-25 22:59:39 UTC	1369	IN	Data Raw: 3f 51 4a 31 d0 60 4c b9 7b 58 c8 b5 fa ef b9 9b d9 95 aa 89 d2 92 fd 1a dc ab ad 6e ec 9f ab 6b ae 68 47 98 23 6c 92 7c 8e be 73 df e0 46 2f c6 04 81 0e 0f db 7f bc 54 af bd b7 87 42 00 31 a6 5b fb 4c 3d 74 27 6b 31 40 a0 a3 11 66 be b3 87 73 97 81 18 34 6e 78 77 dd 79 6d 57 0a 01 02 1d 0d 13 0c b9 fa cd bc 2d b2 96 a9 77 20 d6 7c 6d 5c 3f f5 eb de 86 42 80 40 47 c3 ec 38 54 a4 05 ab 0f 50 08 20 c6 24 f9 1c fd f0 0b d7 b2 95 30 08 74 34 dc 0b cb 77 ea d8 e9 0a 0a 01 c4 98 f4 14 bf a6 3d 30 54 5d da 65 50 0c 10 e8 b8 bc ea da 90 7e 37 9f 13 d9 80 58 94 9d 9e ac 69 0f 0c 55 87 46 ec 58 08 02 1d 1e b6 69 ef 29 2d 5d 7f 88 42 00 31 a8 7d ab 34 3d f9 d0 f0 46 6d 43 0c 02 1d 1e f6 dc e2 ed 3a 5a c8 d4 3b 10 b3 a1 fe f0 75 ca 6d 93 4e 31 40 a0 e3 d2 aa 6a 43 fa Data Ascii: ?QJ1`L{XnkhG#l\|sF/TB1[L=t'k1@fs4nxwymW-w \|m\?B@G8TP $0t4w=0T]eP~7XiUFXi)-]B1}4=FmC:Z;umN1@jC
2024-05-25 22:59:39 UTC	1369	IN	Data Raw: f6 c5 6b d5 9a 73 d4 09 74 e0 5c 85 a5 d5 9a fe b7 b5 2a 2a e7 5e 67 22 73 63 20 47 df da 74 44 4f fc 75 8d 8a 19 6b cd d6 be 55 9a 7e f8 85 6b 39 72 95 40 07 ce 77 b4 b0 42 3f 7a 69 3d cf 10 23 e2 b6 1f 2c d2 a3 cf ae d2 a1 82 72 8a d1 4c bd 3b 65 eb 5b 93 06 f1 38 1b 81 0e 9c 6f d7 91 62 fd e4 d5 0d aa 09 12 ea 88 ac 63 a7 2b f4 e8 b3 1f b2 58 2e 0c 46 f4 eb a8 fb 6f b9 82 42 10 e8 c0 f9 36 ed 39 a5 1f bd b4 41 d5 b5 84 3a 22 ab bc 2a a8 a7 5e 5c a7 c5 eb 0e 52 8c 66 ba ff 96 de ba fe aa 8e 14 82 40 07 2e 08 f5 bd a7 f4 e4 0b eb 98 7e 47 c4 85 5c ab df 2f d8 aa e7 97 e5 53 8c 66 30 92 be 3d 69 90 7a 74 c8 a2 18 04 3a 70 be ad 07 4e eb c9 17 d7 a9 b2 26 48 31 10 71 b3 df db ab df 2f d8 2a cb 39 03 4d 96 9a ec d3 a3 9f bf 86 83 5c 08 74 e0 62 db 0e 9c d6 Data Ascii: kst\*^g"sc GtDOukU~k9r@wB?zi=#,rL;e[8obc+X.FoB69A:"^\Rf@.~G\/Sf0=izt:pN&H1q/*9M\tb
2024-05-25 22:59:39 UTC	1369	IN	Data Raw: 56 4a 41 1a fb ce c2 d9 e1 92 a4 a5 eb 0f e9 85 e5 3b 29 44 3d d8 64 26 ac 6a fc 74 e8 40 fd d6 e6 9f d4 ba fc 93 1a 72 45 3b dd 37 32 4f fd 7b b4 a1 28 0d 50 51 cd 22 c3 4f cc 5a b9 47 e9 29 7e 4d 1e d9 8b 62 5c a0 6b fb 4c 8a 10 c6 cf d1 7e c9 d4 88 e9 31 a0 5e 56 d2 86 5d 05 da b0 ab 40 57 75 6b ad 29 23 f3 34 f4 ca f6 32 94 86 40 6f a0 bf 2d cb 57 5a 8a 5f 63 87 75 a3 18 e7 48 4f f1 2b 35 c9 c7 02 c2 70 30 b6 c6 2f e3 56 cb f2 d6 04 34 c4 f6 83 45 fa d1 cb eb d5 a3 43 96 26 8f ec a5 91 03 72 e5 73 f8 fb 73 a1 e3 a7 79 16 fb c2 0f 85 ff fb c6 36 a5 a5 f8 74 cb a0 ce 14 e4 1c a9 c9 04 7a 78 06 99 a9 76 ce 74 e8 00 1a 63 ff 89 52 fd 72 f6 26 fd f3 af df d1 ab ef ec 56 61 69 15 45 39 c7 ae 23 6c d8 73 d1 fb ad b5 fa ef d7 37 6b f5 8e 13 14 e3 1c 84 79 d8 Data Ascii: VJA;)D=d&jt@rE;72O{(PQ"OZG)~Mb\kL~1^V]@Wuk)#42@o-WZ_cuHO+5p0/V4EC&rssy6tzxvtcRr&VaiE9#ls7ky

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49752	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:40 UTC	585	OUT	GET /S2/content/common/js/third_party_common.0859f0e010.js HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:41 UTC	560	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 278 Connection: close Date: Sat, 25 May 2024 17:50:44 GMT Last-Modified: Fri, 24 May 2024 07:07:29 GMT ETag: "0859f0e01014515a05f1738b1ad2975d" x-amz-server-side-encryption: AES256 x-amz-version-id: 5mjsTHqS5WmYJO3gYczrOC4km21Y2dij Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 639dd5dd68d7e7193120d95480cd44ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: oVNf3Ff43AQhFZ_k0EeRs2SHXmBiolLdh5T9raJNYx59ZCvJm4z-Iw== Age: 18538
2024-05-25 22:59:41 UTC	278	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 67 65 6e 56 4e 56 6f 75 63 68 65 72 52 65 6d 69 6e 64 65 72 4d 73 67 28 65 2c 6e 2c 72 29 7b 76 61 72 20 74 3d 22 22 3b 69 66 28 31 3d 3d 72 2e 69 73 54 68 69 72 64 50 61 72 74 79 4d 65 72 63 68 61 6e 74 26 26 22 31 50 61 79 22 3d 3d 72 2e 70 61 79 6d 65 6e 74 43 68 61 6e 6e 65 6c 29 7b 24 28 22 2e 63 6f 6e 66 69 72 6d 2d 63 6f 6e 74 65 6e 74 22 29 2e 63 73 73 28 22 68 65 69 67 68 74 22 2c 22 33 35 30 70 78 22 29 3b 74 3d 65 2b 22 20 22 2b 72 2e 63 68 61 6e 6e 65 6c 50 72 69 63 65 2b 22 2e 3c 62 72 2f 3e 22 2c 74 2b 3d 22 3c 62 72 2f 3e 22 2b 6e 2b 22 3c 62 72 2f 3e 3c 62 72 2f 3e 22 7d 65 6c 73 65 20 24 28 22 2e 63 6f 6e 66 69 72 6d 2d 63 6f 6e 74 65 6e 74 22 29 2e 63 73 73 28 22 68 65 69 Data Ascii: "use strict";function genVNVoucherReminderMsg(e,n,r){var t="";if(1==r.isThirdPartyMerchant&&"1Pay"==r.paymentChannel){$(".confirm-content").css("height","350px");t=e+" "+r.channelPrice+".<br/>",t+="<br/>"+n+"<br/><br/>"}else $(".confirm-content").css("hei

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49758	188.114.97.3	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:40 UTC	389	OUT	GET /diskonberkah/img/facebook_text.png HTTP/1.1 Host: newsklikdisini5bekbg0.3bsz4.xyz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:41 UTC	676	IN	HTTP/1.1 200 OK Date: Sat, 25 May 2024 22:59:41 GMT Content-Type: image/png Content-Length: 28789 Connection: close Last-Modified: Thu, 03 Sep 2020 11:33:54 GMT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OIvolacU%2FYzstpNDWcqczQ8RkS6mLq70LyWvvl2pBrjyiwIaroPgtZ27qdKdtm%2FYm92%2Bs7RzLDKsU2j2HrYlDcEoW95rL7uv4%2BDcGhXnLze2LL39HqIvP61mtdglwSV8ntG11XuUzm9bX1HBylGkoQ1r"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 889923256cf87c7e-EWR alt-svc: h3=":443"; ma=86400
2024-05-25 22:59:41 UTC	693	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 5c 00 00 00 9e 08 06 00 00 00 e7 a3 d4 26 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 9c ec 9d 77 7c 15 c5 da c7 7f b3 7b 4a 3a a1 86 de 7b 07 0b 20 a2 60 bd a0 22 8a d8 7d ed e5 da bd f6 72 15 15 7b bb 2a 72 d5 2b 58 b0 a3 a0 20 88 d8 40 04 01 91 de 41 7a 09 24 90 84 94 73 ce ee ce 3c ef 1f b3 7b ce 49 48 42 92 b3 27 21 30 5f 3e 4b 92 73 76 67 9e 99 9d f2 cc 33 33 cf 00 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 a1 50 28 14 0a 85 42 Data Ascii: PNGIHDR\&sBIT\|d IDATxw\|{J:{ `"}r{*r+X @Az$s<{IHB'!0_>Ksvg33BP(BP(BP(BP(BP(BP(BP(BP(BP(BP(BP(BP(BP(BP(B
2024-05-25 22:59:41 UTC	1369	IN	Data Raw: 8f 01 30 60 92 01 0f f9 00 68 72 0e 90 01 04 00 20 7b e2 30 6a fa 90 00 30 82 73 47 c5 b0 ef d7 34 00 26 04 f3 c1 d3 43 6f 6b 2d 76 23 3d 0a 85 22 1e 6c 9e 7e 69 9b 31 6f ff f8 4d 97 0e f5 3a b5 6e d2 d4 9b 9a e8 6d 99 9a 92 e6 ad d7 00 f0 c1 0b 80 fa b5 6a d0 1a 80 8e f5 0c 79 35 2c ae 42 71 2c 73 2e b4 5b cf 7d ee 9d f3 fa 76 6c df b8 5e 9a cf d7 ae 45 f3 06 a8 53 a7 2e 1a d5 f1 3a dd 3a 20 00 68 c0 b4 e0 ce 76 35 2b ee 51 46 ff f3 26 bd e1 ec 1e ea 7d c1 94 ff 00 1f 8c 19 33 f6 83 39 05 56 c8 36 69 99 44 3c 44 44 82 2c db 0e 25 88 88 93 20 1e f5 2f 62 a5 8a be 2a 33 a5 28 a7 20 05 09 69 e1 12 26 e5 19 54 19 6d 4d a1 50 b8 41 8f f7 47 94 f2 69 8b d6 a7 8e 7d ff 99 97 a6 ad f9 6e d6 bc 95 5b 76 ec 5d f6 f7 f6 ac e0 de bc d2 ea 39 27 a2 a0 dd 24 58 d2 e0 Data Ascii: 0`hr {0j0sG4&Cok-v#="l~i1oM:nmjy5,Bq,s.[}vl^ES.:: hv5+QF&}39V6iD<DD,% /b*3( i&TmMPAGi}n[v]9'$X
2024-05-25 22:59:41 UTC	1369	IN	Data Raw: 4d bf 63 80 e6 83 41 0c fb f6 07 50 18 2c b0 52 eb 36 dc 6a e6 17 e9 5a 29 56 2e 40 80 33 06 af f0 8b ac 03 7b 9a 72 7f 83 9c f5 cb 37 4c 8b 93 70 0a 85 42 a1 50 28 8e 71 e2 aa 70 d5 4f 4b 21 80 d9 aa 96 1b ce 4e ed 30 88 01 24 40 64 00 7a 02 72 2c 1d 6b 56 ee 5a f7 f2 4b e3 97 7f fb f9 fb 73 80 ad ff ad 5c b8 23 46 d4 1b 7e 4f db 03 53 67 b9 20 a3 42 a1 50 28 14 0a 45 71 e2 a9 70 9d 55 3f 3d 8d 81 18 04 23 17 15 2e 06 62 00 23 01 c6 18 72 82 02 37 df 3f 6e ea 57 63 ef 38 bf ea e1 7e f3 cd 81 a9 df b8 20 9f 42 a1 50 28 14 0a c5 a1 c4 73 0d 97 f0 f9 75 44 56 b3 bb b1 88 cb 3e 28 13 04 62 26 84 e6 c7 e4 69 bf e7 7d 35 f6 8e fb 01 a0 7d fb 3b fc 2e 44 a2 50 28 14 0a 85 42 e1 2a f1 53 b8 da 3d f7 0f b9 7e 2a 7a fb 60 ac 30 80 00 06 69 dd 2a e2 c0 0d 17 9f 3a Data Ascii: McAP,R6jZ)V.@3{r7LpBP(qpOK!N0$@dzr,kVZKs\#F~OSg BP(EqpU?=#.b#r7?nWc8~ BP(suDV>(b&i}5};.DP(BS=~z`0i*:
2024-05-25 22:59:41 UTC	1369	IN	Data Raw: d7 1a a6 63 d9 e2 15 5b 82 7f 2c de 62 3c fb e8 65 5f c1 56 f0 5b 9f 3b f9 3f 27 b4 fc e9 b1 49 e3 c6 15 c4 94 c8 ea e1 92 1b ee fd e8 fa 81 27 36 4d 3d e9 b8 ce 96 cf 9b d8 2e c4 3d 19 f5 1b a4 89 e4 24 e1 61 9a 06 2f 93 ed af 06 16 ce 1b 42 a4 de 91 fd 01 e7 84 ac 03 41 e4 e6 e5 53 46 83 e4 95 1b 36 6d 2f 58 b2 7c 3d 9b f1 f3 7a ef 8f 9f 3f 74 42 c9 88 db 0c bd e7 bc f4 a4 84 3e 4b bf 7e ee a9 6a 4a 6b 95 e8 39 f4 a3 d3 4c cd d7 68 ed f4 4b 3f 2f fe cd 33 37 3d f7 7a f7 2b 7a f7 6c ee 3d be 6f 0f b1 7b f7 9e 81 69 e9 f5 78 7a dd 44 3d c1 a7 83 01 d0 59 e9 6d 17 87 34 d7 0b bb cd 0a 99 02 07 f6 e7 c2 08 22 b7 6e 5a e2 aa df fe 5c a6 af 58 b9 87 9e 79 f0 a2 a7 01 cc ac a8 ac 5d ce 7b a0 ff da cd 5b 96 60 f5 24 23 96 34 7f 37 ef ef 39 e7 9c d4 e6 14 21 18 Data Ascii: c[,b<e_V[;?'I'6M=.=$a/BASF6m/X\|=z?tB>K~jJk9LhK?/37=z+zl=o{ixzD=Ym4"nZ\Xy]{[`$#479!
2024-05-25 22:59:41 UTC	1369	IN	Data Raw: b8 1c e5 5b 16 09 1e 22 41 01 3b 43 25 5b f7 e5 d3 ec a5 5b d7 1f 77 f1 ab 2f c7 33 cd b5 55 e1 7a ef 93 79 59 32 22 a9 8f 90 08 45 fa d9 58 2e 32 64 3f 6d 5a 44 d6 41 e2 44 f4 d9 37 8b dd 3d 66 f0 87 f9 f4 36 11 c9 7e 91 93 ac 4c 5c 94 7a 09 6e 12 09 8b 84 70 75 2c 19 f5 96 04 09 21 05 11 96 55 a6 1c a5 5f 5c ca 2e 2c 22 53 10 59 26 6d cb 2e 28 d7 a3 ea a3 ff f9 64 26 27 3b cd 94 67 2b 48 95 89 b3 3c 59 ec cb e2 44 82 93 25 38 05 89 53 90 2c 0a 92 49 41 0a 51 90 82 24 44 c8 6e c8 1d 1b 9d f3 7b 20 9c c7 45 44 b4 6a cb 6e 1a ff d5 af db 81 f3 5e 05 80 46 83 26 8e 00 80 8c 9e 57 35 4a ef 7d 4d 6b 57 0b 45 25 39 fb ff 5e fc e5 d7 f9 6b 28 18 2e 12 76 3a 84 b0 db 11 93 48 98 44 c4 65 5d 24 77 14 0d b2 c3 e2 42 d8 2f 91 cb 78 44 d0 ee 60 0c fb 9d 3a 85 3b 48 Data Ascii: ["A;C%[[w/3UzyY2"EX.2d?mZDAD7=f6~L\znpu,!U_\.,"SY&m.(d&';g+H<YD%8S,IAQ$Dn{ EDjn^F&W5J}MkWE%9^k(.v:HDe]$wB/xD`:;H
2024-05-25 22:59:41 UTC	1369	IN	Data Raw: 77 e2 98 b9 cc 70 d6 ca 4f 38 99 96 41 dc 92 56 db 90 20 fa 6e fe fa 3d 00 bc 6e e4 45 6d 53 b8 5e 7e 6f fa f6 10 11 71 c3 20 32 4d 69 95 22 a2 88 b5 3b 96 3e 5b d8 7a 40 90 88 2c 9a fa cb ca f8 0c 0c a6 fc be f7 13 99 49 86 dd 7e 39 95 a8 ac 9c ac 0e aa d2 2b d9 aa a0 20 22 1e 22 22 8b 16 ae dd 57 ae c2 35 77 d9 ba 3d 91 46 9b 28 7a 1e bd ea 72 bb 45 79 79 60 d8 23 21 a2 cd 9b 32 e9 b1 27 3e 0b ef 00 1a 6c af cb e9 7e e1 23 e7 b8 51 3e 7a 0e 9b d0 2f fa ef c1 57 bc 34 7f 73 66 41 41 49 39 45 d4 ef 65 a7 a5 ba 70 ca b0 28 f1 a9 dd 81 53 90 f2 0c 22 e0 d2 fb aa 92 27 83 af a1 04 00 68 76 fa a3 5f ad de b4 5b 14 b3 f4 46 25 35 be 43 93 ca 20 6c 55 a4 c4 a7 3c 48 82 2c 5a b0 7a b3 40 9b 47 3e 04 de ea 1d 4b 59 71 5f e1 2a 3b 3d d5 5b 9e ca 92 c2 7e c3 61 71 Data Ascii: wpO8AV n=nEmS^~oq 2Mi";>[z@,I~9+ """W5w=F(zrEyy`#!2'>l~#Q>z/W4sfAAI9Eep(S"'hv_[F%5C lU<H,Zz@G>KYq_*;=[~aq
2024-05-25 22:59:41 UTC	1369	IN	Data Raw: da ba 61 d3 9f 16 6c 1c 07 a0 53 ac 21 a7 36 ee 9a 0d 00 53 67 2d 9d 3b f2 cc 3e f5 18 e5 43 08 8f 8c 93 c1 ce 3f 7b 16 24 d6 c8 6a 08 12 00 13 1e f8 61 e0 81 7f 5d d8 6e e4 ad af 2c 5a 31 ed f2 f7 6a 5a 2e b7 f9 62 fa 9f 4b 5a 34 f0 43 36 b2 de 2a ce 49 94 05 d9 f5 c7 03 0d 0c b3 e7 2c 9d 09 7c 78 41 55 42 3a 26 15 ae 48 cf 27 20 00 cc 9b 78 eb 66 b4 27 7f a9 b7 1e 37 ae ad d7 e3 8b 9c 59 51 6b 3a 4d 47 e1 8a 5c 96 26 00 4a 02 2c 0d 6d 9b a6 60 fe ea 85 d7 03 8f 57 c9 4a 11 4d d2 39 13 9e bc f7 ae 61 bd bd 64 c1 83 04 80 7c b0 18 c1 62 56 ac 41 d7 46 ce 9b f3 d3 4d 27 b5 69 9a ca 18 0f 81 98 07 80 af aa b3 92 47 04 4c e8 f2 b8 24 14 c2 d2 b8 1c b0 08 86 6e 6d 1a e2 87 05 4f 9d 5c d3 f2 d5 4a 04 03 31 0b 26 e3 00 01 67 9c d2 a5 11 1a de 33 ad ed 45 df 3e Data Ascii: alS!6Sg-;>C?{$ja]n,Z1jZ.bKZ4C6*I,\|xAUB:&H' xf'7YQk:MG\&J,m`WJM9ad\|bVAFM'iGL$nmO\J1&g3E>
2024-05-25 22:59:41 UTC	1369	IN	Data Raw: e1 c5 ab 6f ab 9f c4 a0 83 a0 33 1d 8c 79 e0 94 7f 77 9a 5f 01 c1 34 04 e1 c5 93 2f 4f 5a ec 46 88 c7 46 ed 2c 41 b4 85 6a fb 96 dd e5 e6 41 87 76 ad 04 60 14 7b 83 b5 b6 2f 25 e9 4f 46 c0 b4 e7 48 65 d2 07 0c e8 5c e9 23 20 ae b8 77 dc 8f bd 3a 34 6a 08 ae c3 38 6a 1b 29 07 4f f9 af 7c f7 cd d9 1f 4c 5d 7e 71 93 74 1f 20 34 f0 a3 71 5a a2 14 2c 8d 03 94 08 08 0f 9a 35 48 4c 79 e8 c5 cf 96 6f f8 2e df 4d bf 6e 47 3d 52 ef d2 01 a1 81 41 40 f3 36 38 ad 82 8f 9e 73 e1 4d 83 fe e9 01 00 9e 06 c1 82 20 4d 80 a0 e1 28 b5 d3 14 87 79 41 96 86 ce 6d ea 79 ef 78 f6 b3 1f d0 e7 b3 eb ea b5 6f df bc 22 8f 9e 75 e5 6b af 0f 1e d0 03 b2 11 f4 d8 ef 40 4e 47 31 3a ca ba 44 e6 b4 45 72 65 1a a0 03 e4 81 06 8e e3 fa b6 38 0f c0 35 35 26 5b 0c 8c 19 3b 75 67 bf e3 5b 03 Data Ascii: o3yw_4/OZFF,AjAv`{/%OFHe\# w:4j8j)O\|L]~qt 4qZ,5HLyo.MnG=RA@68sM M(yAmyxo"uk@NG1:DEre855&[;ug[
2024-05-25 22:59:41 UTC	1369	IN	Data Raw: 56 31 59 e4 78 85 85 ed 14 1e 44 bf 30 a7 e3 70 b4 4e 16 3d b4 24 dd 6e 8f bd 72 47 30 02 59 e5 c9 fd f2 e3 ff 84 5f 07 dc 9e a1 27 d8 ca 9b 20 e8 4c 83 a5 f9 b0 76 eb 5e 7c 33 6b ed cc c7 6f 1e b2 10 38 cd 03 fc 32 0f b8 bc 21 3a d4 6b 8f 8d 63 1f 2f 1e c2 a0 c7 5f 7a fb a9 51 a3 46 f5 ef de bc 1e 0b b7 f5 c4 dc 2a 49 91 f4 12 71 d4 4d 04 ee 7f ee ab bb 5f 7a f8 a2 23 40 e1 62 00 49 85 10 4c d8 56 4b 0d 80 00 34 0b 80 b3 d0 ce 9e 66 d1 65 9b 20 95 8c e8 01 9c 63 cf 61 20 68 10 b6 0a 17 af 89 a7 8c ba 49 00 30 0a c0 a4 f2 ee 6b df a1 49 17 59 48 e3 24 09 e3 00 34 30 6e 5b 79 75 c8 4a c3 9c 7c d2 c3 71 33 00 d0 9d fc d2 64 3e 93 57 e6 3b b3 77 00 da 63 ef f0 58 39 46 c2 8a 2a 34 a4 fb 80 8f be 5b fd dc ff 9d db ed 1f 87 7b ee f9 77 17 9c d9 38 23 0d 96 19 Data Ascii: V1YxD0pN=$nrG0Y_' Lv^\|3ko82!:kc/_zQFIqM_z#@bILVK4fe ca hI0kIYH$40n[yuJ\|q3d>W;wcX9F4[{w8#
2024-05-25 22:59:41 UTC	1369	IN	Data Raw: 44 ef 4e 4d a0 b9 68 18 21 7b c4 ce ec 29 ad 6e 1d db 27 ba 13 72 8c 30 40 08 0e a6 f9 c1 58 12 32 f3 42 58 b5 6a a5 31 6b f6 9a 0d 2f 3d 76 e9 43 00 a6 47 6e 7e 72 28 1a d7 ef 8f cc db 9f 28 19 cc d7 df ff 71 f0 f4 53 fb a7 d6 49 f0 da eb b7 6c b7 0b f1 1b 01 e1 c6 91 83 69 71 39 27 b5 dd 7c c9 e0 46 69 1e c0 d9 75 1c 0f 34 30 58 a4 c1 a3 a7 60 e3 ae bd 98 3c 75 7e e8 a1 5b 27 bc 0d 7c 77 f7 61 1e bd f3 82 eb 5e 18 75 f7 2d 23 7b f5 ee dd 2e 35 d1 0b e8 c2 02 34 d3 fe da ad 39 3b 06 62 72 93 80 46 26 da b6 6c 98 00 e0 52 00 9f 97 fd d0 55 1f 75 6a df b8 11 60 8f d9 89 dc 55 64 a2 d0 b4 7c 58 48 c5 c2 e5 db f3 bf 98 be ea d3 37 1f 3d e7 96 0a 3c 76 fa 4b ef 4c 7b e7 fc 7f f4 6f d7 ae 65 03 30 12 51 6b cc 5c 86 49 ab a3 06 60 d8 69 6d ba bf 3b 26 4e f1 b8 Data Ascii: DNMh!{)n'r0@X2BXj1k/=vCGn~r((qSIliq9'\|Fiu40X`<u~['\|wa^u-#{.549;brF&lRUuj`Ud\|XH7=<vKL{oe0Qk\I`im;&N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49753	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:40 UTC	587	OUT	GET /S/content/common/css/jquery-ui-1.12.1.css HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:42 UTC	533	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 35973 Connection: close Last-Modified: Thu, 20 Dec 2018 07:52:04 GMT Content-Disposition: attachment x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 25 May 2024 22:59:42 GMT ETag: "c4a88ec0cb998929a670c0c58d7dc526" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 3cf68d8be617999c7beade955cf69ddc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: RmeGWbmbbqgnvtQYyhrnh0DYCWdhDy068eEpT1RZdYbSvfScNMys5A==
2024-05-25 22:59:42 UTC	15851	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 63 6f 72 65 2e 63 73 73 2c 20 61 63 63 6f 72 64 69 6f 6e 2e 63 73 73 2c 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 63 73 73 2c 20 6d 65 6e 75 2e 63 73 73 2c 20 62 75 74 74 6f 6e 2e 63 73 73 2c 20 63 6f 6e 74 72 6f 6c 67 72 6f 75 70 2e 63 73 73 2c 20 63 68 65 63 6b 62 6f 78 72 61 64 69 6f 2e 63 73 73 2c 20 64 61 74 65 70 69 63 6b 65 72 2e 63 73 73 2c 20 64 69 61 6c 6f 67 2e 63 73 73 2c 20 64 72 61 67 67 61 62 6c 65 2e 63 73 73 2c 20 72 65 73 69 7a 61 62 6c 65 2e 63 73 73 2c 20 70 72 6f 67 72 65 73 73 62 61 72 2e 63 73 73 2c 20 73 65 6c 65 63 74 61 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com* Includes: core.css, accordion.css, autocomplete.css, menu.css, button.css, controlgroup.css, checkboxradio.css, datepicker.css, dialog.css, draggable.css, resizable.css, progressbar.css, selecta
2024-05-25 22:59:42 UTC	16021	IN	Data Raw: 63 77 6b 70 42 48 33 38 32 35 41 77 59 64 55 38 78 54 71 6c 4c 47 68 74 43 6f 73 41 72 4b 4d 70 76 66 61 31 6d 4d 52 61 65 39 56 76 57 5a 66 65 42 32 58 66 50 6b 65 4c 6d 6d 31 38 6c 55 63 42 6a 2b 70 35 64 6e 4e 38 6a 58 5a 33 59 49 47 45 68 59 75 4f 55 6e 34 35 61 6f 43 44 6b 70 31 36 68 6c 35 49 6a 59 4a 76 6a 57 4b 63 6e 6f 47 51 70 71 79 50 6c 70 4f 68 72 33 61 45 6c 61 71 72 71 35 36 42 71 37 56 41 41 41 4f 77 3d 3d 22 29 3b 0a 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 09 66 69 6c 74 65 72 3a 20 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 32 35 29 3b 20 2f 2a 20 73 75 70 70 6f 72 74 3a 20 49 45 38 20 2a 2f 0a 09 6f 70 61 63 69 74 79 3a 20 30 2e 32 35 3b 0a 7d 0a 2e 75 69 2d 70 72 6f 67 72 65 73 73 62 61 72 2d 69 6e 64 65 74 65 72 6d 69 6e 61 74 65 Data Ascii: cwkpBH3825AwYdU8xTqlLGhtCosArKMpvfa1mMRae9VvWZfeB2XfPkeLmm18lUcBj+p5dnN8jXZ3YIGEhYuOUn45aoCDkp16hl5IjYJvjWKcnoGQpqyPlpOhr3aElaqrq56Bq7VAAAOw==");height: 100%;filter: alpha(opacity=25); /* support: IE8 */opacity: 0.25;}.ui-progressbar-indeterminate
2024-05-25 22:59:42 UTC	4101	IN	Data Raw: 69 74 69 6f 6e 3a 20 2d 32 32 34 70 78 20 2d 31 32 38 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 73 63 72 69 70 74 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 32 34 30 70 78 20 2d 31 32 38 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 61 6c 65 72 74 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 31 34 34 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 69 6e 66 6f 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 36 70 78 20 2d 31 34 34 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 6e 6f 74 69 63 65 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 33 32 70 78 20 2d 31 34 34 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 68 65 6c 70 20 7b 20 62 Data Ascii: ition: -224px -128px; }.ui-icon-script { background-position: -240px -128px; }.ui-icon-alert { background-position: 0 -144px; }.ui-icon-info { background-position: -16px -144px; }.ui-icon-notice { background-position: -32px -144px; }.ui-icon-help { b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49755	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:41 UTC	597	OUT	GET /S2/content/common/css/shared-topnav2.5566e671b1.css HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:42 UTC	499	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 6861 Connection: close Last-Modified: Thu, 26 Nov 2020 09:41:30 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 25 May 2024 22:59:42 GMT ETag: "5566e671b1a56ed10ee4665797bca5ba" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 4ca98b546b8d71c72caf6a3d8f75dc24.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: SLQ-d92ONdIcCVpxmK4QTpODNdUUd26zctJL4WfouUllyxyKj4bEAA==
2024-05-25 22:59:42 UTC	6861	IN	Data Raw: 2e 6c 6f 67 6f 2d 69 6d 61 67 65 2c 2e 73 65 61 72 63 68 2d 69 63 6f 6e 2d 2d 70 72 6f 64 75 63 74 70 61 67 65 2c 2e 73 65 61 72 63 68 2d 69 63 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 6f 70 2d 6e 61 76 62 61 72 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 31 70 78 20 30 20 72 67 62 61 28 32 2c 32 2c 32 2c 2e 32 35 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 74 6f 70 2d 6e 61 76 62 61 72 2e 74 6f 70 2d 6e 61 76 2d 2d 70 72 6f 64 75 63 74 70 61 67 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 74 6f 70 2d 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 31 30 30 25 3b 70 6f 73 69 74 69 Data Ascii: .logo-image,.search-icon--productpage,.search-icon-container{cursor:pointer}body{margin:0!important}.top-navbar{box-shadow:0 2px 1px 0 rgba(2,2,2,.25);background-color:#fff}.top-navbar.top-nav--productpage{display:none}.top-nav-container{width:100%;positi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49754	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:41 UTC	619	OUT	GET /S2/content/mobile/css/productPage/responsive-product-page2.7ec2b81ede.css HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:42 UTC	500	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 26941 Connection: close Last-Modified: Fri, 04 Sep 2020 02:37:43 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 25 May 2024 22:59:42 GMT ETag: "7ec2b81ede93e59a3c985e6656b87427" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 b0311c7e530c126dd286898583b59e4c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: tLGVrgWyevQVAlmWj5hSZuOkmuz9pM7-ctlpRpd_qOe8lF0pu10mLw==
2024-05-25 22:59:42 UTC	15884	IN	Data Raw: 2e 63 69 72 63 6c 65 2c 2e 69 63 6f 2d 71 75 65 73 74 69 6f 6e 2c 2e 76 6f 75 63 68 65 72 2d 6c 69 73 74 2d 65 6c 65 6d 65 6e 74 3e 61 7b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 73 75 62 70 69 78 65 6c 2d 61 6e 74 69 61 6c 69 61 73 65 64 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6f 74 65 72 2d 74 65 78 74 2d 64 69 76 69 64 65 72 2c 2e 66 6f 72 6d 2d 66 69 65 6c 64 2d 77 72 61 70 70 65 72 2c 2e 66 6f 72 6d 2d 69 6e 70 75 74 2c 2e 68 6f 77 49 74 57 6f 72 6b 73 2c 2e 69 63 6f 2d 71 75 65 73 74 69 6f 6e 2c 2e 76 6f 75 63 68 65 72 2d 6c 69 73 74 2d 65 6c 65 6d 65 6e 74 3e 61 7b 76 65 72 74 69 63 61 6c Data Ascii: .circle,.ico-question,.voucher-list-element>a{-webkit-font-smoothing:subpixel-antialiased!important;-moz-osx-font-smoothing:grayscale!important}.footer-text-divider,.form-field-wrapper,.form-input,.howItWorks,.ico-question,.voucher-list-element>a{vertical
2024-05-25 22:59:42 UTC	11057	IN	Data Raw: 74 2d 66 61 6d 69 6c 79 3a 4c 61 74 6f 2d 52 65 67 75 6c 61 72 2c 73 61 6e 73 2d 73 65 72 69 66 7d 23 63 6f 6e 66 69 72 6d 2d 75 73 65 72 2d 64 69 61 6c 6f 67 20 75 6c 20 6c 69 20 64 69 76 7b 70 61 64 64 69 6e 67 3a 30 20 31 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 63 6f 6e 66 69 72 6d 2d 75 73 65 72 2d 64 69 61 6c 6f 67 20 75 6c 3e 6c 69 2e 63 6f 6e 66 69 72 6d 2d 6d 6f 64 61 6c 5f 5f 63 6f 6e 66 69 72 6d 2d 74 78 74 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 20 31 35 70 78 7d 23 63 6f 6e 66 69 72 6d 2d 75 73 65 72 2d 64 69 61 6c 6f 67 20 75 6c 20 73 65 6c 65 63 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 Data Ascii: t-family:Lato-Regular,sans-serif}#confirm-user-dialog ul li div{padding:0 1px;display:inline-block}#confirm-user-dialog ul>li.confirm-modal__confirm-txt{font-style:italic;font-size:12px;padding:10px 15px}#confirm-user-dialog ul select{background-color:#ff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49756	52.222.206.96	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:41 UTC	646	OUT	GET /S/content/mobile/images/app_store_coda.png HTTP/1.1 Host: d1qgcmfii0ptfa.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:41 UTC	491	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 2799 Connection: close Last-Modified: Mon, 17 Jul 2017 08:47:30 GMT Content-Disposition: attachment Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 25 May 2024 13:21:29 GMT ETag: "cfd0f0cbf8aa1717324f64a438c378c5" X-Cache: Hit from cloudfront Via: 1.1 474733f16f494ddb794b4f7dfd7de966.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: K5ko5ytvQZz_OYErfi5D5XJsJorHJWtULel03MYkRV4g0oVR5XJWuQ== Age: 34693
2024-05-25 22:59:41 UTC	2799	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8a 00 00 00 29 08 03 00 00 00 dd d1 41 16 00 00 02 f7 50 4c 54 45 2e 2e 2e 00 00 00 13 13 13 00 00 00 46 46 46 00 00 00 65 65 65 2b 2b 26 6c 6c 62 8d 8d 88 6c 6c 62 a7 a7 a0 72 72 6c 77 77 71 8d 8d 8d 95 95 95 88 88 88 91 91 8f 8d 8d 8b 8c 8c 8a a6 a6 9e a5 a5 a1 ab ab a7 a6 a6 a1 a0 a0 9e a8 a8 a3 a2 a2 9f a9 a9 a6 a5 a5 a3 a6 a6 a3 9f 9f 9c a0 a0 9f 90 90 8f a0 a0 9f 85 85 84 7e 7e 7d 98 98 97 7f 7f 7e 73 73 72 98 98 97 98 98 98 98 98 97 70 70 70 75 75 75 6f 6f 6f 6e 6e 6d 6d 6d 6c 60 60 60 5d 5d 5d 60 60 5f 5c 5c 5c 53 53 53 33 33 33 40 40 40 8b 8b 8b 0c 0c 0c 7a 7a 7a a0 a0 9f 00 00 00 ff ff ff 10 10 10 01 01 01 0f 0f 0f 02 02 02 03 03 03 fe fe fe 05 05 05 06 06 06 15 15 15 f2 f2 f2 08 08 08 09 Data Ascii: PNGIHDR)APLTE...FFFeee++&llbllbrrlwwq~~}~ssrpppuuuooonnmmml```]]]``_\\\SSS333@@@zzz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	49761	18.239.94.101	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:41 UTC	389	OUT	GET /S/content/mobile/images/codashop-logo-new-2x.png HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:41 UTC	500	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3353 Connection: close Last-Modified: Mon, 12 Jul 2021 11:10:08 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 25 May 2024 22:59:40 GMT ETag: "d0ce400f6d6f397ddca5e460210db19e" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 400be015a105355a3fb16d2aa2a6d926.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P3 X-Amz-Cf-Id: WWvGuk11K9n1ZvpNEP1oSQSFMB7dL02QX1_ORRYJhjWNvwGst0-f6Q== Age: 2
2024-05-25 22:59:41 UTC	3353	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 7c 00 00 00 8c 08 03 00 00 00 d1 3e 84 54 00 00 00 3c 50 4c 54 45 00 00 00 28 00 30 28 00 30 28 00 30 28 00 31 28 00 31 28 00 31 28 00 30 20 00 30 29 00 31 28 00 30 27 00 31 26 00 30 27 00 30 25 00 30 27 00 31 29 00 31 2a 00 30 28 00 32 28 00 31 cb e2 56 63 00 00 00 13 74 52 4e 53 00 20 40 80 df bf 9f 60 10 ef 70 cf 50 90 30 af 1f 30 8f cd 7f 75 ae 00 00 0c 79 49 44 41 54 78 da ec dc eb 92 9b 30 0c 05 60 c9 96 6f 40 48 83 de ff 5d db d9 b4 cb 64 31 c6 68 99 74 3a 3d df ef 68 3d 61 b4 be 9c 00 04 00 00 00 00 00 00 00 00 00 ff 2f 37 84 a2 4d 63 4c 4c 00 d7 ca 29 16 ed 12 bc 23 80 8b 64 b7 8c 7a 86 60 02 84 2b cc 9b b5 16 13 20 74 b8 7e ad c5 04 08 6f 90 dd 12 f4 15 26 40 78 87 ec 8b 5e 45 7c 26 80 5e Data Ascii: PNGIHDR\|>T<PLTE(0(0(0(1(1(1(0 0)1(0'1&0'0%0'1)1*0(2(1VctRNS @`pP00uyIDATx0`o@H]d1ht:=h=a/7McLL)#dz`+ t~o&@x^E\|&^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	49760	18.239.94.101	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:41 UTC	406	OUT	GET /S/content/common/images/grab.29dad06670f873936002ddb910253a4b.png HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:41 UTC	478	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 61755 Connection: close Date: Sat, 25 May 2024 22:59:40 GMT Last-Modified: Tue, 05 May 2020 03:32:54 GMT ETag: "29dad06670f873936002ddb910253a4b" x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 400be015a105355a3fb16d2aa2a6d926.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P3 X-Amz-Cf-Id: PpU1APxiBdc7Z_5HNeQiLFdYpvLnoiceNopDwUHscHRAwGJM5iKB4Q== Age: 2
2024-05-25 22:59:41 UTC	15906	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 d0 00 00 03 20 08 06 00 00 00 7b e5 f9 73 00 00 f1 02 49 44 41 54 78 9c ec dd e1 75 db 48 b2 f6 f1 87 f7 dc ef cb 37 82 e5 44 30 70 04 43 45 d0 74 04 43 45 30 52 04 96 23 90 1c 81 38 11 08 1d 81 38 11 18 8e c0 d8 08 2e 36 02 be 1f 9a 34 25 5b b2 29 09 dd d5 e8 fe ff ce f1 f1 d8 33 8b ae b5 25 10 e8 ea aa 92 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR {sIDATxuH7D0pCEtCE0R#88.64%[)3%
2024-05-25 22:59:41 UTC	1992	IN	Data Raw: 5a e9 dd 95 18 ed f0 56 37 0a 7f a7 83 71 1c f6 bc 5b ee 2b c8 7f 57 78 ae 58 a8 dc 64 ea a0 f0 6c d1 e9 98 5c 27 b1 ce c8 98 b7 e1 79 62 12 ea 4c a0 87 cd 88 cf d6 61 44 36 48 fa 2d d9 8d bc ce ea 73 4e 0a 01 00 50 92 3a 3a 14 c5 90 cf c6 a0 a5 63 92 bc 51 48 4e fc a1 69 54 72 4a 87 04 d3 e3 0d a1 de 2e 9c ca 91 3c 7f ab 41 b5 ce 39 0f c9 f2 66 ff e3 0f 95 9d 28 7f a9 41 e1 fe f6 8f 6a be cf 85 cf aa 0f 0a 1b de 78 9d bc 66 59 e3 e5 d2 25 d0 f3 69 d3 cb 21 e1 b7 da 2a 1c 16 ee 8d e3 48 ef f8 8e b3 94 1e 25 cb 71 1c 47 73 78 b6 d8 56 99 54 0f cf 9f b7 aa af b0 f2 ed 48 a2 67 af ce 04 ba 77 d7 2a ff 65 21 6d 72 b7 be ea f3 5e d2 bb 2a 3f 14 01 00 28 51 9d 87 01 df 6a ab 5a 37 92 5a d7 48 6a 1e 54 5c 34 2a 33 49 b5 95 d4 69 a7 2f 92 3a 92 05 09 84 0d a8 cf Data Ascii: ZV7q[+WxXdl\'ybLaD6H-sNP::cQHNiTrJ.<A9f(AjxfY%i!H%qGsxVTHgwe!mr^?(QjZ7ZHjT\43Ii/:
2024-05-25 22:59:41 UTC	16384	IN	Data Raw: 23 e8 79 83 76 7a 37 89 e4 b9 77 cb 7d e2 85 91 20 88 61 2d e9 ab bc bb dd 27 a7 f3 16 f6 4b ce 14 12 ff 78 da 5a ad 5b 5b 07 81 d1 0c 0a 63 8f 06 b3 08 48 9e 9f 62 50 38 e4 70 65 1c c7 69 0e cf 16 33 7d 16 c9 73 8c eb f8 fe 34 95 cf a2 50 65 fd 4e e1 b0 12 8e e6 aa 6b a4 72 36 ea 48 a0 97 ff 62 bb 49 b8 d6 9f 09 d7 b2 34 48 fa 68 1d 04 00 00 78 a3 90 7c 6d 8c a3 c8 c9 20 e9 2c fb 53 e8 24 ce f1 bc 85 a4 7b 79 77 3f 89 04 53 70 2d ee 43 cf e9 24 fd 96 fd 9c 60 12 e7 48 6b ad a9 24 d2 9d 1f f6 15 d6 f9 1f ca b3 32 d3 b5 5a d7 58 87 81 51 bc cf a0 d0 86 e4 f9 cf 75 0a 55 9a 5b e3 38 7e 8d 67 0b a4 33 ad 44 3a 07 f4 9e d3 c8 3b 5a dc 27 56 7e 0b f7 50 9d 50 f2 e9 8c 4e ce bf 4b b2 52 5d 33 fb a6 d5 e6 07 00 00 fc 28 6c 3a 7f b5 0e 23 23 83 76 3a 9b 40 a2 ea Data Ascii: #yvz7w} a-'KxZ[[cHbP8pei3}s4PeNkr6HbI4Hhx\|m ,S${yw?Sp-C$`Hk$2ZXQuU[8~g3D:;Z'V~PPNKR]3(l:##v:@
2024-05-25 22:59:41 UTC	16384	IN	Data Raw: 27 ff 33 7f 28 b4 ce bf 93 b4 14 fb c3 40 ee 06 eb 00 46 34 b7 0e 00 e3 9a 76 02 bd 9c 87 f7 1f b5 ae 49 b0 4a 97 60 0d 4b b1 5f 8a 00 00 00 00 8c cd bb 85 75 08 23 db 46 be 7e 69 ef 3d a5 8e 6a 03 00 a4 67 33 f7 5c ba 4b ba 66 4e 42 e5 f9 d6 38 8a 5b a5 eb f0 0a e0 6d 3a eb 00 46 d4 44 bc 76 17 f1 da 69 a5 c9 7d 8e 62 da 09 f4 92 67 30 cd 12 7c c8 87 16 19 43 f4 75 ec 34 d6 01 00 00 00 00 78 b1 85 75 00 30 35 58 07 00 e0 49 83 75 00 c0 0b 0d b2 99 c1 7d af 7a ab 10 37 5a f9 8d 69 04 ad 5b ab de d6 f9 00 4a 55 52 2e 74 36 9d cf c8 69 27 d0 83 ad 75 00 91 34 89 d6 e9 12 ad 63 61 51 60 f5 0a 00 00 00 00 94 ac b3 0e 00 c0 93 be 58 07 00 bc 90 c5 dc f3 6b d5 5b d0 d3 c9 79 8b 03 0b 47 ad 6b 34 ab ba 75 3e 30 45 9d 75 00 c0 73 4a 48 a0 f7 d6 01 44 92 aa 0d df Data Ascii: '3(@F4vIJ`K_u#F~i=jg3\KfNB8[m:FDvi}bg0\|Cu4xu05XIu}z7Zi[JUR.t6i'u4caQ`Xk[yGk4u>0EusJHD
2024-05-25 22:59:41 UTC	11089	IN	Data Raw: d7 58 b1 d4 10 f7 1e 92 b4 50 0c 57 de 41 fc 84 0b 7d c0 7b ac 55 c2 48 4a 7b 9e f9 a2 e1 8c a0 dc d9 88 f3 cc 0f 21 81 5e 13 db 78 0e 75 73 75 b8 91 ee 14 c3 8d 77 18 07 09 71 a3 10 4f e9 30 00 0c ca 65 91 2d db 77 ec 36 f8 dc 3b 8c cc a8 8c 00 80 a1 b3 67 ad c6 39 0a 0f 53 a9 90 4a 8d 10 5b 85 78 ae 21 b6 d4 07 00 0c 8f b5 3a de 38 47 e1 e5 73 91 05 50 b6 17 39 11 17 fa 80 43 ac 64 9d 35 5b e7 38 a4 e1 75 d1 dc b9 2c e4 cf bf b7 48 a0 d7 26 c4 5b f1 21 7e 88 0b c5 50 46 35 c5 21 6c d3 fc 49 7c 6d 81 9a ad b5 d5 49 f7 3e 5e 26 4b 9e 2f bc c3 c8 6c 55 70 27 00 00 40 5e 43 bd d4 3a 2d aa 9d 6a 88 57 5c 30 06 00 0c c4 70 bb 8d 8e 74 57 64 12 5d 92 42 3c ef f6 22 00 9e 77 ab 10 cf 8a 48 de da 73 cc d4 3b 0c 07 2b 3a bd 7c 1c 09 f4 1a d9 ad fc b5 77 18 3d 30 Data Ascii: XPWA}{UHJ{!^xusuwqO0e-w6;g9SJ[x!:8GsP9Cd5[8u,H&[!~PF5!lI\|mI>^&K/lUp'@^C:-jW\0ptWd]B<"wHs;+:\|w=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	49763	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:42 UTC	590	OUT	GET /S2/content/mobile/css/infoBar.662b8f1b5f.css HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:43 UTC	564	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 960 Connection: close Last-Modified: Fri, 24 May 2024 07:07:29 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 6C6iKQxKWlY5hsuS8nwrisFuYkSQeybK Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 25 May 2024 22:59:43 GMT ETag: "662b8f1b5f919912c1df4b367bff2cc1" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 218366faeb88f6d265d2589e37ea2dac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: 0lri26w8_tykSf-iCeiu3Tm0sFiePrg3-os6Jw6rZkFOE_QP1KWxgQ==
2024-05-25 22:59:43 UTC	960	IN	Data Raw: 2e 70 72 6f 6d 6f 2d 62 61 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 38 35 30 37 32 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 61 6c 65 72 74 2d 62 61 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 34 45 33 42 32 3b 63 6f 6c 6f 72 3a 23 33 33 33 7d 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 62 61 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 31 32 38 30 70 78 7d Data Ascii: .promo-bar{background:#385072;color:#fff}.alert-bar{background:#F4E3B2;color:#333}.notification-bar{text-align:center;padding:15px;display:flex;flex-direction:row;justify-content:space-between;font-size:16px;position:relative;margin:auto;max-width:1280px}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	49764	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:42 UTC	602	OUT	GET /S2/content/common/css/shared-shop-content.e6202b83de.css HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:43 UTC	565	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 3237 Connection: close Last-Modified: Fri, 24 May 2024 07:07:29 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: X5P5qVh9MvD5ziEF5EPFuV2Evo3EBVMb Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 25 May 2024 22:59:43 GMT ETag: "e6202b83defd6474350841e595260599" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 614c7e2196cc5b32f71450d1d8261094.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: VkY85rohVlJJgnkV07DQ1LE_Er6ecbN0t1ouyQ5w2NIdaCgVAW-Qow==
2024-05-25 22:59:43 UTC	3237	IN	Data Raw: 2e 73 68 6f 70 2d 63 6f 6e 74 65 6e 74 2d 2d 70 61 72 61 67 72 61 70 68 7b 6d 61 72 67 69 6e 3a 31 35 70 78 20 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 32 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4c 61 74 6f 2d 52 65 67 75 6c 61 72 2c 4e 6f 74 6f 53 61 6e 73 2d 52 65 67 75 6c 61 72 2c 73 61 6e 73 2d 73 65 72 69 66 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 61 72 74 69 63 6c 65 3e 2e 73 68 6f 70 2d 63 6f 6e 74 65 6e 74 2d 2d 70 61 72 61 67 72 61 70 68 3a 6e 74 68 2d 63 68 69 6c 64 28 31 29 7b 6d 61 72 67 69 6e 3a 30 7d 2e 66 6f 72 6d 5f 5f 66 69 65 6c 64 2d 69 6e 73 74 72 75 63 74 69 6f 6e 2d 74 65 78 74 20 2e 73 68 6f 70 2d 63 6f 6e 74 65 6e 74 2d 2d 70 61 72 61 67 72 61 70 68 7b 6d 61 Data Ascii: .shop-content--paragraph{margin:15px 0;line-height:22px;font-family:Lato-Regular,NotoSans-Regular,sans-serif;position:relative;overflow:hidden}article>.shop-content--paragraph:nth-child(1){margin:0}.form__field-instruction-text .shop-content--paragraph{ma

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49762	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:42 UTC	599	OUT	GET /S2/content/common/css/shared-fontfaces.b6c83d3582.css HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:43 UTC	559	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 2784 Connection: close Date: Sat, 25 May 2024 22:59:43 GMT Last-Modified: Fri, 24 May 2024 07:07:29 GMT ETag: "b6c83d3582430126098676cc14c0b7ae" x-amz-server-side-encryption: AES256 x-amz-version-id: kL8a88ZtLqGGSvKQp0i4BuOXfXq1075n Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 f9fdc7f95aba4b520d73ade0f850d634.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: VBz3YDN4FvWarskZnxJwGqXlfWYGGhMT-7EdFkTQkPz6O7ZNHayTTA==
2024-05-25 22:59:43 UTC	2784	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4c 61 74 6f 2d 42 6f 6c 64 3b 73 72 63 3a 6c 6f 63 61 6c 28 27 4c 61 74 6f 20 42 6f 6c 64 27 29 2c 6c 6f 63 61 6c 28 27 4c 61 74 6f 2d 42 6f 6c 64 27 29 2c 75 72 6c 28 68 74 74 70 73 3a 2f 2f 63 64 6e 31 2e 63 6f 64 61 73 68 6f 70 2e 63 6f 6d 2f 53 2f 63 6f 6e 74 65 6e 74 2f 66 6f 6e 74 73 2f 4c 61 74 6f 2f 4c 61 74 6f 2d 42 6f 6c 64 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 75 72 6c 28 68 74 74 70 73 3a 2f 2f 63 64 6e 31 2e 63 6f 64 61 73 68 6f 70 2e 63 6f 6d 2f 53 2f 63 6f 6e 74 65 6e 74 2f 66 6f 6e 74 73 2f 4c 61 74 6f 2f 4c 61 74 6f 2d 42 6f 6c 64 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 Data Ascii: @font-face{font-family:Lato-Bold;src:local('Lato Bold'),local('Lato-Bold'),url(https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Bold.woff2) format('woff2'),url(https://cdn1.codashop.com/S/content/fonts/Lato/Lato-Bold.woff) format('woff');font-display:s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49765	52.222.206.107	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:42 UTC	395	OUT	GET /S/content/mobile/images/app_store_coda.png HTTP/1.1 Host: d1qgcmfii0ptfa.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:42 UTC	491	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 2799 Connection: close Last-Modified: Mon, 17 Jul 2017 08:47:30 GMT Content-Disposition: attachment Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 25 May 2024 13:21:29 GMT ETag: "cfd0f0cbf8aa1717324f64a438c378c5" X-Cache: Hit from cloudfront Via: 1.1 081c7bef6b5d3c12829ac4c99182ccea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: Otkr0jJE25Iu-RUgFM0rdTzeST8uqT9vtRLL-TzK8vr31oZvPg16yQ== Age: 34694
2024-05-25 22:59:42 UTC	2799	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8a 00 00 00 29 08 03 00 00 00 dd d1 41 16 00 00 02 f7 50 4c 54 45 2e 2e 2e 00 00 00 13 13 13 00 00 00 46 46 46 00 00 00 65 65 65 2b 2b 26 6c 6c 62 8d 8d 88 6c 6c 62 a7 a7 a0 72 72 6c 77 77 71 8d 8d 8d 95 95 95 88 88 88 91 91 8f 8d 8d 8b 8c 8c 8a a6 a6 9e a5 a5 a1 ab ab a7 a6 a6 a1 a0 a0 9e a8 a8 a3 a2 a2 9f a9 a9 a6 a5 a5 a3 a6 a6 a3 9f 9f 9c a0 a0 9f 90 90 8f a0 a0 9f 85 85 84 7e 7e 7d 98 98 97 7f 7f 7e 73 73 72 98 98 97 98 98 98 98 98 97 70 70 70 75 75 75 6f 6f 6f 6e 6e 6d 6d 6d 6c 60 60 60 5d 5d 5d 60 60 5f 5c 5c 5c 53 53 53 33 33 33 40 40 40 8b 8b 8b 0c 0c 0c 7a 7a 7a a0 a0 9f 00 00 00 ff ff ff 10 10 10 01 01 01 0f 0f 0f 02 02 02 03 03 03 fe fe fe 05 05 05 06 06 06 15 15 15 f2 f2 f2 08 08 08 09 Data Ascii: PNGIHDR)APLTE...FFFeee++&llbllbrrlwwq~~}~ssrpppuuuooonnmmml```]]]``_\\\SSS333@@@zzz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	49770	172.67.207.164	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:42 UTC	611	OUT	GET /images/2024/05/12/hBhjN.png HTTP/1.1 Host: picjj.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:42 UTC	722	IN	HTTP/1.1 200 OK Date: Sat, 25 May 2024 22:59:42 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close last-modified: Sun, 12 May 2024 10:12:55 GMT vary: Accept-Encoding etag: W/"66409627-7d6" strict-transport-security: max-age=31536000 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6625 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JqiVKzRSk8i5S6b5vke7iDYWjzkxWyH0sHJhT4EdaWKLsTn0dW67fzliyCV42LSBaT%2BxYVXmdwLyebbp2xppIrpucxviNu8ZOtR96Nh6ObxGUUseGU2Uf4TP3NE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88992330684b4310-EWR alt-svc: h3=":443"; ma=86400
2024-05-25 22:59:42 UTC	647	IN	Data Raw: 37 64 36 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fe 00 00 00 17 08 06 00 00 00 2b dd f2 1b 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 07 90 49 44 41 54 78 5e ed 5c c9 75 1b 39 10 ad 56 22 23 dd 78 94 26 01 4b 91 c8 8e 44 72 24 a6 23 19 3a 81 91 8e bc 8d 22 51 8f 0b 1b d1 68 a0 ea 63 a1 4c da e4 7b be 58 dd e8 da 7e ad 00 26 02 7e 1b ba bd 26 a2 eb 3d bd ee 80 c7 d5 47 fc 7a fc e0 a8 35 d5 8f 56 3c 10 d1 f7 b6 a7 d7 b7 8a 57 7f c9 a3 a7 28 cf 5e 19 8e b6 b9 16 c5 f4 f2 d0 f2 cd 8f 7a 67 ca 7d c8 31 fc 48 34 dd 13 11 ff 8b 7f 6f 3f ff 7f 47 f4 fe 63 4f af 5b 94 d0 0d dd 7e 26 ba fa 44 34 7f 5e af 47 bc e6 1b d1 fb d7 1c d0 36 74 7b 4f 34 fd 03 7c cb 81 d4 d2 f7 93 f6 1d 0a dc 0d dd 3e 95 f9 65 fa 66 5e eb 2b 40 83 79 64 43 77 ff b1 Data Ascii: 7d6PNGIHDR+sRGBIDATx^\u9V"#x&KDr$#:"QhcL{X~&~&=Gz5V<W(^zg}1H4o?GcO[~&D4^G6t{O4\|>ef^+@ydCw
2024-05-25 22:59:42 UTC	1366	IN	Data Raw: 2c 67 1d 60 5f 64 ab 01 4b 5d 8d df 1e 30 ac bd 6c a8 2a da 47 b2 99 0d f0 fb 40 65 81 df cf c3 c7 44 7c 22 e2 be 5b 0f a6 42 79 6e 6a 7c c0 a8 76 5c 7b 2b 42 0e 51 c5 d5 a1 8a 67 62 c5 4d b9 46 4e ac 5c 67 1c 7a 8a bb a7 97 49 f6 bc bc 6c 6c d4 92 b2 20 87 2a 46 7d 00 f8 ae 49 3a 73 5d 2b 34 01 3d 40 7a 1d f3 81 7f 2d 42 d5 a4 fa ed a0 b1 51 1b 90 53 41 19 23 81 df ea 7c 02 0f 62 b3 b4 cf 39 79 f6 e7 9b 42 e3 14 32 d6 c3 43 51 c4 07 84 8f 00 3f 78 13 c0 91 18 10 ea c0 27 03 2e 24 e2 63 c0 f7 8a 32 1d f1 52 b7 ba 42 90 cb 1a 3c 7e 51 97 69 88 e4 4a 19 e3 a3 52 b7 a3 0a 8e 6f 2c f0 25 d0 cc cf 42 84 72 ba 2d f2 e5 1d 63 3a 05 72 62 e6 b5 e9 bb 9c fa ce dc b1 2f 8e a0 7d 93 56 d6 55 17 0f 2c f3 c5 e4 c3 11 cf 3a 17 ec cf 38 b5 45 03 d9 96 45 25 e7 3f 6d 79 Data Ascii: ,g`_dK]0lG@eD\|"[Bynj\|v\{+BQgbMFN\gzIll F}I:s]+4=@z-BQSA#\|b9yB2CQ?x'.$c2RB<~QiJRo,%Br-c:rb/}VU,:8EE%?my
2024-05-25 22:59:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	49766	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:42 UTC	668	OUT	GET /S/content/common/images/promos/Community%20Banners/freefire_id_codaclub.jpeg HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:43 UTC	606	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 28559 Connection: close Date: Sat, 25 May 2024 22:59:44 GMT Last-Modified: Wed, 20 Jan 2021 10:28:50 GMT ETag: "f93267a5b15f21f2c6f33e9bb893dfd1" x-amz-meta-sha256: c9952880919057304eec16200ccd3f7b373d3ba7192c936b4a79ffca9b62ed35 x-amz-meta-s3b-last-modified: 20210120T102030Z x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 955acc3fed5ff84789d05d4e8c15bf08.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: Dul93fW3gw9p0tX2dF5l8rm7CCyPDHu0zLbBg9MDNFfa8bJE6n9bzw==
2024-05-25 22:59:43 UTC	1421	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 44 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 34 00 00 00 00 00 00 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 de 00 06 00 04 00 11 00 2b 00 38 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 79 62 6b 70 74 00 00 01 78 00 00 00 14 77 74 70 74 00 00 01 8c 00 00 00 14 63 70 72 74 00 00 01 a0 00 00 00 15 72 58 59 5a 00 00 01 b8 00 00 00 14 67 58 59 5a 00 00 01 cc 00 00 00 14 62 58 59 5a 00 00 01 e0 00 00 00 14 72 Data Ascii: JFIFDICC_PROFILE4mntrRGB XYZ +8acsp-descybkptxwtptcprtrXYZgXYZbXYZr
2024-05-25 22:59:44 UTC	15952	IN	Data Raw: d7 d1 3f 50 42 a3 82 3d 72 ac 46 2a 5b 5d 7a da 55 5c db dd 22 ed ce e7 40 07 f3 ac 0f 13 e8 7a dd b4 ed 35 bd e3 ca bb 76 fe 15 c6 de c9 aa a9 2d 72 64 c2 8c 12 4e 00 ad 5e 47 46 3a 4d 3f bc f0 2b e7 99 8d 39 59 da de 87 a4 dc f8 ab 4e 85 8a b2 ce c4 7f 75 47 f8 d4 f1 78 86 d0 88 d9 56 50 24 04 e5 80 00 00 32 4f 5f a7 e7 5e 5f a6 40 f3 de 15 be 59 59 48 f9 51 24 08 ce d9 00 0c 9c 81 d7 3f 86 2a 6d 46 ec 08 e1 f2 e5 99 e1 75 3b 51 d0 29 45 0d 8c 70 4e 79 1f a0 a9 fe c5 c3 76 7f 79 83 e2 2c 72 d1 db ee 3d 08 78 9e c1 ba 47 71 ff 00 7c 8f f1 ad 5d 1f 57 b0 b9 6d a9 2e c7 3d a4 e3 ff 00 ad 5e 5f 67 2a b8 5c b0 e0 66 ae 16 28 41 53 51 53 24 c3 ca 36 4d a2 a1 c4 b8 c4 fd eb 35 e8 7a f3 26 46 47 35 0b a5 79 d6 9d ad de d9 11 e5 4c db 3f ba 79 1f 95 74 fa 7f 8a Data Ascii: ?PB=rF[]zU\"@z5v-rdN^GF:M?+9YNuGxVP$2O_^_@YYHQ$?mFu;Q)EpNyvy,r=xGq\|]Wm.=^_g*\f(ASQS$6M5z&FG5yL?yt
2024-05-25 22:59:44 UTC	11186	IN	Data Raw: cb f9 6b 1b 33 12 d2 a0 03 f7 80 77 ef 55 cc 89 e4 66 00 a5 43 c7 e2 6b b5 d4 3c 19 61 a3 47 a8 4f ac ea f7 51 da c1 73 15 b4 2d 6d 62 b2 c9 21 78 7c df 99 5a 54 08 55 4a 82 32 48 63 8e d9 aa a7 41 d0 20 d2 20 d4 ae 75 8d 59 2d 2e ae 65 82 db 6e 97 19 77 11 a4 4c cc c0 dc 00 a3 32 e0 60 b6 76 93 c7 4a 5c e8 1d 36 8e 5e 96 ba eb df 07 41 a5 4b 79 36 af aa 34 3a 54 4f 1a 41 3c 56 de 64 b7 0d 24 4b 2a 85 88 b2 80 42 3a 96 cb 0d a5 80 e4 9a 81 3c 2a b7 5a a6 9d 16 9b a8 47 3e 9d 7b 13 5c 7d ae 44 f2 cd bc 48 4f 9a d2 a6 4e d2 81 49 e0 90 46 30 4e 69 f3 a1 38 49 1c cd 38 1a ea d7 c2 31 45 e2 6d 6f 4e bd d4 24 8e cb 4b 81 ee 9a ea 2b 70 ed 24 40 ae c6 54 2e bc b6 f4 e0 b7 19 eb 52 a7 84 2d 6e f4 f8 b5 0d 33 53 b8 7b 07 82 f6 52 d7 56 62 17 0d 6f 1a b6 02 89 18 Data Ascii: k3wUfCk<aGOQs-mb!x\|ZTUJ2HcA uY-.enwL2`vJ\6^AKy64:TOA<Vd$KB:<ZG>{\}DHONIF0Ni8I81EmoN$K+p$@T.R-n3S{RVbo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	49768	52.222.206.96	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:42 UTC	648	OUT	GET /S/content/mobile/images/google_play_coda.png HTTP/1.1 Host: d1qgcmfii0ptfa.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:43 UTC	491	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 2631 Connection: close Last-Modified: Mon, 17 Jul 2017 08:47:31 GMT Content-Disposition: attachment Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 25 May 2024 15:19:10 GMT ETag: "e7ebc6c74ec20ea3614970e178217c10" X-Cache: Hit from cloudfront Via: 1.1 e94c77a12a65a84cbcef7856ed7e0fb8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: WRcvey5MEmAtd7-XWXUygRLSKmV5wPOlYKk4Qc9s9Aj9NkDvyCTJcQ== Age: 27634
2024-05-25 22:59:43 UTC	2631	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8a 00 00 00 29 08 03 00 00 00 dd d1 41 16 00 00 02 fd 50 4c 54 45 00 00 00 07 07 07 00 00 00 70 70 70 42 42 42 1c 1c 1c 4c 4c 4c 63 63 63 88 88 88 58 58 58 6f 6f 6f 83 83 83 6a 6a 6a 67 67 67 7b 7b 7b 96 96 96 89 89 89 97 97 97 94 94 94 90 90 90 94 94 94 96 96 96 92 92 92 7b 7b 7b 90 90 90 92 92 92 90 90 90 71 71 71 73 73 73 77 77 77 78 78 78 63 63 63 7c 7c 7c 71 71 71 32 32 32 00 00 00 14 14 14 03 03 03 17 17 17 08 08 08 f7 f7 f7 01 01 00 0e 0d 0e 00 0b 0c fb fb fb 11 11 11 aa aa aa 00 f0 75 02 02 02 05 05 05 d8 d8 d8 e4 e4 e4 f1 f1 f1 0a 0a 0a 2b 2b 2b bf bf bf 1c 1c 1c 32 32 32 36 36 36 f4 f4 f4 0c 0c 0c cc cc cc 19 19 19 8a 8a 8a 00 cc ff 1e 1e 1e 22 22 22 bc bc bc d1 d1 d1 e5 e5 e5 2a 2a 2a 92 Data Ascii: PNGIHDR)APLTEpppBBBLLLcccXXXooojjjggg{{{{{{qqqssswwwxxxccc\|\|\|qqq222u+++222666"""***

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	49769	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:42 UTC	658	OUT	GET /S/content/common/images/denom-image/FreeFire/Freefire_diamonds.png HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:43 UTC	499	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 5052 Connection: close Date: Sat, 25 May 2024 22:59:44 GMT Last-Modified: Wed, 16 Mar 2022 14:39:10 GMT ETag: "28380515fca2c6f9a34c8d63c84082ee" x-amz-version-id: M7elHFq6ZhRZdt3T0xX6NlAMaSWhq70l Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 4fcd504c9be280bceae32e94ae54e04e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: -eMkL8n1ThGRcU2GAFKUbYJhTYj0yT2gzYslihWWny6-9pymr9eo_w==
2024-05-25 22:59:43 UTC	5052	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 64 08 03 00 00 00 47 3c 65 66 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 02 f1 50 4c 54 45 47 70 4c 1e 20 24 1e 20 24 20 27 33 20 22 27 1f 28 38 20 24 2c 1c 1f 25 23 29 33 1e 22 29 1e 21 25 1e 20 25 1e 21 25 1b 1e 24 1b 1e 22 19 1d 20 1c 21 26 1b 1e 25 1f 21 25 1d 1e 22 1c 1f 23 1a 1c 21 21 29 2e 1d 20 25 1c 1e 22 18 1f 26 14 17 1a 16 1b 20 18 1b 22 19 1c 20 17 1b 20 24 30 38 28 30 37 22 2c 35 36 49 54 39 41 45 49 59 5f 70 72 70 25 2d 3b 26 41 4f 3c 65 72 46 60 86 31 3f 47 24 53 6c 37 5c 84 36 3f 45 74 cc f1 1e 53 97 3d 47 4b 61 c3 da 19 26 34 1b 25 30 19 4a 91 4c 81 af 83 dd f2 5b 7a 85 3b 45 4a 3c 43 48 2c 67 85 Data Ascii: PNGIHDRddG<eftEXtSoftwareAdobe ImageReadyqe<PLTEGpL $ $ '3 "'(8 $,%#)3")!% %!%$" !&%!%"#!!). %"& " $08(07",56IT9AEIY_prp%-;&AO<erF`1?G$Sl7\6?EtS=GKa&4%0JL[z;EJ<CH,g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	49767	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:42 UTC	644	OUT	GET /S/content/common/images/mno/freefire_new_640x241.jpg HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:43 UTC	550	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 53533 Connection: close Date: Sat, 25 May 2024 07:58:29 GMT Last-Modified: Fri, 01 Sep 2023 07:44:38 GMT ETag: "8e5bb390d9e0f12905481edac5e46539" x-amz-server-side-encryption: AES256 x-amz-version-id: 0KBjyiuNH1PeQRH3zwi23nW4fDwvGvAM Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 4a902cabdcc0eca6e00cc44c2a8b91da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: sLZnVN-qxjDql95oNnGEe3jksN1GYvVgNjnNV2mKMJp6lQuqjcaKSg== Age: 54075
2024-05-25 22:59:43 UTC	15834	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff db 00 43 00 04 03 03 04 03 03 04 04 04 04 05 05 04 05 07 0b 07 07 06 06 07 0e 0a 0a 08 0b 10 0e 11 11 10 0e 10 0f 12 14 1a 16 12 13 18 13 0f 10 16 1f 17 18 1b 1b 1d 1d 1d 11 16 20 22 1f 1c 22 1a 1c 1d 1c ff db 00 43 01 05 05 05 07 06 07 0d 07 07 0d 1c 12 10 12 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c ff c0 00 11 08 00 f1 02 80 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 00 03 04 05 06 07 08 02 01 09 ff c4 00 52 10 00 01 03 03 03 01 05 05 05 04 06 06 07 07 04 03 01 02 03 04 00 05 11 Data Ascii: JFIFddDucky<C ""CR
2024-05-25 22:59:43 UTC	156	IN	Data Raw: 03 6f a7 e2 ad ee 94 a3 5b c6 d7 2a dd ea 51 29 ee a7 5d 5b af fb b6 a7 d0 8a c5 38 93 f1 7d df cf c8 e8 1d 73 aa 6c b6 6b 44 69 2f a3 da cc c6 c8 8c 42 37 34 01 19 2a cf c4 7a 64 fc 2b ce 52 be c9 b5 58 72 e6 63 9c 75 3b 8c c2 d4 51 6f 31 9b 50 8d 39 e4 95 1f 1f 24 92 15 ca 92 93 c3 89 f4 1e fd 7a 3f 44 2f 99 6d b8 4d e8 d7 1f 95 7b 3e f3 2a ee 3f 27 91 71 6d fa 8d 0c c4 13 48 92 df 2d bb e2 c8 4e 06 4f 5e 3e 75 52 f1 31 9d be 27 3b 3c 8a ac c7 36 76 d9 68 5d bb Data Ascii: o[Q)][8}slkDi/B74zd+RXrcu;Qo1P9$z?D/mM{>*?'qmH-NO^>uR1';<6vh]
2024-05-25 22:59:43 UTC	1908	IN	Data Raw: 5e ad fd 9b 44 a6 5b 74 1f 52 06 d2 7f e1 ae 7e fa 98 cc 68 d8 c9 c4 84 e9 4f b2 ed bd c4 69 bb bc a9 42 48 44 c7 12 ea 50 e3 58 68 25 29 e0 a1 5d 0f 07 9f ec d4 ba 45 da c6 cd 13 78 8d d6 2d 24 e1 ac eb d7 b7 69 2b da 9c 08 f6 36 2d f0 25 dd 6e 91 27 4e 6d d9 2f 41 b7 bb dd f7 8d b9 80 95 3e a4 8d fb 00 4a b0 84 9f 1f c3 83 49 aa ce ac d8 a3 16 34 88 d9 a1 c9 94 e7 bb ff 00 dd fa 6a 0c c7 20 c6 c3 2d 6e 28 2f a0 95 12 49 09 18 50 c8 c9 e6 b1 bb cc 6b 57 95 4d 53 ec cb 21 9f 61 bb da e5 ed 71 12 da 4c a0 82 ac 93 91 b5 c0 4f 9f 54 ff 00 bd 50 5d a7 32 b1 62 c5 f2 56 51 0e d8 3b 42 6e db 3d db 5d aa 53 92 67 a4 e3 bd 5a f7 7b 39 07 dd 4f 1c a8 7e 63 92 3e 7d 08 20 cb 99 82 ea e3 1f 34 a6 5f 6b 80 fc 7b 43 2f 96 54 fc b9 ae f7 8b de ac 15 ee 56 31 b8 fe e8 Data Ascii: ^D[tR~hOiBHDPXh%)]Ex-$i+6-%n'Nm/A>JI4j -n(/IPkWMS!aqLOTP]2bVQ;Bn=]SgZ{9O~c>} 4_k{C/TV1
2024-05-25 22:59:43 UTC	16384	IN	Data Raw: 5b 42 5b 43 69 00 03 de a3 00 01 d0 75 ae 9f a3 b7 7c 18 e6 f7 d5 7f 13 9f d7 e6 e0 f0 f2 f5 31 a2 e8 09 0d 5f ac ea 6b bc 4b af 45 42 09 f1 12 42 4e e0 9c e4 0c 7f 56 7d 7e 75 ab 14 8b 34 93 7f ba bf 7f 5e ff 00 7d 7e 87 0c b7 1c 45 c8 ca be d3 3a 6d b4 d9 2d 97 74 a3 0f 47 78 b0 b5 04 f5 42 86 70 4f c0 a7 8f ad 67 6a 54 e5 53 6b 44 76 66 91 46 bd 95 76 97 7a 5e 8e 66 d5 ed 2d a6 3c 52 58 05 09 01 45 b0 06 01 23 d2 b0 24 43 b0 81 f2 52 12 26 a0 bf 5e 5f b9 5e a5 5c 9c 95 75 9e e2 60 fb 44 bc ba a0 d2 3c 39 c9 e7 f0 81 f2 cf c6 a4 72 24 a1 e7 5e 5c 63 5f 93 6a b2 c1 8c a5 08 61 72 24 bc 11 ca f0 00 49 38 fc 23 26 9b 0a fa 43 ee 1f 2c 54 6f 60 bb dc f4 0d 91 d7 18 52 44 a9 ad 18 d1 9e 0a 50 2d a1 47 25 5d 3a e0 0c 7e be 94 f9 23 e2 63 97 61 1c 33 70 55 b1 Data Ascii: [B[Ciu\|1_kKEBBNV}~u4^}~E:m-tGxBpOgjTSkDvfFvz^f-<RXE#$CR&^_^\u`D<9r$^\c_jar$I8#&C,To`RDP-G%]:~#ca3pU
2024-05-25 22:59:43 UTC	16384	IN	Data Raw: 02 15 8e 83 d2 a8 55 f1 ef 2f 59 d1 25 ac 73 33 70 a6 e5 f8 50 8a b8 5b d0 b4 71 32 4b d2 7a fe dd d4 f3 f4 34 f4 91 bd 9e a2 1b 8b 18 d5 71 59 1a ad ef ad 0d 8b ec 9f d9 5c 7d 69 da 43 73 a7 cf f6 47 b4 eb 8c 5d 1a 69 a4 25 4a 90 5b 74 10 09 07 09 4e 40 cf 1f 8a b4 2d 28 b2 49 f0 39 7d 6e b2 59 c1 8b 2d 39 ba bf 9b 1f a4 f8 dc 2b 58 e1 8f cb cb cc 17 6d b7 a9 e6 30 c3 90 e4 b8 d1 4f 4e 02 88 ff 00 0a b1 1a 33 73 29 cd 5c 48 bc d1 4a 51 b5 ae b1 72 33 0b 8d 10 ff 00 4a 7b fa c7 07 fb 30 7a 80 7d 6a 79 67 e1 ae 2b da 1a 7e 91 c4 6e 2c bd da 7d e6 5a eb ee 2d 20 6e e0 56 7e 67 54 7c 6d f7 12 78 3f a5 15 a8 cd 8b 05 a6 f9 72 84 77 30 fb 83 1e 47 91 51 d5 15 83 63 6b ec bf 54 7f a4 0a 5c a9 d3 15 1e e1 61 db 3a 32 c2 88 0e 14 ad 39 41 1e 79 e9 54 6f d1 96 da Data Ascii: U/Y%s3pP[q2Kz4qY\}iCsG]i%J[tN@-(I9}nY-9+Xm0ON3s)\HJQr3J{0z}jyg+~n,}Z- nV~gT\|mx?rw0GQckT\a:29AyTo
2024-05-25 22:59:43 UTC	2867	IN	Data Raw: 5e a3 1a ee 16 e1 e4 cd d6 64 b0 e3 87 65 a8 a8 74 ad 23 22 b5 2e 25 80 c4 0c 1f 06 47 41 ca 8d 25 4a d2 54 ac a9 b0 b9 7b 30 94 8f ca 39 3f 5a 14 21 f6 87 37 d9 b0 ec 76 19 73 1e 53 79 ee cb 2d a1 7c ef 5a b8 18 1e a3 de fe ed 43 3d 5b d1 35 74 ea 2b 4e bc 5e ed 3a ea 63 8d dc 23 28 61 31 5c 3e be 01 fe 35 9d c0 93 da 3b 2f eb 16 4b e8 fd c3 62 22 ae 43 7b d0 a6 01 23 2a 29 29 c0 f9 d4 f1 d2 45 63 3a f6 e2 ca 68 db 1e df 80 83 cf a2 43 aa 50 5b 4a 51 f3 dd 85 1f 89 c7 53 eb 53 d6 4f 69 4a 31 5b ae 3e 6a 4a 1f 50 ef 74 72 18 6b 3e a7 27 f9 9a 7a c8 a3 24 b5 6f 49 8d cb b0 fe c5 9e ed 6a 2c fb 83 ac b8 a6 42 cc 74 77 4a 09 4a 1d 23 25 6b 51 e0 24 03 90 9e aa fe 72 66 cd dd 52 a2 41 1a e5 c5 6e a3 ae 3b 27 fb 35 59 bb 3e b7 bd 1e eb 35 57 e5 38 e9 5a 1a 7d Data Ascii: ^det#".%GA%JT{09?Z!7vsSy-\|ZC=[5t+N^:c#(a1\>5;/Kb"C{#*))Ec:hCP[JQSSOiJ1[>jJPtrk>'z$oIj,BtwJJ#%kQ$rfRAn;'5Y>5W8Z}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	49771	172.67.207.164	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:43 UTC	360	OUT	GET /images/2024/05/12/hBhjN.png HTTP/1.1 Host: picjj.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:43 UTC	722	IN	HTTP/1.1 200 OK Date: Sat, 25 May 2024 22:59:43 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close last-modified: Sun, 12 May 2024 10:12:55 GMT vary: Accept-Encoding etag: W/"66409627-7d6" strict-transport-security: max-age=31536000 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6626 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ujg9D4UxBi43ojUXspwmfQ6EjKQFQGAMvj5kvdr4UrR8dT3yMVyQZxXHTBMXIiFAU623yi6LE3eCCZgSB4GywjkzBUWOQcB0ct4kll7KeNGtTIStVNmpyCK%2BL6E%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88992334e9b50f6f-EWR alt-svc: h3=":443"; ma=86400
2024-05-25 22:59:43 UTC	647	IN	Data Raw: 37 64 36 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fe 00 00 00 17 08 06 00 00 00 2b dd f2 1b 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 07 90 49 44 41 54 78 5e ed 5c c9 75 1b 39 10 ad 56 22 23 dd 78 94 26 01 4b 91 c8 8e 44 72 24 a6 23 19 3a 81 91 8e bc 8d 22 51 8f 0b 1b d1 68 a0 ea 63 a1 4c da e4 7b be 58 dd e8 da 7e ad 00 26 02 7e 1b ba bd 26 a2 eb 3d bd ee 80 c7 d5 47 fc 7a fc e0 a8 35 d5 8f 56 3c 10 d1 f7 b6 a7 d7 b7 8a 57 7f c9 a3 a7 28 cf 5e 19 8e b6 b9 16 c5 f4 f2 d0 f2 cd 8f 7a 67 ca 7d c8 31 fc 48 34 dd 13 11 ff 8b 7f 6f 3f ff 7f 47 f4 fe 63 4f af 5b 94 d0 0d dd 7e 26 ba fa 44 34 7f 5e af 47 bc e6 1b d1 fb d7 1c d0 36 74 7b 4f 34 fd 03 7c cb 81 d4 d2 f7 93 f6 1d 0a dc 0d dd 3e 95 f9 65 fa 66 5e eb 2b 40 83 79 64 43 77 ff b1 Data Ascii: 7d6PNGIHDR+sRGBIDATx^\u9V"#x&KDr$#:"QhcL{X~&~&=Gz5V<W(^zg}1H4o?GcO[~&D4^G6t{O4\|>ef^+@ydCw
2024-05-25 22:59:43 UTC	1366	IN	Data Raw: 2c 67 1d 60 5f 64 ab 01 4b 5d 8d df 1e 30 ac bd 6c a8 2a da 47 b2 99 0d f0 fb 40 65 81 df cf c3 c7 44 7c 22 e2 be 5b 0f a6 42 79 6e 6a 7c c0 a8 76 5c 7b 2b 42 0e 51 c5 d5 a1 8a 67 62 c5 4d b9 46 4e ac 5c 67 1c 7a 8a bb a7 97 49 f6 bc bc 6c 6c d4 92 b2 20 87 2a 46 7d 00 f8 ae 49 3a 73 5d 2b 34 01 3d 40 7a 1d f3 81 7f 2d 42 d5 a4 fa ed a0 b1 51 1b 90 53 41 19 23 81 df ea 7c 02 0f 62 b3 b4 cf 39 79 f6 e7 9b 42 e3 14 32 d6 c3 43 51 c4 07 84 8f 00 3f 78 13 c0 91 18 10 ea c0 27 03 2e 24 e2 63 c0 f7 8a 32 1d f1 52 b7 ba 42 90 cb 1a 3c 7e 51 97 69 88 e4 4a 19 e3 a3 52 b7 a3 0a 8e 6f 2c f0 25 d0 cc cf 42 84 72 ba 2d f2 e5 1d 63 3a 05 72 62 e6 b5 e9 bb 9c fa ce dc b1 2f 8e a0 7d 93 56 d6 55 17 0f 2c f3 c5 e4 c3 11 cf 3a 17 ec cf 38 b5 45 03 d9 96 45 25 e7 3f 6d 79 Data Ascii: ,g`_dK]0lG@eD\|"[Bynj\|v\{+BQgbMFN\gzIll F}I:s]+4=@z-BQSA#\|b9yB2CQ?x'.$c2RB<~QiJRo,%Br-c:rb/}VU,:8EE%?my
2024-05-25 22:59:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.6	49772	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:43 UTC	597	OUT	GET /S2/content/common/css/shared-footer2.2ce4d6e299.css HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:45 UTC	565	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 3650 Connection: close Last-Modified: Fri, 24 May 2024 07:07:29 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 0I_wGoiJs5J_0rQzU3nqEQWHBixscSfU Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 25 May 2024 22:59:45 GMT ETag: "2ce4d6e2994e655224b0aa48265ae15a" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 8f6bdaf52990daaab8fe7162027bdec4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: CH-orbt9fbEPqCVYxb0-8K-tpRIDQQWuuvMZdohwwUKJ9Va_wGpbiQ==
2024-05-25 22:59:45 UTC	3650	IN	Data Raw: 2e 63 6f 6e 74 61 63 74 2d 74 65 78 74 2c 2e 66 6f 6f 74 65 72 5f 5f 67 6f 6f 67 6c 65 2d 63 6f 70 79 72 69 67 68 74 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 2e 63 75 73 74 6f 6d 2d 2d 67 72 61 62 20 2e 66 6f 6f 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 63 75 73 74 6f 6d 2d 2d 67 72 61 62 20 2e 66 6f 6f 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 72 69 67 68 74 2d 62 6c 6f 63 6b 73 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 63 75 73 74 6f 6d 2d 2d 67 72 61 62 20 2e 66 6f 6f 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 6f 63 69 61 6c 73 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f Data Ascii: .contact-text,.footer__google-copyright{white-space:normal;word-break:break-word}.custom--grab .footer-container .international-container,.custom--grab .footer-container .right-blocks-container,.custom--grab .footer-container .socials-container{display:no

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	49773	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:43 UTC	576	OUT	GET /S/content/common/css/flags.css HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:45 UTC	500	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 12399 Connection: close Last-Modified: Thu, 20 Dec 2018 04:54:20 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 25 May 2024 22:59:45 GMT ETag: "48625f4127086c12c9db05064a6bab03" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 4de71b0a42267b098ed30fff0d8a660a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: HMDfY7AUEnqGEXAH3YV1pM7j3BuiI8Ff2by5S4XcRrAL10xbNBMXFg==
2024-05-25 22:59:45 UTC	12399	IN	Data Raw: 2f 2a 0a 20 20 57 6f 72 6c 64 20 46 6c 61 67 73 0a 20 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 20 40 64 65 73 63 3a 20 43 73 73 20 53 70 72 69 74 65 20 57 6f 72 6c 64 20 46 6c 61 67 73 0a 20 20 40 61 75 74 68 6f 72 3a 20 41 6c 61 6e 20 4d 75 73 65 6c 6a 69 63 0a 20 20 40 74 77 69 74 74 65 72 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 77 69 74 74 65 72 2e 63 6f 6d 2f 5f 75 6c 6f 67 61 0a 20 20 40 73 6f 75 72 63 65 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 64 65 63 6f 72 61 74 6f 72 2e 69 6f 2f 77 6f 72 6c 64 66 6c 61 67 73 0a 20 20 40 63 6f 70 79 72 69 67 68 74 3a 20 41 6c 61 6e 20 4d 75 73 65 6c 6a 69 63 0a 20 20 40 6c 69 63 65 6e 63 65 3a 20 4d 49 54 0a 5c 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: /* World Flags --------------------- @desc: Css Sprite World Flags @author: Alan Museljic @twitter: https://www.twitter.com/_uloga @source: http://www.decorator.io/worldflags @copyright: Alan Museljic @licence: MIT\-----------------------

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	49774	52.222.206.107	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:43 UTC	397	OUT	GET /S/content/mobile/images/google_play_coda.png HTTP/1.1 Host: d1qgcmfii0ptfa.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:44 UTC	491	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 2631 Connection: close Last-Modified: Mon, 17 Jul 2017 08:47:31 GMT Content-Disposition: attachment Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 25 May 2024 15:19:10 GMT ETag: "e7ebc6c74ec20ea3614970e178217c10" X-Cache: Hit from cloudfront Via: 1.1 bafea69ec4368ee11760779ffcfbd4fc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: vK7oa1aIHqLj_Et_lcLGah85jv2KbGuHzrfMud1rjP17MWwAI7UOMg== Age: 27635
2024-05-25 22:59:44 UTC	2631	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8a 00 00 00 29 08 03 00 00 00 dd d1 41 16 00 00 02 fd 50 4c 54 45 00 00 00 07 07 07 00 00 00 70 70 70 42 42 42 1c 1c 1c 4c 4c 4c 63 63 63 88 88 88 58 58 58 6f 6f 6f 83 83 83 6a 6a 6a 67 67 67 7b 7b 7b 96 96 96 89 89 89 97 97 97 94 94 94 90 90 90 94 94 94 96 96 96 92 92 92 7b 7b 7b 90 90 90 92 92 92 90 90 90 71 71 71 73 73 73 77 77 77 78 78 78 63 63 63 7c 7c 7c 71 71 71 32 32 32 00 00 00 14 14 14 03 03 03 17 17 17 08 08 08 f7 f7 f7 01 01 00 0e 0d 0e 00 0b 0c fb fb fb 11 11 11 aa aa aa 00 f0 75 02 02 02 05 05 05 d8 d8 d8 e4 e4 e4 f1 f1 f1 0a 0a 0a 2b 2b 2b bf bf bf 1c 1c 1c 32 32 32 36 36 36 f4 f4 f4 0c 0c 0c cc cc cc 19 19 19 8a 8a 8a 00 cc ff 1e 1e 1e 22 22 22 bc bc bc d1 d1 d1 e5 e5 e5 2a 2a 2a 92 Data Ascii: PNGIHDR)APLTEpppBBBLLLcccXXXooojjjggg{{{{{{qqqssswwwxxxccc\|\|\|qqq222u+++222666"""***

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	49775	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:43 UTC	579	OUT	GET /P/airtime/w/css/airtime_v1.0a.css HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:45 UTC	499	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 2692 Connection: close Last-Modified: Fri, 13 Mar 2020 03:56:02 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 25 May 2024 22:59:45 GMT ETag: "753a330f95a906499abe488e677662d3" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 c772b2e53d72432d4d471ac66f4794fa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: Tc1hy5yyjsPz3Eq5YdUQP1zvuctTUf6sWTtFyj0I7Iwiu1cIpgQSrw==
2024-05-25 22:59:45 UTC	2692	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 53 61 6e 63 68 65 7a 2d 52 65 67 75 6c 61 72 27 3b 0a 20 20 20 73 72 63 3a 20 6c 6f 63 61 6c 28 27 53 61 6e 63 68 65 7a 20 52 65 67 75 6c 61 72 27 29 2c 20 6c 6f 63 61 6c 28 27 53 61 6e 63 68 65 7a 2d 52 65 67 75 6c 61 72 27 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 63 64 6e 31 2e 63 6f 64 61 70 61 79 6d 65 6e 74 73 2e 63 6f 6d 2f 57 2f 70 75 62 2f 6d 6f 62 69 6c 65 2d 77 65 62 2f 66 6f 6e 74 2d 73 61 6e 63 68 65 7a 2f 53 61 6e 63 68 65 7a 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 3b 0a 7d 0a 2e 61 69 72 74 69 6d 65 5f 63 6c 6f 73 65 2d 62 74 6e 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 53 61 6e 63 68 65 7a 2d Data Ascii: @font-face { font-family: 'Sanchez-Regular'; src: local('Sanchez Regular'), local('Sanchez-Regular'), url(https://cdn1.codapayments.com/W/pub/mobile-web/font-sanchez/Sanchez-Regular.woff) format('woff');}.airtime_close-btn { font-family: 'Sanchez-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	49776	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:44 UTC	652	OUT	GET /S/content/fonts/Lato/Lato-Light.woff2 HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://newsklikdisini5bekbg0.3bsz4.xyz sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn1.codashop.com/S2/content/common/css/shared-fontfaces.b6c83d3582.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:44 UTC	546	IN	HTTP/1.1 200 OK Content-Length: 207880 Connection: close Date: Sat, 25 May 2024 16:59:57 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Last-Modified: Thu, 09 Apr 2020 14:21:48 GMT ETag: "01b5dcc68aff09201f8e83a5e1c568ee" x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 4ca98b546b8d71c72caf6a3d8f75dc24.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: RUMhigm6WuBXLwR-udaol5yV7ZomBMQwIF35fz6K6rdpics2DEEKfg== Age: 21588
2024-05-25 22:59:44 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 03 2c 08 00 10 00 00 00 09 d5 cc 00 03 2b a5 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 8c e7 40 1c c8 6c 06 60 00 a9 26 08 81 66 09 97 17 11 08 0a 97 c7 30 94 f5 53 0b de 40 00 01 36 02 24 03 de 3c 04 20 05 ae 7d 07 20 0c 81 39 5b 95 fc d8 b7 9f f1 ff 9b e7 ac ce cc ae d7 e4 0e ef 5d 8d 3b 8a d1 a0 c0 95 77 57 fc 3c 35 1a a3 d5 06 fa 49 34 a5 b5 b6 a1 f4 a7 b4 a5 f9 c4 62 3f e8 4c 86 9d 1a 80 a4 a9 ab ea f6 7f 9e 14 30 09 71 4a 67 bf 53 a7 29 c0 98 7f 3f a4 c3 07 a5 aa b6 bd 6b 9e 07 ff 4b c6 de 67 a0 a8 d1 72 73 57 d9 3a bc d1 5b d2 f4 59 ac b2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b7 2c ff 79 be 36 bd f7 bc ff b8 f7 bd f7 ff fc 99 f9 33 8c 83 Data Ascii: wOF2,+@l`&f0S@6$< } 9[];wW<5I4b?L0qJgS)?kKgrsW:[Y,y63
2024-05-25 22:59:44 UTC	10463	IN	Data Raw: b1 b3 e3 48 13 16 93 58 53 2a a6 93 d9 9d c5 99 9b e4 a5 f0 35 14 67 82 33 1a bc 62 08 09 f1 0c a9 a7 00 28 64 78 28 cf a2 e2 42 9b 0e 10 f3 0c 22 d2 dd c3 2a 19 d1 a3 ea 19 9b 1e 17 cd c4 5d 64 fd f4 24 23 f2 3c e2 84 64 4f 78 f4 f5 13 bf 69 ce cf 5f 80 de 8b 8c 7b 89 76 af c8 12 cb 54 05 32 af 85 93 7b 80 0e 96 3a e5 50 97 8f 5d 81 88 65 70 47 f1 96 99 64 56 e6 7c a7 79 f8 8a 86 e9 2e 68 fd c2 0b 81 40 07 6c a6 0b d8 de a7 54 37 0d ca 56 8f b1 4c d8 9a 6d b0 b0 b6 0d d9 2d f3 76 85 3a c4 9f 9a f9 34 fe f7 d5 84 18 51 12 9e 99 94 f3 d0 0c 52 ee 22 74 f7 51 61 1b 8c 3d 25 72 2d e2 2d 70 b4 59 5d e2 56 8e b9 9e e3 36 73 42 0f a7 6c 0c de 2f 33 e0 77 19 9e ce a8 55 19 f7 60 26 fd e4 bb e0 cb 1f 6c d5 95 d0 ee 92 df dc e5 29 43 f7 fc 17 5a 75 f9 b6 ec cc 4e Data Ascii: HXS5g3b(dx(B"]d$#<dOxi_{vT2{:P]epGdV\|y.h@lT7VLm-v:4QR"tQa=%r--pY]V6sBl/3wU`&l)CZuN
2024-05-25 22:59:44 UTC	16384	IN	Data Raw: b5 56 58 91 2c cf 88 21 c6 1c e2 2a 82 98 26 4f c5 48 38 68 38 97 89 34 f1 56 87 6a 58 ae 92 7f 47 58 eb c9 88 99 4a 04 6c 31 ff c1 9a ba 64 87 1e 49 78 d1 b2 0e d6 a1 83 33 64 94 80 06 59 85 2a f0 0e 22 a8 60 82 0b 01 89 42 63 b0 c5 b1 ca 47 10 51 24 91 45 b1 b1 fc 7d 1d 63 b5 8a 71 af 5f ac 61 9e 8d a5 ae a2 13 a4 99 fb 0d a2 06 45 6d 44 a8 97 24 79 2d a7 49 5d db 91 80 23 b3 36 e6 c4 b7 dd b5 f1 f5 bb f6 54 c0 57 5d c6 b4 33 ef d6 cc af aa ec 1f 8c 43 1f c7 b7 f1 ed 40 b4 61 fb 77 0d 97 cc 98 91 62 71 06 91 85 42 d3 14 09 51 1c 9c 9a 61 4a 22 a6 47 85 be 54 e9 87 4a e0 91 b4 ae 97 5a 91 73 28 64 b1 e4 61 2e b2 0d 67 7f 64 f1 9a cf 88 e0 54 75 ae 4a 03 55 1c a3 8d b5 dc b8 2c fa 94 a9 38 f5 36 33 73 59 ac 00 08 c1 08 4e 90 14 cd b0 1c 2f 88 92 ac a8 9a Data Ascii: VX,!&OH8h84VjXGXJl1dIx3dY"`BcGQ$E}cq_aEmD$y-I]#6TW]3C@awbqBQaJ"GTJZs(da.gdTuJU,863sYN/
2024-05-25 22:59:44 UTC	16384	IN	Data Raw: 8c 0c 54 c9 b2 95 e0 4a 1b 3d 32 c1 b4 ea 46 3e aa d5 f8 7f d7 be 02 e3 e8 62 96 9b af eb 94 8f 67 a2 c2 98 58 b5 90 c3 b3 49 2d 9f 64 f3 d0 ad da 41 1e 46 d9 c0 67 a4 3f 3c ad 7d d8 7b 76 b5 2e 44 0c f6 f5 88 56 0c 53 8c c5 b8 f8 58 f1 b5 e8 5c dd a7 1f 6a a2 dc 8c 59 8d bf 34 a0 e4 6a f1 07 9d 9b 49 ca 16 f6 fd b3 68 19 7a 56 ac 56 bd 8e 56 af f4 89 c7 7c b6 a1 79 d7 16 d7 93 a1 c0 70 02 90 14 cd b0 4a 95 5a a3 35 d1 99 d6 66 7f 05 11 65 f4 45 31 92 28 9d c0 cd 7d 3c d3 b2 59 d5 2f 90 1b 3c 0f 0b 27 34 bd c0 79 4a a7 26 fa 7f ce 45 d3 a6 41 22 cd 24 8a e2 f8 2b 0c 26 50 fa 24 18 84 85 62 a2 fd 5b 34 c6 6f 0c 03 98 a4 b5 b4 9e 6b 4b 6d fa 52 15 53 ce 6e 8e d3 92 7b 1a 5c 39 4b c4 d2 93 cf 87 0c 08 a4 20 71 48 5e a9 6b 19 45 66 ce e4 e4 9d 94 c7 6d e2 0b Data Ascii: TJ=2F>bgXI-dAFg?<}{v.DVSX\jY4jIhzVVV\|ypJZ5feE1(}<Y/<'4yJ&EA"$+&P$b[4okKmRSn{\9K qH^kEfm
2024-05-25 22:59:44 UTC	2804	IN	Data Raw: 42 f3 3c 54 c8 b7 8d be 48 77 b8 e3 12 dc 2d e6 12 8d 35 f6 92 8d 37 e5 52 dc 63 fa e1 cd 34 f7 62 a5 c8 3a b6 5c f9 97 a8 50 d1 f1 95 9a 72 42 95 aa 2e d9 0c 33 4e a6 46 c3 c9 cd b1 ea d2 ad b1 ee f2 6d b0 f1 8a 6c 35 e2 1e da 21 ee fc ed 36 e1 1e db 27 f1 82 5c 64 da 05 3b 64 fa 3d 73 89 99 f7 dc 03 b6 dd 0b 8f da 75 e1 f6 da 7f 51 0e 3a 74 b1 0e 3b 7a f1 4e f8 ed 92 fc e1 8f 4b f1 97 bf 2e d5 3f fe b9 34 a7 9d bd 57 2e b8 70 19 fe 77 f1 32 5d 76 e5 5e bb ee b7 5b be ff 29 09 85 7e b9 9d 4f f3 bd 4f 3b ed d7 9c 6e 36 ef b1 ec aa 7e 6f f6 70 75 ef e3 9e ab e7 7d db 8e fa de 7f 1b 28 e2 ed 37 52 ca 3b 6a 6f 69 e3 e8 af dc 71 f6 2f fa be 5e 47 be dd d0 c7 22 bb a9 2f 81 5b dd 70 d0 7e db 78 f9 ad e9 5f c6 78 ed f5 d7 34 c4 c4 33 70 70 cc c8 cd 3d 13 3f ff Data Ascii: B<THw-57Rc4b:\PrB.3NFml5!6'\d;d=suQ:t;zNK.?4W.pw2]v^[)~OO;n6~opu}(7R;joiq/^G"/[p~x_x43pp=?
2024-05-25 22:59:44 UTC	2037	IN	Data Raw: 3b b7 39 42 49 35 f2 0a f5 87 ef 2b 05 61 51 b3 97 71 5c 75 ad 8f b3 84 c9 46 18 3f 3c 64 d1 3a 1b 41 7c b8 4f e6 2c 92 ed 90 d3 3e ee 6a b9 11 e6 37 8e 4d 97 e3 6c c1 1a 8d 41 6d e2 5e c9 4e 77 61 4e 26 b5 ce 76 ad bf 42 b1 ae e3 b6 35 8f 76 69 19 2d 84 89 45 2d 91 b9 11 b1 5b f2 64 c0 8e 3d 63 b9 45 ad 98 39 95 28 62 8f 5b dd 9a d6 b1 3e 9e d9 a7 36 f5 27 b7 a5 06 12 b2 82 2d 0d b2 ad 1d 0c b1 93 9f fd 6c d7 42 1d 27 af 13 4d d1 ef 66 ec 7b f1 b9 ff e6 a5 bc 9a f7 e3 8d e6 b0 fe d8 d1 83 cd c7 9e 77 99 af 7c dc 3d 57 b8 da 75 23 8a ba f1 bc 5b dc 4e ad bb dc eb 01 0f 7b 6c ef f9 0d ba 77 c7 78 ca 33 92 c5 be 6f 64 f1 6f df 09 25 e7 2a bc e5 2b af 7a c3 c2 bb 7d f1 c1 88 16 38 c2 3f b7 54 76 9f af bb b7 f6 dd 9e 1d ae ee 10 6c 6c ee db bc a3 7e de f2 63 Data Ascii: ;9BI5+aQq\uF?<d:A\|O,>j7MlAm^NwaN&vB5vi-E-[d=cE9(b[>6'-lB'Mf{w\|=Wu#[N{lwx3odo%*+z}8?Tvll~c
2024-05-25 22:59:44 UTC	16384	IN	Data Raw: 93 a6 d6 de c9 32 ef 8b 07 da 08 7b ee c2 7e db f3 ab 39 3e 3c 7a 66 2b 52 30 cd b4 9f 22 bb a3 31 27 c9 58 9b cc 6b 2e 98 de 66 ed e9 66 21 2b da d5 30 2b c6 a1 8e ff 02 cd 6f 9c 55 79 cb e0 f0 b3 10 27 1f 93 fb f0 cb 30 2f bf f0 fb 80 ba 85 3f 1a fe 90 e7 66 64 e0 eb b2 fc 3a da 3f 8c fb 2b bd 35 d2 2a c8 27 0d b8 b8 c0 39 15 43 19 73 4a c2 e4 ca 4a 86 dd b3 ba 71 28 b1 d3 56 61 9e 53 52 5f 4e ad 61 c4 64 31 ed 85 03 0e 66 a1 69 97 4e 8b 0b 7d da a2 e2 ce db ea bd ae 2d 0d 54 47 1b b4 c3 f0 b0 c1 48 f8 d4 e3 a2 d5 f4 aa 91 8a 39 6d 41 ef ad c4 0b 13 04 11 56 f1 78 d5 bd 41 88 08 35 92 a5 c8 b3 63 f4 22 2b 44 20 84 4b ee 81 5a d9 a0 25 79 f8 c7 45 11 43 06 49 c4 95 3c 4c 19 9e ac 19 a1 8f 84 d5 2e 30 f6 ee 6c 76 ae 77 99 c8 f9 de 19 71 bc f1 8c b1 f0 7c Data Ascii: 2{~9><zf+R0"1'Xk.ff!+0+oUy'0/?fd:?+5*'9CsJJq(VaSR_Nad1fiN}-TGH9mAVxA5c"+D KZ%yECI<L.0lvwq\|
2024-05-25 22:59:44 UTC	16384	IN	Data Raw: 17 b1 d2 74 12 45 73 d8 4d 35 89 e9 c0 d2 c2 dd 0e a5 87 e8 bb 04 9e c1 9e 5d 79 c9 4f c6 27 be 58 77 f7 91 d2 9b 8e 71 52 2f 2c 62 53 e2 a2 cf af db 80 88 f4 3e 5f b4 8f a5 cf 82 7c 1d 15 86 a5 50 70 ee f8 90 1c 2d a4 ec 17 99 f4 49 fb 52 46 5e d0 7f 57 17 f2 f8 33 ce eb 23 82 3a 7f 98 26 1a f3 8f 8c 55 c4 ef e7 88 45 1e 3e 1d 7a cd 3c db 52 26 ae bc 3f 5a 25 f1 1f d6 21 01 d6 5e 05 83 3e 21 39 85 3c b5 34 0e 62 ea 79 f7 11 46 5d c3 d9 ac 8f 2a ce a5 fc cf 44 5b 8c b2 7b 0d f6 83 f8 e0 73 5c 78 b5 74 66 1d d9 68 40 99 19 9b 16 8f 75 8d ec af 12 f5 e3 fd d5 f1 73 f2 39 24 d0 d2 ce 0a 9b 25 e4 81 41 a2 50 bd 00 f4 09 b5 05 74 dc 66 d5 0b fc 6e 3c 76 58 e6 b8 0d 81 ee 2a 86 0b a7 cd f2 78 47 6b 20 6f 9a 45 d7 15 78 57 bb f8 2c 07 c1 a6 56 f1 1a 07 2f ca 3c Data Ascii: tEsM5]yO'XwqR/,bS>_\|Pp-IRF^W3#:&UE>z<R&?Z%!^>!9<4byF]D[{s\xtfh@us9$%APtfn<vXxGk oExW,V/<
2024-05-25 22:59:44 UTC	12398	IN	Data Raw: d9 cb 7b 33 30 08 38 d6 b7 fd 8a 74 fe 16 c0 56 96 16 6c 68 1e 18 4f 5d 8d cd e8 f9 b8 7e 74 2d 15 32 b6 2e 15 8a de 07 8d 26 cf 76 06 53 5a de 20 58 e2 95 ac 48 26 bb 15 fe 51 d3 cd c8 e8 27 19 ca a9 3d ae e5 e7 bf 3f 99 bd 35 eb d7 cf 7f ef 9c a9 64 1d 1e 2c d9 cb ad c8 8e d2 e0 52 a2 b8 b6 0c e8 3b 63 5b 18 97 d5 35 3a d1 ee 1f 55 45 4b 83 aa 3a 60 24 15 bb ad ee 3b 7c 59 bf cc 75 14 a9 77 6b ae 69 f1 5a 13 af 68 6a 94 a1 2d 9c 97 33 07 d0 86 30 a5 d5 b5 ff 99 79 fb 2d f2 64 73 e7 4a 50 b5 df 3c ab ed 2c 4a ec c5 1d 6c 21 f8 7d d2 cd 5f 3e 1d d9 2d 09 1f cd d1 ef e5 a5 e7 35 31 a9 8a 8c bb 2d 28 eb 39 56 9f 28 4d e3 6d 41 69 dd f0 80 5c ae f1 d4 0a fa d0 a3 de 4d 92 80 9f dd 12 77 b0 8f 94 97 af 08 0b a6 5e ac e1 5b 56 1f 43 42 76 0f a9 51 00 bd 08 4e Data Ascii: {308tVlhO]~t-2.&vSZ XH&Q'=?5d,R;c[5:UEK:`$;\|YuwkiZhj-30y-dsJP<,Jl!}_>-51-(9V(MmAi\Mw^[VCBvQN
2024-05-25 22:59:44 UTC	169	IN	Data Raw: 19 43 77 3f a8 81 cb 5d a5 83 9c dd e5 25 bc d5 ba ce ab fc b2 75 90 73 f0 a7 f0 e3 d3 3b 85 95 49 15 db 6e 19 4b 83 80 0a fc 25 2d 69 53 cd bc 75 d9 24 21 bd 21 1f d6 35 25 66 b1 0d 05 b5 c1 2d 43 7c cc 50 71 48 68 50 37 83 ad 7a 4e 34 61 f9 aa 7f 4b dc 99 fb 51 07 b6 6f 18 49 57 01 1b 12 bb 7d e2 9e 0f e0 0e 07 94 da 3b 1e 48 d7 14 61 98 45 f5 d0 97 e8 4e bf a3 b0 5e 89 f4 5c 1c f9 1d 2e f3 33 32 3f cb bc 33 ae da 8d 4c 15 54 52 89 09 bc c6 4a 6d c8 95 64 7e 86 1e cf 5d 04 77 ef b7 3b 66 7b f0 e6 de Data Ascii: Cw?]%us;InK%-iSu$!!5%f-C\|PqHhP7zN4aKQoIW};HaEN^\.32?3LTRJmd~]w;f{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	49777	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:44 UTC	651	OUT	GET /S/content/fonts/Lato/Lato-Bold.woff2 HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://newsklikdisini5bekbg0.3bsz4.xyz sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn1.codashop.com/S2/content/common/css/shared-fontfaces.b6c83d3582.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:44 UTC	546	IN	HTTP/1.1 200 OK Content-Length: 211160 Connection: close Date: Sat, 25 May 2024 16:59:57 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Last-Modified: Thu, 09 Apr 2020 14:30:12 GMT ETag: "743278852fdad61a73198bc74d529af8" x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 485f9ba84065b3ff587a6c536942e6c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: dD3CglFavzP4nB5Ut2cfAvvfVUElJ1xU5sHAf4KFqVb5SqdzjNVsuQ== Age: 21588
2024-05-25 22:59:44 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 03 38 d8 00 10 00 00 00 0a 07 24 00 03 38 76 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 8c e8 0e 1c c8 6c 06 60 00 a9 26 08 81 66 09 97 17 11 08 0a 98 aa 20 95 f0 11 0b de 40 00 01 36 02 24 03 de 3c 04 20 05 ae 16 07 20 0c 81 39 5b ba 39 d9 b0 e5 d3 ab db 39 fb 76 df ed be 7d 8e 5f f6 72 ad 73 4d 54 39 6e 29 88 2b b8 80 50 71 04 44 11 3f 89 d2 00 0d a8 05 fd 9b a8 a8 01 54 b5 31 f2 9e 26 49 0b 80 aa fe b6 2d 9d 05 19 32 dc a5 e4 09 af 5d 29 6e aa 1d 23 1c e0 48 7d ad df d8 14 a8 3a b6 f7 78 e9 12 9a 74 8e 6d 89 c8 0d 94 8e 06 c9 fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 7f c7 f2 9f e7 6b d3 7b cf fb 8f 7b df 7b 7f fe 2c 2b db 0c c3 c0 b0 0c ab 20 9b b2 84 Data Ascii: wOF28$8vl`&f @6$< 9[99v}_rsMT9n)+PqD?T1&I-2])n#H}:xtmk{{{,+
2024-05-25 22:59:44 UTC	16384	IN	Data Raw: 00 00 00 c0 97 ec 19 e1 e0 4b f1 23 18 29 d1 15 f2 b6 19 72 b4 f5 2f b8 ec 8b ed 4a f6 a8 d8 77 26 90 e9 81 c2 65 96 e3 2d a5 2c 93 c0 fb 69 10 3d 65 40 92 48 51 7a 5b 56 36 df d6 b4 df 3c 72 5f af e1 de fc 44 ee 52 3c 1e c7 60 82 24 09 e5 0d 8a 64 82 79 4c f3 27 05 ad 70 9a a2 60 91 b4 c5 20 4b ce 94 6a 65 30 cb 53 41 65 aa a4 fa 17 35 e3 5a 36 bf 94 b4 2e a8 a1 a5 ea 71 36 24 8d 8a ce ed 4d 6e b5 26 90 0c cd d3 4c b0 2c fe 00 8c 18 b5 3d e5 7c 68 56 46 4e da 39 21 17 2e 7d 2e a7 74 5c 13 88 ab 72 b3 e5 5a 3c 78 cb c7 0c fc 2c 44 3c a8 f2 cb 26 70 56 10 97 90 c5 30 21 11 6a a2 89 ed 8a c3 92 98 24 25 f5 d6 a5 27 9a 21 29 46 b6 d8 24 f3 4c 56 07 a7 f0 f8 12 9e 8d 08 2b 69 cc 85 f7 2e b6 e2 5d 43 e2 1d 96 91 bb d1 92 48 54 fa 2d b2 de 6d 8c 51 39 f3 78 40 Data Ascii: K#)r/Jw&e-,i=e@HQz[V6<r_DR<`$dyL'p` Kje0SAe5Z6.q6$Mn&L,=\|hVFN9!.}.t\rZ<x,D<&pV0!j$%'!)F$LV+i.]CHT-mQ9x@
2024-05-25 22:59:44 UTC	12288	IN	Data Raw: cf 0c dc 30 9f 83 da 10 2f bc e3 99 17 2e 3c 6c ff d5 cf 1a 28 19 5d 80 0c 92 24 49 06 5d 3e f1 94 43 3a d5 52 dc 06 ef d8 c5 d1 35 d7 1f e2 62 e4 14 38 66 05 91 c1 9d c8 d7 fc c0 df 2e 5d 0e 04 84 60 04 c5 70 82 a4 68 86 e5 78 41 94 64 45 d5 f4 06 a3 c9 ec e5 6d b1 da ec 0e 1f a7 ab 0b 89 31 8d 2b 6f 08 b2 92 6c 70 e0 84 03 03 27 ea 66 f7 ce 8f 68 94 cf 04 06 7f 87 3e 85 48 bb 91 8b 01 b0 ae 3f 8c 0e bb a4 33 48 18 8d 89 85 8d 33 22 d2 88 06 78 23 e8 27 c9 3d 59 8d d4 80 5a a3 41 9e ff a6 ee 58 9e 97 4f c6 f2 04 52 4f fd f0 8c 3a 0f a9 1e 3b 98 c7 18 93 c3 8c fc fd 2f 72 56 68 00 b8 15 00 00 00 00 00 00 00 00 40 ed c0 82 a2 b4 69 e3 34 eb 7e 94 44 bd 44 d1 0c cb f1 b2 a2 6a ba 61 5a 36 bb c3 e9 72 7b e1 a5 cf be f8 fa 75 ea e3 f9 eb fd 34 3e 3b be 3b c3 Data Ascii: 0/.<l(]$I]>C:R5b8f.]`phxAdEm1+olp'fh>H?3H3"x#'=YZAXORO:;/rVh@i4~DDjaZ6r{u4>;;
2024-05-25 22:59:44 UTC	16384	IN	Data Raw: 33 2c c7 0b a2 24 2b aa a6 1b 99 52 5d 96 9b bb 87 a7 4b 6c cf fe d5 3e 48 33 17 35 28 c4 51 8c 6a 1c 6a ac e0 31 9e 73 c5 55 fa 95 62 2e 00 00 00 00 00 40 e4 d4 c2 b1 f3 0a fb bc a9 80 3a 3d 4e 4a 01 b5 cc d1 a5 f4 69 d5 20 cc 75 9e 38 79 6f 0a 75 ed 2d fc d8 d9 37 ee b6 6f 4f f9 4c 7e d3 c9 88 4b 84 89 44 94 89 59 20 21 ba 3d b4 be 67 db a6 14 0d 2e 5a c9 7a 48 2c 4f 71 54 da d5 d9 ad 9d 38 8e b8 a8 e8 65 b9 74 d8 4d d4 1a 51 a7 29 cd 3b 9b a4 45 5a 45 2c 6d 48 b4 93 92 e9 68 9d a8 d3 95 6e e9 91 5e e9 73 d2 6f a2 30 a2 2e 46 71 82 83 83 50 05 57 55 ce 82 a5 af 69 d6 0f 1c f0 9a 2b 5a a4 65 6b a3 19 13 50 09 67 ab 24 9c 64 65 f3 c4 a4 78 23 d9 f1 cc 86 55 54 6e a1 e7 44 b1 5c 67 ca a7 12 38 ef 67 3b c2 e8 98 64 77 31 fa 38 61 f5 50 55 66 4e 12 e5 2f 83 Data Ascii: 3,$+R]Kl>H35(Qjj1sUb.@:=NJi u8you-7oOL~KDY !=g.ZzH,OqT8etMQ);EZE,mHhn^so0.FqPWUi+ZekPg$dex#UTnD\g8g;dw18aPUfN/
2024-05-25 22:59:44 UTC	3017	IN	Data Raw: 9e 6f e5 b3 93 c4 8f 05 96 05 44 f3 98 47 30 a7 5d 57 68 b0 2d d0 5e 38 ee 0a 29 74 30 28 92 16 28 31 51 eb 0c 7c f3 1b e1 bd 40 62 e0 0b 4d 36 77 a0 63 14 39 d2 35 6c 78 1f 7a f9 a1 52 3f bb 4b c9 d7 f1 91 37 b1 0d 97 fa f2 04 3c b3 c1 f8 6a 98 fc c0 be 27 bc fc 08 36 94 b2 6a 25 69 53 56 74 9f c8 8d 2a d1 59 1f e0 35 95 11 bb c0 9a ce e8 d6 13 ae a4 62 fb 03 7f 1f 3a 26 9c d3 02 3c b0 52 05 34 d4 22 b3 aa 75 ba e0 7c d7 6d a8 2c ec a3 09 02 ce 78 ba c0 e5 d5 be 60 7f 13 9c 54 52 b3 4b 21 87 7a b9 3f 7f 55 0b 17 7f a6 19 40 c0 44 0f 1c 64 bf 57 98 8a 94 05 4a 82 b3 99 58 15 d2 51 22 88 72 44 15 a8 07 f2 4d d0 98 ec ab 6a ea 5e d2 11 a8 14 53 16 ef 17 58 27 e0 27 15 5c 34 79 1c ff d5 22 96 17 a8 9c a1 60 a7 30 e2 81 9d 0a dd 05 d6 8c e8 a5 27 99 ab e9 5d Data Ascii: oDG0]Wh-^8)t0((1Q\|@bM6wc95lxzR?K7<j'6j%iSVt*Y5b:&<R4"u\|m,x`TRK!z?U@DdWJXQ"rDMj^SX''\4y"`0']
2024-05-25 22:59:44 UTC	16384	IN	Data Raw: ad 08 73 aa d5 76 8b f9 05 da ca 88 52 bc 29 34 16 c8 47 f3 ac 78 90 bf 4d 77 79 65 fa ca e2 d1 45 63 1b 8c 8d 4c ce 77 18 81 f7 3d 75 3a 71 fb 20 b3 19 07 5d 5a ce 22 cb 90 3e 99 9b 92 da e5 e2 24 9c 85 4d 2e 4f b8 cb 83 18 59 f1 f8 38 f5 93 c6 4d 46 1b 7a 24 b0 91 9c e5 dc b4 0a f4 3d d1 4d 3c 6b fe cb c0 fa c3 bd 74 70 26 21 97 c5 f0 c6 73 c9 7e f2 b5 35 ae a4 77 74 04 4b de 32 17 0f 0e 53 1d 89 a9 05 4e 2a 43 d1 dc 9b d2 a4 cb de 4e db 6f 64 58 6e 0f d8 62 65 fb 17 a2 86 68 04 52 1a 4d 77 75 a0 fc 57 cc 4f 73 47 db 0a 29 ca 63 61 9d 7f b6 f6 a5 68 15 34 53 4e 5c 5f c0 8a 89 f8 a7 87 3c 3e 02 e9 f3 ca ab 64 4d b1 3c d5 71 04 81 51 90 7b 68 0a 74 21 a3 6c 43 4c 16 76 e8 0c 65 5f 57 53 3a 74 0a 48 78 ae 78 8c a3 4c 54 8a 9f 17 0d b8 6a 05 e4 a0 e5 72 25 Data Ascii: svR)4GxMwyeEcLw=u:q ]Z">$M.OY8MFz$=M<ktp&!s~5wtK2SN*CNodXnbehRMwuWOsG)cah4SN\_<>dM<qQ{ht!lCLve_WS:tHxxLTjr%
2024-05-25 22:59:44 UTC	1514	IN	Data Raw: 6c 37 be f8 d4 1f 1f be 43 b4 99 e0 1d 22 85 7b 4c 62 58 52 37 29 84 86 b4 c8 1d ba 9c e1 b7 b9 b0 66 39 36 d4 bc 81 11 b1 3f ba 7a ef fb 75 0d df 23 52 7e fc 48 86 07 05 bb e1 a4 56 b0 1e 77 20 43 1e 3a 13 6d f5 85 9b bb 72 fa da d4 3d 83 02 72 25 97 07 90 5d 81 7f e6 30 f2 18 1d 02 f9 a2 3d ee 78 cc 07 f9 6c 4d 1e ab b1 1a c6 5c 4f 26 ec f8 0d 24 54 2f 6a dc 94 e3 9e d4 ae 42 67 c6 e2 a7 8d 10 30 c5 4c d5 06 f1 f0 36 50 c6 ee 0a bd ef 4e 95 45 a7 8b 15 a1 25 ef f4 83 9d d0 7b 44 4e ec ff 8c 16 07 63 c8 eb 99 b2 39 3a 77 c2 1f 4c bc c4 9d 05 0e 1c b1 a4 8f 31 c5 28 26 0d 4b 09 7c ad 1f cd f4 8a 42 bb ae fb 10 03 64 90 e9 c2 5f 76 01 e7 81 fe 95 a7 57 e6 01 29 4b 30 90 f8 e3 40 b9 fa b3 ae 9d 11 65 98 25 e3 84 98 f2 7f 79 5b 30 be 79 00 d3 3a da 49 05 e3 Data Ascii: l7C"{LbXR7)f96?zu#R~HVw C:mr=r%]0=xlM\O&$T/jBg0L6PNE%{DNc9:wL1(&K\|Bd_vW)K0@e%y[0y:I
2024-05-25 22:59:44 UTC	16384	IN	Data Raw: fc 3d 22 3f b7 0e fb 75 05 e7 34 a4 39 e9 02 6f b5 67 2c 8e cc fa d5 53 48 bc ae 47 39 5c 2d 0d 77 3a 12 da f8 3d 96 79 e0 2a 5b 73 e8 23 f3 24 aa 7d a5 92 ed 30 db 6e fe 88 2c 1f d5 05 2c 28 80 1e 17 87 76 b7 3c 5f d1 f8 93 14 76 94 48 95 10 87 b2 06 26 1a 46 1f 62 ce 1f 39 91 6b 41 94 d9 e2 16 dc ed da 97 aa 0f c3 a8 7e 1d 76 b0 c7 71 8b 73 95 37 c2 eb 36 a8 6b 6a 47 fb 4c e1 17 6d b4 70 7e 91 da 09 fa 00 20 97 7d 09 61 67 3e a1 70 aa 0a 2b d0 86 e1 1d d2 c6 41 01 51 7a 33 23 68 fd 9c 5e 69 d1 ed 27 03 e1 10 5f 9e 55 b4 6d 1a 59 3b 69 64 a1 d8 36 e6 8d e5 50 db 20 bf 40 26 68 be 77 2f 70 ba 05 93 cb 5f c2 61 7f 2f 8b 06 ee 42 39 fc 55 85 a2 0d 2f 3d aa e9 03 2e 1a 4c 36 97 6b b3 46 f4 46 b1 d5 ce 5d 83 53 54 8b b7 82 3f 12 2a 77 e3 19 ca be 7d 41 e9 70 Data Ascii: ="?u49og,SHG9\-w:=y[s#$}0n,,(v<_vH&Fb9kA~vqs76kjGLmp~ }ag>p+AQz3#h^i'_UmY;id6P @&hw/p_a/B9U/=.L6kFF]ST?w}Ap
2024-05-25 22:59:44 UTC	16384	IN	Data Raw: bf cf ff e1 db 6f cb 57 de 7a 40 b0 7a b8 25 25 8e 7b 45 b5 ef b5 7e ef 90 a5 33 c6 90 65 64 ce e0 78 57 95 7d 3c e0 34 26 e2 30 b8 cf 10 c8 d8 03 d2 4a d2 bc e2 13 44 9a 32 a2 4e 87 0a b1 78 c4 9a 23 2b 3e a9 e3 15 5a 72 1e 3c 02 e4 a5 ad a5 f7 45 45 af 11 c7 14 8c f3 83 82 f8 56 e9 7d c8 7e 88 1e ed 89 36 e2 ef 44 4c a4 ea dd fc ed 42 ed c5 af ed fc 3c 9a 39 44 a0 9f d2 69 37 18 08 e3 7e c9 bd 66 4e 99 5b d9 03 17 5f 0d f3 a9 83 19 00 f2 e0 11 c0 26 5c 07 de 9e fa fb 27 39 42 9b cf f3 e1 a5 4e 78 6f 60 10 a8 9d 9d 69 46 d0 cc e5 d2 bf 41 99 bb c3 20 5e b7 f1 25 58 84 58 33 e3 49 74 2e 53 47 f5 73 56 8b 33 c4 73 92 96 ad 82 68 77 2b fb 3f 7c e9 db 87 ed 11 74 3e cf 87 92 58 e0 1d 3e 3f a8 99 ad 35 41 68 e6 0a c9 33 94 44 34 91 d8 73 d6 0b 1a 21 61 19 95 Data Ascii: oWz@z%%{E~3edxW}<4&0JD2Nx#+>Zr<EEV}~6DLB<9Di7~fN[_&\'9BNxo`iFA ^%XX3It.SGsV3shw+?\|t>X>?5Ah3D4s!a
2024-05-25 22:59:44 UTC	16384	IN	Data Raw: fd ca 3e 6d 55 11 6b c3 c1 eb b3 7d 2c 07 5c 41 f3 21 0e 73 d3 0b 87 b1 a8 fe 05 fd 7b 2d f6 5b 70 07 3e 1a 7a 4a 07 73 a9 53 0b 3d b4 81 8d df b2 c1 35 66 c8 a5 fd fa d7 7c db d0 df 09 3d 1c 63 0a cd 96 eb f2 49 2a 8c 26 e1 53 13 06 b5 89 b4 43 5a 4e ed 2a ac 15 49 39 64 e4 58 d7 4a 3b 44 41 ae 80 5d 55 93 93 9e cb d2 a3 32 64 9f ba 82 31 aa 7c 92 5c 07 cd 66 16 9d 32 cc 82 9f 0b 6b 5a f0 1c 5b c2 9a 67 90 f4 bc d9 26 b7 4c 3a b4 bc 5f ff 83 78 7c 45 4e eb 6e fc 19 f4 07 67 04 1f 6c 77 eb d3 49 34 33 e4 c0 3e 2e 81 46 d2 a7 bb c1 76 7e ca 21 84 13 f5 b0 e3 73 cb 60 5c 32 74 4a a9 ff cd 59 ef 7d bd 89 3d 39 7b 42 ef 57 57 f7 ae ee e9 90 bd 2e 4b d6 54 99 4b 33 63 7d a7 48 d4 ad ba 68 f0 21 bc 36 fe 30 75 4a 0f e8 9b 90 69 a2 99 a1 b3 45 81 d0 f0 a8 a6 f1 Data Ascii: >mUk},\A!s{-[p>zJsS=5f\|=cI&SCZNI9dXJ;DA]U2d1\|\f2kZ[g&L:_x\|ENnglwI43>.Fv~!s`\2tJY}=9{BWW.KTK3c}Hh!60uJiE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	49781	18.239.94.101	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:44 UTC	393	OUT	GET /S/content/common/images/mno/freefire_new_640x241.jpg HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:44 UTC	549	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 53533 Connection: close Date: Sat, 25 May 2024 07:58:29 GMT Last-Modified: Fri, 01 Sep 2023 07:44:38 GMT ETag: "8e5bb390d9e0f12905481edac5e46539" x-amz-server-side-encryption: AES256 x-amz-version-id: 0KBjyiuNH1PeQRH3zwi23nW4fDwvGvAM Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 1cd1c24523b61d46b093d317bb196d92.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P3 X-Amz-Cf-Id: FJRjKM9TKG9LgizCbuy3O0yM4FbpN1rhOriDz90QXJ2-_QQU0ZeP5w== Age: 54076
2024-05-25 22:59:44 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff db 00 43 00 04 03 03 04 03 03 04 04 04 04 05 05 04 05 07 0b 07 07 06 06 07 0e 0a 0a 08 0b 10 0e 11 11 10 0e 10 0f 12 14 1a 16 12 13 18 13 0f 10 16 1f 17 18 1b 1b 1d 1d 1d 11 16 20 22 1f 1c 22 1a 1c 1d 1c ff db 00 43 01 05 05 05 07 06 07 0d 07 07 0d 1c 12 10 12 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c ff c0 00 11 08 00 f1 02 80 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 00 03 04 05 06 07 08 02 01 09 ff c4 00 52 10 00 01 03 03 03 01 05 05 05 04 06 06 07 07 04 03 01 02 03 04 00 05 11 Data Ascii: JFIFddDucky<C ""CR
2024-05-25 22:59:44 UTC	1514	IN	Data Raw: fd ea 6e d8 c8 4a f2 2c 90 2f ba 83 7e c9 f5 04 eb e5 fd fb 35 d3 51 35 66 b1 3a 85 3a 86 64 47 5a e3 ee 48 38 51 52 41 2d e3 9c af 18 f5 ad 4b 49 b8 32 64 60 cb 94 8d ca a6 84 98 4c 3b 23 b9 8b 25 b9 9f b4 2d 05 c4 4a dc 41 50 00 e0 2c 27 69 38 20 ed ce 7d 45 6f c7 a8 c1 23 62 ad d6 44 f6 b3 2c 7c 56 5e a1 bd fa e7 6b d2 0b 75 9b a3 ea 4d c1 20 62 03 09 de f6 4f 23 7f 93 63 d7 71 c8 fc a6 a3 9f 50 8e 3e ef 59 02 d1 98 a5 4e ed 2a fd a9 5c f6 1d 37 0d 50 59 00 34 a4 43 51 ef 08 3d 43 cf 9e 4e 7f 77 60 fd da ce ac d3 de 36 2a 4c df dc 4a e9 ee cb 10 d8 54 9b db ea 94 f3 b8 2a 8c d2 8a 5a 18 f2 27 39 5f f0 ab 71 69 70 f7 a7 e6 a8 f8 6e a7 8f 2e 13 63 4a 97 96 ad 8c 43 61 0d 34 d3 6c b2 d8 c2 52 84 84 a4 01 e8 05 68 af 2a e2 a3 37 18 4a b8 35 1f 72 18 47 78 Data Ascii: nJ,/~5Q5f::dGZH8QRA-KI2d`L;#%-JAP,'i8 }Eo#bD,\|V^kuM bO#cqP>YN\7PY4CQ=CNw`6LJTZ'9_qipn.cJCa4lRh7J5rGx
2024-05-25 22:59:44 UTC	16384	IN	Data Raw: 5b 42 5b 43 69 00 03 de a3 00 01 d0 75 ae 9f a3 b7 7c 18 e6 f7 d5 7f 13 9f d7 e6 e0 f0 f2 f5 31 a2 e8 09 0d 5f ac ea 6b bc 4b af 45 42 09 f1 12 42 4e e0 9c e4 0c 7f 56 7d 7e 75 ab 14 8b 34 93 7f ba bf 7f 5e ff 00 7d 7e 87 0c b7 1c 45 c8 ca be d3 3a 6d b4 d9 2d 97 74 a3 0f 47 78 b0 b5 04 f5 42 86 70 4f c0 a7 8f ad 67 6a 54 e5 53 6b 44 76 66 91 46 bd 95 76 97 7a 5e 8e 66 d5 ed 2d a6 3c 52 58 05 09 01 45 b0 06 01 23 d2 b0 24 43 b0 81 f2 52 12 26 a0 bf 5e 5f b9 5e a5 5c 9c 95 75 9e e2 60 fb 44 bc ba a0 d2 3c 39 c9 e7 f0 81 f2 cf c6 a4 72 24 a1 e7 5e 5c 63 5f 93 6a b2 c1 8c a5 08 61 72 24 bc 11 ca f0 00 49 38 fc 23 26 9b 0a fa 43 ee 1f 2c 54 6f 60 bb dc f4 0d 91 d7 18 52 44 a9 ad 18 d1 9e 0a 50 2d a1 47 25 5d 3a e0 0c 7e be 94 f9 23 e2 63 97 61 1c 33 70 55 b1 Data Ascii: [B[Ciu\|1_kKEBBNV}~u4^}~E:m-tGxBpOgjTSkDvfFvz^f-<RXE#$CR&^_^\u`D<9r$^\c_jar$I8#&C,To`RDP-G%]:~#ca3pU
2024-05-25 22:59:44 UTC	1514	IN	Data Raw: 02 15 8e 83 d2 a8 55 f1 ef 2f 59 d1 25 ac 73 33 70 a6 e5 f8 50 8a b8 5b d0 b4 71 32 4b d2 7a fe dd d4 f3 f4 34 f4 91 bd 9e a2 1b 8b 18 d5 71 59 1a ad ef ad 0d 8b ec 9f d9 5c 7d 69 da 43 73 a7 cf f6 47 b4 eb 8c 5d 1a 69 a4 25 4a 90 5b 74 10 09 07 09 4e 40 cf 1f 8a b4 2d 28 b2 49 f0 39 7d 6e b2 59 c1 8b 2d 39 ba bf 9b 1f a4 f8 dc 2b 58 e1 8f cb cb cc 17 6d b7 a9 e6 30 c3 90 e4 b8 d1 4f 4e 02 88 ff 00 0a b1 1a 33 73 29 cd 5c 48 bc d1 4a 51 b5 ae b1 72 33 0b 8d 10 ff 00 4a 7b fa c7 07 fb 30 7a 80 7d 6a 79 67 e1 ae 2b da 1a 7e 91 c4 6e 2c bd da 7d e6 5a eb ee 2d 20 6e e0 56 7e 67 54 7c 6d f7 12 78 3f a5 15 a8 cd 8b 05 a6 f9 72 84 77 30 fb 83 1e 47 91 51 d5 15 83 63 6b ec bf 54 7f a4 0a 5c a9 d3 15 1e e1 61 db 3a 32 c2 88 0e 14 ad 39 41 1e 79 e9 54 6f d1 96 da Data Ascii: U/Y%s3pP[q2Kz4qY\}iCsG]i%J[tN@-(I9}nY-9+Xm0ON3s)\HJQr3J{0z}jyg+~n,}Z- nV~gT\|mx?rw0GQckT\a:29AyTo
2024-05-25 22:59:44 UTC	16384	IN	Data Raw: c5 c1 b1 21 ab 7b 09 da a8 e9 23 01 4e 28 f0 84 91 f9 bc 5f 0a 9e 37 68 fe 02 5d c7 04 8b cb d6 fe bf 0f 81 52 ed a7 53 5c ac ce 8b 1b 5b 61 38 c2 d5 ed 2e 36 ea b6 00 15 84 a5 58 f7 c9 39 ea 3d 30 05 36 b5 66 e6 c8 ab 8a af 2a a9 9c ae 4d cd fb 44 bb a2 bd a5 ab 2b ae 06 12 eb 6b dc f3 24 fe 3d a7 f0 9c 6d 3b 48 c7 f0 35 fc ab 29 7c 99 9b 9b b4 92 b0 ae 2d 2a af 29 d5 dd 9f 5c f4 ed f3 b3 db 79 66 7c 47 5d 62 1f 75 24 ad 44 28 a9 09 4f 79 b8 2c 05 2b a8 c9 c7 e2 1e b4 95 ae 2c 35 51 b1 21 af 3a e1 9d 17 16 c6 6c cc 2a 6d 99 e4 38 89 4d 38 85 6f 6d 40 8d db 88 07 00 ac b8 00 50 cf af 39 aa c9 45 5b 9c 95 b6 fc cb 72 3b 35 be 2c bb fe 43 fd 3b 7f b5 6a 34 2e 5d a8 b8 19 04 6e 69 c4 e1 6c 93 e4 79 fd 30 6b 79 2b 92 9c fc 94 c5 8d 0a c3 36 34 39 8c c9 96 b4 Data Ascii: !{#N(_7h]RS\[a8.6X9=06fMD+k$=m;H5)\|-)\yf\|G]bu$D(Oy,+,5Q!:l*m8M8om@P9E[r;5,C;j4.]nily0ky+649
2024-05-25 22:59:44 UTC	1353	IN	Data Raw: 8a 6e e3 4b 1c 16 94 b2 80 13 92 78 00 75 a6 3b e2 b9 30 1a 75 97 b3 9b 83 e1 06 4c 88 d1 14 46 7b b7 57 95 fd 40 e9 fa d7 9e df ff 00 89 1a 5d ac 98 c0 ad 2f be 9d 9f 5a 97 93 4e 99 97 2e c2 c6 9d 11 72 80 9d cd 29 89 60 79 36 bc 2b f4 22 8b 1f f1 2f 47 b8 6c 67 ca 2f 8d 3a be b4 dc 8e 4d 3a 65 18 c9 12 da 3d db ec 38 c1 fc ab 41 07 f8 d7 6d 67 7f 6d 78 b9 5b 48 af 4f 75 69 5f c0 a5 58 5a 3e f1 4b d6 68 1f b2 77 77 89 b6 d4 12 9f ed 11 cf fc 35 c3 74 e2 6a 34 b0 41 f1 a9 ad a6 27 2b 31 93 6a 36 11 1a 3b 2e bc b4 b6 97 1e 40 2a 5f 00 78 81 eb f4 ac 5d 05 b2 bb 52 cd e7 d8 92 b0 6d ad be c0 52 55 bb 3d 31 5d de 26 31 e2 4d bd 4d 25 47 62 be 45 54 62 03 0b 0c 75 2e d0 02 bd e4 ba e8 3d 4e 3c 66 b8 1d 56 b8 de c9 fc f0 36 2d fe cd 4b b6 86 8e 3e fb 6f dd 0e Data Ascii: nKxu;0uLF{W@]/ZN.r)`y6+"/Glg/:M:e=8Amgmx[HOui_XZ>Khww5tj4A'+1j6;.@*_x]RmRU=1]&1MM%GbETbu.=N<fV6-K>o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	49779	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:44 UTC	654	OUT	GET /S/content/fonts/Lato/Lato-Regular.woff2 HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://newsklikdisini5bekbg0.3bsz4.xyz sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn1.codashop.com/S2/content/common/css/shared-fontfaces.b6c83d3582.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:44 UTC	545	IN	HTTP/1.1 200 OK Content-Length: 28440 Connection: close Date: Sat, 25 May 2024 16:59:57 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Last-Modified: Thu, 09 Apr 2020 13:54:30 GMT ETag: "1031840a9580bcc9b1b83a047f2282b4" x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 4a902cabdcc0eca6e00cc44c2a8b91da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: R95xpLKZSBi_THerYnBkV869n_UjMklzqTGLlsvaAvn9mdzhSs5u0A== Age: 21588
2024-05-25 22:59:44 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6f 18 00 10 00 00 00 01 26 60 00 00 6e b9 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b a8 7c 1c 81 7c 06 60 00 82 74 08 2e 09 8d 65 11 0c 0a 83 e1 70 83 c0 69 0b 84 28 00 01 36 02 24 03 88 38 04 20 05 96 6a 07 86 5e 0c 4b 5b 98 12 71 41 dc b5 5f 22 b7 83 9d 66 be 6c b0 82 8d ab d8 6e 67 9b 6e ef c5 80 99 c1 18 e3 00 0c f8 6c 2a fb ff ff b4 a4 32 c6 f6 a1 fb 01 10 b1 b4 54 2e 51 77 78 48 19 81 30 e1 21 38 4a ad a5 a0 75 6d 23 0f ed 3e 8b 72 cc dd ed 21 84 cc c4 f0 20 1f 71 17 0d 51 17 fd 8a b6 ea b6 9a 49 4f ba 89 4a 10 13 95 98 a0 c9 1c 8d 6e 97 20 fb 13 fd 5b 59 91 6c 76 9c f8 23 58 5b 4f 4d 9d 4b 17 54 6c c8 6e ee 81 6a a2 06 8a cd 2e 34 db 6b 7f 88 ff d2 1f 96 53 3a 6e a6 d5 bd 90 6e 91 10 95 Data Ascii: wOF2o&`n\|\|`t.epi(6$8 j^K[qA_"flngnl*2T.QwxH0!8Jum#>r! qQIOJn [Ylv#X[OMKTlnj.4kS:nn
2024-05-25 22:59:44 UTC	1514	IN	Data Raw: 6f 88 57 39 df df b5 7b da 15 f5 f3 b2 ab 18 3f 88 b9 7b 02 80 76 0f ff 31 ba d3 a0 7d 1e 9b 9b 67 e3 38 b0 1f c7 07 b4 12 fb 39 c1 fa 22 ca 6b e0 15 cf 15 8d f7 d3 3c 9e 02 32 f5 1e 65 43 3f 5b bc 1f 27 2a 08 68 f7 d2 d8 2f 03 e2 33 dc a7 16 a8 fe b3 26 d3 7c da 58 6d c0 a3 f7 40 d5 fd 5c 27 67 8d e6 3b 7c c0 fe 02 1a cd bb ce 06 56 70 c8 5e 01 56 7e c8 3e 06 56 28 61 da 21 c2 fd 19 cb c1 44 ab 41 99 ea a3 6c e8 00 fd 37 50 c7 83 80 e6 4b e3 6e ea ff bf 1e d0 c1 d4 00 59 58 18 45 fa ce 8b 35 c4 d3 45 e6 7e 67 39 bd 86 6d c4 ba 4b 2b c9 72 21 df 6a f7 5c 9f 48 0e ff ac 01 dc 0b 9b fe 51 ac d3 08 fc 37 cf 2f 6e a9 fe 97 86 01 d2 f8 1b 88 8f ff b9 d5 de be 60 8f 0f f7 77 b7 37 d7 97 d3 d5 72 ea 9a b2 90 be ee 4b ff f2 c5 11 ce 47 51 ff 44 06 dd e0 26 73 ed Data Ascii: oW9{?{v1}g89"k<2eC?['*h/3&\|Xm@\'g;\|Vp^V~>V(a!DAl7PKnYXE5E~g9mK+r!j\HQ7/n`w7rKGQD&s
2024-05-25 22:59:44 UTC	10542	IN	Data Raw: 60 05 63 d6 09 0f 13 ae 43 6a bd 4e 10 80 15 e7 6d cf 8e d2 45 4c ad e0 70 73 16 68 58 44 84 2a c9 02 fc 34 0f 7a ec b1 cd 38 e7 8c cb 71 94 ac 33 51 4c 8d f7 9f 3a 9f ea 8a c8 db bf 3a 7d d0 3f b0 8b ea 58 1f 85 27 7b 3d 36 d7 b7 28 c4 86 7a e8 16 09 c4 c2 7d 37 72 e2 c5 19 3e 0e 54 e6 ac 95 cb 61 a0 2c fa c2 8f 2b a1 7b 5b 06 e8 58 0c 58 0f 84 9a 7e 1c 8f 11 14 8d e4 90 7b bf 1b ba 24 42 ae 7d c0 2d 34 df 4b ed 65 b9 b8 cf 86 a7 99 5b 43 cb a0 12 f2 92 30 4c d3 2b 15 1e e2 1c 83 df 90 4a 40 c9 0c 07 ec 6a c7 42 66 c1 be 6e c9 5d a3 d7 9e ee b3 32 a8 8d 6c 2b 43 60 97 af 81 a4 44 b8 e2 2c 49 f5 d1 56 10 3a 4f bf ef ee 76 df 66 89 cd 78 1d e1 7c b1 83 66 36 8d 40 2d c8 07 d0 94 a9 6c a5 d2 bc 14 9d 47 2d 2b e7 e4 79 b5 68 fe 5b 34 30 a5 1b d4 50 a1 02 70 Data Ascii: `cCjNmELpshXD*4z8q3QL::}?X'{=6(z}7r>Ta,+{[XX~{$B}-4Ke[C0L+J@jBfn]2l+C`D,IV:Ovfx\|f6@-lG-+yh[40Pp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.6	49778	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:44 UTC	655	OUT	GET /S/content/fonts/Lato/Lato-Semibold.woff2 HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://newsklikdisini5bekbg0.3bsz4.xyz sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn1.codashop.com/S2/content/common/css/shared-fontfaces.b6c83d3582.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:44 UTC	546	IN	HTTP/1.1 200 OK Content-Length: 213284 Connection: close Date: Sat, 25 May 2024 16:59:57 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Last-Modified: Thu, 09 Apr 2020 14:29:03 GMT ETag: "3b2be91477b04924b538786080ff371b" x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 9a66d849010281b3877fd5f66dbb4720.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: ddQPWrjikKuKxhfyjmSOZu5WDHYaiByaQBoNevmKsESRA790ND4s4w== Age: 21588
2024-05-25 22:59:44 UTC	15838	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 03 41 24 00 10 00 00 00 0a 36 2c 00 03 40 c4 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 8c ec 06 1c c8 6c 06 60 00 a9 26 08 81 66 09 97 17 11 08 0a 99 83 1c 96 b4 42 0b de 40 00 01 36 02 24 03 de 3c 04 20 05 af 2a 07 20 0c 81 39 5b 77 5e d9 bb 9f 7d b5 bd 37 30 5d 5b d5 3b d5 33 b4 32 a0 e0 22 0a 88 20 89 31 22 04 c9 aa b0 46 8e e0 1a cc 71 c5 e8 c7 85 e8 ea fd a3 6a 63 e4 09 49 9a 02 28 a8 ef 76 86 14 c8 21 c3 2e 2c 00 76 6a f5 7f 3a c6 c0 03 03 87 42 59 f6 5f 4f 02 4b 19 6b ef 65 b2 f8 61 19 a2 8f 63 0f aa 28 95 f8 ce fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 7f b3 fc e7 f9 da f4 de f3 fe e3 be f7 fe 9f 3f 3b cb 0c 03 33 bb e0 00 a2 20 38 30 b2 Data Ascii: wOF2A$6,@l`&fB@6$< * 9[w^}70][;32" 1"FqjcI(v!.,vj:BY_OKkeac(?;3 80
2024-05-25 22:59:44 UTC	16384	IN	Data Raw: 86 e5 78 41 94 e4 eb a8 79 23 0f 20 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 58 79 f5 3c 6b fd 54 86 d2 95 94 7e 9a 98 4f 26 3f b5 40 20 0b bb 77 a9 94 d2 68 80 fb 40 db 19 71 71 f3 29 df 24 f6 c2 dd b9 6c 72 d9 c9 b2 7d ad 57 67 c8 b3 6b 30 58 3c 1e 3f c5 8c 96 b9 49 b1 30 a9 99 2c d3 93 bd 72 79 42 1c 7c 78 2c 16 8f c7 e3 f1 78 3c 1e 8f c7 e3 f1 78 bc 4b 12 00 00 00 00 00 00 54 55 35 77 15 b1 ac 47 8b ee ef dd 5d 38 22 ab 95 ae 05 1a 32 73 c0 57 31 e7 f4 f7 1b b2 0a 6a f0 33 6e 47 ca 8b bc 2e 3d 35 52 57 34 0e de 05 ef fe ff 49 4b 6e c3 10 02 00 00 00 00 00 00 00 00 c6 2e 24 bb af 2a 00 0b 24 e5 86 e3 d1 0a be 4f 0d 59 d6 4a 61 1a 04 80 b2 56 de bb a1 50 aa 74 80 93 91 b9 85 c8 50 3c e1 27 5a e2 87 8c 7a 12 b5 94 fa c5 0c 40 6d dd ec 4c Data Ascii: xAy# D"H$D"H$D"Xy<kT~O&?@ wh@qq)$lr}Wgk0X<?I0,ryB\|x,x<xKTU5wG]8"2sW1j3nG.=5RW4IKn.$*$OYJaVPtP<'Zz@mL
2024-05-25 22:59:44 UTC	12834	IN	Data Raw: 0a cd 83 1a 4a fa a6 0a 69 02 03 2b 6c 3c 1b c4 27 89 96 ac 14 d3 a4 65 4c cb ce e7 58 61 86 cd cc d6 12 2b ac ef 1f e7 d8 75 d6 9e 3b c2 53 0d df 7b 11 78 37 12 f7 44 fa 8c 2c e4 ef d0 3b f0 bc ee 15 f7 4f dd 15 87 3b 93 e2 c9 a4 d6 67 cc f6 41 72 dc 4c 5f ef 62 db 57 09 35 06 87 a1 23 4f b9 a3 07 52 3c af 1c fe f4 b8 ca 99 56 7d c9 b6 e7 f8 72 62 38 39 ab bf 1b 02 02 01 83 80 26 40 a5 08 48 68 18 58 38 78 04 44 14 54 34 4c 2c c1 42 c2 b5 5d 1e 3e 81 b0 88 1c ad 98 84 94 8c 9c 82 b2 a8 4e 5b 2e e5 40 3f cd 12 bf cf 8b f9 3c 5a 80 fc 96 c7 08 2a 02 4d 4c 46 8d d0 a5 4a ad d1 ea f4 06 a3 c9 0c 80 10 8c a0 18 4e 90 14 cd b0 1c 2f 88 92 cc 2c bb af 95 e3 1b 1f 61 cc dd 59 88 ec 24 72 4f 94 ec 29 12 a4 66 3b 4d 9e 74 45 32 46 e6 03 e2 81 7b 3b a1 18 87 6e 1e Data Ascii: Ji+l<'eLXa+u;S{x7D,;O;gArL_bW5#OR<V}rb89&@HhX8xDT4L,B]>N[.@?<Z*MLFJN/,aY$rO)f;MtE2F{;n
2024-05-25 22:59:44 UTC	16384	IN	Data Raw: 9e cb ca d6 13 0b e6 f0 e4 cf 93 ff f9 50 1e 05 9b 10 d2 ab 58 58 9c 2d 6c 60 a1 18 45 aa c2 44 a6 07 02 81 40 20 10 89 58 c7 e5 c8 94 a3 bd 8a 21 05 12 89 24 20 83 cc a3 50 68 83 ea a2 84 96 2c 0f 57 44 6d 29 a0 7b 43 44 17 8d 2e 24 24 cb 50 8e 12 3b 95 eb d1 5b ec 4c 96 f5 ce 2c 84 c4 84 19 45 14 14 e6 0a e9 ac 1d 45 a0 50 86 54 32 86 5e d7 d1 56 14 91 68 a2 e8 76 4d 31 9d 20 c1 de 4d 9a cd 84 58 3b c7 d4 48 7c 58 a8 d1 84 e1 aa e3 25 5e b4 44 e0 c0 e6 72 10 8c a0 18 4e 90 14 cd b0 1c 2f 88 92 ac a8 9a 6e 98 96 73 83 ad 26 3c 85 d2 79 75 91 24 49 aa 37 00 7b 9d 19 70 a2 13 b5 bb 64 32 39 94 51 89 25 00 88 13 24 a5 a4 55 6a 86 d5 e9 0d 9c 91 37 99 2d 82 3e c6 d8 ca ad d5 80 02 00 03 00 e0 64 72 58 05 00 00 34 a8 da bb 82 0b 21 18 41 31 9c 20 29 9a 61 39 Data Ascii: PXX-l`ED@ X!$ Ph,WDm){CD.$$P;[L,EEPT2^VhvM1 MX;H\|X%^DrN/ns&<yu$I7{pd29Q%$Uj7->drX4!A1 )a9
2024-05-25 22:59:44 UTC	3013	IN	Data Raw: ce 05 b1 71 e4 8d 97 b9 9d cc fa ed 9d bc c3 cd 81 4e 0f f4 d8 89 b0 c8 51 10 37 07 7a a1 04 53 37 9c c6 49 f5 a5 fc da aa 29 21 a5 94 6b ed 3f bd 72 8c 54 6c 31 b9 e1 83 4e 5d e0 cb 0f 75 5a 7d e2 2e 07 e6 26 4e f1 d7 77 04 6e c9 06 46 70 cc 99 ea 4a 61 59 3d 2e bd 27 b9 d0 c1 2f 84 b2 b8 e4 ae 9e cf 71 64 7b 57 4a 2d de ee df 62 ee 4e fd 67 79 c7 79 89 97 9d 01 49 07 bc 4b 3e 2f 39 6b f9 ba a6 8a 77 2a d9 60 67 02 6e d7 40 cb b1 11 9b fe 95 b7 ee 5e d1 4e d9 0d dc 3e b7 47 ed 37 6d 5a ee cd 32 73 2d 22 13 ea 04 cb f1 8e f5 58 90 8a 58 f4 c0 a6 8e 0a ed 64 30 10 8e cd 1c 1e 8f 52 33 b4 b2 96 a8 c7 f3 9b cb 97 77 84 d6 be 36 9e 20 8a ea e3 2a 6a e3 eb 40 2c 97 26 9b 09 6a d1 b7 fc fc 27 18 13 5e 8f 4c 9f 86 55 a4 70 fd fc db 1e a6 40 4d 2b a2 2a 99 89 ae Data Ascii: qNQ7zS7I)!k?rTl1N]uZ}.&NwnFpJaY=.'/qd{WJ-bNgyyIK>/9kw`gn@^N>G7mZ2s-"XXd0R3w6 j@,&j'^LUp@M+*
2024-05-25 22:59:44 UTC	16384	IN	Data Raw: bd c8 fb d8 39 57 13 27 2d 5d d4 2f 71 09 81 bc 37 f9 b9 c0 35 bf b4 14 eb 2e 0b 57 06 36 79 89 6d e5 74 92 d1 b0 8e 3b 6f 79 49 24 48 4e 28 e4 3a 1e 71 71 99 0e a6 68 21 01 ca 8b d7 b0 fc 0e 7c ac f4 99 d0 46 09 99 14 de 77 14 b6 97 11 46 39 c3 0c 0b 5c cb e1 06 6d b9 f2 5c 63 89 19 06 54 c3 78 19 06 0e 2b 18 00 fe a8 29 f6 91 78 4d 1f 77 fc 2e 5e 70 e7 58 f3 10 f7 2e 20 8b dc 08 0a 38 c9 97 d5 a5 37 b6 53 24 94 55 75 f7 3a 66 ff 1f aa b1 f8 19 03 8b 95 44 e7 72 a6 e0 2f 5f 32 6e eb 9b 93 d4 98 72 8d fc d3 5d a6 37 f7 f5 2e 27 61 e7 65 01 b2 e1 db 52 77 5e 70 1b a3 ce 2d 28 1b a2 6d ec ac 6c 89 8e c2 55 1b 7c 81 77 3a 3a b0 c8 80 0e a9 d4 41 a8 a3 a7 56 10 95 b3 15 53 a3 ed 1b 54 1b 29 b3 c6 2b 16 dd 69 ee 99 80 13 83 c7 3c 86 11 8d 5a 48 ea 72 5e ad 2e Data Ascii: 9W'-]/q75.W6ymt;oyI$HN(:qqh!\|FwF9\m\cTx+)xMw.^pX. 87S$Uu:fDr/_2nr]7.'aeRw^p-(mlU\|w::AVST)+i<ZHr^.
2024-05-25 22:59:44 UTC	16384	IN	Data Raw: ac c5 2d 2a ad ab 25 14 9d df d4 81 73 c5 87 bc 78 d3 db 96 bb 34 fb a7 19 32 e1 67 37 93 82 df ec 0c eb ce 2c eb 34 8f cd 71 53 94 66 1a 4b 2d 45 a7 05 a6 a9 89 98 48 94 0c c3 5f 2f 23 1b 5b 5b 14 88 8a b2 1f 61 fc a8 d9 06 22 09 6a 65 d9 9c 1f 85 d7 99 39 16 20 f9 f5 ce 50 75 a6 fe f4 42 10 fb 37 4c 3b 78 ec 02 5e 0a be a6 f1 25 65 86 12 b5 b4 5d e9 90 79 9d 79 dc c0 7c 46 32 43 55 ba dd ea 62 94 df ca 10 3b 05 5b a0 6e e1 e3 a6 45 03 34 69 e6 73 a8 61 40 16 a2 92 55 d4 c9 c2 23 9c 4b 34 db 6d b4 09 b0 eb a0 d6 2d ed fb f7 c7 58 f4 16 ce e4 20 05 60 37 24 cd 41 59 6a 74 59 79 80 af 84 d6 5e d2 a1 6c 87 b3 48 25 3a 31 41 6a d5 18 b3 0b 66 7b 5c 88 7b c0 88 51 c7 ab ba 93 11 ca c3 80 f6 e6 54 6b 46 f5 f2 4a 91 79 f8 95 5a e3 bd 06 be 84 20 a3 9c c2 b3 93 Data Ascii: -*%sx42g7,4qSfK-EH_/#[[a"je9 PuB7L;x^%e]yy\|F2CUb;[nE4isa@U#K4m-X `7$AYjtYy^lH%:1Ajf{\{QTkFJyZ
2024-05-25 22:59:44 UTC	16384	IN	Data Raw: 14 50 2e b7 a7 ae 06 72 01 3c de f3 c1 c9 57 da 7f af 0d 84 49 7e 63 a2 58 fe 42 93 94 a3 0d 4b 30 6b 70 29 fb 3f 30 76 f4 ad f8 d9 17 0e 3f 6c a9 3d ab 3d be 4b 0d 23 e7 ad 36 24 3f 34 66 42 e5 e9 14 73 30 3f ea 20 ab 43 1d 68 3e 60 f0 86 c9 09 c7 43 3d 7a b3 b7 3d 8e 6b 4f fe f3 3c 8e 9d 78 11 27 40 c9 c5 10 27 ad 70 a4 be 0d 7e d5 f9 fc 66 5b 73 7a 72 d3 48 49 cb a5 dd 0b ee e2 20 6f 8c ec 06 f1 4b ac 41 40 9a 42 95 ac a5 6b 76 f5 a4 cc 09 f3 e3 a3 60 78 4d 28 15 48 fa 88 ce cd 2d 79 5e 7a 76 fe 9f 60 df 1d b6 72 ef 28 4f e5 f4 99 9d 49 6b f6 7e e4 92 6c fa f2 d6 fc a4 64 94 91 d8 88 72 15 1d 57 e5 0f cb 2f 16 16 a9 ee 8b 25 47 91 b1 02 7f 2c 0e ad 24 90 a9 0a 4b fc 9b 78 f6 a7 a9 9d 1b 5e 32 34 8d 6a 16 3c f9 a5 28 4d 3a 4e bd 59 49 13 6a 4f 5e ff 2a Data Ascii: P.r<WI~cXBK0kp)?0v?l==K#6$?4fBs0? Ch>`C=z=kO<x'@'p~f[szrHI oKA@Bkv`xM(H-y^zv`r(OIk~ldrW/%G,$Kx^24j<(M:NYIjO^*
2024-05-25 22:59:44 UTC	16384	IN	Data Raw: 3e a2 ae e0 42 5c b8 6e 34 01 9a d1 bf 23 72 b6 8e 8d f5 97 0d 22 c0 d1 7b ca b0 08 ab de 8e 4f 6e 80 70 2f 6d c4 1b 2e 06 41 9d c7 4f 9e c7 a8 2d cd 72 3e 70 de cc f6 aa 87 9f c7 53 cc e0 df ba b0 f1 4c 8a 53 53 56 0a d1 7c 7c f3 74 6d d9 cc e8 6b a9 80 9b a0 fb 26 10 e3 9c 7e c0 50 77 c1 fd a4 ec c5 2a a5 d1 9c b7 5c 33 fd 95 bb 7e 60 91 87 ea f2 f8 75 d8 a2 d9 03 f8 b7 5b bf 7e d1 2c cf 35 46 04 56 ee 6d 3e 9f 47 44 ee 72 ed f4 97 c1 ef d6 cd 65 7f d0 46 8f 2d ec ef fb be 4e 6b 56 48 75 6a 03 df 35 9b 72 bf c1 3f 7f 1d dc e5 56 e8 b1 08 76 e1 cc 15 98 47 63 9e db ae 8e 2f d3 da d7 b9 11 46 8d 06 64 c3 ff a9 51 2b 95 45 8d de c4 12 b5 c4 78 4c ae db ba 7d 5f eb f6 4d 2e c4 7e 97 1a 5a e8 8c df 82 49 a0 b2 c5 32 5b c6 07 81 3a b3 ad 5d c0 cd 9c 71 8a 7d Data Ascii: >B\n4#r"{Onp/m.AO-r>pSLSSV\|\|tmk&~Pw*\3~`u[~,5FVm>GDreF-NkVHuj5r?VvGc/FdQ+ExL}_M.~ZI2[:]q}
2024-05-25 22:59:44 UTC	16384	IN	Data Raw: c7 6f c3 c5 84 86 ac 08 09 b9 41 06 da 87 06 5a 30 61 6a f2 1c 1f 13 c5 c2 ac 31 db 73 98 a2 e4 39 c5 f3 a9 1e 49 ee 5e 49 31 65 d0 70 ac 9d c5 9d 6d c3 4a 76 61 a1 95 4f 40 11 61 94 d6 33 2e 28 ef 29 b8 17 92 b0 90 68 1f bd ec 1d 7f cd 3b ca 3f 4d 6c 79 b3 f4 5e 62 5f 78 d4 1b 91 c2 8f 20 7d f6 cb 56 38 73 32 d3 97 00 03 2b 3d 97 76 3d 21 bc aa ec 51 00 77 b4 4f 62 de ae c2 fc 08 f0 21 01 3c e8 8a 50 e4 0b 80 d3 bd 00 ef 1b 40 60 4f 55 e0 75 df d0 f7 28 12 d8 f9 7f 7e bc e3 82 26 80 8d 62 2b 08 84 c2 a6 01 58 3c 69 26 0b 58 b3 fb 26 5d d1 2d 07 ae 6d 9b c4 6a fd a7 57 24 fa c5 66 99 83 09 76 b5 32 8b aa 56 27 90 df d1 f7 23 7c 12 86 01 08 e1 ef e1 1c 91 2c 9d 03 67 2f 19 bd 5f b1 4c 0e f1 df 9e e6 03 79 30 2b 54 96 ce e7 4a d3 5d cb 9d e2 dd e7 48 12 43 Data Ascii: oAZ0aj1s9I^I1epmJvaO@a3.()h;?Mly^b_x }V8s2+=v=!QwOb!<P@`OUu(~&b+X<i&X&]-mjW$fv2V'#\|,g/_Ly0+TJ]HC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	49780	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:44 UTC	653	OUT	GET /S/content/fonts/Lato/Lato-Italic.woff2 HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://newsklikdisini5bekbg0.3bsz4.xyz sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn1.codashop.com/S2/content/common/css/shared-fontfaces.b6c83d3582.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:44 UTC	546	IN	HTTP/1.1 200 OK Content-Length: 231712 Connection: close Date: Sat, 25 May 2024 16:59:57 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Last-Modified: Thu, 09 Apr 2020 14:21:48 GMT ETag: "fccd49e77f1d0fe7552d11ec3697a5c7" x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 de5338eac881cf5d87f2d811c3b7417c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: e6Fkdvk9MUAh-RTFo-FeY1649MHUfl2gfVzJsfUN_CBn0_ucKjX5wQ== Age: 21588
2024-05-25 22:59:44 UTC	8949	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 03 89 20 00 10 00 00 00 0b 0a 58 00 03 88 c0 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 8c df 20 1c c8 6c 06 60 00 a9 26 08 81 66 09 97 17 11 08 0a 9c b9 2c 99 c4 48 0b de 40 00 01 36 02 24 03 de 3c 04 20 05 ae 2e 07 20 0c 81 39 5b 9b 1f da a7 9f d2 b7 cd 5b 3a db e9 94 f6 f6 ba b6 4b 20 86 40 6a 38 5c 10 22 88 9a 10 a3 20 09 82 08 fe 50 23 a0 e8 5f 4d 86 79 05 4b 92 9d 18 02 d0 f5 d7 31 01 2c 44 b6 e4 ae fb ae 0c 41 d5 35 24 af 1a 20 02 58 f4 b7 fd fc 12 21 72 dc 5d 11 d9 ac 78 01 3b 47 9b 22 aa 3c 9d 6f fb ec ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 13 cb 7f 9e cf cd ee 3d ef 7f ef 7d 7f cb f2 b3 90 85 d5 10 20 24 40 58 56 21 b2 89 1b a2 22 58 14 54 40 a1 28 Data Ascii: wOF2 X l`&f,H@6$< . 9[[:K @j8\" P#_MyK1,DA5$ X!r]x;G"<o=} $@XV!"XT@(
2024-05-25 22:59:44 UTC	16384	IN	Data Raw: 95 64 1d 12 d9 be 1e 23 6e 22 ea 26 4b 0e bb ca 3c e0 9a 87 94 5e 95 27 56 54 a4 1e 10 62 7d 14 c3 09 92 a2 01 e4 78 41 94 64 45 d5 74 c3 b4 6c c7 6d ce fd 61 e6 c1 b9 ce a3 3c 53 f1 dc 0b 2f bd f6 c6 5b ef bc 4f 67 48 6f 30 99 2d d6 00 21 30 08 05 23 28 86 47 9a a2 a2 b5 32 2c 27 c9 8a aa e5 04 b2 b6 b5 73 70 74 4a a2 75 96 ca 00 50 ae 50 aa 21 18 41 31 9c 20 29 9a 61 39 5e 10 35 5a 9d de 90 87 bb 9e ed 35 4d 83 61 04 c5 2c 36 b6 38 49 31 2c c7 0b a2 a4 6a 06 1b a4 18 41 79 18 16 40 41 94 64 45 d5 74 d3 76 5c d8 ae d4 1a ad 4e 6f 30 9a 2c 3e fd a8 bd 8b 24 f9 0a 14 2a 52 ac 44 99 f2 5c d6 12 1f 10 36 d5 8f 1d 07 4e 5c b8 7f f2 7f 54 be 73 12 06 c0 1e 72 c2 ca 73 8e 4e aa f2 95 c1 0d 7b ea 08 14 3a bd 74 9b f9 cd 19 f2 44 a2 4a 8a 15 5e 7c a1 65 30 bc 90 Data Ascii: d#n"&K<^'VTb}xAdEtlma<S/[OgHo0-!0#(G2,'sptJuPP!A1 )a9^5Z5Ma,68I1,jAy@AdEtv\No0,>$*RD\6N\TsrsN{:tDJ^\|e0
2024-05-25 22:59:44 UTC	16384	IN	Data Raw: 3b 84 bd 26 88 48 5e fd 14 9c 74 30 a2 6a b6 80 8a 69 c8 a9 95 e2 aa f6 54 f7 70 2d c8 1b 21 75 3c ea e7 fd b7 c2 1a 80 1a 9d a6 a5 39 2d b7 6b 5b f1 da 78 5c 24 48 1c d0 10 aa ed 3a c8 f8 30 cd c7 18 aa 9f 08 c3 b7 3a 42 1a 57 26 5e 99 b4 a9 93 33 99 98 cd d9 51 de b9 a0 f2 94 eb e0 0b 66 b9 ad bc fe 56 09 6b ac af 8e ac c7 a1 25 45 5b 1a db c0 8e 53 bb b4 3d c2 3e cf 41 f1 0e d5 be 31 8e 0c 7c 47 fc e0 39 e6 fb c9 f8 25 f1 db e5 34 ee ec 88 fa 19 4f f4 50 29 f1 19 86 a1 63 c6 10 7c 9a c7 27 28 4a 80 32 a4 58 06 00 46 49 54 4c 68 06 63 48 82 26 31 20 60 24 08 85 20 48 18 b6 b1 6e 54 a1 00 60 5a 8b 41 8b 82 23 94 d0 55 52 2c d5 a1 c1 54 16 91 23 fc 2d 82 aa a8 54 52 95 69 15 aa ca 58 76 34 8e 74 98 e6 21 a4 29 8a 11 1a 28 95 5b 04 de e0 5a 03 40 88 20 48 Data Ascii: ;&H^t0jiTp-!u<9-k[x\$H:0:BW&^3QfVk%E[S=>A1\|G9%4OP)c\|'(J2XFITLhcH&1 `$ HnT`ZA#UR,T#-TRiXv4t!)([Z@ H
2024-05-25 22:59:44 UTC	3339	IN	Data Raw: e7 c8 83 03 cf 6f e1 40 ea 8a cd 43 fc f9 e4 d8 99 d3 7c e6 9d c5 75 bc 4e 3c 87 dc c6 0a 33 f9 73 ae 9c 86 9f 0b fc 05 ec 75 41 ad a9 c0 e5 95 ab d7 d1 0f 83 62 c6 71 c3 9a f0 b9 d4 fb ba 02 9c cd 75 76 1f 3f 07 6b 4f c5 97 cf c0 1f 32 bb 4f 5f be fd f8 f5 07 0c ec 50 04 b4 18 38 41 52 34 c3 72 bc 20 4a b2 a2 66 94 a0 43 9c c5 18 dc db 08 9a dc 73 df 5d c2 fb fe 32 dd 4f 7a a8 94 e8 38 23 95 01 a0 5c a1 54 a9 21 18 41 31 9c 20 29 9a 61 39 5e 10 5d dd 34 5a 9d de e0 9e 91 f2 96 2d 5e 37 f9 f8 13 e0 98 a0 90 cd 25 82 3e c3 01 ec 48 40 25 6d 49 c1 e0 48 69 19 db 76 64 e5 e4 15 50 4a ad 3c 2d 0d 1d 03 13 0b fb 1a 98 7f 1c 1c 1d d5 8b 11 85 86 83 a3 b3 b9 23 40 c2 7e 67 74 27 78 f9 d6 57 6d 00 20 04 23 a8 13 c3 09 92 a2 19 96 e3 05 51 92 15 37 77 3f 78 78 7a Data Ascii: o@C\|uN<3suAbquv?kO2O_P8AR4r JfCs]2Oz8#\T!A1 )a9^]4Z-^7%>H@%mIHivdPJ<-#@~gt'xWm #Q7w?xxz
2024-05-25 22:59:44 UTC	16384	IN	Data Raw: 1a 8d 46 a3 d1 68 34 1a 8d 46 a3 d1 68 34 1a 8d 46 93 97 97 97 97 97 97 ef d8 14 16 11 15 13 97 80 4a da 92 82 21 90 57 f5 df 8d f2 82 d5 c8 fe b6 e2 03 e8 0f 14 2e 1e 7e 91 cb 3f 05 25 55 a3 1e 14 d9 65 65 cd ea d2 d5 be 76 5e 8f 96 d8 0b cd 66 6c 36 26 36 93 fa 08 63 73 3a 04 0c a7 96 8a 36 be d4 80 9b 0a a6 1f 72 44 9b 22 0a af fb 8d e8 50 14 aa 98 59 c5 0d d3 61 9a 4e d3 74 6b c3 aa cd ba cc ac df f4 3b 4e fb 6c 67 54 87 9f b0 96 67 b4 e4 b9 f4 9f d7 96 17 e4 f2 22 cd 4b 23 8e 17 71 32 6e 9e 1d 5d f7 ff 94 ef 6f cb ab 19 c3 d2 ce 39 ef 0b 5f fa ca d7 c6 5d b6 60 d1 92 65 2b ae bb c1 69 d5 1a 17 b7 75 1e 5e 37 f9 6c b8 25 26 21 63 db 8e ac 9c bc 02 4a 51 a9 95 a7 a1 01 c9 55 a6 59 d7 dc e6 50 0e 73 4f 57 75 2f 3d ac 7a ab 8f f4 2b cf f0 1b 6f b9 b9 7e Data Ascii: Fh4Fh4FJ!W.~?%Ueev^fl6&6cs:6rD"PYaNtk;NlgTg"K#q2n]o9_]`e+iu^7l%&!cJQUYPsOWu/=z+o~
2024-05-25 22:59:44 UTC	3015	IN	Data Raw: 73 a1 4d 59 d5 c4 9e eb 7a ad 61 72 d6 82 c8 4d f8 9a b8 28 9b 0f 8f b2 42 1b 42 02 07 9f 04 2f 31 99 fa 7a 38 1a f0 76 10 21 18 14 15 f4 43 63 21 db e4 05 ff d0 36 9c 59 29 c5 c3 35 82 18 a7 1e e3 3b 40 c9 b8 cb ba 7f 48 77 3b 68 98 65 55 7b 9c 45 17 08 4e 46 fb f8 65 8c 39 b5 8a 80 b4 9b 81 2d 08 82 d1 b2 67 59 1d 6a 84 90 a8 0e 0e 73 09 a4 89 42 d3 fc 6a ad 3c de c6 97 a4 af 47 1a e3 22 da f6 ce b9 cd 8a 76 ce 07 ae a8 24 ca f0 37 0f 88 d4 88 32 65 60 40 5f 7c 1a 50 d6 f4 88 e8 85 6a 8e 86 c8 7d 24 65 ce 35 32 31 b8 6d 1f b4 c1 be 3a 64 7a 6e 79 08 2a 65 4e 99 70 43 51 c5 4c b5 7c f8 ff bf 30 14 ff a1 3a 4e 08 0e 84 17 f2 3f ee fb a0 ff 98 9e c6 c0 c2 13 cc 77 00 d4 d8 ab e3 c3 05 92 f8 39 97 64 91 27 27 c1 4c 43 99 e9 8b 76 9a a5 08 09 c8 b4 67 b9 27 Data Ascii: sMYzarM(BB/1z8v!Cc!6Y)5;@Hw;heU{ENFe9-gYjsBj<G"v$72e`@_\|Pj}$e521m:dzny*eNpCQL\|0:N?w9d''LCvg'
2024-05-25 22:59:44 UTC	16384	IN	Data Raw: 3b 06 b5 2c 73 3f 3c 3c e0 c5 78 40 24 9a 3e 4e 32 24 62 ad 69 47 a2 2c c4 a9 f1 1b af c3 07 1b 20 a5 c8 48 7b 63 e4 a2 3f e5 23 bc 4e 0e a8 08 50 5b 4f 2a 6c d7 93 3f 53 a3 7e bc 5e 42 d5 1e ee d4 03 af 4d 46 f1 52 21 75 0f 15 7b b1 f8 9c 7b eb dd 56 0f b5 57 92 57 19 7f 01 83 dc 29 9d 9c 2c 5f f1 48 32 73 51 b9 d4 47 a0 65 1a 91 9c 90 c5 72 40 7c 89 0a 71 40 fe 4b 55 c3 01 6d ca 04 99 13 a6 54 26 cd ad d2 e8 f6 ec db d8 ec 4a 5e 2a b4 83 09 8b 50 21 e5 4a 91 56 d0 79 9f 3d 23 39 f6 9d f1 36 1d 87 dd 64 fd 08 86 1b b3 4c 76 90 5e a7 4e fe 4c 12 7a 06 fd 8b 5c 03 7d 47 2c b3 bd ea 3d 27 09 ae c8 dd 36 7f 4a d5 43 71 1e 79 e9 f6 73 b5 c5 ee 4d 94 0d 24 52 5d a7 df df fe 68 1f 7c eb f5 49 a2 4a 3e 20 ff f1 1a 30 f5 d2 a1 f0 b6 ac ed 4c 4e cc 64 94 cd d0 66 Data Ascii: ;,s?<<x@$>N2$biG, H{c?#NP[Ol?S~^BMFR!u{{VWW),_H2sQGer@\|q@KUmT&J^P!JVy=#96dLv^NLz\}G,='6JCqysM$R]h\|IJ> 0LNdf
2024-05-25 22:59:44 UTC	1514	IN	Data Raw: 41 f7 af eb b9 b6 19 2c f0 97 30 73 5e 2d eb 82 01 01 3c 12 31 a4 d8 5d 76 65 48 9f 81 83 fc 38 0a f8 c5 b4 46 b1 c8 ef 6a 50 a3 72 c4 c5 59 05 ce e5 3d b6 8d bc a9 ed 83 2a 1d d2 07 3f c3 7e 0f c5 41 aa f6 05 df 5e 99 8d f1 59 76 b4 3b 69 47 ae 3b d2 9c ac bb 67 c9 6a c8 ad ea a0 31 49 be dd 4a a9 2c 97 2a 4d 00 d9 59 f9 46 e2 5d 43 1e 45 a3 43 cb 18 1d 95 59 a6 7c 28 d8 55 2d 37 41 3f 04 75 1b 4f 29 1b 0d ef 2a 5d 06 51 0a 71 a2 f6 17 96 1c d3 20 0f 16 2a a5 23 5d 5f 7e 3f 01 91 93 88 d6 f2 df 22 c2 56 99 11 34 c1 4c 46 38 86 fd 3c ef 57 a5 65 48 9b ac e5 9f ed 00 2d 06 d1 8d 9d 3f 72 99 e4 ae f2 4e b2 65 eb 6b 13 54 cd 78 9a 57 65 e9 59 1b 63 3c 88 0a 07 0d 40 2e 68 ec ef 1e ca 6d 6d 37 84 3f 05 88 2c 89 60 0e 73 e8 9d ae 25 2e 24 a2 58 d1 c5 94 ca 8f Data Ascii: A,0s^-<1]veH8FjPrY=?~A^Yv;iG;gj1IJ,MYF]CECY\|(U-7A?uO)]Qq #]_~?"V4LF8<WeH-?rNekTxWeYc<@.hmm7?,`s%.$X
2024-05-25 22:59:44 UTC	16384	IN	Data Raw: 3a 53 54 26 2b 2b 3a b8 d9 20 4c 03 11 d0 f2 68 a9 6b ad f6 12 1d 77 0b 9c 97 c0 85 0f a2 b0 cc 9d d6 d4 bf cd 05 e6 f4 b1 b4 67 20 e1 8b 30 c0 5b 22 4a f7 35 5e 98 c3 f2 63 2a e6 ac 73 f9 6c 1a 0a 96 eb 90 1b b0 f1 d1 fd c0 27 f9 e1 cc d2 e7 d5 23 e9 8c 0b 99 95 59 cf 07 02 7d 75 c9 a7 5e 02 a1 55 8b e1 6f e6 a4 92 97 e9 ed 55 f4 dd f4 68 fe 52 80 6c 2d ee 8e 5b af 6e 90 b8 34 05 2d 57 e4 22 b8 11 3f a5 03 a5 32 9f 1e 07 d2 d8 d5 c0 e7 d1 f0 9f 8f d0 db a6 d7 a2 61 48 fa 55 6e d6 37 35 a6 c5 3f e8 10 92 29 bb 0d 5c 86 06 cc fe ba 3b 0a ab 5c a4 1b 0b 99 e7 a1 24 67 37 c2 a4 e0 eb 43 40 a5 86 ea a6 3e ea 6b a7 63 38 66 8d 5d 4f 93 08 21 e1 a0 82 55 4e 3a 01 1c 93 6d b7 2c 32 d8 4f 31 ca 1d 7f 07 d4 60 2a ec 09 14 59 90 39 85 4a 7f 5b 4c 26 1c ff ca 80 63 Data Ascii: :ST&++: Lhkwg 0["J5^csl'#Y}u^UoUhRl-[n4-W"?2aHUn75?)\;\$g7C@>kc8f]O!UN:m,2O1`Y9J[L&c
2024-05-25 22:59:44 UTC	16384	IN	Data Raw: e6 ca 9b 7f ec a9 c1 69 3e 45 2e bb 06 50 1d 11 58 49 2a 70 e1 24 f0 bb a6 3c b2 8f 55 cf 06 ab 26 03 82 01 41 80 62 e3 48 c6 be 34 e9 37 b1 9a 9e 62 93 79 01 de e8 d0 bd be c2 68 3b 46 9b 8c 4e 12 cc fe bf 0b aa f1 fa 9c 75 33 b9 2c 38 79 c6 b2 6b b6 23 40 09 95 83 04 e6 dc 09 18 63 a4 14 50 46 e6 a1 a4 98 07 c2 7d f2 bc a3 50 fe b6 31 57 60 e8 ea 93 33 e9 48 22 ac 3f cd 37 c7 62 d4 ca 7d 4b fc ef 9a f2 c8 db 76 c5 ea 53 a0 b4 c1 2a 8a 60 20 40 45 fc ee a6 51 e9 94 53 c9 5b f0 12 13 77 ec 98 10 32 a1 60 f2 9b 59 4d 57 52 33 53 9e 5c 72 3b 74 ae 11 22 0d 8c 04 6c 08 7e 0b 54 03 ca 47 cf 7a d9 bb 43 cd 8f 42 05 3d 2b 01 ab 62 ed ed 93 bf 20 e1 f2 46 2e d9 0a 82 ea 86 f7 b1 78 b6 7f f3 98 2b ac 6c 44 d8 65 14 56 45 26 04 c6 3e ba e1 89 fe d2 76 47 30 fd dd Data Ascii: i>E.PXIp$<U&AbH47byh;FNu3,8yk#@cPF}P1W`3H"?7b}KvS` @EQS[w2`YMWR3S\r;t"l~TGzCB=+b F.x+lDeVE&>vG0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	49782	18.239.94.101	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:44 UTC	407	OUT	GET /S/content/common/images/denom-image/FreeFire/Freefire_diamonds.png HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:45 UTC	505	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 5052 Connection: close Date: Sat, 25 May 2024 22:59:44 GMT Last-Modified: Wed, 16 Mar 2022 14:39:10 GMT ETag: "28380515fca2c6f9a34c8d63c84082ee" x-amz-version-id: M7elHFq6ZhRZdt3T0xX6NlAMaSWhq70l Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 8ac1a27a8fede22f241f081ad0edec42.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P3 X-Amz-Cf-Id: 9lUmFbzyNsPMX2oDHsJDrk-oz8wYBvBNZDK4DiWqP4RhLYXNGKX71g== Age: 1
2024-05-25 22:59:45 UTC	5052	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 64 08 03 00 00 00 47 3c 65 66 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 02 f1 50 4c 54 45 47 70 4c 1e 20 24 1e 20 24 20 27 33 20 22 27 1f 28 38 20 24 2c 1c 1f 25 23 29 33 1e 22 29 1e 21 25 1e 20 25 1e 21 25 1b 1e 24 1b 1e 22 19 1d 20 1c 21 26 1b 1e 25 1f 21 25 1d 1e 22 1c 1f 23 1a 1c 21 21 29 2e 1d 20 25 1c 1e 22 18 1f 26 14 17 1a 16 1b 20 18 1b 22 19 1c 20 17 1b 20 24 30 38 28 30 37 22 2c 35 36 49 54 39 41 45 49 59 5f 70 72 70 25 2d 3b 26 41 4f 3c 65 72 46 60 86 31 3f 47 24 53 6c 37 5c 84 36 3f 45 74 cc f1 1e 53 97 3d 47 4b 61 c3 da 19 26 34 1b 25 30 19 4a 91 4c 81 af 83 dd f2 5b 7a 85 3b 45 4a 3c 43 48 2c 67 85 Data Ascii: PNGIHDRddG<eftEXtSoftwareAdobe ImageReadyqe<PLTEGpL $ $ '3 "'(8 $,%#)3")!% %!%$" !&%!%"#!!). %"& " $08(07",56IT9AEIY_prp%-;&AO<erF`1?G$Sl7\6?EtS=GKa&4%0JL[z;EJ<CH,g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	49783	18.239.94.101	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:45 UTC	417	OUT	GET /S/content/common/images/promos/Community%20Banners/freefire_id_codaclub.jpeg HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:45 UTC	635	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 28559 Connection: close Last-Modified: Wed, 20 Jan 2021 10:28:50 GMT x-amz-meta-sha256: c9952880919057304eec16200ccd3f7b373d3ba7192c936b4a79ffca9b62ed35 x-amz-meta-s3b-last-modified: 20210120T102030Z x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 25 May 2024 22:59:45 GMT ETag: "f93267a5b15f21f2c6f33e9bb893dfd1" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 cf3f18e8f11a6f190c72103c7a43aac2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P3 X-Amz-Cf-Id: h5qelc82jC2-MFk8pHf1AYDIqMgQyt3soPdj2JweRgSZ4iHF66E3JQ== Age: 2
2024-05-25 22:59:45 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 44 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 34 00 00 00 00 00 00 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 de 00 06 00 04 00 11 00 2b 00 38 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 79 62 6b 70 74 00 00 01 78 00 00 00 14 77 74 70 74 00 00 01 8c 00 00 00 14 63 70 72 74 00 00 01 a0 00 00 00 15 72 58 59 5a 00 00 01 b8 00 00 00 14 67 58 59 5a 00 00 01 cc 00 00 00 14 62 58 59 5a 00 00 01 e0 00 00 00 14 72 Data Ascii: JFIFDICC_PROFILE4mntrRGB XYZ +8acsp-descybkptxwtptcprtrXYZgXYZbXYZr
2024-05-25 22:59:45 UTC	12175	IN	Data Raw: a5 15 f5 e7 9c 3e 34 69 24 58 d0 65 d8 85 03 d4 9a f5 4b 9d 3b c4 b1 44 be 4d c8 55 50 00 41 20 e0 7a 63 a5 79 ef 85 ed 66 bc d7 ec a2 b6 c7 9d bf 7a e7 a6 54 6e fe 95 e9 97 5a 37 8b 08 de 97 2a de c2 4f e8 46 2b ab 0f 1b dd d9 fc 8f 4f 2f a7 cc 9c ad 27 fe 13 9a bb 9f c4 56 e4 fd a1 1a 45 f7 55 6f e5 cd 73 5a e5 e4 97 52 44 25 40 8c 80 92 3d cf ff 00 aa ba db cf f8 49 6d 73 f6 bb 6f 39 47 7c 02 7f f1 de 6b 8b d6 66 69 f5 19 5d d4 a3 70 36 9e d8 02 95 67 6d 2e fe 62 c6 c9 a8 da f2 f4 91 bb e1 bb d6 09 18 60 f2 02 a6 36 f9 49 e9 d8 7e 18 ae ff 00 44 b4 d4 1e cd 22 b3 b5 58 e2 e7 e6 72 a0 93 ea 79 27 f4 af 36 f0 6c 9b 6f a5 8f b3 28 6f c8 ff 00 f5 eb d7 74 5b cf 26 dc 2e 6b 82 be 2e ad 1d 20 70 51 ca e8 62 6f 2a b7 d7 a7 43 5b 4e d3 75 72 a1 1e e2 05 c7 fb Data Ascii: >4i$XeK;DMUPA zcyfzTnZ7OF+O/'VEUosZRD%@=Imso9G\|kfi]p6gm.b`6I~D"Xry'6lo(ot[&.k. pQboC[Nur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	49785	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:45 UTC	654	OUT	GET /S/content/fonts/Lato/Lato-Semibold.woff HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://newsklikdisini5bekbg0.3bsz4.xyz sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn1.codashop.com/S2/content/common/css/shared-fontfaces.b6c83d3582.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:46 UTC	535	IN	HTTP/1.1 200 OK Content-Length: 369144 Connection: close Date: Sat, 25 May 2024 22:59:47 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Last-Modified: Mon, 02 Mar 2020 10:46:13 GMT ETag: "c44434d881d9d9c7c21b109b23d7777c" x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Miss from cloudfront Via: 1.1 9a66d849010281b3877fd5f66dbb4720.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: xRrvYnzw8sEu6WKF-O1vKCkf6tsZDXqnhtYCws-E5pFwrUrgWIaYiw==
2024-05-25 22:59:46 UTC	15849	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 05 a1 f8 00 12 00 00 00 0b 24 d8 00 02 00 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 05 a1 dc 00 00 00 1c 00 00 00 1c 7d c4 dd a5 47 44 45 46 00 03 90 30 00 00 01 b0 00 00 02 64 23 81 2a f7 47 50 4f 53 00 03 9e e0 00 02 02 f9 00 03 b3 f4 f8 c6 b4 12 47 53 55 42 00 03 91 e0 00 00 0c fe 00 00 21 cc 3d 5d cb c9 4f 53 2f 32 00 00 02 10 00 00 00 60 00 00 00 60 6b 08 e7 d2 63 6d 61 70 00 00 19 c0 00 00 08 81 00 00 0b 40 82 b1 5d 39 63 76 74 20 00 00 28 90 00 00 00 70 00 00 00 e6 3b b0 b5 39 66 70 67 6d 00 00 22 44 00 00 05 a8 00 00 0b 97 e4 14 db f0 67 61 73 70 00 03 90 28 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 46 e0 00 03 0a 02 00 06 41 b0 36 42 7f 9f 68 65 61 64 00 00 01 94 00 00 00 Data Ascii: wOFF$FFTM}GDEF0d#*GPOSGSUB!=]OS/2``kcmap@]9cvt (p;9fpgm"Dgasp(glyfFA6Bhead
2024-05-25 22:59:46 UTC	531	IN	Data Raw: fd 82 79 19 20 ff 00 b5 be 64 2e fe 45 bf 81 62 5f 56 d7 2b 8e 83 f1 ff b7 d8 21 ea 1b aa 27 af 3b 0e a3 ed 30 da 0f 57 63 8a da 46 38 8e 74 3d 8a 66 a9 ea 4f d5 c3 37 70 78 53 8e 37 69 f4 96 b5 d1 67 ac 1f 73 fd b6 fb e1 6d 7d 78 47 9e 77 f4 e8 3f 72 fc 07 c7 ff 38 1f 83 c7 58 7d 7a 57 ec 7b f4 7b 4f 5d e3 c4 8e c7 63 bc 98 f1 fa 35 81 6f c2 fa ff 5a 1a ec 74 bc a7 ca 31 dd de 99 7a 39 1b cf b9 7a f1 a1 f3 f9 7c f3 ed 59 e0 7a a1 be 2f 54 df 42 9a 7d 24 c7 c7 ea ce a4 d7 22 5a 2d 52 57 96 9e 64 e1 94 a5 07 4b 60 66 d3 33 1b a7 65 78 2c 87 b5 4a fc 6a fb 73 cd fb 1a eb 9f eb d3 97 b8 7e ed fc 5b f7 cc 3a 38 df c9 f5 bd eb f5 30 7e d2 97 9f 69 b8 81 c6 1b d5 bf 51 8e 5f 3c 0f fc af 89 6f d2 03 ff 57 e2 9b f5 74 0b 2e fe 5f c4 b7 8a 2d 80 5f 40 9f 6d e2 b7 Data Ascii: y d.Eb_V+!';0WcF8t=fO7pxS7igsm}xGw?r8X}zW{{O]c5oZt1z9z\|Yz/TB}$"Z-RWdK`f3ex,Jjs~[:80~iQ_<oWt._-_@m
2024-05-25 22:59:46 UTC	394	IN	Data Raw: b8 06 ee 35 30 af 85 e3 3b 3d 51 47 6c dd ae 6c 6d 48 d4 13 57 4f de 7a 29 2c 2f 24 ae c3 e9 ba cc 90 a8 df 96 1d 09 89 eb bb b3 fc 90 b8 c1 f5 0d f6 df 60 ef 8d f2 de 38 94 15 87 44 83 46 4c 9d 0d e4 6a 68 bd 21 ff 4d 72 de 64 ed e6 1a 0c f6 cd 7c 8d fa 31 9a dc 82 ef 2d 13 43 e2 56 38 b7 aa e9 36 fb 6f c3 e5 36 3c 1b e3 d6 78 0c 3b 73 ae fe db ad 37 69 10 12 77 54 67 b0 9b da db 54 6d 4d 71 6a 3a 37 24 9a 89 6d ce d7 1c 46 0b 9c 5b ca 7f 67 35 26 ff 5d 38 dc a5 e6 bb 53 43 a2 55 60 b4 fd 93 d8 3f a5 87 c4 3d 74 ba 47 bd 7f 6e ca f4 ab 35 6e ad ed 69 ad ce 7b 69 7e 9f d8 bf e0 d0 86 d6 7f 95 bb 6d 9d 90 f0 ec 4c b4 77 de b1 57 48 3c 24 a6 b3 fc 0f ab bf 0b fe 5d e0 76 91 a7 ab be 77 a5 cb 23 b4 7a 14 f7 c7 70 7d 4c 4c 37 1c 1e d7 e7 c7 61 fc 03 bf ee 6a Data Ascii: 50;=QGllmHWOz),/$`8DFLjh!Mrd\|1-CV86o6<x;s7iwTgTmMqj:7$mF[g5&]8SCU`?=tGn5ni{i~mLwWH<$]vw#zp}LL7aj
2024-05-25 22:59:47 UTC	16384	IN	Data Raw: f3 92 9a fe 65 9e ff 65 df 40 7a 0d c2 7b 90 79 1e 44 bf 97 e1 be 2c e7 cb e6 f5 15 78 af c0 1d ec fa df 62 86 e0 39 c4 fa 6b b4 7a cd 1c 0c 55 d3 eb ae 5f 57 c3 30 7c 86 89 1b 06 6b 98 b5 61 66 6b 18 8d 87 db 33 1c ee 70 fe e1 fc c3 f9 87 f3 0f e7 1f ce 9f c2 9f c2 9f c2 9f c2 9f c2 9f c2 9f c2 9f c2 3f 82 7f 04 ff 08 fe 11 fc 23 f8 47 f0 8f e0 1f c1 3f 92 7f 24 ff 48 fe 91 fc 23 f9 47 f2 8f e4 1f c9 3f 8a 7f 14 ff 28 fe 51 fc a3 f8 47 f1 8f e2 1f c5 9f ca 9f ca 9f ca 9f ca 9f ca 9f ca ef dd f3 ff ec 0d eb 6f 58 7f 93 0e 6f e9 e9 68 b3 f8 b6 39 7f a7 30 24 c6 e8 e1 58 b1 ef d9 f3 be b8 f1 b4 1b af b7 13 68 e5 dd 92 98 20 76 a2 7b 67 a2 63 9a 3d 69 e6 76 92 9e 4e 96 cf bb 26 91 0e 7f 8a 99 9c a2 f7 53 c4 4c d5 eb 0f e4 f9 40 dc 34 73 3e 5d 7f 66 b8 9e 69 Data Ascii: ee@z{yD,xb9kzU_W0\|kafk3p?#G?$H#G?(QGoXoh90$Xh v{gc=ivN&SL@4s>]fi
2024-05-25 22:59:47 UTC	16384	IN	Data Raw: da 7b 5c c1 67 b7 2e bb 7b ac 4c 6b 86 bf 64 ad fe 2a d7 e2 7a 5b cd 68 fd eb 45 43 4d be bb 6e dc d7 be bd d5 63 b2 a5 68 1b 71 2a d1 da 6b 8a 96 e4 27 39 1b c6 ea 4b b6 ac 2a 67 d2 c7 37 db 3c 36 83 ba ae ad 7d d5 d2 f6 de aa dd cf 4d e4 91 dc ed a6 f0 31 92 2b 57 0b 8e 47 75 58 96 c6 0a 2b 44 13 06 50 d0 61 63 9a 28 82 00 24 c3 07 29 09 1c cb 70 64 5b 72 a2 71 1c fb 29 82 d8 80 c3 07 3b 34 cd 35 da e5 5d a6 3b 0e 26 a0 62 ee 8a b5 e8 85 64 0e 5e 49 f3 61 47 dc 17 eb 68 f4 17 78 35 91 7e 46 df 5f f1 64 af b2 57 d0 cf ac 48 3f 13 21 fd 4c e3 72 2d 6e f6 2d bb 6b 7d 99 90 77 57 74 99 04 bd 7b 9b 9b 24 41 6d 63 20 5e 39 bb 4e da ba ff c2 16 3e 23 af 65 5e ca 1e d9 7b 24 87 8d d0 cc 06 52 a3 bf 1a 9c 58 b0 7d 0b 6e 47 7b 92 6f 9f 24 39 6f 15 e0 78 48 1a 80 Data Ascii: {\g.{Lkdz[hECMnchqk'9K*g7<6}M1+WGuX+DPac($)pd[rq);45];&bd^IaGhx5~F_dWH?!Lr-n-k}wWt{$Amc ^9N>#e^{$RX}nG{o$9oxH
2024-05-25 22:59:47 UTC	2048	IN	Data Raw: ce 70 cb 6e b8 b7 b5 a0 59 fe f7 f5 eb 4d a1 ce 92 f1 0d 1b c0 c7 fb 8c cb 67 4e 0d 6f 7c 64 2a 22 dd 78 93 71 69 79 71 4d 43 63 f7 ca ea 4d f7 0c dc ba 16 58 0d 66 c4 0a 7a 57 7f a4 36 db 12 1e d9 bd 6f ef 58 83 78 dd 8c d1 67 53 57 95 ee 74 39 54 62 a9 ae 38 97 d9 43 a8 3f 11 09 e8 ac 24 d8 5f ef 76 d7 af 28 ba d3 5b ad d3 36 86 0b 06 73 05 5a cf a5 ba 2c 8e 27 02 55 2a ad 3a 8b 59 21 52 98 cb 06 9b 52 39 6d fb 22 4b 93 39 6d 13 59 7a 05 52 db f5 69 f5 e6 22 68 51 15 d5 17 d5 85 4a 8a 83 31 62 5b f9 b5 11 db a6 aa 1a d7 44 6c bb 40 49 be 6a 62 5b 76 30 1d 4e 70 2a bf e9 d1 04 ce d1 5e 28 2f 07 e1 3c 0c 00 91 58 81 eb bb a4 89 8c c6 a4 72 6b 3d c7 db e8 38 2e ea 74 3a 8b 9d 41 84 6c 9c e7 73 e7 ca 92 6b b6 92 0b d7 18 be 70 8d 97 08 4d 34 af 93 4d 9e a0 Data Ascii: pnYMgNo\|d"xqiyqMCcMXfzW6oXxgSWt9Tb8C?$_v([6sZ,'U:Y!RR9m"K9mYzRi"hQJ1b[Dl@Ijb[v0Np*^(/<Xrk=8.t:AlskpM4M
2024-05-25 22:59:47 UTC	16384	IN	Data Raw: 16 82 86 35 b7 87 3e 2e 20 64 c5 dc 1f b1 2f 0f f0 bd e9 80 f7 66 36 e5 8b b8 f5 a8 c2 0d e9 d0 34 c9 7d df c2 5f fb 38 0b c8 ae 77 ea e3 f9 eb f1 af 88 eb 4f c8 85 f9 b9 da c9 6d d3 91 0d 67 f6 36 7d 74 c7 6d f5 5b d6 0e e4 7d 84 2e 49 f6 27 0d 7d 41 6d e7 a1 17 d7 7f f6 3e 67 3e 7a 3a b7 6a 45 e9 a5 4b dc 59 7c 37 42 0d 7e 49 f4 7e 6e 12 63 05 99 a9 1e ea a1 88 a9 1b d0 62 73 06 fc 2e 35 70 a1 56 48 e1 3d 5e 56 48 73 14 17 83 73 14 0a 1f 25 12 2c 53 81 ee 90 37 83 50 e1 1e 0f ca 31 cd 61 38 c7 cb b7 9f 4a 6a 8f 4b bf 7a 96 74 b6 47 ea 02 fe c4 62 47 5c fa 25 98 09 62 1b 48 06 7d 35 ea 84 a2 7d a3 81 6c 7b 64 32 a1 24 52 e4 27 5e 80 07 1b 62 0f 15 16 e7 17 bb 1a ac ba 86 e8 2b 49 c0 b0 00 78 fb 8b c2 cb c3 16 00 cc 55 ab 9b ba 36 7b 64 5a 69 a6 d3 da 60 Data Ascii: 5>. d/f64}_8wOmg6}tm[}.I'}Am>g>z:jEKY\|7B~I~ncbs.5pVH=^VHss%,S7P1a8JjKztGbG\%bH}5}l{d2$R'^b+IxU6{dZi`
2024-05-25 22:59:47 UTC	16384	IN	Data Raw: a7 23 e8 85 2a 86 ed 9b 0a 54 3d 72 de 10 7c 93 1f 7b b3 78 1d 96 5e 1f 91 77 67 03 a3 d5 69 2f 54 00 35 15 e7 34 0d 56 e5 75 8b f4 00 8f 3d 34 40 a4 6c 2e c6 24 77 93 4a d9 21 ff da 73 5b 54 ca 09 48 3b a3 d5 9f e5 39 fd 22 46 af df dc 4f eb a0 d3 3e a6 69 cf 67 a9 82 f6 02 8f 55 eb b8 55 a0 55 a5 54 00 ce f6 3c 5e b7 a3 1e 85 67 7b 14 2d 62 f9 c1 7e 03 49 1f 27 57 42 d7 6c 00 30 2b 96 2d 5d b2 78 e1 ec 59 33 06 3a 26 34 35 44 42 38 21 84 02 5d 6d 1c 0d 5d 1d a1 0e 4f 75 e4 24 32 c0 7f 3a 20 eb 28 39 cb 8c 8e 5a d6 f4 f8 7d 5a 09 b2 75 6e 51 73 6b 7c b2 2f 10 6a 6c 90 fe cc 7e ad 14 e6 ba 2d 3d 1a e6 5a 45 45 05 95 59 3d d0 d6 71 c7 c0 55 bb 8b 5c e8 57 b3 d7 95 41 5e ef 6e 9b 14 aa 6c df 37 6f f5 97 a7 54 15 c1 af 6f 8f 9e 0d fc ba 32 3d b9 7d ff 35 70 Data Ascii: #*T=r\|{x^wgi/T54Vu=4@l.$wJ!s[TH;9"FO>igUUUT<^g{-b~I'WBl0+-]xY3:&45DB8!]m]Ou$2: (9Z}ZunQsk\|/jl~-=ZEEY=qU\WA^nl7oTo2=}5p
2024-05-25 22:59:47 UTC	2048	IN	Data Raw: 09 18 1a ad 10 b8 3e 99 0d 32 9d 42 d4 f3 4f 3f 58 f3 e1 e1 1f 1e a8 3e 21 4f d1 48 b3 67 ef 98 f6 61 eb 9d 73 c3 72 8d 86 f6 1a f8 35 72 e2 7b 77 56 88 d9 97 41 8d a4 e5 8e 8b 2b 48 ad ca 64 95 b3 b1 86 55 33 42 12 86 f8 62 4c 94 d5 7d 68 a0 69 e5 9c 19 41 9f 1d c5 46 8d 7d c6 bc 07 d7 70 1d 11 8e e5 ca 91 d3 4f 23 41 93 28 57 cd b0 50 80 2b 3f 6e 19 73 6b ba 8e a8 f5 ea b3 8c 7e 1f c6 2b 0d 9a c4 00 c7 41 0b 4d 14 b5 41 c8 61 3f 5c 02 9b 90 3e 34 79 c5 33 15 c5 4d 45 8b ef e9 2a 98 db 54 a8 d7 17 35 f5 44 ba 4e 2c 2e 6a 2a 3e 29 b5 68 69 89 22 dd 9f ea 2f 6b 72 66 c6 fc ba 0f 81 ce 5f 1e 70 36 95 f9 ad be 0c b9 94 d1 9a a1 38 58 c3 8e ee da f0 cd 83 2d e6 ec 98 d7 1b cb 36 b7 1c fc e6 86 5d 80 5a 23 31 ba cd c6 ee 55 db 8b 96 1f 9a 9e 96 de 30 50 0a 8d Data Ascii: >2BO?X>!OHgasr5r{wVA+HdU3BbL}hiAF}pO#A(WP+?nsk~+AMAa?\>4y3MET5DN,.j>)hi"/krf_p68X-6]Z#1U0P
2024-05-25 22:59:47 UTC	16384	IN	Data Raw: 85 ca 94 86 aa 5c e0 e8 88 b0 9f 76 83 51 bd 77 f4 0b 70 e1 f7 ae 02 bd 1b 1a bf 1a 60 e9 0f 54 05 0d f3 ce ff fd 64 ef 85 b3 67 bb f5 69 5e 8d 6f f8 de cb 2b c5 6a b1 af cd f5 ed dd 60 55 7d 11 bb 17 73 6d b0 2b 85 3f 82 f3 ba 9d 78 e8 d2 8c 1c 3f 25 60 90 2a 80 30 0e b7 44 2c a4 18 26 b3 09 05 0d 73 18 07 3e 9e 42 ae 63 44 0e b2 d1 f3 70 44 7b 0e 8e 37 46 b4 94 37 bd 81 4f ef ca 53 89 43 01 b1 70 8a e2 68 63 c7 d9 ff da 89 76 8f de a3 f7 a6 9f d4 ad 93 22 d7 3d 75 82 32 8d eb b3 78 98 0c cd d9 0f c8 58 f0 c6 4d 86 24 bc 2c fe 31 12 55 0b 7f 54 74 f4 2f af f8 b7 1f 3e 1c 6d 99 1b d6 80 52 8d 4e 42 5a da ee de 60 9b d6 35 67 56 83 79 dd e9 81 a0 bd 75 ee 70 e5 81 17 82 8e de e1 cd a5 eb ce af 2d bc ea 6f 18 2c 8b 2d 6d 0d 5c 4b 2b 5f 50 b5 f0 74 2e 73 ea Data Ascii: \vQwp`Tdgi^o+j`U}sm+?x?%`*0D,&s>BcDpD{7F7OSCphcv"=u2xXM$,1UTt/>mRNBZ`5gVyup-o,-m\K+_Pt.s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	49791	162.19.58.157	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:45 UTC	602	OUT	GET /jr5VL36/favicon.png HTTP/1.1 Host: i.ibb.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:46 UTC	378	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 25 May 2024 22:59:45 GMT Content-Type: image/png Content-Length: 3677 Connection: close Last-Modified: Fri, 10 Sep 2021 14:31:05 GMT Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Accept-Ranges: bytes
2024-05-25 22:59:46 UTC	3677	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 0e 24 49 44 41 54 78 9c ed 5b 07 54 54 57 1a fe df 9b 8a 0e 45 b0 21 45 c0 06 a2 1e 94 08 62 c4 88 60 8b 51 50 10 a3 c6 c4 7a a2 09 6b 34 1a 57 a3 66 cd a6 aa 39 96 c4 98 ac 89 11 37 46 13 63 5c bb 89 05 b0 8b 0d 3b 04 a4 08 03 32 94 99 01 86 a9 ef bd bb e7 3e 67 c8 63 98 4a d1 73 76 fd ce b9 c7 e1 95 fb ee f7 fd ff fd ef 7f 8b f0 1c cf f1 1c cf f1 ff 0c 02 21 f4 4c e8 87 10 83 6c dd 26 8c 85 0b 64 2c 56 91 8d 6e 3a d5 06 82 20 9e be 00 76 88 93 1c f2 a6 df c8 f8 9b 01 00 ca 9e 10 ce 88 80 05 e0 3b d9 7e ab 08 21 06 71 2d 66 fa 8d b2 d1 cd ee f6 1a a8 d3 ea 09 45 a5 82 f7 b8 a4 9c af d5 e8 48 45 a5 92 5f 57 53 2b d0 69 f4 bc cf 96 7c 21 05 00 83 b1 e8 Data Ascii: PNGIHDR@@iq$IDATx[TTWE!Eb`QPzk4Wf97Fc\;2>gcJsv!Ll&d,Vn: v;~!q-fEHE_WS+i\|!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.6	49788	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:45 UTC	574	OUT	GET /S2/content/common/js/infoBar.38acc407b3.js HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:46 UTC	518	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2106 Connection: close Last-Modified: Fri, 04 Sep 2020 02:37:42 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 25 May 2024 17:50:44 GMT ETag: "38acc407b31daa48fafd99a877c64b5d" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 de5338eac881cf5d87f2d811c3b7417c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: f1617rpw1od6sZgsWjvowAsFxwjCWoowfXAm5BNc-EBHBGYj9-dpDg== Age: 18543
2024-05-25 22:59:46 UTC	2106	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 73 6c 69 63 65 64 54 6f 41 72 72 61 79 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 5f 61 72 72 61 79 57 69 74 68 48 6f 6c 65 73 28 74 29 7c 7c 5f 69 74 65 72 61 62 6c 65 54 6f 41 72 72 61 79 4c 69 6d 69 74 28 74 2c 6e 29 7c 7c 5f 6e 6f 6e 49 74 65 72 61 62 6c 65 52 65 73 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 6e 6f 6e 49 74 65 72 61 62 6c 65 52 65 73 74 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 22 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 69 74 65 72 61 62 6c 65 54 6f 41 72 72 61 79 4c 69 6d 69 74 28 74 2c 6e 29 Data Ascii: "use strict";function _slicedToArray(t,n){return _arrayWithHoles(t)\|\|_iterableToArrayLimit(t,n)\|\|_nonIterableRest()}function _nonIterableRest(){throw new TypeError("Invalid attempt to destructure non-iterable instance")}function _iterableToArrayLimit(t,n)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.6	49787	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:45 UTC	570	OUT	GET /S2/content/common/js/faq.7a04e34b3d.js HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:46 UTC	517	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 824 Connection: close Last-Modified: Fri, 04 Sep 2020 02:37:42 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 25 May 2024 17:50:44 GMT ETag: "7a04e34b3d63def624af82ba6df461ba" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c8710a117c1dfdaea4e9dfc4d41970d2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: ZWng73D7RLnkmD92MUfYOylSfg2_qEi6zsJ92SApd2gDadkn3yP_ug== Age: 18543
2024-05-25 22:59:46 UTC	824	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 65 6e 64 65 72 46 41 51 53 65 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 24 28 22 2e 61 63 63 6f 72 64 69 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 22 29 2c 6e 3d 43 4f 44 41 2e 53 68 6f 70 2e 66 61 71 44 61 74 61 2e 66 61 71 2c 65 3d 22 22 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6e 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 76 61 72 20 74 3d 6e 5b 61 5d 2e 71 75 65 73 74 69 6f 6e 2c 6f 3d 6e 5b 61 5d 2e 61 6e 73 77 65 72 3b 65 2b 3d 22 3c 73 65 63 74 69 6f 6e 20 63 6c 61 73 73 3d 27 61 63 63 6f 72 64 69 6f 6e 2d 73 65 63 74 69 6f 6e 27 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 63 6c 61 73 73 3d 27 66 61 71 2d 73 77 69 Data Ascii: "use strict";function renderFAQSection(){var a=$(".accordion-container"),n=CODA.Shop.faqData.faq,e="";Object.keys(n).forEach(function(a,c){var t=n[a].question,o=n[a].answer;e+="<section class='accordion-section'>\n <input class='faq-swi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.6	49790	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:45 UTC	593	OUT	GET /S2/content/common/js/payment-channel-suggestion.535f3c6f70.js HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:46 UTC	518	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1887 Connection: close Last-Modified: Fri, 04 Sep 2020 02:37:42 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 25 May 2024 17:50:44 GMT ETag: "535f3c6f7015dbae9e6b2a4987192e2b" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 4fcd504c9be280bceae32e94ae54e04e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: ophdJk99fZkCzyUcsaxd9maFWbFMKBAMFPifpzT0EAyQW8YNJ46AsA== Age: 18543
2024-05-25 22:59:46 UTC	1887	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 28 22 23 70 61 79 6d 65 6e 74 43 68 61 6e 6e 65 6c 53 75 67 67 65 73 74 69 6f 6e 4c 69 6e 6b 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 28 22 23 70 61 79 6d 65 6e 74 43 68 61 6e 6e 65 6c 53 75 67 67 65 73 74 69 6f 6e 4d 6f 64 61 6c 22 29 2e 73 68 6f 77 28 29 2c 6e 28 22 23 6f 76 65 72 6c 61 79 22 29 2e 73 68 6f 77 28 29 7d 29 2c 6e 28 22 23 62 74 6e 49 63 6f 6e 43 6c 6f 73 65 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 28 22 23 70 61 79 6d 65 6e 74 43 68 61 6e 6e 65 6c 53 75 67 67 65 73 74 69 6f 6e 4d 6f 64 61 6c 22 29 2e 68 69 64 65 28 29 2c 6e 28 Data Ascii: "use strict";!function(n){n(document).ready(function(){n("#paymentChannelSuggestionLink").click(function(e){n("#paymentChannelSuggestionModal").show(),n("#overlay").show()}),n("#btnIconClose").click(function(){n("#paymentChannelSuggestionModal").hide(),n(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	49789	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:45 UTC	642	OUT	GET /S2/content/mobile/images/error-icon.20986d3fe0.png HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:46 UTC	498	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 802 Connection: close Date: Sat, 25 May 2024 22:59:47 GMT Last-Modified: Tue, 14 Dec 2021 02:49:38 GMT ETag: "20986d3fe0ddac454b9f46bc34ce8952" x-amz-version-id: yQvHZsqjV.2CRKMhv5iNVz5bc0xc5Mqc Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 ba761cfda8bfa6cbda2b6c433d6201f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: xTUxx5_ISRha_sn_lSgoN0ifFaUSDRABgzjFCoFFkGjH46KRtFCqVA==
2024-05-25 22:59:46 UTC	802	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 26 08 03 00 00 00 9f e3 19 9c 00 00 01 17 50 4c 54 45 00 00 00 ff ff 00 ff aa 2b ff b6 24 ff aa 39 ff b3 33 ff af 30 ff b4 2d ff b8 2b ff b9 2e ff bc 2c ff b6 2e ff b9 2c ff b4 2d ff b6 2c ff b8 2b ff ba 29 ff b5 2f ff b9 2d ff b8 2e ff b9 2d ff b7 2b ff b8 2b ff b5 2a ff b6 2e ff b7 2d ff b7 2c ff b8 2b ff b6 2b ff b8 2d ff b7 2c ff b8 2b ff b6 2b ff b7 2d ff b6 2c ff b8 2d ff b6 2d ff b8 2c ff b8 2d ff b6 2c ff b7 2c ff b6 2d ff b7 2d ff b6 2c ff b6 2d ff b7 2c ff b8 2b ff b6 2c ff b7 2b ff b8 2d ff b6 2c ff b7 2c ff b6 2b ff b7 2b ff b7 2c ff b7 2b ff b7 2d ff b7 2c ff b7 2c ff b7 2c ff b8 2b ff b6 2c ff b7 2b ff b7 2c ff b7 2c ff b7 2c ff b7 2c ff b7 2c ff b7 2c ff b7 2c ff b8 2c ff Data Ascii: PNGIHDR&&PLTE+$930-+.,.,-,+)/-.-++*.-,++-,++-,--,-,,--,-,+,+-,,++,+-,,,+,+,,,,,,,,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.6	49797	162.19.58.161	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:46 UTC	351	OUT	GET /jr5VL36/favicon.png HTTP/1.1 Host: i.ibb.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:47 UTC	378	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 25 May 2024 22:59:47 GMT Content-Type: image/png Content-Length: 3677 Connection: close Last-Modified: Fri, 10 Sep 2021 14:31:05 GMT Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Accept-Ranges: bytes
2024-05-25 22:59:47 UTC	3677	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 0e 24 49 44 41 54 78 9c ed 5b 07 54 54 57 1a fe df 9b 8a 0e 45 b0 21 45 c0 06 a2 1e 94 08 62 c4 88 60 8b 51 50 10 a3 c6 c4 7a a2 09 6b 34 1a 57 a3 66 cd a6 aa 39 96 c4 98 ac 89 11 37 46 13 63 5c bb 89 05 b0 8b 0d 3b 04 a4 08 03 32 94 99 01 86 a9 ef bd bb e7 3e 67 c8 63 98 4a d1 73 76 fd ce b9 c7 e1 95 fb ee f7 fd ff fd ef 7f 8b f0 1c cf f1 1c cf f1 ff 0c 02 21 f4 4c e8 87 10 83 6c dd 26 8c 85 0b 64 2c 56 91 8d 6e 3a d5 06 82 20 9e be 00 76 88 93 1c f2 a6 df c8 f8 9b 01 00 ca 9e 10 ce 88 80 05 e0 3b d9 7e ab 08 21 06 71 2d 66 fa 8d b2 d1 cd ee f6 1a a8 d3 ea 09 45 a5 82 f7 b8 a4 9c af d5 e8 48 45 a5 92 5f 57 53 2b d0 69 f4 bc cf 96 7c 21 05 00 83 b1 e8 Data Ascii: PNGIHDR@@iq$IDATx[TTWE!Eb`QPzk4Wf97Fc\;2>gcJsv!Ll&d,Vn: v;~!q-fEHE_WS+i\|!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	49794	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:47 UTC	646	OUT	GET /S/content/social-media-logo/36/socmed-facebook-H36.png HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:48 UTC	471	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 2890 Connection: close Date: Sat, 25 May 2024 22:59:48 GMT Last-Modified: Fri, 24 Apr 2020 04:39:27 GMT ETag: "cf9659fa3891add490cb7d0d099d72ac" x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 e544866f1454c4458d3a6644b47d065e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: oweZd9wj4qej8LtAM7y0JUZRBLWK9Hofl8_YHyIYIhE259ERWsA40w==
2024-05-25 22:59:48 UTC	2890	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 24 00 00 00 24 08 06 00 00 00 e1 00 98 98 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 00 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR$$pHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	49793	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:47 UTC	645	OUT	GET /S/content/social-media-logo/36/socmed-youtube-H36.png HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:48 UTC	471	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 2216 Connection: close Date: Sat, 25 May 2024 22:59:48 GMT Last-Modified: Fri, 24 Apr 2020 04:39:27 GMT ETag: "123c968b7d12fcf714b9d2af208d666a" x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 614c7e2196cc5b32f71450d1d8261094.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: IvHj41KOphCD6jM2oXH7VZRPtNMVJc5W2j1gfFhb7QtWf2FX4RDYow==
2024-05-25 22:59:48 UTC	2216	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 33 00 00 00 24 08 06 00 00 00 24 72 02 09 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 00 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR3$$rpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	49795	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:47 UTC	647	OUT	GET /S/content/social-media-logo/36/socmed-instagram-H36.png HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:48 UTC	500	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 4678 Connection: close Last-Modified: Fri, 24 Apr 2020 04:39:27 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 25 May 2024 22:59:48 GMT ETag: "a91be2e400b7f0dc66247427dfaffcf3" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 3cf68d8be617999c7beade955cf69ddc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: VxHqj5TGmmS7q0zm0S5OMOARoHg02T1mgo9GCkhDeQmZ6dyl_f1V1A==
2024-05-25 22:59:48 UTC	4678	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 24 00 00 00 24 08 06 00 00 00 e1 00 98 98 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 00 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR$$pHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	49796	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:47 UTC	650	OUT	GET /S/content/social-media-logo/36/socmed-facebook-msg-H36.png HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:48 UTC	500	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 2866 Connection: close Last-Modified: Fri, 24 Apr 2020 04:39:27 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 25 May 2024 22:59:48 GMT ETag: "e3443d0d8aea42fc61368b9792b6fdc3" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 642d71984e3d1baa43fcd1fe0b0c012e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: Wrio71R48BO8EOOamAPTaZVEwuCcCHZ2UEyoTCEWvXHMJcA6-sN1yQ==
2024-05-25 22:59:48 UTC	2866	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 24 00 00 00 24 08 06 00 00 00 e1 00 98 98 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 00 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR$$pHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.6	49801	142.250.185.228	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:47 UTC	622	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:47 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Sat, 25 May 2024 22:59:47 GMT Date: Sat, 25 May 2024 22:59:47 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-25 22:59:47 UTC	862	IN	Data Raw: 35 38 36 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 586/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-05-25 22:59:47 UTC	559	IN	Data Raw: 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 2e 67 65 74 56 61 6c 75 65 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 69 66 28 6c 21 3d 3d 27 74 72 65 61 74 6d 65 6e 74 5f 31 2e 31 27 26 26 6c 21 3d 3d 27 74 72 65 61 74 6d 65 6e 74 5f 31 2e 32 27 26 26 6c 21 3d 3d 27 63 6f 6e 74 72 6f 6c 5f 31 2e 31 27 29 7b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 7d 7d 29 3b 7d 65 6c 73 65 7b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 7d 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 6a 6f 48 41 36 30 4d 65 4d 45 2d 50 4e 76 69 4c 35 39 78 56 48 39 7a 73 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 Data Ascii: recationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m);}});}else{d.head.prepend(m);}po.src='https://www.gstatic.com/recaptcha/releases/joHA60MeME-PNviL59xVH9zs/recaptcha__en.js';po.cross
2024-05-25 22:59:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	49737	157.240.252.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:47 UTC	552	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:47 UTC	1498	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;script-src .fbcdn.net .facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;connect-src .fbcdn.net .facebook.net wss://.fbcdn.net attachment.fbsbx.com blob: 'self';img-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-05-25 22:59:47 UTC	1705	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-heigh
2024-05-25 22:59:47 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-05-25 22:59:47 UTC	14599	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-05-25 22:59:47 UTC	16384	IN	Data Raw: 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 70 61 72 61 6d 65 74 65 72 5f 73 65 6c 65 63 74 6f 72 73 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 7b 61 3d 63 28 61 2c 68 29 3b 76 61 72 20 64 3d 62 28 61 2c 42 6f 6f 6c 65 61 6e 29 3b 69 66 28 61 2e 6c 65 6e 67 74 68 3d 3d 3d 64 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 7b 70 61 72 61 6d 65 74 65 72 5f 73 65 6c 65 63 74 6f 72 73 3a 64 7d 7d 72 65 74 75 72 6e 20 Data Ascii: !=="object")return null;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;a=a.parameter_selectors;if(Array.isArray(a)){a=c(a,h);var d=b(a,Boolean);if(a.length===d.length)return{parameter_selectors:d}}return
2024-05-25 22:59:47 UTC	16384	IN	Data Raw: 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 72 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 49 73 49 6f 73 49 6e 41 70 70 42 72 6f 77 73 65 72 22 29 2c 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 52 4c 55 74 69 6c 22 29 2c 74 3d 73 2e 67 65 74 55 52 4c 50 61 72 61 6d 65 74 65 72 2c 75 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 56 61 6c 69 64 55 72 6c 22 29 2c 76 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 Data Ascii: .getFbeventsModules("SignalsFBEventsUtils"),r=f.getFbeventsModules("signalsFBEventsGetIsIosInAppBrowser"),s=f.getFbeventsModules("SignalsFBEventsURLUtil"),t=s.getURLParameter,u=f.getFbeventsModules("SignalsFBEventsGetValidUrl"),v=f.getFbeventsModules("Sig
2024-05-25 22:59:47 UTC	16384	IN	Data Raw: 5d 3a 6e 75 6c 6c 7d 61 3d 6e 65 77 20 61 28 63 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 56 61 6c 69 64 55 72 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 69 29 7b 76 61 72 20 6a 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6a 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6a 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 72 79 Data Ascii: ]:null}a=new a(c);k.exports=a})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsGetValidUrl",function(){return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";j.exports=function(a){if(a==null)return null;try
2024-05-25 22:59:47 UTC	1784	IN	Data Raw: 73 28 7b 65 6e 64 70 6f 69 6e 74 73 3a 62 2e 61 72 72 61 79 4f 66 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 74 61 72 67 65 74 44 6f 6d 61 69 6e 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 2c 65 6e 64 70 6f 69 6e 74 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 2c 75 73 65 50 61 74 68 43 6f 6f 6b 69 65 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 5b 22 62 6f 6f 6c 65 61 6e 22 5d 28 29 29 2c 66 61 6c 6c 62 61 63 6b 44 6f 6d 61 69 6e 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 7d 29 29 2c 65 76 65 6e 74 73 46 69 6c 74 65 72 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 66 69 6c 74 65 72 69 6e 67 4d 6f 64 65 Data Ascii: s({endpoints:b.arrayOf(b.objectWithFields({targetDomain:b.allowNull(b.string()),endpoint:b.allowNull(b.string()),usePathCookie:b.allowNull(b["boolean"]()),fallbackDomain:b.allowNull(b.string())})),eventsFilter:b.allowNull(b.objectWithFields({filteringMode
2024-05-25 22:59:48 UTC	14600	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 5f 6f 70 74 73 5b 61 5d 3b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 3f 63 28 64 28 62 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 62 5b 61 5d 3d 3d 3d 21 30 7d 29 3a 5b 5d 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 61 7d 28 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 61 72 61 6c 6c 65 6c 46 69 72 65 43 6f 6e 66 69 67 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 Data Ascii: :function(a){var b=this._opts[a];return b!=null?c(d(b),function(a){return b[a]===!0}):[]}}]);return a}();l.exports=a})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsParallelFireConfigTypedef",function(){return function(g,h,i,j){v
2024-05-25 22:59:48 UTC	16384	IN	Data Raw: 73 74 6f 6d 50 61 72 61 6d 73 7c 7c 6e 65 77 20 64 28 29 2c 62 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 2e 61 70 70 65 6e 64 28 63 2c 61 5b 63 5d 29 7d 29 7d 29 3b 66 3d 6f 2e 74 72 69 67 67 65 72 28 70 28 62 29 29 3b 66 21 3d 6e 75 6c 6c 26 26 6d 28 66 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 21 3d 6e 75 6c 6c 26 26 6d 28 6e 28 61 29 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 62 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 3d 62 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 7c 7c 6e 65 77 20 64 28 29 2c 62 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 2e 61 70 70 65 6e 64 28 63 2c 61 5b 63 5d 29 7d 29 7d 29 3b 69 2e 74 72 69 67 67 65 72 28 62 29 3b 66 3d 65 2e 74 72 69 67 67 65 72 28 62 29 3b 69 66 28 6c 28 66 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 29 Data Ascii: stomParams\|\|new d(),b.customParams.append(c,a[c])})});f=o.trigger(p(b));f!=null&&m(f,function(a){a!=null&&m(n(a),function(c){b.customParams=b.customParams\|\|new d(),b.customParams.append(c,a[c])})});i.trigger(b);f=e.trigger(b);if(l(f,function(a){return a})
2024-05-25 22:59:48 UTC	16384	IN	Data Raw: 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 22 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 5d 2c 74 3d 73 2e 6c 65 6e 67 74 68 3b 66 75 6e 63 74 69 6f 6e 20 75 28 61 29 7b 69 66 28 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 61 3d 3d 3d 6e 75 6c 6c 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 4f 62 6a 65 63 74 2e 6b 65 79 73 20 63 61 6c 6c 65 64 20 6f 6e 20 6e 6f 6e 2d 6f 62 6a 65 63 74 22 29 3b 76 61 72 20 62 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 71 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 2e 70 75 73 68 28 63 29 3b 69 66 Data Ascii: pertyIsEnumerable","constructor"],t=s.length;function u(a){if((typeof a==="undefined"?"undefined":i(a))!=="object"&&(typeof a!=="function"\|\|a===null))throw new TypeError("Object.keys called on non-object");var b=[];for(var c in a)q.call(a,c)&&b.push(c);if

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	49800	18.239.94.101	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:47 UTC	391	OUT	GET /S2/content/mobile/images/error-icon.20986d3fe0.png HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:47 UTC	504	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 802 Connection: close Date: Sat, 25 May 2024 22:59:47 GMT Last-Modified: Tue, 14 Dec 2021 02:49:38 GMT ETag: "20986d3fe0ddac454b9f46bc34ce8952" x-amz-version-id: yQvHZsqjV.2CRKMhv5iNVz5bc0xc5Mqc Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 c00e79984dfec6a6601fb861a1d8d5e8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P3 X-Amz-Cf-Id: N97fcr0WGI3eQZP2Kxq0fQPxfWCYkOYOZmckJUfMLMTHh6VpsOrHcA== Age: 1
2024-05-25 22:59:47 UTC	802	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 26 08 03 00 00 00 9f e3 19 9c 00 00 01 17 50 4c 54 45 00 00 00 ff ff 00 ff aa 2b ff b6 24 ff aa 39 ff b3 33 ff af 30 ff b4 2d ff b8 2b ff b9 2e ff bc 2c ff b6 2e ff b9 2c ff b4 2d ff b6 2c ff b8 2b ff ba 29 ff b5 2f ff b9 2d ff b8 2e ff b9 2d ff b7 2b ff b8 2b ff b5 2a ff b6 2e ff b7 2d ff b7 2c ff b8 2b ff b6 2b ff b8 2d ff b7 2c ff b8 2b ff b6 2b ff b7 2d ff b6 2c ff b8 2d ff b6 2d ff b8 2c ff b8 2d ff b6 2c ff b7 2c ff b6 2d ff b7 2d ff b6 2c ff b6 2d ff b7 2c ff b8 2b ff b6 2c ff b7 2b ff b8 2d ff b6 2c ff b7 2c ff b6 2b ff b7 2b ff b7 2c ff b7 2b ff b7 2d ff b7 2c ff b7 2c ff b7 2c ff b8 2b ff b6 2c ff b7 2b ff b7 2c ff b7 2c ff b7 2c ff b7 2c ff b7 2c ff b7 2c ff b7 2c ff b8 2c ff Data Ascii: PNGIHDR&&PLTE+$930-+.,.,-,+)/-.-++*.-,++-,++-,--,-,,--,-,+,+-,,++,+-,,,+,+,,,,,,,,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.6	49802	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:48 UTC	640	OUT	GET /S/content/common/css/flags32.png HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cdn1.codashop.com/S/content/common/css/flags.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:49 UTC	472	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 26399 Connection: close Date: Sat, 25 May 2024 22:59:50 GMT Last-Modified: Thu, 20 Dec 2018 04:54:20 GMT ETag: "ee905aeea99aa287b3f5b569fedbd91e" x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 444dde5644fa29b8d8dfac109693e2a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: jxHD6B4hhHx5MLGJLwvrlqBxPMl7il6UAIunowiS1ZhUNCbiba5btg==
2024-05-25 22:59:49 UTC	8949	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 1e e0 08 03 00 00 00 62 ad 73 e1 00 00 03 00 50 4c 54 45 4c 69 71 00 38 93 00 38 93 00 38 93 00 38 93 00 38 93 00 38 93 00 00 00 00 00 66 00 00 7e 00 00 95 00 00 99 1b 11 03 00 00 ae 0e 17 15 00 00 cd 00 00 ff 3f 11 09 22 0f 69 00 27 67 00 24 7e 0c 1c 8c 00 1e a5 23 27 26 02 2d 62 00 2a 7d 00 29 8e 6b 0b 12 09 2a 88 02 32 7a 00 35 84 00 33 99 00 36 91 00 37 a9 09 38 96 01 37 b8 12 49 2f 06 40 85 70 18 3e 39 38 34 c0 00 00 0d 3d 9d 00 66 00 b0 0c 0a 00 60 34 8b 1d 22 48 30 71 cd 02 02 50 43 09 22 42 8b 06 4d a2 02 52 93 da 01 00 0f 47 af 00 53 a4 c2 0a 27 28 4c 6a 01 51 ba 00 6a 40 00 50 c8 21 5d 36 ad 19 28 00 6a 4d 76 2b 60 00 72 29 00 5d a4 e5 05 14 24 4b a6 17 6f 14 69 42 32 ce 11 26 ff Data Ascii: PNGIHDR bsPLTELiq888888f~?"i'g$~#'&-b})k2z536787I/@p>984=f`4"H0qPC"BMRGS'(LjQj@P!]6(jMv+`r)]$KoiB2&
2024-05-25 22:59:49 UTC	8558	IN	Data Raw: fe 0f cd 8c 20 a4 ff 16 ee 45 21 98 18 87 17 b9 3c a0 f0 d2 81 df 34 35 fd e6 c0 4b 2c e1 40 7d 43 3d d0 50 7f 80 12 a4 78 43 53 7d 83 db d3 50 df d4 00 06 2d fc 7b 43 bd bb a9 c1 eb 6d 68 72 d7 83 81 c2 37 12 fe fa 93 27 eb dd ad 5e 6f ab bb fe 64 7d bd 5f 6e 46 c1 db d0 da da ea f6 7a 3c 5e 77 6b 13 64 a2 04 f7 49 cf 90 d7 33 e4 f1 8a db 49 37 25 90 02 bd 50 62 83 07 76 50 a8 8e 70 b2 a1 75 c8 db d0 e0 1d 72 37 9c 04 81 1a a2 de 4d 4a f4 78 3d 50 26 1c d0 45 c2 2a 34 79 5b 87 86 5a bd f0 e4 24 16 89 d3 84 22 86 bc ad ad 9e 21 28 a1 c1 8f 82 4d a6 aa e1 a4 c7 0d 73 6d f0 78 4e 36 38 12 ad 49 01 a8 6b 80 3a 41 80 fe 75 36 5a 00 1c f5 30 3d 98 ae d4 1f 05 c4 ea 38 d2 54 7f c4 61 b7 51 02 9b d4 82 89 91 48 ff b7 b1 ab 1b b2 b2 39 c2 aa ca ac 95 2d 2d 2b b3 Data Ascii: E!<45K,@}C=PxCS}P-{Cmhr7'^od}_nFz<^wkdI3I7%PbvPpur7MJx=P&E*4y[Z$"!(MsmxN68Ik:Au6Z0=8TaQH9--+
2024-05-25 22:59:49 UTC	8892	IN	Data Raw: e2 6a 2a 0e 50 c0 cb 09 67 f1 72 a2 80 d0 b3 78 90 55 0d 26 46 c2 c6 e5 81 11 48 3a f1 60 30 c1 fb 17 48 c2 61 b3 39 12 1c 21 48 a3 06 33 09 37 79 29 3e b5 d9 3e e5 a4 00 23 12 21 ea 22 ff 93 cb 03 23 98 18 87 7f 4f 41 52 e0 39 53 30 85 7b 2f 98 18 07 e9 f5 87 5a f9 f5 87 49 15 a9 d7 1f 3c 2e e9 f5 07 ad 20 bf fe b0 a3 56 7a fd 41 47 10 08 70 b1 ba 3a 4c 28 3a 42 49 ad ab f6 1f ab 7d be 72 ba 53 a2 27 94 80 f0 98 ef cb 9f c1 4e 89 9e 40 28 27 ff be 74 8c 6e 05 ad 20 bf fe b0 67 87 f4 fa 83 56 90 5f 7f f0 78 a4 d7 1f b4 82 fc fa 43 6d ad f4 fa 83 8e a0 3c 61 0a 1c c1 fc 7c d6 7d c3 c6 59 92 24 45 32 75 32 5d 10 9b 62 31 71 c3 16 fc 21 be 10 eb ea 89 f1 84 a4 ff dd e6 10 4f 88 b6 35 37 0f f2 04 7f 5b 5b 5b 57 8c 2d 24 bb ba 20 44 4f 92 29 84 da ba e0 87 f3 Data Ascii: j*PgrxU&FH:`0Ha9!H37y)>>#!"#OAR9S0{/ZI<. VzAGp:L(:BI}rS'N@('tn gV_xCm<a\|}Y$E2u2]b1q!O57[[[W-$ DO)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.6	59071	18.239.94.101	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:48 UTC	396	OUT	GET /S/content/social-media-logo/36/socmed-instagram-H36.png HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:49 UTC	500	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 4678 Connection: close Last-Modified: Fri, 24 Apr 2020 04:39:27 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 25 May 2024 22:59:48 GMT ETag: "a91be2e400b7f0dc66247427dfaffcf3" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 602c4232f2a46df23c54a6eec1d7e048.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P3 X-Amz-Cf-Id: wVgsyPkUJCrUn6V6_rmLEWTPf8LurXtpq-j20r4PcWp8zgfN9GP1ZQ== Age: 2
2024-05-25 22:59:49 UTC	4678	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 24 00 00 00 24 08 06 00 00 00 e1 00 98 98 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 00 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR$$pHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.6	59070	18.239.94.101	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:48 UTC	399	OUT	GET /S/content/social-media-logo/36/socmed-facebook-msg-H36.png HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:49 UTC	500	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 2866 Connection: close Last-Modified: Fri, 24 Apr 2020 04:39:27 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 25 May 2024 22:59:48 GMT ETag: "e3443d0d8aea42fc61368b9792b6fdc3" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 6c43684b05a77c1925eb58e93105a976.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P3 X-Amz-Cf-Id: 56Nm_ukLyuGM5WqGRJ4nYos8PlM3WQPzIWddLWBS1jgBWWdgwOPK3A== Age: 2
2024-05-25 22:59:49 UTC	2866	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 24 00 00 00 24 08 06 00 00 00 e1 00 98 98 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 00 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR$$pHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.6	59073	157.240.252.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:48 UTC	1341	OUT	GET /signals/config/916139058437464?v=2.9.156&r=stable&domain=newsklikdisini5bekbg0.3bsz4.xyz&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:50 UTC	1498	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;script-src .fbcdn.net .facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;connect-src .fbcdn.net .facebook.net wss://.fbcdn.net attachment.fbsbx.com blob: 'self';img-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-05-25 22:59:50 UTC	1732	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-heigh
2024-05-25 22:59:50 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-05-25 22:59:50 UTC	1500	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 Data Ascii: urn!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f
2024-05-25 22:59:50 UTC	1500	IN	Data Raw: 3b 62 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d Data Ascii: ;b&&(Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsM
2024-05-25 22:59:50 UTC	1500	IN	Data Raw: 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 68 6f 75 6c 64 4e 6f 74 44 72 6f 70 43 6f 6f 6b 69 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 49 73 48 6f 73 74 46 61 63 65 62 6f 6f 6b 22 29 2c 62 3d 22 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 73 22 Data Ascii: exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsShouldNotDropCookie",function(){return function(g,h,i,d){var e={exports:{}};e.exports;(function(){"use strict";var a=f.getFbeventsModules("signalsFBEventsIsHostFacebook"),b="FirstPartyCookies"
2024-05-25 22:59:50 UTC	1500	IN	Data Raw: 37 3b 66 75 6e 63 74 69 6f 6e 20 41 28 29 7b 72 65 74 75 72 6e 22 22 2b 4d 61 74 68 2e 72 6f 75 6e 64 28 7a 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 42 28 29 7b 76 61 72 20 63 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 61 72 67 75 6d 65 6e 74 73 5b 30 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 61 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 64 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 6e 75 6c 6c 2c 65 3d 6d 28 63 2c 73 29 3b 65 3d 3d 3d 6e 75 6c 6c 26 26 28 65 3d 6d 28 62 2e 72 65 66 65 72 72 65 72 2c 73 29 29 3b 65 3d 3d 3d 6e 75 6c 6c 26 26 28 65 Data Ascii: 7;function A(){return""+Math.round(z*Math.random())}function B(){var c=arguments.length>0&&arguments[0]!==void 0?arguments[0]:a.location.href,d=arguments.length>1&&arguments[1]!==void 0?arguments[1]:null,e=m(c,s);e===null&&(e=m(b.referrer,s));e===null&&(e
2024-05-25 22:59:50 UTC	1500	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 6a 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 69 66 28 6f 28 62 2c 63 29 29 72 65 74 75 72 6e 7b 7d 3b 62 3d 7b 7d 3b 76 61 72 20 64 3d 42 28 61 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 65 29 2c 66 3d 43 28 61 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 65 2c 67 29 3b 68 3f 66 26 26 28 62 5b 75 5d 3d 66 2e 70 61 63 6b 28 29 29 3a 64 26 26 28 62 5b 75 5d 3d 64 2e 70 61 63 6b 28 29 29 3b 66 3d 44 28 29 3b 66 26 26 28 62 5b 77 5d 3d 66 2e 70 61 63 6b 28 29 29 3b 72 65 74 75 72 6e 20 62 7d 29 7d 62 28 29 7d 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 Data Ascii: function b(){j.listen(function(b){if(o(b,c))return{};b={};var d=B(a.location.href,e),f=C(a.location.href,e,g);h?f&&(b[u]=f.pack()):d&&(b[u]=d.pack());f=D();f&&(b[w]=f.pack());return b})}b()})})();return e.exports}(a,b,c,d)});e.exports=f.getFbeventsModules
2024-05-25 22:59:50 UTC	1500	IN	Data Raw: 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 43 6f 6e 66 69 67 53 74 6f 72 65 22 29 2c 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 2c 64 3d 63 2e 63 6f 6e 66 69 67 4c 6f 61 64 65 64 2c 67 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4c 6f 67 67 69 6e 67 22 29 3b 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 6c 75 67 69 6e 22 29 3b 76 61 72 20 68 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 Data Ascii: tFbeventsModules("SignalsFBEventsConfigStore"),c=f.getFbeventsModules("SignalsFBEventsEvents"),d=c.configLoaded,g=f.getFbeventsModules("SignalsFBEventsLogging");c=f.getFbeventsModules("SignalsFBEventsPlugin");var h=f.getFbeventsModules("SignalsFBEventsUti
2024-05-25 22:59:50 UTC	1500	IN	Data Raw: 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 Data Ascii: on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__f
2024-05-25 22:59:50 UTC	1182	IN	Data Raw: 3d 21 30 2c 6d 2e 70 75 73 68 28 61 29 2c 64 65 6c 65 74 65 20 63 5b 61 5d 29 7d 29 7d 7d 69 66 28 6b 2e 73 65 6e 73 69 74 69 76 65 5f 6b 65 79 73 21 3d 6e 75 6c 6c 29 7b 70 3d 6b 2e 73 65 6e 73 69 74 69 76 65 5f 6b 65 79 73 5b 66 5d 3b 69 66 28 70 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 71 3d 70 2e 63 64 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 63 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6a 28 71 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 69 28 61 29 3d 3d 3d 62 26 26 28 6c 3d 21 30 2c 6e 2e 70 75 73 68 28 62 29 2c 64 65 6c 65 74 65 20 63 5b 61 5d 29 7d 29 7d 29 7d 7d 6f 2e 75 6e 77 61 6e 74 65 64 50 61 72 61 6d 73 3d 6d 3b 6f 2e 72 65 73 74 72 69 63 74 65 64 50 61 72 61 6d 73 3d 6e 3b 69 66 28 6c 26 26 21 68 29 7b 6b 3d 6d 2e 6c 65 6e 67 Data Ascii: =!0,m.push(a),delete c[a])})}}if(k.sensitive_keys!=null){p=k.sensitive_keys[f];if(p!=null){var q=p.cd;Object.keys(c).forEach(function(a){j(q,function(b){i(a)===b&&(l=!0,n.push(b),delete c[a])})})}}o.unwantedParams=m;o.restrictedParams=n;if(l&&!h){k=m.leng

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	59069	18.239.94.101	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:48 UTC	394	OUT	GET /S/content/social-media-logo/36/socmed-youtube-H36.png HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:49 UTC	477	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 2216 Connection: close Date: Sat, 25 May 2024 22:59:48 GMT Last-Modified: Fri, 24 Apr 2020 04:39:27 GMT ETag: "123c968b7d12fcf714b9d2af208d666a" x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 2efef6dd9770b3981ddd7a213ccc0dda.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P3 X-Amz-Cf-Id: Eo26PcR5-zXtZ3udWUPLKNPJ2May1jsqLy1RyUFXpNW16UHoRWNweg== Age: 2
2024-05-25 22:59:49 UTC	2216	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 33 00 00 00 24 08 06 00 00 00 24 72 02 09 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 00 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR3$$rpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.6	59072	18.239.94.101	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:48 UTC	395	OUT	GET /S/content/social-media-logo/36/socmed-facebook-H36.png HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:49 UTC	500	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 2890 Connection: close Last-Modified: Fri, 24 Apr 2020 04:39:27 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 25 May 2024 22:59:49 GMT ETag: "cf9659fa3891add490cb7d0d099d72ac" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 73bf4f8a14baf53971357e0a4893be3e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P3 X-Amz-Cf-Id: -qMLSlaR6Od3Kt7lIok9O77RQTEZHz6kuWLAKbyMJ0iPODmOH4AmLw== Age: 2
2024-05-25 22:59:49 UTC	2890	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 24 00 00 00 24 08 06 00 00 00 e1 00 98 98 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 00 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR$$pHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.6	59079	142.250.186.100	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:50 UTC	963	OUT	GET /recaptcha/api2/anchor?ar=1&k=6Lc8br0ZAAAAAOAZHpdE1Fm9RA9tK85W3ano_l0-&co=aHR0cHM6Ly9uZXdza2xpa2Rpc2luaTViZWtiZzAuM2JzejQueHl6OjQ0Mw..&hl=en&v=joHA60MeME-PNviL59xVH9zs&size=normal&cb=5hgi2cvl589g HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:50 UTC	845	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Content-Security-Policy: script-src 'report-sample' 'nonce-NaHsScBN3Zgo6rKqCT5n5A' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Date: Sat, 25 May 2024 22:59:50 GMT Expires: Sat, 25 May 2024 22:59:50 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-25 22:59:50 UTC	545	IN	Data Raw: 31 63 36 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 Data Ascii: 1c6d<!DOCTYPE HTML><html dir="ltr"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><style type="text/css">/* cyrillic-ext */@font-face { font-family: 'Roboto'; font-st
2024-05-25 22:59:50 UTC	1390	IN	Data Raw: 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 35 6d 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 30 31 2c 20 55 2b 30 34 30 30 2d 30 34 35 46 2c 20 55 2b 30 34 39 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a Data Ascii: ; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2'); unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;}/* greek-ext */@font-face { font-family: 'Roboto'; font-style:
2024-05-25 22:59:50 UTC	1390	IN	Data Raw: 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 34 6d 78 4b 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 Data Ascii: in */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA,
2024-05-25 22:59:50 UTC	1390	IN	Data Raw: 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 Data Ascii: 8A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2) format('woff2'); unicode-range: U+010
2024-05-25 22:59:50 UTC	1390	IN	Data Raw: 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 41 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 30 31 2c 20 55 2b 30 34 30 30 2d 30 34 35 Data Ascii: U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfABc4EsA.woff2) format('woff2'); unicode-range: U+0301, U+0400-045
2024-05-25 22:59:50 UTC	1180	IN	Data Raw: 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f Data Ascii: 04, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFO
2024-05-25 22:59:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.6	59080	18.239.94.101	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:50 UTC	373	OUT	GET /S/content/common/css/flags32.png HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:50 UTC	478	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 26399 Connection: close Date: Sat, 25 May 2024 22:59:50 GMT Last-Modified: Thu, 20 Dec 2018 04:54:20 GMT ETag: "ee905aeea99aa287b3f5b569fedbd91e" x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 cf3f18e8f11a6f190c72103c7a43aac2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P3 X-Amz-Cf-Id: uKV5D1o1BwBlouTaH4SiWxUfA9Lf2pU-I0WvQhJTCHu1HdTNcTrArg== Age: 1
2024-05-25 22:59:50 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 1e e0 08 03 00 00 00 62 ad 73 e1 00 00 03 00 50 4c 54 45 4c 69 71 00 38 93 00 38 93 00 38 93 00 38 93 00 38 93 00 38 93 00 00 00 00 00 66 00 00 7e 00 00 95 00 00 99 1b 11 03 00 00 ae 0e 17 15 00 00 cd 00 00 ff 3f 11 09 22 0f 69 00 27 67 00 24 7e 0c 1c 8c 00 1e a5 23 27 26 02 2d 62 00 2a 7d 00 29 8e 6b 0b 12 09 2a 88 02 32 7a 00 35 84 00 33 99 00 36 91 00 37 a9 09 38 96 01 37 b8 12 49 2f 06 40 85 70 18 3e 39 38 34 c0 00 00 0d 3d 9d 00 66 00 b0 0c 0a 00 60 34 8b 1d 22 48 30 71 cd 02 02 50 43 09 22 42 8b 06 4d a2 02 52 93 da 01 00 0f 47 af 00 53 a4 c2 0a 27 28 4c 6a 01 51 ba 00 6a 40 00 50 c8 21 5d 36 ad 19 28 00 6a 4d 76 2b 60 00 72 29 00 5d a4 e5 05 14 24 4b a6 17 6f 14 69 42 32 ce 11 26 ff Data Ascii: PNGIHDR bsPLTELiq888888f~?"i'g$~#'&-b})k2z536787I/@p>984=f`4"H0qPC"BMRGS'(LjQj@P!]6(jMv+`r)]$KoiB2&
2024-05-25 22:59:50 UTC	10015	IN	Data Raw: af 27 54 ee eb ad ae 76 ff 2f 64 a9 ac 5c bb 50 2b d0 14 2d ee 80 bd 52 44 4f 78 6e 51 e3 ff fd e9 bb de e2 4a 66 8a b5 2e d7 b3 56 4f 0d b3 c8 4a 99 77 98 c3 94 b0 8d 4f ea 91 12 3c 70 c0 11 ac a3 7a 8d 28 38 26 60 f7 2a 5d a6 ae a6 af 64 a1 61 78 56 9f d2 ae 40 c0 ea 74 53 98 18 89 cb 5c b2 15 46 f1 91 7e 80 02 9e f9 e6 ca 65 3c 81 02 f2 e7 3f 63 a3 36 05 70 fb 36 f6 1f d5 89 f0 1d 21 df a9 8b fc 30 9d 10 21 21 c5 89 34 c1 1f 8d c6 62 49 7a 1b 63 2c 1a f5 6b 05 30 48 0a 68 d7 08 c0 19 41 6a 16 ce 28 53 20 5d 92 d0 85 67 b2 12 f6 23 43 f4 7b 3b 08 19 4a 3b a5 14 66 48 f0 c8 91 20 99 61 09 ed f1 3e ba e9 8b b7 6b 84 5d 92 00 0d a9 ed ae 74 01 1d 05 bb 24 01 1b d1 c3 33 54 e0 00 82 89 91 f8 17 06 44 e4 2e 0a 62 2b 6c ef 48 c0 d6 2c 85 9f aa 11 9b 67 0f b2 Data Ascii: 'Tv/d\P+-RDOxnQJf.VOJwO<pz(8&`*]daxV@tS\F~e<?c6p6!0!!4bIzc,k0HhAj(S ]g#C{;J;fH a>k]t$3TD.b+lH,g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.6	59084	13.32.110.50	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:53 UTC	634	OUT	GET /S/content/common/images/reskin/favicon.ico HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://newsklikdisini5bekbg0.3bsz4.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:54 UTC	503	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Content-Length: 2190 Connection: close Last-Modified: Thu, 19 Aug 2021 08:47:21 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 25 May 2024 22:59:54 GMT ETag: "9141e5521105fb13c657480daf781484" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 485f9ba84065b3ff587a6c536942e6c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-C2 X-Amz-Cf-Id: O8KpOnZ38Iu4DeAGkctNbh0v9FpeuyBPi0MGbAgkqSC3fSJixLaW7A==
2024-05-25 22:59:54 UTC	2190	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 08 23 49 44 41 54 78 01 d5 5b 3d 70 13 47 14 5e 31 29 03 e3 94 40 11 d1 04 a8 b0 87 9f 32 88 31 55 32 04 ab 4b 98 09 96 8b 84 02 cd d8 04 1a 5c c4 72 63 37 49 6c 0f f6 4c 48 0a 4b ce 98 49 67 13 48 67 47 72 6b c3 d8 54 38 34 12 85 49 89 83 e9 37 ef db bb 95 4f a7 fd 3b dd 9d ec 7c 33 eb 93 75 ab bb 7d ef 7d fb de db 77 7b 19 96 32 38 e7 59 3a e4 a8 9d a3 96 f5 5b 8f 7f 0c a2 41 6d d7 3f be a0 b6 85 96 c9 64 1a ec ff 06 12 3a 47 6d 8a 5a 9d c7 47 9d da 3c ae c9 0e 33 68 80 3d d4 c6 a8 bd e5 e9 a1 4e ad c0 Data Ascii: PNGIHDR@@iqpHYssRGBgAMAa#IDATx[=pG^1)@21U2K\rc7IlLHKIgHgGrkT84I7O;\|3u}}w{28Y:[Am?d:GmZG<3h=N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.6	59085	18.239.94.101	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:54 UTC	383	OUT	GET /S/content/common/images/reskin/favicon.ico HTTP/1.1 Host: cdn1.codashop.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:55 UTC	503	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Content-Length: 2190 Connection: close Last-Modified: Thu, 19 Aug 2021 08:47:21 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 25 May 2024 22:59:54 GMT ETag: "9141e5521105fb13c657480daf781484" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 2ef9ad1c8e8d306617a72c1e978a7716.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P3 X-Amz-Cf-Id: qAi0_EWzSE2LkLtQsZ6Ri_SRa1VcjNlxGRPCTb-K4NiGcD5jZ_eNOA== Age: 1
2024-05-25 22:59:55 UTC	2190	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 08 23 49 44 41 54 78 01 d5 5b 3d 70 13 47 14 5e 31 29 03 e3 94 40 11 d1 04 a8 b0 87 9f 32 88 31 55 32 04 ab 4b 98 09 96 8b 84 02 cd d8 04 1a 5c c4 72 63 37 49 6c 0f f6 4c 48 0a 4b ce 98 49 67 13 48 67 47 72 6b c3 d8 54 38 34 12 85 49 89 83 e9 37 ef db bb 95 4f a7 fd 3b dd 9d ec 7c 33 eb 93 75 ab bb 7d ef 7d fb de db 77 7b 19 96 32 38 e7 59 3a e4 a8 9d a3 96 f5 5b 8f 7f 0c a2 41 6d d7 3f be a0 b6 85 96 c9 64 1a ec ff 06 12 3a 47 6d 8a 5a 9d c7 47 9d da 3c ae c9 0e 33 68 80 3d d4 c6 a8 bd e5 e9 a1 4e ad c0 Data Ascii: PNGIHDR@@iqpHYssRGBgAMAa#IDATx[=pG^1)@21U2K\rc7IlLHKIgHgGrkT84I7O;\|3u}}w{28Y:[Am?d:GmZG<3h=N

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.6	59089	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:58 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 45 32 6b 62 47 45 4e 56 4b 55 32 39 54 37 63 55 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 33 32 64 63 33 36 37 34 64 62 31 32 32 36 33 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: E2kbGENVKU29T7cU.1Context: 332dc3674db12263
2024-05-25 22:59:58 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-05-25 22:59:58 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 45 32 6b 62 47 45 4e 56 4b 55 32 39 54 37 63 55 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 33 32 64 63 33 36 37 34 64 62 31 32 32 36 33 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 43 6a 7a 4c 31 72 46 68 4e 54 50 31 42 39 33 2f 6d 37 2b 76 4a 48 74 4f 52 69 6a 53 79 61 4d 4c 5a 45 4e 56 35 44 53 36 2f 65 6e 7a 56 5a 59 61 73 4e 54 43 76 6c 58 45 31 5a 6f 6e 77 56 35 6d 6a 70 4a 63 54 66 30 73 63 47 46 59 44 4f 4d 36 75 35 45 51 47 64 7a 30 38 56 51 34 7a 5a 2f 48 6d 64 68 34 45 48 55 6a 4f 37 42 4a Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: E2kbGENVKU29T7cU.2Context: 332dc3674db12263<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAUCjzL1rFhNTP1B93/m7+vJHtORijSyaMLZENV5DS6/enzVZYasNTCvlXE1ZonwV5mjpJcTf0scGFYDOM6u5EQGdz08VQ4zZ/Hmdh4EHUjO7BJ
2024-05-25 22:59:58 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 45 32 6b 62 47 45 4e 56 4b 55 32 39 54 37 63 55 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 33 32 64 63 33 36 37 34 64 62 31 32 32 36 33 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: E2kbGENVKU29T7cU.3Context: 332dc3674db12263
2024-05-25 22:59:58 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-05-25 22:59:58 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 42 75 35 64 62 52 52 73 74 30 79 52 44 45 47 4f 76 77 71 31 66 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: Bu5dbRRst0yRDEGOvwq1fQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.6	59090	148.222.67.91	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 22:59:59 UTC	678	OUT	GET /mobile/ff?pid=OrganicA&c=Codashop HTTP/1.1 Host: www.freefiremobile.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 22:59:59 UTC	209	IN	HTTP/1.1 404 Not Found Accept-Ranges: none Content-Type: text/html; charset=utf-8 Date: Sat, 25 May 2024 22:59:59 GMT Server: nginx Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-25 22:59:59 UTC	2372	IN	Data Raw: 66 31 62 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 6e 2d 68 65 61 64 2d 73 73 72 20 6c 61 6e 67 3d 22 65 6e 22 20 64 61 74 61 2d 6e 2d 68 65 61 64 3d 22 25 37 42 25 32 32 6c 61 6e 67 25 32 32 3a 25 37 42 25 32 32 73 73 72 25 32 32 3a 25 32 32 65 6e 25 32 32 25 37 44 25 37 44 22 3e 0a 20 20 3c 68 65 61 64 20 3e 0a 20 20 20 20 3c 6d 65 74 61 20 64 61 74 61 2d 6e 2d 68 65 61 64 3d 22 73 73 72 22 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 64 61 74 61 2d 6e 2d 68 65 61 64 3d 22 73 73 72 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d Data Ascii: f1b<!doctype html><html data-n-head-ssr lang="en" data-n-head="%7B%22lang%22:%7B%22ssr%22:%22en%22%7D%7D"> <head > <meta data-n-head="ssr" charset="utf-8"><meta data-n-head="ssr" name="viewport" content="width=device-width, initial-scale=1, minim
2024-05-25 22:59:59 UTC	1502	IN	Data Raw: 6e 64 21 20 3c 62 72 20 64 61 74 61 2d 76 2d 37 37 33 38 39 66 38 36 3e 0a 20 20 20 20 20 20 54 52 59 20 4f 55 52 20 3c 61 20 68 72 65 66 3d 22 2f 75 6e 64 65 66 69 6e 65 64 2f 22 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 2d 6c 69 6e 6b 22 20 64 61 74 61 2d 76 2d 37 37 33 38 39 66 38 36 3e 48 4f 4d 45 50 41 47 45 3c 2f 61 3e 3c 2f 70 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 73 65 63 74 69 6f 6e 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 5f 5f 4e 55 58 54 5f 5f 3d 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 72 65 74 75 72 6e 20 7b 6c 61 79 6f 75 74 3a 22 65 6d 70 74 79 22 2c 64 61 74 61 3a 5b 5d 2c 66 65 74 63 68 3a 7b 7d 2c 65 72 72 6f 72 3a 7b 73 74 61 74 75 73 43 6f 64 65 3a Data Ascii: nd! <br data-v-77389f86> TRY OUR <a href="/undefined/" class="error-link" data-v-77389f86>HOMEPAGE</a></p></div></div></section></div></div></div><script>window.__NUXT__=(function(a,b,c,d,e){return {layout:"empty",data:[],fetch:{},error:{statusCode:
2024-05-25 22:59:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.6	59096	18.239.83.100	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:00 UTC	603	OUT	GET /common/web_event/common/packages/spine/3.8/spine-player.css HTTP/1.1 Host: dl.dir.freefiremobile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.freefiremobile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:01 UTC	619	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 27593 Connection: close Server: OBS Date: Sat, 25 May 2024 22:34:42 GMT x-obs-request-id: 0000018FB1E45590980F126B11656E2D Accept-Ranges: bytes Last-Modified: Thu, 04 Aug 2022 12:29:58 GMT x-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSyjRQYDN0F1V4zt0kTKq2SVIo1qKGiu ETag: "ed806caac8c41b293af0b1ac29b06511" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 cf275c3404dbe6c17a831886bac6a64c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: UWTwECoA0vAop98duQFyjH0vrGogOVDIzlMkWWt_lX4EGFVgt9rBrA== Age: 1519 Vary: Origin
2024-05-25 23:00:01 UTC	15765	IN	Data Raw: 2f 2a 2a 20 50 6c 61 79 65 72 20 2a 2a 2f 0a 2e 73 70 69 6e 65 2d 70 6c 61 79 65 72 20 7b 0a 09 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 0a 2e 73 70 69 6e 65 2d 70 6c 61 79 65 72 20 2a 20 7b 0a 09 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 50 54 20 53 61 6e 73 22 2c 41 72 69 61 6c 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 48 65 6c 76 65 74 69 63 61 2c 54 61 68 6f 6d 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 0a 09 63 6f 6c 6f 72 3a 20 Data Ascii: / Player /.spine-player {box-sizing: border-box;width: 100%;height: 100%;background: none;position: relative;}.spine-player * {box-sizing: border-box;font-family: "PT Sans",Arial,"Helvetica Neue",Helvetica,Tahoma,sans-serif;color:
2024-05-25 23:00:01 UTC	11828	IN	Data Raw: 25 32 43 31 25 32 43 2e 32 37 25 32 43 31 2e 30 37 6c 2e 31 37 25 32 43 31 2e 35 36 61 2e 37 35 2e 37 35 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 2e 37 31 2e 35 39 25 32 43 31 38 2e 31 33 25 32 43 31 38 2e 31 33 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 33 2e 32 36 2d 2e 35 63 2e 32 37 2d 2e 30 39 2d 2e 32 39 2d 2e 37 38 2d 2e 35 33 2d 31 73 2d 2e 34 35 2d 2e 33 36 2d 2e 34 35 2d 2e 33 36 41 31 32 2e 37 38 25 32 43 31 32 2e 37 38 25 32 43 30 25 32 43 30 25 32 43 31 25 32 43 31 32 25 32 43 34 35 5a 25 32 32 25 32 46 25 33 45 25 33 43 25 32 46 67 25 33 45 25 33 43 25 32 46 73 76 67 25 33 45 22 29 0a 7d 0a 0a 2e 73 70 69 6e 65 2d 70 6c 61 79 65 72 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 2d 61 6e 69 6d 61 74 69 6f 6e 73 2d 73 65 6c 65 63 74 65 64 20 7b 0a Data Ascii: %2C1%2C.27%2C1.07l.17%2C1.56a.75.75%2C0%2C0%2C0%2C.71.59%2C18.13%2C18.13%2C0%2C0%2C0%2C3.26-.5c.27-.09-.29-.78-.53-1s-.45-.36-.45-.36A12.78%2C12.78%2C0%2C0%2C1%2C12%2C45Z%22%2F%3E%3C%2Fg%3E%3C%2Fsvg%3E")}.spine-player-button-icon-animations-selected {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.6	59092	18.239.83.100	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:00 UTC	598	OUT	GET /common/web_event/official2/dist/client/css/6786561.css HTTP/1.1 Host: dl.dir.freefiremobile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.freefiremobile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:01 UTC	693	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 11652 Connection: close Server: OBS Date: Sat, 25 May 2024 22:42:23 GMT x-obs-request-id: 0000018FB1EB5E6E980C04837DF11BB8 Content-MD5: hnXrDyfb7UHPcehcqb0sOg== x-obs-replication-status: REPLICA Accept-Ranges: bytes Last-Modified: Mon, 20 May 2024 03:27:21 GMT x-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSI45Xfl/ePngVEN2disoBepZBn4E6/Q ETag: "8675eb0f27dbed41cf71e85ca9bd2c3a" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 87e83cc6e8f384d40eab78133e901302.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: heBU-pCSXxZGch6_fvC4NG66uaIwwrDwGO76xB39F65qSqW6Ryg07A== Age: 1058 Vary: Origin
2024-05-25 23:00:01 UTC	11652	IN	Data Raw: 2e 6c 65 61 66 6c 65 74 2d 69 6d 61 67 65 2d 6c 61 79 65 72 2c 2e 6c 65 61 66 6c 65 74 2d 6c 61 79 65 72 2c 2e 6c 65 61 66 6c 65 74 2d 6d 61 72 6b 65 72 2d 69 63 6f 6e 2c 2e 6c 65 61 66 6c 65 74 2d 6d 61 72 6b 65 72 2d 73 68 61 64 6f 77 2c 2e 6c 65 61 66 6c 65 74 2d 70 61 6e 65 2c 2e 6c 65 61 66 6c 65 74 2d 70 61 6e 65 3e 63 61 6e 76 61 73 2c 2e 6c 65 61 66 6c 65 74 2d 70 61 6e 65 3e 73 76 67 2c 2e 6c 65 61 66 6c 65 74 2d 74 69 6c 65 2c 2e 6c 65 61 66 6c 65 74 2d 74 69 6c 65 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 6c 65 61 66 6c 65 74 2d 7a 6f 6f 6d 2d 62 6f 78 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 30 7d 2e 6c 65 61 66 6c 65 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d Data Ascii: .leaflet-image-layer,.leaflet-layer,.leaflet-marker-icon,.leaflet-marker-shadow,.leaflet-pane,.leaflet-pane>canvas,.leaflet-pane>svg,.leaflet-tile,.leaflet-tile-container,.leaflet-zoom-box{position:absolute;left:0;top:0}.leaflet-container{overflow:hidden}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.6	59095	18.239.83.100	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:00 UTC	598	OUT	GET /common/web_event/official2/dist/client/css/e845fbd.css HTTP/1.1 Host: dl.dir.freefiremobile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.freefiremobile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:01 UTC	694	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 244464 Connection: close Server: OBS Date: Sat, 25 May 2024 22:01:45 GMT x-obs-request-id: 0000018FB1C62BDA901D9298BC881A3C Content-MD5: 9L8HKOGI0LHX+EB60/b6zg== x-obs-replication-status: REPLICA Accept-Ranges: bytes Last-Modified: Mon, 20 May 2024 03:27:21 GMT x-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSApJOa+FBBypb0XSFY/YTNNWgNdS2IO ETag: "f4bf0728e188d0b1d7f8407ad3f6face" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1dd177f0f1668dc5abba6f90eb9da04c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: riMjBf1Hkdj0w9eQelfzZ5pCMTkBnVbTPjJPLNRhUyshIiaiNFhK2g== Age: 3496 Vary: Origin
2024-05-25 23:00:01 UTC	15690	IN	Data Raw: 2e 65 72 72 6f 72 5b 64 61 74 61 2d 76 2d 37 37 33 38 39 66 38 36 5d 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 3b 77 69 64 74 68 3a 31 30 30 76 77 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 64 6c 2e 64 69 72 2e 66 72 65 65 66 69 72 65 6d 6f 62 69 6c 65 2e 63 6f 6d 2f 63 6f 6d 6d 6f 6e 2f 77 65 62 5f 65 76 65 6e 74 2f 6f 66 66 69 63 69 61 6c 32 2f 64 69 73 74 2f 63 6c 69 65 6e 74 2f 69 6d 67 2f 65 72 72 6f 72 5f 62 67 2e 37 63 63 37 63 33 32 2e 6a 70 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 7d 2e Data Ascii: .error[data-v-77389f86]{position:fixed;top:0;left:0;z-index:1000;width:100vw;height:100vh;background-color:#000;background-image:url(https://dl.dir.freefiremobile.com/common/web_event/official2/dist/client/img/error_bg.7cc7c32.jpg);background-size:cover}.
2024-05-25 23:00:01 UTC	16384	IN	Data Raw: 6f 66 66 22 29 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 64 6c 2e 64 69 72 2e 66 72 65 65 66 69 72 65 6d 6f 62 69 6c 65 2e 63 6f 6d 2f 63 6f 6d 6d 6f 6e 2f 77 65 62 5f 65 76 65 6e 74 2f 63 6f 6d 6d 6f 6e 2f 66 6f 6e 74 73 2f 77 65 62 73 69 74 65 2f 7a 68 2f 63 38 34 66 34 36 30 30 65 30 63 39 35 63 30 63 65 34 63 36 36 37 64 31 36 66 65 65 30 32 32 36 2f 46 5a 4c 54 48 42 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 34 66 36 34 2c 55 2b 34 66 36 37 2c 55 2b 34 66 36 39 2c 55 2b 34 66 36 61 2c 55 2b 34 66 36 62 2c 55 2b 34 66 36 63 2c 55 2b 34 66 36 65 2c 55 2b 34 66 36 66 2c 55 2b 34 66 37 30 2c 55 2b 34 66 37 32 2c 55 2b 34 66 37 33 2c 55 2b 34 66 37 34 2c 55 2b 34 66 37 Data Ascii: off");src:url(https://dl.dir.freefiremobile.com/common/web_event/common/fonts/website/zh/c84f4600e0c95c0ce4c667d16fee0226/FZLTHB.woff2) format("woff2");unicode-range:U+4f64,U+4f67,U+4f69,U+4f6a,U+4f6b,U+4f6c,U+4f6e,U+4f6f,U+4f70,U+4f72,U+4f73,U+4f74,U+4f7
2024-05-25 23:00:01 UTC	16384	IN	Data Raw: 35 61 35 36 2c 55 2b 35 61 35 37 2c 55 2b 35 61 35 38 2c 55 2b 35 61 35 39 2c 55 2b 35 61 35 61 2c 55 2b 35 61 35 62 2c 55 2b 35 61 35 63 2c 55 2b 35 61 35 64 2c 55 2b 35 61 35 65 2c 55 2b 35 61 35 66 2c 55 2b 35 61 36 30 2c 55 2b 35 61 36 31 2c 55 2b 35 61 36 32 2c 55 2b 35 61 36 33 2c 55 2b 35 61 36 34 2c 55 2b 35 61 36 35 2c 55 2b 35 61 36 36 2c 55 2b 35 61 36 37 2c 55 2b 35 61 36 38 2c 55 2b 35 61 36 39 2c 55 2b 35 61 36 61 2c 55 2b 35 61 36 62 2c 55 2b 35 61 36 63 2c 55 2b 35 61 36 64 2c 55 2b 35 61 36 65 2c 55 2b 35 61 37 30 2c 55 2b 35 61 37 31 2c 55 2b 35 61 37 37 2c 55 2b 35 61 37 38 2c 55 2b 35 61 37 39 2c 55 2b 35 61 37 61 2c 55 2b 35 61 37 62 2c 55 2b 35 61 37 63 2c 55 2b 35 61 37 64 2c 55 2b 35 61 37 65 2c 55 2b 35 61 37 66 2c 55 2b 35 61 38 Data Ascii: 5a56,U+5a57,U+5a58,U+5a59,U+5a5a,U+5a5b,U+5a5c,U+5a5d,U+5a5e,U+5a5f,U+5a60,U+5a61,U+5a62,U+5a63,U+5a64,U+5a65,U+5a66,U+5a67,U+5a68,U+5a69,U+5a6a,U+5a6b,U+5a6c,U+5a6d,U+5a6e,U+5a70,U+5a71,U+5a77,U+5a78,U+5a79,U+5a7a,U+5a7b,U+5a7c,U+5a7d,U+5a7e,U+5a7f,U+5a8
2024-05-25 23:00:01 UTC	16384	IN	Data Raw: 36 35 33 64 2c 55 2b 36 35 33 65 2c 55 2b 36 35 33 66 2c 55 2b 36 35 34 31 2c 55 2b 36 35 34 33 2c 55 2b 36 35 34 35 2c 55 2b 36 35 34 36 2c 55 2b 36 35 34 38 2c 55 2b 36 35 34 39 2c 55 2b 36 35 34 61 2c 55 2b 36 35 34 64 2c 55 2b 36 35 34 66 2c 55 2b 36 35 35 31 2c 55 2b 36 35 35 33 2c 55 2b 36 35 35 34 2c 55 2b 36 35 35 35 2c 55 2b 36 35 35 36 2c 55 2b 36 35 35 37 2c 55 2b 36 35 35 38 2c 55 2b 36 35 35 39 2c 55 2b 36 35 35 63 2c 55 2b 36 35 35 64 2c 55 2b 36 35 35 65 2c 55 2b 36 35 35 66 2c 55 2b 36 35 36 32 2c 55 2b 36 35 36 33 2c 55 2b 36 35 36 34 2c 55 2b 36 35 36 35 2c 55 2b 36 35 36 36 2c 55 2b 36 35 36 37 2c 55 2b 36 35 36 38 2c 55 2b 36 35 36 61 2c 55 2b 36 35 36 62 2c 55 2b 36 35 36 63 2c 55 2b 36 35 36 64 2c 55 2b 36 35 36 66 2c 55 2b 36 35 37 Data Ascii: 653d,U+653e,U+653f,U+6541,U+6543,U+6545,U+6546,U+6548,U+6549,U+654a,U+654d,U+654f,U+6551,U+6553,U+6554,U+6555,U+6556,U+6557,U+6558,U+6559,U+655c,U+655d,U+655e,U+655f,U+6562,U+6563,U+6564,U+6565,U+6566,U+6567,U+6568,U+656a,U+656b,U+656c,U+656d,U+656f,U+657
2024-05-25 23:00:01 UTC	16384	IN	Data Raw: 36 66 64 39 2c 55 2b 36 66 64 61 2c 55 2b 36 66 64 62 2c 55 2b 36 66 64 63 2c 55 2b 36 66 64 64 2c 55 2b 36 66 64 65 2c 55 2b 36 66 64 66 2c 55 2b 36 66 65 30 2c 55 2b 36 66 65 31 2c 55 2b 36 66 65 32 2c 55 2b 36 66 65 33 2c 55 2b 36 66 65 34 2c 55 2b 36 66 65 36 2c 55 2b 36 66 65 37 2c 55 2b 36 66 65 38 2c 55 2b 36 66 65 39 2c 55 2b 36 66 65 62 2c 55 2b 36 66 65 63 2c 55 2b 36 66 65 64 2c 55 2b 36 66 65 65 2c 55 2b 36 66 65 66 2c 55 2b 36 66 66 30 2c 55 2b 36 66 66 31 2c 55 2b 36 66 66 32 2c 55 2b 36 66 66 34 2c 55 2b 36 66 66 36 2c 55 2b 36 66 66 37 2c 55 2b 36 66 66 38 2c 55 2b 36 66 66 61 2c 55 2b 36 66 66 62 2c 55 2b 36 66 66 63 2c 55 2b 36 66 66 65 2c 55 2b 36 66 66 66 2c 55 2b 37 30 30 30 2c 55 2b 37 30 30 31 2c 55 2b 37 30 30 33 2c 55 2b 37 30 30 Data Ascii: 6fd9,U+6fda,U+6fdb,U+6fdc,U+6fdd,U+6fde,U+6fdf,U+6fe0,U+6fe1,U+6fe2,U+6fe3,U+6fe4,U+6fe6,U+6fe7,U+6fe8,U+6fe9,U+6feb,U+6fec,U+6fed,U+6fee,U+6fef,U+6ff0,U+6ff1,U+6ff2,U+6ff4,U+6ff6,U+6ff7,U+6ff8,U+6ffa,U+6ffb,U+6ffc,U+6ffe,U+6fff,U+7000,U+7001,U+7003,U+700
2024-05-25 23:00:01 UTC	16384	IN	Data Raw: 32 32 2c 55 2b 37 61 32 36 2c 55 2b 37 61 32 38 2c 55 2b 37 61 32 61 2c 55 2b 37 61 32 62 2c 55 2b 37 61 32 63 2c 55 2b 37 61 32 64 2c 55 2b 37 61 32 65 2c 55 2b 37 61 32 66 2c 55 2b 37 61 33 30 2c 55 2b 37 61 33 31 2c 55 2b 37 61 33 32 2c 55 2b 37 61 33 37 2c 55 2b 37 61 33 39 2c 55 2b 37 61 33 61 2c 55 2b 37 61 33 62 2c 55 2b 37 61 33 63 2c 55 2b 37 61 33 64 2c 55 2b 37 61 33 65 2c 55 2b 37 61 33 66 2c 55 2b 37 61 34 30 2c 55 2b 37 61 34 33 2c 55 2b 37 61 34 34 2c 55 2b 37 61 34 35 2c 55 2b 37 61 34 36 2c 55 2b 37 61 34 37 2c 55 2b 37 61 34 38 2c 55 2b 37 61 34 39 2c 55 2b 37 61 34 61 2c 55 2b 37 61 34 62 2c 55 2b 37 61 34 63 2c 55 2b 37 61 34 64 2c 55 2b 37 61 34 65 2c 55 2b 37 61 35 34 2c 55 2b 37 61 35 36 2c 55 2b 37 61 35 37 2c 55 2b 37 61 35 38 2c Data Ascii: 22,U+7a26,U+7a28,U+7a2a,U+7a2b,U+7a2c,U+7a2d,U+7a2e,U+7a2f,U+7a30,U+7a31,U+7a32,U+7a37,U+7a39,U+7a3a,U+7a3b,U+7a3c,U+7a3d,U+7a3e,U+7a3f,U+7a40,U+7a43,U+7a44,U+7a45,U+7a46,U+7a47,U+7a48,U+7a49,U+7a4a,U+7a4b,U+7a4c,U+7a4d,U+7a4e,U+7a54,U+7a56,U+7a57,U+7a58,
2024-05-25 23:00:01 UTC	16384	IN	Data Raw: 34 61 2c 55 2b 38 35 34 62 2c 55 2b 38 35 34 63 2c 55 2b 38 35 34 64 2c 55 2b 38 35 34 65 2c 55 2b 38 35 35 31 2c 55 2b 38 35 35 32 2c 55 2b 38 35 35 33 2c 55 2b 38 35 35 34 2c 55 2b 38 35 35 35 2c 55 2b 38 35 35 36 2c 55 2b 38 35 35 37 2c 55 2b 38 35 35 38 2c 55 2b 38 35 35 39 2c 55 2b 38 35 35 61 2c 55 2b 38 35 35 62 2c 55 2b 38 35 35 64 2c 55 2b 38 35 35 65 2c 55 2b 38 35 35 66 2c 55 2b 38 35 36 30 2c 55 2b 38 35 36 31 2c 55 2b 38 35 36 32 2c 55 2b 38 35 36 33 2c 55 2b 38 35 36 34 2c 55 2b 38 35 36 35 2c 55 2b 38 35 36 36 2c 55 2b 38 35 36 37 2c 55 2b 38 35 36 38 2c 55 2b 38 35 36 39 2c 55 2b 38 35 36 61 2c 55 2b 38 35 36 62 2c 55 2b 38 35 36 63 2c 55 2b 38 35 36 64 2c 55 2b 38 35 36 65 2c 55 2b 38 35 36 66 2c 55 2b 38 35 37 30 2c 55 2b 38 35 37 31 2c Data Ascii: 4a,U+854b,U+854c,U+854d,U+854e,U+8551,U+8552,U+8553,U+8554,U+8555,U+8556,U+8557,U+8558,U+8559,U+855a,U+855b,U+855d,U+855e,U+855f,U+8560,U+8561,U+8562,U+8563,U+8564,U+8565,U+8566,U+8567,U+8568,U+8569,U+856a,U+856b,U+856c,U+856d,U+856e,U+856f,U+8570,U+8571,
2024-05-25 23:00:01 UTC	16384	IN	Data Raw: 61 33 2c 55 2b 39 30 61 35 2c 55 2b 39 30 61 36 2c 55 2b 39 30 61 37 2c 55 2b 39 30 61 38 2c 55 2b 39 30 61 61 2c 55 2b 39 30 61 65 2c 55 2b 39 30 61 66 2c 55 2b 39 30 62 30 2c 55 2b 39 30 62 31 2c 55 2b 39 30 62 32 2c 55 2b 39 30 62 33 2c 55 2b 39 30 62 34 2c 55 2b 39 30 62 35 2c 55 2b 39 30 62 36 2c 55 2b 39 30 62 38 2c 55 2b 39 30 62 62 2c 55 2b 39 30 62 64 2c 55 2b 39 30 62 65 2c 55 2b 39 30 62 66 2c 55 2b 39 30 63 31 2c 55 2b 39 30 63 33 2c 55 2b 39 30 63 34 2c 55 2b 39 30 63 35 2c 55 2b 39 30 63 37 2c 55 2b 39 30 63 38 2c 55 2b 39 30 63 61 2c 55 2b 39 30 63 62 2c 55 2b 39 30 63 65 2c 55 2b 39 30 64 34 2c 55 2b 39 30 64 35 2c 55 2b 39 30 64 36 2c 55 2b 39 30 64 37 2c 55 2b 39 30 64 38 2c 55 2b 39 30 64 39 2c 55 2b 39 30 64 61 2c 55 2b 39 30 64 62 2c Data Ascii: a3,U+90a5,U+90a6,U+90a7,U+90a8,U+90aa,U+90ae,U+90af,U+90b0,U+90b1,U+90b2,U+90b3,U+90b4,U+90b5,U+90b6,U+90b8,U+90bb,U+90bd,U+90be,U+90bf,U+90c1,U+90c3,U+90c4,U+90c5,U+90c7,U+90c8,U+90ca,U+90cb,U+90ce,U+90d4,U+90d5,U+90d6,U+90d7,U+90d8,U+90d9,U+90da,U+90db,
2024-05-25 23:00:01 UTC	16384	IN	Data Raw: 64 69 72 2e 66 72 65 65 66 69 72 65 6d 6f 62 69 6c 65 2e 63 6f 6d 2f 63 6f 6d 6d 6f 6e 2f 77 65 62 5f 65 76 65 6e 74 2f 63 6f 6d 6d 6f 6e 2f 66 6f 6e 74 73 2f 77 65 62 73 69 74 65 2f 7a 68 2f 38 32 31 63 64 35 31 33 35 31 39 66 34 31 30 39 38 30 64 32 36 36 65 66 66 31 36 65 30 65 32 66 2f 46 5a 4c 54 48 42 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 39 64 30 37 2c 55 2b 39 64 30 38 2c 55 2b 39 64 30 39 2c 55 2b 39 64 30 63 2c 55 2b 39 64 31 30 2c 55 2b 39 64 31 32 2c 55 2b 39 64 31 34 2c 55 2b 39 64 31 35 2c 55 2b 39 64 31 36 2c 55 2b 39 64 31 37 2c 55 2b 39 64 31 38 2c 55 2b 39 64 31 39 2c 55 2b 39 64 31 62 2c 55 2b 39 64 31 64 2c 55 2b 39 64 31 65 2c 55 2b 39 64 31 66 2c 55 2b Data Ascii: dir.freefiremobile.com/common/web_event/common/fonts/website/zh/821cd513519f410980d266eff16e0e2f/FZLTHB.woff2) format("woff2");unicode-range:U+9d07,U+9d08,U+9d09,U+9d0c,U+9d10,U+9d12,U+9d14,U+9d15,U+9d16,U+9d17,U+9d18,U+9d19,U+9d1b,U+9d1d,U+9d1e,U+9d1f,U+
2024-05-25 23:00:01 UTC	16384	IN	Data Raw: 2c 55 2b 65 36 33 31 2c 55 2b 65 36 33 32 2c 55 2b 65 36 33 33 2c 55 2b 65 36 33 34 2c 55 2b 65 36 33 35 2c 55 2b 65 36 33 36 2c 55 2b 65 36 33 37 2c 55 2b 65 36 33 38 2c 55 2b 65 36 33 39 2c 55 2b 65 36 33 61 2c 55 2b 65 36 33 62 2c 55 2b 65 36 33 63 2c 55 2b 65 36 33 64 2c 55 2b 65 36 33 65 2c 55 2b 65 36 33 66 2c 55 2b 65 36 34 30 2c 55 2b 65 36 34 31 2c 55 2b 65 36 34 32 2c 55 2b 65 36 34 33 2c 55 2b 65 36 34 34 2c 55 2b 65 36 34 35 2c 55 2b 65 36 34 36 2c 55 2b 65 36 34 37 2c 55 2b 65 36 34 38 2c 55 2b 65 36 34 39 2c 55 2b 65 36 34 61 2c 55 2b 65 36 34 62 2c 55 2b 65 36 34 63 2c 55 2b 65 36 34 64 2c 55 2b 65 36 34 65 2c 55 2b 65 36 34 66 2c 55 2b 65 36 35 30 2c 55 2b 65 36 35 31 2c 55 2b 65 36 35 32 2c 55 2b 65 36 35 33 2c 55 2b 65 36 35 34 2c 55 2b Data Ascii: ,U+e631,U+e632,U+e633,U+e634,U+e635,U+e636,U+e637,U+e638,U+e639,U+e63a,U+e63b,U+e63c,U+e63d,U+e63e,U+e63f,U+e640,U+e641,U+e642,U+e643,U+e644,U+e645,U+e646,U+e647,U+e648,U+e649,U+e64a,U+e64b,U+e64c,U+e64d,U+e64e,U+e64f,U+e650,U+e651,U+e652,U+e653,U+e654,U+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.6	59093	18.239.83.100	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:00 UTC	579	OUT	GET /common/web_event/official2/dist/client/16fa1dd.js HTTP/1.1 Host: dl.dir.freefiremobile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.freefiremobile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:01 UTC	699	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 6409 Connection: close Server: OBS Date: Sat, 25 May 2024 22:23:51 GMT x-obs-request-id: 0000018FB1DA689B941E0586D165B076 Content-MD5: C3CSiF2aUOUeMoscbnzd9g== x-obs-replication-status: REPLICA Accept-Ranges: bytes Last-Modified: Mon, 20 May 2024 03:27:21 GMT x-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSLyRyzipJZt1HlWJn2S2IPgwvxDyaBF ETag: "0b7092885d9a50e51e328b1c6e7cddf6" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ec87b0eaae98600539e64627bd582e82.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: XfyRvJYHaFZuDEQi4xcODOWAChUOlHxhVM2-0RjFTOsm_XWEnqFJ-Q== Age: 2170 Vary: Origin
2024-05-25 23:00:01 UTC	6396	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 66 6f 72 28 76 61 72 20 72 2c 63 2c 6e 3d 61 5b 30 5d 2c 62 3d 61 5b 31 5d 2c 6f 3d 61 5b 32 5d 2c 75 3d 30 2c 6c 3d 5b 5d 3b 75 3c 6e 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 63 3d 6e 5b 75 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 64 2c 63 29 26 26 64 5b 63 5d 26 26 6c 2e 70 75 73 68 28 64 5b 63 5d 5b 30 5d 29 2c 64 5b 63 5d 3d 30 3b 66 6f 72 28 72 20 69 6e 20 62 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 62 2c 72 29 26 26 28 65 5b 72 5d 3d 62 5b 72 5d 29 3b 66 6f 72 28 69 26 26 69 28 61 29 3b 6c 2e 6c 65 6e 67 74 68 3b 29 6c 2e 73 68 Data Ascii: !function(e){function a(a){for(var r,c,n=a[0],b=a[1],o=a[2],u=0,l=[];u<n.length;u++)c=n[u],Object.prototype.hasOwnProperty.call(d,c)&&d[c]&&l.push(d[c][0]),d[c]=0;for(r in b)Object.prototype.hasOwnProperty.call(b,r)&&(e[r]=b[r]);for(i&&i(a);l.length;)l.sh
2024-05-25 23:00:01 UTC	13	IN	Data Raw: 69 3d 6f 3b 74 28 29 7d 28 5b 5d 29 3b Data Ascii: i=o;t()}([]);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.6	59097	18.239.83.100	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:00 UTC	579	OUT	GET /common/web_event/official2/dist/client/b379205.js HTTP/1.1 Host: dl.dir.freefiremobile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.freefiremobile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:01 UTC	701	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 238768 Connection: close Server: OBS Date: Sat, 25 May 2024 22:16:45 GMT x-obs-request-id: 0000018FB1D3E6AB941D017728063301 Content-MD5: aKUcoc+6E9xRtQI9UnB+vA== x-obs-replication-status: REPLICA Accept-Ranges: bytes Last-Modified: Mon, 20 May 2024 03:27:21 GMT x-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCShpFe5DSyhkWrFaiItJW3jyLDoMvuZz ETag: "68a51ca1cfba13dc51b5023d52707ebc" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 06cdb267b93af0cbfcd6cc564136784a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: 1gikjRs0q9xj_UAlTgqqc0VY8wKrHBQpsmRF-TFrucRR3gTJUdJ64w== Age: 2596 Vary: Origin
2024-05-25 23:00:01 UTC	15683	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 4c 49 43 45 4e 53 45 53 20 2a 2f 0a 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 5d 2c 5b 2c 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 65 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 29 Data Ascii: /! For license information please see LICENSES /(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[4],[,,function(t,e,n){"use strict";n.r(e),function(t,n){var r=Object.freeze({});function o(t){return null==t}function i(t){return null!=t}function a(t)
2024-05-25 23:00:01 UTC	16384	IN	Data Raw: 6d 61 6c 69 7a 65 64 3d 6f 29 2c 56 28 6f 2c 22 24 73 74 61 62 6c 65 22 2c 61 29 2c 56 28 6f 2c 22 24 6b 65 79 22 2c 73 29 2c 56 28 6f 2c 22 24 68 61 73 4e 6f 72 6d 61 6c 22 2c 69 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 5f 65 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 6e 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 3a 6e 28 7b 7d 29 2c 65 3d 28 74 3d 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 3f 5b 74 5d 3a 68 65 28 74 29 29 26 26 74 5b 30 5d 3b 72 65 74 75 72 6e 20 74 26 26 28 21 65 7c 7c 31 3d 3d 3d 74 2e 6c 65 6e 67 74 68 26 26 65 2e 69 73 43 6f 6d 6d 65 6e Data Ascii: malized=o),V(o,"$stable",a),V(o,"$key",s),V(o,"$hasNormal",i),o}function _e(t,e,n){var r=function(){var t=arguments.length?n.apply(null,arguments):n({}),e=(t=t&&"object"==typeof t&&!Array.isArray(t)?[t]:he(t))&&t[0];return t&&(!e\|\|1===t.length&&e.isCommen
2024-05-25 23:00:01 UTC	16384	IN	Data Raw: 29 7b 76 61 72 20 65 3d 74 2e 24 6f 70 74 69 6f 6e 73 2c 6e 3d 65 2e 70 61 72 65 6e 74 3b 69 66 28 6e 26 26 21 65 2e 61 62 73 74 72 61 63 74 29 7b 66 6f 72 28 3b 6e 2e 24 6f 70 74 69 6f 6e 73 2e 61 62 73 74 72 61 63 74 26 26 6e 2e 24 70 61 72 65 6e 74 3b 29 6e 3d 6e 2e 24 70 61 72 65 6e 74 3b 6e 2e 24 63 68 69 6c 64 72 65 6e 2e 70 75 73 68 28 74 29 7d 74 2e 24 70 61 72 65 6e 74 3d 6e 2c 74 2e 24 72 6f 6f 74 3d 6e 3f 6e 2e 24 72 6f 6f 74 3a 74 2c 74 2e 24 63 68 69 6c 64 72 65 6e 3d 5b 5d 2c 74 2e 24 72 65 66 73 3d 7b 7d 2c 74 2e 5f 77 61 74 63 68 65 72 3d 6e 75 6c 6c 2c 74 2e 5f 69 6e 61 63 74 69 76 65 3d 6e 75 6c 6c 2c 74 2e 5f 64 69 72 65 63 74 49 6e 61 63 74 69 76 65 3d 21 31 2c 74 2e 5f 69 73 4d 6f 75 6e 74 65 64 3d 21 31 2c 74 2e 5f 69 73 44 65 73 74 Data Ascii: ){var e=t.$options,n=e.parent;if(n&&!e.abstract){for(;n.$options.abstract&&n.$parent;)n=n.$parent;n.$children.push(t)}t.$parent=n,t.$root=n?n.$root:t,t.$children=[],t.$refs={},t._watcher=null,t._inactive=null,t._directInactive=!1,t._isMounted=!1,t._isDest
2024-05-25 23:00:01 UTC	16384	IN	Data Raw: 6e 2e 72 65 70 6c 61 63 65 28 72 2c 22 20 22 29 3b 28 6e 3d 6e 2e 74 72 69 6d 28 29 29 3f 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 2c 6e 29 3a 74 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4a 72 28 74 29 7b 69 66 28 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 72 65 74 75 72 6e 21 31 21 3d 3d 74 2e 63 73 73 26 26 43 28 65 2c 58 72 28 74 2e 6e 61 6d 65 7c 7c 22 76 22 29 29 2c 43 28 65 2c 74 29 2c 65 7d 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 3f 58 72 28 74 29 3a 76 6f 69 64 20 30 7d 7d 76 61 72 20 58 72 3d 5f 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 7b 65 6e Data Ascii: n.replace(r," ");(n=n.trim())?t.setAttribute("class",n):t.removeAttribute("class")}}function Jr(t){if(t){if("object"==typeof t){var e={};return!1!==t.css&&C(e,Xr(t.name\|\|"v")),C(e,t),e}return"string"==typeof t?Xr(t):void 0}}var Xr=_((function(t){return{en
2024-05-25 23:00:01 UTC	16384	IN	Data Raw: 6f 70 74 69 6f 6e 73 2e 72 65 6e 64 65 72 7c 7c 28 74 2e 24 6f 70 74 69 6f 6e 73 2e 72 65 6e 64 65 72 3d 67 74 29 2c 73 6e 28 74 2c 22 62 65 66 6f 72 65 4d 6f 75 6e 74 22 29 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 5f 75 70 64 61 74 65 28 74 2e 5f 72 65 6e 64 65 72 28 29 2c 6e 29 7d 2c 6e 65 77 20 62 6e 28 74 2c 72 2c 24 2c 7b 62 65 66 6f 72 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 5f 69 73 4d 6f 75 6e 74 65 64 26 26 21 74 2e 5f 69 73 44 65 73 74 72 6f 79 65 64 26 26 73 6e 28 74 2c 22 62 65 66 6f 72 65 55 70 64 61 74 65 22 29 7d 7d 2c 21 30 29 2c 6e 3d 21 31 2c 6e 75 6c 6c 3d 3d 74 2e 24 76 6e 6f 64 65 26 26 28 74 2e 5f 69 73 4d 6f 75 6e 74 65 64 3d 21 30 2c 73 6e 28 74 2c 22 6d 6f 75 6e 74 65 64 22 29 29 2c 74 7d 28 74 68 69 73 2c 74 3d 74 26 Data Ascii: options.render\|\|(t.$options.render=gt),sn(t,"beforeMount"),r=function(){t._update(t._render(),n)},new bn(t,r,$,{before:function(){t._isMounted&&!t._isDestroyed&&sn(t,"beforeUpdate")}},!0),n=!1,null==t.$vnode&&(t._isMounted=!0,sn(t,"mounted")),t}(this,t=t&
2024-05-25 23:00:01 UTC	16384	IN	Data Raw: 3d 6e 2e 63 6f 6d 70 6c 65 74 69 6f 6e 3b 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 72 2e 74 79 70 65 29 7b 76 61 72 20 6f 3d 72 2e 61 72 67 3b 6b 28 6e 29 7d 72 65 74 75 72 6e 20 6f 7d 7d 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 69 6c 6c 65 67 61 6c 20 63 61 74 63 68 20 61 74 74 65 6d 70 74 22 29 7d 2c 64 65 6c 65 67 61 74 65 59 69 65 6c 64 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 64 65 6c 65 67 61 74 65 3d 7b 69 74 65 72 61 74 6f 72 3a 43 28 74 29 2c 72 65 73 75 6c 74 4e 61 6d 65 3a 6e 2c 6e 65 78 74 4c 6f 63 3a 72 7d 2c 22 6e 65 78 74 22 3d 3d 3d 74 68 69 73 2e 6d 65 74 68 6f 64 26 26 28 74 68 69 73 2e 61 72 67 3d 65 29 2c 76 7d 7d 2c 74 7d 28 74 2e 65 78 70 6f 72 74 73 29 3b 74 72 79 7b 72 65 67 65 Data Ascii: =n.completion;if("throw"===r.type){var o=r.arg;k(n)}return o}}throw new Error("illegal catch attempt")},delegateYield:function(t,n,r){return this.delegate={iterator:C(t),resultName:n,nextLoc:r},"next"===this.method&&(this.arg=e),v}},t}(t.exports);try{rege
2024-05-25 23:00:01 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 6f 2e 66 28 74 2c 65 2c 69 28 31 2c 6e 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 3d 6e 2c 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 2c 6f 3d 6e 28 39 29 2c 69 3d 6e 28 32 31 37 29 2c 61 3d 6e 28 31 36 33 29 2c 73 3d 6e 28 31 31 34 29 2c 75 3d 6e 28 32 31 38 29 2c 63 3d 6e 28 31 33 38 29 2c 66 3d 6e 28 31 34 30 29 2c 6c 3d 66 28 22 49 45 5f 50 52 4f 54 4f 22 29 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 3c 73 63 72 69 70 74 3e 22 2b 74 2b 22 3c 2f 22 2b 22 73 63 72 69 70 74 3e 22 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 77 72 69 74 65 28 68 28 22 22 29 29 2c 74 2e 63 Data Ascii: ){return o.f(t,e,i(1,n))}:function(t,e,n){return t[e]=n,t}},function(t,e,n){var r,o=n(9),i=n(217),a=n(163),s=n(114),u=n(218),c=n(138),f=n(140),l=f("IE_PROTO"),p=function(){},h=function(t){return"<script>"+t+"</"+"script>"},d=function(t){t.write(h("")),t.c
2024-05-25 23:00:01 UTC	16384	IN	Data Raw: 21 69 29 72 65 74 75 72 6e 3b 72 3d 69 2e 63 6f 6e 74 65 78 74 2e 63 6f 6d 6d 69 74 7d 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 3f 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 5b 72 5d 2e 63 6f 6e 63 61 74 28 65 29 29 3a 72 2e 61 70 70 6c 79 28 74 68 69 73 2e 24 73 74 6f 72 65 2c 5b 6f 5d 2e 63 6f 6e 63 61 74 28 65 29 29 7d 7d 29 29 2c 6e 7d 29 29 2c 78 3d 45 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 7b 7d 3b 72 65 74 75 72 6e 20 53 28 65 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 65 2e 6b 65 79 2c 6f 3d 65 2e 76 61 6c 3b 6f 3d 74 2b 6f 2c 6e 5b 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 74 7c 7c 41 28 74 68 69 73 2e 24 73 74 6f 72 65 2c 22 6d 61 Data Ascii: !i)return;r=i.context.commit}return"function"==typeof o?o.apply(this,[r].concat(e)):r.apply(this.$store,[o].concat(e))}})),n})),x=E((function(t,e){var n={};return S(e).forEach((function(e){var r=e.key,o=e.val;o=t+o,n[r]=function(){if(!t\|\|A(this.$store,"ma
2024-05-25 23:00:01 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 6e 28 34 32 29 2c 6f 3d 6e 28 33 33 37 29 2c 69 3d 6e 28 32 34 30 29 2c 61 3d 7b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 65 29 7b 21 72 2e 69 73 55 6e 64 65 66 69 6e 65 64 28 74 29 26 26 72 2e 69 73 55 6e 64 65 66 69 6e 65 64 28 74 5b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 5d 29 26 26 28 74 5b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 5d 3d 65 29 7d 76 61 72 20 75 2c 63 3d 7b 74 72 61 6e 73 69 74 69 6f 6e 61 6c 3a 7b 73 69 6c 65 6e 74 4a 53 4f 4e 50 61 72 73 69 6e 67 3a 21 30 2c 66 6f 72 63 65 64 4a 53 4f 4e 50 61 72 73 69 6e 67 3a 21 30 2c 63 Data Ascii: (function(e){var r=n(42),o=n(337),i=n(240),a={"Content-Type":"application/x-www-form-urlencoded"};function s(t,e){!r.isUndefined(t)&&r.isUndefined(t["Content-Type"])&&(t["Content-Type"]=e)}var u,c={transitional:{silentJSONParsing:!0,forcedJSONParsing:!0,c
2024-05-25 23:00:01 UTC	16384	IN	Data Raw: 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 72 65 70 6c 61 63 65 28 74 2c 22 22 29 2c 6e 3d 72 28 7b 7d 2c 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2e 73 74 61 74 65 29 3b 72 65 74 75 72 6e 20 6e 2e 6b 65 79 3d 6f 74 28 29 2c 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 6e 2c 22 22 2c 65 29 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 6f 70 73 74 61 74 65 22 2c 66 74 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 6f 70 73 74 61 74 65 22 2c 66 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 74 28 74 2c 65 2c 6e 2c 72 29 7b 69 66 28 74 2e 61 70 70 29 7b 76 61 72 20 6f 3d 74 2e 6f 70 74 69 6f 6e 73 2e 73 63 72 Data Ascii: .location.href.replace(t,""),n=r({},window.history.state);return n.key=ot(),window.history.replaceState(n,"",e),window.addEventListener("popstate",ft),function(){window.removeEventListener("popstate",ft)}}function ut(t,e,n,r){if(t.app){var o=t.options.scr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.6	59094	18.239.83.100	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:00 UTC	579	OUT	GET /common/web_event/official2/dist/client/c345ce3.js HTTP/1.1 Host: dl.dir.freefiremobile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.freefiremobile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:01 UTC	700	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 462373 Connection: close Server: OBS Date: Sat, 25 May 2024 22:56:56 GMT x-obs-request-id: 0000018FB1F8B06B901E60DB3D14B355 Content-MD5: 6/V5cmZzTUeyRV04nA8m5A== x-obs-replication-status: REPLICA Accept-Ranges: bytes Last-Modified: Mon, 20 May 2024 03:27:21 GMT x-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSl1fypylnnOFe3xTndeVM5YtsoKlLuq ETag: "ebf5797266734d47b2455d389c0f26e4" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 a44309111e5e1050ff485adaa4681ad0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: FH9JOdB58urtIOUkHaMwrivM9IOrmxnH4mC93U8TXPS3JPfDKFQAqw== Age: 185 Vary: Origin
2024-05-25 23:00:01 UTC	15684	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 4c 49 43 45 4e 53 45 53 20 2a 2f 0a 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 32 5d 2c 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 65 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 29 29 2c 6e 2e 64 28 65 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 29 29 2c 6e 2e 64 28 65 2c 22 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 29 29 2c 6e 2e 64 28 65 2c 22 63 22 2c 28 66 75 6e 63 Data Ascii: /! For license information please see LICENSES /(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[72],[function(t,e,n){"use strict";n.d(e,"b",(function(){return r})),n.d(e,"a",(function(){return o})),n.d(e,"e",(function(){return s})),n.d(e,"c",(func
2024-05-25 23:00:01 UTC	16384	IN	Data Raw: 45 50 53 47 3a 33 38 35 37 22 2c 70 72 6f 6a 65 63 74 69 6f 6e 3a 57 2c 74 72 61 6e 73 66 6f 72 6d 61 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 2e 35 2f 28 4d 61 74 68 2e 50 49 2a 57 2e 52 29 3b 72 65 74 75 72 6e 20 58 28 74 2c 2e 35 2c 2d 74 2c 2e 35 29 7d 28 29 7d 29 2c 59 3d 6e 28 7b 7d 2c 4a 2c 7b 63 6f 64 65 3a 22 45 50 53 47 3a 39 30 30 39 31 33 22 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 47 28 74 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 2c 73 2c 61 2c 75 3d 22 22 3b 66 6f 72 28 6e 3d 30 2c 72 3d Data Ascii: EPSG:3857",projection:W,transformation:function(){var t=.5/(Math.PI*W.R);return X(t,.5,-t,.5)}()}),Y=n({},J,{code:"EPSG:900913"});function G(t){return document.createElementNS("http://www.w3.org/2000/svg",t)}function K(t,e){var n,i,r,o,s,a,u="";for(n=0,r=
2024-05-25 23:00:01 UTC	16384	IN	Data Raw: 67 65 74 5a 6f 6f 6d 28 29 3e 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 61 78 5a 6f 6f 6d 29 3f 74 68 69 73 2e 73 65 74 5a 6f 6f 6d 28 74 29 3a 74 68 69 73 7d 2c 70 61 6e 49 6e 73 69 64 65 42 6f 75 6e 64 73 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 68 69 73 2e 5f 65 6e 66 6f 72 63 69 6e 67 42 6f 75 6e 64 73 3d 21 30 3b 76 61 72 20 6e 3d 74 68 69 73 2e 67 65 74 43 65 6e 74 65 72 28 29 2c 69 3d 74 68 69 73 2e 5f 6c 69 6d 69 74 43 65 6e 74 65 72 28 6e 2c 74 68 69 73 2e 5f 7a 6f 6f 6d 2c 44 28 74 29 29 3b 72 65 74 75 72 6e 20 6e 2e 65 71 75 61 6c 73 28 69 29 7c 7c 74 68 69 73 2e 70 61 6e 54 6f 28 69 2c 65 29 2c 74 68 69 73 2e 5f 65 6e 66 6f 72 63 69 6e 67 42 6f 75 6e 64 73 3d 21 31 2c 74 68 69 73 7d 2c 70 61 6e 49 6e 73 69 64 65 3a 66 75 6e 63 74 69 6f Data Ascii: getZoom()>this.options.maxZoom)?this.setZoom(t):this},panInsideBounds:function(t,e){this._enforcingBounds=!0;var n=this.getCenter(),i=this._limitCenter(n,this._zoom,D(t));return n.equals(i)\|\|this.panTo(i,e),this._enforcingBounds=!1,this},panInside:functio
2024-05-25 23:00:01 UTC	16384	IN	Data Raw: 6f 6e 41 64 64 28 74 29 2c 6e 3d 74 68 69 73 2e 67 65 74 50 6f 73 69 74 69 6f 6e 28 29 2c 69 3d 74 2e 5f 63 6f 6e 74 72 6f 6c 43 6f 72 6e 65 72 73 5b 6e 5d 3b 72 65 74 75 72 6e 20 67 65 28 65 2c 22 6c 65 61 66 6c 65 74 2d 63 6f 6e 74 72 6f 6c 22 29 2c 2d 31 21 3d 3d 6e 2e 69 6e 64 65 78 4f 66 28 22 62 6f 74 74 6f 6d 22 29 3f 69 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 69 2e 66 69 72 73 74 43 68 69 6c 64 29 3a 69 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2c 74 68 69 73 2e 5f 6d 61 70 2e 6f 6e 28 22 75 6e 6c 6f 61 64 22 2c 74 68 69 73 2e 72 65 6d 6f 76 65 2c 74 68 69 73 29 2c 74 68 69 73 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 6d 61 70 3f 28 66 65 28 74 68 69 73 2e 5f 63 6f 6e 74 61 69 6e Data Ascii: onAdd(t),n=this.getPosition(),i=t._controlCorners[n];return ge(e,"leaflet-control"),-1!==n.indexOf("bottom")?i.insertBefore(e,i.firstChild):i.appendChild(e),this._map.on("unload",this.remove,this),this},remove:function(){return this._map?(fe(this._contain
2024-05-25 23:00:01 UTC	16384	IN	Data Raw: 36 37 35 32 2e 33 31 34 32 34 35 31 37 39 2c 62 6f 75 6e 64 73 3a 6e 65 77 20 4e 28 5b 2d 32 30 30 33 37 35 30 38 2e 33 34 32 37 39 2c 2d 31 35 34 39 36 35 37 30 2e 37 33 39 37 32 5d 2c 5b 32 30 30 33 37 35 30 38 2e 33 34 32 37 39 2c 31 38 37 36 34 36 35 36 2e 32 33 31 33 38 5d 29 2c 70 72 6f 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 4d 61 74 68 2e 50 49 2f 31 38 30 2c 6e 3d 74 68 69 73 2e 52 2c 69 3d 74 2e 6c 61 74 2a 65 2c 72 3d 74 68 69 73 2e 52 5f 4d 49 4e 4f 52 2f 6e 2c 6f 3d 4d 61 74 68 2e 73 71 72 74 28 31 2d 72 2a 72 29 2c 73 3d 6f 2a 4d 61 74 68 2e 73 69 6e 28 69 29 2c 61 3d 4d 61 74 68 2e 74 61 6e 28 4d 61 74 68 2e 50 49 2f 34 2d 69 2f 32 29 2f 4d 61 74 68 2e 70 6f 77 28 28 31 2d 73 29 2f 28 31 2b 73 29 2c 6f 2f 32 29 Data Ascii: 6752.314245179,bounds:new N([-20037508.34279,-15496570.73972],[20037508.34279,18764656.23138]),project:function(t){var e=Math.PI/180,n=this.R,i=t.late,r=this.R_MINOR/n,o=Math.sqrt(1-rr),s=o*Math.sin(i),a=Math.tan(Math.PI/4-i/2)/Math.pow((1-s)/(1+s),o/2)
2024-05-25 23:00:01 UTC	16384	IN	Data Raw: 28 68 29 7c 7c 30 3d 3d 3d 68 29 26 26 28 68 3d 6f 2f 4d 61 74 68 2e 63 6f 73 28 4d 61 74 68 2e 50 49 2f 31 38 30 2a 65 29 29 2c 74 68 69 73 2e 5f 70 6f 69 6e 74 3d 75 2e 73 75 62 74 72 61 63 74 28 6e 2e 67 65 74 50 69 78 65 6c 4f 72 69 67 69 6e 28 29 29 2c 74 68 69 73 2e 5f 72 61 64 69 75 73 3d 69 73 4e 61 4e 28 68 29 3f 30 3a 75 2e 78 2d 6e 2e 70 72 6f 6a 65 63 74 28 5b 63 2c 74 2d 68 5d 29 2e 78 2c 74 68 69 73 2e 5f 72 61 64 69 75 73 59 3d 75 2e 79 2d 73 2e 79 7d 65 6c 73 65 7b 76 61 72 20 6c 3d 69 2e 75 6e 70 72 6f 6a 65 63 74 28 69 2e 70 72 6f 6a 65 63 74 28 74 68 69 73 2e 5f 6c 61 74 6c 6e 67 29 2e 73 75 62 74 72 61 63 74 28 5b 74 68 69 73 2e 5f 6d 52 61 64 69 75 73 2c 30 5d 29 29 3b 74 68 69 73 2e 5f 70 6f 69 6e 74 3d 6e 2e 6c 61 74 4c 6e 67 54 6f Data Ascii: (h)\|\|0===h)&&(h=o/Math.cos(Math.PI/180*e)),this._point=u.subtract(n.getPixelOrigin()),this._radius=isNaN(h)?0:u.x-n.project([c,t-h]).x,this._radiusY=u.y-s.y}else{var l=i.unproject(i.project(this._latlng).subtract([this._mRadius,0]));this._point=n.latLngTo
2024-05-25 23:00:01 UTC	16384	IN	Data Raw: 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 28 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 63 6c 6f 73 65 4f 6e 43 6c 69 63 6b 3f 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 63 6c 6f 73 65 4f 6e 43 6c 69 63 6b 3a 74 68 69 73 2e 5f 6d 61 70 2e 6f 70 74 69 6f 6e 73 2e 63 6c 6f 73 65 50 6f 70 75 70 4f 6e 43 6c 69 63 6b 29 26 26 28 74 2e 70 72 65 63 6c 69 63 6b 3d 74 68 69 73 2e 63 6c 6f 73 65 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6b 65 65 70 49 6e 56 69 65 77 26 26 28 74 2e 6d 6f 76 65 65 6e 64 3d 74 68 69 73 2e 5f 61 64 6a 75 73 74 50 61 6e 29 2c 74 7d 2c 5f 69 6e 69 74 4c 61 79 6f 75 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 22 6c 65 61 66 6c 65 74 2d 70 6f 70 75 70 22 2c 65 3d 74 68 69 73 2e 5f 63 6f 6e 74 61 69 Data Ascii: all(this);return(void 0!==this.options.closeOnClick?this.options.closeOnClick:this._map.options.closePopupOnClick)&&(t.preclick=this.close),this.options.keepInView&&(t.moveend=this._adjustPan),t},_initLayout:function(){var t="leaflet-popup",e=this._contai
2024-05-25 23:00:01 UTC	16384	IN	Data Raw: 2e 5f 6d 61 70 2e 77 72 61 70 4c 61 74 4c 6e 67 42 6f 75 6e 64 73 28 6e 29 29 2c 6e 7d 2c 5f 74 69 6c 65 43 6f 6f 72 64 73 54 6f 4b 65 79 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 78 2b 22 3a 22 2b 74 2e 79 2b 22 3a 22 2b 74 2e 7a 7d 2c 5f 6b 65 79 54 6f 54 69 6c 65 43 6f 6f 72 64 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 73 70 6c 69 74 28 22 3a 22 29 2c 6e 3d 6e 65 77 20 4d 28 2b 65 5b 30 5d 2c 2b 65 5b 31 5d 29 3b 72 65 74 75 72 6e 20 6e 2e 7a 3d 2b 65 5b 32 5d 2c 6e 7d 2c 5f 72 65 6d 6f 76 65 54 69 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 74 69 6c 65 73 5b 74 5d 3b 65 26 26 28 66 65 28 65 2e 65 6c 29 2c 64 65 6c 65 74 65 20 74 68 69 73 2e 5f 74 69 6c 65 73 5b 74 5d Data Ascii: ._map.wrapLatLngBounds(n)),n},_tileCoordsToKey:function(t){return t.x+":"+t.y+":"+t.z},_keyToTileCoords:function(t){var e=t.split(":"),n=new M(+e[0],+e[1]);return n.z=+e[2],n},_removeTile:function(t){var e=this._tiles[t];e&&(fe(e.el),delete this._tiles[t]
2024-05-25 23:00:01 UTC	16384	IN	Data Raw: 2e 66 69 6c 6c 52 75 6c 65 7c 7c 22 65 76 65 6e 6f 64 64 22 29 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 66 69 6c 6c 22 2c 22 6e 6f 6e 65 22 29 29 7d 2c 5f 75 70 64 61 74 65 50 6f 6c 79 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 68 69 73 2e 5f 73 65 74 50 61 74 68 28 74 2c 4b 28 74 2e 5f 70 61 72 74 73 2c 65 29 29 7d 2c 5f 75 70 64 61 74 65 43 69 72 63 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 5f 70 6f 69 6e 74 2c 6e 3d 4d 61 74 68 2e 6d 61 78 28 4d 61 74 68 2e 72 6f 75 6e 64 28 74 2e 5f 72 61 64 69 75 73 29 2c 31 29 2c 69 3d 22 61 22 2b 6e 2b 22 2c 22 2b 28 4d 61 74 68 2e 6d 61 78 28 4d 61 74 68 2e 72 6f 75 6e 64 28 74 2e 5f 72 61 64 69 75 73 59 29 2c 31 29 7c 7c 6e 29 2b 22 20 30 20 31 2c 30 20 22 2c 72 3d 74 Data Ascii: .fillRule\|\|"evenodd")):e.setAttribute("fill","none"))},_updatePoly:function(t,e){this._setPath(t,K(t._parts,e))},_updateCircle:function(t){var e=t._point,n=Math.max(Math.round(t._radius),1),i="a"+n+","+(Math.max(Math.round(t._radiusY),1)\|\|n)+" 0 1,0 ",r=t
2024-05-25 23:00:01 UTC	16384	IN	Data Raw: 6f 28 74 2c 22 45 72 72 6f 72 45 76 65 6e 74 22 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 29 7b 72 65 74 75 72 6e 20 6f 28 74 2c 22 44 4f 4d 45 72 72 6f 72 22 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 29 7b 72 65 74 75 72 6e 20 6f 28 74 2c 22 44 4f 4d 45 78 63 65 70 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 72 65 74 75 72 6e 20 6f 28 74 2c 22 53 74 72 69 6e 67 22 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 74 29 7b 72 65 74 75 72 6e 20 6f 28 74 2c 22 4f 62 6a 65 63 74 22 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 29 7b 72 65 74 Data Ascii: o(t,"ErrorEvent")}function a(t){return o(t,"DOMError")}function u(t){return o(t,"DOMException")}function c(t){return o(t,"String")}function h(t){return null===t\|\|"object"!=typeof t&&"function"!=typeof t}function l(t){return o(t,"Object")}function p(t){ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.6	59098	18.239.83.100	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:01 UTC	579	OUT	GET /common/web_event/official2/dist/client/5ef67ad.js HTTP/1.1 Host: dl.dir.freefiremobile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.freefiremobile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:02 UTC	701	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 109886 Connection: close Server: OBS Date: Sat, 25 May 2024 22:16:47 GMT x-obs-request-id: 0000018FB1D3EFFD941FC5030FDD60B3 Content-MD5: C2feJSjYR1iavDjWYrJV8w== x-obs-replication-status: REPLICA Accept-Ranges: bytes Last-Modified: Mon, 20 May 2024 03:27:21 GMT x-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSfBTSHRq3nye2UGC1RAQISMa9w8cIjb ETag: "0b67de2528d847589abc38d662b255f3" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 a44309111e5e1050ff485adaa4681ad0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: 2yBGgoesXfEqHUXITPyv483aMpImO2c_x3moz2dqkSDhYaKCDW0uCA== Age: 2595 Vary: Origin
2024-05-25 23:00:02 UTC	15683	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 5d 2c 7b 31 30 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 65 29 3b 76 61 72 20 72 3d 7b 6e 61 6d 65 3a 22 53 65 63 74 69 6f 6e 4d 6f 64 75 6c 65 22 2c 70 72 6f 70 73 3a 7b 74 79 70 65 3a 7b 74 79 70 65 3a 53 74 72 69 6e 67 2c 64 65 66 61 75 6c 74 3a 22 70 6f 6c 79 67 6f 6e 22 2c 76 61 6c 69 64 61 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 5b 22 70 6f 6c 79 67 6f 6e 22 2c 22 74 72 61 70 65 7a 6f 69 64 22 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3e 2d 31 7d 7d 2c 62 61 63 6b 67 72 6f 75 6e 64 3a 7b 74 79 70 65 3a 53 74 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[3],{108:function(t,e,n){"use strict";n.r(e);var r={name:"SectionModule",props:{type:{type:String,default:"polygon",validator:function(t){return["polygon","trapezoid"].indexOf(t)>-1}},background:{type:St
2024-05-25 23:00:02 UTC	16384	IN	Data Raw: 36 32 38 35 20 30 20 31 2e 32 35 30 32 56 31 30 2e 37 30 34 31 56 32 30 2e 31 35 37 39 43 30 20 32 30 2e 38 30 31 39 20 30 2e 32 35 30 38 37 37 20 32 31 2e 32 36 36 20 30 2e 36 37 37 33 36 37 20 32 31 2e 34 30 38 31 4c 31 30 2e 34 31 39 37 20 31 30 2e 37 30 34 31 4c 30 2e 37 31 30 38 31 37 20 30 5a 4d 32 2e 33 38 37 35 31 20 30 2e 35 33 35 32 30 34 4c 31 31 2e 30 32 31 38 20 31 30 2e 30 36 30 32 4c 31 33 2e 39 31 31 31 20 36 2e 38 38 36 35 36 4c 32 2e 33 38 37 35 31 20 30 2e 35 33 35 32 30 34 5a 4d 31 34 2e 37 36 38 33 20 37 2e 33 31 33 30 36 4c 31 31 2e 36 36 35 38 20 31 30 2e 37 30 34 31 4c 31 34 2e 37 36 38 33 20 31 34 2e 30 39 35 31 4c 31 39 2e 30 31 32 33 20 31 31 2e 37 37 34 35 43 31 39 2e 37 39 38 34 20 31 31 2e 33 34 38 20 32 30 2e 31 32 30 33 20 Data Ascii: 6285 0 1.2502V10.7041V20.1579C0 20.8019 0.250877 21.266 0.677367 21.4081L10.4197 10.7041L0.710817 0ZM2.38751 0.535204L11.0218 10.0602L13.9111 6.88656L2.38751 0.535204ZM14.7683 7.31306L11.6658 10.7041L14.7683 14.0951L19.0123 11.7745C19.7984 11.348 20.1203
2024-05-25 23:00:02 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 74 2e 68 61 6e 64 6c 65 47 41 28 22 63 6c 69 63 6b 5f 6c 6f 67 6f 5f 62 61 63 6b 5f 74 6f 5f 68 6f 6d 65 70 61 67 65 22 2c 22 73 75 63 63 65 73 73 22 29 7d 7d 7d 2c 5b 72 28 22 73 76 67 22 2c 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 22 73 76 67 2d 6c 6f 67 6f 20 64 65 73 6b 74 6f 70 22 2c 61 74 74 72 73 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 31 22 2c 69 64 3a 22 6c 6f 67 6f 22 2c 78 6d 6c 6e 73 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 22 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 22 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 35 37 31 2e 35 34 20 34 38 35 2e 39 39 22 7d 7d 2c 5b 72 28 22 67 22 2c 5b 72 Data Ascii: ){return t.handleGA("click_logo_back_to_homepage","success")}}},[r("svg",{staticClass:"svg-logo desktop",attrs:{version:"1.1",id:"logo",xmlns:"http://www.w3.org/2000/svg","xmlns:xlink":"http://www.w3.org/1999/xlink",viewBox:"0 0 571.54 485.99"}},[r("g",[r
2024-05-25 23:00:02 UTC	16384	IN	Data Raw: 5f 64 61 74 65 4c 61 73 74 45 72 72 6f 72 3d 68 2e 6e 75 78 74 2e 64 61 74 65 45 72 72 2c 74 68 69 73 2e 5f 68 61 64 45 72 72 6f 72 3d 42 6f 6f 6c 65 61 6e 28 68 2e 6e 75 78 74 2e 65 72 72 29 2c 6c 3d 5b 5d 2c 28 64 3d 4f 62 6a 65 63 74 28 73 2e 67 29 28 65 2c 6c 29 29 2e 6c 65 6e 67 74 68 29 7b 74 2e 6e 65 78 74 3d 32 37 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 31 35 2c 4f 2e 63 61 6c 6c 28 74 68 69 73 2c 64 2c 68 2e 63 6f 6e 74 65 78 74 29 3b 63 61 73 65 20 31 35 3a 69 66 28 21 69 29 7b 74 2e 6e 65 78 74 3d 31 37 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 74 2e 61 62 72 75 70 74 28 22 72 65 74 75 72 6e 22 29 3b 63 61 73 65 20 31 37 3a 72 65 74 75 72 6e 20 70 3d 28 63 2e 61 2e 6f 70 74 69 6f 6e 73 7c 7c 63 2e 61 29 2e 6c 61 79 6f 75 Data Ascii: _dateLastError=h.nuxt.dateErr,this._hadError=Boolean(h.nuxt.err),l=[],(d=Object(s.g)(e,l)).length){t.next=27;break}return t.next=15,O.call(this,d,h.context);case 15:if(!i){t.next=17;break}return t.abrupt("return");case 17:return p=(c.a.options\|\|c.a).layou
2024-05-25 23:00:02 UTC	16384	IN	Data Raw: 63 74 69 6f 6e 20 4d 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 2f 28 5b 2e 2b 2a 3f 3d 5e 21 3a 24 7b 7d 28 29 5b 5c 5d 7c 2f 5c 5c 5d 29 2f 67 2c 22 5c 5c 24 31 22 29 7d 66 75 6e 63 74 69 6f 6e 20 55 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 2f 28 5b 3d 21 3a 24 2f 28 29 5d 29 2f 67 2c 22 5c 5c 24 31 22 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 74 2e 73 65 6e 73 69 74 69 76 65 3f 22 22 3a 22 69 22 7d 66 75 6e 63 74 69 6f 6e 20 54 28 74 2c 65 2c 6e 29 7b 74 2e 24 6f 70 74 69 6f 6e 73 5b 65 5d 7c 7c 28 74 2e 24 6f 70 74 69 6f 6e 73 5b 65 5d 3d 5b 5d 29 2c 74 2e 24 6f 70 74 69 6f 6e 73 5b 65 5d 2e 69 6e 63 6c 75 64 65 73 28 6e 29 7c 7c 74 2e 24 6f 70 74 69 6f 6e 73 5b 65 5d 2e 70 Data Ascii: ction M(t){return t.replace(/([.+*?=^!:${}()[\]\|/\\])/g,"\\$1")}function U(t){return t.replace(/([=!:$/()])/g,"\\$1")}function F(t){return t&&t.sensitive?"":"i"}function T(t,e,n){t.$options[e]\|\|(t.$options[e]=[]),t.$options[e].includes(n)\|\|t.$options[e].p
2024-05-25 23:00:02 UTC	16384	IN	Data Raw: 7b 74 2e 73 6b 69 70 54 69 6d 65 72 43 6f 75 6e 74 3e 30 3f 74 2e 73 6b 69 70 54 69 6d 65 72 43 6f 75 6e 74 2d 2d 3a 28 74 2e 72 65 76 65 72 73 65 64 3f 74 2e 64 65 63 72 65 61 73 65 28 74 2e 5f 63 75 74 29 3a 74 2e 69 6e 63 72 65 61 73 65 28 74 2e 5f 63 75 74 29 2c 74 2e 63 6f 6e 74 69 6e 75 6f 75 73 26 26 28 74 2e 70 65 72 63 65 6e 74 3e 3d 31 30 30 7c 7c 74 2e 70 65 72 63 65 6e 74 3c 3d 30 29 26 26 28 74 2e 73 6b 69 70 54 69 6d 65 72 43 6f 75 6e 74 3d 31 2c 74 2e 72 65 76 65 72 73 65 64 3d 21 74 2e 72 65 76 65 72 73 65 64 29 29 7d 29 2c 31 30 30 29 7d 7d 2c 72 65 6e 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 28 21 31 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 68 6f 77 26 26 28 65 3d 74 28 22 64 69 76 22 2c 7b 73 74 61 74 69 Data Ascii: {t.skipTimerCount>0?t.skipTimerCount--:(t.reversed?t.decrease(t._cut):t.increase(t._cut),t.continuous&&(t.percent>=100\|\|t.percent<=0)&&(t.skipTimerCount=1,t.reversed=!t.reversed))}),100)}},render:function(t){var e=t(!1);return this.show&&(e=t("div",{stati
2024-05-25 23:00:02 UTC	12283	IN	Data Raw: 6e 74 73 29 7d 76 61 72 20 24 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 2e 61 70 70 2e 72 6f 75 74 65 72 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 3d 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 7c 7c 5b 5d 2c 65 28 22 67 74 61 67 22 2c 72 29 2c 72 28 22 6a 73 22 2c 6e 65 77 20 44 61 74 65 29 2c 72 28 22 63 6f 6e 66 69 67 22 2c 22 47 2d 4b 45 33 53 59 37 4d 52 53 44 22 2c 7b 61 6e 6f 6e 79 6d 69 7a 65 5f 69 70 3a 21 30 2c 73 65 6e 64 5f 70 61 67 65 5f 76 69 65 77 3a 21 30 2c 6c 69 6e 6b 65 72 3a 7b 64 6f 6d 61 69 6e 73 3a 5b 5d 7d 7d 29 2c 6e 2e 61 66 74 65 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e Data Ascii: nts)}var $e=function(t,e){var n=t.app.router;function r(){dataLayer.push(arguments)}window.dataLayer=window.dataLayer\|\|[],e("gtag",r),r("js",new Date),r("config","G-KE3SY7MRSD",{anonymize_ip:!0,send_page_view:!0,linker:{domains:[]}}),n.afterEach((function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.6	59099	18.239.83.100	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:01 UTC	655	OUT	GET /common/web_event/official2/dist/client/img/error_icon.1735f29.png HTTP/1.1 Host: dl.dir.freefiremobile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.freefiremobile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:02 UTC	670	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 7828 Connection: close Server: OBS Date: Sat, 25 May 2024 22:26:10 GMT x-obs-request-id: 0000018FB1DC843D90159748BC9F13F3 Content-MD5: 2cPHWSXgQRkT264OBmFjcw== x-obs-replication-status: REPLICA Accept-Ranges: bytes Last-Modified: Mon, 20 May 2024 03:27:21 GMT x-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSGA8rM1T5xKYPQ/363wM8ZMkdsxc26J ETag: "d9c3c75925e0411913dbae0e06616373" X-Cache: Hit from cloudfront Via: 1.1 ed993f97c00803491d1a75f41b21a784.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: DeN3Z6jk4E9HspAMmStEdu1R5CTak6nQ6hTYUCdWFtT7ZyDb-4n4YA== Age: 2032 Vary: Origin
2024-05-25 23:00:02 UTC	7828	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f9 00 00 00 e8 08 03 00 00 00 1a 1b b2 9c 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 03 00 50 4c 54 45 00 00 00 04 37 8f 03 03 06 02 02 07 02 02 07 02 02 07 03 03 06 03 03 07 02 02 06 00 22 58 02 02 06 03 03 06 11 44 99 00 00 00 00 00 07 03 03 06 03 36 8e 00 34 8e 03 36 8e 02 02 06 03 03 07 03 35 8e 03 35 8e 1c 4f a2 03 35 8e 03 35 8e 00 36 8d 2f 65 b1 02 35 8e 03 35 8e 02 02 05 03 36 8e 00 00 08 5c 93 cb 07 3a 91 05 38 8f 03 35 8e 03 37 8f 02 35 8e 02 35 8d 06 05 07 03 03 07 04 04 06 04 04 07 02 02 06 02 02 05 03 03 07 02 02 06 e7 ef f8 03 35 8e 73 9b cc cc dd ef 02 02 06 1f 54 a6 61 98 ce 00 36 8d da e7 f4 1e 1c 21 38 6c b5 21 50 a1 9a b4 d8 0e 41 Data Ascii: PNGIHDRgAMAasRGBPLTE7"XD64655O556/e556\:857555sTa6!8l!PA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.6	59101	18.239.83.100	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:02 UTC	588	OUT	GET /common/web_event/common/packages/spine/3.8/spine-player.js HTTP/1.1 Host: dl.dir.freefiremobile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.freefiremobile.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:02 UTC	635	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 475015 Connection: close Server: OBS Date: Sat, 25 May 2024 22:52:54 GMT x-obs-request-id: 0000018FB1F4FDBF980D30C3BFE88B8F Accept-Ranges: bytes Last-Modified: Thu, 04 Aug 2022 12:29:58 GMT x-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSVvzIC2vMtdCDrBjI95G3RO0g24Vx4G ETag: "01696dcc53e033381cfc43da9565bf9e" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 416dae0837568c2bb7cea7ae5c6bba22.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: brJoL67x3H33fJ5Ue5nJcOrMPVDeXWZnl23NlDq_cNu2mJ8HbSRruA== Age: 427 Vary: Origin
2024-05-25 23:00:02 UTC	15749	IN	Data Raw: 76 61 72 20 5f 5f 65 78 74 65 6e 64 73 20 3d 20 28 74 68 69 73 20 26 26 20 74 68 69 73 2e 5f 5f 65 78 74 65 6e 64 73 29 20 7c 7c 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 76 61 72 20 65 78 74 65 6e 64 53 74 61 74 69 63 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 64 2c 20 62 29 20 7b 0a 09 09 65 78 74 65 6e 64 53 74 61 74 69 63 73 20 3d 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 20 7c 7c 0a 09 09 09 28 7b 20 5f 5f 70 72 6f 74 6f 5f 5f 3a 20 5b 5d 20 7d 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 20 26 26 20 66 75 6e 63 74 69 6f 6e 20 28 64 2c 20 62 29 20 7b 20 64 2e 5f 5f 70 72 6f 74 6f 5f 5f 20 3d 20 62 3b 20 7d 29 20 7c 7c 0a 09 09 09 66 75 6e 63 74 69 6f 6e 20 28 64 2c 20 62 29 20 7b 20 66 6f 72 20 28 76 61 72 20 70 Data Ascii: var __extends = (this && this.__extends) \|\| (function () {var extendStatics = function (d, b) {extendStatics = Object.setPrototypeOf \|\|({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) \|\|function (d, b) { for (var p
2024-05-25 23:00:02 UTC	16384	IN	Data Raw: 74 68 2e 61 62 73 28 62 6f 6e 65 2e 64 61 74 61 2e 73 63 61 6c 65 59 29 20 2a 20 62 79 29 20 2a 20 61 6c 70 68 61 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 3b 0a 09 09 72 65 74 75 72 6e 20 53 63 61 6c 65 54 69 6d 65 6c 69 6e 65 3b 0a 09 7d 28 54 72 61 6e 73 6c 61 74 65 54 69 6d 65 6c 69 6e 65 29 29 3b 0a 09 73 70 69 6e 65 2e 53 63 61 6c 65 54 69 6d 65 6c 69 6e 65 20 3d 20 53 63 61 6c 65 54 69 6d 65 6c 69 6e 65 3b 0a 09 76 61 72 20 53 68 65 61 72 54 69 6d 65 6c 69 6e 65 20 3d 20 28 66 75 6e 63 74 69 6f 6e 20 28 5f 73 75 70 65 72 29 20 7b 0a 09 09 5f 5f 65 78 74 65 6e 64 73 28 53 68 65 61 72 54 69 6d 65 6c 69 6e 65 2c 20 5f 73 75 70 65 72 29 3b 0a 09 09 66 75 6e 63 74 69 6f 6e 20 53 68 65 61 72 54 69 6d 65 6c 69 6e 65 28 66 72 61 Data Ascii: th.abs(bone.data.scaleY) * by) * alpha;}}}};return ScaleTimeline;}(TranslateTimeline));spine.ScaleTimeline = ScaleTimeline;var ShearTimeline = (function (_super) {__extends(ShearTimeline, _super);function ShearTimeline(fra
2024-05-25 23:00:02 UTC	16384	IN	Data Raw: 6e 64 29 20 7b 0a 09 09 09 09 09 63 61 73 65 20 4d 69 78 42 6c 65 6e 64 2e 73 65 74 75 70 3a 20 7b 0a 09 09 09 09 09 09 76 61 72 20 76 65 72 74 65 78 41 74 74 61 63 68 6d 65 6e 74 5f 32 20 3d 20 73 6c 6f 74 41 74 74 61 63 68 6d 65 6e 74 3b 0a 09 09 09 09 09 09 69 66 20 28 76 65 72 74 65 78 41 74 74 61 63 68 6d 65 6e 74 5f 32 2e 62 6f 6e 65 73 20 3d 3d 20 6e 75 6c 6c 29 20 7b 0a 09 09 09 09 09 09 09 76 61 72 20 73 65 74 75 70 56 65 72 74 69 63 65 73 20 3d 20 76 65 72 74 65 78 41 74 74 61 63 68 6d 65 6e 74 5f 32 2e 76 65 72 74 69 63 65 73 3b 0a 09 09 09 09 09 09 09 66 6f 72 20 28 76 61 72 20 69 5f 31 31 20 3d 20 30 3b 20 69 5f 31 31 20 3c 20 76 65 72 74 65 78 43 6f 75 6e 74 3b 20 69 5f 31 31 2b 2b 29 20 7b 0a 09 09 09 09 09 09 09 09 76 61 72 20 70 72 65 76 Data Ascii: nd) {case MixBlend.setup: {var vertexAttachment_2 = slotAttachment;if (vertexAttachment_2.bones == null) {var setupVertices = vertexAttachment_2.vertices;for (var i_11 = 0; i_11 < vertexCount; i_11++) {var prev
2024-05-25 23:00:02 UTC	16384	IN	Data Raw: 61 69 6e 74 2e 64 61 74 61 2e 70 6f 73 69 74 69 6f 6e 3b 0a 09 09 09 09 09 09 72 65 74 75 72 6e 3b 0a 09 09 09 09 09 63 61 73 65 20 4d 69 78 42 6c 65 6e 64 2e 66 69 72 73 74 3a 0a 09 09 09 09 09 09 63 6f 6e 73 74 72 61 69 6e 74 2e 70 6f 73 69 74 69 6f 6e 20 2b 3d 20 28 63 6f 6e 73 74 72 61 69 6e 74 2e 64 61 74 61 2e 70 6f 73 69 74 69 6f 6e 20 2d 20 63 6f 6e 73 74 72 61 69 6e 74 2e 70 6f 73 69 74 69 6f 6e 29 20 2a 20 61 6c 70 68 61 3b 0a 09 09 09 09 7d 0a 09 09 09 09 72 65 74 75 72 6e 3b 0a 09 09 09 7d 0a 09 09 09 76 61 72 20 70 6f 73 69 74 69 6f 6e 20 3d 20 30 3b 0a 09 09 09 69 66 20 28 74 69 6d 65 20 3e 3d 20 66 72 61 6d 65 73 5b 66 72 61 6d 65 73 2e 6c 65 6e 67 74 68 20 2d 20 50 61 74 68 43 6f 6e 73 74 72 61 69 6e 74 50 6f 73 69 74 69 6f 6e 54 69 6d 65 Data Ascii: aint.data.position;return;case MixBlend.first:constraint.position += (constraint.data.position - constraint.position) * alpha;}return;}var position = 0;if (time >= frames[frames.length - PathConstraintPositionTime
2024-05-25 23:00:02 UTC	16384	IN	Data Raw: 65 74 41 74 74 61 63 68 6d 65 6e 74 28 73 6b 65 6c 65 74 6f 6e 2c 20 73 6c 6f 74 2c 20 74 69 6d 65 6c 69 6e 65 2e 61 74 74 61 63 68 6d 65 6e 74 4e 61 6d 65 73 5b 66 72 61 6d 65 49 6e 64 65 78 5d 2c 20 61 74 74 61 63 68 6d 65 6e 74 73 29 3b 0a 09 09 09 7d 0a 09 09 09 69 66 20 28 73 6c 6f 74 2e 61 74 74 61 63 68 6d 65 6e 74 53 74 61 74 65 20 3c 3d 20 74 68 69 73 2e 75 6e 6b 65 79 65 64 53 74 61 74 65 29 0a 09 09 09 09 73 6c 6f 74 2e 61 74 74 61 63 68 6d 65 6e 74 53 74 61 74 65 20 3d 20 74 68 69 73 2e 75 6e 6b 65 79 65 64 53 74 61 74 65 20 2b 20 41 6e 69 6d 61 74 69 6f 6e 53 74 61 74 65 2e 53 45 54 55 50 3b 0a 09 09 7d 3b 0a 09 09 41 6e 69 6d 61 74 69 6f 6e 53 74 61 74 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 61 63 68 6d 65 6e 74 20 3d 20 66 75 Data Ascii: etAttachment(skeleton, slot, timeline.attachmentNames[frameIndex], attachments);}if (slot.attachmentState <= this.unkeyedState)slot.attachmentState = this.unkeyedState + AnimationState.SETUP;};AnimationState.prototype.setAttachment = fu
2024-05-25 23:00:02 UTC	16384	IN	Data Raw: 72 2e 65 6e 64 29 0a 09 09 09 09 09 09 09 65 6e 74 72 79 2e 6c 69 73 74 65 6e 65 72 2e 65 6e 64 28 65 6e 74 72 79 29 3b 0a 09 09 09 09 09 09 66 6f 72 20 28 76 61 72 20 69 69 20 3d 20 30 3b 20 69 69 20 3c 20 6c 69 73 74 65 6e 65 72 73 2e 6c 65 6e 67 74 68 3b 20 69 69 2b 2b 29 0a 09 09 09 09 09 09 09 69 66 20 28 6c 69 73 74 65 6e 65 72 73 5b 69 69 5d 2e 65 6e 64 29 0a 09 09 09 09 09 09 09 09 6c 69 73 74 65 6e 65 72 73 5b 69 69 5d 2e 65 6e 64 28 65 6e 74 72 79 29 3b 0a 09 09 09 09 09 63 61 73 65 20 45 76 65 6e 74 54 79 70 65 2e 64 69 73 70 6f 73 65 3a 0a 09 09 09 09 09 09 69 66 20 28 65 6e 74 72 79 2e 6c 69 73 74 65 6e 65 72 20 21 3d 20 6e 75 6c 6c 20 26 26 20 65 6e 74 72 79 2e 6c 69 73 74 65 6e 65 72 2e 64 69 73 70 6f 73 65 29 0a 09 09 09 09 09 09 09 65 6e Data Ascii: r.end)entry.listener.end(entry);for (var ii = 0; ii < listeners.length; ii++)if (listeners[ii].end)listeners[ii].end(entry);case EventType.dispose:if (entry.listener != null && entry.listener.dispose)en
2024-05-25 23:00:02 UTC	16384	IN	Data Raw: 73 2e 63 6f 73 44 65 67 28 72 6f 74 61 74 69 6f 6e 20 2b 20 73 68 65 61 72 58 29 20 2a 20 73 63 61 6c 65 58 3b 0a 09 09 09 09 09 74 68 69 73 2e 62 20 3d 20 73 70 69 6e 65 2e 4d 61 74 68 55 74 69 6c 73 2e 63 6f 73 44 65 67 28 72 6f 74 61 74 69 6f 6e 59 29 20 2a 20 73 63 61 6c 65 59 3b 0a 09 09 09 09 09 74 68 69 73 2e 63 20 3d 20 73 70 69 6e 65 2e 4d 61 74 68 55 74 69 6c 73 2e 73 69 6e 44 65 67 28 72 6f 74 61 74 69 6f 6e 20 2b 20 73 68 65 61 72 58 29 20 2a 20 73 63 61 6c 65 58 3b 0a 09 09 09 09 09 74 68 69 73 2e 64 20 3d 20 73 70 69 6e 65 2e 4d 61 74 68 55 74 69 6c 73 2e 73 69 6e 44 65 67 28 72 6f 74 61 74 69 6f 6e 59 29 20 2a 20 73 63 61 6c 65 59 3b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 09 63 61 73 65 20 73 70 69 6e 65 2e 54 72 Data Ascii: s.cosDeg(rotation + shearX) * scaleX;this.b = spine.MathUtils.cosDeg(rotationY) * scaleY;this.c = spine.MathUtils.sinDeg(rotation + shearX) * scaleX;this.d = spine.MathUtils.sinDeg(rotationY) * scaleY;break;}case spine.Tr
2024-05-25 23:00:02 UTC	16384	IN	Data Raw: 61 69 6e 74 44 61 74 61 3b 0a 7d 29 28 73 70 69 6e 65 20 7c 7c 20 28 73 70 69 6e 65 20 3d 20 7b 7d 29 29 3b 0a 76 61 72 20 73 70 69 6e 65 3b 0a 28 66 75 6e 63 74 69 6f 6e 20 28 73 70 69 6e 65 29 20 7b 0a 09 76 61 72 20 50 61 74 68 43 6f 6e 73 74 72 61 69 6e 74 20 3d 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 09 66 75 6e 63 74 69 6f 6e 20 50 61 74 68 43 6f 6e 73 74 72 61 69 6e 74 28 64 61 74 61 2c 20 73 6b 65 6c 65 74 6f 6e 29 20 7b 0a 09 09 09 74 68 69 73 2e 70 6f 73 69 74 69 6f 6e 20 3d 20 30 3b 0a 09 09 09 74 68 69 73 2e 73 70 61 63 69 6e 67 20 3d 20 30 3b 0a 09 09 09 74 68 69 73 2e 72 6f 74 61 74 65 4d 69 78 20 3d 20 30 3b 0a 09 09 09 74 68 69 73 2e 74 72 61 6e 73 6c 61 74 65 4d 69 78 20 3d 20 30 3b 0a 09 09 09 74 68 69 73 2e 73 70 61 63 65 73 Data Ascii: aintData;})(spine \|\| (spine = {}));var spine;(function (spine) {var PathConstraint = (function () {function PathConstraint(data, skeleton) {this.position = 0;this.spacing = 0;this.rotateMix = 0;this.translateMix = 0;this.spaces
2024-05-25 23:00:02 UTC	16384	IN	Data Raw: 21 74 68 69 73 2e 71 75 65 75 65 41 73 73 65 74 28 63 6c 69 65 6e 74 49 64 2c 20 6e 75 6c 6c 2c 20 70 61 74 68 29 29 0a 09 09 09 09 72 65 74 75 72 6e 3b 0a 09 09 09 76 61 72 20 72 65 71 75 65 73 74 20 3d 20 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 3b 0a 09 09 09 72 65 71 75 65 73 74 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 22 74 65 78 74 2f 68 74 6d 6c 22 29 3b 0a 09 09 09 72 65 71 75 65 73 74 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 09 09 09 69 66 20 28 72 65 71 75 65 73 74 2e 72 65 61 64 79 53 74 61 74 65 20 3d 3d 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2e 44 4f 4e 45 29 20 7b 0a 09 09 09 09 09 69 66 20 28 72 65 71 75 65 73 74 2e 73 74 61 74 75 73 Data Ascii: !this.queueAsset(clientId, null, path))return;var request = new XMLHttpRequest();request.overrideMimeType("text/html");request.onreadystatechange = function () {if (request.readyState == XMLHttpRequest.DONE) {if (request.status
2024-05-25 23:00:02 UTC	16384	IN	Data Raw: 65 74 75 72 6e 20 61 74 74 61 63 68 6d 65 6e 74 3b 0a 09 09 09 7d 0a 09 09 09 69 66 20 28 74 68 69 73 2e 64 61 74 61 2e 64 65 66 61 75 6c 74 53 6b 69 6e 20 21 3d 20 6e 75 6c 6c 29 0a 09 09 09 09 72 65 74 75 72 6e 20 74 68 69 73 2e 64 61 74 61 2e 64 65 66 61 75 6c 74 53 6b 69 6e 2e 67 65 74 41 74 74 61 63 68 6d 65 6e 74 28 73 6c 6f 74 49 6e 64 65 78 2c 20 61 74 74 61 63 68 6d 65 6e 74 4e 61 6d 65 29 3b 0a 09 09 09 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0a 09 09 7d 3b 0a 09 09 53 6b 65 6c 65 74 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 61 63 68 6d 65 6e 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 73 6c 6f 74 4e 61 6d 65 2c 20 61 74 74 61 63 68 6d 65 6e 74 4e 61 6d 65 29 20 7b 0a 09 09 09 69 66 20 28 73 6c 6f 74 4e 61 6d 65 20 3d 3d 20 6e 75 6c 6c Data Ascii: eturn attachment;}if (this.data.defaultSkin != null)return this.data.defaultSkin.getAttachment(slotIndex, attachmentName);return null;};Skeleton.prototype.setAttachment = function (slotName, attachmentName) {if (slotName == null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.6	59100	18.239.83.100	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:02 UTC	710	OUT	GET /common/web_event/official2/dist/client/img/error_bg.7cc7c32.jpg HTTP/1.1 Host: dl.dir.freefiremobile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dl.dir.freefiremobile.com/common/web_event/official2/dist/client/css/e845fbd.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:02 UTC	662	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 80235 Connection: close Server: OBS Date: Sat, 25 May 2024 23:00:02 GMT x-obs-request-id: 0000018FB1FB87E29811248EA7702236 Content-MD5: roEEYrOc8/0k5JrYnphzJg== x-obs-replication-status: REPLICA Accept-Ranges: bytes Last-Modified: Mon, 20 May 2024 03:27:21 GMT x-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSybKEhsDyqismhWs5fS9R+thr+6pH1R ETag: "ae810462b39cf3fd24e49ad89e987326" X-Cache: Miss from cloudfront Via: 1.1 4a345f25fcb995602afaf132ccf353de.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: jlXXTbFpbdhJ6Hq1rKSti6uijkJGhqIUj4EcmNtUnMk8ycxI4slpRw== Vary: Origin
2024-05-25 23:00:02 UTC	8949	IN	Data Raw: ff d8 ff db 00 84 00 08 06 06 06 06 06 08 06 06 08 0c 08 07 08 0c 0e 0a 08 08 0a 0e 10 0d 0d 0e 0d 0d 10 11 0c 0e 0d 0d 0e 0c 11 0f 12 13 14 13 12 0f 18 18 1a 1a 18 18 23 22 22 22 23 27 27 27 27 27 27 27 27 27 27 01 09 08 08 09 0a 09 0b 09 09 0b 0e 0b 0d 0b 0e 11 0e 0e 0e 0e 11 13 0d 0d 0e 0d 0d 13 18 11 0f 0f 0f 0f 11 18 16 17 14 14 14 17 16 1a 1a 18 18 1a 1a 21 21 20 21 21 27 27 27 27 27 27 27 27 27 27 ff dd 00 04 00 5a ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff c0 00 11 08 03 84 05 a0 03 00 22 00 01 11 01 02 11 01 ff c4 00 cd 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 10 00 02 01 02 03 05 02 09 05 0c 06 08 05 05 00 03 00 01 02 03 11 04 12 Data Ascii: #"""#''''''''''!! !!''''''''''ZAdobed"
2024-05-25 23:00:02 UTC	12792	IN	Data Raw: 29 e1 6a 64 a7 29 c7 35 dc af 64 69 63 61 6a dc e3 4b 5d cf 3c e7 18 e8 da b7 a5 73 3c d2 4d b4 8f 45 86 d8 14 aa e1 e1 5e ae 3a 9d 35 28 67 71 6d 5d 77 71 3a 2b c0 1a 94 71 b0 c2 e2 71 94 61 99 5e f7 d6 de 86 6e a3 e0 6e cd 75 e7 42 a6 d3 8c 54 39 a6 84 bc 46 1d 2c b8 95 ce d4 73 68 71 9e 2a b5 15 37 17 75 b7 d3 5d 8f 1d b4 70 f8 7c 3d 6c 94 2a aa b1 49 78 eb a9 cb a9 24 e4 77 fc 23 d9 f8 4d 97 8b 78 7c 26 25 62 60 92 6e 6b ab e5 a1 e5 31 58 87 07 64 f5 67 6c cb 22 95 da 6a ed e8 75 82 72 a4 b5 ee 68 95 78 c1 59 6a cc b2 a9 99 dd a3 2b aa e5 ab 61 9f bc f3 ca 56 7a e1 87 95 1a a2 fb 8e b6 13 17 bb 4a d4 94 ac b9 a3 83 1a 8b bc ec 60 f6 82 a3 1b 2a 59 b4 b6 aa e7 1c 5d 56 d7 f4 3b e1 2a 7b d7 d4 eb e1 76 b6 2a 8c 32 d3 a3 1e 3a 37 1d 43 1b b4 76 8e 2a 09 Data Ascii: )jd)5dicajK]<s<ME^:5(gqm]wq:+qqa^nnuBT9F,shq7u]p\|=lIx$w#Mx\|&%b`nk1Xdgl"jurhxYj+aVzJ`Y]V;{v2:7Cv
2024-05-25 23:00:02 UTC	12792	IN	Data Raw: 45 26 92 19 29 4a ee e4 41 40 2c 31 01 60 46 4e ca e4 8a aa cb 4b 00 52 f5 66 8a 31 b2 b9 4c 55 dd 8d 49 59 11 15 80 00 14 0c 00 00 00 00 21 68 68 60 86 05 08 06 20 00 00 00 01 00 01 40 21 88 0a 00 00 00 40 30 00 40 00 00 08 60 00 80 00 80 40 31 00 02 18 80 00 01 a0 50 01 88 80 40 31 00 20 18 00 44 06 20 04 21 81 0a 20 18 80 10 9b b2 19 5d 59 72 00 ae 52 bb b8 66 22 05 04 92 bb 2e e5 62 30 5a 12 20 13 29 9f 12 e6 53 3e 20 1f ff d6 f8 10 1d 0d d4 87 ba 7d 4d 66 ec 34 ea 73 80 e9 aa 2d f3 24 a8 3e a3 37 61 6b a9 ca 03 ae a8 77 93 58 75 d4 66 7d 05 c7 a9 c5 03 b9 1c 3a 7c c9 ac 34 7b cb 99 f4 26 68 f5 fa 1c 00 3d 02 c2 c7 bc 92 c3 44 66 7d 06 68 f5 3c e8 1d ca 94 f2 d4 c8 8b a9 c2 b5 27 68 f3 32 f1 2b 97 d4 da 8d ea 79 d0 3b d8 98 d5 51 5b c7 73 29 63 2b 56 Data Ascii: E&)JA@,1`FNKRf1LUIY!hh` @!@0@`@1P@1 D ! ]YrRf".b0Z )S> }Mf4s-$>7akwXuf}:\|4{&h=Df}h<'h2+y;Q[s)c+V
2024-05-25 23:00:02 UTC	12792	IN	Data Raw: ad 8b 67 5e 0d 5a e6 19 b4 e4 da 28 b4 d4 f5 2c 2c 21 94 d3 7a 0c a6 6e ec b2 4e c8 a7 8b 34 c8 89 d3 5a dc b8 84 15 91 20 51 80 ae 17 00 60 2b 82 00 eb f8 35 fe da c3 7a 5f f0 36 e2 2d db aa fa 5f f1 31 78 35 a6 da c3 7a ff 00 81 d0 9d 0a d8 8d a7 56 9d 08 3a 93 6d bb 45 5e ca fc 4f 06 33 af 11 26 dd 25 84 bf 16 7b b0 3f 40 ff 00 6d 7e 07 37 68 79 51 f4 7f 79 99 33 7e d7 c3 57 c2 ce 11 af 07 4e 52 8d d4 5f 1b 5f 89 81 1e 8c 26 9e 1c 5a 77 dd 18 c5 4d 4d a6 5b 4e ab 83 79 78 3f 2a 24 d4 69 4d f8 af 2d f9 32 84 49 36 75 72 b4 93 bd 3e 46 17 63 62 a5 4a 3e 5d 45 6e e1 d5 ad 19 25 08 2b 45 73 7c 59 99 27 94 92 b9 a8 cd a8 b8 c5 b4 a5 59 b5 de b6 30 fa 9b 28 54 79 1a e2 bb ca 9d 47 99 e8 4f 0f 7c 8c ab 5c ec ed 0f 13 8f 15 51 c5 9a 4b b9 97 15 d0 72 b3 69 cb Data Ascii: g^Z(,,!znN4Z Q`+5z_6-_1x5zV:mE^O3&%{?@m~7hyQy3~WNR__&ZwMM[Nyx?*$iM-2I6ur>FcbJ>]En%+Es\|Y'Y0(TyGO\|\QKri
2024-05-25 23:00:02 UTC	6396	IN	Data Raw: 4a 8d ca 4f 8b 62 9d 4a 95 25 9a a4 dc a5 d5 90 bf 79 f3 31 fc 44 b1 5f 48 ad 97 e6 ce d1 82 8f 2d 79 b1 df b8 5e a1 5f bc 3d 67 9c d8 d7 a0 1f a0 17 a4 4f d2 65 94 4f d0 2f 50 7a c3 d6 42 8b d4 2f 50 df a4 8c 9a 4a f7 20 2a ab 2e 56 2b 84 5c e4 95 bd 22 93 bb e2 5f 08 38 c3 4f 2a 5f c0 37 48 b1 56 fd 08 4a f5 26 a1 15 a2 2e 4d 42 39 20 bd 2c 52 8a a6 94 62 f8 f1 64 7d 66 56 ab b1 a9 68 da e7 cc 7e a1 6a 8b f0 51 8c f1 54 a3 3d 62 e4 93 45 bb 52 10 a7 8c 9c 60 b2 ad 34 5e 82 67 f3 e4 ae 56 69 61 3e 0b c5 bd 14 94 6b d5 59 96 35 66 bb cb 6a 55 cc e3 53 2a 49 ab 34 bb 8c c5 8b c6 a6 d7 40 e2 b4 64 8c 9d 35 7d fe 44 6a 47 2c bb 9f 02 74 f8 10 cc a5 0b 37 aa e0 4a 9f 00 f6 23 de d7 32 9a be 52 36 e1 7f f0 ef d0 ff 00 bc c3 57 ca 46 cc 3f e4 78 d9 65 63 13 d9 Data Ascii: JObJ%y1D_H-y^_=gOeO/PzB/PJ .V+\"_8O_7HVJ&.MB9 ,Rbd}fVh~jQT=bER`4^gVia>kY5fjUS*I4@d5}DjG,t7J#2R6WF?xec
2024-05-25 23:00:02 UTC	2332	IN	Data Raw: 1d 81 fd 23 17 f5 e9 7f 84 79 2f 0e bc 0c d9 bb 03 07 86 c4 60 6a d7 a9 3a d5 1c 26 ab 4a 12 49 28 df 4c 90 81 b7 2c 48 41 ca 4a 92 df 52 2c 92 92 a6 7c a2 ad 0e e3 24 e9 24 77 ab d0 d1 e8 73 2b 53 6a e5 87 88 52 12 85 1c ba d0 b6 a5 3a 23 65 68 bb 18 27 74 7b b0 b1 55 1c 27 12 eb c7 21 43 7a 32 b6 df 52 49 78 a7 49 62 5d 1c e3 0a 6c cf 27 ab 22 4a 4b 50 b2 35 76 08 17 d0 a1 2a ce c8 82 8a 34 e1 eb 2a 0e e8 b1 ab d4 c4 db ca f2 ad 4d 54 b6 72 5a c8 d5 0a 34 28 f1 b1 8a 58 d9 cb 83 b1 15 27 2d 64 ce ca b9 1e 6c 98 92 f6 e5 5e 87 59 62 a9 43 48 ab 97 53 c5 ca 4e cb 44 72 e9 28 1b a8 e4 56 38 62 b6 96 e7 7c 3c 28 2e 57 ea 7d 8b ee 6b e0 ae c1 db fb 0a be 37 6b 61 3b 46 22 18 b9 d2 8c f7 b5 61 68 2a 74 a4 95 a9 ce 2b 8c 99 ec ff 00 07 9e 07 fe 8d ff 00 bf 88 Data Ascii: #y/`j:&JI(L,HAJR,\|$$ws+SjR:#eh't{U'!Cz2RIxIb]l'"JKP5v4MTrZ4(X'-dl^YbCHSNDr(V8b\|<(.W}k7ka;F"ah*t+
2024-05-25 23:00:03 UTC	12792	IN	Data Raw: 9c a5 72 17 15 c6 08 30 b3 27 08 5f 52 c4 91 41 4a 4c 1d d7 13 42 49 15 d4 b3 00 82 61 98 49 12 b0 20 b3 30 cc c7 64 16 40 17 42 4f 23 2b cd a9 6d 34 b2 32 bb 2b 91 6e ca f9 02 b8 d5 c9 2b 12 56 1a 81 aa 8f 2e 5b 10 bb 27 a1 19 34 86 c5 04 d8 f3 30 88 d5 82 6c 94 82 ec 2f 22 57 40 5b 62 88 de 41 79 12 d0 7a 12 d9 68 85 d8 ef 22 76 24 a2 89 62 8a ef 20 bc 8d bd 8e a6 ef 7b 6d 18 a9 61 2a 55 be 58 f0 33 c4 5d 4d 70 df 43 2a cc f4 27 28 4e 36 66 a7 80 c4 47 e6 32 99 a6 9e 59 71 41 4e f6 76 1c 2b 74 42 32 92 35 52 9c 8c a9 97 d3 95 84 ac 24 8f 41 e0 ee d1 86 ce db 3b 3b 1f 88 52 95 1c 26 26 8d 7a aa 16 72 71 a7 52 33 92 8a 6d 2b d9 75 3e e3 1f ba ff 00 83 12 e1 87 c6 eb fd 5d 2f f1 8f cf 14 ea 58 db 46 b6 ab 53 83 94 a3 74 6d 45 33 ef eb ee ad e0 db ff 00 71 Data Ascii: r0'_RAJLBIaI 0d@BO#+m42+n+V.['40l/"W@[bAyzh"v$b {maUX3]MpC'(N6fG2YqANv+tB25R$A;;R&&zrqR3m+u>]/XFStmE3q
2024-05-25 23:00:03 UTC	6396	IN	Data Raw: ea 8c 69 2e 2f 59 16 37 4a f7 65 6b 57 d9 6b ea 45 ce 2b 47 36 fd 02 cf 0f 3a 45 22 b9 aa 33 65 d9 e1 d6 41 9e 9f 46 fd 2c a6 e6 aa 30 8c 29 3a d3 57 f3 50 7a 15 5b 08 76 5a 92 b3 4e 0f d3 a1 b2 9e 13 0c d7 94 fd a7 2e 52 cc ef c3 d0 59 4a bd 4a 6e d1 7e a2 4a 2d ad 1d 15 49 6c d7 c4 e8 d7 c2 61 68 d2 73 77 6f 96 a7 3a 9d 3c f7 9b d2 08 d1 8a ab 2a 91 84 25 a3 e6 8a 6a 4b 25 35 4d 7a cc c6 d2 d5 db 61 ae bc 84 ea 46 2e d0 8e 9d e2 de be 8b d8 54 17 37 46 6c b7 7b 2e 8b d8 4a 33 ab 37 68 ab be e4 53 73 6c 25 0a 38 7c d1 6b 3b f6 91 e9 c8 d4 75 dd d5 14 aa d5 29 cb c6 b7 7a 67 4b 0b 8b c3 d4 4a 2e 09 4b bc e3 b6 de ac 95 38 ca 53 4a 26 65 14 d7 40 a4 f6 de ce e6 2a bd 3a 34 9d 92 bb e0 ac 73 69 35 08 3a d3 57 93 f2 53 23 39 3a f5 55 34 fc 58 f1 65 75 aa 67 Data Ascii: i./Y7JekWkE+G6:E"3eAF,0):WPz[vZN.RYJJn~J-Ilahswo:<%jK%5MzaF.T7Fl{.J37hSsl%8\|k;u)zgKJ.K8SJ&e@:4si5:WS#9:U4Xeug
2024-05-25 23:00:03 UTC	4994	IN	Data Raw: 73 2a 9a d0 cc b6 2a 2a b8 86 23 05 1a 7c 49 c1 95 ae 24 a0 f5 34 88 ca f1 8b c6 84 ba a6 bd 86 63 5e 2d 5e 94 65 d1 ff 00 13 1d cd 98 63 01 01 00 ee 20 10 03 01 00 00 00 20 06 02 0b 80 30 15 c2 e0 00 00 02 80 08 01 00 00 08 00 00 00 00 10 00 00 02 05 3f ff d5 f8 10 00 1d 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e3 c5 08 71 f2 91 01 30 18 ac 64 00 00 00 00 00 00 00 00 20 00 ec 16 05 0b 1a b6 7d 1d e6 2a 2d f9 34 fc 77 ea e1 ef 33 9d 4d 9b 4f 2d 19 55 7c 6a 3b 2f 42 2a dc 1b 64 f4 28 Data Ascii: s**#\|I$4c^-^ec 0?@q0d }-4w3MO-U\|j;/B*d(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.6	59102	152.195.133.221	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:03 UTC	414	OUT	GET /common/web_event/official2/dist/client/img/error_icon.1735f29.png HTTP/1.1 Host: dl.dir.freefiremobile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:03 UTC	735	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 2235 Cache-Control: public, max-age=3600 Content-MD5: 2cPHWSXgQRkT264OBmFjcw== Content-Type: image/png Date: Sat, 25 May 2024 23:00:03 GMT ec-version: v6.05 Etag: "d9c3c75925e0411913dbae0e06616373" Expires: Sun, 26 May 2024 00:00:03 GMT Last-Modified: Mon, 20 May 2024 03:27:21 GMT Server: ECAcc (lhd/35F8) Via: 1.1 704990717f84876e269b7e943738c392.cloudfront.net (CloudFront) X-Amz-Cf-Id: qcOxAQruSjmClvoITIL4UCi0TpbRI5iXpptO-82dS7QFTRSTsgDPbQ== X-Amz-Cf-Pop: LHR62-C3 x-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSBvD/yiBC0eIcTDk7yP+x/E9gwkzhSo x-obs-replication-status: REPLICA x-obs-request-id: 0000018FB1D970A09415082698B9E2CE Content-Length: 7828 Connection: close
2024-05-25 23:00:03 UTC	7828	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f9 00 00 00 e8 08 03 00 00 00 1a 1b b2 9c 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 03 00 50 4c 54 45 00 00 00 04 37 8f 03 03 06 02 02 07 02 02 07 02 02 07 03 03 06 03 03 07 02 02 06 00 22 58 02 02 06 03 03 06 11 44 99 00 00 00 00 00 07 03 03 06 03 36 8e 00 34 8e 03 36 8e 02 02 06 03 03 07 03 35 8e 03 35 8e 1c 4f a2 03 35 8e 03 35 8e 00 36 8d 2f 65 b1 02 35 8e 03 35 8e 02 02 05 03 36 8e 00 00 08 5c 93 cb 07 3a 91 05 38 8f 03 35 8e 03 37 8f 02 35 8e 02 35 8d 06 05 07 03 03 07 04 04 06 04 04 07 02 02 06 02 02 05 03 03 07 02 02 06 e7 ef f8 03 35 8e 73 9b cc cc dd ef 02 02 06 1f 54 a6 61 98 ce 00 36 8d da e7 f4 1e 1c 21 38 6c b5 21 50 a1 9a b4 d8 0e 41 Data Ascii: PNGIHDRgAMAasRGBPLTE7"XD64655O556/e556\:857555sTa6!8l!PA

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.6	59103	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:03 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 71 4e 4e 57 4b 66 57 6b 57 6b 53 47 4a 4f 44 53 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 30 32 39 39 39 31 30 31 39 30 63 65 66 39 30 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: qNNWKfWkWkSGJODS.1Context: f0299910190cef90
2024-05-25 23:00:03 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-05-25 23:00:03 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 71 4e 4e 57 4b 66 57 6b 57 6b 53 47 4a 4f 44 53 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 30 32 39 39 39 31 30 31 39 30 63 65 66 39 30 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 43 6a 7a 4c 31 72 46 68 4e 54 50 31 42 39 33 2f 6d 37 2b 76 4a 48 74 4f 52 69 6a 53 79 61 4d 4c 5a 45 4e 56 35 44 53 36 2f 65 6e 7a 56 5a 59 61 73 4e 54 43 76 6c 58 45 31 5a 6f 6e 77 56 35 6d 6a 70 4a 63 54 66 30 73 63 47 46 59 44 4f 4d 36 75 35 45 51 47 64 7a 30 38 56 51 34 7a 5a 2f 48 6d 64 68 34 45 48 55 6a 4f 37 42 4a Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: qNNWKfWkWkSGJODS.2Context: f0299910190cef90<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAUCjzL1rFhNTP1B93/m7+vJHtORijSyaMLZENV5DS6/enzVZYasNTCvlXE1ZonwV5mjpJcTf0scGFYDOM6u5EQGdz08VQ4zZ/Hmdh4EHUjO7BJ
2024-05-25 23:00:03 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 71 4e 4e 57 4b 66 57 6b 57 6b 53 47 4a 4f 44 53 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 30 32 39 39 39 31 30 31 39 30 63 65 66 39 30 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: qNNWKfWkWkSGJODS.3Context: f0299910190cef90<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-05-25 23:00:04 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-05-25 23:00:04 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 74 77 53 38 70 4b 39 46 76 6b 53 41 5a 49 38 54 46 47 32 7a 48 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: twS8pK9FvkSAZI8TFG2zHg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.6	59104	18.239.83.100	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:04 UTC	696	OUT	GET /common/web_event/official2/dist/client/fonts/GFFLatinW05-Bold.d2bc101.woff HTTP/1.1 Host: dl.dir.freefiremobile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.freefiremobile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://dl.dir.freefiremobile.com/common/web_event/official2/dist/client/css/e845fbd.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:04 UTC	1196	IN	HTTP/1.1 200 OK Content-Type: application/x-font-woff Content-Length: 38243 Connection: close Server: OBS Date: Sat, 25 May 2024 22:12:51 GMT x-obs-request-id: 0000018FB1D055D198137CBF69CC2022 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 100 Access-Control-Expose-Headers: ETag, x-obs-request-id, x-obs-api, Content-Type, Content-Length, Cache-Control, Content-Disposition, Content-Encoding, Content-Language, Expires, x-obs-id-2, x-reserved-indicator, x-obs-version-id, x-obs-copy-source-version-id, x-obs-storage-class, x-obs-delete-marker, x-obs-expiration, x-obs-website-redirect-location, x-obs-restore, x-obs-version, x-obs-object-type, x-obs-next-append-position Content-MD5: KuoegS6iL3vzFajZdp4UcA== x-obs-replication-status: REPLICA Accept-Ranges: bytes Last-Modified: Mon, 20 May 2024 03:27:21 GMT x-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSs0yB8hcb838f+aDCP/Za8QraZ/k1Co ETag: "2aea1e812ea22f7bf315a8d9769e1470" X-Cache: Hit from cloudfront Via: 1.1 134cb849e01fafad6f264ff9633b073e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: vY1MeH34SxqLNMPkbSotFyN4SH1whcO-T_VJqs0y8XGklq3Pz-C3Mw== Age: 2833
2024-05-25 23:00:04 UTC	15188	IN	Data Raw: 77 4f 46 46 4f 54 54 4f 00 00 95 63 00 0c 00 00 00 00 d9 54 00 00 00 00 00 00 92 a8 00 00 02 bb 00 00 05 70 00 00 00 00 00 00 00 00 43 46 46 20 00 00 01 1c 00 00 71 59 00 00 95 bd dc 11 91 72 47 44 45 46 00 00 72 78 00 00 00 22 00 00 00 22 05 52 05 42 47 50 4f 53 00 00 72 9c 00 00 11 30 00 00 28 76 7f 70 72 a8 47 53 55 42 00 00 83 cc 00 00 02 69 00 00 04 9a 00 2f 04 b9 4f 53 2f 32 00 00 86 38 00 00 00 57 00 00 00 60 69 d6 26 20 63 6d 61 70 00 00 86 90 00 00 05 aa 00 00 08 6a bf 61 b2 13 68 65 61 64 00 00 8c 3c 00 00 00 36 00 00 00 36 32 df db af 68 68 65 61 00 00 8c 74 00 00 00 21 00 00 00 24 19 d8 1d 69 68 6d 74 78 00 00 8c 98 00 00 04 25 00 00 08 b8 f0 58 56 74 6d 61 78 70 00 00 90 c0 00 00 00 06 00 00 00 06 02 2e 50 00 6e 61 6d 65 00 00 90 c8 00 00 01 Data Ascii: wOFFOTTOcTpCFF qYrGDEFrx""RBGPOSr0(vprGSUBi/OS/28W`i& cmapjahead<662hheat!$ihmtx%XVtmaxp.Pname
2024-05-25 23:00:04 UTC	16384	IN	Data Raw: 19 0a b0 e1 83 10 cd 98 6b c1 54 d8 e6 ce a8 59 09 df ec a9 72 f5 69 65 b7 14 cd e8 cc 1b 58 b3 61 ae 7c dc 2d c7 53 e6 cf a0 03 93 be 2c 93 be a2 1c 62 4a df 21 9b 9c 7b d3 4d 3a 40 a0 c3 6d 32 8b 89 7e f5 83 ff 83 76 0c de c6 84 76 4b dc ee 93 8f ef a4 3c c5 8d d9 0e 45 a6 ca ca e1 60 75 30 b9 0f 10 14 99 46 c1 5f d7 4f 5e 38 7c 83 df f3 04 b8 e7 96 df 0b da d8 1a 40 65 79 fe cc c9 99 ce f8 b2 72 54 72 46 94 73 84 1c b7 2a 21 df 81 d1 64 b9 74 62 d8 c2 66 8e 50 ba dc 36 6e e2 8c 1c e7 12 79 d1 ac 19 0b 1c bf c5 61 2c 0b 87 27 77 a0 ed ef fc c1 c7 20 3d b4 40 fd 82 4e b6 66 3d 13 23 9d b4 9a 1c b1 73 e8 19 c7 0d e9 ec 8e f5 97 9c 50 4d ce ef b5 ae a9 23 9a ae b6 65 66 cd 5a e8 04 a7 bc f0 fb 59 f3 1d 27 a4 05 df 7f 31 c6 49 9d f2 98 ac 2f c6 3a fe cb 39 Data Ascii: kTYrieXa\|-S,bJ!{M:@m2~vvK<E`u0F_O^8\|@eyrTrFs*!dtbfP6nya,'w =@Nf=#sPM#efZY'1I/:9
2024-05-25 23:00:04 UTC	6671	IN	Data Raw: e3 32 c8 de 96 77 17 09 09 c9 f7 18 4d 0e b9 ae fd 85 8d 48 66 1c 26 c7 1c fe 01 22 af e9 fb c7 6e cb 8a fd 9e 7d ac ae 81 67 ae 76 b2 d8 b7 4a fa f2 88 8e 4e ec e2 d1 0e af 39 ed a8 f7 40 1d b4 13 d6 6d e2 09 f8 38 ab 6d 7b 8f 13 92 bb fb 58 79 93 ec fe d7 63 eb 69 d7 e2 b7 c8 91 66 b9 d9 62 56 10 ad 47 45 7c fb 7b 07 cf 9e f1 79 2e ff f0 74 10 ef ad 20 e6 2a e1 dd 67 27 b8 f6 4f 8f 5a 0b 9a 98 d7 cc 3b 66 19 27 8f 13 b5 c0 c6 d6 7c e1 c9 f8 bb b3 ae b5 4f 03 d1 80 8d d4 cc c6 ac 3c 9e b2 53 ad 96 47 ee 26 6d 73 4a 3b 0c d2 b6 b2 19 11 88 bc 67 a5 66 75 cd 7a 59 3a cb 69 6e af af a3 ec 47 fa 0e 38 52 4c bb 8a 28 24 13 7e 47 1d ea 12 75 62 47 e6 0c e8 7a 6c f9 0e f2 aa 88 ba 12 f7 9d c8 ed 2b 93 2c c9 93 42 4a 47 25 36 b8 d5 54 b5 5e 33 ba d7 f9 5c b2 56 Data Ascii: 2wMHf&"n}gvJN9@m8m{XycifbVGE\|{y.t *g'OZ;f'\|O<SG&msJ;gfuzY:inG8RL($~GubGzl+,BJG%6T^3\V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.6	59105	18.239.83.100	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:04 UTC	699	OUT	GET /common/web_event/official2/dist/client/fonts/GFFLatinW05-Regular.7b8bcd3.woff HTTP/1.1 Host: dl.dir.freefiremobile.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.freefiremobile.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://dl.dir.freefiremobile.com/common/web_event/official2/dist/client/css/e845fbd.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:04 UTC	1196	IN	HTTP/1.1 200 OK Content-Type: application/x-font-woff Content-Length: 36707 Connection: close Server: OBS Date: Sat, 25 May 2024 22:00:22 GMT x-obs-request-id: 0000018FB1C4E6F39810E842F214700C Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 100 Access-Control-Expose-Headers: ETag, x-obs-request-id, x-obs-api, Content-Type, Content-Length, Cache-Control, Content-Disposition, Content-Encoding, Content-Language, Expires, x-obs-id-2, x-reserved-indicator, x-obs-version-id, x-obs-copy-source-version-id, x-obs-storage-class, x-obs-delete-marker, x-obs-expiration, x-obs-website-redirect-location, x-obs-restore, x-obs-version, x-obs-object-type, x-obs-next-append-position Content-MD5: ee3tYAVOwxqBC2eGTZdajA== x-obs-replication-status: REPLICA Accept-Ranges: bytes Last-Modified: Mon, 20 May 2024 03:27:21 GMT x-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSSKUg0bu9VI0jnyUbCCCspEx+NBfyPo ETag: "79eded60054ec31a810b67864d975a8c" X-Cache: Hit from cloudfront Via: 1.1 c27d2e9d4c6e59d1b92ac8671f0bfb9c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: HO3Z4f54PhlYV8kAClHhLi55VUfRqPJ2kVUt0QIWEfW0KHN3QHEtbg== Age: 3582
2024-05-25 23:00:04 UTC	15188	IN	Data Raw: 77 4f 46 46 4f 54 54 4f 00 00 8f 63 00 0c 00 00 00 00 d2 74 00 00 00 00 00 00 8c a8 00 00 02 bb 00 00 05 73 00 00 00 00 00 00 00 00 43 46 46 20 00 00 01 1c 00 00 6b cf 00 00 8c cb bc 85 ab 8f 47 44 45 46 00 00 6c ec 00 00 00 22 00 00 00 22 05 52 05 42 47 50 4f 53 00 00 6d 10 00 00 10 cd 00 00 2a 6e ae a9 c4 03 47 53 55 42 00 00 7d e0 00 00 02 69 00 00 04 9a 00 2f 04 b9 4f 53 2f 32 00 00 80 4c 00 00 00 57 00 00 00 60 68 aa 23 0a 63 6d 61 70 00 00 80 a4 00 00 05 aa 00 00 08 6a bf 61 b2 13 68 65 61 64 00 00 86 50 00 00 00 36 00 00 00 36 33 29 db ed 68 68 65 61 00 00 86 88 00 00 00 21 00 00 00 24 1a 22 1d 6b 68 6d 74 78 00 00 86 ac 00 00 04 1b 00 00 08 b8 c3 99 6d ec 6d 61 78 70 00 00 8a c8 00 00 00 06 00 00 00 06 02 2e 50 00 6e 61 6d 65 00 00 8a d0 00 00 01 Data Ascii: wOFFOTTOctsCFF kGDEFl""RBGPOSm*nGSUB}i/OS/2LW`h#cmapjaheadP663)hhea!$"khmtxmmaxp.Pname
2024-05-25 23:00:04 UTC	16384	IN	Data Raw: c4 96 16 c1 42 ab fa 8d e9 72 93 15 af 16 a3 56 22 08 80 c2 22 5c 08 7e 97 88 85 08 c4 4f e1 55 8e cb 81 cd c5 a6 ea 07 a7 ef 10 95 c6 bf e9 e0 a1 09 ea bd 7f 1d 70 55 28 ac d2 2e 02 62 3f 7c 31 0c 2e e2 0e aa 67 fb 81 4c c8 29 e8 ed a5 a5 75 95 eb de bf b4 94 4a ef 23 cd 90 9f 10 bb b8 6a 85 cf c8 a8 47 56 c2 29 92 6b 6f f8 06 c1 67 90 ba 5b 56 8f 7a 03 6b f4 a2 01 8e d3 1b 10 f4 93 cf 0c eb e7 ea 48 78 55 c2 ed 4a e9 90 ed e3 05 ef 7f ac ef 2f b4 be 8c 70 7b ec 25 4a 53 b4 c1 80 1b e0 85 23 48 e2 d5 b4 20 e6 b1 d9 ea 14 35 7e a2 bc 2b 8b 58 ac bf 40 bf b4 57 bf ea 57 cf eb f7 5d 84 1d 56 b6 98 d8 66 a5 ae 58 e9 6d 0c f9 65 48 7e 8a 19 1b 71 0e 7f 5d 00 03 ec e3 61 04 de 47 e6 24 de 2b 60 71 48 0c 66 2d 65 a6 f3 3b 37 9d 33 43 02 de 81 63 85 c0 e4 9d 27 Data Ascii: BrV""\~OUpU(.b?\|1.gL)uJ#jGV)kog[VzkHxUJ/p{%JS#H 5~+X@WW]VfXmeH~q]aG$+`qHf-e;73Cc'
2024-05-25 23:00:04 UTC	5135	IN	Data Raw: 09 3b ab 67 3b ab 47 9c d5 73 9c d5 73 dd 6e d4 ed 46 dd 6e 2c 9f cf 71 cc ca 93 42 4a be e3 97 3a 7e a9 e3 57 81 5b 3b e6 58 a6 c1 aa 13 29 7e b0 76 eb aa 43 dd aa 71 b7 6a 2f b7 6a 96 5b b5 b7 dc 27 bf 60 0d cb b8 a8 8b bf 3d 1c ef a2 f2 32 e5 24 c7 3e fb f7 a3 85 44 fb df 52 8a 65 11 65 b0 bc 4a c9 76 ac 8c 38 56 46 1d 2b 23 8e 95 51 c7 ca 88 63 e5 40 17 a9 7b ca 36 a9 41 8f 96 a1 03 1c 43 33 1d 43 07 c8 21 f9 4c 4e 6e 77 72 eb 8f fd 9d 3f f6 d5 15 ba 42 fa e9 2a 5d 05 8f 56 eb 6a 2c 6c bd 77 88 f3 de 21 5a a9 95 d8 cd fa 63 ae f3 c7 a2 b4 d6 9c 0d a3 ee 3f b8 e6 52 42 2e 1a 7a 6e 4f 61 b7 03 75 3b f0 dc 0e 5c 0c 70 3a 88 3a 1d 44 dc e9 d3 67 4a 9f 26 e2 46 a7 f7 15 72 fb 4a c7 90 b0 db 45 d8 ad 16 e1 b9 47 b6 52 22 6d d4 15 fb df 62 e2 fe 1a 93 1b e4 Data Ascii: ;g;GssnFn,qBJ:~W[;X)~vCqj/j['`=2$>DReeJv8VF+#Qc@{6AC3C!LNnwr?B*]Vj,lw!Zc?RB.znOau;\p::DgJ&FrJEGR"mb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.6	59106	152.195.133.221	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:04 UTC	412	OUT	GET /common/web_event/official2/dist/client/img/error_bg.7cc7c32.jpg HTTP/1.1 Host: dl.dir.freefiremobile.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:04 UTC	736	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 996 Cache-Control: public, max-age=3600 Content-MD5: roEEYrOc8/0k5JrYnphzJg== Content-Type: image/jpeg Date: Sat, 25 May 2024 23:00:04 GMT ec-version: v6.05 Etag: "ae810462b39cf3fd24e49ad89e987326" Expires: Sun, 26 May 2024 00:00:04 GMT Last-Modified: Mon, 20 May 2024 03:27:21 GMT Server: ECAcc (lhd/35BD) Via: 1.1 0632dce52bb4d036890e14a88154db56.cloudfront.net (CloudFront) X-Amz-Cf-Id: gCVQnExjVbdAwPfR3zWJSR90-1zab2USQP3cYuznBgIrMSrEf83aeQ== X-Amz-Cf-Pop: LHR62-C3 x-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSc88AeoDmcBuPhnV8vjwy/zgbX+ekoQ x-obs-replication-status: REPLICA x-obs-request-id: 0000018FB1EC5E2F901927F619E6C7A6 Content-Length: 80235 Connection: close
2024-05-25 23:00:05 UTC	16383	IN	Data Raw: ff d8 ff db 00 84 00 08 06 06 06 06 06 08 06 06 08 0c 08 07 08 0c 0e 0a 08 08 0a 0e 10 0d 0d 0e 0d 0d 10 11 0c 0e 0d 0d 0e 0c 11 0f 12 13 14 13 12 0f 18 18 1a 1a 18 18 23 22 22 22 23 27 27 27 27 27 27 27 27 27 27 01 09 08 08 09 0a 09 0b 09 09 0b 0e 0b 0d 0b 0e 11 0e 0e 0e 0e 11 13 0d 0d 0e 0d 0d 13 18 11 0f 0f 0f 0f 11 18 16 17 14 14 14 17 16 1a 1a 18 18 1a 1a 21 21 20 21 21 27 27 27 27 27 27 27 27 27 27 ff dd 00 04 00 5a ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff c0 00 11 08 03 84 05 a0 03 00 22 00 01 11 01 02 11 01 ff c4 00 cd 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 10 00 02 01 02 03 05 02 09 05 0c 06 08 05 05 00 03 00 01 02 03 11 04 12 Data Ascii: #"""#''''''''''!! !!''''''''''ZAdobed"
2024-05-25 23:00:05 UTC	1	IN	Data Raw: 4d Data Ascii: M
2024-05-25 23:00:05 UTC	16383	IN	Data Raw: d6 84 6a ca 2b 81 43 9d f8 13 92 5c 59 5c 9a e4 66 4d 9a 8a 13 ea c5 c4 4d df 42 48 e7 bb 34 29 68 44 93 d4 ae 46 59 50 5f 52 d5 24 d6 85 28 b2 30 11 bb d0 ae 88 b6 ee 46 a2 d2 e5 ca 1a 93 ad 4d 2a 4d 97 86 da 64 cc 93 47 2e 6f 3c d2 47 63 0f 0c 94 92 39 98 6a 6e 75 b5 e0 8e b2 d1 1c a0 b7 66 a6 f6 44 86 46 e1 cc d9 81 88 2e 02 80 58 34 42 b8 0a 40 77 0b 91 b8 00 4a e1 72 17 0b 90 b4 4a e3 b9 02 57 00 84 f8 90 b9 29 f0 2b b9 ce 5b 9a 5b 0e e1 71 5c 08 5a 1d c2 e2 b8 ae 00 ee 17 15 c2 e4 b2 80 0a e1 71 60 01 bb 2b 81 46 26 a6 4a 6f bc 8d e8 28 e7 e2 2a 3a 95 5f b1 1d 4c 24 37 74 92 e6 ce 56 1e 0e a5 55 ed 3b 2a c9 24 63 0f 56 d9 b9 ec 91 66 61 5c 85 c2 e7 43 9d 13 b8 ae 46 e2 b8 29 3b b1 5c 8e 61 5c 80 9d c2 e4 2e 3b 80 4a e2 b8 ae 2b 80 4a e1 72 37 0b 90 Data Ascii: j+C\Y\fMMBH4)hDFYP_R$(0FMMdG.o<Gc9jnufDF.X4B@wJrJW)+[[q\Zq`+F&Jo(:_L$7tVU;*$cVfa\CF);\a\.;J+Jr7
2024-05-25 23:00:05 UTC	16383	IN	Data Raw: 61 af 9a c5 ea 3e 59 ea 2c a5 7c eb 5e a7 d0 f0 50 58 8f 07 92 4e ee 34 a5 2f a8 db 3e 77 4f cb 8e 87 d1 3c 16 92 ad b3 15 29 2f 16 f3 a6 fd 0d 7f 33 ea 78 79 57 82 6d 7d cc 6c df 38 9e 2f 18 e9 e1 4b a4 d7 d6 d1 c5 f0 ad ba d8 0d 99 5e f7 f1 25 17 e9 4a 27 8f 3d 86 da 49 ec 0a 4a 4a d3 a1 89 74 fd 4d 39 33 cb 51 c2 62 b1 2d ac 3e 1e a5 5b 6a f2 c5 bd 0f 0f 8b 85 63 cd 24 df 33 d3 e1 9d 60 a8 fb 93 9c 7e b6 bf 13 33 44 5d cb 67 09 41 b8 ce 2e 2d 71 4c ad a5 d0 f2 b4 76 db 72 24 75 24 0d 26 ae 40 55 52 56 46 67 7b 96 55 77 76 2a 00 35 2c a7 17 c4 82 57 65 e9 24 ac 0a 42 7c 51 b6 85 fb 3e 9d 35 f7 98 a7 c5 1b a8 69 42 dd da 99 c4 f6 57 a9 ac 3f 6b e0 cf 47 e0 ee 5f 92 36 e2 7c 77 34 ad f5 d9 e4 59 ec bc 18 a5 2a 9b 3b 6d 41 2e 34 21 ee 93 7f dc 79 29 52 69 Data Ascii: a>Y,\|^PXN4/>wO<)/3xyWm}l8/K^%J'=IJJtM93Qb->[jc$3`~3D]gA.-qLvr$u$&@URVFg{Uwv5,We$B\|Q>5iBW?kG_6\|w4Y;mA.4!y)Ri
2024-05-25 23:00:05 UTC	16383	IN	Data Raw: ec a4 fe cd 28 e9 5c 44 f7 d7 67 c8 ce 4e 95 ee e3 d5 15 e8 5b 45 28 c9 54 9a f1 56 b6 ea 6a 5b 1c 61 ed 21 d3 a5 ad e7 c2 fc 02 c9 36 97 02 55 2a b9 66 aa d5 9c bc 94 8a e1 aa 33 ab d5 9b 96 55 a4 7e 65 15 7c a4 6b c3 5b 71 af 9a ff 00 bc c7 57 ca 47 6b 01 b4 30 f8 7d 9c e8 f6 18 4a b3 8c 93 c4 39 cf 35 dd ed 2c b7 cb e2 93 19 b5 05 96 2e 5a ad 13 4b f1 18 2a 2f 13 cc e9 53 e5 7f 4d 0d bb 09 ff 00 ab 76 ca fe a2 9f fe f4 79 76 b5 3d 16 c3 9b ec 1b 61 ff 00 e5 e3 ff 00 c9 13 cd 39 99 f0 ff 00 a5 f1 1f b5 1f f2 22 e3 af e6 30 7d 67 f9 12 b0 e2 b5 2b 73 0c f6 3d 56 79 68 b9 95 4d 95 ef 9b 95 89 49 93 99 56 c7 ff d2 f8 8a 1e 81 16 90 cd 00 b2 ea 31 24 fa 8e ed 14 0f 40 b7 46 1c 49 24 ac c1 05 a8 c8 8c 01 84 58 9f 12 51 b5 c0 5b 89 f5 b0 8d f7 c3 ca 9d b4 52 Data Ascii: (\DgN[E(TVj[a!6Uf3U~e\|k[qWGk0}J95,.ZK/SMvyv=a9"0}g+s=VyhMIV1$@FI$XQ[R
2024-05-25 23:00:05 UTC	14702	IN	Data Raw: b3 ee 34 e2 66 eb d6 8d 34 ef 6d 1b 31 91 66 5a e9 b9 a5 75 7f f2 c5 4a 31 8c 25 5a a2 bf 9a 8a dd 6a 92 d6 f6 5d 11 2c 45 44 da a5 1f 26 3a 14 a3 aa ea cc c9 d6 8b 91 3c f3 ea 3b d4 ef 21 73 4c 31 95 a1 15 18 da cb b8 3e c8 ca ae 6c ad 2a af 93 25 0a b5 68 4d 4a 2d a6 b9 32 c5 8e c4 75 5e c2 99 ce 55 25 9a 6e ed 85 6f 46 95 17 4e 4d 9d ac 2e 3a 18 8f 16 5e 2d 4e 9c 99 5e d0 ae f4 c3 53 f2 a7 e5 7a 0c 18 58 24 dd 69 69 18 ff 00 12 f8 4e d9 b1 55 38 f0 82 39 e4 4a 56 b9 72 ee 69 2d 2f 6b fc 08 d7 71 a1 08 d1 a7 e5 f1 9c b9 99 6e f8 b3 66 1f 0b da 33 62 2b 4a d0 d5 f7 b2 b7 53 0f 9a d0 a2 da e0 ae d9 b4 eb 4d da dc 8f 5e cb 91 9c 0e 96 27 0f 86 a7 86 53 cb 92 a3 b5 95 ef a9 cd 45 8c 94 95 a3 2d 50 cb 68 62 2a e1 e7 9a 0f 4e 6b 91 49 28 c5 ce 4a 11 e2 ca d2 Data Ascii: 4f4m1fZuJ1%Zj],ED&:<;!sL1>l%hMJ-2u^U%noFNM.:^-N^SzX$iiNU89JVri-/kqnf3b+JSM^'SE-PhbNkI(J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.6	59109	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:09 UTC	659	OUT	GET /Codashop.IDofficial/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:10 UTC	1149	IN	HTTP/1.1 200 OK Vary: Accept-Encoding accept-ch-lifetime: 4838400 accept-ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model Link: <https://www.facebook.com/Codashop.IDofficial>; rel="canonical" reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-25 23:00:10 UTC	1385	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 Data Ascii: content-security-policy-report-only: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net d
2024-05-25 23:00:10 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-25 23:00:10 UTC	1826	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-25 23:00:10 UTC	496	IN	Data Raw: 62 31 61 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 5f 39 64 6c 73 20 5f 5f 66 62 2d 6c 69 67 68 74 2d 6d 6f 64 65 22 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 64 61 74 61 2d 64 65 66 61 75 6c 74 2d 69 63 6f 6e 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 79 54 2f 72 2f 61 47 54 33 67 73 6b 7a 57 42 66 2e 69 63 6f 22 20 64 61 74 61 2d 62 61 64 67 65 64 2d 69 63 6f 6e 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 79 44 2f 72 2f 55 4a 6a 30 74 67 6b 2d 52 72 54 2e 69 63 Data Ascii: b1a0<!DOCTYPE html><html id="facebook" class="_9dls __fb-light-mode" lang="en" dir="ltr"><head><link data-default-icon="https://static.xx.fbcdn.net/rsrc.php/yT/r/aGT3gskzWBf.ico" data-badged-icon="https://static.xx.fbcdn.net/rsrc.php/yD/r/UJj0tgk-RrT.ic
2024-05-25 23:00:10 UTC	1500	IN	Data Raw: 70 72 6f 70 65 72 74 79 3d 22 61 6c 3a 61 6e 64 72 6f 69 64 3a 61 70 70 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 46 61 63 65 62 6f 6f 6b 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 61 6c 3a 61 6e 64 72 6f 69 64 3a 70 61 63 6b 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 63 6f 6d 2e 66 61 63 65 62 6f 6f 6b 2e 6b 61 74 61 6e 61 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 61 6c 3a 61 6e 64 72 6f 69 64 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 66 62 3a 2f 2f 70 72 6f 66 69 6c 65 2f 31 30 30 30 34 34 35 36 37 34 30 33 36 39 30 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 61 6c 3a 69 6f 73 3a 61 70 70 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 46 61 63 65 62 6f 6f 6b 22 20 2f 3e 3c 6d 65 74 61 20 70 72 Data Ascii: property="al:android:app_name" content="Facebook" /><meta property="al:android:package" content="com.facebook.katana" /><meta property="al:android:url" content="fb://profile/100044567403690" /><meta property="al:ios:app_name" content="Facebook" /><meta pr
2024-05-25 23:00:10 UTC	1500	IN	Data Raw: 37 30 34 36 30 5f 31 39 34 33 31 31 32 37 38 39 31 37 30 39 30 37 5f 31 39 36 37 33 36 37 32 34 37 32 37 39 30 33 35 31 31 39 5f 6e 2e 70 6e 67 3f 73 74 70 3d 64 73 74 2d 70 6e 67 5f 70 37 32 30 78 37 32 30 26 61 6d 70 3b 5f 6e 63 5f 63 61 74 3d 31 26 61 6d 70 3b 63 63 62 3d 31 2d 37 26 61 6d 70 3b 5f 6e 63 5f 73 69 64 3d 35 66 32 30 34 38 26 61 6d 70 3b 5f 6e 63 5f 6f 68 63 3d 31 58 4e 43 73 4b 64 5a 4e 56 63 51 37 6b 4e 76 67 45 6d 32 69 41 71 26 61 6d 70 3b 5f 6e 63 5f 68 74 3d 73 63 6f 6e 74 65 6e 74 2d 68 6f 75 31 2d 31 2e 78 78 26 61 6d 70 3b 6f 68 3d 30 30 5f 41 59 43 44 55 30 34 44 48 37 6e 52 4d 72 33 4d 4d 78 67 7a 6c 34 4d 42 75 35 67 67 30 63 6b 34 57 4b 48 6d 58 74 70 48 38 49 72 73 36 77 26 61 6d 70 3b 6f 65 3d 36 36 35 38 34 44 38 30 22 20 Data Ascii: 70460_1943112789170907_1967367247279035119_n.png?stp=dst-png_p720x720&_nc_cat=1&ccb=1-7&_nc_sid=5f2048&_nc_ohc=1XNCsKdZNVcQ7kNvgEm2iAq&_nc_ht=scontent-hou1-1.xx&oh=00_AYCDU04DH7nRMr3MMxgzl4MBu5gg0ck4WKHmXtpH8Irs6w&oe=66584D80"
2024-05-25 23:00:10 UTC	1500	IN	Data Raw: 2e 31 29 3b 2d 2d 66 64 73 2d 62 6c 61 63 6b 2d 61 6c 70 68 61 2d 31 35 3a 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 35 29 3b 2d 2d 66 64 73 2d 62 6c 61 63 6b 2d 61 6c 70 68 61 2d 32 30 3a 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 3b 2d 2d 66 64 73 2d 62 6c 61 63 6b 2d 61 6c 70 68 61 2d 33 30 3a 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 33 29 3b 2d 2d 66 64 73 2d 62 6c 61 63 6b 2d 61 6c 70 68 61 2d 34 30 3a 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 34 29 3b 2d 2d 66 64 73 2d 62 6c 61 63 6b 2d 61 6c 70 68 61 2d 35 30 3a 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 35 29 3b 2d 2d 66 64 73 2d 62 6c 61 63 6b 2d 61 6c 70 68 61 2d 36 30 3a 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 36 29 3b 2d 2d 66 64 73 2d 62 6c 61 63 Data Ascii: .1);--fds-black-alpha-15:rgba(0, 0, 0, 0.15);--fds-black-alpha-20:rgba(0, 0, 0, 0.2);--fds-black-alpha-30:rgba(0, 0, 0, 0.3);--fds-black-alpha-40:rgba(0, 0, 0, 0.4);--fds-black-alpha-50:rgba(0, 0, 0, 0.5);--fds-black-alpha-60:rgba(0, 0, 0, 0.6);--fds-blac
2024-05-25 23:00:10 UTC	1500	IN	Data Raw: 73 2d 73 70 65 63 74 72 75 6d 2d 6f 72 61 6e 67 65 2d 74 69 6e 74 2d 37 30 3a 23 46 43 44 45 43 35 3b 2d 2d 66 64 73 2d 73 70 65 63 74 72 75 6d 2d 6f 72 61 6e 67 65 2d 74 69 6e 74 2d 39 30 3a 23 46 45 46 34 45 43 3b 2d 2d 66 64 73 2d 73 70 65 63 74 72 75 6d 2d 73 65 61 66 6f 61 6d 2d 74 69 6e 74 2d 37 30 3a 23 43 41 45 45 46 39 3b 2d 2d 66 64 73 2d 73 70 65 63 74 72 75 6d 2d 73 6c 61 74 65 2d 64 61 72 6b 2d 32 3a 23 38 39 41 31 41 43 3b 2d 2d 66 64 73 2d 73 70 65 63 74 72 75 6d 2d 73 6c 61 74 65 2d 74 69 6e 74 2d 37 30 3a 23 45 41 45 46 46 32 3b 2d 2d 66 64 73 2d 73 70 65 63 74 72 75 6d 2d 74 65 61 6c 3a 23 36 42 43 45 42 42 3b 2d 2d 66 64 73 2d 73 70 65 63 74 72 75 6d 2d 74 65 61 6c 2d 64 61 72 6b 2d 31 3a 23 34 44 42 42 41 36 3b 2d 2d 66 64 73 2d 73 70 Data Ascii: s-spectrum-orange-tint-70:#FCDEC5;--fds-spectrum-orange-tint-90:#FEF4EC;--fds-spectrum-seafoam-tint-70:#CAEEF9;--fds-spectrum-slate-dark-2:#89A1AC;--fds-spectrum-slate-tint-70:#EAEFF2;--fds-spectrum-teal:#6BCEBB;--fds-spectrum-teal-dark-1:#4DBBA6;--fds-sp
2024-05-25 23:00:10 UTC	1500	IN	Data Raw: 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2d 67 72 65 65 6e 3a 76 61 72 28 2d 2d 70 6f 73 69 74 69 76 65 29 3b 2d 2d 62 61 64 67 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2d 6c 69 67 68 74 2d 62 6c 75 65 3a 76 61 72 28 2d 2d 68 69 67 68 6c 69 67 68 74 2d 62 67 29 3b 2d 2d 62 61 64 67 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2d 72 65 64 3a 76 61 72 28 2d 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 62 61 64 67 65 29 3b 2d 2d 62 61 64 67 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2d 79 65 6c 6c 6f 77 3a 76 61 72 28 2d 2d 62 61 73 65 2d 6c 65 6d 6f 6e 29 3b 2d 2d 62 61 73 65 2d 62 6c 75 65 3a 23 31 38 37 37 46 32 3b 2d 2d 62 61 73 65 2d 63 68 65 72 72 79 3a 23 46 33 34 32 35 46 3b 2d 2d 62 61 73 65 2d 67 72 61 70 Data Ascii: e-background-color-green:var(--positive);--badge-background-color-light-blue:var(--highlight-bg);--badge-background-color-red:var(--notification-badge);--badge-background-color-yellow:var(--base-lemon);--base-blue:#1877F2;--base-cherry:#F3425F;--base-grap
2024-05-25 23:00:10 UTC	1500	IN	Data Raw: 65 72 74 28 38 25 29 20 73 65 70 69 61 28 31 30 25 29 20 73 61 74 75 72 61 74 65 28 32 30 30 25 29 20 73 61 74 75 72 61 74 65 28 32 30 30 25 29 20 73 61 74 75 72 61 74 65 28 31 36 36 25 29 20 68 75 65 2d 72 6f 74 61 74 65 28 31 37 37 64 65 67 29 20 62 72 69 67 68 74 6e 65 73 73 28 31 30 34 25 29 20 63 6f 6e 74 72 61 73 74 28 39 31 25 29 3b 2d 2d 66 69 6c 74 65 72 2d 73 65 63 6f 6e 64 61 72 79 2d 69 63 6f 6e 3a 69 6e 76 65 72 74 28 33 39 25 29 20 73 65 70 69 61 28 32 31 25 29 20 73 61 74 75 72 61 74 65 28 32 30 30 25 29 20 73 61 74 75 72 61 74 65 28 31 30 39 2e 35 25 29 20 68 75 65 2d 72 6f 74 61 74 65 28 31 37 34 64 65 67 29 20 62 72 69 67 68 74 6e 65 73 73 28 39 34 25 29 20 63 6f 6e 74 72 61 73 74 28 38 36 25 29 3b 2d 2d 66 69 6c 74 65 72 2d 77 61 72 6e Data Ascii: ert(8%) sepia(10%) saturate(200%) saturate(200%) saturate(166%) hue-rotate(177deg) brightness(104%) contrast(91%);--filter-secondary-icon:invert(39%) sepia(21%) saturate(200%) saturate(109.5%) hue-rotate(174deg) brightness(94%) contrast(86%);--filter-warn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.6	59110	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:10 UTC	910	OUT	POST /ajax/qm/?__a=1&__user=0&__comet_req=15&jazoest=2936 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 132 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/Codashop.IDofficial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:10 UTC	132	OUT	Data Raw: 65 76 65 6e 74 5f 69 64 3d 37 33 37 33 30 37 35 39 31 30 39 35 31 30 36 38 32 31 30 26 6d 61 72 6b 65 72 5f 70 61 67 65 5f 74 69 6d 65 3d 31 33 32 36 26 73 63 72 69 70 74 5f 70 61 74 68 3d 58 43 6f 6d 65 74 50 72 6f 66 69 6c 65 56 61 6e 69 74 79 43 6f 6e 74 72 6f 6c 6c 65 72 26 77 65 69 67 68 74 3d 30 26 63 6c 69 65 6e 74 5f 73 74 61 72 74 3d 31 26 6c 73 64 3d 41 56 72 6a 39 55 50 5f 77 38 49 Data Ascii: event_id=7373075910951068210&marker_page_time=1326&script_path=XCometProfileVanityController&weight=0&client_start=1&lsd=AVrj9UP_w8I
2024-05-25 23:00:10 UTC	1767	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(self), clipboard-write=(self), compute-pressure=(), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=*, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(self), private-state-token-issuance=(), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=(self);report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report" Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Content-Type-Options: nosniff
2024-05-25 23:00:10 UTC	1227	IN	Data Raw: 72 65 70 6f 72 74 2d 74 6f 3a 20 7b 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 6f 6f 70 5c 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 2c 22 69 6e 63 6c 75 64 65 5f 73 75 62 64 6f 6d 61 69 6e 73 22 3a 74 72 75 65 7d 2c 20 7b 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 Data Ascii: report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/c
2024-05-25 23:00:10 UTC	73	IN	Data Raw: 33 65 0d 0a 66 6f 72 20 28 3b 3b 29 3b 7b 22 5f 5f 61 72 22 3a 31 2c 22 70 61 79 6c 6f 61 64 22 3a 6e 75 6c 6c 2c 22 6c 69 64 22 3a 22 37 33 37 33 30 37 35 39 31 32 36 38 36 32 35 33 38 37 35 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 3efor (;;);{"__ar":1,"payload":null,"lid":"7373075912686253875"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.6	59116	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:11 UTC	599	OUT	GET /rsrc.php/v3/yE/r/ScCOyQO1RkJ.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:11 UTC	1956	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: aMiU5vWTRk9ho0KTKR5pGg== Expires: Wed, 21 May 2025 23:03:25 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: kQzjr09ND4iSx+mebzpmVawJZ2Os0n0s/6cpg+CWV9+RQB55Fe9dHcq6KF0yW0BhuL+L29oXYVtNj4gFV9zAUg== Date: Sat, 25 May 2024 23:00:11 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=4, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 277636
2024-05-25 23:00:11 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-05-25 23:00:11 UTC	15859	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 67 6c 6f 62 61 6c 54 68 69 73 7c 7c 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 73 65 6c 66 7c 7c 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 67 6c 6f 62 61 6c 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 41 62 6f 72 74 43 6f 6e 74 72 6f 6c 6c 65 72 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 72 65 74 75 72 6e 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 74 68 69 73 2e 5f 5f 6c 69 73 74 65 6e Data Ascii: /FB_PKG_DELIM/"use strict";(function(){var a=typeof globalThis!=="undefined"&&globalThis\|\|typeof self!=="undefined"&&self\|\|typeof global!=="undefined"&&global;if(typeof a.AbortController!=="undefined")return;var b=function(){function a(){this.__listen
2024-05-25 23:00:11 UTC	16384	IN	Data Raw: 20 74 68 69 73 2e 5f 69 6e 76 6f 6b 65 28 22 74 68 72 6f 77 22 2c 61 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 22 72 65 74 75 72 6e 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 6e 76 6f 6b 65 28 22 72 65 74 75 72 6e 22 2c 61 29 7d 3b 62 2e 63 72 65 61 74 65 43 6c 61 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 62 5b 63 5d 3b 64 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 64 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 3b 64 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 3b 22 76 61 6c 75 65 22 69 6e 20 64 26 26 28 64 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 3b 4f 62 6a 65 63 Data Ascii: this._invoke("throw",a)};e.prototype["return"]=function(a){return this._invoke("return",a)};b.createClass=function(){function a(a,b){for(var c=0;c<b.length;c++){var d=b[c];d.enumerable=d.enumerable\|\|!1;d.configurable=!0;"value"in d&&(d.writable=!0);Objec
2024-05-25 23:00:11 UTC	16384	IN	Data Raw: 6e 74 20 23 22 2b 61 2b 22 3b 20 25 73 22 3b 62 2e 6c 65 6e 67 74 68 3e 30 26 26 28 64 2b 3d 22 20 50 61 72 61 6d 73 3a 20 22 2b 62 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 25 73 22 7d 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 29 3b 61 3d 28 68 7c 7c 28 68 3d 63 28 22 45 6e 76 22 29 29 29 2e 73 68 6f 77 5f 69 6e 76 61 72 69 61 6e 74 5f 64 65 63 6f 64 65 72 3d 3d 3d 21 30 3f 22 76 69 73 69 74 20 22 2b 6a 28 61 2c 62 29 2b 22 20 74 6f 20 73 65 65 20 74 68 65 20 66 75 6c 6c 20 6d 65 73 73 61 67 65 2e 22 3a 22 22 3b 72 65 74 75 72 6e 7b 6d 65 73 73 61 67 65 3a 64 2c 64 65 63 6f 64 65 72 4c 69 6e 6b 3a 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 61 2c 62 29 7b 61 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 69 6e 74 65 72 6e 61 6c 66 62 2e Data Ascii: nt #"+a+"; %s";b.length>0&&(d+=" Params: "+b.map(function(a){return"%s"}).join(", "));a=(h\|\|(h=c("Env"))).show_invariant_decoder===!0?"visit "+j(a,b)+" to see the full message.":"";return{message:d,decoderLink:a}}function j(a,b){a="https://www.internalfb.
2024-05-25 23:00:11 UTC	16384	IN	Data Raw: 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 5f 22 2b 28 63 3d 3d 3d 6e 75 6c 6c 3f 22 6e 75 6c 6c 22 3a 74 79 70 65 6f 66 20 63 29 2c 65 2e 6e 61 6d 65 3d 66 7d 63 61 74 63 68 28 61 29 7b 7d 74 72 79 7b 67 3d 63 3d 3d 3d 6e 75 6c 6c 7c 7c 63 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 63 2e 73 74 61 63 6b 3b 28 74 79 70 65 6f 66 20 67 21 3d 3d 22 73 74 72 69 6e 67 22 7c 7c 67 3d 3d 3d 22 22 29 26 26 28 67 3d 65 2e 73 74 61 63 6b 29 3b 28 74 79 70 65 6f 66 20 67 21 3d 3d 22 73 74 72 69 6e 67 22 7c 7c 67 3d 3d 3d 22 22 29 26 26 28 67 3d 68 28 22 22 29 2e 73 74 61 63 6b 29 3b 65 2e 73 74 61 63 6b 3d 65 2e 6e 61 6d 65 2b 22 3a 20 22 2b 65 2e 6d 65 73 73 61 67 65 2b 22 5c 6e 22 2b 67 2e 73 70 6c 69 74 28 22 5c 6e 22 29 2e 73 6c 69 63 65 28 31 29 2e Data Ascii: handledRejection_"+(c===null?"null":typeof c),e.name=f}catch(a){}try{g=c===null\|\|c===void 0?void 0:c.stack;(typeof g!=="string"\|\|g==="")&&(g=e.stack);(typeof g!=="string"\|\|g==="")&&(g=h("").stack);e.stack=e.name+": "+e.message+"\n"+g.split("\n").slice(1).
2024-05-25 23:00:11 UTC	1500	IN	Data Raw: 69 73 2e 24 41 72 62 69 74 65 72 45 76 65 6e 74 48 6f 6c 64 65 72 31 5b 61 5d 3b 63 21 3d 3d 22 70 65 72 73 69 73 74 65 6e 74 22 26 26 74 68 69 73 2e 24 41 72 62 69 74 65 72 45 76 65 6e 74 48 6f 6c 64 65 72 32 28 61 29 3b 69 66 28 63 21 3d 3d 22 65 76 65 6e 74 22 29 7b 76 61 72 20 64 3b 66 6f 72 28 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 66 3d 6e 65 77 20 41 72 72 61 79 28 65 3e 31 3f 65 2d 31 3a 30 29 2c 67 3d 31 3b 67 3c 65 3b 67 2b 2b 29 66 5b 67 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 67 5d 3b 72 65 74 75 72 6e 28 64 3d 62 2e 70 72 6f 74 6f 74 79 70 65 2e 68 6f 6c 64 45 76 65 6e 74 29 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 64 2c 5b 74 68 69 73 2c 61 5d 2e 63 6f 6e 63 61 74 28 66 29 29 7d 72 65 74 75 72 6e 20 76 6f 69 64 20 Data Ascii: is.$ArbiterEventHolder1[a];c!=="persistent"&&this.$ArbiterEventHolder2(a);if(c!=="event"){var d;for(var e=arguments.length,f=new Array(e>1?e-1:0),g=1;g<e;g++)f[g-1]=arguments[g];return(d=b.prototype.holdEvent).call.apply(d,[this,a].concat(f))}return void
2024-05-25 23:00:11 UTC	14884	IN	Data Raw: 74 22 3a 6e 65 77 20 4d 61 70 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 61 29 7b 6e 2e 61 64 64 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 65 28 61 29 7b 6e 5b 22 64 65 6c 65 74 65 22 5d 28 61 29 2c 6d 2e 69 6e 66 6f 72 6d 28 68 2c 61 2c 22 70 65 72 73 69 73 74 65 6e 74 22 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 61 2c 62 29 7b 6f 2e 61 64 64 28 70 28 61 2c 62 29 29 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 2c 62 2c 63 29 7b 6d 2e 69 6e 66 6f 72 6d 28 70 28 61 2c 62 29 2c 63 2c 22 70 65 72 73 69 73 74 65 6e 74 22 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 61 29 7b 6d 2e 69 6e 66 6f 72 6d 28 6a 2c 61 2c 22 70 65 72 73 69 73 74 65 6e 74 22 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 61 29 7b 72 65 74 75 72 6e 20 6d 2e 73 75 62 73 63 72 69 62 65 28 68 2c 66 75 6e 63 74 69 Data Ascii: t":new Map()}}function d(a){n.add(a)}function e(a){n["delete"](a),m.inform(h,a,"persistent")}function f(a,b){o.add(p(a,b))}function q(a,b,c){m.inform(p(a,b),c,"persistent")}function r(a){m.inform(j,a,"persistent")}function s(a){return m.subscribe(h,functi
2024-05-25 23:00:11 UTC	16384	IN	Data Raw: 66 5b 30 5d 3b 66 3d 66 5b 31 5d 3b 68 5b 69 5d 3d 66 7d 72 65 74 75 72 6e 7b 73 65 74 50 72 6f 70 73 3a 62 2c 73 74 72 69 6e 67 50 72 6f 70 73 3a 67 2c 76 65 63 74 6f 72 50 72 6f 70 73 3a 68 7d 7d 3b 61 2e 63 6f 6d 62 69 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3b 61 21 3d 6e 75 6c 6c 26 26 62 21 3d 6e 75 6c 6c 3f 28 61 2e 73 74 72 69 6e 67 50 72 6f 70 73 3d 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 7d 2c 62 2e 73 74 72 69 6e 67 50 72 6f 70 73 2c 61 2e 73 74 72 69 6e 67 50 72 6f 70 73 29 2c 61 2e 73 65 74 50 72 6f 70 73 3d 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 7d 2c 62 2e 73 65 74 50 72 6f 70 73 2c 61 2e 73 65 74 50 72 6f 70 73 29 2c 63 3d 61 29 3a 61 21 3d 6e Data Ascii: f[0];f=f[1];h[i]=f}return{setProps:b,stringProps:g,vectorProps:h}};a.combine=function(a,b){var c;a!=null&&b!=null?(a.stringProps=babelHelpers["extends"]({},b.stringProps,a.stringProps),a.setProps=babelHelpers["extends"]({},b.setProps,a.setProps),c=a):a!=n
2024-05-25 23:00:11 UTC	16384	IN	Data Raw: 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 52 61 77 51 75 65 72 79 2e 63 61 6c 6c 28 74 68 69 73 2c 63 28 22 55 72 69 4e 65 65 64 52 61 77 51 75 65 72 79 53 56 43 68 65 63 6b 65 72 22 29 2e 69 73 44 6f 6d 61 69 6e 4e 65 65 64 52 61 77 51 75 65 72 79 2c 63 28 22 50 48 50 51 75 65 72 79 53 65 72 69 61 6c 69 7a 65 72 4e 6f 45 6e 63 6f 64 69 6e 67 22 29 29 7d 3b 65 2e 74 6f 53 74 72 69 6e 67 50 72 65 73 65 72 76 65 51 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 50 72 65 73 65 72 76 65 51 75 65 72 79 2e 63 61 6c 6c 28 74 68 69 73 2c 63 28 22 55 72 69 4e 65 65 64 52 61 77 51 75 65 72 79 53 56 43 68 65 63 6b 65 72 22 29 2e 69 73 44 6f 6d 61 69 6e 4e 65 65 64 52 61 77 51 75 65 Data Ascii: totype.toStringRawQuery.call(this,c("UriNeedRawQuerySVChecker").isDomainNeedRawQuery,c("PHPQuerySerializerNoEncoding"))};e.toStringPreserveQuery=function(){return a.prototype.toStringPreserveQuery.call(this,c("UriNeedRawQuerySVChecker").isDomainNeedRawQue
2024-05-25 23:00:11 UTC	14884	IN	Data Raw: 7b 6c 3d 61 3b 66 6f 72 28 61 3d 30 3b 61 3c 6b 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 72 20 62 3d 6b 5b 61 5d 3b 62 28 6c 29 7d 6b 3d 5b 5d 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 74 68 69 73 2e 24 31 3d 61 7d 76 61 72 20 65 3d 61 2e 70 72 6f 74 6f 74 79 70 65 3b 65 2e 67 65 74 4d 6f 64 75 6c 65 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 24 31 3b 72 65 74 75 72 6e 20 61 7d 3b 65 2e 67 65 74 4d 6f 64 75 6c 65 49 64 41 73 52 65 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 24 31 7d 3b 65 2e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2c 63 3d 74 68 69 73 2e 24 32 3b 64 28 22 4a 53 52 65 73 6f 75 72 63 65 45 76 65 6e 74 73 22 29 2e 6e 6f 74 69 66 79 Data Ascii: {l=a;for(a=0;a<k.length;a++){var b=k[a];b(l)}k=[]};function a(a){this.$1=a}var e=a.prototype;e.getModuleId=function(){var a=this.$1;return a};e.getModuleIdAsRef=function(){return this.$1};e.load=function(){var a=this,c=this.$2;d("JSResourceEvents").notify

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.6	59115	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:11 UTC	622	OUT	GET /rsrc.php/v3/yB/l/0,cross/yS8ywFQ5XSl.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:11 UTC	1966	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: UQTS8TRKa3ifa94KXfThsA== Expires: Sun, 25 May 2025 05:05:21 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: cVbBbv5L9kdhBJYgw6kCbA+t3boGRNnGyS7tiyb/opMo+Sh6ikULfj8KdQFPz6OZyCBrzxz8uB5WkJrjbnML2w== Date: Sat, 25 May 2024 23:00:11 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3410, tp=-1, tpl=-1, uplat=2, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 620698
2024-05-25 23:00:11 UTC	1	IN	Data Raw: 2e Data Ascii: .
2024-05-25 23:00:11 UTC	15840	IN	Data Raw: 5f 39 64 6c 73 7b 6f 76 65 72 66 6c 6f 77 2d 79 3a 73 63 72 6f 6c 6c 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 5f 39 74 31 64 7b 6f 76 65 72 66 6c 6f 77 2d 79 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 5f 39 64 6c 73 20 2e 5f 36 73 35 64 7b 6f 76 65 72 66 6c 6f 77 2d 79 3a 76 69 73 69 62 6c 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 5f 36 73 35 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 77 65 62 2d 77 61 73 68 29 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 6f 76 65 72 73 63 72 6f 6c 6c 2d 62 65 68 61 76 69 6f 72 2d 79 3a 6e 6f 6e 65 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 20 72 65 64 75 63 65 29 7b 2e 5f 36 Data Ascii: _9dls{overflow-y:scroll!important}._9t1d{overflow-y:auto!important}._9dls ._6s5d{overflow-y:visible!important}._6s5d{background-color:var(--web-wash);-webkit-font-smoothing:antialiased;overscroll-behavior-y:none}@media (prefers-reduced-motion: reduce){._6
2024-05-25 23:00:11 UTC	16384	IN	Data Raw: 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 31 31 70 78 7d 2e 78 31 6d 68 38 67 30 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 78 31 6d 6a 34 67 63 64 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 6d 65 73 73 65 6e 67 65 72 2d 63 61 72 64 2d 73 70 61 63 69 6e 67 29 7d 2e 78 31 6d 6e 6b 37 33 6b 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 7d 2e 78 31 6d 6e 77 62 70 36 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 32 34 70 78 7d 2e 78 31 6d 70 6b 67 67 70 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 35 70 78 7d 2e 78 31 6d 76 69 30 6d 76 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 64 65 65 6d 70 68 61 73 69 7a 65 64 Data Ascii: -top-right-radius:11px}.x1mh8g0r{margin-left:0}.x1mj4gcd{padding-right:var(--messenger-card-spacing)}.x1mnk73k{border-top-color:rgba(0,0,0,.2)}.x1mnwbp6{border-bottom-right-radius:24px}.x1mpkggp{padding-right:5px}.x1mvi0mv{color:var(--primary-deemphasized
2024-05-25 23:00:11 UTC	16384	IN	Data Raw: 31 67 73 6c 6f 68 70 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 70 78 7d 2e 78 31 68 32 6d 74 37 75 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 34 70 78 7d 2e 78 31 68 67 64 6d 33 7b 62 6f 74 74 6f 6d 3a 34 39 2e 39 25 7d 2e 78 31 68 68 7a 75 7a 6e 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 38 70 78 7d 2e 78 31 68 71 35 67 6a 34 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 34 70 78 7d 2e 78 31 68 73 68 6a 66 7a 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 36 70 78 7d 2e 78 31 68 75 77 77 74 68 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 33 70 78 7d 2e 78 31 68 76 6c 38 37 38 7b 6d 61 78 2d 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 38 70 78 29 7d 2e 78 31 68 7a 63 6f 35 31 7b 6d 61 78 2d 77 69 64 74 68 3a 76 61 72 28 2d Data Ascii: 1gslohp{margin-top:4px}.x1h2mt7u{border-bottom-width:4px}.x1hgdm3{bottom:49.9%}.x1hhzuzn{padding-bottom:18px}.x1hq5gj4{margin-bottom:24px}.x1hshjfz{min-height:16px}.x1huwwth{margin-bottom:-3px}.x1hvl878{max-width:calc(100% - 8px)}.x1hzco51{max-width:var(-
2024-05-25 23:00:11 UTC	16384	IN	Data Raw: 66 73 65 74 3a 38 34 2e 38 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 36 32 64 65 67 29 7d 35 30 25 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 34 32 2e 34 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 37 32 64 65 67 29 7d 37 35 25 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 38 34 2e 38 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 36 32 64 65 67 29 7d 31 30 30 25 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 38 2e 38 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 39 30 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 78 31 63 35 72 78 68 79 2d 42 7b 30 25 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 31 30 30 Data Ascii: fset:84.8px;transform:rotate(162deg)}50%{stroke-dashoffset:42.4px;transform:rotate(72deg)}75%{stroke-dashoffset:84.8px;transform:rotate(162deg)}100%{stroke-dashoffset:18.8px;transform:rotate(-90deg)}}@keyframes x1c5rxhy-B{0%{max-height:100px;opacity:1}100
2024-05-25 23:00:11 UTC	1500	IN	Data Raw: 61 73 68 6f 66 66 73 65 74 3a 39 38 2e 39 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 37 32 64 65 67 29 7d 37 35 25 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 39 37 2e 39 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 36 32 64 65 67 29 7d 31 30 30 25 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 34 33 2e 39 38 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 39 30 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 78 6a 74 70 7a 7a 70 2d 42 7b 30 25 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 36 70 78 3b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 78 6a 7a Data Ascii: ashoffset:98.9px;transform:rotate(72deg)}75%{stroke-dashoffset:197.9px;transform:rotate(162deg)}100%{stroke-dashoffset:43.98px;transform:rotate(-90deg)}}@keyframes xjtpzzp-B{0%{margin-bottom:-6px;opacity:0}100%{margin-bottom:10px;opacity:1}}@keyframes xjz
2024-05-25 23:00:11 UTC	14884	IN	Data Raw: 63 38 2d 42 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 36 29 20 72 6f 74 61 74 65 28 36 64 65 67 29 7d 32 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 36 29 20 72 6f 74 61 74 65 28 2d 36 64 65 67 29 7d 35 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 36 29 20 72 6f 74 61 74 65 28 31 32 64 65 67 29 7d 37 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 36 29 20 72 6f 74 61 74 65 28 2d 33 64 65 67 29 7d 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 36 29 20 72 6f 74 61 74 65 28 30 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 78 72 76 6c 65 73 6c 2d 42 7b 31 30 30 25 7b 62 6f 74 74 6f 6d 3a 30 3b 6f 70 61 63 69 74 79 3a 30 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 78 73 6a 79 Data Ascii: c8-B{0%{transform:scale(.6) rotate(6deg)}25%{transform:scale(.6) rotate(-6deg)}50%{transform:scale(.6) rotate(12deg)}75%{transform:scale(.6) rotate(-3deg)}100%{transform:scale(.6) rotate(0deg)}}@keyframes xrvlesl-B{100%{bottom:0;opacity:0}}@keyframes xsjy
2024-05-25 23:00:11 UTC	16384	IN	Data Raw: 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 61 6c 77 61 79 73 2d 77 68 69 74 65 29 7d 2e 78 6d 71 6c 69 77 62 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6c 69 6e 65 2d 74 68 72 6f 75 67 68 7d 2e 78 6d 72 30 36 6e 71 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 73 6f 6c 69 64 20 31 70 78 20 76 61 72 28 2d 2d 77 61 73 68 29 7d 2e 78 6e 34 36 34 6c 31 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 32 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 62 61 73 65 2d 62 6c 75 65 29 7d 2e 78 6e 6e 74 36 69 69 7b 6f 75 74 6c 69 6e 65 3a 32 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 62 61 73 65 2d 62 6c 75 65 29 7d 2e 78 6e 6f 63 34 39 65 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 73 6f 6c 69 64 7d 2e 78 6f 30 37 6c 71 6a 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 69 6e 73 65 74 20 Data Ascii: x solid var(--always-white)}.xmqliwb{text-decoration:line-through}.xmr06nq{border-top:solid 1px var(--wash)}.xn464l1{border-top:2px solid var(--base-blue)}.xnnt6ii{outline:2px solid var(--base-blue)}.xnoc49e{border-top:solid}.xo07lqj{border-top:1px inset
2024-05-25 23:00:11 UTC	16384	IN	Data Raw: 68 74 3a 31 2e 32 35 7d 2e 78 31 33 33 71 75 34 72 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 72 65 6d 7d 2e 78 31 33 33 72 33 36 70 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 34 70 78 20 76 61 72 28 2d 2d 73 68 61 64 6f 77 2d 31 29 7d 2e 78 31 33 34 34 6f 74 71 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 6d 65 6e 75 2d 69 74 65 6d 2d 62 61 73 65 2d 70 61 64 64 69 6e 67 2d 68 6f 72 69 7a 6f 6e 74 61 6c 29 7d 2e 78 31 33 34 64 62 6c 74 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 32 31 70 78 7d 2e 78 31 33 34 67 7a 6d 72 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 73 69 7a 65 2d 38 29 7d 2e 78 31 33 35 35 71 61 6b 7b 7a 2d 69 6e 64 65 78 3a 32 30 7d Data Ascii: ht:1.25}.x133qu4r{padding-left:1rem}.x133r36p{box-shadow:0 1px 4px var(--shadow-1)}.x1344otq{padding-left:var(--menu-item-base-padding-horizontal)}.x134dblt{border-top-right-radius:21px}.x134gzmr{border-top-right-radius:var(--size-8)}.x1355qak{z-index:20}
2024-05-25 23:00:11 UTC	14884	IN	Data Raw: 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 31 30 73 7d 2e 78 31 38 66 36 67 33 7a 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 33 30 70 78 7d 2e 78 31 38 66 39 63 66 39 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 37 36 33 65 65 36 7d 2e 78 31 38 66 6e 32 6a 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 6f 6e 2d 64 61 72 6b 29 7d 2e 78 31 38 67 33 68 30 77 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 34 2e 32 35 70 78 7d 2e 78 31 38 68 6c 33 37 36 7b 66 6c 65 78 2d 67 72 6f 77 3a 31 30 30 7d 2e 78 31 38 68 77 6b 36 37 7b 63 6f 6c 75 6d 6e 2d 67 61 70 3a 32 30 70 78 7d 2e 78 31 38 69 33 30 Data Ascii: nimation-duration:10s}.x18f6g3z{border-bottom-left-radius:30px}.x18f9cf9{background-color:#763ee6}.x18fn2jl{background-color:var(--secondary-button-background-on-dark)}.x18g3h0w{margin-right:4.25px}.x18hl376{flex-grow:100}.x18hwk67{column-gap:20px}.x18i30

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.6	59112	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:11 UTC	874	OUT	GET /rsrc.php/v3isgV4/yQ/l/en_GB/gGsimpMHyxl0xPHEIazyWUNkYT6Pntg1cpOcBc5tVZ0hYT7n1sgH1lvKX5NuKWX3N0wutsx7AVq2pDYvatkvPhoOE7uP6vsv83liWdOEs54GVesZd6VEHGv5u1Rdzuzi16ygGc1wa-Oq19cr_l1DuzAtWVG4wS7SHTQOIRntr0ucTZxw3y91qmloYqXhV_-BvmtDG8_eJMlvvhSHqp55HfXW__mMwRo76sjR1pngFRlCsGN0FHzi95_wmB-51YxoStyBz2gE2pEQn4HVER6.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:11 UTC	1983	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: raHDbDl5DaH5vSSHIKwnJw== Expires: Sun, 25 May 2025 23:00:11 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: RJU4TK9yfjDIvCVrp2rpiUXHmS7JZzkXP0dQl9chVuY/ait5PcDaDS9c2qsHxfeuPzcB8HCbNBWQf8bqBavQaQ== Date: Sat, 25 May 2024 23:00:11 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=54, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 1022596
2024-05-25 23:00:11 UTC	1500	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 24 49 6e 74 65 72 6e 61 6c 45 6e 75 6d 55 74 69 6c 73 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 67 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 3d 6e 75 6c 6c 7c 7c 21 67 2e 63 61 6c 6c 28 61 2c 62 29 3f 6e 75 6c 6c 3a 61 5b 62 5d 7d 7d 76 61 72 20 68 3d 74 79 70 65 6f 66 20 57 65 61 6b 4d 61 70 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 6e 65 77 20 57 65 61 6b 4d 61 70 28 29 3a 6e 65 77 20 4d 61 70 28 29 3b 66 75 6e Data Ascii: ;/FB_PKG_DELIM/__d("$InternalEnumUtils",[],(function(a,b,c,d,e,f){"use strict";var g=Object.prototype.hasOwnProperty;function a(a){return function(b){return b==null\|\|!g.call(a,b)?null:a[b]}}var h=typeof WeakMap==="function"?new WeakMap():new Map();fun
2024-05-25 23:00:11 UTC	1500	IN	Data Raw: 6f 32 22 2c 66 6c 65 78 53 68 72 69 6e 6b 3a 22 78 73 38 33 6d 30 6b 22 2c 65 6e 64 3a 22 78 64 73 36 38 37 63 22 2c 6c 65 66 74 3a 6e 75 6c 6c 2c 72 69 67 68 74 3a 6e 75 6c 6c 2c 73 74 61 72 74 3a 22 78 31 37 71 6f 70 68 65 22 2c 6a 75 73 74 69 66 79 43 6f 6e 74 65 6e 74 3a 22 78 31 71 75 67 68 69 62 22 2c 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 3a 22 78 61 74 32 34 63 72 22 2c 6d 61 72 67 69 6e 45 6e 64 3a 22 78 31 31 69 35 72 6e 6d 22 2c 6d 61 72 67 69 6e 53 74 61 72 74 3a 22 78 31 6d 68 38 67 30 72 22 2c 6d 61 72 67 69 6e 54 6f 70 3a 22 78 64 6a 32 36 36 72 22 2c 6d 69 6e 48 65 69 67 68 74 3a 22 78 32 6c 77 6e 31 6a 22 2c 6d 69 6e 57 69 64 74 68 3a 22 78 65 75 75 67 6c 69 22 2c 70 61 64 64 69 6e 67 42 6f 74 74 6f 6d 3a 22 78 31 38 64 39 69 36 39 22 2c 70 Data Ascii: o2",flexShrink:"xs83m0k",end:"xds687c",left:null,right:null,start:"x17qophe",justifyContent:"x1qughib",marginBottom:"xat24cr",marginEnd:"x11i5rnm",marginStart:"x1mh8g0r",marginTop:"xdj266r",minHeight:"x2lwn1j",minWidth:"xeuugli",paddingBottom:"x18d9i69",p
2024-05-25 23:00:11 UTC	1500	IN	Data Raw: 2c 65 3d 64 3d 3d 3d 76 6f 69 64 20 30 3f 6e 75 6c 6c 3a 64 3b 64 3d 62 2e 64 65 74 61 63 68 65 64 3b 64 3d 64 3d 3d 3d 76 6f 69 64 20 30 3f 21 31 3a 64 3b 76 61 72 20 66 3d 62 2e 64 65 74 61 63 68 65 64 44 65 66 61 75 6c 74 56 61 6c 75 65 3b 66 3d 66 3d 3d 3d 76 6f 69 64 20 30 3f 21 31 3a 66 3b 62 2e 64 65 74 61 63 68 65 64 50 61 67 65 4f 66 66 73 65 74 73 3b 76 61 72 20 67 3d 62 2e 64 69 73 61 62 6c 65 4e 61 76 69 67 61 74 69 6f 6e 53 63 72 6f 6c 6c 52 65 73 65 74 2c 68 3d 67 3d 3d 3d 76 6f 69 64 20 30 3f 21 31 3a 67 3b 67 3d 62 2e 68 69 64 64 65 6e 57 68 65 6e 44 65 74 61 63 68 65 64 3b 67 3d 67 3d 3d 3d 76 6f 69 64 20 30 3f 21 31 3a 67 3b 76 61 72 20 73 3d 62 2e 6d 61 69 6e 74 61 69 6e 53 63 72 6f 6c 6c 46 6f 72 43 6f 6e 74 65 78 74 2c 76 3d 73 3d 3d Data Ascii: ,e=d===void 0?null:d;d=b.detached;d=d===void 0?!1:d;var f=b.detachedDefaultValue;f=f===void 0?!1:f;b.detachedPageOffsets;var g=b.disableNavigationScrollReset,h=g===void 0?!1:g;g=b.hiddenWhenDetached;g=g===void 0?!1:g;var s=b.maintainScrollForContext,v=s==
2024-05-25 23:00:11 UTC	1500	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 73 63 72 6f 6c 6c 22 2c 62 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 7d 7d 7d 2c 5b 43 2c 65 2c 41 5d 29 3b 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 79 2e 63 75 72 72 65 6e 74 3b 69 66 28 61 21 3d 6e 75 6c 6c 29 69 66 28 48 29 7b 71 2e 61 64 64 28 61 29 3b 69 66 28 21 43 29 7b 44 28 21 30 29 3b 72 3d 74 28 29 3b 69 66 28 72 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 62 3d 70 2e 67 65 74 28 72 29 3b 62 26 26 62 28 21 30 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 71 5b 22 64 65 6c 65 74 65 22 5d 28 61 29 7d 7d 65 6c 73 65 20 69 66 28 43 26 26 61 21 3d 3d 72 26 26 61 3d 3d 3d 74 28 29 29 7b 69 66 28 72 Data Ascii: ction(){return window.removeEventListener("scroll",b,{passive:!0})}}},[C,e,A]);l(function(){var a=y.current;if(a!=null)if(H){q.add(a);if(!C){D(!0);r=t();if(r!=null){var b=p.get(r);b&&b(!0)}}return function(){q["delete"](a)}}else if(C&&a!==r&&a===t()){if(r
2024-05-25 23:00:11 UTC	356	IN	Data Raw: 63 74 22 3b 61 3d 7b 61 64 64 41 6e 6e 6f 74 61 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 64 3d 63 28 22 76 63 2d 74 72 61 63 6b 65 72 22 29 2e 67 65 74 43 75 72 72 65 6e 74 4e 61 76 69 67 61 74 69 6f 6e 56 43 54 72 61 63 65 28 29 3b 64 21 3d 6e 75 6c 6c 26 26 64 2e 61 64 64 41 6e 6e 6f 74 61 74 69 6f 6e 28 61 2c 62 29 7d 2c 61 64 64 41 6e 6e 6f 74 61 74 69 6f 6e 44 6f 75 62 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 64 3d 63 28 22 76 63 2d 74 72 61 63 6b 65 72 22 29 2e 67 65 74 43 75 72 72 65 6e 74 4e 61 76 69 67 61 74 69 6f 6e 56 43 54 72 61 63 65 28 29 3b 64 21 3d 6e 75 6c 6c 26 26 64 2e 61 64 64 41 6e 6e 6f 74 61 74 69 6f 6e 44 6f 75 62 6c 65 28 61 2c 62 29 7d 2c 61 64 64 41 6e 6e 6f 74 61 74 69 6f 6e 49 Data Ascii: ct";a={addAnnotation:function(a,b){var d=c("vc-tracker").getCurrentNavigationVCTrace();d!=null&&d.addAnnotation(a,b)},addAnnotationDouble:function(a,b){var d=c("vc-tracker").getCurrentNavigationVCTrace();d!=null&&d.addAnnotationDouble(a,b)},addAnnotationI
2024-05-25 23:00:11 UTC	1500	IN	Data Raw: 7d 2c 61 64 64 46 69 72 73 74 4d 61 72 6b 65 72 50 6f 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 62 3d 3d 3d 76 6f 69 64 20 30 26 26 28 62 3d 63 28 22 70 65 72 66 6f 72 6d 61 6e 63 65 4e 6f 77 53 69 6e 63 65 41 70 70 53 74 61 72 74 22 29 28 29 29 3b 64 3d 3d 3d 76 6f 69 64 20 30 26 26 28 64 3d 7b 7d 29 3b 76 61 72 20 65 3d 63 28 22 76 63 2d 74 72 61 63 6b 65 72 22 29 2e 67 65 74 43 75 72 72 65 6e 74 4e 61 76 69 67 61 74 69 6f 6e 56 43 54 72 61 63 65 28 29 3b 65 21 3d 6e 75 6c 6c 26 26 62 21 3d 6e 75 6c 6c 26 26 62 3e 30 26 26 65 2e 61 64 64 46 69 72 73 74 4d 61 72 6b 65 72 50 6f 69 6e 74 28 61 2c 62 2c 64 29 7d 2c 61 64 64 4d 61 72 6b 65 72 50 6f 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 62 3d 3d 3d 76 6f 69 64 20 30 26 Data Ascii: },addFirstMarkerPoint:function(a,b,d){b===void 0&&(b=c("performanceNowSinceAppStart")());d===void 0&&(d={});var e=c("vc-tracker").getCurrentNavigationVCTrace();e!=null&&b!=null&&b>0&&e.addFirstMarkerPoint(a,b,d)},addMarkerPoint:function(a,b,d){b===void 0&
2024-05-25 23:00:11 UTC	1500	IN	Data Raw: 6c 59 28 61 29 7d 2c 73 65 74 52 6f 75 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 63 28 22 76 63 2d 74 72 61 63 6b 65 72 22 29 2e 67 65 74 43 75 72 72 65 6e 74 4e 61 76 69 67 61 74 69 6f 6e 56 43 54 72 61 63 65 28 29 3b 62 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 26 26 62 2e 73 65 74 54 72 61 63 65 50 6f 6c 69 63 79 28 61 29 7d 2c 73 65 74 75 70 4e 61 76 69 67 61 74 69 6f 6e 4d 75 74 61 74 69 6f 6e 52 6f 6f 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 63 28 22 76 63 2d 74 72 61 63 6b 65 72 22 29 2e 67 65 74 43 75 72 72 65 6e 74 4e 61 76 69 67 61 74 69 6f 6e 56 43 54 72 61 63 65 28 29 3b 69 66 28 62 21 3d 6e 75 6c 6c 29 7b 62 3d 62 3b 62 2e 6f 62 73 65 72 76 65 4d 75 74 61 74 69 6f 6e 28 61 29 3b 62 2e 72 65 67 69 73 Data Ascii: lY(a)},setRoute:function(a){var b=c("vc-tracker").getCurrentNavigationVCTrace();b!=null&&a!=null&&b.setTracePolicy(a)},setupNavigationMutationRoot:function(a){var b=c("vc-tracker").getCurrentNavigationVCTrace();if(b!=null){b=b;b.observeMutation(a);b.regis
2024-05-25 23:00:11 UTC	1143	IN	Data Raw: 22 72 65 61 63 74 22 29 29 2c 6b 3d 69 2e 75 73 65 43 6f 6e 74 65 78 74 2c 6c 3d 7b 63 6f 6e 74 65 6e 74 3a 7b 64 69 73 70 6c 61 79 3a 22 78 37 38 7a 75 6d 35 22 2c 66 6c 65 78 44 69 72 65 63 74 69 6f 6e 3a 22 78 64 74 35 79 74 66 22 2c 6d 69 6e 48 65 69 67 68 74 3a 22 78 67 36 69 66 66 37 22 2c 70 6f 73 69 74 69 6f 6e 3a 22 78 31 6e 32 6f 6e 72 36 22 2c 24 24 63 73 73 3a 21 30 7d 2c 63 6f 6e 74 65 6e 74 44 76 68 3a 7b 22 40 73 75 70 70 6f 72 74 73 20 28 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 30 30 64 76 68 29 5f 6d 69 6e 48 65 69 67 68 74 22 3a 22 78 69 70 70 75 67 35 22 2c 24 24 63 73 73 3a 21 30 7d 2c 63 6f 6e 74 65 6e 74 44 76 68 57 68 65 6e 4e 61 72 72 6f 77 3a 7b 22 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 37 39 70 78 29 5f 6d 69 Data Ascii: "react")),k=i.useContext,l={content:{display:"x78zum5",flexDirection:"xdt5ytf",minHeight:"xg6iff7",position:"x1n2onr6",$$css:!0},contentDvh:{"@supports (min-height: 100dvh)_minHeight":"xippug5",$$css:!0},contentDvhWhenNarrow:{"@media (max-width: 679px)_mi
2024-05-25 23:00:11 UTC	1500	IN	Data Raw: 74 61 62 6c 65 22 29 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 21 3d 3d 76 6f 69 64 20 30 7d 29 2c 76 3d 63 28 22 75 73 65 43 6f 6d 65 74 56 69 73 75 61 6c 43 68 61 6e 67 65 54 72 61 63 6b 65 72 22 29 28 29 3b 71 3d 6a 2e 6a 73 78 73 28 6a 2e 46 72 61 67 6d 65 6e 74 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 6a 2e 6a 73 78 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 28 68 7c 7c 28 68 3d 63 28 22 73 74 79 6c 65 78 22 29 29 29 28 6c 2e 6d 61 73 6b 2c 21 71 26 26 6c 2e 6d 61 73 6b 4f 76 65 72 6c 61 79 29 7d 29 2c 6a 2e 6a 73 78 28 63 28 22 42 61 73 65 43 6f 6e 74 65 78 74 75 61 6c 4c 61 79 65 72 41 6e 63 68 6f 72 52 6f 6f 74 2e 72 65 61 63 74 22 29 2c 7b 63 68 69 6c 64 72 65 6e 3a 6a 2e 6a 73 78 28 64 28 22 46 6f 63 75 73 52 65 67 69 6f Data Ascii: table")(function(){return p!==void 0}),v=c("useCometVisualChangeTracker")();q=j.jsxs(j.Fragment,{children:[j.jsx("div",{className:(h\|\|(h=c("stylex")))(l.mask,!q&&l.maskOverlay)}),j.jsx(c("BaseContextualLayerAnchorRoot.react"),{children:j.jsx(d("FocusRegio
2024-05-25 23:00:11 UTC	1262	IN	Data Raw: 2c 7b 68 69 64 64 65 6e 3a 74 2c 78 73 74 79 6c 65 3a 77 2c 63 68 69 6c 64 72 65 6e 3a 78 7d 29 7d 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 61 2e 6e 61 6d 65 2b 22 20 5b 66 72 6f 6d 20 22 2b 66 2e 69 64 2b 22 5d 22 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 42 61 73 65 45 6e 74 72 79 50 6f 69 6e 74 50 6f 70 6f 76 65 72 43 6f 6e 74 61 69 6e 65 72 2e 72 65 61 63 74 22 2c 5b 22 43 6f 6d 65 74 52 65 6c 61 79 22 2c 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 3d 68 7c 7c 28 68 3d 64 28 22 72 65 61 63 74 22 29 29 3b 62 3d 68 3b 76 61 72 20 6a 3d 62 2e 75 73 65 4c 61 79 6f 75 74 45 66 66 65 63 74 2c 6b 3d Data Ascii: ,{hidden:t,xstyle:w,children:x})}a.displayName=a.name+" [from "+f.id+"]";g["default"]=a}),98);__d("BaseEntryPointPopoverContainer.react",["CometRelay","react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|(h=d("react"));b=h;var j=b.useLayoutEffect,k=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.6	59114	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:11 UTC	610	OUT	GET /rsrc.php/v3iZ5G4/yN/l/en_GB/6bLr5PfhOK-.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:11 UTC	1983	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: N0gluZxKZGnNClT+sNX7nQ== Expires: Sun, 25 May 2025 11:30:03 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: ad4kKBwuUVsmr/ct1OgDhFJYSYgsKbI2gouvX9BG7AMJ0FcapU0EEdLk8VHBXotOJIxm5dDgDYDOZwQg98zIfQ== Date: Sat, 25 May 2024 23:00:11 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=10, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 999571
2024-05-25 23:00:11 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-05-25 23:00:11 UTC	15822	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 41 63 74 69 76 65 46 6f 63 75 73 52 65 67 69 6f 6e 55 74 69 6c 73 43 6f 6e 74 65 78 74 22 2c 5b 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 3b 61 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 62 3d 61 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 6e 75 6c 6c 29 3b 63 3d 62 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 63 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 48 65 72 6f 54 72 61 63 69 6e 67 43 6f 72 65 43 6f 6e 66 69 67 22 2c 5b 22 63 72 3a 38 39 30 37 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 67 5b 22 Data Ascii: /FB_PKG_DELIM/__d("ActiveFocusRegionUtilsContext",["react"],(function(a,b,c,d,e,f,g){"use strict";var h;a=h\|\|d("react");b=a.createContext(null);c=b;g["default"]=c}),98);__d("HeroTracingCoreConfig",["cr:8907"],(function(a,b,c,d,e,f,g){"use strict";g["
2024-05-25 23:00:11 UTC	16384	IN	Data Raw: 73 63 72 69 70 74 69 6f 6e 3a 67 7d 3b 6b 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 6f 6e 53 74 61 72 74 28 69 29 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 2c 62 2c 65 2c 66 2c 67 2c 68 2c 6a 2c 6c 29 7b 76 61 72 20 6d 3d 67 2b 61 3b 6d 3d 69 5b 6d 5d 3b 6a 3d 28 6a 3d 6a 29 21 3d 6e 75 6c 6c 3f 6a 3a 63 28 22 70 65 72 66 6f 72 6d 61 6e 63 65 4e 6f 77 53 69 6e 63 65 41 70 70 53 74 61 72 74 22 29 28 29 3b 6d 21 3d 6e 75 6c 6c 26 26 70 28 61 2c 62 2c 65 2c 66 2c 6d 2c 6a 2c 68 2c 6c 29 3b 69 66 28 6b 2e 73 69 7a 65 29 7b 76 61 72 20 6e 3d 7b 70 6c 61 63 65 68 6f 6c 64 65 72 49 44 3a 67 2b 61 2c 69 6e 74 65 72 61 63 74 69 6f 6e 49 44 3a 61 2c 70 61 67 65 6c 65 74 53 74 61 63 6b 3a 62 2c 73 70 61 6e 54 79 70 65 3a 65 2c 6e 61 Data Ascii: scription:g};k.forEach(function(a){a.onStart(i)})}}function n(a,b,e,f,g,h,j,l){var m=g+a;m=i[m];j=(j=j)!=null?j:c("performanceNowSinceAppStart")();m!=null&&p(a,b,e,f,m,j,h,l);if(k.size){var n={placeholderID:g+a,interactionID:a,pageletStack:b,spanType:e,na
2024-05-25 23:00:11 UTC	16384	IN	Data Raw: 64 64 28 62 29 3b 28 69 7c 7c 28 69 3d 63 28 22 45 78 65 63 75 74 69 6f 6e 45 6e 76 69 72 6f 6e 6d 65 6e 74 22 29 29 29 2e 63 61 6e 55 73 65 44 4f 4d 26 26 63 28 22 73 65 74 54 69 6d 65 6f 75 74 41 63 72 6f 73 73 54 72 61 6e 73 69 74 69 6f 6e 73 22 29 28 66 75 6e 63 74 69 6f 6e 28 29 7b 78 5b 22 64 65 6c 65 74 65 22 5d 28 62 29 7d 2c 36 65 34 29 3b 76 61 72 20 67 3d 28 66 3d 28 6b 7c 7c 28 6b 3d 64 28 22 50 72 6f 6d 69 73 65 41 6e 6e 6f 74 61 74 65 22 29 29 29 2e 67 65 74 44 69 73 70 6c 61 79 4e 61 6d 65 28 62 29 29 21 3d 6e 75 6c 6c 3f 66 3a 22 50 72 6f 6d 69 73 65 22 2c 68 3d 64 28 22 68 65 72 6f 2d 74 72 61 63 69 6e 67 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 29 2e 48 65 72 6f 50 6c 61 63 65 68 6f 6c 64 65 72 55 74 69 6c 73 2e 67 65 74 53 69 6d 70 6c 65 Data Ascii: dd(b);(i\|\|(i=c("ExecutionEnvironment"))).canUseDOM&&c("setTimeoutAcrossTransitions")(function(){x["delete"](b)},6e4);var g=(f=(k\|\|(k=d("PromiseAnnotate"))).getDisplayName(b))!=null?f:"Promise",h=d("hero-tracing-placeholder").HeroPlaceholderUtils.getSimple
2024-05-25 23:00:11 UTC	16384	IN	Data Raw: 29 29 29 2e 41 54 54 52 49 42 55 54 45 5f 4e 41 4d 45 5d 3d 68 2e 49 47 4e 4f 52 45 2c 61 29 2c 49 47 4e 4f 52 45 5f 44 59 4e 41 4d 49 43 3a 28 62 3d 7b 7d 2c 62 5b 68 2e 41 54 54 52 49 42 55 54 45 5f 4e 41 4d 45 5d 3d 68 2e 49 47 4e 4f 52 45 5f 44 59 4e 41 4d 49 43 2c 62 29 2c 49 47 4e 4f 52 45 5f 4c 41 54 45 5f 4d 55 54 41 54 49 4f 4e 3a 28 64 3d 7b 7d 2c 64 5b 68 2e 41 54 54 52 49 42 55 54 45 5f 4e 41 4d 45 5d 3d 68 2e 49 47 4e 4f 52 45 5f 4c 41 54 45 5f 4d 55 54 41 54 49 4f 4e 2c 64 29 2c 4c 4f 41 44 49 4e 47 5f 53 54 41 54 45 3a 28 65 3d 7b 7d 2c 65 5b 68 2e 41 54 54 52 49 42 55 54 45 5f 4e 41 4d 45 5d 3d 68 2e 4c 4f 41 44 49 4e 47 5f 53 54 41 54 45 2c 65 29 2c 4d 45 44 49 41 5f 56 43 5f 49 4d 41 47 45 3a 28 66 3d 7b 7d 2c 66 5b 68 2e 41 54 54 52 49 Data Ascii: ))).ATTRIBUTE_NAME]=h.IGNORE,a),IGNORE_DYNAMIC:(b={},b[h.ATTRIBUTE_NAME]=h.IGNORE_DYNAMIC,b),IGNORE_LATE_MUTATION:(d={},d[h.ATTRIBUTE_NAME]=h.IGNORE_LATE_MUTATION,d),LOADING_STATE:(e={},e[h.ATTRIBUTE_NAME]=h.LOADING_STATE,e),MEDIA_VC_IMAGE:(f={},f[h.ATTRI
2024-05-25 23:00:11 UTC	1500	IN	Data Raw: 22 3a 7b 7d 2c 22 64 6f 75 62 6c 65 22 3a 7b 7d 2c 62 6f 6f 6c 3a 7b 7d 2c 73 74 72 69 6e 67 5f 61 72 72 61 79 3a 7b 7d 2c 69 6e 74 5f 61 72 72 61 79 3a 7b 7d 2c 64 6f 75 62 6c 65 5f 61 72 72 61 79 3a 7b 7d 2c 62 6f 6f 6c 5f 61 72 72 61 79 3a 7b 7d 7d 2c 74 68 69 73 2e 74 61 67 53 65 74 3d 6e 65 77 20 4d 61 70 28 29 2c 74 68 69 73 2e 6e 61 76 44 6f 6e 65 3d 21 31 2c 74 68 69 73 2e 69 6e 74 65 72 61 63 74 69 6f 6e 54 79 70 65 3d 66 2c 74 68 69 73 2e 73 63 72 6f 6c 6c 65 64 3d 21 31 2c 74 68 69 73 2e 24 31 31 3d 64 28 22 43 4c 53 22 29 2e 67 65 74 43 4c 53 43 61 6c 6c 62 61 63 6b 28 29 2c 66 3d 3d 3d 22 49 4e 49 54 49 41 4c 5f 4c 4f 41 44 22 26 26 28 74 68 69 73 2e 24 31 32 3d 64 28 22 4c 43 50 22 29 2e 67 65 74 4c 43 50 43 61 6c 6c 62 61 63 6b 28 29 29 2c Data Ascii: ":{},"double":{},bool:{},string_array:{},int_array:{},double_array:{},bool_array:{}},this.tagSet=new Map(),this.navDone=!1,this.interactionType=f,this.scrolled=!1,this.$11=d("CLS").getCLSCallback(),f==="INITIAL_LOAD"&&(this.$12=d("LCP").getLCPCallback()),
2024-05-25 23:00:11 UTC	14884	IN	Data Raw: 6e 74 43 61 6e 64 69 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 3d 3d 76 6f 69 64 20 30 26 26 28 62 3d 7b 7d 29 2c 74 68 69 73 2e 61 64 64 4d 61 72 6b 65 72 50 6f 69 6e 74 28 6a 2c 61 2c 62 29 7d 3b 62 2e 61 64 64 56 69 73 75 61 6c 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 65 2c 66 29 7b 74 68 69 73 2e 73 63 72 6f 6c 6c 65 64 26 26 28 74 68 69 73 2e 63 75 72 72 65 6e 74 53 63 72 6f 6c 6c 59 3d 64 28 22 56 69 73 75 61 6c 43 6f 6d 70 6c 65 74 69 6f 6e 55 74 69 6c 22 29 2e 67 65 74 53 63 72 6f 6c 6c 50 6f 73 69 74 69 6f 6e 28 74 68 69 73 29 2e 73 63 72 6f 6c 6c 59 2c 74 68 69 73 2e 73 63 72 6f 6c 6c 65 64 3d 21 31 29 3b 61 3d 7b 6d 75 74 61 74 69 6f 6e 53 65 71 3a 61 2c 65 6c 65 6d 65 6e 74 3a 62 2c 74 69 6d 65 Data Ascii: ntCandidate=function(a,b){b===void 0&&(b={}),this.addMarkerPoint(j,a,b)};b.addVisualElement=function(a,b,c,e,f){this.scrolled&&(this.currentScrollY=d("VisualCompletionUtil").getScrollPosition(this).scrollY,this.scrolled=!1);a={mutationSeq:a,element:b,time
2024-05-25 23:00:11 UTC	16384	IN	Data Raw: 6e 65 77 20 4d 61 70 28 29 3b 6a 2e 76 69 73 69 62 6c 65 4c 6f 61 64 69 6e 67 45 6c 65 6d 65 6e 74 73 3d 6e 65 77 20 53 65 74 28 29 3b 6a 2e 24 56 69 73 75 61 6c 43 6f 6d 70 6c 65 74 69 6f 6e 54 72 61 63 69 6e 67 34 3d 30 3b 6a 2e 24 56 69 73 75 61 6c 43 6f 6d 70 6c 65 74 69 6f 6e 54 72 61 63 69 6e 67 35 3d 30 3b 6a 2e 24 56 69 73 75 61 6c 43 6f 6d 70 6c 65 74 69 6f 6e 54 72 61 63 69 6e 67 36 3d 5b 5d 3b 6a 2e 24 56 69 73 75 61 6c 43 6f 6d 70 6c 65 74 69 6f 6e 54 72 61 63 69 6e 67 37 3d 5b 5d 3b 6a 2e 6d 75 74 61 74 69 6f 6e 53 65 71 3d 30 3b 6a 2e 6d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 3d 6e 75 6c 6c 3b 6a 2e 69 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 3d 6e 75 6c 6c 3b 6a 2e 70 65 6e 64 69 6e 67 4d 75 74 61 74 69 6f 6e 73 3d 6e Data Ascii: new Map();j.visibleLoadingElements=new Set();j.$VisualCompletionTracing4=0;j.$VisualCompletionTracing5=0;j.$VisualCompletionTracing6=[];j.$VisualCompletionTracing7=[];j.mutationSeq=0;j.mutationObserver=null;j.intersectionObserver=null;j.pendingMutations=n
2024-05-25 23:00:11 UTC	16384	IN	Data Raw: 4d 65 6d 6f 72 79 7d 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 65 61 73 75 72 65 55 73 65 72 41 67 65 6e 74 53 70 65 63 69 66 69 63 4d 65 6d 6f 72 79 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 69 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 2e 72 65 70 6c 61 63 65 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 61 2e 72 65 70 6c 61 63 65 28 2f 5c 6e 2f 67 2c 22 20 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 73 2b 2f 67 2c 22 20 22 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 69 66 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 67 63 21 3d 3d 22 66 75 6e 63 74 Data Ascii: Memory}function a(){return window.performance&&typeof window.performance.measureUserAgentSpecificMemory==="function"}function i(a){return typeof a.replace==="function"?a.replace(/\n/g," ").replace(/\s+/g," "):null}function b(){if(typeof window.gc!=="funct
2024-05-25 23:00:11 UTC	14884	IN	Data Raw: 63 74 69 6f 6e 20 61 28 61 29 7b 69 66 28 21 6c 29 7b 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 68 2e 67 65 74 28 61 2e 74 61 72 67 65 74 29 3b 62 7c 7c 28 61 2e 74 61 72 67 65 74 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 7c 7c 61 2e 74 61 72 67 65 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 6c 65 6d 65 6e 74 26 26 74 79 70 65 6f 66 20 61 2e 74 61 72 67 65 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 74 61 72 67 65 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 69 29 21 3d 6e 75 6c 6c 29 26 26 28 62 3d 6d 28 61 29 29 3b 62 26 26 28 62 2e 6d 65 74 72 69 63 73 2e 6d 61 72 6b 65 72 50 6f 69 6e 74 73 2e 6c 61 73 74 53 63 72 6f 6c 6c 45 76 65 6e 74 3d 7b 74 69 6d 65 53 69 6e 63 65 53 74 Data Ascii: ction a(a){if(!l){a=function(a){var b=h.get(a.target);b\|\|(a.target===window.document\|\|a.target instanceof Element&&typeof a.target.getAttribute==="function"&&a.target.getAttribute(i)!=null)&&(b=m(a));b&&(b.metrics.markerPoints.lastScrollEvent={timeSinceSt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.6	59113	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:11 UTC	610	OUT	GET /rsrc.php/v3i9144/yB/l/en_GB/x__yixK45EU.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:11 UTC	1982	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: HBH6d14Alpo+5g12kDvB9A== Expires: Sun, 25 May 2025 23:00:11 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: 6aiv9GFrLP7aMZMuJFWiyi01TRfLDpxpAp1SOYLIFh4oamvo95dwTqcakJozKpPuYh8GlJwoWkCNKrssiQds9w== Date: Sat, 25 May 2024 23:00:11 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3412, tp=-1, tpl=-1, uplat=54, ullat=1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 531206
2024-05-25 23:00:11 UTC	1500	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 4c 79 6e 78 47 65 6e 65 72 61 74 69 6f 6e 22 2c 5b 22 4c 69 6e 6b 73 68 69 6d 48 61 6e 64 6c 65 72 43 6f 6e 66 69 67 22 2c 22 55 52 49 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 76 61 72 20 68 2c 69 3d 6e 65 77 28 68 7c 7c 28 68 3d 63 28 22 55 52 49 22 29 29 29 28 63 28 22 4c 69 6e 6b 73 68 69 6d 48 61 6e 64 6c 65 72 43 6f 6e 66 69 67 22 29 2e 6c 69 6e 6b 73 68 69 6d 5f 70 61 74 68 29 2e 73 65 74 44 6f 6d 61 69 6e 28 63 28 22 4c 69 6e 6b 73 68 69 6d 48 61 6e 64 6c 65 72 43 6f 6e 66 69 67 22 29 2e 6c 69 6e 6b 73 68 69 6d 5f 68 6f 73 74 29 2c 6a 3d 7b 67 65 74 53 68 69 6d 55 52 49 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 Data Ascii: ;/FB_PKG_DELIM/__d("LynxGeneration",["LinkshimHandlerConfig","URI"],(function(a,b,c,d,e,f,g){var h,i=new(h\|\|(h=c("URI")))(c("LinkshimHandlerConfig").linkshim_path).setDomain(c("LinkshimHandlerConfig").linkshim_host),j={getShimURI:function(){return new
2024-05-25 23:00:11 UTC	1500	IN	Data Raw: 61 29 7b 76 61 72 20 63 3d 69 2e 67 65 74 4d 61 79 62 65 4e 6f 6e 46 42 4c 69 6e 6b 52 65 66 65 72 72 65 72 4a 53 4d 6f 64 65 28 61 2e 74 61 72 67 65 74 29 3b 69 66 28 21 63 29 72 65 74 75 72 6e 3b 76 61 72 20 64 3d 63 5b 30 5d 3b 63 3d 63 5b 31 5d 3b 73 77 69 74 63 68 28 64 29 7b 63 61 73 65 22 6f 72 69 67 69 6e 22 3a 69 2e 6f 72 69 67 69 6e 52 65 66 65 72 72 65 72 50 6f 6c 69 63 79 43 6c 69 63 6b 57 69 74 68 6f 75 74 4c 6f 67 28 63 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 69 65 22 3a 64 3d 6e 65 77 28 67 7c 7c 28 67 3d 62 28 22 55 52 49 22 29 29 29 28 63 2e 68 72 65 66 29 3b 61 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 68 28 64 2c 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 22 22 2c 63 2e 74 61 72 67 65 74 29 2c 21 30 29 3b 62 72 65 61 6b 7d 7d 3b 62 Data Ascii: a){var c=i.getMaybeNonFBLinkReferrerJSMode(a.target);if(!c)return;var d=c[0];c=c[1];switch(d){case"origin":i.originReferrerPolicyClickWithoutLog(c);break;case"ie":d=new(g\|\|(g=b("URI")))(c.href);a.preventDefault();h(d,window.open("",c.target),!0);break}};b
2024-05-25 23:00:11 UTC	1500	IN	Data Raw: 29 28 6a 29 3f 6a 2b 22 20 6e 6f 66 6f 6c 6c 6f 77 22 3a 22 6e 6f 66 6f 6c 6c 6f 77 22 29 3b 68 26 26 28 6a 3d 63 28 22 69 73 54 72 75 74 68 79 22 29 28 6a 29 3f 6a 2b 22 20 6e 6f 72 65 66 65 72 72 65 72 22 3a 22 6e 6f 72 65 66 65 72 72 65 72 22 29 3b 63 28 22 69 73 54 72 75 74 68 79 22 29 28 6c 29 26 26 28 70 3d 6c 29 3b 72 65 74 75 72 6e 20 69 2e 6a 73 78 28 22 61 22 2c 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 7d 2c 61 2c 7b 68 72 65 66 3a 6d 2e 74 6f 53 74 72 69 6e 67 28 29 7c 7c 6e 75 6c 6c 2c 72 65 6c 3a 6a 2c 72 65 66 3a 65 2c 22 64 61 74 61 2d 73 69 67 69 6c 22 3a 6e 2c 22 64 61 74 61 2d 6c 79 6e 78 2d 6d 6f 64 65 22 3a 6f 2c 22 64 61 74 61 2d 6c 6e 66 62 2d 6d 6f 64 65 22 3a 70 7d 29 29 7d 3b 72 65 74 75 72 6e 20 Data Ascii: )(j)?j+" nofollow":"nofollow");h&&(j=c("isTruthy")(j)?j+" noreferrer":"noreferrer");c("isTruthy")(l)&&(p=l);return i.jsx("a",babelHelpers["extends"]({},a,{href:m.toString()\|\|null,rel:j,ref:e,"data-sigil":n,"data-lynx-mode":o,"data-lnfb-mode":p}))};return
2024-05-25 23:00:11 UTC	1500	IN	Data Raw: 75 6c 6c 3f 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 7d 2c 61 2c 62 2e 70 61 79 6c 6f 61 64 29 3a 61 3b 63 61 73 65 22 72 65 6d 6f 76 65 43 61 6c 6c 6f 75 74 22 3a 69 66 28 61 2e 63 61 6c 6c 6f 75 74 49 44 21 3d 6e 75 6c 6c 26 26 61 2e 63 61 6c 6c 6f 75 74 49 44 3d 3d 3d 62 2e 70 61 79 6c 6f 61 64 29 7b 76 61 72 20 64 3d 61 2e 61 6e 63 68 6f 72 52 6f 6f 74 52 65 66 43 6f 6e 74 65 78 74 2c 65 3d 61 2e 61 6e 69 6d 61 74 69 6f 6e 43 6f 6e 74 65 78 74 2c 66 3d 61 2e 63 6f 6e 74 65 78 74 75 61 6c 4c 61 79 65 72 50 72 6f 70 73 2c 67 3d 61 2e 73 63 72 6f 6c 6c 61 62 6c 65 41 72 65 61 43 6f 6e 74 65 78 74 3b 72 65 74 75 72 6e 7b 61 6e 63 68 6f 72 52 6f 6f 74 52 65 66 43 6f 6e 74 65 78 74 3a 64 2c 61 6e 69 6d 61 74 69 6f 6e 43 6f Data Ascii: ull?babelHelpers["extends"]({},a,b.payload):a;case"removeCallout":if(a.calloutID!=null&&a.calloutID===b.payload){var d=a.anchorRootRefContext,e=a.animationContext,f=a.contextualLayerProps,g=a.scrollableAreaContext;return{anchorRootRefContext:d,animationCo
2024-05-25 23:00:11 UTC	459	IN	Data Raw: 2c 22 43 6f 6d 65 74 52 65 6c 61 79 22 2c 22 63 6c 65 61 72 54 69 6d 65 6f 75 74 22 2c 22 72 65 61 63 74 22 2c 22 73 65 74 54 69 6d 65 6f 75 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 3d 68 7c 7c 28 68 3d 64 28 22 72 65 61 63 74 22 29 29 3b 62 3d 68 3b 76 61 72 20 6a 3d 62 2e 75 73 65 45 66 66 65 63 74 2c 6b 3d 62 2e 75 73 65 52 65 66 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 76 61 72 20 62 3d 61 2e 65 6e 74 72 79 50 6f 69 6e 74 2c 65 3d 61 2e 65 6e 76 69 72 6f 6e 6d 65 6e 74 50 72 6f 76 69 64 65 72 2c 66 3d 61 2e 66 61 6c 6c 62 61 63 6b 2c 67 3d 61 2e 6c 6f 61 64 65 64 45 6e 74 72 79 50 6f 69 6e 74 2c 68 3d 61 2e 6f 74 68 65 72 50 72 6f 70 73 2c 6c Data Ascii: ,"CometRelay","clearTimeout","react","setTimeout"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|(h=d("react"));b=h;var j=b.useEffect,k=b.useRef;function a(a){var b=a.entryPoint,e=a.environmentProvider,f=a.fallback,g=a.loadedEntryPoint,h=a.otherProps,l
2024-05-25 23:00:11 UTC	1500	IN	Data Raw: 75 6c 6c 3f 62 3a 67 2c 72 3d 6b 28 6e 75 6c 6c 29 3b 6a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 63 75 72 72 65 6e 74 21 3d 6e 75 6c 6c 26 26 28 63 28 22 63 6c 65 61 72 54 69 6d 65 6f 75 74 22 29 28 72 2e 63 75 72 72 65 6e 74 29 2c 72 2e 63 75 72 72 65 6e 74 3d 6e 75 6c 6c 29 3b 71 2e 69 73 44 69 73 70 6f 73 65 64 26 26 6f 28 6d 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 63 75 72 72 65 6e 74 3d 63 28 22 73 65 74 54 69 6d 65 6f 75 74 22 29 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3f 70 28 29 3a 67 2e 64 69 73 70 6f 73 65 28 29 2c 72 2e 63 75 72 72 65 6e 74 3d 6e 75 6c 6c 7d 2c 36 65 34 29 7d 7d 2c 5b 70 2c 71 2e 69 73 44 69 73 70 6f 73 65 64 2c 67 2c 6d 2c 6f 2c 6e 5d 29 3b 65 3d 69 2e 6a 73 78 28 64 28 22 43 6f 6d 65 74 52 65 6c 61 Data Ascii: ull?b:g,r=k(null);j(function(){r.current!=null&&(c("clearTimeout")(r.current),r.current=null);q.isDisposed&&o(m);return function(){r.current=c("setTimeout")(function(){n?p():g.dispose(),r.current=null},6e4)}},[p,q.isDisposed,g,m,o,n]);e=i.jsx(d("CometRela
2024-05-25 23:00:11 UTC	1500	IN	Data Raw: 66 3d 6e 28 6b 2c 65 2c 66 29 3b 72 65 74 75 72 6e 20 6a 2e 6a 73 78 73 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 28 68 7c 7c 28 68 3d 63 28 22 73 74 79 6c 65 78 22 29 29 29 28 6c 2e 72 6f 6f 74 2c 61 29 2c 73 74 79 6c 65 3a 66 2c 63 68 69 6c 64 72 65 6e 3a 5b 6a 2e 6a 73 78 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 78 31 6e 32 6f 6e 72 36 22 2c 63 68 69 6c 64 72 65 6e 3a 62 7d 29 2c 69 3d 3d 3d 21 31 7c 7c 64 3d 3d 3d 21 30 7c 7c 66 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 6a 2e 6a 73 78 73 28 6a 2e 46 72 61 67 6d 65 6e 74 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 6a 2e 6a 73 78 28 6d 2c 7b 72 61 64 69 69 3a 67 7d 29 2c 6a 2e 6a 73 78 28 6d 2c 7b 64 65 6c 61 79 3a 21 30 2c 72 61 64 69 69 3a 67 7d 29 5d 7d 2c 28 28 61 3d 6b 29 21 3d 6e 75 Data Ascii: f=n(k,e,f);return j.jsxs("div",{className:(h\|\|(h=c("stylex")))(l.root,a),style:f,children:[j.jsx("div",{className:"x1n2onr6",children:b}),i===!1\|\|d===!0\|\|f==null?null:j.jsxs(j.Fragment,{children:[j.jsx(m,{radii:g}),j.jsx(m,{delay:!0,radii:g})]},((a=k)!=nu
2024-05-25 23:00:11 UTC	1500	IN	Data Raw: 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 2c 6a 3d 63 28 22 42 61 73 65 54 6f 61 73 74 65 72 53 74 61 74 65 4d 61 6e 61 67 65 72 22 29 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 61 3d 61 2e 63 68 69 6c 64 72 65 6e 3b 72 65 74 75 72 6e 20 69 2e 6a 73 78 28 63 28 22 42 61 73 65 54 6f 61 73 74 65 72 53 74 61 74 65 4d 61 6e 61 67 65 72 43 6f 6e 74 65 78 74 2e 72 65 61 63 74 22 29 2e 50 72 6f 76 69 64 65 72 2c 7b 76 61 6c 75 65 3a 6a 2c 63 68 69 6c 64 72 65 6e 3a 61 7d 29 7d 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 61 2e 6e 61 6d 65 2b 22 20 5b 66 72 6f 6d 20 22 2b 66 2e 69 64 2b 22 5d 22 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 Data Ascii: strict";var h,i=h\|\|d("react"),j=c("BaseToasterStateManager").getInstance();function a(a){a=a.children;return i.jsx(c("BaseToasterStateManagerContext.react").Provider,{value:j,children:a})}a.displayName=a.name+" [from "+f.id+"]";g["default"]=a}),98);__d("
2024-05-25 23:00:11 UTC	1500	IN	Data Raw: 45 76 65 6e 74 46 61 6c 63 6f 45 76 65 6e 74 22 2c 5b 22 46 61 6c 63 6f 4c 6f 67 67 65 72 49 6e 74 65 72 6e 61 6c 22 2c 22 67 65 74 46 61 6c 63 6f 4c 6f 67 50 6f 6c 69 63 79 5f 44 4f 5f 4e 4f 54 5f 55 53 45 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 63 28 22 67 65 74 46 61 6c 63 6f 4c 6f 67 50 6f 6c 69 63 79 5f 44 4f 5f 4e 4f 54 5f 55 53 45 22 29 28 22 35 38 33 35 22 29 3b 62 3d 64 28 22 46 61 6c 63 6f 4c 6f 67 67 65 72 49 6e 74 65 72 6e 61 6c 22 29 2e 63 72 65 61 74 65 28 22 6c 6f 78 5f 75 70 73 65 6c 6c 5f 65 76 65 6e 74 22 2c 61 29 3b 65 3d 62 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 65 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 75 73 65 43 41 41 53 61 76 65 64 41 63 63 Data Ascii: EventFalcoEvent",["FalcoLoggerInternal","getFalcoLogPolicy_DO_NOT_USE"],(function(a,b,c,d,e,f,g){"use strict";a=c("getFalcoLogPolicy_DO_NOT_USE")("5835");b=d("FalcoLoggerInternal").create("lox_upsell_event",a);e=b;g["default"]=e}),98);__d("useCAASavedAcc
2024-05-25 23:00:11 UTC	910	IN	Data Raw: 6f 6e 20 6e 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 28 22 6e 6f 74 5f 79 6f 75 5f 62 75 74 74 6f 6e 5f 63 6c 69 63 6b 65 64 22 2c 22 64 69 61 6c 6f 67 22 2c 61 2c 22 73 61 76 65 64 5f 61 63 63 6f 75 6e 74 73 5f 75 70 73 65 6c 6c 22 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 28 22 66 6f 72 67 6f 74 5f 70 61 73 73 77 6f 72 64 5f 6c 69 6e 6b 5f 63 6c 69 63 6b 65 64 22 2c 22 64 69 61 6c 6f 67 22 2c 61 2c 62 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 28 22 73 61 76 65 64 5f 61 63 63 6f 75 6e 74 5f 77 69 74 68 6f 75 74 5f 70 61 73 73 77 Data Ascii: on n(a){return function(){return l("not_you_button_clicked","dialog",a,"saved_accounts_upsell")}}function o(a,b){return function(){return l("forgot_password_link_clicked","dialog",a,b)}}function p(a){return function(){return l("saved_account_without_passw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.6	59117	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:11 UTC	753	OUT	GET /rsrc.php/v3ihfn4/yo/l/en_GB/khfw_V4kOlpv89Dp6K_jxIkIhKMfIUi82vr8ihReOCEmAW87EauwWUrxvhYhGLwC4ognKw0vE_CYuEfrl5TB5L00_Sou4hbknqlJZ-rcIbRujYurPnDHEYs9_zW39xstWYoIrWWLyfq9z1dfWxL1rr0Obq.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:11 UTC	1982	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: QhZMUqdif6dTPUuhUPYNBQ== Expires: Sun, 25 May 2025 23:00:11 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: A35hssCHSc1sgbhhqXGnO8hIKE1uTSXbxvvaEJuf62QSodsYtbcg70TRy9vVLApWhgxM7m8CtimSJHZHz80zXA== Date: Sat, 25 May 2024 23:00:11 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=33, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 268775
2024-05-25 23:00:11 UTC	1500	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 53 65 65 4d 6f 72 65 45 78 70 61 6e 64 69 6e 67 55 74 69 6c 73 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 62 29 7b 76 61 72 20 63 3d 62 3b 77 68 69 6c 65 28 63 3e 3d 30 29 7b 69 66 28 61 2e 63 68 61 72 41 74 28 63 29 3d 3d 3d 22 20 22 7c 7c 61 2e 63 68 61 72 41 74 28 63 29 3d 3d 3d 22 5c 6e 22 29 62 72 65 61 6b 3b 63 2d 3d 31 7d 61 2e 63 68 61 72 41 74 28 62 29 21 3d 3d 22 5c 6e 22 3f 63 2b 3d 31 3a 63 3d 62 2b 31 3b 62 3d 61 2e 73 75 62 73 74 72 69 6e 67 28 63 29 3b 61 3d 2f 5c 73 2f 3b 62 3d 62 2e 73 65 61 72 63 68 28 61 29 2b 63 2d 31 3b 72 65 74 75 Data Ascii: ;/FB_PKG_DELIM/__d("CometSeeMoreExpandingUtils",[],(function(a,b,c,d,e,f){"use strict";function g(a,b){var c=b;while(c>=0){if(a.charAt(c)===" "\|\|a.charAt(c)==="\n")break;c-=1}a.charAt(b)!=="\n"?c+=1:c=b+1;b=a.substring(c);a=/\s/;b=b.search(a)+c-1;retu
2024-05-25 23:00:11 UTC	1500	IN	Data Raw: 54 72 75 6e 63 61 74 65 64 4f 66 66 73 65 74 3a 64 7d 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 61 2c 62 2c 63 29 7b 61 3d 68 28 61 2c 62 2c 63 29 3b 62 3d 61 2e 6e 65 77 45 6e 74 69 74 79 52 61 6e 67 65 73 3b 63 3d 61 2e 6e 65 77 54 72 75 6e 63 61 74 65 64 45 6e 74 69 74 79 4f 66 66 73 65 74 3b 61 3d 69 28 62 2c 63 29 3b 62 3d 61 2e 65 6e 74 69 74 69 65 73 42 65 66 6f 72 65 54 72 75 6e 63 61 74 65 64 4f 66 66 73 65 74 3b 61 3d 61 2e 65 6e 74 69 74 69 65 73 46 72 6f 6d 54 72 75 6e 63 61 74 65 64 4f 66 66 73 65 74 3b 72 65 74 75 72 6e 7b 65 6e 74 69 74 69 65 73 42 65 66 6f 72 65 54 72 75 6e 63 61 74 65 64 4f 66 66 73 65 74 3a 62 2c 65 6e 74 69 74 69 65 73 46 72 6f 6d 54 72 75 6e 63 61 74 65 64 4f 66 66 73 65 74 3a 61 2c 6e 65 77 54 72 75 6e 63 61 74 65 64 45 6e Data Ascii: TruncatedOffset:d}}function j(a,b,c){a=h(a,b,c);b=a.newEntityRanges;c=a.newTruncatedEntityOffset;a=i(b,c);b=a.entitiesBeforeTruncatedOffset;a=a.entitiesFromTruncatedOffset;return{entitiesBeforeTruncatedOffset:b,entitiesFromTruncatedOffset:a,newTruncatedEn
2024-05-25 23:00:11 UTC	1500	IN	Data Raw: 67 2e 73 6c 69 63 65 28 30 2c 63 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2e 6c 65 6e 67 74 68 3b 66 21 3d 3d 6e 75 6c 6c 3f 66 3d 4d 61 74 68 2e 6d 69 6e 28 65 2c 66 29 3a 66 3d 65 7d 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 66 3b 65 6c 73 65 7b 62 3d 66 2b 6a 28 61 2c 66 29 3b 72 65 74 75 72 6e 20 62 3c 68 3f 62 3a 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 61 2c 62 29 7b 76 61 72 20 65 3d 62 3e 30 26 26 28 68 7c 7c 28 68 3d 63 28 22 45 6d 6f 6a 69 52 65 6e 64 65 72 65 72 44 61 74 61 22 29 29 29 2e 69 73 5a 57 4a 28 28 69 7c 7c 28 69 3d 64 28 22 55 6e 69 63 6f 64 65 55 74 69 6c 73 22 29 29 29 2e 63 68 61 72 41 74 28 61 2c 62 2d 31 29 2e 63 6f 64 65 50 6f 69 6e 74 41 74 28 30 29 29 3b 72 65 74 75 72 6e 20 6b 28 61 2c 65 3f 62 2d 31 3a 62 Data Ascii: g.slice(0,c).join("\n").length;f!==null?f=Math.min(e,f):f=e}if(f==null)return f;else{b=f+j(a,f);return b<h?b:null}}function j(a,b){var e=b>0&&(h\|\|(h=c("EmojiRendererData"))).isZWJ((i\|\|(i=d("UnicodeUtils"))).charAt(a,b-1).codePointAt(0));return k(a,e?b-1:b
2024-05-25 23:00:11 UTC	1500	IN	Data Raw: 29 7d 2c 22 63 22 2b 62 2b 22 5f 22 2b 63 2b 22 5f 22 2b 72 29 29 3b 70 3d 6f 2e 70 6f 70 28 29 3b 6f 5b 6f 2e 6c 65 6e 67 74 68 2d 31 5d 2e 73 75 62 45 6c 65 6d 65 6e 74 73 2e 70 75 73 68 28 6e 28 65 2c 66 2c 67 2c 6c 2c 61 2c 6c 2c 62 2b 22 5f 22 2b 63 2b 22 5f 22 2b 72 2c 68 2c 71 29 29 3b 72 65 74 75 72 6e 20 70 7d 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 61 6e 67 65 73 3b 62 3d 62 3d 3d 3d 76 6f 69 64 20 30 3f 5b 5d 3a 62 3b 76 61 72 20 65 3d 61 2e 72 65 6e 64 65 72 65 72 73 2c 66 3d 61 2e 74 72 61 6e 73 66 6f 72 6d 73 2c 67 3d 66 3d 3d 3d 76 6f 69 64 20 30 3f 5b 5d 3a 66 2c 68 3d 61 2e 74 65 78 74 3b 66 3d 61 2e 64 69 73 61 62 6c 65 52 61 6e 67 65 53 6f 72 74 3b 61 3d 66 3d 3d 3d 76 6f 69 64 20 30 3f 21 31 3a 66 3b 76 61 Data Ascii: )},"c"+b+"_"+c+"_"+r));p=o.pop();o[o.length-1].subElements.push(n(e,f,g,l,a,l,b+"_"+c+"_"+r,h,q));return p}function a(a){var b=a.ranges;b=b===void 0?[]:b;var e=a.renderers,f=a.transforms,g=f===void 0?[]:f,h=a.text;f=a.disableRangeSort;a=f===void 0?!1:f;va
2024-05-25 23:00:11 UTC	445	IN	Data Raw: 61 6e 67 65 3a 61 2c 74 79 70 65 3a 22 65 6e 64 22 7d 29 7d 29 3b 46 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 2e 69 6e 64 65 78 21 3d 3d 62 2e 69 6e 64 65 78 29 72 65 74 75 72 6e 20 61 2e 69 6e 64 65 78 2d 62 2e 69 6e 64 65 78 3b 69 66 28 61 2e 72 61 6e 67 65 2e 6c 65 6e 67 74 68 3d 3d 3d 30 26 26 62 2e 72 61 6e 67 65 2e 6c 65 6e 67 74 68 21 3d 3d 30 29 72 65 74 75 72 6e 20 31 3b 65 6c 73 65 20 69 66 28 61 2e 72 61 6e 67 65 2e 6c 65 6e 67 74 68 21 3d 3d 30 26 26 62 2e 72 61 6e 67 65 2e 6c 65 6e 67 74 68 3d 3d 3d 30 29 72 65 74 75 72 6e 2d 31 3b 69 66 28 61 2e 74 79 70 65 21 3d 3d 62 2e 74 79 70 65 29 72 65 74 75 72 6e 20 61 2e 72 61 6e 67 65 3d 3d 3d 62 2e 72 61 6e 67 65 3f 62 2e 74 79 70 65 3d 3d 3d 22 73 74 61 72 74 22 3f Data Ascii: ange:a,type:"end"})});F.sort(function(a,b){if(a.index!==b.index)return a.index-b.index;if(a.range.length===0&&b.range.length!==0)return 1;else if(a.range.length!==0&&b.range.length===0)return-1;if(a.type!==b.type)return a.range===b.range?b.type==="start"?
2024-05-25 23:00:11 UTC	1500	IN	Data Raw: 78 3e 68 2e 6c 65 6e 67 74 68 29 62 72 65 61 6b 3b 69 66 28 48 2e 74 79 70 65 3d 3d 3d 22 73 74 61 72 74 22 29 7b 69 66 28 48 2e 69 6e 64 65 78 3e 71 29 7b 45 3d 28 69 7c 7c 28 69 3d 64 28 22 55 6e 69 63 6f 64 65 55 74 69 6c 73 22 29 29 29 2e 73 75 62 73 74 72 28 68 2c 71 2c 48 2e 69 6e 64 65 78 2d 71 29 3b 73 5b 73 2e 6c 65 6e 67 74 68 2d 31 5d 2e 73 75 62 45 6c 65 6d 65 6e 74 73 2e 70 75 73 68 28 6a 2e 6a 73 78 28 6b 2c 7b 63 68 69 6c 64 72 65 6e 3a 6d 28 45 2c 67 29 7d 2c 22 63 22 2b 71 2b 22 5f 22 2b 73 2e 6c 65 6e 67 74 68 29 29 7d 44 3d 48 2e 72 61 6e 67 65 3b 62 3d 44 2e 65 6e 74 69 74 79 3b 76 61 72 20 74 3d 44 2e 65 6e 74 69 74 79 5f 69 73 5f 77 65 61 6b 5f 72 65 66 65 72 65 6e 63 65 2c 75 3d 44 2e 65 6e 74 69 74 79 5f 74 79 70 65 2c 76 3d 44 2e Data Ascii: x>h.length)break;if(H.type==="start"){if(H.index>q){E=(i\|\|(i=d("UnicodeUtils"))).substr(h,q,H.index-q);s[s.length-1].subElements.push(j.jsx(k,{children:m(E,g)},"c"+q+"_"+s.length))}D=H.range;b=D.entity;var t=D.entity_is_weak_reference,u=D.entity_type,v=D.
2024-05-25 23:00:11 UTC	1500	IN	Data Raw: 61 67 6d 65 6e 74 2c 7b 63 68 69 6c 64 72 65 6e 3a 73 5b 73 2e 6c 65 6e 67 74 68 2d 31 5d 2e 73 75 62 45 6c 65 6d 65 6e 74 73 7d 29 7d 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 61 2e 6e 61 6d 65 2b 22 20 5b 66 72 6f 6d 20 22 2b 66 2e 69 64 2b 22 5d 22 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 67 65 74 54 65 78 74 44 69 72 65 63 74 69 6f 6e 41 74 74 72 69 62 75 74 65 22 2c 5b 22 63 72 3a 31 30 38 30 34 32 32 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 76 61 72 20 63 3d 22 61 75 74 6f 22 3b 62 28 22 63 72 3a 31 30 38 30 34 32 32 22 29 21 3d 6e 75 6c 6c 26 26 77 69 6e 64 6f 77 21 3d 6e 75 6c 6c 26 Data Ascii: agment,{children:s[s.length-1].subElements})}a.displayName=a.name+" [from "+f.id+"]";g["default"]=a}),98);__d("getTextDirectionAttribute",["cr:1080422"],(function(a,b,c,d,e,f,g){"use strict";function a(a){var c="auto";b("cr:1080422")!=null&&window!=null&
2024-05-25 23:00:11 UTC	1500	IN	Data Raw: 6f 66 66 73 65 74 3e 3d 30 26 26 61 2e 6f 66 66 73 65 74 3c 63 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 61 6e 67 65 73 3b 61 3d 61 2e 74 65 78 74 3b 76 61 72 20 63 3d 30 3b 72 65 74 75 72 6e 20 61 2e 73 70 6c 69 74 28 22 5c 6e 22 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 65 3d 74 28 62 2c 63 2c 28 6a 7c 7c 28 6a 3d 64 28 22 55 6e 69 63 6f 64 65 55 74 69 6c 73 22 29 29 29 2e 73 74 72 6c 65 6e 28 61 29 29 3b 63 2b 3d 6a 2e 73 74 72 6c 65 6e 28 61 29 2b 31 3b 72 65 74 75 72 6e 7b 72 61 6e 67 65 73 3a 65 2c 74 65 78 74 3a 61 7d 7d 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 74 65 78 74 2e 74 72 69 6d 28 29 21 3d 3d 22 22 7d 29 7d 66 75 6e 63 74 69 6f 6e Data Ascii: offset>=0&&a.offset<c})}function u(a){var b=a.ranges;a=a.text;var c=0;return a.split("\n").map(function(a){var e=t(b,c,(j\|\|(j=d("UnicodeUtils"))).strlen(a));c+=j.strlen(a)+1;return{ranges:e,text:a}}).filter(function(a){return a.text.trim()!==""})}function
2024-05-25 23:00:11 UTC	1500	IN	Data Raw: 3b 69 66 28 75 21 3d 3d 22 6e 6f 6e 65 22 26 26 21 49 29 7b 75 3d 64 28 22 43 6f 6d 65 74 53 70 6c 69 74 50 6f 69 6e 74 46 6f 72 54 65 78 74 22 29 2e 66 69 6e 64 53 70 6c 69 74 50 6f 69 6e 74 46 6f 72 54 65 78 74 28 67 2c 62 2a 69 2c 65 2c 77 29 3b 75 21 3d 6e 75 6c 6c 26 26 28 66 3d 28 6a 7c 7c 28 6a 3d 64 28 22 55 6e 69 63 6f 64 65 55 74 69 6c 73 22 29 29 29 2e 73 75 62 73 74 72 69 6e 67 28 67 2c 30 2c 75 29 2c 43 3d 74 28 43 2c 30 2c 6a 2e 73 74 72 6c 65 6e 28 66 29 29 2c 61 2e 63 75 72 72 65 6e 74 3d 75 29 7d 76 61 72 20 4a 3d 41 21 3d 6e 75 6c 6c 3f 6b 2e 6a 73 78 28 63 28 22 43 6f 6d 65 74 54 72 61 63 6b 69 6e 67 4e 6f 64 65 50 72 6f 76 69 64 65 72 2e 72 65 61 63 74 22 29 2c 7b 74 72 61 63 6b 69 6e 67 4e 6f 64 65 3a 34 34 2c 63 68 69 6c 64 72 65 6e Data Ascii: ;if(u!=="none"&&!I){u=d("CometSplitPointForText").findSplitPointForText(g,b*i,e,w);u!=null&&(f=(j\|\|(j=d("UnicodeUtils"))).substring(g,0,u),C=t(C,0,j.strlen(f)),a.current=u)}var J=A!=null?k.jsx(c("CometTrackingNodeProvider.react"),{trackingNode:44,children
2024-05-25 23:00:11 UTC	905	IN	Data Raw: 78 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 28 68 7c 7c 28 68 3d 63 28 22 73 74 79 6c 65 78 22 29 29 29 28 71 2e 70 61 72 61 67 72 61 70 68 2c 62 21 3d 3d 30 26 26 71 2e 70 61 72 61 67 72 61 70 68 53 70 61 63 65 64 2c 44 26 26 71 2e 70 72 65 73 65 72 76 65 57 68 69 74 65 53 70 61 63 65 29 2c 63 68 69 6c 64 72 65 6e 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 3f 61 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 2c 66 29 7b 76 61 72 20 67 3d 65 2e 72 61 6e 67 65 73 3b 65 3d 65 2e 74 65 78 74 3b 76 61 72 20 68 3d 45 3d 3d 3d 22 63 65 6e 74 65 72 22 3f 45 3a 63 28 22 67 65 74 54 65 78 74 44 69 72 65 63 74 69 6f 6e 41 74 74 72 69 62 75 74 65 22 29 28 65 29 3b 72 65 74 75 72 6e 20 6b 2e 6a 73 78 73 28 22 64 69 76 22 2c 7b 64 69 72 3a 68 2c 73 Data Ascii: x("div",{className:(h\|\|(h=c("stylex")))(q.paragraph,b!==0&&q.paragraphSpaced,D&&q.preserveWhiteSpace),children:Array.isArray(a)?a.map(function(e,f){var g=e.ranges;e=e.text;var h=E==="center"?E:c("getTextDirectionAttribute")(e);return k.jsxs("div",{dir:h,s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.6	59118	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:13 UTC	610	OUT	GET /rsrc.php/v3iXK94/yb/l/en_GB/gnHzfwVhpKg.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:13 UTC	1981	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: u6UmusQ4vPsggYMEoIA5Ig== Expires: Sun, 25 May 2025 23:00:13 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: B+5GGKiYsdzS5ixXwrUcjatzx3ALM03Wfqc8mV4fjuzRATK08J1OS1nG4cfNEKCe/AK5iLSTMWrtIUSE8TFeuw== Date: Sat, 25 May 2024 23:00:13 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=33, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 68157
2024-05-25 23:00:13 UTC	1500	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 42 61 64 67 65 43 68 65 63 6b 6d 61 72 6b 46 69 6c 6c 65 64 31 32 2e 73 76 67 2e 72 65 61 63 74 22 2c 5b 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 72 65 74 75 72 6e 20 69 2e 6a 73 78 73 28 22 73 76 67 22 2c 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 32 20 31 33 22 2c 77 69 64 74 68 3a 22 31 65 6d 22 2c 68 65 69 67 68 74 3a 22 31 65 6d 22 2c 66 69 6c 6c 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 7d 2c 61 2c Data Ascii: ;/FB_PKG_DELIM/__d("BadgeCheckmarkFilled12.svg.react",["react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react");function a(a){return i.jsxs("svg",babelHelpers["extends"]({viewBox:"0 0 12 13",width:"1em",height:"1em",fill:"currentColor"},a,
2024-05-25 23:00:13 UTC	1500	IN	Data Raw: 61 6e 63 68 6f 72 52 6f 6f 74 52 65 66 43 6f 6e 74 65 78 74 2c 65 3d 61 2e 61 6e 69 6d 61 74 69 6f 6e 43 6f 6e 74 65 78 74 2c 66 3d 61 2e 63 68 69 6c 64 72 65 6e 2c 67 3d 61 2e 63 6f 6e 74 65 78 74 75 61 6c 4c 61 79 65 72 50 72 6f 70 73 2c 68 3d 61 2e 69 6d 70 65 72 61 74 69 76 65 52 65 66 2c 6b 3d 61 2e 73 63 72 6f 6c 6c 61 62 6c 65 41 72 65 61 43 6f 6e 74 65 78 74 3b 61 3d 63 28 22 75 73 65 43 6f 6d 65 74 44 69 73 70 6c 61 79 54 69 6d 69 6e 67 54 72 61 63 6b 65 72 46 6f 72 49 6e 74 65 72 61 63 74 69 6f 6e 22 29 28 22 46 44 53 43 61 6c 6c 6f 75 74 4d 61 6e 61 67 65 72 22 29 3b 6a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 6b 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 44 4f 4d 4e 6f 64 65 28 29 7d 29 Data Ascii: anchorRootRefContext,e=a.animationContext,f=a.children,g=a.contextualLayerProps,h=a.imperativeRef,k=a.scrollableAreaContext;a=c("useCometDisplayTimingTrackerForInteraction")("FDSCalloutManager");j(function(){var a=k.map(function(a){return a.getDOMNode()})
2024-05-25 23:00:13 UTC	1500	IN	Data Raw: 30 32 63 2e 34 38 33 20 30 20 2e 38 37 35 2e 33 39 31 2e 38 37 35 2e 38 37 35 56 31 37 61 2e 38 37 35 2e 38 37 35 20 30 20 30 20 31 2d 31 2e 37 35 20 30 76 2d 36 2e 38 32 37 63 30 2d 2e 34 38 34 2e 33 39 32 2d 2e 38 37 35 2e 38 37 35 2d 2e 38 37 35 7a 6d 30 2d 31 2e 32 37 35 63 2e 38 33 33 20 30 20 31 2e 32 35 2d 2e 34 30 35 20 31 2e 32 35 2d 31 2e 30 31 32 43 31 33 2e 32 35 20 36 2e 34 30 35 20 31 32 2e 38 33 33 20 36 20 31 32 20 36 73 2d 31 2e 32 35 2e 34 30 35 2d 31 2e 32 35 20 31 2e 30 31 31 63 30 20 2e 36 30 37 2e 34 31 37 20 31 2e 30 31 32 20 31 2e 32 35 20 31 2e 30 31 32 7a 22 7d 29 5d 7d 29 29 7d 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 61 2e 6e 61 6d 65 2b 22 20 5b 66 72 6f 6d 20 22 2b 66 2e 69 64 2b 22 5d 22 3b 61 2e 5f 69 73 53 56 47 3d 21 30 Data Ascii: 02c.483 0 .875.391.875.875V17a.875.875 0 0 1-1.75 0v-6.827c0-.484.392-.875.875-.875zm0-1.275c.833 0 1.25-.405 1.25-1.012C13.25 6.405 12.833 6 12 6s-1.25.405-1.25 1.011c0 .607.417 1.012 1.25 1.012z"})]}))}a.displayName=a.name+" [from "+f.id+"]";a._isSVG=!0
2024-05-25 23:00:13 UTC	1500	IN	Data Raw: 75 6d 6e 2e 72 65 61 63 74 22 29 2c 7b 78 73 74 79 6c 65 3a 6a 2e 72 6f 6f 74 2c 63 68 69 6c 64 72 65 6e 3a 69 2e 6a 73 78 73 28 63 28 22 43 6f 6d 65 74 52 6f 77 2e 72 65 61 63 74 22 29 2c 7b 70 61 64 64 69 6e 67 48 6f 72 69 7a 6f 6e 74 61 6c 3a 30 2c 70 61 64 64 69 6e 67 54 6f 70 3a 30 2c 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3a 22 63 65 6e 74 65 72 22 2c 63 68 69 6c 64 72 65 6e 3a 5b 69 2e 6a 73 78 28 63 28 22 43 6f 6d 65 74 52 6f 77 49 74 65 6d 2e 72 65 61 63 74 22 29 2c 7b 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3a 22 74 6f 70 22 2c 63 68 69 6c 64 72 65 6e 3a 69 2e 6a 73 78 28 63 28 22 46 44 53 49 63 6f 6e 2e 72 65 61 63 74 22 29 2c 7b 63 6f 6c 6f 72 3a 22 6e 65 67 61 74 69 76 65 22 2c 69 63 6f 6e 3a 63 28 22 4d 65 74 61 42 72 61 6e 64 49 43 69 72 63 Data Ascii: umn.react"),{xstyle:j.root,children:i.jsxs(c("CometRow.react"),{paddingHorizontal:0,paddingTop:0,verticalAlign:"center",children:[i.jsx(c("CometRowItem.react"),{verticalAlign:"top",children:i.jsx(c("FDSIcon.react"),{color:"negative",icon:c("MetaBrandICirc
2024-05-25 23:00:13 UTC	1500	IN	Data Raw: 6d 65 6e 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 6d 73 46 75 6c 6c 73 63 72 65 65 6e 45 6c 65 6d 65 6e 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 6d 6f 7a 46 75 6c 6c 53 63 72 65 65 6e 45 6c 65 6d 65 6e 74 7c 7c 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 20 68 28 29 21 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 72 65 74 75 72 6e 5b 22 77 65 62 6b 69 74 66 75 6c 6c 73 63 72 65 65 6e 63 68 61 6e 67 65 22 2c 22 6d 6f 7a 66 75 6c 6c 73 63 72 65 65 6e 63 68 61 6e 67 65 22 2c 22 4d 53 46 75 6c 6c 73 63 72 65 65 6e 43 68 61 6e 67 65 22 2c 22 66 75 6c 6c 73 63 72 65 65 6e 63 68 61 6e 67 65 22 5d 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 61 29 7b 76 61 72 20 62 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2c 63 3d 21 31 2c 64 3d 21 30 Data Ascii: ment\|\|document.msFullscreenElement\|\|document.mozFullScreenElement\|\|null}function e(){return h()!=null}function i(){return["webkitfullscreenchange","mozfullscreenchange","MSFullscreenChange","fullscreenchange"]}function j(a){var b=window.document,c=!1,d=!0
2024-05-25 23:00:13 UTC	1500	IN	Data Raw: 49 6e 6c 69 6e 65 53 74 79 6c 65 3b 76 61 72 20 65 3d 61 2e 69 6e 6e 65 72 58 53 74 79 6c 65 2c 66 3d 61 2e 6f 75 74 65 72 49 6e 6c 69 6e 65 53 74 79 6c 65 2c 67 3d 61 2e 6f 75 74 65 72 52 65 66 2c 69 3d 61 2e 6f 75 74 65 72 58 53 74 79 6c 65 3b 61 3d 61 2e 74 65 73 74 69 64 3b 76 61 72 20 6c 3d 63 28 22 69 73 53 74 72 69 6e 67 4e 75 6c 6c 4f 72 45 6d 70 74 79 22 29 28 61 29 3f 76 6f 69 64 20 30 3a 61 2b 22 2d 6f 75 74 65 72 22 3b 6c 3d 63 28 22 69 73 53 74 72 69 6e 67 4e 75 6c 6c 4f 72 45 6d 70 74 79 22 29 28 61 29 3f 76 6f 69 64 20 30 3a 61 2b 22 2d 69 6e 6e 65 72 22 3b 72 65 74 75 72 6e 20 6a 2e 6a 73 78 28 22 64 69 76 22 2c 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 7d 2c 7b 7d 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 28 68 Data Ascii: InlineStyle;var e=a.innerXStyle,f=a.outerInlineStyle,g=a.outerRef,i=a.outerXStyle;a=a.testid;var l=c("isStringNullOrEmpty")(a)?void 0:a+"-outer";l=c("isStringNullOrEmpty")(a)?void 0:a+"-inner";return j.jsx("div",babelHelpers["extends"]({},{},{className:(h
2024-05-25 23:00:13 UTC	1500	IN	Data Raw: 61 3d 61 2e 78 73 74 79 6c 65 3b 76 61 72 20 66 3d 6e 75 6c 6c 2c 67 3d 63 28 22 42 61 64 67 65 43 68 65 63 6b 6d 61 72 6b 46 69 6c 6c 65 64 31 32 2e 73 76 67 2e 72 65 61 63 74 22 29 2c 6a 3d 68 2e 5f 28 22 56 65 72 69 66 69 65 64 20 61 63 63 6f 75 6e 74 22 29 2c 6d 3d 31 32 3b 64 3d 3d 3d 22 6c 61 72 67 65 22 3f 6d 3d 31 36 3a 64 3d 3d 3d 22 78 73 6d 61 6c 6c 22 26 26 28 6d 3d 31 30 29 3b 69 66 28 62 3d 3d 3d 21 30 29 66 3d 6b 2e 6a 73 78 28 63 28 22 54 65 74 72 61 49 63 6f 6e 2e 72 65 61 63 74 22 29 2c 7b 61 6c 74 3a 6a 2c 63 6f 6c 6f 72 3a 22 77 68 69 74 65 22 2c 69 63 6f 6e 3a 67 2c 73 69 7a 65 3a 6d 7d 29 3b 65 6c 73 65 20 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 42 4c 55 45 5f 56 45 52 49 46 49 45 44 22 3a 66 3d 6b 2e 6a 73 78 28 63 28 22 54 65 Data Ascii: a=a.xstyle;var f=null,g=c("BadgeCheckmarkFilled12.svg.react"),j=h._("Verified account"),m=12;d==="large"?m=16:d==="xsmall"&&(m=10);if(b===!0)f=k.jsx(c("TetraIcon.react"),{alt:j,color:"white",icon:g,size:m});else switch(e){case"BLUE_VERIFIED":f=k.jsx(c("Te
2024-05-25 23:00:13 UTC	1500	IN	Data Raw: 22 43 6f 6d 65 74 50 72 6f 66 69 6c 65 56 65 72 69 66 69 63 61 74 69 6f 6e 42 61 64 67 65 50 6f 70 6f 76 65 72 2e 72 65 61 63 74 22 29 2e 5f 5f 73 65 74 52 65 66 28 22 43 6f 6d 65 74 50 72 6f 66 69 6c 65 56 65 72 69 66 69 63 61 74 69 6f 6e 42 61 64 67 65 50 6f 70 6f 76 65 72 2e 65 6e 74 72 79 70 6f 69 6e 74 22 29 7d 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 4f 6e 46 42 50 72 6f 66 69 6c 65 56 65 72 69 66 69 63 61 74 69 6f 6e 42 61 64 67 65 2e 72 65 61 63 74 22 2c 5b 22 66 62 74 22 2c 22 43 6f 6d 65 74 48 6f 76 65 72 63 61 72 64 54 72 69 67 67 65 72 2e 72 65 61 63 74 22 2c 22 43 6f 6d 65 74 50 61 67 65 56 65 72 69 66 69 63 61 74 69 6f 6e 49 63 6f 6e 2e 72 65 61 63 74 22 2c 22 43 6f 6d 65 74 50 72 65 Data Ascii: "CometProfileVerificationBadgePopover.react").__setRef("CometProfileVerificationBadgePopover.entrypoint")};g["default"]=a}),98);__d("CometOnFBProfileVerificationBadge.react",["fbt","CometHovercardTrigger.react","CometPageVerificationIcon.react","CometPre
2024-05-25 23:00:13 UTC	1500	IN	Data Raw: 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 52 6f 75 74 65 72 55 49 43 6f 6d 70 6f 6e 65 6e 74 73 44 65 66 61 75 6c 74 45 72 72 6f 72 52 6f 6f 74 2e 72 65 61 63 74 22 2c 5b 22 63 72 3a 31 32 33 33 38 22 2c 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 3b 68 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 62 28 22 63 72 3a 31 32 33 33 38 22 29 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 54 68 65 6d 65 2e 72 65 61 63 74 22 2c 5b 22 42 61 73 65 54 68 65 6d 65 2e 72 65 61 63 74 22 2c 22 43 6f 6d 65 74 53 74 79 6c 65 58 53 68 65 65 74 22 2c 22 72 65 61 63 74 22 2c 22 75 73 65 43 Data Ascii: ault"]=a}),98);__d("CometRouterUIComponentsDefaultErrorRoot.react",["cr:12338","react"],(function(a,b,c,d,e,f,g){"use strict";var h;h\|\|d("react");g["default"]=b("cr:12338")}),98);__d("CometTheme.react",["BaseTheme.react","CometStyleXSheet","react","useC
2024-05-25 23:00:13 UTC	1500	IN	Data Raw: 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 73 65 74 50 61 72 65 6e 74 52 65 6e 64 65 72 49 6e 73 74 72 75 63 74 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 73 68 6f 77 4f 76 65 72 6c 61 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 76 61 72 20 62 3d 61 2e 63 68 69 6c 64 72 65 6e 2c 64 3d 61 2e 69 64 65 6e 74 69 66 69 65 72 2c 65 3d 61 2e 69 73 4f 6e 46 65 65 64 4d 65 64 69 61 2c 66 3d 61 2e 6f 76 65 72 6c 61 79 45 78 69 73 74 73 2c 67 3d 61 2e 6f 76 65 72 6c 61 79 53 68 6f 77 6e 4f 76 65 72 72 69 64 65 3b 61 3d 61 2e 76 69 64 65 6f 43 6f 6e 74 72 6f 6c 6c 65 72 3b 65 3d 63 28 22 75 73 65 53 74 61 74 65 73 49 6e 4d 61 70 22 29 28 64 2c 7b 61 64 64 69 74 69 6f 6e 61 6c 52 65 71 75 69 72 65 64 48 65 Data Ascii: s:function(){},setParentRenderInstructions:function(){},showOverlay:function(){}});function a(a){var b=a.children,d=a.identifier,e=a.isOnFeedMedia,f=a.overlayExists,g=a.overlayShownOverride;a=a.videoController;e=c("useStatesInMap")(d,{additionalRequiredHe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.6	59123	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:13 UTC	599	OUT	GET /rsrc.php/v3/y7/r/Kpg9CE6jA2A.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:13 UTC	1981	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: WunG/x2x9bXsrI2wXr912g== Expires: Sun, 25 May 2025 20:37:50 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: j7Dq27OYHQuzSsa7S6JrsPwKDZ+042AoL8ufqBBqW8DiVjts714wMAjEzIRVPW8XkcTvJETY/UTxWgeUrrcL5A== Date: Sat, 25 May 2024 23:00:13 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=93, rtx=0, c=14, mss=1392, tbw=3412, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 41184
2024-05-25 23:00:13 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-05-25 23:00:14 UTC	15834	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 46 65 65 64 41 52 49 41 50 72 6f 70 65 72 74 69 65 73 2e 72 65 61 63 74 22 2c 5b 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 3b 61 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 62 3d 61 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 7d 29 29 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 62 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 46 65 65 64 41 64 73 50 72 6f 64 75 63 74 43 6f 6e 74 65 78 74 22 2c 5b 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 Data Ascii: /FB_PKG_DELIM/__d("CometFeedARIAProperties.react",["react"],(function(a,b,c,d,e,f,g){"use strict";var h;a=h\|\|d("react");b=a.createContext(Object.freeze({}));g["default"]=b}),98);__d("CometFeedAdsProductContext",["react"],(function(a,b,c,d,e,f,g){"use
2024-05-25 23:00:14 UTC	16384	IN	Data Raw: 2c 67 3d 65 5b 31 5d 3b 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 63 2e 63 75 72 72 65 6e 74 21 3d 3d 61 29 7b 76 61 72 20 65 3b 63 2e 63 75 72 72 65 6e 74 3d 61 3b 67 28 28 65 3d 64 2e 63 75 72 72 65 6e 74 5b 61 5d 29 21 3d 6e 75 6c 6c 3f 65 3a 62 29 7d 7d 2c 5b 64 2c 67 2c 63 2c 61 2c 62 5d 29 3b 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 2e 63 75 72 72 65 6e 74 5b 61 5d 3d 66 7d 2c 5b 66 2c 61 5d 29 3b 72 65 74 75 72 6e 5b 66 2c 67 5d 7d 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 43 6f 6e 74 65 6e 74 41 63 63 65 73 73 41 6e 64 43 6f 6e 74 72 6f 6c 46 61 6c 63 6f 45 76 65 6e 74 22 2c 5b 22 46 61 6c 63 6f 4c 6f 67 67 65 72 49 6e 74 65 72 6e 61 6c 22 2c 22 67 65 74 46 61 6c 63 6f 4c 6f 67 50 6f 6c 69 63 79 5f 44 Data Ascii: ,g=e[1];i(function(){if(c.current!==a){var e;c.current=a;g((e=d.current[a])!=null?e:b)}},[d,g,c,a,b]);i(function(){d.current[a]=f},[f,a]);return[f,g]}g["default"]=a}),98);__d("ContentAccessAndControlFalcoEvent",["FalcoLoggerInternal","getFalcoLogPolicy_D
2024-05-25 23:00:14 UTC	8965	IN	Data Raw: 7b 72 65 74 75 72 6e 7b 63 75 72 72 65 6e 74 50 6c 61 63 65 49 44 3a 63 2c 63 75 72 72 65 6e 74 56 69 64 65 6f 49 44 3a 64 2c 70 6f 72 74 61 6c 69 6e 67 45 6e 61 62 6c 65 64 3a 65 2c 70 72 65 76 69 6f 75 73 50 6c 61 63 65 4d 65 74 61 44 61 74 61 3a 66 2c 74 68 69 73 50 6c 61 63 65 49 44 3a 67 7d 7d 2c 5b 63 2c 64 2c 65 2c 66 2c 67 5d 29 3b 72 65 74 75 72 6e 20 69 2e 6a 73 78 28 6d 2e 50 72 6f 76 69 64 65 72 2c 7b 76 61 6c 75 65 3a 61 2c 63 68 69 6c 64 72 65 6e 3a 62 7d 29 7d 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 61 2e 6e 61 6d 65 2b 22 20 5b 66 72 6f 6d 20 22 2b 66 2e 69 64 2b 22 5d 22 3b 76 61 72 20 6e 3d 63 28 22 65 6d 70 74 79 46 75 6e 63 74 69 6f 6e 22 29 3b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 76 61 72 20 61 3d 6a 28 6d 29 3b 6e 28 61 29 3b 72 Data Ascii: {return{currentPlaceID:c,currentVideoID:d,portalingEnabled:e,previousPlaceMetaData:f,thisPlaceID:g}},[c,d,e,f,g]);return i.jsx(m.Provider,{value:a,children:b})}a.displayName=a.name+" [from "+f.id+"]";var n=c("emptyFunction");function b(){var a=j(m);n(a);r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.6	59121	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:13 UTC	610	OUT	GET /rsrc.php/v3iQbs4/yf/l/en_GB/Up1i9-OcMPc.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:13 UTC	1982	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: 8idixDljacQKwQRoDL6liw== Expires: Fri, 23 May 2025 09:16:11 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: d5uaGJpS3ImEua45II3A7O4RQkoil0AxPGMJrZDSoq0EnzTFivRUvNHt4l2UbSIqwEFZu+lFU6/0s/lhsETNzA== Date: Sat, 25 May 2024 23:00:13 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=95, rtx=0, c=14, mss=1392, tbw=3410, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 133970
2024-05-25 23:00:13 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-05-25 23:00:14 UTC	15822	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 42 61 6e 7a 61 69 4c 6f 67 67 65 72 22 2c 5b 22 42 61 6e 7a 61 69 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 61 29 7b 72 65 74 75 72 6e 7b 6c 6f 67 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 64 29 7b 63 28 22 42 61 6e 7a 61 69 22 29 2e 70 6f 73 74 28 22 6c 6f 67 67 65 72 3a 22 2b 62 2c 64 2c 61 29 7d 2c 63 72 65 61 74 65 3a 68 7d 7d 61 3d 68 28 29 3b 62 3d 61 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 62 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 42 61 73 65 54 65 78 74 57 69 74 68 49 63 6f 6e 2e 72 65 61 63 74 22 2c 5b 22 42 61 73 65 4e 6f 6e 42 72 65 61 6b 69 6e 67 53 70 61 63 65 2e 72 65 61 63 74 22 2c 22 42 61 73 65 56 69 Data Ascii: /FB_PKG_DELIM/__d("BanzaiLogger",["Banzai"],(function(a,b,c,d,e,f,g){function h(a){return{log:function(b,d){c("Banzai").post("logger:"+b,d,a)},create:h}}a=h();b=a;g["default"]=b}),98);__d("BaseTextWithIcon.react",["BaseNonBreakingSpace.react","BaseVi
2024-05-25 23:00:14 UTC	16384	IN	Data Raw: 66 64 22 3a 31 2c 22 31 66 34 34 32 5f 31 66 33 66 65 22 3a 31 2c 22 31 66 34 34 32 5f 31 66 33 66 66 22 3a 31 2c 22 31 66 34 34 33 22 3a 31 2c 22 31 66 34 34 33 5f 31 66 33 66 62 22 3a 31 2c 22 31 66 34 34 33 5f 31 66 33 66 63 22 3a 31 2c 22 31 66 34 34 33 5f 31 66 33 66 64 22 3a 31 2c 22 31 66 34 34 33 5f 31 66 33 66 65 22 3a 31 2c 22 31 66 34 34 33 5f 31 66 33 66 66 22 3a 31 2c 22 31 66 34 34 34 22 3a 31 2c 22 31 66 34 34 35 22 3a 31 2c 22 31 66 34 34 36 22 3a 31 2c 22 31 66 34 34 36 5f 31 66 33 66 62 22 3a 31 2c 22 31 66 34 34 36 5f 31 66 33 66 63 22 3a 31 2c 22 31 66 34 34 36 5f 31 66 33 66 64 22 3a 31 2c 22 31 66 34 34 36 5f 31 66 33 66 65 22 3a 31 2c 22 31 66 34 34 36 5f 31 66 33 66 66 22 3a 31 2c 22 31 66 34 34 37 22 3a 31 2c 22 31 66 34 34 37 5f Data Ascii: fd":1,"1f442_1f3fe":1,"1f442_1f3ff":1,"1f443":1,"1f443_1f3fb":1,"1f443_1f3fc":1,"1f443_1f3fd":1,"1f443_1f3fe":1,"1f443_1f3ff":1,"1f444":1,"1f445":1,"1f446":1,"1f446_1f3fb":1,"1f446_1f3fc":1,"1f446_1f3fd":1,"1f446_1f3fe":1,"1f446_1f3ff":1,"1f447":1,"1f447_
2024-05-25 23:00:14 UTC	16384	IN	Data Raw: 34 37 36 5f 31 66 33 66 65 22 3a 31 2c 22 31 66 34 37 36 5f 31 66 33 66 66 22 3a 31 2c 22 31 66 34 37 37 5f 31 66 33 66 62 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 34 37 37 5f 31 66 33 66 62 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 34 37 37 5f 31 66 33 66 63 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 34 37 37 5f 31 66 33 66 63 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 34 37 37 5f 31 66 33 66 64 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 34 37 37 5f 31 66 33 66 64 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 34 37 37 5f 31 66 33 66 65 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 34 37 37 5f 31 66 33 66 65 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 34 37 37 5f 31 66 33 66 66 5f 32 30 30 64 5f Data Ascii: 476_1f3fe":1,"1f476_1f3ff":1,"1f477_1f3fb_200d_2640":1,"1f477_1f3fb_200d_2642":1,"1f477_1f3fc_200d_2640":1,"1f477_1f3fc_200d_2642":1,"1f477_1f3fd_200d_2640":1,"1f477_1f3fd_200d_2642":1,"1f477_1f3fe_200d_2640":1,"1f477_1f3fe_200d_2642":1,"1f477_1f3ff_200d_
2024-05-25 23:00:14 UTC	16384	IN	Data Raw: 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 39 64 39 5f 31 66 33 66 65 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 39 64 39 5f 31 66 33 66 66 22 3a 31 2c 22 31 66 39 64 39 5f 31 66 33 66 66 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 39 64 39 5f 31 66 33 66 66 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 39 64 39 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 39 64 39 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 39 64 61 22 3a 31 2c 22 31 66 39 64 61 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 39 64 61 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 39 64 62 22 3a 31 2c 22 31 66 39 64 62 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 39 64 62 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 39 64 63 22 3a 31 2c Data Ascii: 0d_2640":1,"1f9d9_1f3fe_200d_2642":1,"1f9d9_1f3ff":1,"1f9d9_1f3ff_200d_2640":1,"1f9d9_1f3ff_200d_2642":1,"1f9d9_200d_2640":1,"1f9d9_200d_2642":1,"1f9da":1,"1f9da_200d_2640":1,"1f9da_200d_2642":1,"1f9db":1,"1f9db_200d_2640":1,"1f9db_200d_2642":1,"1f9dc":1,
2024-05-25 23:00:14 UTC	1500	IN	Data Raw: 39 31 64 5f 32 30 30 64 5f 31 66 34 36 39 5f 31 66 33 66 65 22 3a 31 2c 22 31 66 34 36 39 5f 31 66 33 66 66 5f 32 30 30 64 5f 31 66 39 61 66 22 3a 31 2c 22 31 66 34 36 39 5f 31 66 33 66 66 5f 32 30 30 64 5f 31 66 39 62 30 22 3a 31 2c 22 31 66 34 36 39 5f 31 66 33 66 66 5f 32 30 30 64 5f 31 66 39 62 31 22 3a 31 2c 22 31 66 34 36 39 5f 31 66 33 66 66 5f 32 30 30 64 5f 31 66 39 62 32 22 3a 31 2c 22 31 66 34 36 39 5f 31 66 33 66 66 5f 32 30 30 64 5f 31 66 39 62 33 22 3a 31 2c 22 31 66 34 36 39 5f 31 66 33 66 66 5f 32 30 30 64 5f 31 66 39 62 63 22 3a 31 2c 22 31 66 34 36 39 5f 31 66 33 66 66 5f 32 30 30 64 5f 31 66 39 62 64 22 3a 31 2c 22 31 66 34 36 39 5f 31 66 33 66 66 5f 32 30 30 64 5f 32 37 36 34 5f 32 30 30 64 5f 31 66 33 66 66 5f 31 66 34 36 38 22 3a 31 Data Ascii: 91d_200d_1f469_1f3fe":1,"1f469_1f3ff_200d_1f9af":1,"1f469_1f3ff_200d_1f9b0":1,"1f469_1f3ff_200d_1f9b1":1,"1f469_1f3ff_200d_1f9b2":1,"1f469_1f3ff_200d_1f9b3":1,"1f469_1f3ff_200d_1f9bc":1,"1f469_1f3ff_200d_1f9bd":1,"1f469_1f3ff_200d_2764_200d_1f3ff_1f468":1
2024-05-25 23:00:14 UTC	14884	IN	Data Raw: 3a 31 2c 22 31 66 34 36 39 5f 32 30 30 64 5f 31 66 39 62 63 22 3a 31 2c 22 31 66 34 36 39 5f 32 30 30 64 5f 31 66 39 62 64 22 3a 31 2c 22 31 66 34 36 61 22 3a 31 2c 22 31 66 34 36 65 22 3a 31 2c 22 31 66 34 36 65 5f 31 66 33 66 62 22 3a 31 2c 22 31 66 34 36 65 5f 31 66 33 66 63 22 3a 31 2c 22 31 66 34 36 65 5f 31 66 33 66 64 22 3a 31 2c 22 31 66 34 36 65 5f 31 66 33 66 65 22 3a 31 2c 22 31 66 34 36 65 5f 31 66 33 66 66 22 3a 31 2c 22 31 66 34 36 66 22 3a 31 2c 22 31 66 34 36 66 5f 31 66 33 66 62 22 3a 31 2c 22 31 66 34 36 66 5f 31 66 33 66 63 22 3a 31 2c 22 31 66 34 36 66 5f 31 66 33 66 64 22 3a 31 2c 22 31 66 34 36 66 5f 31 66 33 66 65 22 3a 31 2c 22 31 66 34 36 66 5f 31 66 33 66 66 22 3a 31 2c 22 31 66 34 37 30 5f 31 66 33 66 62 5f 32 30 30 64 5f 32 36 Data Ascii: :1,"1f469_200d_1f9bc":1,"1f469_200d_1f9bd":1,"1f46a":1,"1f46e":1,"1f46e_1f3fb":1,"1f46e_1f3fc":1,"1f46e_1f3fd":1,"1f46e_1f3fe":1,"1f46e_1f3ff":1,"1f46f":1,"1f46f_1f3fb":1,"1f46f_1f3fc":1,"1f46f_1f3fd":1,"1f46f_1f3fe":1,"1f46f_1f3ff":1,"1f470_1f3fb_200d_26
2024-05-25 23:00:14 UTC	16384	IN	Data Raw: 22 31 66 39 64 62 5f 31 66 33 66 64 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 39 64 62 5f 31 66 33 66 64 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 39 64 62 5f 31 66 33 66 65 22 3a 31 2c 22 31 66 39 64 62 5f 31 66 33 66 65 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 39 64 62 5f 31 66 33 66 65 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 39 64 62 5f 31 66 33 66 66 22 3a 31 2c 22 31 66 39 64 62 5f 31 66 33 66 66 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 39 64 62 5f 31 66 33 66 66 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 39 65 37 22 3a 31 2c 22 31 66 39 65 38 22 3a 31 2c 22 31 66 39 65 39 22 3a 31 2c 22 31 66 39 65 61 22 3a 31 2c 22 31 66 39 65 62 22 3a 31 2c 22 31 66 39 65 63 22 3a 31 2c 22 31 66 39 65 64 22 Data Ascii: "1f9db_1f3fd_200d_2640":1,"1f9db_1f3fd_200d_2642":1,"1f9db_1f3fe":1,"1f9db_1f3fe_200d_2640":1,"1f9db_1f3fe_200d_2642":1,"1f9db_1f3ff":1,"1f9db_1f3ff_200d_2640":1,"1f9db_1f3ff_200d_2642":1,"1f9e7":1,"1f9e8":1,"1f9e9":1,"1f9ea":1,"1f9eb":1,"1f9ec":1,"1f9ed"
2024-05-25 23:00:14 UTC	16384	IN	Data Raw: 58 43 6f 6d 65 74 53 74 6f 72 69 65 73 43 6f 6e 74 72 6f 6c 6c 65 72 52 6f 75 74 65 42 75 69 6c 64 65 72 22 2c 22 58 43 6f 6d 65 74 56 69 64 65 6f 48 6f 6d 65 50 6c 61 79 6c 69 73 74 43 6f 6e 74 72 6f 6c 6c 65 72 52 6f 75 74 65 42 75 69 6c 64 65 72 22 2c 22 72 65 61 63 74 22 2c 22 75 73 65 41 63 74 6f 72 53 74 6f 72 79 53 74 61 74 75 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 2c 6a 3d 69 7c 7c 28 69 3d 64 28 22 72 65 61 63 74 22 29 29 3b 65 3d 69 3b 76 61 72 20 6b 3d 65 2e 75 73 65 43 6f 6e 74 65 78 74 2c 6c 3d 65 2e 75 73 65 4d 65 6d 6f 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 76 61 72 20 65 3d 61 2e 61 63 74 6f 72 2c 66 3d 61 2e 65 6e 61 62 6c 65 Data Ascii: XCometStoriesControllerRouteBuilder","XCometVideoHomePlaylistControllerRouteBuilder","react","useActorStoryStatus"],(function(a,b,c,d,e,f,g){"use strict";var h,i,j=i\|\|(i=d("react"));e=i;var k=e.useContext,l=e.useMemo;function a(a){var e=a.actor,f=a.enable
2024-05-25 23:00:14 UTC	14884	IN	Data Raw: 6d 61 72 67 69 6e 54 6f 70 3a 22 78 64 6a 32 36 36 72 22 2c 6d 69 6e 48 65 69 67 68 74 3a 22 78 32 6c 77 6e 31 6a 22 2c 6d 69 6e 57 69 64 74 68 3a 22 78 65 75 75 67 6c 69 22 2c 70 61 64 64 69 6e 67 45 6e 64 3a 22 78 34 75 61 70 35 22 2c 70 61 64 64 69 6e 67 53 74 61 72 74 3a 22 78 6b 68 64 36 73 64 22 2c 70 61 64 64 69 6e 67 54 6f 70 3a 22 78 7a 39 64 6c 37 61 22 2c 70 61 64 64 69 6e 67 42 6f 74 74 6f 6d 3a 22 78 73 61 67 35 71 38 22 2c 70 6f 73 69 74 69 6f 6e 3a 22 78 31 6e 32 6f 6e 72 36 22 2c 7a 49 6e 64 65 78 3a 22 78 31 6a 61 32 75 32 7a 22 2c 24 24 63 73 73 3a 21 30 7d 2c 63 6f 6e 74 65 6e 74 44 65 6e 73 65 3a 7b 70 61 64 64 69 6e 67 54 6f 70 3a 22 78 31 79 31 61 77 31 6b 22 2c 70 61 64 64 69 6e 67 42 6f 74 74 6f 6d 3a 22 78 77 69 62 38 79 32 22 2c Data Ascii: marginTop:"xdj266r",minHeight:"x2lwn1j",minWidth:"xeuugli",paddingEnd:"x4uap5",paddingStart:"xkhd6sd",paddingTop:"xz9dl7a",paddingBottom:"xsag5q8",position:"x1n2onr6",zIndex:"x1ja2u2z",$$css:!0},contentDense:{paddingTop:"x1y1aw1k",paddingBottom:"xwib8y2",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.6	59119	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:13 UTC	599	OUT	GET /rsrc.php/v3/yZ/r/dQ8-bsVFFVS.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:13 UTC	1981	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: 8uZWELwwixD/O46k6FRF5w== Expires: Sat, 24 May 2025 20:44:02 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: vuWHJ+zN18N4WjMEOWIjjdlCmE0hdgOzOQRNBQMDuwCCXvbH7MtPIArpv6Dx7AxeqDX3RNmJ9Ow6CQ7JbAtAhw== Date: Sat, 25 May 2024 23:00:13 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=97, rtx=0, c=14, mss=1392, tbw=3412, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 39533
2024-05-25 23:00:13 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-05-25 23:00:14 UTC	15835	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 4d 69 6e 47 61 70 54 79 70 65 22 2c 5b 22 24 49 6e 74 65 72 6e 61 6c 45 6e 75 6d 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 61 3d 62 28 22 24 49 6e 74 65 72 6e 61 6c 45 6e 75 6d 22 29 28 7b 55 4e 4b 4e 4f 57 4e 3a 30 2c 4f 52 47 41 4e 49 43 3a 31 2c 45 4e 47 41 47 45 4d 45 4e 54 3a 32 2c 46 49 58 45 44 5f 50 4f 53 49 54 49 4f 4e 3a 33 2c 50 52 4f 4d 4f 54 49 4f 4e 3a 34 2c 53 50 4f 4e 53 4f 52 45 44 3a 35 2c 45 4e 44 5f 4f 46 5f 46 45 45 44 5f 43 4f 4e 54 45 4e 54 3a 36 2c 46 42 5f 53 54 4f 52 49 45 53 3a 37 2c 48 49 47 48 5f 56 41 4c 55 45 5f 50 52 4f 4d 4f 54 49 4f 4e 3a 38 2c 46 42 5f 53 54 4f 52 49 45 53 5f 45 4e 47 41 47 45 4d 45 4e 54 3a 39 2c 50 Data Ascii: /FB_PKG_DELIM/__d("MinGapType",["$InternalEnum"],(function(a,b,c,d,e,f){a=b("$InternalEnum")({UNKNOWN:0,ORGANIC:1,ENGAGEMENT:2,FIXED_POSITION:3,PROMOTION:4,SPONSORED:5,END_OF_FEED_CONTENT:6,FB_STORIES:7,HIGH_VALUE_PROMOTION:8,FB_STORIES_ENGAGEMENT:9,P
2024-05-25 23:00:14 UTC	16384	IN	Data Raw: 69 62 69 6c 69 74 79 5f 61 62 73 6f 6c 75 74 65 5f 74 73 3a 7b 6d 69 6e 5f 76 69 73 69 62 6c 65 5f 70 78 3a 65 7d 2c 65 6e 74 69 74 79 5f 69 64 3a 61 2c 6f 72 69 67 69 6e 3a 28 62 3d 66 29 21 3d 6e 75 6c 6c 3f 62 3a 68 2c 70 61 79 6c 6f 61 64 3a 7b 70 6c 61 63 65 68 6f 6c 64 65 72 5f 70 61 79 6c 6f 61 64 3a 28 62 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 64 29 29 21 3d 6e 75 6c 6c 3f 62 3a 22 7b 7d 22 7d 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 65 6e 74 72 69 65 73 3a 5b 5d 2c 69 74 65 6d 49 64 3a 62 2e 69 74 65 6d 49 64 7d 3b 73 77 69 74 63 68 28 62 2e 73 74 61 74 75 73 29 7b 63 61 73 65 20 6b 2e 45 6e 74 65 72 3a 63 3d 72 28 61 2c 62 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 6b 2e 45 78 69 74 3a 63 3d 73 28 61 Data Ascii: ibility_absolute_ts:{min_visible_px:e},entity_id:a,origin:(b=f)!=null?b:h,payload:{placeholder_payload:(b=JSON.stringify(d))!=null?b:"{}"}}})}function q(a,b){var c={entries:[],itemId:b.itemId};switch(b.status){case k.Enter:c=r(a,b);break;case k.Exit:c=s(a
2024-05-25 23:00:14 UTC	7313	IN	Data Raw: 22 29 28 7b 6f 6e 49 6d 70 72 65 73 73 69 6f 6e 45 6e 64 3a 66 2c 6f 6e 49 6d 70 72 65 73 73 69 6f 6e 53 74 61 72 74 3a 68 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 61 2c 63 2c 64 2c 65 29 7b 76 61 72 20 66 3d 61 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 61 2e 62 72 73 5f 66 69 6c 74 65 72 5f 73 65 74 74 69 6e 67 3b 69 66 28 62 28 22 63 72 3a 35 38 38 31 22 29 21 3d 6e 75 6c 6c 26 26 70 61 72 73 65 49 6e 74 28 66 2c 31 30 29 3e 30 29 7b 76 61 72 20 67 3d 61 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 61 2e 75 6e 69 74 5f 61 66 74 65 72 2c 68 3d 61 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 61 2e 75 6e 69 74 5f 62 65 66 6f 72 65 3b 62 28 22 63 72 3a 35 38 38 31 22 29 2e 6c 6f 67 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3b 72 65 74 75 72 6e 7b 61 64 Data Ascii: ")({onImpressionEnd:f,onImpressionStart:h})}function o(a,c,d,e){var f=a==null?void 0:a.brs_filter_setting;if(b("cr:5881")!=null&&parseInt(f,10)>0){var g=a==null?void 0:a.unit_after,h=a==null?void 0:a.unit_before;b("cr:5881").log(function(){var a;return{ad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.6	59120	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:13 UTC	621	OUT	GET /rsrc.php/v3/yO/r/rEJHSWXTk8v5nEQ_oQlIPM1zlMrZllgF1.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:13 UTC	1981	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: 5fn9IW9Jy1i59x7KR5pUqg== Expires: Sun, 25 May 2025 20:54:13 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: E3n8aO+m8b5zXq7vknPfw9ZtxfHnHBWrJmsjU4jUTMH5IHmT6bFaDI7Jc1zDz87Uwqyca2WnJNXRu0tuV8Kx5w== Date: Sat, 25 May 2024 23:00:13 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=4, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 65815
2024-05-25 23:00:13 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-05-25 23:00:14 UTC	15812	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 4e 6f 6e 42 72 65 61 6b 69 6e 67 53 70 61 63 65 5f 44 45 50 52 45 43 41 54 45 44 2e 72 65 61 63 74 22 2c 5b 22 42 61 73 65 4e 6f 6e 42 72 65 61 6b 69 6e 67 53 70 61 63 65 2e 72 65 61 63 74 22 2c 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 61 3d 61 2e 73 69 7a 65 3b 72 65 74 75 72 6e 20 69 2e 6a 73 78 28 63 28 22 42 61 73 65 4e 6f 6e 42 72 65 61 6b 69 6e 67 53 70 61 63 65 2e 72 65 61 63 74 22 29 2c 7b 73 69 7a 65 3a 61 7d 29 7d 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 61 Data Ascii: /FB_PKG_DELIM/__d("CometNonBreakingSpace_DEPRECATED.react",["BaseNonBreakingSpace.react","react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react");function a(a){a=a.size;return i.jsx(c("BaseNonBreakingSpace.react"),{size:a})}a.displayName=a
2024-05-25 23:00:14 UTC	16384	IN	Data Raw: 65 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 61 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 54 65 78 74 57 69 74 68 45 6e 74 69 74 69 65 73 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 74 69 74 6c 65 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 61 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 74 61 72 67 65 74 5f 74 79 70 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 73 74 6f 72 61 67 65 4b Data Ascii: e",plural:!1,selections:a,storageKey:null},{alias:null,args:null,concreteType:"TextWithEntities",kind:"LinkedField",name:"title",plural:!1,selections:a,storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"target_type",storageKey:null}],storageK
2024-05-25 23:00:14 UTC	16384	IN	Data Raw: 2e 6a 73 78 28 22 75 6c 22 2c 7b 63 68 69 6c 64 72 65 6e 3a 63 2e 6e 6f 64 65 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6c 2e 6a 73 78 28 6d 2c 7b 69 73 46 69 72 73 74 3a 62 3d 3d 3d 30 2c 69 74 65 6d 3a 61 7d 2c 28 61 3d 28 61 3d 61 2e 6e 6f 64 65 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 61 2e 69 64 29 21 3d 6e 75 6c 6c 3f 61 3a 62 29 7d 29 7d 29 2c 61 21 3d 3d 6e 75 6c 6c 3f 6c 2e 6a 73 78 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 78 31 34 76 71 71 61 73 22 2c 63 68 69 6c 64 72 65 6e 3a 6c 2e 6a 73 78 28 64 28 22 43 6f 6d 65 74 52 65 6c 61 79 22 29 2e 4d 61 74 63 68 43 6f 6e 74 61 69 6e 65 72 2c 7b 6d 61 74 63 68 3a 61 2c 70 72 6f 70 73 3a 7b 70 72 6f 66 69 6c 65 54 69 6c 65 56 69 65 77 49 44 3a Data Ascii: .jsx("ul",{children:c.nodes.map(function(a,b){return l.jsx(m,{isFirst:b===0,item:a},(a=(a=a.node)==null?void 0:a.id)!=null?a:b)})}),a!==null?l.jsx("div",{className:"x14vqqas",children:l.jsx(d("CometRelay").MatchContainer,{match:a,props:{profileTileViewID:
2024-05-25 23:00:14 UTC	16384	IN	Data Raw: 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 54 65 78 74 57 69 74 68 45 6e 74 69 74 69 65 73 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 74 69 74 6c 65 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 61 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 75 72 6c 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 7d 7d 28 29 3b 65 2e 65 78 70 6f 72 74 73 3d 61 7d 29 2c 6e 75 6c 6c 29 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 5f 5f 64 28 22 43 6f 6d 65 74 48 6f 76 65 72 63 61 72 Data Ascii: ull,concreteType:"TextWithEntities",kind:"LinkedField",name:"title",plural:!1,selections:a,storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"url",storageKey:null}],storageKey:null}]}}();e.exports=a}),null);/FB_PKG_DELIM/__d("CometHovercar
2024-05-25 23:00:14 UTC	850	IN	Data Raw: 69 6e 43 6f 6e 74 72 6f 6c 6c 65 72 52 6f 75 74 65 42 75 69 6c 64 65 72 22 2c 22 72 65 61 63 74 22 2c 22 75 73 65 43 6f 6d 65 74 4c 61 7a 79 44 69 61 6c 6f 67 22 2c 22 75 73 65 43 6f 6d 65 74 52 6f 75 74 65 72 44 69 73 70 61 74 63 68 65 72 22 2c 22 75 73 65 43 75 72 72 65 6e 74 52 6f 75 74 65 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 3b 68 7c 7c 28 68 3d 64 28 22 72 65 61 63 74 22 29 29 3b 76 61 72 20 69 3d 68 2e 75 73 65 43 61 6c 6c 62 61 63 6b 2c 6a 3d 63 28 22 4a 53 52 65 73 6f 75 72 63 65 46 6f 72 49 6e 74 65 72 61 63 74 69 6f 6e 22 29 28 22 43 6f 6d 65 74 4c 6f 67 67 65 64 4f 75 74 50 6f 70 75 70 43 54 41 2e 72 65 61 63 74 22 29 2e 5f 5f 73 65 74 52 65 66 Data Ascii: inControllerRouteBuilder","react","useCometLazyDialog","useCometRouterDispatcher","useCurrentRoute"],(function(a,b,c,d,e,f,g){"use strict";var h;h\|\|(h=d("react"));var i=h.useCallback,j=c("JSResourceForInteraction")("CometLoggedOutPopupCTA.react").__setRef

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.6	59122	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:13 UTC	610	OUT	GET /rsrc.php/v3ibJQ4/y3/l/en_GB/mYDEWiHviVu.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:13 UTC	1981	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: /v5LJgk3F5mbO6/uqwy6KQ== Expires: Sun, 25 May 2025 23:00:13 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: gRDPZtS6ENQMPtib+ZRXi0OHbAW3sOTyuGiVpvNLMvaQMUJQpQz8WYSA4M4htknsj0eXR9JFx/ftqDaWAcPOWw== Date: Sat, 25 May 2024 23:00:13 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=95, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=36, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 42843
2024-05-25 23:00:14 UTC	976	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 41 67 67 72 65 67 61 74 65 64 45 6e 74 69 74 69 65 73 54 6f 6f 6c 74 69 70 52 65 6e 64 65 72 65 72 5f 65 6e 74 69 74 69 65 73 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 69 64 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 62 3d 5b 61 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 Data Ascii: ;/FB_PKG_DELIM/__d("CometAggregatedEntitiesTooltipRenderer_entities.graphql",[],(function(a,b,c,d,e,f){"use strict";a=function(){var a={alias:null,args:null,kind:"ScalarField",name:"id",storageKey:null},b=[a,{alias:null,args:null,kind:"ScalarField",na
2024-05-25 23:00:14 UTC	1500	IN	Data Raw: 3a 22 41 67 67 72 65 67 61 74 65 64 45 6e 74 69 74 69 65 73 41 74 52 61 6e 67 65 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 7d 28 29 3b 65 2e 65 78 70 6f 72 74 73 3d 61 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 41 67 67 72 65 67 61 74 65 64 45 6e 74 69 74 69 65 73 54 6f 6f 6c 74 69 70 52 65 6e 64 65 72 65 72 22 2c 5b 22 66 62 74 22 2c 22 43 6f 6d 65 74 41 67 67 72 65 67 61 74 65 64 45 6e 74 69 74 69 65 73 54 6f 6f 6c 74 69 70 52 65 6e 64 65 72 65 72 5f 65 6e 74 69 74 69 65 73 2e 67 72 61 70 68 71 6c 22 2c 22 43 6f 6d 65 74 54 6f 6f 6c 74 69 70 5f 44 45 50 52 45 43 41 54 45 44 2e 72 65 61 63 74 22 2c 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 29 7b 22 75 73 65 20 73 Data Ascii: :"AggregatedEntitiesAtRange",abstractKey:null}}();e.exports=a}),null);__d("CometAggregatedEntitiesTooltipRenderer",["fbt","CometAggregatedEntitiesTooltipRenderer_entities.graphql","CometTooltip_DEPRECATED.react","react"],(function(a,b,c,d,e,f,g,h){"use s
2024-05-25 23:00:14 UTC	1500	IN	Data Raw: 6c 54 6f 41 63 74 69 6f 6e 54 72 69 67 67 65 72 43 6f 6e 74 65 78 74 22 2c 5b 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 3b 61 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 62 3d 61 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 7b 73 65 74 54 72 69 67 67 65 72 65 64 45 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 7d 2c 74 72 69 67 67 65 72 65 64 42 75 6d 70 65 72 52 65 67 69 73 74 72 79 3a 7b 7d 2c 74 72 69 67 67 65 72 65 64 45 76 65 6e 74 3a 6e 75 6c 6c 7d 29 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 62 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 43 6f 6e 74 65 78 74 22 2c 5b 22 72 65 61 63 74 22 5d 2c Data Ascii: lToActionTriggerContext",["react"],(function(a,b,c,d,e,f,g){"use strict";var h;a=h\|\|d("react");b=a.createContext({setTriggeredEvent:function(a){},triggeredBumperRegistry:{},triggeredEvent:null});g["default"]=b}),98);__d("CometFeedStoryContext",["react"],
2024-05-25 23:00:14 UTC	1500	IN	Data Raw: 22 41 63 74 6f 72 22 2c 22 41 63 74 6f 72 48 6f 76 65 72 63 61 72 64 2e 72 65 61 63 74 22 2c 22 43 6f 6d 65 74 48 6f 76 65 72 63 61 72 64 45 6e 74 69 74 79 52 65 6e 64 65 72 65 72 5f 61 63 74 6f 72 2e 67 72 61 70 68 71 6c 22 2c 22 63 61 6e 52 65 6e 64 65 72 48 6f 76 65 72 63 61 72 64 46 6f 72 47 72 61 70 68 51 4c 45 6e 74 69 74 79 54 79 70 65 22 2c 22 67 6b 78 22 2c 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 2c 6a 3d 69 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 68 21 3d 3d 76 6f 69 64 20 30 3f 68 3a 68 3d 62 28 22 43 6f 6d 65 74 48 6f 76 65 72 63 61 72 64 45 6e 74 69 74 79 52 65 6e 64 65 72 65 72 5f 61 63 74 6f 72 2e 67 72 61 70 68 71 6c 22 Data Ascii: "Actor","ActorHovercard.react","CometHovercardEntityRenderer_actor.graphql","canRenderHovercardForGraphQLEntityType","gkx","react"],(function(a,b,c,d,e,f,g){"use strict";var h,i,j=i\|\|d("react");h!==void 0?h:h=b("CometHovercardEntityRenderer_actor.graphql"
2024-05-25 23:00:14 UTC	1500	IN	Data Raw: 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 68 65 69 67 68 74 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 73 63 61 6c 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 75 72 69 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 77 69 64 74 68 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a Data Ascii: kind:"ScalarField",name:"height",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"scale",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"uri",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"width",storageKey:
2024-05-25 23:00:14 UTC	900	IN	Data Raw: 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 61 72 67 75 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 73 3a 5b 5d 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 22 2c 6d 65 74 61 64 61 74 61 3a 7b 6d 61 73 6b 3a 21 31 7d 2c 6e 61 6d 65 3a 22 43 6f 6d 65 74 4c 69 6e 6b 65 64 45 6e 74 69 74 79 52 65 6e 64 65 72 65 72 5f 65 6e 74 69 74 79 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 5f 5f 74 79 70 65 6e 61 6d 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 5b 7b 6b 69 6e 64 3a 22 4c 69 74 65 72 61 6c 22 2c 6e 61 6d 65 3a 22 73 69 74 65 22 2c 76 61 6c 75 65 3a Data Ascii: {"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:{mask:!1},name:"CometLinkedEntityRenderer_entity",selections:[{alias:null,args:null,kind:"ScalarField",name:"__typename",storageKey:null},{alias:null,args:[{kind:"Literal",name:"site",value:
2024-05-25 23:00:14 UTC	1500	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 4c 69 6e 6b 65 64 45 6e 74 69 74 79 52 65 6e 64 65 72 65 72 5f 65 6e 74 69 74 79 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 47 65 6d 69 6e 69 57 65 61 6b 52 65 66 65 72 65 6e 63 65 4c 69 6e 6b 5f 75 73 65 72 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 75 73 65 72 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 55 73 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 74 79 70 65 3a 22 45 6e 74 69 74 79 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 22 5f 5f 69 73 45 6e 74 69 74 79 22 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 61 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 47 72 6f 75 70 73 43 6f 6d 65 74 47 72 Data Ascii: documentName:"CometLinkedEntityRenderer_entity",fragmentName:"ProfileGeminiWeakReferenceLink_user",fragmentPropName:"user",kind:"ModuleImport"}],type:"User",abstractKey:null}],type:"Entity",abstractKey:"__isEntity"};e.exports=a}),null);__d("GroupsCometGr
2024-05-25 23:00:14 UTC	1500	IN	Data Raw: 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 2c 6a 3d 7b 6c 69 6e 6b 3a 7b 66 6f 6e 74 57 65 69 67 68 74 3a 22 78 31 73 36 38 38 66 22 2c 22 3a 68 6f 76 65 72 5f 74 65 78 74 44 65 63 6f 72 61 74 69 6f 6e 22 3a 22 78 74 30 62 38 7a 76 22 2c 24 24 63 73 73 3a 21 30 7d 7d 3b 62 3d 69 2e 66 6f 72 77 61 72 64 52 65 66 28 61 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 76 61 72 20 64 3d 61 2e 63 68 69 6c 64 72 65 6e 3b 61 3d 61 2e 67 72 6f 75 70 52 75 6c 65 49 44 3b 72 65 74 75 72 6e 20 61 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 69 2e 6a 73 78 28 63 28 22 43 6f 6d 65 74 45 6e 74 72 79 50 6f 69 6e 74 44 69 61 6c 6f 67 54 72 69 67 67 65 72 2e 72 65 61 63 74 22 29 2c 7b 64 69 61 6c 6f 67 45 6e 74 72 79 50 6f Data Ascii: se strict";var h,i=h\|\|d("react"),j={link:{fontWeight:"x1s688f",":hover_textDecoration":"xt0b8zv",$$css:!0}};b=i.forwardRef(a);function a(a,b){var d=a.children;a=a.groupRuleID;return a==null?null:i.jsx(c("CometEntryPointDialogTrigger.react"),{dialogEntryPo
2024-05-25 23:00:14 UTC	1500	IN	Data Raw: 38 29 3b 0a 5f 5f 64 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 50 72 6f 66 69 6c 65 4c 69 6e 6b 2e 72 65 61 63 74 22 2c 5b 22 43 6f 6d 65 74 44 61 6e 67 65 72 6f 75 73 6c 79 53 75 70 70 72 65 73 73 49 6e 74 65 72 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 73 43 6f 6e 74 65 78 74 22 2c 22 43 6f 6d 65 74 48 6f 76 65 72 63 61 72 64 4c 69 6e 6b 43 6f 6e 74 65 78 74 22 2c 22 43 6f 6d 65 74 4c 69 6e 6b 2e 72 65 61 63 74 22 2c 22 43 6f 6d 65 74 52 65 6c 61 79 22 2c 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 4c 69 6e 6b 43 6f 6e 74 65 78 74 22 2c 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 50 72 6f 66 69 6c 65 4c 69 6e 6b 5f 61 63 74 6f 72 2e 67 72 61 70 68 71 6c 22 2c 22 63 72 3a 31 34 30 38 35 36 35 22 2c 22 72 65 61 63 74 22 2c 22 72 65 63 6f 76 65 72 61 62 6c 65 56 69 6f Data Ascii: 8);__d("ProfileCometProfileLink.react",["CometDangerouslySuppressInteractiveElementsContext","CometHovercardLinkContext","CometLink.react","CometRelay","ProfileCometLinkContext","ProfileCometProfileLink_actor.graphql","cr:1408565","react","recoverableVio
2024-05-25 23:00:14 UTC	1500	IN	Data Raw: 2e 67 72 6f 75 70 49 44 2c 65 3d 61 2e 6e 61 76 69 67 61 74 69 6f 6e 53 6f 75 72 63 65 2c 66 3d 61 2e 74 72 61 63 65 50 61 72 61 6d 73 3b 61 3d 62 61 62 65 6c 48 65 6c 70 65 72 73 2e 6f 62 6a 65 63 74 57 69 74 68 6f 75 74 50 72 6f 70 65 72 74 69 65 73 4c 6f 6f 73 65 28 61 2c 5b 22 63 68 69 6c 64 72 65 6e 22 2c 22 67 72 6f 75 70 49 44 22 2c 22 6e 61 76 69 67 61 74 69 6f 6e 53 6f 75 72 63 65 22 2c 22 74 72 61 63 65 50 61 72 61 6d 73 22 5d 29 3b 64 3d 63 28 22 75 73 65 47 72 6f 75 70 73 43 6f 6d 65 74 4f 70 65 6e 41 6e 73 77 65 72 41 67 65 6e 74 45 64 75 63 61 74 69 6f 6e 4d 6f 64 61 6c 22 29 28 64 29 3b 72 65 74 75 72 6e 20 6a 2e 6a 73 78 28 63 28 22 43 6f 6d 65 74 4c 69 6e 6b 2e 72 65 61 63 74 22 29 2c 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 Data Ascii: .groupID,e=a.navigationSource,f=a.traceParams;a=babelHelpers.objectWithoutPropertiesLoose(a,["children","groupID","navigationSource","traceParams"]);d=c("useGroupsCometOpenAnswerAgentEducationModal")(d);return j.jsx(c("CometLink.react"),babelHelpers["exte

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.6	59125	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:15 UTC	927	OUT	POST /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 1307 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-FB-LSD: AVrj9UP_w8I sec-ch-ua-platform-version: "10.0.0" X-ASBD-ID: 129477 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/Codashop.IDofficial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:15 UTC	1307	OUT	Data Raw: 72 6f 75 74 65 5f 75 72 6c 73 5b 30 5d 3d 25 32 46 43 6f 64 61 73 68 6f 70 2e 49 44 6f 66 66 69 63 69 61 6c 25 32 46 26 72 6f 75 74 69 6e 67 5f 6e 61 6d 65 73 70 61 63 65 3d 66 62 5f 63 6f 6d 65 74 26 5f 5f 61 61 69 64 3d 30 26 5f 5f 75 73 65 72 3d 30 26 5f 5f 61 3d 31 26 5f 5f 72 65 71 3d 31 26 5f 5f 68 73 3d 31 39 38 36 38 2e 48 59 50 25 33 41 63 6f 6d 65 74 5f 6c 6f 67 67 65 64 6f 75 74 5f 70 6b 67 2e 32 2e 31 2e 2e 30 2e 30 26 64 70 72 3d 31 26 5f 5f 63 63 67 3d 47 4f 4f 44 26 5f 5f 72 65 76 3d 31 30 31 33 37 37 30 36 30 32 26 5f 5f 73 3d 25 33 41 25 33 41 66 6a 75 7a 61 61 26 5f 5f 68 73 69 3d 37 33 37 33 30 37 35 39 31 30 39 35 31 30 36 38 32 31 30 26 5f 5f 64 79 6e 3d 37 78 65 55 6d 77 6c 45 6e 77 6e 38 79 45 71 78 65 6d 68 30 63 6d 35 55 34 65 31 Data Ascii: route_urls[0]=%2FCodashop.IDofficial%2F&routing_namespace=fb_comet&__aaid=0&__user=0&__a=1&__req=1&__hs=19868.HYP%3Acomet_loggedout_pkg.2.1..0.0&dpr=1&__ccg=GOOD&__rev=1013770602&__s=%3A%3Afjuzaa&__hsi=7373075910951068210&__dyn=7xeUmwlEnwn8yEqxemh0cm5U4e1
2024-05-25 23:00:15 UTC	942	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-25 23:00:15 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-25 23:00:15 UTC	2024	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-25 23:00:15 UTC	390	IN	Data Raw: 36 31 30 36 0d 0a 66 6f 72 20 28 3b 3b 29 3b 7b 22 70 61 79 6c 6f 61 64 22 3a 7b 22 70 61 79 6c 6f 61 64 73 22 3a 7b 22 2f 43 6f 64 61 73 68 6f 70 2e 49 44 6f 66 66 69 63 69 61 6c 2f 22 3a 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 7b 22 74 79 70 65 22 3a 22 72 6f 75 74 65 5f 64 65 66 69 6e 69 74 69 6f 6e 22 2c 22 65 78 70 6f 72 74 73 22 3a 7b 22 61 63 74 6f 72 49 44 22 3a 22 30 22 2c 22 72 6f 6f 74 56 69 65 77 22 3a 7b 22 61 6c 6c 52 65 73 6f 75 72 63 65 73 22 3a 5b 7b 22 5f 5f 6a 73 72 22 3a 22 50 72 6f 66 69 6c 65 50 6c 75 73 43 6f 6d 65 74 4c 6f 67 67 65 64 4f 75 74 52 6f 6f 74 2e 72 65 61 63 74 22 7d 2c 7b 22 5f 5f 6a 73 72 22 3a 22 50 72 6f 66 69 6c 65 50 6c 75 73 43 6f 6d 65 74 4c 6f 67 67 65 64 4f 75 74 52 6f 75 74 65 Data Ascii: 6106for (;;);{"payload":{"payloads":{"/Codashop.IDofficial/":{"error":false,"result":{"type":"route_definition","exports":{"actorID":"0","rootView":{"allResources":[{"__jsr":"ProfilePlusCometLoggedOutRoot.react"},{"__jsr":"ProfilePlusCometLoggedOutRoute
2024-05-25 23:00:15 UTC	1500	IN	Data Raw: 6b 65 6e 22 3a 22 59 58 42 77 58 32 4e 76 62 47 78 6c 59 33 52 70 62 32 34 36 4d 54 41 77 4d 44 51 30 4e 54 59 33 4e 44 41 7a 4e 6a 6b 77 4f 6a 49 7a 4d 6a 63 78 4e 54 67 79 4d 6a 63 36 4d 6a 41 79 22 2c 22 75 73 65 72 49 44 22 3a 22 31 30 30 30 34 34 35 36 37 34 30 33 36 39 30 22 2c 22 75 73 65 72 56 61 6e 69 74 79 22 3a 22 43 6f 64 61 73 68 6f 70 2e 49 44 6f 66 66 69 63 69 61 6c 22 2c 22 76 69 65 77 65 72 49 44 22 3a 22 30 22 2c 22 65 6c 69 67 69 62 6c 65 46 6f 72 50 72 6f 66 69 6c 65 50 6c 75 73 45 6e 74 69 74 79 4d 65 6e 75 22 3a 66 61 6c 73 65 2c 22 6e 75 6d 49 6e 69 74 69 61 6c 46 65 65 64 55 6e 69 74 73 22 3a 31 2c 22 73 65 6f 43 72 61 77 6c 69 6e 67 50 6f 6f 6c 22 3a 6e 75 6c 6c 2c 22 73 65 6f 47 72 6f 77 74 68 41 75 74 6f 6d 61 74 69 6f 6e 43 72 Data Ascii: ken":"YXBwX2NvbGxlY3Rpb246MTAwMDQ0NTY3NDAzNjkwOjIzMjcxNTgyMjc6MjAy","userID":"100044567403690","userVanity":"Codashop.IDofficial","viewerID":"0","eligibleForProfilePlusEntityMenu":false,"numInitialFeedUnits":1,"seoCrawlingPool":null,"seoGrowthAutomationCr
2024-05-25 23:00:15 UTC	1500	IN	Data Raw: 6d 69 73 73 69 62 6c 65 22 3a 74 72 75 65 2c 22 64 65 62 75 67 53 65 72 76 65 72 55 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 22 7d 2c 22 63 61 6e 6f 6e 69 63 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 22 72 6f 75 74 65 5f 6d 61 74 63 68 5f 69 6e 66 6f 73 22 3a 5b 7b 22 69 6e 73 74 61 6e 63 65 50 61 72 61 6d 73 22 3a 7b 22 76 61 6e 69 74 79 22 3a 22 43 6f 64 61 73 68 6f 70 2e 49 44 6f 66 66 69 63 69 61 6c 22 7d 2c 22 72 6f 75 74 65 50 61 72 61 6d 73 22 3a 7b 22 76 61 6e 69 74 79 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 74 72 75 65 2c 22 73 69 67 Data Ascii: missible":true,"debugServerUri":"https://www.facebook.com/ajax/bulk-route-definitions/"},"canonicalUrl":null},"route_match_infos":[{"instanceParams":{"vanity":"Codashop.IDofficial"},"routeParams":{"vanity":{"legacyNames":[],"default":null,"path":true,"sig
2024-05-25 23:00:15 UTC	1500	IN	Data Raw: 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 66 61 6c 73 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 46 42 49 44 22 7d 2c 22 73 6f 72 74 69 6e 67 5f 73 65 74 74 69 6e 67 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 74 72 75 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 45 4e 55 4d 22 7d 2c 22 74 61 67 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 66 61 6c 73 65 2c 22 63 6f 65 72 63 69 62 6c 65 Data Ascii: lt":null,"path":false,"significant":false,"coercibleType":"FBID"},"sorting_setting":{"legacyNames":[],"default":null,"path":false,"significant":true,"coercibleType":"ENUM"},"tag":{"legacyNames":[],"default":null,"path":false,"significant":false,"coercible
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 74 72 75 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 53 54 52 49 4e 47 22 7d 2c 22 64 65 6c 65 67 61 74 65 5f 70 61 67 65 5f 69 64 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 74 72 75 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 46 42 49 44 22 7d 2c 22 61 64 5f 61 63 63 6f 75 6e 74 5f 69 64 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 74 72 75 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 Data Ascii: th":false,"significant":true,"coercibleType":"STRING"},"delegate_page_id":{"legacyNames":[],"default":null,"path":false,"significant":true,"coercibleType":"FBID"},"ad_account_id":{"legacyNames":[],"default":null,"path":false,"significant":true,"coercibleT
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 6e 75 6c 6c 7d 2c 22 32 30 39 33 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 33 36 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 38 35 38 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 38 35 39 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 38 36 30 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 38 36 33 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 31 33 32 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e Data Ascii: null},"20936":{"result":true,"hash":null},"366":{"result":false,"hash":null},"20858":{"result":true,"hash":null},"20859":{"result":false,"hash":null},"20860":{"result":false,"hash":null},"20863":{"result":false,"hash":null},"1326":{"result":false,"hash":n
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 6e 75 6c 6c 7d 2c 22 32 31 30 36 32 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 36 33 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 36 39 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 37 31 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 37 32 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 33 33 30 35 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 38 36 34 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 Data Ascii: null},"21062":{"result":false,"hash":null},"21063":{"result":false,"hash":null},"21069":{"result":false,"hash":null},"21071":{"result":false,"hash":null},"21072":{"result":false,"hash":null},"33056":{"result":false,"hash":null},"20864":{"result":true,"has

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.6	59124	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:15 UTC	927	OUT	POST /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 1439 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-FB-LSD: AVrj9UP_w8I sec-ch-ua-platform-version: "10.0.0" X-ASBD-ID: 129477 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/Codashop.IDofficial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:15 UTC	1439	OUT	Data Raw: 72 6f 75 74 65 5f 75 72 6c 73 5b 30 5d 3d 25 32 46 26 72 6f 75 74 65 5f 75 72 6c 73 5b 31 5d 3d 25 32 46 6c 6f 67 69 6e 25 32 46 64 65 76 69 63 65 2d 62 61 73 65 64 25 32 46 72 65 67 75 6c 61 72 25 32 46 6c 6f 67 69 6e 25 32 46 25 33 46 6c 6f 67 69 6e 5f 61 74 74 65 6d 70 74 25 33 44 31 25 32 36 6e 65 78 74 25 33 44 68 74 74 70 73 25 32 35 33 41 25 32 35 32 46 25 32 35 32 46 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 25 32 35 32 46 43 6f 64 61 73 68 6f 70 2e 49 44 6f 66 66 69 63 69 61 6c 25 32 35 32 46 26 72 6f 75 74 69 6e 67 5f 6e 61 6d 65 73 70 61 63 65 3d 66 62 5f 63 6f 6d 65 74 26 5f 5f 61 61 69 64 3d 30 26 5f 5f 75 73 65 72 3d 30 26 5f 5f 61 3d 31 26 5f 5f 72 65 71 3d 32 26 5f 5f 68 73 3d 31 39 38 36 38 2e 48 59 50 25 33 41 63 6f 6d 65 74 5f 6c Data Ascii: route_urls[0]=%2F&route_urls[1]=%2Flogin%2Fdevice-based%2Fregular%2Flogin%2F%3Flogin_attempt%3D1%26next%3Dhttps%253A%252F%252Fwww.facebook.com%252FCodashop.IDofficial%252F&routing_namespace=fb_comet&__aaid=0&__user=0&__a=1&__req=2&__hs=19868.HYP%3Acomet_l
2024-05-25 23:00:16 UTC	942	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-25 23:00:16 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-25 23:00:16 UTC	2024	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-25 23:00:16 UTC	373	IN	Data Raw: 31 36 39 0d 0a 66 6f 72 20 28 3b 3b 29 3b 7b 22 70 61 79 6c 6f 61 64 22 3a 7b 22 70 61 79 6c 6f 61 64 73 22 3a 7b 22 2f 22 3a 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 6e 75 6c 6c 7d 2c 22 2f 6c 6f 67 69 6e 2f 64 65 76 69 63 65 2d 62 61 73 65 64 2f 72 65 67 75 6c 61 72 2f 6c 6f 67 69 6e 2f 3f 6c 6f 67 69 6e 5f 61 74 74 65 6d 70 74 3d 31 26 6e 65 78 74 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 32 46 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 75 30 30 32 35 32 46 43 6f 64 61 73 68 6f 70 2e 49 44 6f 66 66 69 63 69 61 6c 5c 75 30 30 32 35 32 46 22 3a 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 6e 75 6c 6c 7d 7d 2c 22 73 72 5f 70 61 79 6c 6f 61 64 22 3a Data Ascii: 169for (;;);{"payload":{"payloads":{"/":{"error":false,"result":null},"/login/device-based/regular/login/?login_attempt=1&next=https\u00253A\u00252F\u00252Fwww.facebook.com\u00252FCodashop.IDofficial\u00252F":{"error":false,"result":null}},"sr_payload":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.6	59129	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:15 UTC	858	OUT	GET /images/cookies/cookie_info_card_image_4.png HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/Codashop.IDofficial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:16 UTC	1102	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * content-md5: mXjbZp5JUjt62zr4DVYbGw== Edge-Control: cache-maxage=86400s Expires: Sun, 26 May 2024 08:30:43 GMT Cache-Control: public,max-age=86400 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} document-policy: force-load-at-top
2024-05-25 23:00:16 UTC	1472	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-25 23:00:16 UTC	15099	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 38 00 00 00 c8 08 02 00 00 00 f3 f8 6a 90 00 00 42 82 49 44 41 54 78 da ec da 6d 8c 15 57 19 07 f0 e7 39 67 66 ee dd 17 58 5e 96 2d 0b a5 b4 24 ac 40 16 dd a2 69 02 24 62 2d 94 36 68 d5 04 6b 5a 45 1a 52 ec 52 30 6a 6c 6c 40 3f 68 fa c1 52 db 44 5b 4a d3 68 5a 30 a8 a1 26 a8 15 83 c1 58 2d 05 9a 8a 22 11 57 02 4d 85 96 96 2c 2e ec 2e 2c f7 75 66 ce e3 9c 73 f7 5e 0a dd bb dd 6b 57 53 e4 ff 63 73 79 e6 cc 39 33 f7 92 fd 73 e6 ce 19 ee eb eb 25 00 78 7f 53 04 00 08 2a 00 20 a8 00 08 2a 00 20 a8 00 80 a0 02 20 a8 00 80 a0 02 00 82 0a 80 a0 02 00 82 0a 80 a0 02 00 82 0a 00 08 2a 00 82 0a 00 08 2a 00 20 a8 00 08 2a 00 20 a8 00 57 3d 04 15 00 41 05 00 04 15 00 41 05 00 04 15 00 10 54 00 04 15 00 10 54 00 Data Ascii: PNGIHDR8jBIDATxmW9gfX^-$@i$b-6hkZERR0jll@?hRD[JhZ0&X-"WM,..,ufs^kWScsy93s%xS* * ** * W=AATT
2024-05-25 23:00:16 UTC	1984	IN	Data Raw: 6f de f1 c8 cf e7 05 03 7e 00 ba 9e e7 d8 45 19 47 36 2b d6 ac 7f e5 ed 77 4f 9c 75 24 0a 01 51 51 a8 bb 18 a6 c6 2d 60 55 00 f3 c2 bf 59 f8 3c 67 bb c3 0f 9f fe 35 96 db 88 28 af 11 4e e0 e9 25 5c d7 c2 52 42 aa 74 d4 58 4e 64 a8 57 a3 ec d0 d1 b4 b7 83 97 51 49 40 13 30 34 bb c2 1a c1 30 c8 d6 b0 52 f0 19 1c 0e 38 42 2d 0b d9 c5 e9 50 5d 4e 95 65 76 8b 53 00 2a 0d 3a 1a ee 23 52 ca 87 1f 7e f8 bc f3 ce b3 c7 ae fd 9f c6 e3 9a 5f aa 7f ad 65 f4 44 e5 21 67 2f 5f fb c2 55 df 79 e8 fe db 2e 23 82 b4 ac 3e 8e 45 15 f3 ef 16 be 50 20 a1 32 51 71 31 69 97 42 5d 1d ce de 69 01 78 fd ef ff 58 ba 72 35 c0 f0 f0 97 8f 89 1c 74 a2 b4 12 52 4a e4 61 d9 7a 6e 6a e7 a4 44 73 12 7c 02 dc 93 cb 01 77 ab 73 56 07 66 f7 64 f1 94 ec a5 c5 9d 71 e7 d6 b4 10 8d a3 2b 8e 96 Data Ascii: o~EG6+wOu$QQ-`UY<g5(N%\RBtXNdWQI@040R8B-P]NevS*:#R~_eD!g/_Uy.#>EP 2Qq1iB]ixXr5tRJaznjDs\|wsVfdq+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.6	59127	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:15 UTC	858	OUT	GET /images/cookies/cookie_info_card_image_1.png HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/Codashop.IDofficial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:16 UTC	1144	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * content-md5: Nmnpiyrpc00QHVchkNDJDQ== Edge-Control: cache-maxage=86400s Expires: Sun, 26 May 2024 04:11:54 GMT Cache-Control: public,max-age=86400 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} document-policy: force-load-at-top
2024-05-25 23:00:16 UTC	1498	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-25 23:00:16 UTC	15031	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 38 00 00 00 c8 08 02 00 00 00 f3 f8 6a 90 00 00 56 6b 49 44 41 54 78 da ec dd 7b 8c 5c d5 7d 07 f0 ef ef dc 7b e7 b1 af d9 f5 ae d7 f6 da c6 b1 8d 8d b1 43 6d 5c 07 08 b0 14 42 88 45 d3 56 6a 92 3f da 8a 12 a5 69 a5 28 0d ad aa 22 42 5a da 4a 50 21 a8 44 14 d2 d0 44 8d d4 b4 0d 8f 04 39 16 af 2a 2d 14 91 04 e2 42 c1 d8 c5 36 c6 ef e7 be 77 67 1f f3 be f7 9e f3 ed dc c1 bb ec b2 33 bb 5e 6c 13 1b 9f 8f 46 77 e7 71 cf 9d bb ab f9 ee ef cc 3d e7 ce a0 60 59 d6 79 4f 86 87 d3 b0 2c eb 3c 37 6c 59 d6 79 cf 06 d5 b2 6c 50 2d cb b2 41 b5 2c 1b 54 cb b2 6c 50 2d cb b2 41 b5 2c 1b 54 cb b2 6c 50 2d cb b2 41 b5 2c 1b 54 cb b2 6c 50 2d cb 06 d5 b2 2c 1b 54 cb b2 6c 50 2d cb 06 d5 b2 2c 1b 54 cb b2 6c 50 2d cb Data Ascii: PNGIHDR8jVkIDATx{\}{Cm\BEVj?i("BZJP!DD9*-B6wg3^lFwq=`YyO,<7lYylP-A,TlP-A,TlP-A,TlP-,TlP-,TlP-
2024-05-25 23:00:16 UTC	7149	IN	Data Raw: 10 20 de 75 c5 35 db 37 3d 59 37 6d b1 d7 b3 ad ad 79 27 10 48 72 7d 4f 77 f7 8c b9 67 1f d8 f1 22 98 f6 ab db 96 65 8a 14 ea fa e6 1b 32 aa 49 46 50 52 5a f9 e1 1b 3f b9 eb a5 fb da 0e 6d 1d 7e 6e 77 db a1 97 fe eb 67 77 de b6 f4 a5 c7 ef 79 f6 b1 07 1e 79 f0 ee ff 7b d7 d7 fe f9 1f 6e be f1 aa 45 2f 3c f5 e8 70 b1 d7 be 97 7a ca 42 40 dc 85 00 a4 60 5c 20 f0 bd 3b bf 5d ef be a8 9d 81 48 f5 94 43 eb ef 70 e3 47 04 20 41 42 13 8e 2b 49 57 7c 1f 7a 84 5b 6a 7d f5 07 66 69 65 c4 94 06 ff e5 ef 7e f7 3b 90 f1 b8 67 10 84 30 b5 6b db f6 81 03 07 2b 4a a5 2c 16 af ae 9d 84 14 db 37 ae 35 72 52 c9 5d 27 71 ef 3f 7e e0 81 ef 7c f0 f9 df 7e 6d c3 a3 77 a8 e4 61 23 53 ab 6d fe e2 f3 7b db f6 b4 b4 25 2e be ec 6a f4 be f6 ca 13 f7 95 94 57 bf b6 e1 e9 ea 9a 49 86 Data Ascii: u57=Y7my'Hr}Owg"e2IFPRZ?m~nwgwyy{nE/<pzB@`\ ;]HCpG AB+IW\|z[j}fie~;g0k+J,75rR]'q?~\|~mwa#Sm{%.jWI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.6	59130	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:15 UTC	858	OUT	GET /images/cookies/cookie_info_card_image_3.png HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/Codashop.IDofficial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:16 UTC	1144	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * content-md5: tjvKzjcx509sRQAttysmgw== Edge-Control: cache-maxage=86400s Expires: Sun, 26 May 2024 02:11:00 GMT Cache-Control: public,max-age=86400 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} document-policy: force-load-at-top
2024-05-25 23:00:16 UTC	1498	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-25 23:00:16 UTC	15031	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 38 00 00 00 c8 08 02 00 00 00 f3 f8 6a 90 00 00 8a a9 49 44 41 54 78 da ec 5d 09 7c 5c 55 b9 3f e7 2e b3 65 26 99 ec 49 93 b4 4d ba b7 29 da 5a a0 50 4a 81 2a 28 96 4d 10 2d 4f 2b 2a 8a 82 3e 7c 88 f0 d0 1f 0a 6e a0 e0 0f 9e 0f 7c 80 22 2a e5 09 42 d9 2b 50 69 05 9e 20 82 d0 b2 b4 d0 96 74 a1 4b 92 2e 49 9a cc 3e f7 de f3 fe f7 7c 2f c3 24 33 93 a4 cd 9b 4c 48 ee d7 e1 72 ee 72 ce bd 39 f7 fc cf b7 9c ef fb 2e ef ec ec 60 47 4a 6b d7 ae 3b f3 cc 33 2c 4b a8 aa 1a 8d c6 d6 bf 97 28 2a 0a 74 76 1d 62 9c 0f 5a d7 08 b7 d6 15 f3 da da 5a da 15 c2 52 b8 4d b4 bb 7d fb b6 cd 2d ef d5 cc 5c 92 ba de 34 0d ce 15 86 5f 6e 32 12 dd 1d 3b de 38 f5 94 c5 b4 bb 7a f5 ea f2 8a 72 ce 78 69 30 98 34 92 1e b7 5b d3 Data Ascii: PNGIHDR8jIDATx]\|\U?.e&IM)ZPJ(M-O+>\|n\|"B+Pi tK.I>\|/$3LHrr9.`GJk;3,K(tvbZZRM}-\4_n2;8zrxi04[
2024-05-25 23:00:16 UTC	16384	IN	Data Raw: 0c ee 92 29 93 97 43 77 6d 6a 98 2f 1b 28 ed 79 20 9d 0e 4b 4f 8f 4a 67 25 fd 9a 2b 5b 20 1f de 0b 20 8e 65 63 ca 33 cc 5a f4 14 a8 bd 0a 29 ae 2a a2 35 4d 98 29 87 a3 8e 51 b3 7c ee a9 47 ce 3f 63 39 50 3a 9e c6 4b 7c d0 97 bf fc e5 7d bb 9e b3 d2 31 bc 0c c5 b4 6c cb 84 99 ec 3d 7b a9 65 8c 04 f4 92 5f 8d 64 10 4b b9 c7 a0 c0 9f e4 55 08 39 e3 43 03 3d d9 f1 a5 74 ba 48 4a d7 5b db e4 81 b2 2e 73 a0 2b 84 74 56 65 d7 49 a0 01 49 bd 48 59 5e 3a 53 2c 69 e7 96 2d 03 98 a0 22 e1 d2 57 0f f0 07 b7 ca 26 ff c9 34 9f 5b d1 c9 b8 53 a5 75 58 f0 4b 7a 8d 4a 1c 11 e1 10 8d c5 a6 4e 3e ad e3 d0 53 22 6d b9 0c af 48 c4 18 54 15 ae cd 9b 36 f5 2b 1b ae dd fc f4 73 d7 5f fa 81 5a b8 43 38 cf 7c b0 a1 7b 6c ae 4f 6a 5a 2a 54 03 16 d3 8c f5 f5 bf b1 67 ef 76 4a 20 53 Data Ascii: )Cwmj/(y KOJg%+[ ec3Z)5M)Q\|G?c9P:K\|}1l={e_dKU9C=tHJ[.s+tVeIIHY^:S,i-"W&4[SuXKzJN>S"mHT6+s_ZC8\|{lOjZTgvJ S
2024-05-25 23:00:16 UTC	4139	IN	Data Raw: fa 70 a6 fe 61 0a 6f 13 17 2c ae 8f 64 7f b7 f9 e8 24 6a 39 9a f0 50 47 8e 64 5e 5f 6e fc 46 86 86 3a 7b 97 cf fc d7 c7 13 a8 80 b0 ba 54 b6 52 cc 46 8a 30 43 62 81 56 a6 10 d6 5f 14 46 8a ea a9 3d 66 ac 24 7c 0e ab e7 e9 ee 03 27 e5 63 ac eb f0 14 d7 4a 44 c0 8d 9d 2c 1c f6 18 7f cb 83 15 02 c6 92 c5 7e 54 7e 5f 81 ba 6b d7 2e ed 74 d5 f4 09 17 0a 41 18 58 72 a6 02 40 02 e3 0a e5 82 f0 24 01 a8 50 c5 f4 64 b4 2c 42 43 07 92 aa 21 43 79 f3 99 1b 6f f9 f9 4f ee 5c b2 62 2d 5a 9e ae 3a f6 a4 b7 bf 76 43 47 4a 35 23 c8 16 bc e9 ab b7 fc db 1d 77 2e 5e be 16 f4 ea 67 9d 71 e2 ab 2f de d0 bc a1 30 3a 36 fe e9 cf fe fd a3 8f 3d fe 82 f5 c7 f7 f5 2d 78 d1 8b 5e b4 7e fd 7a d5 9c 54 7c f3 f5 9b 6f b9 f3 bb 77 9e 70 fc b1 f3 e7 75 9f 78 e2 89 1b 36 6c a8 a5 51 ab Data Ascii: pao,d$j9PGd^_nF:{TRF0CbV_F=f$\|'cJD,~T~_k.tAXr@$Pd,BC!CyoO\b-Z:vCGJ5#w.^gq/0:6=-x^~zT\|owpux6lQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.6	59126	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:15 UTC	611	OUT	GET /rsrc.php/v3/ya/r/XEU-8Pf8ztq.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:16 UTC	1913	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: 85qM1UvmDLu6G7tr5+kOPg== Expires: Sat, 24 May 2025 18:28:32 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: TezCwSGv1xlxXXBQXgLMfa43Z/9SOx9giBgWqw7FKF+J83jtx8OhkelApskHBawF1GTVUYI9b1iztejD9gR+6w== Date: Sat, 25 May 2024 23:00:16 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 8274
2024-05-25 23:00:16 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-05-25 23:00:16 UTC	8273	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 bd 00 00 00 cc 08 03 00 00 00 11 77 52 66 00 00 03 00 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 02 02 02 03 03 03 00 00 00 47 70 4c 08 08 08 20 27 32 00 00 00 09 09 09 00 00 00 00 00 00 02 02 02 02 02 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 01 01 00 00 00 00 00 00 00 00 00 01 01 01 02 02 02 01 01 01 01 01 01 ff ff ff 04 04 04 00 00 00 00 00 00 00 00 00 01 01 01 01 01 01 03 03 03 01 01 01 01 01 01 00 00 00 ff ff ff 00 00 00 01 01 01 01 01 01 01 01 01 04 04 04 00 00 00 01 01 01 02 02 02 00 00 00 00 00 00 01 01 01 04 04 04 00 00 00 01 01 01 01 01 01 00 00 00 08 08 08 02 02 02 ff ff ff 01 01 01 00 00 00 00 00 00 00 00 00 02 02 02 00 00 00 01 01 01 03 03 03 04 04 04 01 01 01 00 00 Data Ascii: PNGIHDRwRfPLTEGpL '2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.6	59128	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:16 UTC	858	OUT	GET /images/cookies/cookie_info_card_image_2.png HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/Codashop.IDofficial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:16 UTC	1144	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * content-md5: wRZKtl/35CrbFpdeWSFrBg== Edge-Control: cache-maxage=86400s Expires: Sun, 26 May 2024 19:58:34 GMT Cache-Control: public,max-age=86400 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} document-policy: force-load-at-top
2024-05-25 23:00:16 UTC	1472	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-25 23:00:16 UTC	15057	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 38 00 00 00 c8 08 02 00 00 00 f3 f8 6a 90 00 00 53 01 49 44 41 54 78 5e ec d3 b1 0e 82 30 18 80 41 df ff d5 94 a8 89 0e 3a 00 4a 9a 90 26 80 06 45 70 b2 3a b8 b8 18 27 87 bb fc 69 3b b4 dd be 59 f7 f7 80 ef 42 05 84 0a 08 15 84 0a 08 15 10 2a 08 15 10 2a 08 15 10 2a 20 54 10 2a 20 54 40 a8 20 54 40 a8 20 54 40 a8 80 50 41 a8 80 50 01 a1 82 50 01 a1 d2 be a6 79 af 69 8b 4d 17 e2 b9 ac fb 7d b8 6c ab 61 7d bc ad 0e 63 56 8e 8b 62 9a a7 c9 ef cf 79 9d b3 62 5a 96 53 ba b0 a9 86 5d b8 e6 75 9f 1e c6 e6 d4 a6 df 3e e7 57 08 95 07 fb e6 ee db 34 14 85 71 fe 47 06 46 06 d8 79 48 1d 51 59 60 ed 82 18 50 77 d8 2a c1 5c db 84 20 8a 50 5b a0 3c 7c ed 98 e6 81 e3 3a ce bd 4e 1c 97 b8 f5 75 c4 f1 a3 56 26 c4 d2 Data Ascii: PNGIHDR8jSIDATx^0A:J&Ep:'i;YB*** T* T@ T@ T@PAPPyiM}la}cVbybZS]u>W4qGFyHQY`Pw*\ P[<\|:NuV&
2024-05-25 23:00:16 UTC	6249	IN	Data Raw: 06 4a 05 aa 6a 51 b0 71 ed c2 e7 dd 6f cf 2d 22 9c 78 bc 5c cf 7c 7a f7 fd ab cd 57 ff db fc ff d9 3b d3 a8 28 ae 6d 8f bf ef ef ad 77 d7 ba 51 a3 79 51 31 4c 0e 80 20 20 02 dd 8c a2 a2 cc 34 b3 22 08 02 32 ca d0 4c 0d 22 73 d3 4c 32 d3 0c dd 0c 82 38 a2 a2 12 8d 38 10 a7 c4 90 a0 89 91 68 1c 12 35 2a 08 8e a0 c0 39 e5 db a7 cb 28 37 6a d3 14 89 c9 87 da ab 56 ad a2 2c f8 f6 f3 bf cf 7f ef b3 cf e0 f0 cb 11 fc 1f ee 0b c6 18 ee 7d 3d e7 8f 0b 03 4e e5 05 d1 eb cc b1 9d 46 30 96 e1 44 4e e0 99 82 60 fa fd d8 ce 41 98 72 f6 ba e3 17 cc db 8a 30 47 f8 23 bf 83 14 4e fb 46 e2 08 a7 00 6b 83 04 57 73 c8 99 4f 8a 82 c0 58 5a aa a3 0a 1b 6b ce e6 07 a7 7b 2f 83 0f 26 32 c1 10 ae f0 3d 69 a1 c2 e0 b5 e6 66 2b e7 e8 3a ce d4 5f ad ed 98 a2 bf a6 c2 d0 4f ba c8 bb Data Ascii: JjQqo-"x\\|zW;(mwQyQ1L 4"2L"sL288h5*9(7jV,}=NF0DN`Ar0G#NFkWsOXZk{/&2=if+:_O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.6	59133	157.240.253.1	443	5908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:16 UTC	610	OUT	GET /rsrc.php/v3iGgu4/yM/l/en_GB/74HMcn-5nlc.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:16 UTC	1982	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: GetM9ON6rGhZr6Vh+F6tdg== Expires: Sun, 25 May 2025 23:00:16 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: kcv4zj31zL5TRWLCX+xRZ2CrHvAanFtJY0/guQGePW0QW+99ArhdK85p21xf/UrPERBd2qNLKcqHC21tHzxGPw== Date: Sat, 25 May 2024 23:00:16 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3410, tp=-1, tpl=-1, uplat=44, ullat=1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 156549
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 41 6e 69 6d 61 74 65 50 72 65 73 65 6e 63 65 47 72 6f 75 70 53 74 75 62 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 61 3d 61 2e 63 68 69 6c 64 72 65 6e 3b 72 65 74 75 72 6e 20 61 7d 62 3d 61 3b 66 5b 22 64 65 66 61 75 6c 74 22 5d 3d 62 7d 29 2c 36 36 29 3b 0a 5f 5f 64 28 22 41 6e 69 6d 61 74 65 50 72 65 73 65 6e 63 65 53 74 75 62 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 67 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 76 61 72 20 62 3d 61 2e 63 68 69 Data Ascii: ;/FB_PKG_DELIM/__d("AnimatePresenceGroupStub",[],(function(a,b,c,d,e,f){"use strict";function a(a){a=a.children;return a}b=a;f["default"]=b}),66);__d("AnimatePresenceStub",[],(function(a,b,c,d,e,f){"use strict";function g(){}function a(a){var b=a.chi
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 3d 61 2e 66 72 65 65 7a 65 4c 61 79 6f 75 74 4f 6e 55 6e 6d 6f 75 6e 74 29 21 3d 6e 75 6c 6c 3f 64 3a 21 30 3b 72 65 74 75 72 6e 20 6a 2e 6a 73 78 28 63 28 22 48 69 64 64 65 6e 53 75 62 74 72 65 65 43 6f 6e 74 65 78 74 50 72 6f 76 69 64 65 72 2e 72 65 61 63 74 22 29 2c 7b 69 73 48 69 64 64 65 6e 3a 65 2c 63 68 69 6c 64 72 65 6e 3a 6a 2e 6a 73 78 28 63 28 22 4c 65 67 61 63 79 48 69 64 64 65 6e 22 29 2c 7b 68 74 6d 6c 41 74 74 72 69 62 75 74 65 73 3a 7b 63 6c 61 73 73 4e 61 6d 65 3a 28 68 7c 7c 28 68 3d 63 28 22 73 74 79 6c 65 78 22 29 29 29 28 6b 2e 72 6f 6f 74 2c 64 26 26 6b 2e 66 72 65 65 7a 65 73 4c 61 79 6f 75 74 4f 6e 55 6e 6d 6f 75 6e 74 2c 65 26 26 6b 2e 68 69 64 64 65 6e 2c 61 2e 78 73 74 79 6c 65 29 2c 6f 6e 43 6c 69 63 6b 3a 61 2e 73 74 6f 70 43 Data Ascii: =a.freezeLayoutOnUnmount)!=null?d:!0;return j.jsx(c("HiddenSubtreeContextProvider.react"),{isHidden:e,children:j.jsx(c("LegacyHidden"),{htmlAttributes:{className:(h\|\|(h=c("stylex")))(k.root,d&&k.freezesLayoutOnUnmount,e&&k.hidden,a.xstyle),onClick:a.stopC
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 79 6c 65 64 41 67 67 72 65 67 61 74 65 64 45 6e 74 69 74 69 65 73 54 6f 6f 6c 74 69 70 52 65 6e 64 65 72 65 72 5f 65 6e 74 69 74 69 65 73 2e 67 72 61 70 68 71 6c 22 2c 22 43 6f 6d 65 74 54 6f 6f 6c 74 69 70 5f 44 45 50 52 45 43 41 54 45 44 2e 72 65 61 63 74 22 2c 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 2c 6a 2c 6b 3d 6a 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 69 21 3d 3d 76 6f 69 64 20 30 3f 69 3a 69 3d 62 28 22 43 6f 6d 65 74 43 6f 6e 74 65 78 74 75 61 6c 6c 79 53 74 79 6c 65 64 41 67 67 72 65 67 61 74 65 64 45 6e 74 69 74 69 65 73 54 6f 6f 6c 74 69 70 52 65 6e 64 65 72 65 72 5f 65 6e 74 69 74 69 65 73 2e 67 72 61 70 68 71 6c 22 29 3b Data Ascii: yledAggregatedEntitiesTooltipRenderer_entities.graphql","CometTooltip_DEPRECATED.react","react"],(function(a,b,c,d,e,f,g,h){"use strict";var i,j,k=j\|\|d("react");i!==void 0?i:i=b("CometContextuallyStyledAggregatedEntitiesTooltipRenderer_entities.graphql");
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 2c 62 29 7b 73 77 69 74 63 68 28 62 2e 69 6e 6c 69 6e 65 5f 73 74 79 6c 65 29 7b 63 61 73 65 22 42 4f 4c 44 22 3a 63 61 73 65 20 63 28 22 43 6f 6d 70 6f 73 65 64 49 6e 6c 69 6e 65 53 74 79 6c 65 22 29 2e 42 4f 4c 44 3a 72 65 74 75 72 6e 20 69 2e 6a 73 78 28 22 62 22 2c 7b 63 68 69 6c 64 72 65 6e 3a 61 7d 29 3b 63 61 73 65 22 49 54 41 4c 49 43 22 3a 63 61 73 65 20 63 28 22 43 6f 6d 70 6f 73 65 64 49 6e 6c 69 6e 65 53 74 79 6c 65 22 29 2e 49 54 41 4c 49 43 3a 72 65 74 75 72 6e 20 69 2e 6a 73 78 28 22 69 22 2c 7b 63 68 69 6c 64 72 65 6e 3a 61 7d 29 3b 63 61 73 65 22 55 4e 44 45 52 4c 49 4e 45 22 3a 63 61 73 65 20 63 28 22 43 6f 6d 70 6f 73 65 64 49 6e 6c 69 6e 65 53 74 79 6c 65 22 29 2e 55 4e 44 45 52 4c 49 4e 45 3a 72 65 74 75 72 6e 20 69 2e 6a 73 78 28 22 Data Ascii: ,b){switch(b.inline_style){case"BOLD":case c("ComposedInlineStyle").BOLD:return i.jsx("b",{children:a});case"ITALIC":case c("ComposedInlineStyle").ITALIC:return i.jsx("i",{children:a});case"UNDERLINE":case c("ComposedInlineStyle").UNDERLINE:return i.jsx("
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 61 64 69 6e 67 3a 21 30 2c 74 79 70 65 3a 22 68 65 61 64 6c 69 6e 65 45 6d 70 68 61 73 69 7a 65 64 32 22 2c 63 68 69 6c 64 72 65 6e 3a 61 7d 29 3b 63 61 73 65 22 48 45 41 44 4c 49 4e 45 33 22 3a 63 61 73 65 20 63 28 22 43 6f 6d 70 6f 73 65 64 49 6e 6c 69 6e 65 53 74 79 6c 65 22 29 2e 48 45 41 44 4c 49 4e 45 33 3a 72 65 74 75 72 6e 20 69 2e 6a 73 78 28 63 28 22 54 65 74 72 61 54 65 78 74 2e 72 65 61 63 74 22 29 2c 7b 69 73 53 65 6d 61 6e 74 69 63 48 65 61 64 69 6e 67 3a 21 30 2c 74 79 70 65 3a 22 68 65 61 64 6c 69 6e 65 45 6d 70 68 61 73 69 7a 65 64 33 22 2c 63 68 69 6c 64 72 65 6e 3a 61 7d 29 3b 63 61 73 65 22 48 4f 52 49 5a 4f 4e 54 41 4c 52 55 4c 45 52 22 3a 63 61 73 65 20 63 28 22 43 6f 6d 70 6f 73 65 64 49 6e 6c 69 6e 65 53 74 79 6c 65 22 29 2e 48 4f Data Ascii: ading:!0,type:"headlineEmphasized2",children:a});case"HEADLINE3":case c("ComposedInlineStyle").HEADLINE3:return i.jsx(c("TetraText.react"),{isSemanticHeading:!0,type:"headlineEmphasized3",children:a});case"HORIZONTALRULER":case c("ComposedInlineStyle").HO
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 5d 22 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6a 2e 6a 73 78 28 6c 2c 7b 65 6e 74 69 74 79 3a 62 2c 6e 6f 64 65 3a 61 7d 29 7d 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 50 72 6f 66 69 6c 65 50 6c 75 73 41 64 6d 69 6e 41 63 74 69 76 69 74 69 65 73 4c 6f 67 67 69 6e 67 43 6f 6e 74 65 78 74 2e 72 65 61 63 74 22 2c 5b 22 72 65 61 63 74 22 2c 22 72 65 63 6f 76 65 72 61 62 6c 65 56 69 6f 6c 61 74 69 6f 6e 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 3b 65 3d 28 68 7c 7c 64 28 22 72 65 61 63 74 22 29 29 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 3b 66 3d 65 28 6e 75 6c 6c 29 3b 66 75 Data Ascii: ]";a=function(a,b){return j.jsx(l,{entity:b,node:a})};g["default"]=a}),98);__d("CometProfilePlusAdminActivitiesLoggingContext.react",["react","recoverableViolation"],(function(a,b,c,d,e,f,g){"use strict";var h;e=(h\|\|d("react")).createContext;f=e(null);fu
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 6d 65 20 74 6f 20 79 6f 75 72 20 6e 65 77 20 50 61 67 65 21 22 29 7d 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 61 2e 6e 61 6d 65 2b 22 20 5b 66 72 6f 6d 20 22 2b 66 2e 69 64 2b 22 5d 22 3b 66 75 6e 63 74 69 6f 6e 20 62 28 61 29 7b 72 65 74 75 72 6e 20 68 2e 5f 28 22 59 6f 75 27 72 65 20 6e 6f 77 20 73 77 69 74 63 68 65 64 20 6f 75 74 20 6f 66 20 79 6f 75 72 20 70 72 6f 66 69 6c 65 20 61 6e 64 20 69 6e 74 6f 20 79 6f 75 72 20 50 61 67 65 20 7b 70 61 67 65 5f 6e 61 6d 65 7d 2e 20 54 68 69 73 20 6d 65 61 6e 73 20 74 68 61 74 20 79 6f 75 27 6c 6c 20 68 61 76 65 20 6d 6f 72 65 20 63 6f 6e 66 69 64 65 6e 63 65 20 74 68 61 74 20 79 6f 75 27 72 65 20 73 68 61 72 69 6e 67 2c 20 6c 69 6b 69 6e 67 20 61 6e 64 20 63 6f 6d 6d 65 6e 74 69 6e 67 20 61 73 20 74 68 65 20 Data Ascii: me to your new Page!")}a.displayName=a.name+" [from "+f.id+"]";function b(a){return h._("You're now switched out of your profile and into your Page {page_name}. This means that you'll have more confidence that you're sharing, liking and commenting as the
2024-05-25 23:00:16 UTC	1480	IN	Data Raw: 2b 22 5d 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 68 2e 5f 28 22 4d 61 6e 61 67 65 20 79 6f 75 72 20 67 6c 6f 62 61 6c 20 70 61 67 65 20 73 65 74 74 69 6e 67 73 20 68 65 72 65 2e 22 29 7d 72 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 72 2e 6e 61 6d 65 2b 22 20 5b 66 72 6f 6d 20 22 2b 66 2e 69 64 2b 22 5d 22 3b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 72 65 74 75 72 6e 20 68 2e 5f 28 22 4c 6f 63 61 74 69 6f 6e 20 70 61 67 65 20 73 65 74 74 69 6e 67 73 22 29 7d 73 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 73 2e 6e 61 6d 65 2b 22 20 5b 66 72 6f 6d 20 22 2b 66 2e 69 64 2b 22 5d 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 68 2e 5f 28 22 4d 61 6e 61 67 65 20 79 6f 75 72 20 6c 6f 63 61 74 69 6f 6e 20 50 61 67 65 20 Data Ascii: +"]";function r(){return h._("Manage your global page settings here.")}r.displayName=r.name+" [from "+f.id+"]";function s(){return h._("Location page settings")}s.displayName=s.name+" [from "+f.id+"]";function t(a){return a?h._("Manage your location Page
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 5f 70 61 72 61 6d 28 22 70 61 67 65 20 6e 61 6d 65 22 2c 6a 2e 6a 73 78 28 22 73 70 61 6e 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 78 31 31 37 6e 71 76 34 22 2c 63 68 69 6c 64 72 65 6e 3a 61 7d 29 29 5d 29 2c 74 69 74 6c 65 54 65 78 74 3a 68 2e 5f 28 22 57 65 6c 63 6f 6d 65 20 74 6f 20 79 6f 75 72 20 6e 65 77 20 50 61 67 65 21 22 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 29 7b 72 65 74 75 72 6e 7b 62 6f 64 79 54 65 78 74 3a 68 2e 5f 28 22 55 73 65 20 79 6f 75 72 20 7b 3d 6d 31 7d 20 74 6f 20 67 65 74 20 69 6e 73 69 67 68 74 73 2c 20 63 72 65 61 74 65 20 61 64 73 20 61 6e 64 20 65 78 70 6c 6f 72 65 20 74 6f 6f 6c 73 20 74 6f 20 68 65 6c 70 20 72 65 61 63 68 20 79 6f 75 72 20 61 75 64 69 65 6e 63 65 20 5c 75 32 30 31 33 20 61 6c 6c 20 69 6e 20 6f 6e 65 20 Data Ascii: _param("page name",j.jsx("span",{className:"x117nqv4",children:a}))]),titleText:h._("Welcome to your new Page!")}}function m(){return{bodyText:h._("Use your {=m1} to get insights, create ads and explore tools to help reach your audience \u2013 all in one
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 74 65 72 6e 61 6c 45 6e 75 6d 22 29 2e 4d 69 72 72 6f 72 65 64 28 5b 22 41 44 44 49 54 49 4f 4e 41 4c 5f 50 52 4f 46 49 4c 45 5f 43 52 45 41 54 49 4f 4e 22 2c 22 4d 45 52 47 45 5f 50 41 47 45 5f 41 4e 44 5f 50 52 4f 46 49 4c 45 22 2c 22 50 41 47 45 5f 54 4f 5f 41 44 44 49 54 49 4f 4e 41 4c 5f 50 52 4f 46 49 4c 45 22 2c 22 50 52 4f 46 49 4c 45 5f 54 4f 5f 50 50 4c 55 53 22 2c 22 50 52 4f 4d 4f 44 45 5f 54 4f 5f 41 50 5f 50 4c 55 53 5f 54 52 41 4e 53 46 45 52 22 2c 22 53 54 52 55 43 54 55 52 45 44 5f 50 41 47 45 5f 54 4f 5f 41 44 44 49 54 49 4f 4e 41 4c 5f 50 52 4f 46 49 4c 45 22 5d 29 3b 63 3d 61 3b 66 5b 22 64 65 66 61 75 6c 74 22 5d 3d 63 7d 29 2c 36 36 29 3b 0a 5f 5f 64 28 22 75 73 65 43 6f 6d 65 74 4e 55 58 54 6f 75 72 49 6e 50 72 6f 67 72 65 73 73 22 Data Ascii: ternalEnum").Mirrored(["ADDITIONAL_PROFILE_CREATION","MERGE_PAGE_AND_PROFILE","PAGE_TO_ADDITIONAL_PROFILE","PROFILE_TO_PPLUS","PROMODE_TO_AP_PLUS_TRANSFER","STRUCTURED_PAGE_TO_ADDITIONAL_PROFILE"]);c=a;f["default"]=c}),66);__d("useCometNUXTourInProgress"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.6	59135	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:16 UTC	687	OUT	GET /rsrc.php/v3ifpn4/yt/l/en_GB/xyGxUdbmcjliUVeSsRTCk81SbQg6teJkXAZHoh1prcJsXgjxOZ-_U7a8O0FwF42MYvHidVTgbrSCilh6jit1ncqc.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:16 UTC	1982	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: a73kv5mcNDDYnLQd7+QAww== Expires: Sun, 25 May 2025 23:00:16 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: 5IYK7a2plneiO/8cbKmey2/q7uHuGgr433DxW/JU3+uoiD+EnM/RQnx3NqijBzeORzhfkzL7oTIwEBtpR3KCOQ== Date: Sat, 25 May 2024 23:00:16 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3412, tp=-1, tpl=-1, uplat=38, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 112704
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 45 6e 74 69 74 79 48 65 61 64 65 72 43 6f 76 65 72 44 72 61 67 67 61 62 6c 65 2e 72 65 61 63 74 22 2c 5b 22 66 62 74 22 2c 22 69 78 22 2c 22 41 52 49 41 5f 4c 41 42 45 4c 5f 50 4c 41 43 45 48 4f 4c 44 45 52 5f 46 49 58 4d 45 22 2c 22 42 61 73 65 41 73 70 65 63 74 52 61 74 69 6f 43 6f 6e 74 61 69 6e 65 72 2e 72 65 61 63 74 22 2c 22 42 61 73 65 46 6f 63 75 73 52 69 6e 67 2e 72 65 61 63 74 22 2c 22 42 61 73 65 53 63 72 6f 6c 6c 61 62 6c 65 41 72 65 61 2e 72 65 61 63 74 22 2c 22 46 44 53 49 63 6f 6e 2e 72 65 61 63 74 22 2c 22 46 6f 63 75 73 57 69 74 68 69 6e 48 61 6e 64 6c 65 72 2e 72 65 61 63 74 22 2c 22 4c 6f 63 61 6c 65 22 2c 22 54 65 74 72 61 54 65 78 74 2e 72 65 61 63 Data Ascii: ;/FB_PKG_DELIM/__d("CometEntityHeaderCoverDraggable.react",["fbt","ix","ARIA_LABEL_PLACEHOLDER_FIXME","BaseAspectRatioContainer.react","BaseFocusRing.react","BaseScrollableArea.react","FDSIcon.react","FocusWithinHandler.react","Locale","TetraText.reac
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 67 65 74 44 4f 4d 4e 6f 64 65 28 29 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 62 3d 61 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 2c 64 3d 61 2e 73 63 72 6f 6c 6c 4c 65 66 74 2c 67 3d 61 2e 73 63 72 6f 6c 6c 54 6f 70 3b 61 3d 61 2e 73 63 72 6f 6c 6c 57 69 64 74 68 3b 76 61 72 20 68 3d 75 2e 63 75 72 72 65 6e 74 2e 78 2c 69 3d 75 2e 63 75 72 72 65 6e 74 2e 79 3b 69 66 28 66 3c 65 29 7b 76 61 72 20 6a 3d 31 2d 66 2f 65 3b 69 3d 67 2f 62 2f 6a 7d 65 6c 73 65 20 69 66 28 66 3e 65 29 7b 67 3d 31 2d 65 2f 66 3b 68 3d 64 2f 61 2f 67 7d 79 2e 63 75 72 72 65 6e 74 28 63 28 22 63 6c 61 6d 70 22 29 28 68 2c 30 2c 31 29 2c 63 28 22 63 6c 61 6d 70 22 29 28 69 2c 30 2c 31 29 29 7d 2c 5b 65 2c 66 5d 29 3b 6f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 Data Ascii: getDOMNode();if(a==null)return;var b=a.scrollHeight,d=a.scrollLeft,g=a.scrollTop;a=a.scrollWidth;var h=u.current.x,i=u.current.y;if(f<e){var j=1-f/e;i=g/b/j}else if(f>e){g=1-e/f;h=d/a/g}y.current(c("clamp")(h,0,1),c("clamp")(i,0,1))},[e,f]);o(function(){v
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 6e 3a 66 3c 65 3f 6c 2e 6a 73 78 28 63 28 22 42 61 73 65 41 73 70 65 63 74 52 61 74 69 6f 43 6f 6e 74 61 69 6e 65 72 2e 72 65 61 63 74 22 29 2c 7b 61 73 70 65 63 74 52 61 74 69 6f 3a 66 2c 63 68 69 6c 64 72 65 6e 3a 62 7d 29 3a 6c 2e 6a 73 78 28 22 64 69 76 22 2c 7b 73 74 79 6c 65 3a 7b 77 69 64 74 68 3a 31 30 30 2a 66 2f 65 2b 22 25 22 7d 2c 63 68 69 6c 64 72 65 6e 3a 6c 2e 6a 73 78 28 63 28 22 42 61 73 65 41 73 70 65 63 74 52 61 74 69 6f 43 6f 6e 74 61 69 6e 65 72 2e 72 65 61 63 74 22 29 2c 7b 61 73 70 65 63 74 52 61 74 69 6f 3a 66 2c 63 68 69 6c 64 72 65 6e 3a 62 7d 29 7d 29 7d 29 2c 76 26 26 6c 2e 6a 73 78 28 63 28 22 42 61 73 65 46 6f 63 75 73 52 69 6e 67 2e 72 65 61 63 74 22 29 2c 7b 63 68 69 6c 64 72 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 Data Ascii: n:f<e?l.jsx(c("BaseAspectRatioContainer.react"),{aspectRatio:f,children:b}):l.jsx("div",{style:{width:100*f/e+"%"},children:l.jsx(c("BaseAspectRatioContainer.react"),{aspectRatio:f,children:b})})}),v&&l.jsx(c("BaseFocusRing.react"),{children:function(b){r
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 42 61 73 65 41 73 70 65 63 74 52 61 74 69 6f 43 6f 6e 74 61 69 6e 65 72 2e 72 65 61 63 74 22 2c 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 2c 6a 3d 7b 61 62 73 6f 6c 75 74 65 43 65 6e 74 65 72 3a 7b 6c 65 66 74 3a 22 78 31 6e 72 6c 6c 38 69 22 2c 73 74 61 72 74 3a 6e 75 6c 6c 2c 65 6e 64 3a 6e 75 6c 6c 2c 70 6f 73 69 74 69 6f 6e 3a 22 78 31 30 6c 36 74 71 6b 22 2c 74 6f 70 3a 22 78 77 61 36 30 64 6c 22 2c 74 72 61 6e 73 66 6f 72 6d 3a 22 78 31 31 6c 68 6d 6f 7a 22 2c 24 24 63 73 73 3a 21 30 7d 2c 63 6f 76 65 72 43 6f 6e 74 61 69 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 Data Ascii: BaseAspectRatioContainer.react","react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react"),j={absoluteCenter:{left:"x1nrll8i",start:null,end:null,position:"x10l6tqk",top:"xwa60dl",transform:"x11lhmoz",$$css:!0},coverContainer:function(a,b){retur
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 70 65 63 74 52 61 74 69 6f 3a 67 2c 78 73 74 79 6c 65 3a 21 61 26 26 6a 2e 68 69 64 65 4f 76 65 72 66 6c 6f 77 2c 63 68 69 6c 64 72 65 6e 3a 62 7d 29 7d 29 2c 65 5d 7d 29 3b 65 6c 73 65 20 69 66 28 6b 3d 3d 3d 22 63 6f 76 65 72 22 29 72 65 74 75 72 6e 20 69 2e 6a 73 78 73 28 63 28 22 42 61 73 65 41 73 70 65 63 74 52 61 74 69 6f 43 6f 6e 74 61 69 6e 65 72 2e 72 65 61 63 74 22 29 2c 7b 61 73 70 65 63 74 52 61 74 69 6f 3a 64 2c 78 73 74 79 6c 65 3a 21 61 26 26 6a 2e 68 69 64 65 4f 76 65 72 66 6c 6f 77 2c 63 68 69 6c 64 72 65 6e 3a 5b 66 2c 69 2e 6a 73 78 28 22 64 69 76 22 2c 7b 73 74 79 6c 65 3a 7b 6c 65 66 74 3a 68 2e 78 2a 31 30 30 2b 22 25 22 2c 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 2c 74 6f 70 3a 68 2e 79 2a 31 30 30 2b 22 25 22 2c 74 Data Ascii: pectRatio:g,xstyle:!a&&j.hideOverflow,children:b})}),e]});else if(k==="cover")return i.jsxs(c("BaseAspectRatioContainer.react"),{aspectRatio:d,xstyle:!a&&j.hideOverflow,children:[f,i.jsx("div",{style:{left:h.x100+"%",position:"absolute",top:h.y100+"%",t
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 72 66 6c 6f 77 59 3a 22 78 31 30 77 6c 74 36 32 22 2c 70 6f 73 69 74 69 6f 6e 3a 22 78 31 30 6c 36 74 71 6b 22 2c 73 74 61 72 74 3a 22 78 31 37 71 6f 70 68 65 22 2c 74 6f 70 3a 22 78 31 33 76 69 66 76 79 22 2c 24 24 63 73 73 3a 21 30 7d 2c 62 61 63 6b 67 72 6f 75 6e 64 4d 61 73 6b 3a 7b 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 3a 22 78 79 75 7a 33 70 64 22 2c 62 6f 74 74 6f 6d 3a 22 78 31 65 79 32 6d 31 63 22 2c 62 6f 78 53 69 7a 69 6e 67 3a 22 78 39 66 36 31 39 22 2c 65 6e 64 3a 22 78 64 73 36 38 37 63 22 2c 70 6f 73 69 74 69 6f 6e 3a 22 78 31 30 6c 36 74 71 6b 22 2c 73 74 61 72 74 3a 22 78 31 37 71 6f 70 68 65 22 2c 74 6f 70 3a 22 78 31 33 76 69 66 76 79 22 2c 24 24 63 73 73 3a 21 30 7d 2c 62 61 63 6b 67 72 6f 75 6e 64 4d 61 73 6b 57 61 73 68 3a 7b Data Ascii: rflowY:"x10wlt62",position:"x10l6tqk",start:"x17qophe",top:"x13vifvy",$$css:!0},backgroundMask:{backgroundImage:"xyuz3pd",bottom:"x1ey2m1c",boxSizing:"x9f619",end:"xds687c",position:"x10l6tqk",start:"x17qophe",top:"x13vifvy",$$css:!0},backgroundMaskWash:{
2024-05-25 23:00:16 UTC	222	IN	Data Raw: 45 6e 64 52 61 64 69 75 73 22 3a 22 78 31 6d 32 37 6a 69 64 22 2c 22 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 33 39 70 78 29 5f 62 6f 72 64 65 72 54 6f 70 53 74 61 72 74 52 61 64 69 75 73 22 3a 22 78 76 38 34 66 30 65 22 2c 24 24 63 73 73 3a 21 30 7d 2c 63 6f 76 65 72 50 68 6f 74 6f 3a 7b 61 6c 69 67 6e 49 74 65 6d 73 3a 22 78 36 73 30 64 6e 34 22 2c 64 69 73 70 6c 61 79 3a 22 78 37 38 7a 75 6d 35 22 2c 66 6c 65 78 44 69 72 65 63 74 69 6f 6e 3a 22 78 64 74 35 79 74 66 22 2c 6a 75 73 74 69 66 79 43 6f 6e 74 65 6e 74 3a 22 78 6c 35 36 6a 37 6b 22 2c 24 24 63 73 73 3a 21 30 7d 2c 69 6d 61 67 65 3a 7b 62 6f 74 74 6f 6d 3a 22 78 31 65 79 32 6d Data Ascii: EndRadius":"x1m27jid","@media (max-width: 939px)_borderTopStartRadius":"xv84f0e",$$css:!0},coverPhoto:{alignItems:"x6s0dn4",display:"x78zum5",flexDirection:"xdt5ytf",justifyContent:"xl56j7k",$$css:!0},image:{bottom:"x1ey2m
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 31 63 22 2c 62 6f 78 53 69 7a 69 6e 67 3a 22 78 39 66 36 31 39 22 2c 65 6e 64 3a 22 78 64 73 36 38 37 63 22 2c 6c 65 66 74 3a 6e 75 6c 6c 2c 72 69 67 68 74 3a 6e 75 6c 6c 2c 68 65 69 67 68 74 3a 22 78 35 79 72 32 31 64 22 2c 70 6f 73 69 74 69 6f 6e 3a 22 78 31 30 6c 36 74 71 6b 22 2c 73 74 61 72 74 3a 22 78 31 37 71 6f 70 68 65 22 2c 74 6f 70 3a 22 78 31 33 76 69 66 76 79 22 2c 77 69 64 74 68 3a 22 78 68 38 79 65 6a 33 22 2c 24 24 63 73 73 3a 21 30 7d 2c 69 6d 61 67 65 43 6f 6e 74 61 69 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 5b 7b 6c 65 66 74 3a 22 78 31 30 31 67 74 78 73 22 2c 73 74 61 72 74 3a 6e 75 6c 6c 2c 65 6e 64 3a 6e 75 6c 6c 2c 70 6f 73 69 74 69 6f 6e 3a 22 78 31 30 6c 36 74 71 6b 22 2c 74 6f 70 3a 22 78 31 33 76 69 66 Data Ascii: 1c",boxSizing:"x9f619",end:"xds687c",left:null,right:null,height:"x5yr21d",position:"x10l6tqk",start:"x17qophe",top:"x13vifvy",width:"xh8yej3",$$css:!0},imageContainer:function(a){return[{left:"x101gtxs",start:null,end:null,position:"x10l6tqk",top:"x13vif
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 72 6d 61 6c 22 3a 48 3b 61 3d 61 2e 73 74 61 63 6b 65 64 43 6f 76 65 72 42 75 74 74 6f 6e 3b 76 61 72 20 49 3d 2e 35 2c 4a 3d 2e 35 2c 4b 3d 30 2c 4c 3d 6e 75 6c 6c 2c 4d 3d 30 2c 4e 3d 6e 75 6c 6c 3b 69 66 28 77 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 4f 3d 77 2e 66 6f 63 75 73 58 2c 50 3d 77 2e 66 6f 63 75 73 59 2c 51 3d 77 2e 68 65 69 67 68 74 2c 52 3d 77 2e 6d 65 64 69 61 53 6f 75 72 63 65 2c 53 3d 77 2e 77 69 64 74 68 3b 77 3d 62 61 62 65 6c 48 65 6c 70 65 72 73 2e 6f 62 6a 65 63 74 57 69 74 68 6f 75 74 50 72 6f 70 65 72 74 69 65 73 4c 6f 6f 73 65 28 77 2c 5b 22 66 6f 63 75 73 58 22 2c 22 66 6f 63 75 73 59 22 2c 22 68 65 69 67 68 74 22 2c 22 6d 65 64 69 61 53 6f 75 72 63 65 22 2c 22 77 69 64 74 68 22 5d 29 3b 49 3d 28 4f 3d 4f 29 21 3d 6e 75 6c 6c 3f 4f Data Ascii: rmal":H;a=a.stackedCoverButton;var I=.5,J=.5,K=0,L=null,M=0,N=null;if(w!=null){var O=w.focusX,P=w.focusY,Q=w.height,R=w.mediaSource,S=w.width;w=babelHelpers.objectWithoutPropertiesLoose(w,["focusX","focusY","height","mediaSource","width"]);I=(O=O)!=null?O
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 74 69 6f 6e 42 61 72 43 6f 6e 74 61 69 6e 65 72 2c 53 26 26 6f 2e 63 6f 76 65 72 41 63 74 69 6f 6e 42 61 72 43 6f 6e 74 61 69 6e 65 72 50 75 73 68 56 69 65 77 29 2c 63 68 69 6c 64 72 65 6e 3a 66 7d 29 5d 7d 29 2c 6a 2e 6a 73 78 73 28 63 28 22 42 61 73 65 52 6f 77 2e 72 65 61 63 74 22 29 2c 7b 61 6c 69 67 6e 3a 22 63 65 6e 74 65 72 22 2c 63 68 69 6c 64 72 65 6e 3a 5b 65 21 3d 6e 75 6c 6c 26 26 6a 2e 6a 73 78 73 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 28 68 7c 7c 28 68 3d 63 28 22 73 74 79 6c 65 78 22 29 29 29 28 6f 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 76 65 72 2c 65 2e 78 73 74 79 6c 65 29 2c 63 68 69 6c 64 72 65 6e 3a 5b 6a 2e 6a 73 78 28 63 28 22 42 61 73 65 41 73 70 65 63 74 52 61 74 69 6f 43 6f 6e 74 61 69 6e 65 72 2e 72 65 61 63 74 22 Data Ascii: tionBarContainer,S&&o.coverActionBarContainerPushView),children:f})]}),j.jsxs(c("BaseRow.react"),{align:"center",children:[e!=null&&j.jsxs("div",{className:(h\|\|(h=c("stylex")))(o.backgroundCover,e.xstyle),children:[j.jsx(c("BaseAspectRatioContainer.react"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.6	59132	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:16 UTC	610	OUT	GET /rsrc.php/v3iWd-4/yW/l/en_GB/FJA28rqt62x.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:16 UTC	1981	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: qb3S6ejikniqVKClkccwfg== Expires: Sun, 25 May 2025 11:30:06 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: DLBLMDWzupzA4FRr2QZmRoblckJhxMwkQZi92ZDMN7QHy3ZiWQjGEZuKD1VOYO3QcKg9EWnd6wPubhhQnDugnw== Date: Sat, 25 May 2024 23:00:16 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3410, tp=-1, tpl=-1, uplat=3, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 74578
2024-05-25 23:00:16 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-05-25 23:00:16 UTC	15824	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 41 63 74 69 76 69 74 79 4c 6f 67 4d 65 6e 75 4f 70 74 69 6f 6e 22 2c 5b 22 24 49 6e 74 65 72 6e 61 6c 45 6e 75 6d 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 61 3d 62 28 22 24 49 6e 74 65 72 6e 61 6c 45 6e 75 6d 22 29 28 7b 41 52 43 48 49 56 45 3a 22 61 72 63 68 69 76 65 22 2c 41 55 54 4f 5f 41 43 54 49 56 49 54 59 5f 54 49 4d 45 5f 57 49 4e 44 4f 57 3a 22 61 75 74 6f 5f 61 63 74 69 76 69 74 79 5f 74 69 6d 65 5f 77 69 6e 64 6f 77 22 2c 41 55 54 4f 5f 41 43 54 49 56 49 54 59 5f 4f 50 54 5f 49 4e 3a 22 61 75 74 6f 5f 61 63 74 69 76 69 74 79 5f 6f 70 74 5f 69 6e 22 2c 41 55 54 4f 5f 41 43 54 49 56 49 54 59 5f 4f 50 54 5f 4f 55 54 3a 22 61 75 74 6f 5f 61 63 Data Ascii: /FB_PKG_DELIM/__d("ActivityLogMenuOption",["$InternalEnum"],(function(a,b,c,d,e,f){a=b("$InternalEnum")({ARCHIVE:"archive",AUTO_ACTIVITY_TIME_WINDOW:"auto_activity_time_window",AUTO_ACTIVITY_OPT_IN:"auto_activity_opt_in",AUTO_ACTIVITY_OPT_OUT:"auto_ac
2024-05-25 23:00:16 UTC	16384	IN	Data Raw: 65 65 64 53 74 6f 72 79 4d 65 6e 75 53 65 63 74 69 6f 6e 42 61 73 65 2e 72 65 61 63 74 22 2c 5b 22 43 6f 6d 65 74 41 63 74 69 76 69 74 79 4c 6f 67 55 74 69 6c 73 22 2c 22 43 6f 6d 65 74 45 6e 74 72 79 50 6f 69 6e 74 50 6f 70 6f 76 65 72 54 72 69 67 67 65 72 2e 72 65 61 63 74 22 2c 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 4d 65 6e 75 2e 65 6e 74 72 79 70 6f 69 6e 74 22 2c 22 43 6f 6d 65 74 53 74 6f 72 79 52 65 6e 64 65 72 4c 6f 63 61 74 69 6f 6e 43 6f 6e 74 65 78 74 2e 72 65 61 63 74 22 2c 22 43 6f 6d 65 74 54 72 61 63 6b 69 6e 67 4e 6f 64 65 50 72 6f 76 69 64 65 72 2e 72 65 61 63 74 22 2c 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 43 6f 6e 74 65 78 74 22 2c 22 72 65 61 63 74 22 2c 22 72 65 71 75 69 72 65 44 65 66 65 72 72 65 64 22 5d 2c 28 66 75 6e 63 74 Data Ascii: eedStoryMenuSectionBase.react",["CometActivityLogUtils","CometEntryPointPopoverTrigger.react","CometFeedStoryMenu.entrypoint","CometStoryRenderLocationContext.react","CometTrackingNodeProvider.react","ProfileCometContext","react","requireDeferred"],(funct
2024-05-25 23:00:16 UTC	16384	IN	Data Raw: 70 20 6f 66 66 73 65 74 3d 27 30 25 32 35 27 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 27 25 32 33 46 46 36 36 38 30 27 2f 25 33 65 25 33 63 73 74 6f 70 20 6f 66 66 73 65 74 3d 27 31 30 30 25 32 35 27 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 27 25 32 33 45 36 31 37 33 39 27 2f 25 33 65 25 33 63 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 25 33 65 25 33 63 66 69 6c 74 65 72 20 69 64 3d 27 63 27 20 77 69 64 74 68 3d 27 31 31 38 2e 38 25 32 35 27 20 68 65 69 67 68 74 3d 27 31 31 38 2e 38 25 32 35 27 20 78 3d 27 2d 39 2e 34 25 32 35 27 20 79 3d 27 2d 39 2e 34 25 32 35 27 20 66 69 6c 74 65 72 55 6e 69 74 73 3d 27 6f 62 6a 65 63 74 42 6f 75 6e 64 69 6e 67 42 6f 78 27 25 33 65 25 33 63 66 65 47 61 75 73 73 69 61 6e 42 6c 75 72 20 69 6e 3d 27 53 6f 75 72 63 65 41 6c 70 68 Data Ascii: p offset='0%25' stop-color='%23FF6680'/%3e%3cstop offset='100%25' stop-color='%23E61739'/%3e%3c/linearGradient%3e%3cfilter id='c' width='118.8%25' height='118.8%25' x='-9.4%25' y='-9.4%25' filterUnits='objectBoundingBox'%3e%3cfeGaussianBlur in='SourceAlph
2024-05-25 23:00:16 UTC	16384	IN	Data Raw: 35 33 2e 33 35 25 32 35 27 20 66 78 3d 27 32 33 2e 37 39 38 25 32 35 27 20 66 79 3d 27 35 33 2e 33 35 25 32 35 27 20 72 3d 27 32 34 2e 38 39 25 32 35 27 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 27 6d 61 74 72 69 78 28 2d 2e 31 38 37 33 38 20 2e 39 37 39 34 37 20 2d 31 2e 32 35 33 37 32 20 2d 2e 32 37 37 35 38 20 2e 39 35 31 20 2e 34 34 39 29 27 20 69 64 3d 27 72 27 25 33 65 20 25 33 63 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 27 25 32 33 39 43 30 36 30 30 27 20 73 74 6f 70 2d 6f 70 61 63 69 74 79 3d 27 2e 39 39 39 27 20 6f 66 66 73 65 74 3d 27 30 25 32 35 27 2f 25 33 65 20 25 33 63 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 27 25 32 33 39 43 30 36 30 30 27 20 73 74 6f 70 2d 6f 70 61 63 69 74 79 3d 27 2e 39 34 27 20 6f 66 66 73 Data Ascii: 53.35%25' fx='23.798%25' fy='53.35%25' r='24.89%25' gradientTransform='matrix(-.18738 .97947 -1.25372 -.27758 .951 .449)' id='r'%3e %3cstop stop-color='%239C0600' stop-opacity='.999' offset='0%25'/%3e %3cstop stop-color='%239C0600' stop-opacity='.94' offs
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 22 42 61 73 65 56 69 65 77 2e 72 65 61 63 74 22 29 2c 7b 78 73 74 79 6c 65 3a 5b 6b 2e 69 74 65 6d 2c 6e 5b 78 5d 2c 78 3d 3d 3d 34 26 26 72 5b 62 5d 7c 7c 78 3d 3d 3d 33 26 26 71 5b 62 5d 7c 7c 78 3d 3d 3d 32 26 26 28 74 3d 3d 3d 22 64 65 73 63 65 6e 64 69 6e 67 22 3f 70 5b 62 5d 3a 6f 5b 62 5d 29 2c 62 3d 3d 3d 30 3f 73 5b 75 5d 3a 76 6f 69 64 20 30 5d 2c 63 68 69 6c 64 72 65 6e 3a 61 7d 2c 62 29 7d 29 7d 29 3b 72 65 74 75 72 6e 20 64 21 3d 6e 75 6c 6c 3f 6a 2e 6a 73 78 28 63 28 22 46 44 53 42 61 64 67 65 43 6f 6e 74 61 69 6e 65 72 2e 72 65 61 63 74 22 29 2c 7b 62 61 64 67 65 3a 64 2c 62 61 64 67 65 41 6c 69 67 6e 3a 65 2c 65 78 70 61 6e 64 69 6e 67 3a 66 2c 63 68 69 6c 64 72 65 6e 3a 61 7d 29 3a 61 7d 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 61 2e 6e Data Ascii: "BaseView.react"),{xstyle:[k.item,n[x],x===4&&r[b]\|\|x===3&&q[b]\|\|x===2&&(t==="descending"?p[b]:o[b]),b===0?s[u]:void 0],children:a},b)})});return d!=null?j.jsx(c("FDSBadgeContainer.react"),{badge:d,badgeAlign:e,expanding:f,children:a}):a}a.displayName=a.n
2024-05-25 23:00:16 UTC	8101	IN	Data Raw: 67 6d 65 6e 74 28 68 21 3d 3d 76 6f 69 64 20 30 3f 68 3a 68 3d 62 28 22 47 72 6f 75 70 73 43 6f 6d 65 74 4d 65 6d 62 65 72 50 72 6f 66 69 6c 65 4c 69 6e 6b 5f 67 72 6f 75 70 2e 67 72 61 70 68 71 6c 22 29 2c 66 29 3b 76 61 72 20 70 3d 6d 28 61 29 2c 71 3d 70 2e 6c 69 6e 6b 50 72 6f 70 73 2c 72 3d 70 2e 72 65 66 2c 73 3d 63 28 22 75 73 65 47 72 6f 75 70 73 43 6f 6d 65 74 4f 70 65 6e 41 6e 73 77 65 72 41 67 65 6e 74 45 64 75 63 61 74 69 6f 6e 4d 6f 64 61 6c 22 29 28 67 29 3b 70 3d 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 67 72 6f 75 70 49 44 3a 67 7d 7d 2c 5b 67 5d 29 3b 76 61 72 20 74 3d 7b 22 61 72 69 61 2d 68 69 64 64 65 6e 22 3a 61 5b 22 61 72 69 61 2d 68 69 64 64 65 6e 22 5d 2c 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 61 5b 22 61 72 69 Data Ascii: gment(h!==void 0?h:h=b("GroupsCometMemberProfileLink_group.graphql"),f);var p=m(a),q=p.linkProps,r=p.ref,s=c("useGroupsCometOpenAnswerAgentEducationModal")(g);p=l(function(){return{groupID:g}},[g]);var t={"aria-hidden":a["aria-hidden"],"aria-label":a["ari

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.6	59134	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:16 UTC	610	OUT	GET /rsrc.php/v3iizA4/yo/l/en_GB/HHF3KtxQn_Y.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:16 UTC	1981	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: p0Xkt6mkRKZGj0+3i9bUlQ== Expires: Fri, 23 May 2025 09:16:11 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: l8jeeSsYA8I0hRIn4q+fwncocUIcTOQOOhS0lTMdESq+4Ki6Icx3jCadmbt/0NddMQ1ujgilobQN8ghAPOhJNw== Date: Sat, 25 May 2024 23:00:16 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 78206
2024-05-25 23:00:16 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-05-25 23:00:16 UTC	15824	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 4f 76 65 72 6c 61 70 70 69 6e 67 46 61 63 65 70 69 6c 65 2e 72 65 61 63 74 22 2c 5b 22 66 62 74 22 2c 22 42 61 73 65 43 6f 6e 74 61 69 6e 65 72 51 75 65 72 79 45 6c 65 6d 65 6e 74 2e 72 65 61 63 74 22 2c 22 43 6f 6d 65 74 43 6f 6d 70 6f 6e 65 6e 74 57 69 74 68 4b 65 79 43 6f 6d 6d 61 6e 64 73 2e 72 65 61 63 74 22 2c 22 43 6f 6d 65 74 4b 65 79 73 22 2c 22 43 6f 6d 65 74 50 72 65 73 73 61 62 6c 65 2e 72 65 61 63 74 22 2c 22 43 6f 6d 65 74 50 72 6f 66 69 6c 65 50 68 6f 74 6f 2e 72 65 61 63 74 22 2c 22 43 6f 6d 65 74 54 6f 6f 6c 74 69 70 5f 44 45 50 52 45 43 41 54 45 44 2e 72 65 61 63 74 22 2c 22 43 6f 6d 65 74 56 69 73 75 61 6c 43 6f 6d 70 6c 65 74 69 6f 6e 41 74 74 72 69 62 Data Ascii: /FB_PKG_DELIM/__d("CometOverlappingFacepile.react",["fbt","BaseContainerQueryElement.react","CometComponentWithKeyCommands.react","CometKeys","CometPressable.react","CometProfilePhoto.react","CometTooltip_DEPRECATED.react","CometVisualCompletionAttrib
2024-05-25 23:00:16 UTC	16384	IN	Data Raw: 6c 22 29 29 29 2e 69 36 34 5f 65 71 28 64 2c 6c 29 29 72 65 74 75 72 6e 20 65 3b 69 66 28 28 67 7c 7c 28 67 3d 62 28 22 62 73 5f 63 61 6d 6c 22 29 29 29 2e 69 36 34 5f 65 71 28 64 2c 68 29 29 72 65 74 75 72 6e 20 6a 3b 6d 3d 77 28 65 2c 31 29 3b 6d 3d 75 28 47 28 6d 2c 64 29 2c 31 29 3b 76 61 72 20 6e 3b 69 66 28 6d 5b 30 5d 21 3d 3d 30 29 6e 3d 33 3b 65 6c 73 65 7b 69 66 28 6d 5b 31 5d 3d 3d 3d 30 29 69 66 28 64 5b 30 5d 3c 30 29 72 65 74 75 72 6e 20 6a 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 6f 28 6a 29 3b 6e 3d 33 7d 69 66 28 6e 3d 3d 3d 33 29 7b 6e 3d 74 28 65 2c 79 28 64 2c 6d 29 29 3b 72 65 74 75 72 6e 20 71 28 6d 2c 47 28 6e 2c 64 29 29 7d 7d 69 66 28 69 3d 3d 3d 31 29 7b 6d 3d 64 5b 30 5d 3b 69 66 28 6d 21 3d 3d 2d 32 31 34 37 34 38 33 36 34 38 29 Data Ascii: l"))).i64_eq(d,l))return e;if((g\|\|(g=b("bs_caml"))).i64_eq(d,h))return j;m=w(e,1);m=u(G(m,d),1);var n;if(m[0]!==0)n=3;else{if(m[1]===0)if(d[0]<0)return j;else return o(j);n=3}if(n===3){n=t(e,y(d,m));return q(m,G(n,d))}}if(i===1){m=d[0];if(m!==-2147483648)
2024-05-25 23:00:16 UTC	16384	IN	Data Raw: 39 38 29 3b 0a 5f 5f 64 28 22 4c 53 4d 65 73 73 61 67 65 54 68 72 65 61 64 55 6e 73 65 6e 64 61 62 69 6c 69 74 79 53 74 61 74 75 73 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 61 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 43 41 4e 5f 55 4e 53 45 4e 44 3a 30 2c 44 45 4e 59 5f 46 4f 52 5f 53 50 45 43 49 46 49 43 5f 49 44 53 3a 31 2c 44 45 4e 59 5f 49 46 5f 54 48 52 45 41 44 5f 43 4f 4e 54 41 49 4e 53 5f 50 41 55 3a 32 2c 44 45 4e 59 5f 49 46 5f 54 48 52 45 41 44 5f 43 4f 4e 54 41 49 4e 53 5f 57 4f 52 4b 5f 55 53 45 52 3a 33 2c 44 45 4e 59 5f 49 46 5f 50 41 47 45 5f 54 48 52 45 41 44 3a 34 2c 44 45 4e 59 5f 49 46 5f 4d 41 52 4b 45 54 50 4c 41 43 45 5f 54 48 52 45 41 44 3a 35 2c 44 45 4e 59 5f 49 46 5f 43 41 4e 4e Data Ascii: 98);__d("LSMessageThreadUnsendabilityStatus",[],(function(a,b,c,d,e,f){a=Object.freeze({CAN_UNSEND:0,DENY_FOR_SPECIFIC_IDS:1,DENY_IF_THREAD_CONTAINS_PAU:2,DENY_IF_THREAD_CONTAINS_WORK_USER:3,DENY_IF_PAGE_THREAD:4,DENY_IF_MARKETPLACE_THREAD:5,DENY_IF_CANN
2024-05-25 23:00:16 UTC	16384	IN	Data Raw: 66 61 6e 74 61 2e 63 6f 6f 6b 69 65 2e 6c 69 66 74 22 2c 22 6f 6e 65 22 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 69 28 22 66 61 6e 74 61 2e 63 6f 6f 6b 69 65 2e 6c 69 66 74 22 2c 22 73 6f 6d 65 22 29 2c 69 28 22 66 61 6e 74 61 2e 63 6f 6f 6b 69 65 2e 6c 69 66 74 22 2c 22 6d 61 6e 79 22 29 7d 6c 3d 7b 6d 61 6e 79 3a 75 2c 6e 6f 6e 65 3a 72 2c 6f 6e 65 3a 74 2c 73 6f 6d 65 3a 73 7d 3b 66 75 6e 63 74 69 6f 6e 20 76 28 29 7b 69 28 22 66 61 6e 74 61 2e 63 6f 6f 6b 69 65 2e 73 68 6f 77 22 2c 22 6e 6f 6e 65 22 29 7d 66 75 6e 63 74 69 6f 6e 20 77 28 29 7b 69 28 22 66 61 6e 74 61 2e 63 6f 6f 6b 69 65 2e 73 68 6f 77 22 2c 22 73 6f 6d 65 22 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 29 7b 69 28 22 66 61 6e 74 61 2e 63 6f 6f 6b 69 65 2e 73 68 6f 77 22 2c 22 73 6f 6d Data Ascii: fanta.cookie.lift","one")}function u(){i("fanta.cookie.lift","some"),i("fanta.cookie.lift","many")}l={many:u,none:r,one:t,some:s};function v(){i("fanta.cookie.show","none")}function w(){i("fanta.cookie.show","some")}function x(){i("fanta.cookie.show","som
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 63 74 69 6f 6e 73 54 79 70 65 2e 55 70 64 61 74 65 54 61 62 2c 75 70 64 61 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 3c 3d 62 2e 63 6c 6f 73 65 57 61 74 65 72 6d 61 72 6b 3f 62 3a 7b 63 6c 69 65 6e 74 46 6f 72 63 65 64 4d 69 6e 69 6d 69 7a 65 57 61 74 65 72 6d 61 72 6b 3a 62 2e 63 6c 69 65 6e 74 46 6f 72 63 65 64 4d 69 6e 69 6d 69 7a 65 57 61 74 65 72 6d 61 72 6b 2c 63 6c 6f 73 65 57 61 74 65 72 6d 61 72 6b 3a 61 2c 6d 69 6e 69 6d 69 7a 65 57 61 74 65 72 6d 61 72 6b 3a 62 2e 6d 69 6e 69 6d 69 7a 65 57 61 74 65 72 6d 61 72 6b 2c 6f 70 65 6e 46 6c 79 6f 75 74 57 61 74 65 72 6d 61 72 6b 3a 62 2e 6f 70 65 6e 46 6c 79 6f 75 74 57 61 74 65 72 6d 61 72 6b 2c 6f 70 65 6e 57 61 74 65 72 6d 61 72 6b 3a 62 2e 6f 70 65 6e 57 61 74 65 72 Data Ascii: ctionsType.UpdateTab,updater:function(b){return a<=b.closeWatermark?b:{clientForcedMinimizeWatermark:b.clientForcedMinimizeWatermark,closeWatermark:a,minimizeWatermark:b.minimizeWatermark,openFlyoutWatermark:b.openFlyoutWatermark,openWatermark:b.openWater
2024-05-25 23:00:16 UTC	11729	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 6b 28 61 2c 62 29 7b 72 65 74 75 72 6e 5b 7b 74 61 62 43 6f 6e 66 69 67 3a 7b 73 68 6f 75 6c 64 46 6f 63 75 73 3a 21 31 7d 2c 74 61 62 49 64 3a 62 2c 74 79 70 65 3a 64 28 22 4d 57 43 68 61 74 53 74 61 74 65 56 32 54 79 70 65 73 22 29 2e 4d 57 43 68 61 74 53 74 61 74 65 41 63 74 69 6f 6e 73 54 79 70 65 2e 55 70 64 61 74 65 54 61 62 2c 75 70 64 61 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 3c 3d 62 2e 6d 69 6e 69 6d 69 7a 65 57 61 74 65 72 6d 61 72 6b 7c 7c 64 28 22 4d 57 43 68 61 74 53 74 61 74 65 56 32 49 73 43 6c 6f 73 65 64 22 29 2e 69 73 43 6c 6f 73 65 64 28 62 29 3f 62 3a 7b 63 6c 69 65 6e 74 46 6f 72 63 65 64 4d 69 6e 69 6d 69 7a 65 57 61 74 65 72 6d 61 72 6b 3a 62 2e 63 6c 69 65 6e 74 46 6f 72 63 Data Ascii: unction k(a,b){return[{tabConfig:{shouldFocus:!1},tabId:b,type:d("MWChatStateV2Types").MWChatStateActionsType.UpdateTab,updater:function(b){return a<=b.minimizeWatermark\|\|d("MWChatStateV2IsClosed").isClosed(b)?b:{clientForcedMinimizeWatermark:b.clientForc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.6	59136	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:16 UTC	808	OUT	GET /rsrc.php/v3id884/y8/l/en_GB/4t25DeQRTJxLsi-rwUHCTlWyubcVjTfcI11-o1MT8-XErTW_NeGw-j-h5bjod9Ki8-3AcSV1GJLuDkNkYY8jZuVHUTYWdONLt7WuwwDateX8xhlAxWws3te_lNBFZ41W3g_g8nScjVqE0xb_HmQ2JWvIJ2cZwagDY3jE6r9mkoV0ZzHkRFDpcKqESlC_aQOCXY8eS6DpV79ituEkM.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:16 UTC	1982	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: MWOfZsDHh5sW/SA6Erf/Qg== Expires: Sun, 25 May 2025 23:00:16 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: DtiYiEr0Ke3PbEzgGUVEY7Oa5XmUNWO7IgP/pTWbB5veafcA9qdyeMIctWnmh0T18Q0VwiWQvn4bNp4i5vEYcQ== Date: Sat, 25 May 2024 23:00:16 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=13, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=46, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 944267
2024-05-25 23:00:16 UTC	160	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 46 65 65 64 41 67 67 72 65 67 61 74 65 64 53 74 6f 72 69 65 73 43 6f 6e 74 65 78 74 22 2c 5b 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 3b 61 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 62 3d 61 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 7b 68 61 73 41 67 67 72 65 67 61 74 65 Data Ascii: ;/FB_PKG_DELIM/__d("CometFeedAggregatedStoriesContext",["react"],(function(a,b,c,d,e,f,g){"use strict";var h;a=h\|\|d("react");b=a.createContext({hasAggregate
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 50 61 72 65 6e 74 3a 21 31 7d 29 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 62 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 46 65 65 64 46 6f 63 75 73 4d 65 64 69 61 2e 72 65 61 63 74 22 2c 5b 22 72 65 61 63 74 22 2c 22 73 74 79 6c 65 78 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 2c 6a 3d 69 7c 7c 64 28 22 72 65 61 63 74 22 29 2c 6b 3d 7b 6d 65 64 69 61 3a 7b 62 6f 74 74 6f 6d 3a 22 78 31 65 79 32 6d 31 63 22 2c 65 6e 64 3a 22 78 64 73 36 38 37 63 22 2c 6c 65 66 74 3a 6e 75 6c 6c 2c 72 69 67 68 74 3a 6e 75 6c 6c 2c 68 65 69 67 68 74 3a 22 78 35 79 72 32 31 64 22 2c 70 6f 73 69 74 69 6f 6e 3a 22 78 31 30 6c 36 74 71 6b 22 2c 73 74 61 72 74 3a 22 78 Data Ascii: Parent:!1});g["default"]=b}),98);__d("CometFeedFocusMedia.react",["react","stylex"],(function(a,b,c,d,e,f,g){"use strict";var h,i,j=i\|\|d("react"),k={media:{bottom:"x1ey2m1c",end:"xds687c",left:null,right:null,height:"x5yr21d",position:"x10l6tqk",start:"x
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 72 69 63 74 22 3b 61 3d 7b 61 72 67 75 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 73 3a 5b 5d 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 22 2c 6d 65 74 61 64 61 74 61 3a 7b 6d 61 73 6b 3a 21 31 7d 2c 6e 61 6d 65 3a 22 47 72 6f 75 70 73 43 6f 6d 65 74 47 72 6f 75 70 52 75 6c 65 52 65 6e 64 65 72 65 72 5f 65 6e 74 69 74 79 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 5f 5f 74 79 70 65 6e 61 6d 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 5b 7b 6b 69 6e 64 3a 22 4c 69 74 65 72 61 6c 22 2c 6e 61 6d 65 3a 22 73 69 74 65 22 2c 76 61 6c 75 65 3a 22 63 6f 6d 65 Data Ascii: rict";a={argumentDefinitions:[],kind:"Fragment",metadata:{mask:!1},name:"GroupsCometGroupRuleRenderer_entity",selections:[{alias:null,args:null,kind:"ScalarField",name:"__typename",storageKey:null},{alias:null,args:[{kind:"Literal",name:"site",value:"come
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 7d 63 3d 7b 65 6e 74 69 74 79 4d 65 6e 74 69 6f 6e 53 74 79 6c 65 3a 61 28 29 2c 68 61 73 68 74 61 67 53 74 79 6c 65 3a 62 28 29 7d 3b 66 5b 22 64 65 66 61 75 6c 74 22 5d 3d 63 7d 29 2c 36 36 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 4d 65 73 73 61 67 65 42 6f 64 79 52 65 6e 64 65 72 65 72 73 22 2c 5b 22 43 6f 6d 65 74 42 6f 6c 64 65 64 45 6e 74 69 74 79 52 65 6e 64 65 72 65 72 22 2c 22 43 6f 6d 65 74 46 65 65 64 53 65 65 4d 6f 72 65 41 6e 63 68 6f 72 45 6e 74 69 74 79 52 65 6e 64 65 72 65 72 22 2c 22 43 6f 6d 65 74 48 6f 76 65 72 63 61 72 64 45 6e 74 69 74 79 52 65 6e 64 65 72 65 72 22 2c 22 43 6f 6d 65 74 4b 47 54 69 63 6b 65 72 4e 6f 64 65 45 6e 74 69 74 79 52 65 6e 64 65 72 65 72 22 2c 22 43 6f 6d 65 74 53 68 6f 72 74 65 6e 65 Data Ascii: }c={entityMentionStyle:a(),hashtagStyle:b()};f["default"]=c}),66);__d("CometFeedStoryMessageBodyRenderers",["CometBoldedEntityRenderer","CometFeedSeeMoreAnchorEntityRenderer","CometHovercardEntityRenderer","CometKGTickerNodeEntityRenderer","CometShortene
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 73 68 6f 74 3a 5b 62 28 22 63 72 3a 34 36 34 31 22 29 5d 2e 66 69 6c 74 65 72 28 42 6f 6f 6c 65 61 6e 29 2c 58 46 42 57 6f 72 6b 43 75 73 74 6f 6d 45 6d 6f 6a 69 3a 5b 62 28 22 63 72 3a 36 36 32 35 22 29 5d 2e 66 69 6c 74 65 72 28 42 6f 6f 6c 65 61 6e 29 7d 29 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 66 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 4d 65 73 73 61 67 65 42 6f 64 79 54 72 61 6e 73 66 6f 72 6d 73 22 2c 5b 22 43 6f 6d 65 74 45 6d 6f 6a 69 54 72 61 6e 73 66 6f 72 6d 22 2c 22 43 6f 6d 65 74 45 6d 6f 74 69 63 6f 6e 54 72 61 6e 73 66 6f 72 6d 22 2c 22 43 6f 6d 65 74 4c 69 6e 65 42 72 65 61 6b 54 72 61 6e 73 66 6f 72 6d 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 Data Ascii: shot:[b("cr:4641")].filter(Boolean),XFBWorkCustomEmoji:[b("cr:6625")].filter(Boolean)});g["default"]=f}),98);__d("CometFeedStoryMessageBodyTransforms",["CometEmojiTransform","CometEmoticonTransform","CometLineBreakTransform"],(function(a,b,c,d,e,f,g){"us
2024-05-25 23:00:16 UTC	892	IN	Data Raw: 6f 72 79 4d 65 73 73 61 67 65 42 6f 64 79 52 65 6e 64 65 72 65 72 73 22 2c 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 4d 65 73 73 61 67 65 42 6f 64 79 54 72 61 6e 73 66 6f 72 6d 73 22 2c 22 43 6f 6d 65 74 46 65 65 64 55 6e 69 74 51 75 65 72 79 56 61 72 69 61 62 6c 65 73 43 6f 6e 74 65 78 74 22 2c 22 43 6f 6d 65 74 48 69 67 68 6c 69 67 68 74 54 72 61 6e 73 66 6f 72 6d 22 2c 22 43 6f 6d 65 74 52 65 6c 61 79 22 2c 22 43 6f 6d 65 74 53 65 61 72 63 68 4d 61 74 63 68 65 64 54 65 72 6d 73 43 6f 6e 74 65 78 74 22 2c 22 43 6f 6d 65 74 54 65 78 74 57 69 74 68 45 6e 74 69 74 69 65 73 52 65 6c 61 79 2e 72 65 61 63 74 22 2c 22 44 61 74 65 43 6f 6e 73 74 73 22 2c 22 72 65 61 63 74 22 2c 22 75 73 65 43 6f 6d 65 74 46 65 65 64 49 6e 6c 69 6e 65 45 78 70 61 6e 64 4e 61 Data Ascii: oryMessageBodyRenderers","CometFeedStoryMessageBodyTransforms","CometFeedUnitQueryVariablesContext","CometHighlightTransform","CometRelay","CometSearchMatchedTermsContext","CometTextWithEntitiesRelay.react","DateConsts","react","useCometFeedInlineExpandNa
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 5d 29 3a 63 28 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 4d 65 73 73 61 67 65 42 6f 64 79 54 72 61 6e 73 66 6f 72 6d 73 22 29 3b 76 61 72 20 72 3d 6c 28 63 28 22 43 6f 6d 65 74 46 65 65 64 55 6e 69 74 51 75 65 72 79 56 61 72 69 61 62 6c 65 73 43 6f 6e 74 65 78 74 22 29 29 2c 73 3d 63 28 22 75 73 65 43 6f 6d 65 74 46 65 65 64 4d 61 78 69 6d 75 6d 4d 65 73 73 61 67 65 4c 65 6e 67 74 68 22 29 28 29 3b 72 3d 28 72 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 72 2e 66 65 65 64 4c 6f 63 61 74 69 6f 6e 29 3d 3d 3d 22 53 45 52 56 49 43 45 53 5f 4c 4f 43 41 4c 5f 42 55 53 49 4e 45 53 53 5f 44 49 53 43 4f 56 45 52 59 22 3b 76 61 72 20 74 3d 69 3d 3d 3d 22 73 65 65 2d 6d 6f 72 65 22 3f 6f 3a 70 3b 74 3d 65 21 3d 6e 75 6c 6c 3f 65 2a 6e 2d 74 3a 73 3b 76 61 72 20 75 Data Ascii: ]):c("CometFeedStoryMessageBodyTransforms");var r=l(c("CometFeedUnitQueryVariablesContext")),s=c("useCometFeedMaximumMessageLength")();r=(r==null?void 0:r.feedLocation)==="SERVICES_LOCAL_BUSINESS_DISCOVERY";var t=i==="see-more"?o:p;t=e!=null?e*n-t:s;var u
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 6d 65 6e 74 41 63 74 69 6f 6e 55 74 69 6c 73 5f 61 63 74 69 6f 6e 2e 67 72 61 70 68 71 6c 22 29 2c 61 29 3b 76 61 72 20 63 3d 61 2e 5f 5f 74 79 70 65 6e 61 6d 65 2c 65 3d 61 2e 65 76 65 6e 74 5f 6e 61 6d 65 3b 73 77 69 74 63 68 28 63 29 7b 63 61 73 65 22 53 74 6f 72 79 4c 65 76 65 6c 43 61 6c 6c 54 6f 41 63 74 69 6f 6e 52 6f 6f 74 45 76 65 6e 74 22 3a 63 3d 61 2e 63 74 61 5f 6e 61 6d 65 3b 61 3d 61 2e 75 75 69 64 3b 6b 28 7b 63 74 61 4e 61 6d 65 3a 63 2c 65 76 65 6e 74 4e 61 6d 65 3a 65 2c 75 75 69 64 3a 61 7d 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 62 72 65 61 6b 7d 7d 2c 5b 5d 29 7d 67 2e 75 73 65 43 54 41 53 75 70 70 6c 65 6d 65 6e 74 41 63 74 69 6f 6e 44 69 73 70 61 74 63 68 65 72 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 46 Data Ascii: mentActionUtils_action.graphql"),a);var c=a.__typename,e=a.event_name;switch(c){case"StoryLevelCallToActionRootEvent":c=a.cta_name;a=a.uuid;k({ctaName:c,eventName:e,uuid:a});break;default:break}},[])}g.useCTASupplementActionDispatcher=a}),98);__d("CometF
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 65 76 65 6e 74 5f 6e 61 6d 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 63 74 61 5f 6e 61 6d 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 75 75 69 64 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 74 79 70 65 Data Ascii: s:null,args:null,kind:"ScalarField",name:"event_name",storageKey:null},{kind:"InlineFragment",selections:[{alias:null,args:null,kind:"ScalarField",name:"cta_name",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"uuid",storageKey:null}],type
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 22 75 75 69 64 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 74 79 70 65 3a 22 53 74 6f 72 79 4c 65 76 65 6c 43 61 6c 6c 54 6f 41 63 74 69 6f 6e 52 6f 6f 74 45 76 65 6e 74 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 61 72 67 73 3a 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 73 3a 5b 5d 7d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 63 6f 6d 65 74 5f 61 63 74 69 6f 6e 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 Data Ascii: "uuid",storageKey:null}],type:"StoryLevelCallToActionRootEvent",abstractKey:null}],args:null,argumentDefinitions:[]}],storageKey:null},{alias:null,args:null,concreteType:null,kind:"LinkedField",name:"comet_action",plural:!1,selections:[{kind:"InlineFragme

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.6	59137	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:16 UTC	610	OUT	GET /rsrc.php/v3ibTx4/y3/l/en_GB/4Gun5E2JitX.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:16 UTC	1982	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: ZqU5PT+ddHxspNMXVky5Fw== Expires: Sun, 25 May 2025 23:00:16 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: C3ovZ1VMtTCXB+Vqr236lnto238ZD4GT+GN3Rq8/OZunyKOjbeAiTiANEh3eNsdrY6Z1v0J7wAf4aIqYcTsCqg== Date: Sat, 25 May 2024 23:00:16 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=13, mss=1392, tbw=3410, tp=-1, tpl=-1, uplat=43, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 423286
2024-05-25 23:00:16 UTC	172	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 41 70 70 47 72 6f 75 70 73 46 69 6c 6c 65 64 31 36 2e 73 76 67 2e 72 65 61 63 74 22 2c 5b 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 72 65 74 75 72 6e 20 69 2e 6a 73 78 73 28 22 73 76 67 22 2c 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 Data Ascii: ;/FB_PKG_DELIM/__d("AppGroupsFilled16.svg.react",["react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react");function a(a){return i.jsxs("svg",babelHelpers["e
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 78 74 65 6e 64 73 22 5d 28 7b 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 36 20 31 36 22 2c 77 69 64 74 68 3a 22 31 65 6d 22 2c 68 65 69 67 68 74 3a 22 31 65 6d 22 2c 66 69 6c 6c 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 7d 2c 61 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 61 2e 74 69 74 6c 65 21 3d 6e 75 6c 6c 26 26 69 2e 6a 73 78 28 22 74 69 74 6c 65 22 2c 7b 63 68 69 6c 64 72 65 6e 3a 61 2e 74 69 74 6c 65 7d 29 2c 61 2e 63 68 69 6c 64 72 65 6e 21 3d 6e 75 6c 6c 26 26 69 2e 6a 73 78 28 22 64 65 66 73 22 2c 7b 63 68 69 6c 64 72 65 6e 3a 61 2e 63 68 69 6c 64 72 65 6e 7d 29 2c 69 2e 6a 73 78 28 22 67 22 2c 7b 66 69 6c 6c 52 75 6c 65 3a 22 65 76 65 6e 6f 64 64 22 2c 74 72 61 6e 73 66 6f 72 6d 3a 22 74 72 61 6e 73 6c 61 74 65 28 2d 34 34 38 20 2d 35 34 34 29 22 2c Data Ascii: xtends"]({viewBox:"0 0 16 16",width:"1em",height:"1em",fill:"currentColor"},a,{children:[a.title!=null&&i.jsx("title",{children:a.title}),a.children!=null&&i.jsx("defs",{children:a.children}),i.jsx("g",{fillRule:"evenodd",transform:"translate(-448 -544)",
2024-05-25 23:00:16 UTC	1259	IN	Data Raw: 63 74 69 6f 6e 20 61 28 61 29 7b 72 65 74 75 72 6e 20 69 2e 6a 73 78 73 28 22 73 76 67 22 2c 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 36 20 31 36 22 2c 77 69 64 74 68 3a 22 31 65 6d 22 2c 68 65 69 67 68 74 3a 22 31 65 6d 22 2c 66 69 6c 6c 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 7d 2c 61 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 61 2e 74 69 74 6c 65 21 3d 6e 75 6c 6c 26 26 69 2e 6a 73 78 28 22 74 69 74 6c 65 22 2c 7b 63 68 69 6c 64 72 65 6e 3a 61 2e 74 69 74 6c 65 7d 29 2c 61 2e 63 68 69 6c 64 72 65 6e 21 3d 6e 75 6c 6c 26 26 69 2e 6a 73 78 28 22 64 65 66 73 22 2c 7b 63 68 69 6c 64 72 65 6e 3a 61 2e 63 68 69 6c 64 72 65 6e 7d 29 2c 69 2e 6a 73 78 28 22 67 22 2c 7b 66 69 6c 6c 52 75 Data Ascii: ction a(a){return i.jsxs("svg",babelHelpers["extends"]({viewBox:"0 0 16 16",width:"1em",height:"1em",fill:"currentColor"},a,{children:[a.title!=null&&i.jsx("title",{children:a.title}),a.children!=null&&i.jsx("defs",{children:a.children}),i.jsx("g",{fillRu
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 3b 76 61 72 20 68 2c 69 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 72 65 74 75 72 6e 20 69 2e 6a 73 78 73 28 22 73 76 67 22 2c 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 36 20 31 36 22 2c 77 69 64 74 68 3a 22 31 65 6d 22 2c 68 65 69 67 68 74 3a 22 31 65 6d 22 2c 66 69 6c 6c 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 7d 2c 61 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 61 2e 74 69 74 6c 65 21 3d 6e 75 6c 6c 26 26 69 2e 6a 73 78 28 22 74 69 74 6c 65 22 2c 7b 63 68 69 6c 64 72 65 6e 3a 61 2e 74 69 74 6c 65 7d 29 2c 61 2e 63 68 69 6c 64 72 65 6e 21 3d 6e 75 6c 6c 26 26 69 2e 6a 73 78 28 22 64 65 66 73 22 2c 7b 63 68 69 6c 64 72 65 6e 3a 61 2e 63 68 Data Ascii: ;var h,i=h\|\|d("react");function a(a){return i.jsxs("svg",babelHelpers["extends"]({viewBox:"0 0 16 16",width:"1em",height:"1em",fill:"currentColor"},a,{children:[a.title!=null&&i.jsx("title",{children:a.title}),a.children!=null&&i.jsx("defs",{children:a.ch
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 74 22 5d 3d 62 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 42 61 64 67 65 46 69 6c 6c 65 64 31 36 49 63 6f 6e 53 76 67 2e 72 65 61 63 74 22 2c 5b 22 42 61 64 67 65 46 69 6c 6c 65 64 31 36 2e 73 76 67 2e 72 65 61 63 74 22 2c 22 53 56 47 49 63 6f 6e 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 64 28 22 53 56 47 49 63 6f 6e 22 29 2e 73 76 67 49 63 6f 6e 28 63 28 22 42 61 64 67 65 46 69 6c 6c 65 64 31 36 2e 73 76 67 2e 72 65 61 63 74 22 29 29 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 42 72 69 65 66 63 61 73 65 46 69 6c 6c 65 64 31 36 2e 73 76 67 2e 72 65 61 63 74 22 2c 5b 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c Data Ascii: t"]=b}),98);__d("BadgeFilled16IconSvg.react",["BadgeFilled16.svg.react","SVGIcon"],(function(a,b,c,d,e,f,g){"use strict";a=d("SVGIcon").svgIcon(c("BadgeFilled16.svg.react"));g["default"]=a}),98);__d("BriefcaseFilled16.svg.react",["react"],(function(a,b,
2024-05-25 23:00:16 UTC	1146	IN	Data Raw: 63 6f 6e 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 64 28 22 53 56 47 49 63 6f 6e 22 29 2e 73 76 67 49 63 6f 6e 28 63 28 22 42 72 69 65 66 63 61 73 65 46 69 6c 6c 65 64 31 36 2e 73 76 67 2e 72 65 61 63 74 22 29 29 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 43 68 65 76 72 6f 6e 44 6f 77 6e 46 69 6c 6c 65 64 31 36 2e 73 76 67 2e 72 65 61 63 74 22 2c 5b 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 72 65 74 75 72 6e 20 69 2e 6a 73 78 Data Ascii: con"],(function(a,b,c,d,e,f,g){"use strict";a=d("SVGIcon").svgIcon(c("BriefcaseFilled16.svg.react"));g["default"]=a}),98);__d("ChevronDownFilled16.svg.react",["react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react");function a(a){return i.jsx
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 64 61 74 61 3a 6e 75 6c 6c 2c 6e 61 6d 65 3a 22 43 6f 6d 65 74 42 61 64 67 65 53 65 63 74 69 6f 6e 5f 73 74 6f 72 79 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 5b 7b 6b 69 6e 64 3a 22 56 61 72 69 61 62 6c 65 22 2c 6e 61 6d 65 3a 22 6c 6f 63 61 74 69 6f 6e 22 2c 76 61 72 69 61 62 6c 65 4e 61 6d 65 3a 22 72 65 6e 64 65 72 4c 6f 63 61 74 69 6f 6e 22 7d 5d 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 43 6f 6d 65 74 53 74 6f 72 79 53 65 63 74 69 6f 6e 73 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 63 6f 6d 65 74 5f 73 65 63 74 69 6f 6e 73 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 5b 7b 6b 69 6e Data Ascii: data:null,name:"CometBadgeSection_story",selections:[{alias:null,args:[{kind:"Variable",name:"location",variableName:"renderLocation"}],concreteType:"CometStorySections",kind:"LinkedField",name:"comet_sections",plural:!1,selections:[{alias:null,args:[{kin
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 73 68 6f 75 6c 64 42 65 57 68 69 74 65 3a 66 7d 2c 73 65 63 74 69 6f 6e 3a 22 62 61 64 67 65 22 2c 74 72 61 63 6b 69 6e 67 44 61 74 61 3a 61 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 61 2e 65 6e 63 72 79 70 74 65 64 5f 74 72 61 63 6b 69 6e 67 7d 29 7d 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 61 2e 6e 61 6d 65 2b 22 20 5b 66 72 6f 6d 20 22 2b 66 2e 69 64 2b 22 5d 22 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 43 6f 6d 6d 75 6e 69 74 79 43 6f 6d 6d 65 6e 74 53 69 67 6e 61 6c 52 65 6e 64 65 72 65 72 5f 63 6f 6d 6d 65 6e 74 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 61 72 67 75 6d 65 6e 74 44 Data Ascii: shouldBeWhite:f},section:"badge",trackingData:a==null?void 0:a.encrypted_tracking})}a.displayName=a.name+" [from "+f.id+"]";g["default"]=a}),98);__d("CometCommunityCommentSignalRenderer_comment.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentD
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 22 20 5b 66 72 6f 6d 20 22 2b 66 2e 69 64 2b 22 5d 22 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 43 6f 6d 70 6f 73 65 72 50 6c 75 67 69 6e 55 73 61 67 65 46 61 6c 63 6f 45 76 65 6e 74 22 2c 5b 22 46 61 6c 63 6f 4c 6f 67 67 65 72 49 6e 74 65 72 6e 61 6c 22 2c 22 67 65 74 46 61 6c 63 6f 4c 6f 67 50 6f 6c 69 63 79 5f 44 4f 5f 4e 4f 54 5f 55 53 45 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 63 28 22 67 65 74 46 61 6c 63 6f 4c 6f 67 50 6f 6c 69 63 79 5f 44 4f 5f 4e 4f 54 5f 55 53 45 22 29 28 22 33 38 33 32 22 29 3b 62 3d 64 28 22 46 61 6c 63 6f 4c 6f 67 67 65 72 49 6e 74 65 72 6e 61 6c 22 29 2e 63 72 65 61 74 65 28 22 63 Data Ascii: " [from "+f.id+"]";g["default"]=a}),98);__d("CometComposerPluginUsageFalcoEvent",["FalcoLoggerInternal","getFalcoLogPolicy_DO_NOT_USE"],(function(a,b,c,d,e,f,g){"use strict";a=c("getFalcoLogPolicy_DO_NOT_USE")("3832");b=d("FalcoLoggerInternal").create("c
2024-05-25 23:00:16 UTC	1500	IN	Data Raw: 22 56 61 72 69 61 62 6c 65 22 2c 6e 61 6d 65 3a 22 73 63 61 6c 65 22 2c 76 61 72 69 61 62 6c 65 4e 61 6d 65 3a 22 73 63 61 6c 65 22 7d 2c 7b 6b 69 6e 64 3a 22 4c 69 74 65 72 61 6c 22 2c 6e 61 6d 65 3a 22 77 69 64 74 68 22 2c 76 61 6c 75 65 3a 34 30 7d 5d 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 53 70 72 65 61 64 22 2c 6e 61 6d 65 3a 22 46 44 53 50 72 6f 66 69 6c 65 50 68 6f 74 6f 46 6f 72 41 63 74 6f 72 5f 61 63 74 6f 72 22 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 69 73 5f 61 64 64 69 74 69 6f 6e 61 6c 5f 70 72 6f 66 69 6c 65 5f 70 6c 75 73 22 Data Ascii: "Variable",name:"scale",variableName:"scale"},{kind:"Literal",name:"width",value:40}],kind:"FragmentSpread",name:"FDSProfilePhotoForActor_actor"},{kind:"InlineFragment",selections:[{alias:null,args:null,kind:"ScalarField",name:"is_additional_profile_plus"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.6	59138	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:16 UTC	927	OUT	POST /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 1544 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-FB-LSD: AVrj9UP_w8I sec-ch-ua-platform-version: "10.0.0" X-ASBD-ID: 129477 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/Codashop.IDofficial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:16 UTC	1544	OUT	Data Raw: 72 6f 75 74 65 5f 75 72 6c 73 5b 30 5d 3d 25 32 46 6c 65 67 61 6c 25 32 46 74 65 72 6d 73 25 32 46 69 6e 66 6f 72 6d 61 74 69 6f 6e 5f 61 62 6f 75 74 5f 70 61 67 65 5f 69 6e 73 69 67 68 74 73 5f 64 61 74 61 26 72 6f 75 74 65 5f 75 72 6c 73 5b 31 5d 3d 25 32 46 70 72 69 76 61 63 79 25 32 46 70 6f 6c 69 63 79 25 32 46 25 33 46 65 6e 74 72 79 5f 70 6f 69 6e 74 25 33 44 63 6f 6d 65 74 5f 64 72 6f 70 64 6f 77 6e 26 72 6f 75 74 65 5f 75 72 6c 73 5b 32 5d 3d 25 32 46 70 6f 6c 69 63 69 65 73 25 33 46 72 65 66 25 33 44 70 66 26 72 6f 75 74 65 5f 75 72 6c 73 5b 33 5d 3d 25 32 46 62 75 73 69 6e 65 73 73 26 72 6f 75 74 65 5f 75 72 6c 73 5b 34 5d 3d 25 32 46 68 65 6c 70 25 32 46 35 36 38 31 33 37 34 39 33 33 30 32 32 31 37 26 72 6f 75 74 65 5f 75 72 6c 73 5b 35 5d 3d Data Ascii: route_urls[0]=%2Flegal%2Fterms%2Finformation_about_page_insights_data&route_urls[1]=%2Fprivacy%2Fpolicy%2F%3Fentry_point%3Dcomet_dropdown&route_urls[2]=%2Fpolicies%3Fref%3Dpf&route_urls[3]=%2Fbusiness&route_urls[4]=%2Fhelp%2F568137493302217&route_urls[5]=
2024-05-25 23:00:16 UTC	942	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-25 23:00:16 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-25 23:00:16 UTC	2026	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-25 23:00:16 UTC	388	IN	Data Raw: 31 66 30 0d 0a 66 6f 72 20 28 3b 3b 29 3b 7b 22 70 61 79 6c 6f 61 64 22 3a 7b 22 70 61 79 6c 6f 61 64 73 22 3a 7b 22 2f 6c 65 67 61 6c 2f 74 65 72 6d 73 2f 69 6e 66 6f 72 6d 61 74 69 6f 6e 5f 61 62 6f 75 74 5f 70 61 67 65 5f 69 6e 73 69 67 68 74 73 5f 64 61 74 61 22 3a 7b 22 65 72 72 6f 72 22 3a 74 72 75 65 7d 2c 22 2f 70 72 69 76 61 63 79 2f 70 6f 6c 69 63 79 2f 3f 65 6e 74 72 79 5f 70 6f 69 6e 74 3d 63 6f 6d 65 74 5f 64 72 6f 70 64 6f 77 6e 22 3a 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 6e 75 6c 6c 7d 2c 22 2f 70 6f 6c 69 63 69 65 73 3f 72 65 66 3d 70 66 22 3a 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 6e 75 6c 6c 7d 2c 22 2f 62 75 73 69 6e 65 73 73 22 3a 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 Data Ascii: 1f0for (;;);{"payload":{"payloads":{"/legal/terms/information_about_page_insights_data":{"error":true},"/privacy/policy/?entry_point=comet_dropdown":{"error":false,"result":null},"/policies?ref=pf":{"error":false,"result":null},"/business":{"error":fals
2024-05-25 23:00:16 UTC	120	IN	Data Raw: 22 3a 7b 22 68 73 72 70 22 3a 7b 22 68 62 6c 70 22 3a 7b 22 63 6f 6e 73 69 73 74 65 6e 63 79 22 3a 7b 22 72 65 76 22 3a 31 30 31 33 37 37 30 36 30 32 7d 7d 7d 7d 2c 22 6c 6f 67 5f 72 6f 6f 74 73 22 3a 5b 5d 7d 2c 22 64 74 73 67 41 73 79 6e 63 47 65 74 54 6f 6b 65 6e 22 3a 6e 75 6c 6c 2c 22 64 74 73 67 54 6f 6b 65 6e 22 3a 6e 75 6c 6c 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: ":{"hsrp":{"hblp":{"consistency":{"rev":1013770602}}}},"log_roots":[]},"dtsgAsyncGetToken":null,"dtsgToken":null}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.6	59139	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:16 UTC	368	OUT	GET /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:17 UTC	930	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-25 23:00:17 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-25 23:00:17 UTC	1662	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-25 23:00:17 UTC	2717	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 63 6f 6e 66 69 67 76 65 72 73 69 6f 6e 3d 22 41 63 49 4f 6b 58 65 6b 66 77 49 74 51 49 39 37 59 52 6f 43 34 43 2d 64 6a 2d 31 6c 66 6d 6c 71 6a 4a 6e 65 63 49 31 72 44 68 6a 6b 52 62 77 6e 6e 51 73 69 6e 33 32 37 78 72 53 66 63 41 22 3b 20 65 5f 63 6c 69 65 6e 74 61 64 64 72 3d 22 41 63 4c 45 4b 57 69 57 30 31 32 51 39 5f 70 48 49 70 49 5f 69 75 7a 48 43 48 4d 4f 67 31 77 66 44 61 4c 73 77 65 4a 6e 5a 50 5a 68 6c 4c 46 46 4e 61 62 37 39 4c 73 31 75 69 57 43 45 35 7a 31 4c 2d 36 66 37 47 4d 7a 69 38 6d 5a 43 59 43 4a 64 59 34 42 54 31 38 76 42 34 30 36 64 59 77 4b 38 4f 6c 64 78 76 65 74 76 45 78 6a 61 5a 63 32 22 3b 20 65 5f 66 62 5f 76 69 Data Ascii: Proxy-Status: http_request_error; e_fb_configversion="AcIOkXekfwItQI97YRoC4C-dj-1lfmlqjJnecI1rDhjkRbwnnQsin327xrSfcA"; e_clientaddr="AcLEKWiW012Q9_pHIpI_iuzHCHMOg1wfDaLsweJnZPZhlLFFNab79Ls1uiWCE5z1L-6f7GMzi8mZCYCJdY4BT18vB406dYwK8OldxvetvExjaZc2"; e_fb_vi
2024-05-25 23:00:17 UTC	1335	IN	Data Raw: 64 38 65 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 70 54 58 55 57 50 72 73 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 Data Ascii: d8e9<!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="pTXUWPrs">function envFlush(a){function b(b){for(var c in a)b[c]=a
2024-05-25 23:00:17 UTC	1500	IN	Data Raw: 6f 6b 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 6d 65 64 69 61 3d 22 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 34 30 70 78 29 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 3f 6c 6f 63 61 6c 65 32 3d 65 6e 5f 47 42 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 6d 65 64 69 61 3d 22 68 61 6e 64 68 65 6c 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 3f 6c 6f 63 61 6c 65 32 3d Data Ascii: ok" /><link rel="alternate" media="only screen and (max-width: 640px)" href="https://www.facebook.com/ajax/bulk-route-definitions/?locale2=en_GB" /><link rel="alternate" media="handheld" href="https://www.facebook.com/ajax/bulk-route-definitions/?locale2=
2024-05-25 23:00:17 UTC	1500	IN	Data Raw: 6c 67 35 4b 7a 22 20 64 61 74 61 2d 62 6f 6f 74 6c 6f 61 64 65 72 2d 68 61 73 68 3d 22 52 45 42 76 6c 59 5a 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 75 2f 6c 2f 30 2c 63 72 6f 73 73 2f 65 37 70 59 43 67 72 71 45 74 68 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 20 64 61 74 61 2d 62 6f 6f 74 6c 6f 61 64 65 72 2d 68 61 73 68 3d 22 31 2b 48 31 6c 46 42 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 2f 3e Data Ascii: lg5Kz" data-bootloader-hash="REBvlYZ" crossorigin="anonymous" /><link type="text/css" rel="stylesheet" href="https://static.xx.fbcdn.net/rsrc.php/v3/yu/l/0,cross/e7pYCgrqEth.css?_nc_x=Ij3Wp8lg5Kz" data-bootloader-hash="1+H1lFB" crossorigin="anonymous" />
2024-05-25 23:00:17 UTC	1500	IN	Data Raw: 72 3a 36 36 34 30 22 2c 5b 22 50 72 6f 6d 69 73 65 49 6d 70 6c 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 50 72 6f 6d 69 73 65 49 6d 70 6c 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 33 38 36 22 2c 5b 22 63 6c 65 61 72 54 69 6d 65 6f 75 74 57 57 57 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 63 6c 65 61 72 54 69 6d 65 6f 75 74 57 57 57 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 33 39 30 22 2c 5b 22 73 65 74 54 69 6d 65 6f 75 74 57 57 57 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 73 65 74 54 69 6d 65 6f 75 74 57 57 57 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 38 39 35 38 22 2c 5b 22 46 42 4a 53 4f 4e 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 46 42 4a 53 4f 4e 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 30 37 38 22 2c 5b Data Ascii: r:6640",["PromiseImpl"],{"__rc":["PromiseImpl",null]},-1],["cr:7386",["clearTimeoutWWW"],{"__rc":["clearTimeoutWWW",null]},-1],["cr:7390",["setTimeoutWWW"],{"__rc":["setTimeoutWWW",null]},-1],["cr:8958",["FBJSON"],{"__rc":["FBJSON",null]},-1],["cr:1078",[
2024-05-25 23:00:17 UTC	1500	IN	Data Raw: 6f 43 6f 6f 6b 69 65 73 22 3a 66 61 6c 73 65 2c 22 73 68 6f 75 6c 64 53 68 6f 77 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 22 3a 66 61 6c 73 65 2c 22 73 68 6f 75 6c 64 57 61 69 74 46 6f 72 44 65 66 65 72 72 65 64 44 61 74 72 43 6f 6f 6b 69 65 22 3a 66 61 6c 73 65 7d 2c 34 33 32 38 5d 2c 5b 22 43 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 49 46 72 61 6d 65 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 63 6f 6e 73 65 6e 74 5f 70 61 72 61 6d 22 3a 22 46 51 41 53 45 68 49 53 41 41 3d 3d 2e 41 52 59 75 4f 34 78 57 66 65 45 77 43 4a 43 5a 55 68 6d 46 71 2d 71 65 76 68 2d 41 6b 6e 61 69 75 53 76 54 64 4f 72 66 4d 57 52 6f 69 56 44 58 22 2c 22 61 6c 6c 6f 77 6c 69 73 74 65 64 5f 69 66 72 61 6d 65 73 22 3a 5b 5d 2c 22 69 73 5f 63 68 65 63 6b 70 6f 69 6e 74 65 64 22 3a 66 61 6c 73 65 Data Ascii: oCookies":false,"shouldShowCookieBanner":false,"shouldWaitForDeferredDatrCookie":false},4328],["CookieConsentIFrameConfig",[],{"consent_param":"FQASEhISAA==.ARYuO4xWfeEwCJCZUhmFq-qevh-AknaiuSvTdOrfMWRoiVDX","allowlisted_iframes":[],"is_checkpointed":false
2024-05-25 23:00:17 UTC	1500	IN	Data Raw: 22 74 22 3a 36 30 34 38 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 6d 5f 6c 73 22 3a 7b 22 74 22 3a 33 34 35 36 30 30 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 6d 5f 70 69 78 65 6c 5f 72 61 74 69 6f 22 3a 7b 22 74 22 3a 36 30 34 38 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 6e 6f 73 63 72 69 70 74 22 3a 7b 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 70 72 65 73 65 6e 63 65 22 3a 7b 22 74 22 3a 32 35 39 32 30 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 73 66 61 75 22 3a 7b 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 75 73 69 64 61 22 3a 7b 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 76 70 64 22 3a 7b 22 74 22 3a 35 31 38 34 30 30 30 2c 22 73 22 3a 22 4c 61 78 22 7d 2c 22 77 64 22 3a 7b 22 74 22 3a 36 30 34 38 30 30 2c 22 73 22 3a 22 4c 61 78 22 7d 2c Data Ascii: "t":604800,"s":"None"},"m_ls":{"t":34560000,"s":"None"},"m_pixel_ratio":{"t":604800,"s":"None"},"noscript":{"s":"None"},"presence":{"t":2592000,"s":"None"},"sfau":{"s":"None"},"usida":{"s":"None"},"vpd":{"t":5184000,"s":"Lax"},"wd":{"t":604800,"s":"Lax"},
2024-05-25 23:00:17 UTC	1500	IN	Data Raw: 22 3a 22 6a 61 7a 6f 65 73 74 22 2c 22 76 65 72 73 69 6f 6e 22 3a 32 2c 22 73 68 6f 75 6c 64 5f 72 61 6e 64 6f 6d 69 7a 65 22 3a 66 61 6c 73 65 7d 2c 32 31 31 31 5d 2c 5b 22 55 73 65 72 41 67 65 6e 74 44 61 74 61 22 2c 5b 5d 2c 7b 22 62 72 6f 77 73 65 72 41 72 63 68 69 74 65 63 74 75 72 65 22 3a 22 36 34 22 2c 22 62 72 6f 77 73 65 72 46 75 6c 6c 56 65 72 73 69 6f 6e 22 3a 22 31 31 37 2e 30 2e 30 2e 30 22 2c 22 62 72 6f 77 73 65 72 4d 69 6e 6f 72 56 65 72 73 69 6f 6e 22 3a 30 2c 22 62 72 6f 77 73 65 72 4e 61 6d 65 22 3a 22 43 68 72 6f 6d 65 22 2c 22 62 72 6f 77 73 65 72 56 65 72 73 69 6f 6e 22 3a 31 31 37 2c 22 64 65 76 69 63 65 4e 61 6d 65 22 3a 22 55 6e 6b 6e 6f 77 6e 22 2c 22 65 6e 67 69 6e 65 4e 61 6d 65 22 3a 22 42 6c 69 6e 6b 22 2c 22 65 6e 67 69 6e Data Ascii: ":"jazoest","version":2,"should_randomize":false},2111],["UserAgentData",[],{"browserArchitecture":"64","browserFullVersion":"117.0.0.0","browserMinorVersion":0,"browserName":"Chrome","browserVersion":117,"deviceName":"Unknown","userName":"Blink","engin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.6	59140	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:16 UTC	927	OUT	POST /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 2033 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-FB-LSD: AVrj9UP_w8I sec-ch-ua-platform-version: "10.0.0" X-ASBD-ID: 129477 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/Codashop.IDofficial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:16 UTC	2033	OUT	Data Raw: 72 6f 75 74 65 5f 75 72 6c 73 5b 30 5d 3d 25 32 46 43 6f 64 61 73 68 6f 70 2e 49 44 6f 66 66 69 63 69 61 6c 25 32 46 70 68 6f 74 6f 73 26 72 6f 75 74 65 5f 75 72 6c 73 5b 31 5d 3d 25 32 46 70 68 6f 74 6f 25 32 46 25 33 46 66 62 69 64 25 33 44 38 32 34 32 36 34 30 30 32 34 30 32 35 30 36 25 32 36 73 65 74 25 33 44 65 63 6e 66 2e 31 30 30 30 34 34 35 36 37 34 30 33 36 39 30 26 72 6f 75 74 65 5f 75 72 6c 73 5b 32 5d 3d 25 32 46 70 68 6f 74 6f 25 32 46 25 33 46 66 62 69 64 25 33 44 38 31 32 36 33 39 38 30 36 38 39 38 32 35 39 25 32 36 73 65 74 25 33 44 65 63 6e 66 2e 31 30 30 30 34 34 35 36 37 34 30 33 36 39 30 26 72 6f 75 74 65 5f 75 72 6c 73 5b 33 5d 3d 25 32 46 70 68 6f 74 6f 25 32 46 25 33 46 66 62 69 64 25 33 44 39 39 36 35 37 36 31 37 38 35 30 34 36 32 Data Ascii: route_urls[0]=%2FCodashop.IDofficial%2Fphotos&route_urls[1]=%2Fphoto%2F%3Ffbid%3D824264002402506%26set%3Decnf.100044567403690&route_urls[2]=%2Fphoto%2F%3Ffbid%3D812639806898259%26set%3Decnf.100044567403690&route_urls[3]=%2Fphoto%2F%3Ffbid%3D99657617850462
2024-05-25 23:00:17 UTC	942	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-25 23:00:17 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-25 23:00:17 UTC	2025	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-25 23:00:17 UTC	389	IN	Data Raw: 31 61 33 35 63 0d 0a 66 6f 72 20 28 3b 3b 29 3b 7b 22 70 61 79 6c 6f 61 64 22 3a 7b 22 70 61 79 6c 6f 61 64 73 22 3a 7b 22 2f 43 6f 64 61 73 68 6f 70 2e 49 44 6f 66 66 69 63 69 61 6c 2f 70 68 6f 74 6f 73 22 3a 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 7b 22 74 79 70 65 22 3a 22 72 6f 75 74 65 5f 64 65 66 69 6e 69 74 69 6f 6e 22 2c 22 65 78 70 6f 72 74 73 22 3a 7b 22 61 63 74 6f 72 49 44 22 3a 22 30 22 2c 22 72 6f 6f 74 56 69 65 77 22 3a 7b 22 61 6c 6c 52 65 73 6f 75 72 63 65 73 22 3a 5b 7b 22 5f 5f 6a 73 72 22 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 43 6f 6c 6c 65 63 74 69 6f 6e 52 6f 6f 74 2e 72 65 61 63 74 22 7d 2c 7b 22 5f 5f 6a 73 72 22 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 43 6f 6c 6c 65 63 74 69 6f 6e 52 6f 75 74 Data Ascii: 1a35cfor (;;);{"payload":{"payloads":{"/Codashop.IDofficial/photos":{"error":false,"result":{"type":"route_definition","exports":{"actorID":"0","rootView":{"allResources":[{"__jsr":"ProfileCometCollectionRoot.react"},{"__jsr":"ProfileCometCollectionRout
2024-05-25 23:00:17 UTC	1500	IN	Data Raw: 65 6e 22 3a 6e 75 6c 6c 2c 22 72 61 77 53 65 63 74 69 6f 6e 54 6f 6b 65 6e 22 3a 22 31 30 30 30 34 34 35 36 37 34 30 33 36 39 30 3a 32 33 30 35 32 37 32 37 33 32 22 2c 22 73 65 63 74 69 6f 6e 54 6f 6b 65 6e 22 3a 22 59 58 42 77 58 33 4e 6c 59 33 52 70 62 32 34 36 4d 54 41 77 4d 44 51 30 4e 54 59 33 4e 44 41 7a 4e 6a 6b 77 4f 6a 49 7a 4d 44 55 79 4e 7a 49 33 4d 7a 49 3d 22 2c 22 75 73 65 72 49 44 22 3a 22 31 30 30 30 34 34 35 36 37 34 30 33 36 39 30 22 2c 22 75 73 65 72 56 61 6e 69 74 79 22 3a 22 43 6f 64 61 73 68 6f 70 2e 49 44 6f 66 66 69 63 69 61 6c 22 2c 22 76 69 65 77 65 72 49 44 22 3a 6e 75 6c 6c 2c 22 65 6c 69 67 69 62 6c 65 46 6f 72 50 72 6f 66 69 6c 65 50 6c 75 73 45 6e 74 69 74 79 4d 65 6e 75 22 3a 66 61 6c 73 65 7d 2c 22 65 6e 74 72 79 50 6f 69 Data Ascii: en":null,"rawSectionToken":"100044567403690:2305272732","sectionToken":"YXBwX3NlY3Rpb246MTAwMDQ0NTY3NDAzNjkwOjIzMDUyNzI3MzI=","userID":"100044567403690","userVanity":"Codashop.IDofficial","viewerID":null,"eligibleForProfilePlusEntityMenu":false},"entryPoi
2024-05-25 23:00:17 UTC	1500	IN	Data Raw: 66 66 69 63 69 61 6c 22 2c 22 73 6b 22 3a 6e 75 6c 6c 2c 22 76 69 65 77 61 73 22 3a 6e 75 6c 6c 2c 22 6d 75 6c 74 69 5f 70 65 72 6d 61 6c 69 6e 6b 73 22 3a 6e 75 6c 6c 2c 22 73 68 6f 75 6c 64 5f 6f 70 65 6e 5f 63 6f 6d 70 6f 73 65 72 22 3a 66 61 6c 73 65 2c 22 65 76 65 6e 74 5f 69 64 22 3a 6e 75 6c 6c 2c 22 73 6f 72 74 69 6e 67 5f 73 65 74 74 69 6e 67 22 3a 6e 75 6c 6c 2c 22 74 61 67 22 3a 6e 75 6c 6c 2c 22 72 65 66 65 72 72 61 6c 5f 73 6f 75 72 63 65 22 3a 6e 75 6c 6c 7d 2c 22 72 6f 75 74 65 50 61 72 61 6d 73 22 3a 7b 22 76 61 6e 69 74 79 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 74 72 75 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 74 72 75 65 2c 22 63 6f 65 72 63 69 Data Ascii: fficial","sk":null,"viewas":null,"multi_permalinks":null,"should_open_composer":false,"event_id":null,"sorting_setting":null,"tag":null,"referral_source":null},"routeParams":{"vanity":{"legacyNames":[],"default":null,"path":true,"significant":true,"coerci
2024-05-25 23:00:17 UTC	1500	IN	Data Raw: 65 74 2e 6d 65 64 69 61 76 69 65 77 65 72 2e 70 68 6f 74 6f 22 2c 22 6d 65 74 61 22 3a 7b 22 74 69 74 6c 65 22 3a 6e 75 6c 6c 2c 22 61 63 63 65 73 73 6f 72 79 22 3a 6e 75 6c 6c 2c 22 66 61 76 69 63 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 70 72 65 66 65 74 63 68 61 62 6c 65 22 3a 74 72 75 65 2c 22 65 6e 74 69 74 79 4b 65 79 43 6f 6e 66 69 67 22 3a 7b 22 65 6e 74 69 74 79 5f 74 79 70 65 22 3a 7b 22 73 6f 75 72 63 65 22 3a 22 63 6f 6e 73 74 61 6e 74 22 2c 22 76 61 6c 75 65 22 3a 22 70 68 6f 74 6f 73 22 7d 2c 22 65 6e 74 69 74 79 5f 69 64 22 3a 7b 22 73 6f 75 72 63 65 22 3a 22 70 61 72 61 6d 22 2c 22 76 61 6c 75 65 22 3a 22 66 62 69 64 22 7d 2c 22 70 61 72 65 6e 74 5f 63 6f 6e 74 61 69 6e 65 72 5f 69 64 22 3a 7b 22 73 6f 75 72 63 65 22 3a 22 70 61 72 61 6d 22 2c 22 Data Ascii: et.mediaviewer.photo","meta":{"title":null,"accessory":null,"favicon":null},"prefetchable":true,"entityKeyConfig":{"entity_type":{"source":"constant","value":"photos"},"entity_id":{"source":"param","value":"fbid"},"parent_container_id":{"source":"param","
2024-05-25 23:00:17 UTC	1500	IN	Data Raw: 65 22 3a 22 53 54 52 49 4e 47 22 7d 2c 22 76 72 6e 61 76 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 66 61 6c 73 65 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 66 61 6c 73 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 42 4f 4f 4c 22 7d 7d 2c 22 72 6f 75 74 65 50 61 74 68 22 3a 22 2f 70 68 6f 74 6f 2f 22 7d 5d 7d 7d 2c 22 2f 70 68 6f 74 6f 2f 3f 66 62 69 64 3d 38 31 32 36 33 39 38 30 36 38 39 38 32 35 39 26 73 65 74 3d 65 63 6e 66 2e 31 30 30 30 34 34 35 36 37 34 30 33 36 39 30 22 3a 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 7b 22 74 79 70 65 22 3a 22 72 6f 75 74 65 5f 64 65 66 69 6e 69 74 69 6f 6e 22 2c 22 65 78 70 6f 72 74 73 22 Data Ascii: e":"STRING"},"vrnav":{"legacyNames":[],"default":false,"path":false,"significant":false,"coercibleType":"BOOL"}},"routePath":"/photo/"}]}},"/photo/?fbid=812639806898259&set=ecnf.100044567403690":{"error":false,"result":{"type":"route_definition","exports"
2024-05-25 23:00:17 UTC	1500	IN	Data Raw: 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 74 72 75 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 46 42 49 44 22 7d 2c 22 73 65 74 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 66 61 6c 73 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 53 54 52 49 4e 47 22 7d 2c 22 69 64 6f 72 76 61 6e 69 74 79 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 Data Ascii: :{"legacyNames":[],"default":null,"path":false,"significant":true,"coercibleType":"FBID"},"set":{"legacyNames":[],"default":null,"path":false,"significant":false,"coercibleType":"STRING"},"idorvanity":{"legacyNames":[],"default":null,"path":false,"signifi
2024-05-25 23:00:17 UTC	1500	IN	Data Raw: 6e 74 22 7d 7d 2c 22 75 73 65 43 6c 6f 73 65 42 75 74 74 6f 6e 22 3a 74 72 75 65 2c 22 75 73 65 50 72 65 76 69 6f 75 73 41 63 74 6f 72 22 3a 74 72 75 65 2c 22 6c 61 62 65 6c 22 3a 22 50 68 6f 74 6f 20 76 69 65 77 65 72 22 2c 22 68 69 64 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 54 6f 61 73 74 73 22 3a 74 72 75 65 2c 22 72 6f 75 74 65 54 79 70 65 22 3a 22 6d 65 64 69 61 5f 76 69 65 77 65 72 22 2c 22 75 70 73 65 6c 6c 43 6f 6e 66 69 67 22 3a 7b 22 73 75 72 66 61 63 65 22 3a 22 70 68 6f 74 6f 73 22 2c 22 74 79 70 65 22 3a 22 6c 6f 67 69 6e 5f 75 70 73 65 6c 6c 22 2c 22 69 73 44 69 73 6d 69 73 73 69 62 6c 65 22 3a 74 72 75 65 2c 22 64 65 62 75 67 53 65 72 76 65 72 55 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a Data Ascii: nt"}},"useCloseButton":true,"usePreviousActor":true,"label":"Photo viewer","hideNotificationToasts":true,"routeType":"media_viewer","upsellConfig":{"surface":"photos","type":"login_upsell","isDismissible":true,"debugServerUri":"https://www.facebook.com/aj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.6	59141	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:16 UTC	375	OUT	GET /rsrc.php/v3/ya/r/XEU-8Pf8ztq.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:17 UTC	1913	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: 85qM1UvmDLu6G7tr5+kOPg== Expires: Sat, 24 May 2025 18:28:32 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: TezCwSGv1xlxXXBQXgLMfa43Z/9SOx9giBgWqw7FKF+J83jtx8OhkelApskHBawF1GTVUYI9b1iztejD9gR+6w== Date: Sat, 25 May 2024 23:00:17 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 8274
2024-05-25 23:00:17 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-05-25 23:00:17 UTC	8273	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 bd 00 00 00 cc 08 03 00 00 00 11 77 52 66 00 00 03 00 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 02 02 02 03 03 03 00 00 00 47 70 4c 08 08 08 20 27 32 00 00 00 09 09 09 00 00 00 00 00 00 02 02 02 02 02 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 01 01 00 00 00 00 00 00 00 00 00 01 01 01 02 02 02 01 01 01 01 01 01 ff ff ff 04 04 04 00 00 00 00 00 00 00 00 00 01 01 01 01 01 01 03 03 03 01 01 01 01 01 01 00 00 00 ff ff ff 00 00 00 01 01 01 01 01 01 01 01 01 04 04 04 00 00 00 01 01 01 02 02 02 00 00 00 00 00 00 01 01 01 04 04 04 00 00 00 01 01 01 01 01 01 00 00 00 08 08 08 02 02 02 ff ff ff 01 01 01 00 00 00 00 00 00 00 00 00 02 02 02 00 00 00 01 01 01 03 03 03 04 04 04 01 01 01 00 00 Data Ascii: PNGIHDRwRfPLTEGpL '2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.6	59142	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:17 UTC	383	OUT	GET /images/cookies/cookie_info_card_image_4.png HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:17 UTC	1102	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * content-md5: mXjbZp5JUjt62zr4DVYbGw== Edge-Control: cache-maxage=86400s Expires: Sun, 26 May 2024 08:30:43 GMT Cache-Control: public,max-age=86400 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} document-policy: force-load-at-top
2024-05-25 23:00:17 UTC	1472	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-25 23:00:17 UTC	15099	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 38 00 00 00 c8 08 02 00 00 00 f3 f8 6a 90 00 00 42 82 49 44 41 54 78 da ec da 6d 8c 15 57 19 07 f0 e7 39 67 66 ee dd 17 58 5e 96 2d 0b a5 b4 24 ac 40 16 dd a2 69 02 24 62 2d 94 36 68 d5 04 6b 5a 45 1a 52 ec 52 30 6a 6c 6c 40 3f 68 fa c1 52 db 44 5b 4a d3 68 5a 30 a8 a1 26 a8 15 83 c1 58 2d 05 9a 8a 22 11 57 02 4d 85 96 96 2c 2e ec 2e 2c f7 75 66 ce e3 9c 73 f7 5e 0a dd bb dd 6b 57 53 e4 ff 63 73 79 e6 cc 39 33 f7 92 fd 73 e6 ce 19 ee eb eb 25 00 78 7f 53 04 00 08 2a 00 20 a8 00 08 2a 00 20 a8 00 80 a0 02 20 a8 00 80 a0 02 00 82 0a 80 a0 02 00 82 0a 80 a0 02 00 82 0a 00 08 2a 00 82 0a 00 08 2a 00 20 a8 00 08 2a 00 20 a8 00 57 3d 04 15 00 41 05 00 04 15 00 41 05 00 04 15 00 10 54 00 04 15 00 10 54 00 Data Ascii: PNGIHDR8jBIDATxmW9gfX^-$@i$b-6hkZERR0jll@?hRD[JhZ0&X-"WM,..,ufs^kWScsy93s%xS* * ** * W=AATT
2024-05-25 23:00:17 UTC	1984	IN	Data Raw: 6f de f1 c8 cf e7 05 03 7e 00 ba 9e e7 d8 45 19 47 36 2b d6 ac 7f e5 ed 77 4f 9c 75 24 0a 01 51 51 a8 bb 18 a6 c6 2d 60 55 00 f3 c2 bf 59 f8 3c 67 bb c3 0f 9f fe 35 96 db 88 28 af 11 4e e0 e9 25 5c d7 c2 52 42 aa 74 d4 58 4e 64 a8 57 a3 ec d0 d1 b4 b7 83 97 51 49 40 13 30 34 bb c2 1a c1 30 c8 d6 b0 52 f0 19 1c 0e 38 42 2d 0b d9 c5 e9 50 5d 4e 95 65 76 8b 53 00 2a 0d 3a 1a ee 23 52 ca 87 1f 7e f8 bc f3 ce b3 c7 ae fd 9f c6 e3 9a 5f aa 7f ad 65 f4 44 e5 21 67 2f 5f fb c2 55 df 79 e8 fe db 2e 23 82 b4 ac 3e 8e 45 15 f3 ef 16 be 50 20 a1 32 51 71 31 69 97 42 5d 1d ce de 69 01 78 fd ef ff 58 ba 72 35 c0 f0 f0 97 8f 89 1c 74 a2 b4 12 52 4a e4 61 d9 7a 6e 6a e7 a4 44 73 12 7c 02 dc 93 cb 01 77 ab 73 56 07 66 f7 64 f1 94 ec a5 c5 9d 71 e7 d6 b4 10 8d a3 2b 8e 96 Data Ascii: o~EG6+wOu$QQ-`UY<g5(N%\RBtXNdWQI@040R8B-P]NevS*:#R~_eD!g/_Uy.#>EP 2Qq1iB]ixXr5tRJaznjDs\|wsVfdq+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.6	59143	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:17 UTC	383	OUT	GET /images/cookies/cookie_info_card_image_1.png HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:17 UTC	1144	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * content-md5: Nmnpiyrpc00QHVchkNDJDQ== Edge-Control: cache-maxage=86400s Expires: Sun, 26 May 2024 04:11:54 GMT Cache-Control: public,max-age=86400 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} document-policy: force-load-at-top
2024-05-25 23:00:17 UTC	1498	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-25 23:00:17 UTC	15031	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 38 00 00 00 c8 08 02 00 00 00 f3 f8 6a 90 00 00 56 6b 49 44 41 54 78 da ec dd 7b 8c 5c d5 7d 07 f0 ef ef dc 7b e7 b1 af d9 f5 ae d7 f6 da c6 b1 8d 8d b1 43 6d 5c 07 08 b0 14 42 88 45 d3 56 6a 92 3f da 8a 12 a5 69 a5 28 0d ad aa 22 42 5a da 4a 50 21 a8 44 14 d2 d0 44 8d d4 b4 0d 8f 04 39 16 af 2a 2d 14 91 04 e2 42 c1 d8 c5 36 c6 ef e7 be 77 67 1f f3 be f7 9e f3 ed dc c1 bb ec b2 33 bb 5e 6c 13 1b 9f 8f 46 77 e7 71 cf 9d bb ab f9 ee ef cc 3d e7 ce a0 60 59 d6 79 4f 86 87 d3 b0 2c eb 3c 37 6c 59 d6 79 cf 06 d5 b2 6c 50 2d cb b2 41 b5 2c 1b 54 cb b2 6c 50 2d cb b2 41 b5 2c 1b 54 cb b2 6c 50 2d cb b2 41 b5 2c 1b 54 cb b2 6c 50 2d cb 06 d5 b2 2c 1b 54 cb b2 6c 50 2d cb 06 d5 b2 2c 1b 54 cb b2 6c 50 2d cb Data Ascii: PNGIHDR8jVkIDATx{\}{Cm\BEVj?i("BZJP!DD9*-B6wg3^lFwq=`YyO,<7lYylP-A,TlP-A,TlP-A,TlP-,TlP-,TlP-
2024-05-25 23:00:17 UTC	7149	IN	Data Raw: 10 20 de 75 c5 35 db 37 3d 59 37 6d b1 d7 b3 ad ad 79 27 10 48 72 7d 4f 77 f7 8c b9 67 1f d8 f1 22 98 f6 ab db 96 65 8a 14 ea fa e6 1b 32 aa 49 46 50 52 5a f9 e1 1b 3f b9 eb a5 fb da 0e 6d 1d 7e 6e 77 db a1 97 fe eb 67 77 de b6 f4 a5 c7 ef 79 f6 b1 07 1e 79 f0 ee ff 7b d7 d7 fe f9 1f 6e be f1 aa 45 2f 3c f5 e8 70 b1 d7 be 97 7a ca 42 40 dc 85 00 a4 60 5c 20 f0 bd 3b bf 5d ef be a8 9d 81 48 f5 94 43 eb ef 70 e3 47 04 20 41 42 13 8e 2b 49 57 7c 1f 7a 84 5b 6a 7d f5 07 66 69 65 c4 94 06 ff e5 ef 7e f7 3b 90 f1 b8 67 10 84 30 b5 6b db f6 81 03 07 2b 4a a5 2c 16 af ae 9d 84 14 db 37 ae 35 72 52 c9 5d 27 71 ef 3f 7e e0 81 ef 7c f0 f9 df 7e 6d c3 a3 77 a8 e4 61 23 53 ab 6d fe e2 f3 7b db f6 b4 b4 25 2e be ec 6a f4 be f6 ca 13 f7 95 94 57 bf b6 e1 e9 ea 9a 49 86 Data Ascii: u57=Y7my'Hr}Owg"e2IFPRZ?m~nwgwyy{nE/<pzB@`\ ;]HCpG AB+IW\|z[j}fie~;g0k+J,75rR]'q?~\|~mwa#Sm{%.jWI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.6	59145	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:17 UTC	383	OUT	GET /images/cookies/cookie_info_card_image_3.png HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:17 UTC	1144	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * content-md5: tjvKzjcx509sRQAttysmgw== Edge-Control: cache-maxage=86400s Expires: Sun, 26 May 2024 02:11:00 GMT Cache-Control: public,max-age=86400 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} document-policy: force-load-at-top
2024-05-25 23:00:17 UTC	1498	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-25 23:00:17 UTC	15031	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 38 00 00 00 c8 08 02 00 00 00 f3 f8 6a 90 00 00 8a a9 49 44 41 54 78 da ec 5d 09 7c 5c 55 b9 3f e7 2e b3 65 26 99 ec 49 93 b4 4d ba b7 29 da 5a a0 50 4a 81 2a 28 96 4d 10 2d 4f 2b 2a 8a 82 3e 7c 88 f0 d0 1f 0a 6e a0 e0 0f 9e 0f 7c 80 22 2a e5 09 42 d9 2b 50 69 05 9e 20 82 d0 b2 b4 d0 96 74 a1 4b 92 2e 49 9a cc 3e f7 de f3 fe f7 7c 2f c3 24 33 93 a4 cd 9b 4c 48 ee d7 e1 72 ee 72 ce bd 39 f7 fc cf b7 9c ef fb 2e ef ec ec 60 47 4a 6b d7 ae 3b f3 cc 33 2c 4b a8 aa 1a 8d c6 d6 bf 97 28 2a 0a 74 76 1d 62 9c 0f 5a d7 08 b7 d6 15 f3 da da 5a da 15 c2 52 b8 4d b4 bb 7d fb b6 cd 2d ef d5 cc 5c 92 ba de 34 0d ce 15 86 5f 6e 32 12 dd 1d 3b de 38 f5 94 c5 b4 bb 7a f5 ea f2 8a 72 ce 78 69 30 98 34 92 1e b7 5b d3 Data Ascii: PNGIHDR8jIDATx]\|\U?.e&IM)ZPJ(M-O+>\|n\|"B+Pi tK.I>\|/$3LHrr9.`GJk;3,K(tvbZZRM}-\4_n2;8zrxi04[
2024-05-25 23:00:17 UTC	16384	IN	Data Raw: 0c ee 92 29 93 97 43 77 6d 6a 98 2f 1b 28 ed 79 20 9d 0e 4b 4f 8f 4a 67 25 fd 9a 2b 5b 20 1f de 0b 20 8e 65 63 ca 33 cc 5a f4 14 a8 bd 0a 29 ae 2a a2 35 4d 98 29 87 a3 8e 51 b3 7c ee a9 47 ce 3f 63 39 50 3a 9e c6 4b 7c d0 97 bf fc e5 7d bb 9e b3 d2 31 bc 0c c5 b4 6c cb 84 99 ec 3d 7b a9 65 8c 04 f4 92 5f 8d 64 10 4b b9 c7 a0 c0 9f e4 55 08 39 e3 43 03 3d d9 f1 a5 74 ba 48 4a d7 5b db e4 81 b2 2e 73 a0 2b 84 74 56 65 d7 49 a0 01 49 bd 48 59 5e 3a 53 2c 69 e7 96 2d 03 98 a0 22 e1 d2 57 0f f0 07 b7 ca 26 ff c9 34 9f 5b d1 c9 b8 53 a5 75 58 f0 4b 7a 8d 4a 1c 11 e1 10 8d c5 a6 4e 3e ad e3 d0 53 22 6d b9 0c af 48 c4 18 54 15 ae cd 9b 36 f5 2b 1b ae dd fc f4 73 d7 5f fa 81 5a b8 43 38 cf 7c b0 a1 7b 6c ae 4f 6a 5a 2a 54 03 16 d3 8c f5 f5 bf b1 67 ef 76 4a 20 53 Data Ascii: )Cwmj/(y KOJg%+[ ec3Z)5M)Q\|G?c9P:K\|}1l={e_dKU9C=tHJ[.s+tVeIIHY^:S,i-"W&4[SuXKzJN>S"mHT6+s_ZC8\|{lOjZTgvJ S
2024-05-25 23:00:17 UTC	4139	IN	Data Raw: fa 70 a6 fe 61 0a 6f 13 17 2c ae 8f 64 7f b7 f9 e8 24 6a 39 9a f0 50 47 8e 64 5e 5f 6e fc 46 86 86 3a 7b 97 cf fc d7 c7 13 a8 80 b0 ba 54 b6 52 cc 46 8a 30 43 62 81 56 a6 10 d6 5f 14 46 8a ea a9 3d 66 ac 24 7c 0e ab e7 e9 ee 03 27 e5 63 ac eb f0 14 d7 4a 44 c0 8d 9d 2c 1c f6 18 7f cb 83 15 02 c6 92 c5 7e 54 7e 5f 81 ba 6b d7 2e ed 74 d5 f4 09 17 0a 41 18 58 72 a6 02 40 02 e3 0a e5 82 f0 24 01 a8 50 c5 f4 64 b4 2c 42 43 07 92 aa 21 43 79 f3 99 1b 6f f9 f9 4f ee 5c b2 62 2d 5a 9e ae 3a f6 a4 b7 bf 76 43 47 4a 35 23 c8 16 bc e9 ab b7 fc db 1d 77 2e 5e be 16 f4 ea 67 9d 71 e2 ab 2f de d0 bc a1 30 3a 36 fe e9 cf fe fd a3 8f 3d fe 82 f5 c7 f7 f5 2d 78 d1 8b 5e b4 7e fd 7a d5 9c 54 7c f3 f5 9b 6f b9 f3 bb 77 9e 70 fc b1 f3 e7 75 9f 78 e2 89 1b 36 6c a8 a5 51 ab Data Ascii: pao,d$j9PGd^_nF:{TRF0CbV_F=f$\|'cJD,~T~_k.tAXr@$Pd,BC!CyoO\b-Z:vCGJ5#w.^gq/0:6=-x^~zT\|owpux6lQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.6	59144	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:17 UTC	383	OUT	GET /images/cookies/cookie_info_card_image_2.png HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:17 UTC	1144	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * content-md5: wRZKtl/35CrbFpdeWSFrBg== Edge-Control: cache-maxage=86400s Expires: Sun, 26 May 2024 19:58:34 GMT Cache-Control: public,max-age=86400 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} document-policy: force-load-at-top
2024-05-25 23:00:17 UTC	1472	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-25 23:00:17 UTC	15057	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 38 00 00 00 c8 08 02 00 00 00 f3 f8 6a 90 00 00 53 01 49 44 41 54 78 5e ec d3 b1 0e 82 30 18 80 41 df ff d5 94 a8 89 0e 3a 00 4a 9a 90 26 80 06 45 70 b2 3a b8 b8 18 27 87 bb fc 69 3b b4 dd be 59 f7 f7 80 ef 42 05 84 0a 08 15 84 0a 08 15 10 2a 08 15 10 2a 08 15 10 2a 20 54 10 2a 20 54 40 a8 20 54 40 a8 20 54 40 a8 80 50 41 a8 80 50 01 a1 82 50 01 a1 d2 be a6 79 af 69 8b 4d 17 e2 b9 ac fb 7d b8 6c ab 61 7d bc ad 0e 63 56 8e 8b 62 9a a7 c9 ef cf 79 9d b3 62 5a 96 53 ba b0 a9 86 5d b8 e6 75 9f 1e c6 e6 d4 a6 df 3e e7 57 08 95 07 fb e6 ee db 34 14 85 71 fe 47 06 46 06 d8 79 48 1d 51 59 60 ed 82 18 50 77 d8 2a c1 5c db 84 20 8a 50 5b a0 3c 7c ed 98 e6 81 e3 3a ce bd 4e 1c 97 b8 f5 75 c4 f1 a3 56 26 c4 d2 Data Ascii: PNGIHDR8jSIDATx^0A:J&Ep:'i;YB*** T* T@ T@ T@PAPPyiM}la}cVbybZS]u>W4qGFyHQY`Pw*\ P[<\|:NuV&
2024-05-25 23:00:17 UTC	6249	IN	Data Raw: 06 4a 05 aa 6a 51 b0 71 ed c2 e7 dd 6f cf 2d 22 9c 78 bc 5c cf 7c 7a f7 fd ab cd 57 ff db fc ff d9 3b d3 a8 28 ae 6d 8f bf ef ef ad 77 d7 ba 51 a3 79 51 31 4c 0e 80 20 20 02 dd 8c a2 a2 cc 34 b3 22 08 02 32 ca d0 4c 0d 22 73 d3 4c 32 d3 0c dd 0c 82 38 a2 a2 12 8d 38 10 a7 c4 90 a0 89 91 68 1c 12 35 2a 08 8e a0 c0 39 e5 db a7 cb 28 37 6a d3 14 89 c9 87 da ab 56 ad a2 2c f8 f6 f3 bf cf 7f ef b3 cf e0 f0 cb 11 fc 1f ee 0b c6 18 ee 7d 3d e7 8f 0b 03 4e e5 05 d1 eb cc b1 9d 46 30 96 e1 44 4e e0 99 82 60 fa fd d8 ce 41 98 72 f6 ba e3 17 cc db 8a 30 47 f8 23 bf 83 14 4e fb 46 e2 08 a7 00 6b 83 04 57 73 c8 99 4f 8a 82 c0 58 5a aa a3 0a 1b 6b ce e6 07 a7 7b 2f 83 0f 26 32 c1 10 ae f0 3d 69 a1 c2 e0 b5 e6 66 2b e7 e8 3a ce d4 5f ad ed 98 a2 bf a6 c2 d0 4f ba c8 bb Data Ascii: JjQqo-"x\\|zW;(mwQyQ1L 4"2L"sL288h5*9(7jV,}=NF0DN`Ar0G#NFkWsOXZk{/&2=if+:_O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.6	59146	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:17 UTC	610	OUT	GET /rsrc.php/v3iAu44/ys/l/en_GB/hKDvLPKrsa6.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:17 UTC	1982	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: 92LRyweLxjiil1Cno50i8A== Expires: Fri, 23 May 2025 14:34:31 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: NYwnE8jRjgZSQet2nrlc+nTKhmFtwjbK4FPbxJlz7Z3kkW0y1CeyniRY44mI6cRBbDIsPyUlOcpnnAySB1G5NA== Date: Sat, 25 May 2024 23:00:17 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3412, tp=-1, tpl=-1, uplat=2, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 162900
2024-05-25 23:00:17 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-05-25 23:00:17 UTC	15823	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 43 6f 6e 74 65 78 74 75 61 6c 4d 65 73 73 61 67 65 2e 72 65 61 63 74 22 2c 5b 22 66 62 74 22 2c 22 69 78 22 2c 22 43 6f 6d 65 74 52 6f 77 2e 72 65 61 63 74 22 2c 22 43 6f 6d 65 74 52 6f 77 49 74 65 6d 2e 72 65 61 63 74 22 2c 22 46 44 53 49 63 6f 6e 2e 72 65 61 63 74 22 2c 22 46 44 53 54 65 78 74 50 61 69 72 69 6e 67 2e 72 65 61 63 74 22 2c 22 46 62 74 52 65 73 75 6c 74 42 61 73 65 22 2c 22 66 62 69 63 6f 6e 22 2c 22 72 65 61 63 74 22 2c 22 73 74 79 6c 65 78 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6a 2c 6b 2c 6c 3d 6b 7c 7c 64 28 22 72 65 61 63 74 22 29 2c 6d 3d 7b 72 Data Ascii: /FB_PKG_DELIM/__d("CometContextualMessage.react",["fbt","ix","CometRow.react","CometRowItem.react","FDSIcon.react","FDSTextPairing.react","FbtResultBase","fbicon","react","stylex"],(function(a,b,c,d,e,f,g,h,i){"use strict";var j,k,l=k\|\|d("react"),m={r
2024-05-25 23:00:17 UTC	16384	IN	Data Raw: 72 61 6e 73 66 6f 72 6d 0a 20 2a 20 40 67 65 6e 65 72 61 74 65 64 0a 20 2a 20 40 6e 6f 66 6c 6f 77 0a 20 2a 20 40 6e 6f 6c 69 6e 74 0a 20 2a 20 40 6f 6e 63 61 6c 6c 20 6c 65 78 69 63 61 6c 5f 77 65 62 5f 74 65 78 74 5f 65 64 69 74 6f 72 0a 20 2a 20 40 70 72 65 73 65 72 76 65 2d 69 6e 76 61 72 69 61 6e 74 2d 6d 65 73 73 61 67 65 73 0a 20 2a 20 40 70 72 65 73 65 72 76 65 2d 77 68 69 74 65 73 70 61 63 65 0a 20 2a 20 40 70 72 65 76 65 6e 74 4d 75 6e 67 65 0a 20 2a 2f 5f 5f 64 28 22 4c 65 78 69 63 61 6c 2e 70 72 6f 64 22 2c 5b 22 50 72 6f 6d 69 73 65 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 20 24 6d 6f 64 75 6c 65 5f 4c 65 78 69 63 61 6c 5f 70 72 6f 64 28 67 6c 6f 62 61 6c 2c 72 65 71 75 69 72 65 2c 72 65 71 75 69 72 65 44 79 6e 61 6d 69 63 2c 72 65 71 75 69 72 65 Data Ascii: ransform * @generated * @noflow * @nolint * @oncall lexical_web_text_editor * @preserve-invariant-messages * @preserve-whitespace * @preventMunge */__d("Lexical.prod",["Promise"],(function $module_Lexical_prod(global,require,requireDynamic,require
2024-05-25 23:00:17 UTC	16384	IN	Data Raw: 2c 67 64 29 3b 76 61 72 20 67 3d 4e 3b 4e 3d 22 22 3b 72 64 28 61 2c 64 2c 30 2c 66 2c 65 2c 6e 75 6c 6c 29 3b 73 64 28 64 2c 65 29 3b 4e 3d 67 3b 7d 61 3d 64 2e 5f 5f 66 6f 72 6d 61 74 3b 30 21 3d 3d 61 26 26 70 64 28 65 2c 61 29 3b 64 2e 69 73 49 6e 6c 69 6e 65 28 29 7c 7c 74 64 28 6e 75 6c 6c 2c 64 2c 65 29 3b 77 63 28 64 29 26 26 28 4d 2b 3d 22 5c 6e 5c 6e 22 2c 4f 63 2b 3d 22 5c 6e 5c 6e 22 29 3b 7d 65 6c 73 65 20 66 3d 64 2e 67 65 74 54 65 78 74 43 6f 6e 74 65 6e 74 28 29 2c 78 28 64 29 3f 28 67 3d 64 2e 64 65 63 6f 72 61 74 65 28 4f 2c 50 63 29 2c 6e 75 6c 6c 21 3d 3d 67 26 26 0a 75 64 28 61 2c 67 29 2c 65 2e 63 6f 6e 74 65 6e 74 45 64 69 74 61 62 6c 65 3d 22 66 61 6c 73 65 22 29 3a 42 28 64 29 26 26 28 64 2e 69 73 44 69 72 65 63 74 69 6f 6e 6c 65 Data Ascii: ,gd);var g=N;N="";rd(a,d,0,f,e,null);sd(d,e);N=g;}a=d.__format;0!==a&&pd(e,a);d.isInline()\|\|td(null,d,e);wc(d)&&(M+="\n\n",Oc+="\n\n");}else f=d.getTextContent(),x(d)?(g=d.decorate(O,Pc),null!==g&&ud(a,g),e.contentEditable="false"):B(d)&&(d.isDirectionle
2024-05-25 23:00:17 UTC	16384	IN	Data Raw: 3b 6e 75 6c 6c 21 3d 3d 62 3b 29 7b 61 2e 70 75 73 68 28 62 29 2c 62 3d 62 2e 67 65 74 4e 65 78 74 53 69 62 6c 69 6e 67 28 29 3b 7d 72 65 74 75 72 6e 20 61 3b 7d 3b 5f 70 72 6f 74 6f 2e 67 65 74 43 6f 6d 6d 6f 6e 41 6e 63 65 73 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 20 67 65 74 43 6f 6d 6d 6f 6e 41 6e 63 65 73 74 6f 72 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 67 65 74 50 61 72 65 6e 74 73 28 29 3b 76 61 72 20 63 3d 61 2e 67 65 74 50 61 72 65 6e 74 73 28 29 3b 45 28 74 68 69 73 29 26 26 62 2e 75 6e 73 68 69 66 74 28 74 68 69 73 29 3b 45 28 61 29 26 26 63 2e 75 6e 73 68 69 66 74 28 61 29 3b 61 3d 62 2e 6c 65 6e 67 74 68 3b 76 61 72 20 64 3d 63 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3d 3d 3d 61 7c 7c 30 3d 3d 3d 64 7c 7c 62 5b 61 2d 31 5d 21 3d 3d 63 5b 64 2d Data Ascii: ;null!==b;){a.push(b),b=b.getNextSibling();}return a;};_proto.getCommonAncestor=function getCommonAncestor(a){var b=this.getParents();var c=a.getParents();E(this)&&b.unshift(this);E(a)&&c.unshift(a);a=b.length;var d=c.length;if(0===a\|\|0===d\|\|b[a-1]!==c[d-
2024-05-25 23:00:17 UTC	1500	IN	Data Raw: 6c 6c 3d 3d 3d 61 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 7d 61 3d 63 3b 69 66 28 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 26 26 28 63 3d 61 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 2c 22 22 3d 3d 3d 63 26 26 21 48 63 28 61 29 7c 7c 22 22 21 3d 3d 63 26 26 21 63 2e 73 74 61 72 74 73 57 69 74 68 28 22 69 6e 6c 69 6e 65 22 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 66 6f 72 28 3b 6e 75 6c 6c 21 3d 3d 28 63 3d 62 3f 61 2e 66 69 72 73 74 43 68 69 6c 64 3a 61 2e 6c 61 73 74 43 68 69 6c 64 29 3b 29 7b 61 3d 63 3b 7d 69 66 28 33 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 20 61 3b 69 66 28 22 42 52 22 3d 3d 3d 61 2e 6e 6f 64 65 4e 61 6d 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 7d 7d 76 61 72 20 4f 65 3d 7b 63 6f 64 65 3a 22 63 6f 64 65 22 2c Data Ascii: ll===a)return null;}a=c;if(1===a.nodeType&&(c=a.style.display,""===c&&!Hc(a)\|\|""!==c&&!c.startsWith("inline")))return null;for(;null!==(c=b?a.firstChild:a.lastChild);){a=c;}if(3===a.nodeType)return a;if("BR"===a.nodeName)return null;}}var Oe={code:"code",
2024-05-25 23:00:17 UTC	14884	IN	Data Raw: 74 61 69 6c 3d 32 3b 72 65 74 75 72 6e 20 5f 74 68 69 73 32 3b 7d 50 65 2e 69 6d 70 6f 72 74 44 4f 4d 3d 66 75 6e 63 74 69 6f 6e 20 69 6d 70 6f 72 74 44 4f 4d 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 7d 3b 50 65 2e 69 6d 70 6f 72 74 4a 53 4f 4e 3d 66 75 6e 63 74 69 6f 6e 20 69 6d 70 6f 72 74 4a 53 4f 4e 28 61 29 7b 76 61 72 20 62 3d 4d 65 28 29 3b 62 2e 73 65 74 46 6f 72 6d 61 74 28 61 2e 66 6f 72 6d 61 74 29 3b 62 2e 73 65 74 53 74 79 6c 65 28 61 2e 73 74 79 6c 65 29 3b 72 65 74 75 72 6e 20 62 3b 7d 3b 76 61 72 20 5f 70 72 6f 74 6f 34 3d 50 65 2e 70 72 6f 74 6f 74 79 70 65 3b 5f 70 72 6f 74 6f 34 2e 65 78 70 6f 72 74 4a 53 4f 4e 3d 66 75 6e 63 74 69 6f 6e 20 65 78 70 6f 72 74 4a 53 4f 4e 28 29 7b 72 65 74 75 72 6e 20 62 61 62 65 6c 48 65 6c 70 65 72 Data Ascii: tail=2;return _this2;}Pe.importDOM=function importDOM(){return null;};Pe.importJSON=function importJSON(a){var b=Me();b.setFormat(a.format);b.setStyle(a.style);return b;};var _proto4=Pe.prototype;_proto4.exportJSON=function exportJSON(){return babelHelper
2024-05-25 23:00:17 UTC	16384	IN	Data Raw: 62 2e 67 65 74 50 61 72 65 6e 74 4f 72 54 68 72 6f 77 28 29 2e 73 65 6c 65 63 74 45 6e 64 28 29 29 29 3b 69 66 28 64 2e 61 6e 63 68 6f 72 4e 6f 64 65 21 3d 3d 67 2e 73 74 61 72 74 43 6f 6e 74 61 69 6e 65 72 7c 7c 64 2e 61 6e 63 68 6f 72 4f 66 66 73 65 74 21 3d 3d 67 2e 73 74 61 72 74 4f 66 66 73 65 74 29 62 3d 74 68 69 73 2e 66 6f 63 75 73 2c 66 3d 74 68 69 73 2e 61 6e 63 68 6f 72 2c 64 3d 66 2e 6b 65 79 2c 67 3d 66 2e 6f 66 66 73 65 74 2c 65 3d 66 2e 74 79 70 65 2c 55 65 28 66 2c 62 2e 6b 65 79 2c 62 2e 6f 66 66 73 65 74 2c 62 2e 74 79 70 65 29 2c 55 65 28 62 2c 64 2c 67 2c 65 29 2c 74 68 69 73 2e 5f 63 61 63 68 65 64 4e 6f 64 65 73 3d 6e 75 6c 6c 3b 7d 7d 7d 3b 5f 70 72 6f 74 6f 37 2e 66 6f 72 77 61 72 64 44 65 6c 65 74 69 6f 6e 3d 66 75 6e 63 74 69 6f Data Ascii: b.getParentOrThrow().selectEnd()));if(d.anchorNode!==g.startContainer\|\|d.anchorOffset!==g.startOffset)b=this.focus,f=this.anchor,d=f.key,g=f.offset,e=f.type,Ue(f,b.key,b.offset,b.type),Ue(b,d,g,e),this._cachedNodes=null;}}};_proto7.forwardDeletion=functio
2024-05-25 23:00:17 UTC	16384	IN	Data Raw: 6e 33 3e 33 3f 5f 6c 65 6e 33 2d 33 3a 30 29 2c 5f 6b 65 79 33 3d 33 3b 5f 6b 65 79 33 3c 5f 6c 65 6e 33 3b 5f 6b 65 79 33 2b 2b 29 7b 64 5b 5f 6b 65 79 33 2d 33 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 5f 6b 65 79 33 5d 3b 7d 66 6f 72 28 61 3d 30 3b 61 3c 66 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 66 5b 61 5d 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 64 29 3b 7d 7d 66 69 6e 61 6c 6c 79 7b 62 2e 5f 75 70 64 61 74 69 6e 67 3d 65 3b 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 52 28 61 2c 62 2c 63 29 7b 69 66 28 21 31 3d 3d 3d 61 2e 5f 75 70 64 61 74 69 6e 67 7c 7c 54 21 3d 3d 61 29 7b 76 61 72 20 66 3d 21 31 3b 61 2e 75 70 64 61 74 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 3d 52 28 61 2c 62 2c 63 29 3b 7d 29 3b 72 65 74 75 72 6e 20 66 3b 7d 76 61 72 20 64 3d 6d 63 28 61 29 3b Data Ascii: n3>3?_len3-3:0),_key3=3;_key3<_len3;_key3++){d[_key3-3]=arguments[_key3];}for(a=0;a<f.length;a++){f[a].apply(null,d);}}finally{b._updating=e;}}function R(a,b,c){if(!1===a._updating\|\|T!==a){var f=!1;a.update(function(){f=R(a,b,c);});return f;}var d=mc(a);
2024-05-25 23:00:17 UTC	14884	IN	Data Raw: 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 62 5b 22 64 65 6c 65 74 65 22 5d 28 61 29 3b 7d 3b 7d 3b 5f 70 72 6f 74 6f 31 34 2e 72 65 67 69 73 74 65 72 52 6f 6f 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 20 72 65 67 69 73 74 65 72 52 6f 6f 74 4c 69 73 74 65 6e 65 72 28 61 29 7b 76 61 72 20 5f 74 68 69 73 37 3d 74 68 69 73 3b 76 61 72 20 62 3d 74 68 69 73 2e 5f 6c 69 73 74 65 6e 65 72 73 2e 72 6f 6f 74 3b 61 28 74 68 69 73 2e 5f 72 6f 6f 74 45 6c 65 6d 65 6e 74 2c 6e 75 6c 6c 29 3b 62 2e 61 64 64 28 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 6e 75 6c 6c 2c 5f 74 68 69 73 37 2e 5f 72 6f 6f 74 45 6c 65 6d 65 6e 74 29 3b 62 5b 22 64 65 6c 65 74 65 22 5d 28 61 29 3b 7d 3b 7d 3b 5f 70 72 6f 74 6f 31 34 2e 72 65 67 Data Ascii: return function(){b["delete"](a);};};_proto14.registerRootListener=function registerRootListener(a){var _this7=this;var b=this._listeners.root;a(this._rootElement,null);b.add(a);return function(){a(null,_this7._rootElement);b["delete"](a);};};_proto14.reg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.6	59154	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:17 UTC	833	OUT	GET /v/t39.30808-6/425750146_2620197854795727_7515684929751906463_n.png?stp=dst-png_p180x540&_nc_cat=100&ccb=1-7&_nc_sid=5f2048&_nc_ohc=PwxMdBd-3KAQ7kNvgF1bFWB&_nc_ht=scontent-hou1-1.xx&oh=00_AYDRWljGH39R5bVy0sx5Tcm36_hplzbp-3jh0j8Y9pxKJA&oe=66583270 HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:17 UTC	737	IN	HTTP/1.1 200 OK Last-Modified: Tue, 06 Feb 2024 06:44:42 GMT X-Needle-Checksum: 1541310550 thrift_fmhk: GBBCAFUjxtdeOndck9qhKRtrFfDr4Z0EvFUAHCYEAAAA Content-Type: image/png content-digest: adler32=1801545046 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:17 GMT X-FB-Edge-Debug: ITeJ_GGy4ofB2uaOM5IBioOfUjhQ2cXQfCx16RqgTUphpGqqxZMPffCDoVuhYNnlvpvzohpmBA_pKDNr65Wwwv2onofJoJT-JDxtSlgeMNs X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=37, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=78, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 75737
2024-05-25 23:00:17 UTC	1500	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 c0 00 00 02 1c 08 02 00 00 00 b6 3f 50 2c 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 20 00 49 44 41 54 78 9c ec dd 69 74 5d d7 75 27 f8 ff 3e e7 4e 6f 04 08 80 a3 38 cf 83 28 52 a2 25 59 b2 25 4b b2 44 5a 93 25 0f 49 39 dd 95 a4 3a dd d5 49 55 92 ea a4 2a ab 53 5d 9d 4a a5 d3 95 5a 49 2a 53 57 a7 3a e9 55 a9 c4 59 9d 4e cb 11 9d 78 92 25 cb d6 60 49 96 28 c9 d6 40 89 24 28 12 9c 07 90 04 40 3c bc f1 0e e7 ec fe f0 40 5a 03 25 62 78 c0 1b b0 7f 0b 9f b4 28 e0 01 eb be fb fe f7 9c 7d f6 a6 c1 f0 0b 10 a2 35 31 b1 97 b8 27 7a e6 fd cd 0e 15 6b 10 c0 33 f9 d3 34 53 d1 2b df 73 70 ec 9e 7e 55 f3 a0 66 f2 87 89 ce 63 89 83 d8 1f 98 df b5 7b 9b 2a 7b d0 16 4c 4d 7b 31 04 18 e2 54 3c f2 df fc 28 5e 76 91 Data Ascii: PNGIHDR?P,sRGB, IDATxit]u'>No8(R%Y%KDZ%I9:IUS]JZISW:UYNx%`I(@$(@<@Z%bx(}51'zk34S+sp~Ufc{*{LM{1T<(^v
2024-05-25 23:00:17 UTC	2503	IN	Data Raw: fb cc 5a 8a 15 dc 16 58 1a 21 46 a4 cd 92 c2 d8 03 fb 50 7f 34 95 d2 67 21 44 9b 62 b0 6b 9c a1 5c ea e5 e5 d0 a6 d9 af 66 12 24 40 8b 99 c4 00 08 ca da 20 f1 4e 75 67 f6 ac 0a de 5c 02 06 5c 0b cc 7c cd 46 1d 01 91 b2 f3 aa 85 87 df 4a 7a cb 14 c9 66 b7 98 0c 4b 36 48 b2 cf af 76 8f f7 c0 4b 9a bf 34 52 3f 38 e8 27 85 07 f6 9b ae 2a 45 72 70 50 08 d1 d6 08 8a 33 2f ad d4 17 b2 48 b7 46 81 dc c4 48 80 16 33 c6 12 94 65 d7 a8 b2 9f 7f 7a 5d ea b5 65 aa 10 20 95 e0 72 b0 9e 05 8a 11 6b db 5d bd f8 c5 37 a3 95 c3 4a 0e 5a 89 49 61 62 cf 78 67 f3 d9 17 57 41 d9 96 e8 77 c8 00 30 f6 c0 be 70 d5 05 15 7a 92 9e 85 10 6d 8c c1 ae f1 0f f7 a5 5f 5f 8a a0 35 0a e4 26 4c 02 b4 98 19 96 d8 8f 29 76 d2 af 2f cd 3c bf 46 9f cf 42 d9 d9 7e b8 24 20 51 ec 27 a3 0f bf 15 Data Ascii: ZX!FP4g!Dbk\f$@ Nug\\\|FJzfK6HvK4R?8'*ErpP3/HFH3ez]e rk]7JZIabxgWAw0pzm__5&L)v/<FB~$ Q'
2024-05-25 23:00:17 UTC	4064	IN	Data Raw: 07 c5 80 f5 ac af 8e 58 e2 20 19 bb 7f 7f b2 a0 48 91 96 4b 57 08 d1 41 88 3d 93 7e 79 a5 bf 6f 11 52 cd a8 8e 6b 12 09 d0 73 06 8f 6f b2 64 f6 ac c8 3d be 05 8a a1 da b6 72 83 00 26 d9 07 17 13 c5 04 d7 ea 42 da 3b 39 0f 9e 99 ed a9 58 04 58 55 dc d9 1f 6e 38 47 a1 2b 4d eb 84 10 9d 83 89 bd c4 3b d2 9b 7d 6e cd dc 59 7b ae 93 08 32 87 b0 97 64 f6 ac cc 3d be 19 d4 e6 e9 39 51 9c ab 45 cb 46 eb 5b 47 cd 7e 41 a2 0d b0 36 fa 62 ca 39 d1 0d 77 76 7b 3f 13 a3 e6 54 6e 39 56 d9 71 92 42 47 d2 b3 10 a2 73 d4 e7 52 95 fc fc 77 36 52 cd 81 ea f0 be 75 ef 23 01 7a 0e 60 80 c1 9e cd ec 59 91 7b 7c 13 c8 b6 71 7a ae 8b 55 e5 13 47 a3 15 c3 14 4b 2b 03 31 11 8c 44 f9 47 7b 9b 50 fa 1c 3a e1 a6 73 a5 3b 0f 91 95 9b ad 10 a2 c3 b0 55 36 f7 ec 3a e7 78 cf 5c 5b 7e 96 Data Ascii: X HKWA=~yoRksod=r&B;9XXUn8G+M;}nY{2d=9QEF[G~A6b9wv{?Tn9VqBGsRw6Ru#z`Y{\|qzUGK+1DG{P:s;U6:x\[~
2024-05-25 23:00:17 UTC	4064	IN	Data Raw: 17 e5 96 2b 26 c4 92 7b b6 0b 46 c1 ed a0 19 84 e3 7d 36 1c 9b 8b 6a d7 9f 2a 7d f2 88 cd 85 14 6a 4a a6 7b fa 45 02 f4 f4 30 41 5b 55 f2 b3 4f af 0b 0e ce a7 42 1a 8e 81 66 68 0b 87 01 c9 cd 97 c8 d8 14 71 75 c4 da e8 62 d0 f5 f5 ad fa 7c 0e a9 18 a6 a1 17 0a 31 22 27 5e 3d 5c ba 6d 60 e2 e7 ac 85 98 55 4c f5 89 dc f9 27 d7 a7 5f 5c 0d c7 c0 99 52 df 46 02 62 a7 f8 d9 b7 6a 5b ce 28 99 10 24 ae 8a 01 d7 b8 17 72 7a cc 87 b6 cd 7e 35 0d f2 ae 3e 1b e1 e6 73 e5 db 07 c2 15 c3 2a 76 28 74 a6 56 b3 f1 3e 12 a0 a7 8b 15 67 5e 58 9d da 98 14 a5 b1 00 00 20 00 49 44 41 54 b3 12 a9 08 e9 e8 c7 bb 6c 9d 7d 82 75 b2 64 6c 8a b8 2a 06 1c 76 4f 77 e9 c1 3c d2 21 4c 43 1b 1c d6 2b 88 b2 e1 d8 ae 7e 9b 4a 24 40 8b 56 c5 ec 25 99 17 d6 a4 5f 58 83 20 c6 d4 3e 4a 88 11 Data Ascii: +&{F}6j}jJ{E0A[UOBfhqub\|1"'^=\m`UL'_\RFbj[($rz~5>sv(tV>g^X IDATl}udl*vOw<!LC+~J$@V%_X >J
2024-05-25 23:00:17 UTC	4064	IN	Data Raw: 44 d1 96 18 e3 95 1b 8f dc e0 d4 d3 73 4b ad 3d 5f aa 0e ad de 74 a2 7c eb d1 f6 ea 6e 2e 01 fa 5d 18 d6 8b d2 af ae 08 f6 2e 69 b9 b6 88 4d 41 0c 43 20 14 3f b3 bf 78 f7 41 62 90 51 6d 74 71 8b d6 c5 c4 da fa 07 e7 53 3c a5 f6 e1 c4 a8 ba b5 1d a7 c6 76 1d 1c 2f 09 6d de 9b d5 1a f8 01 bd f3 76 f4 47 ff e2 02 bd ab 3c 55 69 54 8c dd b0 ce ff e2 2f e7 cb 96 5f 7b ba 5a 18 33 9e 4b da 21 ed 10 33 62 cb 55 cb 25 63 6b 96 13 66 45 d0 1a 5a c1 62 fc 2b 62 ae 59 0e 99 6b 96 8b c6 d6 bf ca d6 56 2d d7 bf 12 cb c3 a3 66 f0 58 62 19 cb 56 bb 9f ff e5 ae 12 1b c7 23 ed d0 07 63 34 33 d2 5a fd c5 6f 8f 3c f7 78 39 9f 52 52 0c dd 60 57 a8 dc 68 c4 45 a9 18 91 53 be e5 98 4d 47 f2 91 24 26 cd 12 1c eb 0c d7 2b 37 5a 32 3d 2b 46 a4 e3 b5 43 c5 9d fd f5 bc d1 fa a5 cf Data Ascii: DsK=_t\|n.].iMAC ?xAbQmtqS<v/mvG<UiT/_{Z3K!3bU%ckfEZb+bYkV-fXbV#c43Zo<x9RR`WhESMG$&+7Z2=+FC
2024-05-25 23:00:17 UTC	1500	IN	Data Raw: be b0 c6 7f 6b d1 e4 0e 0e 56 dc ca cd c7 8b f7 f4 b7 e3 7e 88 76 50 aa d8 4f 3d 90 f9 b5 ff a3 0f 9a ac 7a 4f 85 06 33 1c 85 42 c9 fc df ff 66 78 24 34 b7 dc 95 de f6 c9 54 88 29 06 68 0b e4 f3 fa b6 cf a6 0d 50 1c b5 df fc 8b b1 80 d4 87 35 a4 23 02 69 84 06 3f ff 6f 7a ee ff c7 f9 72 ed 0a 45 26 e2 c7 98 00 b0 1f 7b c7 7a e6 fd cd c7 d2 cf ac 05 31 dc 59 1a b3 55 bd ee 74 d2 53 a6 a4 45 4f cd 8a 96 41 50 4c 35 37 fb 83 d5 54 75 a1 5b af 17 02 31 8c 62 d7 8e 3d b8 2f 59 dc b1 dd bd e6 46 80 66 62 2f 71 2e 64 ff 7f f6 de 3b cc ae ab ba fb ff ae bd 4f bb 75 66 34 45 d5 ea 65 24 59 72 91 2c 5c 65 5b 72 c1 f0 d2 6c 1c 30 10 d3 92 90 84 1f 90 10 08 bc 01 12 02 2f fc 12 48 08 81 c0 4b 08 35 98 e6 60 4a 1c dc 2b b6 c1 bd 1b 75 59 bd 8d 46 53 6e 3b 6d ef f5 fe Data Ascii: kV~vPO=zO3Bfx$4T)hP5#i?ozrE&{z1YUtSEOAPL57Tu[1b=/YFfb/q.d;Ouf4Ee$Yr,\e[rl0/HK5`J+uYFSn;m
2024-05-25 23:00:17 UTC	1500	IN	Data Raw: e7 24 f5 59 aa 96 42 f1 d2 2d c0 28 2e 50 1a 26 3c 52 8b 92 95 bf f5 4c d1 ed b1 13 81 00 c1 10 0c e2 ea ce f9 04 80 11 8b c2 d5 1b cb 67 ed 19 2f 0d 53 4e 15 21 50 ac a8 ab af cb bd ff 33 8d b1 86 90 c7 ec 2f 98 61 0b fc f4 5f 3b f7 ed 8e df f6 d1 3a e2 21 05 a1 89 10 80 67 2e b2 cf be 20 b5 ef 70 74 db 77 bb 53 10 aa 4f fa 33 81 24 7c ad df f9 91 fa 37 be ab ae e4 0f 49 9a 4f 2e 34 41 80 5d e5 6e 6a 69 f8 c1 79 a9 47 e7 42 ea d1 0e 3c 1f 85 09 96 2a af da 0d 2d cc a4 6c 18 04 a9 45 d1 cd 3d b0 b0 16 17 2b 12 27 a5 55 7b ca 17 be 3c be 5c fc 4f 87 09 3a b9 6a 62 a9 64 b7 97 bf 7d 29 26 7a 16 ce 90 21 80 8b eb b6 a8 7a 9f 94 9c a8 bf bc 61 2c e0 ec fd 8b ed 5d 0d 20 50 47 1a 25 07 65 07 be 85 48 42 11 34 f5 e8 e9 1e 49 cd 00 23 b4 8a 57 6e 2a 9f b7 53 f8 Data Ascii: $YB-(.P&<RLg/SN!P3/a_;:!g. ptwSO3$\|7IO.4A]njiyGB<-lE=+'U{<\O:jbd})&z!za,] PG%eHB4I#WnS
2024-05-25 23:00:17 UTC	1500	IN	Data Raw: 51 18 55 79 42 92 a0 92 56 e7 5e 9e 72 d3 e2 7f be 5d c8 92 48 6a 07 89 00 89 62 ac df ff e9 a6 d7 bf a7 ae 50 39 a1 eb e1 e4 45 13 5b 1a 82 53 cf cf c8 de bb 58 1e ce c0 55 00 d7 44 48 45 30 62 a1 a7 94 0b 57 6e 64 62 e2 c9 18 b7 33 0c 15 4d ec c4 f6 ee 29 99 c7 e7 c0 d6 3d 09 49 63 08 31 02 4b d7 f9 85 2b 37 56 ce da 0b 2d 26 89 df 73 7f 4c 14 01 cd 80 d0 a2 ec e4 6f 5b 46 15 1b b6 1a fb 17 b5 31 27 29 52 59 dc 56 3e 67 2f 45 c6 b7 ce 60 18 6b 08 24 50 09 f4 7b 3e d9 d0 b6 3b fe c9 37 3b 33 42 30 43 6b 58 a0 8d cf fb 56 3f b6 19 ac e1 42 9c 7f 75 ea 9e 1f 17 f6 1d 8a 52 bd e5 83 44 28 c5 fa 2d 7f 54 f7 ee ff 5d ef 87 9a c4 24 8d 03 1d 23 49 b6 f7 22 51 f0 72 f7 2e 49 3d 35 0b 40 6f c6 73 6d 9c 1a 4d 00 15 ae dc 14 37 15 c9 77 20 4c ac c7 d0 3f 82 a1 44 Data Ascii: QUyBV^r]HjbP9E[SXUDHE0bWndb3M)=Ic1K+7V-&sLo[F1')RYV>g/E`k$P{>;7;3B0CkXV?BuRD(-T]$#I"Qr.I=5@osmM7w L?D
2024-05-25 23:00:17 UTC	3606	IN	Data Raw: 30 0e 20 81 28 40 3a 27 3e f9 dd 96 c5 4b dc a2 d6 96 45 49 ff 14 07 b4 73 5b 54 38 a2 42 e6 a5 67 7a 7f 77 d3 d4 4c 56 44 c1 a4 57 cf 9a d8 8d d3 cf cd 4c 3f b4 00 6e 4d e6 3d f7 a4 3e 4b 3d a5 dc 7d f5 86 9e 72 94 9a 1c a6 a1 56 60 62 4b 59 87 72 e9 27 66 8f aa 47 38 31 62 01 c1 a5 cb b7 76 de f0 4c 3c b5 40 be d5 13 90 36 0c c8 38 9c 86 93 a6 83 15 27 7f cf 12 2a 3b 10 a3 9e 62 5f cb 30 c1 d6 95 b3 f7 42 d7 94 03 aa c1 60 18 08 21 11 04 3c 6f 91 f3 a9 ef b4 34 36 59 41 ac 93 5c 0e 06 1c 89 88 79 ea 0c f9 99 1f b4 34 4f b3 fc 60 d2 a7 3e 6b 62 47 d9 7b eb f2 b7 2f ab 69 5b 00 06 04 17 ae d8 1c 37 96 4c f2 86 61 08 30 88 33 bf 9d 2b da 32 b0 46 c5 00 20 51 c9 be 1d 37 17 3b ff e0 99 c2 fa cd 6c 29 0a 8d f5 ed 50 19 87 02 1a d0 96 ca dd b7 c8 7a b9 11 6e Data Ascii: 0 (@:'>KEIs[T8BgzwLVDWL?nM=>K=}rV`bKYr'fG81bvL<@68'*;b_0B`!<o46YA\y4O`>kbG{/i[7La03+2F Q7;l)Pzn
2024-05-25 23:00:17 UTC	4064	IN	Data Raw: ff f8 c7 6d 5f f8 68 5b 54 e0 3a 4b 32 a0 fa dd 21 0b 42 9d 25 f7 ef 8e 3f f6 07 fb 7f f6 b5 ae 94 77 4c 4d 26 c5 7c 43 fc 28 05 66 64 a5 4c 4b f1 db 07 cb 1f ba 66 ff e6 67 03 cf 23 ee dd 9b 66 a4 53 74 db 0f 0b 9f 7a db 81 03 fb a2 3a 5b 12 0d 32 b0 06 db 3a 7c 30 fe db 1b 0f de f2 b5 ae 74 ef c0 84 84 5f d2 9f 7e eb a1 7b ef 28 e6 2c e1 49 52 31 b4 3a 85 a1 1e 3b c0 21 6c 33 f4 2d 59 c3 b6 50 e8 d4 1f 7a cd fe 9f fd 67 97 27 29 2b a5 56 d0 0a 7d f4 7d cf 31 c6 70 05 d5 db e2 f9 67 2a 1f b8 66 df 73 0f 57 52 9e 50 c9 de 34 d1 91 94 d6 ac 35 34 f3 d0 3f 4a b3 47 d6 14 99 fa fe f3 2f 7c f9 9e c7 b5 94 23 db b4 50 09 ce 07 85 75 9b cd 12 a9 61 70 98 d8 89 9d 9d 4d d9 7b 17 c3 56 c3 5f ad 24 18 81 5d 5e bd 2b 58 d0 4e 81 51 cf 63 c0 18 09 68 26 08 66 5b a5 Data Ascii: m_h[T:K2!B%?wLM&\|C(fdLKfg#fStz:[2:\|0t_~{(,IR1:;!l3-YPzg')+V}}1pg*fsWRP454?JG/\|#PuapM{V_$]^+XNQch&f[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.6	59153	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:17 UTC	838	OUT	GET /v/t39.30808-6/425750146_2620197854795727_7515684929751906463_n.png?stp=dst-png_fb50_s320x320&_nc_cat=100&ccb=1-7&_nc_sid=5f2048&_nc_ohc=PwxMdBd-3KAQ7kNvgF1bFWB&_nc_ht=scontent-hou1-1.xx&oh=00_AYD4FOtaPH_yCdXoiMwmmy7o9ZJ5BqsldvtGtjHLYpPk3A&oe=66583270 HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:17 UTC	737	IN	HTTP/1.1 200 OK Last-Modified: Tue, 06 Feb 2024 06:44:42 GMT X-Needle-Checksum: 1541310550 thrift_fmhk: GBBCAFUjxtdeOndck9qhKRtrFfDr4Z0EvFUAHCYEAAAA Content-Type: image/png content-digest: adler32=2229934517 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:17 GMT X-FB-Edge-Debug: jYW29YB55W5KxTcvfyBKOxlbtfLq_Q6HAU7Yc94p58FzJFE7LE-dj9Nu5W7Nv5y3Bdy5MSr_zOVUyR2XvbGZScYdGXRazwsCCxmBdjwoR1s X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3410, tp=-1, tpl=-1, uplat=61, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 16298
2024-05-25 23:00:17 UTC	763	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 40 00 00 00 b4 08 02 00 00 00 6a 86 62 46 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 20 00 49 44 41 54 78 9c ed bd db 96 ec a8 0e 2c 0a 35 e6 5f 9e ff 7f da 63 7f c2 4e 9d 07 83 08 49 21 c0 97 ac ac ea 55 1a dd 35 6d 8c b9 2a 08 21 30 59 ff cf ff fd ff 0a 8a 14 2f 52 4a a9 e3 91 b4 eb 7a 5c 1f 4f a5 b0 8b 5a 8f b7 a4 8e 74 04 d2 7c 95 4a d2 37 b7 35 2b 15 4a 85 e7 55 34 f0 28 a5 c0 b5 86 fb c0 fe e2 08 c7 bc 5b 71 20 32 64 04 45 93 c9 95 60 aa a2 21 15 a3 f9 14 6b 78 94 37 85 c4 f0 ea a3 98 40 5b 3b 0d a9 35 46 1b 71 a4 b7 61 d5 16 a8 98 5a a9 78 0b ef 56 92 b5 2d a1 ed e9 ea 0b 4f aa 92 d5 b6 ba 08 b6 91 0f 75 19 8a a7 5a 7d d4 46 4c 48 bb ed 7a 5e db 75 57 ef e3 f6 d5 02 ab c6 94 3a 5e 7c c1 a3 Data Ascii: PNGIHDR@jbFsRGB, IDATx,5_cNI!U5m*!0Y/RJz\OZt\|J75+JU4([q 2dE`!kx7@[;5FqaZxV-OuZ}FLHz^uW:^\|
2024-05-25 23:00:17 UTC	1500	IN	Data Raw: 30 de 66 09 6d a5 cb c7 b2 f4 e5 f9 ac 88 50 f9 54 2a 0c 79 97 75 9d d8 05 b5 14 29 f5 d4 a6 2b 57 2c 96 f0 76 09 3e 2a c4 42 c6 fb 5a 4a d0 55 89 71 e2 c0 3e 93 7f 1e eb e7 e6 c0 ec 43 fc 2c ff 4c 5f cf 48 f6 9e 71 d2 9a 61 ee 06 56 a5 5b 32 52 7c fd 36 8a 44 22 b1 01 64 03 b9 45 2b 28 b3 26 d8 29 87 4f 70 9e e4 21 17 e0 4d 12 ec 0c b4 f5 31 d6 f9 a2 88 8b 85 0d 2b 10 6e c3 d6 85 b9 a8 a8 43 1f 2b 9e 2f a0 f0 1c 03 9c 40 14 60 e9 13 0c bc c3 1d 93 c0 89 5d 3d 4e e4 d0 e2 57 f3 f6 0c cc 95 f4 c0 42 6e 11 ec 26 90 4e 48 4f 65 60 2f cf d1 87 0a dc c9 46 fc 7b 73 60 6b d8 79 62 16 f4 a7 88 f9 5b d7 36 33 9c 86 51 fd 80 45 de a8 53 64 11 5b 73 71 6f 5f 77 47 73 3c 24 da 7c d1 b2 4f 69 59 bf 4d d1 46 b1 25 5f 7f a4 d6 e4 df 7a be ac a9 5b d6 ed e0 4c 0c 66 93 Data Ascii: 0fmPTyu)+W,v>BZJUq>C,L_HqaV[2R\|6D"dE+(&)Op!M1+nC+/@`]=NWBn&NHOe`/F{s`kyb[63QESd[sqo_wGs<$\|OiYMF%_z[Lf
2024-05-25 23:00:17 UTC	1741	IN	Data Raw: 7b 95 92 f4 7a e7 46 13 9a 27 ea 9e 40 a3 79 33 7b 4e c5 a2 99 bb b2 a4 e2 5a 66 f2 91 95 34 4b b5 d3 51 d3 ab b8 d0 cf 6c 21 c2 c0 29 2b f6 34 08 50 13 06 b6 f5 9f 26 cb 02 99 e9 26 15 87 db 8e a7 b8 db 9e e5 c0 af f1 45 db 2d 52 fb 4e e5 60 39 4f ee 3d 50 8f 8b 94 9d 87 13 cb 6e b1 24 e5 a4 c4 bb 51 b0 bb b2 63 42 af 9d c1 6c 2b e5 84 8d 87 2f 36 93 fd a2 24 31 a5 9b ae 69 9c c7 7f 93 60 4c 68 6b 68 56 e7 64 c3 dd 33 93 04 bf 81 81 69 22 c5 29 69 b5 a1 52 5d 49 ec 90 8b 64 55 91 54 f7 84 d3 66 0c 49 b6 46 d0 81 40 6c a8 1f 20 f0 a1 65 60 83 5b f7 06 e8 16 99 03 bb f8 93 5a 31 99 4e 16 97 6f f9 bb fb 0c ec 5e 1b 9f c1 ef 95 0f 1b 2d 7b 09 8b 1b 9e 86 59 9e fe 14 b2 89 00 cd 36 2b 15 7c 4e 58 ab c9 ae f6 3c c4 dc fb 9a d4 a8 7c a4 1e a5 96 7f f5 b5 a1 fb Data Ascii: {zF'@y3{NZf4KQl!)+4P&&E-RN`9O=Pn$QcBl+/6$1i`LhkhVd3i")iR]IdUTfIF@l e`[Z1No^-{Y6+\|NX<\|
2024-05-25 23:00:17 UTC	4064	IN	Data Raw: 06 fa e7 a7 cd 61 90 e1 50 cf 68 19 ce bc 13 fc 95 b2 4d 00 b3 db d3 00 7e f9 91 73 03 c0 d8 03 d5 f1 0a 34 d7 0a e7 d9 57 22 5f a5 48 a9 5f 2e e7 cd d4 84 83 19 0b a8 a7 47 95 52 be 06 57 53 43 a1 d7 a3 c2 58 5c 47 3a 86 19 eb 31 af 31 39 8b bb ec 3f b8 d9 b4 ba ab ba e8 11 38 68 07 d0 3a f8 49 b2 d7 d2 f9 1b ae 60 b7 4c 68 4d de 28 54 2d fd c7 21 78 ce 7d 2e 6d 97 7e d1 ac 3e 0e c2 f0 8d d0 19 58 cf dd b4 68 84 65 24 0f 45 19 11 9c 83 1c fb 54 8c e5 5f 7b a5 c7 80 11 dd bd 66 77 d4 05 06 3e 09 60 f3 ca 08 8f 7b d1 5d 29 a9 9c 21 53 8a 0c 82 de 9e e6 ab ff 8d 16 35 fd 20 8c a0 2e 1c 41 73 5c 7d 85 b2 bd d2 7a b9 f6 b0 bb bb 6a d3 a6 9e 39 aa 6f e8 66 d0 44 5c 07 b6 2d 8c c8 97 ad 2e c0 b2 e5 b2 ea a8 7f 72 7e 1d d8 4c 36 e2 0f ae b5 57 80 dd 4c 4a d6 02 Data Ascii: aPhM~s4W"_H_.GRWSCX\G:119?8h:I`LhM(T-!x}.m~>Xhe$ET_{fw>`{])!S5 .As\}zj9ofD\-.r~L6WLJ
2024-05-25 23:00:17 UTC	4064	IN	Data Raw: 40 ea 33 5f d0 34 19 17 82 bf 73 e0 e2 0c 8a 96 6e ce b7 38 fd b7 ea d9 1c 18 41 64 53 53 9d 97 d1 61 03 0e b6 29 02 03 4f 01 0c e0 f4 50 81 8a b5 0e 66 e3 ca c8 14 51 ca c6 82 6c 34 e2 ae 2c af 5e 4c 38 b8 7d 8c 20 53 13 7a 6b 19 a9 57 19 4c 69 1c 28 88 03 2c cb d7 7c cc c0 36 72 54 7c 7c b4 8a 99 f1 42 b2 d6 54 0e df 33 08 f1 42 73 06 2e d0 29 07 36 8c bb bf 3d 72 d6 f5 4c b6 bd d0 a3 69 8b ee 67 1e 13 89 e6 82 90 e6 94 36 13 c9 af 06 b1 be 17 1a 4e 71 8f ea 4a 02 f1 36 6a 32 20 b6 20 27 a2 9e ab 09 1d de 02 e0 08 4b 39 05 f0 c6 08 11 21 00 00 1f 58 49 44 41 54 e8 18 03 60 82 ae 14 c0 30 ae ac 00 cc 2a bf 09 e0 a4 59 25 46 a8 26 ee 72 19 89 3e 9d bc 32 35 c8 e7 26 74 19 db 72 e7 cb 48 0b e7 f3 48 ce 15 c9 fc 34 19 68 76 34 a1 0f 27 1b 63 6c 00 30 32 f0 Data Ascii: @3_4sn8AdSSa)OPfQl4,^L8} SzkWLi(,\|6rT\|\|BT3Bs.)6=rLig6NqJ6j2 'K9!XIDAT`0*Y%F&r>25&trHH4hv4'cl02
2024-05-25 23:00:17 UTC	4064	IN	Data Raw: 28 cc 1c c0 76 97 bc 05 70 23 f0 a5 09 bd 9a 03 ff 34 13 ba c2 55 c2 c0 ed c8 e8 be 75 b4 6f e4 a8 61 f5 28 8c f1 cb 0b e7 e2 ca c2 89 81 1b cb 1f c4 45 7e c0 89 c5 de ff 51 00 8e 4f b3 27 19 80 4b 68 fd 73 6e ba 47 01 bd 04 b0 bb 41 8a eb 68 31 50 54 b6 4c ad e5 25 03 7f 97 13 eb 8a 09 dd 03 2c b5 d6 a4 03 43 b0 81 19 1a a6 e3 97 92 ed 32 92 0f 2c 6d 94 ec e9 89 4f b8 c4 90 50 17 1c 91 4c e9 52 a0 4e d5 78 2a 3f 06 c0 f9 d3 69 09 c8 c3 91 5c af 58 9d ce da 7c f5 e7 ad 96 26 e4 68 7e c3 34 60 83 ef c9 39 f0 25 00 b3 39 b0 7b 54 b1 1d 47 83 7e c8 84 8e ec 27 e6 56 a2 ab d9 5b ce 42 40 85 ba 4f 98 3f 99 98 ce eb 3d 7d 9a 36 c8 0d 06 a6 d1 76 38 28 45 ac bb 65 30 7b 90 81 c9 03 8b 8b 4d 75 bb 26 98 6a 0d b7 5e a6 00 56 ad b9 0e e0 08 bf df 65 42 8b 9b 91 0e Data Ascii: (vp#4Uuoa(E~QO'KhsnGAh1PTL%,C2,mOPLRNx*?i\X\|&h~4`9%9{TG~'V[B@O?=}6v8(Ee0{Mu&j^VeB
2024-05-25 23:00:17 UTC	102	IN	Data Raw: e4 85 fe 93 9f 23 93 d5 9f 14 a7 71 41 f5 13 bf 8b 7c c8 47 01 fc 07 da 3f f9 c1 b2 dc 59 6f e2 7d 88 9c 7f de 5e e8 3f f9 93 1f 26 71 eb d4 9a 9c bf 0b c9 7f 5e e8 3f f9 93 5f 2c 9f 60 60 7b ac ec 0f f8 bc ef 4f fe 64 26 27 d8 f4 db 4d e8 ff 1f 3d e5 53 b4 1e da 44 60 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: #qA\|G?Yo}^?&q^?_,``{Od&'M=SD`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.6	59149	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:17 UTC	611	OUT	GET /rsrc.php/v3/ye/r/4PEEs7qlhJk.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:18 UTC	1912	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: oeXzM60JLxaQX8HmDUBHKQ== Expires: Sun, 18 May 2025 04:12:17 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: zoM45/A/YZb6241bTcSp/bNRNIX0vjqDG2S3/3jUi/0MVD6ZZRunCWsdiRC8gyZbrMTYV4j5KMI7mJzZ0IUUow== Date: Sat, 25 May 2024 23:00:17 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 265
2024-05-25 23:00:18 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-05-25 23:00:18 UTC	264	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 04 03 00 00 00 7f a7 00 3e 00 00 00 30 50 4c 54 45 47 70 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 25 4c f4 39 00 00 00 0f 74 52 4e 53 00 05 dc 89 50 55 a5 d9 ec f3 02 4a 0b f2 4b ef 6c d1 a2 00 00 00 79 49 44 41 54 08 5b 63 60 60 60 0c ab 9c 9e 2a c0 00 02 4e ff 81 40 05 c4 5a fc 1f 0c ac 80 4c 7b 08 f3 33 03 03 0b 90 fa d1 0f 24 1c 18 84 80 64 cf 09 20 a1 c8 10 0f 63 7e 65 c8 87 29 f8 c6 50 0f 24 37 ec 07 12 df 19 e6 83 98 fc 40 e2 27 98 f9 01 c4 fc 0b 56 00 66 7e 07 6b 03 33 bf 81 0d 03 33 bf 82 ad f8 fd 1e 6c 05 cb 7f 28 70 40 76 0e b2 23 91 9c 0e f7 10 00 38 57 8c 83 67 ba 2d 29 00 00 00 Data Ascii: PNGIHDR>0PLTEGpL%L9tRNSPUJKlyIDAT[c```*N@ZL{3$d c~e)P$7@'Vf~k33l(p@v#8Wg-)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.6	59151	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:17 UTC	611	OUT	GET /rsrc.php/v3/y7/r/4Lea07Woawi.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:18 UTC	1871	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: 336hN8ZAy/yJiOv8vqPnTA== Expires: Sun, 18 May 2025 04:13:52 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: 7U3FgUjV5TF9YoiknHwDt8dHsaxqFnFYy6nkejO1l0G4aA9PCLMn+AK+V8AM5NTOXTFl0VpybJ/MrKMFZBfHIA== Date: Sat, 25 May 2024 23:00:17 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 467
2024-05-25 23:00:18 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-05-25 23:00:18 UTC	466	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 03 00 00 00 ba 57 ed 3f 00 00 00 ab 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 35 b4 44 00 00 00 38 74 52 4e 53 00 fa f5 f7 ef f4 f6 f8 f2 f3 f0 f9 98 03 64 48 a8 66 e0 1d f1 b4 55 fe 3b 21 71 25 0a 05 0b 75 Data Ascii: PNGIHDRW?PLTE45D8tRNSdHfU;!q%u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.6	59148	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:17 UTC	611	OUT	GET /rsrc.php/v3/yE/r/2PIcyqpptfD.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:18 UTC	1912	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: /dqIksz4VoF/4Q2MBkfmkg== Expires: Sat, 24 May 2025 13:48:58 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: +9TdOTLvo5puaaNJO1JTb3af2lzDNX1KkjnMtrJgKDnIMGbgr/zpYSGlx2U5Ypi4wYL4Yg31t0D+WH8KBpc+7Q== Date: Sat, 25 May 2024 23:00:17 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 432
2024-05-25 23:00:18 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-05-25 23:00:18 UTC	431	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 03 00 00 00 ba 57 ed 3f 00 00 00 90 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c3 21 88 23 00 00 00 2f 74 52 4e 53 00 0e 42 47 f0 9e c2 04 e4 25 e8 9d 28 da 0f 11 df 2d 95 f3 bc 69 fb 4e 67 e6 ed f1 1d fd 2e 05 06 18 d1 1b 15 bb ba 1c d2 e7 2f 2a f2 0c e5 8c d2 47 8f 00 00 00 a0 49 44 41 54 Data Ascii: PNGIHDRW?PLTE!#/tRNSBG%(-iNg./*GIDAT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.6	59147	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:17 UTC	611	OUT	GET /rsrc.php/v3/y3/r/BQdeC67wT9z.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:18 UTC	1912	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: rieOeATijCczzumIPaOM6Q== Expires: Sun, 25 May 2025 12:51:51 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: 3OT30OqLvnCAFc1RICAvWaU0QLYrIMrAVokCh9XhqKDFEwYE0eDK5SPvpy5A4HuXnaEv4qXNAC97SAsLP4ZXNQ== Date: Sat, 25 May 2024 23:00:17 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 376
2024-05-25 23:00:18 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-05-25 23:00:18 UTC	375	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 03 00 00 00 ba 57 ed 3f 00 00 00 6c 50 4c 54 45 47 70 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4e 09 e9 09 00 00 00 23 74 52 4e 53 00 8a a5 fe 51 f6 fa f9 55 05 f3 b6 dc fd 90 d1 1c 02 e0 da 2f 62 af 19 2a dd 76 e1 d9 a4 e3 e2 8b 3a 39 ff a1 d5 cd 00 00 00 98 49 44 41 54 78 5e 6d 91 47 8e c3 40 10 03 a9 38 33 4a b6 62 70 0c f5 ff 3f 2e 20 68 75 b0 bb 8e 04 88 26 d9 da 08 be 2c 92 a4 28 7d d0 41 5a b1 53 a5 bb d4 Data Ascii: PNGIHDRW?lPLTEGpLN#tRNSQU/b*v:9IDATx^mG@83Jbp?. hu&,(}AZS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.6	59152	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:17 UTC	927	OUT	POST /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 1635 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-FB-LSD: AVrj9UP_w8I sec-ch-ua-platform-version: "10.0.0" X-ASBD-ID: 129477 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/Codashop.IDofficial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:17 UTC	1635	OUT	Data Raw: 72 6f 75 74 65 5f 75 72 6c 73 5b 30 5d 3d 25 32 46 70 68 6f 74 6f 25 32 46 25 33 46 66 62 69 64 25 33 44 32 36 32 30 31 39 37 38 36 31 34 36 32 33 39 33 25 32 36 73 65 74 25 33 44 61 2e 31 32 31 35 38 33 32 30 31 38 35 36 35 36 35 38 26 72 6f 75 74 65 5f 75 72 6c 73 5b 31 5d 3d 25 32 46 43 6f 64 61 73 68 6f 70 2e 49 44 6f 66 66 69 63 69 61 6c 25 32 46 66 72 69 65 6e 64 73 5f 6c 69 6b 65 73 26 72 6f 75 74 65 5f 75 72 6c 73 5b 32 5d 3d 25 32 46 43 6f 64 61 73 68 6f 70 2e 49 44 6f 66 66 69 63 69 61 6c 25 32 46 66 6f 6c 6c 6f 77 65 72 73 26 72 6f 75 74 65 5f 75 72 6c 73 5b 33 5d 3d 25 32 46 43 6f 64 61 73 68 6f 70 2e 49 44 6f 66 66 69 63 69 61 6c 25 32 46 61 62 6f 75 74 26 72 6f 75 74 65 5f 75 72 6c 73 5b 34 5d 3d 25 32 46 43 6f 64 61 73 68 6f 70 2e 49 44 6f Data Ascii: route_urls[0]=%2Fphoto%2F%3Ffbid%3D2620197861462393%26set%3Da.1215832018565658&route_urls[1]=%2FCodashop.IDofficial%2Ffriends_likes&route_urls[2]=%2FCodashop.IDofficial%2Ffollowers&route_urls[3]=%2FCodashop.IDofficial%2Fabout&route_urls[4]=%2FCodashop.IDo
2024-05-25 23:00:18 UTC	942	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-25 23:00:18 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-25 23:00:18 UTC	2026	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-25 23:00:18 UTC	388	IN	Data Raw: 38 38 36 34 0d 0a 66 6f 72 20 28 3b 3b 29 3b 7b 22 70 61 79 6c 6f 61 64 22 3a 7b 22 70 61 79 6c 6f 61 64 73 22 3a 7b 22 2f 70 68 6f 74 6f 2f 3f 66 62 69 64 3d 32 36 32 30 31 39 37 38 36 31 34 36 32 33 39 33 26 73 65 74 3d 61 2e 31 32 31 35 38 33 32 30 31 38 35 36 35 36 35 38 22 3a 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 7b 22 74 79 70 65 22 3a 22 72 6f 75 74 65 5f 64 65 66 69 6e 69 74 69 6f 6e 22 2c 22 65 78 70 6f 72 74 73 22 3a 7b 22 61 63 74 6f 72 49 44 22 3a 22 30 22 2c 22 72 6f 6f 74 56 69 65 77 22 3a 7b 22 61 6c 6c 52 65 73 6f 75 72 63 65 73 22 3a 5b 7b 22 5f 5f 6a 73 72 22 3a 22 43 6f 6d 65 74 50 68 6f 74 6f 52 6f 6f 74 2e 72 65 61 63 74 22 7d 2c 7b 22 5f 5f 6a 73 72 22 3a 22 43 6f 6d 65 74 50 68 6f 74 6f 52 6f 6f 74 Data Ascii: 8864for (;;);{"payload":{"payloads":{"/photo/?fbid=2620197861462393&set=a.1215832018565658":{"error":false,"result":{"type":"route_definition","exports":{"actorID":"0","rootView":{"allResources":[{"__jsr":"CometPhotoRoot.react"},{"__jsr":"CometPhotoRoot
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 22 3a 22 63 6f 6d 65 74 2e 6d 65 64 69 61 76 69 65 77 65 72 2e 70 68 6f 74 6f 22 2c 22 6d 65 74 61 22 3a 7b 22 74 69 74 6c 65 22 3a 6e 75 6c 6c 2c 22 61 63 63 65 73 73 6f 72 79 22 3a 6e 75 6c 6c 2c 22 66 61 76 69 63 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 70 72 65 66 65 74 63 68 61 62 6c 65 22 3a 74 72 75 65 2c 22 65 6e 74 69 74 79 4b 65 79 43 6f 6e 66 69 67 22 3a 7b 22 65 6e 74 69 74 79 5f 74 79 70 65 22 3a 7b 22 73 6f 75 72 63 65 22 3a 22 63 6f 6e 73 74 61 6e 74 22 2c 22 76 61 6c 75 65 22 3a 22 70 68 6f 74 6f 73 22 7d 2c 22 65 6e 74 69 74 79 5f 69 64 22 3a 7b 22 73 6f 75 72 63 65 22 3a 22 70 61 72 61 6d 22 2c 22 76 61 6c 75 65 22 3a 22 66 62 69 64 22 7d 2c 22 70 61 72 65 6e 74 5f 63 6f 6e 74 61 69 6e 65 72 5f 69 64 22 3a 7b 22 73 6f 75 72 63 65 22 3a 22 70 61 Data Ascii: ":"comet.mediaviewer.photo","meta":{"title":null,"accessory":null,"favicon":null},"prefetchable":true,"entityKeyConfig":{"entity_type":{"source":"constant","value":"photos"},"entity_id":{"source":"param","value":"fbid"},"parent_container_id":{"source":"pa
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 6c 65 54 79 70 65 22 3a 22 53 54 52 49 4e 47 22 7d 2c 22 76 72 6e 61 76 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 66 61 6c 73 65 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 66 61 6c 73 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 42 4f 4f 4c 22 7d 7d 2c 22 72 6f 75 74 65 50 61 74 68 22 3a 22 2f 70 68 6f 74 6f 2f 22 7d 5d 7d 7d 2c 22 2f 43 6f 64 61 73 68 6f 70 2e 49 44 6f 66 66 69 63 69 61 6c 2f 66 72 69 65 6e 64 73 5f 6c 69 6b 65 73 22 3a 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 7b 22 74 79 70 65 22 3a 22 72 6f 75 74 65 5f 64 65 66 69 6e 69 74 69 6f 6e 22 2c 22 65 78 70 6f 72 74 73 22 3a 7b 22 61 63 74 6f 72 49 44 22 3a 22 30 Data Ascii: leType":"STRING"},"vrnav":{"legacyNames":[],"default":false,"path":false,"significant":false,"coercibleType":"BOOL"}},"routePath":"/photo/"}]}},"/Codashop.IDofficial/friends_likes":{"error":false,"result":{"type":"route_definition","exports":{"actorID":"0
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 52 70 62 32 34 36 4d 54 41 77 4d 44 51 30 4e 54 59 33 4e 44 41 7a 4e 6a 6b 77 4f 6a 49 7a 4e 54 59 7a 4d 54 67 7a 4e 44 6b 36 4d 6a 4d 35 22 2c 22 72 61 77 53 65 63 74 69 6f 6e 54 6f 6b 65 6e 22 3a 22 31 30 30 30 34 34 35 36 37 34 30 33 36 39 30 3a 32 33 35 36 33 31 38 33 34 39 22 2c 22 73 65 63 74 69 6f 6e 54 6f 6b 65 6e 22 3a 22 59 58 42 77 58 33 4e 6c 59 33 52 70 62 32 34 36 4d 54 41 77 4d 44 51 30 4e 54 59 33 4e 44 41 7a 4e 6a 6b 77 4f 6a 49 7a 4e 54 59 7a 4d 54 67 7a 4e 44 6b 3d 22 2c 22 75 73 65 72 49 44 22 3a 22 31 30 30 30 34 34 35 36 37 34 30 33 36 39 30 22 2c 22 75 73 65 72 56 61 6e 69 74 79 22 3a 22 43 6f 64 61 73 68 6f 70 2e 49 44 6f 66 66 69 63 69 61 6c 22 2c 22 76 69 65 77 65 72 49 44 22 3a 6e 75 6c 6c 2c 22 65 6c 69 67 69 62 6c 65 46 6f 72 Data Ascii: Rpb246MTAwMDQ0NTY3NDAzNjkwOjIzNTYzMTgzNDk6MjM5","rawSectionToken":"100044567403690:2356318349","sectionToken":"YXBwX3NlY3Rpb246MTAwMDQ0NTY3NDAzNjkwOjIzNTYzMTgzNDk=","userID":"100044567403690","userVanity":"Codashop.IDofficial","viewerID":null,"eligibleFor
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 74 22 3a 66 61 6c 73 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 46 42 49 44 22 7d 2c 22 73 6f 72 74 69 6e 67 5f 73 65 74 74 69 6e 67 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 66 61 6c 73 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 45 4e 55 4d 22 7d 2c 22 74 61 67 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 66 61 6c 73 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 53 54 52 49 4e 47 22 7d 2c 22 72 65 66 65 72 72 61 6c 5f 73 6f 75 72 63 65 Data Ascii: t":false,"coercibleType":"FBID"},"sorting_setting":{"legacyNames":[],"default":null,"path":false,"significant":false,"coercibleType":"ENUM"},"tag":{"legacyNames":[],"default":null,"path":false,"significant":false,"coercibleType":"STRING"},"referral_source
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 6c 22 2c 22 76 69 65 77 65 72 49 44 22 3a 6e 75 6c 6c 2c 22 65 6c 69 67 69 62 6c 65 46 6f 72 50 72 6f 66 69 6c 65 50 6c 75 73 45 6e 74 69 74 79 4d 65 6e 75 22 3a 66 61 6c 73 65 7d 2c 22 65 6e 74 72 79 50 6f 69 6e 74 22 3a 7b 22 5f 5f 64 72 22 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 43 6f 6c 6c 65 63 74 69 6f 6e 52 6f 75 74 65 52 6f 6f 74 2e 65 6e 74 72 79 70 6f 69 6e 74 22 7d 7d 2c 22 74 72 61 63 65 50 6f 6c 69 63 79 22 3a 22 63 6f 6d 65 74 2e 70 72 6f 66 69 6c 65 2e 63 6f 6c 6c 65 63 74 69 6f 6e 2e 66 6f 6c 6c 6f 77 65 72 73 22 2c 22 6d 65 74 61 22 3a 7b 22 74 69 74 6c 65 22 3a 22 43 6f 64 61 73 68 6f 70 22 2c 22 61 63 63 65 73 73 6f 72 79 22 3a 6e 75 6c 6c 2c 22 66 61 76 69 63 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 70 72 65 66 65 74 63 68 61 62 6c 65 22 3a Data Ascii: l","viewerID":null,"eligibleForProfilePlusEntityMenu":false},"entryPoint":{"__dr":"ProfileCometCollectionRouteRoot.entrypoint"}},"tracePolicy":"comet.profile.collection.followers","meta":{"title":"Codashop","accessory":null,"favicon":null},"prefetchable":
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 74 69 6e 67 22 3a 6e 75 6c 6c 2c 22 74 61 67 22 3a 6e 75 6c 6c 2c 22 72 65 66 65 72 72 61 6c 5f 73 6f 75 72 63 65 22 3a 6e 75 6c 6c 2c 22 73 65 63 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 73 74 6f 72 79 5f 69 64 22 3a 6e 75 6c 6c 2c 22 63 6f 6d 6d 65 6e 74 5f 69 64 22 3a 6e 75 6c 6c 2c 22 72 65 70 6c 79 5f 63 6f 6d 6d 65 6e 74 5f 69 64 22 3a 6e 75 6c 6c 2c 22 62 61 64 67 65 5f 74 79 70 65 22 3a 22 4e 45 57 5f 4d 45 4d 42 45 52 22 7d 2c 22 72 6f 75 74 65 50 61 72 61 6d 73 22 3a 7b 22 76 61 6e 69 74 79 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 74 72 75 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 74 72 75 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 53 54 52 49 4e Data Ascii: ting":null,"tag":null,"referral_source":null,"section":null,"story_id":null,"comment_id":null,"reply_comment_id":null,"badge_type":"NEW_MEMBER"},"routeParams":{"vanity":{"legacyNames":[],"default":null,"path":true,"significant":true,"coercibleType":"STRIN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.6	59150	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:17 UTC	611	OUT	GET /rsrc.php/v3/yP/r/8p1yRlAKDA6.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:18 UTC	1913	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: HI74w+K2FlhUxcXEF3NP6A== Expires: Fri, 23 May 2025 18:29:09 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: xZATMvCDH3P1L3uVFaHXSyEfZG59UEsqZOyhYLfNHROJlz3bCzpNC9Wy7vMEdnI3abIfon8htaJLL10GqmVwjg== Date: Sat, 25 May 2024 23:00:17 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 3146
2024-05-25 23:00:18 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-05-25 23:00:18 UTC	3145	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 15 00 00 01 c3 08 03 00 00 00 fc d9 a1 22 00 00 01 80 50 4c 54 45 47 70 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR"PLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.6	59155	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:17 UTC	368	OUT	GET /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:18 UTC	930	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-25 23:00:18 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-25 23:00:18 UTC	1662	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-25 23:00:18 UTC	2554	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 63 6f 6e 66 69 67 76 65 72 73 69 6f 6e 3d 22 41 63 49 31 65 58 66 38 4c 33 30 6f 61 45 50 6a 62 4f 42 68 70 6e 43 70 37 61 5a 74 66 42 7a 73 4c 6b 56 69 41 74 39 59 42 4e 73 45 51 4e 73 45 47 58 77 70 5f 68 74 2d 66 65 32 78 34 77 22 3b 20 65 5f 63 6c 69 65 6e 74 61 64 64 72 3d 22 41 63 4c 53 4a 58 4e 4f 72 66 32 64 62 4f 66 62 5a 48 5f 43 52 4e 79 43 61 4e 76 6a 6e 4e 4a 43 4b 4f 65 37 4b 77 79 61 4d 5f 77 6b 57 76 43 42 75 79 57 31 46 68 61 4a 71 57 48 52 7a 4f 73 53 33 30 78 42 6d 38 4a 63 61 77 65 4c 53 42 32 58 49 50 55 44 48 37 5f 6d 65 71 69 37 4d 43 69 66 75 4b 53 51 47 76 5f 4b 64 34 56 71 64 68 35 56 73 67 22 3b 20 65 5f 66 62 5f Data Ascii: Proxy-Status: http_request_error; e_fb_configversion="AcI1eXf8L30oaEPjbOBhpnCp7aZtfBzsLkViAt9YBNsEQNsEGXwp_ht-fe2x4w"; e_clientaddr="AcLSJXNOrf2dbOfbZH_CRNyCaNvjnNJCKOe7KwyaM_wkWvCBuyW1FhaJqWHRzOsS30xBm8JcaweLSB2XIPUDH7_meqi7MCifuKSQGv_Kd4Vqdh5Vsg"; e_fb_
2024-05-25 23:00:18 UTC	165	IN	Data Raw: 58 2d 46 42 2d 43 6f 6e 6e 65 63 74 69 6f 6e 2d 51 75 61 6c 69 74 79 3a 20 47 4f 4f 44 3b 20 71 3d 30 2e 37 2c 20 72 74 74 3d 39 31 2c 20 72 74 78 3d 30 2c 20 63 3d 31 30 2c 20 6d 73 73 3d 31 33 39 32 2c 20 74 62 77 3d 33 34 30 34 2c 20 74 70 3d 2d 31 2c 20 74 70 6c 3d 2d 31 2c 20 75 70 6c 61 74 3d 31 30 36 2c 20 75 6c 6c 61 74 3d 30 0d 0a 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=106, ullat=0Alt-Svc: h3=":443"; ma=86400Connection: close
2024-05-25 23:00:18 UTC	1335	IN	Data Raw: 31 30 30 61 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 78 63 78 58 77 73 31 57 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d Data Ascii: 100a3<!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="xcxXws1W">function envFlush(a){function b(b){for(var c in a)b[c]=
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 6f 6f 6b 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 6d 65 64 69 61 3d 22 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 34 30 70 78 29 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 3f 6c 6f 63 61 6c 65 32 3d 65 6e 5f 47 42 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 6d 65 64 69 61 3d 22 68 61 6e 64 68 65 6c 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 3f 6c 6f 63 61 6c 65 32 Data Ascii: ook" /><link rel="alternate" media="only screen and (max-width: 640px)" href="https://www.facebook.com/ajax/bulk-route-definitions/?locale2=en_GB" /><link rel="alternate" media="handheld" href="https://www.facebook.com/ajax/bulk-route-definitions/?locale2
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 38 6c 67 35 4b 7a 22 20 64 61 74 61 2d 62 6f 6f 74 6c 6f 61 64 65 72 2d 68 61 73 68 3d 22 52 45 42 76 6c 59 5a 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 5f 2f 6c 2f 30 2c 63 72 6f 73 73 2f 53 49 57 59 46 33 50 62 56 4f 78 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 20 64 61 74 61 2d 62 6f 6f 74 6c 6f 61 64 65 72 2d 68 61 73 68 3d 22 63 31 66 6f 74 6a 6a 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 2f Data Ascii: 8lg5Kz" data-bootloader-hash="REBvlYZ" crossorigin="anonymous" /><link type="text/css" rel="stylesheet" href="https://static.xx.fbcdn.net/rsrc.php/v3/y_/l/0,cross/SIWYF3PbVOx.css?_nc_x=Ij3Wp8lg5Kz" data-bootloader-hash="c1fotjj" crossorigin="anonymous" /
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 63 72 3a 36 36 34 30 22 2c 5b 22 50 72 6f 6d 69 73 65 49 6d 70 6c 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 50 72 6f 6d 69 73 65 49 6d 70 6c 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 33 38 36 22 2c 5b 22 63 6c 65 61 72 54 69 6d 65 6f 75 74 57 57 57 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 63 6c 65 61 72 54 69 6d 65 6f 75 74 57 57 57 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 33 39 30 22 2c 5b 22 73 65 74 54 69 6d 65 6f 75 74 57 57 57 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 73 65 74 54 69 6d 65 6f 75 74 57 57 57 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 38 39 35 38 22 2c 5b 22 46 42 4a 53 4f 4e 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 46 42 4a 53 4f 4e 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 30 37 38 22 2c Data Ascii: cr:6640",["PromiseImpl"],{"__rc":["PromiseImpl",null]},-1],["cr:7386",["clearTimeoutWWW"],{"__rc":["clearTimeoutWWW",null]},-1],["cr:7390",["setTimeoutWWW"],{"__rc":["setTimeoutWWW",null]},-1],["cr:8958",["FBJSON"],{"__rc":["FBJSON",null]},-1],["cr:1078",
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 6e 6f 43 6f 6f 6b 69 65 73 22 3a 66 61 6c 73 65 2c 22 73 68 6f 75 6c 64 53 68 6f 77 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 22 3a 66 61 6c 73 65 2c 22 73 68 6f 75 6c 64 57 61 69 74 46 6f 72 44 65 66 65 72 72 65 64 44 61 74 72 43 6f 6f 6b 69 65 22 3a 66 61 6c 73 65 7d 2c 34 33 32 38 5d 2c 5b 22 43 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 49 46 72 61 6d 65 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 63 6f 6e 73 65 6e 74 5f 70 61 72 61 6d 22 3a 22 46 51 41 53 45 68 49 53 41 41 3d 3d 2e 41 52 59 75 4f 34 78 57 66 65 45 77 43 4a 43 5a 55 68 6d 46 71 2d 71 65 76 68 2d 41 6b 6e 61 69 75 53 76 54 64 4f 72 66 4d 57 52 6f 69 65 4d 45 22 2c 22 61 6c 6c 6f 77 6c 69 73 74 65 64 5f 69 66 72 61 6d 65 73 22 3a 5b 5d 2c 22 69 73 5f 63 68 65 63 6b 70 6f 69 6e 74 65 64 22 3a 66 61 6c 73 Data Ascii: noCookies":false,"shouldShowCookieBanner":false,"shouldWaitForDeferredDatrCookie":false},4328],["CookieConsentIFrameConfig",[],{"consent_param":"FQASEhISAA==.ARYuO4xWfeEwCJCZUhmFq-qevh-AknaiuSvTdOrfMWRoieME","allowlisted_iframes":[],"is_checkpointed":fals
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 7b 22 74 22 3a 36 30 34 38 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 6d 5f 6c 73 22 3a 7b 22 74 22 3a 33 34 35 36 30 30 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 6d 5f 70 69 78 65 6c 5f 72 61 74 69 6f 22 3a 7b 22 74 22 3a 36 30 34 38 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 6e 6f 73 63 72 69 70 74 22 3a 7b 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 70 72 65 73 65 6e 63 65 22 3a 7b 22 74 22 3a 32 35 39 32 30 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 73 66 61 75 22 3a 7b 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 75 73 69 64 61 22 3a 7b 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 76 70 64 22 3a 7b 22 74 22 3a 35 31 38 34 30 30 30 2c 22 73 22 3a 22 4c 61 78 22 7d 2c 22 77 64 22 3a 7b 22 74 22 3a 36 30 34 38 30 30 2c 22 73 22 3a 22 4c 61 78 22 7d Data Ascii: {"t":604800,"s":"None"},"m_ls":{"t":34560000,"s":"None"},"m_pixel_ratio":{"t":604800,"s":"None"},"noscript":{"s":"None"},"presence":{"t":2592000,"s":"None"},"sfau":{"s":"None"},"usida":{"s":"None"},"vpd":{"t":5184000,"s":"Lax"},"wd":{"t":604800,"s":"Lax"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.6	59156	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:18 UTC	599	OUT	GET /rsrc.php/v3/yx/r/lIynBvI7H2n.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:18 UTC	1981	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: K5ozScUvuhVivEGBHn9e1A== Expires: Sun, 25 May 2025 13:34:04 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: TWeyAYXQHk6s7ngIXeLh/dDya7ZVcsB6A+gYW0fjGX4h5PrZYwYI89G69hKEPwpizfzbkNYVJ9pPleLwsUFozQ== Date: Sat, 25 May 2024 23:00:18 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3412, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 15963
2024-05-25 23:00:18 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-05-25 23:00:18 UTC	15834	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 42 61 73 65 52 65 73 70 6f 6e 73 69 76 65 47 72 69 64 2e 72 65 61 63 74 22 2c 5b 22 42 61 73 65 41 73 70 65 63 74 52 61 74 69 6f 43 6f 6e 74 61 69 6e 65 72 2e 72 65 61 63 74 22 2c 22 42 61 73 65 43 6f 6e 74 61 69 6e 65 72 51 75 65 72 79 45 6c 65 6d 65 6e 74 2e 72 65 61 63 74 22 2c 22 43 6f 6d 65 74 53 75 73 70 65 6e 73 65 4c 69 73 74 2e 72 65 61 63 74 22 2c 22 72 65 61 63 74 22 2c 22 73 74 79 6c 65 78 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 2c 6a 3d 69 7c 7c 64 28 22 72 65 61 63 74 22 29 2c 6b 3d 7b 63 6f 6e 74 61 69 6e 65 72 3a 7b 64 69 73 70 6c 61 79 3a 22 78 37 38 7a 75 6d 35 22 2c Data Ascii: /FB_PKG_DELIM/__d("BaseResponsiveGrid.react",["BaseAspectRatioContainer.react","BaseContainerQueryElement.react","CometSuspenseList.react","react","stylex"],(function(a,b,c,d,e,f,g){"use strict";var h,i,j=i\|\|d("react"),k={container:{display:"x78zum5",
2024-05-25 23:00:18 UTC	128	IN	Data Raw: 3a 36 35 2c 66 65 65 64 4c 6f 63 61 74 69 6f 6e 3a 22 43 4f 4d 45 54 5f 4d 45 44 49 41 5f 56 49 45 57 45 52 22 2c 73 63 61 6c 65 3a 64 28 22 57 65 62 50 69 78 65 6c 52 61 74 69 6f 22 29 2e 67 65 74 28 29 2c 73 65 63 74 69 6f 6e 54 6f 6b 65 6e 3a 65 2c 75 73 65 72 49 44 3a 53 74 72 69 6e 67 28 61 29 7d 7d 7d 7d 7d 29 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b Data Ascii: :65,feedLocation:"COMET_MEDIA_VIEWER",scale:d("WebPixelRatio").get(),sectionToken:e,userID:String(a)}}}}});g["default"]=a}),98);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.6	59157	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:18 UTC	610	OUT	GET /rsrc.php/v3iO7g4/yR/l/en_GB/YpUhBEcSvg9.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:18 UTC	1981	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: qi//tsov8JG5KLvfAEHbuQ== Expires: Sun, 25 May 2025 23:00:18 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: Ud++9M8j7gEDipolWpIPbjK6ZfwV/iTbzoCPOMEu7OGCBIi+aT4pD9aNieDeyjwgf1H+K+umNWDRTpiROgUWPw== Date: Sat, 25 May 2024 23:00:18 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3412, tp=-1, tpl=-1, uplat=32, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 13841
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 43 6f 6e 74 65 6e 74 4e 6f 74 41 76 61 69 6c 61 62 6c 65 2e 72 65 61 63 74 22 2c 5b 22 66 62 74 22 2c 22 43 6f 6d 65 74 43 6f 6e 74 65 6e 74 41 72 65 61 2e 72 65 61 63 74 22 2c 22 4e 75 6c 6c 53 74 61 74 65 47 65 6e 65 72 61 6c 22 2c 22 54 65 74 72 61 4e 75 6c 6c 53 74 61 74 65 2e 72 65 61 63 74 22 2c 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 2c 6a 3d 69 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 6a 2e 6a 73 78 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 78 36 73 30 64 6e 34 20 78 37 Data Ascii: ;/FB_PKG_DELIM/__d("CometContentNotAvailable.react",["fbt","CometContentArea.react","NullStateGeneral","TetraNullState.react","react"],(function(a,b,c,d,e,f,g,h){"use strict";var i,j=i\|\|d("react");function a(){return j.jsx("div",{className:"x6s0dn4 x7
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 62 28 22 49 73 57 6f 72 6b 55 73 65 72 2e 72 65 6c 61 79 70 72 6f 76 69 64 65 72 22 29 2c 5f 5f 72 65 6c 61 79 5f 69 6e 74 65 72 6e 61 6c 5f 5f 70 76 5f 5f 49 73 4d 65 72 67 51 41 50 6f 6c 6c 73 72 65 6c 61 79 70 72 6f 76 69 64 65 72 3a 62 28 22 49 73 4d 65 72 67 51 41 50 6f 6c 6c 73 2e 72 65 6c 61 79 70 72 6f 76 69 64 65 72 22 29 2c 5f 5f 72 65 6c 61 79 5f 69 6e 74 65 72 6e 61 6c 5f 5f 70 76 5f 5f 43 6f 6d 65 74 55 46 49 52 65 61 63 74 69 6f 6e 73 45 6e 61 62 6c 65 53 68 6f 72 74 4e 61 6d 65 72 65 6c 61 79 70 72 6f 76 69 64 65 72 3a 62 28 22 43 6f 6d 65 74 55 46 49 52 65 61 63 74 69 6f 6e 73 45 6e 61 62 6c 65 53 68 6f 72 74 4e 61 6d 65 2e 72 65 6c 61 79 70 72 6f 76 69 64 65 72 22 29 2c 5f 5f 72 65 6c 61 79 5f 69 6e 74 65 72 6e 61 6c 5f 5f 70 76 5f 5f 43 Data Ascii: b("IsWorkUser.relayprovider"),__relay_internal__pv__IsMergQAPollsrelayprovider:b("IsMergQAPolls.relayprovider"),__relay_internal__pv__CometUFIReactionsEnableShortNamerelayprovider:b("CometUFIReactionsEnableShortName.relayprovider"),__relay_internal__pv__C
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 70 72 6f 76 69 64 65 72 22 2c 22 43 6f 6d 65 74 50 68 6f 74 6f 52 6f 6f 74 43 6f 6e 74 65 6e 74 51 75 65 72 79 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 2c 22 43 6f 6d 65 74 55 46 49 52 65 61 63 74 69 6f 6e 73 45 6e 61 62 6c 65 53 68 6f 72 74 4e 61 6d 65 2e 72 65 6c 61 79 70 72 6f 76 69 64 65 72 22 2c 22 43 6f 6d 65 74 55 46 49 53 68 61 72 65 41 63 74 69 6f 6e 4d 69 67 72 61 74 69 6f 6e 2e 72 65 6c 61 79 70 72 6f 76 69 64 65 72 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 6b 69 6e 64 3a 22 50 72 65 6c 6f 61 64 61 62 6c 65 43 6f 6e 63 72 65 74 65 52 65 71 75 65 73 74 22 2c 70 61 72 61 6d 73 3a 7b 69 64 3a 62 28 22 43 6f 6d 65 74 50 68 6f 74 6f 52 Data Ascii: provider","CometPhotoRootContentQuery_facebookRelayOperation","CometUFIReactionsEnableShortName.relayprovider","CometUFIShareActionMigration.relayprovider"],(function(a,b,c,d,e,f){"use strict";a={kind:"PreloadableConcreteRequest",params:{id:b("CometPhotoR
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 79 5f 63 6f 6d 6d 65 6e 74 5f 69 64 3b 65 3d 65 2e 73 65 74 3b 68 3d 28 68 3d 68 29 21 3d 6e 75 6c 6c 3f 68 3a 66 3b 61 3d 28 66 3d 61 2e 70 61 73 73 74 68 72 6f 75 67 68 50 72 6f 70 73 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 66 2e 67 6c 62 46 69 6c 65 55 52 49 48 61 63 6b 54 6f 52 65 6e 64 65 72 41 73 33 44 5f 44 4f 5f 4e 4f 54 5f 55 53 45 3b 66 3d 7b 66 65 65 64 62 61 63 6b 53 6f 75 72 63 65 3a 36 35 2c 66 65 65 64 4c 6f 63 61 74 69 6f 6e 3a 22 43 4f 4d 45 54 5f 4d 45 44 49 41 5f 56 49 45 57 45 52 22 2c 66 6f 63 75 73 43 6f 6d 6d 65 6e 74 49 44 3a 68 21 3d 6e 75 6c 6c 3f 53 74 72 69 6e 67 28 68 29 3a 6e 75 6c 6c 2c 67 6c 62 46 69 6c 65 55 52 49 48 61 63 6b 54 6f 52 65 6e 64 65 72 41 73 33 44 5f 44 4f 5f 4e 4f 54 5f 55 53 45 3a 61 2c 69 73 4d 65 64 Data Ascii: y_comment_id;e=e.set;h=(h=h)!=null?h:f;a=(f=a.passthroughProps)==null?void 0:f.glbFileURIHackToRenderAs3D_DO_NOT_USE;f={feedbackSource:65,feedLocation:"COMET_MEDIA_VIEWER",focusCommentID:h!=null?String(h):null,glbFileURIHackToRenderAs3D_DO_NOT_USE:a,isMed
2024-05-25 23:00:18 UTC	386	IN	Data Raw: 2c 66 29 7b 65 2e 65 78 70 6f 72 74 73 3d 22 37 34 37 34 35 39 33 30 39 32 36 35 39 36 39 30 22 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 53 69 6e 67 6c 65 50 6f 73 74 43 6f 6e 74 65 6e 74 51 75 65 72 79 24 50 61 72 61 6d 65 74 65 72 73 22 2c 5b 22 43 6f 6d 65 74 49 6d 6d 65 72 73 69 76 65 50 68 6f 74 6f 43 61 6e 55 73 65 72 44 69 73 61 62 6c 65 33 44 4d 6f 74 69 6f 6e 2e 72 65 6c 61 79 70 72 6f 76 69 64 65 72 22 2c 22 43 6f 6d 65 74 49 73 41 64 61 70 74 69 76 65 55 46 49 45 6e 61 62 6c 65 64 2e 72 65 6c 61 79 70 72 6f 76 69 64 65 72 22 2c 22 43 6f 6d 65 74 53 69 6e 67 6c 65 50 6f 73 74 43 6f 6e 74 65 6e 74 51 75 65 72 79 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 2c 22 43 6f 6d 65 74 55 46 49 52 65 61 63 74 Data Ascii: ,f){e.exports="7474593092659690"}),null);__d("CometSinglePostContentQuery$Parameters",["CometImmersivePhotoCanUserDisable3DMotion.relayprovider","CometIsAdaptiveUFIEnabled.relayprovider","CometSinglePostContentQuery_facebookRelayOperation","CometUFIReact
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 65 72 22 2c 22 49 73 4d 65 72 67 51 41 50 6f 6c 6c 73 2e 72 65 6c 61 79 70 72 6f 76 69 64 65 72 22 2c 22 49 73 57 6f 72 6b 55 73 65 72 2e 72 65 6c 61 79 70 72 6f 76 69 64 65 72 22 2c 22 53 74 6f 72 69 65 73 41 72 6d 61 64 69 6c 6c 6f 52 65 70 6c 79 45 6e 61 62 6c 65 64 2e 72 65 6c 61 79 70 72 6f 76 69 64 65 72 22 2c 22 53 74 6f 72 69 65 73 52 69 6e 67 2e 72 65 6c 61 79 70 72 6f 76 69 64 65 72 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 6b 69 6e 64 3a 22 50 72 65 6c 6f 61 64 61 62 6c 65 43 6f 6e 63 72 65 74 65 52 65 71 75 65 73 74 22 2c 70 61 72 61 6d 73 3a 7b 69 64 3a 62 28 22 43 6f 6d 65 74 53 69 6e 67 6c 65 50 6f 73 74 43 6f 6e 74 65 6e 74 51 75 65 72 79 5f 66 61 63 65 62 Data Ascii: er","IsMergQAPolls.relayprovider","IsWorkUser.relayprovider","StoriesArmadilloReplyEnabled.relayprovider","StoriesRing.relayprovider"],(function(a,b,c,d,e,f){"use strict";a={kind:"PreloadableConcreteRequest",params:{id:b("CometSinglePostContentQuery_faceb
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 67 65 74 50 72 65 6c 6f 61 64 50 72 6f 70 73 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 61 2e 72 6f 75 74 65 50 61 72 61 6d 73 2c 65 3d 63 2e 63 6f 6d 6d 65 6e 74 5f 69 64 3b 63 3d 63 2e 72 65 70 6c 79 5f 63 6f 6d 6d 65 6e 74 5f 69 64 3b 61 3d 61 2e 72 6f 75 74 65 50 72 6f 70 73 2e 73 74 6f 72 79 49 44 3b 63 3d 28 63 3d 63 29 21 3d 6e 75 6c 6c 3f 63 3a 65 3b 65 3d 7b 66 65 65 64 62 61 63 6b 53 6f 75 72 63 65 3a 32 2c 66 65 65 64 4c 6f 63 61 74 69 6f 6e 3a 22 50 45 52 4d 41 4c 49 4e 4b 22 2c 66 6f 63 75 73 43 6f 6d 6d 65 6e 74 49 44 3a 63 21 3d 6e 75 6c 6c 3f 53 74 72 69 6e 67 28 63 29 3a 6e 75 6c 6c 2c 70 72 69 76 61 63 79 53 65 6c 65 63 74 6f 72 52 65 6e 64 65 72 4c 6f 63 61 74 69 6f 6e 3a Data Ascii: {"use strict";a={getPreloadProps:function(a){var c=a.routeParams,e=c.comment_id;c=c.reply_comment_id;a=a.routeProps.storyID;c=(c=c)!=null?c:e;e={feedbackSource:2,feedLocation:"PERMALINK",focusCommentID:c!=null?String(c):null,privacySelectorRenderLocation:
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 73 2e 24 31 2c 7b 73 69 67 6e 61 6c 3a 21 30 7d 2c 61 29 7d 3b 63 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 24 31 3d 7b 7d 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 63 2e 67 65 74 44 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 7d 2c 74 68 69 73 2e 24 31 29 7d 3b 63 2e 75 70 64 61 74 65 44 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 24 31 3d 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 7d 2c 74 68 69 73 2e 24 31 2c 61 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 63 2e 73 65 74 43 6f 6e 6e 65 63 74 69 6f 6e 43 6c 61 73 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 24 31 2e 63 Data Ascii: s.$1,{signal:!0},a)};c.clear=function(){this.$1={};return this};c.getData=function(){return babelHelpers["extends"]({},this.$1)};c.updateData=function(a){this.$1=babelHelpers["extends"]({},this.$1,a);return this};c.setConnectionClass=function(a){this.$1.c
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 69 6f 6e 28 61 2c 63 2c 64 2c 65 2c 66 2c 68 29 7b 65 3d 3d 3d 76 6f 69 64 20 30 26 26 28 65 3d 6e 75 6c 6c 29 3b 66 3d 3d 3d 76 6f 69 64 20 30 26 26 28 66 3d 5b 5d 29 3b 76 61 72 20 69 3d 7b 7d 2c 6a 3d 68 7c 7c 7b 7d 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6a 7c 7c 7b 7d 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6a 5b 61 5d 3b 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 7c 7c 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 29 26 26 28 62 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 29 3b 69 5b 67 2b 61 5d 3d 62 7d 29 3b 6e 65 77 28 62 28 22 50 61 67 65 73 54 79 70 65 64 4c 6f 67 67 65 72 22 29 29 28 29 2e 73 65 74 50 61 67 65 49 44 28 61 29 2e 73 65 74 45 76 65 6e 74 28 63 29 2e 73 Data Ascii: ion(a,c,d,e,f,h){e===void 0&&(e=null);f===void 0&&(f=[]);var i={},j=h\|\|{};Object.keys(j\|\|{}).forEach(function(a){var b=j[a];(b instanceof Array\|\|b instanceof Object)&&(b=JSON.stringify(b));i[g+a]=b});new(b("PagesTypedLogger"))().setPageID(a).setEvent(c).s
2024-05-25 23:00:18 UTC	905	IN	Data Raw: 2e 6a 73 78 28 63 28 22 43 6f 6d 65 74 43 6f 6e 74 65 6e 74 41 72 65 61 2e 72 65 61 63 74 22 29 2c 7b 63 68 69 6c 64 72 65 6e 3a 69 2e 6a 73 78 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 78 31 63 79 38 7a 68 6c 20 78 37 38 7a 75 6d 35 20 78 6c 35 36 6a 37 6b 20 78 68 38 79 65 6a 33 22 2c 63 68 69 6c 64 72 65 6e 3a 69 2e 6a 73 78 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 78 31 69 79 6d 6d 32 61 20 78 31 67 6a 61 39 74 20 78 38 76 64 67 71 6a 20 78 77 37 79 6c 79 39 20 78 31 68 74 6b 38 73 6c 20 78 76 75 65 39 7a 22 2c 63 68 69 6c 64 72 65 6e 3a 69 2e 6a 73 78 28 63 28 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 47 6c 69 6d 6d 65 72 2e 72 65 61 63 74 22 29 2c 7b 7d 29 7d 29 7d 29 7d 29 7d 6c 2e 64 69 73 70 6c 61 79 4e 61 6d 65 Data Ascii: .jsx(c("CometContentArea.react"),{children:i.jsx("div",{className:"x1cy8zhl x78zum5 xl56j7k xh8yej3",children:i.jsx("div",{className:"x1iymm2a x1gja9t x8vdgqj xw7yly9 x1htk8sl xvue9z",children:i.jsx(c("CometFeedStoryGlimmer.react"),{})})})})}l.displayName

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.6	59158	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:18 UTC	602	OUT	GET /v/t39.30808-6/425750146_2620197854795727_7515684929751906463_n.png?stp=dst-png_fb50_s320x320&_nc_cat=100&ccb=1-7&_nc_sid=5f2048&_nc_ohc=PwxMdBd-3KAQ7kNvgF1bFWB&_nc_ht=scontent-hou1-1.xx&oh=00_AYD4FOtaPH_yCdXoiMwmmy7o9ZJ5BqsldvtGtjHLYpPk3A&oe=66583270 HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:18 UTC	611	IN	HTTP/1.1 200 OK Last-Modified: Tue, 06 Feb 2024 06:44:42 GMT X-Needle-Checksum: 1541310550 thrift_fmhk: GBBCAFUjxtdeOndck9qhKRtrFfDr4Z0EvFUAHCYEAAAA Content-Type: image/png content-digest: adler32=2229934517 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:18 GMT X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3412, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 16298
2024-05-25 23:00:18 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-05-25 23:00:18 UTC	15024	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 40 00 00 00 b4 08 02 00 00 00 6a 86 62 46 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 20 00 49 44 41 54 78 9c ed bd db 96 ec a8 0e 2c 0a 35 e6 5f 9e ff 7f da 63 7f c2 4e 9d 07 83 08 49 21 c0 97 ac ac ea 55 1a dd 35 6d 8c b9 2a 08 21 30 59 ff cf ff fd ff 0a 8a 14 2f 52 4a a9 e3 91 b4 eb 7a 5c 1f 4f a5 b0 8b 5a 8f b7 a4 8e 74 04 d2 7c 95 4a d2 37 b7 35 2b 15 4a 85 e7 55 34 f0 28 a5 c0 b5 86 fb c0 fe e2 08 c7 bc 5b 71 20 32 64 04 45 93 c9 95 60 aa a2 21 15 a3 f9 14 6b 78 94 37 85 c4 f0 ea a3 98 40 5b 3b 0d a9 35 46 1b 71 a4 b7 61 d5 16 a8 98 5a a9 78 0b ef 56 92 b5 2d a1 ed e9 ea 0b 4f aa 92 d5 b6 ba 08 b6 91 0f 75 19 8a a7 5a 7d d4 46 4c 48 bb ed 7a 5e db 75 57 ef e3 f6 d5 02 ab c6 94 3a 5e 7c c1 a3 57 Data Ascii: PNGIHDR@jbFsRGB, IDATx,5_cNI!U5m*!0Y/RJz\OZt\|J75+JU4([q 2dE`!kx7@[;5FqaZxV-OuZ}FLHz^uW:^\|W
2024-05-25 23:00:18 UTC	1273	IN	Data Raw: b9 d5 46 8e 48 80 42 21 e7 12 14 0b 57 48 4a 73 24 0c ec 4c d1 2c 0b 9b 1e 0c 2b d3 9a 32 d9 5b 46 9a 0c 69 ee 06 4c 5f fd 11 85 80 58 98 12 8b 39 ce 5d 6c 0a 36 ea 08 bf c6 a2 f7 d6 81 1f 94 70 bc cb 35 59 76 ca d9 97 bd 3c 54 f5 77 0f b7 09 85 4a 76 6b 19 98 40 2e 98 c4 60 42 83 51 ed 0a c0 32 f5 4e ac 48 dd 67 ab 16 e4 df 95 ae cc 4d 68 99 33 30 75 62 99 d1 6c 64 69 cb 95 96 b2 e6 de a5 47 35 e7 d3 1b 39 d2 54 96 61 54 4e 73 e7 76 9a df 6e 1e f9 0c af ce 81 f5 fd 01 e0 ea 5e 64 47 49 db f0 0d 06 f6 20 a7 95 d8 6e c7 0d 27 56 13 ef 2d b2 e7 e7 d8 c5 96 c1 c0 52 22 03 d3 8d 1c 6a ad f0 38 98 49 62 6c f0 df 48 e3 75 99 3e fd 2e 15 fc a4 09 bd 2f 30 c1 09 39 32 cd f4 6d 7b 75 62 7b 23 ea 05 00 57 8b 3d 4c 81 25 64 d4 7e cd c0 23 59 ae d5 82 9a 7d 4e f6 96 Data Ascii: FHB!WHJs$L,+2[FiL_X9]l6p5Yv<TwJvk@.`BQ2NHgMh30ubldiG59TaTNsvn^dGI n'V-R"j8IblHu>./092m{ub{#W=L%d~#Y}N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.6	59161	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:18 UTC	610	OUT	GET /rsrc.php/v3iovW4/yD/l/en_GB/aubh74cvJ-S.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:18 UTC	1982	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: sMQm04HB7wCkPppaowBsTQ== Expires: Fri, 23 May 2025 09:16:16 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: t94chfiSElFYiqyA9Cks2rBDmo6uRVnQQPsiqtiIISgH55TlAlrrxVRy0ssNNI0fWJKZnUYRxFGJvMv07rgDvw== Date: Sat, 25 May 2024 23:00:18 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=8, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 465218
2024-05-25 23:00:18 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-05-25 23:00:18 UTC	15822	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 41 63 63 65 73 73 69 62 69 6c 69 74 79 57 65 62 41 73 73 69 73 74 69 76 65 54 65 63 68 54 79 70 65 64 4c 6f 67 67 65 72 4c 69 74 65 22 2c 5b 22 67 65 6e 65 72 61 74 65 4c 69 74 65 54 79 70 65 64 4c 6f 67 67 65 72 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 62 28 22 67 65 6e 65 72 61 74 65 4c 69 74 65 54 79 70 65 64 4c 6f 67 67 65 72 22 29 28 22 6c 6f 67 67 65 72 3a 41 63 63 65 73 73 69 62 69 6c 69 74 79 57 65 62 41 73 73 69 73 74 69 76 65 54 65 63 68 4c 6f 67 67 65 72 43 6f 6e 66 69 67 22 29 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 41 63 66 54 6f 61 73 74 49 6d 70 72 65 73 73 69 6f Data Ascii: /FB_PKG_DELIM/__d("AccessibilityWebAssistiveTechTypedLoggerLite",["generateLiteTypedLogger"],(function(a,b,c,d,e,f){"use strict";e.exports=b("generateLiteTypedLogger")("logger:AccessibilityWebAssistiveTechLoggerConfig")}),null);__d("AcfToastImpressio
2024-05-25 23:00:18 UTC	16384	IN	Data Raw: 6c 43 6f 6c 6c 65 63 74 6f 72 42 61 73 65 22 2c 5b 22 42 44 42 69 6f 6d 65 74 72 69 63 53 69 67 6e 61 6c 43 6f 6c 6c 65 63 74 6f 72 42 61 73 65 22 2c 22 42 44 4c 6f 67 67 69 6e 67 43 6f 6e 73 74 61 6e 74 73 22 2c 22 42 44 4f 70 65 72 61 74 69 6f 6e 4c 6f 67 48 65 6c 70 65 72 22 2c 22 42 6f 6f 6c 65 61 6e 53 69 67 6e 61 6c 56 61 6c 75 65 54 79 70 65 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 3d 22 42 44 54 6f 75 63 68 4f 72 4d 6f 75 73 65 53 69 67 6e 61 6c 43 6f 6c 6c 65 63 74 6f 72 42 61 73 65 22 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 62 61 62 65 6c 48 65 6c 70 65 72 73 2e 69 6e 68 65 72 69 74 73 4c 6f 6f 73 65 28 62 2c 61 29 3b 66 75 6e 63 74 69 6f 6e 20 Data Ascii: lCollectorBase",["BDBiometricSignalCollectorBase","BDLoggingConstants","BDOperationLogHelper","BooleanSignalValueType"],(function(a,b,c,d,e,f,g){"use strict";var h="BDTouchOrMouseSignalCollectorBase";a=function(a){babelHelpers.inheritsLoose(b,a);function
2024-05-25 23:00:18 UTC	16384	IN	Data Raw: 6c 73 3d 5b 5d 2c 74 68 69 73 2e 64 79 6e 61 6d 69 63 53 69 67 6e 61 6c 73 3d 5b 5d 2c 74 68 69 73 2e 62 69 6f 6d 65 74 72 69 63 53 69 67 6e 61 6c 73 3d 5b 5d 2c 74 68 69 73 2e 62 69 6f 6d 65 74 72 69 63 53 69 67 6e 61 6c 73 4d 61 70 3d 6e 65 77 20 4d 61 70 28 29 2c 74 68 69 73 2e 68 65 61 72 74 62 65 61 74 53 69 67 6e 61 6c 3d 6e 65 77 28 63 28 22 42 44 53 69 67 6e 61 6c 57 72 61 70 70 65 72 22 29 29 28 5b 5d 2c 33 38 30 30 31 29 2c 74 68 69 73 2e 62 75 66 66 65 72 53 69 7a 65 42 79 53 69 67 6e 61 6c 49 64 4d 61 70 3d 7b 7d 2c 74 68 69 73 2e 70 65 72 69 6f 64 69 63 43 6f 6c 6c 65 63 74 69 6f 6e 49 6e 74 65 72 76 61 6c 4d 73 3d 4e 75 6d 62 65 72 2e 4d 41 58 5f 53 41 46 45 5f 49 4e 54 45 47 45 52 2c 74 68 69 73 2e 73 69 67 6e 61 6c 43 6f 6e 66 69 67 47 65 Data Ascii: ls=[],this.dynamicSignals=[],this.biometricSignals=[],this.biometricSignalsMap=new Map(),this.heartbeatSignal=new(c("BDSignalWrapper"))([],38001),this.bufferSizeBySignalIdMap={},this.periodicCollectionIntervalMs=Number.MAX_SAFE_INTEGER,this.signalConfigGe
2024-05-25 23:00:19 UTC	16384	IN	Data Raw: 72 61 74 69 6f 6e 4c 6f 67 48 65 6c 70 65 72 22 29 2e 6c 6f 67 57 61 72 6e 69 6e 67 28 6a 2c 64 28 22 42 44 4c 6f 67 67 69 6e 67 43 6f 6e 73 74 61 6e 74 73 22 29 2e 4f 50 45 52 41 54 49 4f 4e 53 2e 57 45 42 5f 53 54 4f 52 41 47 45 2c 7b 65 72 72 6f 72 3a 65 2e 6d 65 73 73 61 67 65 7d 29 7d 2c 67 65 74 54 69 6d 65 73 74 61 6d 70 49 6e 53 74 6f 72 61 67 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 28 68 7c 7c 28 68 3d 63 28 22 57 65 62 53 74 6f 72 61 67 65 22 29 29 29 2e 67 65 74 4c 6f 63 61 6c 53 74 6f 72 61 67 65 28 29 3b 69 66 28 21 62 29 7b 64 28 22 42 44 4f 70 65 72 61 74 69 6f 6e 4c 6f 67 48 65 6c 70 65 72 22 29 2e 6c 6f 67 57 61 72 6e 69 6e 67 28 6a 2c 64 28 22 42 44 4c 6f 67 67 69 6e 67 43 6f 6e 73 74 61 6e 74 73 22 29 2e 4f 50 45 52 Data Ascii: rationLogHelper").logWarning(j,d("BDLoggingConstants").OPERATIONS.WEB_STORAGE,{error:e.message})},getTimestampInStorage:function(a){var b=(h\|\|(h=c("WebStorage"))).getLocalStorage();if(!b){d("BDOperationLogHelper").logWarning(j,d("BDLoggingConstants").OPER
2024-05-25 23:00:19 UTC	1500	IN	Data Raw: 63 6b 22 2c 54 49 4d 45 44 5f 52 45 51 55 45 53 54 3a 22 74 69 6d 65 64 5f 72 65 71 75 65 73 74 22 2c 49 4e 54 45 52 52 55 50 54 3a 22 69 6e 74 65 72 72 75 70 74 22 7d 29 3b 66 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 36 36 29 3b 0a 5f 5f 64 28 22 42 6c 61 64 65 52 75 6e 6e 65 72 45 76 65 6e 74 48 61 6e 64 6c 65 72 22 2c 5b 22 42 6c 61 64 65 52 75 6e 6e 65 72 4c 6f 67 67 65 72 22 2c 22 42 6c 61 64 65 52 75 6e 6e 65 72 53 74 72 65 61 6d 53 74 61 74 75 73 22 2c 22 42 6c 61 64 65 52 75 6e 6e 65 72 54 79 70 65 73 22 2c 22 42 6c 61 64 65 52 75 6e 6e 65 72 54 79 70 65 73 49 6e 74 65 72 6e 61 6c 22 2c 22 52 65 71 75 65 73 74 53 74 72 65 61 6d 45 32 45 43 6c 69 65 6e 74 4c 6f 67 67 65 72 45 76 65 6e 74 22 2c 22 52 65 71 75 65 73 74 53 74 72 65 61 6d 45 32 Data Ascii: ck",TIMED_REQUEST:"timed_request",INTERRUPT:"interrupt"});f["default"]=a}),66);__d("BladeRunnerEventHandler",["BladeRunnerLogger","BladeRunnerStreamStatus","BladeRunnerTypes","BladeRunnerTypesInternal","RequestStreamE2EClientLoggerEvent","RequestStreamE2
2024-05-25 23:00:19 UTC	14884	IN	Data Raw: 62 2e 24 34 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 3b 61 3d 61 2e 67 65 74 46 72 61 6d 65 73 28 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 74 79 70 65 3d 3d 64 28 22 42 6c 61 64 65 52 75 6e 6e 65 72 54 79 70 65 73 22 29 2e 53 74 72 65 61 6d 46 72 61 6d 65 54 79 70 65 2e 53 54 41 54 55 53 5f 55 50 44 41 54 45 7d 29 3b 66 6f 72 28 76 61 72 20 61 3d 61 2c 65 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 2c 66 3d 30 2c 61 3d 65 3f 61 3a 61 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 5d 28 29 3b 3b 29 7b 76 61 72 20 67 3b 69 66 28 65 29 7b 69 66 28 66 3e 3d Data Ascii: b.$4=function(a){var b=this;a=a.getFrames().filter(function(a){return a.type==d("BladeRunnerTypes").StreamFrameType.STATUS_UPDATE});for(var a=a,e=Array.isArray(a),f=0,a=e?a:a[typeof Symbol==="function"?Symbol.iterator:"@@iterator"]();;){var g;if(e){if(f>=
2024-05-25 23:00:19 UTC	16384	IN	Data Raw: 3b 6a 3d 61 5b 65 2b 2b 5d 3b 64 5b 66 2b 2b 5d 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 28 67 26 31 35 29 3c 3c 31 32 7c 28 69 26 36 33 29 3c 3c 36 7c 6a 26 36 33 29 7d 7d 72 65 74 75 72 6e 20 64 2e 6a 6f 69 6e 28 22 22 29 7d 76 61 72 20 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 2c 63 2c 64 29 7b 74 68 69 73 2e 24 31 3d 61 2c 74 68 69 73 2e 24 32 3d 62 2c 74 68 69 73 2e 24 35 3d 63 2c 74 68 69 73 2e 24 36 3d 64 2c 74 68 69 73 2e 24 34 3d 21 31 7d 76 61 72 20 62 3d 61 2e 70 72 6f 74 6f 74 79 70 65 3b 62 2e 24 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 3b 74 68 69 73 2e 24 34 3f 28 74 68 69 73 2e 24 34 3d 21 31 2c 74 68 69 73 2e 24 35 28 29 2c 74 68 69 73 2e 24 33 3d 64 Data Ascii: ;j=a[e++];d[f++]=String.fromCharCode((g&15)<<12\|(i&63)<<6\|j&63)}}return d.join("")}var l=function(){function a(a,b,c,d){this.$1=a,this.$2=b,this.$5=c,this.$6=d,this.$4=!1}var b=a.prototype;b.$7=function(){var a=this;this.$4?(this.$4=!1,this.$5(),this.$3=d
2024-05-25 23:00:19 UTC	16384	IN	Data Raw: 45 53 53 41 47 45 5f 54 59 50 45 2e 53 55 42 41 43 4b 3a 74 68 69 73 2e 24 39 2e 62 75 6d 70 43 6f 75 6e 74 65 72 28 22 70 72 6f 74 6f 63 6f 6c 2e 73 75 62 61 63 6b 2e 72 65 63 65 69 76 65 64 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 64 28 22 4d 71 74 74 50 72 6f 74 6f 63 6f 6c 43 6f 64 65 63 22 29 2e 4d 45 53 53 41 47 45 5f 54 59 50 45 2e 55 4e 53 55 42 41 43 4b 3a 74 68 69 73 2e 24 39 2e 62 75 6d 70 43 6f 75 6e 74 65 72 28 22 70 72 6f 74 6f 63 6f 6c 2e 75 6e 73 75 62 61 63 6b 2e 72 65 63 65 69 76 65 64 22 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 69 73 2e 24 39 2e 6c 6f 67 45 72 72 6f 72 28 63 28 22 65 72 72 22 29 28 22 4d 71 74 74 50 72 6f 74 6f 63 6f 6c 43 6c 69 65 6e 74 3a 20 52 65 63 65 69 76 65 64 20 75 6e 68 61 6e 64 6c 65 64 20 6d 65 Data Ascii: ESSAGE_TYPE.SUBACK:this.$9.bumpCounter("protocol.suback.received");break;case d("MqttProtocolCodec").MESSAGE_TYPE.UNSUBACK:this.$9.bumpCounter("protocol.unsuback.received");break;default:this.$9.logError(c("err")("MqttProtocolClient: Received unhandled me
2024-05-25 23:00:19 UTC	14884	IN	Data Raw: 53 43 4f 4e 4e 45 43 54 29 7d 3b 65 2e 24 32 35 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 24 31 30 26 26 74 68 69 73 2e 24 31 30 2e 73 68 75 74 64 6f 77 6e 28 61 29 2c 74 68 69 73 2e 24 31 33 26 26 74 68 69 73 2e 24 31 33 2e 73 68 75 74 64 6f 77 6e 28 29 2c 74 68 69 73 2e 24 31 36 2e 6f 6e 54 61 62 43 6c 6f 73 65 28 29 7d 3b 65 2e 70 75 62 6c 69 73 68 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 3d 3d 3d 76 6f 69 64 20 30 26 26 28 63 3d 7b 71 6f 73 3a 31 2c 73 6b 69 70 42 75 66 66 65 72 3a 21 31 7d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 24 32 36 28 61 2c 62 2c 63 29 7d 3b 65 2e 70 75 62 6c 69 73 68 42 69 6e 61 72 79 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 3d 3d 3d 76 6f 69 64 20 30 26 26 28 63 3d 7b 71 6f 73 3a 31 2c Data Ascii: SCONNECT)};e.$25=function(a){this.$10&&this.$10.shutdown(a),this.$13&&this.$13.shutdown(),this.$16.onTabClose()};e.publish=function(a,b,c){c===void 0&&(c={qos:1,skipBuffer:!1});return this.$26(a,b,c)};e.publishBinary=function(a,b,c){c===void 0&&(c={qos:1,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.6	59163	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:18 UTC	758	OUT	GET /m1/v/t6/An_KOWvmE8xXhWbKcEDamiAQ14ZKS7T_w5aOTf-M8Krv4ls-f63eecRjpMEIRfwoMQw0XjeM4Q2PKoqtUSQc0_q66s2ahAGa0OTb.kf?ccb=10-5&oh=00_AYCREWIJAY60rI4GtkID1LYrVlSj9KC3tfo8g8qkECqQsg&oe=6679D180&_nc_sid=7da55a HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:18 UTC	953	IN	HTTP/1.1 200 OK content-digest: adler32=1060390509 Content-Type: image/x.fb.keyframes ETag: -1103541200696250300 x-manifold-obj-blobsizebytes: 13996 x-manifold-obj-canonicalpath: flat/base:v7:like.kf x-manifold-obj-ctime: 1611967368 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"1635855486666999","color":"2078f4","__ctime":"1611967368","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:18 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 13996
2024-05-25 23:00:18 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 00 00 16 00 24 00 10 00 1c 00 18 00 04 00 0c 00 08 00 00 00 00 00 20 00 16 00 00 00 05 00 00 00 1c 00 00 00 5c 13 00 00 00 00 34 43 00 00 34 43 00 00 00 40 00 00 70 42 01 00 00 00 01 00 00 00 0c 00 00 00 08 00 10 00 08 00 04 00 08 00 00 00 0c 00 00 00 00 00 34 43 00 00 34 43 1e 13 00 00 ff d8 ff db 00 84 00 01 01 01 01 01 01 01 01 01 01 02 01 01 01 02 02 02 01 01 02 02 02 02 02 02 02 02 02 03 02 03 03 03 03 02 03 03 04 04 04 04 04 03 05 05 05 05 05 05 07 07 07 07 07 08 08 08 08 08 08 08 08 08 08 01 01 01 01 02 02 02 05 03 03 05 07 05 04 05 07 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 ff dd 00 04 00 17 ff ee 00 0e 41 64 6f 62 65 00 Data Ascii: KEYF$ \4C4C@pB4C4CAdobe
2024-05-25 23:00:18 UTC	12495	IN	Data Raw: b8 ff 00 ae af 8d c5 13 3d b1 a9 ce a3 5b df 9a da 61 d5 76 ac 6f dd 67 31 2e 7b 74 75 8f b5 85 d5 3a 65 31 0b 84 9e 00 fd d5 7a 95 3a 5c 24 b7 8e a9 93 30 96 5d d3 27 50 ee 53 d5 3a 3a 87 72 6e a3 a4 74 32 75 2a 3a 94 74 32 ee 9d 49 d0 cb ba 9e 93 d4 39 94 a7 47 50 e6 5d d4 e5 3d 40 cb 7f 14 c9 98 54 e7 db c7 c9 32 66 15 3a 45 31 09 82 d2 3f 9e ea d1 12 d2 21 9d 33 ae 0e bf 75 a4 43 7a 74 46 1a c7 51 d4 32 56 1d 1b ef 37 5d 5b e2 15 a6 9d c7 4d 2f c7 16 ab da 32 a5 b2 31 b2 31 dc 4c 78 05 a7 62 b9 26 b3 0f cc 9a 74 9e 5d d4 74 8c c3 ff d5 f6 0f a9 6c 6c 7c 8f 36 6b 01 2e 3b 0d 57 d0 c4 71 f6 f0 42 29 32 f1 2f ab 7d 55 44 93 3f f5 9d 07 41 e0 17 64 f1 f5 1d 3f 4a 94 ea 3a 69 40 f3 a6 ff 00 b2 ca 68 ca f0 d3 8d f6 b2 a6 18 4d 4c 36 53 e8 ab 34 65 30 b8 4a Data Ascii: =[avog1.{tu:e1z:\$0]'PS::rnt2u*:t2I9GP]=@T2f:E1?!3uCztFQ2V7][M/211Lxb&t]tll\|6k.;WqB)2/}UD?Ad?J:i@hML6S4e0J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.6	59160	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:18 UTC	610	OUT	GET /rsrc.php/v3i9Jf4/yX/l/en_GB/l0OMkD_OPg7.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:18 UTC	1981	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: e8JJ6PCcbWxjNnlaJM+jXA== Expires: Sun, 25 May 2025 11:30:20 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: yaF9q4We/QKRfeZcHMLnWj0R39z5UAZ1vNS7KNe54Rzq3aF72rVXs1QazCs1xuw2eveSodP6dW0lLZt0ELfDSg== Date: Sat, 25 May 2024 23:00:18 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 37399
2024-05-25 23:00:18 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-05-25 23:00:18 UTC	15825	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 41 72 72 6f 77 4c 65 66 74 4f 75 74 6c 69 6e 65 32 34 2e 73 76 67 2e 72 65 61 63 74 22 2c 5b 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 72 65 74 75 72 6e 20 69 2e 6a 73 78 73 28 22 73 76 67 22 2c 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 76 69 65 77 42 6f 78 3a 22 30 20 30 20 32 34 20 32 34 22 2c 77 69 64 74 68 3a 22 31 65 6d 22 2c 68 65 69 67 68 74 3a 22 31 65 6d 22 2c 66 69 6c 6c 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 7d 2c 61 2c 7b 63 68 69 6c Data Ascii: /FB_PKG_DELIM/__d("ArrowLeftOutline24.svg.react",["react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react");function a(a){return i.jsxs("svg",babelHelpers["extends"]({viewBox:"0 0 24 24",width:"1em",height:"1em",fill:"currentColor"},a,{chil
2024-05-25 23:00:18 UTC	16384	IN	Data Raw: 69 75 73 3a 22 78 31 34 79 6a 6c 39 68 22 2c 62 6f 72 64 65 72 54 6f 70 45 6e 64 52 61 64 69 75 73 3a 22 78 75 64 68 6a 39 31 22 2c 62 6f 72 64 65 72 42 6f 74 74 6f 6d 45 6e 64 52 61 64 69 75 73 3a 22 78 31 38 6e 79 6b 74 39 22 2c 62 6f 72 64 65 72 42 6f 74 74 6f 6d 53 74 61 72 74 52 61 64 69 75 73 3a 22 78 77 77 32 67 78 75 22 2c 68 65 69 67 68 74 3a 22 78 76 6e 68 32 78 22 2c 6d 69 6e 57 69 64 74 68 3a 22 78 31 67 30 71 33 79 68 22 2c 24 24 63 73 73 3a 21 30 7d 2c 69 6e 73 65 74 3a 7b 62 6f 78 53 68 61 64 6f 77 3a 22 78 6c 67 39 61 39 79 22 2c 70 6f 73 69 74 69 6f 6e 3a 22 78 31 30 6c 36 74 71 6b 22 2c 73 74 61 72 74 3a 22 78 31 37 71 6f 70 68 65 22 2c 6c 65 66 74 3a 6e 75 6c 6c 2c 72 69 67 68 74 3a 6e 75 6c 6c 2c 74 6f 70 3a 22 78 31 33 76 69 66 76 79 Data Ascii: ius:"x14yjl9h",borderTopEndRadius:"xudhj91",borderBottomEndRadius:"x18nykt9",borderBottomStartRadius:"xww2gxu",height:"xvnh2x",minWidth:"x1g0q3yh",$$css:!0},inset:{boxShadow:"xlg9a9y",position:"x10l6tqk",start:"x17qophe",left:null,right:null,top:"x13vifvy
2024-05-25 23:00:18 UTC	5189	IN	Data Raw: 72 3a 38 38 32 38 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 64 28 22 51 45 32 4c 6f 67 67 65 72 22 29 2e 6c 6f 67 45 78 70 6f 73 75 72 65 46 6f 72 55 73 65 72 28 22 66 62 74 5f 6a 73 5f 70 65 72 66 6f 72 6d 61 6e 63 65 5f 74 65 73 74 69 6e 67 22 29 3b 61 3d 62 28 22 63 72 3a 31 32 39 30 22 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 62 28 22 63 72 3a 31 32 39 30 22 29 2e 4a 48 61 73 68 54 6f 53 61 6d 70 6c 65 52 61 74 65 3b 63 3d 62 28 22 63 72 3a 31 30 39 34 39 30 37 22 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 62 28 22 63 72 3a 31 30 39 34 39 30 37 22 29 2e 6c 6f 67 49 6d 70 72 65 73 73 69 6f 6e 3b 65 3d 62 28 22 63 72 3a 38 38 32 38 22 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 Data Ascii: r:8828"],(function(a,b,c,d,e,f,g){"use strict";d("QE2Logger").logExposureForUser("fbt_js_performance_testing");a=b("cr:1290")==null?void 0:b("cr:1290").JHashToSampleRate;c=b("cr:1094907")==null?void 0:b("cr:1094907").logImpression;e=b("cr:8828")==null?voi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.6	59159	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:18 UTC	654	OUT	GET /rsrc.php/v3ibq64/y8/l/en_GB/2u2m0bPYW-ex3hM69KLNaEmM84SfiWlvqERz6pNGhHp816BNgeKisvr.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:18 UTC	1981	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: /vcm9R542OXgGU3NkUbZzw== Expires: Sun, 25 May 2025 23:00:18 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: N3ncLQ/9h0KGCmJ5Ei+h6eFWS+7V7EQs2cUlMuHhBQ4XM5SgvOFwyLptqkIwK+F5UMSuK5bRScwLMSnjUIj6pw== Date: Sat, 25 May 2024 23:00:18 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=42, ullat=1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 81139
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 42 61 73 65 44 61 74 61 45 6e 74 72 79 4b 65 79 42 75 69 6c 64 65 72 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 61 3d 61 2e 6b 65 79 3b 72 65 74 75 72 6e 20 61 2e 74 72 69 6d 4c 65 66 74 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 66 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 36 36 29 3b 0a 5f 5f 64 28 22 73 65 61 72 63 68 42 61 73 65 54 79 70 65 61 68 65 61 64 54 61 6b 65 4e 45 6e 74 72 69 65 73 46 72 6f 6d 53 65 63 74 69 6f 6e 65 64 45 6e 74 72 69 65 73 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 Data Ascii: ;/FB_PKG_DELIM/__d("BaseDataEntryKeyBuilder",[],(function(a,b,c,d,e,f){"use strict";function a(a){a=a.key;return a.trimLeft().toLowerCase()}f["default"]=a}),66);__d("searchBaseTypeaheadTakeNEntriesFromSectionedEntries",[],(function(a,b,c,d,e,f){"use
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 68 43 6f 6e 74 65 78 74 22 2c 5b 22 65 6d 70 74 79 46 75 6e 63 74 69 6f 6e 22 2c 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 3b 61 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 62 3d 61 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 7b 66 65 74 63 68 3a 63 28 22 65 6d 70 74 79 46 75 6e 63 74 69 6f 6e 22 29 2c 69 73 4c 6f 61 64 69 6e 67 3a 21 31 2c 72 65 66 65 74 63 68 3a 63 28 22 65 6d 70 74 79 46 75 6e 63 74 69 6f 6e 22 29 2c 73 6f 75 72 63 65 3a 22 61 6c 6c 22 7d 29 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 62 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 54 79 70 65 61 68 65 61 64 50 72 6f 67 72 65 73 73 47 6c 69 6d 6d 65 72 2e 72 65 61 Data Ascii: hContext",["emptyFunction","react"],(function(a,b,c,d,e,f,g){"use strict";var h;a=h\|\|d("react");b=a.createContext({fetch:c("emptyFunction"),isLoading:!1,refetch:c("emptyFunction"),source:"all"});g["default"]=b}),98);__d("CometTypeaheadProgressGlimmer.rea
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 70 68 61 73 69 7a 65 64 3a 7b 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 78 6c 68 65 36 65 63 22 2c 24 24 63 73 73 3a 21 30 7d 2c 63 6f 6e 74 65 6e 74 52 6f 6f 74 48 6f 76 65 72 3a 7b 22 3a 68 6f 76 65 72 5f 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 78 38 64 75 35 32 79 22 2c 24 24 63 73 73 3a 21 30 7d 2c 70 72 65 73 73 61 62 6c 65 3a 7b 77 69 64 74 68 3a 22 78 68 38 79 65 6a 33 22 2c 24 24 63 73 73 3a 21 30 7d 2c 70 72 65 73 73 61 62 6c 65 57 69 74 68 41 64 64 69 74 69 6f 6e 61 6c 45 6e 64 43 6f 6e 74 65 6e 74 3a 7b 66 6c 65 78 47 72 6f 77 3a 22 78 31 69 79 6a 71 6f 32 22 2c 66 6c 65 78 53 68 72 69 6e 6b 3a 22 78 73 38 33 6d 30 6b 22 2c 24 24 63 73 73 3a 21 30 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 76 61 72 20 62 3d 61 2e Data Ascii: phasized:{backgroundColor:"xlhe6ec",$$css:!0},contentRootHover:{":hover_backgroundColor":"x8du52y",$$css:!0},pressable:{width:"xh8yej3",$$css:!0},pressableWithAdditionalEndContent:{flexGrow:"x1iyjqo2",flexShrink:"xs83m0k",$$css:!0}};function a(a){var b=a.
2024-05-25 23:00:18 UTC	1182	IN	Data Raw: 3a 5b 70 21 3d 6e 75 6c 6c 3f 6a 2e 6a 73 78 28 63 28 22 43 6f 6d 65 74 52 6f 77 49 74 65 6d 2e 72 65 61 63 74 22 29 2c 7b 63 68 69 6c 64 72 65 6e 3a 6a 2e 6a 73 78 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 78 31 34 79 6a 6c 39 68 20 78 75 64 68 6a 39 31 20 78 31 38 6e 79 6b 74 39 20 78 77 77 32 67 78 75 22 2c 63 68 69 6c 64 72 65 6e 3a 70 7d 29 7d 29 3a 6e 75 6c 6c 2c 6a 2e 6a 73 78 28 63 28 22 43 6f 6d 65 74 52 6f 77 49 74 65 6d 2e 72 65 61 63 74 22 29 2c 7b 65 78 70 61 6e 64 69 6e 67 3a 21 30 2c 63 68 69 6c 64 72 65 6e 3a 64 7d 29 2c 6f 21 3d 6e 75 6c 6c 3f 6a 2e 6a 73 78 28 63 28 22 43 6f 6d 65 74 52 6f 77 49 74 65 6d 2e 72 65 61 63 74 22 29 2c 7b 63 68 69 6c 64 72 65 6e 3a 6f 7d 29 3a 6e 75 6c 6c 5d 7d 29 7d 29 2c 62 2c 6a 2e 6a 73 78 Data Ascii: :[p!=null?j.jsx(c("CometRowItem.react"),{children:j.jsx("div",{className:"x14yjl9h xudhj91 x18nykt9 xww2gxu",children:p})}):null,j.jsx(c("CometRowItem.react"),{expanding:!0,children:d}),o!=null?j.jsx(c("CometRowItem.react"),{children:o}):null]})}),b,j.jsx
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 29 29 3a 6e 75 6c 6c 7d 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 61 2e 6e 61 6d 65 2b 22 20 5b 66 72 6f 6d 20 22 2b 66 2e 69 64 2b 22 5d 22 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 54 79 70 65 61 68 65 61 64 56 69 65 77 4c 69 73 74 53 74 72 61 74 65 67 79 2e 72 65 61 63 74 22 2c 5b 22 43 6f 6d 65 74 54 79 70 65 61 68 65 61 64 56 69 65 77 4c 69 73 74 2e 72 65 61 63 74 22 2c 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 76 61 72 20 62 3d 61 2e 61 72 69 61 50 72 6f 70 73 2c 64 3d 61 2e 65 6e 74 72 69 Data Ascii: )):null}a.displayName=a.name+" [from "+f.id+"]";g["default"]=a}),98);__d("CometTypeaheadViewListStrategy.react",["CometTypeaheadViewList.react","react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react");function a(a){var b=a.ariaProps,d=a.entri
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 76 65 6e 74 73 2e 4c 45 56 45 4c 5f 30 5f 50 41 47 45 52 5f 43 4c 49 43 4b 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 64 28 22 43 6f 6d 65 74 55 46 49 46 75 6e 6e 65 6c 4c 6f 67 67 65 72 43 6f 6e 73 74 61 6e 74 73 22 29 2e 43 6f 6d 65 74 55 46 49 46 75 6e 6e 65 6c 4c 6f 67 67 65 72 45 76 65 6e 74 73 2e 4c 45 56 45 4c 5f 31 5f 50 41 47 45 52 5f 43 4c 49 43 4b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 64 28 22 43 6f 6d 65 74 55 46 49 46 75 6e 6e 65 6c 4c 6f 67 67 65 72 43 6f 6e 73 74 61 6e 74 73 22 29 2e 43 6f 6d 65 74 55 46 49 46 75 6e 6e 65 6c 4c 6f 67 67 65 72 45 76 65 6e 74 73 2e 4c 45 56 45 4c 5f 32 5f 50 41 47 45 52 5f 43 4c 49 43 4b 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 61 29 7b 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 22 31 36 33 35 38 35 35 Data Ascii: vents.LEVEL_0_PAGER_CLICK;case 1:return d("CometUFIFunnelLoggerConstants").CometUFIFunnelLoggerEvents.LEVEL_1_PAGER_CLICK;case 2:return d("CometUFIFunnelLoggerConstants").CometUFIFunnelLoggerEvents.LEVEL_2_PAGER_CLICK}}function m(a){switch(a){case"1635855
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 62 3d 22 4e 45 55 54 52 41 4c 22 3b 76 61 72 20 68 3d 22 4c 54 52 22 2c 69 3d 22 52 54 4c 22 3b 66 75 6e 63 74 69 6f 6e 20 6a 28 61 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 68 7c 7c 61 3d 3d 3d 69 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 69 66 28 21 6a 28 61 29 29 74 68 72 6f 77 20 63 28 22 75 6e 72 65 63 6f 76 65 72 61 62 6c 65 56 69 6f 6c 61 74 69 6f 6e 22 29 28 22 60 64 69 72 60 20 6d 75 73 74 20 62 65 20 61 20 73 74 72 6f 6e 67 20 64 69 72 65 63 74 69 6f 6e 20 74 6f 20 62 65 20 63 6f 6e 76 65 72 74 65 64 20 74 6f 20 48 54 4d 4c 20 44 69 72 65 63 74 69 6f 6e 22 2c 22 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 3d 3d 3d 68 3f 22 6c Data Ascii: c,d,e,f,g){"use strict";b="NEUTRAL";var h="LTR",i="RTL";function j(a){return a===h\|\|a===i}function k(a){if(!j(a))throw c("unrecoverableViolation")("`dir` must be a strong direction to be converted to HTML Direction","internationalization");return a===h?"l
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 63 6f 76 65 72 61 62 6c 65 56 69 6f 6c 61 74 69 6f 6e 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 3d 7b 4c 3a 22 41 2d 5a 61 2d 7a 5c 78 61 61 5c 78 62 35 5c 78 62 61 5c 78 63 30 2d 5c 78 64 36 5c 78 64 38 2d 5c 78 66 36 5c 78 66 38 2d 5c 75 30 32 62 38 5c 75 30 32 62 62 2d 5c 75 30 32 63 31 5c 75 30 32 64 30 5c 75 30 32 64 31 5c 75 30 32 65 30 2d 5c 75 30 32 65 34 5c 75 30 32 65 65 5c 75 30 33 37 30 2d 5c 75 30 33 37 33 5c 75 30 33 37 36 5c 75 30 33 37 37 5c 75 30 33 37 61 2d 5c 75 30 33 37 64 5c 75 30 33 37 66 5c 75 30 33 38 36 5c 75 30 33 38 38 2d 5c 75 30 33 38 61 5c 75 30 33 38 63 5c 75 30 33 38 65 2d 5c 75 30 33 61 31 5c 75 30 33 61 33 2d 5c 75 30 33 66 35 5c 75 30 33 Data Ascii: coverableViolation"],(function(a,b,c,d,e,f,g){"use strict";e={L:"A-Za-z\xaa\xb5\xba\xc0-\xd6\xd8-\xf6\xf8-\u02b8\u02bb-\u02c1\u02d0\u02d1\u02e0-\u02e4\u02ee\u0370-\u0373\u0376\u0377\u037a-\u037d\u037f\u0386\u0388-\u038a\u038c\u038e-\u03a1\u03a3-\u03f5\u03
2024-05-25 23:00:18 UTC	905	IN	Data Raw: 5c 75 30 63 64 65 5c 75 30 63 65 30 5c 75 30 63 65 31 5c 75 30 63 65 36 2d 5c 75 30 63 65 66 5c 75 30 63 66 31 5c 75 30 63 66 32 5c 75 30 64 30 32 5c 75 30 64 30 33 5c 75 30 64 30 35 2d 5c 75 30 64 30 63 5c 75 30 64 30 65 2d 5c 75 30 64 31 30 5c 75 30 64 31 32 2d 5c 75 30 64 33 61 5c 75 30 64 33 64 2d 5c 75 30 64 34 30 5c 75 30 64 34 36 2d 5c 75 30 64 34 38 5c 75 30 64 34 61 2d 5c 75 30 64 34 63 5c 75 30 64 34 65 5c 75 30 64 35 37 5c 75 30 64 36 30 5c 75 30 64 36 31 5c 75 30 64 36 36 2d 5c 75 30 64 37 35 5c 75 30 64 37 39 2d 5c 75 30 64 37 66 5c 75 30 64 38 32 5c 75 30 64 38 33 5c 75 30 64 38 35 2d 5c 75 30 64 39 36 5c 75 30 64 39 61 2d 5c 75 30 64 62 31 5c 75 30 64 62 33 2d 5c 75 30 64 62 62 5c 75 30 64 62 64 5c 75 30 64 63 30 2d 5c 75 30 64 63 36 5c 75 Data Ascii: \u0cde\u0ce0\u0ce1\u0ce6-\u0cef\u0cf1\u0cf2\u0d02\u0d03\u0d05-\u0d0c\u0d0e-\u0d10\u0d12-\u0d3a\u0d3d-\u0d40\u0d46-\u0d48\u0d4a-\u0d4c\u0d4e\u0d57\u0d60\u0d61\u0d66-\u0d75\u0d79-\u0d7f\u0d82\u0d83\u0d85-\u0d96\u0d9a-\u0db1\u0db3-\u0dbb\u0dbd\u0dc0-\u0dc6\u
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 39 30 2d 5c 75 31 32 62 30 5c 75 31 32 62 32 2d 5c 75 31 32 62 35 5c 75 31 32 62 38 2d 5c 75 31 32 62 65 5c 75 31 32 63 30 5c 75 31 32 63 32 2d 5c 75 31 32 63 35 5c 75 31 32 63 38 2d 5c 75 31 32 64 36 5c 75 31 32 64 38 2d 5c 75 31 33 31 30 5c 75 31 33 31 32 2d 5c 75 31 33 31 35 5c 75 31 33 31 38 2d 5c 75 31 33 35 61 5c 75 31 33 36 30 2d 5c 75 31 33 37 63 5c 75 31 33 38 30 2d 5c 75 31 33 38 66 5c 75 31 33 61 30 2d 5c 75 31 33 66 34 5c 75 31 34 30 31 2d 5c 75 31 36 37 66 5c 75 31 36 38 31 2d 5c 75 31 36 39 61 5c 75 31 36 61 30 2d 5c 75 31 36 66 38 5c 75 31 37 30 30 2d 5c 75 31 37 30 63 5c 75 31 37 30 65 2d 5c 75 31 37 31 31 5c 75 31 37 32 30 2d 5c 75 31 37 33 31 5c 75 31 37 33 35 5c 75 31 37 33 36 5c 75 31 37 34 30 2d 5c 75 31 37 35 31 5c 75 31 37 36 30 2d Data Ascii: 90-\u12b0\u12b2-\u12b5\u12b8-\u12be\u12c0\u12c2-\u12c5\u12c8-\u12d6\u12d8-\u1310\u1312-\u1315\u1318-\u135a\u1360-\u137c\u1380-\u138f\u13a0-\u13f4\u1401-\u167f\u1681-\u169a\u16a0-\u16f8\u1700-\u170c\u170e-\u1711\u1720-\u1731\u1735\u1736\u1740-\u1751\u1760-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.6	59168	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:18 UTC	758	OUT	GET /m1/v/t6/An-V1eo7VQ3O9lqK2f9nfo3p019W0b_BTfQk8m_WliRJfm8Ss0I6dO39oKJmajreEZ2Oy5vSrTbDg0GpAgj0NSk-Eu5PWtSAd1gv.kf?ccb=10-5&oh=00_AYCD1VWQBamFCQirp7gVQT2iYvcacClMWPJi8f1p3bpxjA&oe=6679CDF1&_nc_sid=7da55a HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:18 UTC	951	IN	HTTP/1.1 200 OK content-digest: adler32=1456939275 Content-Type: image/x.fb.keyframes ETag: -4149138764619414100 x-manifold-obj-blobsizebytes: 8724 x-manifold-obj-canonicalpath: flat/base:v7:love.kf x-manifold-obj-ctime: 1611967371 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"1678524932434102","color":"f33e58","__ctime":"1611967371","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:18 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 8724
2024-05-25 23:00:18 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 00 00 16 00 24 00 10 00 1c 00 18 00 04 00 0c 00 08 00 00 00 00 00 20 00 16 00 00 00 05 00 00 00 1c 00 00 00 ac 11 00 00 00 00 34 43 00 00 34 43 00 00 40 40 00 00 70 42 01 00 00 00 01 00 00 00 0c 00 00 00 08 00 10 00 08 00 04 00 08 00 00 00 0c 00 00 00 00 00 34 43 00 00 34 43 6d 11 00 00 ff d8 ff db 00 84 00 01 01 01 01 01 01 01 01 01 01 02 01 01 01 02 02 02 01 01 02 02 02 02 02 02 02 02 02 03 02 03 03 03 03 02 03 03 04 04 04 04 04 03 05 05 05 05 05 05 07 07 07 07 07 08 08 08 08 08 08 08 08 08 08 01 01 01 01 02 02 02 05 03 03 05 07 05 04 05 07 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 ff dd 00 04 00 17 ff ee 00 0e 41 64 6f 62 65 00 Data Ascii: KEYF$ 4C4C@@pB4C4CmAdobe
2024-05-25 23:00:18 UTC	7223	IN	Data Raw: 18 e9 66 0c 74 b3 06 3a 59 87 37 c6 ef f3 4b 30 e0 e8 a0 85 26 52 78 42 8b 10 1a a5 b1 3f 35 34 cb f4 34 3f 05 2d 99 e1 67 c0 f8 87 33 22 4a bc f8 a1 f8 a1 ff 00 a9 eb ea ac 74 df 1c af b1 d5 b6 f0 ff d6 f6 7c 6a 7b 0e 54 42 07 c5 1c d3 fe 46 a7 f6 5f c4 27 a7 d4 27 7c fe 94 72 b1 05 45 d4 b7 28 e1 7b 06 28 0d 14 f8 2b 12 e9 1f 38 4e 6c 60 07 54 b6 e3 87 66 46 1a d9 5b 30 e9 8f 74 b3 06 3d d2 cc 18 f7 4b 30 63 dd 2c c1 8f 74 b3 06 3d d2 cc 18 f7 4b 30 63 dd 2c c1 8f 74 b3 06 3d d2 cc 18 f7 4b 30 63 dd 2c c3 18 e1 2c c3 81 8f de bd 54 b3 0e 11 22 8f 9a 5b 33 f3 54 cc c4 ea 2b d9 4b 62 7e 6a d9 79 dc ac e4 28 b5 a3 41 a3 ff 00 d4 e8 52 25 39 e6 a5 ed f1 c6 eb 56 ed 87 ff d7 93 c5 e6 f1 27 04 3a e9 09 a0 52 e7 c4 57 f0 a9 eb f6 fa 8b fa 73 fb 25 e2 d2 94 3a Data Ascii: ft:Y7K0&RxB?544?-g3"Jt\|j{TBF_''\|rE({(+8Nl`TfF[0t=K0c,t=K0c,t=K0c,,T"[3T+Kb~jy(AR%9V':RWs%:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.6	59167	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:18 UTC	762	OUT	GET /m1/v/t6/An8KSKhioMIUVSZ4NYh8JnAchGmGQVDA71Hulkn5JQZsO-ejSYcV2dWPMQo-ZhSa71MfFqgrDHlCASWFxgbtV3pYQqVdSus0zicQO6_n.kf?ccb=10-5&oh=00_AYBqYbL3ALTjJ1h94lclEKfUjjeQfC87MNxEvAtaFkcicg&oe=6679D166&_nc_sid=7da55a HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:18 UTC	953	IN	HTTP/1.1 200 OK content-digest: adler32=2160514895 Content-Type: image/x.fb.keyframes ETag: 7343664923330879133 x-manifold-obj-blobsizebytes: 6756 x-manifold-obj-canonicalpath: flat/base:v7:dorothy.kf x-manifold-obj-ctime: 1611967366 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"1663186627268800","color":"7e64c4","__ctime":"1611967366","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:18 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=33, rtx=0, c=14, mss=1392, tbw=3412, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 6756
2024-05-25 23:00:18 UTC	1	IN	Data Raw: 18 Data Ascii:
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 10 00 1a 00 08 00 14 00 10 00 00 00 04 00 00 00 10 00 00 00 40 00 00 00 00 00 31 43 00 00 31 43 ab aa 22 40 00 00 c0 41 00 00 2a 00 08 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2a 00 00 00 04 00 00 00 01 00 00 00 30 00 00 00 00 00 2a 00 1c 00 18 00 04 00 00 00 00 00 14 00 10 00 0c 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2a 00 00 00 48 00 00 00 14 00 00 00 24 00 00 00 28 00 00 00 2c 00 00 00 01 00 00 00 70 e7 ff ff 04 00 00 00 6c e6 ff ff 9a 99 b9 3f 9a 99 b9 3f 84 e7 ff ff 00 00 b1 42 8c e7 ff ff 00 00 b1 42 94 e7 ff ff 04 00 00 00 88 e7 ff ff 09 00 00 00 0c 16 00 00 f8 12 00 00 10 10 00 00 28 0d 00 00 40 0a 00 00 58 07 00 00 Data Ascii: KEYF@1C1C"@A0H$(,pl??BB(@X
2024-05-25 23:00:18 UTC	5255	IN	Data Raw: 00 00 00 10 00 00 00 94 eb ff ff aa 00 c0 3e ab aa 2a 3f 48 ee ff ff ab aa 2a 3e 72 ee ff ff 08 00 00 00 10 00 00 00 b4 eb ff ff 00 00 80 3f ab aa 2a 3f 68 ee ff ff ab aa aa 3e 92 ee ff ff 08 00 00 00 10 00 00 00 d4 eb ff ff 00 00 80 3f ab aa 2a 3f e0 eb ff ff 8e ff 7f 3e ab aa aa 3e f8 ec ff ff 04 00 00 00 f4 eb ff ff 48 e1 3a 3f 48 e1 3a 3f 0c ed ff ff d0 9d c5 40 14 ed ff ff c0 1a 5f c0 1c ed ff ff 04 00 00 00 18 ec ff ff 94 e3 8d 3e b7 f2 2e 41 02 00 00 00 d4 00 00 00 04 00 00 00 ae ed ff ff 18 00 00 00 24 00 00 00 28 00 00 00 2c 00 00 00 34 00 00 00 0d 00 00 00 58 ed ff ff 04 00 00 00 84 ed ff ff 00 d2 87 9d 68 ed ff ff 02 ef ac 40 70 ed ff ff cf 75 be 3f 78 ed ff ff 04 00 00 00 6c ed ff ff 84 ed ff ff 04 00 00 00 56 ed ff ff 04 00 00 00 03 00 00 00 Data Ascii: >?H>r??h>??>>H:?H:?@_>.A$(,4Xh@pu?xlV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.6	59162	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:18 UTC	599	OUT	GET /rsrc.php/v3/yF/r/sIUfioK8p73.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:18 UTC	1981	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: pXufdkti4TGuNnasHNugeQ== Expires: Fri, 23 May 2025 05:52:30 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: NefEJmLcOEEQsuLbF3DSlEK1dtzeEktWqCcoZ2H+yhLm0NWJqU/JlTf8XbcNDx9phx6DZXaPicX1FwWMekhdGA== Date: Sat, 25 May 2024 23:00:18 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3410, tp=-1, tpl=-1, uplat=3, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 52409
2024-05-25 23:00:18 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-05-25 23:00:18 UTC	15835	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 42 69 6e 61 72 79 53 65 61 72 63 68 22 2c 5b 22 75 6e 72 65 63 6f 76 65 72 61 62 6c 65 56 69 6f 6c 61 74 69 6f 6e 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 3d 7b 47 52 45 41 54 45 53 54 5f 4c 4f 57 45 52 5f 42 4f 55 4e 44 3a 22 47 52 45 41 54 45 53 54 5f 4c 4f 57 45 52 5f 42 4f 55 4e 44 22 2c 47 52 45 41 54 45 53 54 5f 53 54 52 49 43 54 5f 4c 4f 57 45 52 5f 42 4f 55 4e 44 3a 22 47 52 45 41 54 45 53 54 5f 53 54 52 49 43 54 5f 4c 4f 57 45 52 5f 42 4f 55 4e 44 22 2c 4c 45 41 53 54 5f 53 54 52 49 43 54 5f 55 50 50 45 52 5f 42 4f 55 4e 44 3a 22 4c 45 41 53 54 5f 53 54 52 49 43 54 5f 55 50 50 45 52 5f 42 4f 55 Data Ascii: /FB_PKG_DELIM/__d("BinarySearch",["unrecoverableViolation"],(function(a,b,c,d,e,f,g){"use strict";e={GREATEST_LOWER_BOUND:"GREATEST_LOWER_BOUND",GREATEST_STRICT_LOWER_BOUND:"GREATEST_STRICT_LOWER_BOUND",LEAST_STRICT_UPPER_BOUND:"LEAST_STRICT_UPPER_BOU
2024-05-25 23:00:18 UTC	16384	IN	Data Raw: 57 65 62 53 74 6f 72 61 67 65 22 29 29 29 2e 73 65 74 49 74 65 6d 47 75 61 72 64 65 64 28 62 2c 6f 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 69 29 29 3b 72 65 74 75 72 6e 5b 65 2c 67 5d 7d 67 2e 70 61 73 73 46 75 6e 6e 65 6c 4c 65 76 65 6c 53 74 61 74 73 52 6f 6c 6c 6f 75 74 47 4b 3d 61 3b 67 2e 6f 6e 46 75 6e 6e 65 6c 53 74 61 72 74 3d 62 3b 67 2e 6f 6e 46 75 6e 6e 65 6c 43 61 6e 63 65 6c 3d 65 3b 67 2e 6f 6e 46 75 6e 6e 65 6c 45 6e 64 3d 66 3b 67 2e 6d 61 79 62 65 46 6c 75 73 68 46 75 6e 6e 65 6c 4c 65 76 65 6c 53 74 61 74 73 3d 44 3b 67 2e 69 6e 63 72 65 61 73 65 41 6e 64 47 65 74 4c 69 62 4c 65 76 65 6c 53 74 61 74 73 3d 45 3b 67 2e 6d 61 79 62 65 49 6e 63 72 65 61 73 65 41 6e 64 47 65 74 4c 69 62 4c 65 76 65 6c 53 74 61 74 73 46 6f 72 43 75 72 Data Ascii: WebStorage"))).setItemGuarded(b,o,JSON.stringify(i));return[e,g]}g.passFunnelLevelStatsRolloutGK=a;g.onFunnelStart=b;g.onFunnelCancel=e;g.onFunnelEnd=f;g.maybeFlushFunnelLevelStats=D;g.increaseAndGetLibLevelStats=E;g.maybeIncreaseAndGetLibLevelStatsForCur
2024-05-25 23:00:19 UTC	16384	IN	Data Raw: 61 6d 65 28 29 3b 64 26 26 28 62 5b 64 5d 3d 7b 69 6e 64 65 78 3a 63 2c 77 69 64 74 68 3a 61 5b 63 5d 2e 73 69 7a 65 28 29 2e 77 69 64 74 68 28 29 2c 68 65 69 67 68 74 3a 61 5b 63 5d 2e 73 69 7a 65 28 29 2e 68 65 69 67 68 74 28 29 7d 29 7d 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 63 2c 64 3d 61 2e 73 75 62 64 6f 63 75 6d 65 6e 74 73 4c 65 6e 67 74 68 28 29 2d 31 3b 64 3e 3d 30 3b 64 2d 2d 29 63 3d 61 2e 73 75 62 64 6f 63 75 6d 65 6e 74 73 28 64 29 2c 62 2e 75 6e 73 68 69 66 74 28 63 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 41 28 61 29 7b 61 3d 6b 28 61 29 3b 72 65 74 75 72 6e 21 61 3f 28 67 7c 7c 28 67 3d 62 28 22 50 72 6f 6d 69 73 65 22 29 29 29 2e 72 65 6a Data Ascii: ame();d&&(b[d]={index:c,width:a[c].size().width(),height:a[c].size().height()})}return b}function z(a){var b=[];for(var c,d=a.subdocumentsLength()-1;d>=0;d--)c=a.subdocuments(d),b.unshift(c);return b}function A(a){a=k(a);return!a?(g\|\|(g=b("Promise"))).rej
2024-05-25 23:00:19 UTC	3805	IN	Data Raw: 70 6c 61 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 24 31 36 7c 7c 28 74 68 69 73 2e 24 31 36 3d 21 30 2c 74 68 69 73 2e 69 73 46 69 6e 69 73 68 65 64 28 29 26 26 28 74 68 69 73 2e 24 31 39 3d 74 68 69 73 2e 24 31 38 2c 74 68 69 73 2e 24 31 31 3d 74 68 69 73 2e 24 32 32 29 2c 74 68 69 73 2e 24 31 35 26 26 74 68 69 73 2e 24 31 35 2e 73 74 61 72 74 28 29 2c 74 68 69 73 2e 24 37 2e 73 74 61 72 74 28 29 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 65 2e 70 61 75 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 24 31 36 26 26 28 74 68 69 73 2e 24 31 36 3d 21 31 2c 74 68 69 73 2e 24 31 35 26 26 74 68 69 73 2e 24 31 35 2e 70 61 75 73 65 28 29 2c 74 68 69 73 2e 24 39 3f 74 68 69 73 2e 24 32 38 28 29 3a 28 74 68 69 73 2e 24 37 2e 63 61 6e 63 65 Data Ascii: play=function(){this.$16\|\|(this.$16=!0,this.isFinished()&&(this.$19=this.$18,this.$11=this.$22),this.$15&&this.$15.start(),this.$7.start());return this};e.pause=function(){this.$16&&(this.$16=!1,this.$15&&this.$15.pause(),this.$9?this.$28():(this.$7.cance

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.6	59164	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:18 UTC	760	OUT	GET /m1/v/t6/An8UpDtYTxwRfyFUAQkYpPLVzCcFZAyT58b4mM9QRn-9IZWdHfcWsX1lOuHAsupZu8HCFEX8uobe6VdR6H9B8v2Z_FzSMfB8MYN36w.kf?ccb=10-5&oh=00_AYDhgEWS6D0RLo0qvx9TQgxPypbSC1GdW-PLYRKR1wPKAw&oe=6679EC30&_nc_sid=7da55a HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:18 UTC	917	IN	HTTP/1.1 200 OK Content-Type: image/x.fb.keyframes ETag: 1488915451716286797 x-manifold-obj-blobsizebytes: 151112 x-manifold-obj-canonicalpath: flat/base:v7:toto.kf x-manifold-obj-ctime: 1611967375 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"899779720071651","color":"ec7ebd","__ctime":"1611967375","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:18 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 151112
2024-05-25 23:00:18 UTC	1	IN	Data Raw: 18 Data Ascii:
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 10 00 1a 00 08 00 14 00 10 00 00 00 04 00 00 00 10 00 00 00 40 00 00 00 00 00 d2 43 00 00 d2 43 55 55 a5 3f 00 00 c0 41 00 00 2a 00 08 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2a 00 00 00 04 00 00 00 06 00 00 00 94 ec 01 00 84 88 01 00 90 25 01 00 d4 c3 00 00 b0 63 00 00 04 00 00 00 ae 13 fe ff 24 00 00 00 30 00 00 00 34 00 00 00 34 00 00 00 44 00 00 00 48 00 00 00 4c 00 00 00 54 00 00 00 01 00 00 00 2c 13 fe ff 04 00 00 00 84 13 fe ff 00 c0 64 7b 3c 13 fe ff 00 00 80 3f 78 13 fe ff 48 13 fe ff 04 00 00 00 98 b2 fd ff 00 00 80 3f 00 00 80 3f 5c 13 fe ff 00 00 52 43 64 13 fe ff 00 00 52 43 6c 13 fe ff 04 00 00 00 60 13 fe ff 58 13 fe ff 0c 00 00 00 84 00 00 00 Data Ascii: KEYF@CCUU?A**%c$044DHLT,d{<?xH??\RCdRCl`X
2024-05-25 23:00:18 UTC	16332	IN	Data Raw: 00 33 43 04 b8 fd ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 c0 b7 fd ff 38 6f de 42 7c 26 50 43 cc b7 fd ff 78 3a ff 42 86 99 4f 43 d8 b7 fd ff 00 00 da 42 00 00 4e 43 3c b8 fd ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 f8 b7 fd ff 1e c6 0e 43 fa b9 50 43 04 b8 fd ff cc 3b 17 43 38 56 50 43 10 b8 fd ff 00 00 05 43 00 00 50 43 30 b8 fd ff 04 00 00 00 24 b8 fd ff 00 00 1d 43 00 00 52 43 fa ba fd ff 04 00 00 00 0f 00 00 00 4c 03 00 00 10 03 00 00 d4 02 00 00 98 02 00 00 5c 02 00 00 20 02 00 00 e4 01 00 00 a8 01 00 00 6c 01 00 00 30 01 00 00 f4 00 00 00 b8 00 00 00 7c 00 00 00 40 00 00 00 04 00 00 00 d0 b8 fd ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 8c b8 fd ff aa aa 1d 43 00 00 52 43 98 b8 fd ff 56 55 1e 43 00 00 52 43 a4 b8 fd ff Data Ascii: 3C 8oB\|&PCx:BOCBNC< CPC;C8VPCCPC0$CRCL\ l0\|@ CRCVUCRC
2024-05-25 23:00:18 UTC	16384	IN	Data Raw: f7 fd ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 88 f7 fd ff 00 1d 39 43 22 d0 af c2 94 f7 fd ff b4 90 3e 43 ee 58 c9 c2 a0 f7 fd ff 00 00 34 43 02 00 9a c2 04 f8 fd ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 c0 f7 fd ff 78 ee 43 43 a8 7c ff c2 cc f7 fd ff 6a a9 49 43 1d 88 24 c3 d8 f7 fd ff 00 00 42 43 00 00 ec c2 3c f8 fd ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 f8 f7 fd ff 6c b5 41 43 89 36 2c c3 04 f8 fd ff 78 ab 30 43 b0 85 2b c3 10 f8 fd ff 00 00 44 43 00 00 2a c3 74 f8 fd ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 30 f8 fd ff ee bc 21 43 82 97 2c c3 3c f8 fd ff c4 ef 10 43 0d 2a 2e c3 48 f8 fd ff 00 00 2a 43 00 00 2c c3 ac f8 fd ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 68 f8 fd ff 82 26 0e 43 6a b3 2a c3 Data Ascii: 9C">CX4C xCC\|jIC$BC< lAC6,x0C+DCt 0!C,<C.HC, h&Cj
2024-05-25 23:00:18 UTC	16384	IN	Data Raw: 69 f2 41 14 a8 e0 42 7c 37 fe ff 58 21 8a 41 b4 52 0a 43 88 37 fe ff 00 00 40 42 00 00 b0 42 ec 37 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 a8 37 fe ff 30 d9 59 41 7e 8d 35 43 b4 37 fe ff 50 ba 2e 41 d4 5f 45 43 c0 37 fe ff 00 00 60 41 00 00 31 43 24 38 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 e0 37 fe ff 68 b6 87 41 fa 86 4a 43 ec 37 fe ff c0 c0 04 42 16 83 48 43 f8 37 fe ff 00 00 60 41 00 00 48 43 5c 38 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 18 38 fe ff e0 c0 3c 42 d2 83 49 43 24 38 fe ff 88 ca 7b 42 5e 0d 4d 43 30 38 fe ff 00 00 20 42 00 00 49 43 94 38 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 50 38 fe ff 58 a5 84 42 54 ad 49 43 5c 38 fe ff 98 54 81 42 44 fe 3b 43 68 38 fe ff 00 00 82 42 00 00 4b 43 Data Ascii: iAB\|7X!ARC7@BB7 70YA~5C7P.A_EC7`A1C$8 7hAJC7BHC7`AHC\8 8<BIC$8{B^MC08 BIC8 P8XBTIC\8TBD;Ch8BKC
2024-05-25 23:00:18 UTC	14935	IN	Data Raw: ef 3d 3f 8c 31 46 3f 9d 73 4e 3f ad b5 56 3f be f7 5e 3f ce 39 67 3f df 7b 6f 3f ef bd 77 3f 1f 00 00 00 48 5d 00 00 50 5a 00 00 58 57 00 00 24 54 00 00 f0 50 00 00 34 4e 00 00 00 4b 00 00 90 47 00 00 5c 44 00 00 64 41 00 00 30 3e 00 00 fc 3a 00 00 c8 37 00 00 94 34 00 00 24 31 00 00 2c 2e 00 00 f8 2a 00 00 c4 27 00 00 94 24 00 00 9c 21 00 00 e0 1e 00 00 70 1b 00 00 3c 18 00 00 44 15 00 00 d4 11 00 00 64 0e 00 00 a8 0b 00 00 ec 08 00 00 30 06 00 00 b0 03 00 00 f4 00 00 00 26 d6 fe ff 00 00 00 02 2e d6 fe ff 00 00 00 02 36 d6 fe ff 00 00 00 02 3e d6 fe ff 00 00 00 02 46 d6 fe ff 00 00 00 02 4e d6 fe ff 00 00 00 02 56 d6 fe ff 00 00 00 02 5e d6 fe ff 00 00 00 02 66 d6 fe ff 00 00 00 02 6e d6 fe ff 00 00 00 02 76 d6 fe ff 00 00 00 02 7e d6 fe ff 00 00 00 02 Data Ascii: =?1F?sN?V?^?9g?{o?w?H]PZXW$TP4NKG\DdA0>:74$1,.*'$!p<Dd0&.6>FNV^fnv~
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 24 b2 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 e0 b1 fe ff e8 7d b0 c1 cc bb 16 43 ec b1 fe ff 50 ef 88 c1 38 7e 27 43 f8 b1 fe ff 00 00 c8 c1 00 00 0a 43 5c b2 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 18 b2 fe ff a0 58 2b c1 10 2a 3c 43 24 b2 fe ff 20 d9 f4 c0 a2 89 45 43 30 b2 fe ff 00 00 40 c1 00 00 38 43 94 b2 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 50 b2 fe ff 00 70 2e c0 9a 08 49 43 5c b2 fe ff 50 23 59 41 ea 71 47 43 68 b2 fe ff 00 00 e0 c0 00 00 46 43 cc b2 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 88 b2 fe ff 70 1c f8 41 88 bf 48 43 94 b2 fe ff 30 63 1f 42 fc 03 49 43 a0 b2 fe ff 00 00 a8 41 00 00 48 43 c0 b2 fe ff 04 00 00 00 b4 b2 fe ff 00 00 40 42 00 00 4a 43 8a b5 fe ff 04 00 00 00 0e 00 00 Data Ascii: $ }CP8~'CC\ X+*<C$ EC0@8C Pp.IC\P#YAqGChFC pAHC0cBICAHC@BJC
2024-05-25 23:00:18 UTC	16333	IN	Data Raw: 8c e8 30 42 76 21 17 c3 b0 b7 fe ff 00 00 20 42 00 00 35 c3 14 b8 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 d0 b7 fe ff 4c 48 21 42 8e 30 c1 c2 dc b7 fe ff 88 24 a6 41 2c 99 98 c2 e8 b7 fe ff 00 00 2c 42 00 00 06 c3 4c b8 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 08 b8 fe ff 50 d0 87 c1 e8 43 bb c1 14 b8 fe ff 90 63 de c1 e0 51 98 40 20 b8 fe ff 00 00 00 40 00 00 48 c2 84 b8 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 40 b8 fe ff 1c 5c 0a c2 ac 7d b8 42 4c b8 fe ff 10 09 5a c1 d4 7f 0e 43 58 b8 fe ff 00 00 f8 c1 00 00 38 42 bc b8 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 78 b8 fe ff 00 04 32 be 00 0c 3b 43 84 b8 fe ff 00 c4 f4 3f 02 40 46 43 90 b8 fe ff 00 00 00 c0 00 00 35 43 f4 b8 fe ff 10 00 00 00 18 00 00 Data Ascii: 0Bv! B5 LH!B0$A,,BL PCcQ@ @H @\}BLZCX8B x2;C?@FC5C
2024-05-25 23:00:18 UTC	16384	IN	Data Raw: 5f ce c2 78 f7 fe ff 00 00 10 42 00 00 a0 41 dc f7 fe ff 10 00 00 00 18 00 00 00 28 00 00 00 00 00 00 03 98 f7 fe ff 80 56 d5 bf 92 85 25 c3 a4 f7 fe ff 00 44 93 c0 60 d7 36 c3 08 00 08 00 04 00 00 00 08 00 00 00 00 00 1f c3 18 f8 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 d4 f7 fe ff 60 98 14 c1 80 b9 3a c3 e0 f7 fe ff e0 17 d3 c1 ec 7c 39 c3 ec f7 fe ff 00 00 c0 c0 00 00 38 c3 50 f8 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 0c f8 fe ff d0 80 2a c2 c8 be 3a c3 18 f8 fe ff 88 74 4e c2 de e5 3a c3 24 f8 fe ff 00 00 04 c2 00 00 3a c3 44 f8 fe ff 04 00 00 00 38 f8 fe ff 00 00 6c c2 00 00 3c c3 0e fb fe ff 04 00 00 00 0e 00 00 00 10 03 00 00 d4 02 00 00 98 02 00 00 5c 02 00 00 20 02 00 00 e4 01 00 00 a8 01 00 00 6c 01 00 00 30 01 00 00 Data Ascii: _xBA(V%D`6 `:\|98P *:tN:$:D8l<\ l0
2024-05-25 23:00:19 UTC	16384	IN	Data Raw: 00 0d 43 8c 37 ff ff 04 00 00 00 80 37 ff ff 00 00 2c c2 00 00 44 43 56 3a ff ff 04 00 00 00 0e 00 00 00 10 03 00 00 d4 02 00 00 98 02 00 00 5c 02 00 00 20 02 00 00 e4 01 00 00 a8 01 00 00 6c 01 00 00 30 01 00 00 f4 00 00 00 b8 00 00 00 7c 00 00 00 40 00 00 00 04 00 00 00 28 38 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 e4 37 ff ff 5c 1e 2b c2 45 6e 43 43 f0 37 ff ff 10 27 06 c2 51 23 44 43 fc 37 ff ff 00 00 4c c2 01 00 43 43 60 38 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 1c 38 ff ff 00 f2 6d c1 59 88 45 43 28 38 ff ff 00 02 d1 3f b9 41 49 43 34 38 ff ff f8 ff af c1 01 00 45 43 98 38 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 54 38 ff ff 80 e6 29 41 fd 9c 44 43 60 38 ff ff 80 d9 6a 41 d5 d1 2f 43 6c 38 ff ff 20 00 c0 40 Data Ascii: C77,DCV:\ l0\|@(8 7\+EnCC7'Q#DC7LCC`8 8mYEC(8?AIC48EC8 T8)ADC`8jA/Cl8 @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.6	59165	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:18 UTC	757	OUT	GET /m1/v/t6/An8CYKC8XqtM-fkmXlVHrp9oVgPgDVVlGZu_Cy7Q_5xW9yYY3lOzMNVDCq9D1ThbbsbnpjfFmGnfIPhKX6oePvUMOYOvShQauKw.kf?ccb=10-5&oh=00_AYD07_nPxgbm5FmbefRT2bPhnCWwYTmoGZCLjK7qyYsc9A&oe=6679D5CB&_nc_sid=7da55a HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:18 UTC	951	IN	HTTP/1.1 200 OK content-digest: adler32=3371172350 Content-Type: image/x.fb.keyframes ETag: 9016135132004091149 x-manifold-obj-blobsizebytes: 45660 x-manifold-obj-canonicalpath: flat/base:v7:haha.kf x-manifold-obj-ctime: 1611967367 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"115940658764963","color":"f7b125","__ctime":"1611967367","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:18 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3410, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 45660
2024-05-25 23:00:18 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 00 00 16 00 24 00 10 00 1c 00 18 00 04 00 0c 00 08 00 00 00 00 00 20 00 16 00 00 00 05 00 00 00 1c 00 00 00 48 11 00 00 00 00 34 43 00 00 34 43 ab aa 1a 40 00 00 70 42 01 00 00 00 01 00 00 00 0c 00 00 00 08 00 10 00 08 00 04 00 08 00 00 00 0c 00 00 00 00 00 34 43 00 00 34 43 0a 11 00 00 ff d8 ff db 00 84 00 02 01 01 01 02 01 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 04 03 03 04 03 03 04 05 04 05 05 05 05 04 05 05 06 07 07 07 06 05 09 09 09 09 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 02 02 02 04 04 04 08 05 05 08 0c 09 08 09 0c 0e 0e 0e 0e 0e 0e 0e 0c 0c 0c 0c 0c 0e 0e 0c 0c 0c 0c 0c 0c 0e 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff dd 00 04 00 17 ff ee 00 0e 41 64 6f 62 65 00 Data Ascii: KEYF$ H4C4C@pB4C4CAdobe
2024-05-25 23:00:18 UTC	15257	IN	Data Raw: 32 68 9a 61 2e 21 84 73 d3 53 88 65 77 c9 16 88 56 a8 d7 3f e5 59 ad 61 99 5c dd 0a 97 57 9a ef 85 31 22 63 7d 3b 8e ac f8 a3 d7 f0 9d fe aa 2c c3 e5 f9 7d f4 d8 ba ab ae 3e 5f ff d6 f5 83 c5 78 81 65 00 88 1f 8a 63 97 f4 b7 53 fb 2f 9f 15 7e d5 f1 7c b6 db fe 19 78 7e 5a 29 97 5d da b4 ce 00 28 72 da 16 a2 79 cb 25 12 c6 61 30 94 a8 57 93 84 a8 8e 45 d4 47 25 bb ca 1c 8b a8 72 2e a1 c8 ba 87 22 ea 1c 8b a8 72 2e a1 c8 ba 7b a1 c8 ba 87 24 ba 89 e4 97 51 3c 99 24 87 24 84 c5 55 e5 70 c9 4e af 58 50 ad 3b a9 74 d2 14 29 2b 4d 3e 25 14 9b 34 3b 27 7f d4 e8 55 9a df cf aa cc 3a bb ab 37 8b e5 ff d7 f5 1f c4 d5 b7 31 81 1e 7a 44 d0 32 e4 ea 7f 50 be 7c 57 f1 fb c7 c6 f3 ca 69 f4 47 65 12 8b c3 4a 19 0e 4a 1c f6 85 98 a4 3a a8 67 35 48 25 50 af 27 09 51 1c 8b Data Ascii: 2ha.!sSewV?Ya\W1"c};,}>_xecS/~\|x~Z)](ry%a0WEG%r."r.{$Q<$$UpNXP;t)+M>%4;'U:71zD2P\|WiGeJJ:g5H%P'Q
2024-05-25 23:00:18 UTC	16384	IN	Data Raw: 00 00 00 00 00 03 34 8f ff ff 44 cd 44 c2 04 15 55 c2 40 8f ff ff 94 ba 50 c2 30 d1 52 c2 4c 8f ff ff 54 06 3c c2 14 9d 40 c2 f4 8f ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 6c 8f ff ff d0 9c 65 c2 50 0b 4a c2 78 8f ff ff 64 28 60 c2 d0 f0 32 c2 84 8f ff ff 14 35 57 c2 74 18 50 c2 2c 90 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 a4 8f ff ff b4 8b 48 c2 20 e9 fc c1 b0 8f ff ff 94 fa 3d c2 28 20 d9 c1 bc 8f ff ff 2c 0d 56 c2 b8 79 1c c2 2c 90 ff ff 04 00 00 00 d0 8f ff ff 5c 18 2c c2 f0 3f a4 c1 ea 8f ff ff 04 00 00 00 0c 00 00 00 98 02 00 00 5c 02 00 00 20 02 00 00 e4 01 00 00 a8 01 00 00 6c 01 00 00 30 01 00 00 f4 00 00 00 b8 00 00 00 7c 00 00 00 40 00 00 00 04 00 00 00 b4 90 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 2c Data Ascii: 4DDU@P0RLT<@ lePJxd(`25WtP, H =( ,Vy,\,?\ l0\|@ ,
2024-05-25 23:00:18 UTC	12518	IN	Data Raw: d8 c1 cc cf ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 44 cf ff ff 94 ba 9a 42 c6 7f 8b c2 50 cf ff ff ae 0e a2 42 dc c5 97 c2 5c cf ff ff 94 ba 9a 42 3c c7 4d c2 04 d0 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 7c cf ff ff d2 4e bd 42 dc c5 97 c2 88 cf ff ff 5e a2 d2 42 82 3a 89 c2 94 cf ff ff cc 0c a4 42 dc c5 97 c2 04 d0 ff ff 04 00 00 00 a8 cf ff ff 5e a2 d2 42 30 4b 4e c2 c2 cf ff ff 04 00 00 00 05 00 00 00 f4 00 00 00 b8 00 00 00 7c 00 00 00 40 00 00 00 04 00 00 00 70 d0 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 e8 cf ff ff 5e 22 cd 42 d0 cf 12 c2 f4 cf ff ff 08 8e b7 42 60 56 f0 c1 00 d0 ff ff 5e 22 cd 42 84 0b 4e c2 a8 d0 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 20 d0 ff ff c6 08 a5 42 60 56 f0 c1 2c Data Ascii: DBPB\B<M \|NB^B:B^B0KN\|@p ^"BB`V^"BN B`V,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.6	59166	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:18 UTC	758	OUT	GET /m1/v/t6/An_iJw3Cc3y5RtzEpR0M4CCznWN_ywjtFHZENvSbcomn6tH9EuRIjlfe7xaIpEOIEZAGHfQMVNlOPpkGNsG7fM8CslunKANTZ6ED.kf?ccb=10-5&oh=00_AYBcK8-O3yI6-YhotsoEQ5GrPxPKPphT8rCkVAW5Tzg_8w&oe=6679E218&_nc_sid=7da55a HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:18 UTC	950	IN	HTTP/1.1 200 OK content-digest: adler32=1035192163 Content-Type: image/x.fb.keyframes ETag: 7938460552592410943 x-manifold-obj-blobsizebytes: 22168 x-manifold-obj-canonicalpath: flat/base:v7:wow.kf x-manifold-obj-ctime: 1611967376 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"478547315650144","color":"f7b125","__ctime":"1611967376","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:18 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3412, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 22168
2024-05-25 23:00:18 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 00 00 16 00 24 00 10 00 1c 00 18 00 04 00 0c 00 08 00 00 00 00 00 20 00 16 00 00 00 05 00 00 00 1c 00 00 00 48 11 00 00 00 00 34 43 00 00 34 43 89 88 a0 40 00 00 70 42 01 00 00 00 01 00 00 00 0c 00 00 00 08 00 10 00 08 00 04 00 08 00 00 00 0c 00 00 00 00 00 34 43 00 00 34 43 0a 11 00 00 ff d8 ff db 00 84 00 02 01 01 01 02 01 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 04 03 03 04 03 03 04 05 04 05 05 05 05 04 05 05 06 07 07 07 06 05 09 09 09 09 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 02 02 02 04 04 04 08 05 05 08 0c 09 08 09 0c 0e 0e 0e 0e 0e 0e 0e 0c 0c 0c 0c 0c 0e 0e 0c 0c 0c 0c 0c 0c 0e 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff dd 00 04 00 17 ff ee 00 0e 41 64 6f 62 65 00 Data Ascii: KEYF$ H4C4C@pB4C4CAdobe
2024-05-25 23:00:18 UTC	15255	IN	Data Raw: 32 68 9a 61 2e 21 84 73 d3 53 88 65 77 c9 16 88 56 a8 d7 3f e5 59 ad 61 99 5c dd 0a 97 57 9a ef 85 31 22 63 7d 3b 8e ac f8 a3 d7 f0 9d fe aa 2c c3 e5 f9 7d f4 d8 ba ab ae 3e 5f ff d6 f5 83 c5 78 81 65 00 88 1f 8a 63 97 f4 b7 53 fb 2f 9f 15 7e d5 f1 7c b6 db fe 19 78 7e 5a 29 97 5d da b4 ce 00 28 72 da 16 a2 79 cb 25 12 c6 61 30 94 a8 57 93 84 a8 8e 45 d4 47 25 bb ca 1c 8b a8 72 2e a1 c8 ba 87 22 ea 1c 8b a8 72 2e a1 c8 ba 7b a1 c8 ba 87 24 ba 89 e4 97 51 3c 99 24 87 24 84 c5 55 e5 70 c9 4e af 58 50 ad 3b a9 74 d2 14 29 2b 4d 3e 25 14 9b 34 3b 27 7f d4 e8 55 9a df cf aa cc 3a bb ab 37 8b e5 ff d7 f5 1f c4 d5 b7 31 81 1e 7a 44 d0 32 e4 ea 7f 50 be 7c 57 f1 fb c7 c6 f3 ca 69 f4 47 65 12 8b c3 4a 19 0e 4a 1c f6 85 98 a4 3a a8 67 35 48 25 50 af 27 09 51 1c 8b Data Ascii: 2ha.!sSewV?Ya\W1"c};,}>_xecS/~\|x~Z)](ry%a0WEG%r."r.{$Q<$$UpNXP;t)+M>%4;'U:71zD2P\|WiGeJJ:g5H%P'Q
2024-05-25 23:00:18 UTC	5412	IN	Data Raw: 04 00 00 00 f4 ea ff ff 35 c0 d6 42 87 1b 22 42 01 00 00 00 3c 00 00 00 00 00 36 00 30 00 2c 00 04 00 00 00 00 00 24 00 20 00 1c 00 14 00 18 00 28 00 10 00 00 00 00 00 00 00 00 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0b 00 36 00 00 00 fc 12 00 00 00 00 00 00 30 00 00 00 08 05 00 00 0c 05 00 00 0c 05 00 00 1c 05 00 00 1c 05 00 00 1c 05 00 00 30 05 00 00 07 00 00 00 0c 00 14 00 10 00 0c 00 08 00 04 00 0c 00 00 00 10 00 00 00 58 02 00 00 a4 04 00 00 b0 04 00 00 04 fb ff ff 0c 00 00 00 34 00 00 00 60 00 00 00 0a 00 00 00 90 01 00 00 6c 01 00 00 4c 01 00 00 2c 01 00 00 0c 01 00 00 ec 00 00 00 c8 00 00 00 a4 00 00 00 84 00 00 00 64 00 00 00 0b 00 00 00 42 ba 59 3c 8b f1 f4 3c 84 19 aa 3d 14 88 60 3e 74 58 78 3e b7 6d db 3e ff a4 f6 3e af 3a 07 Data Ascii: 5B"B<60,$ (600X4`lL,dBY<<=`>tXx>m>>:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.6	59177	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:18 UTC	832	OUT	GET /v/t39.30808-6/443820279_996576055171299_5426681423066812390_n.jpg?stp=dst-jpg_p600x600&_nc_cat=106&ccb=1-7&_nc_sid=5f2048&_nc_ohc=yOpNa5f4B0MQ7kNvgFXHOgL&_nc_ht=scontent-hou1-1.xx&oh=00_AYDmlj2FslEtdorS3sX8SiySJp-Qe_coQMiD4X1hjkEgCw&oe=665834CA HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:18 UTC	738	IN	HTTP/1.1 200 OK Last-Modified: Sat, 25 May 2024 06:00:07 GMT X-Needle-Checksum: 2752040978 thrift_fmhk: GBBU9Ss6jRorBcc81Dmh9goZFfDr4Z0EvFUAHCYEAAAA Content-Type: image/jpeg content-digest: adler32=3369106505 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:18 GMT X-FB-Edge-Debug: Y33My58RwibY52hmhk6pHkNEzXo7lI8ixB6NkFOb2mNsHpHOP_Hpwd1y6PYu-Q_SWSrFqaLcP81iokkYHKOA2wVeN2zRUrdY4-xSQ4v6ZYs X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=55, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 54619
2024-05-25 23:00:18 UTC	762	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 37 30 30 31 30 30 30 30 30 31 31 37 30 30 30 30 38 31 33 33 30 30 30 30 62 37 33 61 30 30 30 30 65 33 34 37 30 30 30 30 64 32 35 65 30 30 30 30 36 34 38 32 30 30 30 30 62 38 38 37 30 30 30 30 32 35 38 66 30 30 30 30 32 66 39 62 30 30 30 30 35 62 64 35 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a700100000117000081330000b73a0000e3470000d25e000064820000b8870000258f00002f9b00005bd50000C%# , #&')*)-0-(0%()(C((((((((((((((
2024-05-25 23:00:18 UTC	15551	IN	Data Raw: d6 c9 d6 51 e8 ca 98 de 68 97 cd fa 2e 77 ba 68 7a 2f 33 d4 73 c9 79 0e 89 f9 c8 72 75 6b 30 b3 4f 77 85 0e 97 52 3a 08 34 f9 8b 3c c6 c3 d1 57 31 98 c8 ed 63 f4 cd 14 ca a9 43 13 b0 e7 3a f7 91 e2 cd b0 83 98 e9 f1 75 24 93 2a 6b 35 2b e7 e8 56 69 a1 61 71 d0 6b f9 7f 57 c5 f5 86 81 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0d 0c fd 45 9d 6d bb 09 e7 44 f2 de c3 8f eb 1d 87 4f c9 ec e1 2c cd c8 75 0b 12 8d 8c bb 9d 57 17 ae a1 8f bb 25 ba 8e c7 bf c8 d8 ef 32 6d c9 98 e6 d9 7f 53 61 53 4d 95 72 10 ec 79 87 63 a8 9b 62 a7 32 93 4f 4f 9e be c3 6b 97 9e ed 49 f2 6f d0 b0 dd 0d 04 59 3f 9d 76 1e 7d b0 8c 0e b8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 39 24 80 73 e5 59 0b ac 4a a2 ab ae c8 92 83 f4 65 44 Data Ascii: Qh.whz/3syruk0OwR:4<W1cC:u$*k5+ViaqkWEmDO,uW%2mSaSMrycb2OOkIoY?v}9$sYJeD
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 29 83 5c 08 df ea be c0 f3 15 8e f7 50 50 c9 e2 07 49 d9 32 8a 50 1d a6 ff 00 54 28 ea 00 c7 b2 34 12 88 ed dd 3e 8d c6 06 b4 0e a4 ea 19 8b 1a 14 4d 2c 60 69 ff 00 a3 81 07 f7 0f 12 9b d8 bf 68 4d ea 87 13 93 b8 08 71 4f 56 a7 71 4f f4 b5 3b 88 4c 76 d1 36 b2 70 77 4c af 7f fc 46 af b7 c5 dd 3f 88 42 05 c6 aa 6a b9 25 3b a1 3c 83 f3 14 da c9 9b f9 93 38 a7 fa 9a 9b c4 21 3b e8 9b 51 13 b6 72 96 b2 28 f7 29 95 90 bf ba c8 2c db ea 9f 57 1b 13 78 8c 27 7d 13 6a 62 76 ce 52 d4 47 10 bb 8a 1c 4e e7 ca 9b 5b 96 98 a7 54 4d f9 5a be d7 3b 3c cd ba 93 89 9f c8 11 ad 9c fe 64 26 99 c7 47 14 da 8a 98 c5 dd aa 3c 40 e3 e4 52 d5 cb 26 e5 31 ee 61 bb 4a 65 6d 4f a2 fb 6c ed f3 31 7d be 53 b3 13 69 5c 77 46 91 dd 93 69 1c 77 4d a3 68 dd 7d 9d 96 b5 93 a9 07 65 14 01 Data Ascii: )\PPI2PT(4>M,`ihMqOVqO;Lv6pwLF?Bj%;<8!;Qr(),Wx'}jbvRGN[TMZ;<d&G<@R&1aJemOl1}Si\wFiwMh}e
2024-05-25 23:00:18 UTC	14884	IN	Data Raw: ba 91 7d f7 45 ea f7 09 cc ee 14 72 65 a1 53 1b 05 f9 10 97 0d 90 93 c4 62 80 a8 5d 7d 54 87 37 d9 3f 64 13 b9 54 8e 95 47 dd 4e cc 1c 98 42 bf 8c cc 4a 87 10 31 ef c9 e8 02 17 99 b6 09 c7 44 cd 82 dd e9 db 2a 4f 29 51 07 0d 50 25 0b f2 72 86 00 eb bc a8 cd e5 d3 b2 7e 9a 20 6e 87 23 d0 e5 29 b8 08 ec 8a 64 a1 9a 20 fc 54 4f e9 b2 63 fa ec 9f b2 09 c9 e7 a7 45 72 58 6e a9 3c ca a0 0b 59 5b 12 99 67 68 57 86 d7 fb d3 a3 91 bb 6a 9c e3 7e a5 6d 54 4c b4 9a 29 e0 be ad 43 40 9b e5 ba bd c2 86 47 31 dd 29 84 38 5c 21 ce e9 f2 e1 19 b2 a6 38 dc a7 90 53 ba 4a 1c 9c 2e bd 02 09 dc da f2 15 3f a9 4f 3a 72 2b 2b a9 45 d8 a9 74 7a a9 dd 38 20 35 51 bd 64 9f 18 3d 25 58 c2 ed 54 46 e3 3f 54 1c 88 04 27 dc 0d 10 93 a4 a8 23 c7 ac a6 e9 b2 0e 57 44 ab e8 41 52 ba f1 Data Ascii: }EreSb]}T7?dTGNBJ1D*O)QP%r~ n#)d TOcErXn<Y[ghWj~mTL)C@G1)8\!8SJ.?O:r++Etz8 5Qd=%XTF?T'#WDAR
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: de 97 60 5a e9 b9 35 2a 23 03 31 be e0 d8 12 ed d5 e2 5b a4 f9 92 dc 40 17 64 f1 1b 33 c4 ce d2 ea 2c 47 26 62 a6 65 c9 73 b1 79 6d 8b 38 8a fa cc b2 78 a8 1c c6 60 cc 2b 37 28 c3 19 57 67 b4 c5 4f de 1b ac 45 58 67 74 65 cb 17 e0 05 81 dd e8 f8 74 c4 b4 73 98 e3 a0 c7 7d 36 87 4a e8 46 a5 90 d0 f9 84 d8 cd c8 da 62 c0 b9 cc a9 c9 06 0c b9 71 fc 17 18 98 3d a8 8e 23 d9 9a 12 0b 50 06 27 9b 2a 59 e8 a6 96 7b 12 ee 1f ac c5 4b 4f 31 67 2c d7 33 68 4e 03 05 5a d6 a0 92 f0 3b bb 96 e6 64 cc 5c 4e 43 48 0c a7 aa 56 15 b5 08 4b 47 5e b8 c0 e4 e5 a8 11 cb 8f c4 7b b7 06 2e 31 92 bb 74 bd fa c7 73 57 af 5b ef 0c 7a 41 0e a4 77 0f 82 cc e1 9d b2 99 96 5c 53 09 79 99 2e 0b 26 f0 54 5d 05 4b 83 2e 5c 5f 09 a6 e5 59 05 23 99 81 74 f4 29 14 95 76 4c 43 32 c8 4b 60 c7 Data Ascii: `Z5#1[@d3,G&besym8x`+7(WgOEXgtets}6JFbq=#P'Y{KO1g,3hNZ;d\NCHVKG^{.1tsW[zAw\Sy.&T]K.\_Y#t)vLC2K`
2024-05-25 23:00:18 UTC	14884	IN	Data Raw: a1 df 6a ae 4e 7e ed d2 ea 9f eb c7 a6 4a 4b 34 fd 93 32 6a 9b ef 21 75 f8 f5 18 8a ef a7 5a b7 e5 74 40 39 ed e3 c6 16 01 a2 83 1c 02 28 33 7b 34 4b ad 9f 99 b1 b1 43 09 ff 00 9f 42 fb 66 d8 0c 74 89 38 42 bf 26 76 6d 24 ee dc 7d b3 9b d7 a4 2d 4a 42 b0 4a 10 16 47 65 99 a2 ce 68 2f 4c 83 04 ba 2e f8 26 31 b1 1d 93 a7 92 eb 5e 10 f5 9e 75 6f c5 ee 06 55 f8 76 4f c6 8f 4a 74 f5 d6 d1 be f7 de fb a1 da 54 a9 05 60 46 f0 5d 4c 88 30 7c 04 42 a5 e0 50 53 8f aa 36 00 17 89 b5 02 5e 42 b6 89 59 f6 63 37 9d fd 51 0a 7c cd d8 6c 30 95 a3 3e 2e 10 2b 9b fa 63 38 e7 10 dd 38 65 8f 59 b5 8c 6a 36 68 06 47 ed d0 e3 b2 2d b3 64 d4 bf 22 f3 db 34 44 71 82 f5 ac de a2 fc c9 d5 4c 3f 4b 76 0c d8 8d 85 00 ac 53 aa 87 a1 b8 be b0 ae 4b e3 38 28 eb 98 82 57 da 8b a2 c1 1b Data Ascii: jN~JK42j!uZt@9(3{4KCBft8B&vm$}-JBJGeh/L.&1^uoUvOJtT`F]L0\|BPS6^BYc7Q\|l0>.+c88eYj6hG-d"4DqL?KvSK8(W
2024-05-25 23:00:19 UTC	1500	IN	Data Raw: 25 78 01 a0 3b 4a ad de 7c 0f a1 81 2e 32 94 98 09 9e 61 3d 08 d0 f1 05 a9 67 a5 15 f9 a6 4f 09 51 95 1e d1 55 9e b3 23 5a 50 36 c0 aa d3 73 0a ca 4e 1c 7d c3 bd 77 72 b0 9d c0 ed e3 99 6a d4 3d 80 08 be 6e e5 39 0c f1 3c c4 b8 3b 00 85 ee 80 e5 5e 03 ac ce ba 72 76 6c e4 74 f9 61 fc b1 51 da 26 5b 79 f3 00 72 da 8f 88 61 97 23 49 d5 fd da 01 8a 8e 3d b9 61 07 43 4e b2 cf 13 57 2c 78 30 3e ec 2f 55 70 14 d8 4b 1b 4b 14 e2 c4 e8 9c 92 f2 0b a8 3f 97 ee 77 33 1e 3e 1a 26 7e 6b 12 e8 d2 95 89 52 0d aa 95 84 11 2c 5d 71 31 e5 67 32 be 14 50 d3 fe d1 80 ca dc 57 bf ba 25 45 e2 66 bb cb 05 f9 e5 07 65 b4 3c c6 83 95 40 84 a2 a6 b5 1b cc 5a fe 65 61 71 2c 18 d0 76 61 db 1b ad 6e 63 4a f4 39 33 fe e2 dc 37 4f da 58 ba 9e ba 80 d2 01 5a 80 80 6c 8a c7 23 f1 42 03 Data Ascii: %x;J\|.2a=gOQU#ZP6sN}wrj=n9<;^rvltaQ&[yra#I=aCNW,x0>/UpKK?w3>&~kR,]q1g2PW%Efe<@Zeaq,vancJ937OXZl#B
2024-05-25 23:00:19 UTC	2056	IN	Data Raw: 31 f9 41 61 47 ab 00 66 0e ea e3 5c 69 6c 29 4b a9 7a 51 93 9e 03 89 4a 47 9c 9c c0 73 ec 14 aa 87 af 62 16 70 67 8b 25 48 58 38 e6 12 1e 4d 9e 84 45 c3 1b 75 ef 28 6f 85 2a 69 2c 6b b8 8c 09 4f 58 cc 5e 44 9e 5c 42 56 56 9d 0a 99 f6 60 63 c0 66 c7 c9 1f a1 85 65 a6 3e b5 2d 5a bc be 58 e9 8b 0b ed 6f e8 21 23 cf 12 a5 65 5a 20 51 2a c3 e2 e5 54 2b 06 e5 90 f7 54 45 93 59 fb 3f 48 83 c9 3c 46 89 aa 33 e5 ff 00 50 aa 89 a4 ac 54 a4 54 a6 45 4c b7 10 77 cc cc 10 57 1b 42 bd e0 a3 c0 e4 9a 43 2c 1a d0 c1 03 98 31 89 37 a8 40 2f 00 d6 cf 69 60 bc 79 e1 97 84 be 99 2d f9 7d 8f 68 e9 46 f3 28 bd 54 0e ff 00 ee 15 54 da b9 12 d9 25 10 aa f8 94 0e 99 27 35 bc 7c c0 a4 76 62 66 20 43 9e 11 41 4a f5 c4 05 70 c5 45 84 a6 b8 8a 94 03 66 a3 9b 53 e6 5e ac b1 b8 e2 c4 Data Ascii: 1AaGf\il)KzQJGsbpg%HX8MEu(oi,kOX^D\BVV`cfe>-ZXo!#eZ QT+TEY?H<F3PTTELwWBC,17@/i`y-}hF(TT%'5\|vbf CAJpEfS^
2024-05-25 23:00:19 UTC	1982	IN	Data Raw: 79 8b af 04 cd 0a 1d b1 9e 60 1c f9 8e 89 50 82 01 9e 82 20 94 54 b2 e2 c5 0c 23 e6 15 5d 31 fa 52 a5 b1 6f 30 56 5d 66 d5 59 8c a8 0c ce 2e 36 e6 6d 2e 72 ec 76 66 65 30 a0 da 75 8b 19 c8 49 a6 39 ca 3a c7 10 4f 32 1d 79 d3 00 59 a0 47 5e 12 33 1e fd 2e 66 55 d8 85 13 1c 77 98 4c 15 17 4e 57 c4 2f d2 a1 28 00 03 5d 02 2d 39 89 02 82 50 e1 74 16 e6 1b 26 52 b7 22 f1 d3 51 5c 9f 72 50 a9 50 9c 89 c0 bc d6 3e b0 d2 0c 8a 8d e3 fd c6 e6 05 cc 3d 5c b0 8f 17 99 a6 55 38 8a 74 e9 8e 70 bb 03 96 16 bd d9 de 59 bb 39 6f 98 d5 a8 76 aa 31 72 54 a2 c6 8c c0 5e f0 e9 06 5f 12 cf af f4 87 81 cc b2 8e ba 86 30 59 99 67 70 46 b9 5c 38 e9 14 5c 0c 3c 8d c4 a7 33 25 3a 99 ec 8f 53 32 5c 58 ba 80 e1 8c cf 82 df a4 2a 03 e6 21 58 e2 0f 78 17 41 ae 81 50 f2 af d2 5a a3 6e Data Ascii: y`P T#]1Ro0V]fY.6m.rvfe0uI9:O2yYG^3.fUwLNW/(]-9Pt&R"Q\rPP>=\U8tpY9ov1rT^_0YgpF\8\<3%:S2\X*!XxAPZn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.6	59175	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:18 UTC	831	OUT	GET /v/t39.30808-6/443717789_996576088504629_748921786331374552_n.jpg?stp=dst-jpg_p600x600&_nc_cat=106&ccb=1-7&_nc_sid=5f2048&_nc_ohc=6efKMPmYepsQ7kNvgHWkgWT&_nc_ht=scontent-hou1-1.xx&oh=00_AYBykvCb4vJ6su0icd2D3YWhwfwQGNVx6f7HEYWMUmgzSg&oe=6658484A HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:18 UTC	738	IN	HTTP/1.1 200 OK Last-Modified: Sat, 25 May 2024 06:00:10 GMT X-Needle-Checksum: 3232017633 thrift_fmhk: GBAh8ZFaL2PctQ8h2IGFbnbzFfDr4Z0EvFUAHCYEAAAA Content-Type: image/jpeg content-digest: adler32=1077711181 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:18 GMT X-FB-Edge-Debug: 2SnQ4xufr8evxxDO8kGVYnMCgMkxH9dU_3gAFJ2ZiTHgCYdX8PRL7Z3h7ssJZrCSu04ezN5WpK2DYEOFKWq_y9FGmWX6IMxtIVKmhtDVWHE X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=37, rtx=0, c=14, mss=1392, tbw=3412, tp=-1, tpl=-1, uplat=12, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 51859
2024-05-25 23:00:18 UTC	762	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 37 32 30 31 30 30 30 30 32 38 31 33 30 30 30 30 37 62 32 63 30 30 30 30 32 35 32 66 30 30 30 30 66 31 33 64 30 30 30 30 66 37 35 62 30 30 30 30 32 37 37 65 30 30 30 30 36 66 38 33 30 30 30 30 31 39 38 37 30 30 30 30 66 63 39 34 30 30 30 30 39 33 63 61 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a72010000281300007b2c0000252f0000f13d0000f75b0000277e00006f83000019870000fc94000093ca0000C%# , #&')*)-0-(0%()(C((((((((((((((
2024-05-25 23:00:18 UTC	15553	IN	Data Raw: 18 04 80 00 00 00 00 00 3b 8d a9 b7 3e 75 b1 f3 ce c3 e7 bd 49 be 9f f2 ff 00 a4 1a 56 bf 38 ef f9 95 b6 f4 56 b4 56 ed f2 5d be af 9d f6 1a 5d 0e 8d 7f 27 e5 70 74 79 e8 5a d1 5d cb 77 54 3d 0d bd d9 b1 e6 6a 59 71 3e f4 ba 0b 8d 4d 1e 64 57 df 3a ef 36 45 2f 21 d8 51 ca f5 fc ed d5 9c 57 4f ab 77 a3 0a 6b 8e 22 14 c3 de 00 00 00 00 00 00 01 34 33 43 00 90 0c b1 cc f7 2c a5 cd 16 73 4b 93 5b 2d c9 71 68 67 61 2e 33 59 95 ac bc ea 7c ae e4 e7 51 65 d0 49 cc e7 b2 e8 e9 2a 87 2d 98 4c 1b b5 32 d9 41 62 6a b5 2d 2d 3a cc 76 a8 d7 74 5c 85 1b ad cb ce 67 2e d6 cf d2 89 9d 47 05 cd 36 ae 8b 8e 37 dd 0f 17 2b 37 8d 1e ad 6b f0 43 8b 5b b6 27 c7 a4 f7 86 79 8c 7a 58 fa 63 9c c7 a0 8f a5 43 85 e4 5d 0a 6c 6d e2 dd 57 85 94 7b c5 7e 3b b1 6a d4 c7 66 2d 50 f9 96 Data Ascii: ;>uIV8VV]]'ptyZ]wT=jYq>MdW:6E/!QWOwk"43C,sK[-qhga.3Y\|QeI*-L2Abj--:vt\g.G67+7kC['yzXcC]lmW{~;jf-P
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: a7 f4 ac f6 b9 bc 42 cc 69 77 00 b5 4f e9 c5 64 27 f4 ad 4c 4e 95 9e c7 37 88 f6 48 9e 63 f5 f6 48 3e 41 8e 37 9b 10 73 80 31 76 9d d8 b3 84 9d b1 cb 08 63 af 02 49 dc 13 e2 fb a2 41 4c dc a2 e1 11 44 c5 56 0c 57 a7 71 09 ad 6d fb 4e fc 71 a3 44 13 93 c8 6e 2b d0 f3 84 23 45 13 79 b4 03 b1 0a 9d 29 99 05 4c 56 cc 28 4c 37 55 61 c5 4c c5 5b a6 8b 5e 26 d3 b0 ac 21 82 ea 41 09 dc 10 8c e1 37 ba ef 0c 57 a8 3f 1f 64 89 e6 3f 5f 64 83 e4 08 39 f5 4e eb 1d 25 e8 22 3c 3b 71 72 21 da 42 f5 04 1f 7c 62 25 91 61 86 4e ea 71 61 3e 56 a7 70 4c de ec e4 f9 5e ec d5 11 9b 41 9a 02 28 98 1e 2b 40 f5 2a d8 4b a1 fd 13 5b 18 d2 f1 f3 41 c7 3e 9b 2c 32 5a 07 a8 a8 b0 c7 72 21 43 2a d9 cb c5 68 b8 7e 64 c9 1a a1 b9 d2 9e 2c 1b f1 46 2c 09 db 6a 96 2f b4 d6 67 bb 16 11 2e Data Ascii: BiwOd'LN7HcH>A7s1vcIALDVWqmNqDn+#Ey)LV(L7UaL[^&!A7W?d?_d9N%"<;qr!B\|b%aNqa>VpL^A(+@K[A>,2Zr!Ch~d,F,j/g.
2024-05-25 23:00:18 UTC	14884	IN	Data Raw: 04 44 74 98 d9 cf c5 6b 5f c9 53 0f 65 e4 ec 56 c6 74 fc 02 ac 1a e1 ef dc 9b 10 bd c0 9d ca 1d 2e 2e ab 7e 28 71 0c 47 02 e1 34 d7 35 ee 74 cc ad 41 ef 34 30 dd bc ac d8 ae 9f 88 54 44 f8 1d e8 3e 23 a8 69 bb 7a cc 8a e9 f8 84 21 c5 db b5 6b 1e b5 8f 5e 8e 29 9f 88 45 8e 19 c2 c5 38 ce a3 c3 6a cc 8c 67 e2 15 31 07 03 bd 43 88 5e f0 5c 15 6d 7b 89 9c ad f5 71 3c c7 eb ea e0 f9 02 93 30 67 44 1e f0 28 17 36 92 76 6e 50 5b de 0c 76 28 df 9b 16 13 14 df 59 68 55 44 70 6b 77 94 72 4f 6b a5 b9 17 f7 a1 da 80 c9 3b 9e 2a 0c 37 3a c9 d8 56 50 34 b6 c9 20 37 94 1a 2e 16 28 8d 13 f4 66 92 9b bc 3c 20 05 c1 45 60 9c e1 99 14 0e d0 e1 24 d8 6d b8 2a 62 45 63 5d b8 9c 4e a6 e7 30 bb 16 11 14 ec 34 84 5c 6e 16 a8 ef 37 b8 4f e7 8a 7b 5c e2 54 38 66 73 7d c9 cd 37 11 Data Ascii: Dtk_SeVt..~(qG45tA40TD>#iz!k^)E8jg1C^\m{q<0gD(6vnP[v(YhUDpkwrOk;7:VP4 7.(f< E`$mbEc]N04\n7O{\T8fs}7
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 00 fb 57 bc be e2 00 a9 b6 f3 2c ba e1 6c 38 e3 6e b4 7b 8f cb e6 57 ff 00 3f ff 00 ff 00 f7 ff 00 ff 00 fd 77 94 f0 2a 1c 1f 81 3c 79 80 00 a3 69 bf 0e 09 26 b8 a5 2c 5f ff 00 ff 00 ff 00 ff 00 7f ff 00 ff 00 d1 d9 34 2a af 77 63 3d 37 29 3a bb 15 51 d0 47 55 3a 0b c6 97 7f ff 00 ff 00 ff 00 f7 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 f7 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 7f ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ef ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 f7 7f ff 00 5f 04 9f 2e 2c a3 cf d0 92 42 0c 75 ef fd 7b cf 5e 7d 95 5c 0c 4d 21 28 67 01 80 5c 10 a4 20 f0 3b c9 fb 40 85 36 76 39 79 a4 c2 c3 34 e2 57 8c 38 Data Ascii: W,l8n{W?w<yi&,_4wc=7):QGU:_.,Bu{^}\M!(g\ ;@6v9y4W8
2024-05-25 23:00:18 UTC	14884	IN	Data Raw: 1c 0d a7 d8 89 ef 6a 89 5f bb fd ff 00 67 d9 fc 7e 45 f2 7f 1f 91 09 57 6e b1 79 10 41 03 42 8a 2b 7d 4d a4 ab 1f 63 05 36 c5 b1 8d 30 68 6a 98 63 c5 bf ac 2f dc 42 6a be 59 fe bf 02 e9 ed 07 f0 36 67 a6 86 36 5c 2d e4 b9 16 4a 42 38 b6 ff 00 03 a5 82 82 78 0f 3a 15 68 c7 ba ff 00 d2 c2 7e 44 cd 07 49 3a 11 8e 2b 19 14 d1 45 81 20 85 87 a0 7b 12 a1 e1 f2 c3 08 46 97 d7 f4 35 f3 3e 06 79 fe 4b 1b cb fa 1c 8a da 7e c5 36 cb 9a b9 ad 16 78 05 24 09 4c 6c 63 65 df 40 f6 3d 19 04 86 2e 1a 0a d0 9a 6a 10 d3 67 44 24 de 44 b5 58 19 bd 4d b2 38 3d 4e 88 42 77 88 f9 7b e1 73 c3 e5 a0 e4 48 49 c7 9f 23 34 d0 4a be 1e 2f 9f 84 29 08 5e 1b 13 d0 d7 14 92 e8 7b e3 61 a1 a2 31 71 33 2a 2c a3 69 7e c0 c8 2a fc 7f 5d 09 86 fb 68 8c a2 85 e5 d8 7b e3 7e 27 2a 07 24 8f 64 Data Ascii: j_g~EWnyAB+}Mc60hjc/BjY6g6\-JB8x:h~DI:+E {F5>yK~6x$Llce@=.jgD$DXM8=NBw{sHI#4J/)^{a1q3,i~]h{~'*$d
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: d0 ee 9f db f5 ef cf d5 d2 7c 8e 8f ab c1 8b c7 1a 36 fa 26 16 b4 1c f3 5c c0 6b 26 00 d2 62 a8 db 6c 6f 0d 06 a5 95 f8 84 ab 38 e6 58 05 cb 72 01 94 2c d6 a9 42 b8 b1 19 5f 52 5c 30 a5 9e 51 32 f7 a0 35 28 65 e4 b5 0f 78 98 8b 59 f1 0b 9b 06 e4 80 bc 9d a2 aa a5 5c a2 d9 0d 6b 68 ca 44 14 40 77 2e 1c 3b 0c 2d 1b 74 b8 fc ca de 2e 8d 0a 74 20 5e ea 2b ae a9 31 b5 47 4d 2f 15 db 42 ef 39 ab 4c 54 d2 ea b1 c8 df da 2b 35 20 0e a3 8e 21 e5 20 44 ab 8b 5b 84 1d e6 0b dc c1 2b 25 2d 06 9e 1e 9f 69 65 9a cd 1f 38 86 d2 93 2d 62 2a 60 12 b4 7e d5 10 d0 a7 bc a8 f5 c7 ac 5c 0b 63 63 68 ee 61 28 79 cf c0 c5 f3 8b 83 18 5d 5d 14 d0 e3 53 d0 cc dd a2 62 5b d5 d8 f8 f2 b6 2a c4 c5 51 46 81 b1 d8 f1 73 fd bf 5e fc fd 5d 27 c8 e8 fa 80 11 a6 03 a0 8f ea 54 d7 01 4b 98 Data Ascii: \|6&\k&blo8Xr,B_R\0Q25(exY\khD@w.;-t.t ^+1GM/B9LT+5 ! D[+%-ie8-b`~\ccha(y]]Sb[QFs^]'TK
2024-05-25 23:00:18 UTC	1276	IN	Data Raw: 5b 82 f4 53 ac 44 98 c6 b0 7b 47 4a 1a a0 07 06 7c e2 86 43 90 8b 77 d0 f2 96 29 55 9c d6 4c fc 32 e9 1d d9 0d 94 cf 3b 31 b6 e2 44 70 00 2d 56 9e 90 a7 15 9a 80 93 f9 44 b6 87 70 e8 19 05 78 62 a3 15 40 10 2e 69 28 3a 56 db 40 40 40 27 24 ab 78 4b 0c 50 c3 44 00 5a d2 5a 18 2f 75 96 60 de d8 f4 85 ef a7 5a 8c 71 dd f7 3f 72 31 aa 05 0a ad d7 77 f4 34 84 1e 0f 21 55 ab f0 a8 c2 d5 ea 58 52 d8 1c 2b a5 c4 7e 16 97 62 58 15 a0 a6 3d e9 12 e1 0d 00 ed 8e 3e e2 69 96 6a 0f 81 fc 3e bd f9 fa ba 4f 91 d1 f6 06 c0 c6 15 55 4f 31 aa 82 0c ae 13 ac b8 b2 d3 d6 55 eb 0a e3 4c 4c ca ec de 2e 54 e6 51 75 ae f1 b2 e3 3c 12 c9 79 6e 81 20 c4 e7 53 86 24 0b 47 42 4c 6e 3a eb 0a 8a 92 ef 88 b5 10 f2 68 7e ed ba f7 8a 37 54 a5 bd f3 75 3d 68 1a 83 14 fd 09 ec 4c d2 26 53 Data Ascii: [SD{GJ\|Cw)UL2;1Dp-VDpxb@.i(:V@@@'$xKPDZZ/u`Zq?r1w4!UXR+~bX=>ij>OUO1ULL.TQu<yn S$GBLn:h~7Tu=hL&S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.6	59180	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:18 UTC	597	OUT	GET /v/t39.30808-6/425750146_2620197854795727_7515684929751906463_n.png?stp=dst-png_p180x540&_nc_cat=100&ccb=1-7&_nc_sid=5f2048&_nc_ohc=PwxMdBd-3KAQ7kNvgF1bFWB&_nc_ht=scontent-hou1-1.xx&oh=00_AYDRWljGH39R5bVy0sx5Tcm36_hplzbp-3jh0j8Y9pxKJA&oe=66583270 HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:18 UTC	611	IN	HTTP/1.1 200 OK Last-Modified: Tue, 06 Feb 2024 06:44:42 GMT X-Needle-Checksum: 1541310550 thrift_fmhk: GBBCAFUjxtdeOndck9qhKRtrFfDr4Z0EvFUAHCYEAAAA Content-Type: image/png content-digest: adler32=1801545046 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:18 GMT X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3412, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 75737
2024-05-25 23:00:18 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 c0 00 00 02 1c 08 02 00 00 00 b6 3f 50 2c 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 20 00 49 44 41 54 78 9c ec dd 69 74 5d d7 75 27 f8 ff 3e e7 4e 6f 04 08 80 a3 38 cf 83 28 52 a2 25 59 b2 25 4b b2 44 5a 93 25 0f 49 39 dd 95 a4 3a dd d5 49 55 92 ea a4 2a ab 53 5d 9d 4a a5 d3 95 5a 49 2a 53 57 a7 3a e9 55 a9 c4 59 9d 4e cb 11 9d 78 92 25 cb d6 60 49 96 28 c9 d6 40 89 24 28 12 9c 07 90 04 40 3c bc f1 0e e7 ec fe f0 40 5a 03 25 62 78 c0 1b b0 7f 0b 9f b4 28 e0 01 eb be fb fe f7 9c 7d f6 a6 c1 f0 0b 10 a2 35 31 b1 97 b8 27 7a e6 fd cd 0e 15 6b 10 c0 33 f9 d3 34 53 d1 2b df 73 70 ec 9e 7e 55 f3 a0 66 f2 87 89 ce 63 89 83 d8 1f 98 df b5 7b 9b 2a 7b d0 16 4c 4d 7b 31 04 18 e2 54 3c f2 df fc 28 5e 76 91 22 Data Ascii: PNGIHDR?P,sRGB, IDATxit]u'>No8(R%Y%KDZ%I9:IUS]JZISW:UYNx%`I(@$(@<@Z%bx(}51'zk34S+sp~Ufc{*{LM{1T<(^v"
2024-05-25 23:00:18 UTC	16332	IN	Data Raw: cc 5a 8a 15 dc 16 58 1a 21 46 a4 cd 92 c2 d8 03 fb 50 7f 34 95 d2 67 21 44 9b 62 b0 6b 9c a1 5c ea e5 e5 d0 a6 d9 af 66 12 24 40 8b 99 c4 00 08 ca da 20 f1 4e 75 67 f6 ac 0a de 5c 02 06 5c 0b cc 7c cd 46 1d 01 91 b2 f3 aa 85 87 df 4a 7a cb 14 c9 66 b7 98 0c 4b 36 48 b2 cf af 76 8f f7 c0 4b 9a bf 34 52 3f 38 e8 27 85 07 f6 9b ae 2a 45 72 70 50 08 d1 d6 08 8a 33 2f ad d4 17 b2 48 b7 46 81 dc c4 48 80 16 33 c6 12 94 65 d7 a8 b2 9f 7f 7a 5d ea b5 65 aa 10 20 95 e0 72 b0 9e 05 8a 11 6b db 5d bd f8 c5 37 a3 95 c3 4a 0e 5a 89 49 61 62 cf 78 67 f3 d9 17 57 41 d9 96 e8 77 c8 00 30 f6 c0 be 70 d5 05 15 7a 92 9e 85 10 6d 8c c1 ae f1 0f f7 a5 5f 5f 8a a0 35 0a e4 26 4c 02 b4 98 19 96 d8 8f 29 76 d2 af 2f cd 3c bf 46 9f cf 42 d9 d9 7e b8 24 20 51 ec 27 a3 0f bf 15 af Data Ascii: ZX!FP4g!Dbk\f$@ Nug\\\|FJzfK6HvK4R?8'*ErpP3/HFH3ez]e rk]7JZIabxgWAw0pzm__5&L)v/<FB~$ Q'
2024-05-25 23:00:18 UTC	16384	IN	Data Raw: 79 a9 47 e7 42 ea d1 0e 3c 1f 85 09 96 2a af da 0d 2d cc a4 6c 18 04 a9 45 d1 cd 3d b0 b0 16 17 2b 12 27 a5 55 7b ca 17 be 3c be 5c fc 4f 87 09 3a b9 6a 62 a9 64 b7 97 bf 7d 29 26 7a 16 ce 90 21 80 8b eb b6 a8 7a 9f 94 9c a8 bf bc 61 2c e0 ec fd 8b ed 5d 0d 20 50 47 1a 25 07 65 07 be 85 48 42 11 34 f5 e8 e9 1e 49 cd 00 23 b4 8a 57 6e 2a 9f b7 53 f8 13 53 3d 23 d1 b2 82 8a be 7e c7 5f d7 df f0 81 fa ee f8 98 96 65 86 27 c4 81 f6 f8 2b 1f 6f bf e4 0d 99 d9 73 ec 38 79 d9 18 10 d6 90 a0 95 17 79 8d 8e bc e7 87 85 43 07 63 79 d2 9b b0 14 28 c4 fa 8d ef a8 7b df 67 a7 14 2a 9a 26 5c eb af d3 45 13 7b 11 22 91 bf 7d 69 c3 4f ce b5 0e e5 90 4a 8c ea c6 62 30 04 c4 22 5c d0 1e ce 3b 42 f1 78 75 6f 34 8c 12 4c 6c e9 ec c3 f3 45 5b 16 96 1a eb d1 9c 88 d0 28 db d1 Data Ascii: yGB<-lE=+'U{<\O:jbd})&z!za,] PG%eHB4I#WnSS=#~_e'+os8yyCcy({g*&\E{"}iOJb0"\;Bxuo4LlE[(
2024-05-25 23:00:18 UTC	16384	IN	Data Raw: 56 ac 85 35 42 44 44 a0 18 d5 cc a5 46 ef 38 8b 5b c1 6b 75 f6 05 71 cc 50 a5 c6 fe 93 b9 af 43 6d 3f ef e1 73 9d 93 cb 18 87 7a 98 2d 0b 18 83 90 f8 c6 3f d4 ea f7 2c 83 5a bc 69 93 9a 3d 6c 00 00 cb f9 db 77 9b f6 22 55 d5 1c fd 0c a2 8f 59 c3 4b 77 ce ef 1d 61 61 e5 4f ce bd 91 39 87 53 37 21 e1 4c 92 08 e8 da 21 00 50 bc a5 d7 b6 15 92 ea 75 0b 42 04 22 60 06 33 b4 26 0d f2 80 bc 95 a9 31 3b 72 c8 94 8b 4e 29 3a 6c 82 89 d1 b5 56 37 b5 a8 d6 ac b2 80 81 84 56 9c 85 73 20 2c 4c 4c 13 c1 f3 e3 1a 63 02 9c c0 84 f3 ba dd e2 20 02 56 88 74 3f 33 9d e5 c5 40 00 13 1e 51 cd ac a1 54 6d 46 40 80 75 b0 66 ae eb e0 f9 35 fb bc 04 84 46 c4 cd 1c 96 e9 7c da 49 35 e1 82 c5 64 4d e6 ea 61 dc e9 ee d4 f1 08 b2 4f af e4 89 2c 1a 02 d8 f9 0e c3 89 00 60 22 10 61 e6 Data Ascii: V5BDDF8[kuqPCm?sz-?,Zi=lw"UYKwaaO9S7!L!PuB"`3&1;rN):lV7Vs ,LLc Vt?3@QTmF@uf5F\|I5dMaO,`"a
2024-05-25 23:00:19 UTC	14935	IN	Data Raw: 1b 91 44 5c 56 cf 31 af ee be 9b 13 88 88 04 b1 e6 b4 4a b9 70 2b a2 95 8b e6 2d 5e 73 c7 9a 6d 0f ee 5c bc 62 b1 15 b2 a4 14 76 c6 e9 be 98 14 42 04 0d 4a f2 4c 65 2e 8b d1 07 7f 50 4a 4a 43 69 2d 2e 9c ac bb 70 b2 6e df f3 77 95 d5 5c 68 de fa f6 fc 0d 1f d4 5e d2 cb 0e ce 5d 51 d1 7d aa a7 4f 08 93 b5 9e c4 ec 1d 11 c1 57 0d a5 85 45 91 70 a7 9d 1e 3f 57 a3 60 cc 6b a5 fb fc 3e 03 46 fd ec 59 cb 57 ad d8 fd f8 ee d5 77 ac 8d c4 a2 86 29 32 29 bb bb 3d 29 a4 b8 46 eb 1f 02 40 5a 0b 2b ec 51 84 fb bb 8b 0f bd b9 e6 c8 3b 6b ca eb da d6 de fb ca c2 35 1f 56 37 9e 0e 87 06 24 0a 76 7e 21 b1 7f 6f 66 d2 e7 74 29 91 56 aa b9 29 bc 7c 6b d8 d3 d7 10 ab 12 e0 7b 28 8c c9 aa 59 a6 3b f5 c4 3c 44 24 24 09 62 e5 7b b1 c2 5e cb 8c 76 b4 55 5e ba 50 75 f2 60 d3 bb Data Ascii: D\V1Jp+-^sm\bvBJLe.PJJCi-.pnw\h^]Q}OWEp?W`k>FYWw)2)=)F@Z+Q;k5V7$v~!oft)V)\|k{(Y;<D$$b{^vU^Pu`
2024-05-25 23:00:19 UTC	1500	IN	Data Raw: 05 c4 0c 00 c7 0e d2 9e 67 45 ac 10 3a 77 b5 89 86 09 d3 ca d9 d6 f2 4c 11 f2 01 f4 4c 66 8c 8f 09 12 88 c4 c0 6a 74 01 74 26 05 5f 41 4a 08 09 33 0c d3 1a 0c cb 6e da 0f 91 b3 d1 06 33 22 d1 91 86 0f 44 30 1d 44 63 b9 cc 6a 58 61 c4 0a 47 57 e5 c6 0c cf 41 24 ce 45 65 c8 95 0b c4 4d f7 9e 83 bd 10 7c 17 a5 95 5c 90 40 3a 35 ea 9c e5 48 60 85 fe 5e 08 71 e5 70 24 40 6b 5c ea a4 11 4a 1d 46 ba 3b ce 86 e9 56 04 3d 96 b7 5c 00 00 20 00 49 44 41 54 56 64 44 7f 22 04 0c 0b 91 dc 0d 21 00 a6 85 78 e1 e5 8c fb 48 c8 e1 ea 76 38 82 68 1c a3 08 a0 09 6e 06 81 f1 a2 34 60 9a 30 2d 90 18 d9 6d 3b 9e d6 84 b7 8c d6 d0 1a 42 5f db a2 71 9c 0e 98 19 96 85 b3 27 a8 f7 12 e2 09 f8 fe 58 47 94 34 10 8d e7 fe e5 64 fc be 2c 22 f4 f7 0c 5a d7 0d 3b f7 e0 85 b9 e3 3c f9 7e Data Ascii: gE:wLLfjtt&_AJ3n3"D0DcjXaGWA$EeM\|\@:5H`^qp$@k\JF;V=\ IDATVdD"!xHv8hn4`0-m;B_q'XG4d,"Z;<~
2024-05-25 23:00:19 UTC	8701	IN	Data Raw: 72 b3 17 d4 92 11 0b 57 3d 58 22 db 0f 12 06 bf 8c 5d 32 8d 72 c6 dc f0 a9 ff 58 7b f1 29 b7 73 93 e9 ee 32 53 67 86 95 f7 c5 b7 dc 13 ea 61 37 8b 37 0a e7 8e b7 36 f2 b1 0a 6d da f1 96 79 e5 69 fb a1 5f f1 b5 de 86 ae 2a 49 15 c8 ac 84 a4 48 6b 13 ce b2 45 c3 08 d0 ad 29 e9 de 3a 76 c8 5c b7 f8 ea 5b a0 1b de 08 99 73 fa a3 7d ac 9e 2e 95 c6 e8 17 ff 65 7c f3 5d e6 89 47 dd c6 d7 4c be 54 2f c1 db 1a 32 79 1e 48 46 83 14 4a 9a bb 30 f4 75 5f 24 da 1a a9 5a d1 a4 e9 61 e0 83 5c af 60 90 f7 bf 31 2a f7 e9 c6 15 61 fe d2 f8 d8 21 1f bc ae 99 12 f2 05 65 58 d0 ea cc ac c4 93 c7 46 70 b9 a8 24 16 9c 3a 6e 82 1f b6 75 78 ea df c8 e9 b7 0f 5e bd dd 2a 14 f5 c1 87 fd f2 3b c2 0f bf 69 d7 3c 67 8d 93 1d cc 65 77 46 b4 a4 11 7a db 3a f3 f4 b7 dc c7 7f 37 ee eb c9 Data Ascii: rW=X"]2rX{)s2Sga776myi_IHkE):v\[s}.e\|]GLT/2yHFJ0u_$Za\`1a!eXFp$:nux^*;i<gewFz:7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.6	59169	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:18 UTC	2069	OUT	GET /ajax/bootloader-endpoint/?modules=KeyframesRenderer%2CFBKeyframesLoggedSession%2CKeyframesAssetDecoder&__aaid=0&__user=0&__a=1&__req=6&__hs=19868.HYP%3Acomet_loggedout_pkg.2.1..0.0&dpr=1&__ccg=GOOD&__rev=1013770602&__s=%3A%3Afjuzaa&__hsi=7373075910951068210&__dyn=7xeUmwlEnwn8yEqxemh0cm5U4e1Nxt3odEc8co5S3O2Saw8i2S1DwUx609vCwjE1xoswIK1Rw8G11wBz83WwgEcEhwGwQw9m1YwBgao6C0Mo2swlo5qfK0zEkxe2Gewywuo88brwKxm5oe85nxmu3W0GpovU11E98bpEbUGdwda3e0Lo4q58jwTwNwLwFg2Xwkoqwqo4eE7W1iwGwRxW1ow&__csr=glMN4ihezhdPbaAzQgymHr8HQAt7J4GiypRAyrZacq_RG4ma-hk9xy6vyk8AFudDUylkAFe6oOvAUO9yKdy9aL8qWF2LSjDFWiGUgXx6imU8ESi8Vkaw4ww1Ae0le3m9g0yG5K0tu043K050o3mw3d6Eow1oi0mu09UyEnwIw8Fwt82Uw614GagS8o0WZ00GiAg1Gy0VQ0fua05rgABkca3e03_xwkS0it5w1jKEowk80Yy02Ui09ig5S1Zw-w4X80sK0uW0a6wQwJwfEU0At0qo8xaxy0nx024F98jzUW0bEw5Gz8Wp0kE46m0X8HxykNA48a6290u-0Dzp8e8G0ja1iw27t0uo3I3pBYpbJywS3C9iyaAckg5AoBDyo98Rqib5adAfiGOIPD80X81wE6m2eEcqbwbSdgCbzA8gO5Ey2G5U5l2U3RUmwOg8EgUlosxlxZy8GUOu1sAwgeayo7qawE81boc82wBGbzoxwXCggixi39685TzUT4wuoxwLa1lwc65Q0Jaxa8a8DAjho [TRUNCATED] Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/Codashop.IDofficial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:18 UTC	965	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: text/javascript; charset=utf-8 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-25 23:00:18 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-25 23:00:18 UTC	1784	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-25 23:00:18 UTC	607	IN	Data Raw: 31 33 64 65 0d 0a 66 6f 72 20 28 3b 3b 29 3b 7b 22 68 72 70 22 3a 7b 22 68 73 72 70 22 3a 7b 22 68 73 64 70 22 3a 7b 22 63 6c 70 44 61 74 61 22 3a 7b 22 31 38 33 38 31 34 32 22 3a 7b 22 72 22 3a 31 2c 22 73 22 3a 31 7d 2c 22 34 38 38 33 22 3a 7b 22 72 22 3a 31 2c 22 73 22 3a 31 7d 7d 2c 22 67 6b 78 44 61 74 61 22 3a 7b 22 32 30 39 33 35 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 33 37 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 39 39 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 37 37 34 32 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 Data Ascii: 13defor (;;);{"hrp":{"hsrp":{"hsdp":{"clpData":{"1838142":{"r":1,"s":1},"4883":{"r":1,"s":1}},"gkxData":{"20935":{"result":true,"hash":null},"21037":{"result":false,"hash":null},"2199":{"result":false,"hash":null},"7742":{"result":false,"hash":null},"20
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 7d 2c 22 71 65 78 44 61 74 61 22 3a 7b 22 35 32 36 22 3a 7b 22 72 22 3a 6e 75 6c 6c 7d 2c 22 35 33 38 22 3a 7b 22 72 22 3a 6e 75 6c 6c 7d 2c 22 35 34 33 22 3a 7b 22 72 22 3a 6e 75 6c 6c 7d 7d 2c 22 6a 75 73 74 6b 6e 6f 62 78 44 61 74 61 22 3a 7b 22 35 35 22 3a 7b 22 72 22 3a 74 72 75 65 7d 7d 7d 2c 22 68 62 6c 70 22 3a 7b 22 63 6f 6e 73 69 73 74 65 6e 63 79 22 3a 7b 22 72 65 76 22 3a 31 30 31 33 37 37 30 36 30 32 7d 2c 22 72 73 72 63 4d 61 70 22 3a 7b 22 63 73 72 3a 5f 36 5f 30 5f 52 58 22 3a 7b 22 74 79 70 65 22 3a 22 63 73 72 22 2c 22 73 72 63 22 3a 22 3a 38 36 2c 31 2c 34 32 2c 32 32 2c 34 30 2c 33 37 2c 33 35 22 2c 22 63 22 3a 31 7d 2c 22 63 73 72 3a 5f 36 5f 31 5f 4d 46 22 3a 7b 22 74 79 70 65 22 3a 22 63 73 72 22 Data Ascii: "hash":null}},"qexData":{"526":{"r":null},"538":{"r":null},"543":{"r":null}},"justknobxData":{"55":{"r":true}}},"hblp":{"consistency":{"rev":1013770602},"rsrcMap":{"csr:_6_0_RX":{"type":"csr","src":":86,1,42,22,40,37,35","c":1},"csr:_6_1_MF":{"type":"csr"
2024-05-25 23:00:18 UTC	1500	IN	Data Raw: 79 66 72 61 6d 65 73 50 6c 75 67 69 6e 44 79 6e 61 6d 69 63 50 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 72 22 3a 5b 22 63 73 72 3a 5f 36 5f 39 5f 6b 52 22 5d 2c 22 62 65 22 3a 31 7d 2c 22 4b 65 79 66 72 61 6d 65 73 50 6c 75 67 69 6e 44 79 6e 61 6d 69 63 50 72 6f 70 65 72 74 69 65 73 53 63 68 65 6d 61 22 3a 7b 22 72 22 3a 5b 22 63 73 72 3a 5f 36 5f 61 5f 74 69 22 5d 2c 22 62 65 22 3a 31 7d 2c 22 4b 65 79 66 72 61 6d 65 73 50 6c 75 67 69 6e 4c 61 79 65 72 54 61 67 73 22 3a 7b 22 72 22 3a 5b 22 63 73 72 3a 5f 36 5f 62 5f 34 38 22 5d 2c 22 62 65 22 3a 31 7d 2c 22 4b 65 79 66 72 61 6d 65 73 50 6c 75 67 69 6e 4c 61 79 65 72 54 61 67 73 53 63 68 65 6d 61 22 3a 7b 22 72 22 3a 5b 22 63 73 72 3a 5f 36 5f 63 5f 56 36 22 5d 2c 22 62 65 22 3a 31 7d 2c 22 4b 65 79 66 72 Data Ascii: yframesPluginDynamicProperties":{"r":["csr:_6_9_kR"],"be":1},"KeyframesPluginDynamicPropertiesSchema":{"r":["csr:_6_a_ti"],"be":1},"KeyframesPluginLayerTags":{"r":["csr:_6_b_48"],"be":1},"KeyframesPluginLayerTagsSchema":{"r":["csr:_6_c_V6"],"be":1},"Keyfr
2024-05-25 23:00:18 UTC	1492	IN	Data Raw: 22 5f 5f 72 63 22 3a 5b 22 44 54 53 47 5f 41 53 59 4e 43 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 36 39 36 37 30 33 22 2c 5b 22 4a 53 53 63 68 65 64 75 6c 65 72 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 4a 53 53 63 68 65 64 75 6c 65 72 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 33 38 37 22 2c 5b 22 72 65 71 75 65 73 74 49 64 6c 65 43 61 6c 6c 62 61 63 6b 57 57 57 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 72 65 71 75 65 73 74 49 64 6c 65 43 61 6c 6c 62 61 63 6b 57 57 57 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 39 32 35 31 30 30 22 2c 5b 22 52 75 6e 43 6f 6d 65 74 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 52 75 6e 43 6f 6d 65 74 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 36 34 32 37 39 37 22 2c 5b 22 42 61 6e 7a Data Ascii: "__rc":["DTSG_ASYNC",null]},-1],["cr:696703",["JSScheduler"],{"__rc":["JSScheduler",null]},-1],["cr:7387",["requestIdleCallbackWWW"],{"__rc":["requestIdleCallbackWWW",null]},-1],["cr:925100",["RunComet"],{"__rc":["RunComet",null]},-1],["cr:1642797",["Banz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.6	59170	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:18 UTC	375	OUT	GET /rsrc.php/v3/ye/r/4PEEs7qlhJk.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:19 UTC	1912	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: oeXzM60JLxaQX8HmDUBHKQ== Expires: Sun, 18 May 2025 04:12:17 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: zoM45/A/YZb6241bTcSp/bNRNIX0vjqDG2S3/3jUi/0MVD6ZZRunCWsdiRC8gyZbrMTYV4j5KMI7mJzZ0IUUow== Date: Sat, 25 May 2024 23:00:18 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 265
2024-05-25 23:00:19 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-05-25 23:00:19 UTC	264	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 04 03 00 00 00 7f a7 00 3e 00 00 00 30 50 4c 54 45 47 70 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 25 4c f4 39 00 00 00 0f 74 52 4e 53 00 05 dc 89 50 55 a5 d9 ec f3 02 4a 0b f2 4b ef 6c d1 a2 00 00 00 79 49 44 41 54 08 5b 63 60 60 60 0c ab 9c 9e 2a c0 00 02 4e ff 81 40 05 c4 5a fc 1f 0c ac 80 4c 7b 08 f3 33 03 03 0b 90 fa d1 0f 24 1c 18 84 80 64 cf 09 20 a1 c8 10 0f 63 7e 65 c8 87 29 f8 c6 50 0f 24 37 ec 07 12 df 19 e6 83 98 fc 40 e2 27 98 f9 01 c4 fc 0b 56 00 66 7e 07 6b 03 33 bf 81 0d 03 33 bf 82 ad f8 fd 1e 6c 05 cb 7f 28 70 40 76 0e b2 23 91 9c 0e f7 10 00 38 57 8c 83 67 ba 2d 29 00 00 00 Data Ascii: PNGIHDR>0PLTEGpL%L9tRNSPUJKlyIDAT[c```*N@ZL{3$d c~e)P$7@'Vf~k33l(p@v#8Wg-)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.6	59172	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:18 UTC	375	OUT	GET /rsrc.php/v3/y7/r/4Lea07Woawi.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:19 UTC	1871	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: 336hN8ZAy/yJiOv8vqPnTA== Expires: Sun, 18 May 2025 04:13:52 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: 7U3FgUjV5TF9YoiknHwDt8dHsaxqFnFYy6nkejO1l0G4aA9PCLMn+AK+V8AM5NTOXTFl0VpybJ/MrKMFZBfHIA== Date: Sat, 25 May 2024 23:00:18 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 467
2024-05-25 23:00:19 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-05-25 23:00:19 UTC	466	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 03 00 00 00 ba 57 ed 3f 00 00 00 ab 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 35 b4 44 00 00 00 38 74 52 4e 53 00 fa f5 f7 ef f4 f6 f8 f2 f3 f0 f9 98 03 64 48 a8 66 e0 1d f1 b4 55 fe 3b 21 71 25 0a 05 0b 75 Data Ascii: PNGIHDRW?PLTE45D8tRNSdHfU;!q%u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.6	59173	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:18 UTC	375	OUT	GET /rsrc.php/v3/yE/r/2PIcyqpptfD.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:19 UTC	1912	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: /dqIksz4VoF/4Q2MBkfmkg== Expires: Sat, 24 May 2025 13:48:58 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: +9TdOTLvo5puaaNJO1JTb3af2lzDNX1KkjnMtrJgKDnIMGbgr/zpYSGlx2U5Ypi4wYL4Yg31t0D+WH8KBpc+7Q== Date: Sat, 25 May 2024 23:00:18 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 432
2024-05-25 23:00:19 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-05-25 23:00:19 UTC	431	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 03 00 00 00 ba 57 ed 3f 00 00 00 90 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c3 21 88 23 00 00 00 2f 74 52 4e 53 00 0e 42 47 f0 9e c2 04 e4 25 e8 9d 28 da 0f 11 df 2d 95 f3 bc 69 fb 4e 67 e6 ed f1 1d fd 2e 05 06 18 d1 1b 15 bb ba 1c d2 e7 2f 2a f2 0c e5 8c d2 47 8f 00 00 00 a0 49 44 41 54 Data Ascii: PNGIHDRW?PLTE!#/tRNSBG%(-iNg./*GIDAT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.6	59171	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:18 UTC	375	OUT	GET /rsrc.php/v3/yP/r/8p1yRlAKDA6.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:19 UTC	1913	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: HI74w+K2FlhUxcXEF3NP6A== Expires: Fri, 23 May 2025 18:29:09 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: xZATMvCDH3P1L3uVFaHXSyEfZG59UEsqZOyhYLfNHROJlz3bCzpNC9Wy7vMEdnI3abIfon8htaJLL10GqmVwjg== Date: Sat, 25 May 2024 23:00:18 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 3146
2024-05-25 23:00:19 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-05-25 23:00:19 UTC	3145	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 15 00 00 01 c3 08 03 00 00 00 fc d9 a1 22 00 00 01 80 50 4c 54 45 47 70 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR"PLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.6	59174	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:18 UTC	617	OUT	GET /images/emoji.php/v9/t6e/1/16/1f4ac.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:19 UTC	1713	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: tpXPYLQp/VdSfZRxDFjPzA== Expires: Sat, 24 May 2025 10:04:56 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin;report-to="coop_report" X-Content-Type-Options: nosniff
2024-05-25 23:00:19 UTC	855	IN	Data Raw: 72 65 70 6f 72 74 2d 74 6f 3a 20 7b 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 6f 6f 70 5c 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 2c 22 69 6e 63 6c 75 64 65 5f 73 75 62 64 6f 6d 61 69 6e 73 22 3a 74 72 75 65 7d 2c 20 7b 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 Data Ascii: report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/c
2024-05-25 23:00:19 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-05-25 23:00:19 UTC	388	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 75 50 4c 54 45 47 70 4c bf da ee 9d c1 db b1 d1 e8 8b b2 cf dd ec f7 ca e1 f2 c4 de f0 e4 f1 f9 a0 c3 dc ab cc e4 a0 c3 dd 9a bf da ac cd e5 a8 cb e3 d1 e5 f4 d9 ea f6 da ea f6 d5 e7 f5 ad ce e5 c5 de f0 c9 e0 f1 9f c3 dc a1 c5 de 98 bd d8 a0 c3 dd a2 c6 e0 97 bc d7 e1 ee f7 f6 fb fd f3 f9 fc ee f6 fb d4 e7 f5 e9 f3 fa 7c a8 c9 de ec f6 b7 d5 eb db e9 f4 c9 e1 f2 36 e8 dc 15 00 00 00 1c 74 52 4e 53 00 fd b3 e5 11 ed 57 fe fe 1e 34 de 61 fa 95 75 c2 ce dd dd 9b e0 d0 d0 53 cf 2a 72 07 d3 1b a3 00 00 00 a3 49 44 41 54 78 da 45 48 03 82 04 41 10 cb 18 8d f5 31 6d fc ff 89 2b 4c 55 0c 00 cb 6e 3f 90 c3 7e b7 e0 71 e3 61 76 ce 5a e7 e6 c3 f8 e8 43 b0 d6 dc Data Ascii: PNGIHDR(-SuPLTEGpL\|6tRNSW4auS*rIDATxEHA1m+LUn?~qavZC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.6	59176	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:18 UTC	617	OUT	GET /images/emoji.php/v9/t34/1/16/1f914.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:19 UTC	1713	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: PicXcOha4aSNdnCXDVNBtw== Expires: Sun, 18 May 2025 02:37:55 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin;report-to="coop_report" X-Content-Type-Options: nosniff
2024-05-25 23:00:19 UTC	829	IN	Data Raw: 72 65 70 6f 72 74 2d 74 6f 3a 20 7b 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 6f 6f 70 5c 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 2c 22 69 6e 63 6c 75 64 65 5f 73 75 62 64 6f 6d 61 69 6e 73 22 3a 74 72 75 65 7d 2c 20 7b 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 Data Ascii: report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/c
2024-05-25 23:00:19 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-05-25 23:00:19 UTC	629	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 02 3d 49 44 41 54 78 da 7d 93 03 ac 26 41 10 84 9f 10 9d 6d db b6 6d db b6 6d db b6 6d db 7c b6 6d db de ba 54 ff 99 fc e7 49 7a fc 55 63 76 0d 7e 6f 38 97 df 04 37 8a 35 c4 e7 1a b3 f0 a5 d6 1e 1a e7 dc e3 99 c1 ff 1a de 56 ae 81 4f 35 4e c0 ba 71 a8 66 d7 02 70 ed 28 96 f9 bd 39 b4 cf b5 43 79 c6 3b 7f 87 3f 56 6b 07 8b 7a 2e 04 34 9f 01 40 e0 30 68 41 e3 91 f8 ba 3d fc 76 14 12 8b 3c 59 02 99 2f aa b8 f0 ee 1f 9e 79 90 f1 a1 29 68 29 9f ba 20 cb 63 02 10 bd 44 c6 14 8b 81 48 fc d4 9b 62 72 4e 47 12 89 ca 99 a1 c5 5f af 88 d7 8b 8a e2 d2 b8 42 b0 58 51 58 00 2d 6e 9d d8 b7 67 53 b0 6c 6e 1f f8 be 1e 2d d1 31 3d 32 52 13 16 87 f9 71 73 de c4 2e a8 5d 7f Data Ascii: PNGIHDRa=IDATx}&Ammmm\|mTIzUcv~o875VO5Nqfp(9Cy;?Vkz.4@0hA=v<Y/y)h) cDHbrNG_BXQX-ngSln-1=2Rqs.]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.6	59178	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:18 UTC	927	OUT	POST /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 3027 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-FB-LSD: AVrj9UP_w8I sec-ch-ua-platform-version: "10.0.0" X-ASBD-ID: 129477 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/Codashop.IDofficial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:18 UTC	3027	OUT	Data Raw: 72 6f 75 74 65 5f 75 72 6c 73 5b 30 5d 3d 25 32 46 73 74 6f 72 69 65 73 25 32 46 31 37 34 30 38 37 34 36 37 34 32 30 31 36 36 25 32 46 55 7a 70 66 53 56 4e 44 4f 6a 67 7a 4f 54 4d 30 4d 7a 45 30 4e 44 63 30 4e 54 41 31 4e 41 25 33 44 25 33 44 25 32 46 25 33 46 76 69 65 77 5f 73 69 6e 67 6c 65 25 33 44 66 61 6c 73 65 25 32 36 5f 5f 63 66 74 5f 5f 5b 30 5d 25 33 44 41 5a 55 70 7a 4c 47 4a 79 5f 4a 72 30 53 32 4a 56 45 34 6a 4f 53 58 50 67 73 4f 50 45 65 73 58 74 76 56 58 79 44 69 59 54 32 38 59 46 55 2d 73 76 41 48 75 57 44 64 33 70 74 79 77 74 31 33 31 55 77 32 6b 65 32 34 50 48 62 35 64 6e 50 4c 36 39 6f 74 71 6d 41 52 78 5a 4f 37 45 77 4c 33 53 73 2d 30 68 52 30 35 43 62 5a 62 56 39 79 74 75 65 70 39 39 58 50 5f 45 39 58 75 33 57 66 6e 4f 74 36 54 6b 61 Data Ascii: route_urls[0]=%2Fstories%2F174087467420166%2FUzpfSVNDOjgzOTM0MzE0NDc0NTA1NA%3D%3D%2F%3Fview_single%3Dfalse%26__cft__[0]%3DAZUpzLGJy_Jr0S2JVE4jOSXPgsOPEesXtvVXyDiYT28YFU-svAHuWDd3ptywt131Uw2ke24PHb5dnPL69otqmARxZO7EwL3Ss-0hR05CbZbV9ytuep99XP_E9Xu3WfnOt6Tka
2024-05-25 23:00:19 UTC	942	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-25 23:00:19 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-25 23:00:19 UTC	2026	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-25 23:00:19 UTC	388	IN	Data Raw: 62 34 63 34 0d 0a 66 6f 72 20 28 3b 3b 29 3b 7b 22 70 61 79 6c 6f 61 64 22 3a 7b 22 70 61 79 6c 6f 61 64 73 22 3a 7b 22 2f 73 74 6f 72 69 65 73 2f 31 37 34 30 38 37 34 36 37 34 32 30 31 36 36 2f 55 7a 70 66 53 56 4e 44 4f 6a 67 7a 4f 54 4d 30 4d 7a 45 30 4e 44 63 30 4e 54 41 31 4e 41 3d 3d 2f 3f 76 69 65 77 5f 73 69 6e 67 6c 65 3d 66 61 6c 73 65 26 5f 5f 63 66 74 5f 5f 5b 30 5d 3d 41 5a 55 70 7a 4c 47 4a 79 5f 4a 72 30 53 32 4a 56 45 34 6a 4f 53 58 50 67 73 4f 50 45 65 73 58 74 76 56 58 79 44 69 59 54 32 38 59 46 55 2d 73 76 41 48 75 57 44 64 33 70 74 79 77 74 31 33 31 55 77 32 6b 65 32 34 50 48 62 35 64 6e 50 4c 36 39 6f 74 71 6d 41 52 78 5a 4f 37 45 77 4c 33 53 73 2d 30 68 52 30 35 43 62 5a 62 56 39 79 74 75 65 70 39 39 58 50 5f 45 39 58 75 33 57 66 6e Data Ascii: b4c4for (;;);{"payload":{"payloads":{"/stories/174087467420166/UzpfSVNDOjgzOTM0MzE0NDc0NTA1NA==/?view_single=false&__cft__[0]=AZUpzLGJy_Jr0S2JVE4jOSXPgsOPEesXtvVXyDiYT28YFU-svAHuWDd3ptywt131Uw2ke24PHb5dnPL69otqmARxZO7EwL3Ss-0hR05CbZbV9ytuep99XP_E9Xu3Wfn
2024-05-25 23:00:19 UTC	1500	IN	Data Raw: 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 6e 75 6c 6c 7d 2c 22 2f 68 61 73 68 74 61 67 2f 6d 76 70 63 72 61 74 65 73 3f 5f 5f 65 65 70 5f 5f 3d 36 26 5f 5f 63 66 74 5f 5f 5b 30 5d 3d 41 5a 55 70 7a 4c 47 4a 79 5f 4a 72 30 53 32 4a 56 45 34 6a 4f 53 58 50 67 73 4f 50 45 65 73 58 74 76 56 58 79 44 69 59 54 32 38 59 46 55 2d 73 76 41 48 75 57 44 64 33 70 74 79 77 74 31 33 31 55 77 32 6b 65 32 34 50 48 62 35 64 6e 50 4c 36 39 6f 74 71 6d 41 52 78 5a 4f 37 45 77 4c 33 53 73 2d 30 68 52 30 35 43 62 5a 62 56 39 79 74 75 65 70 39 39 58 50 5f 45 39 58 75 33 57 66 6e 4f 74 36 54 6b 61 70 4a 54 63 4a 4d 61 4e 66 6c 74 58 72 74 72 56 69 64 38 30 34 59 65 67 69 78 5a 51 72 54 64 35 45 34 31 6b 57 6d 56 62 31 37 4e 59 64 6f 54 38 69 45 36 50 4c 65 66 6f 6e 38 Data Ascii: ":false,"result":null},"/hashtag/mvpcrates?__eep__=6&__cft__[0]=AZUpzLGJy_Jr0S2JVE4jOSXPgsOPEesXtvVXyDiYT28YFU-svAHuWDd3ptywt131Uw2ke24PHb5dnPL69otqmARxZO7EwL3Ss-0hR05CbZbV9ytuep99XP_E9Xu3WfnOt6TkapJTcJMaNfltXrtrVid804YegixZQrTd5E41kWmVb17NYdoT8iE6PLefon8
2024-05-25 23:00:19 UTC	1500	IN	Data Raw: 65 70 44 69 76 65 52 6f 6f 74 2e 65 6e 74 72 79 70 6f 69 6e 74 22 7d 7d 2c 22 73 74 72 69 70 50 61 72 61 6d 73 22 3a 5b 22 5f 5f 65 65 70 5f 5f 22 2c 22 5f 5f 65 70 61 5f 5f 22 2c 22 5f 5f 65 70 73 5f 5f 22 2c 22 5f 5f 68 63 72 5f 5f 22 2c 22 5f 5f 70 65 69 5f 5f 22 2c 22 5f 5f 70 65 74 5f 5f 22 2c 22 5f 5f 73 69 64 5f 5f 22 2c 22 5f 5f 74 73 69 64 5f 5f 22 2c 22 77 61 74 63 68 5f 63 6f 6e 66 69 67 22 5d 2c 22 75 70 73 65 6c 6c 43 6f 6e 66 69 67 22 3a 7b 22 73 75 72 66 61 63 65 22 3a 22 68 61 73 68 74 61 67 22 2c 22 74 79 70 65 22 3a 22 6c 6f 67 69 6e 5f 75 70 73 65 6c 6c 22 2c 22 69 73 44 69 73 6d 69 73 73 69 62 6c 65 22 3a 74 72 75 65 2c 22 64 65 62 75 67 53 65 72 76 65 72 55 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e Data Ascii: epDiveRoot.entrypoint"}},"stripParams":["__eep__","__epa__","__eps__","__hcr__","__pei__","__pet__","__sid__","__tsid__","watch_config"],"upsellConfig":{"surface":"hashtag","type":"login_upsell","isDismissible":true,"debugServerUri":"https://www.facebook.
2024-05-25 23:00:19 UTC	1500	IN	Data Raw: 74 58 72 74 72 56 69 64 38 30 34 59 65 67 69 78 5a 51 72 54 64 35 45 34 31 6b 57 6d 56 62 31 37 4e 59 64 6f 54 38 69 45 36 50 4c 65 66 6f 6e 38 5a 39 45 32 37 72 5f 6e 57 68 4c 6e 45 4d 4d 56 78 66 41 78 49 4a 32 48 73 26 5f 5f 74 6e 5f 5f 3d 52 5d 2d 52 22 3a 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 7b 22 74 79 70 65 22 3a 22 72 6f 75 74 65 5f 64 65 66 69 6e 69 74 69 6f 6e 22 2c 22 65 78 70 6f 72 74 73 22 3a 7b 22 61 63 74 6f 72 49 44 22 3a 22 30 22 2c 22 72 6f 6f 74 56 69 65 77 22 3a 7b 22 61 6c 6c 52 65 73 6f 75 72 63 65 73 22 3a 5b 7b 22 5f 5f 6a 73 72 22 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 4c 6f 67 67 65 64 4f 75 74 52 6f 6f 74 2e 72 65 61 63 74 22 7d 2c 7b 22 5f 5f 6a 73 72 22 3a 22 50 72 6f 66 69 6c 65 43 6f 6d Data Ascii: tXrtrVid804YegixZQrTd5E41kWmVb17NYdoT8iE6PLefon8Z9E27r_nWhLnEMMVxfAxIJ2Hs&__tn__=R]-R":{"error":false,"result":{"type":"route_definition","exports":{"actorID":"0","rootView":{"allResources":[{"__jsr":"ProfileCometLoggedOutRoot.react"},{"__jsr":"ProfileCom
2024-05-25 23:00:19 UTC	1500	IN	Data Raw: 43 6f 6e 66 69 67 22 3a 7b 22 73 75 72 66 61 63 65 22 3a 22 70 72 6f 66 69 6c 65 22 2c 22 74 79 70 65 22 3a 22 6c 6f 67 69 6e 5f 75 70 73 65 6c 6c 22 2c 22 69 73 44 69 73 6d 69 73 73 69 62 6c 65 22 3a 74 72 75 65 2c 22 64 65 62 75 67 53 65 72 76 65 72 55 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 22 7d 2c 22 63 61 6e 6f 6e 69 63 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 22 72 6f 75 74 65 5f 6d 61 74 63 68 5f 69 6e 66 6f 73 22 3a 5b 7b 22 69 6e 73 74 61 6e 63 65 50 61 72 61 6d 73 22 3a 7b 22 76 61 6e 69 74 79 22 3a 22 69 77 61 74 61 6e 69 2e 6e 61 7a 72 69 6c 2e 32 31 22 7d 2c 22 72 6f 75 74 65 50 61 72 61 6d 73 22 3a 7b 22 76 61 Data Ascii: Config":{"surface":"profile","type":"login_upsell","isDismissible":true,"debugServerUri":"https://www.facebook.com/ajax/bulk-route-definitions/"},"canonicalUrl":null},"route_match_infos":[{"instanceParams":{"vanity":"iwatani.nazril.21"},"routeParams":{"va
2024-05-25 23:00:19 UTC	1500	IN	Data Raw: 69 62 6c 65 54 79 70 65 22 3a 22 42 4f 4f 4c 22 7d 2c 22 65 76 65 6e 74 5f 69 64 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 66 61 6c 73 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 46 42 49 44 22 7d 2c 22 73 6f 72 74 69 6e 67 5f 73 65 74 74 69 6e 67 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 74 72 75 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 45 4e 55 4d 22 7d 2c 22 74 61 67 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 Data Ascii: ibleType":"BOOL"},"event_id":{"legacyNames":[],"default":null,"path":false,"significant":false,"coercibleType":"FBID"},"sorting_setting":{"legacyNames":[],"default":null,"path":false,"significant":true,"coercibleType":"ENUM"},"tag":{"legacyNames":[],"defa
2024-05-25 23:00:19 UTC	1500	IN	Data Raw: 45 58 49 53 54 53 22 7d 2c 22 6d 6f 64 61 6c 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 74 72 75 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 53 54 52 49 4e 47 22 7d 2c 22 64 65 6c 65 67 61 74 65 5f 70 61 67 65 5f 69 64 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 74 72 75 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 46 42 49 44 22 7d 2c 22 61 64 5f 61 63 63 6f 75 6e 74 5f 69 64 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 Data Ascii: EXISTS"},"modal":{"legacyNames":[],"default":null,"path":false,"significant":true,"coercibleType":"STRING"},"delegate_page_id":{"legacyNames":[],"default":null,"path":false,"significant":true,"coercibleType":"FBID"},"ad_account_id":{"legacyNames":[],"defa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.6	59179	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:18 UTC	375	OUT	GET /rsrc.php/v3/y3/r/BQdeC67wT9z.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:19 UTC	1912	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: rieOeATijCczzumIPaOM6Q== Expires: Sun, 25 May 2025 12:51:51 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: 3OT30OqLvnCAFc1RICAvWaU0QLYrIMrAVokCh9XhqKDFEwYE0eDK5SPvpy5A4HuXnaEv4qXNAC97SAsLP4ZXNQ== Date: Sat, 25 May 2024 23:00:18 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 376
2024-05-25 23:00:19 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-05-25 23:00:19 UTC	375	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 03 00 00 00 ba 57 ed 3f 00 00 00 6c 50 4c 54 45 47 70 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4e 09 e9 09 00 00 00 23 74 52 4e 53 00 8a a5 fe 51 f6 fa f9 55 05 f3 b6 dc fd 90 d1 1c 02 e0 da 2f 62 af 19 2a dd 76 e1 d9 a4 e3 e2 8b 3a 39 ff a1 d5 cd 00 00 00 98 49 44 41 54 78 5e 6d 91 47 8e c3 40 10 03 a9 38 33 4a b6 62 70 0c f5 ff 3f 2e 20 68 75 b0 bb 8e 04 88 26 d9 da 08 be 2c 92 a4 28 7d d0 41 5a b1 53 a5 bb d4 Data Ascii: PNGIHDRW?lPLTEGpLN#tRNSQU/b*v:9IDATx^mG@83Jbp?. hu&,(}AZS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.6	59181	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:18 UTC	368	OUT	GET /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:19 UTC	930	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-25 23:00:19 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-25 23:00:19 UTC	1662	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-25 23:00:19 UTC	2755	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 63 6f 6e 66 69 67 76 65 72 73 69 6f 6e 3d 22 41 63 4a 5f 39 4e 4d 53 67 4d 7a 4e 6c 50 77 51 77 44 78 79 30 70 6f 69 46 5a 63 56 47 33 4a 64 77 7a 56 39 48 58 75 76 5f 6e 55 72 32 68 75 54 50 2d 31 41 73 73 4c 45 70 37 5f 71 79 5a 78 73 34 55 53 4e 2d 68 57 31 35 78 39 4b 46 47 48 4c 45 59 44 42 7a 5a 50 78 32 45 62 31 58 6c 76 6f 55 50 6f 22 3b 20 65 5f 63 6c 69 65 6e 74 61 64 64 72 3d 22 41 63 4b 67 34 41 4f 64 6d 74 58 33 43 79 53 6b 2d 34 65 6d 61 74 70 35 46 2d 49 34 36 34 39 6a 71 32 55 75 35 57 2d 52 6c 6b 5a 70 46 52 56 55 36 67 4d 67 69 74 65 6d 71 6d 55 41 72 42 47 46 57 69 37 6f 51 38 56 6f 4b 4f 4f 31 74 62 49 38 6c 77 33 6b 71 Data Ascii: Proxy-Status: http_request_error; e_fb_configversion="AcJ_9NMSgMzNlPwQwDxy0poiFZcVG3JdwzV9HXuv_nUr2huTP-1AssLEp7_qyZxs4USN-hW15x9KFGHLEYDBzZPx2Eb1XlvoUPo"; e_clientaddr="AcKg4AOdmtX3CySk-4ematp5F-I4649jq2Uu5W-RlkZpFRVU6gMgitemqmUArBGFWi7oQ8VoKOO1tbI8lw3kq
2024-05-25 23:00:19 UTC	6	IN	Data Raw: 34 38 33 61 0d 0a Data Ascii: 483a
2024-05-25 23:00:19 UTC	1500	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 6a 66 47 4e 39 46 61 46 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 5b 63 5d 7d 77 69 Data Ascii: <!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="jfGN9FaF">function envFlush(a){function b(b){for(var c in a)b[c]=a[c]}wi
2024-05-25 23:00:19 UTC	1500	IN	Data Raw: 65 64 69 61 3d 22 68 61 6e 64 68 65 6c 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 3f 6c 6f 63 61 6c 65 32 3d 65 6e 5f 47 42 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 6f 64 70 2c 6e 6f 79 64 69 72 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4c 6f 67 20 69 6e 20 6f 72 20 73 69 67 6e 20 75 70 20 74 6f 20 76 69 65 77 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 65 20 70 6f 73 74 73 2c 20 70 Data Ascii: edia="handheld" href="https://www.facebook.com/ajax/bulk-route-definitions/?locale2=en_GB" /><meta name="robots" content="noodp,noydir" /><meta property="og:title" content="Log in or sign up to view" /><meta property="og:description" content="See posts, p
2024-05-25 23:00:19 UTC	1500	IN	Data Raw: 45 74 68 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 20 64 61 74 61 2d 62 6f 6f 74 6c 6f 61 64 65 72 2d 68 61 73 68 3d 22 31 2b 48 31 6c 46 42 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 5f 2f 6c 2f 30 2c 63 72 6f 73 73 2f 53 49 57 59 46 33 50 62 56 4f 78 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 20 64 61 74 61 2d 62 6f 6f 74 6c 6f 61 64 65 72 2d 68 61 73 68 3d 22 63 31 66 6f 74 6a 6a 22 20 63 72 6f 73 73 6f Data Ascii: Eth.css?_nc_x=Ij3Wp8lg5Kz" data-bootloader-hash="1+H1lFB" crossorigin="anonymous" /><link type="text/css" rel="stylesheet" href="https://static.xx.fbcdn.net/rsrc.php/v3/y_/l/0,cross/SIWYF3PbVOx.css?_nc_x=Ij3Wp8lg5Kz" data-bootloader-hash="c1fotjj" crosso
2024-05-25 23:00:19 UTC	1500	IN	Data Raw: 6d 65 6f 75 74 57 57 57 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 38 39 35 38 22 2c 5b 22 46 42 4a 53 4f 4e 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 46 42 4a 53 4f 4e 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 30 37 38 22 2c 5b 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 6e 75 6c 6c 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 30 38 30 22 2c 5b 22 75 6e 65 78 70 65 63 74 65 64 55 73 65 49 6e 43 6f 6d 65 74 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 75 6e 65 78 70 65 63 74 65 64 55 73 65 49 6e 43 6f 6d 65 74 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 36 31 30 38 22 2c 5b 22 43 53 53 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 43 53 53 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 33 38 35 22 2c 5b 22 63 6c 65 61 72 49 6e Data Ascii: meoutWWW",null]},-1],["cr:8958",["FBJSON"],{"__rc":["FBJSON",null]},-1],["cr:1078",[],{"__rc":[null,null]},-1],["cr:1080",["unexpectedUseInComet"],{"__rc":["unexpectedUseInComet",null]},-1],["cr:6108",["CSS"],{"__rc":["CSS",null]},-1],["cr:7385",["clearIn
2024-05-25 23:00:19 UTC	1500	IN	Data Raw: 43 5a 55 68 6d 46 71 2d 71 65 76 68 2d 41 6b 6e 61 69 75 53 76 54 64 4f 72 66 4d 57 52 6f 69 58 47 55 22 2c 22 61 6c 6c 6f 77 6c 69 73 74 65 64 5f 69 66 72 61 6d 65 73 22 3a 5b 5d 2c 22 69 73 5f 63 68 65 63 6b 70 6f 69 6e 74 65 64 22 3a 66 61 6c 73 65 7d 2c 35 35 34 30 5d 2c 5b 22 53 65 72 76 65 72 54 69 6d 65 44 61 74 61 22 2c 5b 5d 2c 7b 22 73 65 72 76 65 72 54 69 6d 65 22 3a 31 37 31 36 36 37 38 30 31 39 30 38 36 2c 22 74 69 6d 65 4f 66 52 65 71 75 65 73 74 53 74 61 72 74 22 3a 31 37 31 36 36 37 38 30 31 39 30 32 36 2e 33 2c 22 74 69 6d 65 4f 66 52 65 73 70 6f 6e 73 65 53 74 61 72 74 22 3a 31 37 31 36 36 37 38 30 31 39 30 32 36 2e 33 7d 2c 35 39 34 33 5d 2c 5b 22 55 52 4c 46 72 61 67 6d 65 6e 74 50 72 65 6c 75 64 65 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b Data Ascii: CZUhmFq-qevh-AknaiuSvTdOrfMWRoiXGU","allowlisted_iframes":[],"is_checkpointed":false},5540],["ServerTimeData",[],{"serverTime":1716678019086,"timeOfRequestStart":1716678019026.3,"timeOfResponseStart":1716678019026.3},5943],["URLFragmentPreludeConfig",[],{
2024-05-25 23:00:19 UTC	1500	IN	Data Raw: 6e 65 22 7d 2c 22 75 73 69 64 61 22 3a 7b 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 76 70 64 22 3a 7b 22 74 22 3a 35 31 38 34 30 30 30 2c 22 73 22 3a 22 4c 61 78 22 7d 2c 22 77 64 22 3a 7b 22 74 22 3a 36 30 34 38 30 30 2c 22 73 22 3a 22 4c 61 78 22 7d 2c 22 77 6c 5f 63 62 76 22 3a 7b 22 74 22 3a 37 37 37 36 30 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 78 2d 72 65 66 65 72 65 72 22 3a 7b 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 78 2d 73 72 63 22 3a 7b 22 74 22 3a 31 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 7d 2c 32 31 30 34 5d 2c 5b 22 43 75 72 72 65 6e 74 55 73 65 72 49 6e 69 74 69 61 6c 44 61 74 61 22 2c 5b 5d 2c 7b 22 41 43 43 4f 55 4e 54 5f 49 44 22 3a 22 30 22 2c 22 55 53 45 52 5f 49 44 22 3a 22 30 22 2c 22 4e 41 4d 45 22 3a 22 22 2c 22 53 48 4f 52 54 5f Data Ascii: ne"},"usida":{"s":"None"},"vpd":{"t":5184000,"s":"Lax"},"wd":{"t":604800,"s":"Lax"},"wl_cbv":{"t":7776000,"s":"None"},"x-referer":{"s":"None"},"x-src":{"t":1,"s":"None"}},2104],["CurrentUserInitialData",[],{"ACCOUNT_ID":"0","USER_ID":"0","NAME":"","SHORT_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.6	59182	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:19 UTC	599	OUT	GET /rsrc.php/v3/yc/r/cGxo7_n9cky.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:19 UTC	1940	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: /g49wO7oRfmXoyK+fQs8vQ== Expires: Fri, 16 May 2025 07:11:55 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: rOXKeHB5Qh6vThO7FLqoYXCO83MrG+I+mwCfECeJeJC6QzJStrvWLkE2vKKi7eLSZLEKlrUvRWED/K49kbO6SQ== Date: Sat, 25 May 2024 23:00:19 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3412, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 77114
2024-05-25 23:00:19 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-05-25 23:00:19 UTC	15875	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 42 6c 6f 62 46 61 63 74 6f 72 79 22 2c 5b 22 65 6d 70 74 79 46 75 6e 63 74 69 6f 6e 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 76 61 72 20 67 3b 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b 74 72 79 7b 6e 65 77 20 61 2e 42 6c 6f 62 28 29 2c 67 3d 21 30 7d 63 61 74 63 68 28 61 29 7b 67 3d 21 31 7d 7d 76 61 72 20 69 3d 61 2e 42 6c 6f 62 42 75 69 6c 64 65 72 7c 7c 61 2e 57 65 62 4b 69 74 42 6c 6f 62 42 75 69 6c 64 65 72 7c 7c 61 2e 4d 6f 7a 42 6c 6f 62 42 75 69 6c 64 65 72 7c 7c 61 2e 4d 53 42 6c 6f 62 42 75 69 6c 64 65 72 3b 61 2e 42 6c 6f 62 3f 63 3d 7b 67 65 74 42 6c 6f 62 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 62 3d 62 7c 7c 5b 5d 3b 63 3d 63 7c 7c 7b Data Ascii: /FB_PKG_DELIM/__d("BlobFactory",["emptyFunction"],(function(a,b,c,d,e,f){var g;function h(){try{new a.Blob(),g=!0}catch(a){g=!1}}var i=a.BlobBuilder\|\|a.WebKitBlobBuilder\|\|a.MozBlobBuilder\|\|a.MSBlobBuilder;a.Blob?c={getBlob:function(b,c){b=b\|\|[];c=c\|\|{
2024-05-25 23:00:19 UTC	16384	IN	Data Raw: 6e 20 61 3f 74 68 69 73 2e 62 62 2e 5f 5f 76 65 63 74 6f 72 5f 6c 65 6e 28 74 68 69 73 2e 62 62 5f 70 6f 73 2b 61 29 3a 30 7d 3b 67 2e 6b 65 79 66 72 61 6d 65 73 2e 53 63 61 6c 61 72 41 6e 69 6d 61 74 69 6f 6e 2e 73 74 61 72 74 53 63 61 6c 61 72 41 6e 69 6d 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 73 74 61 72 74 4f 62 6a 65 63 74 28 34 29 7d 3b 67 2e 6b 65 79 66 72 61 6d 65 73 2e 53 63 61 6c 61 72 41 6e 69 6d 61 74 69 6f 6e 2e 61 64 64 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 61 64 64 46 69 65 6c 64 46 6c 6f 61 74 33 32 28 30 2c 62 2c 30 29 7d 3b 67 2e 6b 65 79 66 72 61 6d 65 73 2e 53 63 61 6c 61 72 41 6e 69 6d 61 74 69 6f 6e 2e 61 64 64 56 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 61 64 Data Ascii: n a?this.bb.__vector_len(this.bb_pos+a):0};g.keyframes.ScalarAnimation.startScalarAnimation=function(a){a.startObject(4)};g.keyframes.ScalarAnimation.addValue=function(a,b){a.addFieldFloat32(0,b,0)};g.keyframes.ScalarAnimation.addValues=function(a,b){a.ad
2024-05-25 23:00:19 UTC	16384	IN	Data Raw: 69 6d 61 74 69 6f 6e 2e 65 6e 64 43 6f 6c 6f 72 41 72 72 61 79 41 6e 69 6d 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 65 6e 64 4f 62 6a 65 63 74 28 29 3b 72 65 74 75 72 6e 20 61 7d 3b 67 2e 6b 65 79 66 72 61 6d 65 73 2e 43 6f 6c 6f 72 41 72 72 61 79 41 6e 69 6d 61 74 69 6f 6e 2e 63 72 65 61 74 65 43 6f 6c 6f 72 41 72 72 61 79 41 6e 69 6d 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 67 2e 6b 65 79 66 72 61 6d 65 73 2e 43 6f 6c 6f 72 41 72 72 61 79 41 6e 69 6d 61 74 69 6f 6e 2e 73 74 61 72 74 43 6f 6c 6f 72 41 72 72 61 79 41 6e 69 6d 61 74 69 6f 6e 28 61 29 3b 67 2e 6b 65 79 66 72 61 6d 65 73 2e 43 6f 6c 6f 72 41 72 72 61 79 41 6e 69 6d 61 74 69 6f 6e 2e 61 64 64 56 61 6c 75 65 28 61 2c 62 29 3b 67 2e Data Ascii: imation.endColorArrayAnimation=function(a){a=a.endObject();return a};g.keyframes.ColorArrayAnimation.createColorArrayAnimation=function(a,b,c,d,e){g.keyframes.ColorArrayAnimation.startColorArrayAnimation(a);g.keyframes.ColorArrayAnimation.addValue(a,b);g.
2024-05-25 23:00:19 UTC	16384	IN	Data Raw: 3a 30 7d 3b 67 2e 6b 65 79 66 72 61 6d 65 73 2e 4c 61 79 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 75 74 61 74 65 5f 66 72 6f 6d 5f 70 72 6f 67 72 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 62 62 2e 5f 5f 6f 66 66 73 65 74 28 74 68 69 73 2e 62 62 5f 70 6f 73 2c 38 29 3b 69 66 28 62 3d 3d 3d 30 29 72 65 74 75 72 6e 21 31 3b 74 68 69 73 2e 62 62 2e 77 72 69 74 65 46 6c 6f 61 74 33 32 28 74 68 69 73 2e 62 62 5f 70 6f 73 2b 62 2c 61 29 3b 72 65 74 75 72 6e 21 30 7d 3b 67 2e 6b 65 79 66 72 61 6d 65 73 2e 4c 61 79 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 50 72 6f 67 72 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 62 62 2e 5f 5f 6f 66 66 73 65 74 28 74 68 69 73 2e 62 62 5f 70 6f 73 2c 31 Data Ascii: :0};g.keyframes.Layer.prototype.mutate_from_progress=function(a){var b=this.bb.__offset(this.bb_pos,8);if(b===0)return!1;this.bb.writeFloat32(this.bb_pos+b,a);return!0};g.keyframes.Layer.prototype.toProgress=function(){var a=this.bb.__offset(this.bb_pos,1
2024-05-25 23:00:19 UTC	1500	IN	Data Raw: 62 2c 61 29 3b 72 65 74 75 72 6e 21 30 7d 3b 67 2e 6b 65 79 66 72 61 6d 65 73 2e 44 6f 63 75 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 72 6f 6f 74 4c 61 79 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 62 62 2e 5f 5f 6f 66 66 73 65 74 28 74 68 69 73 2e 62 62 5f 70 6f 73 2c 31 32 29 3b 72 65 74 75 72 6e 20 62 3f 28 61 7c 7c 6e 65 77 20 67 2e 6b 65 79 66 72 61 6d 65 73 2e 4c 61 79 65 72 28 29 29 2e 5f 5f 69 6e 69 74 28 74 68 69 73 2e 62 62 2e 5f 5f 69 6e 64 69 72 65 63 74 28 74 68 69 73 2e 62 62 5f 70 6f 73 2b 62 29 2c 74 68 69 73 2e 62 62 29 3a 6e 75 6c 6c 7d 3b 67 2e 6b 65 79 66 72 61 6d 65 73 2e 44 6f 63 75 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 74 6d 61 70 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 Data Ascii: b,a);return!0};g.keyframes.Document.prototype.rootLayer=function(a){var b=this.bb.__offset(this.bb_pos,12);return b?(a\|\|new g.keyframes.Layer()).__init(this.bb.__indirect(this.bb_pos+b),this.bb):null};g.keyframes.Document.prototype.bitmaps=function(a,b){v
2024-05-25 23:00:19 UTC	10586	IN	Data Raw: 74 75 72 6e 21 30 7d 3b 67 2e 6b 65 79 66 72 61 6d 65 73 2e 44 6f 63 75 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 6e 69 66 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 62 62 2e 5f 5f 6f 66 66 73 65 74 28 74 68 69 73 2e 62 62 5f 70 6f 73 2c 32 32 29 3b 72 65 74 75 72 6e 20 62 3f 74 68 69 73 2e 62 62 2e 72 65 61 64 55 69 6e 74 38 28 74 68 69 73 2e 62 62 2e 5f 5f 76 65 63 74 6f 72 28 74 68 69 73 2e 62 62 5f 70 6f 73 2b 62 29 2b 61 29 3a 30 7d 3b 67 2e 6b 65 79 66 72 61 6d 65 73 2e 44 6f 63 75 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 6e 69 66 65 73 74 4c 65 6e 67 74 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 62 62 2e 5f 5f 6f 66 66 73 65 74 28 74 68 69 73 2e 62 62 5f 70 6f 73 Data Ascii: turn!0};g.keyframes.Document.prototype.manifest=function(a){var b=this.bb.__offset(this.bb_pos,22);return b?this.bb.readUint8(this.bb.__vector(this.bb_pos+b)+a):0};g.keyframes.Document.prototype.manifestLength=function(){var a=this.bb.__offset(this.bb_pos

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.6	59183	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:19 UTC	599	OUT	GET /rsrc.php/v3/yl/r/98yboYS91Bz.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:19 UTC	1981	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: q61Qnqr69v8gTicej8m01Q== Expires: Sun, 25 May 2025 14:45:08 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: HjGDArpgrHkwnROd7Ej+F039j6yXwVQ3npTI7Swb55yhhg7cGshhG+ALh/hF/xkGe3vbfkfUl6RFvKs3S9PLgQ== Date: Sat, 25 May 2024 23:00:19 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3412, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 72443
2024-05-25 23:00:19 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-05-25 23:00:19 UTC	15834	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 41 63 74 6e 53 65 6c 6c 65 72 54 61 67 50 72 6f 64 75 63 74 50 69 6c 6c 43 6c 69 63 6b 46 61 6c 63 6f 45 76 65 6e 74 22 2c 5b 22 46 61 6c 63 6f 4c 6f 67 67 65 72 49 6e 74 65 72 6e 61 6c 22 2c 22 67 65 74 46 61 6c 63 6f 4c 6f 67 50 6f 6c 69 63 79 5f 44 4f 5f 4e 4f 54 5f 55 53 45 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 63 28 22 67 65 74 46 61 6c 63 6f 4c 6f 67 50 6f 6c 69 63 79 5f 44 4f 5f 4e 4f 54 5f 55 53 45 22 29 28 22 31 33 30 36 22 29 3b 62 3d 64 28 22 46 61 6c 63 6f 4c 6f 67 67 65 72 49 6e 74 65 72 6e 61 6c 22 29 2e 63 72 65 61 74 65 28 22 61 63 74 6e 5f 73 65 6c 6c 65 72 5f 74 61 67 5f 70 72 6f Data Ascii: /FB_PKG_DELIM/__d("ActnSellerTagProductPillClickFalcoEvent",["FalcoLoggerInternal","getFalcoLogPolicy_DO_NOT_USE"],(function(a,b,c,d,e,f,g){"use strict";a=c("getFalcoLogPolicy_DO_NOT_USE")("1306");b=d("FalcoLoggerInternal").create("actn_seller_tag_pro
2024-05-25 23:00:19 UTC	16384	IN	Data Raw: 3a 22 69 64 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 6d 3d 5b 6c 5d 2c 6e 3d 5b 7b 6b 69 6e 64 3a 22 56 61 72 69 61 62 6c 65 22 2c 6e 61 6d 65 3a 22 6c 6f 63 61 74 69 6f 6e 22 2c 76 61 72 69 61 62 6c 65 4e 61 6d 65 3a 22 72 65 6e 64 65 72 4c 6f 63 61 74 69 6f 6e 22 7d 5d 2c 6f 3d 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 73 68 6f 75 6c 64 5f 68 6f 73 74 5f 61 63 74 6f 72 5f 6c 69 6e 6b 5f 69 6e 5f 77 61 74 63 68 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 70 3d 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 5b 7b 6b 69 6e 64 3a 22 4c 69 74 65 72 61 6c 22 2c 6e 61 6d 65 3a 22 73 75 70 70 6f 72 74 65 64 22 2c 76 61 6c 75 65 3a 22 31 46 Data Ascii: :"id",storageKey:null},m=[l],n=[{kind:"Variable",name:"location",variableName:"renderLocation"}],o={alias:null,args:n,kind:"ScalarField",name:"should_host_actor_link_in_watch",storageKey:null},p={alias:null,args:[{kind:"Literal",name:"supported",value:"1F
2024-05-25 23:00:19 UTC	16384	IN	Data Raw: 2c 6e 61 6d 65 3a 22 5f 5f 72 65 6c 61 79 5f 69 6e 74 65 72 6e 61 6c 5f 5f 70 76 5f 5f 49 73 57 6f 72 6b 55 73 65 72 72 65 6c 61 79 70 72 6f 76 69 64 65 72 22 7d 2c 7b 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 4c 6f 63 61 6c 41 72 67 75 6d 65 6e 74 22 2c 6e 61 6d 65 3a 22 5f 5f 72 65 6c 61 79 5f 69 6e 74 65 72 6e 61 6c 5f 5f 70 76 5f 5f 49 73 4d 65 72 67 51 41 50 6f 6c 6c 73 72 65 6c 61 79 70 72 6f 76 69 64 65 72 22 7d 2c 7b 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 4c 6f 63 61 6c 41 72 67 75 6d 65 6e 74 22 2c 6e 61 6d 65 3a 22 5f 5f 72 65 6c 61 79 5f 69 6e 74 65 72 6e 61 6c 5f 5f 70 76 5f 5f 43 6f 6d 65 74 55 46 49 52 65 61 63 74 69 6f 6e 73 45 6e 61 62 6c 65 53 68 6f 72 74 4e 61 6d 65 72 65 6c Data Ascii: ,name:"__relay_internal__pv__IsWorkUserrelayprovider"},{defaultValue:null,kind:"LocalArgument",name:"__relay_internal__pv__IsMergQAPollsrelayprovider"},{defaultValue:null,kind:"LocalArgument",name:"__relay_internal__pv__CometUFIReactionsEnableShortNamerel
2024-05-25 23:00:19 UTC	16384	IN	Data Raw: 65 65 64 53 74 6f 72 79 46 65 65 64 62 61 63 6b 47 72 6f 75 70 43 6f 6e 74 65 6e 74 4d 6f 64 65 72 61 74 69 6f 6e 51 75 65 75 65 53 74 72 61 74 65 67 79 5f 66 65 65 64 62 61 63 6b 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 66 65 65 64 62 61 63 6b 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 43 6f 6d 65 74 53 74 6f 72 79 46 65 65 64 62 61 63 6b 47 72 6f 75 70 43 6f 6e 74 65 6e 74 4d 6f 64 65 72 61 74 69 6f 6e 51 75 65 75 65 53 74 72 61 74 65 67 79 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 Data Ascii: eedStoryFeedbackGroupContentModerationQueueStrategy_feedback",fragmentPropName:"feedback",kind:"ModuleImport"}],type:"CometStoryFeedbackGroupContentModerationQueueStrategy",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,documentName:"Come
2024-05-25 23:00:19 UTC	1500	IN	Data Raw: 2c 74 79 70 65 3a 22 50 61 67 69 6e 61 74 65 64 47 72 6f 75 70 73 50 65 6f 70 6c 65 59 6f 75 4d 61 79 49 6e 76 69 74 65 46 65 65 64 55 6e 69 74 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 55 6e 69 74 43 6f 6e 74 61 69 6e 65 72 53 65 63 74 69 6f 6e 5f 66 65 65 64 55 6e 69 74 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 47 65 6d 69 6e 69 50 59 53 46 51 50 46 65 65 64 55 6e 69 74 53 74 72 61 74 65 67 79 5f 66 65 65 64 55 6e 69 74 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 66 65 65 64 55 6e 69 74 22 2c 6b 69 6e 64 3a 22 Data Ascii: ,type:"PaginatedGroupsPeopleYouMayInviteFeedUnit",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,documentName:"CometFeedUnitContainerSection_feedUnit",fragmentName:"GeminiPYSFQPFeedUnitStrategy_feedUnit",fragmentPropName:"feedUnit",kind:"
2024-05-25 23:00:19 UTC	5956	IN	Data Raw: 22 43 6f 6d 65 74 47 72 6f 75 70 52 65 6c 61 74 65 64 4b 65 79 77 6f 72 64 73 46 65 65 64 55 6e 69 74 53 74 72 61 74 65 67 79 5f 66 65 65 64 55 6e 69 74 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 66 65 65 64 55 6e 69 74 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 47 72 6f 75 70 52 65 6c 61 74 65 64 4b 65 79 77 6f 72 64 73 46 65 65 64 55 6e 69 74 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 55 6e 69 74 43 6f 6e 74 61 69 6e 65 72 53 65 63 74 69 6f 6e 5f 66 65 65 64 55 6e 69 74 Data Ascii: "CometGroupRelatedKeywordsFeedUnitStrategy_feedUnit",fragmentPropName:"feedUnit",kind:"ModuleImport"}],type:"GroupRelatedKeywordsFeedUnit",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,documentName:"CometFeedUnitContainerSection_feedUnit

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.6	59185	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:19 UTC	552	OUT	GET /m1/v/t6/An-V1eo7VQ3O9lqK2f9nfo3p019W0b_BTfQk8m_WliRJfm8Ss0I6dO39oKJmajreEZ2Oy5vSrTbDg0GpAgj0NSk-Eu5PWtSAd1gv.kf?ccb=10-5&oh=00_AYCD1VWQBamFCQirp7gVQT2iYvcacClMWPJi8f1p3bpxjA&oe=6679CDF1&_nc_sid=7da55a HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:19 UTC	914	IN	HTTP/1.1 200 OK content-digest: adler32=1456939275 Content-Type: image/x.fb.keyframes ETag: -4149138764619414100 x-manifold-obj-blobsizebytes: 8724 x-manifold-obj-canonicalpath: flat/base:v7:love.kf x-manifold-obj-ctime: 1611967371 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"1678524932434102","color":"f33e58","__ctime":"1611967371","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:19 GMT X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=2, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 8724
2024-05-25 23:00:19 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-05-25 23:00:19 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 00 00 16 00 24 00 10 00 1c 00 18 00 04 00 0c 00 08 00 00 00 00 00 20 00 16 00 00 00 05 00 00 00 1c 00 00 00 ac 11 00 00 00 00 34 43 00 00 34 43 00 00 40 40 00 00 70 42 01 00 00 00 01 00 00 00 0c 00 00 00 08 00 10 00 08 00 04 00 08 00 00 00 0c 00 00 00 00 00 34 43 00 00 34 43 6d 11 00 00 ff d8 ff db 00 84 00 01 01 01 01 01 01 01 01 01 01 02 01 01 01 02 02 02 01 01 02 02 02 02 02 02 02 02 02 03 02 03 03 03 03 02 03 03 04 04 04 04 04 03 05 05 05 05 05 05 07 07 07 07 07 08 08 08 08 08 08 08 08 08 08 01 01 01 01 02 02 02 05 03 03 05 07 05 04 05 07 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 ff dd 00 04 00 17 ff ee 00 0e 41 64 6f 62 65 00 Data Ascii: KEYF$ 4C4C@@pB4C4CmAdobe
2024-05-25 23:00:19 UTC	7223	IN	Data Raw: 18 e9 66 0c 74 b3 06 3a 59 87 37 c6 ef f3 4b 30 e0 e8 a0 85 26 52 78 42 8b 10 1a a5 b1 3f 35 34 cb f4 34 3f 05 2d 99 e1 67 c0 f8 87 33 22 4a bc f8 a1 f8 a1 ff 00 a9 eb ea ac 74 df 1c af b1 d5 b6 f0 ff d6 f6 7c 6a 7b 0e 54 42 07 c5 1c d3 fe 46 a7 f6 5f c4 27 a7 d4 27 7c fe 94 72 b1 05 45 d4 b7 28 e1 7b 06 28 0d 14 f8 2b 12 e9 1f 38 4e 6c 60 07 54 b6 e3 87 66 46 1a d9 5b 30 e9 8f 74 b3 06 3d d2 cc 18 f7 4b 30 63 dd 2c c1 8f 74 b3 06 3d d2 cc 18 f7 4b 30 63 dd 2c c1 8f 74 b3 06 3d d2 cc 18 f7 4b 30 63 dd 2c c3 18 e1 2c c3 81 8f de bd 54 b3 0e 11 22 8f 9a 5b 33 f3 54 cc c4 ea 2b d9 4b 62 7e 6a d9 79 dc ac e4 28 b5 a3 41 a3 ff 00 d4 e8 52 25 39 e6 a5 ed f1 c6 eb 56 ed 87 ff d7 93 c5 e6 f1 27 04 3a e9 09 a0 52 e7 c4 57 f0 a9 eb f6 fa 8b fa 73 fb 25 e2 d2 94 3a Data Ascii: ft:Y7K0&RxB?544?-g3"Jt\|j{TBF_''\|rE({(+8Nl`TfF[0t=K0c,t=K0c,t=K0c,,T"[3T+Kb~jy(AR%9V':RWs%:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.6	59184	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:19 UTC	762	OUT	GET /m1/v/t6/An-epsBkaSJ4n9oYH6L6fSPKlfyvVNR_J7OfeV9-jqOZVx9-Fg73T8WyLTa1e_4iyoSboul40f-XChEvL3RtR-jyPuVfx7Umn4RlQyMS.kf?ccb=10-5&oh=00_AYDqdB8NKAFNHlr2X0MnTEEFymxSu8U_NbtWwX5P5DJS8w&oe=6679CB47&_nc_sid=7da55a HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:19 UTC	954	IN	HTTP/1.1 200 OK content-digest: adler32=2117721780 Content-Type: image/x.fb.keyframes ETag: 2867499861726367659 x-manifold-obj-blobsizebytes: 43036 x-manifold-obj-canonicalpath: flat/base:v7:support.kf x-manifold-obj-ctime: 1611967373 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"613557422527858","color":"f7b125","__ctime":"1611967373","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:19 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3412, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 43036
2024-05-25 23:00:19 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-05-25 23:00:19 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 18 00 28 00 14 00 20 00 1c 00 08 00 10 00 00 00 0c 00 00 00 24 00 04 00 18 00 00 00 24 00 00 00 08 00 00 00 2c 00 00 00 74 0f 00 00 00 00 34 43 00 00 34 43 00 00 a0 40 00 00 70 42 01 00 00 00 0b 00 00 00 01 01 01 00 02 01 00 01 01 01 01 00 01 00 00 00 1c 00 00 00 18 00 28 00 14 00 20 00 1c 00 08 00 10 00 0c 00 00 00 00 00 24 00 04 00 18 00 00 00 24 00 00 00 05 00 00 00 28 00 00 00 e8 08 00 00 00 00 34 43 00 00 34 43 00 00 a0 40 00 00 70 42 10 00 00 00 08 00 00 00 01 00 00 00 00 00 01 01 01 00 00 00 0c 00 00 00 08 00 10 00 08 00 04 00 08 00 00 00 0c 00 00 00 00 00 79 43 00 00 21 43 9f 08 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f9 00 00 00 a1 08 03 00 00 00 32 4c e9 38 00 00 00 42 50 4c 54 45 00 00 00 e2 69 18 e2 Data Ascii: KEYF( $$,t4C4C@pB( $$(4C4C@pByC!CPNGIHDR2L8BPLTEi
2024-05-25 23:00:19 UTC	15245	IN	Data Raw: 3b db cb d2 21 df d2 68 7e 76 d2 70 aa 3d df 38 be c9 c1 d5 57 79 fe bb d5 69 de df d9 5e 6f 3f d2 e4 a9 96 a0 33 db 8b 7c d0 f1 e6 be ca f3 37 0a 48 ff 05 f7 ce 17 40 12 d7 4f 75 dd c8 3f 5c fa df 76 ce b0 a7 6d 20 06 c3 5d 4e 15 1a a4 da 42 bb ff ff 57 97 d8 8e df ba 97 b1 00 17 c7 04 3f 54 48 05 f1 e1 c1 89 e3 34 ef 1d 37 fe aa 88 fa 1d 3f f8 57 6f 83 38 da db 36 34 2c 7a fd 2f 40 1f 80 f2 ff 2b 2e c7 3a cd ad 5b 98 63 7c b7 9f 46 ee 08 ba 1b 2e e5 95 78 fb 71 06 45 df 8f c2 e2 7c 92 af 1d d8 db 3f 51 f7 a7 fc 30 e2 8b 25 8f 33 ce b4 15 7f 72 15 bf 2b fa 2e ea f0 86 f8 6d 59 fc 98 45 97 8a bf 72 fe 78 70 10 ef f0 9c 6d bf a2 17 6e ea 9e e2 75 76 66 9f 26 b7 2c be b9 7b fd 70 d5 19 84 d2 ae 17 cd 81 6d aa 5d 7f 04 7d f6 bf a8 17 9b 48 7b fe 3d 38 a5 4f Data Ascii: ;!h~vp=8Wyi^o?3\|7H@Ou?\vm ]NBW?TH47?Wo864,z/@+.:[c\|F.xqE\|?Q0%3r+.mYErxpmnuvf&,{pm]}H{=8O
2024-05-25 23:00:19 UTC	16384	IN	Data Raw: ff ff 00 00 b4 42 7a 99 ff ff 00 00 b4 42 82 99 ff ff 04 00 00 00 a0 99 ff ff 00 00 b4 42 00 00 b4 42 00 00 16 00 20 00 1c 00 04 00 00 00 00 00 18 00 14 00 10 00 08 00 0c 00 16 00 00 00 70 04 00 00 18 00 00 00 20 01 00 00 30 01 00 00 c0 02 00 00 48 04 00 00 14 00 00 00 90 b5 ff ff 0c 00 00 00 24 00 00 00 40 00 00 00 06 00 00 00 d4 00 00 00 ac 00 00 00 a0 00 00 00 78 00 00 00 6c 00 00 00 44 00 00 00 07 00 00 00 30 96 fc 3d 7e b1 64 3e 44 44 c4 3e 74 da 00 3f d7 a3 30 3f 82 4e 5b 3f 03 9d 76 3f 07 00 00 00 7c d9 20 be 0b be 75 be 7c d9 20 be 7c d9 20 be 00 00 00 00 00 00 00 00 7c d9 20 be 06 b4 ff ff 08 00 00 00 10 00 00 00 70 9a ff ff 00 00 80 3f c0 3e 8e 3c 7c 9a ff ff 18 70 b4 b2 eb 8c 68 3e aa b4 ff ff 00 00 00 01 32 b4 ff ff 08 00 00 00 10 00 00 00 9c Data Ascii: BzBBB p 0H$@xlD0=~d>DD>t?0?N[?v?\| u\| \| \| p?><\|ph>2
2024-05-25 23:00:19 UTC	9906	IN	Data Raw: 00 00 00 00 00 03 a4 d9 ff ff 42 f2 a0 42 ed 62 0f 43 b0 d9 ff ff 28 6f a1 42 60 c9 0f 43 bc d9 ff ff 54 a6 9d 42 1d 3f 10 43 e8 d9 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 dc d9 ff ff d2 4f a4 42 eb c7 16 43 e8 d9 ff ff 96 3d aa 42 c3 9a 1b 43 f4 d9 ff ff 52 13 a2 42 65 58 11 43 20 da ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 14 da ff ff aa 6d b1 42 79 71 1f 43 20 da ff ff 56 70 ae 42 4c cf 20 43 2c da ff ff 8a a4 ae 42 9f f4 1d 43 f8 d9 ff ff 04 00 00 00 40 da ff ff c6 fe ab 42 9b 0e 20 43 22 da ff ff 04 00 00 00 06 00 00 00 30 01 00 00 f4 00 00 00 b8 00 00 00 7c 00 00 00 40 00 00 00 04 00 00 00 90 da ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 84 da ff ff 58 25 a8 42 55 ce 1b 43 90 da ff ff f2 3e a7 42 e3 04 19 43 9c Data Ascii: BBbC(oB`CTB?C OBC=BCRBeXC mByqC VpBL C,BC@B C"0\|@ X%BUC>BC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.6	59187	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:19 UTC	552	OUT	GET /m1/v/t6/An_KOWvmE8xXhWbKcEDamiAQ14ZKS7T_w5aOTf-M8Krv4ls-f63eecRjpMEIRfwoMQw0XjeM4Q2PKoqtUSQc0_q66s2ahAGa0OTb.kf?ccb=10-5&oh=00_AYCREWIJAY60rI4GtkID1LYrVlSj9KC3tfo8g8qkECqQsg&oe=6679D180&_nc_sid=7da55a HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:19 UTC	916	IN	HTTP/1.1 200 OK content-digest: adler32=1060390509 Content-Type: image/x.fb.keyframes ETag: -1103541200696250300 x-manifold-obj-blobsizebytes: 13996 x-manifold-obj-canonicalpath: flat/base:v7:like.kf x-manifold-obj-ctime: 1611967368 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"1635855486666999","color":"2078f4","__ctime":"1611967368","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:19 GMT X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 13996
2024-05-25 23:00:19 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-05-25 23:00:19 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 00 00 16 00 24 00 10 00 1c 00 18 00 04 00 0c 00 08 00 00 00 00 00 20 00 16 00 00 00 05 00 00 00 1c 00 00 00 5c 13 00 00 00 00 34 43 00 00 34 43 00 00 00 40 00 00 70 42 01 00 00 00 01 00 00 00 0c 00 00 00 08 00 10 00 08 00 04 00 08 00 00 00 0c 00 00 00 00 00 34 43 00 00 34 43 1e 13 00 00 ff d8 ff db 00 84 00 01 01 01 01 01 01 01 01 01 01 02 01 01 01 02 02 02 01 01 02 02 02 02 02 02 02 02 02 03 02 03 03 03 03 02 03 03 04 04 04 04 04 03 05 05 05 05 05 05 07 07 07 07 07 08 08 08 08 08 08 08 08 08 08 01 01 01 01 02 02 02 05 03 03 05 07 05 04 05 07 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 ff dd 00 04 00 17 ff ee 00 0e 41 64 6f 62 65 00 Data Ascii: KEYF$ \4C4C@pB4C4CAdobe
2024-05-25 23:00:19 UTC	12495	IN	Data Raw: b8 ff 00 ae af 8d c5 13 3d b1 a9 ce a3 5b df 9a da 61 d5 76 ac 6f dd 67 31 2e 7b 74 75 8f b5 85 d5 3a 65 31 0b 84 9e 00 fd d5 7a 95 3a 5c 24 b7 8e a9 93 30 96 5d d3 27 50 ee 53 d5 3a 3a 87 72 6e a3 a4 74 32 75 2a 3a 94 74 32 ee 9d 49 d0 cb ba 9e 93 d4 39 94 a7 47 50 e6 5d d4 e5 3d 40 cb 7f 14 c9 98 54 e7 db c7 c9 32 66 15 3a 45 31 09 82 d2 3f 9e ea d1 12 d2 21 9d 33 ae 0e bf 75 a4 43 7a 74 46 1a c7 51 d4 32 56 1d 1b ef 37 5d 5b e2 15 a6 9d c7 4d 2f c7 16 ab da 32 a5 b2 31 b2 31 dc 4c 78 05 a7 62 b9 26 b3 0f cc 9a 74 9e 5d d4 74 8c c3 ff d5 f6 0f a9 6c 6c 7c 8f 36 6b 01 2e 3b 0d 57 d0 c4 71 f6 f0 42 29 32 f1 2f ab 7d 55 44 93 3f f5 9d 07 41 e0 17 64 f1 f5 1d 3f 4a 94 ea 3a 69 40 f3 a6 ff 00 b2 ca 68 ca f0 d3 8d f6 b2 a6 18 4d 4c 36 53 e8 ab 34 65 30 b8 4a Data Ascii: =[avog1.{tu:e1z:\$0]'PS::rnt2u*:t2I9GP]=@T2f:E1?!3uCztFQ2V7][M/211Lxb&t]tll\|6k.;WqB)2/}UD?Ad?J:i@hML6S4e0J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.6	59188	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:19 UTC	760	OUT	GET /m1/v/t6/An-4eutqFWFfYhZPQR8tM2oP5E05jWW-J7tvfsD5wE23SUHSA2nXlg1n6fI_KpO3JoITC05bkD6cfuSRG3Fji57z_i1jO4Bw_K_ZEg.kf?ccb=10-5&oh=00_AYDloHREai0wyhW-O5u0e7vmSZiLh8PQ2WlNfDJ2cKmjwg&oe=6679D1B0&_nc_sid=7da55a HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:19 UTC	951	IN	HTTP/1.1 200 OK content-digest: adler32=630572011 Content-Type: image/x.fb.keyframes ETag: 4980362363275973831 x-manifold-obj-blobsizebytes: 34560 x-manifold-obj-canonicalpath: flat/base:v7:sorry.kf x-manifold-obj-ctime: 1611967372 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"908563459236466","color":"f7b125","__ctime":"1611967372","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:19 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3412, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 34560
2024-05-25 23:00:19 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-05-25 23:00:19 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 00 00 16 00 24 00 10 00 1c 00 18 00 04 00 0c 00 08 00 00 00 00 00 20 00 16 00 00 00 05 00 00 00 1c 00 00 00 48 11 00 00 00 00 34 43 00 00 34 43 33 33 83 40 00 00 70 42 01 00 00 00 01 00 00 00 0c 00 00 00 08 00 10 00 08 00 04 00 08 00 00 00 0c 00 00 00 00 00 34 43 00 00 34 43 0a 11 00 00 ff d8 ff db 00 84 00 02 01 01 01 02 01 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 04 03 03 04 03 03 04 05 04 05 05 05 05 04 05 05 06 07 07 07 06 05 09 09 09 09 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 02 02 02 04 04 04 08 05 05 08 0c 09 08 09 0c 0e 0e 0e 0e 0e 0e 0e 0c 0c 0c 0c 0c 0e 0e 0c 0c 0c 0c 0c 0c 0e 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff dd 00 04 00 17 ff ee 00 0e 41 64 6f 62 65 00 Data Ascii: KEYF$ H4C4C33@pB4C4CAdobe
2024-05-25 23:00:19 UTC	15314	IN	Data Raw: 32 68 9a 61 2e 21 84 73 d3 53 88 65 77 c9 16 88 56 a8 d7 3f e5 59 ad 61 99 5c dd 0a 97 57 9a ef 85 31 22 63 7d 3b 8e ac f8 a3 d7 f0 9d fe aa 2c c3 e5 f9 7d f4 d8 ba ab ae 3e 5f ff d6 f5 83 c5 78 81 65 00 88 1f 8a 63 97 f4 b7 53 fb 2f 9f 15 7e d5 f1 7c b6 db fe 19 78 7e 5a 29 97 5d da b4 ce 00 28 72 da 16 a2 79 cb 25 12 c6 61 30 94 a8 57 93 84 a8 8e 45 d4 47 25 bb ca 1c 8b a8 72 2e a1 c8 ba 87 22 ea 1c 8b a8 72 2e a1 c8 ba 7b a1 c8 ba 87 24 ba 89 e4 97 51 3c 99 24 87 24 84 c5 55 e5 70 c9 4e af 58 50 ad 3b a9 74 d2 14 29 2b 4d 3e 25 14 9b 34 3b 27 7f d4 e8 55 9a df cf aa cc 3a bb ab 37 8b e5 ff d7 f5 1f c4 d5 b7 31 81 1e 7a 44 d0 32 e4 ea 7f 50 be 7c 57 f1 fb c7 c6 f3 ca 69 f4 47 65 12 8b c3 4a 19 0e 4a 1c f6 85 98 a4 3a a8 67 35 48 25 50 af 27 09 51 1c 8b Data Ascii: 2ha.!sSewV?Ya\W1"c};,}>_xecS/~\|x~Z)](ry%a0WEG%r."r.{$Q<$$UpNXP;t)+M>%4;'U:71zD2P\|WiGeJJ:g5H%P'Q
2024-05-25 23:00:19 UTC	16384	IN	Data Raw: 42 9a a8 20 43 64 bb ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 dc ba ff ff d4 a7 db 42 4e f1 1d 43 e8 ba ff ff 8a df da 42 35 af 1d 43 f4 ba ff ff b0 50 e1 42 9d 40 1f 43 9c bb ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 14 bb ff ff 8a df da 42 f9 11 1d 43 20 bb ff ff d4 a7 db 42 ec cf 1c 43 2c bb ff ff 8a df da 42 97 60 1d 43 d4 bb ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 4c bb ff ff 32 06 e4 42 27 e0 1a 43 58 bb ff ff f8 d3 e6 42 93 18 1a 43 64 bb ff ff b0 50 e1 42 a4 80 1b 43 0c bc ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 84 bb ff ff 3a 21 ef 42 93 18 1a 43 90 bb ff ff b8 7e f2 42 a4 90 1b 43 9c bb ff ff 92 fa ea 42 93 18 1a 43 0c bc ff ff 04 00 00 00 b0 bb ff ff b8 7e f2 42 97 60 1d 43 00 00 00 00 a6 da Data Ascii: B Cd BNCB5CPB@C BC BC,B`C L2B'CXBCdPBC :!BC~BCBC~B`C
2024-05-25 23:00:19 UTC	1361	IN	Data Raw: 01 c4 fa ff ff 33 10 50 c0 5a fe 1c 40 08 00 0c 00 0b 00 04 00 08 00 00 00 08 00 00 00 00 00 00 01 e4 fa ff ff 33 10 50 c0 5a fe 1c 40 54 fb ff ff 04 00 00 00 f8 fa ff ff 40 37 47 c1 d0 26 13 c1 6a ff ff ff 08 00 00 00 0c 00 00 00 74 fb ff ff 00 00 80 3f 26 fb ff ff 9a 99 19 3f 86 ff ff ff 08 00 00 00 0c 00 00 00 90 fb ff ff 00 00 80 3f 42 fb ff ff 9a 99 19 3f a2 ff ff ff 08 00 00 00 0c 00 00 00 ac fb ff ff 00 00 80 3f 50 fb ff ff ab aa 2a 3e ab aa 2a 3e c2 ff ff ff 08 00 00 00 10 00 00 00 68 fb ff ff 55 55 55 3f 55 55 55 3f 82 fb ff ff 9a 99 19 3f e2 ff ff ff 08 00 00 00 0c 00 00 00 ec fb ff ff 00 00 80 3f ae fb ff ff 9a 99 19 3f 00 00 0a 00 0c 00 00 00 08 00 04 00 0a 00 00 00 08 00 00 00 0c 00 00 00 14 fc ff ff 00 00 80 3f c6 fb ff ff 9a 99 19 3f ce fb Data Ascii: 3PZ@3PZ@T@7G&jt?&??B??P>>hUUU?UUU??????

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.6	59189	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:19 UTC	556	OUT	GET /m1/v/t6/An8KSKhioMIUVSZ4NYh8JnAchGmGQVDA71Hulkn5JQZsO-ejSYcV2dWPMQo-ZhSa71MfFqgrDHlCASWFxgbtV3pYQqVdSus0zicQO6_n.kf?ccb=10-5&oh=00_AYBqYbL3ALTjJ1h94lclEKfUjjeQfC87MNxEvAtaFkcicg&oe=6679D166&_nc_sid=7da55a HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:19 UTC	916	IN	HTTP/1.1 200 OK content-digest: adler32=2160514895 Content-Type: image/x.fb.keyframes ETag: 7343664923330879133 x-manifold-obj-blobsizebytes: 6756 x-manifold-obj-canonicalpath: flat/base:v7:dorothy.kf x-manifold-obj-ctime: 1611967366 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"1663186627268800","color":"7e64c4","__ctime":"1611967366","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:19 GMT X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=37, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 6756
2024-05-25 23:00:19 UTC	1	IN	Data Raw: 18 Data Ascii:
2024-05-25 23:00:19 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 10 00 1a 00 08 00 14 00 10 00 00 00 04 00 00 00 10 00 00 00 40 00 00 00 00 00 31 43 00 00 31 43 ab aa 22 40 00 00 c0 41 00 00 2a 00 08 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2a 00 00 00 04 00 00 00 01 00 00 00 30 00 00 00 00 00 2a 00 1c 00 18 00 04 00 00 00 00 00 14 00 10 00 0c 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2a 00 00 00 48 00 00 00 14 00 00 00 24 00 00 00 28 00 00 00 2c 00 00 00 01 00 00 00 70 e7 ff ff 04 00 00 00 6c e6 ff ff 9a 99 b9 3f 9a 99 b9 3f 84 e7 ff ff 00 00 b1 42 8c e7 ff ff 00 00 b1 42 94 e7 ff ff 04 00 00 00 88 e7 ff ff 09 00 00 00 0c 16 00 00 f8 12 00 00 10 10 00 00 28 0d 00 00 40 0a 00 00 58 07 00 00 Data Ascii: KEYF@1C1C"@A0H$(,pl??BB(@X
2024-05-25 23:00:19 UTC	5255	IN	Data Raw: 00 00 00 10 00 00 00 94 eb ff ff aa 00 c0 3e ab aa 2a 3f 48 ee ff ff ab aa 2a 3e 72 ee ff ff 08 00 00 00 10 00 00 00 b4 eb ff ff 00 00 80 3f ab aa 2a 3f 68 ee ff ff ab aa aa 3e 92 ee ff ff 08 00 00 00 10 00 00 00 d4 eb ff ff 00 00 80 3f ab aa 2a 3f e0 eb ff ff 8e ff 7f 3e ab aa aa 3e f8 ec ff ff 04 00 00 00 f4 eb ff ff 48 e1 3a 3f 48 e1 3a 3f 0c ed ff ff d0 9d c5 40 14 ed ff ff c0 1a 5f c0 1c ed ff ff 04 00 00 00 18 ec ff ff 94 e3 8d 3e b7 f2 2e 41 02 00 00 00 d4 00 00 00 04 00 00 00 ae ed ff ff 18 00 00 00 24 00 00 00 28 00 00 00 2c 00 00 00 34 00 00 00 0d 00 00 00 58 ed ff ff 04 00 00 00 84 ed ff ff 00 d2 87 9d 68 ed ff ff 02 ef ac 40 70 ed ff ff cf 75 be 3f 78 ed ff ff 04 00 00 00 6c ed ff ff 84 ed ff ff 04 00 00 00 56 ed ff ff 04 00 00 00 03 00 00 00 Data Ascii: >?H>r??h>??>>H:?H:?@_>.A$(,4Xh@pu?xlV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.6	59186	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:19 UTC	758	OUT	GET /m1/v/t6/An-ltDiBj6BlExJAIyJiOGWs0CtdQwF9K9SyRSRhTIMgJd0MMzaw7ju3gnTsliPfba99uYjQem5sn3JzgpEnBVKOKfyfbcp-sMBJ.kf?ccb=10-5&oh=00_AYAjAwuljXLVWb9VmO0GfkRgCPPHVaBo8SGp6ZTw-XNUBw&oe=6679EE97&_nc_sid=7da55a HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:19 UTC	952	IN	HTTP/1.1 200 OK content-digest: adler32=649957559 Content-Type: image/x.fb.keyframes ETag: -4761830269030928794 x-manifold-obj-blobsizebytes: 32856 x-manifold-obj-canonicalpath: flat/base:v7:anger.kf x-manifold-obj-ctime: 1611967365 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"444813342392137","color":"e9710f","__ctime":"1611967365","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:19 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 32856
2024-05-25 23:00:19 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-05-25 23:00:19 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 00 00 16 00 24 00 10 00 1c 00 18 00 04 00 0c 00 08 00 00 00 00 00 20 00 16 00 00 00 05 00 00 00 1c 00 00 00 3c 28 00 00 00 00 34 43 00 00 34 43 66 66 76 40 00 00 70 42 01 00 00 00 02 00 00 00 34 15 00 00 04 00 00 00 dc ea ff ff 0c 00 00 00 00 00 34 43 00 00 34 43 0e 15 00 00 ff d8 ff db 00 84 00 03 02 02 02 02 02 03 02 02 03 04 03 02 03 04 05 03 03 03 03 05 05 04 04 05 04 04 05 07 05 06 06 06 06 05 07 07 08 08 09 08 08 07 0b 0b 0c 0c 0b 0b 0c 0c 0c 0c 0c 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 01 03 03 03 05 05 05 0a 07 07 0a 0f 0c 0a 0c 0f 12 0e 0e 0e 0e 12 11 0e 0e 0e 0e 0e 11 11 0e 0e 0e 0e 0e 0e 11 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e ff dd 00 04 00 17 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 Data Ascii: KEYF$ <(4C4Cffv@pB44C4CAdobed
2024-05-25 23:00:19 UTC	15252	IN	Data Raw: 7b 87 ba ce bf 35 f5 e9 b1 cf b4 a4 cf 03 63 a7 01 a0 2f a9 50 f9 9e 5d 36 40 02 a6 a5 a5 42 6c a9 52 2a 32 84 a8 81 94 25 45 46 50 95 15 19 42 54 54 65 09 51 51 94 25 45 46 50 95 15 19 42 54 54 65 09 51 51 94 25 45 46 50 95 15 19 42 54 54 65 09 51 04 0c 81 2a 4c 14 e4 70 21 4a 21 52 21 88 b9 d3 b6 68 c8 f5 f3 07 75 2e 65 92 0f a7 1a 98 2c 5b 2c 5b 91 51 61 4a e4 62 51 24 49 ff d5 cc 3a 3e 50 5c 7c 87 55 c9 0d 45 55 84 3b 01 16 4b aa 16 86 b7 5f 53 d4 ac e3 59 56 a2 21 75 fc 38 19 36 3c 00 a2 0b 0a 84 e2 51 dd 20 a6 06 5d d2 04 11 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a9 0c bb a4 08 20 64 dd 20 94 42 da 72 1c 0a a9 10 b8 d3 12 f6 0c ce 6f 7e Data Ascii: {5c/P]6@BlR2%EFPBTTeQQ%EFPBTTeQQ%EFPBTTeQLp!J!R!hu.e,[,[QaJbQ$I:>P\\|UEU;K_SYV!u86<Q ]@@@@@@@@@@@@@ d Bro~
2024-05-25 23:00:19 UTC	16103	IN	Data Raw: 00 00 00 10 3e f8 3c 4e 36 d9 3e 8f a9 01 3f 03 00 00 00 60 00 00 00 50 00 00 00 40 00 00 00 d6 ce ff ff 08 00 00 00 10 00 00 00 58 c1 ff ff 55 55 55 3f 55 55 55 3f 72 c1 ff ff 00 00 80 3f f6 ce ff ff 08 00 00 00 0c 00 00 00 dc c1 ff ff 00 00 80 3f 8e c1 ff ff ab aa aa 3e 88 c1 ff ff 7a f9 c4 42 30 dc 58 43 94 c1 ff ff 63 86 c6 42 84 07 59 43 a0 c1 ff ff 7a f9 c4 42 30 dc 58 43 20 c4 ff ff 0c 00 00 00 14 00 00 00 20 00 00 00 02 00 00 00 48 00 00 00 24 00 00 00 03 00 00 00 10 3e f8 3c 4e 36 d9 3e 8f a9 01 3f 03 00 00 00 60 00 00 00 50 00 00 00 40 00 00 00 72 cf ff ff 08 00 00 00 10 00 00 00 f4 c1 ff ff 55 55 55 3f 55 55 55 3f 0e c2 ff ff 00 00 80 3f 92 cf ff ff 08 00 00 00 0c 00 00 00 78 c2 ff ff 00 00 80 3f 2a c2 ff ff ab aa aa 3e 24 c2 ff ff 0d 96 b0 42 Data Ascii: ><N6>?`P@XUUU?UUU?r??>zB0XCcBYCzB0XC H$><N6>?`P@rUUU?UUU??x?*>$B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.6	59190	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:19 UTC	552	OUT	GET /m1/v/t6/An_iJw3Cc3y5RtzEpR0M4CCznWN_ywjtFHZENvSbcomn6tH9EuRIjlfe7xaIpEOIEZAGHfQMVNlOPpkGNsG7fM8CslunKANTZ6ED.kf?ccb=10-5&oh=00_AYBcK8-O3yI6-YhotsoEQ5GrPxPKPphT8rCkVAW5Tzg_8w&oe=6679E218&_nc_sid=7da55a HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:19 UTC	913	IN	HTTP/1.1 200 OK content-digest: adler32=1035192163 Content-Type: image/x.fb.keyframes ETag: 7938460552592410943 x-manifold-obj-blobsizebytes: 22168 x-manifold-obj-canonicalpath: flat/base:v7:wow.kf x-manifold-obj-ctime: 1611967376 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"478547315650144","color":"f7b125","__ctime":"1611967376","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:19 GMT X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 22168
2024-05-25 23:00:19 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-05-25 23:00:19 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 00 00 16 00 24 00 10 00 1c 00 18 00 04 00 0c 00 08 00 00 00 00 00 20 00 16 00 00 00 05 00 00 00 1c 00 00 00 48 11 00 00 00 00 34 43 00 00 34 43 89 88 a0 40 00 00 70 42 01 00 00 00 01 00 00 00 0c 00 00 00 08 00 10 00 08 00 04 00 08 00 00 00 0c 00 00 00 00 00 34 43 00 00 34 43 0a 11 00 00 ff d8 ff db 00 84 00 02 01 01 01 02 01 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 04 03 03 04 03 03 04 05 04 05 05 05 05 04 05 05 06 07 07 07 06 05 09 09 09 09 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 02 02 02 04 04 04 08 05 05 08 0c 09 08 09 0c 0e 0e 0e 0e 0e 0e 0e 0c 0c 0c 0c 0c 0e 0e 0c 0c 0c 0c 0c 0c 0e 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff dd 00 04 00 17 ff ee 00 0e 41 64 6f 62 65 00 Data Ascii: KEYF$ H4C4C@pB4C4CAdobe
2024-05-25 23:00:19 UTC	15255	IN	Data Raw: 32 68 9a 61 2e 21 84 73 d3 53 88 65 77 c9 16 88 56 a8 d7 3f e5 59 ad 61 99 5c dd 0a 97 57 9a ef 85 31 22 63 7d 3b 8e ac f8 a3 d7 f0 9d fe aa 2c c3 e5 f9 7d f4 d8 ba ab ae 3e 5f ff d6 f5 83 c5 78 81 65 00 88 1f 8a 63 97 f4 b7 53 fb 2f 9f 15 7e d5 f1 7c b6 db fe 19 78 7e 5a 29 97 5d da b4 ce 00 28 72 da 16 a2 79 cb 25 12 c6 61 30 94 a8 57 93 84 a8 8e 45 d4 47 25 bb ca 1c 8b a8 72 2e a1 c8 ba 87 22 ea 1c 8b a8 72 2e a1 c8 ba 7b a1 c8 ba 87 24 ba 89 e4 97 51 3c 99 24 87 24 84 c5 55 e5 70 c9 4e af 58 50 ad 3b a9 74 d2 14 29 2b 4d 3e 25 14 9b 34 3b 27 7f d4 e8 55 9a df cf aa cc 3a bb ab 37 8b e5 ff d7 f5 1f c4 d5 b7 31 81 1e 7a 44 d0 32 e4 ea 7f 50 be 7c 57 f1 fb c7 c6 f3 ca 69 f4 47 65 12 8b c3 4a 19 0e 4a 1c f6 85 98 a4 3a a8 67 35 48 25 50 af 27 09 51 1c 8b Data Ascii: 2ha.!sSewV?Ya\W1"c};,}>_xecS/~\|x~Z)](ry%a0WEG%r."r.{$Q<$$UpNXP;t)+M>%4;'U:71zD2P\|WiGeJJ:g5H%P'Q
2024-05-25 23:00:19 UTC	5412	IN	Data Raw: 04 00 00 00 f4 ea ff ff 35 c0 d6 42 87 1b 22 42 01 00 00 00 3c 00 00 00 00 00 36 00 30 00 2c 00 04 00 00 00 00 00 24 00 20 00 1c 00 14 00 18 00 28 00 10 00 00 00 00 00 00 00 00 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0b 00 36 00 00 00 fc 12 00 00 00 00 00 00 30 00 00 00 08 05 00 00 0c 05 00 00 0c 05 00 00 1c 05 00 00 1c 05 00 00 1c 05 00 00 30 05 00 00 07 00 00 00 0c 00 14 00 10 00 0c 00 08 00 04 00 0c 00 00 00 10 00 00 00 58 02 00 00 a4 04 00 00 b0 04 00 00 04 fb ff ff 0c 00 00 00 34 00 00 00 60 00 00 00 0a 00 00 00 90 01 00 00 6c 01 00 00 4c 01 00 00 2c 01 00 00 0c 01 00 00 ec 00 00 00 c8 00 00 00 a4 00 00 00 84 00 00 00 64 00 00 00 0b 00 00 00 42 ba 59 3c 8b f1 f4 3c 84 19 aa 3d 14 88 60 3e 74 58 78 3e b7 6d db 3e ff a4 f6 3e af 3a 07 Data Ascii: 5B"B<60,$ (600X4`lL,dBY<<=`>tXx>m>>:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.6	59191	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:19 UTC	551	OUT	GET /m1/v/t6/An8CYKC8XqtM-fkmXlVHrp9oVgPgDVVlGZu_Cy7Q_5xW9yYY3lOzMNVDCq9D1ThbbsbnpjfFmGnfIPhKX6oePvUMOYOvShQauKw.kf?ccb=10-5&oh=00_AYD07_nPxgbm5FmbefRT2bPhnCWwYTmoGZCLjK7qyYsc9A&oe=6679D5CB&_nc_sid=7da55a HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:19 UTC	914	IN	HTTP/1.1 200 OK content-digest: adler32=3371172350 Content-Type: image/x.fb.keyframes ETag: 9016135132004091149 x-manifold-obj-blobsizebytes: 45660 x-manifold-obj-canonicalpath: flat/base:v7:haha.kf x-manifold-obj-ctime: 1611967367 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"115940658764963","color":"f7b125","__ctime":"1611967367","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:19 GMT X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3412, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 45660
2024-05-25 23:00:19 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-05-25 23:00:19 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 00 00 16 00 24 00 10 00 1c 00 18 00 04 00 0c 00 08 00 00 00 00 00 20 00 16 00 00 00 05 00 00 00 1c 00 00 00 48 11 00 00 00 00 34 43 00 00 34 43 ab aa 1a 40 00 00 70 42 01 00 00 00 01 00 00 00 0c 00 00 00 08 00 10 00 08 00 04 00 08 00 00 00 0c 00 00 00 00 00 34 43 00 00 34 43 0a 11 00 00 ff d8 ff db 00 84 00 02 01 01 01 02 01 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 04 03 03 04 03 03 04 05 04 05 05 05 05 04 05 05 06 07 07 07 06 05 09 09 09 09 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 02 02 02 04 04 04 08 05 05 08 0c 09 08 09 0c 0e 0e 0e 0e 0e 0e 0e 0c 0c 0c 0c 0c 0e 0e 0c 0c 0c 0c 0c 0c 0e 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff dd 00 04 00 17 ff ee 00 0e 41 64 6f 62 65 00 Data Ascii: KEYF$ H4C4C@pB4C4CAdobe
2024-05-25 23:00:19 UTC	15257	IN	Data Raw: 32 68 9a 61 2e 21 84 73 d3 53 88 65 77 c9 16 88 56 a8 d7 3f e5 59 ad 61 99 5c dd 0a 97 57 9a ef 85 31 22 63 7d 3b 8e ac f8 a3 d7 f0 9d fe aa 2c c3 e5 f9 7d f4 d8 ba ab ae 3e 5f ff d6 f5 83 c5 78 81 65 00 88 1f 8a 63 97 f4 b7 53 fb 2f 9f 15 7e d5 f1 7c b6 db fe 19 78 7e 5a 29 97 5d da b4 ce 00 28 72 da 16 a2 79 cb 25 12 c6 61 30 94 a8 57 93 84 a8 8e 45 d4 47 25 bb ca 1c 8b a8 72 2e a1 c8 ba 87 22 ea 1c 8b a8 72 2e a1 c8 ba 7b a1 c8 ba 87 24 ba 89 e4 97 51 3c 99 24 87 24 84 c5 55 e5 70 c9 4e af 58 50 ad 3b a9 74 d2 14 29 2b 4d 3e 25 14 9b 34 3b 27 7f d4 e8 55 9a df cf aa cc 3a bb ab 37 8b e5 ff d7 f5 1f c4 d5 b7 31 81 1e 7a 44 d0 32 e4 ea 7f 50 be 7c 57 f1 fb c7 c6 f3 ca 69 f4 47 65 12 8b c3 4a 19 0e 4a 1c f6 85 98 a4 3a a8 67 35 48 25 50 af 27 09 51 1c 8b Data Ascii: 2ha.!sSewV?Ya\W1"c};,}>_xecS/~\|x~Z)](ry%a0WEG%r."r.{$Q<$$UpNXP;t)+M>%4;'U:71zD2P\|WiGeJJ:g5H%P'Q
2024-05-25 23:00:19 UTC	16384	IN	Data Raw: 00 00 00 00 00 03 34 8f ff ff 44 cd 44 c2 04 15 55 c2 40 8f ff ff 94 ba 50 c2 30 d1 52 c2 4c 8f ff ff 54 06 3c c2 14 9d 40 c2 f4 8f ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 6c 8f ff ff d0 9c 65 c2 50 0b 4a c2 78 8f ff ff 64 28 60 c2 d0 f0 32 c2 84 8f ff ff 14 35 57 c2 74 18 50 c2 2c 90 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 a4 8f ff ff b4 8b 48 c2 20 e9 fc c1 b0 8f ff ff 94 fa 3d c2 28 20 d9 c1 bc 8f ff ff 2c 0d 56 c2 b8 79 1c c2 2c 90 ff ff 04 00 00 00 d0 8f ff ff 5c 18 2c c2 f0 3f a4 c1 ea 8f ff ff 04 00 00 00 0c 00 00 00 98 02 00 00 5c 02 00 00 20 02 00 00 e4 01 00 00 a8 01 00 00 6c 01 00 00 30 01 00 00 f4 00 00 00 b8 00 00 00 7c 00 00 00 40 00 00 00 04 00 00 00 b4 90 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 2c Data Ascii: 4DDU@P0RLT<@ lePJxd(`25WtP, H =( ,Vy,\,?\ l0\|@ ,
2024-05-25 23:00:19 UTC	12518	IN	Data Raw: d8 c1 cc cf ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 44 cf ff ff 94 ba 9a 42 c6 7f 8b c2 50 cf ff ff ae 0e a2 42 dc c5 97 c2 5c cf ff ff 94 ba 9a 42 3c c7 4d c2 04 d0 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 7c cf ff ff d2 4e bd 42 dc c5 97 c2 88 cf ff ff 5e a2 d2 42 82 3a 89 c2 94 cf ff ff cc 0c a4 42 dc c5 97 c2 04 d0 ff ff 04 00 00 00 a8 cf ff ff 5e a2 d2 42 30 4b 4e c2 c2 cf ff ff 04 00 00 00 05 00 00 00 f4 00 00 00 b8 00 00 00 7c 00 00 00 40 00 00 00 04 00 00 00 70 d0 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 e8 cf ff ff 5e 22 cd 42 d0 cf 12 c2 f4 cf ff ff 08 8e b7 42 60 56 f0 c1 00 d0 ff ff 5e 22 cd 42 84 0b 4e c2 a8 d0 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 20 d0 ff ff c6 08 a5 42 60 56 f0 c1 2c Data Ascii: DBPB\B<M \|NB^B:B^B0KN\|@p ^"BB`V^"BN B`V,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.6	59194	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:19 UTC	595	OUT	GET /v/t39.30808-6/443717789_996576088504629_748921786331374552_n.jpg?stp=dst-jpg_p600x600&_nc_cat=106&ccb=1-7&_nc_sid=5f2048&_nc_ohc=6efKMPmYepsQ7kNvgHWkgWT&_nc_ht=scontent-hou1-1.xx&oh=00_AYBykvCb4vJ6su0icd2D3YWhwfwQGNVx6f7HEYWMUmgzSg&oe=6658484A HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:19 UTC	612	IN	HTTP/1.1 200 OK Last-Modified: Sat, 25 May 2024 06:00:10 GMT X-Needle-Checksum: 3232017633 thrift_fmhk: GBAh8ZFaL2PctQ8h2IGFbnbzFfDr4Z0EvFUAHCYEAAAA Content-Type: image/jpeg content-digest: adler32=1077711181 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:19 GMT X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 51859
2024-05-25 23:00:19 UTC	1	IN	Data Raw: ff Data Ascii:
2024-05-25 23:00:19 UTC	15120	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 37 32 30 31 30 30 30 30 32 38 31 33 30 30 30 30 37 62 32 63 30 30 30 30 32 35 32 66 30 30 30 30 66 31 33 64 30 30 30 30 66 37 35 62 30 30 30 30 32 37 37 65 30 30 30 30 36 66 38 33 30 30 30 30 31 39 38 37 30 30 30 30 66 63 39 34 30 30 30 30 39 33 63 61 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a72010000281300007b2c0000252f0000f13d0000f75b0000277e00006f83000019870000fc94000093ca0000C%# , #&')*)-0-(0%()(C(((((((((((((((
2024-05-25 23:00:19 UTC	16384	IN	Data Raw: 50 dc d0 b7 2d 56 89 e3 7d d5 d3 1f 95 c0 f2 d5 d1 c5 2c 8e 2e 1c 57 35 47 d6 54 d4 ec 9d a0 3b 82 31 b4 30 46 9a c0 d1 b9 1f 4c ed 79 28 bf 96 8f fc 47 82 a8 19 a2 70 ec 43 a0 51 4c de db 72 6f 2b 7a 7b 77 d8 ac a3 92 99 d9 a2 69 e4 9b da 3b e7 fd 13 aa a1 61 b1 72 76 bc 94 5f cb 47 fe 23 c1 1d ea d6 dd d0 28 a6 9c a6 e1 03 9b d5 56 70 4c 61 be f4 4d cd f9 70 f7 5e 2b 72 4d ed 1d f3 e4 34 4f 06 d7 09 d1 3d a6 c4 2d 93 ef 6b 21 13 c9 b0 0a 28 8c 9a 70 4e 81 ed 76 51 bf e4 84 6f 3a 05 b1 7d 81 1c 56 cd fd 5d 07 38 37 79 4f ae 81 be f2 7e 2a df 71 aa 6a c9 65 d4 ee e4 76 bc 94 5f cb 47 fe 23 c3 92 71 96 57 0e de 81 44 20 6c ad 62 9a 4a ce 03 0d ba 18 73 08 69 71 e3 c9 37 b4 77 cf 91 f5 99 a4 b8 f5 6e 9b 58 06 bd 67 bd 3a a9 b9 4b 5b d5 65 e5 ac b9 51 cc df Data Ascii: P-V},.W5GT;10FLy(GpCQLro+z{wi;arv_G#(VpLaMp^+rM4O=-k!(pNvQo:}V]87yO~*qjev_G#qWD lbJsiq7wnXg:K[eQ
2024-05-25 23:00:19 UTC	16384	IN	Data Raw: d2 e7 31 e3 38 12 ed 83 7a f6 0c b0 38 cb 49 79 db 58 39 ee 3d 48 58 fd a4 5c 34 dd 93 ce 68 52 9c 69 34 a6 75 d9 5d c3 77 ba e8 70 95 1d ca 98 3b 24 9c d1 77 83 58 95 e1 ae 11 4b 6e 63 b7 dc 76 fa e7 b4 26 6f 42 f1 c7 49 95 b3 d5 5c 60 a0 a6 c4 cb 77 11 66 f5 7a 73 fd 47 99 7c 1f 3f 48 68 30 d0 37 16 7f 8c 43 6b 7e a6 3e c5 93 1d bf 39 62 1a d4 bb 27 8c ba b5 63 43 0f fd 9a 90 ca 30 4d e2 1e b6 07 fc 21 bc fa 54 a1 ee dc d7 9f 0a 99 b3 6b 2e 06 45 8a d6 53 85 78 42 51 09 49 01 bf b9 6e 3e b2 64 ef 26 29 ff 00 1d 4e bd cf 9b cb b9 d4 8c 86 76 71 86 72 94 c2 b9 8a c2 69 db 16 30 56 6a 03 24 72 ca f1 2c 95 0e 22 52 97 3f 9e d0 03 75 99 4d bd a6 5c f9 15 c2 de bb bb 54 3a ce e8 f1 98 cc 3c 52 b3 00 d5 09 4e b3 72 86 33 e8 a8 d5 26 1a 73 ee 7b 8e d4 b1 1d 1c Data Ascii: 18z8IyX9=HX\4hRi4u]wp;$wXKncv&oBI\`wfzsG\|?Hh07Ck~>9b'cC0M!Tk.ESxBQIn>d&)Nvqri0Vj$r,"R?uM\T:<RNr3&s{
2024-05-25 23:00:19 UTC	3970	IN	Data Raw: 84 50 16 28 54 41 cf db 71 43 54 23 b5 fe f7 ad 7e cb c5 7d 30 28 75 4e b3 e1 7e d3 e1 7e d3 e1 7e d3 e1 7e d3 e1 7e d3 e1 7e d3 e1 7e d3 e1 7e d3 e1 7e d3 e1 7e d3 e1 7e d3 e1 7e d3 e1 7e d3 e1 7e d3 e1 7e d3 e1 be d0 6a 58 f8 ed 3e 0b ed 3e 2b ed 3e 43 ed 3e 43 ed 28 d3 e4 f4 87 c2 7f 13 e1 7e d3 e1 7e d3 e1 7e d3 e1 7e d3 e1 7e d3 e1 7e d3 e1 7e d3 e1 7e d3 e1 7e d0 b3 e5 f9 4a 0c 0b 35 85 bd ab 4a fb 1b da a2 f3 66 e4 ec 4e 8f af d3 75 53 ac 9d 47 94 a7 87 fa ba 00 b1 37 57 68 0d af bc f5 af d9 f3 7a 3f 9c 15 a2 19 4a 30 29 7b 71 de 06 0d 12 de 97 8f 4a 86 a9 f7 fd 91 00 83 a8 7b 6b d6 0d ff 00 37 cb eb fc b5 2a 51 c4 e8 1e 50 9d 31 35 03 f8 b4 42 74 fe 8b ae 89 bb 36 0f 3f b3 d6 bf 67 cd e8 fb ee 5c cf 0c 05 d0 5e c4 cd ed 41 74 a7 b4 d8 8f 81 96 29 Data Ascii: P(TAqCT#~}0(uN~~~~~~~~~~~~~~~jX>>+>C>C(~~~~~~~~~J5JfNuSG7Whz?J0){qJ{k7*QP15Bt6?g\^At)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.6	59192	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:19 UTC	1658	OUT	GET /ajax/bootloader-endpoint/?modules=KeyframesRenderer%2CFBKeyframesLoggedSession%2CKeyframesAssetDecoder&__aaid=0&__user=0&__a=1&__req=6&__hs=19868.HYP%3Acomet_loggedout_pkg.2.1..0.0&dpr=1&__ccg=GOOD&__rev=1013770602&__s=%3A%3Afjuzaa&__hsi=7373075910951068210&__dyn=7xeUmwlEnwn8yEqxemh0cm5U4e1Nxt3odEc8co5S3O2Saw8i2S1DwUx609vCwjE1xoswIK1Rw8G11wBz83WwgEcEhwGwQw9m1YwBgao6C0Mo2swlo5qfK0zEkxe2Gewywuo88brwKxm5oe85nxmu3W0GpovU11E98bpEbUGdwda3e0Lo4q58jwTwNwLwFg2Xwkoqwqo4eE7W1iwGwRxW1ow&__csr=glMN4ihezhdPbaAzQgymHr8HQAt7J4GiypRAyrZacq_RG4ma-hk9xy6vyk8AFudDUylkAFe6oOvAUO9yKdy9aL8qWF2LSjDFWiGUgXx6imU8ESi8Vkaw4ww1Ae0le3m9g0yG5K0tu043K050o3mw3d6Eow1oi0mu09UyEnwIw8Fwt82Uw614GagS8o0WZ00GiAg1Gy0VQ0fua05rgABkca3e03_xwkS0it5w1jKEowk80Yy02Ui09ig5S1Zw-w4X80sK0uW0a6wQwJwfEU0At0qo8xaxy0nx024F98jzUW0bEw5Gz8Wp0kE46m0X8HxykNA48a6290u-0Dzp8e8G0ja1iw27t0uo3I3pBYpbJywS3C9iyaAckg5AoBDyo98Rqib5adAfiGOIPD80X81wE6m2eEcqbwbSdgCbzA8gO5Ey2G5U5l2U3RUmwOg8EgUlosxlxZy8GUOu1sAwgeayo7qawE81boc82wBGbzoxwXCggixi39685TzUT4wuoxwLa1lwc65Q0Jaxa8a8DAjho [TRUNCATED] Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:19 UTC	965	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: text/javascript; charset=utf-8 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-25 23:00:19 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-25 23:00:19 UTC	1784	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-25 23:00:19 UTC	607	IN	Data Raw: 31 33 64 65 0d 0a 66 6f 72 20 28 3b 3b 29 3b 7b 22 68 72 70 22 3a 7b 22 68 73 72 70 22 3a 7b 22 68 73 64 70 22 3a 7b 22 63 6c 70 44 61 74 61 22 3a 7b 22 31 38 33 38 31 34 32 22 3a 7b 22 72 22 3a 31 2c 22 73 22 3a 31 7d 2c 22 34 38 38 33 22 3a 7b 22 72 22 3a 31 2c 22 73 22 3a 31 7d 7d 2c 22 67 6b 78 44 61 74 61 22 3a 7b 22 32 30 39 33 35 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 33 37 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 39 39 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 37 37 34 32 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 Data Ascii: 13defor (;;);{"hrp":{"hsrp":{"hsdp":{"clpData":{"1838142":{"r":1,"s":1},"4883":{"r":1,"s":1}},"gkxData":{"20935":{"result":true,"hash":null},"21037":{"result":false,"hash":null},"2199":{"result":false,"hash":null},"7742":{"result":false,"hash":null},"20
2024-05-25 23:00:19 UTC	1500	IN	Data Raw: 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 7d 2c 22 71 65 78 44 61 74 61 22 3a 7b 22 35 32 36 22 3a 7b 22 72 22 3a 6e 75 6c 6c 7d 2c 22 35 33 38 22 3a 7b 22 72 22 3a 6e 75 6c 6c 7d 2c 22 35 34 33 22 3a 7b 22 72 22 3a 6e 75 6c 6c 7d 7d 2c 22 6a 75 73 74 6b 6e 6f 62 78 44 61 74 61 22 3a 7b 22 35 35 22 3a 7b 22 72 22 3a 74 72 75 65 7d 7d 7d 2c 22 68 62 6c 70 22 3a 7b 22 63 6f 6e 73 69 73 74 65 6e 63 79 22 3a 7b 22 72 65 76 22 3a 31 30 31 33 37 37 30 36 30 32 7d 2c 22 72 73 72 63 4d 61 70 22 3a 7b 22 63 73 72 3a 5f 36 5f 30 5f 70 50 22 3a 7b 22 74 79 70 65 22 3a 22 63 73 72 22 2c 22 73 72 63 22 3a 22 3a 38 36 2c 31 2c 34 32 2c 32 32 2c 34 30 2c 33 37 2c 33 35 22 2c 22 63 22 3a 31 7d 2c 22 63 73 72 3a 5f 36 5f 31 5f 79 34 22 3a 7b 22 74 79 70 65 22 3a 22 63 73 72 22 Data Ascii: "hash":null}},"qexData":{"526":{"r":null},"538":{"r":null},"543":{"r":null}},"justknobxData":{"55":{"r":true}}},"hblp":{"consistency":{"rev":1013770602},"rsrcMap":{"csr:_6_0_pP":{"type":"csr","src":":86,1,42,22,40,37,35","c":1},"csr:_6_1_y4":{"type":"csr"
2024-05-25 23:00:19 UTC	1500	IN	Data Raw: 79 66 72 61 6d 65 73 50 6c 75 67 69 6e 44 79 6e 61 6d 69 63 50 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 72 22 3a 5b 22 63 73 72 3a 5f 36 5f 39 5f 5a 62 22 5d 2c 22 62 65 22 3a 31 7d 2c 22 4b 65 79 66 72 61 6d 65 73 50 6c 75 67 69 6e 44 79 6e 61 6d 69 63 50 72 6f 70 65 72 74 69 65 73 53 63 68 65 6d 61 22 3a 7b 22 72 22 3a 5b 22 63 73 72 3a 5f 36 5f 61 5f 69 6a 22 5d 2c 22 62 65 22 3a 31 7d 2c 22 4b 65 79 66 72 61 6d 65 73 50 6c 75 67 69 6e 4c 61 79 65 72 54 61 67 73 22 3a 7b 22 72 22 3a 5b 22 63 73 72 3a 5f 36 5f 62 5f 33 79 22 5d 2c 22 62 65 22 3a 31 7d 2c 22 4b 65 79 66 72 61 6d 65 73 50 6c 75 67 69 6e 4c 61 79 65 72 54 61 67 73 53 63 68 65 6d 61 22 3a 7b 22 72 22 3a 5b 22 63 73 72 3a 5f 36 5f 63 5f 4d 52 22 5d 2c 22 62 65 22 3a 31 7d 2c 22 4b 65 79 66 72 Data Ascii: yframesPluginDynamicProperties":{"r":["csr:_6_9_Zb"],"be":1},"KeyframesPluginDynamicPropertiesSchema":{"r":["csr:_6_a_ij"],"be":1},"KeyframesPluginLayerTags":{"r":["csr:_6_b_3y"],"be":1},"KeyframesPluginLayerTagsSchema":{"r":["csr:_6_c_MR"],"be":1},"Keyfr
2024-05-25 23:00:19 UTC	1492	IN	Data Raw: 22 5f 5f 72 63 22 3a 5b 22 44 54 53 47 5f 41 53 59 4e 43 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 36 39 36 37 30 33 22 2c 5b 22 4a 53 53 63 68 65 64 75 6c 65 72 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 4a 53 53 63 68 65 64 75 6c 65 72 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 33 38 37 22 2c 5b 22 72 65 71 75 65 73 74 49 64 6c 65 43 61 6c 6c 62 61 63 6b 57 57 57 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 72 65 71 75 65 73 74 49 64 6c 65 43 61 6c 6c 62 61 63 6b 57 57 57 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 39 32 35 31 30 30 22 2c 5b 22 52 75 6e 43 6f 6d 65 74 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 52 75 6e 43 6f 6d 65 74 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 36 34 32 37 39 37 22 2c 5b 22 42 61 6e 7a Data Ascii: "__rc":["DTSG_ASYNC",null]},-1],["cr:696703",["JSScheduler"],{"__rc":["JSScheduler",null]},-1],["cr:7387",["requestIdleCallbackWWW"],{"__rc":["requestIdleCallbackWWW",null]},-1],["cr:925100",["RunComet"],{"__rc":["RunComet",null]},-1],["cr:1642797",["Banz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.6	59193	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:19 UTC	610	OUT	GET /rsrc.php/v3ikn04/yz/l/en_GB/JNtlbX11Plv.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:19 UTC	1982	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: UVoTfgUTVsU57zKXxBALLA== Expires: Fri, 23 May 2025 09:16:16 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: t9q2ev1HjmS1iyL1RtdJwX0vhyZE0Lp419b+d46IMSml9jtkdH8S43wGTTXOuTF02S2KuYbbthEKVMs4WBXEjg== Date: Sat, 25 May 2024 23:00:19 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3412, tp=-1, tpl=-1, uplat=4, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 130817
2024-05-25 23:00:19 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-05-25 23:00:19 UTC	15824	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 42 61 73 65 54 79 70 65 61 68 65 61 64 4c 6f 63 61 6c 53 74 6f 72 61 67 65 44 61 74 61 50 72 6f 76 69 64 65 72 53 74 6f 72 61 67 65 4b 65 79 22 2c 5b 22 24 49 6e 74 65 72 6e 61 6c 45 6e 75 6d 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 22 5f 53 65 61 72 63 68 42 6f 6f 74 73 74 72 61 70 43 61 63 68 65 5f 22 3b 63 3d 62 28 22 24 49 6e 74 65 72 6e 61 6c 45 6e 75 6d 22 29 2e 4d 69 72 72 6f 72 65 64 28 5b 22 46 65 65 64 43 6f 6d 70 6f 73 65 72 4d 65 6e 74 69 6f 6e 73 49 6e 74 65 6e 74 66 75 6c 4d 65 6e 74 69 6f 6e 73 42 6f 6f 74 73 74 72 61 70 22 2c 22 46 65 65 64 43 6f 6d 70 6f 73 65 72 4d 65 6e 74 69 6f 6e 73 4e Data Ascii: /FB_PKG_DELIM/__d("BaseTypeaheadLocalStorageDataProviderStorageKey",["$InternalEnum"],(function(a,b,c,d,e,f){"use strict";a="_SearchBootstrapCache_";c=b("$InternalEnum").Mirrored(["FeedComposerMentionsIntentfulMentionsBootstrap","FeedComposerMentionsN
2024-05-25 23:00:20 UTC	16384	IN	Data Raw: 61 67 65 5f 6e 61 6d 65 22 2c 72 29 5d 29 3b 69 66 28 61 29 72 65 74 75 72 6e 20 68 2e 5f 28 22 7b 72 65 70 72 65 73 65 6e 74 61 74 69 76 65 5f 6e 61 6d 65 7d 20 69 73 20 7b 63 6f 6d 6d 65 6e 74 5f 61 75 74 68 6f 72 5f 6e 61 6d 65 7d 27 73 20 7b 70 6f 6c 69 74 69 63 69 61 6e 5f 6f 66 66 69 63 65 5f 74 69 74 6c 65 7d 2e 22 2c 5b 68 2e 5f 70 61 72 61 6d 28 22 72 65 70 72 65 73 65 6e 74 61 74 69 76 65 5f 6e 61 6d 65 22 2c 76 29 2c 68 2e 5f 70 61 72 61 6d 28 22 63 6f 6d 6d 65 6e 74 5f 61 75 74 68 6f 72 5f 6e 61 6d 65 22 2c 71 29 2c 68 2e 5f 70 61 72 61 6d 28 22 70 6f 6c 69 74 69 63 69 61 6e 5f 6f 66 66 69 63 65 5f 74 69 74 6c 65 22 2c 75 29 5d 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 68 2e 5f 28 22 7b 70 61 67 65 5f 6e 61 6d 65 7d 20 73 65 72 76 65 73 20 7b Data Ascii: age_name",r)]);if(a)return h._("{representative_name} is {comment_author_name}'s {politician_office_title}.",[h._param("representative_name",v),h._param("comment_author_name",q),h._param("politician_office_title",u)]);else return h._("{page_name} serves {
2024-05-25 23:00:20 UTC	16384	IN	Data Raw: 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 63 74 69 6f 6e 54 72 69 67 67 65 72 5f 61 63 74 69 6f 6e 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 63 74 69 6f 6e 4d 65 73 73 65 6e 67 65 72 41 75 64 69 6f 43 61 6c 6c 48 61 6e 64 6c 65 72 5f 68 61 6e 64 6c 65 72 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 68 61 6e 64 6c 65 72 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 50 72 6f 66 69 6c 65 41 63 74 69 6f 6e 4d 65 73 73 65 6e 67 65 72 41 75 64 69 6f 43 61 6c 6c 48 61 6e 64 6c 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 Data Ascii: args:null,documentName:"ProfileCometActionTrigger_action",fragmentName:"ProfileCometActionMessengerAudioCallHandler_handler",fragmentPropName:"handler",kind:"ModuleImport"}],type:"ProfileActionMessengerAudioCallHandler",abstractKey:null},{kind:"InlineFrag
2024-05-25 23:00:20 UTC	16384	IN	Data Raw: 6e 67 4d 75 74 61 74 69 6f 6e 55 74 69 6c 73 22 29 2e 67 65 74 4f 70 74 69 6d 69 73 74 69 63 46 6f 6c 6c 6f 77 69 6e 67 41 63 74 69 6f 6e 46 6f 72 53 75 62 73 63 72 69 70 74 69 6f 6e 53 74 61 74 75 73 28 28 65 3d 61 29 21 3d 6e 75 6c 6c 3f 65 3a 22 52 45 47 55 4c 41 52 5f 46 4f 4c 4c 4f 57 22 2c 62 2c 63 29 2c 7b 69 73 5f 61 63 74 69 76 65 3a 21 31 7d 29 2c 69 64 3a 62 2c 70 72 6f 66 69 6c 65 5f 61 63 74 69 6f 6e 3a 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 7d 2c 64 28 22 50 72 6f 66 69 6c 65 41 63 74 69 6f 6e 46 6f 6c 6c 6f 77 69 6e 67 4d 75 74 61 74 69 6f 6e 55 74 69 6c 73 22 29 2e 67 65 74 4f 70 74 69 6d 69 73 74 69 63 46 6f 6c 6c 6f 77 41 63 74 69 6f 6e 46 6f 72 53 75 62 73 63 72 69 70 74 69 6f 6e 53 74 61 74 75 73 28 Data Ascii: ngMutationUtils").getOptimisticFollowingActionForSubscriptionStatus((e=a)!=null?e:"REGULAR_FOLLOW",b,c),{is_active:!1}),id:b,profile_action:babelHelpers["extends"]({},d("ProfileActionFollowingMutationUtils").getOptimisticFollowActionForSubscriptionStatus(
2024-05-25 23:00:20 UTC	1500	IN	Data Raw: 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 63 74 69 6f 6e 54 72 69 67 67 65 72 5f 61 63 74 69 6f 6e 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 47 72 6f 75 70 41 63 74 69 6f 6e 52 65 6d 6f 76 65 45 78 70 65 72 74 69 73 65 53 68 6f 77 41 73 42 61 64 67 65 48 61 6e 64 6c 65 72 5f 68 61 6e 64 6c 65 72 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 68 61 6e 64 6c 65 72 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 50 72 6f 66 69 6c 65 47 72 6f 75 70 41 63 74 69 6f 6e 52 65 6d 6f 76 65 45 78 70 65 72 74 69 73 65 53 68 6f 77 41 73 42 61 64 67 65 48 61 6e 64 6c 65 72 Data Ascii: lections:[{args:null,documentName:"ProfileCometActionTrigger_action",fragmentName:"ProfileCometGroupActionRemoveExpertiseShowAsBadgeHandler_handler",fragmentPropName:"handler",kind:"ModuleImport"}],type:"ProfileGroupActionRemoveExpertiseShowAsBadgeHandler
2024-05-25 23:00:20 UTC	14884	IN	Data Raw: 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 63 74 69 6f 6e 43 6f 6e 74 65 78 74 75 61 6c 50 72 6f 66 69 6c 65 52 65 70 6f 72 74 45 78 70 65 72 74 69 73 65 45 78 70 65 72 69 65 6e 63 65 48 61 6e 64 6c 65 72 5f 68 61 6e 64 6c 65 72 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 68 61 6e 64 6c 65 72 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 50 72 6f 66 69 6c 65 41 63 74 69 6f 6e 43 6f 6e 74 65 78 74 75 61 6c 50 72 6f 66 69 6c 65 52 65 70 6f 72 74 45 78 70 65 72 74 69 73 65 45 78 70 65 72 69 65 6e 63 65 48 61 6e 64 6c 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 Data Ascii: ragmentName:"ProfileCometActionContextualProfileReportExpertiseExperienceHandler_handler",fragmentPropName:"handler",kind:"ModuleImport"}],type:"ProfileActionContextualProfileReportExpertiseExperienceHandler",abstractKey:null},{kind:"InlineFragment",selec
2024-05-25 23:00:20 UTC	16384	IN	Data Raw: 69 74 69 6f 6e 73 3a 61 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 22 2c 6d 65 74 61 64 61 74 61 3a 6e 75 6c 6c 2c 6e 61 6d 65 3a 22 43 6f 6d 65 74 55 46 49 46 65 65 64 62 61 63 6b 52 65 61 63 74 53 75 62 73 63 72 69 70 74 69 6f 6e 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 63 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 66 65 65 64 62 61 63 6b 5f 6c 69 6b 65 5f 73 75 62 73 63 72 69 62 65 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 66 2c 74 79 70 65 3a 22 46 65 65 64 62 61 63 6b 4c 69 6b 65 Data Ascii: itions:a,kind:"Fragment",metadata:null,name:"CometUFIFeedbackReactSubscription",selections:[{alias:null,args:c,concreteType:null,kind:"LinkedField",name:"feedback_like_subscribe",plural:!1,selections:[{kind:"InlineFragment",selections:f,type:"FeedbackLike
2024-05-25 23:00:20 UTC	16384	IN	Data Raw: 74 57 69 74 68 6f 75 74 50 72 6f 70 65 72 74 69 65 73 4c 6f 6f 73 65 28 61 2c 5b 22 66 62 5f 66 65 65 64 5f 6c 6f 63 61 74 69 6f 6e 22 5d 29 3b 63 28 22 53 68 61 72 65 4d 65 6e 75 54 79 70 65 64 4c 6f 67 67 65 72 4c 69 74 65 22 29 2e 6c 6f 67 28 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 7d 2c 68 2c 61 29 29 3b 72 65 74 75 72 6e 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 61 2c 62 2c 64 2c 65 29 7b 63 28 22 53 68 61 72 65 4d 65 6e 75 54 79 70 65 64 4c 6f 67 67 65 72 4c 69 74 65 22 29 2e 6c 6f 67 28 7b 66 62 5f 73 68 61 72 65 5f 74 79 70 65 3a 61 2c 66 62 5f 65 6e 74 72 79 5f 70 6f 69 6e 74 3a 62 2c 66 62 5f 61 75 64 69 65 6e 63 65 3a 64 2c 66 62 5f 73 69 67 6e 69 66 69 63 61 6e 63 65 3a 65 2c 6e 61 6d 65 3a 22 66 65 65 64 5f 73 68 Data Ascii: tWithoutPropertiesLoose(a,["fb_feed_location"]);c("ShareMenuTypedLoggerLite").log(babelHelpers["extends"]({},h,a));return}function j(a,b,d,e){c("ShareMenuTypedLoggerLite").log({fb_share_type:a,fb_entry_point:b,fb_audience:d,fb_significance:e,name:"feed_sh
2024-05-25 23:00:20 UTC	14884	IN	Data Raw: 54 79 70 65 73 22 7d 2c 7b 6b 69 6e 64 3a 22 56 61 72 69 61 62 6c 65 22 2c 6e 61 6d 65 3a 22 75 73 65 5f 73 65 63 74 69 6f 6e 73 22 2c 76 61 72 69 61 62 6c 65 4e 61 6d 65 3a 22 63 61 6e 55 73 65 53 65 63 74 69 6f 6e 73 22 7d 5d 2c 6d 3d 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 5f 5f 74 79 70 65 6e 61 6d 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 6e 3d 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 6e 61 6d 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 6f 3d 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 Data Ascii: Types"},{kind:"Variable",name:"use_sections",variableName:"canUseSections"}],m={alias:null,args:null,kind:"ScalarField",name:"__typename",storageKey:null},n={alias:null,args:null,kind:"ScalarField",name:"name",storageKey:null},o={alias:null,args:null,kind

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.6	59195	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:19 UTC	610	OUT	GET /rsrc.php/v3i4vm4/ym/l/en_GB/hZYSGm_6tB-.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:19 UTC	1981	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: ur4xS5LMNa6ROY09VNPcGQ== Expires: Fri, 23 May 2025 09:16:16 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: TIAB/OvFm12pboOZfwGX9RsqLyNn1DxlssE1QDingSMLO5PBBD840Fcw8lez6+zHcfwloU+jNZEuOWMTlOkEkQ== Date: Sat, 25 May 2024 23:00:19 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3412, tp=-1, tpl=-1, uplat=3, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 49052
2024-05-25 23:00:19 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-05-25 23:00:20 UTC	15823	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 42 61 73 65 43 61 63 68 65 45 6e 74 72 79 4b 65 79 42 75 69 6c 64 65 72 22 2c 5b 22 42 61 73 65 44 61 74 61 45 6e 74 72 79 4b 65 79 42 75 69 6c 64 65 72 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 72 65 74 75 72 6e 20 63 28 22 42 61 73 65 44 61 74 61 45 6e 74 72 79 4b 65 79 42 75 69 6c 64 65 72 22 29 28 61 2e 65 6e 74 72 79 29 7d 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 42 61 73 65 44 61 74 61 45 6e 74 72 79 4c 61 62 65 6c 4b 65 79 42 75 69 6c 64 65 72 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 Data Ascii: /FB_PKG_DELIM/__d("BaseCacheEntryKeyBuilder",["BaseDataEntryKeyBuilder"],(function(a,b,c,d,e,f,g){"use strict";function a(a){return c("BaseDataEntryKeyBuilder")(a.entry)}g["default"]=a}),98);__d("BaseDataEntryLabelKeyBuilder",[],(function(a,b,c,d,e,f
2024-05-25 23:00:20 UTC	16384	IN	Data Raw: 74 72 61 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 24 31 29 72 65 74 75 72 6e 3b 74 68 69 73 2e 24 32 21 3d 6e 75 6c 6c 26 26 74 68 69 73 2e 24 32 2e 62 6f 6f 74 73 74 72 61 70 28 29 3b 74 68 69 73 2e 24 35 21 3d 6e 75 6c 6c 26 26 76 6f 69 64 20 74 68 69 73 2e 24 35 2e 66 65 74 63 68 4e 65 74 77 6f 72 6b 28 7b 71 75 65 72 79 3a 22 22 7d 29 3b 74 68 69 73 2e 24 31 3d 21 30 7d 3b 64 2e 66 65 74 63 68 43 61 63 68 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 71 75 65 72 79 3b 69 66 28 74 68 69 73 2e 24 35 21 3d 6e 75 6c 6c 26 26 62 3d 3d 3d 22 22 29 72 65 74 75 72 6e 20 74 68 69 73 2e 24 35 2e 66 65 74 63 68 43 61 63 68 65 28 61 29 3b 69 66 28 62 3d 3d 3d 22 22 29 72 65 74 75 72 6e 7b 65 6e 74 72 69 65 73 3a 5b 5d 2c Data Ascii: trap=function(){if(this.$1)return;this.$2!=null&&this.$2.bootstrap();this.$5!=null&&void this.$5.fetchNetwork({query:""});this.$1=!0};d.fetchCache=function(a){var b=a.query;if(this.$5!=null&&b==="")return this.$5.fetchCache(a);if(b==="")return{entries:[],
2024-05-25 23:00:20 UTC	16384	IN	Data Raw: 2c 6e 61 6d 65 3a 22 6e 6f 64 65 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 6e 61 6d 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 69 64 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 22 70 68 6f 74 6f 22 2c 61 72 67 73 3a 5b 7b 6b 69 6e 64 3a 22 4c 69 74 65 72 61 6c 22 2c 6e 61 6d 65 3a 22 68 65 69 67 Data Ascii: ,name:"node",plural:!1,selections:[{kind:"InlineFragment",selections:[{alias:null,args:null,kind:"ScalarField",name:"name",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"id",storageKey:null},{alias:"photo",args:[{kind:"Literal",name:"heig
2024-05-25 23:00:20 UTC	460	IN	Data Raw: 44 65 63 6f 72 61 74 6f 72 41 64 64 4c 69 6d 69 74 22 29 28 65 29 7d 2c 5b 65 5d 29 2c 6b 3d 64 28 22 43 6f 6d 65 74 52 65 6c 61 79 22 29 2e 75 73 65 52 65 6c 61 79 45 6e 76 69 72 6f 6e 6d 65 6e 74 28 29 3b 61 3d 63 28 22 75 73 65 44 65 65 70 45 71 75 61 6c 4d 65 6d 6f 22 29 28 68 28 7b 71 75 65 72 79 3a 22 22 7d 29 29 3b 76 61 72 20 6c 3d 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 63 28 22 43 6f 6d 65 74 54 79 70 65 61 68 65 61 64 47 72 61 70 68 51 4c 44 61 74 61 53 6f 75 72 63 65 22 29 29 28 7b 67 71 6c 51 75 65 72 79 3a 62 2c 6e 6f 72 6d 61 6c 69 7a 65 3a 66 2c 6f 70 74 69 6f 6e 73 3a 67 2c 71 75 65 72 79 56 61 72 69 61 62 6c 65 73 42 75 69 6c 64 65 72 46 75 6e 63 74 69 6f 6e 3a 68 2c 72 65 6c 61 79 45 6e 76 69 72 6f 6e 6d Data Ascii: DecoratorAddLimit")(e)},[e]),k=d("CometRelay").useRelayEnvironment();a=c("useDeepEqualMemo")(h({query:""}));var l=i(function(){return new(c("CometTypeaheadGraphQLDataSource"))({gqlQuery:b,normalize:f,options:g,queryVariablesBuilderFunction:h,relayEnvironm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.6	59196	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:19 UTC	577	OUT	GET /rsrc.php/yg/r/DUjm2v1u572.kf HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:20 UTC	1936	IN	HTTP/1.1 200 OK Content-Type: image/x.fb.keyframes Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: Z5o6ShcDfXOoxSieZi5xvg== Expires: Sat, 24 May 2025 18:23:46 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: tk9Jeu5zC5LsIfIbNmz5BKt7Mn+4Xbz9hDobAZeP9qVy+zWATvvLczl8bD0ltkmCmdOu07iofplUDljQr3+swQ== Date: Sat, 25 May 2024 23:00:19 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3412, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 64756
2024-05-25 23:00:20 UTC	1	IN	Data Raw: 1c Data Ascii:
2024-05-25 23:00:20 UTC	15882	IN	Data Raw: 00 00 00 4b 45 59 46 14 00 24 00 14 00 20 00 1c 00 04 00 10 00 00 00 0c 00 08 00 14 00 00 00 04 00 00 00 1c 00 00 00 38 00 00 00 c0 fb 00 00 00 00 9c 42 00 00 9c 42 bc bb fb 3f 00 00 70 42 01 00 00 00 04 00 00 00 11 00 00 00 52 61 6e 64 6f 6d 53 75 62 64 6f 63 75 6d 65 6e 74 00 00 00 03 00 00 00 d8 dc 00 00 98 a5 00 00 04 00 00 00 42 23 ff ff 05 00 00 00 14 00 00 00 00 00 9c 42 00 00 9c 42 bc bb fb 3f 00 00 70 42 d0 03 ff ff 04 00 00 00 08 00 00 00 1c 92 00 00 a4 7e 00 00 54 6b 00 00 04 58 00 00 b4 44 00 00 64 31 00 00 10 1e 00 00 04 00 00 00 4e 23 ff ff 8c 01 00 00 18 00 00 00 18 00 00 00 5c 01 00 00 60 01 00 00 64 01 00 00 01 00 00 00 7c 04 ff ff b4 1a ff ff 0c 00 00 00 20 00 00 00 38 00 00 00 05 00 00 00 cc 00 00 00 ac 00 00 00 88 00 00 00 60 00 00 00 Data Ascii: KEYF$ 8BB?pBRandomSubdocumentB#BB?pB~TkXDd1N#\`d\| 8`
2024-05-25 23:00:20 UTC	16384	IN	Data Raw: ff 04 00 00 00 70 41 ff ff 30 68 bd 41 70 e1 e3 c1 8a 41 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 2c 43 ff ff 08 00 00 00 00 00 00 01 9c 41 ff ff 20 ef c1 41 e8 9f e6 c1 8c 41 ff ff 04 00 00 00 b0 41 ff ff a8 f5 ba 41 08 58 e2 c1 ca 41 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 6c 43 ff ff 08 00 00 00 00 00 00 01 dc 41 ff ff 78 5b c0 41 e0 ae e5 c1 cc 41 ff ff 04 00 00 00 f0 41 ff ff b0 6a b8 41 b8 b4 e0 c1 0a 42 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 ac 43 ff ff 08 00 00 00 00 00 00 01 1c 42 ff ff c0 a6 be 41 c0 a5 e4 c1 0c 42 ff ff 04 00 00 00 30 42 ff ff e8 c5 b5 41 30 f5 de c1 4a 42 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 ec 43 ff ff 08 00 00 00 00 00 00 01 5c 42 ff ff 78 cf bc 41 70 82 e3 c1 4c 42 Data Ascii: pA0hApA ,CA AAAAXA lCAx[AAAjAB CBAB0BA0JB C\BxApLB
2024-05-25 23:00:20 UTC	16384	IN	Data Raw: 00 20 00 00 00 04 00 00 00 10 83 ff ff 08 00 00 00 00 00 00 01 80 81 ff ff 80 e7 f3 40 98 d2 82 41 70 81 ff ff 04 00 00 00 94 81 ff ff 00 b5 c9 40 b0 41 3f 41 ae 81 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 50 83 ff ff 08 00 00 00 00 00 00 01 c0 81 ff ff 20 e2 cf 40 80 32 4b 41 b0 81 ff ff 04 00 00 00 d4 81 ff ff c0 d1 b4 40 40 6e 0f 41 ee 81 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 90 83 ff ff 08 00 00 00 00 00 00 01 00 82 ff ff 80 0d b2 40 c0 cb 07 41 f0 81 ff ff 04 00 00 00 14 82 ff ff 00 43 a8 40 e0 08 d0 40 2e 82 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 d0 83 ff ff 08 00 00 00 00 00 00 01 40 82 ff ff 40 11 a4 40 80 61 ac 40 30 82 ff ff 04 00 00 00 54 82 ff ff 80 50 a2 40 40 f2 99 40 6e 82 ff ff 04 00 00 00 02 00 Data Ascii: @Ap@A?A P @2KA@@nA @AC@@. @@@a@0TP@@@n
2024-05-25 23:00:20 UTC	16105	IN	Data Raw: ff 00 00 20 c0 00 00 60 40 ec d7 ff ff 0c 00 00 00 14 00 00 00 20 00 00 00 02 00 00 00 44 00 00 00 24 00 00 00 03 00 00 00 8f ad 08 3f 09 9a 13 3f a5 2e 69 3f 03 00 00 00 c8 00 00 00 84 00 00 00 40 00 00 00 92 d7 ff ff 08 00 00 00 0c 00 00 00 a0 c1 ff ff 00 00 80 3f d2 c1 ff ff ab aa 2a 3e ae d7 ff ff 08 00 00 00 10 00 00 00 d8 c1 ff ff 00 00 80 3f a4 70 bd 3e f2 c1 ff ff ab aa 2a 3e fa c1 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 9c c3 ff ff 08 00 00 00 00 00 00 01 0c c2 ff ff a8 fb c2 c1 d8 25 89 41 fc c1 ff ff 04 00 00 00 20 c2 ff ff 20 22 c3 c1 20 22 89 41 3a c2 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 dc c3 ff ff 08 00 00 00 00 00 00 01 4c c2 ff ff a8 fb c2 c1 d8 25 89 41 3c c2 ff ff 04 00 00 00 60 c2 ff ff 00 00 20 c0 00 00 Data Ascii: `@ D$??.i?@?>?p>> %A " "A: L%A<`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.6	59197	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:19 UTC	368	OUT	GET /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:20 UTC	930	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-25 23:00:20 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-25 23:00:20 UTC	1662	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-25 23:00:20 UTC	2553	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 63 6f 6e 66 69 67 76 65 72 73 69 6f 6e 3d 22 41 63 4a 57 59 64 57 66 4d 7a 36 4f 58 77 62 65 6e 46 75 63 52 41 6f 77 62 39 50 71 53 6d 37 35 67 61 4b 73 65 4e 63 67 32 2d 69 70 38 4c 4e 5a 56 39 66 59 70 51 6e 4a 39 64 56 57 2d 67 22 3b 20 65 5f 63 6c 69 65 6e 74 61 64 64 72 3d 22 41 63 4a 72 6e 76 74 4c 75 38 58 70 37 58 39 51 31 76 54 42 4f 57 72 52 5a 43 45 69 75 6b 65 4c 50 31 78 39 4c 55 66 35 31 42 78 44 4e 42 6c 42 42 65 48 7a 6a 70 6b 59 57 65 56 57 66 37 48 55 53 59 39 44 38 72 72 39 32 5a 78 45 52 56 2d 45 65 63 6a 4a 76 44 64 46 70 31 57 52 46 79 72 50 7a 42 66 63 6a 33 6b 50 7a 4e 32 41 36 48 78 64 50 41 22 3b 20 65 5f 66 62 5f Data Ascii: Proxy-Status: http_request_error; e_fb_configversion="AcJWYdWfMz6OXwbenFucRAowb9PqSm75gaKseNcg2-ip8LNZV9fYpQnJ9dVW-g"; e_clientaddr="AcJrnvtLu8Xp7X9Q1vTBOWrRZCEiukeLP1x9LUf51BxDNBlBBeHzjpkYWeVWf7HUSY9D8rr92ZxERV-EecjJvDdFp1WRFyrPzBfcj3kPzN2A6HxdPA"; e_fb_
2024-05-25 23:00:20 UTC	165	IN	Data Raw: 58 2d 46 42 2d 43 6f 6e 6e 65 63 74 69 6f 6e 2d 51 75 61 6c 69 74 79 3a 20 47 4f 4f 44 3b 20 71 3d 30 2e 37 2c 20 72 74 74 3d 39 31 2c 20 72 74 78 3d 30 2c 20 63 3d 31 30 2c 20 6d 73 73 3d 31 33 39 32 2c 20 74 62 77 3d 33 34 30 32 2c 20 74 70 3d 2d 31 2c 20 74 70 6c 3d 2d 31 2c 20 75 70 6c 61 74 3d 31 30 31 2c 20 75 6c 6c 61 74 3d 30 0d 0a 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=10, mss=1392, tbw=3402, tp=-1, tpl=-1, uplat=101, ullat=0Alt-Svc: h3=":443"; ma=86400Connection: close
2024-05-25 23:00:20 UTC	1335	IN	Data Raw: 31 30 66 37 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 78 33 4e 64 52 43 69 4d 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d Data Ascii: 10f75<!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="x3NdRCiM">function envFlush(a){function b(b){for(var c in a)b[c]=
2024-05-25 23:00:20 UTC	1500	IN	Data Raw: 6f 6f 6b 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 6d 65 64 69 61 3d 22 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 34 30 70 78 29 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 3f 6c 6f 63 61 6c 65 32 3d 65 6e 5f 47 42 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 6d 65 64 69 61 3d 22 68 61 6e 64 68 65 6c 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 3f 6c 6f 63 61 6c 65 32 Data Ascii: ook" /><link rel="alternate" media="only screen and (max-width: 640px)" href="https://www.facebook.com/ajax/bulk-route-definitions/?locale2=en_GB" /><link rel="alternate" media="handheld" href="https://www.facebook.com/ajax/bulk-route-definitions/?locale2
2024-05-25 23:00:20 UTC	1500	IN	Data Raw: 38 6c 67 35 4b 7a 22 20 64 61 74 61 2d 62 6f 6f 74 6c 6f 61 64 65 72 2d 68 61 73 68 3d 22 52 45 42 76 6c 59 5a 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 75 2f 6c 2f 30 2c 63 72 6f 73 73 2f 65 37 70 59 43 67 72 71 45 74 68 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 20 64 61 74 61 2d 62 6f 6f 74 6c 6f 61 64 65 72 2d 68 61 73 68 3d 22 31 2b 48 31 6c 46 42 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 2f Data Ascii: 8lg5Kz" data-bootloader-hash="REBvlYZ" crossorigin="anonymous" /><link type="text/css" rel="stylesheet" href="https://static.xx.fbcdn.net/rsrc.php/v3/yu/l/0,cross/e7pYCgrqEth.css?_nc_x=Ij3Wp8lg5Kz" data-bootloader-hash="1+H1lFB" crossorigin="anonymous" /
2024-05-25 23:00:20 UTC	1500	IN	Data Raw: 63 72 3a 36 36 34 30 22 2c 5b 22 50 72 6f 6d 69 73 65 49 6d 70 6c 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 50 72 6f 6d 69 73 65 49 6d 70 6c 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 33 38 36 22 2c 5b 22 63 6c 65 61 72 54 69 6d 65 6f 75 74 57 57 57 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 63 6c 65 61 72 54 69 6d 65 6f 75 74 57 57 57 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 33 39 30 22 2c 5b 22 73 65 74 54 69 6d 65 6f 75 74 57 57 57 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 73 65 74 54 69 6d 65 6f 75 74 57 57 57 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 38 39 35 38 22 2c 5b 22 46 42 4a 53 4f 4e 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 46 42 4a 53 4f 4e 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 30 37 38 22 2c Data Ascii: cr:6640",["PromiseImpl"],{"__rc":["PromiseImpl",null]},-1],["cr:7386",["clearTimeoutWWW"],{"__rc":["clearTimeoutWWW",null]},-1],["cr:7390",["setTimeoutWWW"],{"__rc":["setTimeoutWWW",null]},-1],["cr:8958",["FBJSON"],{"__rc":["FBJSON",null]},-1],["cr:1078",
2024-05-25 23:00:20 UTC	1500	IN	Data Raw: 6e 6f 43 6f 6f 6b 69 65 73 22 3a 66 61 6c 73 65 2c 22 73 68 6f 75 6c 64 53 68 6f 77 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 22 3a 66 61 6c 73 65 2c 22 73 68 6f 75 6c 64 57 61 69 74 46 6f 72 44 65 66 65 72 72 65 64 44 61 74 72 43 6f 6f 6b 69 65 22 3a 66 61 6c 73 65 7d 2c 34 33 32 38 5d 2c 5b 22 43 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 49 46 72 61 6d 65 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 63 6f 6e 73 65 6e 74 5f 70 61 72 61 6d 22 3a 22 46 51 41 53 45 68 49 53 41 41 3d 3d 2e 41 52 59 75 4f 34 78 57 66 65 45 77 43 4a 43 5a 55 68 6d 46 71 2d 71 65 76 68 2d 41 6b 6e 61 69 75 53 76 54 64 4f 72 66 4d 57 52 6f 69 65 34 59 22 2c 22 61 6c 6c 6f 77 6c 69 73 74 65 64 5f 69 66 72 61 6d 65 73 22 3a 5b 5d 2c 22 69 73 5f 63 68 65 63 6b 70 6f 69 6e 74 65 64 22 3a 66 61 6c 73 Data Ascii: noCookies":false,"shouldShowCookieBanner":false,"shouldWaitForDeferredDatrCookie":false},4328],["CookieConsentIFrameConfig",[],{"consent_param":"FQASEhISAA==.ARYuO4xWfeEwCJCZUhmFq-qevh-AknaiuSvTdOrfMWRoie4Y","allowlisted_iframes":[],"is_checkpointed":fals
2024-05-25 23:00:20 UTC	1500	IN	Data Raw: 7b 22 74 22 3a 36 30 34 38 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 6d 5f 6c 73 22 3a 7b 22 74 22 3a 33 34 35 36 30 30 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 6d 5f 70 69 78 65 6c 5f 72 61 74 69 6f 22 3a 7b 22 74 22 3a 36 30 34 38 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 6e 6f 73 63 72 69 70 74 22 3a 7b 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 70 72 65 73 65 6e 63 65 22 3a 7b 22 74 22 3a 32 35 39 32 30 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 73 66 61 75 22 3a 7b 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 75 73 69 64 61 22 3a 7b 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 76 70 64 22 3a 7b 22 74 22 3a 35 31 38 34 30 30 30 2c 22 73 22 3a 22 4c 61 78 22 7d 2c 22 77 64 22 3a 7b 22 74 22 3a 36 30 34 38 30 30 2c 22 73 22 3a 22 4c 61 78 22 7d Data Ascii: {"t":604800,"s":"None"},"m_ls":{"t":34560000,"s":"None"},"m_pixel_ratio":{"t":604800,"s":"None"},"noscript":{"s":"None"},"presence":{"t":2592000,"s":"None"},"sfau":{"s":"None"},"usida":{"s":"None"},"vpd":{"t":5184000,"s":"Lax"},"wd":{"t":604800,"s":"Lax"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.6	59199	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:19 UTC	381	OUT	GET /images/emoji.php/v9/t34/1/16/1f914.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:20 UTC	1713	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: PicXcOha4aSNdnCXDVNBtw== Expires: Sun, 18 May 2025 02:37:55 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin;report-to="coop_report" X-Content-Type-Options: nosniff
2024-05-25 23:00:20 UTC	829	IN	Data Raw: 72 65 70 6f 72 74 2d 74 6f 3a 20 7b 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 6f 6f 70 5c 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 2c 22 69 6e 63 6c 75 64 65 5f 73 75 62 64 6f 6d 61 69 6e 73 22 3a 74 72 75 65 7d 2c 20 7b 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 Data Ascii: report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/c
2024-05-25 23:00:20 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-05-25 23:00:20 UTC	629	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 02 3d 49 44 41 54 78 da 7d 93 03 ac 26 41 10 84 9f 10 9d 6d db b6 6d db b6 6d db b6 6d db 7c b6 6d db de ba 54 ff 99 fc e7 49 7a fc 55 63 76 0d 7e 6f 38 97 df 04 37 8a 35 c4 e7 1a b3 f0 a5 d6 1e 1a e7 dc e3 99 c1 ff 1a de 56 ae 81 4f 35 4e c0 ba 71 a8 66 d7 02 70 ed 28 96 f9 bd 39 b4 cf b5 43 79 c6 3b 7f 87 3f 56 6b 07 8b 7a 2e 04 34 9f 01 40 e0 30 68 41 e3 91 f8 ba 3d fc 76 14 12 8b 3c 59 02 99 2f aa b8 f0 ee 1f 9e 79 90 f1 a1 29 68 29 9f ba 20 cb 63 02 10 bd 44 c6 14 8b 81 48 fc d4 9b 62 72 4e 47 12 89 ca 99 a1 c5 5f af 88 d7 8b 8a e2 d2 b8 42 b0 58 51 58 00 2d 6e 9d d8 b7 67 53 b0 6c 6e 1f f8 be 1e 2d d1 31 3d 32 52 13 16 87 f9 71 73 de c4 2e a8 5d 7f Data Ascii: PNGIHDRa=IDATx}&Ammmm\|mTIzUcv~o875VO5Nqfp(9Cy;?Vkz.4@0hA=v<Y/y)h) cDHbrNG_BXQX-ngSln-1=2Rqs.]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.6	59198	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:19 UTC	381	OUT	GET /images/emoji.php/v9/t6e/1/16/1f4ac.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:20 UTC	1713	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: tpXPYLQp/VdSfZRxDFjPzA== Expires: Sat, 24 May 2025 10:04:56 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin;report-to="coop_report" X-Content-Type-Options: nosniff
2024-05-25 23:00:20 UTC	855	IN	Data Raw: 72 65 70 6f 72 74 2d 74 6f 3a 20 7b 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 6f 6f 70 5c 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 2c 22 69 6e 63 6c 75 64 65 5f 73 75 62 64 6f 6d 61 69 6e 73 22 3a 74 72 75 65 7d 2c 20 7b 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 Data Ascii: report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/c
2024-05-25 23:00:20 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-05-25 23:00:20 UTC	388	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 75 50 4c 54 45 47 70 4c bf da ee 9d c1 db b1 d1 e8 8b b2 cf dd ec f7 ca e1 f2 c4 de f0 e4 f1 f9 a0 c3 dc ab cc e4 a0 c3 dd 9a bf da ac cd e5 a8 cb e3 d1 e5 f4 d9 ea f6 da ea f6 d5 e7 f5 ad ce e5 c5 de f0 c9 e0 f1 9f c3 dc a1 c5 de 98 bd d8 a0 c3 dd a2 c6 e0 97 bc d7 e1 ee f7 f6 fb fd f3 f9 fc ee f6 fb d4 e7 f5 e9 f3 fa 7c a8 c9 de ec f6 b7 d5 eb db e9 f4 c9 e1 f2 36 e8 dc 15 00 00 00 1c 74 52 4e 53 00 fd b3 e5 11 ed 57 fe fe 1e 34 de 61 fa 95 75 c2 ce dd dd 9b e0 d0 d0 53 cf 2a 72 07 d3 1b a3 00 00 00 a3 49 44 41 54 78 da 45 48 03 82 04 41 10 cb 18 8d f5 31 6d fc ff 89 2b 4c 55 0c 00 cb 6e 3f 90 c3 7e b7 e0 71 e3 61 76 ce 5a e7 e6 c3 f8 e8 43 b0 d6 dc Data Ascii: PNGIHDR(-SuPLTEGpL\|6tRNSW4auS*rIDATxEHA1m+LUn?~qavZC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.6	59200	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:19 UTC	599	OUT	GET /rsrc.php/v3/yy/r/2pW-nUfYDFy.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:20 UTC	1955	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: DtU8vTEK+OqypMX6ugYDtw== Expires: Sun, 25 May 2025 14:35:44 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: 3ZKYr5wQ/rFddLKs2jlqM4DjnAPJAtKYd7zf6D0pAzKXGaIY0HYa/VSKWVBq2tzJeIBJ3mJhYeMOxYAjevLEHQ== Date: Sat, 25 May 2024 23:00:20 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 12571
2024-05-25 23:00:20 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-05-25 23:00:20 UTC	12570	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 52 65 76 69 65 77 73 46 65 65 64 51 75 65 72 79 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 65 2e 65 78 70 6f 72 74 73 3d 22 37 37 30 30 36 36 33 38 39 36 36 38 32 39 39 31 22 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 52 65 76 69 65 77 73 46 65 65 64 51 75 65 72 79 24 50 61 72 61 6d 65 74 65 72 73 22 2c 5b 22 43 6f 6d 65 74 49 6d 6d 65 72 73 69 76 65 50 68 6f 74 6f 43 61 6e 55 73 65 72 44 69 73 61 62 6c 65 33 44 4d 6f 74 69 6f 6e 2e 72 65 6c 61 79 70 72 6f 76 69 64 65 72 22 2c 22 43 6f 6d 65 74 49 73 41 64 Data Ascii: /FB_PKG_DELIM/__d("ProfileCometReviewsFeedQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="7700663896682991"}),null);__d("ProfileCometReviewsFeedQuery$Parameters",["CometImmersivePhotoCanUserDisable3DMotion.relayprovider","CometIsAd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.6	59202	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:19 UTC	1159	OUT	POST /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19868.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7373075910951068210&__req=8&__rev=1013770602&__s=%3A%3Afjuzaa&__spin_b=trunk&__spin_r=1013770602&__spin_t=1716678010&__user=0&dpr=1&jazoest=2936&lsd=AVrj9UP_w8I&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 1108 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryVLDxu6HjQ6TVdCBu sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/Codashop.IDofficial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:19 UTC	1108	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 56 4c 44 78 75 36 48 6a 51 36 54 56 64 43 42 75 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 73 22 0d 0a 0d 0a 31 37 31 36 36 37 38 30 31 38 37 39 31 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 56 4c 44 78 75 36 48 6a 51 36 54 56 64 43 42 75 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 71 22 0d 0a 0d 0a 5b 7b 22 61 70 70 5f 69 64 22 3a 22 32 32 32 30 33 39 31 37 38 38 32 30 30 38 39 32 22 2c 22 70 6f 73 74 73 22 3a 5b 5b 22 66 61 6c 63 6f 3a 6c 6f 78 5f 75 70 73 65 6c 6c 5f 65 76 65 6e 74 22 2c 7b 22 Data Ascii: ------WebKitFormBoundaryVLDxu6HjQ6TVdCBuContent-Disposition: form-data; name="ts"1716678018791------WebKitFormBoundaryVLDxu6HjQ6TVdCBuContent-Disposition: form-data; name="q"[{"app_id":"2220391788200892","posts":[["falco:lox_upsell_event",{"
2024-05-25 23:00:20 UTC	2004	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-25 23:00:20 UTC	2001	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-
2024-05-25 23:00:20 UTC	70	IN	Data Raw: 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a Data Ascii: Alt-Svc: h3=":443"; ma=86400Connection: closeContent-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.6	59201	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:20 UTC	1158	OUT	POST /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19868.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7373075910951068210&__req=9&__rev=1013770602&__s=%3A%3Afjuzaa&__spin_b=trunk&__spin_r=1013770602&__spin_t=1716678010&__user=0&dpr=1&jazoest=2936&lsd=AVrj9UP_w8I&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 924 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryrAURsNX0hBBzjpQa sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/Codashop.IDofficial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:20 UTC	924	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 72 41 55 52 73 4e 58 30 68 42 42 7a 6a 70 51 61 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 73 22 0d 0a 0d 0a 31 37 31 36 36 37 38 30 31 38 37 39 35 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 72 41 55 52 73 4e 58 30 68 42 42 7a 6a 70 51 61 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 71 22 0d 0a 0d 0a 5b 7b 22 61 70 70 5f 69 64 22 3a 22 32 32 32 30 33 39 31 37 38 38 32 30 30 38 39 32 22 2c 22 70 6f 73 74 73 22 3a 5b 5b 22 66 61 6c 63 6f 3a 62 64 5f 70 64 63 5f 73 69 67 6e 61 6c 73 22 2c 7b 22 65 22 Data Ascii: ------WebKitFormBoundaryrAURsNX0hBBzjpQaContent-Disposition: form-data; name="ts"1716678018795------WebKitFormBoundaryrAURsNX0hBBzjpQaContent-Disposition: form-data; name="q"[{"app_id":"2220391788200892","posts":[["falco:bd_pdc_signals",{"e"
2024-05-25 23:00:20 UTC	2004	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-25 23:00:20 UTC	2003	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-
2024-05-25 23:00:20 UTC	70	IN	Data Raw: 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a Data Ascii: Alt-Svc: h3=":443"; ma=86400Connection: closeContent-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.6	59203	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:20 UTC	596	OUT	GET /v/t39.30808-6/443820279_996576055171299_5426681423066812390_n.jpg?stp=dst-jpg_p600x600&_nc_cat=106&ccb=1-7&_nc_sid=5f2048&_nc_ohc=yOpNa5f4B0MQ7kNvgFXHOgL&_nc_ht=scontent-hou1-1.xx&oh=00_AYDmlj2FslEtdorS3sX8SiySJp-Qe_coQMiD4X1hjkEgCw&oe=665834CA HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:20 UTC	612	IN	HTTP/1.1 200 OK Last-Modified: Sat, 25 May 2024 06:00:07 GMT X-Needle-Checksum: 2752040978 thrift_fmhk: GBBU9Ss6jRorBcc81Dmh9goZFfDr4Z0EvFUAHCYEAAAA Content-Type: image/jpeg content-digest: adler32=3369106505 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:20 GMT X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 54619
2024-05-25 23:00:20 UTC	1	IN	Data Raw: ff Data Ascii:
2024-05-25 23:00:20 UTC	15117	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 37 30 30 31 30 30 30 30 30 31 31 37 30 30 30 30 38 31 33 33 30 30 30 30 62 37 33 61 30 30 30 30 65 33 34 37 30 30 30 30 64 32 35 65 30 30 30 30 36 34 38 32 30 30 30 30 62 38 38 37 30 30 30 30 32 35 38 66 30 30 30 30 32 66 39 62 30 30 30 30 35 62 64 35 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a700100000117000081330000b73a0000e3470000d25e000064820000b8870000258f00002f9b00005bd50000C%# , #&')*)-0-(0%()(C(((((((((((((((
2024-05-25 23:00:20 UTC	16384	IN	Data Raw: 56 cf 6f 54 c6 06 0c 5b fe 43 9b 7d 50 20 ed c8 1b ec b3 6e d7 59 b7 d5 17 01 ba 0e 07 62 b2 6f aa b8 5e 23 7d 55 d0 20 ec b2 1e a8 38 1d 96 41 17 01 b9 41 c0 ed fc a5 47 e1 3b dc 98 1a 7c c5 50 31 ad 8f a4 dd 57 ca e7 4b 87 60 a1 90 c3 20 c4 a8 ce 35 37 3e a5 52 b7 c6 9e e7 de 89 cd e4 c8 55 34 6d 39 18 9d ad 97 87 89 fe 26 9f 04 f3 68 43 5a 74 bf d1 35 b1 1d dd fa 7f ed 56 48 74 88 1d 00 57 30 3c 16 7b 15 49 0e 98 94 d3 84 9f c3 29 84 8a 82 47 b5 0c 5c 6e f2 b8 7b 18 2e e6 3a ff 00 ca 4d f8 6e 4e 37 16 c3 e6 b8 74 4e 63 09 77 75 54 cc aa 6d ee 53 41 e1 4d 8b 76 51 32 f5 3a 8e e5 40 1d 04 f6 3e e5 34 99 3c 92 cf 9a a6 86 52 4b d8 2c 9a 0b 4f 53 6f fd 57 89 68 6d 87 7f 6a 2d 2f d1 ac f9 aa 8a 37 b5 ad 70 4d 86 4a 87 e8 14 b1 7f 89 c6 da 68 a3 69 a7 9f 51 Data Ascii: VoT[C}P nYbo^#}U 8AAG;\|P1WK` 57>RU4m9&hCZt5VHtW0<{I)G\n{.:MnN7tNcwuTmSAMvQ2:@>4<RK,OSoWhmj-/7pMJhiQ
2024-05-25 23:00:20 UTC	16384	IN	Data Raw: 3b 16 08 f3 be d2 ef 06 20 07 99 5d 9c b0 62 62 cf 09 5a e5 0d 41 d4 43 98 a5 91 f7 0d 12 e2 bd 67 4a 4a f6 80 26 a6 ce 83 24 4f fa 38 67 85 7c c4 14 09 b6 54 b2 1a 79 e2 5f 92 98 74 97 41 d9 32 15 c6 59 64 a8 e8 1a 97 19 99 a3 a7 a9 84 d7 ae 52 b6 0f 1b 98 97 38 b6 cf 17 ef 8d 33 52 84 07 de 00 c7 aa 25 64 07 05 57 37 94 56 8b 9d 35 06 d9 95 4f cf 13 32 77 e0 66 0f 08 82 cf 10 ec 9b e6 54 10 a9 c8 cc dd 10 34 94 10 a5 dc 37 e9 18 e2 8f 09 6b d0 0d 88 7e 48 e3 4c d9 2d 25 9b 9c 3a 7a 43 4f 78 5c bb 58 8d 77 d2 75 e8 d0 55 dc f4 11 b2 ca ea 1d 41 78 66 09 b4 d5 2b 07 82 d8 eb ac e8 f5 22 14 ae 8d 0a 94 7f 42 21 c2 67 78 76 84 b1 a5 c7 d4 bb 9d e3 41 87 d7 77 68 36 da c0 b8 b9 b1 b9 b9 20 57 84 12 ac ce 99 43 25 bf e8 fe a5 41 b2 e9 da 10 74 05 f9 10 e8 54 Data Ascii: ; ]bbZACgJJ&$O8g\|Ty_tA2YdR83R%dW7V5O2wfT47k~HL-%:zCOx\XwuUAxf+"B!gxvAwh6 WC%AtT
2024-05-25 23:00:20 UTC	6733	IN	Data Raw: 15 1c c0 00 ec 1c 9d c6 34 f0 d5 18 7b 32 a3 00 ca 6f c4 b3 75 2c 14 30 4b 7c 42 1d 64 64 3d a0 dc c7 46 06 a0 12 ec d5 c5 5e a5 fd 60 5d 19 90 5b 67 4c 60 f3 0a 1d ee d0 05 50 25 7b 7a 9d 45 88 fd 15 e8 99 28 39 43 87 d1 72 e2 c6 11 9d 10 eb b3 bd 2d f3 3c e2 eb 8f 5e 75 51 4d ca 0c b1 3b 61 16 63 5e f3 2d 51 8f 34 cc 78 94 fb a5 95 d4 cd 0c 5b ef 72 ea 18 aa ee 12 67 f3 76 9c 37 f3 2e 08 16 4a af 5e a9 75 1e b1 4d c3 8a 39 98 6d 99 84 1c 20 da c3 19 46 1f 0e af d6 fd 9b 61 56 52 3e e4 84 e4 24 18 c6 10 44 95 88 b1 14 d6 78 88 08 c2 98 d9 f5 03 18 41 ce 5e 91 7d 22 22 67 83 a4 68 a5 d9 47 78 c0 d4 1c 27 10 ae c0 b0 ea 75 81 ae e8 63 62 e4 8b 20 c5 cb a0 36 4f c3 28 75 c3 88 00 4e 9a c4 96 26 79 2f 9b a9 df e6 51 08 5b 57 91 e3 cc 44 10 0a 0a 76 34 e9 9b Data Ascii: 4{2ou,0K\|Bdd=F^`][gL`P%{zE(9Cr-<^uQM;ac^-Q4x[rgv7.J^uM9m FaVR>$DxA^}""ghGx'ucb 6O(uN&y/Q[WDv4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.6	59204	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:20 UTC	554	OUT	GET /m1/v/t6/An8UpDtYTxwRfyFUAQkYpPLVzCcFZAyT58b4mM9QRn-9IZWdHfcWsX1lOuHAsupZu8HCFEX8uobe6VdR6H9B8v2Z_FzSMfB8MYN36w.kf?ccb=10-5&oh=00_AYDhgEWS6D0RLo0qvx9TQgxPypbSC1GdW-PLYRKR1wPKAw&oe=6679EC30&_nc_sid=7da55a HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:20 UTC	880	IN	HTTP/1.1 200 OK Content-Type: image/x.fb.keyframes ETag: 1488915451716286797 x-manifold-obj-blobsizebytes: 151112 x-manifold-obj-canonicalpath: flat/base:v7:toto.kf x-manifold-obj-ctime: 1611967375 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"899779720071651","color":"ec7ebd","__ctime":"1611967375","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:20 GMT X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 151112
2024-05-25 23:00:20 UTC	1	IN	Data Raw: 18 Data Ascii:
2024-05-25 23:00:20 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 10 00 1a 00 08 00 14 00 10 00 00 00 04 00 00 00 10 00 00 00 40 00 00 00 00 00 d2 43 00 00 d2 43 55 55 a5 3f 00 00 c0 41 00 00 2a 00 08 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2a 00 00 00 04 00 00 00 06 00 00 00 94 ec 01 00 84 88 01 00 90 25 01 00 d4 c3 00 00 b0 63 00 00 04 00 00 00 ae 13 fe ff 24 00 00 00 30 00 00 00 34 00 00 00 34 00 00 00 44 00 00 00 48 00 00 00 4c 00 00 00 54 00 00 00 01 00 00 00 2c 13 fe ff 04 00 00 00 84 13 fe ff 00 c0 64 7b 3c 13 fe ff 00 00 80 3f 78 13 fe ff 48 13 fe ff 04 00 00 00 98 b2 fd ff 00 00 80 3f 00 00 80 3f 5c 13 fe ff 00 00 52 43 64 13 fe ff 00 00 52 43 6c 13 fe ff 04 00 00 00 60 13 fe ff 58 13 fe ff 0c 00 00 00 84 00 00 00 Data Ascii: KEYF@CCUU?A**%c$044DHLT,d{<?xH??\RCdRCl`X
2024-05-25 23:00:20 UTC	16332	IN	Data Raw: 00 33 43 04 b8 fd ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 c0 b7 fd ff 38 6f de 42 7c 26 50 43 cc b7 fd ff 78 3a ff 42 86 99 4f 43 d8 b7 fd ff 00 00 da 42 00 00 4e 43 3c b8 fd ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 f8 b7 fd ff 1e c6 0e 43 fa b9 50 43 04 b8 fd ff cc 3b 17 43 38 56 50 43 10 b8 fd ff 00 00 05 43 00 00 50 43 30 b8 fd ff 04 00 00 00 24 b8 fd ff 00 00 1d 43 00 00 52 43 fa ba fd ff 04 00 00 00 0f 00 00 00 4c 03 00 00 10 03 00 00 d4 02 00 00 98 02 00 00 5c 02 00 00 20 02 00 00 e4 01 00 00 a8 01 00 00 6c 01 00 00 30 01 00 00 f4 00 00 00 b8 00 00 00 7c 00 00 00 40 00 00 00 04 00 00 00 d0 b8 fd ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 8c b8 fd ff aa aa 1d 43 00 00 52 43 98 b8 fd ff 56 55 1e 43 00 00 52 43 a4 b8 fd ff Data Ascii: 3C 8oB\|&PCx:BOCBNC< CPC;C8VPCCPC0$CRCL\ l0\|@ CRCVUCRC
2024-05-25 23:00:20 UTC	16384	IN	Data Raw: f7 fd ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 88 f7 fd ff 00 1d 39 43 22 d0 af c2 94 f7 fd ff b4 90 3e 43 ee 58 c9 c2 a0 f7 fd ff 00 00 34 43 02 00 9a c2 04 f8 fd ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 c0 f7 fd ff 78 ee 43 43 a8 7c ff c2 cc f7 fd ff 6a a9 49 43 1d 88 24 c3 d8 f7 fd ff 00 00 42 43 00 00 ec c2 3c f8 fd ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 f8 f7 fd ff 6c b5 41 43 89 36 2c c3 04 f8 fd ff 78 ab 30 43 b0 85 2b c3 10 f8 fd ff 00 00 44 43 00 00 2a c3 74 f8 fd ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 30 f8 fd ff ee bc 21 43 82 97 2c c3 3c f8 fd ff c4 ef 10 43 0d 2a 2e c3 48 f8 fd ff 00 00 2a 43 00 00 2c c3 ac f8 fd ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 68 f8 fd ff 82 26 0e 43 6a b3 2a c3 Data Ascii: 9C">CX4C xCC\|jIC$BC< lAC6,x0C+DCt 0!C,<C.HC, h&Cj
2024-05-25 23:00:20 UTC	16384	IN	Data Raw: 69 f2 41 14 a8 e0 42 7c 37 fe ff 58 21 8a 41 b4 52 0a 43 88 37 fe ff 00 00 40 42 00 00 b0 42 ec 37 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 a8 37 fe ff 30 d9 59 41 7e 8d 35 43 b4 37 fe ff 50 ba 2e 41 d4 5f 45 43 c0 37 fe ff 00 00 60 41 00 00 31 43 24 38 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 e0 37 fe ff 68 b6 87 41 fa 86 4a 43 ec 37 fe ff c0 c0 04 42 16 83 48 43 f8 37 fe ff 00 00 60 41 00 00 48 43 5c 38 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 18 38 fe ff e0 c0 3c 42 d2 83 49 43 24 38 fe ff 88 ca 7b 42 5e 0d 4d 43 30 38 fe ff 00 00 20 42 00 00 49 43 94 38 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 50 38 fe ff 58 a5 84 42 54 ad 49 43 5c 38 fe ff 98 54 81 42 44 fe 3b 43 68 38 fe ff 00 00 82 42 00 00 4b 43 Data Ascii: iAB\|7X!ARC7@BB7 70YA~5C7P.A_EC7`A1C$8 7hAJC7BHC7`AHC\8 8<BIC$8{B^MC08 BIC8 P8XBTIC\8TBD;Ch8BKC
2024-05-25 23:00:20 UTC	14935	IN	Data Raw: ef 3d 3f 8c 31 46 3f 9d 73 4e 3f ad b5 56 3f be f7 5e 3f ce 39 67 3f df 7b 6f 3f ef bd 77 3f 1f 00 00 00 48 5d 00 00 50 5a 00 00 58 57 00 00 24 54 00 00 f0 50 00 00 34 4e 00 00 00 4b 00 00 90 47 00 00 5c 44 00 00 64 41 00 00 30 3e 00 00 fc 3a 00 00 c8 37 00 00 94 34 00 00 24 31 00 00 2c 2e 00 00 f8 2a 00 00 c4 27 00 00 94 24 00 00 9c 21 00 00 e0 1e 00 00 70 1b 00 00 3c 18 00 00 44 15 00 00 d4 11 00 00 64 0e 00 00 a8 0b 00 00 ec 08 00 00 30 06 00 00 b0 03 00 00 f4 00 00 00 26 d6 fe ff 00 00 00 02 2e d6 fe ff 00 00 00 02 36 d6 fe ff 00 00 00 02 3e d6 fe ff 00 00 00 02 46 d6 fe ff 00 00 00 02 4e d6 fe ff 00 00 00 02 56 d6 fe ff 00 00 00 02 5e d6 fe ff 00 00 00 02 66 d6 fe ff 00 00 00 02 6e d6 fe ff 00 00 00 02 76 d6 fe ff 00 00 00 02 7e d6 fe ff 00 00 00 02 Data Ascii: =?1F?sN?V?^?9g?{o?w?H]PZXW$TP4NKG\DdA0>:74$1,.*'$!p<Dd0&.6>FNV^fnv~
2024-05-25 23:00:20 UTC	1500	IN	Data Raw: 24 b2 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 e0 b1 fe ff e8 7d b0 c1 cc bb 16 43 ec b1 fe ff 50 ef 88 c1 38 7e 27 43 f8 b1 fe ff 00 00 c8 c1 00 00 0a 43 5c b2 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 18 b2 fe ff a0 58 2b c1 10 2a 3c 43 24 b2 fe ff 20 d9 f4 c0 a2 89 45 43 30 b2 fe ff 00 00 40 c1 00 00 38 43 94 b2 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 50 b2 fe ff 00 70 2e c0 9a 08 49 43 5c b2 fe ff 50 23 59 41 ea 71 47 43 68 b2 fe ff 00 00 e0 c0 00 00 46 43 cc b2 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 88 b2 fe ff 70 1c f8 41 88 bf 48 43 94 b2 fe ff 30 63 1f 42 fc 03 49 43 a0 b2 fe ff 00 00 a8 41 00 00 48 43 c0 b2 fe ff 04 00 00 00 b4 b2 fe ff 00 00 40 42 00 00 4a 43 8a b5 fe ff 04 00 00 00 0e 00 00 Data Ascii: $ }CP8~'CC\ X+*<C$ EC0@8C Pp.IC\P#YAqGChFC pAHC0cBICAHC@BJC
2024-05-25 23:00:20 UTC	16333	IN	Data Raw: 8c e8 30 42 76 21 17 c3 b0 b7 fe ff 00 00 20 42 00 00 35 c3 14 b8 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 d0 b7 fe ff 4c 48 21 42 8e 30 c1 c2 dc b7 fe ff 88 24 a6 41 2c 99 98 c2 e8 b7 fe ff 00 00 2c 42 00 00 06 c3 4c b8 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 08 b8 fe ff 50 d0 87 c1 e8 43 bb c1 14 b8 fe ff 90 63 de c1 e0 51 98 40 20 b8 fe ff 00 00 00 40 00 00 48 c2 84 b8 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 40 b8 fe ff 1c 5c 0a c2 ac 7d b8 42 4c b8 fe ff 10 09 5a c1 d4 7f 0e 43 58 b8 fe ff 00 00 f8 c1 00 00 38 42 bc b8 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 78 b8 fe ff 00 04 32 be 00 0c 3b 43 84 b8 fe ff 00 c4 f4 3f 02 40 46 43 90 b8 fe ff 00 00 00 c0 00 00 35 43 f4 b8 fe ff 10 00 00 00 18 00 00 Data Ascii: 0Bv! B5 LH!B0$A,,BL PCcQ@ @H @\}BLZCX8B x2;C?@FC5C
2024-05-25 23:00:20 UTC	16384	IN	Data Raw: 5f ce c2 78 f7 fe ff 00 00 10 42 00 00 a0 41 dc f7 fe ff 10 00 00 00 18 00 00 00 28 00 00 00 00 00 00 03 98 f7 fe ff 80 56 d5 bf 92 85 25 c3 a4 f7 fe ff 00 44 93 c0 60 d7 36 c3 08 00 08 00 04 00 00 00 08 00 00 00 00 00 1f c3 18 f8 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 d4 f7 fe ff 60 98 14 c1 80 b9 3a c3 e0 f7 fe ff e0 17 d3 c1 ec 7c 39 c3 ec f7 fe ff 00 00 c0 c0 00 00 38 c3 50 f8 fe ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 0c f8 fe ff d0 80 2a c2 c8 be 3a c3 18 f8 fe ff 88 74 4e c2 de e5 3a c3 24 f8 fe ff 00 00 04 c2 00 00 3a c3 44 f8 fe ff 04 00 00 00 38 f8 fe ff 00 00 6c c2 00 00 3c c3 0e fb fe ff 04 00 00 00 0e 00 00 00 10 03 00 00 d4 02 00 00 98 02 00 00 5c 02 00 00 20 02 00 00 e4 01 00 00 a8 01 00 00 6c 01 00 00 30 01 00 00 Data Ascii: _xBA(V%D`6 `:\|98P *:tN:$:D8l<\ l0
2024-05-25 23:00:20 UTC	16384	IN	Data Raw: 00 0d 43 8c 37 ff ff 04 00 00 00 80 37 ff ff 00 00 2c c2 00 00 44 43 56 3a ff ff 04 00 00 00 0e 00 00 00 10 03 00 00 d4 02 00 00 98 02 00 00 5c 02 00 00 20 02 00 00 e4 01 00 00 a8 01 00 00 6c 01 00 00 30 01 00 00 f4 00 00 00 b8 00 00 00 7c 00 00 00 40 00 00 00 04 00 00 00 28 38 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 e4 37 ff ff 5c 1e 2b c2 45 6e 43 43 f0 37 ff ff 10 27 06 c2 51 23 44 43 fc 37 ff ff 00 00 4c c2 01 00 43 43 60 38 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 1c 38 ff ff 00 f2 6d c1 59 88 45 43 28 38 ff ff 00 02 d1 3f b9 41 49 43 34 38 ff ff f8 ff af c1 01 00 45 43 98 38 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 54 38 ff ff 80 e6 29 41 fd 9c 44 43 60 38 ff ff 80 d9 6a 41 d5 d1 2f 43 6c 38 ff ff 20 00 c0 40 Data Ascii: C77,DCV:\ l0\|@(8 7\+EnCC7'Q#DC7LCC`8 8mYEC(8?AIC48EC8 T8)ADC`8jA/Cl8 @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.6	59206	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:20 UTC	556	OUT	GET /m1/v/t6/An-epsBkaSJ4n9oYH6L6fSPKlfyvVNR_J7OfeV9-jqOZVx9-Fg73T8WyLTa1e_4iyoSboul40f-XChEvL3RtR-jyPuVfx7Umn4RlQyMS.kf?ccb=10-5&oh=00_AYDqdB8NKAFNHlr2X0MnTEEFymxSu8U_NbtWwX5P5DJS8w&oe=6679CB47&_nc_sid=7da55a HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:20 UTC	917	IN	HTTP/1.1 200 OK content-digest: adler32=2117721780 Content-Type: image/x.fb.keyframes ETag: 2867499861726367659 x-manifold-obj-blobsizebytes: 43036 x-manifold-obj-canonicalpath: flat/base:v7:support.kf x-manifold-obj-ctime: 1611967373 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"613557422527858","color":"f7b125","__ctime":"1611967373","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:20 GMT X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 43036
2024-05-25 23:00:20 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-05-25 23:00:20 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 18 00 28 00 14 00 20 00 1c 00 08 00 10 00 00 00 0c 00 00 00 24 00 04 00 18 00 00 00 24 00 00 00 08 00 00 00 2c 00 00 00 74 0f 00 00 00 00 34 43 00 00 34 43 00 00 a0 40 00 00 70 42 01 00 00 00 0b 00 00 00 01 01 01 00 02 01 00 01 01 01 01 00 01 00 00 00 1c 00 00 00 18 00 28 00 14 00 20 00 1c 00 08 00 10 00 0c 00 00 00 00 00 24 00 04 00 18 00 00 00 24 00 00 00 05 00 00 00 28 00 00 00 e8 08 00 00 00 00 34 43 00 00 34 43 00 00 a0 40 00 00 70 42 10 00 00 00 08 00 00 00 01 00 00 00 00 00 01 01 01 00 00 00 0c 00 00 00 08 00 10 00 08 00 04 00 08 00 00 00 0c 00 00 00 00 00 79 43 00 00 21 43 9f 08 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f9 00 00 00 a1 08 03 00 00 00 32 4c e9 38 00 00 00 42 50 4c 54 45 00 00 00 e2 69 18 e2 Data Ascii: KEYF( $$,t4C4C@pB( $$(4C4C@pByC!CPNGIHDR2L8BPLTEi
2024-05-25 23:00:20 UTC	15245	IN	Data Raw: 3b db cb d2 21 df d2 68 7e 76 d2 70 aa 3d df 38 be c9 c1 d5 57 79 fe bb d5 69 de df d9 5e 6f 3f d2 e4 a9 96 a0 33 db 8b 7c d0 f1 e6 be ca f3 37 0a 48 ff 05 f7 ce 17 40 12 d7 4f 75 dd c8 3f 5c fa df 76 ce b0 a7 6d 20 06 c3 5d 4e 15 1a a4 da 42 bb ff ff 57 97 d8 8e df ba 97 b1 00 17 c7 04 3f 54 48 05 f1 e1 c1 89 e3 34 ef 1d 37 fe aa 88 fa 1d 3f f8 57 6f 83 38 da db 36 34 2c 7a fd 2f 40 1f 80 f2 ff 2b 2e c7 3a cd ad 5b 98 63 7c b7 9f 46 ee 08 ba 1b 2e e5 95 78 fb 71 06 45 df 8f c2 e2 7c 92 af 1d d8 db 3f 51 f7 a7 fc 30 e2 8b 25 8f 33 ce b4 15 7f 72 15 bf 2b fa 2e ea f0 86 f8 6d 59 fc 98 45 97 8a bf 72 fe 78 70 10 ef f0 9c 6d bf a2 17 6e ea 9e e2 75 76 66 9f 26 b7 2c be b9 7b fd 70 d5 19 84 d2 ae 17 cd 81 6d aa 5d 7f 04 7d f6 bf a8 17 9b 48 7b fe 3d 38 a5 4f Data Ascii: ;!h~vp=8Wyi^o?3\|7H@Ou?\vm ]NBW?TH47?Wo864,z/@+.:[c\|F.xqE\|?Q0%3r+.mYErxpmnuvf&,{pm]}H{=8O
2024-05-25 23:00:20 UTC	16384	IN	Data Raw: ff ff 00 00 b4 42 7a 99 ff ff 00 00 b4 42 82 99 ff ff 04 00 00 00 a0 99 ff ff 00 00 b4 42 00 00 b4 42 00 00 16 00 20 00 1c 00 04 00 00 00 00 00 18 00 14 00 10 00 08 00 0c 00 16 00 00 00 70 04 00 00 18 00 00 00 20 01 00 00 30 01 00 00 c0 02 00 00 48 04 00 00 14 00 00 00 90 b5 ff ff 0c 00 00 00 24 00 00 00 40 00 00 00 06 00 00 00 d4 00 00 00 ac 00 00 00 a0 00 00 00 78 00 00 00 6c 00 00 00 44 00 00 00 07 00 00 00 30 96 fc 3d 7e b1 64 3e 44 44 c4 3e 74 da 00 3f d7 a3 30 3f 82 4e 5b 3f 03 9d 76 3f 07 00 00 00 7c d9 20 be 0b be 75 be 7c d9 20 be 7c d9 20 be 00 00 00 00 00 00 00 00 7c d9 20 be 06 b4 ff ff 08 00 00 00 10 00 00 00 70 9a ff ff 00 00 80 3f c0 3e 8e 3c 7c 9a ff ff 18 70 b4 b2 eb 8c 68 3e aa b4 ff ff 00 00 00 01 32 b4 ff ff 08 00 00 00 10 00 00 00 9c Data Ascii: BzBBB p 0H$@xlD0=~d>DD>t?0?N[?v?\| u\| \| \| p?><\|ph>2
2024-05-25 23:00:20 UTC	9906	IN	Data Raw: 00 00 00 00 00 03 a4 d9 ff ff 42 f2 a0 42 ed 62 0f 43 b0 d9 ff ff 28 6f a1 42 60 c9 0f 43 bc d9 ff ff 54 a6 9d 42 1d 3f 10 43 e8 d9 ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 dc d9 ff ff d2 4f a4 42 eb c7 16 43 e8 d9 ff ff 96 3d aa 42 c3 9a 1b 43 f4 d9 ff ff 52 13 a2 42 65 58 11 43 20 da ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 14 da ff ff aa 6d b1 42 79 71 1f 43 20 da ff ff 56 70 ae 42 4c cf 20 43 2c da ff ff 8a a4 ae 42 9f f4 1d 43 f8 d9 ff ff 04 00 00 00 40 da ff ff c6 fe ab 42 9b 0e 20 43 22 da ff ff 04 00 00 00 06 00 00 00 30 01 00 00 f4 00 00 00 b8 00 00 00 7c 00 00 00 40 00 00 00 04 00 00 00 90 da ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 84 da ff ff 58 25 a8 42 55 ce 1b 43 90 da ff ff f2 3e a7 42 e3 04 19 43 9c Data Ascii: BBbC(oB`CTB?C OBC=BCRBeXC mByqC VpBL C,BC@B C"0\|@ X%BUC>BC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.6	59208	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:20 UTC	554	OUT	GET /m1/v/t6/An-4eutqFWFfYhZPQR8tM2oP5E05jWW-J7tvfsD5wE23SUHSA2nXlg1n6fI_KpO3JoITC05bkD6cfuSRG3Fji57z_i1jO4Bw_K_ZEg.kf?ccb=10-5&oh=00_AYDloHREai0wyhW-O5u0e7vmSZiLh8PQ2WlNfDJ2cKmjwg&oe=6679D1B0&_nc_sid=7da55a HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:20 UTC	914	IN	HTTP/1.1 200 OK content-digest: adler32=630572011 Content-Type: image/x.fb.keyframes ETag: 4980362363275973831 x-manifold-obj-blobsizebytes: 34560 x-manifold-obj-canonicalpath: flat/base:v7:sorry.kf x-manifold-obj-ctime: 1611967372 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"908563459236466","color":"f7b125","__ctime":"1611967372","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:20 GMT X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=31, rtx=0, c=14, mss=1392, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 34560
2024-05-25 23:00:20 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-05-25 23:00:20 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 00 00 16 00 24 00 10 00 1c 00 18 00 04 00 0c 00 08 00 00 00 00 00 20 00 16 00 00 00 05 00 00 00 1c 00 00 00 48 11 00 00 00 00 34 43 00 00 34 43 33 33 83 40 00 00 70 42 01 00 00 00 01 00 00 00 0c 00 00 00 08 00 10 00 08 00 04 00 08 00 00 00 0c 00 00 00 00 00 34 43 00 00 34 43 0a 11 00 00 ff d8 ff db 00 84 00 02 01 01 01 02 01 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 04 03 03 04 03 03 04 05 04 05 05 05 05 04 05 05 06 07 07 07 06 05 09 09 09 09 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 02 02 02 04 04 04 08 05 05 08 0c 09 08 09 0c 0e 0e 0e 0e 0e 0e 0e 0c 0c 0c 0c 0c 0e 0e 0c 0c 0c 0c 0c 0c 0e 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff dd 00 04 00 17 ff ee 00 0e 41 64 6f 62 65 00 Data Ascii: KEYF$ H4C4C33@pB4C4CAdobe
2024-05-25 23:00:20 UTC	15314	IN	Data Raw: 32 68 9a 61 2e 21 84 73 d3 53 88 65 77 c9 16 88 56 a8 d7 3f e5 59 ad 61 99 5c dd 0a 97 57 9a ef 85 31 22 63 7d 3b 8e ac f8 a3 d7 f0 9d fe aa 2c c3 e5 f9 7d f4 d8 ba ab ae 3e 5f ff d6 f5 83 c5 78 81 65 00 88 1f 8a 63 97 f4 b7 53 fb 2f 9f 15 7e d5 f1 7c b6 db fe 19 78 7e 5a 29 97 5d da b4 ce 00 28 72 da 16 a2 79 cb 25 12 c6 61 30 94 a8 57 93 84 a8 8e 45 d4 47 25 bb ca 1c 8b a8 72 2e a1 c8 ba 87 22 ea 1c 8b a8 72 2e a1 c8 ba 7b a1 c8 ba 87 24 ba 89 e4 97 51 3c 99 24 87 24 84 c5 55 e5 70 c9 4e af 58 50 ad 3b a9 74 d2 14 29 2b 4d 3e 25 14 9b 34 3b 27 7f d4 e8 55 9a df cf aa cc 3a bb ab 37 8b e5 ff d7 f5 1f c4 d5 b7 31 81 1e 7a 44 d0 32 e4 ea 7f 50 be 7c 57 f1 fb c7 c6 f3 ca 69 f4 47 65 12 8b c3 4a 19 0e 4a 1c f6 85 98 a4 3a a8 67 35 48 25 50 af 27 09 51 1c 8b Data Ascii: 2ha.!sSewV?Ya\W1"c};,}>_xecS/~\|x~Z)](ry%a0WEG%r."r.{$Q<$$UpNXP;t)+M>%4;'U:71zD2P\|WiGeJJ:g5H%P'Q
2024-05-25 23:00:20 UTC	16384	IN	Data Raw: 42 9a a8 20 43 64 bb ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 dc ba ff ff d4 a7 db 42 4e f1 1d 43 e8 ba ff ff 8a df da 42 35 af 1d 43 f4 ba ff ff b0 50 e1 42 9d 40 1f 43 9c bb ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 14 bb ff ff 8a df da 42 f9 11 1d 43 20 bb ff ff d4 a7 db 42 ec cf 1c 43 2c bb ff ff 8a df da 42 97 60 1d 43 d4 bb ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 4c bb ff ff 32 06 e4 42 27 e0 1a 43 58 bb ff ff f8 d3 e6 42 93 18 1a 43 64 bb ff ff b0 50 e1 42 a4 80 1b 43 0c bc ff ff 10 00 00 00 18 00 00 00 20 00 00 00 00 00 00 03 84 bb ff ff 3a 21 ef 42 93 18 1a 43 90 bb ff ff b8 7e f2 42 a4 90 1b 43 9c bb ff ff 92 fa ea 42 93 18 1a 43 0c bc ff ff 04 00 00 00 b0 bb ff ff b8 7e f2 42 97 60 1d 43 00 00 00 00 a6 da Data Ascii: B Cd BNCB5CPB@C BC BC,B`C L2B'CXBCdPBC :!BC~BCBC~B`C
2024-05-25 23:00:20 UTC	1361	IN	Data Raw: 01 c4 fa ff ff 33 10 50 c0 5a fe 1c 40 08 00 0c 00 0b 00 04 00 08 00 00 00 08 00 00 00 00 00 00 01 e4 fa ff ff 33 10 50 c0 5a fe 1c 40 54 fb ff ff 04 00 00 00 f8 fa ff ff 40 37 47 c1 d0 26 13 c1 6a ff ff ff 08 00 00 00 0c 00 00 00 74 fb ff ff 00 00 80 3f 26 fb ff ff 9a 99 19 3f 86 ff ff ff 08 00 00 00 0c 00 00 00 90 fb ff ff 00 00 80 3f 42 fb ff ff 9a 99 19 3f a2 ff ff ff 08 00 00 00 0c 00 00 00 ac fb ff ff 00 00 80 3f 50 fb ff ff ab aa 2a 3e ab aa 2a 3e c2 ff ff ff 08 00 00 00 10 00 00 00 68 fb ff ff 55 55 55 3f 55 55 55 3f 82 fb ff ff 9a 99 19 3f e2 ff ff ff 08 00 00 00 0c 00 00 00 ec fb ff ff 00 00 80 3f ae fb ff ff 9a 99 19 3f 00 00 0a 00 0c 00 00 00 08 00 04 00 0a 00 00 00 08 00 00 00 0c 00 00 00 14 fc ff ff 00 00 80 3f c6 fb ff ff 9a 99 19 3f ce fb Data Ascii: 3PZ@3PZ@T@7G&jt?&??B??P>>hUUU?UUU??????

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.6	59209	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:20 UTC	552	OUT	GET /m1/v/t6/An-ltDiBj6BlExJAIyJiOGWs0CtdQwF9K9SyRSRhTIMgJd0MMzaw7ju3gnTsliPfba99uYjQem5sn3JzgpEnBVKOKfyfbcp-sMBJ.kf?ccb=10-5&oh=00_AYAjAwuljXLVWb9VmO0GfkRgCPPHVaBo8SGp6ZTw-XNUBw&oe=6679EE97&_nc_sid=7da55a HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:20 UTC	915	IN	HTTP/1.1 200 OK content-digest: adler32=649957559 Content-Type: image/x.fb.keyframes ETag: -4761830269030928794 x-manifold-obj-blobsizebytes: 32856 x-manifold-obj-canonicalpath: flat/base:v7:anger.kf x-manifold-obj-ctime: 1611967365 x-manifold-obj-entrytype: 1 x-manifold-obj-expiresat: 0 x-manifold-obj-isuserdata: 0 x-manifold-obj-propertiesjson: {"reaction_id":"444813342392137","color":"e9710f","__ctime":"1611967365","X-Manifold-Obj-ContentType":"image/x.fb.keyframes"} x-manifold-obj-symlinktarget: cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:20 GMT X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 32856
2024-05-25 23:00:20 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-05-25 23:00:20 UTC	1500	IN	Data Raw: 00 00 00 4b 45 59 46 00 00 16 00 24 00 10 00 1c 00 18 00 04 00 0c 00 08 00 00 00 00 00 20 00 16 00 00 00 05 00 00 00 1c 00 00 00 3c 28 00 00 00 00 34 43 00 00 34 43 66 66 76 40 00 00 70 42 01 00 00 00 02 00 00 00 34 15 00 00 04 00 00 00 dc ea ff ff 0c 00 00 00 00 00 34 43 00 00 34 43 0e 15 00 00 ff d8 ff db 00 84 00 03 02 02 02 02 02 03 02 02 03 04 03 02 03 04 05 03 03 03 03 05 05 04 04 05 04 04 05 07 05 06 06 06 06 05 07 07 08 08 09 08 08 07 0b 0b 0c 0c 0b 0b 0c 0c 0c 0c 0c 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 01 03 03 03 05 05 05 0a 07 07 0a 0f 0c 0a 0c 0f 12 0e 0e 0e 0e 12 11 0e 0e 0e 0e 0e 11 11 0e 0e 0e 0e 0e 0e 11 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e ff dd 00 04 00 17 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 Data Ascii: KEYF$ <(4C4Cffv@pB44C4CAdobed
2024-05-25 23:00:20 UTC	15252	IN	Data Raw: 7b 87 ba ce bf 35 f5 e9 b1 cf b4 a4 cf 03 63 a7 01 a0 2f a9 50 f9 9e 5d 36 40 02 a6 a5 a5 42 6c a9 52 2a 32 84 a8 81 94 25 45 46 50 95 15 19 42 54 54 65 09 51 51 94 25 45 46 50 95 15 19 42 54 54 65 09 51 51 94 25 45 46 50 95 15 19 42 54 54 65 09 51 04 0c 81 2a 4c 14 e4 70 21 4a 21 52 21 88 b9 d3 b6 68 c8 f5 f3 07 75 2e 65 92 0f a7 1a 98 2c 5b 2c 5b 91 51 61 4a e4 62 51 24 49 ff d5 cc 3a 3e 50 5c 7c 87 55 c9 0d 45 55 84 3b 01 16 4b aa 16 86 b7 5f 53 d4 ac e3 59 56 a2 21 75 fc 38 19 36 3c 00 a2 0b 0a 84 e2 51 dd 20 a6 06 5d d2 04 11 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a8 cb ba 40 a9 0c bb a4 08 20 64 dd 20 94 42 da 72 1c 0a a9 10 b8 d3 12 f6 0c ce 6f 7e Data Ascii: {5c/P]6@BlR2%EFPBTTeQQ%EFPBTTeQQ%EFPBTTeQLp!J!R!hu.e,[,[QaJbQ$I:>P\\|UEU;K_SYV!u86<Q ]@@@@@@@@@@@@@ d Bro~
2024-05-25 23:00:20 UTC	16103	IN	Data Raw: 00 00 00 10 3e f8 3c 4e 36 d9 3e 8f a9 01 3f 03 00 00 00 60 00 00 00 50 00 00 00 40 00 00 00 d6 ce ff ff 08 00 00 00 10 00 00 00 58 c1 ff ff 55 55 55 3f 55 55 55 3f 72 c1 ff ff 00 00 80 3f f6 ce ff ff 08 00 00 00 0c 00 00 00 dc c1 ff ff 00 00 80 3f 8e c1 ff ff ab aa aa 3e 88 c1 ff ff 7a f9 c4 42 30 dc 58 43 94 c1 ff ff 63 86 c6 42 84 07 59 43 a0 c1 ff ff 7a f9 c4 42 30 dc 58 43 20 c4 ff ff 0c 00 00 00 14 00 00 00 20 00 00 00 02 00 00 00 48 00 00 00 24 00 00 00 03 00 00 00 10 3e f8 3c 4e 36 d9 3e 8f a9 01 3f 03 00 00 00 60 00 00 00 50 00 00 00 40 00 00 00 72 cf ff ff 08 00 00 00 10 00 00 00 f4 c1 ff ff 55 55 55 3f 55 55 55 3f 0e c2 ff ff 00 00 80 3f 92 cf ff ff 08 00 00 00 0c 00 00 00 78 c2 ff ff 00 00 80 3f 2a c2 ff ff ab aa aa 3e 24 c2 ff ff 0d 96 b0 42 Data Ascii: ><N6>?`P@XUUU?UUU?r??>zB0XCcBYCzB0XC H$><N6>?`P@rUUU?UUU??x?*>$B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.6	59207	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:20 UTC	599	OUT	GET /rsrc.php/v3/y4/r/zJ7X2mgr9yY.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:20 UTC	1981	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: C3bnN+8kO+8znRIS+ukjPQ== Expires: Sun, 25 May 2025 15:35:21 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: nFH4uh60glW+inryc7+mT1/cguq+tnrow96MvJmYohNAjF5eQGAVe+hnpP7KtARgALBWdX4FchYpPIUMbHbUtw== Date: Sat, 25 May 2024 23:00:20 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 23815
2024-05-25 23:00:20 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-05-25 23:00:20 UTC	15834	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 42 72 6f 77 73 65 45 6e 74 72 79 50 6f 69 6e 74 41 63 74 69 6f 6e 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 61 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 42 41 43 4b 47 52 4f 55 4e 44 3a 22 42 41 43 4b 47 52 4f 55 4e 44 22 2c 43 41 4d 50 55 53 5f 44 49 52 45 43 54 4f 52 59 5f 53 45 41 52 43 48 5f 54 49 4c 45 3a 22 43 41 4d 50 55 53 5f 44 49 52 45 43 54 4f 52 59 5f 53 45 41 52 43 48 5f 54 49 4c 45 22 2c 43 45 4c 45 42 52 49 54 59 5f 48 43 4d 3a 22 43 45 4c 45 42 52 49 54 59 5f 48 43 4d 22 2c 43 48 41 4c 4c 45 4e 47 45 5f 50 4f 53 54 5f 43 54 41 3a 22 43 48 41 4c 4c 45 4e 47 45 5f 50 4f 53 54 5f 43 54 41 22 2c 43 4f 52 52 45 43 54 49 4f 4e 3a Data Ascii: /FB_PKG_DELIM/__d("BrowseEntryPointAction",[],(function(a,b,c,d,e,f){a=Object.freeze({BACKGROUND:"BACKGROUND",CAMPUS_DIRECTORY_SEARCH_TILE:"CAMPUS_DIRECTORY_SEARCH_TILE",CELEBRITY_HCM:"CELEBRITY_HCM",CHALLENGE_POST_CTA:"CHALLENGE_POST_CTA",CORRECTION:
2024-05-25 23:00:20 UTC	7980	IN	Data Raw: 61 72 63 68 5f 72 65 73 75 6c 74 73 5f 73 65 65 5f 6d 6f 72 65 5f 6f 6e 5f 6d 6f 64 75 6c 65 5f 74 61 70 70 65 64 22 2c 63 6f 6d 6d 6f 6e 3a 7b 6c 6f 67 67 69 6e 67 5f 75 6e 69 74 5f 69 64 3a 61 2c 73 65 73 73 69 6f 6e 5f 69 64 3a 62 2c 74 69 6d 65 73 74 61 6d 70 3a 44 61 74 65 2e 6e 6f 77 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 7d 7d 7d 29 7d 3b 67 2e 6c 6f 67 4d 6f 64 75 6c 65 43 6c 69 63 6b 3d 61 3b 67 2e 6c 6f 67 4d 6f 64 75 6c 65 49 6e 6c 69 6e 65 41 63 74 69 6f 6e 3d 62 3b 67 2e 6c 6f 67 52 65 73 75 6c 74 43 6c 69 63 6b 3d 64 3b 67 2e 6c 6f 67 52 65 73 75 6c 74 49 6e 6c 69 6e 65 41 63 74 69 6f 6e 3d 65 3b 67 2e 6c 6f 67 53 65 65 4d 6f 72 65 43 6c 69 63 6b 3d 66 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 53 65 61 72 63 68 52 65 73 75 6c 74 50 61 67 65 4c Data Ascii: arch_results_see_more_on_module_tapped",common:{logging_unit_id:a,session_id:b,timestamp:Date.now().toString()}}})};g.logModuleClick=a;g.logModuleInlineAction=b;g.logResultClick=d;g.logResultInlineAction=e;g.logSeeMoreClick=f}),98);__d("SearchResultPageL

Session ID	Source IP	Source Port	Destination IP	Destination Port
200	192.168.2.6	59205	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:20 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 79 66 2f 31 35 44 55 5a 62 55 53 6d 39 64 68 39 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 33 63 61 66 31 63 37 35 30 66 65 39 39 39 36 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: yf/15DUZbUSm9dh9.1Context: 43caf1c750fe9996
2024-05-25 23:00:20 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-05-25 23:00:20 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 79 66 2f 31 35 44 55 5a 62 55 53 6d 39 64 68 39 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 33 63 61 66 31 63 37 35 30 66 65 39 39 39 36 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 43 6a 7a 4c 31 72 46 68 4e 54 50 31 42 39 33 2f 6d 37 2b 76 4a 48 74 4f 52 69 6a 53 79 61 4d 4c 5a 45 4e 56 35 44 53 36 2f 65 6e 7a 56 5a 59 61 73 4e 54 43 76 6c 58 45 31 5a 6f 6e 77 56 35 6d 6a 70 4a 63 54 66 30 73 63 47 46 59 44 4f 4d 36 75 35 45 51 47 64 7a 30 38 56 51 34 7a 5a 2f 48 6d 64 68 34 45 48 55 6a 4f 37 42 4a Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: yf/15DUZbUSm9dh9.2Context: 43caf1c750fe9996<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAUCjzL1rFhNTP1B93/m7+vJHtORijSyaMLZENV5DS6/enzVZYasNTCvlXE1ZonwV5mjpJcTf0scGFYDOM6u5EQGdz08VQ4zZ/Hmdh4EHUjO7BJ
2024-05-25 23:00:20 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 79 66 2f 31 35 44 55 5a 62 55 53 6d 39 64 68 39 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 33 63 61 66 31 63 37 35 30 66 65 39 39 39 36 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: yf/15DUZbUSm9dh9.3Context: 43caf1c750fe9996
2024-05-25 23:00:20 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-05-25 23:00:20 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 41 36 50 57 59 37 6e 32 68 6b 69 42 69 38 4c 38 59 61 76 30 56 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: A6PWY7n2hkiBi8L8Yav0VA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.6	59213	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:20 UTC	831	OUT	GET /v/t39.30808-6/444202748_996576171837954_250908605759715264_n.jpg?stp=dst-jpg_p160x160&_nc_cat=102&ccb=1-7&_nc_sid=5f2048&_nc_ohc=OAqihbnrPUoQ7kNvgFnryPS&_nc_ht=scontent-hou1-1.xx&oh=00_AYCeXEwpdrg44H2MsX8htwFjsSC1XoR3snF8Y5OzIJvZqQ&oe=66584BAB HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:21 UTC	737	IN	HTTP/1.1 200 OK Last-Modified: Sat, 25 May 2024 06:00:16 GMT X-Needle-Checksum: 1966316871 thrift_fmhk: GBDVht0hE5taSrgpbsAHDLzUFfDr4Z0EvFUAHCYEAAAA Content-Type: image/jpeg content-digest: adler32=2985620006 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:20 GMT X-FB-Edge-Debug: Onbg2kNml5e_pm1A43sEEpfN1BSYxyCBrMLNZHdedNSiAVCtV2YhBlLByD66GqPx9p4WAbHj0MveU1GTpKnGjVmRNB-N6UWx7ksD3glyj7k X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=12, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 8189
2024-05-25 23:00:21 UTC	763	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 37 30 30 31 30 30 30 30 35 30 30 33 30 30 30 30 62 37 30 36 30 30 30 30 34 38 30 37 30 30 30 30 35 62 30 39 30 30 30 30 38 65 30 65 30 30 30 30 30 31 31 34 30 30 30 30 38 39 31 34 30 30 30 30 34 36 31 35 30 30 30 30 38 39 31 37 30 30 30 30 66 64 31 66 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a7001000050030000b7060000480700005b0900008e0e000001140000891400004615000089170000fd1f0000C%# , #&')*)-0-(0%()(C((((((((((((((
2024-05-25 23:00:21 UTC	3265	IN	Data Raw: 30 e5 66 6c b2 66 14 6f 77 03 21 c6 2d 0d e7 da f6 11 96 2c 35 82 34 5c ab ba d5 62 cb 6e 00 dc 73 d0 a0 6e aa 06 90 77 c2 3f ff c4 00 29 10 00 02 02 01 04 02 00 06 02 03 00 00 00 00 00 00 02 03 01 04 00 05 11 12 13 10 14 15 20 21 23 31 34 22 30 06 24 40 ff da 00 08 01 01 00 01 05 02 f9 d6 b3 61 31 66 a2 ff 00 8a 83 85 4e b7 61 73 67 de 46 7b c8 c9 bc 8d ec db 06 2f fb 2b 53 3b 0b 1a c6 76 7e 18 fe d1 d3 dc 51 f0 e6 49 fc 39 bc a3 4f 64 b6 34 d7 73 2d 35 e3 8e a0 6a 5f cf b4 e7 02 ce a6 66 98 72 85 56 99 0d 41 6f 9d b9 91 49 34 65 dd b3 dd df f7 66 c9 f2 6b 79 65 a7 72 ad d2 cc eb 3c e3 3f 28 60 14 60 18 e0 30 31 e2 46 72 25 cb ac f8 44 f2 bb fc e0 f8 b0 60 54 71 30 27 86 c0 c3 31 c3 28 c3 98 c9 f9 23 f3 62 b5 78 06 d4 4e f6 aa 56 5a 2f f4 8d 4a d5 10 54 Data Ascii: 0flfow!-,54\bnsnw?) !#14"0$@a1fNasgF{/+S;v~QI9Od4s-5j_frVAoI4efkyer<?(``01Fr%D`Tq0'1(#bxNVZ/JT
2024-05-25 23:00:21 UTC	4064	IN	Data Raw: 26 aa 24 50 8e e0 ee e2 29 54 cc 81 c4 54 b9 b5 e5 6b e3 e6 21 ca a9 e2 74 4f 35 c0 43 ac a0 24 a1 db 9e 20 63 a2 dd d5 0d b6 b1 0a b1 db 1b 21 77 76 16 58 20 75 a8 1d 87 f1 30 dc 49 c1 a4 a0 b8 bb 04 41 ed af 33 2c da 06 26 92 80 82 8d 6a 08 90 12 b5 81 81 64 40 ec 36 6a 64 91 93 86 79 4c 15 6c e1 f5 47 13 75 24 03 32 93 47 67 4a 8e db 77 48 0e 17 14 e8 4b 06 a5 59 c5 de 89 ac 08 28 19 4d 44 a3 b8 bd 4d b7 dc 67 da 35 7e f1 dc 17 23 fd 47 be 1b 21 ef 29 5e 6b 04 f8 20 e5 f4 9d 75 f2 a3 4e 63 94 31 20 89 e8 bc f9 e7 85 72 bc 28 ee 83 b1 70 9d ab a5 88 95 40 19 ea 5e 5f b2 13 65 77 7f a4 c3 bb 74 25 a3 e0 49 28 28 e7 89 4f 8c 09 5b a4 f1 89 6f f3 60 77 7e d3 27 3e c8 b5 78 ba bf c1 1d 8f 77 f8 9c e5 f3 0b 5a 7b 11 c0 c8 e9 35 f1 5f 84 0a 42 94 68 24 b3 67 Data Ascii: &$P)TTk!tO5C$ c!wvX u0IA3,&jd@6jdyLlGu$2GgJwHKY(MDMg5~#G!)^k uNc1 r(p@^_ewt%I((O[o`w~'>xwZ{5_Bh$g
2024-05-25 23:00:21 UTC	97	IN	Data Raw: a8 bd c3 e4 eb d7 14 40 d1 f2 ce 07 8d 5c d9 cc 44 60 7d 8e 0e 80 70 18 be ea 6c 7c 75 9f 38 f5 75 53 55 df 02 e0 7c 67 36 36 0a 38 ca df eb 1f 0e 5f 52 79 77 dd d3 12 74 71 aa f7 e4 cd 0d bc 70 7c 30 d2 e7 a5 fe 79 c9 51 1e b3 e7 16 40 bc 9f f5 9c 05 79 2b e4 fe 30 00 bf 57 d8 49 9f ff d9 Data Ascii: @\D`}pl\|u8uSU\|g668_Rywtqp\|0yQ@y+0WI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.6	59212	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:20 UTC	832	OUT	GET /v/t39.30808-6/443716737_996551778507060_8093613214370052435_n.jpg?stp=dst-jpg_p160x160&_nc_cat=108&ccb=1-7&_nc_sid=5f2048&_nc_ohc=DuHJngJtu2wQ7kNvgFQ8iUU&_nc_ht=scontent-hou1-1.xx&oh=00_AYBf7Ste67oNs7Tl7YANpLqMTqiicZKF-CR-_p4ZIXY8lg&oe=66583443 HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:20 UTC	736	IN	HTTP/1.1 200 OK Last-Modified: Sat, 25 May 2024 05:00:13 GMT X-Needle-Checksum: 111635746 thrift_fmhk: GBDCvVtLpywSKEzyTYZnIdxYFfDr4Z0EvFUAHCYEAAAA Content-Type: image/jpeg content-digest: adler32=2260265837 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:20 GMT X-FB-Edge-Debug: ewZSUuzKPFt0txW5KXNz6_-0lUavuAhqkaqJn8v9AepAjUu1NchZq42M1rk0zm_pDq29r5_fN2V_3K7u2JiZFc1qxHZ4AI8q5zocmdgLsnM X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=12, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 8744
2024-05-25 23:00:20 UTC	764	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 36 66 30 31 30 30 30 30 36 32 30 33 30 30 30 30 31 62 30 37 30 30 30 30 36 38 30 38 30 30 30 30 35 38 30 39 30 30 30 30 62 33 30 66 30 30 30 30 64 65 31 35 30 30 30 30 36 31 31 36 30 30 30 30 66 32 31 37 30 30 30 30 65 61 31 38 30 30 30 30 32 38 32 32 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a6f010000620300001b0700006808000058090000b30f0000de15000061160000f2170000ea18000028220000C%# , #&')*)-0-(0%()(C((((((((((((((
2024-05-25 23:00:21 UTC	3264	IN	Data Raw: ed 43 53 eb 20 74 61 c7 32 3a ba f6 f7 09 b7 43 7e 07 72 ca b5 43 15 b7 29 e5 24 84 92 40 85 ca 10 0e c6 2b 43 17 e1 4a 01 a6 4a d0 0c f0 9d 00 e1 1a 42 49 20 49 20 ff c4 00 2d 10 00 02 02 02 01 03 02 04 07 00 03 00 00 00 00 00 02 03 01 04 00 05 12 11 13 14 21 33 10 15 22 35 06 20 23 24 30 31 34 25 40 41 ff da 00 08 01 01 00 01 05 02 c9 02 88 fe 5e 05 c4 96 43 1f 11 9e 92 e6 87 65 6c 54 07 75 19 dd 46 77 51 87 3c 8b f8 2b 97 73 3e 9e df 10 e9 d1 71 05 3d 67 e2 65 00 0b bd 59 87 e6 23 ac 5e af 33 37 ab c4 f9 b5 f2 2d a2 5c 37 2b 90 2e fd 66 1b ed a5 05 f3 0a bd 0e e5 75 cb 6e 21 25 fd fe 7b ff 00 e2 9f 55 32 7b 4f 08 28 34 47 ed 40 bb a6 3e 81 3d 7b 15 99 fb fd da c2 69 da 58 0e 9d d1 c8 a7 a3 33 5f fe 1f 8c 57 6e 78 ac e9 20 51 82 89 74 6e 03 e5 b1 72 ec Data Ascii: CS ta2:C~rC)$@+CJJBI I -!3"5 #$014%@A^CelTuFwQ<+s>q=geY#^37-\7+.fun!%{U2{O(4G@>={iX3_Wnx Qtnr
2024-05-25 23:00:21 UTC	4064	IN	Data Raw: 21 9d cf a3 fd c1 2a f0 4c 44 bb 4f 91 01 74 38 88 8d 22 3f 8c 19 74 dd 4b 5b 4a cf 94 b3 5a ca b7 f7 89 8f cc d2 61 f1 2d 53 89 f3 9a 41 01 2f 47 4f e9 54 70 b0 bf 02 55 f6 04 78 b6 e5 e1 01 ae bb 86 c3 57 dd 94 29 99 16 47 a0 98 30 b3 75 a1 fc 2b dc 6c e0 8b 1f 88 11 2f d6 6b aa 14 5b 46 a1 61 55 59 b3 9a f9 85 d7 b9 63 35 f3 38 8f 19 d5 5f 32 d8 17 f3 38 b9 69 9b 6a ca 60 18 4d 0b 65 f4 81 c6 a5 0a 5c 4c dc 62 0b ff 00 0e d0 e4 08 0c e9 d7 84 06 75 75 7d 3c a0 80 50 8e 93 fa 31 d4 6d 63 7d 2a 65 e0 c6 36 a1 98 d6 c6 4f 43 15 50 9f 28 48 ad 38 25 6b 37 e2 11 c3 59 7a 5f f6 5e 71 56 4f 94 27 37 85 85 3b 44 03 a0 57 21 70 12 46 a3 38 6d 2d 6b 1c 3c 6b 31 0c 72 38 71 ff 00 7f 88 11 d6 78 b1 07 d0 e9 1b 6f 10 2e 2f 00 2b a3 2b a8 8a 07 44 39 70 c8 53 cc a8 Data Ascii: !LDOt8"?tK[JZa-SA/GOTpUxW)G0u+l/k[FaUYc58_28ij`Me\Lbuu}<P1mc}e6OCP(H8%k7Yz_^qVO'7;DW!pF8m-k<k1r8qxo./++D9pS
2024-05-25 23:00:21 UTC	652	IN	Data Raw: 03 47 5a ef 2c 89 05 08 d8 9d 9e ae 0a 30 68 09 f5 af 8c 0b 60 44 c8 93 e0 d6 c9 8d 67 6b 38 28 97 67 85 8d 02 81 0a 84 46 1b bf de f9 cd 99 6e 45 4a 85 d5 e0 30 cb fa 83 a2 30 d6 cd 8f 15 7b b9 28 08 11 ba b7 8f 2e 2b 6e 1a cd 65 26 80 39 c7 00 c6 e9 e7 5b 31 20 c0 42 f6 62 81 72 f1 79 7a 98 1a a8 e2 df 0e 0b 91 10 fb 18 34 f3 30 8b 89 cf 22 7c e7 ee 3c b3 f5 1e 18 99 7e b7 12 e4 9e 18 d3 61 f1 cf e3 59 b5 c0 1b 0c 0b a6 f8 6d f0 cb a1 00 56 c5 7d b7 e3 16 f0 1a 37 54 07 af 25 2f 9c 5e 68 62 08 1e 9e 00 07 a5 f3 8b ef 68 6a a2 24 44 1d 56 90 eb 58 88 ea 32 79 b4 58 44 81 a1 07 9c 82 f0 e9 20 80 34 68 bf fa 70 40 c1 b3 4f c4 b8 29 1b 7c 7b b5 af 9c 7e 3f 09 fd a9 94 5b 45 67 17 08 8a c1 31 ca 8a 89 ef 37 81 b0 74 d7 b6 04 92 8f 37 09 9a 74 8f ae 17 8b ff Data Ascii: GZ,0h`Dgk8(gFnEJ00{(.+ne&9[1 Bbryz40"\|<~aYmV}7T%/^hbhj$DVX2yXD 4hp@O)\|{~?[Eg17t7t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.6	59215	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:20 UTC	849	OUT	GET /v/t39.30808-6/239592299_1943111962504323_4257252519711300084_n.png?stp=c102.0.160.160a_dst-jpg_p160x160&_nc_cat=100&ccb=1-7&_nc_sid=5f2048&_nc_ohc=E0uuFtNHuS0Q7kNvgHLW0c8&_nc_ht=scontent-hou1-1.xx&oh=00_AYAZEqOq3fKkG9GGcv4pGFMp4VVJNn8R0sRm10Vzux-RmA&oe=66582AE0 HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:21 UTC	736	IN	HTTP/1.1 200 OK Last-Modified: Wed, 08 Sep 2021 07:34:08 GMT X-Needle-Checksum: 583741870 thrift_fmhk: GBA04LblLZs78FOCVO+QrV6AFfDr4Z0EvFUAHCYEAAAA Content-Type: image/jpeg content-digest: adler32=1812808276 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:21 GMT X-FB-Edge-Debug: DDePwX002mAL8se-LXSHv6yr2G0wuYkZeclXIguMD-t3SGExR4-MT0W688JF-mxJuSnkBv_tz0XR_0sB_W5K_TkSic0BXoozpFuGo6sp-N4 X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=31, rtx=0, c=14, mss=1392, tbw=3412, tp=-1, tpl=-1, uplat=41, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 6391
2024-05-25 23:00:21 UTC	764	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 37 31 30 31 30 30 30 30 30 65 30 33 30 30 30 30 64 32 30 35 30 30 30 30 38 30 30 36 30 30 30 30 33 30 30 38 30 30 30 30 38 61 30 63 30 30 30 30 36 36 31 30 30 30 30 30 66 33 31 30 30 30 30 30 61 33 31 31 30 30 30 30 35 38 31 33 30 30 30 30 66 37 31 38 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a710100000e030000d205000080060000300800008a0c000066100000f3100000a311000058130000f7180000C%# , #&')*)-0-(0%()(C((((((((((((((
2024-05-25 23:00:21 UTC	1500	IN	Data Raw: 12 13 11 14 20 06 10 15 30 21 34 22 23 24 32 33 35 60 ff da 00 08 01 01 00 01 05 02 f6 b1 3c 8d 58 40 0f 93 db bf d9 4b 96 48 8c 0c 79 d9 6e a9 8f 9d 93 da bd 2a bf 5d 44 44 47 9b 5f 03 a0 19 32 58 ec 1f 16 9f 18 91 49 4d 65 6e fa eb 44 42 bc 9c 7b cd 2b e4 28 fc 7d 4a 0d e7 11 d2 3c 6c 32 04 6c de 52 08 7d 45 b2 15 9f 57 41 98 21 f0 22 81 88 9e b1 ec 95 f1 8f 8b 4b 62 ed b4 c4 0b 14 fe cf e3 11 a1 c4 cb 71 b8 5e ea a4 fb b0 e0 04 60 9e 71 f8 fa 6c 16 f2 b5 55 87 4c 77 b9 1a 71 f6 f8 6f 4d 26 cc 2f d9 87 01 06 72 c2 50 ec 0f a4 40 46 75 9b c7 4b f4 7d 1d 66 85 2f 92 bb 1f 88 d3 db c7 a2 99 29 aa be b3 f6 df c2 05 9b 8a 58 a9 7a 69 f1 8c cf 59 58 6f 38 8e 91 e0 59 3a 42 6e b4 84 02 ee 57 62 be 56 8e a3 23 52 56 8b b5 df a1 c9 d2 22 f9 5a 3a f9 5a 3a 63 d4 Data Ascii: 0!4"#$235`<X@KHyn*]DDG_2XIMenDB{+(}J<l2lR}EWA!"Kbq^`qlULwqoM&/rP@FuK}f/)XziYXo8Y:BnWbV#RV"Z:Z:c
2024-05-25 23:00:21 UTC	1740	IN	Data Raw: 97 1f 35 ec 86 11 e3 9c ef 5b dd ca b7 d2 c8 fb 93 e0 42 78 f9 f6 dc d5 cd 01 ea ae a2 dd 83 69 d9 b4 da 63 d7 4f 6a be ed 71 cc f0 e8 68 ce e3 fe 24 7d d5 1f aa d5 a7 65 87 8a ae 6b 23 c0 7a e1 32 3e ec 1f e6 01 cf dd 4a 91 8c 55 74 03 b2 f5 73 56 ab 0f 47 13 b4 c7 7a 57 96 55 54 6e 07 ad 34 89 32 14 5e 2d d2 bf 12 94 5f 7e 98 83 62 69 b7 32 ab e2 2e 6d 41 57 68 42 4d 7e 25 2b f1 29 5b d7 70 23 fd 55 84 33 2b b7 1b 0a 2f 2b 84 5e a6 b4 9d 6c 2a fb e5 b5 16 85 c3 f5 22 82 8d a1 0b 1d 2b 09 67 45 61 ca f4 15 76 84 2c 4d 80 a2 a7 68 4b 8d 3b 1a 4e 4a 40 fa df fd 50 42 74 49 74 fa 54 85 01 2a b3 5d ad ee a3 bc 94 a7 f6 de b6 9f b3 b1 97 17 56 3d db 75 a9 b3 56 6c d3 1d 2a 10 80 e8 d7 27 a5 23 b4 aa f9 1b 68 2a 4c 64 54 c2 dc 45 14 fd 38 0a 6f fc cd 40 c2 fb Data Ascii: 5[BxicOjqh$}ek#z2>JUtsVGzWUTn42^-_~bi2.mAWhBM~%+)[p#U3+/+^l"+gEav,MhK;NJ@PBtItT]V=uVl'#hLdTE8o@
2024-05-25 23:00:21 UTC	2387	IN	Data Raw: 4a fb ce d8 0e 9d f6 98 45 00 5a a7 22 38 51 16 8e 52 af c3 df dc ea c4 2c 85 cb aa 69 fe f1 8d 9e 34 6b d4 96 f5 b5 ba 98 85 01 49 54 9f 3a 06 f6 cd 8b bb 74 c2 51 5c 98 5f cc 1a 6a f4 1d aa 7f 07 62 72 9c 16 d7 5d 66 18 54 37 ce 18 a5 95 35 b8 7a 43 b6 8d 94 e3 de 31 8b c1 af 59 7f 5b 5b a9 88 61 aa 15 64 47 51 09 29 1b 20 fb 3a 0d 66 36 91 da b9 9b 07 9d 51 94 e8 35 8d 99 26 c5 da 56 60 ff 00 1a 18 c4 02 b4 7b df 58 d1 76 d5 47 c2 8a 6b 99 fc 44 64 a3 b4 b6 22 41 6d 0a dc ec 33 86 ea 18 25 68 3d 61 6a 33 ae 60 31 44 a3 5b 35 36 26 c5 59 83 fc 68 63 11 12 b5 d7 97 97 fc 8f ff da 00 0c 03 01 00 02 00 03 00 00 00 10 e9 4f be bf dd fe fb e7 7e fb e3 d6 fb ef be fb ef a0 55 1f be 03 ef be f8 79 3d ef 17 be d3 be 3b c7 c4 8f cf 66 47 98 fd a4 06 1f 5d 14 f5 Data Ascii: JEZ"8QR,i4kIT:tQ\_jbr]fT75zC1Y[[adGQ) :f6Q5&V`{XvGkDd"Am3%h=aj3`1D[56&YhcO~Uy=;fG]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.6	59217	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:20 UTC	848	OUT	GET /v/t39.30808-6/359471819_824263999069173_7453749825994799651_n.jpg?stp=c129.0.160.160a_dst-jpg_p160x160&_nc_cat=111&ccb=1-7&_nc_sid=5f2048&_nc_ohc=m0xl1AGKrJ4Q7kNvgFGjLtq&_nc_ht=scontent-hou1-1.xx&oh=00_AYBdRqkh0Ce7D3TU4A8aoPwuvJvYuH31SUopKTc2ALOyxQ&oe=66584790 HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:21 UTC	736	IN	HTTP/1.1 200 OK Last-Modified: Fri, 14 Jul 2023 04:38:47 GMT X-Needle-Checksum: 3388325105 thrift_fmhk: GBB/SrtCy6VDUhA2oZmZORbYFfDr4Z0EvFUAHCYEAAAA Content-Type: image/jpeg content-digest: adler32=543521583 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:21 GMT X-FB-Edge-Debug: TW827R3jEgfDUR7oMLOaGWZ7bjM2IbAtzPKQBKIiNNsdbRCgCsophA1a5A6CuYJLWKfOZjk2puogkCLiqxMtglZwLo6IA0cOXzKLwDGkhRg X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=36, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=30, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 9731
2024-05-25 23:00:21 UTC	764	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 36 66 30 31 30 30 30 30 37 32 30 33 30 30 30 30 65 34 30 37 30 30 30 30 62 63 30 38 30 30 30 30 63 65 30 39 30 30 30 30 32 62 31 30 30 30 30 30 37 32 31 37 30 30 30 30 65 64 31 37 30 30 30 30 65 64 31 38 30 30 30 30 30 64 31 61 30 30 30 30 30 33 32 36 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a6f01000072030000e4070000bc080000ce0900002b10000072170000ed170000ed1800000d1a000003260000C%# , #&')*)-0-(0%()(C((((((((((((((
2024-05-25 23:00:21 UTC	1500	IN	Data Raw: 41 ec 66 7c e8 02 92 eb a1 c8 65 ab f3 c7 94 47 a1 29 d8 0a ca 4c 37 a5 c2 02 c3 09 b7 24 5b 79 fb 61 85 25 99 2f 3e 68 49 4b 7b 75 63 88 20 b1 a2 cd 53 34 6a 74 f9 05 c0 a2 b4 ee 93 0d ec e3 25 a5 24 a7 12 7c 34 ec 76 04 f1 c3 11 3b bf ff c4 00 25 10 00 02 02 02 03 00 03 00 02 03 01 00 00 00 00 00 02 03 01 04 00 11 05 12 13 14 21 22 15 23 10 31 32 24 ff da 00 08 01 01 00 01 05 02 b7 69 75 c6 4a 4a 50 30 46 17 29 8a 9b 6e b1 63 6e a9 03 66 c1 d8 91 ff 00 84 48 cd 5f 95 fa 74 9b cf a7 58 2c d6 58 fe d2 98 cd 66 b3 59 5c c4 0a 4b 53 f5 39 51 8b ec e2 54 e7 d6 44 2b 01 69 29 9a bb 94 7b 77 65 36 0c 03 27 0a 37 9a c9 1c fb c6 06 0a e4 a6 29 b7 18 a2 09 d6 68 c3 1b 03 82 50 42 df a3 f6 38 c0 63 0f 10 b9 83 a5 5b c4 66 91 59 c7 22 c0 b2 15 25 81 51 ac c3 a6 d0 Data Ascii: Af\|eG)L7$[ya%/>hIK{uc S4jt%$\|4v;%!"#12$iuJJP0F)ncnfH_tX,XfY\KS9QTD+i){we6'7)hPB8c[fY"%Q
2024-05-25 23:00:21 UTC	1740	IN	Data Raw: 96 ef 63 1a e8 d5 a1 f9 45 d7 61 ca fe 0c 31 5f 94 85 e9 a5 dd 48 fb 5c 97 69 98 a1 25 f9 3b 32 69 0d 90 67 3b 8f 21 77 23 b6 39 7d 28 8b 22 7f 24 67 c9 71 12 ae c6 59 be c3 d6 c4 ce c8 4c 8c c6 dc bb 8e 3c 44 c5 95 99 26 d6 c9 c7 76 47 15 c6 c6 bc 90 6b e0 8f 1e e5 59 3b 44 6c b2 5b f6 8d f8 2f a3 82 31 fb b6 c8 e5 77 ec 1f 97 d1 8b a3 56 5d 1c 6e 26 48 be 3b d1 8d 71 54 87 b2 2a 4b 65 f5 45 67 f8 fe ff 00 44 63 ea 76 95 98 d4 d6 1a c9 e4 4a f6 8d 95 26 46 34 a8 a2 ba 2f 45 91 7f bf 67 a3 f4 f2 c5 3e 4d 99 3d dd 13 f2 2f d1 be 97 a2 ac 64 7a ab 34 bf 8f ff c4 00 39 10 00 01 03 03 02 04 04 05 02 04 05 05 00 00 00 00 01 00 02 11 03 12 21 31 41 13 22 51 61 04 10 32 71 23 42 52 81 91 a1 b1 14 20 62 d1 24 33 72 92 c1 05 53 a2 b2 e1 ff da 00 08 01 01 00 06 3f Data Ascii: cEa1_H\i%;2ig;!w#9}("$gqYL<D&vGkY;Dl[/1wV]n&H;qT*KeEgDcvJ&F4/Eg>M=/dz49!1A"Qa2q#BR b$3rS?
2024-05-25 23:00:21 UTC	4064	IN	Data Raw: 41 ee 6d 85 0d 88 46 d7 c0 d4 8d 94 d0 b6 7a 9d 0a bc 35 a1 9d 4b 54 9d 50 08 a6 b1 a7 04 17 11 ee a2 ed 11 e7 2b 20 8e e1 43 f9 bb ff 00 24 ac 19 72 97 64 ae 6d 17 28 fc ac c7 dd 11 fe e2 b8 95 9b 93 a3 7a 2a 67 e4 1e 5c e4 47 75 1e 1d b4 c8 1b 92 9f 56 a1 e6 3a ae 65 12 16 ab 20 7d d7 ff c4 00 25 10 01 00 02 02 02 02 02 02 03 01 01 00 00 00 00 00 01 00 11 21 31 41 51 61 71 81 91 a1 c1 b1 d1 e1 10 f0 ff da 00 08 01 01 00 01 3f 21 ad 9e 76 59 f1 dc 52 a4 ca bc cc 9f 7d f2 bc 45 99 8b 4c 7c b1 94 c4 f0 8f 3a 03 5a cb 9b 43 4e 88 a8 1c 9c 39 c4 bc 78 99 6d 38 26 0d d0 aa 5a 65 13 07 7e 65 2a 10 d9 88 c5 4a 69 0f 55 fb ff 00 93 07 fc 70 b3 09 7f 4f 0c a2 77 6b ca af ec 8e 57 a3 37 d7 c4 3b e3 c0 96 7b b8 bd 76 cf f4 8f 6f e2 df a8 fd 3e 2b 0c 27 12 0b 96 74 Data Ascii: AmFz5KTP+ C$rdm(zg\GuV:e }%!1AQaq?!vYR}EL\|:ZCN9xm8&Ze~eJiUpOwkW7;{vo>+'t
2024-05-25 23:00:21 UTC	1663	IN	Data Raw: c0 9c 04 0e 01 a5 79 ac ba b9 2a 91 f6 9c 42 ba 52 12 28 c0 f4 0d f7 80 ce a8 e6 89 f2 2e 10 57 d1 15 98 e2 16 74 77 13 89 6c e2 aa 1f 31 f5 1e f0 f0 1a f4 62 25 33 1b 98 63 c9 84 8d a5 52 ed 4f d4 c2 4d 38 e1 2f 15 5e 09 d0 ff 00 b5 91 99 4a 5c 3e fb c6 31 ea af d9 39 c8 bf 24 a7 ce 3a ca f0 85 0e a9 38 7e 7e e1 0b 85 d0 29 b0 e4 f3 af de 26 40 2e e2 26 92 4d 78 98 a7 d6 23 1c c1 2b f3 04 87 9b 31 56 dc 98 76 6e 67 41 e5 c9 4f 77 69 41 a0 c9 a1 81 b4 6b 3c da de 52 a1 f4 36 e4 29 a4 62 97 61 30 3d 32 c9 e9 d0 b0 d3 63 da 5b 55 33 07 38 ec d4 c3 74 23 f4 31 2e ba 9d 9b a8 0c 9f 11 8a 46 59 42 8f 07 07 ef 0d ca da 34 74 34 f6 53 8d 81 07 48 52 11 e1 db 90 05 14 b0 0e d7 44 24 4d 7c 34 c4 8d 7c 7c 5a 82 a4 f2 46 2a 14 b9 8a 93 8d e5 98 d1 96 54 7f ee 6c 92 Data Ascii: yBR(.Wtwl1b%3cROM8/^J\>19$:8~~)&@.&Mx#+1VvngAOwiAk<R6)ba0=2c[U38t#1.FYB4t4SHRD$M\|4\|\|ZFTl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.6	59210	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:20 UTC	607	OUT	GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19868.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7373075910951068210&__req=8&__rev=1013770602&__s=%3A%3Afjuzaa&__spin_b=trunk&__spin_r=1013770602&__spin_t=1716678010&__user=0&dpr=1&jazoest=2936&lsd=AVrj9UP_w8I&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:21 UTC	2004	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-25 23:00:21 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.6	59216	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:20 UTC	831	OUT	GET /v/t39.30808-6/443717789_996576088504629_748921786331374552_n.jpg?stp=dst-jpg_p160x160&_nc_cat=106&ccb=1-7&_nc_sid=5f2048&_nc_ohc=6efKMPmYepsQ7kNvgHWkgWT&_nc_ht=scontent-hou1-1.xx&oh=00_AYD-VepBjFoMOMyl-Xlc8WviWhVq2U2uQddJKy9PLR6smA&oe=6658484A HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:21 UTC	737	IN	HTTP/1.1 200 OK Last-Modified: Sat, 25 May 2024 06:00:10 GMT X-Needle-Checksum: 3232017633 thrift_fmhk: GBAh8ZFaL2PctQ8h2IGFbnbzFfDr4Z0EvFUAHCYEAAAA Content-Type: image/jpeg content-digest: adler32=2538144970 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:21 GMT X-FB-Edge-Debug: pJL3ZPrzBAurvadkKccU-YjOgYXGQDsc3pcNSlU5GPqYYragqf_p6kKbsguKgnlfVYt-2ZPij9fuxDEIy4mRRnbk3vheNto7eJsdS77sqNc X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3410, tp=-1, tpl=-1, uplat=12, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 7793
2024-05-25 23:00:21 UTC	763	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 37 30 30 31 30 30 30 30 35 34 30 33 30 30 30 30 39 63 30 36 30 30 30 30 32 66 30 37 30 30 30 30 35 66 30 39 30 30 30 30 32 30 30 65 30 30 30 30 32 39 31 33 30 30 30 30 61 37 31 33 30 30 30 30 34 34 31 34 30 30 30 30 36 63 31 36 30 30 30 30 37 31 31 65 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a70010000540300009c0600002f0700005f090000200e000029130000a7130000441400006c160000711e0000C%# , #&')*)-0-(0%()(C((((((((((((((
2024-05-25 23:00:21 UTC	1786	IN	Data Raw: 36 e1 95 e6 7e a0 0b 59 e7 4f de b7 5d 31 02 fd 31 44 79 bc de 84 9b 38 39 37 0d 75 ae 17 a9 67 c7 59 c9 a9 67 79 de 50 e2 ef 68 35 3d da 0f ff c4 00 28 10 00 01 04 01 03 03 05 00 03 01 00 00 00 00 00 00 02 00 01 03 04 11 05 12 14 10 13 15 20 21 22 32 34 23 24 30 31 ff da 00 08 01 01 00 01 05 02 7f b7 aa 30 29 0a 48 ce 32 ff 00 37 fb 7a b4 e9 82 29 ad 58 8d ed 73 2b ae 6d 75 cd af 9b 36 a3 92 3f 5b fd bd 15 a9 49 62 31 ad 21 d9 f1 b3 f7 47 4f 98 9b c7 4a e7 e3 a5 dc da 7c af 2b 69 d3 b9 96 9b 38 a9 a8 49 0c 7e 97 fb 2c 3a d8 4b b4 6b 4d 3e cc 35 5f 65 f8 ec 7c 5a 47 22 79 41 e7 ee bf 7b bf fc af 68 b3 2c d9 57 26 63 ad da 91 6c 25 87 ea ff 00 64 08 1d 90 10 a0 31 53 8c 84 64 12 67 64 bb 45 dd ee ff 00 2b 3e d9 85 86 29 59 d8 64 64 72 02 32 14 64 c8 dd 3f Data Ascii: 6~YO]11Dy897ugYgyPh5=( !"24#$010)H27z)Xs+mu6?[Ib1!GOJ\|+i8I~,:KkM>5_e\|ZG"yA{h,W&cl%d1SdgdE+>)Yddr2d?
2024-05-25 23:00:21 UTC	4064	IN	Data Raw: 8d 36 90 40 a6 57 87 79 6d 66 3d ad b5 d1 4e 55 37 1a 35 8d a0 ed 8a 70 ae f3 ad b6 38 2a a0 d4 55 0c 73 77 b5 7c d5 62 28 55 c8 06 cb 33 55 e1 b5 b6 9a 03 7c b3 82 7b 2d a9 51 c7 29 a5 0b 71 de cb 74 ac b4 9d 39 85 bc 3d d6 f3 7d d5 6d 5d 46 da ff 00 f7 fa 27 c3 c4 e3 b5 ac cc 46 01 6f 0f fb 07 a2 d6 ba 03 70 fa c6 1f aa a9 0e 6d c4 11 76 b3 3e 89 96 d4 64 d3 98 db cd 34 0a a3 03 bd 7f a9 54 e5 cd 27 0f ee 6e e3 8a df 6f ba de 1e eb 31 f0 1d 03 ba 74 50 66 11 bb 98 5e 24 6a 9a 37 6d 31 92 7b 9b 49 be 56 39 e7 dd 52 b3 c3 b1 ae aa 26 47 24 d9 a7 2f 73 0b ae e6 9a d1 4e d8 73 44 8e 6a 99 14 98 21 f0 40 e6 99 e5 30 df 5a 32 c8 74 4e 1a a1 b4 e7 7d 97 83 60 a6 d0 1c 05 c3 aa 7c d1 6e d3 a3 b6 08 0d 58 b8 34 3a ef ba 73 5b 45 bb c0 4b 33 6a 91 49 a2 c7 0c b1 Data Ascii: 6@Wymf=NU75p8*Usw\|b(U3U\|{-Q)qt9=}m]F'Fopmv>d4T'no1tPf^$j7m1{IV9R&G$/sNsDj!@0Z2tN}`\|nX4:s[EK3jI
2024-05-25 23:00:21 UTC	1180	IN	Data Raw: 76 90 1f 68 1c f7 8f e8 42 aa e8 3c 7e 48 29 be fa b7 ed 16 52 ec d8 48 b5 9d 43 37 b9 2f 0e aa 34 d3 cc 2f 1d bb 5c af ac a4 02 74 48 be 05 de 13 e9 33 c0 2e f6 7d e7 d8 70 8a 58 ef 72 e6 3a c7 e1 3f 29 6e d6 6d 0c 15 bc b7 12 10 12 10 dd 6d 9f 58 21 70 a8 c1 e3 21 8b 95 49 c2 db ac 35 a7 73 f4 8f c4 74 6c 89 82 ad 16 b8 26 f2 54 83 48 3f 66 2c aa 56 c8 5b a0 aa f4 96 18 29 7f 74 3c f6 63 be 52 14 8d e9 27 4e fa ef 3a 77 99 17 d9 12 9a 77 f4 28 61 69 00 3a ab a8 97 2d c6 87 25 9c f4 cf 8c c2 03 29 1c 26 32 e1 24 e4 e4 e6 8e 57 98 c3 6a ea e6 73 eb 03 6c ce 1d 57 1f f7 d2 21 87 b7 38 0a 30 2d 65 f7 94 a4 20 a7 50 2c 0c b6 60 f3 86 35 27 91 90 2d 46 6c 04 c9 f8 99 08 fd 5d c3 e8 45 5a 1b f8 a5 4c 1d 06 35 21 18 ea 10 79 71 d2 02 08 9b f3 65 e1 57 4e 39 94 Data Ascii: vhB<~H)RHC7/4/\tH3.}pXr:?)nmmX!p!I5stl&TH?f,V[)t<cR'N:ww(ai:-%)&2$WjslW!80-e P,`5'-Fl]EZL5!yqeWN9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.6	59211	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:20 UTC	371	OUT	GET /rsrc.php/yg/r/DUjm2v1u572.kf HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:21 UTC	1922	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/x.fb.keyframes Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: Z5o6ShcDfXOoxSieZi5xvg== Expires: Sat, 24 May 2025 18:23:46 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: tk9Jeu5zC5LsIfIbNmz5BKt7Mn+4Xbz9hDobAZeP9qVy+zWATvvLczl8bD0ltkmCmdOu07iofplUDljQr3+swQ== Date: Sat, 25 May 2024 23:00:21 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 64756
2024-05-25 23:00:21 UTC	1	IN	Data Raw: 1c Data Ascii:
2024-05-25 23:00:21 UTC	15882	IN	Data Raw: 00 00 00 4b 45 59 46 14 00 24 00 14 00 20 00 1c 00 04 00 10 00 00 00 0c 00 08 00 14 00 00 00 04 00 00 00 1c 00 00 00 38 00 00 00 c0 fb 00 00 00 00 9c 42 00 00 9c 42 bc bb fb 3f 00 00 70 42 01 00 00 00 04 00 00 00 11 00 00 00 52 61 6e 64 6f 6d 53 75 62 64 6f 63 75 6d 65 6e 74 00 00 00 03 00 00 00 d8 dc 00 00 98 a5 00 00 04 00 00 00 42 23 ff ff 05 00 00 00 14 00 00 00 00 00 9c 42 00 00 9c 42 bc bb fb 3f 00 00 70 42 d0 03 ff ff 04 00 00 00 08 00 00 00 1c 92 00 00 a4 7e 00 00 54 6b 00 00 04 58 00 00 b4 44 00 00 64 31 00 00 10 1e 00 00 04 00 00 00 4e 23 ff ff 8c 01 00 00 18 00 00 00 18 00 00 00 5c 01 00 00 60 01 00 00 64 01 00 00 01 00 00 00 7c 04 ff ff b4 1a ff ff 0c 00 00 00 20 00 00 00 38 00 00 00 05 00 00 00 cc 00 00 00 ac 00 00 00 88 00 00 00 60 00 00 00 Data Ascii: KEYF$ 8BB?pBRandomSubdocumentB#BB?pB~TkXDd1N#\`d\| 8`
2024-05-25 23:00:21 UTC	16384	IN	Data Raw: ff 04 00 00 00 70 41 ff ff 30 68 bd 41 70 e1 e3 c1 8a 41 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 2c 43 ff ff 08 00 00 00 00 00 00 01 9c 41 ff ff 20 ef c1 41 e8 9f e6 c1 8c 41 ff ff 04 00 00 00 b0 41 ff ff a8 f5 ba 41 08 58 e2 c1 ca 41 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 6c 43 ff ff 08 00 00 00 00 00 00 01 dc 41 ff ff 78 5b c0 41 e0 ae e5 c1 cc 41 ff ff 04 00 00 00 f0 41 ff ff b0 6a b8 41 b8 b4 e0 c1 0a 42 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 ac 43 ff ff 08 00 00 00 00 00 00 01 1c 42 ff ff c0 a6 be 41 c0 a5 e4 c1 0c 42 ff ff 04 00 00 00 30 42 ff ff e8 c5 b5 41 30 f5 de c1 4a 42 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 ec 43 ff ff 08 00 00 00 00 00 00 01 5c 42 ff ff 78 cf bc 41 70 82 e3 c1 4c 42 Data Ascii: pA0hApA ,CA AAAAXA lCAx[AAAjAB CBAB0BA0JB C\BxApLB
2024-05-25 23:00:21 UTC	16384	IN	Data Raw: 00 20 00 00 00 04 00 00 00 10 83 ff ff 08 00 00 00 00 00 00 01 80 81 ff ff 80 e7 f3 40 98 d2 82 41 70 81 ff ff 04 00 00 00 94 81 ff ff 00 b5 c9 40 b0 41 3f 41 ae 81 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 50 83 ff ff 08 00 00 00 00 00 00 01 c0 81 ff ff 20 e2 cf 40 80 32 4b 41 b0 81 ff ff 04 00 00 00 d4 81 ff ff c0 d1 b4 40 40 6e 0f 41 ee 81 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 90 83 ff ff 08 00 00 00 00 00 00 01 00 82 ff ff 80 0d b2 40 c0 cb 07 41 f0 81 ff ff 04 00 00 00 14 82 ff ff 00 43 a8 40 e0 08 d0 40 2e 82 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 d0 83 ff ff 08 00 00 00 00 00 00 01 40 82 ff ff 40 11 a4 40 80 61 ac 40 30 82 ff ff 04 00 00 00 54 82 ff ff 80 50 a2 40 40 f2 99 40 6e 82 ff ff 04 00 00 00 02 00 Data Ascii: @Ap@A?A P @2KA@@nA @AC@@. @@@a@0TP@@@n
2024-05-25 23:00:21 UTC	16105	IN	Data Raw: ff 00 00 20 c0 00 00 60 40 ec d7 ff ff 0c 00 00 00 14 00 00 00 20 00 00 00 02 00 00 00 44 00 00 00 24 00 00 00 03 00 00 00 8f ad 08 3f 09 9a 13 3f a5 2e 69 3f 03 00 00 00 c8 00 00 00 84 00 00 00 40 00 00 00 92 d7 ff ff 08 00 00 00 0c 00 00 00 a0 c1 ff ff 00 00 80 3f d2 c1 ff ff ab aa 2a 3e ae d7 ff ff 08 00 00 00 10 00 00 00 d8 c1 ff ff 00 00 80 3f a4 70 bd 3e f2 c1 ff ff ab aa 2a 3e fa c1 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 9c c3 ff ff 08 00 00 00 00 00 00 01 0c c2 ff ff a8 fb c2 c1 d8 25 89 41 fc c1 ff ff 04 00 00 00 20 c2 ff ff 20 22 c3 c1 20 22 89 41 3a c2 ff ff 04 00 00 00 02 00 00 00 20 00 00 00 04 00 00 00 dc c3 ff ff 08 00 00 00 00 00 00 01 4c c2 ff ff a8 fb c2 c1 d8 25 89 41 3c c2 ff ff 04 00 00 00 60 c2 ff ff 00 00 20 c0 00 00 Data Ascii: `@ D$??.i?@?>?p>> %A " "A: L%A<`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.6	59214	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:20 UTC	368	OUT	GET /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:21 UTC	930	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-25 23:00:21 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-25 23:00:21 UTC	1662	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-25 23:00:21 UTC	2757	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 63 6f 6e 66 69 67 76 65 72 73 69 6f 6e 3d 22 41 63 4c 6c 5f 32 77 45 4f 7a 34 77 34 6d 78 73 75 45 6d 49 4f 63 63 4c 79 78 56 68 36 62 57 34 74 42 70 57 5f 41 41 37 63 54 6c 39 7a 63 74 7a 36 38 75 49 57 50 62 52 77 54 57 62 35 52 31 68 72 43 4e 2d 4f 39 71 75 56 4b 4e 63 64 4e 59 5f 53 76 48 5a 66 48 52 44 63 6e 43 56 65 44 34 34 63 35 51 22 3b 20 65 5f 63 6c 69 65 6e 74 61 64 64 72 3d 22 41 63 4c 34 6a 31 64 34 32 71 37 31 74 2d 66 54 49 57 73 31 35 2d 42 6d 4b 66 50 32 33 34 42 64 30 72 4b 30 4c 49 37 39 4e 76 33 54 34 6c 77 63 4f 41 4c 30 53 65 53 70 57 39 4a 44 55 79 44 79 49 6d 68 65 5a 6b 6c 75 77 6f 53 5f 7a 49 6d 31 50 43 6b 63 75 Data Ascii: Proxy-Status: http_request_error; e_fb_configversion="AcLl_2wEOz4w4mxsuEmIOccLyxVh6bW4tBpW_AA7cTl9zctz68uIWPbRwTWb5R1hrCN-O9quVKNcdNY_SvHZfHRDcnCVeD44c5Q"; e_clientaddr="AcL4j1d42q71t-fTIWs15-BmKfP234Bd0rK0LI79Nv3T4lwcOAL0SeSpW9JDUyDyImheZkluwoS_zIm1PCkcu
2024-05-25 23:00:21 UTC	6	IN	Data Raw: 31 65 61 39 0d 0a Data Ascii: 1ea9
2024-05-25 23:00:21 UTC	1500	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 76 6a 6c 53 49 49 73 66 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 5b 63 5d 7d 77 69 Data Ascii: <!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="vjlSIIsf">function envFlush(a){function b(b){for(var c in a)b[c]=a[c]}wi
2024-05-25 23:00:21 UTC	1500	IN	Data Raw: 65 64 69 61 3d 22 68 61 6e 64 68 65 6c 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 3f 6c 6f 63 61 6c 65 32 3d 65 6e 5f 47 42 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 6f 64 70 2c 6e 6f 79 64 69 72 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4c 6f 67 20 69 6e 20 6f 72 20 73 69 67 6e 20 75 70 20 74 6f 20 76 69 65 77 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 65 20 70 6f 73 74 73 2c 20 70 Data Ascii: edia="handheld" href="https://www.facebook.com/ajax/bulk-route-definitions/?locale2=en_GB" /><meta name="robots" content="noodp,noydir" /><meta property="og:title" content="Log in or sign up to view" /><meta property="og:description" content="See posts, p
2024-05-25 23:00:21 UTC	1500	IN	Data Raw: 45 74 68 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 20 64 61 74 61 2d 62 6f 6f 74 6c 6f 61 64 65 72 2d 68 61 73 68 3d 22 31 2b 48 31 6c 46 42 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 5f 2f 6c 2f 30 2c 63 72 6f 73 73 2f 53 49 57 59 46 33 50 62 56 4f 78 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 20 64 61 74 61 2d 62 6f 6f 74 6c 6f 61 64 65 72 2d 68 61 73 68 3d 22 63 31 66 6f 74 6a 6a 22 20 63 72 6f 73 73 6f Data Ascii: Eth.css?_nc_x=Ij3Wp8lg5Kz" data-bootloader-hash="1+H1lFB" crossorigin="anonymous" /><link type="text/css" rel="stylesheet" href="https://static.xx.fbcdn.net/rsrc.php/v3/y_/l/0,cross/SIWYF3PbVOx.css?_nc_x=Ij3Wp8lg5Kz" data-bootloader-hash="c1fotjj" crosso
2024-05-25 23:00:21 UTC	1500	IN	Data Raw: 6d 65 6f 75 74 57 57 57 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 38 39 35 38 22 2c 5b 22 46 42 4a 53 4f 4e 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 46 42 4a 53 4f 4e 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 30 37 38 22 2c 5b 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 6e 75 6c 6c 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 30 38 30 22 2c 5b 22 75 6e 65 78 70 65 63 74 65 64 55 73 65 49 6e 43 6f 6d 65 74 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 75 6e 65 78 70 65 63 74 65 64 55 73 65 49 6e 43 6f 6d 65 74 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 36 31 30 38 22 2c 5b 22 43 53 53 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 43 53 53 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 33 38 35 22 2c 5b 22 63 6c 65 61 72 49 6e Data Ascii: meoutWWW",null]},-1],["cr:8958",["FBJSON"],{"__rc":["FBJSON",null]},-1],["cr:1078",[],{"__rc":[null,null]},-1],["cr:1080",["unexpectedUseInComet"],{"__rc":["unexpectedUseInComet",null]},-1],["cr:6108",["CSS"],{"__rc":["CSS",null]},-1],["cr:7385",["clearIn
2024-05-25 23:00:21 UTC	1500	IN	Data Raw: 43 5a 55 68 6d 46 71 2d 71 65 76 68 2d 41 6b 6e 61 69 75 53 76 54 64 4f 72 66 4d 57 52 6f 69 51 32 7a 22 2c 22 61 6c 6c 6f 77 6c 69 73 74 65 64 5f 69 66 72 61 6d 65 73 22 3a 5b 5d 2c 22 69 73 5f 63 68 65 63 6b 70 6f 69 6e 74 65 64 22 3a 66 61 6c 73 65 7d 2c 35 35 34 30 5d 2c 5b 22 53 65 72 76 65 72 54 69 6d 65 44 61 74 61 22 2c 5b 5d 2c 7b 22 73 65 72 76 65 72 54 69 6d 65 22 3a 31 37 31 36 36 37 38 30 32 31 32 32 30 2c 22 74 69 6d 65 4f 66 52 65 71 75 65 73 74 53 74 61 72 74 22 3a 31 37 31 36 36 37 38 30 32 31 32 30 34 2e 39 2c 22 74 69 6d 65 4f 66 52 65 73 70 6f 6e 73 65 53 74 61 72 74 22 3a 31 37 31 36 36 37 38 30 32 31 32 30 34 2e 39 7d 2c 35 39 34 33 5d 2c 5b 22 55 52 4c 46 72 61 67 6d 65 6e 74 50 72 65 6c 75 64 65 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b Data Ascii: CZUhmFq-qevh-AknaiuSvTdOrfMWRoiQ2z","allowlisted_iframes":[],"is_checkpointed":false},5540],["ServerTimeData",[],{"serverTime":1716678021220,"timeOfRequestStart":1716678021204.9,"timeOfResponseStart":1716678021204.9},5943],["URLFragmentPreludeConfig",[],{
2024-05-25 23:00:21 UTC	1500	IN	Data Raw: 6e 65 22 7d 2c 22 75 73 69 64 61 22 3a 7b 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 76 70 64 22 3a 7b 22 74 22 3a 35 31 38 34 30 30 30 2c 22 73 22 3a 22 4c 61 78 22 7d 2c 22 77 64 22 3a 7b 22 74 22 3a 36 30 34 38 30 30 2c 22 73 22 3a 22 4c 61 78 22 7d 2c 22 77 6c 5f 63 62 76 22 3a 7b 22 74 22 3a 37 37 37 36 30 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 78 2d 72 65 66 65 72 65 72 22 3a 7b 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 78 2d 73 72 63 22 3a 7b 22 74 22 3a 31 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 7d 2c 32 31 30 34 5d 2c 5b 22 43 75 72 72 65 6e 74 55 73 65 72 49 6e 69 74 69 61 6c 44 61 74 61 22 2c 5b 5d 2c 7b 22 41 43 43 4f 55 4e 54 5f 49 44 22 3a 22 30 22 2c 22 55 53 45 52 5f 49 44 22 3a 22 30 22 2c 22 4e 41 4d 45 22 3a 22 22 2c 22 53 48 4f 52 54 5f Data Ascii: ne"},"usida":{"s":"None"},"vpd":{"t":5184000,"s":"Lax"},"wd":{"t":604800,"s":"Lax"},"wl_cbv":{"t":7776000,"s":"None"},"x-referer":{"s":"None"},"x-src":{"t":1,"s":"None"}},2104],["CurrentUserInitialData",[],{"ACCOUNT_ID":"0","USER_ID":"0","NAME":"","SHORT_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.6	59218	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:21 UTC	607	OUT	GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19868.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7373075910951068210&__req=9&__rev=1013770602&__s=%3A%3Afjuzaa&__spin_b=trunk&__spin_r=1013770602&__spin_t=1716678010&__user=0&dpr=1&jazoest=2936&lsd=AVrj9UP_w8I&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:21 UTC	2004	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-25 23:00:21 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.6	59219	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:21 UTC	1159	OUT	POST /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19868.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7373075910951068210&__req=a&__rev=1013770602&__s=%3A%3Afjuzaa&__spin_b=trunk&__spin_r=1013770602&__spin_t=1716678010&__user=0&dpr=1&jazoest=2936&lsd=AVrj9UP_w8I&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 6123 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryM9zDrN4nnttK3aOQ sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/Codashop.IDofficial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:21 UTC	6123	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 4d 39 7a 44 72 4e 34 6e 6e 74 74 4b 33 61 4f 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 73 22 0d 0a 0d 0a 31 37 31 36 36 37 38 30 31 39 38 30 36 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 4d 39 7a 44 72 4e 34 6e 6e 74 74 4b 33 61 4f 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 6f 73 74 5f 30 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 62 6c 6f 62 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 78 9c ed 5b 59 Data Ascii: ------WebKitFormBoundaryM9zDrN4nnttK3aOQContent-Disposition: form-data; name="ts"1716678019806------WebKitFormBoundaryM9zDrN4nnttK3aOQContent-Disposition: form-data; name="post_0"; filename="blob"Content-Type: application/octet-streamx[Y
2024-05-25 23:00:21 UTC	2004	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-25 23:00:21 UTC	2002	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-
2024-05-25 23:00:21 UTC	70	IN	Data Raw: 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a Data Ascii: Alt-Svc: h3=":443"; ma=86400Connection: closeContent-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.6	59220	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:21 UTC	832	OUT	GET /v/t39.30808-6/443818919_996576128504625_3343915979056056184_n.jpg?stp=dst-jpg_p160x160&_nc_cat=101&ccb=1-7&_nc_sid=5f2048&_nc_ohc=nO7Vfy4wE0cQ7kNvgEAcCQP&_nc_ht=scontent-hou1-1.xx&oh=00_AYCntigX4wIFjcc-XIzewAhDWxRAHRfppP-pPBfZbeeOEA&oe=665830C5 HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:21 UTC	735	IN	HTTP/1.1 200 OK Last-Modified: Sat, 25 May 2024 06:00:13 GMT X-Needle-Checksum: 64459615 thrift_fmhk: GBCtL7hGTrtz/wsD7JOgzUjvFfDr4Z0EvFUAHCYEAAAA Content-Type: image/jpeg content-digest: adler32=4113173615 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:21 GMT X-FB-Edge-Debug: YX76nVnF5wXv3R_zsFqeKcUqd-MqslZIL5Cyj7rHFyruTY3b4LzzrpqM0vPTtS646biB7H7vLaLBkL_RXR6H3fR6BuO6wA6xtrvmcsnGtzw X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=52, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 7724
2024-05-25 23:00:21 UTC	765	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 37 31 30 31 30 30 30 30 35 61 30 33 30 30 30 30 38 35 30 36 30 30 30 30 31 33 30 37 30 30 30 30 32 31 30 39 30 30 30 30 30 35 30 65 30 30 30 30 30 39 31 33 30 30 30 30 38 62 31 33 30 30 30 30 33 32 31 34 30 30 30 30 35 32 31 36 30 30 30 30 32 63 31 65 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a710100005a030000850600001307000021090000050e0000091300008b13000032140000521600002c1e0000C%# , #&')*)-0-(0%()(C((((((((((((((
2024-05-25 23:00:21 UTC	1500	IN	Data Raw: 1d bd 1e 67 ea 54 3a e6 02 87 d5 da ec 3c ce bb d6 5a cf 97 9d c4 f5 19 a1 e7 13 b6 6f 6d 46 65 bc 69 39 88 42 ce 71 b1 c3 91 b1 d7 8a 46 47 80 ff c4 00 2b 10 00 01 04 01 04 01 03 03 05 01 01 00 00 00 00 00 02 00 01 03 04 05 11 12 13 14 20 10 15 34 30 31 32 16 21 22 23 24 33 40 ff da 00 08 01 01 00 01 05 02 f3 8c 0a 42 92 33 8c bf f1 63 a6 08 a6 b5 62 37 b5 dc ae bb b5 d7 76 be b6 6d 47 24 7f 52 b5 29 2c 46 35 a4 3b 3e db 3f 28 e3 e6 26 f6 e9 5c fd ba 5d cd 8f 95 e5 6c 74 ee 65 8d 9c 54 d4 24 86 3f 3d 1d 6c 25 c4 6b 1a 7c 30 d5 7d 97 e3 b1 fc 5a 47 22 79 41 e7 e5 7e 6e 7f ed 7b 45 ac b3 6a ae 4c c7 5b 8a 45 b0 96 8f e2 08 1d 90 10 a0 31 53 8c 84 64 12 6b b2 5d a2 ee f7 7f b5 9f 6c c2 c3 14 ac ec 32 32 39 01 19 0a 32 64 6e 9f c0 7f 2b 15 6b b0 c9 4e 1d 6d Data Ascii: gT:<ZomFei9BqFG+ 4012!"#$3@B3cb7vmG$R),F5;>?(&\]lteT$?=l%k\|0}ZG"yA~n{EjL[E1Sdk]l2292dn+kNm
2024-05-25 23:00:21 UTC	1739	IN	Data Raw: 08 e6 16 78 47 66 42 51 d9 23 cc bd d2 df 32 ff c4 00 37 10 00 01 03 03 01 04 08 05 03 03 05 00 00 00 00 00 01 00 02 11 03 12 21 31 13 22 32 41 04 10 23 33 51 61 71 91 20 30 42 72 81 14 a1 b1 24 34 43 40 62 82 93 f0 ff da 00 08 01 01 00 06 3f 02 f8 ed a6 d2 e3 e0 14 54 69 69 f3 ff 00 47 15 38 5d cf c1 32 1b 7d 36 3a 75 d5 3b fa 7f a8 1d 02 3f d3 f3 9d 02 fe df 9f 92 2c a7 45 ad 93 33 f3 4b da e6 06 83 1b c5 1a 2c 82 e1 e7 85 66 ee 93 33 85 4e 2d ed 04 eb a0 41 ad 7d 27 4e 70 ed 14 5d 4a 22 49 bb 08 b1 ae a6 60 49 75 d8 09 ed 36 36 cf 12 9f c3 ba 27 5d 53 9c f7 d2 c7 2b b3 f2 78 4a e0 77 b2 2d a9 b4 1b d3 1b 39 55 6a ec 6a 36 9b 81 8d c5 4c be 95 46 9b 48 20 53 2b a3 bc b6 b3 1e d6 da e8 a7 2a 9b 8d 1a c6 d0 77 c5 38 57 76 d6 db 1d ca a8 36 15 43 1c de 2d Data Ascii: xGfBQ#27!1"2A#3Qaq 0Br$4C@b?TiiG8]2}6:u;?,E3K,f3N-A}'Np]J"I`Iu66']S+xJw-9Ujj6LFH S+*w8Wv6C-
2024-05-25 23:00:21 UTC	3720	IN	Data Raw: c5 36 a8 a0 ae ca a8 1c 22 11 50 60 34 21 f4 d5 63 a0 81 81 00 70 65 34 fb 44 b3 ac 5f 51 ed f7 1f b4 d3 df ab bc 6f 21 e4 e6 7a bb 87 cc a7 77 18 be 26 15 eb 1c be 21 35 dd d9 2e 2c 3c b8 40 2b 3a 5b 73 e7 4a 15 a6 bd 21 3f 68 5a 16 4d 41 6a fd 2e f0 4b ea f2 42 ed f7 96 fc 4b 21 d0 84 98 b7 99 09 f1 0c 2e de 54 4f b5 21 14 e0 f2 62 24 21 b1 6b fb 4e 9e f9 8b 57 c4 d8 fe 22 fa fb ef c4 4b a9 de 38 c0 e2 38 eb e6 0b 6a df 2f c4 7f ca 66 de e0 91 6d a3 d3 13 62 4d 2c 88 25 24 e4 f6 58 65 8c cd 5b da 85 fa 61 46 d7 6f 42 a2 65 fe c8 7a 02 aa bc 9d fe a5 0b 35 52 d2 cb c3 7a 93 ef e1 90 fa 41 14 0d 55 a8 ec bf 84 a4 ff 00 41 45 35 b7 9a 8d a8 00 4e fa bd 1a 8f a0 f7 eb 17 92 b8 85 26 37 eb 45 d8 2a 2b e1 78 c8 52 91 ca 9f 88 a6 bf b2 40 69 c3 57 4c 4b af 64 Data Ascii: 6"P`4!cpe4D_Qo!zw&!5.,<@+:[sJ!?hZMAj.KBK!.TO!b$!kNW"K88j/fmbM,%$Xe[aFoBez5RzAUAE5N&7E*+xR@iWLKd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.6	59222	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:21 UTC	832	OUT	GET /v/t39.30808-6/443820279_996576055171299_5426681423066812390_n.jpg?stp=dst-jpg_p160x160&_nc_cat=106&ccb=1-7&_nc_sid=5f2048&_nc_ohc=yOpNa5f4B0MQ7kNvgFXHOgL&_nc_ht=scontent-hou1-1.xx&oh=00_AYBVDQgwzpXx5tnAMaacW5P1eZsrvuHBmJdwC36mmjlL2g&oe=665834CA HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:21 UTC	736	IN	HTTP/1.1 200 OK Last-Modified: Sat, 25 May 2024 06:00:07 GMT X-Needle-Checksum: 2752040978 thrift_fmhk: GBBU9Ss6jRorBcc81Dmh9goZFfDr4Z0EvFUAHCYEAAAA Content-Type: image/jpeg content-digest: adler32=636109903 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:21 GMT X-FB-Edge-Debug: 0ybEDLUpXkMDUGYFaiVrFjph3V8pgboefP4qiOPZ3F2FvpActT7n-DKDddlu0hm5OulZEr-TiZ4eIwLEe6rXeJXM2e0aPi8zXIlFssagvj8 X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3412, tp=-1, tpl=-1, uplat=87, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 7922
2024-05-25 23:00:21 UTC	764	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 37 30 30 31 30 30 30 30 36 33 30 33 30 30 30 30 64 65 30 36 30 30 30 30 65 37 30 37 30 30 30 30 38 37 30 39 30 30 30 30 31 66 30 65 30 30 30 30 34 65 31 33 30 30 30 30 64 38 31 33 30 30 30 30 66 35 31 34 30 30 30 30 62 37 31 36 30 30 30 30 66 32 31 65 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a7001000063030000de060000e7070000870900001f0e00004e130000d8130000f5140000b7160000f21e0000C%# , #&')*)-0-(0%()(C((((((((((((((
2024-05-25 23:00:21 UTC	1500	IN	Data Raw: d8 ee 71 d4 24 47 03 d6 b7 e8 04 f4 7d 0c eb 1e e5 bd cc d2 d8 20 05 94 26 b3 a7 81 c9 43 79 ea e6 a1 af 6a ae 7a 89 5e 40 b0 6c 9c ca ce ba e1 7b 94 6c 94 fa 76 fa ea f3 bc ff c4 00 2b 10 00 02 02 02 01 03 03 04 02 02 03 00 00 00 00 00 02 03 01 04 00 11 05 12 13 21 10 14 31 20 22 32 33 15 41 23 30 34 40 42 ff da 00 08 01 01 00 01 05 02 fa d4 a3 6c 98 90 17 fd 2e 31 eb 59 95 95 fb b1 b9 5e 32 2e d7 c8 bb 5f 76 ac 03 43 fd 88 a0 c7 25 15 98 f6 cf 1e e1 cf e3 9d d5 1c 73 64 e3 8e 6c c8 71 ed 33 0e 39 c5 93 c6 be 32 c5 23 40 7d 7a 9c e8 2c ed 33 28 36 15 5a 8c 92 64 9f b0 ee 6e cf 74 3d c0 b6 61 80 f8 ea 8b 53 86 df 1c 83 61 b5 bb 4c ce 82 cd 4f d2 18 13 18 04 38 06 18 40 c9 22 06 68 45 83 29 df ba 11 6f 6f a5 d8 2b 74 60 09 8b 0c c3 0c 87 0e 63 0f e9 aa 30 Data Ascii: q$G} &Cyjz^@l{lv+!1 "23A#04@Bl.1Y^2._vC%sdlq392#@}z,3(6Zdnt=aSaLO8@"hE)oo+t`c0
2024-05-25 23:00:21 UTC	1740	IN	Data Raw: 4e 04 4b 86 fc 4d 65 5b ce e1 15 43 63 22 01 2e 2c aa 21 65 16 6e 69 b5 59 a3 f1 cc 6b ce 36 cd 63 13 ca f5 95 b3 e7 3e f1 18 6d cb 45 3b 93 31 0e 66 a8 0d 99 31 b6 e2 74 e4 4d c1 8a c7 45 ce 44 72 19 a5 1e 56 da d1 53 cf cc 18 41 34 dc 20 cc d4 b8 db 19 f9 99 e6 6e 20 f1 05 9e 51 01 03 a4 de 7d 60 bb 1d 22 ea 4f ac 5b e5 d6 64 4d d3 bc 85 e7 79 3f ff c4 00 38 10 00 01 03 03 01 05 06 04 05 02 07 00 00 00 00 00 01 00 02 11 03 12 21 31 10 13 22 32 41 20 23 51 61 71 81 04 42 52 91 30 33 72 a1 b1 24 62 34 40 43 82 83 92 d1 ff da 00 08 01 01 00 06 3f 02 ed c5 36 39 c7 c9 43 c1 07 cf fc 9d 95 70 d3 d6 53 5f 65 d4 da 23 3f ca ff 00 0f f3 13 d1 0f e9 a3 33 a0 43 fa 7f e1 35 b4 e9 35 80 7e 28 a8 1d 4c 34 fd 45 39 94 e3 87 53 d1 54 9b 78 1b 76 ba a0 25 9c b7 6b a2 Data Ascii: NKMe[Cc".,!eniYk6c>mE;1f1tMEDrVSA4 n Q}`"O[dMy?8!1"2A #QaqBR03r$b4@C?69CpS_e#?3C55~(L4E9STxv%k
2024-05-25 23:00:21 UTC	3918	IN	Data Raw: 8d 3e 99 ed 30 d5 86 2b 11 cb 88 8c 11 5f 6e 16 61 cb b9 6d 50 b8 31 7b 94 d1 13 84 d5 ff 00 f6 00 56 02 50 34 ee 64 03 df 99 41 18 ea 07 3b 81 58 a8 bb 0d 9a 8f b4 ce 98 6e 07 5b 4c 46 db 8d 69 76 9e 5f 8a 76 5f 37 f9 3f 65 cf 59 a4 6f df 53 e9 13 3e ec ba 9e b8 3e d9 7e ae d2 c5 f2 84 56 9d 28 9b 84 77 03 ec 2e db 97 00 c3 07 22 d1 2c af 30 b7 da 77 2a 4a aa 9e 8a 6b fe d3 d1 21 0b fa e2 08 7c 52 db f4 82 56 de 49 a9 9e 34 f6 54 42 6e 73 11 b4 bf 89 2e 8f 01 8c e9 6f 42 55 f3 bd e3 d7 58 2f 47 ca 0d 14 28 e0 93 07 20 65 75 ef 3d 6c 43 fa 4b 11 5f 54 28 c3 a7 fa 43 6e ed f5 61 03 06 a1 40 ed 52 8a 75 0e 40 05 f3 8c 12 fa ac bc 04 4b 8b 04 f0 87 d9 d4 32 d7 2b cb 00 50 a6 8d 41 63 27 ce 61 29 82 3f 1f b1 89 90 c0 1b 48 18 02 53 c9 bb 81 66 53 8e fc c1 50 Data Ascii: >0+_namP1{VP4dA;Xn[LFiv_v_7?eYoS>>~V(w.",0w*Jk!\|RVI4TBns.oBUX/G( eu=lCK_T(Cna@Ru@K2+PAc'a)?HSfSP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.6	59221	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:21 UTC	596	OUT	GET /v/t39.30808-6/443716737_996551778507060_8093613214370052435_n.jpg?stp=dst-jpg_p160x160&_nc_cat=108&ccb=1-7&_nc_sid=5f2048&_nc_ohc=DuHJngJtu2wQ7kNvgFQ8iUU&_nc_ht=scontent-hou1-1.xx&oh=00_AYBf7Ste67oNs7Tl7YANpLqMTqiicZKF-CR-_p4ZIXY8lg&oe=66583443 HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:21 UTC	610	IN	HTTP/1.1 200 OK Last-Modified: Sat, 25 May 2024 05:00:13 GMT X-Needle-Checksum: 111635746 thrift_fmhk: GBDCvVtLpywSKEzyTYZnIdxYFfDr4Z0EvFUAHCYEAAAA Content-Type: image/jpeg content-digest: adler32=2260265837 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:21 GMT X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=31, rtx=0, c=14, mss=1392, tbw=3412, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 8744
2024-05-25 23:00:21 UTC	1	IN	Data Raw: ff Data Ascii:
2024-05-25 23:00:21 UTC	8743	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 36 66 30 31 30 30 30 30 36 32 30 33 30 30 30 30 31 62 30 37 30 30 30 30 36 38 30 38 30 30 30 30 35 38 30 39 30 30 30 30 62 33 30 66 30 30 30 30 64 65 31 35 30 30 30 30 36 31 31 36 30 30 30 30 66 32 31 37 30 30 30 30 65 61 31 38 30 30 30 30 32 38 32 32 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a6f010000620300001b0700006808000058090000b30f0000de15000061160000f2170000ea18000028220000C%# , #&')*)-0-(0%()(C(((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.6	59223	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:21 UTC	595	OUT	GET /v/t39.30808-6/444202748_996576171837954_250908605759715264_n.jpg?stp=dst-jpg_p160x160&_nc_cat=102&ccb=1-7&_nc_sid=5f2048&_nc_ohc=OAqihbnrPUoQ7kNvgFnryPS&_nc_ht=scontent-hou1-1.xx&oh=00_AYCeXEwpdrg44H2MsX8htwFjsSC1XoR3snF8Y5OzIJvZqQ&oe=66584BAB HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:21 UTC	611	IN	HTTP/1.1 200 OK Last-Modified: Sat, 25 May 2024 06:00:16 GMT X-Needle-Checksum: 1966316871 thrift_fmhk: GBDVht0hE5taSrgpbsAHDLzUFfDr4Z0EvFUAHCYEAAAA Content-Type: image/jpeg content-digest: adler32=2985620006 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:21 GMT X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3410, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 8189
2024-05-25 23:00:21 UTC	1	IN	Data Raw: ff Data Ascii:
2024-05-25 23:00:21 UTC	8188	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 37 30 30 31 30 30 30 30 35 30 30 33 30 30 30 30 62 37 30 36 30 30 30 30 34 38 30 37 30 30 30 30 35 62 30 39 30 30 30 30 38 65 30 65 30 30 30 30 30 31 31 34 30 30 30 30 38 39 31 34 30 30 30 30 34 36 31 35 30 30 30 30 38 39 31 37 30 30 30 30 66 64 31 66 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a7001000050030000b7060000480700005b0900008e0e000001140000891400004615000089170000fd1f0000C%# , #&')*)-0-(0%()(C(((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.6	59226	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:21 UTC	595	OUT	GET /v/t39.30808-6/443717789_996576088504629_748921786331374552_n.jpg?stp=dst-jpg_p160x160&_nc_cat=106&ccb=1-7&_nc_sid=5f2048&_nc_ohc=6efKMPmYepsQ7kNvgHWkgWT&_nc_ht=scontent-hou1-1.xx&oh=00_AYD-VepBjFoMOMyl-Xlc8WviWhVq2U2uQddJKy9PLR6smA&oe=6658484A HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:21 UTC	611	IN	HTTP/1.1 200 OK Last-Modified: Sat, 25 May 2024 06:00:10 GMT X-Needle-Checksum: 3232017633 thrift_fmhk: GBAh8ZFaL2PctQ8h2IGFbnbzFfDr4Z0EvFUAHCYEAAAA Content-Type: image/jpeg content-digest: adler32=2538144970 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:21 GMT X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 7793
2024-05-25 23:00:21 UTC	1	IN	Data Raw: ff Data Ascii:
2024-05-25 23:00:21 UTC	7792	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 37 30 30 31 30 30 30 30 35 34 30 33 30 30 30 30 39 63 30 36 30 30 30 30 32 66 30 37 30 30 30 30 35 66 30 39 30 30 30 30 32 30 30 65 30 30 30 30 32 39 31 33 30 30 30 30 61 37 31 33 30 30 30 30 34 34 31 34 30 30 30 30 36 63 31 36 30 30 30 30 37 31 31 65 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a70010000540300009c0600002f0700005f090000200e000029130000a7130000441400006c160000711e0000C%# , #&')*)-0-(0%()(C(((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.6	59228	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:21 UTC	832	OUT	GET /v/t39.30808-6/443734130_996504798511758_6592287627648144231_n.jpg?stp=dst-jpg_p160x160&_nc_cat=103&ccb=1-7&_nc_sid=5f2048&_nc_ohc=ZehM0R_W_KYQ7kNvgFg__vp&_nc_ht=scontent-hou1-1.xx&oh=00_AYDJEL6e_gixMWiDOUh9aXczeGqkrxh94R0FJtxsn4TwFg&oe=665847CB HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:21 UTC	737	IN	HTTP/1.1 200 OK Last-Modified: Sat, 25 May 2024 03:00:08 GMT X-Needle-Checksum: 2265317192 thrift_fmhk: GBAkZfDU3Euvfs9FxTmoolvEFfDr4Z0EvFUAHCYEAAAA Content-Type: image/jpeg content-digest: adler32=608168895 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:21 GMT X-FB-Edge-Debug: tGt00sWSuSMo7eleW4e7VhOALzHSyzDsifTS4hGGTKxWhuhjAcbV_TaJ_OaswKNcRxXBPYooe8mrhjpvfPQIp0K2dp7D3i7pcwxpbwaNEGY X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=101, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 8731
2024-05-25 23:00:21 UTC	763	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 37 30 30 31 30 30 30 30 37 39 30 33 30 30 30 30 34 33 30 37 30 30 30 30 33 38 30 38 30 30 30 30 38 36 30 39 30 30 30 30 66 35 30 65 30 30 30 30 30 64 31 35 30 30 30 30 38 64 31 35 30 30 30 30 62 33 31 36 30 30 30 30 33 39 31 38 30 30 30 30 31 62 32 32 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a7001000079030000430700003808000086090000f50e00000d1500008d150000b3160000391800001b220000C%# , #&')*)-0-(0%()(C((((((((((((((
2024-05-25 23:00:21 UTC	1500	IN	Data Raw: 3d 83 54 d1 0e c2 b7 2d 49 47 de 7a 37 c9 39 c7 1b 94 f5 cb 37 3e 65 ae f7 58 35 4e 4d 6b c7 42 24 74 66 f4 c6 5a 9b a2 5e e1 e8 cb da 7a 3e 97 bb a3 e9 7b ba 2d ea 5e 57 6b ea 9f 95 9b e2 a5 ee e6 f9 a6 f9 43 a4 53 7c 03 a7 13 3c 03 82 87 74 18 7f ff c4 00 29 10 00 02 02 02 02 00 05 04 03 01 01 00 00 00 00 00 01 02 03 04 00 05 11 12 13 14 15 21 41 10 22 23 31 06 20 32 33 40 ff da 00 08 01 01 00 01 05 02 e7 3d fe be ff 00 5d 84 26 c5 48 ed a2 da fa 1f 61 35 c8 63 13 dc f1 44 76 24 41 3b e4 88 3a b1 5c 57 e3 04 b8 3f 77 4a 4e 2b 0e b3 70 c2 35 3f 86 1f f8 fd 37 6a 0d 45 d8 da 85 61 d9 d8 c9 ae cb 22 c2 e9 e2 4d 02 79 6a d4 d6 4a cd aa 89 e4 f4 c8 dd 3d 22 0c 9f 5b 5a 14 eb ed 96 34 f1 cf 89 4d 15 16 a4 5c f9 54 c8 fd a3 bd 7a 3a 99 63 69 3c ab f2 ea 4b 04 Data Ascii: =T-IGz797>eX5NMkB$tfZ^z>{-^WkCS\|<t)!A"#1 23@=]&Ha5cDv$A;:\W?wJN+p5?7jEa"MyjJ="[Z4M\Tz:ci<K
2024-05-25 23:00:21 UTC	1741	IN	Data Raw: 6b ca bc 33 6a de 6d 37 c9 15 f5 59 4b 6b e6 c2 a9 19 df 85 f8 7e c7 56 9e 4e 69 76 37 21 14 b1 5d 3f 62 c6 3d 3f 97 f8 52 ac a1 94 e5 c5 db e4 f0 da 8a 54 b1 5d 05 c4 c3 ca 7a 6a 3c da eb 7f ec fc 6a 16 4a dc 85 a7 d3 c7 8d 87 a6 d3 76 7f 66 1a 6c b3 c7 89 b7 a5 ec fe cd 3e d3 bc a9 f5 f4 4a 2a 5c cd b4 6d a3 66 26 c4 4f c6 81 0a 6a 97 b6 08 ff c4 00 3a 10 00 01 03 03 01 06 04 02 07 08 03 01 00 00 00 00 01 00 02 11 03 12 21 31 04 10 13 22 41 51 20 32 61 71 33 91 14 23 52 81 92 a1 f0 05 24 30 42 62 72 b1 c1 40 43 82 d1 ff da 00 08 01 01 00 06 3f 02 f1 d4 a6 d3 04 ad 98 8a 06 88 d1 dd bb 6f 93 a2 c3 83 cf 66 a2 d7 53 65 be ab 84 d7 63 a7 a2 01 f3 3d 53 6e 75 df e3 76 16 9b ae da 36 83 41 c1 ef 68 70 ea d6 9d 3d d3 c5 3a b5 29 81 63 fb ff 00 d6 4a 07 8a f3 Data Ascii: k3jm7YKk~VNiv7!]?b=?RT]zj<jJvfl>J*\mf&Oj:!1"AQ 2aq3#R$0Bbr@C?ofSec=Snuv6Ahp=:)cJ
2024-05-25 23:00:21 UTC	4064	IN	Data Raw: cc c5 38 87 0b 6c ca e6 fd 6e 38 a1 2d 4c 24 0c 8e d9 51 c2 0b 14 ab 3d 0c 13 11 81 82 31 fe 7d cd c5 40 a2 eb ce 35 e1 af d4 20 1a 06 95 a9 50 c2 58 7f 2c a5 a6 ed 59 7e f8 85 e4 55 f2 e6 71 45 7c 6f b8 6c e5 5b 09 6e d7 09 af 34 42 be f0 a9 56 e3 23 51 a0 9a 91 76 9c a7 a1 f8 f5 f6 21 0f c1 0e 01 e1 3f f9 58 b8 c0 b0 d2 f3 98 0f be 69 6a c7 6a 14 d1 b6 50 bf 80 86 15 c9 84 c6 43 53 7c cb c1 d8 f3 1e 44 e9 51 85 5c bd ca b0 f2 1c 4a 86 00 06 13 94 27 e2 8a 80 0c 3e 3e 62 10 2f 92 04 5b a3 26 05 72 61 ce 05 50 5a c2 af df 4b de 21 d9 fd 0c 47 aa b0 b5 7c c6 f5 87 50 55 b9 19 58 27 83 ee 1b e1 7a 9a 75 eb 3f cc 33 58 6e 2f e8 0e 0c 26 88 1d 43 f0 e6 aa 2d 86 0d ff 00 54 ba fd a2 a9 96 ad c4 e0 c1 a1 4f 02 d1 ff 00 71 1f 02 a0 e6 74 b8 d3 bb 31 f4 8a 5f 25 Data Ascii: 8ln8-L$Q=1}@5 PX,Y~UqE\|ol[n4BV#Qv!?XijjPCS\|DQ\J'>>b/[&raPZK!G\|PUX'zu?3Xn/&C-TOqt1_%
2024-05-25 23:00:21 UTC	663	IN	Data Raw: 38 36 67 5a f0 94 ca 0a 6e 2d ec 9b b6 58 2f 55 28 3c 20 4a 98 27 0e 9d 47 f3 3f 44 59 8a 5e dc ae 18 99 3a f1 29 94 df 6e 66 6a 6f ea 3a c9 dd 04 85 ac 28 83 40 45 4e c7 38 f3 01 49 34 01 04 8f 4c 5a e7 11 73 ad 69 24 db 78 72 31 d4 ac ab 2c 21 40 34 18 1d f3 50 b1 18 04 56 05 71 81 ee 33 22 0e b2 c6 1d 33 cc b8 91 15 63 6b 75 2f d4 a4 c5 07 0a 46 59 ac 85 eb e6 56 3a 8a 35 66 0b 0a f1 97 32 d5 31 65 29 62 f2 73 e6 e0 9a 8d 09 60 33 d7 34 d3 f1 01 e7 f6 31 d1 0a be ae 07 eb 66 ae fd 06 72 1c 9c e1 94 34 06 35 25 b8 13 ea 3f 91 fa 21 50 b6 e5 7a 61 9c 84 25 05 f3 58 66 65 c0 4b 57 d3 ff 00 c2 c3 8c a1 54 30 97 8b 96 70 ac 13 76 d5 5c 62 04 60 dc b4 c7 2d f7 15 a0 19 eb 90 2c 0b b0 f8 8d a0 16 40 a5 04 ac 7f 31 f2 a0 ae 90 2d a3 39 a8 3a 30 ca ed b1 f1 8c Data Ascii: 86gZn-X/U(< J'G?DY^:)nfjo:(@EN8I4LZsi$xr1,!@4PVq3"3cku/FYV:5f21e)bs`341fr45%?!Pza%XfeKWT0pv\b`-,@1-9:0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.6	59229	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:21 UTC	612	OUT	GET /v/t39.30808-6/359471819_824263999069173_7453749825994799651_n.jpg?stp=c129.0.160.160a_dst-jpg_p160x160&_nc_cat=111&ccb=1-7&_nc_sid=5f2048&_nc_ohc=m0xl1AGKrJ4Q7kNvgFGjLtq&_nc_ht=scontent-hou1-1.xx&oh=00_AYBdRqkh0Ce7D3TU4A8aoPwuvJvYuH31SUopKTc2ALOyxQ&oe=66584790 HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:21 UTC	610	IN	HTTP/1.1 200 OK Last-Modified: Fri, 14 Jul 2023 04:38:47 GMT X-Needle-Checksum: 3388325105 thrift_fmhk: GBB/SrtCy6VDUhA2oZmZORbYFfDr4Z0EvFUAHCYEAAAA Content-Type: image/jpeg content-digest: adler32=543521583 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:21 GMT X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 9731
2024-05-25 23:00:21 UTC	1	IN	Data Raw: ff Data Ascii:
2024-05-25 23:00:21 UTC	9730	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 36 66 30 31 30 30 30 30 37 32 30 33 30 30 30 30 65 34 30 37 30 30 30 30 62 63 30 38 30 30 30 30 63 65 30 39 30 30 30 30 32 62 31 30 30 30 30 30 37 32 31 37 30 30 30 30 65 64 31 37 30 30 30 30 65 64 31 38 30 30 30 30 30 64 31 61 30 30 30 30 30 33 32 36 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a6f01000072030000e4070000bc080000ce0900002b10000072170000ed170000ed1800000d1a000003260000C%# , #&')*)-0-(0%()(C(((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.6	59227	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:21 UTC	613	OUT	GET /v/t39.30808-6/239592299_1943111962504323_4257252519711300084_n.png?stp=c102.0.160.160a_dst-jpg_p160x160&_nc_cat=100&ccb=1-7&_nc_sid=5f2048&_nc_ohc=E0uuFtNHuS0Q7kNvgHLW0c8&_nc_ht=scontent-hou1-1.xx&oh=00_AYAZEqOq3fKkG9GGcv4pGFMp4VVJNn8R0sRm10Vzux-RmA&oe=66582AE0 HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:21 UTC	610	IN	HTTP/1.1 200 OK Last-Modified: Wed, 08 Sep 2021 07:34:08 GMT X-Needle-Checksum: 583741870 thrift_fmhk: GBA04LblLZs78FOCVO+QrV6AFfDr4Z0EvFUAHCYEAAAA Content-Type: image/jpeg content-digest: adler32=1812808276 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:21 GMT X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 6391
2024-05-25 23:00:21 UTC	1	IN	Data Raw: ff Data Ascii:
2024-05-25 23:00:21 UTC	6390	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 37 31 30 31 30 30 30 30 30 65 30 33 30 30 30 30 64 32 30 35 30 30 30 30 38 30 30 36 30 30 30 30 33 30 30 38 30 30 30 30 38 61 30 63 30 30 30 30 36 36 31 30 30 30 30 30 66 33 31 30 30 30 30 30 61 33 31 31 30 30 30 30 35 38 31 33 30 30 30 30 66 37 31 38 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a710100000e030000d205000080060000300800008a0c000066100000f3100000a311000058130000f7180000C%# , #&')*)-0-(0%()(C(((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.6	59225	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:21 UTC	833	OUT	GET /v/t39.30808-1/241270460_1943112789170907_1967367247279035119_n.png?stp=cp0_dst-png_p40x40&_nc_cat=1&ccb=1-7&_nc_sid=5f2048&_nc_ohc=1XNCsKdZNVcQ7kNvgEm2iAq&_nc_ht=scontent-hou1-1.xx&oh=00_AYCkH4_Vs00q1M9XOPfSjLOlrgyBfl8DrVuZMc0S1B0DaQ&oe=66584D80 HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:21 UTC	735	IN	HTTP/1.1 200 OK Last-Modified: Wed, 08 Sep 2021 07:35:44 GMT X-Needle-Checksum: 783964446 thrift_fmhk: GBCOBZcUNWjSK2dx0xfxcpk0FfDr4Z0EvFUAHCYEAAAA Content-Type: image/png content-digest: adler32=2318258372 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:21 GMT X-FB-Edge-Debug: 8rbFHl7PW6wtI6oVPm32StR79T09PVNbbLbcPBrhf10WV3PZK2UWBwGwCPt-J8-C4DNbNwBUXvaMYLslRQzxVv1uxtj1sIVrF4U21N3hF1I X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=35, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 1948
2024-05-25 23:00:21 UTC	765	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 02 00 00 00 03 9c 2f 3a 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 07 56 49 44 41 54 58 85 ed 98 79 70 55 d5 1d c7 7f e7 9c fb f6 25 6f 49 80 b2 85 90 61 87 50 03 a2 ec 82 52 a2 a8 40 20 16 4a 0b 48 1d 84 b2 38 5a d4 19 28 c3 04 2a 8a 29 26 a8 23 50 51 ac 02 b6 50 08 4a c3 48 64 1d 46 30 50 0b 54 64 2b 4d 90 80 91 24 bc 25 ef dd f7 ee bb f7 9c f3 eb 1f 61 09 09 59 40 a7 fc d1 7e e7 fd f1 66 ee b9 e7 73 cf b9 df df ef 7e ef 25 95 df c7 e1 5e 88 de 13 ea ff c1 ff 4d 29 2d 1f 2a a5 44 89 84 12 4a eb 5f 2e 22 4a 21 09 21 84 12 42 c8 8f 03 ae 9d 94 29 cc e6 b0 5b 2c 60 18 90 88 eb b7 0c 00 34 9b cc 56 3b e5 3a 68 71 dd 30 0c 4a 28 a1 cd e0 9b 01 a3 44 66 62 6e af 2d 1a d6 ce 9c f8 e6 Data Ascii: PNGIHDR((/:sRGB,VIDATXypU%oIaPR@ JH8Z()&#PQPJHdF0PTd+M$%aY@~fs~%^M)-DJ_."J!!B)[,`4V;:hq0J(Dfbn-
2024-05-25 23:00:21 UTC	1183	IN	Data Raw: dd 02 96 52 3a 5c b6 c3 9f 1f 9e 96 fd 54 d7 0e dd 1f ce fe d9 94 d9 d3 3c c9 1e 42 18 0a ac b8 74 b9 ec 6c e9 d9 e3 a7 cb 4b 2f 5a ad 56 67 92 cb e9 72 3a 92 9c 4e b7 d3 ee 72 b8 3d 49 dd fa 76 37 5b cc c9 ad ac 42 42 c5 c5 e0 ee c2 5d 3b 36 6e 3f f0 d5 de a5 b9 2b 9e 7e e9 e9 70 40 65 8c dd 60 d5 6f 20 28 45 a0 f2 ea da bf fc 69 f8 e8 87 2a bf ab ba 70 a6 6c f0 a3 0f 6e 5f bf e3 f7 2f 2f e6 61 43 05 15 01 29 50 04 c4 6b 55 85 04 08 05 aa 83 fe e1 d6 cd c3 c6 0c 5e 34 6d 69 28 1a 1c 96 35 62 d4 84 ac 5f ce 9f f4 e5 fe 63 e5 67 bf d5 35 4e c9 2d b7 b5 61 1d 13 42 70 cf b6 e2 5d 5b 8b 8e ee 2f 09 f1 e0 47 3b 36 b7 4b 6b 37 ae ef 63 20 41 61 0a 00 00 02 90 5b 4e 30 a4 e1 f5 f8 fe fa cf 1d a5 a7 cb 26 3f 32 16 80 20 a0 cf e6 1b 30 62 e0 93 53 b2 87 8d 19 91 Data Ascii: R:\T<BtlK/ZVgr:Nr=Iv7[BB];6n?+~p@e`o (Ei*pln_//aC)PkU^4mi(5b_cg5N-aBp][/G;6Kk7c Aa[N0&?2 0bS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.6	59224	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:21 UTC	832	OUT	GET /v/t39.30808-6/443719952_995303895298515_5429863019799494605_n.jpg?stp=dst-jpg_p160x160&_nc_cat=101&ccb=1-7&_nc_sid=5f2048&_nc_ohc=QJOpQMOzaykQ7kNvgGY1MSj&_nc_ht=scontent-hou1-1.xx&oh=00_AYDz7mtrEpNBxVYv1ph3mZC7uPqbHrNYX7ZZdgtuo6ZlEA&oe=66582DAE HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:21 UTC	737	IN	HTTP/1.1 200 OK Last-Modified: Thu, 23 May 2024 02:00:07 GMT X-Needle-Checksum: 2732362015 thrift_fmhk: GBDsWf8iNvRxpdusn5HHj1I3FfDr4Z0EvFUAHCYEAAAA Content-Type: image/jpeg content-digest: adler32=1853060623 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:21 GMT X-FB-Edge-Debug: Rbzyz9tSxpNGAWQltwUE9d-92N6mgCxcetxy000aY9gYyZcAKnfWl_niQM--_6LntpyblfJ8U4pku8sOYA30Vzf3xx_se9M9Z-Jt0QwTtTU X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3412, tp=-1, tpl=-1, uplat=62, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 8884
2024-05-25 23:00:21 UTC	763	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 37 32 30 31 30 30 30 30 39 35 30 33 30 30 30 30 33 66 30 37 30 30 30 30 33 32 30 38 30 30 30 30 33 38 30 61 30 30 30 30 64 62 30 66 30 30 30 30 64 63 31 35 30 30 30 30 35 65 31 36 30 30 30 30 36 35 31 37 30 30 30 30 35 66 31 39 30 30 30 30 62 34 32 32 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a72010000950300003f07000032080000380a0000db0f0000dc1500005e160000651700005f190000b4220000C%# , #&')*)-0-(0%()(C((((((((((((((
2024-05-25 23:00:21 UTC	1500	IN	Data Raw: 33 91 6a 35 77 55 a7 b6 79 d1 de 64 c3 12 93 d9 70 cd 48 e3 88 da 45 24 67 c0 f4 2f a7 86 71 52 3c 12 eb cc cd 41 3a 79 f5 e5 93 34 f4 64 cc dc c0 c1 f2 81 b1 cc ae 2c a9 b0 a0 92 c2 aa 02 1c 49 e7 d2 a2 ae e3 88 98 cb 29 a4 f7 ac 27 67 79 e1 26 49 27 8f b1 25 28 5b 10 a6 87 d8 dd e8 a1 2c 01 b4 9d d2 b3 4d 17 9f d3 96 92 c3 bf ff c4 00 2a 10 00 02 02 01 03 03 03 05 01 00 03 00 00 00 00 00 02 03 01 04 00 05 11 12 10 13 14 06 20 21 15 31 32 33 35 22 23 24 40 ff da 00 08 01 01 00 01 05 02 cb 16 6b a8 80 b9 0e 14 64 7d 8b ed 8f d3 64 d9 66 93 50 3e c4 d7 6b b1 80 4b 3e 25 9b 4e d2 33 1d 06 73 55 ad 60 2f be 95 88 d3 99 47 51 23 f0 75 2d e2 8e a3 19 52 8d c1 74 fc 48 64 fe 25 42 b4 cd bd 3b e3 a6 8d 69 09 5d fb 28 2b 2c b8 01 87 74 62 3c e1 29 9f 99 c8 b6 be Data Ascii: 3j5wUydpHE$g/qR<A:y4d,I)'gy&I'%([,M* !1235"#$@kd}dfP>kK>%N3sU`/GQ#u-RtHd%B;i](+,tb<)
2024-05-25 23:00:21 UTC	1741	IN	Data Raw: 92 95 d5 64 e4 ec a2 c3 e5 93 30 04 69 a2 c3 aa 03 9b c8 b6 ad 40 5a 42 40 f4 fc ab 9e eb c9 b0 eb 94 6a a7 c3 4e 7f 87 b2 96 8a 48 7a 9c a2 89 d2 bb 23 37 52 c2 f8 8d 9e 2c a9 67 75 29 26 3e eb f5 6a 81 d8 2c 36 a0 d4 4c 5c ef 44 3e 73 f6 fc a7 30 9e eb cd b4 49 ca be a9 f2 58 ae 65 f4 23 45 87 38 44 73 11 ba 9a 4f 31 d2 fd bd 15 b8 02 46 ca 2a 6a 89 7a b6 09 d8 63 84 45 c1 e4 95 1c 6f 95 dd 3b a7 35 c2 c1 da a7 46 fc 87 26 e9 93 3a 03 96 40 bc e4 51 b4 c8 db 2c de e8 1b a8 dd 95 c0 a8 64 69 68 8d bb a8 9a d8 1a 5a d4 e6 b6 11 a0 54 d2 e6 06 fc 2b 22 e6 c4 7d b8 4b 83 c7 97 46 d9 3f 0c 98 7c ba a7 02 c3 94 ee b0 d9 23 c9 99 db 85 e7 23 95 f9 1b aa 78 ce 35 50 c7 66 d8 22 2c 9c 6c aa 29 e2 0c 2e 02 c8 9b 2e 92 a4 a2 82 4d d4 b8 4c 12 36 c0 26 61 af a4 9a Data Ascii: d0i@ZB@jNHz#7R,gu)&>j,6L\D>s0IXe#E8DsO1F*jzcEo;5F&:@Q,dihZT+"}KF?\|##x5Pf",l)..ML6&a
2024-05-25 23:00:21 UTC	4064	IN	Data Raw: 24 1e ea 9d 4a 83 71 a7 92 dd 39 72 d7 ff c4 00 28 10 01 00 02 02 01 03 03 04 03 01 01 00 00 00 00 00 01 00 11 21 31 41 51 61 71 10 81 b1 20 91 a1 f0 c1 d1 e1 f1 40 ff da 00 08 01 01 00 01 3f 21 8a da 6a 9b 01 88 12 c4 e6 69 ec ce 68 ee 05 fa 1d 43 cb c4 c0 c1 e5 35 e7 e9 b9 56 d9 40 3d d9 ce 90 17 7f 13 35 65 dd 5a 24 15 8e 6b 11 2f ba 15 12 9a 70 cb 30 ee 58 05 c6 66 f7 62 76 df 4f 12 cc 08 4d 23 38 2b 45 bf 89 50 8f c8 33 fc 1e 57 1b 56 aa 60 b8 33 ae b7 de 53 e3 af 0d 9b 97 9e e9 f3 2b 8c ae fe c3 6b d9 5c c1 0d 98 6e cc f1 11 29 17 a9 20 0c db d9 37 7e 22 53 4e 1f 40 e7 55 ac 1c 43 3e 36 04 18 c6 bc b2 8f 12 5d f0 9a 69 93 32 d9 1c 35 28 b2 8e 38 5c 37 9c 95 68 d9 63 a5 b1 28 8a 9b 57 9f 40 b0 a8 82 c5 d5 30 c2 91 17 cf 2d 12 dc 52 4e fc 10 53 91 38 Data Ascii: $Jq9r(!1AQaq @?!jihC5V@=5eZ$k/p0XfbvOM#8+EP3WV`3S+k\n) 7~"SN@UC>6]i25(8\7hc(W@0-RNS8
2024-05-25 23:00:21 UTC	816	IN	Data Raw: 3d b4 fe 31 00 ae ca 88 47 ef 0c f2 a6 c6 6a b3 b4 3c 23 d3 11 65 d2 8a 1f 90 f0 9e f0 24 ba 7b 36 7c 4f e1 3e b0 e1 7e 0c 7a 22 ce 59 9d d6 67 80 7a fa 01 00 42 23 d4 ea 62 6b fa 11 97 42 3c 4d e7 09 8a b8 af 8a 7b d3 c4 52 06 2b ea dc 71 ee 0e f4 8d 83 ca 64 e2 50 bb 21 0e e4 6a 9b de f0 bf 0b 0e a3 fa c3 e1 c7 2b 6a f6 c4 41 fb 63 7f 1c 27 27 55 fe ba e1 6f 3f bd 49 fc 19 67 54 96 fc e1 a0 6f 6c e3 03 ac 78 d3 bf e3 14 3a 70 f2 04 5f 95 5f 5f 51 f5 3d ff 00 76 5b 7c 00 7f 03 d9 af 58 44 24 d8 8d 1c 50 76 ef b6 1f 45 e3 8d b5 1e c7 dc d3 d6 51 f7 27 00 50 57 ab f9 2c 39 c1 0a b4 23 c1 0d c5 68 bb 7d 44 ec 01 15 68 01 41 b2 bd 39 98 db 7f 96 f3 9e 0e ee fd 79 c1 9c b3 4a 3b 22 ec 95 7c dc bc 4c 59 63 7f 7b c1 d7 f4 a7 db 02 53 78 0e 0f 72 9a c6 4d 68 31 Data Ascii: =1Gj<#e${6\|O>~z"YgzB#bkB<M{R+qdP!j+jAc''Uo?IgTolx:p___Q=v[\|XD$PvEQ'PW,9#h}DhA9yJ;"\|LYc{SxrMh1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.6	59230	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:21 UTC	832	OUT	GET /v/t39.30808-6/443818919_996576128504625_3343915979056056184_n.jpg?stp=dst-jpg_p600x600&_nc_cat=101&ccb=1-7&_nc_sid=5f2048&_nc_ohc=nO7Vfy4wE0cQ7kNvgEAcCQP&_nc_ht=scontent-hou1-1.xx&oh=00_AYDru1sgIffZ1rgBMKyVshHvglkMn8HpGaDMN24nEMeB7g&oe=665830C5 HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:22 UTC	736	IN	HTTP/1.1 200 OK Last-Modified: Sat, 25 May 2024 06:00:13 GMT X-Needle-Checksum: 64459615 thrift_fmhk: GBCtL7hGTrtz/wsD7JOgzUjvFfDr4Z0EvFUAHCYEAAAA Content-Type: image/jpeg content-digest: adler32=2266286513 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:21 GMT X-FB-Edge-Debug: uS7FqthSlraJSw1LJDg7dJ5dzotx-rmDt3J2JOVu6_ycQ8foyOJFI9SGX076qevxUFgsNG2uXmmqkSKkGKwdffeETdL-nl_0sxNFuF4xTZE X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=27, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 49977
2024-05-25 23:00:22 UTC	764	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 37 32 30 31 30 30 30 30 35 31 31 32 30 30 30 30 61 37 32 61 30 30 30 30 34 38 32 64 30 30 30 30 36 32 33 62 30 30 30 30 35 66 35 39 30 30 30 30 66 33 37 39 30 30 30 30 36 31 37 66 30 30 30 30 65 33 38 32 30 30 30 30 30 62 39 30 30 30 30 30 33 39 63 33 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a7201000051120000a72a0000482d0000623b00005f590000f3790000617f0000e38200000b90000039c30000C%# , #&')*)-0-(0%()(C((((((((((((((
2024-05-25 23:00:22 UTC	15549	IN	Data Raw: c5 2b e7 17 fe 64 6c bc 14 ad 11 bd 75 2b be af 3b b8 71 58 74 73 fc df 55 c1 63 cf 82 56 88 ea b5 ea 07 a1 d7 db bb 1e 67 24 95 27 ef 4a c1 31 c9 c3 cc d5 3d e7 57 cd 9a b6 d4 2e 14 55 6d f5 d9 ab 29 56 7e 59 bd 18 43 4c 52 21 0c 3d e0 00 00 00 00 00 00 00 00 03 2c 73 3e e5 96 dc da b3 dd b7 27 36 5d 9b 71 70 67 21 b7 19 8c ca 57 6f 3a 1f 29 bd 9c e8 2c ac 1b 39 95 ec ac 70 95 69 cb a7 49 83 b6 26 5d 2d 12 27 2b 92 52 d3 cc c7 aa 8e 75 8a a1 47 6b b2 73 99 57 73 67 e9 46 e5 a2 85 cd 32 ab 15 38 ef 58 69 72 93 7c 68 fa 95 8f c1 a7 17 37 6c 6f c6 c9 f7 86 6b 18 d9 75 f4 c5 73 1b 06 be 94 0e 13 9a ba 10 d8 cb ea dd 17 84 96 bd e2 3f 1e dd 5a b9 31 e9 d5 ab 4f cc b1 d0 00 00 00 00 0d 9a f3 86 dd ba b6 e4 db b3 56 dc 5b 76 ea db ce d9 b7 56 de 69 db b3 56 de Data Ascii: +dlu+;qXtsUcVg$'J1=W.Um)V~YCLR!=,s>'6]qpg!Wo:),9piI&]-'+RuGksWsgF28Xir\|h7lokus?Z1OV[vViV
2024-05-25 23:00:22 UTC	1500	IN	Data Raw: b5 6b 7f 0a d6 7c 96 b3 e4 b5 9f 25 a7 f2 5a 7f 25 a7 f2 5a 5f 25 a4 b4 95 ea f5 7f b0 21 e4 dd 4c e6 9e c8 a6 6e 16 84 21 c1 74 a4 2d 51 62 47 74 e9 2a 50 26 38 35 53 84 cc 8d b3 bd 42 30 5f 20 e4 22 d4 72 7b ec 51 dc 6c 88 c1 78 58 49 73 c9 2d 64 c2 89 95 7d 52 01 45 73 6c 21 a8 e4 9e e7 4b 92 ff 00 51 56 4e 5c 13 9e eb 82 94 09 81 b9 aa 8c 2a d1 b6 77 84 5e 6e 02 6b 58 7a 28 6f de 2d 51 00 88 64 1c 53 62 ec 94 ca 71 6c 42 06 c0 98 21 bc 81 44 d4 30 c7 ca 6c 05 3e 23 6c 7b 5a 67 cd 3c 45 7d 40 35 64 f0 6b ae b2 f2 86 5a 72 3b 1c 9a f6 dc 7d 9d 0b 91 50 62 7a a5 a0 a8 f1 dd b1 47 97 be 14 5d f3 0a 16 f9 2c 0e 7e ea 19 c3 21 2b b8 2c 21 8c 6d 2f 0d 99 e2 b0 cf 22 8d c8 28 de 52 9d fc 2c e7 b5 3b f8 99 d3 2b 26 9f 2e 0a 34 b4 97 a6 86 c0 65 eb 31 34 7a d1 Data Ascii: k\|%Z%Z_%!Ln!t-QbGtP&85SB0_ "r{QlxXIs-d}REsl!KQVN\w^nkXz(o-QdSbqlB!D0l>#l{Zg<E}@5dkZr;}PbzG],~!+,!m/"(R,;+&.4e14z
2024-05-25 23:00:22 UTC	14884	IN	Data Raw: 25 aa 67 54 22 8b c3 a6 b5 4c ea 9d 18 42 6c dc da 4d ab 54 ce a8 43 10 da 64 99 53 43 69 dc a9 b1 ed dc e5 26 35 8c e2 89 71 99 38 99 0c 43 69 a4 4a f5 0e 6c 68 a1 d5 2d 53 11 8c d3 4b e7 3b 16 73 18 55 26 4d 66 e6 a2 d6 b1 a6 66 76 a6 b5 cc 68 93 aa b1 6a 99 d5 6a 99 d5 49 ad 63 4e f5 10 d2 1e 5f 7c d3 d8 61 b4 54 25 7a 73 9a d0 e9 89 5a 88 c9 36 d1 2b d5 02 4e 66 e2 85 72 0d 17 01 ff 00 d3 09 31 a5 c7 82 91 b0 f8 b3 61 3f a2 b4 34 73 2b 4a 1a d6 31 59 41 f8 ad 51 f8 2c e8 6f 1f 0c 79 ad 71 e4 16 a8 8e 76 2c f7 b1 bf 35 9f 11 c7 95 8b d1 bd cd e7 6a b1 b5 8f e5 52 70 91 e3 e1 94 31 f1 d8 b3 c6 51 dc 56 a5 9d 16 ab e6 b4 5c 3f a9 66 39 e0 f5 56 b6 a6 ef 6f d6 f3 21 3c fc 14 e9 1c aa 59 f0 9c 3e 18 bd 1b 0b 96 7c 46 b7 80 b5 67 45 71 f8 2b 6b 3f 15 aa 1f Data Ascii: %gT"LBlMTCdSCi&5q8CiJlh-SK;sU&MffvhjjIcN_\|aT%zsZ6+Nfr1a?4s+J1YAQ,oyqv,5jRp1QV\?f9Vo!<Y>\|FgEq+k?
2024-05-25 23:00:22 UTC	1500	IN	Data Raw: 39 23 33 da 44 20 90 4a a2 38 35 04 bc be c5 30 26 b9 84 1b 85 65 7d 10 84 21 08 2e 47 91 39 c8 dd 13 9c b6 ed b7 8e 87 e5 e9 90 9d c4 ef 09 56 34 ac a1 5d 0f 07 ec 67 b6 e8 af 41 35 0d 5a b8 5c 26 69 0d b0 62 42 a4 34 d6 1f 5b 72 44 95 13 58 c4 ec cc 35 3a 20 23 5f b1 a3 ba f8 63 af 4c 78 c8 4c 59 fb 09 fb 97 82 be 7e c6 94 4b c6 36 8b ee 24 fd bf 66 41 ec aa 34 2e 1d a2 18 0d 9e 66 0f 9e b6 52 36 20 cb c0 d1 b3 f2 69 7e 0c b9 37 e8 82 ac c9 41 f0 2e 07 46 26 f0 a2 b1 92 72 a4 6d 92 15 d2 30 8c 6a 68 4f 02 c9 ee 42 41 a8 e7 10 40 b8 93 47 90 8b 71 db 5e e1 34 fa 30 41 ab 20 60 d1 70 25 50 32 6b 03 71 4c c6 cd ad 20 8c 27 69 8c 6e f3 21 74 ec ff 00 d8 14 e9 6a bf 1f ef dc 54 d1 28 6c 84 6c e1 b4 1b 0c 18 31 dc af 9d 42 f9 12 d5 88 4a e2 db f8 1b ed 80 cd Data Ascii: 9#3D J850&e}!.G9V4]gA5Z\&ibB4[rDX5: #_cLxLY~K6$fA4.fR6 i~7A.F&rm0jhOBA@Gq^40A `p%P2kqL 'in!tjT(ll1BJ
2024-05-25 23:00:22 UTC	14884	IN	Data Raw: de 01 71 ae b6 0d 6b 98 4a b4 36 21 54 02 5d 1d 6c de 5e d9 48 fc 8b 18 ba ab ce 2f 8c 71 86 04 b0 c4 a4 36 e3 5a d3 95 40 08 22 3a a1 b8 df b3 ad 5c 18 69 a4 37 17 8f 48 7f 39 34 7e 69 71 4d 48 61 b4 e7 1d 45 f4 62 a1 b6 5e 2d c4 22 ca 4b e4 60 aa 17 a6 6d d2 e5 f9 6b ba c3 ef 35 4f af 9c cd c3 ae a6 29 ec 22 d4 db 75 31 aa 19 c5 43 63 1c 51 55 ed f1 47 bc 6b 77 ae b2 1d 96 97 ac 96 0a ec 1d 74 3a 45 03 5e eb 7d a0 96 44 d7 16 0b 5e 18 b6 ca ab 5d 64 5a 59 9b 97 f3 0e 80 5a 36 5f 2c c7 93 29 b2 fe 4c d1 be de 72 e2 99 39 f7 99 1f a5 8e b3 51 86 89 6c a0 98 d3 6c 0b f5 7a a6 14 90 e2 cf ae be 84 2b 80 a6 79 ab e1 6b ed 92 8f 2a 20 de 42 9a eb c6 2d 55 5d de 57 76 f8 32 64 67 2c 6d 9e 7f 10 c5 bf ea 0b f7 85 ac 80 7d 07 cc 65 9c 5f c3 bb d6 62 67 7b 6f e2 Data Ascii: qkJ6!T]l^H/q6Z@":\i7H94~iqMHaEb^-"K`mk5O)"u1CcQUGkwt:E^}D^]dZYZ6_,)Lr9Qllz+yk* B-U]Wv2dg,m}e_bg{o
2024-05-25 23:00:22 UTC	896	IN	Data Raw: 12 38 b0 dd 90 63 5d 5a 44 0d 66 02 3c 2d dd fa cc 65 dd 2b 01 54 8e b0 b1 d2 c5 63 90 5a 8d 20 60 ad 82 ab 4b ad 1e 22 d7 dd 15 5d d4 97 1d 06 cb 6b 8e de f1 61 95 85 8e 41 6a 1e 3c 35 1a 38 51 cf 8c 5a a6 da 1d 5e 55 cb e3 37 e6 9a 0c 78 a1 68 b5 c8 2b 50 c1 8b 66 0d b5 2c cd 4c 8f 47 65 2a b4 ba dd 80 9f 51 12 ad eb 6f 57 49 5e 30 0a 16 37 bb d8 df 68 1e c7 17 03 37 be 6e f7 b9 51 9a e9 2a ec b5 a9 93 80 30 a2 85 53 63 87 38 9b 7e dc d9 ac 9d 66 c0 bc 8a c5 dd 19 c7 84 2b 3e 0b 6f 85 bb 35 77 99 08 5d 8d 86 c6 f5 cb 61 af f2 3a 4f 91 d1 f7 f5 8b 79 05 ed 32 c6 d9 8f 12 2c 6b 1f 08 f4 6d 69 a7 31 b2 66 eb 7a 62 ee 55 0e eb d6 6f 31 59 ff 00 b3 18 9c 97 45 f2 78 47 cc 41 cf a2 64 b8 46 ac e2 68 09 bc 97 dd b8 49 ce ee b0 cf b9 8b cc 3b 32 c8 dd 16 5a c9 Data Ascii: 8c]ZDf<-e+TcZ `K"]kaAj<58QZ^U7xh+Pf,LGeQoWI^07h7nQ0Sc8~f+>o5w]a:Oy2,kmi1fzbUo1YExGAdFhI;2Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.6	59232	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:21 UTC	611	OUT	GET /rsrc.php/v3/yw/r/8iuTX4LlGZO.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:22 UTC	1890	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: VHXGGSEP7wYtCIHDUy9UhQ== Expires: Sat, 17 May 2025 02:08:50 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} x-fb-optimizer: 0 X-FB-Debug: kciIOVKDAvYr4mKYG0M3qsE43xx1nNpb8q6kYsoHPsllnPU2etlmEwzhlmrgxjpAfzGQlo7/wwJfsPlMBe5RPQ== Date: Sat, 25 May 2024 23:00:22 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3412, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 652
2024-05-25 23:00:22 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-05-25 23:00:22 UTC	651	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 24 00 00 00 24 08 03 00 00 00 d6 de 68 aa 00 00 00 db 50 4c 54 45 4c 69 71 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 Data Ascii: PNGIHDR$$hPLTELiq_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.6	59233	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:21 UTC	607	OUT	GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19868.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7373075910951068210&__req=a&__rev=1013770602&__s=%3A%3Afjuzaa&__spin_b=trunk&__spin_r=1013770602&__spin_t=1716678010&__user=0&dpr=1&jazoest=2936&lsd=AVrj9UP_w8I&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:22 UTC	2004	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-25 23:00:22 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.6	59231	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:21 UTC	611	OUT	GET /rsrc.php/v3/ys/r/ASlpPgTKW7L.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:22 UTC	1840	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: hRFd9ZBuLsndBissDJ+EHQ== Expires: Wed, 14 May 2025 17:31:45 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: FiWJJrzusMKwbA+4ftT1fSl5zMV/2eYSMQyWKj6D3O/+jNdO1kzw64/GnbczaJ2vpjTsQoMK2XR+XX3XBId1IQ== Date: Sat, 25 May 2024 23:00:22 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=14, mss=1392, tbw=3412, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 8809
2024-05-25 23:00:22 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-05-25 23:00:22 UTC	8808	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 19 00 00 05 83 08 03 00 00 00 1d f2 6f d3 00 00 02 fd 50 4c 54 45 47 70 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0b 0b 0d 00 00 00 02 02 02 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 62 68 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRoPLTEGpLbhp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.6	59111	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:21 UTC	632	OUT	GET /hads-ak-prn2/1487645_6012475414660_1439393861_n.png HTTP/1.1 Host: scontent.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:22 UTC	416	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Fri, 21 Dec 2012 00:00:01 GMT Expires: Sat, 25 May 2024 23:00:22 GMT cross-origin-resource-policy: cross-origin Server: proxygen-bolt Date: Sat, 25 May 2024 23:00:22 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=14, mss=1392, tbw=3412, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 79
2024-05-25 23:00:22 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-05-25 23:00:22 UTC	78	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0a 00 00 00 0a 08 02 00 00 00 02 50 58 ea 00 00 00 16 49 44 41 54 18 57 63 fc cf 80 0f 30 61 0a 21 83 91 29 cd c0 00 00 41 2c 01 13 80 ff 5a 6c 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRPXIDATWc0a!)A,ZlIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.6	59234	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:22 UTC	368	OUT	GET /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:22 UTC	930	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-25 23:00:22 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-25 23:00:22 UTC	1662	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-25 23:00:22 UTC	2554	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 63 6f 6e 66 69 67 76 65 72 73 69 6f 6e 3d 22 41 63 4a 2d 6c 68 52 72 52 6b 53 56 48 47 55 74 64 65 6f 4e 67 49 64 6d 41 54 38 4d 68 65 5a 4d 37 71 68 4c 4d 5f 73 7a 56 44 54 6b 6c 42 68 54 78 73 62 36 6c 48 31 4b 79 6f 4a 4c 49 67 22 3b 20 65 5f 63 6c 69 65 6e 74 61 64 64 72 3d 22 41 63 4a 32 67 59 6e 71 47 54 67 78 6a 76 6d 36 77 39 63 6a 79 48 31 75 62 39 70 33 73 54 44 59 35 64 53 36 4e 38 6e 6a 57 4e 4e 6a 74 42 73 33 4f 51 66 63 31 53 4f 42 61 51 75 61 62 4d 33 5a 63 4e 42 43 32 43 59 4e 4b 44 41 6c 67 4b 77 68 6b 7a 46 61 6e 6f 41 73 4b 75 53 4b 4f 48 67 39 4a 35 49 64 71 64 57 68 56 31 32 61 74 4c 34 49 52 67 22 3b 20 65 5f 66 62 5f Data Ascii: Proxy-Status: http_request_error; e_fb_configversion="AcJ-lhRrRkSVHGUtdeoNgIdmAT8MheZM7qhLM_szVDTklBhTxsb6lH1KyoJLIg"; e_clientaddr="AcJ2gYnqGTgxjvm6w9cjyH1ub9p3sTDY5dS6N8njWNNjtBs3OQfc1SOBaQuabM3ZcNBC2CYNKDAlgKwhkzFanoAsKuSKOHg9J5IdqdWhV12atL4IRg"; e_fb_
2024-05-25 23:00:22 UTC	165	IN	Data Raw: 58 2d 46 42 2d 43 6f 6e 6e 65 63 74 69 6f 6e 2d 51 75 61 6c 69 74 79 3a 20 47 4f 4f 44 3b 20 71 3d 30 2e 37 2c 20 72 74 74 3d 38 39 2c 20 72 74 78 3d 30 2c 20 63 3d 31 30 2c 20 6d 73 73 3d 31 33 39 32 2c 20 74 62 77 3d 33 34 30 34 2c 20 74 70 3d 2d 31 2c 20 74 70 6c 3d 2d 31 2c 20 75 70 6c 61 74 3d 31 35 33 2c 20 75 6c 6c 61 74 3d 30 0d 0a 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=153, ullat=0Alt-Svc: h3=":443"; ma=86400Connection: close
2024-05-25 23:00:22 UTC	1335	IN	Data Raw: 31 62 34 66 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 31 4b 71 4a 6f 49 33 43 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d Data Ascii: 1b4fe<!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="1KqJoI3C">function envFlush(a){function b(b){for(var c in a)b[c]=
2024-05-25 23:00:22 UTC	1500	IN	Data Raw: 6f 6f 6b 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 6d 65 64 69 61 3d 22 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 34 30 70 78 29 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 3f 6c 6f 63 61 6c 65 32 3d 65 6e 5f 47 42 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 6d 65 64 69 61 3d 22 68 61 6e 64 68 65 6c 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 3f 6c 6f 63 61 6c 65 32 Data Ascii: ook" /><link rel="alternate" media="only screen and (max-width: 640px)" href="https://www.facebook.com/ajax/bulk-route-definitions/?locale2=en_GB" /><link rel="alternate" media="handheld" href="https://www.facebook.com/ajax/bulk-route-definitions/?locale2
2024-05-25 23:00:22 UTC	1500	IN	Data Raw: 38 6c 67 35 4b 7a 22 20 64 61 74 61 2d 62 6f 6f 74 6c 6f 61 64 65 72 2d 68 61 73 68 3d 22 52 45 42 76 6c 59 5a 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 75 2f 6c 2f 30 2c 63 72 6f 73 73 2f 65 37 70 59 43 67 72 71 45 74 68 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 20 64 61 74 61 2d 62 6f 6f 74 6c 6f 61 64 65 72 2d 68 61 73 68 3d 22 31 2b 48 31 6c 46 42 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 2f Data Ascii: 8lg5Kz" data-bootloader-hash="REBvlYZ" crossorigin="anonymous" /><link type="text/css" rel="stylesheet" href="https://static.xx.fbcdn.net/rsrc.php/v3/yu/l/0,cross/e7pYCgrqEth.css?_nc_x=Ij3Wp8lg5Kz" data-bootloader-hash="1+H1lFB" crossorigin="anonymous" /
2024-05-25 23:00:22 UTC	1500	IN	Data Raw: 63 72 3a 36 36 34 30 22 2c 5b 22 50 72 6f 6d 69 73 65 49 6d 70 6c 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 50 72 6f 6d 69 73 65 49 6d 70 6c 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 33 38 36 22 2c 5b 22 63 6c 65 61 72 54 69 6d 65 6f 75 74 57 57 57 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 63 6c 65 61 72 54 69 6d 65 6f 75 74 57 57 57 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 33 39 30 22 2c 5b 22 73 65 74 54 69 6d 65 6f 75 74 57 57 57 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 73 65 74 54 69 6d 65 6f 75 74 57 57 57 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 38 39 35 38 22 2c 5b 22 46 42 4a 53 4f 4e 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 46 42 4a 53 4f 4e 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 30 37 38 22 2c Data Ascii: cr:6640",["PromiseImpl"],{"__rc":["PromiseImpl",null]},-1],["cr:7386",["clearTimeoutWWW"],{"__rc":["clearTimeoutWWW",null]},-1],["cr:7390",["setTimeoutWWW"],{"__rc":["setTimeoutWWW",null]},-1],["cr:8958",["FBJSON"],{"__rc":["FBJSON",null]},-1],["cr:1078",
2024-05-25 23:00:22 UTC	1500	IN	Data Raw: 6e 6f 43 6f 6f 6b 69 65 73 22 3a 66 61 6c 73 65 2c 22 73 68 6f 75 6c 64 53 68 6f 77 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 22 3a 66 61 6c 73 65 2c 22 73 68 6f 75 6c 64 57 61 69 74 46 6f 72 44 65 66 65 72 72 65 64 44 61 74 72 43 6f 6f 6b 69 65 22 3a 66 61 6c 73 65 7d 2c 34 33 32 38 5d 2c 5b 22 43 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 49 46 72 61 6d 65 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 63 6f 6e 73 65 6e 74 5f 70 61 72 61 6d 22 3a 22 46 51 41 53 45 68 49 53 41 41 3d 3d 2e 41 52 59 75 4f 34 78 57 66 65 45 77 43 4a 43 5a 55 68 6d 46 71 2d 71 65 76 68 2d 41 6b 6e 61 69 75 53 76 54 64 4f 72 66 4d 57 52 6f 69 62 34 6a 22 2c 22 61 6c 6c 6f 77 6c 69 73 74 65 64 5f 69 66 72 61 6d 65 73 22 3a 5b 5d 2c 22 69 73 5f 63 68 65 63 6b 70 6f 69 6e 74 65 64 22 3a 66 61 6c 73 Data Ascii: noCookies":false,"shouldShowCookieBanner":false,"shouldWaitForDeferredDatrCookie":false},4328],["CookieConsentIFrameConfig",[],{"consent_param":"FQASEhISAA==.ARYuO4xWfeEwCJCZUhmFq-qevh-AknaiuSvTdOrfMWRoib4j","allowlisted_iframes":[],"is_checkpointed":fals
2024-05-25 23:00:22 UTC	1500	IN	Data Raw: 7b 22 74 22 3a 36 30 34 38 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 6d 5f 6c 73 22 3a 7b 22 74 22 3a 33 34 35 36 30 30 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 6d 5f 70 69 78 65 6c 5f 72 61 74 69 6f 22 3a 7b 22 74 22 3a 36 30 34 38 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 6e 6f 73 63 72 69 70 74 22 3a 7b 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 70 72 65 73 65 6e 63 65 22 3a 7b 22 74 22 3a 32 35 39 32 30 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 73 66 61 75 22 3a 7b 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 75 73 69 64 61 22 3a 7b 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 76 70 64 22 3a 7b 22 74 22 3a 35 31 38 34 30 30 30 2c 22 73 22 3a 22 4c 61 78 22 7d 2c 22 77 64 22 3a 7b 22 74 22 3a 36 30 34 38 30 30 2c 22 73 22 3a 22 4c 61 78 22 7d Data Ascii: {"t":604800,"s":"None"},"m_ls":{"t":34560000,"s":"None"},"m_pixel_ratio":{"t":604800,"s":"None"},"noscript":{"s":"None"},"presence":{"t":2592000,"s":"None"},"sfau":{"s":"None"},"usida":{"s":"None"},"vpd":{"t":5184000,"s":"Lax"},"wd":{"t":604800,"s":"Lax"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.6	59235	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:22 UTC	831	OUT	GET /v/t39.30808-6/444202748_996576171837954_250908605759715264_n.jpg?stp=dst-jpg_p600x600&_nc_cat=102&ccb=1-7&_nc_sid=5f2048&_nc_ohc=OAqihbnrPUoQ7kNvgFnryPS&_nc_ht=scontent-hou1-1.xx&oh=00_AYDZBL9LFz-Cn1CR3xmu1gq6howv3CgU2z-SL4ry84scOg&oe=66584BAB HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:22 UTC	737	IN	HTTP/1.1 200 OK Last-Modified: Sat, 25 May 2024 06:00:16 GMT X-Needle-Checksum: 1966316871 thrift_fmhk: GBDVht0hE5taSrgpbsAHDLzUFfDr4Z0EvFUAHCYEAAAA Content-Type: image/jpeg content-digest: adler32=815839089 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:22 GMT X-FB-Edge-Debug: 9n79oCzWxNvfypjPb0TY-3FD6L3mUILvp2V7T4kCw6WteFLioN70bDmvS7-bJVfyLlpneXjGMzXkeFQUral6HKjfQIHv8GhKCwpYO_BdueQ X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=11, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 52034
2024-05-25 23:00:22 UTC	763	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 37 32 30 31 30 30 30 30 65 30 31 32 30 30 30 30 35 35 32 63 30 30 30 30 33 61 32 66 30 30 30 30 37 35 33 65 30 30 30 30 35 31 35 64 30 30 30 30 39 39 37 65 30 30 30 30 30 33 38 34 30 30 30 30 62 37 38 37 30 30 30 30 38 61 39 36 30 30 30 30 34 32 63 62 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a72010000e0120000552c00003a2f0000753e0000515d0000997e000003840000b78700008a96000042cb0000C%# , #&')*)-0-(0%()(C((((((((((((((
2024-05-25 23:00:22 UTC	15558	IN	Data Raw: fa b7 ca 3e 93 67 24 c7 cd ef 5c ce 29 ba d4 c6 68 a9 8a 2d db 67 cf ee 3c 33 ba b0 df ae b5 cc b0 ed 86 98 87 1d 66 e5 09 bb bb b3 df 39 98 75 d3 74 74 ad 33 11 bc 9c cd 36 2f 9a 5f 77 63 d9 48 b6 e6 ab dd ab 13 36 52 ed 11 f3 9a b2 8e ed a7 51 08 3d e0 00 00 00 00 00 00 00 00 03 2c 73 3d cf dd 99 b0 cf 6e dc 9a 32 ea d9 8b 93 2e ed b8 4c 7e 52 5b 79 d1 79 4b 6d e6 43 e5 35 b7 99 07 94 f4 2d 27 cf 71 59 9b 28 c2 45 1d 2a 6b 46 49 d8 72 ee ab 62 7e 93 8a 5d 9d 87 9d 5b 47 bd 34 82 c5 40 e5 4e a5 aa 92 95 4b d3 65 36 e6 68 e9 76 c5 62 df 8e 8e 5e b8 ef c2 73 6f 14 d7 30 b0 eb e8 88 0c 27 b5 75 21 31 98 d7 d0 88 c2 57 5f 42 33 09 1d 5b c7 0e 1d ba b6 72 63 d1 ab 56 9f 33 c3 40 00 00 00 00 33 c3 38 6d db ab 66 4d bb 75 6d c5 b7 66 bd 9c f3 b7 6e ad 9c cd bb Data Ascii: >g$\)h-g<3f9utt36/_wcH6RQ=,s=n2.L~R[yyKmC5-'qY(E*kFIrb~][G4@NKe6hvb^so0'u!1W_B3[rcV3@38mfMumfn
2024-05-25 23:00:22 UTC	1500	IN	Data Raw: 11 6b c1 0e 1c 0e 7a 88 64 a7 82 a3 81 07 bd 52 36 97 1e e5 b9 7f 45 65 a2 ae e4 b7 2f e8 ac c8 d2 d7 72 2a ac 89 e4 78 2d cb fa 22 e7 c4 e0 d1 c5 51 8d 2e 3d cb 73 27 45 b9 93 a2 21 c2 84 2a b6 17 91 e0 b7 2f e8 ad 49 1b 9a de 67 35 5b 13 c8 f0 5e 91 8e 6f 88 40 0b c9 5b 99 3a 2d cc 9d 15 64 8d ed 1d e1 52 36 97 1e e5 b9 93 a6 6a 88 5f d1 6e 5f d1 03 24 6e 6d 79 fe d1 0f 86 6c 54 b9 83 9c 2b 29 c4 f2 cd 66 41 e7 c9 4b 1b b1 6b 73 3e 43 83 33 4d 3b ef 63 4d c1 5e 40 5b 6d ea a5 a3 9a 6e e6 98 1b 89 15 27 9a bc 80 b6 9b d5 65 13 3a 86 8f a3 56 b1 03 c5 6d b7 aa 34 70 3a c3 8a 13 48 2a e3 b3 dc ab 21 a0 ad 11 6b c0 2d e4 54 2d 1b 05 c0 b7 30 61 70 b6 70 0a 87 05 20 66 c3 99 51 d7 31 9d c2 ae 27 57 b9 6b 38 0f 12 b6 db d5 45 65 c0 eb 70 3f b4 43 e0 81 95 b5 Data Ascii: kzdR6Ee/rx-"Q.=s'E!/Ig5[^o@[:-dR6j_n_$nmylT+)fAKks>C3M;cM^@[mn'e:Vm4p:H*!k-T-0app fQ1'Wk8Eep?C
2024-05-25 23:00:22 UTC	14884	IN	Data Raw: 7c 80 aa 3a f6 9c 0a d4 b9 a3 17 15 ad 23 c9 55 81 d6 ff 00 a4 e2 84 72 54 0b d6 32 75 5a 06 e1 6e 9e 4b 19 3a a3 00 2f a0 65 4d fc 56 d4 9d 51 64 78 0c 49 e0 b5 a4 79 28 be 37 5b 60 c7 98 56 de e7 83 5a 5c 98 e6 17 1a 9a 5f 99 92 39 cf a9 e4 ad b0 bc 9b 54 bd 5b 7b ac 33 87 32 ae 7c 80 aa 3a f6 9c 0a 12 48 eb 0c 38 73 2b 55 f2 02 83 5f 78 38 1e 6b 19 3a ac 64 ea b5 1e f0 51 8d fb 41 5a 9d d6 3f a4 62 b5 64 78 2b 5a f6 9c 1c 13 64 71 7d 4f 22 9d 23 4b ea 39 9f 66 87 e5 54 8a 00 f6 f3 b5 44 d3 23 6c bb 88 59 2b 3d e1 68 fd b3 49 e2 7f 19 b2 b9 0e 21 d4 08 bd e6 8d 1c 51 d1 3c 3a 98 a9 39 b7 58 20 34 38 0a 6d 66 6b 6c 5a a8 ae 28 3e cd 9a 0a 63 99 ad 18 01 45 2c 74 35 8d 3b b8 84 d0 30 01 4b 15 0d 63 a2 71 f8 48 29 8c 1c 02 b3 2c 81 a7 14 08 c0 a8 dc 3d f6 Data Ascii: \|:#UrT2uZnK:/eMVQdxIy(7[`VZ\_9T[{32\|:H8s+U_x8k:dQAZ?bdx+Zdq}O"#K9fTD#lY+=hI!Q<:9X 48mfklZ(>cE,t5;0KcqH),=
2024-05-25 23:00:22 UTC	1500	IN	Data Raw: ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 f1 bb ae a6 ae 54 47 2a 3b e0 34 91 c5 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 fe d9 79 55 06 1b 65 85 0e 30 80 8a 24 20 8e 28 20 bf 43 9c 6a 69 70 6f 97 ff 00 ff 00 ff 00 ff 00 ff 00 1f 95 a4 a1 9a a6 4d 42 0c 7c 68 cd f2 c7 4f 6a 9a b8 2e 88 17 2f d5 7f ff 00 ff 00 ff 00 ff 00 fb fd 24 77 79 d2 0c 16 d3 ec 3a d3 0c 36 db ef be 09 2d ff 00 84 d3 cf 3f ff 00 ff 00 ff 00 ff 00 ff 00 fe b2 82 ab ce 28 3f 51 a8 a2 07 82 da 69 ab e0 ea 10 9a 2c 14 7f ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ef 6b fa 27 96 dd 5d be fb 99 f2 57 81 f4 58 e1 d0 bb ba 50 25 7f ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff Data Ascii: TG*;4yUe0$ ( CjipoMB\|hOj./$wy:6-?(?Qi,k']WXP%
2024-05-25 23:00:22 UTC	14884	IN	Data Raw: ea 49 0b 75 55 eb e0 6f 76 3d 8d a2 5d 96 0a ab 4f 91 6e 1e 1b db 9d d0 92 6b 7e 0d fd f8 ca ab 07 35 6a b9 f3 8c 71 47 60 d4 e2 e8 89 45 b4 7f 66 6b ed 1f 91 35 5d 7a bd c6 d4 74 fb 51 7c 44 97 b0 ca 27 e7 e0 fe 29 f8 34 04 af af 2f 22 bb 13 1f 25 3f 22 a8 a2 ec 86 34 af 83 cf d8 d5 a0 5e ab c8 e5 a7 b3 d3 c7 e4 6b fb 3f 0b 03 e0 19 46 bf 41 b1 1b fb 31 8d 5e 2e 9e 5f 21 68 91 3f b3 7f 23 56 3b f0 8e a3 7e 06 b4 97 73 9b 9f dd 0d b5 37 bb 7d fe 81 36 9d 42 7f d9 86 35 79 6d db 90 f6 37 3e 03 f9 43 57 ab a7 97 fa 19 2e bf 9f ef 73 ae bb a1 b6 af b7 2f a8 63 55 b8 85 79 05 fa f3 9e c1 6f 10 5d 43 58 aa 54 b2 cb d8 b2 69 4a 2c 6c 95 24 52 c6 c8 dc d0 d9 09 39 94 59 7c 1d b8 0b 36 ab 73 7e 98 54 28 29 1f 48 e9 41 42 82 d6 53 4c 3d 01 40 9c 77 9e 7c 3d 99 3a Data Ascii: IuUov=]Onk~5jqG`Efk5]ztQ\|D')4/"%?"4^k?FA1^._!h?#V;~s7}6B5ym7>CW.s/cUyo]CXTiJ,l$R9Y\|6s~T()HABSL=@w\|=:
2024-05-25 23:00:22 UTC	1500	IN	Data Raw: 62 14 28 4c 67 1c c5 a8 68 1a 33 7d ee 2a 36 63 8d ff 00 b1 2b 7d 60 0c 38 b1 9a 37 f4 13 02 6d cc f7 70 de 47 68 97 11 0c 5a 18 65 ac b9 b7 ee 8c d2 dd 6d af 30 ac 30 d7 58 c8 b9 d2 97 7e 88 57 d2 2b 2d 3f d2 23 4c 03 ea 5f f0 51 26 7c a8 01 49 dc 97 17 ab 81 b2 8a 35 13 d2 37 32 c0 67 b8 c1 d5 02 60 68 51 1a 5d 69 6f 44 11 b9 81 7b 93 d0 43 e4 c1 13 6a 53 5f 2b 85 49 83 6c b0 60 ce a3 7c 4c 77 49 d8 54 74 83 fb 41 45 29 d4 5b b1 40 c8 ae ab 1b d9 0b 76 a2 cd ae 0b 87 fc 95 6c 6a d6 6e 12 f1 0b 44 d6 eb 29 a6 ce ee 74 d2 b6 67 b4 43 0a 0e bb b4 5c cd a6 51 cc 5b 53 a9 71 2d 4f ac 45 0a 9c 01 33 a6 62 26 c8 89 09 67 a8 4a 73 8d 25 c5 76 ac a9 7b 69 e7 30 39 74 8b 86 41 a6 12 1e 92 02 76 66 35 81 8a e5 50 69 bb d1 d2 f7 8d 43 ac 0a 31 14 51 5a 69 ba 58 64 Data Ascii: b(Lgh3}*6c+}`87mpGhZem00X~W+-?#L_Q&\|I572g`hQ]ioD{CjS_+Il`\|LwITtAE)[@vljnD)tgC\Q[Sq-OE3b&gJs%v{i09tAvf5PiC1QZiXd
2024-05-25 23:00:22 UTC	1445	IN	Data Raw: 75 85 e3 a5 1b 02 93 f0 cb 30 14 2c 72 21 a1 c7 78 fd 59 78 40 ca 75 82 c4 b6 39 1b e7 49 7c 48 15 48 37 e6 0c 12 33 46 14 3b 44 86 a9 4d 5f dc 83 49 97 02 0b 0c 03 0a e9 34 49 45 b5 1e 81 15 75 4c ef ca 36 eb 92 66 5d 2e f4 1e 42 5a ca cb ad d4 09 c7 59 0e 58 6b 6b 34 6d d1 75 b8 f2 66 28 5b 30 b0 0c c2 18 30 00 4c 70 8e 95 7d e0 47 bc fe a8 c6 50 e3 f4 25 a7 9f 29 1a be 88 a9 ef 34 ee e4 b5 ed 29 44 77 aa 13 13 7f 85 6f 78 81 68 4e 4c ca 78 67 ba 03 53 dc a8 4d 55 ba 0d fd a6 2e ee f8 8f 68 29 07 44 b3 ff 00 13 dc 3e 00 a2 c9 da 3e ab 81 73 0e 8f f0 67 a1 a1 80 0e 35 55 8c a9 59 95 f5 ae 08 c6 ed cd 6f 2e eb e8 06 3a 85 3a 75 de 07 63 c1 68 20 8e dc 19 8b b7 2d 03 9b 0b 68 21 ed 83 e0 05 bc 38 da 39 4d bd ea ac bc 69 d2 51 97 87 54 d6 84 d4 4f 48 5c 0e Data Ascii: u0,r!xYx@u9I\|HH73F;DM_I4IEuL6f].BZYXkk4muf([00Lp}GP%)4)DwoxhNLxgSMU.h)D>>sg5UYo.::uch -h!89MiQTOH\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.6	59237	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:22 UTC	596	OUT	GET /v/t39.30808-6/443818919_996576128504625_3343915979056056184_n.jpg?stp=dst-jpg_p160x160&_nc_cat=101&ccb=1-7&_nc_sid=5f2048&_nc_ohc=nO7Vfy4wE0cQ7kNvgEAcCQP&_nc_ht=scontent-hou1-1.xx&oh=00_AYCntigX4wIFjcc-XIzewAhDWxRAHRfppP-pPBfZbeeOEA&oe=665830C5 HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:22 UTC	609	IN	HTTP/1.1 200 OK Last-Modified: Sat, 25 May 2024 06:00:13 GMT X-Needle-Checksum: 64459615 thrift_fmhk: GBCtL7hGTrtz/wsD7JOgzUjvFfDr4Z0EvFUAHCYEAAAA Content-Type: image/jpeg content-digest: adler32=4113173615 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:22 GMT X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=33, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 7724
2024-05-25 23:00:22 UTC	1	IN	Data Raw: ff Data Ascii:
2024-05-25 23:00:22 UTC	7723	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 37 31 30 31 30 30 30 30 35 61 30 33 30 30 30 30 38 35 30 36 30 30 30 30 31 33 30 37 30 30 30 30 32 31 30 39 30 30 30 30 30 35 30 65 30 30 30 30 30 39 31 33 30 30 30 30 38 62 31 33 30 30 30 30 33 32 31 34 30 30 30 30 35 32 31 36 30 30 30 30 32 63 31 65 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a710100005a030000850600001307000021090000050e0000091300008b13000032140000521600002c1e0000C%# , #&')*)-0-(0%()(C(((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.6	59236	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:22 UTC	831	OUT	GET /v/t39.30808-1/241270460_1943112789170907_1967367247279035119_n.png?stp=dst-png_p200x200&_nc_cat=1&ccb=1-7&_nc_sid=5f2048&_nc_ohc=1XNCsKdZNVcQ7kNvgEm2iAq&_nc_ht=scontent-hou1-1.xx&oh=00_AYC4FSoPI_caF-qQXmeiAUE38hRwGoIYd4Upuifu1nR3iA&oe=66584D80 HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:22 UTC	736	IN	HTTP/1.1 200 OK Last-Modified: Wed, 08 Sep 2021 07:35:44 GMT X-Needle-Checksum: 783964446 thrift_fmhk: GBCOBZcUNWjSK2dx0xfxcpk0FfDr4Z0EvFUAHCYEAAAA Content-Type: image/png content-digest: adler32=1796354532 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:22 GMT X-FB-Edge-Debug: rcfg-EjLDbdFxj9K2O6WtN9M_XPBXRogjG9CDgAGSNGeE-J_PGTngYlvqtMi8EpET0tpyREdI7fIEk3XiXm3mvcZATyQmLcOQZWUmrLOf_o X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=33, rtx=0, c=14, mss=1392, tbw=3412, tp=-1, tpl=-1, uplat=35, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 12996
2024-05-25 23:00:22 UTC	764	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 02 00 00 00 22 3a 39 c9 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 20 00 49 44 41 54 78 9c ed 9d 77 7c 55 45 da c7 9f 99 39 ed de 73 4b 0a 1d e9 bd 08 d2 7b 2f a2 2f ae 05 db 8a ac 15 41 40 57 5c d7 8e 8a 8a 22 60 01 fb ba 88 0a b2 ae 0d 14 57 2c a8 14 a5 83 20 d2 ab 74 0c c9 bd c9 2d a7 ce cc fb c7 49 42 68 49 48 72 93 1b 38 5f ca 27 1f 12 92 7b cf f9 9d 99 67 7e f3 3c cf a0 3f 8f 6a e0 e2 52 d6 e0 8a 7e 01 2e e7 27 ae b0 5c 12 82 2b 2c 97 84 e0 0a cb 25 21 b8 c2 72 49 08 ae b0 5c 12 82 2b 2c 97 84 e0 0a cb 25 21 b8 c2 72 49 08 ae b0 5c 12 82 2b 2c 97 84 e0 0a cb 25 21 b8 c2 72 49 08 ae b0 5c 12 82 2b 2c 97 84 e0 0a cb 25 21 b8 c2 72 49 08 ae b0 5c 12 82 2b 2c 97 84 e0 0a cb 25 Data Ascii: PNGIHDR":9sRGB, IDATxw\|UE9sK{//A@W\"`W, t-IBhIHr8_'{g~<?jR~.'\+,%!rI\+,%!rI\+,%!rI\+,%!rI\+,%
2024-05-25 23:00:22 UTC	3264	IN	Data Raw: 87 b1 4a 29 2c 67 7c 12 45 51 f6 48 a2 08 ba c6 0e ed 3b f8 fb 9a 8d 6b 96 ac da b8 e2 d7 03 7b fe 88 41 4c 00 22 83 22 62 d1 b9 97 8c b3 84 85 52 e7 0c 42 08 61 8c 00 28 a5 3a e8 26 98 12 48 35 6b d4 6a d3 f9 92 ce 03 ba b5 eb d6 a1 4e a3 7a 5e 55 b0 2c 30 34 d3 b2 ac ca 38 86 55 3e 61 51 4a 25 59 f2 78 c5 cc 3f c3 3b 36 6d 5f b7 6c f5 ba a5 6b 76 6e da 96 15 cb 64 c0 64 50 24 90 89 80 f3 6d 85 8a 7e bd 90 ab 24 84 9c c9 fa e4 4f 80 23 1a ce b8 c9 4c 1d 74 0e 3c 45 4a 69 da a6 59 c7 3e 5d 3b f5 e9 d2 ac 6d 8b f4 6a 41 4d a3 86 a6 3b 23 6e 65 a1 92 09 8b da 34 90 a6 1e db ff e7 bf a6 bc b1 fc bb 65 47 0f 1e d6 40 17 41 90 41 11 89 08 00 8c 33 ce 92 42 4c f9 20 40 26 98 1c b8 0c 0a 87 d3 b4 95 ff 65 28 77 85 68 53 5b 07 dd 02 4b 01 a5 76 dd 8b 7a 5c da 67 Data Ascii: J),g\|EQH;k{AL""bRBa(:&H5kjNz^U,048U>aQJ%Yx?;6m_lkvnddP$m~$O#Lt<EJiY>];mjAM;#ne4eG@AA3BL @&e(whS[Kvz\g
2024-05-25 23:00:22 UTC	4064	IN	Data Raw: 54 ac a6 57 ab 51 a3 4e ad ba 8d eb 35 68 d6 a8 6e 93 fa b5 eb d7 ae 5a b3 5a 20 35 28 2b 18 90 23 23 6e 5b 96 1e d7 e3 31 06 3c 77 ea 72 fe 00 02 96 bf 0f c2 21 77 20 2c f0 c1 09 50 de 2f 84 10 42 82 28 8a b2 a4 06 7c 18 3b 41 19 72 26 48 47 91 4e 52 03 00 70 67 4e a5 80 31 60 0c d1 1c e3 74 55 01 00 21 38 92 1d ef 3c b0 eb 87 3f 7d fa d9 ac 8f 97 2e fc 69 ef e6 dd 61 1a 46 80 64 90 25 24 9d 6b 13 14 27 d8 fa ee c7 85 ef 3c f3 d6 d8 49 63 42 c7 62 44 2c 8f 09 b1 9c 46 2c 6a d3 94 2a ea 67 ef cc 7b ec 9e 7f 04 85 94 e2 a4 a4 11 42 a2 34 da be 5d c7 77 7e 78 df 34 ec fc 7b c0 28 f3 05 95 1f e7 ff 34 6d c2 73 d5 d3 6a d4 69 54 b7 7e f3 86 f5 9a 36 a8 dd a0 4e d5 9a d5 02 29 41 d9 83 31 02 4a c1 b6 b8 65 59 d4 a6 4e 8b db fc 59 b2 8c 17 7d f9 e2 73 86 e5 53 Data Ascii: TWQN5hnZZ 5(+##n[1<wr!w ,P/B(\|;Ar&HGNRpgN1`tU!8<?}.iaFd%$k'<IcBbD,F,j*g{B4]w~x4{(4msjiT~6N)A1JeYNY}sS
2024-05-25 23:00:22 UTC	4064	IN	Data Raw: 04 a5 34 48 82 8b 16 7d fb f5 dc af 03 69 5e c7 d6 c2 18 6b 31 7b d8 c8 1b d3 3d 55 2d 9a 2c 7e 29 c6 58 07 ad f9 25 ad ea 35 a9 67 e8 46 7e 5a 1f e7 9c 08 68 fe ac 4f 74 5e c2 a5 cc d9 20 84 64 db a1 7b 1e bc 7f d8 5d 57 86 32 62 82 58 de cd aa 2a 4c 58 08 23 db a2 92 24 bd 30 e7 e5 3a b5 eb c6 69 ac 04 07 bb 73 ce 25 24 bf fe d4 cb c7 8f 86 24 59 e4 9c 23 8c f4 b8 d1 a8 55 bd 21 d7 fe 5f f2 0c 5a 08 21 0b ec ee 83 7a 2a 5e 92 3f 2c 71 c6 15 af bc 77 db fe 10 d2 4d 69 00 00 12 72 49 44 41 54 9f be 5a a4 22 95 95 9d 29 9a 6b 2e dc 38 7c f4 53 63 42 c7 e3 44 a8 98 8b 50 61 97 1e 13 ac c5 f4 1a 75 6b 4c 9d 3d c3 e3 f5 9a 60 9e ab b7 c9 18 f3 60 cf 9e c3 bb fe 3d e9 2d d5 2f 39 f7 0c 63 64 e8 f4 fa bb 87 07 a4 a0 4d 69 32 1c 2a 40 29 f5 63 7f 97 81 dd 4d 9d Data Ascii: 4H}i^k1{=U-,~)X%5gF~ZhOt^ d{]W2bXLX#$0:is%$$Y#U!_Z!z^?,qwMirIDATZ")k.8\|ScBDPaukL=``=-/9cdMi2*@)cM
2024-05-25 23:00:22 UTC	840	IN	Data Raw: e1 74 2e 50 61 e5 8d 5b f1 31 4f 8f 1b 76 6d d1 69 f2 05 41 18 e9 a0 f7 bf 6a d0 b6 0d db d6 ae 5b e5 2d d0 97 81 60 12 a5 d1 c6 0d 9a be e0 98 0b 36 4d 74 5b ca a4 e5 c2 15 96 13 2a c5 a3 fa 84 37 27 76 ef d2 3b bb d0 34 f9 82 50 4a 03 42 60 e0 b0 21 1f bf 39 d7 02 2b 3f fc c7 18 1b dc 48 49 49 9d 36 77 46 6a b5 74 5d 33 ce 8f b2 88 92 71 e1 be f3 5c d7 c0 66 98 90 c9 b3 5f 6c 58 54 9a 7c fe 7f b1 b9 9d e6 4f 5f ff f3 9a 1f e6 7d eb 03 bf 33 5c e5 66 2e 60 78 7e e6 4b cd 2e 69 52 59 1a 3a 26 8e 0b cb c7 3a 23 79 69 f2 db ee bc 6c 84 16 8d 8b 67 4f 93 cf 87 03 37 c1 90 40 ce 0f a0 b0 80 23 76 ce d3 af 4c b9 7e cc b0 ac 63 d1 0b 70 19 78 0a 17 f4 88 e5 40 04 12 09 47 5b 76 68 3e e9 5f 53 69 a1 69 f2 f9 20 40 0a f6 e4 7f 99 d3 73 e1 ee f1 7f bf fe ee 0b d4 Data Ascii: t.Pa[1OvmiAj[-`6Mt[*7'v;4PJB`!9+?HII6wFjt]3q\f_lXT\|O_}3\f.`x~K.iRY:&:#yilgO7@#vL~cpx@G[vh>_Sii @s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.6	59238	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:22 UTC	596	OUT	GET /v/t39.30808-6/443820279_996576055171299_5426681423066812390_n.jpg?stp=dst-jpg_p160x160&_nc_cat=106&ccb=1-7&_nc_sid=5f2048&_nc_ohc=yOpNa5f4B0MQ7kNvgFXHOgL&_nc_ht=scontent-hou1-1.xx&oh=00_AYBVDQgwzpXx5tnAMaacW5P1eZsrvuHBmJdwC36mmjlL2g&oe=665834CA HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:22 UTC	610	IN	HTTP/1.1 200 OK Last-Modified: Sat, 25 May 2024 06:00:07 GMT X-Needle-Checksum: 2752040978 thrift_fmhk: GBBU9Ss6jRorBcc81Dmh9goZFfDr4Z0EvFUAHCYEAAAA Content-Type: image/jpeg content-digest: adler32=636109903 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:22 GMT X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3410, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 7922
2024-05-25 23:00:22 UTC	1	IN	Data Raw: ff Data Ascii:
2024-05-25 23:00:22 UTC	7921	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 37 30 30 31 30 30 30 30 36 33 30 33 30 30 30 30 64 65 30 36 30 30 30 30 65 37 30 37 30 30 30 30 38 37 30 39 30 30 30 30 31 66 30 65 30 30 30 30 34 65 31 33 30 30 30 30 64 38 31 33 30 30 30 30 66 35 31 34 30 30 30 30 62 37 31 36 30 30 30 30 66 32 31 65 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a7001000063030000de060000e7070000870900001f0e00004e130000d8130000f5140000b7160000f21e0000C%# , #&')*)-0-(0%()(C(((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.6	59240	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:22 UTC	597	OUT	GET /v/t39.30808-1/241270460_1943112789170907_1967367247279035119_n.png?stp=cp0_dst-png_p40x40&_nc_cat=1&ccb=1-7&_nc_sid=5f2048&_nc_ohc=1XNCsKdZNVcQ7kNvgEm2iAq&_nc_ht=scontent-hou1-1.xx&oh=00_AYCkH4_Vs00q1M9XOPfSjLOlrgyBfl8DrVuZMc0S1B0DaQ&oe=66584D80 HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:22 UTC	609	IN	HTTP/1.1 200 OK Last-Modified: Wed, 08 Sep 2021 07:35:44 GMT X-Needle-Checksum: 783964446 thrift_fmhk: GBCOBZcUNWjSK2dx0xfxcpk0FfDr4Z0EvFUAHCYEAAAA Content-Type: image/png content-digest: adler32=2318258372 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:22 GMT X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=37, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 1948
2024-05-25 23:00:22 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-05-25 23:00:22 UTC	1947	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 02 00 00 00 03 9c 2f 3a 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 07 56 49 44 41 54 58 85 ed 98 79 70 55 d5 1d c7 7f e7 9c fb f6 25 6f 49 80 b2 85 90 61 87 50 03 a2 ec 82 52 a2 a8 40 20 16 4a 0b 48 1d 84 b2 38 5a d4 19 28 c3 04 2a 8a 29 26 a8 23 50 51 ac 02 b6 50 08 4a c3 48 64 1d 46 30 50 0b 54 64 2b 4d 90 80 91 24 bc 25 ef dd f7 ee bb f7 9c f3 eb 1f 61 09 09 59 40 a7 fc d1 7e e7 fd f1 66 ee b9 e7 73 cf b9 df df ef 7e ef 25 95 df c7 e1 5e 88 de 13 ea ff c1 ff 4d 29 2d 1f 2a a5 44 89 84 12 4a eb 5f 2e 22 4a 21 09 21 84 12 42 c8 8f 03 ae 9d 94 29 cc e6 b0 5b 2c 60 18 90 88 eb b7 0c 00 34 9b cc 56 3b e5 3a 68 71 dd 30 0c 4a 28 a1 cd e0 9b 01 a3 44 66 62 6e af 2d 1a d6 ce 9c f8 e6 f8 Data Ascii: PNGIHDR((/:sRGB,VIDATXypU%oIaPR@ JH8Z()&#PQPJHdF0PTd+M$%aY@~fs~%^M)-DJ_."J!!B)[,`4V;:hq0J(Dfbn-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.6	59239	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:22 UTC	846	OUT	GET /v/t39.30808-1/420086716_931108598615436_3858448142618749480_n.jpg?stp=c0.0.32.32a_cp0_dst-jpg_p32x32&_nc_cat=111&ccb=1-7&_nc_sid=5f2048&_nc_ohc=NXwRNknqveIQ7kNvgFwHOBH&_nc_ht=scontent-hou1-1.xx&oh=00_AYAMXp2fbTKj3nPqh5iGhMSYM9EtUaMzlU_M73za1DQd4A&oe=66583EEA HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:22 UTC	737	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 Jan 2024 12:40:30 GMT X-Needle-Checksum: 3129514411 thrift_fmhk: GBDAONEZ3Wu5o6TGSJ1muz4AFfDr4Z0EvFUAHCYEAAAA Content-Type: image/jpeg content-digest: adler32=3612751838 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:22 GMT X-FB-Edge-Debug: elnwKBcGlEkvsg8G2BwPJ0sdCIr3VLRNC1khwl8CSffMLtZmbo5v6mVzBzD9d1oF9hORZFdu1zIb44YIdBe3h1XJGhLiOmlCfolGFxWVV3I X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=31, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=23, ullat=1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 1115
2024-05-25 23:00:22 UTC	763	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 36 65 30 31 30 30 30 30 62 31 30 31 30 30 30 30 30 37 30 32 30 30 30 30 33 36 30 32 30 30 30 30 37 31 30 32 30 30 30 30 65 35 30 32 30 30 30 30 33 65 30 33 30 30 30 30 36 61 30 33 30 30 30 30 39 63 30 33 30 30 30 30 64 33 30 33 30 30 30 30 35 62 30 34 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a6e010000b1010000070200003602000071020000e50200003e0300006a0300009c030000d30300005b040000C%# , #&')*)-0-(0%()(C((((((((((((((
2024-05-25 23:00:22 UTC	352	IN	Data Raw: e8 8f c2 68 58 72 8d 8f 68 6e ef 15 0f 5d 46 2a 33 75 6e 57 01 2e 0b 52 76 85 41 73 6b c1 ee 5f b0 0c 76 1e 79 8e 09 c2 8c e0 d0 15 f1 8d 42 6c e7 38 60 60 df 89 0b d9 b4 d2 6d c4 0a da c2 c7 c0 fe 4f ff da 00 0c 03 01 00 02 00 03 00 00 00 10 74 be a0 ff c4 00 19 11 01 00 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 00 11 21 31 81 ff da 00 08 01 03 01 01 3f 10 c6 7d 63 d6 b3 16 f1 90 55 5f 27 ff c4 00 1b 11 00 02 02 03 01 00 00 00 00 00 00 00 00 00 00 00 01 11 00 21 31 71 b1 f0 ff da 00 08 01 02 01 01 3f 10 54 bf 37 0f 11 4e 0a a0 a3 18 a7 39 f6 a7 ff c4 00 1d 10 01 01 00 03 00 03 01 01 00 00 00 00 00 00 00 00 01 11 00 21 31 41 61 71 81 51 ff da 00 08 01 01 00 01 3f 10 3b fe 58 7f 59 b7 ee 00 4e ef 12 ad 56 eb cd c1 94 ea 1a 25 d9 df 9a 71 47 8e d2 41 8a Data Ascii: hXrhn]F*3unW.RvAsk_vyBl8``mOt!1?}cU_'!1q?T7N9!1AaqQ?;XYNV%qGA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.6	59241	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:22 UTC	833	OUT	GET /v/t39.30808-1/241270460_1943112789170907_1967367247279035119_n.png?stp=cp0_dst-png_p24x24&_nc_cat=1&ccb=1-7&_nc_sid=5f2048&_nc_ohc=1XNCsKdZNVcQ7kNvgEm2iAq&_nc_ht=scontent-hou1-1.xx&oh=00_AYCtPdlNyu0dqd6iPTXBvUxjOno_5MTNZoU-rRxBkPW0yA&oe=66584D80 HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:22 UTC	734	IN	HTTP/1.1 200 OK Last-Modified: Wed, 08 Sep 2021 07:35:44 GMT X-Needle-Checksum: 783964446 thrift_fmhk: GBCOBZcUNWjSK2dx0xfxcpk0FfDr4Z0EvFUAHCYEAAAA Content-Type: image/png content-digest: adler32=207744956 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:22 GMT X-FB-Edge-Debug: n_NIzsW3eta3rm0GDqNvd8nKh605FbuV9HFUizKPX7Yk2s16ze6OscBCMGUngLqOsUXpzbMQrCIFYFy3Pg5JEscXFQnubE-f4TESOjPK0kk X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=35, rtx=0, c=14, mss=1392, tbw=3410, tp=-1, tpl=-1, uplat=35, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 1052
2024-05-25 23:00:22 UTC	766	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 02 00 00 00 6f 15 aa af 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 03 d6 49 44 41 54 38 8d ad 95 7d 4c d5 65 14 c7 cf f3 3c 3f ee ef de fb bb c0 15 6e 08 5c 25 32 b6 64 e1 0c 67 35 11 10 33 45 91 92 4c 52 6c cb fe b0 4d ed 45 33 db d8 6c 4b 96 43 0d 17 cb 25 73 b6 cc 32 b9 33 6b ad 55 84 b3 60 b8 8a 09 be d0 8c 17 5f 2e 20 f1 72 2f de cb 05 ee 8f df cb e5 f7 3c 4f 7f 60 c9 bd bb 65 7f 70 fe 3c 3b cf 67 e7 9c 9d ef f7 41 c3 1e 15 66 22 f0 8c 50 00 40 88 9a e5 9c 73 c6 39 e7 08 a1 e9 49 40 80 31 9e 9e fc 2f 10 63 8c 08 82 25 d6 44 04 a0 c6 b4 52 01 28 05 55 99 34 26 27 31 8e 1c 25 12 c4 18 13 2d a2 2a 2b 57 7f 6b bd 7c a1 e5 56 c7 4d c4 10 00 30 60 c9 73 52 72 56 e5 2e 58 fc 58 7c Data Ascii: PNGIHDRosRGB,IDAT8}Le<?n\%2dg53ELRlME3lKC%s23kU`_. r/<O`ep<;gAf"P@s9I@1/c%DR(U4&'1%-*+Wk\|VM0`sRrV.XX\|
2024-05-25 23:00:22 UTC	286	IN	Data Raw: 27 2a 73 b3 0a 5c 27 4f 3d 94 39 4f 12 6c 1c b8 0a ea c2 9c 45 57 2e b4 7a 8c a1 f9 19 99 87 4e 7f 00 80 28 65 d3 45 17 76 e6 18 e3 50 c8 b0 58 2d d5 ae a3 d6 58 a9 f9 e7 5f 1f 99 9f a9 51 cd 04 62 72 5a 6a c3 0f e7 9d f1 73 aa 6a 3f b4 3b 66 e9 6a 28 42 6e 91 da 23 04 2b b2 e6 9c 97 fa 91 eb f8 6d 77 4f 5f 5f 2f 06 9c ec 48 19 ea 1d f0 f8 07 ab 3f af c9 c8 7a 58 1e 0b 13 47 74 10 00 10 81 8c 8d c8 8b 97 67 57 1c 3b e8 1f f7 01 e6 49 ce d9 97 9a 5a f6 55 1d 58 5a f4 e4 a8 5f 16 62 a2 78 46 74 63 13 62 84 91 3b f2 b3 5b 8a 76 bf 53 1e 64 c1 eb 7f 74 96 6e 2b 2b db b9 71 c4 3b 11 95 12 a9 fe 88 60 8c c5 da ad 95 3b de d3 43 fa be e3 fb 27 82 2a 02 80 68 ae 76 1f 10 70 00 c4 cd 56 0b 02 50 15 2d c2 30 23 87 f8 57 0a 00 20 00 40 8a ac 00 00 46 d1 1d f6 ff 81 Data Ascii: 's\'O=9OlEW.zN(eEvPX-X_QbrZjsj?;fj(Bn#+mwO__/H?zXGtgW;IZUXZ_bxFtcb;[vSdtn++q;`;C'hvpVP-0#W @F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.6	59243	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:22 UTC	596	OUT	GET /v/t39.30808-6/443719952_995303895298515_5429863019799494605_n.jpg?stp=dst-jpg_p160x160&_nc_cat=101&ccb=1-7&_nc_sid=5f2048&_nc_ohc=QJOpQMOzaykQ7kNvgGY1MSj&_nc_ht=scontent-hou1-1.xx&oh=00_AYDz7mtrEpNBxVYv1ph3mZC7uPqbHrNYX7ZZdgtuo6ZlEA&oe=66582DAE HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:22 UTC	611	IN	HTTP/1.1 200 OK Last-Modified: Thu, 23 May 2024 02:00:07 GMT X-Needle-Checksum: 2732362015 thrift_fmhk: GBDsWf8iNvRxpdusn5HHj1I3FfDr4Z0EvFUAHCYEAAAA Content-Type: image/jpeg content-digest: adler32=1853060623 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:22 GMT X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=42, rtx=0, c=14, mss=1392, tbw=3410, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 8884
2024-05-25 23:00:22 UTC	1	IN	Data Raw: ff Data Ascii:
2024-05-25 23:00:22 UTC	8883	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 37 32 30 31 30 30 30 30 39 35 30 33 30 30 30 30 33 66 30 37 30 30 30 30 33 32 30 38 30 30 30 30 33 38 30 61 30 30 30 30 64 62 30 66 30 30 30 30 64 63 31 35 30 30 30 30 35 65 31 36 30 30 30 30 36 35 31 37 30 30 30 30 35 66 31 39 30 30 30 30 62 34 32 32 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a72010000950300003f07000032080000380a0000db0f0000dc1500005e160000651700005f190000b4220000C%# , #&')*)-0-(0%()(C(((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.6	59242	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:22 UTC	596	OUT	GET /v/t39.30808-6/443734130_996504798511758_6592287627648144231_n.jpg?stp=dst-jpg_p160x160&_nc_cat=103&ccb=1-7&_nc_sid=5f2048&_nc_ohc=ZehM0R_W_KYQ7kNvgFg__vp&_nc_ht=scontent-hou1-1.xx&oh=00_AYDJEL6e_gixMWiDOUh9aXczeGqkrxh94R0FJtxsn4TwFg&oe=665847CB HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:22 UTC	610	IN	HTTP/1.1 200 OK Last-Modified: Sat, 25 May 2024 03:00:08 GMT X-Needle-Checksum: 2265317192 thrift_fmhk: GBAkZfDU3Euvfs9FxTmoolvEFfDr4Z0EvFUAHCYEAAAA Content-Type: image/jpeg content-digest: adler32=608168895 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:22 GMT X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=40, rtx=0, c=14, mss=1392, tbw=3410, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 8731
2024-05-25 23:00:22 UTC	1	IN	Data Raw: ff Data Ascii:
2024-05-25 23:00:22 UTC	8730	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 37 30 30 31 30 30 30 30 37 39 30 33 30 30 30 30 34 33 30 37 30 30 30 30 33 38 30 38 30 30 30 30 38 36 30 39 30 30 30 30 66 35 30 65 30 30 30 30 30 64 31 35 30 30 30 30 38 64 31 35 30 30 30 30 62 33 31 36 30 30 30 30 33 39 31 38 30 30 30 30 31 62 32 32 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a7001000079030000430700003808000086090000f50e00000d1500008d150000b3160000391800001b220000C%# , #&')*)-0-(0%()(C(((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.6	59244	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:22 UTC	596	OUT	GET /v/t39.30808-6/443818919_996576128504625_3343915979056056184_n.jpg?stp=dst-jpg_p600x600&_nc_cat=101&ccb=1-7&_nc_sid=5f2048&_nc_ohc=nO7Vfy4wE0cQ7kNvgEAcCQP&_nc_ht=scontent-hou1-1.xx&oh=00_AYDru1sgIffZ1rgBMKyVshHvglkMn8HpGaDMN24nEMeB7g&oe=665830C5 HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:22 UTC	610	IN	HTTP/1.1 200 OK Last-Modified: Sat, 25 May 2024 06:00:13 GMT X-Needle-Checksum: 64459615 thrift_fmhk: GBCtL7hGTrtz/wsD7JOgzUjvFfDr4Z0EvFUAHCYEAAAA Content-Type: image/jpeg content-digest: adler32=2266286513 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:22 GMT X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3410, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 49977
2024-05-25 23:00:22 UTC	1	IN	Data Raw: ff Data Ascii:
2024-05-25 23:00:22 UTC	15118	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 37 32 30 31 30 30 30 30 35 31 31 32 30 30 30 30 61 37 32 61 30 30 30 30 34 38 32 64 30 30 30 30 36 32 33 62 30 30 30 30 35 66 35 39 30 30 30 30 66 33 37 39 30 30 30 30 36 31 37 66 30 30 30 30 65 33 38 32 30 30 30 30 30 62 39 30 30 30 30 30 33 39 63 33 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a7201000051120000a72a0000482d0000623b00005f590000f3790000617f0000e38200000b90000039c30000C%# , #&')*)-0-(0%()(C(((((((((((((((
2024-05-25 23:00:23 UTC	16384	IN	Data Raw: 97 96 4f f1 22 6e 6e 7f 9c ff 00 ff c4 00 46 10 00 01 02 03 02 0c 02 06 08 05 03 04 03 00 00 00 01 00 02 03 11 12 21 31 04 10 13 22 32 33 41 51 61 71 91 92 20 72 23 42 50 52 81 a1 30 40 73 93 a2 b1 d1 e1 14 62 82 c1 e2 24 34 43 53 70 83 f0 60 80 f1 ff da 00 08 01 01 00 06 3f 02 ff 00 bf ae 89 16 c8 2c bf 8a 1e 81 93 e2 26 9b 54 18 74 97 48 d8 83 e1 ea cf cb ff 00 84 36 80 c8 70 1b 23 65 a4 f1 53 7e 19 19 dc ac 47 fd 4c 57 cc 81 49 da 88 88 61 c7 87 2c e0 6c 38 b2 af 60 7b e9 aa d4 62 43 a1 b1 00 9d 9b 55 45 81 ef 94 c9 28 45 63 43 48 70 9c b6 a6 0c 8c 3c e7 53 a2 14 0a 05 2d 79 93 80 42 16 44 76 7f 74 f9 89 b2 9a 83 4a 3f e9 26 06 e6 b5 39 d9 36 da f7 5e d5 4c 78 6c ae de 28 45 7b 43 9e e1 3b 76 2c ab 18 18 fa 6a 12 4d 7e 41 af 34 03 20 db 4a ca 88 62 1b Data Ascii: O"nnF!1"23AQaq r#BPR0@sb$4CSp`?,&TtH6p#eS~GLWIa,l8`{bCUE(EcCHp<S-yBDvtJ?&96^Lxl(E{C;v,jM~A4 Jb
2024-05-25 23:00:23 UTC	16384	IN	Data Raw: 12 59 22 30 41 af ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 f2 01 43 4a 1a eb ca 16 80 2c 04 48 22 34 7f ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 fe d2 6d 4e 87 35 c5 93 e3 0e c1 90 81 3f 36 ea ab 33 db 9a 54 99 9b f7 e7 ff 00 ff 00 ff 00 ff 00 ef ad d8 78 75 74 0a e4 c1 4c 31 01 cc 68 52 ed 32 99 a2 a6 c5 01 bd 56 7f ff 00 ff 00 ff 00 ff 00 fb 57 bc be e2 00 a9 b6 f3 2c ba e1 6c 38 e3 6e b4 7b 8f cb e6 57 ff 00 3f ff 00 ff 00 ff 00 ff 00 ff 00 fd 77 94 f0 2a 1c 1f 81 3c 79 80 00 a3 69 bf 0e 09 26 b8 a5 2c 5f ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 d1 d9 34 2a af 77 63 3d 37 29 3a bb 15 51 d0 47 55 3a 0b c6 97 7f ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff 00 ff Data Ascii: Y"0ACJ,H"4mN5?63TxutL1hR2VW,l8n{W?w<yi&,_4wc=7):QGU:
2024-05-25 23:00:23 UTC	2090	IN	Data Raw: cc 07 d0 27 bc b0 1a 23 92 5b 37 f6 9f 92 fe 0f 97 d6 5d 63 6f b0 19 de e9 f3 48 3c 8f 40 a0 f0 3e bd a5 bb af f4 74 80 d7 33 7c ae ff 00 c0 b6 80 11 7d fe 8e 93 e4 74 7d e8 0d 58 c7 28 a4 f9 c4 aa 83 1d 92 5c dc b4 3a 26 39 44 89 e0 da 51 c1 7e 0f 48 58 ba 59 d5 f1 8b 37 37 14 26 c3 51 7e a2 6f 4b d6 57 8a e3 2d b5 59 75 6f 2a 05 58 02 b5 79 ce 02 16 4d 14 ab ca 4f 8e 0a d6 9b 9c 5d 9c ad 40 4a cc 25 d2 5b 43 b6 c5 c8 c1 d9 52 b6 36 46 44 09 19 af 59 33 bc e0 e1 90 1a 47 11 43 15 9d 81 ad 57 6c 1a c8 da 58 f1 69 4e 54 97 4b 35 85 0d 30 3a 07 fd 57 c7 f8 3e 5f 58 97 2e 08 58 e6 54 ae 80 a1 e0 ff 00 1c 89 12 24 48 91 22 44 89 0d b2 60 d5 14 c8 38 b2 f7 fe 86 88 e2 06 ca ed 06 d0 7f 03 a4 f9 1d 1f c0 83 a8 32 98 28 b5 35 39 ed 1c 8a 3c 5c 03 b4 b4 24 ea b9 Data Ascii: '#[7]coH<@>t3\|}t}X(\:&9DQ~HXY77&Q~oKW-Yuo*XyMO]@J%[CR6FDY3GCWlXiNTK50:W>_X.XT$H"D`82(59<\$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.6	59246	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:22 UTC	375	OUT	GET /rsrc.php/v3/yw/r/8iuTX4LlGZO.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:23 UTC	1890	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: VHXGGSEP7wYtCIHDUy9UhQ== Expires: Sat, 17 May 2025 02:08:50 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} x-fb-optimizer: 0 X-FB-Debug: kciIOVKDAvYr4mKYG0M3qsE43xx1nNpb8q6kYsoHPsllnPU2etlmEwzhlmrgxjpAfzGQlo7/wwJfsPlMBe5RPQ== Date: Sat, 25 May 2024 23:00:23 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3412, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 652
2024-05-25 23:00:23 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-05-25 23:00:23 UTC	651	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 24 00 00 00 24 08 03 00 00 00 d6 de 68 aa 00 00 00 db 50 4c 54 45 4c 69 71 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 73 5f 66 Data Ascii: PNGIHDR$$hPLTELiq_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_fs_f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.6	59245	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:22 UTC	396	OUT	GET /hads-ak-prn2/1487645_6012475414660_1439393861_n.png HTTP/1.1 Host: scontent.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:23 UTC	416	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Fri, 21 Dec 2012 00:00:01 GMT Expires: Sat, 25 May 2024 23:00:23 GMT cross-origin-resource-policy: cross-origin Server: proxygen-bolt Date: Sat, 25 May 2024 23:00:23 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=14, mss=1392, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 79
2024-05-25 23:00:23 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-05-25 23:00:23 UTC	78	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0a 00 00 00 0a 08 02 00 00 00 02 50 58 ea 00 00 00 16 49 44 41 54 18 57 63 fc cf 80 0f 30 61 0a 21 83 91 29 cd c0 00 00 41 2c 01 13 80 ff 5a 6c 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRPXIDATWc0a!)A,ZlIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.6	59247	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:22 UTC	375	OUT	GET /rsrc.php/v3/ys/r/ASlpPgTKW7L.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:23 UTC	1840	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: hRFd9ZBuLsndBissDJ+EHQ== Expires: Wed, 14 May 2025 17:31:45 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: FiWJJrzusMKwbA+4ftT1fSl5zMV/2eYSMQyWKj6D3O/+jNdO1kzw64/GnbczaJ2vpjTsQoMK2XR+XX3XBId1IQ== Date: Sat, 25 May 2024 23:00:23 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 8809
2024-05-25 23:00:23 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-05-25 23:00:23 UTC	8808	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 19 00 00 05 83 08 03 00 00 00 1d f2 6f d3 00 00 02 fd 50 4c 54 45 47 70 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0b 0b 0d 00 00 00 02 02 02 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 62 68 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRoPLTEGpLbhp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.6	59248	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:23 UTC	595	OUT	GET /v/t39.30808-1/241270460_1943112789170907_1967367247279035119_n.png?stp=dst-png_p200x200&_nc_cat=1&ccb=1-7&_nc_sid=5f2048&_nc_ohc=1XNCsKdZNVcQ7kNvgEm2iAq&_nc_ht=scontent-hou1-1.xx&oh=00_AYC4FSoPI_caF-qQXmeiAUE38hRwGoIYd4Upuifu1nR3iA&oe=66584D80 HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:23 UTC	610	IN	HTTP/1.1 200 OK Last-Modified: Wed, 08 Sep 2021 07:35:44 GMT X-Needle-Checksum: 783964446 thrift_fmhk: GBCOBZcUNWjSK2dx0xfxcpk0FfDr4Z0EvFUAHCYEAAAA Content-Type: image/png content-digest: adler32=1796354532 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:23 GMT X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 12996
2024-05-25 23:00:23 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-05-25 23:00:23 UTC	12995	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 02 00 00 00 22 3a 39 c9 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 20 00 49 44 41 54 78 9c ed 9d 77 7c 55 45 da c7 9f 99 39 ed de 73 4b 0a 1d e9 bd 08 d2 7b 2f a2 2f ae 05 db 8a ac 15 41 40 57 5c d7 8e 8a 8a 22 60 01 fb ba 88 0a b2 ae 0d 14 57 2c a8 14 a5 83 20 d2 ab 74 0c c9 bd c9 2d a7 ce cc fb c7 49 42 68 49 48 72 93 1b 38 5f ca 27 1f 12 92 7b cf f9 9d 99 67 7e f3 3c cf a0 3f 8f 6a e0 e2 52 d6 e0 8a 7e 01 2e e7 27 ae b0 5c 12 82 2b 2c 97 84 e0 0a cb 25 21 b8 c2 72 49 08 ae b0 5c 12 82 2b 2c 97 84 e0 0a cb 25 21 b8 c2 72 49 08 ae b0 5c 12 82 2b 2c 97 84 e0 0a cb 25 21 b8 c2 72 49 08 ae b0 5c 12 82 2b 2c 97 84 e0 0a cb 25 21 b8 c2 72 49 08 ae b0 5c 12 82 2b 2c 97 84 e0 0a cb 25 21 Data Ascii: PNGIHDR":9sRGB, IDATxw\|UE9sK{//A@W\"`W, t-IBhIHr8_'{g~<?jR~.'\+,%!rI\+,%!rI\+,%!rI\+,%!rI\+,%!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.6	59249	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:23 UTC	610	OUT	GET /v/t39.30808-1/420086716_931108598615436_3858448142618749480_n.jpg?stp=c0.0.32.32a_cp0_dst-jpg_p32x32&_nc_cat=111&ccb=1-7&_nc_sid=5f2048&_nc_ohc=NXwRNknqveIQ7kNvgFwHOBH&_nc_ht=scontent-hou1-1.xx&oh=00_AYAMXp2fbTKj3nPqh5iGhMSYM9EtUaMzlU_M73za1DQd4A&oe=66583EEA HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:23 UTC	611	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 Jan 2024 12:40:30 GMT X-Needle-Checksum: 3129514411 thrift_fmhk: GBDAONEZ3Wu5o6TGSJ1muz4AFfDr4Z0EvFUAHCYEAAAA Content-Type: image/jpeg content-digest: adler32=3612751838 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:23 GMT X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=32, rtx=0, c=14, mss=1392, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 1115
2024-05-25 23:00:23 UTC	1	IN	Data Raw: ff Data Ascii:
2024-05-25 23:00:23 UTC	1114	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 36 65 30 31 30 30 30 30 62 31 30 31 30 30 30 30 30 37 30 32 30 30 30 30 33 36 30 32 30 30 30 30 37 31 30 32 30 30 30 30 65 35 30 32 30 30 30 30 33 65 30 33 30 30 30 30 36 61 30 33 30 30 30 30 39 63 30 33 30 30 30 30 64 33 30 33 30 30 30 30 35 62 30 34 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a6e010000b1010000070200003602000071020000e50200003e0300006a0300009c030000d30300005b040000C%# , #&')*)-0-(0%()(C(((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.6	59250	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:23 UTC	597	OUT	GET /v/t39.30808-1/241270460_1943112789170907_1967367247279035119_n.png?stp=cp0_dst-png_p24x24&_nc_cat=1&ccb=1-7&_nc_sid=5f2048&_nc_ohc=1XNCsKdZNVcQ7kNvgEm2iAq&_nc_ht=scontent-hou1-1.xx&oh=00_AYCtPdlNyu0dqd6iPTXBvUxjOno_5MTNZoU-rRxBkPW0yA&oe=66584D80 HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:23 UTC	608	IN	HTTP/1.1 200 OK Last-Modified: Wed, 08 Sep 2021 07:35:44 GMT X-Needle-Checksum: 783964446 thrift_fmhk: GBCOBZcUNWjSK2dx0xfxcpk0FfDr4Z0EvFUAHCYEAAAA Content-Type: image/png content-digest: adler32=207744956 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:23 GMT X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=31, rtx=0, c=14, mss=1392, tbw=3412, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 1052
2024-05-25 23:00:23 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-05-25 23:00:23 UTC	1051	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 02 00 00 00 6f 15 aa af 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 03 d6 49 44 41 54 38 8d ad 95 7d 4c d5 65 14 c7 cf f3 3c 3f ee ef de fb bb c0 15 6e 08 5c 25 32 b6 64 e1 0c 67 35 11 10 33 45 91 92 4c 52 6c cb fe b0 4d ed 45 33 db d8 6c 4b 96 43 0d 17 cb 25 73 b6 cc 32 b9 33 6b ad 55 84 b3 60 b8 8a 09 be d0 8c 17 5f 2e 20 f1 72 2f de cb 05 ee 8f df cb e5 f7 3c 4f 7f 60 c9 bd bb 65 7f 70 fe 3c 3b cf 67 e7 9c 9d ef f7 41 c3 1e 15 66 22 f0 8c 50 00 40 88 9a e5 9c 73 c6 39 e7 08 a1 e9 49 40 80 31 9e 9e fc 2f 10 63 8c 08 82 25 d6 44 04 a0 c6 b4 52 01 28 05 55 99 34 26 27 31 8e 1c 25 12 c4 18 13 2d a2 2a 2b 57 7f 6b bd 7c a1 e5 56 c7 4d c4 10 00 30 60 c9 73 52 72 56 e5 2e 58 fc 58 7c a2 Data Ascii: PNGIHDRosRGB,IDAT8}Le<?n\%2dg53ELRlME3lKC%s23kU`_. r/<O`ep<;gAf"P@s9I@1/c%DR(U4&'1%-*+Wk\|VM0`sRrV.XX\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.6	59252	157.240.24.13	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:23 UTC	595	OUT	GET /v/t39.30808-6/444202748_996576171837954_250908605759715264_n.jpg?stp=dst-jpg_p600x600&_nc_cat=102&ccb=1-7&_nc_sid=5f2048&_nc_ohc=OAqihbnrPUoQ7kNvgFnryPS&_nc_ht=scontent-hou1-1.xx&oh=00_AYDZBL9LFz-Cn1CR3xmu1gq6howv3CgU2z-SL4ry84scOg&oe=66584BAB HTTP/1.1 Host: scontent-hou1-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:23 UTC	611	IN	HTTP/1.1 200 OK Last-Modified: Sat, 25 May 2024 06:00:16 GMT X-Needle-Checksum: 1966316871 thrift_fmhk: GBDVht0hE5taSrgpbsAHDLzUFfDr4Z0EvFUAHCYEAAAA Content-Type: image/jpeg content-digest: adler32=815839089 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Sat, 25 May 2024 23:00:23 GMT X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=31, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 52034
2024-05-25 23:00:23 UTC	1	IN	Data Raw: ff Data Ascii:
2024-05-25 23:00:23 UTC	15126	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 37 32 30 31 30 30 30 30 65 30 31 32 30 30 30 30 35 35 32 63 30 30 30 30 33 61 32 66 30 30 30 30 37 35 33 65 30 30 30 30 35 31 35 64 30 30 30 30 39 39 37 65 30 30 30 30 30 33 38 34 30 30 30 30 62 37 38 37 30 30 30 30 38 61 39 36 30 30 30 30 34 32 63 62 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a72010000e0120000552c00003a2f0000753e0000515d0000997e000003840000b78700008a96000042cb0000C%# , #&')*)-0-(0%()(C(((((((((((((((
2024-05-25 23:00:23 UTC	16384	IN	Data Raw: 9f e4 5c db 20 6e 10 d3 b0 f7 89 b2 96 b1 8c e6 a5 c4 49 f6 53 6b e4 1b a9 6a 5f 26 ff 00 cc 81 63 df ab cf c2 25 87 50 bc b2 6f 89 3a a6 47 0b 12 b7 ec 65 3e 78 b3 8d ef 65 e4 52 5f f3 5e 45 25 c8 e8 bc 8a 4c c5 9a 5d 0a 29 48 ba 10 8e 0f 17 e7 64 da 57 ba d6 e7 aa 75 1c 8d 6e 6f bd 49 4c f8 db 9c ec 84 10 18 b8 97 3d 3e f4 68 65 04 05 2d 3b e2 00 94 ea 46 89 1e cb fb 22 ea 4a 39 23 05 c7 92 8a 95 85 ad 2f 26 ee e8 9b 48 f7 5f 2a f2 19 2d 7d 3f 15 e4 32 dc b7 a2 20 b4 d8 fa b3 dd 95 9c 37 96 f4 ee 79 75 ad 95 a0 6b 74 ea f7 38 5a dc 88 fc 54 75 6d 7d db 26 d6 03 f0 4f c4 6d 21 2c 1c d0 ad 37 06 db 5f f3 51 54 06 47 c3 73 6e 13 6b 72 80 32 ed 7f cd 4b 58 db 59 83 90 17 53 d6 99 99 92 c9 b3 96 c7 c3 1d 6e 99 5c 0b c1 22 c2 f7 2a 7a 8e 20 c8 d1 60 9d 5a 5c Data Ascii: \ nISkj_&c%Po:Ge>xeR_^E%L])HdWunoIL=>he-;F"J9#/&H_-}?2 7yukt8ZTum}&Om!,7_QTGsnkr2KXYSn\"z `Z\
2024-05-25 23:00:23 UTC	16384	IN	Data Raw: 49 b7 bf 8e b8 3d c1 3b 4a ed 20 30 5d 22 ae 8d f9 ca 58 fd c9 31 bf 5f fd 3d a9 02 f1 18 86 be 6e 9d 9e f2 bb 17 54 9a 2f da 5c 63 2e 18 23 25 a6 cd eb 35 a1 e0 79 18 fd 7a c4 0e cf 25 04 c8 ee 25 87 9f 66 2e a5 e2 c1 29 0d 9d 93 2c a8 10 82 cd 20 b7 bf d6 0e 51 d1 86 85 63 98 ce 18 ae a5 ce 20 d2 eb 11 0d ef 32 6d 67 7c cf c1 0c 06 a1 35 31 df 33 f1 5b 11 f9 69 fc 82 c4 33 a7 82 86 a8 4d 58 e0 71 cd 5f c1 95 24 39 3f f1 35 3c 2d b0 25 f2 38 98 c8 35 a4 b8 7a cc 5e 16 20 f6 6d 0b f5 e8 de 1c 99 54 26 46 4f dd 63 63 95 81 d6 bd 0d 7a b3 77 4d 42 0d 34 b2 34 99 69 ee 1f cc 0d af 61 97 15 fb 6f f8 97 7a 7e 1f e1 34 78 8b 4c e3 13 f6 33 7e 93 f5 eb 31 99 fd ed 3f 7d a3 72 97 f0 7f 71 ec 23 fb 7e 3e 87 3a cf e1 06 21 bb 7d 23 5c b9 ce 51 33 f8 48 c7 50 fc e6 Data Ascii: I=;J 0]"X1_=nT/\c.#%5yz%%f.), Qc 2mg\|513[i3MXq_$9?5<-%85z^ mT&FOcczwMB44iaoz~4xL3~1?}rq#~>:!}#\Q3HP
2024-05-25 23:00:23 UTC	4139	IN	Data Raw: 8b b4 0d 11 a7 27 0f f0 e1 ef 03 1e 57 68 d4 a1 07 44 d4 b3 eb 70 6c 28 2d 44 d9 87 16 28 8a 68 03 75 7e 9a 4a 90 45 de ea eb 4d 1f 49 e7 33 0e de e6 99 f1 15 d7 46 07 2a e0 21 17 86 40 5c 1b 2f 6f f9 82 90 17 a3 87 af 58 60 4a 51 c1 38 7e 7d 7c 58 ae 35 d6 9e b5 75 e7 09 0e 07 0a 05 55 e7 2d 1e f1 55 22 21 63 5c 99 ea b2 e0 b5 eb 6d e6 a5 ba d5 f6 9a af 32 a6 6d 75 92 d7 fa 45 a2 65 c9 7c bb 92 81 92 91 6f ad 16 ea 15 28 55 03 87 ac c7 34 94 42 83 63 ce a6 4f 04 9a 28 59 e4 ff 00 0f b7 c9 55 0f a4 2c 6b cd 15 a1 aa 91 20 3e 22 98 65 48 b1 4b 1d 76 61 8b c7 92 b1 82 96 9d 36 cc 32 19 f3 0a a0 b4 4a 6c 4e 23 9e cb 5d 5a b3 19 82 80 7c e2 f5 61 97 f2 17 38 3b 66 65 2f b6 0d 75 2c 34 72 9c 63 24 61 10 61 00 cd 60 34 d7 79 96 c7 e5 5a 05 14 70 8e 75 d2 63 76 Data Ascii: 'WhDpl(-D(hu~JEMI3F*!@\/oX`JQ8~}\|X5uU-U"!c\m2muEe\|o(U4BcO(YU,k >"eHKva62JlN#]Z\|a8;fe/u,4rc$aa`4yZpucv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.6	59251	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:23 UTC	1158	OUT	POST /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19868.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7373075910951068210&__req=b&__rev=1013770602&__s=%3A%3Afjuzaa&__spin_b=trunk&__spin_r=1013770602&__spin_t=1716678010&__user=0&dpr=1&jazoest=2936&lsd=AVrj9UP_w8I&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 981 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryFc7epUEdiXni91og sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/Codashop.IDofficial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:23 UTC	981	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 46 63 37 65 70 55 45 64 69 58 6e 69 39 31 6f 67 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 73 22 0d 0a 0d 0a 31 37 31 36 36 37 38 30 32 32 31 39 35 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 46 63 37 65 70 55 45 64 69 58 6e 69 39 31 6f 67 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 6f 73 74 5f 30 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 62 6c 6f 62 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 78 9c e5 51 db Data Ascii: ------WebKitFormBoundaryFc7epUEdiXni91ogContent-Disposition: form-data; name="ts"1716678022195------WebKitFormBoundaryFc7epUEdiXni91ogContent-Disposition: form-data; name="post_0"; filename="blob"Content-Type: application/octet-streamxQ
2024-05-25 23:00:23 UTC	2004	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-25 23:00:23 UTC	2001	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-
2024-05-25 23:00:23 UTC	70	IN	Data Raw: 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a Data Ascii: Alt-Svc: h3=":443"; ma=86400Connection: closeContent-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.6	59254	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:23 UTC	608	OUT	GET /rsrc.php/yT/r/aGT3gskzWBf.ico HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:23 UTC	1894	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: PnZPD3N3Z7MKaS+rHePOSQ== Expires: Sat, 17 May 2025 00:04:44 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} x-fb-optimizer: 0 X-FB-Debug: axwksuJqt2FFSzJqaJeBt1esOsa7mm9cHXBhLh2jnmq3E7iRntp6mje1VldZwUcLbMtgmBCj1hpgyn3oGkCMLg== Date: Sat, 25 May 2024 23:00:23 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 5430
2024-05-25 23:00:23 UTC	1	IN	Data Raw: 00 Data Ascii:
2024-05-25 23:00:23 UTC	5429	IN	Data Raw: 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 68 08 20 ff 66 08 a0 ff f3 ec cf ff ff ff ff ff ff ff ff ff 66 08 df ff 67 09 90 ff 64 08 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 65 07 90 ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 65 09 90 ff 70 10 10 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 66 07 cf ff 66 08 ff ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 Data Ascii: h& ( h ffgd@`efffffep`ffffffff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.6	59253	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:23 UTC	768	OUT	GET /data/manifest/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://www.facebook.com/Codashop.IDofficial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:23 UTC	955	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/json reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-05-25 23:00:23 UTC	1144	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 74 79 6c 65 2d 73 72 63 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 64 61 74 61 3a 20 2a 2e 66 61 63 65 62 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: *.faceb
2024-05-25 23:00:23 UTC	1785	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-05-25 23:00:23 UTC	616	IN	Data Raw: 34 61 66 0d 0a 7b 22 67 63 6d 5f 73 65 6e 64 65 72 5f 69 64 22 3a 22 31 35 30 35 37 38 31 34 33 35 34 22 2c 22 67 63 6d 5f 75 73 65 72 5f 76 69 73 69 62 6c 65 5f 6f 6e 6c 79 22 3a 74 72 75 65 2c 22 65 64 67 65 5f 73 69 64 65 5f 70 61 6e 65 6c 22 3a 7b 22 70 72 65 66 65 72 72 65 64 5f 77 69 64 74 68 22 3a 33 37 36 7d 2c 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 22 46 61 63 65 62 6f 6f 6b 22 2c 22 6e 61 6d 65 22 3a 22 46 61 63 65 62 6f 6f 6b 22 2c 22 73 74 61 72 74 5f 75 72 6c 22 3a 22 5c 2f 3f 72 65 66 3d 68 6f 6d 65 73 63 72 65 65 6e 70 77 61 22 2c 22 64 69 73 70 6c 61 79 22 3a 22 6d 69 6e 69 6d 61 6c 2d 75 69 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 22 3a 22 23 46 46 46 46 46 46 22 2c 22 74 68 65 6d 65 5f 63 6f 6c 6f 72 22 3a 22 23 31 38 37 Data Ascii: 4af{"gcm_sender_id":"15057814354","gcm_user_visible_only":true,"edge_side_panel":{"preferred_width":376},"short_name":"Facebook","name":"Facebook","start_url":"\/?ref=homescreenpwa","display":"minimal-ui","background_color":"#FFFFFF","theme_color":"#187
2024-05-25 23:00:23 UTC	595	IN	Data Raw: 6f 6e 5c 2f 6a 73 6f 6e 22 2c 22 75 70 64 61 74 65 22 3a 31 30 30 2c 22 69 63 6f 6e 73 22 3a 5b 7b 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 30 5c 2f 72 5c 2f 65 46 5a 44 31 4b 41 42 7a 52 41 2e 70 6e 67 22 2c 22 73 69 7a 65 73 22 3a 22 31 39 32 78 31 39 32 22 7d 5d 2c 22 73 63 72 65 65 6e 73 68 6f 74 73 22 3a 5b 7b 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 54 5c 2f 72 5c 2f 6d 71 6c 68 71 78 48 70 54 2d 58 2e 70 6e 67 22 2c 22 73 69 7a 65 73 22 3a 22 34 36 34 78 34 37 38 22 2c 22 6c 61 62 65 6c 22 3a 22 57 69 64 67 65 74 20 Data Ascii: on\/json","update":100,"icons":[{"src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/y0\/r\/eFZD1KABzRA.png","sizes":"192x192"}],"screenshots":[{"src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yT\/r\/mqlhqxHpT-X.png","sizes":"464x478","label":"Widget

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.6	59255	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:24 UTC	1159	OUT	POST /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19868.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7373075910951068210&__req=c&__rev=1013770602&__s=%3A%3Afjuzaa&__spin_b=trunk&__spin_r=1013770602&__spin_t=1716678010&__user=0&dpr=1&jazoest=2936&lsd=AVrj9UP_w8I&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 4043 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryg7BA117ZQmbP9vcj sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/Codashop.IDofficial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:24 UTC	4043	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 67 37 42 41 31 31 37 5a 51 6d 62 50 39 76 63 6a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 73 22 0d 0a 0d 0a 31 37 31 36 36 37 38 30 32 33 32 31 39 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 67 37 42 41 31 31 37 5a 51 6d 62 50 39 76 63 6a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 6f 73 74 5f 30 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 62 6c 6f 62 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 78 9c ad 5b 6b Data Ascii: ------WebKitFormBoundaryg7BA117ZQmbP9vcjContent-Disposition: form-data; name="ts"1716678023219------WebKitFormBoundaryg7BA117ZQmbP9vcjContent-Disposition: form-data; name="post_0"; filename="blob"Content-Type: application/octet-streamx[k
2024-05-25 23:00:25 UTC	2004	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-25 23:00:25 UTC	2002	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-
2024-05-25 23:00:25 UTC	70	IN	Data Raw: 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a Data Ascii: Alt-Svc: h3=":443"; ma=86400Connection: closeContent-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.6	59257	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:25 UTC	607	OUT	GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19868.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7373075910951068210&__req=b&__rev=1013770602&__s=%3A%3Afjuzaa&__spin_b=trunk&__spin_r=1013770602&__spin_t=1716678010&__user=0&dpr=1&jazoest=2936&lsd=AVrj9UP_w8I&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:25 UTC	2004	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-25 23:00:25 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.6	59256	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:25 UTC	611	OUT	GET /rsrc.php/v3/y0/r/eFZD1KABzRA.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:25 UTC	1898	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: ZFLtdcU+Go6QpmTfGJWakA== Expires: Sat, 17 May 2025 04:21:18 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: jit3HuMpvVIcnhrDKd1GtPGhNuUGd/2LAg8412Ayb6Gs/AEiPMfx5xiX0mcF7gVkw65NiPPUIuxEGPaD02Sm2Q== Date: Sat, 25 May 2024 23:00:25 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 2106
2024-05-25 23:00:25 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-05-25 23:00:25 UTC	2080	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 03 00 00 00 65 02 9c 35 00 00 01 59 50 4c 54 45 47 70 4c 05 65 ff 08 65 ff 07 65 ff 10 70 ff 07 65 ff 08 66 ff 08 66 ff 08 68 ff 08 66 ff 07 66 ff 00 60 ff 10 60 ff ff ff ff 08 67 ff 07 66 ff 08 66 ff 08 67 ff 08 67 ff 08 66 ff 08 66 ff 08 66 ff 08 67 ff 07 66 ff 08 68 ff 09 65 ff 08 66 ff 08 64 ff 09 67 ff 07 65 ff 07 65 ff 06 63 ff 0a 66 ff 07 66 ff 08 65 ff 07 66 ff 09 67 ff 06 67 ff 08 65 ff 08 66 ff 08 66 ff ff ff ff ff ff ff 08 69 ff 08 68 ff 07 65 ff 09 66 ff 07 66 ff ff ff ff 0b 65 ff ff ff ff ff ff ff 07 65 ff 07 67 ff 07 66 ff 07 66 ff 0a 66 ff 09 66 ff 07 66 ff 09 66 ff 07 67 ff ff ff ff ff ff ff 06 66 ff 08 65 ff 07 65 ff ff ff ff 87 b7 ff 46 8c ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDRe5YPLTEGpLeeepeffhff``gffggfffgfhefdgeecffefggeffiheffeegffffffgfeeF
2024-05-25 23:00:25 UTC	25	IN	Data Raw: 7e d2 11 fa 3f f1 8f 71 aa 5e ac 6d e8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: ~?q^mIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.6	59258	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:25 UTC	372	OUT	GET /rsrc.php/yT/r/aGT3gskzWBf.ico HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:25 UTC	1894	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: PnZPD3N3Z7MKaS+rHePOSQ== Expires: Sat, 17 May 2025 00:04:44 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} x-fb-optimizer: 0 X-FB-Debug: axwksuJqt2FFSzJqaJeBt1esOsa7mm9cHXBhLh2jnmq3E7iRntp6mje1VldZwUcLbMtgmBCj1hpgyn3oGkCMLg== Date: Sat, 25 May 2024 23:00:25 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=92, rtx=0, c=14, mss=1392, tbw=3410, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 5430
2024-05-25 23:00:25 UTC	1	IN	Data Raw: 00 Data Ascii:
2024-05-25 23:00:25 UTC	5429	IN	Data Raw: 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 68 08 20 ff 66 08 a0 ff f3 ec cf ff ff ff ff ff ff ff ff ff 66 08 df ff 67 09 90 ff 64 08 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 65 07 90 ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 65 09 90 ff 70 10 10 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 66 07 cf ff 66 08 ff ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 Data Ascii: h& ( h ffgd@`efffffep`ffffffff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.6	59260	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:26 UTC	781	OUT	GET /c/CodashopOfficial HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:26 UTC	2465	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Sat, 25 May 2024 23:00:26 GMT Strict-Transport-Security: max-age=31536000 X-Frame-Options: SAMEORIGIN Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="youtube_main" Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: GPS=1; Domain=.youtube.com; Expires=Sat, 25-May-2024 23:30:26 GMT; Path=/; Secure; HttpOnly Set-Cookie: YSC=Ni32HAp5Ta0; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_INFO1_LIVE=; Domain=.youtube.com; Expires=Sun, 29-Aug-2021 23:00:26 GMT; Path=/; Secure; HttpOnly; SameSite=none Set-Cookie: VISITOR_INFO1_LIVE=1rT23KtHBDQ; Domain=.youtube.com; Expires=Thu, 21-Nov-2024 23:00:26 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; Domain=.youtube.com; Expires=Thu, 21-Nov-2024 23:00:26 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: PREF=f7=4000; Domain=.youtube.com; Expires=Fri, 24-Jan-2025 10:53:26 GMT; Path=/; Secure Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-25 23:00:26 UTC	2465	IN	Data Raw: 32 32 33 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 52 6f 62 6f 74 6f 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 22 20 6c 61 6e 67 3d 22 65 6e 22 20 64 61 72 6b 65 72 2d 64 61 72 6b 2d 74 68 65 6d 65 20 64 61 72 6b 65 72 2d 64 61 72 6b 2d 74 68 65 6d 65 2d 64 65 70 72 65 63 61 74 65 20 73 79 73 74 65 6d 2d 69 63 6f 6e 73 20 74 79 70 6f 67 72 61 70 68 79 20 74 79 70 6f 67 72 61 70 68 79 2d 73 70 61 63 69 6e 67 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 69 64 3d 22 5f 67 64 22 20 6e 6f 6e 63 65 3d 22 35 55 45 5a 73 74 57 67 37 68 61 5f 65 6e 44 55 70 43 4b 6b 6c 77 22 3e 77 69 6e 64 6f 77 Data Ascii: 2231<!DOCTYPE html><html style="font-size: 10px;font-family: Roboto, Arial, sans-serif;" lang="en" darker-dark-theme darker-dark-theme-deprecate system-icons typography typography-spacing><head><script data-id="_gd" nonce="5UEZstWg7ha_enDUpCKklw">window
2024-05-25 23:00:26 UTC	2465	IN	Data Raw: 65 22 29 3e 3d 30 29 74 68 69 72 64 50 61 72 74 79 53 63 72 69 70 74 3d 74 72 75 65 3b 76 61 72 20 62 61 73 65 55 72 6c 3d 77 69 6e 64 6f 77 5b 22 79 74 63 66 67 22 5d 2e 67 65 74 28 22 45 4d 45 52 47 45 4e 43 59 5f 42 41 53 45 5f 55 52 4c 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 65 72 72 6f 72 5f 32 30 34 3f 74 3d 6a 73 65 72 72 6f 72 26 6c 65 76 65 6c 3d 45 52 52 4f 52 22 29 3b 76 61 72 20 75 6e 73 75 70 70 6f 72 74 65 64 3d 6d 65 73 73 61 67 65 2e 69 6e 64 65 78 4f 66 28 22 77 69 6e 64 6f 77 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 73 20 69 73 20 75 6e 64 65 66 69 6e 65 64 22 29 3e 3d 30 3b 69 66 28 74 68 69 72 64 50 61 72 74 79 53 63 72 69 70 74 7c 7c 75 6e 73 75 70 70 6f 72 74 65 64 29 62 61 73 65 55 72 6c 3d Data Ascii: e")>=0)thirdPartyScript=true;var baseUrl=window["ytcfg"].get("EMERGENCY_BASE_URL","https://www.youtube.com/error_204?t=jserror&level=ERROR");var unsupported=message.indexOf("window.customElements is undefined")>=0;if(thirdPartyScript\|\|unsupported)baseUrl=
2024-05-25 23:00:26 UTC	2465	IN	Data Raw: 2f 64 65 73 6b 74 6f 70 2f 61 65 66 30 63 65 64 33 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 73 2f 64 65 73 6b 74 6f 70 2f 61 65 66 30 63 65 64 33 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 5f 33 32 78 33 32 2e 70 6e 67 22 20 73 69 7a 65 73 3d 22 33 32 78 33 32 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 73 2f 64 65 73 6b 74 6f 70 2f 61 65 66 30 63 65 64 33 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 5f 34 38 78 34 38 2e 70 6e 67 22 20 73 69 7a 65 73 3d 22 34 Data Ascii: /desktop/aef0ced3/img/favicon.ico" type="image/x-icon"><link rel="icon" href="https://www.youtube.com/s/desktop/aef0ced3/img/favicon_32x32.png" sizes="32x32"><link rel="icon" href="https://www.youtube.com/s/desktop/aef0ced3/img/favicon_48x48.png" sizes="4
2024-05-25 23:00:26 UTC	1366	IN	Data Raw: 74 63 73 69 2e 74 69 63 6b 28 22 76 63 22 29 7d 76 61 72 20 73 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 6c 2c 74 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 79 74 63 73 69 2e 6e 6f 77 28 29 3b 65 6c 2e 6c 6f 61 64 54 69 6d 65 3d 6e 3b 69 66 28 65 6c 2e 73 6c 74 29 65 6c 2e 73 6c 74 28 29 7d 2c 74 29 7d 3b 77 2e 5f 5f 79 74 52 49 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 6c 29 7b 69 66 28 21 65 6c 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 74 68 75 6d 62 22 29 29 69 66 28 77 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 29 77 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 6c 74 28 65 6c 2c 30 29 7d 29 3b 65 6c 73 65 20 73 6c Data Ascii: tcsi.tick("vc")}var slt=function(el,t){setTimeout(function(){var n=ytcsi.now();el.loadTime=n;if(el.slt)el.slt()},t)};w.__ytRIL=function(el){if(!el.getAttribute("data-thumb"))if(w.requestAnimationFrame)w.requestAnimationFrame(function(){slt(el,0)});else sl
2024-05-25 23:00:26 UTC	1390	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 43 4c 49 45 4e 54 5f 43 41 4e 41 52 59 5f 53 54 41 54 45 22 3a 22 6e 6f 6e 65 22 2c 22 44 45 56 49 43 45 22 3a 22 63 62 72 5c 75 30 30 33 64 43 68 72 6f 6d 65 5c 75 30 30 32 36 63 62 72 76 65 72 5c 75 30 30 33 64 31 31 37 2e 30 2e 30 2e 30 5c 75 30 30 32 36 63 65 6e 67 5c 75 30 30 33 64 57 65 62 4b 69 74 5c 75 30 30 32 36 63 65 6e 67 76 65 72 5c 75 30 30 33 64 35 33 37 2e 33 36 5c 75 30 30 32 36 63 6f 73 5c 75 30 30 33 64 57 69 6e 64 6f 77 73 5c 75 30 30 32 36 63 6f 73 76 65 72 5c 75 30 30 33 64 31 30 2e 30 5c 75 30 30 32 36 63 70 6c 61 74 66 6f 72 6d 5c 75 30 30 33 64 44 45 53 4b 54 4f 50 22 2c 22 44 49 53 41 42 4c 45 5f 59 54 5f 49 4d 47 5f 44 45 4c 41 59 5f 4c 4f 41 44 49 4e 47 22 3a 66 61 6c 73 65 2c 22 45 4c 45 4d 45 4e 54 5f Data Ascii: 8000{"CLIENT_CANARY_STATE":"none","DEVICE":"cbr\u003dChrome\u0026cbrver\u003d117.0.0.0\u0026ceng\u003dWebKit\u0026cengver\u003d537.36\u0026cos\u003dWindows\u0026cosver\u003d10.0\u0026cplatform\u003dDESKTOP","DISABLE_YT_IMG_DELAY_LOADING":false,"ELEMENT_
2024-05-25 23:00:26 UTC	1390	IN	Data Raw: 65 2c 22 64 65 73 6b 74 6f 70 5f 61 6e 69 6d 61 74 65 5f 6d 69 6e 69 70 6c 61 79 65 72 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 63 6c 69 65 6e 74 5f 72 65 6c 65 61 73 65 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 64 65 6c 61 79 5f 70 6c 61 79 65 72 5f 72 65 73 69 7a 69 6e 67 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 65 6e 61 62 6c 65 5f 64 6d 70 61 6e 65 6c 5f 63 6c 69 63 6b 5f 64 72 61 67 5f 73 63 72 6f 6c 6c 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 65 6e 61 62 6c 65 5f 64 6d 70 61 6e 65 6c 5f 73 63 72 6f 6c 6c 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 65 6e 61 62 6c 65 5f 64 6d 70 61 6e 65 6c 5f 77 68 65 65 6c 5f 73 63 72 6f 6c 6c 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 6b 65 79 62 6f 61 72 64 5f 63 61 70 74 75 72 Data Ascii: e,"desktop_animate_miniplayer":true,"desktop_client_release":true,"desktop_delay_player_resizing":true,"desktop_enable_dmpanel_click_drag_scroll":true,"desktop_enable_dmpanel_scroll":true,"desktop_enable_dmpanel_wheel_scroll":true,"desktop_keyboard_captur
2024-05-25 23:00:26 UTC	1390	IN	Data Raw: 76 73 73 5f 70 69 6e 67 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 61 64 73 5f 77 65 62 5f 65 70 5f 62 75 65 6e 6f 73 5f 61 69 72 65 73 5f 61 6e 64 5f 70 61 64 64 69 6e 67 5f 66 69 78 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 61 73 79 6e 63 5f 61 62 5f 65 6e 66 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 62 75 65 6e 6f 73 5f 61 69 72 65 73 5f 74 79 70 6f 67 72 61 70 68 79 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 62 75 74 74 6f 6e 5f 62 65 68 61 76 69 6f 72 5f 72 65 75 73 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 68 61 6e 6e 65 6c 5f 70 61 67 65 5f 6d 6f 64 65 72 6e 5f 70 72 6f 66 69 6c 65 5f 73 65 63 74 69 6f 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 68 72 6f 6d 65 5f 72 65 6c 61 74 65 64 5f 77 65 62 73 69 74 65 73 5f 73 74 Data Ascii: vss_pings":true,"enable_ads_web_ep_buenos_aires_and_padding_fix":true,"enable_async_ab_enf":true,"enable_buenos_aires_typography":true,"enable_button_behavior_reuse":true,"enable_channel_page_modern_profile_section":true,"enable_chrome_related_websites_st
2024-05-25 23:00:26 UTC	1390	IN	Data Raw: 72 69 6e 67 5f 6c 69 6d 69 74 65 64 5f 68 35 5f 63 6c 69 65 6e 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 67 6f 6f 67 6c 65 5f 70 61 79 6d 65 6e 74 5f 62 69 6c 6c 69 6e 67 5f 63 6f 6d 6d 61 6e 64 5f 63 6c 69 65 6e 74 5f 73 75 70 70 6f 72 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 68 61 6e 64 6c 65 5f 73 65 61 72 63 68 5f 6f 6e 5f 63 68 61 6e 6e 65 6c 5f 73 77 69 74 63 68 65 72 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 68 61 6e 64 6c 65 73 5f 61 63 63 6f 75 6e 74 5f 6d 65 6e 75 5f 73 77 69 74 63 68 65 72 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 68 61 6e 64 6c 65 73 5f 69 6e 5f 6d 65 6e 74 69 6f 6e 5f 73 75 67 67 65 73 74 5f 70 6f 73 74 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 68 6c 70 5f 63 6c 69 65 6e 74 5f 69 63 6f 6e 5f 70 69 63 Data Ascii: ring_limited_h5_client":true,"enable_google_payment_billing_command_client_support":true,"enable_handle_search_on_channel_switcher":true,"enable_handles_account_menu_switcher":true,"enable_handles_in_mention_suggest_posts":true,"enable_hlp_client_icon_pic
2024-05-25 23:00:26 UTC	1390	IN	Data Raw: 5f 73 69 5f 66 61 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 6c 61 79 61 62 6c 65 5f 61 31 31 79 5f 6c 61 62 65 6c 5f 77 69 74 68 5f 62 61 64 67 65 5f 74 65 78 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 6c 61 79 61 62 6c 65 5f 63 6f 6e 74 61 69 6e 65 72 5f 73 61 76 65 5f 62 75 74 74 6f 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 6c 61 79 61 62 6c 65 5f 65 6e 74 69 74 79 5f 73 61 76 65 5f 6d 65 6e 75 5f 69 74 65 6d 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 6c 61 79 61 62 6c 65 73 5f 64 65 65 70 6c 69 6e 6b 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 6c 61 79 61 62 6c 65 73 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 6c 61 79 61 62 6c 65 73 5f 66 75 6c 6c 73 63 72 65 65 6e 5f 72 65 66 61 Data Ascii: _si_fa":true,"enable_playable_a11y_label_with_badge_text":true,"enable_playable_container_save_button":true,"enable_playable_entity_save_menu_item":true,"enable_playables_deeplink":true,"enable_playables_destination":true,"enable_playables_fullscreen_refa
2024-05-25 23:00:26 UTC	1390	IN	Data Raw: 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 65 63 74 69 6f 6e 5f 6c 69 73 74 5f 73 63 72 6f 6c 6c 5f 74 6f 5f 69 74 65 6d 5f 73 65 63 74 69 6f 6e 5f 77 65 62 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 65 65 64 6c 65 73 73 5f 73 68 6f 72 74 73 5f 75 72 6c 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 65 72 76 65 72 5f 73 74 69 74 63 68 65 64 5f 64 61 69 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 65 72 76 69 63 65 5f 61 6a 61 78 5f 63 73 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 65 72 76 6c 65 74 5f 65 72 72 6f 72 73 5f 73 74 72 65 61 6d 7a 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 65 72 76 6c 65 74 5f 73 74 72 65 61 6d 7a 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 66 76 5f 61 75 64 69 6f 5f 70 69 76 6f 74 5f 75 72 6c 22 3a 74 72 Data Ascii: rue,"enable_section_list_scroll_to_item_section_web":true,"enable_seedless_shorts_url":true,"enable_server_stitched_dai":true,"enable_service_ajax_csn":true,"enable_servlet_errors_streamz":true,"enable_servlet_streamz":true,"enable_sfv_audio_pivot_url":tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.6	59262	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:26 UTC	607	OUT	GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19868.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7373075910951068210&__req=c&__rev=1013770602&__s=%3A%3Afjuzaa&__spin_b=trunk&__spin_r=1013770602&__spin_t=1716678010&__user=0&dpr=1&jazoest=2936&lsd=AVrj9UP_w8I&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:26 UTC	2004	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-25 23:00:26 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.6	59259	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:27 UTC	1142	OUT	GET /s/desktop/aef0ced3/jsbin/desktop_polymer.vflset/desktop_polymer.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000
2024-05-25 23:00:27 UTC	690	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 8842808 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 24 May 2024 15:36:05 GMT Expires: Sat, 24 May 2025 15:36:05 GMT Cache-Control: public, max-age=31536000 Last-Modified: Fri, 24 May 2024 07:14:12 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 113062 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:27 UTC	700	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 2f 2a 20 48 54 4d 4c 20 63 6f 6e 74 65 6e 74 20 69 6e 6c 69 6e 65 64 20 66 72 6f 6d 20 48 54 4d 4c 20 69 6d 70 6f 72 74 20 2a 2f 0a 63 6f 6e 73 74 20 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 0a 64 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 6e 6c 69 6e 65 64 2d 68 74 6d 6c 22 2c 22 22 29 3b 0a 63 6f 6e 73 74 20 66 69 6e 61 6c 53 74 79 6c 65 54 65 78 74 3d 22 68 74 6d 6c 3a 6e 6f 74 28 2e 73 74 79 6c 65 2d 73 63 6f 70 65 29 20 7b 5c 6e 20 20 2d 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 6c 69 67 68 74 2d 74 68 65 6d 65 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 3b 5c 6e 20 20 2d 2d 70 72 69 6d 61 72 79 2d 62 61 63 6b 67 72 6f 75 Data Ascii: (function(){/* HTML content inlined from HTML import */const d=document.createElement("div");d.setAttribute("inlined-html","");const finalStyleText="html:not(.style-scope) {\n --primary-text-color: var(--light-theme-text-color);\n --primary-backgrou
2024-05-25 23:00:27 UTC	1390	IN	Data Raw: 6e 20 20 2d 2d 6c 69 67 68 74 2d 74 68 65 6d 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 5c 6e 20 20 2d 2d 6c 69 67 68 74 2d 74 68 65 6d 65 2d 62 61 73 65 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 5c 6e 20 20 2d 2d 6c 69 67 68 74 2d 74 68 65 6d 65 2d 74 65 78 74 2d 63 6f 6c 6f 72 3a 20 23 32 31 32 31 32 31 3b 5c 6e 20 20 2d 2d 6c 69 67 68 74 2d 74 68 65 6d 65 2d 73 65 63 6f 6e 64 61 72 79 2d 63 6f 6c 6f 72 3a 20 23 37 33 37 33 37 33 3b 5c 6e 20 20 2d 2d 6c 69 67 68 74 2d 74 68 65 6d 65 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 3a 20 23 39 62 39 62 39 62 3b 5c 6e 20 20 2d 2d 6c 69 67 68 74 2d 74 68 65 6d 65 2d 64 69 76 69 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 64 62 64 62 64 62 3b 5c 6e 20 20 2d 2d 64 61 72 6b 2d 74 68 65 6d 65 Data Ascii: n --light-theme-background-color: #fff;\n --light-theme-base-color: #000;\n --light-theme-text-color: #212121;\n --light-theme-secondary-color: #737373;\n --light-theme-disabled-color: #9b9b9b;\n --light-theme-divider-color: #dbdbdb;\n --dark-theme
2024-05-25 23:00:27 UTC	1390	IN	Data Raw: 6e 5c 6e 70 61 70 65 72 2d 72 69 70 70 6c 65 2e 63 69 72 63 6c 65 20 23 62 61 63 6b 67 72 6f 75 6e 64 2e 70 61 70 65 72 2d 72 69 70 70 6c 65 2c 70 61 70 65 72 2d 72 69 70 70 6c 65 2e 63 69 72 63 6c 65 20 23 77 61 76 65 73 2e 70 61 70 65 72 2d 72 69 70 70 6c 65 20 7b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 5c 6e 7d 5c 6e 5c 6e 70 61 70 65 72 2d 72 69 70 70 6c 65 2e 63 69 72 63 6c 65 20 2e 77 61 76 65 2d 63 6f 6e 74 61 69 6e 65 72 2e 70 61 70 65 72 2d 72 69 70 70 6c 65 20 7b 5c 6e 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 5c 6e 7d 5c 6e 5c 6e 74 70 2d 79 74 2d 70 61 70 65 72 2d 62 75 74 74 6f 6e 20 7b 5c 6e 20 20 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 5c 6e 20 20 64 69 Data Ascii: n\npaper-ripple.circle #background.paper-ripple,paper-ripple.circle #waves.paper-ripple {\n border-radius: 50%;\n}\n\npaper-ripple.circle .wave-container.paper-ripple {\n overflow: hidden;\n}\n\ntp-yt-paper-button {\n display: -ms-inline-flexbox;\n di
2024-05-25 23:00:27 UTC	1390	IN	Data Raw: 5b 65 6c 65 76 61 74 69 6f 6e 3d 5c 22 33 5c 22 5d 20 7b 5c 6e 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 36 70 78 20 31 30 70 78 20 30 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 34 29 2c 20 30 20 31 70 78 20 31 38 70 78 20 30 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 32 29 2c 20 30 20 33 70 78 20 35 70 78 20 2d 31 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 34 29 3b 5c 6e 7d 5c 6e 5c 6e 74 70 2d 79 74 2d 70 61 70 65 72 2d 62 75 74 74 6f 6e 5b 65 6c 65 76 61 74 69 6f 6e 3d 5c 22 34 5c 22 5d 20 7b 5c 6e 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 38 70 78 20 31 30 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 34 29 2c 20 30 20 33 70 78 20 31 34 70 78 20 32 70 78 20 72 67 62 61 28 30 2c Data Ascii: [elevation=\"3\"] {\n box-shadow: 0 6px 10px 0 rgba(0, 0, 0, 0.14), 0 1px 18px 0 rgba(0, 0, 0, 0.12), 0 3px 5px -1px rgba(0, 0, 0, 0.4);\n}\n\ntp-yt-paper-button[elevation=\"4\"] {\n box-shadow: 0 8px 10px 1px rgba(0, 0, 0, 0.14), 0 3px 14px 2px rgba(0,
2024-05-25 23:00:27 UTC	1390	IN	Data Raw: 2d 72 6f 74 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 35 36 38 6d 73 3b 5c 6e 20 20 2d 2d 70 61 70 65 72 2d 73 70 69 6e 6e 65 72 2d 65 78 70 61 6e 64 2d 63 6f 6e 74 72 61 63 74 2d 64 75 72 61 74 69 6f 6e 3a 20 31 33 33 33 6d 73 3b 5c 6e 20 20 2d 2d 70 61 70 65 72 2d 73 70 69 6e 6e 65 72 2d 66 75 6c 6c 2d 63 79 63 6c 65 2d 64 75 72 61 74 69 6f 6e 3a 20 35 33 33 32 6d 73 3b 5c 6e 20 20 2d 2d 70 61 70 65 72 2d 73 70 69 6e 6e 65 72 2d 63 6f 6f 6c 64 6f 77 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 34 30 30 6d 73 3b 5c 6e 7d 5c 6e 5c 6e 23 73 70 69 6e 6e 65 72 43 6f 6e 74 61 69 6e 65 72 2e 74 70 2d 79 74 2d 70 61 70 65 72 2d 73 70 69 6e 6e 65 72 2d 6c 69 74 65 20 7b 5c 6e 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 5c 6e 20 20 68 65 69 67 68 74 3a 20 31 30 30 Data Ascii: -rotation-duration: 1568ms;\n --paper-spinner-expand-contract-duration: 1333ms;\n --paper-spinner-full-cycle-duration: 5332ms;\n --paper-spinner-cooldown-duration: 400ms;\n}\n\n#spinnerContainer.tp-yt-paper-spinner-lite {\n width: 100%;\n height: 100
2024-05-25 23:00:27 UTC	1390	IN	Data Raw: 65 3a 20 66 69 6c 6c 2d 75 6e 66 69 6c 6c 2d 72 6f 74 61 74 65 3b 5c 6e 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 70 61 70 65 72 2d 73 70 69 6e 6e 65 72 2d 66 75 6c 6c 2d 63 79 63 6c 65 2d 64 75 72 61 74 69 6f 6e 29 3b 5c 6e 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 20 30 2c 20 30 2e 32 2c 20 31 29 3b 5c 6e 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 20 69 6e 66 69 6e 69 74 65 3b 5c 6e 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 66 69 6c 6c 2d 75 6e 66 69 6c 6c 2d 72 6f 74 61 74 65 3b 5c 6e 20 20 61 Data Ascii: e: fill-unfill-rotate;\n -webkit-animation-duration: var(--paper-spinner-full-cycle-duration);\n -webkit-animation-timing-function: cubic-bezier(0.4, 0, 0.2, 1);\n -webkit-animation-iteration-count: infinite;\n animation-name: fill-unfill-rotate;\n a
2024-05-25 23:00:27 UTC	1390	IN	Data Raw: 3b 5c 6e 7d 5c 6e 5c 6e 32 35 25 20 7b 5c 6e 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 32 37 30 64 65 67 29 3b 5c 6e 7d 5c 6e 5c 6e 33 37 2e 35 25 20 7b 5c 6e 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 34 30 35 64 65 67 29 3b 5c 6e 7d 5c 6e 5c 6e 35 30 25 20 7b 5c 6e 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 35 34 30 64 65 67 29 3b 5c 6e 7d 5c 6e 5c 6e 36 32 2e 35 25 20 7b 5c 6e 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 36 37 35 64 65 67 29 3b 5c 6e 7d 5c 6e 5c 6e 37 35 25 20 7b 5c 6e 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 38 31 30 64 65 67 29 3b Data Ascii: ;\n}\n\n25% {\n -webkit-transform: rotate(270deg);\n}\n\n37.5% {\n -webkit-transform: rotate(405deg);\n}\n\n50% {\n -webkit-transform: rotate(540deg);\n}\n\n62.5% {\n -webkit-transform: rotate(675deg);\n}\n\n75% {\n -webkit-transform: rotate(810deg);
2024-05-25 23:00:27 UTC	1390	IN	Data Raw: 2d 6f 75 74 20 7b 5c 6e 30 25 20 7b 5c 6e 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 5c 6e 7d 5c 6e 5c 6e 31 35 25 20 7b 5c 6e 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 5c 6e 7d 5c 6e 5c 6e 32 35 25 20 7b 5c 6e 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 5c 6e 7d 5c 6e 5c 6e 35 30 25 20 7b 5c 6e 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 5c 6e 7d 5c 6e 5c 6e 35 31 25 20 7b 5c 6e 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 5c 6e 7d 5c 6e 5c 6e 74 6f 20 7b 5c 6e 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 5c 6e 7d 5c 6e 5c 6e 7d 5c 6e 5c 6e 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 6c 61 79 65 72 2d 33 2d 66 61 64 65 2d 69 6e 2d 6f 75 74 20 7b 5c 6e 30 25 20 7b 5c 6e 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 5c 6e 7d 5c 6e 5c 6e 34 30 25 20 7b 5c 6e 20 20 6f 70 61 63 69 Data Ascii: -out {\n0% {\n opacity: 0;\n}\n\n15% {\n opacity: 0;\n}\n\n25% {\n opacity: 1;\n}\n\n50% {\n opacity: 1;\n}\n\n51% {\n opacity: 0;\n}\n\nto {\n opacity: 0;\n}\n\n}\n\n@-webkit-keyframes layer-3-fade-in-out {\n0% {\n opacity: 0;\n}\n\n40% {\n opaci
2024-05-25 23:00:27 UTC	1390	IN	Data Raw: 70 3a 20 30 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 70 61 70 65 72 2d 73 70 69 6e 6e 65 72 2d 73 74 72 6f 6b 65 2d 77 69 64 74 68 2c 20 33 70 78 29 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 5c 6e 7d 5c 6e 5c 6e 2e 63 69 72 63 6c 65 2d 63 6c 69 70 70 65 72 2e 74 70 2d 79 74 2d 70 61 70 65 72 2d 73 70 69 6e 6e 65 72 2d 6c 69 74 65 20 2e 63 69 72 63 6c 65 2e 74 70 2d 79 74 2d 70 61 70 65 72 2d 73 70 69 6e 6e 65 72 2d 6c 69 74 65 20 7b 5c 6e 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 5c 6e 20 20 77 69 64 74 68 3a 20 32 30 30 25 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 Data Ascii: p: 0;\n border-width: var(--paper-spinner-stroke-width, 3px);\n border-radius: 50%;\n}\n\n.circle-clipper.tp-yt-paper-spinner-lite .circle.tp-yt-paper-spinner-lite {\n bottom: 0;\n width: 200%;\n border-style: solid;\n border-bottom-color: transpare
2024-05-25 23:00:27 UTC	1390	IN	Data Raw: 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 6c 65 66 74 2d 73 70 69 6e 3b 5c 6e 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 6c 65 66 74 2d 73 70 69 6e 3b 5c 6e 7d 5c 6e 5c 6e 2e 61 63 74 69 76 65 2e 74 70 2d 79 74 2d 70 61 70 65 72 2d 73 70 69 6e 6e 65 72 2d 6c 69 74 65 20 2e 63 69 72 63 6c 65 2d 63 6c 69 70 70 65 72 2e 72 69 67 68 74 2e 74 70 2d 79 74 2d 70 61 70 65 72 2d 73 70 69 6e 6e 65 72 2d 6c 69 74 65 20 2e 63 69 72 63 6c 65 2e 74 70 2d 79 74 2d 70 61 70 65 72 2d 73 70 69 6e 6e 65 72 2d 6c 69 74 65 20 7b 5c 6e 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 72 69 67 68 74 2d 73 70 69 6e 3b 5c 6e 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 72 69 67 68 74 2d 73 70 69 6e 3b 5c 6e 7d 5c 6e 5c 6e 40 Data Ascii: animation-name: left-spin;\n animation-name: left-spin;\n}\n\n.active.tp-yt-paper-spinner-lite .circle-clipper.right.tp-yt-paper-spinner-lite .circle.tp-yt-paper-spinner-lite {\n -webkit-animation-name: right-spin;\n animation-name: right-spin;\n}\n\n@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.6	59263	157.240.253.1	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:27 UTC	375	OUT	GET /rsrc.php/v3/y0/r/eFZD1KABzRA.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:27 UTC	1898	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: ZFLtdcU+Go6QpmTfGJWakA== Expires: Sat, 17 May 2025 04:21:18 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: jit3HuMpvVIcnhrDKd1GtPGhNuUGd/2LAg8412Ayb6Gs/AEiPMfx5xiX0mcF7gVkw65NiPPUIuxEGPaD02Sm2Q== Date: Sat, 25 May 2024 23:00:27 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1392, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 2106
2024-05-25 23:00:27 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-05-25 23:00:27 UTC	2080	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 03 00 00 00 65 02 9c 35 00 00 01 59 50 4c 54 45 47 70 4c 05 65 ff 08 65 ff 07 65 ff 10 70 ff 07 65 ff 08 66 ff 08 66 ff 08 68 ff 08 66 ff 07 66 ff 00 60 ff 10 60 ff ff ff ff 08 67 ff 07 66 ff 08 66 ff 08 67 ff 08 67 ff 08 66 ff 08 66 ff 08 66 ff 08 67 ff 07 66 ff 08 68 ff 09 65 ff 08 66 ff 08 64 ff 09 67 ff 07 65 ff 07 65 ff 06 63 ff 0a 66 ff 07 66 ff 08 65 ff 07 66 ff 09 67 ff 06 67 ff 08 65 ff 08 66 ff 08 66 ff ff ff ff ff ff ff 08 69 ff 08 68 ff 07 65 ff 09 66 ff 07 66 ff ff ff ff 0b 65 ff ff ff ff ff ff ff 07 65 ff 07 67 ff 07 66 ff 07 66 ff 0a 66 ff 09 66 ff 07 66 ff 09 66 ff 07 67 ff ff ff ff ff ff ff 06 66 ff 08 65 ff 07 65 ff ff ff ff 87 b7 ff 46 8c ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDRe5YPLTEGpLeeepeffhff``gffggfffgfhefdgeecffefggeffiheffeegffffffgfeeF
2024-05-25 23:00:27 UTC	25	IN	Data Raw: 7e d2 11 fa 3f f1 8f 71 aa 5e ac 6d e8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: ~?q^mIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.6	59267	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:27 UTC	1131	OUT	GET /s/desktop/aef0ced3/cssbin/www-onepick.css HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000
2024-05-25 23:00:28 UTC	679	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 739 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 24 May 2024 15:36:05 GMT Expires: Sat, 24 May 2025 15:36:05 GMT Cache-Control: public, max-age=31536000 Last-Modified: Fri, 24 May 2024 07:14:12 GMT Content-Type: text/css Vary: Accept-Encoding, Origin Age: 113063 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:28 UTC	711	IN	Data Raw: 2e 70 69 63 6b 65 72 2d 66 72 61 6d 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 6f 72 64 65 72 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 70 69 63 6b 65 72 2e 6d 6f 64 61 6c 2d 64 69 61 6c 6f 67 2d 62 67 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 7d 2e 70 69 63 6b 65 72 2e 6d 6f 64 61 6c 2d 64 69 61 6c 6f 67 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 41 43 41 43 41 43 3b 77 69 64 74 68 3a 61 75 74 6f 3b 70 61 64 64 69 6e Data Ascii: .picker-frame{width:100%;height:100%;border:0;overflow:hidden}.picker.modal-dialog-bg{position:absolute;top:0;left:0;background-color:#FFF}.picker.modal-dialog{position:absolute;top:0;left:0;background-color:#FFF;border:1px solid #ACACAC;width:auto;paddin
2024-05-25 23:00:28 UTC	28	IN	Data Raw: 2d 69 6e 64 65 78 3a 31 39 39 39 39 39 39 39 39 39 7d 73 65 6e 74 69 6e 65 6c 7b 7d Data Ascii: -index:1999999999}sentinel{}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.6	59266	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:27 UTC	1209	OUT	GET /s/_/ytmainappweb/_/ss/k=ytmainappweb.kevlar_base.wrKemerB_yc.L.B1.O/am=AIAALQ/d=0/rs=AGKMywGR7hi9AjzaLB2rwbjGRlJ5OKqDrw HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000
2024-05-25 23:00:28 UTC	873	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="youtube-main-app-web-scs-key" Report-To: {"group":"youtube-main-app-web-scs-key","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key"}]} Content-Length: 2383803 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sat, 25 May 2024 18:23:28 GMT Expires: Sun, 25 May 2025 18:23:28 GMT Cache-Control: public, max-age=31536000 Last-Modified: Fri, 24 May 2024 05:17:06 GMT Content-Type: text/css; charset=UTF-8 Vary: Accept-Encoding Age: 16620 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:28 UTC	517	IN	Data Raw: 79 74 64 2d 6d 65 6e 75 2d 72 65 6e 64 65 72 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 7d 79 74 64 2d 6d 65 6e 75 2d 72 65 6e 64 65 72 65 72 3a 6e 6f 74 28 5b 63 6f 6e 64 65 6e 73 65 64 5d 29 20 2e 79 74 64 2d 6d 65 6e 75 2d 72 65 6e 64 65 72 65 72 5b 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 5d 2b 2e 79 74 64 2d 6d 65 6e 75 2d 72 65 6e 64 65 72 65 72 5b 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 5d 2c 2e 79 74 64 2d 6d 65 6e 75 2d 72 65 6e 64 65 72 65 72 5b 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 5d 2b 79 74 2d 62 75 74 74 6f 6e 2d 76 69 65 77 2d 6d 6f 64 65 6c 2e 79 74 64 2d 6d 65 6e 75 2d 72 65 6e 64 65 72 65 72 2c 79 74 2d 62 75 74 74 Data Ascii: ytd-menu-renderer{display:flexbox;display:flex;flex-direction:row}ytd-menu-renderer:not([condensed]) .ytd-menu-renderer[button-renderer]+.ytd-menu-renderer[button-renderer],.ytd-menu-renderer[button-renderer]+yt-button-view-model.ytd-menu-renderer,yt-butt
2024-05-25 23:00:28 UTC	1390	IN	Data Raw: 69 74 65 6d 2d 62 75 74 74 6f 6e 73 2e 79 74 64 2d 6d 65 6e 75 2d 72 65 6e 64 65 72 65 72 3a 6e 6f 74 28 3a 65 6d 70 74 79 29 3e 2e 79 74 64 2d 6d 65 6e 75 2d 72 65 6e 64 65 72 65 72 5b 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 5d 2c 23 74 6f 70 2d 6c 65 76 65 6c 2d 62 75 74 74 6f 6e 73 2d 63 6f 6d 70 75 74 65 64 2e 79 74 64 2d 6d 65 6e 75 2d 72 65 6e 64 65 72 65 72 3a 6e 6f 74 28 3a 65 6d 70 74 79 29 3e 2e 79 74 64 2d 6d 65 6e 75 2d 72 65 6e 64 65 72 65 72 5b 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 5d 7e 2e 79 74 64 2d 6d 65 6e 75 2d 72 65 6e 64 65 72 65 72 5b 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 5d 2c 23 66 6c 65 78 69 62 6c 65 2d 69 74 65 6d 2d 62 75 74 74 6f 6e 73 2e 79 74 64 2d 6d 65 6e 75 2d 72 65 6e 64 65 72 65 72 3a 6e 6f 74 28 3a Data Ascii: item-buttons.ytd-menu-renderer:not(:empty)>.ytd-menu-renderer[button-renderer],#top-level-buttons-computed.ytd-menu-renderer:not(:empty)>.ytd-menu-renderer[button-renderer]~.ytd-menu-renderer[button-renderer],#flexible-item-buttons.ytd-menu-renderer:not(:
2024-05-25 23:00:28 UTC	1390	IN	Data Raw: 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 7d 79 74 64 2d 6d 65 6e 75 2d 72 65 6e 64 65 72 65 72 5b 68 61 73 2d 66 6c 65 78 69 62 6c 65 2d 69 74 65 6d 73 5d 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 7d 79 74 64 2d 6d 65 6e 75 2d 72 65 6e 64 65 72 65 72 5b 68 61 73 2d 66 6c 65 78 69 62 6c 65 2d 69 74 65 6d 73 5d 5b 73 61 66 65 2d 61 72 65 61 5d 7b 70 61 64 64 69 6e 67 3a 34 70 78 20 30 3b 6d 61 72 67 69 6e 3a 2d 34 70 78 20 30 7d 79 74 64 2d 6d 65 6e 75 2d 72 65 6e 64 65 72 65 72 5b 68 61 73 2d 66 6c 65 78 69 62 6c 65 2d 69 74 65 6d 73 5d 5b 73 61 66 65 2d 61 72 65 61 5d 20 2e 74 6f Data Ascii: lay:flex;flex-direction:row}ytd-menu-renderer[has-flexible-items]{width:100%;max-height:36px;overflow-y:hidden;flex-wrap:wrap}ytd-menu-renderer[has-flexible-items][safe-area]{padding:4px 0;margin:-4px 0}ytd-menu-renderer[has-flexible-items][safe-area] .to
2024-05-25 23:00:28 UTC	1390	IN	Data Raw: 62 75 74 74 6f 6e 5d 20 61 2e 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 7b 63 75 72 73 6f 72 3a 61 75 74 6f 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 5b 69 73 2d 70 61 70 65 72 2d 62 75 74 74 6f 6e 5d 20 79 74 2d 69 63 6f 6e 2e 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 7b 66 6c 65 78 3a 6e 6f 6e 65 7d 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 20 79 74 2d 66 6f 72 6d 61 74 74 65 64 2d 73 74 72 69 6e 67 2e 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 77 68 69 74 65 Data Ascii: button] a.ytd-button-renderer{cursor:auto;pointer-events:none}ytd-button-renderer[is-paper-button] yt-icon.ytd-button-renderer{flex:none}ytd-button-renderer yt-formatted-string.ytd-button-renderer{display:block;overflow:hidden;text-overflow:ellipsis;white
2024-05-25 23:00:28 UTC	1390	IN	Data Raw: 74 2d 73 70 65 63 2d 74 65 78 74 2d 73 65 63 6f 6e 64 61 72 79 29 29 7d 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 5b 69 73 2d 70 61 70 65 72 2d 62 75 74 74 6f 6e 2d 77 69 74 68 2d 69 63 6f 6e 5d 7b 2d 2d 79 74 2d 62 75 74 74 6f 6e 2d 70 61 64 64 69 6e 67 2d 6d 69 6e 75 73 2d 66 6f 63 75 73 2d 6f 75 74 6c 69 6e 65 3a 76 61 72 28 20 2d 2d 79 74 2d 62 75 74 74 6f 6e 2d 77 69 74 68 2d 69 63 6f 6e 2d 70 61 64 64 69 6e 67 2d 6d 69 6e 75 73 2d 66 6f 63 75 73 2d 6f 75 74 6c 69 6e 65 20 29 7d 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 2e 73 74 79 6c 65 2d 73 75 67 67 65 73 74 69 76 65 2e 73 69 7a 65 2d 73 6d 61 6c 6c 5b 69 73 2d 70 61 70 65 72 2d 62 75 74 74 6f 6e 2d 77 69 74 68 2d 69 63 6f 6e 5d 7b 2d 2d 79 74 2d 62 75 74 74 6f 6e 2d Data Ascii: t-spec-text-secondary))}ytd-button-renderer[is-paper-button-with-icon]{--yt-button-padding-minus-focus-outline:var( --yt-button-with-icon-padding-minus-focus-outline )}ytd-button-renderer.style-suggestive.size-small[is-paper-button-with-icon]{--yt-button-
2024-05-25 23:00:28 UTC	1390	IN	Data Raw: 5d 5b 64 69 73 61 62 6c 65 64 5d 2c 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 2e 73 74 79 6c 65 2d 74 65 78 74 5b 69 73 2d 69 63 6f 6e 2d 62 75 74 74 6f 6e 5d 5b 64 69 73 61 62 6c 65 64 5d 20 23 74 65 78 74 2e 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 2c 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 2e 73 74 79 6c 65 2d 64 65 66 61 75 6c 74 5b 69 73 2d 69 63 6f 6e 2d 62 75 74 74 6f 6e 5d 5b 64 69 73 61 62 6c 65 64 5d 20 23 74 65 78 74 2e 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 2c 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 2e 73 74 79 6c 65 2d 6f 70 61 63 69 74 79 5b 69 73 2d 69 63 6f 6e 2d 62 75 74 74 6f 6e 5d 5b 64 69 73 61 62 6c 65 64 5d 20 23 74 65 78 74 2e 79 74 64 2d 62 75 74 74 Data Ascii: ][disabled],ytd-button-renderer.style-text[is-icon-button][disabled] #text.ytd-button-renderer,ytd-button-renderer.style-default[is-icon-button][disabled] #text.ytd-button-renderer,ytd-button-renderer.style-opacity[is-icon-button][disabled] #text.ytd-butt
2024-05-25 23:00:28 UTC	1390	IN	Data Raw: 6b 65 79 62 6f 61 72 64 2d 66 6f 63 75 73 65 64 5d 20 74 70 2d 79 74 2d 70 61 70 65 72 2d 62 75 74 74 6f 6e 2e 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 7b 62 6f 72 64 65 72 3a 76 61 72 28 2d 2d 79 74 2d 62 75 74 74 6f 6e 2d 70 61 64 64 69 6e 67 2d 6d 69 6e 75 73 2d 66 6f 63 75 73 2d 6f 75 74 6c 69 6e 65 2d 77 69 64 74 68 29 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 79 74 2d 73 70 65 63 2d 74 65 78 74 2d 70 72 69 6d 61 72 79 29 3b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 79 74 2d 62 75 74 74 6f 6e 2d 70 61 64 64 69 6e 67 2d 6d 69 6e 75 73 2d 66 6f 63 75 73 2d 6f 75 74 6c 69 6e 65 29 7d 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 2e 73 74 79 6c 65 2d 73 75 67 67 65 73 74 69 76 65 5b 69 73 2d 70 61 70 65 72 2d 62 75 74 74 6f 6e 5d Data Ascii: keyboard-focused] tp-yt-paper-button.ytd-button-renderer{border:var(--yt-button-padding-minus-focus-outline-width) solid var(--yt-spec-text-primary);padding:var(--yt-button-padding-minus-focus-outline)}ytd-button-renderer.style-suggestive[is-paper-button]
2024-05-25 23:00:28 UTC	1390	IN	Data Raw: 28 5b 75 73 65 2d 6b 65 79 62 6f 61 72 64 2d 66 6f 63 75 73 65 64 5d 29 20 74 70 2d 79 74 2d 70 61 70 65 72 2d 62 75 74 74 6f 6e 2e 6b 65 79 62 6f 61 72 64 2d 66 6f 63 75 73 2e 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 2c 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 2e 70 61 6c 65 74 74 65 2d 77 69 74 68 2d 62 6f 72 64 65 72 5b 69 73 2d 70 61 70 65 72 2d 62 75 74 74 6f 6e 5d 5b 75 73 65 2d 6b 65 79 62 6f 61 72 64 2d 66 6f 63 75 73 65 64 5d 5b 6b 65 79 62 6f 61 72 64 2d 66 6f 63 75 73 65 64 5d 20 74 70 2d 79 74 2d 70 61 70 65 72 2d 62 75 74 74 6f 6e 2e 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 7b 62 6f 72 64 65 72 3a 76 61 72 28 2d 2d 79 74 2d 62 75 74 74 6f 6e 2d 70 61 64 64 69 6e 67 2d 6d 69 6e 75 73 2d 66 6f 63 Data Ascii: ([use-keyboard-focused]) tp-yt-paper-button.keyboard-focus.ytd-button-renderer,ytd-button-renderer.palette-with-border[is-paper-button][use-keyboard-focused][keyboard-focused] tp-yt-paper-button.ytd-button-renderer{border:var(--yt-button-padding-minus-foc
2024-05-25 23:00:28 UTC	1390	IN	Data Raw: 2e 73 74 79 6c 65 2d 64 65 73 74 72 75 63 74 69 76 65 5b 69 73 2d 70 61 70 65 72 2d 62 75 74 74 6f 6e 5d 5b 75 73 65 2d 6b 65 79 62 6f 61 72 64 2d 66 6f 63 75 73 65 64 5d 5b 6b 65 79 62 6f 61 72 64 2d 66 6f 63 75 73 65 64 5d 20 74 70 2d 79 74 2d 70 61 70 65 72 2d 62 75 74 74 6f 6e 2e 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 7b 62 6f 72 64 65 72 3a 76 61 72 28 2d 2d 79 74 2d 62 75 74 74 6f 6e 2d 70 61 64 64 69 6e 67 2d 6d 69 6e 75 73 2d 66 6f 63 75 73 2d 6f 75 74 6c 69 6e 65 2d 77 69 64 74 68 29 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 79 74 2d 73 70 65 63 2d 74 65 78 74 2d 70 72 69 6d 61 72 79 29 3b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 79 74 2d 62 75 74 74 6f 6e 2d 70 61 64 64 69 6e 67 2d 6d 69 6e 75 73 2d 66 6f 63 75 73 2d 6f 75 74 6c Data Ascii: .style-destructive[is-paper-button][use-keyboard-focused][keyboard-focused] tp-yt-paper-button.ytd-button-renderer{border:var(--yt-button-padding-minus-focus-outline-width) solid var(--yt-spec-text-primary);padding:var(--yt-button-padding-minus-focus-outl
2024-05-25 23:00:28 UTC	1390	IN	Data Raw: 2d 6f 76 65 72 6c 61 79 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 62 72 61 6e 64 29 7d 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 2e 73 74 79 6c 65 2d 64 65 66 61 75 6c 74 5b 69 73 2d 70 61 70 65 72 2d 62 75 74 74 6f 6e 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 79 74 2d 62 75 74 74 6f 6e 2d 64 65 66 61 75 6c 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2c 76 61 72 28 2d 2d 79 74 2d 73 70 65 63 2d 62 61 64 67 65 2d 63 68 69 70 2d 62 61 63 6b 67 72 6f 75 6e 64 29 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 79 74 2d 62 75 74 74 6f 6e 2d 64 65 66 61 75 6c 74 2d 74 65 78 74 2d 63 6f 6c 6f 72 2c 76 61 72 28 2d 2d 79 74 2d 73 70 65 63 2d 74 65 78 74 2d 73 65 63 6f 6e 64 61 72 79 29 29 7d 79 74 64 2d 62 75 74 74 6f Data Ascii: -overlay-background-brand)}ytd-button-renderer.style-default[is-paper-button]{background-color:var(--yt-button-default-background-color,var(--yt-spec-badge-chip-background));color:var(--yt-button-default-text-color,var(--yt-spec-text-secondary))}ytd-butto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.6	59268	142.250.184.246	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:27 UTC	939	OUT	GET /generate_204 HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:28 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Sat, 25 May 2024 23:00:28 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.6	59264	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:27 UTC	1156	OUT	GET /s/desktop/aef0ced3/cssbin/www-main-desktop-watch-page-skeleton.css HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000
2024-05-25 23:00:28 UTC	680	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 8554 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 24 May 2024 15:36:05 GMT Expires: Sat, 24 May 2025 15:36:05 GMT Cache-Control: public, max-age=31536000 Last-Modified: Fri, 24 May 2024 07:14:12 GMT Content-Type: text/css Vary: Accept-Encoding, Origin Age: 113063 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:28 UTC	710	IN	Data Raw: 23 77 61 74 63 68 2d 70 61 67 65 2d 73 6b 65 6c 65 74 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 31 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 23 77 61 74 63 68 2d 70 61 67 65 2d 73 6b 65 6c 65 74 6f 6e 2c 23 77 61 74 63 68 2d 70 61 67 65 2d 73 6b 65 6c 65 74 6f 6e 20 23 69 6e 66 6f 2d 63 6f 6e 74 61 69 6e 65 72 2c 23 77 61 74 63 68 2d 70 61 67 65 2d 73 6b 65 6c 65 74 6f 6e 20 23 67 72 69 64 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 6b 65 6c 65 74 6f 6e 2c 23 77 61 74 63 68 2d 70 61 67 65 2d 73 6b 65 6c 65 74 6f 6e 20 23 73 69 64 65 2d 69 6e 66 6f 2d 63 6f 6e 74 61 69 6e 65 72 2c 23 77 61 74 63 68 2d 70 61 67 65 2d 73 6b 65 6c 65 74 6f 6e 20 23 72 65 6c 61 74 65 64 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 Data Ascii: #watch-page-skeleton{position:relative;z-index:1;margin:0 auto}#watch-page-skeleton,#watch-page-skeleton #info-container,#watch-page-skeleton #grid-container-skeleton,#watch-page-skeleton #side-info-container,#watch-page-skeleton #related{-webkit-box-sizi
2024-05-25 23:00:28 UTC	1390	IN	Data Raw: 66 6f 2d 63 6f 6e 74 61 69 6e 65 72 2e 68 69 64 64 65 6e 2c 23 77 61 74 63 68 2d 70 61 67 65 2d 73 6b 65 6c 65 74 6f 6e 20 23 67 72 69 64 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 6b 65 6c 65 74 6f 6e 2e 68 69 64 64 65 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 67 72 69 64 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 6b 65 6c 65 74 6f 6e 2e 68 69 64 64 65 6e 3a 6e 6f 74 28 2e 6c 61 79 65 72 65 64 29 7b 6f 70 61 63 69 74 79 3a 30 7d 23 67 72 69 64 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 6b 65 6c 65 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 76 77 20 2d 20 34 37 34 70 78 29 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 23 67 72 69 64 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 6b 65 6c 65 74 6f 6e Data Ascii: fo-container.hidden,#watch-page-skeleton #grid-container-skeleton.hidden{display:none}#grid-container-skeleton.hidden:not(.layered){opacity:0}#grid-container-skeleton{background-color:#fff;width:calc(100vw - 474px);overflow:hidden}#grid-container-skeleton
2024-05-25 23:00:28 UTC	1390	IN	Data Raw: 62 6b 69 74 2d 66 6c 65 78 2d 62 61 73 69 73 3a 61 75 74 6f 3b 66 6c 65 78 2d 62 61 73 69 73 3a 61 75 74 6f 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 67 72 6f 77 3a 30 3b 66 6c 65 78 2d 67 72 6f 77 3a 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 33 39 32 70 78 29 7b 23 67 72 69 64 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 6b 65 6c 65 74 6f 6e 20 2e 72 69 63 68 2d 67 72 69 64 2d 6d 65 64 69 61 2d 73 6b 65 6c 65 74 6f 6e 7b 6d 61 72 67 69 6e 3a 30 20 38 70 78 20 30 20 38 70 78 7d 7d 23 67 72 69 64 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 6b 65 6c 65 74 6f 6e 20 2e 76 69 64 65 6f 2d 64 65 74 61 69 6c 73 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d Data Ascii: bkit-flex-basis:auto;flex-basis:auto;-webkit-box-flex:0;-webkit-flex-grow:0;flex-grow:0}}@media only screen and (min-width:392px){#grid-container-skeleton .rich-grid-media-skeleton{margin:0 8px 0 8px}}#grid-container-skeleton .video-details{padding-bottom
2024-05-25 23:00:28 UTC	1390	IN	Data Raw: 6c 65 74 6f 6e 20 23 70 72 69 6d 61 72 79 2d 69 6e 66 6f 20 23 69 6e 66 6f 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: leton #primary-info #info{display:-webkit-box;display:-webkit-flex;display:flex;-webkit-box-orient:horizontal;-webkit-box-direction:normal;-webkit-flex-direction:row;flex-direction:row;-webkit-box-align:center;-webkit-align-items:center;align-items:center
2024-05-25 23:00:28 UTC	1390	IN	Data Raw: 3a 63 6f 6c 75 6d 6e 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 77 61 74 63 68 2d 73 6b 65 6c 65 74 6f 6e 20 23 73 65 63 6f 6e 64 61 72 79 2d 69 6e 66 6f 20 23 74 6f 70 2d 72 6f 77 20 23 76 69 64 65 6f 2d 6f 77 6e 65 72 20 23 75 70 6c 6f 61 64 2d 69 6e 66 6f 20 23 6f 77 6e 65 72 2d 6e 61 6d 65 7b 77 69 64 74 68 3a 32 30 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 7d 2e 77 61 74 63 68 2d 73 6b 65 6c 65 74 6f 6e 20 23 73 65 63 6f 6e 64 61 72 79 2d 69 6e 66 6f 20 23 74 6f 70 2d Data Ascii: :column;flex-direction:column;-webkit-box-pack:center;-webkit-justify-content:center;justify-content:center}.watch-skeleton #secondary-info #top-row #video-owner #upload-info #owner-name{width:200px;margin-bottom:12px}.watch-skeleton #secondary-info #top-
2024-05-25 23:00:28 UTC	1390	IN	Data Raw: 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 38 70 78 7d 2e 77 61 74 63 68 2d 73 6b 65 6c 65 74 6f 6e 20 23 72 65 6c 61 74 65 64 3a 6e 6f 74 28 5b 70 6c 61 79 6c 69 73 74 5d 29 20 2e 61 75 74 6f 70 6c 61 79 20 2e 76 69 64 65 6f 2d 64 65 74 61 69 6c 73 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 36 70 78 7d 2e 77 61 74 63 68 2d 73 6b 65 6c 65 74 6f 6e 20 23 72 65 6c 61 74 65 64 20 2e 76 69 64 65 6f 2d 64 65 74 61 69 6c 73 20 2e 74 68 75 6d 62 6e 61 69 6c 7b 68 65 69 67 68 74 3a 39 34 70 78 3b 77 69 64 74 68 3a 31 36 38 70 78 3b 6d Data Ascii: webkit-box-direction:normal;-webkit-flex-direction:row;flex-direction:row;padding-bottom:8px}.watch-skeleton #related:not([playlist]) .autoplay .video-details{padding-bottom:16px}.watch-skeleton #related .video-details .thumbnail{height:94px;width:168px;m
2024-05-25 23:00:28 UTC	894	IN	Data Raw: 64 74 68 3a 31 30 36 36 70 78 7d 23 77 61 74 63 68 2d 70 61 67 65 2d 73 6b 65 6c 65 74 6f 6e 20 23 72 65 6c 61 74 65 64 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 33 36 30 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 34 70 78 7d 23 77 61 74 63 68 2d 70 61 67 65 2d 73 6b 65 6c 65 74 6f 6e 20 23 69 6e 66 6f 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 36 34 30 70 78 7d 23 77 61 74 63 68 2d 70 61 67 65 2d 73 6b 65 6c 65 74 6f 6e 2e 74 68 65 61 74 65 72 20 23 69 6e 66 6f 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 32 36 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 39 34 70 78 29 20 61 6e 64 20 28 6d 69 6e 2d 68 65 69 67 68 74 3a 36 33 30 70 78 29 7b 23 77 61 Data Ascii: dth:1066px}#watch-page-skeleton #related{margin-top:-360px;padding-left:24px}#watch-page-skeleton #info-container{width:640px}#watch-page-skeleton.theater #info-container{width:100%;padding-right:426px}}@media (min-width:1294px) and (min-height:630px){#wa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.6	59265	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:27 UTC	1168	OUT	GET /s/desktop/aef0ced3/jsbin/web-animations-next-lite.min.vflset/web-animations-next-lite.min.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000
2024-05-25 23:00:28 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 50702 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 24 May 2024 15:36:05 GMT Expires: Sat, 24 May 2025 15:36:05 GMT Cache-Control: public, max-age=31536000 Last-Modified: Fri, 24 May 2024 07:14:12 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 113063 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:28 UTC	702	IN	Data Raw: 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 0a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 4c 69 63 65 6e 73 65 22 29 3b 0a 20 79 6f 75 20 6d 61 79 20 6e 6f 74 20 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 65 78 63 65 70 74 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 0a 20 20 20 20 20 59 6f 75 20 6d 61 79 20 6f 62 74 61 69 6e 20 61 20 63 6f 70 79 20 6f 66 20 74 68 65 20 4c 69 63 65 6e 73 65 20 61 74 0a 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c Data Ascii: /* Copyright 2014 Google Inc. All rights reserved. Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/l
2024-05-25 23:00:28 UTC	1390	IN	Data Raw: 65 22 29 3b 0a 20 79 6f 75 20 6d 61 79 20 6e 6f 74 20 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 65 78 63 65 70 74 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 0a 20 20 20 20 20 59 6f 75 20 6d 61 79 20 6f 62 74 61 69 6e 20 61 20 63 6f 70 79 20 6f 66 20 74 68 65 20 4c 69 63 65 6e 73 65 20 61 74 0a 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e 53 45 2d 32 2e 30 0a 0a 20 55 6e 6c 65 73 73 20 72 65 71 75 69 72 65 64 20 62 79 20 61 70 70 6c 69 63 61 62 6c 65 20 6c 61 77 20 6f 72 20 61 67 72 65 65 64 20 74 6f 20 69 6e 20 77 72 69 74 69 6e 67 2c 20 73 6f 66 74 77 61 72 65 0a 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4c Data Ascii: e"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the L
2024-05-25 23:00:28 UTC	1390	IN	Data Raw: 7c 7c 31 3c 70 7c 7c 30 3e 7a 7c 7c 31 3c 7a 3f 6e 3a 66 75 6e 63 74 69 6f 6e 28 42 29 7b 69 66 28 30 3e 3d 42 29 7b 76 61 72 20 44 3d 30 3b 30 3c 70 3f 44 3d 77 2f 70 3a 21 77 26 26 30 3c 7a 26 26 28 44 3d 41 2f 7a 29 3b 72 65 74 75 72 6e 20 44 2a 42 7d 69 66 28 31 3c 3d 42 29 72 65 74 75 72 6e 20 44 3d 30 2c 31 3e 7a 3f 44 3d 28 41 2d 31 29 2f 28 7a 2d 31 29 3a 31 3d 3d 7a 26 26 31 3e 70 26 26 28 44 3d 28 77 2d 31 29 2f 0a 28 70 2d 31 29 29 2c 31 2b 44 2a 28 42 2d 31 29 3b 44 3d 30 3b 66 6f 72 28 76 61 72 20 48 3d 31 3b 44 3c 48 3b 29 7b 76 61 72 20 45 3d 28 44 2b 48 29 2f 32 2c 4d 3d 33 2a 70 2a 28 31 2d 45 29 2a 28 31 2d 45 29 2a 45 2b 33 2a 7a 2a 28 31 2d 45 29 2a 45 2a 45 2b 45 2a 45 2a 45 3b 69 66 28 31 45 2d 35 3e 4d 61 74 68 2e 61 62 73 28 42 2d Data Ascii: \|\|1<p\|\|0>z\|\|1<z?n:function(B){if(0>=B){var D=0;0<p?D=w/p:!w&&0<z&&(D=A/z);return DB}if(1<=B)return D=0,1>z?D=(A-1)/(z-1):1==z&&1>p&&(D=(w-1)/(p-1)),1+D(B-1);D=0;for(var H=1;D<H;){var E=(D+H)/2,M=3p(1-E)(1-E)E+3z(1-E)EE+EEE;if(1E-5>Math.abs(B-
2024-05-25 23:00:28 UTC	1390	IN	Data Raw: 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 70 6c 61 79 62 61 63 6b 52 61 74 65 7d 2c 73 65 74 20 64 65 6c 61 79 28 70 29 7b 74 68 69 73 2e 5f 73 65 74 4d 65 6d 62 65 72 28 22 64 65 6c 61 79 22 2c 70 29 7d 2c 67 65 74 20 64 65 6c 61 79 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 64 65 6c 61 79 7d 2c 73 65 74 20 65 6e 64 44 65 6c 61 79 28 70 29 7b 74 68 69 73 2e 5f 73 65 74 4d 65 6d 62 65 72 28 22 65 6e 64 44 65 6c 61 79 22 2c 70 29 7d 2c 67 65 74 20 65 6e 64 44 65 6c 61 79 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 65 6e 64 44 65 6c 61 79 7d 2c 73 65 74 20 66 69 6c 6c 28 70 29 7b 74 68 69 73 2e 5f 73 65 74 4d 65 6d 62 65 72 28 22 66 69 6c 6c 22 2c 70 29 7d 2c 67 65 74 20 66 69 6c 6c 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 66 69 6c 6c Data Ascii: (){return this._playbackRate},set delay(p){this._setMember("delay",p)},get delay(){return this._delay},set endDelay(p){this._setMember("endDelay",p)},get endDelay(){return this._endDelay},set fill(p){this._setMember("fill",p)},get fill(){return this._fill
2024-05-25 23:00:28 UTC	1390	IN	Data Raw: 5c 5c 64 2b 29 5c 5c 73 2a 5c 5c 29 22 29 2c 0a 43 3d 2f 73 74 65 70 73 5c 28 5c 73 2a 28 5c 64 2b 29 5c 73 2a 2c 5c 73 2a 28 73 74 61 72 74 7c 6d 69 64 64 6c 65 7c 65 6e 64 29 5c 73 2a 5c 29 2f 3b 79 2e 63 6c 6f 6e 65 54 69 6d 69 6e 67 49 6e 70 75 74 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 70 29 72 65 74 75 72 6e 20 70 3b 76 61 72 20 77 3d 7b 7d 2c 7a 3b 66 6f 72 28 7a 20 69 6e 20 70 29 77 5b 7a 5d 3d 70 5b 7a 5d 3b 72 65 74 75 72 6e 20 77 7d 3b 79 2e 6d 61 6b 65 54 69 6d 69 6e 67 3d 68 3b 79 2e 6e 75 6d 65 72 69 63 54 69 6d 69 6e 67 54 6f 4f 62 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 70 26 26 28 70 3d 69 73 4e 61 4e 28 70 29 3f 7b 64 Data Ascii: \\d+)\\s\\)"),C=/steps$\s(\d+)\s,\s(start\|middle\|end)\s*$/;y.cloneTimingInput=function(p){if("number"==typeof p)return p;var w={},z;for(z in p)w[z]=p[z];return w};y.makeTiming=h;y.numericTimingToObject=function(p){"number"==typeof p&&(p=isNaN(p)?{d
2024-05-25 23:00:28 UTC	1390	IN	Data Raw: 29 7b 76 61 72 20 67 3d 61 5b 62 5d 3b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 67 29 7c 7c 28 67 3d 5b 67 5d 29 3b 66 6f 72 28 76 61 72 20 65 2c 6d 3d 67 2e 6c 65 6e 67 74 68 2c 6e 3d 30 3b 6e 3c 6d 3b 6e 2b 2b 29 65 3d 7b 7d 2c 65 2e 6f 66 66 73 65 74 3d 22 6f 66 66 73 65 74 22 69 6e 20 61 3f 61 2e 6f 66 66 73 65 74 3a 31 3d 3d 6d 3f 31 3a 6e 2f 28 6d 2d 31 29 2c 22 65 61 73 69 6e 67 22 69 6e 20 61 26 26 28 65 2e 65 61 73 69 6e 67 3d 0a 61 2e 65 61 73 69 6e 67 29 2c 22 63 6f 6d 70 6f 73 69 74 65 22 69 6e 20 61 26 26 28 65 2e 63 6f 6d 70 6f 73 69 74 65 3d 61 2e 63 6f 6d 70 6f 73 69 74 65 29 2c 65 5b 62 5d 3d 67 5b 6e 5d 2c 63 2e 70 75 73 68 28 65 29 7d 63 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 6c 2c 72 29 7b 72 65 74 75 72 6e 20 6c 2e 6f 66 66 73 Data Ascii: ){var g=a[b];Array.isArray(g)\|\|(g=[g]);for(var e,m=g.length,n=0;n<m;n++)e={},e.offset="offset"in a?a.offset:1==m?1:n/(m-1),"easing"in a&&(e.easing=a.easing),"composite"in a&&(e.composite=a.composite),e[b]=g[n],c.push(e)}c.sort(function(l,r){return l.offs
2024-05-25 23:00:28 UTC	1390	IN	Data Raw: 72 67 69 6e 42 6f 74 74 6f 6d 22 2c 22 6d 61 72 67 69 6e 4c 65 66 74 22 5d 2c 6f 75 74 6c 69 6e 65 3a 5b 22 6f 75 74 6c 69 6e 65 43 6f 6c 6f 72 22 2c 22 6f 75 74 6c 69 6e 65 53 74 79 6c 65 22 2c 22 6f 75 74 6c 69 6e 65 57 69 64 74 68 22 5d 2c 70 61 64 64 69 6e 67 3a 5b 22 70 61 64 64 69 6e 67 54 6f 70 22 2c 22 70 61 64 64 69 6e 67 52 69 67 68 74 22 2c 22 70 61 64 64 69 6e 67 42 6f 74 74 6f 6d 22 2c 22 70 61 64 64 69 6e 67 4c 65 66 74 22 5d 7d 2c 68 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 2c 22 64 69 76 22 29 3b 76 3d 7b 74 68 69 6e 3a 22 31 70 78 22 2c 6d 65 64 69 75 6d 3a 22 33 70 78 22 2c 74 68 69 63 6b 3a 22 35 70 78 22 7d 3b Data Ascii: rginBottom","marginLeft"],outline:["outlineColor","outlineStyle","outlineWidth"],padding:["paddingTop","paddingRight","paddingBottom","paddingLeft"]},h=document.createElementNS("http://www.w3.org/1999/xhtml","div");v={thin:"1px",medium:"3px",thick:"5px"};
2024-05-25 23:00:28 UTC	1390	IN	Data Raw: 70 70 6f 72 74 65 64 45 72 72 6f 72 22 2c 6d 65 73 73 61 67 65 3a 22 61 64 64 20 63 6f 6d 70 6f 73 69 74 69 6e 67 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 7d 3b 69 66 28 22 72 65 70 6c 61 63 65 22 21 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 63 6f 6d 70 6f 73 69 74 65 20 6d 6f 64 65 20 22 2b 74 2b 22 2e 22 29 3b 7d 65 6c 73 65 20 74 3d 22 65 61 73 69 6e 67 22 3d 3d 72 3f 79 2e 6e 6f 72 6d 61 6c 69 7a 65 45 61 73 69 6e 67 28 74 29 3a 22 22 2b 74 3b 76 61 72 20 78 3d 76 6f 69 64 20 30 2c 75 3d 72 2c 71 3d 74 3b 74 3d 6c 3b 76 61 72 20 43 3d 75 3b 69 66 28 22 64 69 73 70 6c 61 79 22 21 3d 3d 43 26 26 30 21 3d 3d 43 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 61 6e 69 6d 61 74 69 6f 6e 22 2c 30 Data Ascii: pportedError",message:"add compositing is not supported"};if("replace"!=t)throw new TypeError("Invalid composite mode "+t+".");}else t="easing"==r?y.normalizeEasing(t):""+t;var x=void 0,u=r,q=t;t=l;var C=u;if("display"!==C&&0!==C.lastIndexOf("animation",0
2024-05-25 23:00:28 UTC	1390	IN	Data Raw: 3d 3d 79 5b 6b 5d 26 26 28 76 3d 21 30 29 7d 29 29 3b 69 66 28 21 76 29 72 65 74 75 72 6e 7d 28 66 75 6e 63 74 69 6f 6e 28 6b 2c 66 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 63 29 7b 66 6f 72 28 76 61 72 20 62 3d 0a 7b 7d 2c 67 3d 30 3b 67 3c 63 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 63 5b 67 5d 29 69 66 28 22 6f 66 66 73 65 74 22 21 3d 65 26 26 22 65 61 73 69 6e 67 22 21 3d 65 26 26 22 63 6f 6d 70 6f 73 69 74 65 22 21 3d 65 29 7b 76 61 72 20 6d 3d 7b 6f 66 66 73 65 74 3a 63 5b 67 5d 2e 6f 66 66 73 65 74 2c 65 61 73 69 6e 67 3a 63 5b 67 5d 2e 65 61 73 69 6e 67 2c 76 61 6c 75 65 3a 63 5b 67 5d 5b 65 5d 7d 3b 62 5b 65 5d 3d 62 5b 65 5d 7c 7c 5b 5d 3b 62 5b 65 5d 2e 70 75 73 68 28 6d 29 7d 66 6f 72 28 76 61 72 20 6e 20 Data Ascii: ==y[k]&&(v=!0)}));if(!v)return}(function(k,f,h){function d(c){for(var b={},g=0;g<c.length;g++)for(var e in c[g])if("offset"!=e&&"easing"!=e&&"composite"!=e){var m={offset:c[g].offset,easing:c[g].easing,value:c[g][e]};b[e]=b[e]\|\|[];b[e].push(m)}for(var n
2024-05-25 23:00:28 UTC	1390	IN	Data Raw: 29 7d 29 7d 76 61 72 20 61 3d 7b 7d 3b 66 2e 61 64 64 50 72 6f 70 65 72 74 69 65 73 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 67 2c 65 29 7b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 65 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 76 61 72 20 6e 3d 62 2c 6c 3d 67 2c 72 3d 64 28 65 5b 6d 5d 29 3b 61 5b 72 5d 3d 61 5b 72 5d 7c 7c 5b 5d 3b 61 5b 72 5d 2e 70 75 73 68 28 5b 6e 2c 6c 5d 29 7d 7d 3b 76 61 72 20 63 3d 7b 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 74 72 61 6e 73 70 61 72 65 6e 74 22 2c 62 61 63 6b 67 72 6f 75 6e 64 50 6f 73 69 74 69 6f 6e 3a 22 30 25 20 30 25 22 2c 62 6f 72 64 65 72 42 6f 74 74 6f 6d 43 6f 6c 6f 72 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 2c 0a 62 6f 72 64 65 72 42 6f 74 74 6f 6d 4c 65 66 74 52 61 64 69 75 73 Data Ascii: )})}var a={};f.addPropertiesHandler=function(b,g,e){for(var m=0;m<e.length;m++){var n=b,l=g,r=d(e[m]);a[r]=a[r]\|\|[];a[r].push([n,l])}};var c={backgroundColor:"transparent",backgroundPosition:"0% 0%",borderBottomColor:"currentColor",borderBottomLeftRadius

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.6	59270	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:28 UTC	1166	OUT	GET /s/desktop/aef0ced3/jsbin/custom-elements-es5-adapter.vflset/custom-elements-es5-adapter.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000
2024-05-25 23:00:28 UTC	687	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 2051 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 24 May 2024 15:36:05 GMT Expires: Sat, 24 May 2025 15:36:05 GMT Cache-Control: public, max-age=31536000 Last-Modified: Fri, 24 May 2024 07:14:12 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 113063 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:28 UTC	703	IN	Data Raw: 27 75 73 65 20 73 74 72 69 63 74 27 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 36 20 54 68 65 20 50 6f 6c 79 6d 65 72 20 50 72 6f 6a 65 63 74 20 41 75 74 68 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 54 68 69 73 20 63 6f 64 65 20 6d 61 79 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 42 53 44 20 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 20 66 6f 75 6e 64 20 61 74 20 68 74 74 70 3a 2f 2f 70 6f 6c 79 6d 65 72 2e 67 69 74 68 75 62 2e 69 6f 2f 4c 49 43 45 4e 53 45 2e 74 78 74 0a 20 54 68 65 20 63 6f 6d 70 6c 65 74 65 20 73 65 74 20 6f 66 20 61 75 74 68 6f 72 73 20 6d 61 79 20 62 65 20 66 6f 75 6e 64 20 61 74 20 68 74 74 70 3a 2f 2f 70 6f 6c 79 6d 65 72 2e 67 69 74 68 75 62 Data Ascii: 'use strict';/* Copyright (c) 2016 The Polymer Project Authors. All rights reserved. This code may only be used under the BSD style license found at http://polymer.github.io/LICENSE.txt The complete set of authors may be found at http://polymer.github
2024-05-25 23:00:28 UTC	1348	IN	Data Raw: 7b 76 61 72 20 61 3d 6b 2e 67 65 74 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 3b 61 3d 6e 2e 63 61 6c 6c 28 77 69 6e 64 6f 77 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 73 2c 61 29 3b 66 3d 21 30 3b 72 65 74 75 72 6e 20 6e 65 77 20 61 7d 65 3d 21 31 7d 3b 77 69 6e 64 6f 77 2e 48 54 4d 4c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 3d 68 2e 70 72 6f 74 6f 74 79 70 65 3b 77 69 6e 64 6f 77 2e 48 54 4d 4c 45 6c 65 6d 65 6e 74 2e 65 73 35 53 68 69 6d 6d 65 64 3d 21 30 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 77 69 6e 64 6f 77 2c 22 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 73 22 2c 7b 76 61 6c 75 65 3a 77 69 6e 64 6f 77 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 73 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 Data Ascii: {var a=k.get(this.constructor);a=n.call(window.customElements,a);f=!0;return new a}e=!1};window.HTMLElement.prototype=h.prototype;window.HTMLElement.es5Shimmed=!0;Object.defineProperty(window,"customElements",{value:window.customElements,configurable:!0,w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.6	59273	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:29 UTC	1144	OUT	GET /s/desktop/aef0ced3/jsbin/webcomponents-sd.vflset/webcomponents-sd.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000
2024-05-25 23:00:29 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 78654 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 24 May 2024 15:36:05 GMT Expires: Sat, 24 May 2025 15:36:05 GMT Cache-Control: public, max-age=31536000 Last-Modified: Fri, 24 May 2024 07:14:12 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 113064 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:29 UTC	702	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 6b 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 76 61 72 20 62 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 Data Ascii: (function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var k;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function p(a){var b="undefined"!=typeof Symbol&&Symbol.itera
2024-05-25 23:00:29 UTC	1390	IN	Data Raw: 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 76 61 72 20 63 61 3d 62 61 28 74 68 69 73 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 4e 75 6d 62 65 72 28 74 68 69 73 29 2c 62 3d 5b 5d 2c 63 3d 61 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 62 5b 63 2d 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 2f 2a 0a 0a 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 36 20 54 68 65 20 50 6f 6c 79 6d 65 72 20 50 72 6f 6a 65 63 74 20 41 75 74 68 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 Data Ascii: ar c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this);function r(){for(var a=Number(this),b=[],c=a;c<arguments.length;c++)b[c-a]=arguments[c];return b};/*Copyright (c) 2016 The Polymer Project Authors. All right
2024-05-25 23:00:29 UTC	1390	IN	Data Raw: 6e 74 3f 22 6d 73 45 6c 65 6d 65 6e 74 73 46 72 6f 6d 50 6f 69 6e 74 22 3a 22 65 6c 65 6d 65 6e 74 73 46 72 6f 6d 50 6f 69 6e 74 22 7d 66 75 6e 63 74 69 6f 6e 20 78 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 76 28 61 29 29 26 26 76 6f 69 64 20 30 21 3d 3d 61 2e 66 69 72 73 74 43 68 69 6c 64 7d 66 75 6e 63 74 69 6f 6e 20 79 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 68 61 64 6f 77 52 6f 6f 74 7d 66 75 6e 63 74 69 6f 6e 20 6c 61 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 28 61 3d 76 28 61 29 29 26 26 61 2e 72 6f 6f 74 29 26 26 61 2e 77 61 28 29 7d 76 61 72 20 7a 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6d 61 3d 7a 2e 6d 61 74 63 68 65 73 7c 7c 7a 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 7a 2e 6d 6f 7a 4d Data Ascii: nt?"msElementsFromPoint":"elementsFromPoint"}function x(a){return(a=v(a))&&void 0!==a.firstChild}function y(a){return a instanceof ShadowRoot}function la(a){return(a=(a=v(a))&&a.root)&&a.wa()}var z=Element.prototype,ma=z.matches\|\|z.matchesSelector\|\|z.mozM
2024-05-25 23:00:29 UTC	1390	IN	Data Raw: 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 77 61 28 61 2c 62 2c 63 29 7b 63 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 3b 69 66 28 63 2e 76 61 6c 75 65 29 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 65 6c 73 65 20 74 72 79 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 62 2c 63 29 7d 63 61 74 63 68 28 64 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 42 28 61 2c 62 2c 63 2c 64 29 7b 63 3d 76 6f 69 64 20 30 3d 3d 3d 63 3f 22 22 3a 63 3b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 62 29 64 26 26 30 3c 3d 64 2e 69 6e 64 65 78 4f 66 28 65 29 7c 7c 77 61 28 61 2c 63 2b 65 2c 62 5b 65 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 78 61 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 63 20 69 6e 20 61 26 26 77 61 28 61 2c 63 2c 62 5b 63 5d 29 Data Ascii: rn b}function wa(a,b,c){c.configurable=!0;if(c.value)a[b]=c.value;else try{Object.defineProperty(a,b,c)}catch(d){}}function B(a,b,c,d){c=void 0===c?"":c;for(var e in b)d&&0<=d.indexOf(e)\|\|wa(a,c+e,b[e])}function xa(a,b){for(var c in b)c in a&&wa(a,c,b[c])
2024-05-25 23:00:29 UTC	1390	IN	Data Raw: 62 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 28 61 29 7d 29 7d 7d 3b 47 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 61 6b 65 52 65 63 6f 72 64 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 61 64 64 65 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 7c 7c 74 68 69 73 2e 72 65 6d 6f 76 65 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 61 3d 5b 7b 61 64 64 65 64 4e 6f 64 65 73 3a 74 68 69 73 2e 61 64 64 65 64 4e 6f 64 65 73 2c 72 65 6d 6f 76 65 64 4e 6f 64 65 73 3a 74 68 69 73 2e 72 65 6d 6f 76 65 64 4e 6f 64 65 73 7d 5d 3b 74 68 69 73 2e 61 64 64 65 64 4e 6f 64 65 73 3d 5b 5d 3b 74 68 69 73 2e 72 65 6d 6f 76 65 64 4e 6f 64 65 73 3d 5b 5d 3b 72 65 74 75 72 6e 20 61 7d 72 65 74 75 72 6e 5b 5d 7d 3b 0a 66 75 6e 63 74 69 Data Ascii: ba.forEach(function(b){b(a)})}};Ga.prototype.takeRecords=function(){if(this.addedNodes.length\|\|this.removedNodes.length){var a=[{addedNodes:this.addedNodes,removedNodes:this.removedNodes}];this.addedNodes=[];this.removedNodes=[];return a}return[]};functi
2024-05-25 23:00:29 UTC	1390	IN	Data Raw: 29 3b 65 2b 2b 29 7b 61 3a 7b 76 61 72 20 68 3d 67 3b 76 61 72 20 6c 3d 61 2c 6d 3d 62 3b 73 77 69 74 63 68 28 68 2e 6e 6f 64 65 54 79 70 65 29 7b 63 61 73 65 20 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 3a 6c 3d 68 2e 6c 6f 63 61 6c 4e 61 6d 65 3b 66 6f 72 28 76 61 72 20 6e 3d 22 3c 22 2b 6c 2c 74 3d 68 2e 61 74 74 72 69 62 75 74 65 73 2c 41 3d 30 2c 69 61 3b 69 61 3d 74 5b 41 5d 3b 41 2b 2b 29 6e 2b 3d 22 20 22 2b 69 61 2e 6e 61 6d 65 2b 27 3d 22 27 2b 69 61 2e 76 61 6c 75 65 2e 72 65 70 6c 61 63 65 28 4c 61 2c 4e 61 29 2b 27 22 27 3b 6e 2b 3d 22 3e 22 3b 68 3d 50 61 5b 6c 5d 3f 6e 3a 6e 2b 52 61 28 68 2c 6d 29 2b 22 3c 2f 22 2b 6c 2b 22 3e 22 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 4e 6f 64 65 2e 54 45 58 54 5f 4e 4f 44 45 3a 68 3d 68 2e 64 Data Ascii: );e++){a:{var h=g;var l=a,m=b;switch(h.nodeType){case Node.ELEMENT_NODE:l=h.localName;for(var n="<"+l,t=h.attributes,A=0,ia;ia=t[A];A++)n+=" "+ia.name+'="'+ia.value.replace(La,Na)+'"';n+=">";h=Pa[l]?n:n+Ra(h,m)+"</"+l+">";break a;case Node.TEXT_NODE:h=h.d
2024-05-25 23:00:29 UTC	1390	IN	Data Raw: 6e 22 5d 3b 0a 66 75 6e 63 74 69 6f 6e 20 61 62 28 29 7b 76 61 72 20 61 3d 5b 22 64 69 73 70 61 74 63 68 45 76 65 6e 74 22 2c 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 2c 22 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 5d 3b 77 69 6e 64 6f 77 2e 45 76 65 6e 74 54 61 72 67 65 74 3f 28 45 28 77 69 6e 64 6f 77 2e 45 76 65 6e 74 54 61 72 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 2c 61 29 2c 76 6f 69 64 20 30 3d 3d 3d 77 69 6e 64 6f 77 2e 5f 5f 73 68 61 64 79 5f 6e 61 74 69 76 65 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 45 28 57 69 6e 64 6f 77 2e 70 72 6f 74 6f 74 79 70 65 2c 61 29 29 3a 28 45 28 4e 6f 64 65 2e 70 72 6f 74 6f 74 79 70 65 2c 61 29 2c 45 28 57 69 6e 64 6f 77 2e 70 72 6f 74 6f 74 79 70 65 2c 61 29 2c 45 28 Data Ascii: n"];function ab(){var a=["dispatchEvent","addEventListener","removeEventListener"];window.EventTarget?(E(window.EventTarget.prototype,a),void 0===window.__shady_native_addEventListener&&E(Window.prototype,a)):(E(Node.prototype,a),E(Window.prototype,a),E(
2024-05-25 23:00:29 UTC	1390	IN	Data Raw: 3b 28 30 3c 62 2e 6c 65 6e 67 74 68 7c 7c 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 29 26 26 74 68 69 73 2e 5f 5f 73 68 61 64 79 5f 6e 61 74 69 76 65 5f 69 6e 73 65 72 74 42 65 66 6f 72 65 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 62 29 2c 76 6f 69 64 20 30 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 69 73 2e 6e 6f 64 65 56 61 6c 75 65 3d 62 7d 7d 7d 7d 29 3b 45 28 4e 6f 64 65 2e 70 72 6f 74 6f 74 79 70 65 2c 22 61 70 70 65 6e 64 43 68 69 6c 64 20 69 6e 73 65 72 74 42 65 66 6f 72 65 20 72 65 6d 6f 76 65 43 68 69 6c 64 20 72 65 70 6c 61 63 65 43 68 69 6c 64 20 63 6c 6f 6e 65 4e 6f 64 65 20 63 6f 6e 74 61 69 6e 73 22 2e 73 70 6c 69 74 28 22 20 22 29 29 3b 0a Data Ascii: ;(0<b.length\|\|this.nodeType===Node.ELEMENT_NODE)&&this.__shady_native_insertBefore(document.createTextNode(b),void 0);break;default:this.nodeValue=b}}}});E(Node.prototype,"appendChild insertBefore removeChild replaceChild cloneNode contains".split(" "));
2024-05-25 23:00:29 UTC	1390	IN	Data Raw: 3a 64 3b 64 3d 62 2e 5f 5f 73 68 61 64 79 5f 6e 61 74 69 76 65 5f 66 69 72 73 74 43 68 69 6c 64 3b 29 63 2e 5f 5f 73 68 61 64 79 5f 6e 61 74 69 76 65 5f 69 6e 73 65 72 74 42 65 66 6f 72 65 28 64 2c 76 6f 69 64 20 30 29 7d 7d 2c 63 6c 61 73 73 4e 61 6d 65 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 2c 62 29 7d 7d 7d 29 29 3b 45 28 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 65 74 41 74 74 72 69 62 75 74 65 20 67 65 74 41 74 74 72 69 62 75 74 65 20 68 61 73 41 74 74 72 69 62 75 74 65 20 72 65 6d 6f Data Ascii: :d;d=b.__shady_native_firstChild;)c.__shady_native_insertBefore(d,void 0)}},className:{get:function(){return this.getAttribute("class")\|\|""},set:function(b){this.setAttribute("class",b)}}}));E(Element.prototype,"setAttribute getAttribute hasAttribute remo
2024-05-25 23:00:29 UTC	1390	IN	Data Raw: 29 2c 64 62 3d 43 28 7b 67 65 74 20 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 5f 73 68 61 64 79 5f 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 7d 2c 67 65 74 20 70 61 72 65 6e 74 4e 6f 64 65 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 5f 73 68 61 64 79 5f 70 61 72 65 6e 74 4e 6f 64 65 7d 2c 67 65 74 20 6e 65 78 74 53 69 62 6c 69 6e 67 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 5f 73 68 61 64 79 5f 6e 65 78 74 53 69 62 6c 69 6e 67 7d 2c 67 65 74 20 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 5f 73 68 61 64 79 5f 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 7d 2c 67 65 74 20 6e 65 78 74 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 28 29 7b 72 65 74 75 72 6e 20 74 Data Ascii: ),db=C({get parentElement(){return this.__shady_parentElement},get parentNode(){return this.__shady_parentNode},get nextSibling(){return this.__shady_nextSibling},get previousSibling(){return this.__shady_previousSibling},get nextElementSibling(){return t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.6	59274	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:29 UTC	1162	OUT	GET /s/desktop/aef0ced3/jsbin/intersection-observer.min.vflset/intersection-observer.min.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000
2024-05-25 23:00:29 UTC	687	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 5547 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 24 May 2024 14:15:40 GMT Expires: Sat, 24 May 2025 14:15:40 GMT Cache-Control: public, max-age=31536000 Last-Modified: Fri, 24 May 2024 07:14:12 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 117889 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:29 UTC	703	IN	Data Raw: 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 36 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 0a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 57 33 43 20 53 4f 46 54 57 41 52 45 20 41 4e 44 20 44 4f 43 55 4d 45 4e 54 20 4e 4f 54 49 43 45 20 41 4e 44 20 4c 49 43 45 4e 53 45 2e 0a 0a 20 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 43 6f 6e 73 6f 72 74 69 75 6d 2f 4c 65 67 61 6c 2f 32 30 31 35 2f 63 6f 70 79 72 69 67 68 74 2d 73 6f 66 74 77 61 72 65 2d 61 6e 64 2d 64 6f 63 75 6d 65 6e 74 0a 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 66 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 61 29 7b 74 68 69 73 2e 74 69 6d 65 3d 61 2e 74 69 6d 65 3b 74 68 69 73 2e 74 61 72 67 Data Ascii: /* Copyright 2016 Google Inc. All Rights Reserved. Licensed under the W3C SOFTWARE AND DOCUMENT NOTICE AND LICENSE. https://www.w3.org/Consortium/Legal/2015/copyright-software-and-document*/(function(f,h){function t(a){this.time=a.time;this.targ
2024-05-25 23:00:29 UTC	1390	IN	Data Raw: 6f 72 28 22 72 6f 6f 74 20 6d 75 73 74 20 62 65 20 61 6e 20 45 6c 65 6d 65 6e 74 22 29 3b 0a 74 68 69 73 2e 67 3d 79 28 74 68 69 73 2e 67 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 42 29 3b 74 68 69 73 2e 44 3d 61 3b 74 68 69 73 2e 68 3d 5b 5d 3b 74 68 69 73 2e 69 3d 5b 5d 3b 74 68 69 73 2e 73 3d 74 68 69 73 2e 4c 28 62 2e 72 6f 6f 74 4d 61 72 67 69 6e 29 3b 74 68 69 73 2e 74 68 72 65 73 68 6f 6c 64 73 3d 74 68 69 73 2e 4a 28 62 2e 74 68 72 65 73 68 6f 6c 64 29 3b 74 68 69 73 2e 72 6f 6f 74 3d 62 2e 72 6f 6f 74 7c 7c 6e 75 6c 6c 3b 74 68 69 73 2e 72 6f 6f 74 4d 61 72 67 69 6e 3d 74 68 69 73 2e 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 63 2e 76 61 6c 75 65 2b 63 2e 75 6e 69 74 7d 29 2e 6a 6f 69 6e 28 22 20 22 29 7d Data Ascii: or("root must be an Element");this.g=y(this.g.bind(this),this.B);this.D=a;this.h=[];this.i=[];this.s=this.L(b.rootMargin);this.thresholds=this.J(b.threshold);this.root=b.root\|\|null;this.rootMargin=this.s.map(function(c){return c.value+c.unit}).join(" ")}
2024-05-25 23:00:29 UTC	1390	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 2e 43 3d 21 30 3b 64 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 62 73 65 72 76 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 74 68 69 73 2e 68 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 2e 65 6c 65 6d 65 6e 74 3d 3d 61 7d 29 29 7b 69 66 28 21 61 7c 7c 31 21 3d 61 2e 6e 6f 64 65 54 79 70 65 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 74 61 72 67 65 74 20 6d 75 73 74 20 62 65 20 61 6e 20 45 6c 65 6d 65 6e 74 22 29 3b 74 68 69 73 2e 4d 28 29 3b 0a 74 68 69 73 2e 68 2e 70 75 73 68 28 7b 65 6c 65 6d 65 6e 74 3a 61 2c 41 3a 6e 75 6c 6c 7d 29 3b 74 68 69 73 2e 4b 28 29 3b 74 68 69 73 2e 67 28 29 7d 7d 3b 64 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e 6f 62 73 65 72 76 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: prototype.C=!0;d.prototype.observe=function(a){if(!this.h.some(function(b){return b.element==a})){if(!a\|\|1!=a.nodeType)throw Error("target must be an Element");this.M();this.h.push({element:a,A:null});this.K();this.g()}};d.prototype.unobserve=function(a)
2024-05-25 23:00:29 UTC	1390	IN	Data Raw: 22 2c 74 68 69 73 2e 67 2c 21 30 29 2c 74 68 69 73 2e 6a 26 26 28 74 68 69 73 2e 6a 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 74 68 69 73 2e 6a 3d 6e 75 6c 6c 29 29 7d 3b 64 2e 70 72 6f 74 6f 74 79 70 65 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 4f 28 29 2c 62 3d 61 3f 74 68 69 73 2e 48 28 29 3a 71 28 29 3b 74 68 69 73 2e 68 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 65 3d 63 2e 65 6c 65 6d 65 6e 74 2c 67 3d 6d 28 65 29 2c 6b 3d 74 68 69 73 2e 4e 28 65 29 2c 6c 3d 63 2e 41 2c 70 3d 61 26 26 6b 26 26 74 68 69 73 2e 46 28 65 2c 62 29 3b 63 3d 63 2e 41 3d 6e 65 77 20 74 28 7b 74 69 6d 65 3a 66 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 26 26 70 65 72 Data Ascii: ",this.g,!0),this.j&&(this.j.disconnect(),this.j=null))};d.prototype.g=function(){var a=this.O(),b=a?this.H():q();this.h.forEach(function(c){var e=c.element,g=m(e),k=this.N(e),l=c.A,p=a&&k&&this.F(e,b);c=c.A=new t({time:f.performance&&performance.now&&per
2024-05-25 23:00:29 UTC	674	IN	Data Raw: 61 2e 74 6f 70 2d 62 5b 30 5d 2c 72 69 67 68 74 3a 61 2e 72 69 67 68 74 2b 62 5b 31 5d 2c 62 6f 74 74 6f 6d 3a 61 2e 62 6f 74 74 6f 6d 2b 62 5b 32 5d 2c 6c 65 66 74 3a 61 2e 6c 65 66 74 2d 62 5b 33 5d 7d 3b 62 2e 77 69 64 74 68 3d 62 2e 72 69 67 68 74 2d 62 2e 6c 65 66 74 3b 62 2e 68 65 69 67 68 74 3d 62 2e 62 6f 74 74 6f 6d 2d 62 2e 74 6f 70 3b 72 65 74 75 72 6e 20 62 7d 3b 64 2e 70 72 6f 74 6f 74 79 70 65 2e 49 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 61 26 26 61 2e 69 73 49 6e 74 65 72 73 65 63 74 69 6e 67 3f 61 2e 69 6e 74 65 72 73 65 63 74 69 6f 6e 52 61 74 69 6f 7c 7c 30 3a 2d 31 3b 62 3d 62 2e 69 73 49 6e 74 65 72 73 65 63 74 69 6e 67 3f 62 2e 69 6e 74 65 72 73 65 63 74 69 6f 6e 52 61 74 69 6f 7c 7c 30 3a 2d 31 3b 69 66 28 61 21 3d 3d 62 Data Ascii: a.top-b[0],right:a.right+b[1],bottom:a.bottom+b[2],left:a.left-b[3]};b.width=b.right-b.left;b.height=b.bottom-b.top;return b};d.prototype.I=function(a,b){a=a&&a.isIntersecting?a.intersectionRatio\|\|0:-1;b=b.isIntersecting?b.intersectionRatio\|\|0:-1;if(a!==b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.6	59275	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:29 UTC	1130	OUT	GET /s/desktop/aef0ced3/jsbin/scheduler.vflset/scheduler.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000
2024-05-25 23:00:29 UTC	687	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 9670 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 24 May 2024 14:15:40 GMT Expires: Sat, 24 May 2025 14:15:40 GMT Cache-Control: public, max-age=31536000 Last-Modified: Fri, 24 May 2024 07:14:12 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 117889 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:29 UTC	703	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 67 3b 66 75 6e 63 74 69 6f 6e 20 68 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 6b 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 Data Ascii: (function(){'use strict';var g;function h(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var k="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)r
2024-05-25 23:00:29 UTC	1390	IN	Data Raw: 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 6b 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 6d 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 65 2b 2b 2c 66 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 66 2c 79 29 7b 74 68 69 73 2e 67 3d 66 3b 6b 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 Data Ascii: ;b=b(d);b!=d&&null!=b&&k(c,a,{configurable:!0,writable:!0,value:b})}}m("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,y){this.g=f;k(this,"descript
2024-05-25 23:00:29 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 74 3d 70 3b 0a 6d 28 22 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 62 5b 64 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d Data Ascii: unction(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}var t=p;m("Object.values",function(a){return a?a:function(b){var c=[],d;for(d in b)Object.prototype.hasOwnProperty.call(b,d)&&c.push(b[d]);return c}}
2024-05-25 23:00:29 UTC	1390	IN	Data Raw: 29 3f 44 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 45 28 22 43 68 72 6f 6d 65 22 29 7c 7c 45 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 46 28 29 3f 30 3a 45 28 22 45 64 67 65 22 29 29 7c 7c 45 28 22 53 69 6c 6b 22 29 7d 0a 3b 21 45 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 47 28 29 3b 47 28 29 3b 45 28 22 53 61 66 61 72 69 22 29 26 26 28 47 28 29 7c 7c 28 46 28 29 3f 30 3a 45 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 46 28 29 3f 30 3a 45 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 46 28 29 3f 30 3a 45 28 22 45 64 67 65 22 29 29 7c 7c 28 46 28 29 3f 44 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 45 28 22 45 64 67 2f 22 29 29 7c 7c 46 28 29 26 26 44 28 22 4f 70 65 72 61 22 29 29 3b 76 61 72 20 48 3d 4d 61 74 68 2e 6d 61 78 2c 66 61 3d 48 2e 61 70 70 6c 79 Data Ascii: )?D("Chromium"):(E("Chrome")\|\|E("CriOS"))&&!(F()?0:E("Edge"))\|\|E("Silk")};!E("Android")\|\|G();G();E("Safari")&&(G()\|\|(F()?0:E("Coast"))\|\|(F()?0:E("Opera"))\|\|(F()?0:E("Edge"))\|\|(F()?D("Microsoft Edge"):E("Edg/"))\|\|F()&&D("Opera"));var H=Math.max,fa=H.apply
2024-05-25 23:00:29 UTC	1390	IN	Data Raw: 68 69 73 2e 4d 3d 74 68 69 73 2e 54 2e 62 69 6e 64 28 74 68 69 73 29 3b 74 68 69 73 2e 4a 3d 74 68 69 73 2e 4f 2e 62 69 6e 64 28 74 68 69 73 29 3b 74 68 69 73 2e 4b 3d 74 68 69 73 2e 50 2e 62 69 6e 64 28 74 68 69 73 29 3b 74 68 69 73 2e 4c 3d 74 68 69 73 2e 53 2e 62 69 6e 64 28 74 68 69 73 29 3b 69 66 28 62 3d 21 21 77 69 6e 64 6f 77 2e 72 65 71 75 65 73 74 49 64 6c 65 43 61 6c 6c 62 61 63 6b 26 26 21 21 77 69 6e 64 6f 77 2e 63 61 6e 63 65 6c 49 64 6c 65 43 61 6c 6c 62 61 63 6b 29 62 3d 50 28 22 45 58 50 45 52 49 4d 45 4e 54 5f 46 4c 41 47 53 22 2c 7b 7d 29 2e 64 69 73 61 62 6c 65 5f 73 63 68 65 64 75 6c 65 72 5f 72 65 71 75 65 73 74 49 64 6c 65 43 61 6c 6c 62 61 63 6b 2c 62 3d 21 28 22 73 74 72 69 6e 67 22 3d 3d 3d 0a 74 79 70 65 6f 66 20 62 26 26 22 66 Data Ascii: his.M=this.T.bind(this);this.J=this.O.bind(this);this.K=this.P.bind(this);this.L=this.S.bind(this);if(b=!!window.requestIdleCallback&&!!window.cancelIdleCallback)b=P("EXPERIMENT_FLAGS",{}).disable_scheduler_requestIdleCallback,b=!("string"===typeof b&&"f
2024-05-25 23:00:29 UTC	1390	IN	Data Raw: 52 65 6d 61 69 6e 69 6e 67 28 29 29 3b 74 68 69 73 2e 46 3d 21 30 3b 56 28 74 68 69 73 2c 62 29 3b 74 68 69 73 2e 46 3d 21 31 7d 3b 0a 67 2e 54 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 56 28 74 68 69 73 29 7d 3b 0a 67 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 78 61 28 74 68 69 73 29 7d 3b 0a 67 2e 53 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 41 3d 21 30 3b 76 61 72 20 62 3d 54 28 74 68 69 73 29 3b 34 3d 3d 3d 62 26 26 62 21 3d 3d 74 68 69 73 2e 6d 26 26 28 55 28 74 68 69 73 29 2c 74 68 69 73 2e 73 74 61 72 74 28 29 29 3b 56 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 61 29 3b 74 68 69 73 2e 41 3d 21 31 7d 3b 0a 67 2e 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 7c 7c 78 61 28 74 68 69 73 29 3b 74 68 69 73 2e 67 26 Data Ascii: Remaining());this.F=!0;V(this,b);this.F=!1};g.T=function(){V(this)};g.O=function(){xa(this)};g.S=function(a){this.A=!0;var b=T(this);4===b&&b!==this.m&&(U(this),this.start());V(this,void 0,a);this.A=!1};g.R=function(){document.hidden\|\|xa(this);this.g&
2024-05-25 23:00:29 UTC	1390	IN	Data Raw: 63 68 28 61 2e 6d 29 7b 63 61 73 65 20 31 3a 76 61 72 20 62 3d 61 2e 67 3b 61 2e 49 3f 77 69 6e 64 6f 77 2e 63 61 6e 63 65 6c 49 64 6c 65 43 61 6c 6c 62 61 63 6b 28 62 29 3a 77 69 6e 64 6f 77 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 62 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 63 61 73 65 20 34 3a 77 69 6e 64 6f 77 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 61 2e 67 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 3a 77 69 6e 64 6f 77 2e 63 61 6e 63 65 6c 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 61 2e 67 29 7d 61 2e 67 3d 30 7d 7d 0a 67 2e 47 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 75 61 28 74 68 69 73 29 3b 55 28 74 68 69 73 29 3b 74 68 69 73 2e 76 26 26 64 6f 63 75 6d 65 6e 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 Data Ascii: ch(a.m){case 1:var b=a.g;a.I?window.cancelIdleCallback(b):window.clearTimeout(b);break;case 2:case 4:window.clearTimeout(a.g);break;case 3:window.cancelAnimationFrame(a.g)}a.g=0}}g.G=function(){ua(this);U(this);this.v&&document.removeEventListener("visib
2024-05-25 23:00:29 UTC	627	IN	Data Raw: 61 28 61 29 7b 4a 61 28 29 3b 76 61 72 20 62 3d 5a 28 29 3b 62 2e 6a 3e 61 26 26 28 62 2e 6a 3d 61 2c 62 2e 73 74 61 72 74 28 29 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 4d 61 28 29 7b 77 69 6e 64 6f 77 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 59 29 3b 76 61 72 20 61 3d 5a 28 29 3b 61 2e 6a 3d 30 3b 61 2e 73 74 61 72 74 28 29 7d 0a 3b 76 28 22 79 74 2e 73 63 68 65 64 75 6c 65 72 2e 69 6e 69 74 69 61 6c 69 7a 65 64 22 29 7c 7c 28 77 28 22 79 74 2e 73 63 68 65 64 75 6c 65 72 2e 69 6e 73 74 61 6e 63 65 2e 64 69 73 70 6f 73 65 22 2c 41 61 29 2c 77 28 22 79 74 2e 73 63 68 65 64 75 6c 65 72 2e 69 6e 73 74 61 6e 63 65 2e 61 64 64 4a 6f 62 22 2c 43 61 29 2c 77 28 22 79 74 2e 73 63 68 65 64 75 6c 65 72 2e 69 6e 73 74 61 6e 63 65 2e 61 64 64 49 6d 6d 65 64 69 61 74 65 Data Ascii: a(a){Ja();var b=Z();b.j>a&&(b.j=a,b.start())}function Ma(){window.clearTimeout(Y);var a=Z();a.j=0;a.start()};v("yt.scheduler.initialized")\|\|(w("yt.scheduler.instance.dispose",Aa),w("yt.scheduler.instance.addJob",Ca),w("yt.scheduler.instance.addImmediate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.6	59276	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:29 UTC	1154	OUT	GET /s/desktop/aef0ced3/jsbin/www-i18n-constants-en_US.vflset/www-i18n-constants.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000
2024-05-25 23:00:29 UTC	687	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 5863 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 24 May 2024 17:07:58 GMT Expires: Sat, 24 May 2025 17:07:58 GMT Cache-Control: public, max-age=31536000 Last-Modified: Fri, 24 May 2024 07:14:12 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 107551 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:29 UTC	703	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 65 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 66 28 63 2c 62 29 7b 63 3d 63 2e 73 70 6c 69 74 28 22 2e 22 29 3b 76 61 72 20 61 3d 65 3b 63 5b 30 5d 69 6e 20 61 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 61 2e 65 78 65 63 53 63 72 69 70 74 7c 7c 61 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 63 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 64 3b 63 2e 6c 65 6e 67 74 68 26 26 Data Ascii: (function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var e=this\|\|self;function f(c,b){c=c.split(".");var a=e;c[0]in a\|\|"undefined"==typeof a.execScript\|\|a.execScript("var "+c[0]);for(var d;c.length&&
2024-05-25 23:00:29 UTC	1390	IN	Data Raw: 59 5f 54 49 4d 45 5f 5a 4f 4e 45 5f 53 48 4f 52 54 3a 22 4d 4d 4d 20 64 2c 20 68 3a 6d 6d 5c 75 32 30 32 66 61 20 7a 7a 7a 7a 22 7d 2c 68 3d 67 3b 68 3d 67 3b 76 61 72 20 6b 3d 7b 45 52 41 53 3a 5b 22 42 43 22 2c 22 41 44 22 5d 2c 45 52 41 4e 41 4d 45 53 3a 5b 22 42 65 66 6f 72 65 20 43 68 72 69 73 74 22 2c 22 41 6e 6e 6f 20 44 6f 6d 69 6e 69 22 5d 2c 4e 41 52 52 4f 57 4d 4f 4e 54 48 53 3a 22 4a 46 4d 41 4d 4a 4a 41 53 4f 4e 44 22 2e 73 70 6c 69 74 28 22 22 29 2c 53 54 41 4e 44 41 4c 4f 4e 45 4e 41 52 52 4f 57 4d 4f 4e 54 48 53 3a 22 4a 46 4d 41 4d 4a 4a 41 53 4f 4e 44 22 2e 73 70 6c 69 74 28 22 22 29 2c 4d 4f 4e 54 48 53 3a 22 4a 61 6e 75 61 72 79 20 46 65 62 72 75 61 72 79 20 4d 61 72 63 68 20 41 70 72 69 6c 20 4d 61 79 20 4a 75 6e 65 20 4a 75 6c 79 20 Data Ascii: Y_TIME_ZONE_SHORT:"MMM d, h:mm\u202fa zzzz"},h=g;h=g;var k={ERAS:["BC","AD"],ERANAMES:["Before Christ","Anno Domini"],NARROWMONTHS:"JFMAMJJASOND".split(""),STANDALONENARROWMONTHS:"JFMAMJJASOND".split(""),MONTHS:"January February March April May June July
2024-05-25 23:00:29 UTC	1390	IN	Data Raw: 62 3d 63 2b 22 22 3b 76 61 72 20 61 3d 62 2e 69 6e 64 65 78 4f 66 28 22 2e 22 29 3b 62 3d 4d 61 74 68 2e 6d 69 6e 28 2d 31 3d 3d 3d 61 3f 30 3a 62 2e 6c 65 6e 67 74 68 2d 61 2d 31 2c 33 29 7d 61 3d 4d 61 74 68 2e 70 6f 77 28 31 30 2c 62 29 3b 62 3d 7b 67 3a 62 2c 66 3a 28 63 2a 61 7c 30 29 25 61 7d 3b 72 65 74 75 72 6e 20 31 3d 3d 28 63 7c 30 29 26 26 30 3d 3d 62 2e 67 3f 22 6f 6e 65 22 3a 22 6f 74 68 65 72 22 7d 0a 76 61 72 20 6e 3d 6d 3b 6e 3d 6d 3b 66 28 22 59 54 5f 49 31 38 4e 5f 46 4f 52 4d 41 54 54 49 4e 47 5f 47 4f 4f 47 5f 4c 4f 43 41 4c 45 22 2c 22 65 6e 22 29 3b 66 28 22 59 54 5f 49 31 38 4e 5f 46 4f 52 4d 41 54 54 49 4e 47 5f 44 41 54 45 5f 54 49 4d 45 5f 50 41 54 54 45 52 4e 53 22 2c 68 29 3b 66 28 22 59 54 5f 49 31 38 4e 5f 46 4f 52 4d 41 54 Data Ascii: b=c+"";var a=b.indexOf(".");b=Math.min(-1===a?0:b.length-a-1,3)}a=Math.pow(10,b);b={g:b,f:(c*a\|0)%a};return 1==(c\|0)&&0==b.g?"one":"other"}var n=m;n=m;f("YT_I18N_FORMATTING_GOOG_LOCALE","en");f("YT_I18N_FORMATTING_DATE_TIME_PATTERNS",h);f("YT_I18N_FORMAT
2024-05-25 23:00:29 UTC	1390	IN	Data Raw: 46 3a 22 6f 6e 65 7b 69 6e 20 23 20 6d 6f 2e 7d 6f 74 68 65 72 7b 69 6e 20 23 20 6d 6f 2e 7d 22 7d 2c 4e 41 52 52 4f 57 3a 7b 52 3a 7b 22 2d 31 22 3a 22 6c 61 73 74 20 6d 6f 2e 22 2c 30 3a 22 74 68 69 73 20 6d 6f 2e 22 2c 31 3a 22 6e 65 78 74 20 6d 6f 2e 22 7d 2c 50 3a 22 6f 6e 65 7b 23 6d 6f 20 61 67 6f 7d 6f 74 68 65 72 7b 23 6d 6f 20 61 67 6f 7d 22 2c 46 3a 22 6f 6e 65 7b 69 6e 20 23 6d 6f 7d 6f 74 68 65 72 7b 69 6e 20 23 6d 6f 7d 22 7d 7d 2c 51 55 41 52 54 45 52 3a 7b 4c 4f 4e 47 3a 7b 52 3a 7b 22 2d 31 22 3a 22 6c 61 73 74 20 71 75 61 72 74 65 72 22 2c 30 3a 22 74 68 69 73 20 71 75 61 72 74 65 72 22 2c 31 3a 22 6e 65 78 74 20 71 75 61 72 74 65 72 22 7d 2c 50 3a 22 6f 6e 65 7b 23 20 71 75 61 72 74 65 72 20 61 67 6f 7d 6f 74 68 65 72 7b 23 20 71 75 61 Data Ascii: F:"one{in # mo.}other{in # mo.}"},NARROW:{R:{"-1":"last mo.",0:"this mo.",1:"next mo."},P:"one{#mo ago}other{#mo ago}",F:"one{in #mo}other{in #mo}"}},QUARTER:{LONG:{R:{"-1":"last quarter",0:"this quarter",1:"next quarter"},P:"one{# quarter ago}other{# qua
2024-05-25 23:00:29 UTC	990	IN	Data Raw: 79 72 2e 22 7d 2c 50 3a 22 6f 6e 65 7b 23 20 79 72 2e 20 61 67 6f 7d 6f 74 68 65 72 7b 23 20 79 72 2e 20 61 67 6f 7d 22 2c 46 3a 22 6f 6e 65 7b 69 6e 20 23 20 79 72 2e 7d 6f 74 68 65 72 7b 69 6e 20 23 20 79 72 2e 7d 22 7d 2c 4e 41 52 52 4f 57 3a 7b 52 3a 7b 22 2d 31 22 3a 22 6c 61 73 74 20 79 72 2e 22 2c 0a 30 3a 22 74 68 69 73 20 79 72 2e 22 2c 31 3a 22 6e 65 78 74 20 79 72 2e 22 7d 2c 50 3a 22 6f 6e 65 7b 23 79 20 61 67 6f 7d 6f 74 68 65 72 7b 23 79 20 61 67 6f 7d 22 2c 46 3a 22 6f 6e 65 7b 69 6e 20 23 79 7d 6f 74 68 65 72 7b 69 6e 20 23 79 7d 22 7d 7d 7d 29 3b 66 28 22 59 54 5f 49 31 38 4e 5f 46 4f 52 4d 41 54 54 49 4e 47 5f 50 4c 55 52 41 4c 5f 52 55 4c 45 53 5f 53 45 4c 45 43 54 22 2c 6e 29 3b 0a 66 28 22 59 54 5f 49 31 38 4e 5f 46 4f 52 4d 41 54 54 Data Ascii: yr."},P:"one{# yr. ago}other{# yr. ago}",F:"one{in # yr.}other{in # yr.}"},NARROW:{R:{"-1":"last yr.",0:"this yr.",1:"next yr."},P:"one{#y ago}other{#y ago}",F:"one{in #y}other{in #y}"}}});f("YT_I18N_FORMATTING_PLURAL_RULES_SELECT",n);f("YT_I18N_FORMATT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.6	59277	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:30 UTC	1138	OUT	GET /s/desktop/aef0ced3/jsbin/www-tampering.vflset/www-tampering.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000
2024-05-25 23:00:30 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 11112 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 24 May 2024 17:07:58 GMT Expires: Sat, 24 May 2025 17:07:58 GMT Cache-Control: public, max-age=31536000 Last-Modified: Fri, 24 May 2024 07:14:12 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 107552 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:30 UTC	702	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 70 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 Data Ascii: (function(){'use strict';function n(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return
2024-05-25 23:00:30 UTC	1390	IN	Data Raw: 3b 62 21 3d 65 26 26 6e 75 6c 6c 21 3d 62 26 26 70 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 74 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 6c 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 65 2b 28 6c 7c 7c 22 22 29 2b 22 5f 22 2b 68 2b 2b 2c 6c 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 6c 2c 6d 29 7b 74 68 69 73 2e 67 3d 6c 3b 70 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 7b 63 Data Ascii: ;b!=e&&null!=b&&p(c,a,{configurable:!0,writable:!0,value:b})}}t("Symbol",function(a){function b(l){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(e+(l\|\|"")+"_"+h++,l)}function c(l,m){this.g=l;p(this,"description",{c
2024-05-25 23:00:30 UTC	1390	IN	Data Raw: 20 67 3b 21 28 67 3d 64 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 67 3d 67 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 67 5b 30 5d 2c 67 5b 31 5d 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 65 28 64 29 7b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 64 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 3d 67 26 26 6e 75 6c 6c 21 3d 3d 64 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 67 7d 0a 66 75 6e 63 74 69 6f 6e 20 68 28 64 29 7b 69 66 28 21 79 28 64 2c 6d 29 29 7b 76 61 72 20 67 3d 6e 65 77 20 63 3b 70 28 64 2c 6d 2c 7b 76 61 6c 75 65 3a 67 7d 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 6c 28 64 29 7b 76 61 72 20 67 3d 4f 62 6a 65 63 74 5b 64 5d 3b 67 26 26 28 4f 62 6a 65 63 74 5b 64 5d 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: g;!(g=d.next()).done;)g=g.value,this.set(g[0],g[1])}}function c(){}function e(d){var g=typeof d;return"object"===g&&null!==d\|\|"function"===g}function h(d){if(!y(d,m)){var g=new c;p(d,m,{value:g})}}function l(d){var g=Object[d];g&&(Object[d]=function(
2024-05-25 23:00:30 UTC	1390	IN	Data Raw: 22 2b 20 2b 2b 6d 2c 6c 2e 73 65 74 28 64 2c 67 29 29 3a 67 3d 22 70 5f 22 2b 64 3b 76 61 72 20 6b 3d 66 5b 30 5d 5b 67 5d 3b 69 66 28 6b 26 26 79 28 66 5b 30 5d 2c 67 29 29 66 6f 72 28 66 3d 30 3b 66 3c 6b 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 7b 76 61 72 20 76 3d 6b 5b 66 5d 3b 69 66 28 64 21 3d 3d 64 26 26 76 2e 6b 65 79 21 3d 3d 76 2e 6b 65 79 7c 7c 64 3d 3d 3d 76 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 67 2c 6c 69 73 74 3a 6b 2c 69 6e 64 65 78 3a 66 2c 68 3a 76 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 67 2c 6c 69 73 74 3a 6b 2c 69 6e 64 65 78 3a 2d 31 2c 68 3a 76 6f 69 64 20 30 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 68 28 66 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 66 29 7b 66 Data Ascii: "+ ++m,l.set(d,g)):g="p_"+d;var k=f[0][g];if(k&&y(f[0],g))for(f=0;f<k.length;f++){var v=k[f];if(d!==d&&v.key!==v.key\|\|d===v.key)return{id:g,list:k,index:f,h:v}}return{id:g,list:k,index:-1,h:void 0}}function h(f){this[0]={};this[1]=b();this.size=0;if(f){f
2024-05-25 23:00:30 UTC	1390	IN	Data Raw: 2e 68 7d 3b 0a 68 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 28 66 3d 65 28 74 68 69 73 2c 66 29 2e 68 29 26 26 66 2e 76 61 6c 75 65 7d 3b 0a 68 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 5b 66 2e 6b 65 79 2c 66 2e 76 61 6c 75 65 5d 7d 29 7d 3b 0a 68 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 2e 6b 65 79 7d 29 7d 3b 0a 68 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 Data Ascii: .h};h.prototype.get=function(f){return(f=e(this,f).h)&&f.value};h.prototype.entries=function(){return c(this,function(f){return[f.key,f.value]})};h.prototype.keys=function(){return c(this,function(f){return f.key})};h.prototype.values=function(){retur
2024-05-25 23:00:30 UTC	1390	IN	Data Raw: 65 7c 7c 6c 2e 76 61 6c 75 65 5b 30 5d 3d 3d 63 7c 7c 34 21 3d 6c 2e 76 61 6c 75 65 5b 30 5d 2e 78 7c 7c 6c 2e 76 61 6c 75 65 5b 31 5d 21 3d 6c 2e 76 61 6c 75 65 5b 30 5d 3f 21 31 3a 68 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 7d 63 61 74 63 68 28 6d 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 3d 30 3d 3d 3d 63 3f 30 3a 63 3b 74 68 69 73 2e 67 2e 73 65 74 28 63 2c 63 29 3b 74 68 69 73 2e 73 69 7a 65 3d 74 68 69 73 2e 67 2e 73 69 7a 65 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 3d 74 68 69 73 2e 67 2e 64 65 6c 65 74 65 28 63 29 3b 74 68 69 73 2e 73 Data Ascii: e\|\|l.value[0]==c\|\|4!=l.value[0].x\|\|l.value[1]!=l.value[0]?!1:h.next().done}catch(m){return!1}}())return a;b.prototype.add=function(c){c=0===c?0:c;this.g.set(c,c);this.size=this.g.size;return this};b.prototype.delete=function(c){c=this.g.delete(c);this.s
2024-05-25 23:00:30 UTC	1390	IN	Data Raw: 73 68 69 66 74 28 29 29 3b 29 61 2e 6c 65 6e 67 74 68 7c 7c 76 6f 69 64 20 30 3d 3d 3d 62 3f 63 5b 65 5d 26 26 63 5b 65 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 65 5d 3f 63 3d 63 5b 65 5d 3a 63 3d 63 5b 65 5d 3d 7b 7d 3a 63 5b 65 5d 3d 62 7d 0a 3b 76 61 72 20 43 2c 44 3b 61 3a 7b 66 6f 72 28 76 61 72 20 45 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 46 3d 41 2c 47 3d 30 3b 47 3c 45 2e 6c 65 6e 67 74 68 3b 47 2b 2b 29 69 66 28 46 3d 46 5b 45 5b 47 5d 5d 2c 6e 75 6c 6c 3d 3d 46 29 7b 44 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 44 3d 46 7d 76 61 72 20 48 3d 44 26 26 44 5b 36 31 30 34 30 31 33 30 31 5d 3b 43 3d 6e 75 6c 6c 21 3d 48 3f 48 3a 21 31 3b 76 61 72 20 49 2c 4a 3d 41 2e 6e 61 76 69 67 61 74 6f 72 3b 49 3d 4a 3f 4a Data Ascii: shift());)a.length\|\|void 0===b?c[e]&&c[e]!==Object.prototype[e]?c=c[e]:c=c[e]={}:c[e]=b};var C,D;a:{for(var E=["CLOSURE_FLAGS"],F=A,G=0;G<E.length;G++)if(F=F[E[G]],null==F){D=null;break a}D=F}var H=D&&D[610401301];C=null!=H?H:!1;var I,J=A.navigator;I=J?J
2024-05-25 23:00:30 UTC	1390	IN	Data Raw: 72 79 53 65 6c 65 63 74 6f 72 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 20 68 69 73 74 6f 72 79 2e 62 61 63 6b 20 68 69 73 74 6f 72 79 2e 67 6f 22 2e 73 70 6c 69 74 28 22 20 22 29 29 2c 57 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 22 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 20 73 30 2e 32 6d 64 6e 2e 6e 65 74 20 73 65 63 75 72 65 70 75 62 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 20 73 73 6c 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 73 74 61 74 69 63 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 20 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 73 65 72 76 69 63 65 73 2e 63 6f 6d 20 77 Data Ascii: rySelector document.querySelectorAll history.back history.go".split(" ")),W=Object.freeze("fonts.googleapis.com s0.2mdn.net securepubads.g.doubleclick.net ssl.google-analytics.com static.doubleclick.net www.google-analytics.com www.googletagservices.com w
2024-05-25 23:00:30 UTC	680	IN	Data Raw: 63 74 69 6f 6e 20 66 61 28 29 7b 76 61 72 20 61 3d 6e 65 77 20 53 65 74 3b 5b 5d 2e 63 6f 6e 63 61 74 28 78 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 73 63 72 69 70 74 22 29 29 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 2e 73 72 63 26 26 21 5a 28 62 2e 73 72 63 29 26 26 61 2e 61 64 64 28 62 2e 73 72 63 29 7d 29 3b 0a 5b 5d 2e 63 6f 6e 63 61 74 28 78 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 6c 69 6e 6b 5b 68 72 65 66 5d 22 29 29 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 22 61 6c 74 65 72 6e 61 74 65 22 3d 3d 62 2e 72 65 6c 7c 7c 5a 28 62 2e 68 72 65 66 29 7c 7c 61 2e 61 64 64 28 62 2e 68 72 65 66 29 7d 29 3b 0a 72 65 74 75 Data Ascii: ction fa(){var a=new Set;[].concat(x(document.querySelectorAll("script"))).forEach(function(b){b.src&&!Z(b.src)&&a.add(b.src)});[].concat(x(document.querySelectorAll("link[href]"))).forEach(function(b){"alternate"==b.rel\|\|Z(b.href)\|\|a.add(b.href)});retu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.6	59278	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:30 UTC	1118	OUT	GET /s/desktop/aef0ced3/jsbin/spf.vflset/spf.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000
2024-05-25 23:00:30 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 39835 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 24 May 2024 16:01:36 GMT Expires: Sat, 24 May 2025 16:01:36 GMT Cache-Control: public, max-age=31536000 Last-Modified: Fri, 24 May 2024 07:14:12 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 111534 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:30 UTC	702	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 76 61 72 20 62 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c Data Ascii: (function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.val
2024-05-25 23:00:30 UTC	1390	IN	Data Raw: 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 65 61 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 65 2b 2b 2c 66 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 66 2c 67 29 7b 74 68 69 73 2e 67 3d 66 3b 62 61 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 Data Ascii: (c,a,{configurable:!0,writable:!0,value:b})}}ea("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.g=f;ba(this,"description",{configurable:!0,w
2024-05-25 23:00:30 UTC	1390	IN	Data Raw: 22 3a 62 3a 22 6e 75 6c 6c 22 7d 66 75 6e 63 74 69 6f 6e 20 6b 61 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 63 2e 70 72 6f 74 6f 74 79 70 65 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 59 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 63 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 61 2e 58 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 29 7b 66 6f 72 28 76 61 72 20 67 3d 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 32 29 2c 68 3d 32 3b 68 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 67 5b 68 2d 32 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 68 5d 3b 72 65 74 75 72 6e 20 62 2e 70 72 6f 74 6f 74 79 70 65 5b 65 5d 2e 61 70 70 6c Data Ascii: ":b:"null"}function ka(a,b){function c(){}c.prototype=b.prototype;a.Y=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.X=function(d,e,f){for(var g=Array(arguments.length-2),h=2;h<arguments.length;h++)g[h-2]=arguments[h];return b.prototype[e].appl
2024-05-25 23:00:30 UTC	1390	IN	Data Raw: 69 64 23 7a 43 6c 6f 73 75 72 65 7a 22 29 3b 76 61 72 20 77 61 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 78 61 28 61 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 41 20 55 52 4c 20 77 69 74 68 20 63 6f 6e 74 65 6e 74 20 27 22 2b 61 2b 22 27 20 77 61 73 20 73 61 6e 69 74 69 7a 65 64 20 61 77 61 79 2e 22 29 7d 2d 31 3d 3d 3d 77 61 2e 69 6e 64 65 78 4f 66 28 78 61 29 26 26 77 61 2e 70 75 73 68 28 78 61 29 3b 76 61 72 20 79 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 7a 61 28 29 7b 69 66 28 79 61 21 3d 3d 79 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 53 61 66 65 53 74 79 6c 65 20 69 73 20 6e 6f 74 20 6d 65 61 6e 74 20 74 6f 20 62 65 20 62 75 69 6c 74 20 64 69 72 65 63 74 6c 79 22 29 3b 7d 7a 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 Data Ascii: id#zClosurez");var wa=[];function xa(a){console.warn("A URL with content '"+a+"' was sanitized away.")}-1===wa.indexOf(xa)&&wa.push(xa);var ya={};function za(){if(ya!==ya)throw Error("SafeStyle is not meant to be built directly");}za.prototype.toString=fu
2024-05-25 23:00:30 UTC	1390	IN	Data Raw: 63 65 22 29 7c 7c 22 22 3a 22 22 29 26 26 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 63 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 61 28 61 29 7b 61 3d 48 61 28 61 29 3b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 3d 74 79 70 65 6f 66 20 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 45 78 70 65 63 74 65 64 20 61 20 73 74 72 69 6e 67 22 29 3b 76 61 72 20 62 3d 71 61 28 29 3b 61 3d 62 3f 62 2e 63 72 65 61 74 65 48 54 4d 4c 28 61 29 3a 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 44 61 28 61 2c 43 61 29 7d 66 75 6e 63 74 69 6f 6e 20 49 61 28 61 29 7b 61 3d 48 61 28 61 29 3b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 3d 74 79 70 65 6f 66 20 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 45 78 70 65 63 74 65 64 20 61 20 73 74 72 69 6e 67 22 29 3b 76 61 72 Data Ascii: ce")\|\|"":"")&&a.setAttribute("nonce",c)};function Ga(a){a=Ha(a);if("string"!==typeof a)throw Error("Expected a string");var b=qa();a=b?b.createHTML(a):a;return new Da(a,Ca)}function Ia(a){a=Ha(a);if("string"!==typeof a)throw Error("Expected a string");var
2024-05-25 23:00:30 UTC	1390	IN	Data Raw: 74 75 72 6e 21 31 7d 0a 66 75 6e 63 74 69 6f 6e 20 4e 61 28 61 2c 62 29 7b 69 66 28 61 2e 66 69 6c 74 65 72 29 72 65 74 75 72 6e 20 61 2e 66 69 6c 74 65 72 28 62 2c 76 6f 69 64 20 30 29 3b 76 61 72 20 63 3d 5b 5d 3b 72 28 61 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 29 7b 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 64 2c 65 2c 66 29 26 26 63 2e 70 75 73 68 28 64 29 7d 29 3b 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 4f 61 28 61 2c 62 29 7b 69 66 28 61 2e 6d 61 70 29 72 65 74 75 72 6e 20 61 2e 6d 61 70 28 62 2c 76 6f 69 64 20 30 29 3b 76 61 72 20 63 3d 5b 5d 3b 63 2e 6c 65 6e 67 74 68 3d 61 2e 6c 65 6e 67 74 68 3b 72 28 61 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 29 7b 63 5b 65 5d 3d 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 64 2c 65 2c 66 Data Ascii: turn!1}function Na(a,b){if(a.filter)return a.filter(b,void 0);var c=[];r(a,function(d,e,f){b.call(void 0,d,e,f)&&c.push(d)});return c}function Oa(a,b){if(a.map)return a.map(b,void 0);var c=[];c.length=a.length;r(a,function(d,e,f){c[e]=b.call(void 0,d,e,f
2024-05-25 23:00:30 UTC	1390	IN	Data Raw: 63 2d 64 65 66 65 72 73 22 69 6e 20 78 7c 7c 77 28 22 61 73 79 6e 63 2d 64 65 66 65 72 73 22 2c 55 61 29 3b 55 61 3d 78 5b 22 61 73 79 6e 63 2d 64 65 66 65 72 73 22 5d 3b 58 61 26 26 28 22 61 73 79 6e 63 2d 6c 69 73 74 65 6e 65 72 22 69 6e 20 78 26 26 57 61 28 78 5b 22 61 73 79 6e 63 2d 6c 69 73 74 65 6e 65 72 22 5d 29 2c 56 61 28 53 61 29 2c 77 28 22 61 73 79 6e 63 2d 6c 69 73 74 65 6e 65 72 22 2c 53 61 29 29 3b 76 61 72 20 5a 61 3d 7b 22 61 6e 69 6d 61 74 69 6f 6e 2d 63 6c 61 73 73 22 3a 22 73 70 66 2d 61 6e 69 6d 61 74 65 22 2c 22 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 22 3a 34 32 35 2c 22 63 61 63 68 65 2d 6c 69 66 65 74 69 6d 65 22 3a 36 45 35 2c 22 63 61 63 68 65 2d 6d 61 78 22 3a 35 30 2c 22 63 61 63 68 65 2d 75 6e 69 66 69 65 64 22 Data Ascii: c-defers"in x\|\|w("async-defers",Ua);Ua=x["async-defers"];Xa&&("async-listener"in x&&Wa(x["async-listener"]),Va(Sa),w("async-listener",Sa));var Za={"animation-class":"spf-animate","animation-duration":425,"cache-lifetime":6E5,"cache-max":50,"cache-unified"
2024-05-25 23:00:30 UTC	1390	IN	Data Raw: 73 4c 69 73 74 29 61 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 62 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 64 62 28 61 29 3b 63 3d 4e 61 28 63 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 64 21 3d 62 7d 29 3b 61 2e 63 6c 61 73 73 4e 61 6d 65 3d 63 2e 6a 6f 69 6e 28 22 20 22 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 66 62 28 61 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 62 2e 64 61 74 61 73 65 74 3f 62 2e 64 61 74 61 73 65 74 2e 73 70 66 4e 61 6d 65 3d 61 3a 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 22 2b 52 61 28 29 2c 61 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 67 62 28 61 2c 62 29 7b 62 3d 62 7c 7c 64 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 62 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 Data Ascii: sList)a.classList.remove(b);else{var c=db(a);c=Na(c,function(d){return d!=b});a.className=c.join(" ")}};function fb(a){var b=document.body;b.dataset?b.dataset.spfName=a:b.setAttribute("data-"+Ra(),a)};function gb(a,b){b=b\|\|document;return b.querySelectorA
2024-05-25 23:00:30 UTC	1390	IN	Data Raw: 5d 29 26 26 63 28 62 2c 61 29 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 6c 62 28 61 2c 62 29 7b 76 61 72 20 63 3d 6d 62 28 29 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 29 63 2e 63 61 6c 6c 28 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2c 61 2c 22 22 2c 62 29 3b 65 6c 73 65 20 74 68 72 6f 77 20 45 72 72 6f 72 28 22 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 6d 62 28 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 68 69 73 74 6f 72 79 2d 69 66 72 61 6d 65 22 29 3b 61 7c Data Ascii: ])&&c(b,a))}}function lb(a,b){var c=mb().contentWindow.history.replaceState;if("function"==typeof c)c.call(window.history,a,"",b);else throw Error("history.replaceState is not a function");}function mb(){var a=document.getElementById("history-iframe");a\|
2024-05-25 23:00:30 UTC	1390	IN	Data Raw: 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 62 2e 68 72 65 66 3d 61 3b 62 2e 68 72 65 66 3d 62 2e 68 72 65 66 3b 61 3d 7b 68 72 65 66 3a 62 2e 68 72 65 66 2c 70 72 6f 74 6f 63 6f 6c 3a 62 2e 70 72 6f 74 6f 63 6f 6c 2c 68 6f 73 74 3a 62 2e 68 6f 73 74 2c 68 6f 73 74 6e 61 6d 65 3a 62 2e 68 6f 73 74 6e 61 6d 65 2c 70 6f 72 74 3a 62 2e 70 6f 72 74 2c 70 61 74 68 6e 61 6d 65 3a 62 2e 70 61 74 68 6e 61 6d 65 2c 73 65 61 72 63 68 3a 62 2e 73 65 61 72 63 68 2c 68 61 73 68 3a 62 2e 68 61 73 68 2c 75 73 65 72 6e 61 6d 65 3a 62 2e 75 73 65 72 6e 61 6d 65 2c 70 61 73 73 77 6f 72 64 3a 62 2e 70 61 73 73 77 6f 72 64 7d 3b 61 2e 6f 72 69 67 69 6e 3d 61 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 61 2e 68 6f 73 74 3b 61 2e Data Ascii: b=document.createElement("a");b.href=a;b.href=b.href;a={href:b.href,protocol:b.protocol,host:b.host,hostname:b.hostname,port:b.port,pathname:b.pathname,search:b.search,hash:b.hash,username:b.username,password:b.password};a.origin=a.protocol+"//"+a.host;a.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.6	59279	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:30 UTC	1126	OUT	GET /s/desktop/aef0ced3/jsbin/network.vflset/network.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000
2024-05-25 23:00:30 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 14949 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 24 May 2024 16:01:37 GMT Expires: Sat, 24 May 2025 16:01:37 GMT Cache-Control: public, max-age=31536000 Last-Modified: Fri, 24 May 2024 07:14:12 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 111533 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:30 UTC	702	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 76 61 72 20 6c 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 Data Ascii: (function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var l="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.valu
2024-05-25 23:00:30 UTC	1390	IN	Data Raw: 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 72 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 65 2b 2b 2c 66 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 66 2c 68 29 7b 74 68 69 73 2e 67 3d 66 3b 6c 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 Data Ascii: {configurable:!0,writable:!0,value:b})}}r("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,h){this.g=f;l(this,"description",{configurable:!0,writable
2024-05-25 23:00:30 UTC	1390	IN	Data Raw: 28 22 42 61 64 20 73 65 63 72 65 74 22 29 3b 74 68 69 73 2e 67 3d 61 7d 77 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 7d 3b 6e 65 77 20 77 28 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 29 3b 6e 65 77 20 77 28 22 61 62 6f 75 74 3a 69 6e 76 61 6c 69 64 23 7a 43 6c 6f 73 75 72 65 7a 22 29 3b 76 61 72 20 78 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 79 28 61 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 41 20 55 52 4c 20 77 69 74 68 20 63 6f 6e 74 65 6e 74 20 27 22 2b 61 2b 22 27 20 77 61 73 20 73 61 6e 69 74 69 7a 65 64 20 61 77 61 79 2e 22 29 7d 2d 31 3d 3d 3d 78 2e 69 6e 64 65 78 4f 66 28 79 29 26 26 78 2e 70 75 73 68 28 79 29 3b 76 61 72 20 7a 3d 7b 7d 3b 66 75 6e 63 74 69 Data Ascii: ("Bad secret");this.g=a}w.prototype.toString=function(){return this.g};new w("about:blank");new w("about:invalid#zClosurez");var x=[];function y(a){console.warn("A URL with content '"+a+"' was sanitized away.")}-1===x.indexOf(y)&&x.push(y);var z={};functi
2024-05-25 23:00:30 UTC	1390	IN	Data Raw: 28 76 61 72 20 63 3d 30 2c 64 3d 61 2e 6c 65 6e 67 74 68 3b 63 3c 64 3b 63 2b 2b 29 69 66 28 63 20 69 6e 20 61 26 26 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 61 5b 63 5d 2c 63 2c 61 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 61 29 3f 61 3a 5b 61 5d 7d 3b 66 75 6e 63 74 69 6f 6e 20 4c 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4d 5b 61 5d 3d 62 7d 76 61 72 20 4d 3d 77 69 6e 64 6f 77 2e 5f 73 70 66 5f 73 74 61 74 65 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 5f 73 70 66 5f 73 74 61 74 65 3d 4d 3b 76 61 72 20 4e 3d 7b 7d 3b 22 63 6f 6e 66 69 67 22 Data Ascii: (var c=0,d=a.length;c<d;c++)if(c in a&&b.call(void 0,a[c],c,a))return!0;return!1}function K(a){return"[object Array]"==Object.prototype.toString.call(a)?a:[a]};function L(a,b){return M[a]=b}var M=window._spf_state\|\|{};window._spf_state=M;var N={};"config"
2024-05-25 23:00:30 UTC	1390	IN	Data Raw: 21 31 29 3a 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 6d 65 73 73 61 67 65 22 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 61 28 61 29 7b 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 61 2c 21 31 29 3a 77 69 6e 64 6f 77 2e 64 65 74 61 63 68 45 76 65 6e 74 26 26 77 69 6e 64 6f 77 2e 64 65 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 6d 65 73 73 61 67 65 22 2c 61 29 7d 0a 76 61 72 20 6e 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 62 3d 21 31 7d 69 66 28 21 77 69 6e 64 6f 77 2e 70 6f 73 74 4d 65 73 73 61 67 Data Ascii: !1):window.attachEvent&&window.attachEvent("onmessage",a)}function ma(a){window.removeEventListener?window.removeEventListener("message",a,!1):window.detachEvent&&window.detachEvent("onmessage",a)}var na=function(){function a(){b=!1}if(!window.postMessag
2024-05-25 23:00:30 UTC	1390	IN	Data Raw: 69 65 72 3a 20 4d 49 54 0a 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 76 61 28 61 2c 62 2c 63 29 7b 69 66 28 62 29 7b 62 3d 5b 5d 3b 76 61 72 20 64 3d 30 3b 63 26 26 28 61 2b 3d 22 5c 72 5c 6e 22 29 3b 76 61 72 20 65 3d 61 2e 69 6e 64 65 78 4f 66 28 22 5b 5c 72 5c 6e 22 2c 64 29 3b 66 6f 72 28 2d 31 3c 65 26 26 28 64 3d 65 2b 33 29 3b 2d 31 3c 28 65 3d 61 2e 69 6e 64 65 78 4f 66 28 22 2c 5c 72 5c 6e 22 2c 64 29 29 3b 29 7b 76 61 72 20 66 3d 52 28 61 2e 73 75 62 73 74 72 69 6e 67 28 64 2c 65 29 29 3b 64 3d 65 2b 33 3b 66 26 26 62 2e 70 75 73 68 28 4a 53 4f 4e 2e 70 61 72 73 65 28 66 29 29 7d 65 3d 61 2e 69 6e 64 65 78 4f 66 28 22 5d 5c 72 5c 6e 22 2c 64 29 3b 2d 31 3c 65 26 26 28 66 3d 52 28 61 2e 73 75 62 73 74 72 69 6e 67 28 64 2c 65 29 29 2c 64 3d 65 2b 33 2c Data Ascii: ier: MIT*/function va(a,b,c){if(b){b=[];var d=0;c&&(a+="\r\n");var e=a.indexOf("[\r\n",d);for(-1<e&&(d=e+3);-1<(e=a.indexOf(",\r\n",d));){var f=R(a.substring(d,e));d=e+3;f&&b.push(JSON.parse(f))}e=a.indexOf("]\r\n",d);-1<e&&(f=R(a.substring(d,e)),d=e+3,
2024-05-25 23:00:30 UTC	1390	IN	Data Raw: 61 2e 65 78 65 63 28 65 29 2c 65 3d 21 65 7c 7c 2d 31 21 3d 65 5b 31 5d 2e 69 6e 64 65 78 4f 66 28 22 74 65 78 74 2f 63 73 73 22 29 29 3f 28 62 2e 73 74 79 6c 65 73 2e 70 75 73 68 28 7b 75 72 6c 3a 22 22 2c 74 65 78 74 3a 66 2c 6e 61 6d 65 3a 64 7d 29 2c 22 22 29 3a 63 7d 29 3b 61 3d 61 2e 72 65 70 6c 61 63 65 28 42 61 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 3d 64 2e 6d 61 74 63 68 28 43 61 29 3b 65 3d 65 3f 65 5b 31 5d 3a 22 22 3b 72 65 74 75 72 6e 22 73 74 79 6c 65 73 68 65 65 74 22 3d 3d 65 3f 28 65 3d 28 65 3d 64 2e 6d 61 74 63 68 28 58 29 29 3f 65 5b 31 5d 3a 22 22 2c 64 3d 28 64 3d 64 2e 6d 61 74 63 68 28 44 61 29 29 3f 64 5b 31 5d 3a 0a 22 22 2c 62 2e 73 74 79 6c 65 73 2e 70 75 73 68 28 7b 75 72 6c 3a 64 2c 74 65 78 74 3a 22 22 Data Ascii: a.exec(e),e=!e\|\|-1!=e[1].indexOf("text/css"))?(b.styles.push({url:"",text:f,name:d}),""):c});a=a.replace(Ba,function(c,d){var e=d.match(Ca);e=e?e[1]:"";return"stylesheet"==e?(e=(e=d.match(X))?e[1]:"",d=(d=d.match(Da))?d[1]:"",b.styles.push({url:d,text:""
2024-05-25 23:00:30 UTC	1390	IN	Data Raw: 7b 71 3d 67 2e 67 65 74 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 28 22 58 2d 46 69 72 65 66 6f 78 2d 53 70 64 79 22 29 3b 76 61 72 20 42 3d 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 26 26 0a 63 68 72 6f 6d 65 2e 6c 6f 61 64 54 69 6d 65 73 26 26 63 68 72 6f 6d 65 2e 6c 6f 61 64 54 69 6d 65 73 28 29 3b 42 3d 42 26 26 42 2e 77 61 73 46 65 74 63 68 65 64 56 69 61 53 70 64 79 3b 66 3d 21 28 21 71 26 26 21 42 29 7d 65 2e 75 26 26 65 2e 75 28 67 29 7d 65 6c 73 65 20 33 3d 3d 67 2e 72 65 61 64 79 53 74 61 74 65 3f 66 26 26 65 2e 6c 26 26 28 71 3d 67 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 2e 73 75 62 73 74 72 69 6e 67 28 68 29 2c 68 3d 67 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 2e 6c 65 6e 67 74 68 2c 65 2e 6c 28 67 2c 71 29 29 3a 34 3d 3d 67 2e 72 65 61 64 79 53 74 Data Ascii: {q=g.getResponseHeader("X-Firefox-Spdy");var B=window.chrome&&chrome.loadTimes&&chrome.loadTimes();B=B&&B.wasFetchedViaSpdy;f=!(!q&&!B)}e.u&&e.u(g)}else 3==g.readyState?f&&e.l&&(q=g.responseText.substring(h),h=g.responseText.length,e.l(g,q)):4==g.readySt
2024-05-25 23:00:30 UTC	1390	IN	Data Raw: 65 74 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 28 22 58 2d 53 50 46 2d 52 65 73 70 6f 6e 73 65 2d 54 79 70 65 22 29 7c 7c 22 22 3b 62 2e 6f 3d 2d 31 21 3d 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 6d 75 6c 74 69 70 61 72 74 22 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 49 61 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 68 29 7b 69 66 28 64 2e 6f 29 7b 66 3d 64 2e 68 2b 66 3b 74 72 79 7b 76 61 72 20 6b 3d 76 61 28 66 2c 21 30 2c 68 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 61 62 6f 72 74 28 29 3b 62 2e 69 26 26 62 2e 69 28 61 2c 67 2c 65 29 3b 72 65 74 75 72 6e 7d 62 2e 6a 26 26 49 28 6b 2e 6d 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 67 2e 74 69 6d 69 6e 67 7c 7c 28 67 2e 74 69 6d 69 6e 67 3d 7b 7d 29 3b 67 2e 74 69 6d 69 6e 67 2e 73 70 66 Data Ascii: etResponseHeader("X-SPF-Response-Type")\|\|"";b.o=-1!=a.toLowerCase().indexOf("multipart")}function Ia(a,b,c,d,e,f,h){if(d.o){f=d.h+f;try{var k=va(f,!0,h)}catch(g){e.abort();b.i&&b.i(a,g,e);return}b.j&&I(k.m,function(g){g.timing\|\|(g.timing={});g.timing.spf
2024-05-25 23:00:30 UTC	1390	IN	Data Raw: 30 5d 3a 7b 7d 3b 47 61 28 61 2c 62 2c 63 2c 67 2c 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 47 61 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 69 66 28 65 26 26 22 50 4f 53 54 22 21 3d 62 2e 6d 65 74 68 6f 64 26 26 28 65 3d 4b 61 28 61 2c 62 2e 63 75 72 72 65 6e 74 2c 64 2e 63 61 63 68 65 54 79 70 65 2c 62 2e 74 79 70 65 2c 21 30 29 29 29 7b 64 2e 63 61 63 68 65 4b 65 79 3d 65 3b 76 61 72 20 66 3d 7b 72 65 73 70 6f 6e 73 65 3a 64 2c 74 79 70 65 3a 62 2e 74 79 70 65 7c 7c 22 22 7d 2c 68 3d 70 61 72 73 65 49 6e 74 28 4e 5b 22 63 61 63 68 65 2d 6c 69 66 65 74 69 6d 65 22 5d 2c 31 30 29 2c 6b 3d 70 61 72 73 65 49 6e 74 28 4e 5b 22 63 61 63 68 65 2d 6d 61 78 22 5d 2c 31 30 29 3b 30 3e 3d 68 7c 7c 30 3e 3d 6b 7c 7c 28 6b 3d 50 28 29 2c 66 3d 7b 64 61 74 61 3a 66 2c 6c 69 Data Ascii: 0]:{};Ga(a,b,c,g,!0)}function Ga(a,b,c,d,e){if(e&&"POST"!=b.method&&(e=Ka(a,b.current,d.cacheType,b.type,!0))){d.cacheKey=e;var f={response:d,type:b.type\|\|""},h=parseInt(N["cache-lifetime"],10),k=parseInt(N["cache-max"],10);0>=h\|\|0>=k\|\|(k=P(),f={data:f,li

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.6	59285	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:36 UTC	1142	OUT	GET /s/player/bc657243/www-player.css HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:37 UTC	679	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 376389 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sat, 25 May 2024 22:54:33 GMT Expires: Sun, 25 May 2025 22:54:33 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 22 May 2024 04:17:26 GMT Content-Type: text/css Vary: Accept-Encoding, Origin Age: 364 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:37 UTC	711	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 30 3b 6f 75 74 6c 69 6e 65 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 59 6f 75 54 75 62 65 20 4e 6f 74 6f 22 2c 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 65 65 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 2d 77 65 62 6b 69 74 2d Data Ascii: @charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 75 6e 73 74 61 72 74 65 64 2d 6d 6f 64 65 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 61 64 2d 73 68 6f 77 69 6e 67 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 65 6e 64 65 64 2d 6d 6f 64 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f Data Ascii: ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ended-mode{background-color:transparent}.ytp-big-mo
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 75 74 6c 69 6e 65 3a 30 7d 2e 79 74 70 2d 66 69 74 2d 63 6f 76 65 72 2d 76 69 64 65 6f 20 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 7b 2d 6f 2d 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 3b 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 7d 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 5b 64 61 74 61 2d 6e 6f 2d 66 75 6c 6c 73 63 72 65 65 6e 3d 74 72 75 65 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6d 65 64 69 61 2d 63 6f 6e 74 72 6f 6c 73 2d 66 75 6c 6c 73 63 72 65 65 6e 2d Data Ascii: ainer{display:none}.html5-main-video{position:absolute;top:0;left:0;width:100%;height:100%;outline:0}.ytp-fit-cover-video .html5-main-video{-o-object-fit:cover;object-fit:cover}.html5-main-video[data-no-fullscreen=true]::-webkit-media-controls-fullscreen-
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 78 74 29 7b 74 6f 70 3a 38 39 70 78 7d 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2e 79 74 70 2d 69 76 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 6c 65 66 74 3a 31 32 70 78 3b 72 69 67 68 74 3a 31 32 70 78 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2e 79 74 70 2d 69 76 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 6c 65 66 74 3a 32 34 70 78 3b 72 69 67 68 74 3a 32 34 70 78 7d 2e 79 74 70 2d 61 75 74 6f 68 69 64 65 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 68 74 6d 6c 35 2d 65 6e 64 73 63 72 65 65 6e 29 2c 2e 79 74 70 2d 61 75 74 6f 68 69 64 65 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 79 74 70 2d 75 70 6e Data Ascii: xt){top:89px}.ytp-player-content.ytp-iv-player-content{left:12px;right:12px}.ytp-big-mode .ytp-player-content.ytp-iv-player-content{left:24px;right:24px}.ytp-autohide .ytp-player-content:not(.html5-endscreen),.ytp-autohide .ytp-player-content:not(.ytp-upn
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 72 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 64 69 73 61 62 6c 65 64 5d 7b 6f 70 61 63 69 74 79 3a 2e 35 7d 2e 79 74 70 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 5b 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 74 72 75 65 5d 29 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 3a 6e 6f 74 28 5b 61 72 69 61 2d 68 69 64 64 65 6e 3d 74 72 75 65 5d 29 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 79 74 70 2d 70 72 6f 62 61 62 6c 79 2d 6b 65 79 62 6f 61 72 64 2d 66 6f 63 75 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 32 70 78 20 72 67 62 61 28 32 37 2c 31 32 37 2c 32 30 34 2c 2e 38 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 32 70 Data Ascii: r .ytp-button[disabled]{opacity:.5}.ytp-button:not([aria-disabled=true]):not([disabled]):not([aria-hidden=true]){cursor:pointer}.ytp-probably-keyboard-focus .ytp-button:focus{-webkit-box-shadow:inset 0 0 0 2px rgba(27,127,204,.8);box-shadow:inset 0 0 0 2p
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2c 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2c 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 72 65 70 6c 61 79 2d 62 75 74 74 6f 6e 7b 6f 70 61 63 69 74 79 3a 2e 39 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 33 36 70 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 34 2c 30 2c 31 2c 31 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 34 2c 30 2c 31 2c 31 29 Data Ascii: }.ytp-chrome-top .ytp-button,.ytp-small-mode .ytp-chrome-controls .ytp-button,.ytp-small-mode .ytp-replay-button{opacity:.9;display:inline-block;width:36px;-webkit-transition:opacity .1s cubic-bezier(.4,0,1,1);transition:opacity .1s cubic-bezier(.4,0,1,1)
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 75 74 74 6f 6e 3a 6e 6f 74 28 2e 79 74 70 2d 79 6f 75 74 75 62 65 2d 62 75 74 74 6f 6e 29 20 73 76 67 7b 77 69 64 74 68 3a 34 30 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 70 78 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 20 2e 79 74 70 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 36 70 78 3b 68 65 69 67 68 74 3a 34 32 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 20 2e 79 74 70 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 39 70 78 3b 68 65 69 67 68 74 3a 36 33 70 78 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 79 Data Ascii: utton:not(.ytp-youtube-button) svg{width:40px;padding-left:4px}.ytp-chrome-top .ytp-button{padding-top:6px;height:42px;vertical-align:top}.ytp-big-mode .ytp-chrome-top .ytp-button{padding-top:9px;height:63px}.ytp-chrome-controls .ytp-button{height:100%}.y
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 30 3b 68 65 69 67 68 74 3a 33 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 6c 65 66 74 3a 32 34 70 78 3b 62 6f 74 74 6f 6d 3a 39 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 30 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6c 65 66 74 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 34 2c 30 2c 31 2c 31 29 2c 77 69 64 74 68 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 34 2c 30 2c 31 2c 31 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a Data Ascii: rols .ytp-button[aria-pressed]:after{content:"";display:block;position:absolute;width:0;height:3px;border-radius:3px;left:24px;bottom:9px;background-color:#f00;-webkit-transition:left .1s cubic-bezier(.4,0,1,1),width .1s cubic-bezier(.4,0,1,1);transition:
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 3d 74 72 75 65 5d 3a 61 66 74 65 72 2c 2e 79 74 70 2d 65 6d 62 65 64 2d 6d 6f 62 69 6c 65 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 3d 74 72 75 65 5d 3a 61 66 74 65 72 7b 6c 65 66 74 3a 31 35 70 78 7d 2e 79 74 70 2d 63 6f 6c 6f 72 2d 77 68 69 74 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 64 64 7d 2e 79 74 70 Data Ascii: .ytp-chrome-controls .ytp-button[aria-pressed=true]:after,.ytp-embed-mobile.ytp-small-mode .ytp-chrome-controls .ytp-button[aria-pressed=true]:after{left:15px}.ytp-color-white .ytp-chrome-controls .ytp-button[aria-pressed]:after{background-color:#ddd}.ytp
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3a 31 3b 66 6c 65 78 3a 31 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 7d 3a 6e 6f 74 28 2e 79 74 70 2d 65 78 70 2d 62 6f 74 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 66 6c 65 78 62 6f 78 29 20 2e 79 74 70 2d 72 69 67 68 74 2d 63 6f 6e 74 72 6f 6c 73 7b 66 6c 6f 61 74 3a 72 69 67 68 74 7d 2e 79 74 70 2d 72 69 67 68 74 2d 63 6f 6e 74 72 6f 6c 73 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 79 74 70 2d 65 78 70 2d 62 6f 74 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 66 6c 65 78 62 6f 78 20 2e 79 74 70 2d 76 6f Data Ascii: x;display:flex;-webkit-box-flex:1;-webkit-flex:1;flex:1;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}:not(.ytp-exp-bottom-control-flexbox) .ytp-right-controls{float:right}.ytp-right-controls{height:100%}.ytp-exp-bottom-control-flexbox .ytp-vo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.6	59286	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:36 UTC	1401	OUT	POST /youtubei/v1/att/get?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 2759 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-wow64: ?0 sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-platform: "Windows" X-Youtube-Bootstrap-Logged-In: false sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json sec-ch-ua-full-version: "117.0.5938.134" X-Youtube-Client-Name: 1 X-Youtube-Client-Version: 2.20240524.00.00 X-Goog-Visitor-Id: CgsxclQyM0t0SEJEUSiK28myBjIKCgJVUxIEGgAgQQ%3D%3D Accept: / Origin: https://www.youtube.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:36 UTC	2759	OUT	Data Raw: 7b 22 65 6e 67 61 67 65 6d 65 6e 74 54 79 70 65 22 3a 22 45 4e 47 41 47 45 4d 45 4e 54 5f 54 59 50 45 5f 55 4e 42 4f 55 4e 44 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 72 65 6d 6f 74 65 48 6f 73 74 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 64 65 76 69 63 65 4d 61 6b 65 22 3a 22 22 2c 22 64 65 76 69 63 65 4d 6f 64 65 6c 22 3a 22 22 2c 22 76 69 73 69 74 6f 72 44 61 74 61 22 3a 22 43 67 73 78 63 6c 51 79 4d 30 74 30 53 45 4a 45 55 53 69 4b 32 38 6d 79 42 6a 49 4b 43 67 4a 56 55 78 49 45 47 67 41 67 51 51 25 33 44 25 33 44 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 Data Ascii: {"engagementType":"ENGAGEMENT_TYPE_UNBOUND","context":{"client":{"hl":"en","gl":"US","remoteHost":"8.46.123.175","deviceMake":"","deviceModel":"","visitorData":"CgsxclQyM0t0SEJEUSiK28myBjIKCgJVUxIEGgAgQQ%3D%3D","userAgent":"Mozilla/5.0 (Windows NT 10.0; W
2024-05-25 23:00:37 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Sat, 25 May 2024 23:00:36 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-25 23:00:37 UTC	958	IN	Data Raw: 35 30 33 31 0d 0a 7b 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 7b 22 73 65 72 76 69 63 65 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 5b 7b 22 73 65 72 76 69 63 65 22 3a 22 43 53 49 22 2c 22 70 61 72 61 6d 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 63 22 2c 22 76 61 6c 75 65 22 3a 22 57 45 42 22 7d 2c 7b 22 6b 65 79 22 3a 22 63 76 65 72 22 2c 22 76 61 6c 75 65 22 3a 22 32 2e 32 30 32 34 30 35 32 34 2e 30 30 2e 30 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 79 74 5f 6c 69 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 47 65 74 41 74 74 65 73 74 61 74 69 6f 6e 43 68 61 6c 6c 65 6e 67 65 5f 72 69 64 22 2c 22 76 61 6c 75 65 22 3a 22 30 78 35 65 63 32 31 65 64 63 33 66 38 36 35 64 31 39 22 7d 5d 7d 2c 7b 22 73 65 72 76 69 63 65 22 3a 22 Data Ascii: 5031{"responseContext":{"serviceTrackingParams":[{"service":"CSI","params":[{"key":"c","value":"WEB"},{"key":"cver","value":"2.20240524.00.00"},{"key":"yt_li","value":"0"},{"key":"GetAttestationChallenge_rid","value":"0x5ec21edc3f865d19"}]},{"service":"
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 35 31 30 38 39 34 34 31 2c 35 31 30 39 31 33 33 31 2c 35 31 30 39 32 36 36 31 2c 35 31 30 39 34 31 37 31 2c 35 31 30 39 34 31 39 35 2c 35 31 30 39 34 32 30 32 2c 35 31 30 39 34 32 30 37 2c 35 31 30 39 35 34 37 38 2c 35 31 30 39 38 32 39 37 2c 35 31 30 39 38 32 39 39 2c 35 31 31 30 32 34 30 39 2c 35 31 31 30 34 39 38 38 2c 35 31 31 30 36 39 39 35 2c 35 31 31 30 37 33 34 30 2c 35 31 31 31 31 37 33 38 2c 35 31 31 31 33 36 35 38 2c 35 31 31 31 33 36 36 33 2c 35 31 31 31 35 31 38 34 2c 35 31 31 31 36 30 36 37 2c 35 31 31 31 36 33 37 30 2c 35 31 31 31 38 39 33 32 2c 35 31 31 32 31 33 31 31 2c 35 31 31 32 34 31 30 34 2c 35 31 31 32 37 35 30 34 2c 35 31 31 32 39 32 31 30 2c 35 31 31 33 33 31 30 33 2c 35 31 31 33 39 33 37 39 2c 35 31 31 34 31 38 30 30 2c 35 31 31 Data Ascii: 51089441,51091331,51092661,51094171,51094195,51094202,51094207,51095478,51098297,51098299,51102409,51104988,51106995,51107340,51111738,51113658,51113663,51115184,51116067,51116370,51118932,51121311,51124104,51127504,51129210,51133103,51139379,51141800,511
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 7b 22 6c 6f 67 67 65 64 4f 75 74 22 3a 74 72 75 65 7d 2c 22 77 65 62 52 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 45 78 74 65 6e 73 69 6f 6e 44 61 74 61 22 3a 7b 22 68 61 73 44 65 63 6f 72 61 74 65 64 22 3a 74 72 75 65 7d 7d 2c 22 63 68 61 6c 6c 65 6e 67 65 22 3a 22 61 3d 36 26 61 32 3d 31 30 26 62 3d 6c 53 54 48 7a 54 37 49 37 77 63 77 49 46 45 48 46 67 65 63 61 71 73 4f 55 52 4d 26 63 3d 31 37 31 36 36 37 38 30 33 36 26 64 3d 31 26 74 3d 37 32 30 30 26 63 31 61 3d 31 26 63 36 61 3d 31 26 63 36 62 3d 31 26 68 68 3d 76 69 4e 5a 6b 31 67 53 66 48 6c 47 6e 70 75 65 53 65 76 69 31 56 30 65 71 46 55 68 74 6a 69 31 72 72 62 41 4b 5a 74 6e 49 4d 45 22 2c 22 62 67 43 68 61 6c 6c 65 6e 67 65 22 3a 7b 22 69 6e 74 65 Data Ascii: esponseContext":{"loggedOut":true},"webResponseContextExtensionData":{"hasDecorated":true}},"challenge":"a=6&a2=10&b=lSTHzT7I7wcwIFEHFgecaqsOURM&c=1716678036&d=1&t=7200&c1a=1&c6a=1&c6b=1&hh=viNZk1gSfHlGnpueSevi1V0eqFUhtji1rrbAKZtnIME","bgChallenge":{"inte
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 6a 54 4b 78 71 4e 42 75 2f 52 7a 72 6d 79 68 69 57 77 79 76 5a 6c 6b 62 5a 4d 45 42 52 39 71 58 50 51 4e 4f 75 38 73 74 6d 77 77 36 57 44 4f 46 4e 7a 74 5a 61 2b 7a 49 72 52 77 72 36 35 6c 31 66 7a 35 73 66 51 30 63 32 4f 76 64 67 36 51 7a 6f 73 47 44 76 51 76 6a 67 55 53 73 52 61 4a 70 41 79 4d 38 48 78 63 53 6e 6c 6c 78 38 4f 4b 41 54 53 6b 52 52 4f 77 37 66 56 6e 72 5a 4c 67 73 39 66 37 50 33 66 4f 68 63 57 42 35 69 71 65 4d 5a 5a 6c 32 66 49 6c 72 30 4a 34 65 57 65 35 75 31 61 70 59 34 4d 38 46 75 63 73 59 33 4e 79 75 61 47 30 61 63 45 54 38 4a 57 6c 41 73 65 56 2b 2f 66 53 61 77 78 34 59 73 75 45 52 4b 58 32 43 70 54 42 76 4f 37 70 56 64 33 35 6b 72 59 2f 6a 76 79 4a 62 57 79 6e 75 59 45 56 41 72 71 58 36 37 4c 52 2b 74 4e 72 46 74 61 47 63 46 55 64 Data Ascii: jTKxqNBu/RzrmyhiWwyvZlkbZMEBR9qXPQNOu8stmww6WDOFNztZa+zIrRwr65l1fz5sfQ0c2Ovdg6QzosGDvQvjgUSsRaJpAyM8HxcSnllx8OKATSkRROw7fVnrZLgs9f7P3fOhcWB5iqeMZZl2fIlr0J4eWe5u1apY4M8FucsY3NyuaG0acET8JWlAseV+/fSawx4YsuERKX2CpTBvO7pVd35krY/jvyJbWynuYEVArqX67LR+tNrFtaGcFUd
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 61 44 52 5a 6b 48 49 47 33 54 48 57 56 79 33 47 30 75 31 75 42 4b 46 6f 72 71 6b 6c 34 54 43 4c 4b 6b 62 31 77 41 35 4d 49 4d 64 61 65 66 66 6e 6a 39 35 4e 66 49 31 58 42 49 6c 56 74 4a 52 32 38 32 47 71 66 4d 42 6a 6b 48 57 53 72 4c 55 2b 33 31 59 36 32 59 43 4e 52 55 56 41 34 52 69 6e 41 2b 7a 71 4e 76 71 6d 37 4f 42 57 6e 35 6f 31 76 77 46 57 5a 32 41 2b 39 74 64 62 71 65 49 42 34 64 58 67 77 46 67 66 50 70 53 4e 43 38 56 58 31 49 56 62 48 71 35 51 52 6f 69 43 6d 62 6e 48 6d 4f 57 6b 67 54 53 65 2b 6e 4d 62 36 7a 75 4e 61 58 37 4c 4e 51 4d 54 58 66 30 62 36 31 30 43 54 71 51 62 4b 31 4d 31 6e 39 34 59 72 6a 47 52 51 63 42 32 76 64 78 31 39 65 30 77 4c 6d 42 6c 64 4c 34 78 32 6a 49 79 37 58 53 47 71 35 6d 41 45 69 41 4c 47 47 52 71 4a 37 4b 48 66 71 46 Data Ascii: aDRZkHIG3THWVy3G0u1uBKForqkl4TCLKkb1wA5MIMdaeffnj95NfI1XBIlVtJR282GqfMBjkHWSrLU+31Y62YCNRUVA4RinA+zqNvqm7OBWn5o1vwFWZ2A+9tdbqeIB4dXgwFgfPpSNC8VX1IVbHq5QRoiCmbnHmOWkgTSe+nMb6zuNaX7LNQMTXf0b610CTqQbK1M1n94YrjGRQcB2vdx19e0wLmBldL4x2jIy7XSGq5mAEiALGGRqJ7KHfqF
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 4c 51 53 35 44 65 61 61 43 37 33 6f 7a 2b 38 32 39 44 34 53 59 53 53 69 4c 35 74 6a 50 45 52 50 61 53 6d 6c 49 33 57 6c 4a 56 36 70 6a 39 4b 7a 7a 63 45 73 41 70 47 41 4b 6b 56 30 73 38 46 6e 49 4d 48 59 37 7a 31 6b 42 2f 48 43 6c 50 77 4a 64 4d 66 62 33 67 36 6d 58 50 72 42 52 6e 49 61 7a 4e 70 53 77 43 66 55 4f 50 4c 2b 6d 4d 6a 74 4c 5a 47 68 67 52 4a 71 43 53 64 44 58 32 67 44 34 36 4f 42 76 4f 64 66 6e 56 51 4c 6a 31 53 6b 75 33 65 36 6e 47 68 61 41 6b 47 56 4a 74 5a 79 52 51 50 32 77 70 51 64 31 45 68 4d 35 59 75 35 4a 33 66 56 33 30 59 33 30 41 47 37 31 79 50 4d 72 63 31 50 45 4a 4a 31 52 38 71 69 64 45 67 48 5a 71 2f 37 6b 65 35 69 63 75 2f 61 6a 78 4b 7a 32 6b 6c 68 55 62 41 59 2f 6f 41 72 6b 2f 70 4f 65 2f 30 66 6f 76 53 4d 47 38 71 56 31 78 4a Data Ascii: LQS5DeaaC73oz+829D4SYSSiL5tjPERPaSmlI3WlJV6pj9KzzcEsApGAKkV0s8FnIMHY7z1kB/HClPwJdMfb3g6mXPrBRnIazNpSwCfUOPL+mMjtLZGhgRJqCSdDX2gD46OBvOdfnVQLj1Sku3e6nGhaAkGVJtZyRQP2wpQd1EhM5Yu5J3fV30Y30AG71yPMrc1PEJJ1R8qidEgHZq/7ke5icu/ajxKz2klhUbAY/oArk/pOe/0fovSMG8qV1xJ
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 42 36 43 4c 44 6b 36 68 39 33 32 2f 51 31 71 6b 42 6b 6e 56 35 68 34 30 58 77 7a 70 6b 37 4c 6d 44 35 52 59 70 66 30 6b 59 6e 54 7a 49 56 45 64 43 35 41 71 56 72 46 77 64 4f 6b 63 56 67 52 64 6c 49 47 38 37 7a 56 4e 37 64 39 57 34 4e 41 57 42 70 41 2b 43 65 36 76 32 33 4e 51 30 61 76 71 33 63 43 6b 51 4f 48 74 2f 65 4a 5a 59 75 4d 6a 62 59 64 44 78 55 6d 6b 43 30 4c 6b 6f 55 70 2b 4a 64 4b 72 4a 75 33 53 4f 6b 5a 4d 42 37 56 30 46 59 50 55 76 53 4d 69 39 44 55 45 39 4d 30 43 48 34 6e 33 6d 75 77 67 48 79 65 58 67 6e 33 78 45 51 65 71 48 4e 64 42 42 46 32 79 69 70 43 67 31 6f 4d 38 4d 4c 6a 5a 70 4f 34 43 52 31 6d 68 6d 49 77 5a 6e 53 79 5a 54 35 62 63 53 7a 58 6a 62 58 70 77 6a 2f 31 38 37 74 6c 54 54 6c 33 31 76 73 33 6a 71 34 58 39 30 74 6c 32 66 48 50 Data Ascii: B6CLDk6h932/Q1qkBknV5h40Xwzpk7LmD5RYpf0kYnTzIVEdC5AqVrFwdOkcVgRdlIG87zVN7d9W4NAWBpA+Ce6v23NQ0avq3cCkQOHt/eJZYuMjbYdDxUmkC0LkoUp+JdKrJu3SOkZMB7V0FYPUvSMi9DUE9M0CH4n3muwgHyeXgn3xEQeqHNdBBF2yipCg1oM8MLjZpO4CR1mhmIwZnSyZT5bcSzXjbXpwj/187tlTTl31vs3jq4X90tl2fHP
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 45 44 6b 56 36 33 76 49 34 56 34 62 74 46 71 62 34 4d 42 51 47 4a 33 78 36 35 7a 39 6b 30 70 2f 32 6c 70 51 68 66 39 46 65 73 4c 6e 6f 39 62 66 63 34 32 37 2f 47 70 63 48 35 38 64 69 6a 66 4d 6e 6b 63 44 56 48 69 4d 42 47 42 4c 65 4d 51 6c 57 56 39 4a 45 51 4d 76 77 31 79 69 47 46 45 72 57 4f 78 49 50 34 72 51 33 6b 6d 6c 49 61 45 55 74 54 62 68 76 64 73 71 31 6b 52 69 43 74 75 61 68 39 4f 56 2f 42 4c 56 37 35 65 41 61 76 38 7a 75 34 52 68 75 61 45 71 64 74 7a 4a 52 51 42 64 63 50 75 50 5a 48 4a 5a 61 43 68 69 2f 6f 71 63 2f 59 37 69 76 77 77 49 67 70 71 43 78 59 6d 53 65 71 4c 67 77 42 52 38 51 45 58 73 52 38 66 31 6b 63 59 39 70 43 47 79 6c 55 38 64 36 6e 72 67 39 59 63 39 6f 43 38 6b 63 36 79 43 77 62 48 74 67 41 45 72 35 2b 32 37 2b 66 4b 73 2b 74 53 Data Ascii: EDkV63vI4V4btFqb4MBQGJ3x65z9k0p/2lpQhf9FesLno9bfc427/GpcH58dijfMnkcDVHiMBGBLeMQlWV9JEQMvw1yiGFErWOxIP4rQ3kmlIaEUtTbhvdsq1kRiCtuah9OV/BLV75eAav8zu4RhuaEqdtzJRQBdcPuPZHJZaChi/oqc/Y7ivwwIgpqCxYmSeqLgwBR8QEXsR8f1kcY9pCGylU8d6nrg9Yc9oC8kc6yCwbHtgAEr5+27+fKs+tS
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 50 4e 36 47 41 31 69 73 38 49 31 39 6e 58 64 44 4a 44 46 59 37 6c 6d 76 74 6a 53 75 38 36 33 6e 47 36 66 47 4a 35 7a 2b 67 50 63 54 53 35 70 4f 61 70 75 2b 2f 74 5a 44 66 45 58 6f 36 44 50 73 52 59 39 4a 55 73 79 79 38 52 6e 75 53 52 64 44 6f 44 56 64 6d 30 58 4d 70 51 78 74 6c 38 2f 77 6d 2f 34 6d 44 61 65 4a 30 44 6e 6f 64 78 75 73 6b 36 6a 32 32 79 38 4e 46 70 62 44 35 45 64 6c 64 6d 75 56 57 6a 6f 39 59 56 41 6c 33 30 64 37 79 45 38 62 38 4a 6f 4a 6a 6f 45 70 4c 61 75 6d 6e 74 64 6a 4a 44 69 66 6f 7a 77 61 56 65 49 55 50 64 71 68 32 2f 37 64 74 4b 77 30 2b 68 4d 35 6a 6a 37 33 32 79 69 50 50 58 30 2f 4d 32 4c 77 4c 4d 67 38 44 5a 6d 37 50 43 4d 61 35 45 34 72 5a 4c 71 76 4b 6b 57 68 4d 34 7a 77 63 71 37 33 41 50 7a 4d 78 67 66 78 33 77 6c 74 43 56 4a Data Ascii: PN6GA1is8I19nXdDJDFY7lmvtjSu863nG6fGJ5z+gPcTS5pOapu+/tZDfEXo6DPsRY9JUsyy8RnuSRdDoDVdm0XMpQxtl8/wm/4mDaeJ0Dnodxusk6j22y8NFpbD5EdldmuVWjo9YVAl30d7yE8b8JoJjoEpLaumntdjJDifozwaVeIUPdqh2/7dtKw0+hM5jj732yiPPX0/M2LwLMg8DZm7PCMa5E4rZLqvKkWhM4zwcq73APzMxgfx3wltCVJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.6	59287	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:36 UTC	1399	OUT	POST /youtubei/v1/guide?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 2738 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-wow64: ?0 sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-platform: "Windows" X-Youtube-Bootstrap-Logged-In: false sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json sec-ch-ua-full-version: "117.0.5938.134" X-Youtube-Client-Name: 1 X-Youtube-Client-Version: 2.20240524.00.00 X-Goog-Visitor-Id: CgsxclQyM0t0SEJEUSiK28myBjIKCgJVUxIEGgAgQQ%3D%3D Accept: / Origin: https://www.youtube.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:36 UTC	2738	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 72 65 6d 6f 74 65 48 6f 73 74 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 64 65 76 69 63 65 4d 61 6b 65 22 3a 22 22 2c 22 64 65 76 69 63 65 4d 6f 64 65 6c 22 3a 22 22 2c 22 76 69 73 69 74 6f 72 44 61 74 61 22 3a 22 43 67 73 78 63 6c 51 79 4d 30 74 30 53 45 4a 45 55 53 69 4b 32 38 6d 79 42 6a 49 4b 43 67 4a 56 55 78 49 45 47 67 41 67 51 51 25 33 44 25 33 44 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 Data Ascii: {"context":{"client":{"hl":"en","gl":"US","remoteHost":"8.46.123.175","deviceMake":"","deviceModel":"","visitorData":"CgsxclQyM0t0SEJEUSiK28myBjIKCgJVUxIEGgAgQQ%3D%3D","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like
2024-05-25 23:00:37 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Sat, 25 May 2024 23:00:37 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-25 23:00:37 UTC	958	IN	Data Raw: 34 35 37 33 0d 0a 7b 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 7b 22 73 65 72 76 69 63 65 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 5b 7b 22 73 65 72 76 69 63 65 22 3a 22 43 53 49 22 2c 22 70 61 72 61 6d 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 63 22 2c 22 76 61 6c 75 65 22 3a 22 57 45 42 22 7d 2c 7b 22 6b 65 79 22 3a 22 63 76 65 72 22 2c 22 76 61 6c 75 65 22 3a 22 32 2e 32 30 32 34 30 35 32 34 2e 30 30 2e 30 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 79 74 5f 6c 69 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 47 65 74 57 65 62 4d 61 69 6e 41 70 70 47 75 69 64 65 5f 72 69 64 22 2c 22 76 61 6c 75 65 22 3a 22 30 78 33 61 66 65 65 36 38 33 36 66 62 62 63 64 35 61 22 7d 5d 7d 2c 7b 22 73 65 72 76 69 63 65 22 3a 22 47 46 45 45 44 Data Ascii: 4573{"responseContext":{"serviceTrackingParams":[{"service":"CSI","params":[{"key":"c","value":"WEB"},{"key":"cver","value":"2.20240524.00.00"},{"key":"yt_li","value":"0"},{"key":"GetWebMainAppGuide_rid","value":"0x3afee6836fbbcd5a"}]},{"service":"GFEED
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 34 34 31 2c 35 31 30 39 31 33 33 31 2c 35 31 30 39 32 36 36 31 2c 35 31 30 39 34 31 37 31 2c 35 31 30 39 34 31 39 35 2c 35 31 30 39 34 32 30 32 2c 35 31 30 39 34 32 30 37 2c 35 31 30 39 35 34 37 38 2c 35 31 30 39 38 32 39 37 2c 35 31 30 39 38 32 39 39 2c 35 31 31 30 32 34 30 39 2c 35 31 31 30 34 39 38 38 2c 35 31 31 30 36 39 39 35 2c 35 31 31 30 37 33 34 30 2c 35 31 31 31 31 37 33 38 2c 35 31 31 31 33 36 35 38 2c 35 31 31 31 33 36 36 33 2c 35 31 31 31 35 31 38 34 2c 35 31 31 31 36 30 36 37 2c 35 31 31 31 36 33 37 30 2c 35 31 31 31 38 39 33 32 2c 35 31 31 32 31 33 31 31 2c 35 31 31 32 34 31 30 34 2c 35 31 31 32 37 35 30 34 2c 35 31 31 32 39 32 31 30 2c 35 31 31 33 33 31 30 33 2c 35 31 31 33 39 33 37 39 2c 35 31 31 34 31 38 30 30 2c 35 31 31 34 32 38 38 36 Data Ascii: 441,51091331,51092661,51094171,51094195,51094202,51094207,51095478,51098297,51098299,51102409,51104988,51106995,51107340,51111738,51113658,51113663,51115184,51116067,51116370,51118932,51121311,51124104,51127504,51129210,51133103,51139379,51141800,51142886
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 36 30 30 2c 22 6d 61 69 6e 41 70 70 57 65 62 52 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 7b 22 6c 6f 67 67 65 64 4f 75 74 22 3a 74 72 75 65 2c 22 74 72 61 63 6b 69 6e 67 50 61 72 61 6d 22 3a 22 6b 78 5f 66 6d 50 78 68 6f 50 5a 52 66 32 57 71 34 6c 45 63 73 33 50 64 30 6a 6a 79 6b 2d 67 61 38 79 71 6e 59 70 57 2d 55 6e 70 35 63 74 7a 52 67 6b 75 4d 4d 73 4c 42 77 4f 63 43 45 35 39 54 44 74 73 6c 4c 4b 50 51 2d 53 53 22 7d 2c 22 77 65 62 52 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 45 78 74 65 6e 73 69 6f 6e 44 61 74 61 22 3a 7b 22 68 61 73 44 65 63 6f 72 61 74 65 64 22 3a 74 72 75 65 7d 7d 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 67 75 69 64 65 53 65 63 74 69 6f 6e 52 65 6e 64 65 72 65 72 22 3a 7b 22 69 74 65 6d 73 22 3a 5b 7b 22 67 75 69 64 65 45 6e 74 Data Ascii: 600,"mainAppWebResponseContext":{"loggedOut":true,"trackingParam":"kx_fmPxhoPZRf2Wq4lEcs3Pd0jjyk-ga8yqnYpW-Unp5ctzRgkuMMsLBwOcCE59TDtslLKPQ-SS"},"webResponseContextExtensionData":{"hasDecorated":true}},"items":[{"guideSectionRenderer":{"items":[{"guideEnt
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 45 52 5f 4e 41 56 49 47 41 54 49 4f 4e 5f 4d 4f 44 45 4c 5f 55 4e 53 50 45 43 49 46 49 45 44 22 7d 7d 2c 22 70 61 72 61 6d 73 22 3a 22 43 41 38 25 33 44 22 2c 22 73 65 71 75 65 6e 63 65 50 72 6f 76 69 64 65 72 22 3a 22 52 45 45 4c 5f 57 41 54 43 48 5f 53 45 51 55 45 4e 43 45 5f 50 52 4f 56 49 44 45 52 5f 52 50 43 22 2c 22 69 6e 70 75 74 54 79 70 65 22 3a 22 52 45 45 4c 5f 57 41 54 43 48 5f 49 4e 50 55 54 5f 54 59 50 45 5f 53 45 45 44 4c 45 53 53 22 2c 22 6c 6f 67 67 69 6e 67 43 6f 6e 74 65 78 74 22 3a 7b 22 76 73 73 4c 6f 67 67 69 6e 67 43 6f 6e 74 65 78 74 22 3a 7b 22 73 65 72 69 61 6c 69 7a 65 64 43 6f 6e 74 65 78 74 44 61 74 61 22 3a 22 43 67 49 49 44 41 25 33 44 25 33 44 22 7d 2c 22 71 6f 65 4c 6f 67 67 69 6e 67 43 6f 6e 74 65 78 74 22 3a 7b 22 73 65 Data Ascii: ER_NAVIGATION_MODEL_UNSPECIFIED"}},"params":"CA8%3D","sequenceProvider":"REEL_WATCH_SEQUENCE_PROVIDER_RPC","inputType":"REEL_WATCH_INPUT_TYPE_SEEDLESS","loggingContext":{"vssLoggingContext":{"serializedContextData":"CgIIDA%3D%3D"},"qoeLoggingContext":{"se
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 43 56 55 3d 22 2c 22 66 6f 72 6d 61 74 74 65 64 54 69 74 6c 65 22 3a 7b 22 73 69 6d 70 6c 65 54 65 78 74 22 3a 22 59 6f 75 22 7d 2c 22 61 63 63 65 73 73 69 62 69 6c 69 74 79 22 3a 7b 22 61 63 63 65 73 73 69 62 69 6c 69 74 79 44 61 74 61 22 3a 7b 22 6c 61 62 65 6c 22 3a 22 59 6f 75 22 7d 7d 2c 22 74 61 72 67 65 74 49 64 22 3a 22 6c 69 62 72 61 72 79 2d 67 75 69 64 65 2d 69 74 65 6d 22 2c 22 69 73 50 72 69 6d 61 72 79 22 3a 74 72 75 65 7d 7d 2c 7b 22 67 75 69 64 65 45 6e 74 72 79 52 65 6e 64 65 72 65 72 22 3a 7b 22 6e 61 76 69 67 61 74 69 6f 6e 45 6e 64 70 6f 69 6e 74 22 3a 7b 22 63 6c 69 63 6b 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 22 43 42 6f 51 35 4b 67 48 47 41 45 69 45 77 6a 55 6a 39 32 45 39 4b 6d 47 41 78 58 74 59 58 6f 46 48 54 56 79 43 56 Data Ascii: CVU=","formattedTitle":{"simpleText":"You"},"accessibility":{"accessibilityData":{"label":"You"}},"targetId":"library-guide-item","isPrimary":true}},{"guideEntryRenderer":{"navigationEndpoint":{"clickTrackingParams":"CBoQ5KgHGAEiEwjUj92E9KmGAxXtYXoFHTVyCV
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 35 32 46 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 25 32 35 32 46 63 25 32 35 32 46 43 6f 64 61 73 68 6f 70 4f 66 66 69 63 69 61 6c 26 68 6c 3d 65 6e 22 2c 22 77 65 62 50 61 67 65 54 79 70 65 22 3a 22 57 45 42 5f 50 41 47 45 5f 54 59 50 45 5f 55 4e 4b 4e 4f 57 4e 22 2c 22 72 6f 6f 74 56 65 22 3a 38 33 37 36 39 7d 7d 2c 22 73 69 67 6e 49 6e 45 6e 64 70 6f 69 6e 74 22 3a 7b 22 68 61 63 6b 22 3a 74 72 75 65 7d 7d 2c 22 74 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 22 43 42 67 51 30 34 41 45 49 68 4d 49 31 49 5f 64 68 50 53 70 68 67 4d 56 37 57 46 36 42 52 30 31 63 67 6c 56 22 7d 7d 7d 7d 2c 7b 22 67 75 69 64 65 53 65 63 74 69 6f 6e 52 65 6e 64 65 72 65 72 22 3a 7b 22 69 74 65 6d 73 22 3a 5b 7b 22 67 75 69 64 65 45 6e 74 72 79 52 65 6e 64 65 72 65 72 22 Data Ascii: 52Fwww.youtube.com%252Fc%252FCodashopOfficial&hl=en","webPageType":"WEB_PAGE_TYPE_UNKNOWN","rootVe":83769}},"signInEndpoint":{"hack":true}},"trackingParams":"CBgQ04AEIhMI1I_dhPSphgMV7WF6BR01cglV"}}}},{"guideSectionRenderer":{"items":[{"guideEntryRenderer"
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 47 41 49 69 45 77 6a 55 6a 39 32 45 39 4b 6d 47 41 78 58 74 59 58 6f 46 48 54 56 79 43 56 55 3d 22 2c 22 63 6f 6d 6d 61 6e 64 4d 65 74 61 64 61 74 61 22 3a 7b 22 77 65 62 43 6f 6d 6d 61 6e 64 4d 65 74 61 64 61 74 61 22 3a 7b 22 75 72 6c 22 3a 22 2f 63 68 61 6e 6e 65 6c 2f 55 43 2d 39 2d 6b 79 54 57 38 5a 6b 5a 4e 44 48 51 4a 36 46 67 70 77 51 22 2c 22 77 65 62 50 61 67 65 54 79 70 65 22 3a 22 57 45 42 5f 50 41 47 45 5f 54 59 50 45 5f 43 48 41 4e 4e 45 4c 22 2c 22 72 6f 6f 74 56 65 22 3a 33 36 31 31 2c 22 61 70 69 55 72 6c 22 3a 22 2f 79 6f 75 74 75 62 65 69 2f 76 31 2f 62 72 6f 77 73 65 22 7d 7d 2c 22 62 72 6f 77 73 65 45 6e 64 70 6f 69 6e 74 22 3a 7b 22 62 72 6f 77 73 65 49 64 22 3a 22 55 43 2d 39 2d 6b 79 54 57 38 5a 6b 5a 4e 44 48 51 4a 36 46 67 70 77 Data Ascii: GAIiEwjUj92E9KmGAxXtYXoFHTVyCVU=","commandMetadata":{"webCommandMetadata":{"url":"/channel/UC-9-kyTW8ZkZNDHQJ6FgpwQ","webPageType":"WEB_PAGE_TYPE_CHANNEL","rootVe":3611,"apiUrl":"/youtubei/v1/browse"}},"browseEndpoint":{"browseId":"UC-9-kyTW8ZkZNDHQJ6Fgpw
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 54 69 74 6c 65 22 3a 7b 22 73 69 6d 70 6c 65 54 65 78 74 22 3a 22 4c 69 76 65 22 7d 2c 22 61 63 63 65 73 73 69 62 69 6c 69 74 79 22 3a 7b 22 61 63 63 65 73 73 69 62 69 6c 69 74 79 44 61 74 61 22 3a 7b 22 6c 61 62 65 6c 22 3a 22 4c 69 76 65 22 7d 7d 7d 7d 2c 7b 22 67 75 69 64 65 45 6e 74 72 79 52 65 6e 64 65 72 65 72 22 3a 7b 22 6e 61 76 69 67 61 74 69 6f 6e 45 6e 64 70 6f 69 6e 74 22 3a 7b 22 63 6c 69 63 6b 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 22 43 42 49 51 70 49 45 4a 47 41 55 69 45 77 6a 55 6a 39 32 45 39 4b 6d 47 41 78 58 74 59 58 6f 46 48 54 56 79 43 56 55 3d 22 2c 22 63 6f 6d 6d 61 6e 64 4d 65 74 61 64 61 74 61 22 3a 7b 22 77 65 62 43 6f 6d 6d 61 6e 64 4d 65 74 61 64 61 74 61 22 3a 7b 22 75 72 6c 22 3a 22 2f 67 61 6d 69 6e 67 22 2c 22 77 Data Ascii: Title":{"simpleText":"Live"},"accessibility":{"accessibilityData":{"label":"Live"}}}},{"guideEntryRenderer":{"navigationEndpoint":{"clickTrackingParams":"CBIQpIEJGAUiEwjUj92E9KmGAxXtYXoFHTVyCVU=","commandMetadata":{"webCommandMetadata":{"url":"/gaming","w
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 6f 77 73 65 45 6e 64 70 6f 69 6e 74 22 3a 7b 22 62 72 6f 77 73 65 49 64 22 3a 22 55 43 45 67 64 69 30 58 49 58 58 5a 2d 71 4a 4f 46 50 66 34 4a 53 4b 77 22 7d 7d 2c 22 69 63 6f 6e 22 3a 7b 22 69 63 6f 6e 54 79 70 65 22 3a 22 54 52 4f 50 48 59 22 7d 2c 22 74 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 22 43 42 41 51 71 6f 45 4a 47 41 63 69 45 77 6a 55 6a 39 32 45 39 4b 6d 47 41 78 58 74 59 58 6f 46 48 54 56 79 43 56 55 3d 22 2c 22 66 6f 72 6d 61 74 74 65 64 54 69 74 6c 65 22 3a 7b 22 73 69 6d 70 6c 65 54 65 78 74 22 3a 22 53 70 6f 72 74 73 22 7d 2c 22 61 63 63 65 73 73 69 62 69 6c 69 74 79 22 3a 7b 22 61 63 63 65 73 73 69 62 69 6c 69 74 79 44 61 74 61 22 3a 7b 22 6c 61 62 65 6c 22 3a 22 53 70 6f 72 74 73 22 7d 7d 7d 7d 2c 7b 22 67 75 69 64 65 45 6e 74 72 Data Ascii: owseEndpoint":{"browseId":"UCEgdi0XIXXZ-qJOFPf4JSKw"}},"icon":{"iconType":"TROPHY"},"trackingParams":"CBAQqoEJGAciEwjUj92E9KmGAxXtYXoFHTVyCVU=","formattedTitle":{"simpleText":"Sports"},"accessibility":{"accessibilityData":{"label":"Sports"}}}},{"guideEntr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.6	59288	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:36 UTC	1140	OUT	GET /s/search/audio/failure.mp3 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: /* X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://www.youtube.com/c/CodashopOfficial Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York Range: bytes=0-
2024-05-25 23:00:37 UTC	708	IN	HTTP/1.1 206 Partial Content Accept-Ranges: bytes Content-Range: bytes 0-6528/6529 Content-Type: audio/mpeg Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube-marketing" Report-To: {"group":"youtube-marketing","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube-marketing"}]} Content-Length: 6529 Date: Sat, 25 May 2024 23:00:37 GMT Expires: Sat, 25 May 2024 23:00:37 GMT Cache-Control: public, max-age=0 Last-Modified: Wed, 12 Jan 2022 21:08:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:37 UTC	682	IN	Data Raw: 00 00 00 20 66 74 79 70 4d 34 41 20 00 00 00 00 4d 34 41 20 6d 70 34 32 69 73 6f 6d 00 00 00 00 00 00 0c 7f 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 d2 90 a0 90 d2 90 a0 90 00 00 ac 44 00 00 54 00 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 02 09 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 07 d2 90 a0 90 d2 90 a0 90 00 00 00 01 00 00 00 00 00 00 54 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 a5 6d 64 69 Data Ascii: ftypM4A M4A mp42isommoovlmvhdDT@trak\tkhdT@mdi
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 65 74 61 00 00 00 00 00 00 00 22 68 64 6c 72 00 00 00 00 00 00 00 00 6d 64 69 72 61 70 70 6c 00 00 00 00 00 00 00 00 00 00 00 00 02 6e 69 6c 73 74 00 00 00 1d a9 6e 61 6d 00 00 00 15 64 61 74 61 00 00 00 01 00 00 00 00 65 72 72 6f 72 00 00 00 19 63 70 69 6c 00 00 00 11 64 61 74 61 00 00 00 15 00 00 00 00 00 00 00 00 19 70 67 61 70 00 00 00 11 64 61 74 61 00 00 00 15 00 00 00 00 00 00 00 00 1a 74 6d 70 6f 00 00 00 12 64 61 74 61 00 00 00 15 00 00 00 00 00 00 00 00 00 28 a9 74 6f 6f 00 00 00 20 64 61 74 61 00 00 00 01 00 00 00 00 69 54 75 6e 65 73 20 31 32 2e 33 2e 31 2e 32 33 00 00 00 bc 2d 2d 2d 2d 00 00 00 1c 6d 65 61 6e 00 00 00 00 63 6f 6d 2e 61 70 70 6c 65 2e 69 54 75 6e 65 73 00 00 00 14 6e 61 6d 65 00 00 00 00 69 54 75 6e 53 4d 50 42 00 00 00 84 64 Data Ascii: eta"hdlrmdirapplnilstnamdataerrorcpildatapgapdatatmpodata(too dataiTunes 12.3.1.23----meancom.apple.iTunesnameiTunSMPBd
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 24 43 3f fe b7 f9 eb 8f ac e7 f6 fa bf 6f ff bb ab 7f 85 ff 3f ff 77 fd f4 fb 7f b6 3d 58 18 48 40 09 75 2e 1e 43 f0 71 ec 52 7f c5 73 e1 69 0f db 17 f8 4b 36 d2 9c 38 bb 68 ee 42 51 05 89 58 ed 60 62 61 50 15 53 c1 af c6 66 7c 72 01 c3 10 cb 5e ba 69 13 c4 e0 46 10 c1 09 10 e4 1c 92 07 27 1d 20 00 07 5d d3 ee e6 90 07 f2 fe 5f c8 7f 2f e5 fc 88 fd 7e fc 13 13 ff 23 6f f3 14 a2 4b 94 b5 52 9d 32 a8 98 f5 1a 4e 64 9a c4 9c cd cd 51 f5 cb 0d 41 06 5e 31 3e 2b 0c 87 fa 0a be a8 90 db e2 49 ff 9d f3 ee 31 3d f7 2f 23 fe 6c 5f c9 a9 04 78 14 97 f9 38 3f 8b c9 38 9c cc 8f f8 d1 3f 83 1c d5 12 7f 3c c9 2d e7 58 ca b5 8d e9 d6 5c 4b 18 24 a5 14 aa fb d8 21 1a a1 41 e7 cb 22 08 56 a1 e5 41 9f 01 25 e0 9c 01 fe 34 70 33 d7 8c 03 7b 74 d0 ef b2 d3 fc 71 aa 89 e5 a1 Data Ascii: $C?o?w=XH@u.CqRsiK68hBQX`baPSf\|r^iF' ]_/~#oKR2NdQA^1>+I1=/#l_x8?8?<-X\K$!A"VA%4p3{tq
2024-05-25 23:00:37 UTC	287	IN	Data Raw: fa 43 d8 c0 7f 95 63 d9 84 6b 3a ae a0 0c c2 59 11 6b 62 82 30 0d a2 55 49 3c b4 3a 42 80 b9 40 82 aa 68 e3 ae 17 d0 76 2f 5b 91 97 e2 78 6a 3f 77 b4 ca 66 3d 80 59 35 3b 90 03 80 00 f8 18 94 96 44 69 1d 02 21 09 93 a9 98 90 28 0c 45 23 63 f4 60 a9 b8 05 88 3e 55 39 1b 25 90 23 95 c1 ac df f4 43 90 43 81 c0 47 52 15 56 76 a9 44 c4 ea 1c be 45 03 8c 95 c4 51 bc 54 9c b8 f9 d4 b3 60 be 77 8a 9f 1b ab ed 24 0b b2 24 fb 51 80 88 78 93 a6 34 83 0b 2b 00 38 00 fa 18 90 94 34 b0 84 26 bd 26 5e 0d 10 cc 84 60 60 e9 94 92 27 44 5f d7 bf c2 f5 dc 9e ba 71 f4 4d 00 bf 7f 84 dc f9 17 47 d2 7f dd 1d a0 41 79 06 ab 3b 3b d5 a1 89 2b 6f b8 67 4d 69 0d 33 fb c3 e3 b5 0d 18 c9 1f 26 a5 52 47 54 4c d5 b1 93 dc a4 e4 d1 d4 a5 d3 99 02 4b 80 aa a2 8e d7 50 bc b6 54 38 00 fc Data Ascii: Cck:Ykb0UI<:B@hv/[xj?wf=Y5;Di!(E#c`>U9%#CCGRVvDEQT`w$$Qx4+84&&^``'D_qMGAy;;+ogMi3&RGTLKPT8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.6	59300	142.250.184.246	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:36 UTC	1107	OUT	GET /vi/WlW4UAl3MyM/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLAfP1nKtBDWEA5EpV7mBk3_zYjAOg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:37 UTC	646	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 5638 Date: Sat, 25 May 2024 23:00:37 GMT Expires: Sun, 26 May 2024 01:00:37 GMT Cache-Control: public, max-age=7200 ETag: "1631501547" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:37 UTC	744	IN	Data Raw: 52 49 46 46 fe 15 00 00 57 45 42 50 56 50 38 20 f2 15 00 00 10 5b 00 9d 01 2a f6 00 8a 00 3e 51 22 8e 45 23 a2 21 16 c8 cd 40 38 05 04 b2 37 6e ae b2 1c e8 e0 3b 8a 2b 69 c7 d7 be ec 7e 44 74 78 97 de bf bf 03 f9 bd fd e7 e6 7f f9 ff f5 1e cc 7f 36 7f d4 f7 08 fd 39 ff 49 fd df f1 83 b9 a7 f4 1f 40 5f cc 3f b5 7e cd fb b2 7f a3 ff 15 fd 73 dd 7f f8 4f ea bf e5 fd c0 3f 96 7f 6f f4 c5 f6 38 fe d3 ff 1b d8 27 f8 e7 f8 5f 4c ef d9 8f 84 7f db 9f da bf 6a 0f fd da c3 fe 6e fe dd db 3f f6 4f c8 8f dd 8f 32 df 4c fd 8f f2 1f f7 5b a2 1c 4d 7e 59 f6 4b ee 3f d6 ff 69 bf b7 7e de 7c cb fd f7 f2 8f d3 1f 4e be a0 5f 94 ff 2c fe d1 f9 5d c4 4b a2 fd 20 7c 02 fa c5 f2 4f f0 9f d9 7f 68 7f c3 7e ea fb 45 fe e9 f9 41 fc 8b e1 5f ad 3f e9 be d0 3e c0 3f 8b ff 41 ff 6d Data Ascii: RIFFWEBPVP8 [*>Q"E#!@87n;+i~Dtx69I@_?~sO?o8'_Ljn?O2L[M~YK?i~\|N_,]K \|Oh~EA_?>?Am
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 61 eb f3 80 c3 92 ef d6 b1 ea de d4 00 00 fe fd 4b 38 f9 a1 ea c3 c5 8c 51 fd 06 f3 57 d0 e3 22 15 b2 85 9f cf f8 50 d0 fd d7 48 f2 53 01 88 92 19 41 b9 7b 7f 94 b6 e3 2b 34 04 07 2f 7b 61 87 b5 6f 6f 17 ab 4d 2f 0b 2f 7e 4c 9c 86 35 80 1e 7a 7e bc a0 ef 57 14 e5 75 1a 32 e3 46 5a 2c 78 21 2c ab cf ac 6f 8c 6d 43 2a 43 96 a1 23 c8 b5 bf 9b d3 21 14 21 e1 3c b1 52 d4 8e 6f 75 06 ac 0d 42 e5 71 cb 40 8d 2c aa 91 06 78 da a6 1c ad d9 b9 e5 c7 d2 51 11 18 cd 16 51 46 6e cf d0 c8 70 a5 d6 de d8 d5 21 98 9a 91 b3 4a 0f a2 46 c8 2f e0 13 64 a0 30 09 e6 34 04 c8 84 01 68 ca a4 81 33 68 14 36 72 3c e7 ed 4a 59 29 39 ed 87 e5 7c 27 6e 74 84 2b 06 02 0f 77 5c 90 d5 d6 b9 c6 2c 5f c6 16 a5 13 2d 2b be 5a 54 4c b8 c3 1c c8 87 f5 35 2e 72 eb 39 a3 ff 46 6f 4a 35 4e 5c Data Ascii: aK8QW"PHSA{+4/{aooM//~L5z~Wu2FZ,x!,omC*C#!!<RouBq@,xQQFnp!JF/d04h3h6r<JY)9\|'nt+w\,_-+ZTL5.r9FoJ5N\
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 07 9d 51 4d 78 a5 90 84 d6 52 47 a8 40 62 f9 c7 a6 23 c4 6e 3b 62 ba 08 26 52 be 54 78 7d 4a 92 c1 a2 c6 be a1 92 8e 03 f1 a5 c1 75 ce 34 ab f5 ab b8 b4 7e 03 eb 32 4b 96 9c 1c 6d e0 a5 ac be b3 a1 e7 41 e3 5a 1e 52 7c 10 ee 3f e1 98 8c 4d d3 67 44 48 07 e8 81 d2 24 21 a1 84 6e b2 66 55 e4 a9 4e 94 fa 69 bd 11 6a 3e 8b 7a 39 f8 f5 f8 af ca fb f1 49 9b 71 aa c9 0a 53 11 75 ac 7b 64 2d e6 f8 aa 25 a4 4c b0 5f e7 59 ae cb b6 6f d2 e5 29 1c 0a de b8 ff f4 af 46 33 9c 22 fd 5a 65 2f 4d 0a e1 66 70 97 03 d0 99 e9 4b b1 c7 75 18 a3 64 6f 5e 82 5b e0 11 2c f3 c9 69 b1 16 77 e3 cc 44 fa 11 6e 70 d2 4c 69 c9 63 57 83 51 3d 0f e0 fd 1c b4 ef 9c 55 06 4d af b2 7a 70 2a d5 ac dd 2f 40 8d ae b0 2a ca 14 1c 65 62 2f 9a 94 0f 37 74 a1 1c 11 f9 70 d4 19 f8 cc c1 df 96 19 Data Ascii: QMxRG@b#n;b&RTx}Ju4~2KmAZR\|?MgDH$!nfUNij>z9IqSu{d-%L_Yo)F3"Ze/MfpKudo^[,iwDnpLicWQ=UMzp/@eb/7tp
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: a3 56 a1 9c e7 64 5a cb 90 b8 31 c8 08 8b cc 66 ea 8d 15 b9 40 1c ab 84 56 84 89 09 1f 88 7b e1 fe 20 e9 72 f7 18 80 69 2f 75 f5 b2 ab a1 ed 6d a7 69 d4 db ec 46 7d 52 de 3c e3 06 d2 c2 ee 82 ee eb 6e 25 e7 f7 83 ff 9f f7 eb 05 c6 9f 31 e1 eb ca 54 c3 69 b3 17 74 17 d0 88 0b 44 7d a9 f8 c0 ec 9f c0 1b aa d9 fb 0f 84 b3 1d e7 04 ac 50 a0 ad 7e 33 7a 9f fd 11 62 c8 10 5e 2e 6b 33 ad 28 22 4a 0f c9 5a c7 19 d8 5e 7e 76 5f 76 eb 9b e2 f1 c8 cf d0 d9 33 19 76 2a 2e 3d 59 d7 e1 b9 26 e4 fc 28 c0 42 30 67 18 66 d5 cd 68 aa e5 e0 86 85 50 cf 83 8e ac 93 77 f0 76 ce 8c e4 5d 89 db d9 c7 ed b5 72 a2 f2 75 24 45 81 b1 36 f4 83 f2 ef d5 17 27 c0 69 d0 aa 21 e0 e6 9f ff f5 d2 15 99 fd 9e 14 eb 80 ca c5 fb f6 b3 1f e6 9c 06 f0 b6 94 d8 ad 5b 7d d1 5d 18 f1 07 00 6b b1 Data Ascii: VdZ1f@V{ ri/umiF}R<n%1TitD}P~3zb^.k3("JZ^~v_v3v*.=Y&(B0gfhPwv]ru$E6'i![}]k
2024-05-25 23:00:37 UTC	724	IN	Data Raw: e4 29 e1 31 cf b5 64 87 45 fd 8a b6 96 b4 ca 5c 77 0c bb 06 f5 bd 94 82 cb 77 54 20 ab dc 96 14 2d f3 ae a2 63 5f 98 49 f0 36 35 da f8 14 ca e8 7c ff 23 1e c2 4d 41 c8 1c c7 49 f0 6a 9d a4 5c 20 45 31 19 8e b5 0a a9 46 4a c6 95 b4 4c 06 4b b4 89 30 a2 ea 89 24 ca ca 3b 5d b5 89 73 35 e4 24 cd 9b b0 60 e6 76 67 b0 b0 ba c9 de e4 37 f6 b7 54 f2 f6 71 37 87 82 96 aa c8 56 8a 4c 22 33 f4 a7 3d 95 00 a7 46 d0 93 90 e5 62 5f c0 89 e7 f3 20 52 81 96 cd d9 09 8d b4 4f f8 dc 7b 05 3e 7d 6b 10 94 aa ba 5d da e4 3e eb 5e 7b 29 b4 5f a4 50 a8 af c2 d4 ac 67 73 32 0e b9 95 12 0f 17 c9 0f 70 19 d5 9b 44 4a 2e 97 5c 33 8c 33 3e 74 ca ab b1 41 ce 8f 44 82 18 44 00 00 5e fb 94 11 b7 47 3d 3b e9 d5 a5 89 58 c1 e1 03 00 63 bf 38 8b 2c 77 2c 5c 7b e3 c8 b9 cd cd 56 11 10 c5 Data Ascii: )1dE\wwT -c_I65\|#MAIj\ E1FJLK0$;]s5$`vg7Tq7VL"3=Fb_ RO{>}k]>^{)_Pgs2pDJ.\33>tADD^G=;Xc8,w,\{V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.6	59294	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:36 UTC	1141	OUT	GET /s/search/audio/no_input.mp3 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: /* X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://www.youtube.com/c/CodashopOfficial Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York Range: bytes=0-
2024-05-25 23:00:37 UTC	708	IN	HTTP/1.1 206 Partial Content Accept-Ranges: bytes Content-Range: bytes 0-6952/6953 Content-Type: audio/mpeg Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube-marketing" Report-To: {"group":"youtube-marketing","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube-marketing"}]} Content-Length: 6953 Date: Sat, 25 May 2024 23:00:37 GMT Expires: Sat, 25 May 2024 23:00:37 GMT Cache-Control: public, max-age=0 Last-Modified: Wed, 12 Jan 2022 21:08:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:37 UTC	682	IN	Data Raw: 00 00 00 20 66 74 79 70 4d 34 41 20 00 00 00 00 4d 34 41 20 6d 70 34 32 69 73 6f 6d 00 00 00 00 00 00 0c 9c 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 d2 90 a0 90 d2 90 a0 90 00 00 ac 44 00 00 60 00 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 02 25 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 07 d2 90 a0 90 d2 90 a0 90 00 00 00 01 00 00 00 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 c1 6d 64 69 Data Ascii: ftypM4A M4A mp42isommoovlmvhdD`@%trak\tkhd`@mdi
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 02 00 00 10 00 00 00 1a 7c 00 00 0a 03 75 64 74 61 00 00 09 fb 6d 65 74 61 00 00 00 00 00 00 00 22 68 64 6c 72 00 00 00 00 00 00 00 00 6d 64 69 72 61 70 70 6c 00 00 00 00 00 00 00 00 00 00 00 00 02 6f 69 6c 73 74 00 00 00 1e a9 6e 61 6d 00 00 00 16 64 61 74 61 00 00 00 01 00 00 00 00 63 61 6e 63 65 6c 00 00 00 19 63 70 69 6c 00 00 00 11 64 61 74 61 00 00 00 15 00 00 00 00 00 00 00 00 19 70 67 61 70 00 00 00 11 64 61 74 61 00 00 00 15 00 00 00 00 00 00 00 00 1a 74 6d 70 6f 00 00 00 12 64 61 74 61 00 00 00 15 00 00 00 00 00 00 00 00 00 28 a9 74 6f 6f 00 00 00 20 64 61 74 61 00 00 00 01 00 00 00 00 69 54 75 6e 65 73 20 31 32 2e 33 2e 31 2e 32 33 00 00 00 bc 2d 2d 2d 2d 00 00 00 1c 6d 65 61 6e 00 00 00 00 63 6f 6d 2e 61 70 70 6c 65 2e 69 54 Data Ascii: \|udtameta"hdlrmdirapploilstnamdatacancelcpildatapgapdatatmpodata(too dataiTunes 12.3.1.23----meancom.apple.iT
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 70 1c 00 ca 9c 3a e2 20 e6 f9 46 0e d5 60 28 81 db 72 86 0a 20 d6 a2 0a 0c ff eb fc 8f c7 fe 97 f0 e9 9e b5 7e df ff 62 fc be 3c ea f5 e7 ff af c7 3f af c6 3e bf fe e7 ef ed f0 e6 09 f3 dd a4 bf cb dd fe 73 f9 00 fd 18 ea 68 6b dd 2d 38 4f f8 47 7c e6 23 fd d3 ff 87 e1 19 b1 09 dc 97 28 42 20 e1 d9 91 09 c4 a7 41 c5 ff 41 09 13 71 ea 49 a0 44 c8 6b 78 16 20 bc e3 c0 76 1c 4e 04 d2 12 12 12 12 12 12 12 12 12 47 ec 3f ee 68 9f fa 93 7f a3 b7 96 e2 56 a3 ba ca 86 ca aa 36 17 d6 58 e8 6b 2a 92 27 83 08 18 18 18 18 18 18 9e 97 9c 11 ff 5c 1f cf b2 19 be 90 4b fd 49 9f b5 f2 79 5f 03 11 ff 45 3f f2 3c 21 96 ef 24 bf ce 07 fd 27 f7 7a eb c0 fb 8c 4b c1 7b cf be 48 ee 4e c0 b9 1f 9d a4 da a7 1c 2a 5b a9 7d 9b ec da e5 b5 1e 32 66 23 99 1e 01 9c 6b a1 6c 7d 3f 67 Data Ascii: p: F`(r ~b<?>shk-8OG\|#(B AAqIDkx vNG?hV6Xk'\KIy_E?<!$'zK{HN[}2f#kl}?g
2024-05-25 23:00:37 UTC	711	IN	Data Raw: fd 47 78 94 c3 5e 4b 77 34 c6 d7 2a 42 1a 20 48 ff dd ef 55 d8 b3 4a 95 38 ce 8c 9f 4b a4 28 51 0d 24 7d 29 28 e0 d3 12 9c 63 54 5b 0d b5 74 cc 9c 47 f6 69 5c 5f 89 d4 89 c1 d9 1e 35 a3 ec c4 db 35 af 10 70 00 f8 38 ac e0 34 98 50 d4 f9 f1 e3 f7 f8 10 01 80 36 8b 01 8f 97 05 7e 22 1f 6b db b8 1f d4 1c 3a f4 45 ac c8 ab d1 76 1a f6 b5 13 17 fc ef 47 3e 77 8e 29 fb c3 90 f3 5b b9 63 9e 99 88 46 d8 74 36 c8 99 17 bf 53 a7 d9 98 94 22 4c 06 64 aa e1 55 d2 20 23 76 88 a4 35 94 f9 46 5e 75 f0 00 f8 38 ac ea 74 41 1c 28 bd fe 3f 8d fd ad f7 7d d3 32 16 60 28 36 80 60 28 5b f7 dc 87 2b 78 91 05 a9 61 4f 99 00 bf 1c f2 95 ef bb ae 95 45 c0 08 07 56 a7 51 77 e9 59 44 61 ca 95 a0 ed 06 f4 a0 2a e5 41 e3 c3 16 d4 8e 6a d2 e6 c3 1f f4 84 14 2f 95 97 2c bb 8f 85 26 7d Data Ascii: Gx^Kw4B HUJ8K(Q$})(cT[tGi\_55p84P6~"k:EvG>w)[cFt6S"LdU #v5F^u8tA(?}2`(6`([+xaOEVQwYDaAj/,&}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.6	59303	142.250.184.246	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:36 UTC	1107	OUT	GET /vi/Ih70PEQTTDY/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLALHBCF72cYBrxdigsUR4DNW7Fdsg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:37 UTC	646	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 7198 Date: Sat, 25 May 2024 23:00:37 GMT Expires: Sun, 26 May 2024 01:00:37 GMT Cache-Control: public, max-age=7200 ETag: "1634111834" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:37 UTC	744	IN	Data Raw: 52 49 46 46 16 1c 00 00 57 45 42 50 56 50 38 20 0a 1c 00 00 b0 66 00 9d 01 2a f6 00 8a 00 3e 51 22 8d 44 23 a2 21 16 5c a5 9c 38 05 04 b6 21 e0 cf 7a 9e db 60 26 88 70 1e 08 7a 57 3f 2b fa 77 f1 5f 8c 7f 97 9f 30 3c 97 d8 67 8f 7b dd fb bf fe 1f f1 be e6 1e f1 e4 03 dd 17 94 ff b5 ff 72 fd db fe ab f3 53 fd df f6 ef ca 0f e4 5f 44 ff 3d 7f 92 f7 02 fd 26 fe bf fd 43 f6 93 fb b7 ff ff ae 1f f6 fd 62 ff 5d ff 9b ff 03 f4 03 e0 1f f1 6f e5 9f e0 ff b6 fe e9 7c e4 ff 8c ff 01 ed a7 fb cf f7 6f 60 0f e7 7f d5 3f eb fa e0 fb 09 7e e3 7b 00 7e d3 fa 50 ff d8 ff 05 fb ef f4 65 fb 09 ff 47 fc 97 ef ff d0 47 f3 3f ec 1f f0 ff 3e fe 40 3d 00 3f 7f fd 80 3f 7f fd d1 fa eb fd 13 f1 27 da 2f 85 df 69 fc 83 f4 37 af ec b5 bc 15 c0 3f f1 9e b7 3f a0 ff 5f e1 4f c8 ef ea Data Ascii: RIFFWEBPVP8 f*>Q"D#!\8!z`&pzW?+w_0<g{rS_D=&Cb]o\|o`?~{~PeGG?>@=??'/i7??_O
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 5e b3 1a 62 2f e4 18 49 bd f8 d7 89 b4 d7 66 ae 23 30 20 33 25 14 49 09 f6 95 74 a8 76 db 85 b1 ee 62 d4 ee e6 3e 8a ac 73 57 95 67 3e 06 c5 ce aa 2b 2f 5d 99 0d b5 c3 a4 c6 e7 51 a1 72 5e 5d da cc b4 50 40 d0 84 09 cf 24 7d e7 51 d2 dd 72 0a b6 ee d2 e5 4f 3d b0 76 00 25 70 18 76 cd bd 3c 97 76 79 b5 c4 7a 57 57 c2 00 fe ee 59 25 31 06 f0 f0 99 5b 3f 75 e8 7a cb d6 f7 43 4f 65 20 26 9a 59 b5 e8 69 4e 9d 31 f0 bd e2 32 fe a2 bc dc ce 31 ea 9a dc 41 63 8a 5e 75 55 28 86 03 1f f0 c5 e1 48 50 85 bf 16 f1 41 b2 fb f1 30 ef 44 3b f7 ac 6e 75 4b 54 54 3b 6c a3 68 3a ee 98 6f e1 4e 6e 64 fc aa 4a 86 1c 76 ee 18 e6 f3 a6 f1 67 45 ed 6b e6 02 22 a8 8d ca b1 4d a0 db e5 e7 d6 4f 10 4a 5f 34 f9 5a a7 c8 1a c6 bc 00 12 95 4a f2 84 0c 41 2d f1 08 56 40 d3 83 1f d6 fc Data Ascii: ^b/If#0 3%Itvb>sWg>+/]Qr^]P@$}QrO=v%pv<vyzWWY%1[?uzCOe &YiN121Ac^uU(HPA0D;nuKTT;lh:oNndJvgEk"MOJ_4ZJA-V@
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 66 0d 41 50 c1 3c 45 b1 d9 e0 bc 83 0e b3 b8 c5 e8 54 9a 67 67 f5 71 9c 06 69 17 3b 6c 06 c7 a2 dd a2 b0 61 96 3e 96 62 c6 c2 61 30 fb 11 78 40 2f dd 79 dc ce a4 99 a9 07 de 38 4b 1e 00 68 0e ab 78 a8 23 c9 56 dc 3d 86 46 08 93 58 35 55 48 7a b1 83 9c bc 42 f5 9b 9b be ab 74 c2 53 bd a7 81 6d d6 18 70 56 5f 4f 76 70 17 c2 a9 83 6a 03 fc e3 bf 50 50 07 4e 2a 64 c4 3e cc 83 31 14 b7 8c cd 95 f9 bf 21 6d 23 c3 7c f8 b1 85 95 81 f3 c4 82 e1 a1 a3 eb 51 73 02 b5 87 60 69 31 ef 50 21 ff 77 67 b4 07 0c cc 6e c5 7d a0 fc 3e 86 2a 65 2b b9 26 fc 07 43 2b d5 47 68 cf 47 8f f2 7e 5a 9f d6 e1 17 74 f1 81 57 2e 33 df 50 b0 7b 41 64 28 8d 98 ae 9a 93 bf c4 34 fd 37 73 fc 1b eb de 01 17 cf be 5c 68 a2 b7 29 80 de 00 68 c9 b5 3f e0 d0 43 43 41 82 db 65 f2 13 87 1b ad 52 Data Ascii: fAP<ETggqi;la>ba0x@/y8Khx#V=FX5UHzBtSmpV_OvpjPPNd>1!m#\|Qs`i1P!wgn}>e+&C+GhG~ZtW.3P{Ad(47s\h)h?CCAeR
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: d0 e0 d8 09 63 e6 f3 23 2d b0 d2 db 22 7f 56 6a b5 ec 74 8d 87 0d 2e 57 3d 4f f2 04 8a c3 7f 0c 3f 7f 50 38 e2 90 7e 52 0c 29 89 e6 35 a6 b5 c0 6b 18 35 56 e0 df 64 1f 4a 5f c6 7c 6f b0 47 ee cc 1d 58 43 c0 c3 f1 07 38 59 1c ad 89 09 ca 7f 95 b5 cf b4 ed 33 3d f0 03 ab fc 62 a5 d8 65 09 52 65 44 45 0e d1 01 25 0e 7a 29 cd f5 e2 41 12 bc 09 7c af 58 96 d8 7d 6b 5f f1 bd b3 0a 4f 71 ee 8e 02 92 dd 51 1c c5 30 9c ea e5 1c 24 a2 e5 bb 93 ef f5 37 6f b0 3b 5b 87 f3 d6 7b da d1 ab a5 23 6e d3 05 c1 3c d7 e7 e4 35 1f 98 18 9c 7d 8f 60 94 38 99 82 71 df 98 b6 80 e1 ba 3e c2 cb cc 08 fd b3 35 04 46 3e 2f 6d 95 d1 dc f3 a3 05 2f 9b 1c cc 28 66 d8 ea 41 f4 6e 96 24 6c 4d 45 ce 6f 1e 29 f4 a5 68 2c 97 d0 7c ea 73 c7 6d 1d 39 fe a7 5c b3 97 f0 a3 1e de b1 65 ac ad 11 Data Ascii: c#-"Vjt.W=O?P8~R)5k5VdJ_\|oGXC8Y3=beReDE%z)A\|X}k_OqQ0$7o;[{#n<5}`8q>5F>/m/(fAn$lMEo)h,\|sm9\e
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 5a 14 59 83 0b a1 e2 bf 62 3c 36 79 40 0c 42 02 a8 eb 05 aa 75 ba 5a 37 69 89 f7 d1 8c 79 07 7c 60 7d 28 4f 8a 8a 0f ca 74 1d 42 9f 7e 5d 7a fe 9b ef da 12 5f de 0f d7 eb f4 d4 72 b2 ff d8 d4 95 5c 4c 7b 83 9b e4 d2 cb ad ec 2a 3a 04 7f 21 84 e0 c7 7b 18 cd 67 3a 36 f7 70 d0 c8 87 bb 1a 85 a9 05 06 65 83 53 13 31 40 bf 03 1e 01 30 14 94 20 30 e3 0e 54 92 24 2f 53 e0 85 c3 75 0e 05 b2 fd 2a 9b 49 dd c5 da c1 74 05 be df ff 1c 84 3c d7 c4 b7 f4 c6 e5 58 35 04 8c e9 1f 62 e2 f8 e0 b3 f6 ef f0 5c 66 65 4f 53 ab 3a e0 0d 8f cf 0f f8 db a8 0c f0 31 1c be af 55 f3 bb fb c5 51 ba 84 09 14 6b 21 d9 e1 e4 8b f7 08 67 8b 83 79 5b 86 e8 67 a4 19 51 14 fe d5 9d df e0 bd ef 66 e3 b5 8c 44 03 62 69 56 7d f3 78 a8 7c 47 e9 c6 cd b0 12 71 40 b3 1c 28 de 7e bf 31 ad 42 0d Data Ascii: ZYb<6y@BuZ7iy\|`}(OtB~]z_r\L{:!{g:6peS1@0 0T$/SuIt<X5b\feOS:1UQk!gy[gQfDbiV}x\|Gq@(~1B
2024-05-25 23:00:37 UTC	894	IN	Data Raw: 3c 17 4f 86 bf c4 7f 24 44 95 18 11 55 4a 9b 8e 0b 27 ce c0 df d4 f2 1b a3 ce 46 e1 e6 15 5c 00 7a 93 25 ee c8 78 b4 b8 0f 01 d4 f9 75 78 a1 fb d4 36 72 d6 61 e6 86 3c e2 49 af 6d 30 d6 cf 6d d3 fc 0f 85 3a 82 bb 81 bc 3d b6 24 82 a3 32 6e 33 d8 07 72 4b 23 70 9e 3f 58 7f 67 50 8f 41 9d bd 7e 4d 48 3f a1 77 81 54 a2 0a 15 81 ad 07 c0 6a 21 9f 58 9a e0 07 2a b2 be d8 14 ee 82 0b 98 32 83 6e 6c 49 97 8d fe bd 63 cf db c1 f7 ee 79 45 20 64 7c b7 23 ee 08 9d fd c6 2a 8e af 97 d6 09 56 ba 11 3e f6 eb 6f f3 55 43 bb 80 b6 47 0a 95 e3 f8 db ff 0f 51 e7 d1 d1 a7 fc 1f 18 ac ca 30 64 ba 23 24 ba b7 dc d1 29 5f ad 47 ab 15 d1 14 1f 0e b6 3f 44 1a 99 98 47 04 9f 8d f8 b6 d1 53 d4 a1 cf d6 fb 90 64 04 7d 31 94 d4 5a 49 08 dd 74 df fb 46 ab e6 a7 49 eb 42 26 62 b8 d3 Data Ascii: <O$DUJ'F\z%xux6ra<Im0m:=$2n3rK#p?XgPA~MH?wTj!X2nlIcyE d\|#V>oUCGQ0d#$)_G?DGSd}1ZItFIB&b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.6	59299	142.250.184.246	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:36 UTC	1107	OUT	GET /vi/PJmoRowiRGk/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLDUPUfm9CSZCVGvWLrJsa8oWCBGXw HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:37 UTC	646	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 2498 Date: Sat, 25 May 2024 23:00:37 GMT Expires: Sun, 26 May 2024 01:00:37 GMT Cache-Control: public, max-age=7200 ETag: "1595473014" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:37 UTC	744	IN	Data Raw: 52 49 46 46 ba 09 00 00 57 45 42 50 56 50 38 20 ae 09 00 00 b0 31 00 9d 01 2a f6 00 8a 00 3e 51 26 91 46 23 a2 21 a1 23 95 09 50 70 0a 09 63 6e c7 00 27 c4 5d 03 69 fd 03 b3 a6 81 f7 ef dd 3f 20 39 fd 79 93 c0 9f 32 d8 98 f9 b6 5d 7d 1e e8 03 fd 3f f9 4f 65 1f 94 3d 80 3f 4e 7a 58 f9 85 fd 49 fd b7 f7 b7 ff 3b ea 93 f2 03 dc 03 fb 17 f6 3e b1 6f 40 0f da ef 4d 5f 66 5f ee 7f f3 3f 6f 3d a5 b0 6b 74 6f 95 f3 d9 ac aa df a0 e1 e7 6b 0f f3 3c 08 60 03 f1 bf e6 7f f0 f8 c5 ef 3f fc d7 fd 97 aa 7d fb 1e 6b ea 5b fd 9f fd a7 f6 0f e8 9e e9 1a 0b fa 57 fe ff b8 37 f2 bf ea ff f2 fb 16 7e d2 7b 2e 7e b9 30 da 57 bd 09 4d 56 75 99 ed b7 d4 c0 2a 46 46 1b 81 9d c3 b8 75 c2 c7 8b e8 94 94 d8 06 b7 cf 80 f1 3b 3f b4 8a af c6 39 2a 00 42 87 fa e1 64 65 b0 b7 d7 0b 45 Data Ascii: RIFFWEBPVP8 1>Q&F#!#Ppcn']i? 9y2]}?Oe=?NzXI;>o@M_f_?o=ktok<`?}k[W7~{.~0WMVuFFu;?9*BdeE
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: ee 44 bf 57 d4 fb 8f e3 bf 55 62 34 c0 a0 7e 69 f8 50 fc 14 b2 b6 a6 12 0d 32 82 22 c8 c3 34 fe 28 5f 4f 42 43 82 13 f4 86 4e 21 3a 60 1f 54 94 95 5d c4 72 f4 76 5b 3d ee 39 17 53 92 3a e5 57 f8 12 3e 1f 70 53 26 76 05 4f 32 d5 59 80 5c db e7 dc 46 fc d2 7d f4 b5 19 90 53 60 f7 b6 cc 8e b0 e3 c6 1c 86 af 8a e1 eb e7 d6 3f 87 2c 0e 9a dc 7a f3 fd 02 5d 2c 42 53 8b ce 39 fb fe 91 87 d3 62 bd c0 89 ba d1 94 b5 d2 98 bd dc bc 0c cf a1 16 37 41 b8 21 96 55 fa 02 4e c2 ec a2 be cd f2 c5 5d be 06 7b 49 3b 5c 8b 78 3c a0 f7 a5 39 17 a2 f2 3b df 3b 68 83 ac 3b ff 9d 9e 05 af 48 00 00 03 72 78 8a 4f 65 fa dd 75 78 3f f0 08 c2 5e 82 82 30 dd 52 8a 32 9d db ef 19 97 4c f2 9c 85 fd 58 09 b2 ee 4f e2 3e 5a d4 a7 78 e0 92 71 8e d8 a6 c3 4f 0b fd f3 aa 45 35 47 32 f9 aa Data Ascii: DWUb4~iP2"4(_OBCN!:`T]rv[=9S:W>pS&vO2Y\F}S`?,z],BS9b7A!UN]{I;\x<9;;h;HrxOeux?^0R2LXO>ZxqOE5G2
2024-05-25 23:00:37 UTC	364	IN	Data Raw: 5a 19 4e 15 64 01 75 d0 82 2d e2 cc 76 0f ec 67 92 28 6d 80 ba 9a ad 46 4e f0 e7 cb 9c fa 88 9a 60 fe b3 50 db 1d fe 8d 98 75 0b 25 ee e4 79 f6 25 ae 5e 3b 83 66 25 da 74 75 d3 ce 7c 03 c1 e0 84 9a e2 8f 4e 49 12 e0 3c 13 49 ef 93 3f 7f 4c 85 40 7c ea eb 69 66 27 20 30 35 85 e7 e3 cf 06 a3 c4 5e 36 fa 0c d8 c1 9e bd 9f 25 06 6c 20 7d 49 b1 86 ab 2c 2c 24 70 44 ee ca dd 94 8b 65 58 2b 70 7a 9d 16 9d da 6d 42 cb a0 a5 8b 41 d3 e2 ca 11 e2 32 e9 0a 9f 7d cb a0 02 d1 d1 e4 74 c1 14 f4 a1 e9 ce 56 98 0c 2d 17 ed df 72 1f 0f de 95 dd 4b 62 0c 70 7f 69 a8 a6 ce ea 8c ca 2d 4c 48 72 ec 38 f1 35 ee f4 fc c8 32 b5 7d c9 94 b5 3f 3a a3 62 dc 16 ea 48 df 33 ad 10 42 6e d1 71 31 ed d6 a7 1a 1b 6b 8d 23 f0 9c 40 24 1b db 92 9b 77 a5 a9 06 3e 00 d2 26 5e 74 b3 ce 8b 78 Data Ascii: ZNdu-vg(mFN`Pu%y%^;f%tu\|NI<I?L@\|if' 05^6%l }I,,$pDeX+pzmBA2}tV-rKbpi-LHr852}?:bH3Bnq1k#@$w>&^tx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.6	59302	142.250.184.246	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:36 UTC	1107	OUT	GET /vi/FXzvFug0Rv4/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLB8iZOish3K05X5DCLbrJRzh2WrfQ HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:37 UTC	646	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 2364 Date: Sat, 25 May 2024 23:00:37 GMT Expires: Sun, 26 May 2024 01:00:37 GMT Cache-Control: public, max-age=7200 ETag: "1544572974" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:37 UTC	744	IN	Data Raw: 52 49 46 46 34 09 00 00 57 45 42 50 56 50 38 20 28 09 00 00 10 32 00 9d 01 2a f6 00 8a 00 3e 51 28 91 46 a3 a2 a1 a1 21 36 69 a8 70 0a 09 69 6e e1 74 99 90 70 82 e0 97 24 03 9e 87 d9 13 ca 03 55 cd 83 7f 69 fc 8e f3 bf f0 cf 8e fe b9 f8 dd e8 c5 54 de a3 bf 1e fa b3 f7 8f cb 9f 56 3f af 78 33 ed c7 f6 4f c7 4f c8 0f b0 2f c3 ff 90 ff 68 fc 90 f3 41 fc 97 b6 e8 00 7e 2d fc d3 fc 0f e6 b7 f7 df 41 cf da fd 06 fa a3 fd db f2 93 e8 03 f8 bf f2 3f ef 7f 98 1f d8 be 31 ff 01 e0 7d e0 df d9 bf 00 3e 80 3f 8b ff 34 fe ed fd cf f6 43 fb 47 ff ff b4 2f dd 7f d8 7f 77 fc a2 f6 77 f9 1f f6 2f f5 df e3 fe 00 ff 91 ff 3d ff 4d fd d3 fc 97 fe 1f ef df ff fe a7 fd 87 7e cc fb 29 7e c1 8a 28 51 65 4c d2 82 de 81 e3 34 a0 b7 a0 78 cd 28 2d e8 1e 33 4a 0b 79 79 05 6d fd 2f Data Ascii: RIFF4WEBPVP8 (2*>Q(F!6ipintp$UiTV?x3OO/hA~-A?1}>?4CG/ww/=M~)~(QeL4x(-3Jyym/
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 37 c9 7d fc 1a cd da dc 22 76 71 f4 fd e0 4c bc 2f e9 31 b2 30 99 70 a8 54 67 d3 ff 33 48 09 47 10 b3 96 97 61 d4 c7 fc 42 8d 57 7e 81 d4 d1 90 de 54 a8 cc 88 06 df 32 c9 b1 32 48 ba 3a 1c d5 17 b8 a6 37 8b dd 04 36 ad ac 26 4e b7 32 4b d0 b2 10 3c c2 86 c1 5d 4e 86 2f 7f f1 76 ec 7a 79 d1 38 e5 8b 66 26 ff ca 25 08 b8 31 49 46 92 b2 9f 1a cf 69 c3 f4 7a af 8e db 43 fd b2 df bb 6f 57 ec eb 8f e6 6a 24 96 11 1b 49 3b 46 db 7c cd d7 68 2e a9 74 16 9a b8 26 c7 65 38 81 f0 26 86 b8 70 5f 30 9d e9 b2 0c 4b fa 92 23 bb 9c c8 a5 8b 63 96 82 c8 30 27 d5 e7 53 06 c6 54 e8 ff 83 f0 f2 1e fb 7c 45 ce c5 09 8a 91 ce 25 90 bd 72 2d 5c 52 43 4f 8a aa 49 20 a2 4e 04 9d 9b f3 b8 10 1f 82 61 ed 9a ac 5e f5 cc 20 c7 c3 6f 00 e6 02 6d 8d 7f 50 e4 14 47 23 f5 e3 4d 01 09 ed Data Ascii: 7}"vqL/10pTg3HGaBW~T22H:76&N2K<]N/vzy8f&%1IFizCoWj$I;F\|h.t&e8&p_0K#c0'ST\|E%r-\RCOI Na^ omPG#M
2024-05-25 23:00:37 UTC	230	IN	Data Raw: 3a 91 f1 63 37 bc 17 ec b6 94 60 78 4f 3a 84 1a ec 42 a8 5b 2e 37 c2 8b 1f 2a 67 34 8d 60 3a ce 56 3f 9e a3 61 61 af ee d8 f2 d6 1a fa 61 01 bf 81 63 3a 0a b8 8c 62 6d f3 a4 1b 9a 5d 22 77 4f dd 56 3d b6 49 ee c3 ab a1 c7 55 6c d9 44 3d 30 06 e5 72 4e f3 36 07 c1 65 fd 09 83 12 71 ae 7d 72 18 81 f8 6b c5 e1 4b 80 6c 4c ea 9f cd 14 23 9a 43 1a 1d 31 b7 55 75 60 13 cc d9 d5 c1 e7 77 72 1c 35 34 5f c5 c7 6b 21 f6 5b 7a d3 28 a7 0d 71 65 b0 ac a6 33 8f a0 f7 c1 f5 cf d0 61 8a cf ef 14 7e e2 2b 58 31 f3 3d 17 0c f3 67 98 73 73 1d 8e 3a 9e 6f 59 b4 3f 83 7f d4 98 42 0f f3 db aa 3c e8 1b ce 08 48 2d 5f fe a0 3b cd 0a a6 5b 5c ac 40 04 e7 87 e5 4b 73 21 0c 70 85 c7 b9 df ea 40 00 00 00 00 Data Ascii: :c7`xO:B[.7*g4`:V?aaac:bm]"wOV=IUlD=0rN6eq}rkKlL#C1Uu`wr54_k![z(qe3a~+X1=gss:oY?B<H-_;[\@Ks!p@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.6	59295	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:36 UTC	1137	OUT	GET /s/search/audio/open.mp3 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: /* X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://www.youtube.com/c/CodashopOfficial Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York Range: bytes=0-
2024-05-25 23:00:37 UTC	708	IN	HTTP/1.1 206 Partial Content Accept-Ranges: bytes Content-Range: bytes 0-6166/6167 Content-Type: audio/mpeg Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube-marketing" Report-To: {"group":"youtube-marketing","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube-marketing"}]} Content-Length: 6167 Date: Sat, 25 May 2024 23:00:37 GMT Expires: Sat, 25 May 2024 23:00:37 GMT Cache-Control: public, max-age=0 Last-Modified: Wed, 12 Jan 2022 21:08:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:37 UTC	682	IN	Data Raw: 00 00 00 20 66 74 79 70 4d 34 41 20 00 00 00 00 4d 34 41 20 6d 70 34 32 69 73 6f 6d 00 00 00 00 00 00 0c 67 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 d2 90 a0 90 d2 90 a0 90 00 00 ac 44 00 00 38 00 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 01 ed 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 07 d2 90 a0 90 d2 90 a0 90 00 00 00 01 00 00 00 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 89 6d 64 69 Data Ascii: ftypM4A M4A mp42isomgmoovlmvhdD8@trak\tkhd8@mdi
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 70 70 6c 00 00 00 00 00 00 00 00 00 00 00 00 02 72 69 6c 73 74 00 00 00 21 a9 6e 61 6d 00 00 00 19 64 61 74 61 00 00 00 01 00 00 00 00 73 70 65 61 6b 5f 6e 6f 77 00 00 00 19 63 70 69 6c 00 00 00 11 64 61 74 61 00 00 00 15 00 00 00 00 00 00 00 00 19 70 67 61 70 00 00 00 11 64 61 74 61 00 00 00 15 00 00 00 00 00 00 00 00 1a 74 6d 70 6f 00 00 00 12 64 61 74 61 00 00 00 15 00 00 00 00 00 00 00 00 00 28 a9 74 6f 6f 00 00 00 20 64 61 74 61 00 00 00 01 00 00 00 00 69 54 75 6e 65 73 20 31 32 2e 33 2e 31 2e 32 33 00 00 00 bc 2d 2d 2d 2d 00 00 00 1c 6d 65 61 6e 00 00 00 00 63 6f 6d 2e 61 70 70 6c 65 2e 69 54 75 6e 65 73 00 00 00 14 6e 61 6d 65 00 00 00 00 69 54 75 6e 53 4d 50 42 00 00 00 84 64 61 74 61 00 00 00 01 00 00 00 00 20 30 30 30 30 30 30 30 30 20 30 30 30 Data Ascii: pplrilst!namdataspeak_nowcpildatapgapdatatmpodata(too dataiTunes 12.3.1.23----meancom.apple.iTunesnameiTunSMPBdata 00000000 000
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-05-25 23:00:37 UTC	1315	IN	Data Raw: da b2 5f 86 4f c0 dc ba 76 d7 73 a4 99 80 b3 2c 11 5e e2 fd 26 62 c4 d6 a9 2e b2 fc 6c 49 e6 b2 9c f9 31 85 eb ae 59 f0 c6 b6 b4 48 7a eb 67 aa 82 47 9a d8 15 35 67 37 14 10 d2 c0 e0 80 9f e1 c3 f2 60 4f eb b7 f4 36 21 02 39 09 b1 b0 05 ec c2 20 9c 4e 79 3e 40 80 90 45 68 c0 e0 72 1a 80 b8 f6 05 4e be fb 9f 89 44 8b ac b7 0e c6 d1 b9 8b 15 b6 ad 9a 6a 79 9e a2 b0 68 2c 18 18 18 18 18 18 18 18 8f d9 af ad e4 7f 59 3d d7 5f 11 23 b3 5e 9c b9 39 bb a4 45 23 29 12 a6 d5 32 d3 38 c8 ce ce ce ce ce ce ce ce ce ce ce ce 42 4f 84 09 7c 5d fd bb 11 e2 9d 74 9f d4 df ce 11 5e 2c ab c9 bc f7 bc d2 a3 bd 6b 1b 8e f7 83 ae 29 e7 fc 78 b3 99 90 f9 31 9e e0 f8 5e 0e ea 34 52 89 f6 7d ad ce e8 41 10 4e 69 b3 a6 b4 cb 45 12 50 44 1c 5c 6a 9a a9 b3 84 11 04 46 9b 39 96 99 Data Ascii: _Ovs,^&b.lI1YHzgG5g7`O6!9 Ny>@EhrNDjyh,Y=_#^9E#)28BO\|]t^,k)x1^4R}ANiEPD\jF9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.6	59298	142.250.184.246	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:36 UTC	1107	OUT	GET /vi/gUlM_p1zHbI/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLBmin9DtU5PRqVl3aMTiMtQAbpbsg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:37 UTC	647	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 10352 Date: Sat, 25 May 2024 23:00:37 GMT Expires: Sun, 26 May 2024 01:00:37 GMT Cache-Control: public, max-age=7200 ETag: "1623834729" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:37 UTC	743	IN	Data Raw: 52 49 46 46 68 28 00 00 57 45 42 50 56 50 38 20 5c 28 00 00 b0 8a 00 9d 01 2a f6 00 8a 00 3e 51 1e 8c 44 a3 a1 a1 16 eb 1e 54 38 05 04 b3 00 63 97 20 3f 60 e7 c0 e4 be 7f fb af a4 0d a9 fd 7f f7 cf d9 5e ca bb 71 8d 9f 78 3f d3 fb a2 f9 93 fe fb d6 37 e9 5f 60 8f d7 cf d6 3f 5d 4f 5c 5f ba 3e a7 3f a0 7f 91 fd 90 f7 56 ff 93 fb 8b ef 43 fb 7f f9 af f9 7e e1 df d1 ff d2 7a d8 ff bb f6 51 fe f1 ff 47 d8 4f f6 1b d3 6f f7 3b e1 3f fb 2f fc 6f dc 3f 80 ff d9 3f ff 3e c0 1e 80 1f ff f5 83 f9 77 fb 2f c9 df 3b ff 1e fa 9f f2 9f 94 9f de fa 02 75 4f fd 6f 42 7f 99 fd ec fc bf f8 bf da ff ef df 01 7f c8 f1 9f e5 07 fa 3e a0 bf 93 ff 44 ff 2d fd b3 f6 ab f3 77 dd 87 fa ef 0f 3b 4d e8 23 ec 7f d4 bf d1 7f 7a fd d1 ff 27 e9 ad fe 2f a3 ff 61 bf d7 7d c7 7d 80 ff 34 Data Ascii: RIFFh(WEBPVP8 \(*>QDT8c ?`^qx?7_`?]O\_>?VC~zQGOo;?/o??>w/;uOoB>D-w;M#z'/a}}4
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 0a ae fe e9 d1 ed e2 51 21 bd 10 6e 4a 5d a3 aa 53 5e c6 2c 0a 4d 3d 64 38 c1 65 a7 41 12 4d fd 32 f1 9c 47 fe 67 76 62 a8 1d 7e a5 cd 09 c3 82 1c ff 5e b7 57 7e 0d af 6a 4c b0 40 fb 5a ed 86 38 5e 1a 67 4d ce 7a 5f 8b 09 fa e9 03 78 66 51 6c 3d f2 91 3b dc 3f 33 2c e4 d3 7d 99 93 ba b6 bd e9 60 3e 6b e3 f2 30 7d c5 ae b9 4a 09 cc fb 82 c9 43 cd 40 bb 2e c1 8e 33 62 62 b3 c2 f1 55 10 ed 01 9b cb 27 dc 29 00 e2 2c a6 1c ff 50 8e ec 13 d5 37 93 bc 51 26 0c 01 28 c8 81 bc 0d 20 39 f2 97 42 a9 37 04 3f 79 d3 a9 d2 43 d7 dc 6b 01 78 6d e3 c3 20 40 05 7d c2 84 cc 4f 03 5b 5d d8 0e 77 30 54 e4 1d 8c b9 58 97 9d 37 d7 7a b3 6c 1f 5f 35 ef de 90 a2 54 76 dd de e9 2d 80 25 65 c9 0b c9 b2 81 d2 ab ed e4 86 9f af 09 66 88 61 27 f4 ac 10 75 ad da 41 3b 13 22 6d 29 8b Data Ascii: Q!nJ]S^,M=d8eAM2Ggvb~^W~jL@Z8^gMz_xfQl=;?3,}`>k0}JC@.3bbU'),P7Q&( 9B7?yCkxm @}O[]w0TX7zl_5Tv-%efa'uA;"m)
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 8b 13 22 e8 a8 5b 34 55 5d ff c4 ae bf ef 8d 30 94 d8 16 1d ee 6f 1c 9e e2 78 ac 02 ce cc d5 95 77 bb f3 ef a2 5a 35 d5 95 e7 85 4f 37 5a 03 01 fc a6 b7 b8 90 04 eb 38 45 60 4f a8 ec 2a ca 21 82 85 d2 cf b0 f1 7c 5d f0 65 b2 f0 2f fa 8a 07 0c c8 5c 7f d1 e9 dd a8 18 b2 71 88 5f d9 5d 69 7c 91 d5 2f ff 01 d3 18 08 f1 b9 1f 0c 4c 2d 3a 43 33 47 70 14 ea 3d d7 69 72 b7 a8 4d ad c1 aa 60 75 2d 2a e8 b2 0c ab 7c 6d 2c 84 f4 42 f7 6a 2c 3a b3 a0 5f 48 d1 c6 78 75 80 e6 27 27 26 f8 25 59 a6 e1 13 d7 f5 d7 d8 99 de 33 db ed dd 8e 1c 64 2b 2e a4 5a 83 59 05 c6 d0 32 c1 a6 b3 2e 31 a0 c8 31 a8 47 69 74 f8 6c 14 67 e0 de ea f9 cc 98 13 71 be ff 19 1a 95 2a 1d 20 ca 3b 8b 13 e9 1b 57 72 02 3e e4 d1 92 f2 12 ae 40 2c f7 26 1e 03 c2 b6 54 5c b7 dd bc 30 a8 b2 e8 4e 16 Data Ascii: "[4U]0oxwZ5O7Z8E`O!\|]e/\q_]i\|/L-:C3Gp=irM`u-\|m,Bj,:_Hxu''&%Y3d+.ZY2.11Gitlgq* ;Wr>@,&T\0N
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 84 10 89 2d 0c c5 b0 bb 31 47 7e bb 03 ab 33 ef 8f c7 9e c9 58 02 bd 43 1c 4b 02 b4 83 85 42 56 18 0e 06 7b e8 07 57 69 d9 c9 91 36 c0 b5 96 f7 66 8e 80 7d 1e b4 79 aa d2 12 59 83 f3 b6 00 3b ee 17 53 23 03 12 26 73 6b d9 03 68 b1 b1 79 ef 8b 7e 88 09 7c 21 08 cf f4 7e 76 22 86 47 b0 3b d4 1f 1e 3f 7d 37 0a ea 29 b7 44 c6 b9 22 53 7a bf 96 a3 63 2d ad e9 f0 80 4d 3d d5 31 9f 0c c7 ce b2 26 6d a6 cd 48 76 8b b0 7c 89 eb 9e 81 81 eb 52 39 ef f1 cf cf 22 35 80 0f 80 de a2 68 0f aa 5c 35 40 79 d8 4a ef 1b 88 b3 f3 90 99 af f3 6c bb a9 d2 96 11 f2 f9 b0 4c 73 37 8c c0 df fd ad c6 75 87 fc df 70 30 33 e6 b5 88 b7 00 55 f4 49 c2 55 6b 2e 03 be fe 0e bb 0d ec f2 28 48 45 31 8f ff c8 42 0d 9e 14 dd a1 6f 3f 74 b5 b2 0f 59 00 32 fa c5 9a 37 09 28 a1 93 5a ce 40 b0 Data Ascii: -1G~3XCKBV{Wi6f}yY;S#&skhy~\|!~v"G;?}7)D"Szc-M=1&mHv\|R9"5h\5@yJlLs7up03UIUk.(HE1Bo?tY27(Z@
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: bc a6 8a 41 0c 16 e8 25 9c 5f bf 29 cb b0 86 a5 22 cc b8 68 b5 17 6b 8d 1e b1 63 57 b3 a4 32 c0 00 d1 8a 3d 31 c6 7b c6 81 56 be a0 3d 02 ba 03 d3 f6 2a bd eb a2 7a a9 bf cb f1 29 e8 d6 6d 11 64 91 8c 20 fc 47 2f 9b 6f 27 cc 10 6b 9e cc d6 3b 0b 71 2d 47 a7 c9 ec ad 17 51 8b 7a 83 35 d3 3b 41 2d d7 c4 bf c3 e7 0f 5f f9 15 c0 1a cf 60 35 af be c5 6c f2 ac 6d 10 d4 27 9a 91 72 43 6a c4 d6 00 e3 af 4a b2 bb 43 cf 73 be 73 c9 b3 fb 65 a0 0a 6f a1 79 4a 7f f2 dd bf fa fc b0 df 54 32 68 8b 43 6c 4d b8 16 3d e8 3a 74 aa 63 7b 8e 07 c9 41 f3 e2 4e 39 72 bb cb 65 45 9b b0 a4 f4 c5 d0 53 44 b8 46 13 44 82 26 a9 e2 86 35 ce 54 26 30 75 5d 81 f8 29 ce 1a be 0a 8b cb 8e 1a 24 8d 44 68 61 2d 8e f9 4a ab b7 73 59 7d c9 fe 75 72 ac 7c 26 cd 44 31 79 69 43 ec 0b 9d 47 17 Data Ascii: A%_)"hkcW2=1{V=*z)md G/o'k;q-GQz5;A-_`5lm'rCjJCsseoyJT2hClM=:tc{AN9reESDFD&5T&0u])$Dha-JsY}ur\|&D1yiCG
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: 45 24 4b 28 32 3a c8 3a 25 da af 24 ef c6 12 03 b9 31 4c 76 0f db bd f5 22 69 17 32 ca 05 65 96 f2 4b 0f b2 6b b9 82 59 6b 26 69 94 21 18 07 20 73 8a 24 62 9c c2 6c ee 02 f8 0c ff 0d 28 34 b9 1e e6 4f 4f b3 b3 93 29 fb 51 b1 b8 4c 86 64 77 17 3d ed b4 e4 87 15 10 9d 17 08 00 a2 20 01 ab 4a 28 92 4c 5b fa 0b 67 4e c8 f3 e7 59 6d eb cb 2b 2f 52 6c f5 26 1a 04 27 69 f1 62 06 fc a1 65 f1 af a0 a0 98 b5 aa 53 99 e9 ec 15 ef d1 42 db 5a 7f a2 e7 65 19 5d f2 e3 f0 2f b0 ee 99 50 0c 02 df cf e5 09 ea 8b f6 0d ac b7 ed 42 44 70 31 ec 53 07 3e 55 b0 5d 58 40 9f 38 25 3a 5d ff b7 86 56 63 4a 60 33 87 05 2e 13 86 e8 bc 8f c9 84 28 75 56 96 f0 7d 7c e4 4d 10 81 56 92 24 b8 e4 41 23 a1 51 ef 3e 1b c4 e9 14 4f 2e 47 e4 a9 89 e8 24 8f f6 61 9a d6 66 cf a2 9a eb 6c 87 8e Data Ascii: E$K(2::%$1Lv"i2eKkYk&i! s$bl(4OO)QLdw= J(L[gNYm+/Rl&'ibeSBZe]/PBDp1S>U]X@8%:]VcJ`3.(uV}\|MV$A#Q>O.G$afl
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: c8 1f a8 fa fb 5a f1 32 09 9a 1f fb cd e8 e9 f4 c4 ff d2 01 e8 1e 79 18 ac fe 20 c4 5a 21 d6 65 f7 73 3e cd 8e 21 df b4 ad bb 21 b3 d5 95 3e d8 f6 eb b7 a9 74 c3 d5 fa 1a 03 48 68 21 c4 16 24 fd 0f bf 89 19 8b 23 24 8c ef 51 ae bb 32 7a 12 6d 45 e8 8f a3 ee ee b4 65 ad dd f0 4c 63 64 4e 49 cf c2 f1 d3 4f 1c 86 93 6c 9d f4 6a a5 ab 6f 39 e9 15 31 88 cf fa df fe 99 66 4f 12 7f 37 a3 f2 53 d0 4c a2 96 87 f2 12 e4 e0 6c 86 f5 ce ed 6f 87 63 df c8 7a 85 3e 97 85 50 c9 10 57 1b 48 4f 82 67 c2 00 e4 a5 f2 1f 19 50 13 70 6b c9 ed 85 43 3c 60 23 34 cf 62 96 81 84 c6 51 c8 69 bb 69 d5 62 42 19 80 a0 7c 73 e4 27 d3 33 14 fc 20 b7 75 0b 38 5c 6e c6 4e 9c 85 aa 2e 0c c2 41 e8 65 f7 29 ec 86 43 30 13 99 29 27 93 d6 f2 bc 9d c9 a3 c8 a9 ed c4 1a c0 55 ca 1a 24 8d 0b be Data Ascii: Z2y Z!es>!!>tHh!$#$Q2zmEeLcdNIOljo91fO7SLlocz>PWHOgPpkC<`#4bQiibB\|s'3 u8\nN.Ae)C0)'U$
2024-05-25 23:00:37 UTC	1269	IN	Data Raw: 06 45 f2 76 0b 68 67 c2 d9 8a 9a 29 7b bb 9d a1 78 54 18 83 ed 7e 69 b9 05 44 c5 51 8d 0b 5d f5 db 93 03 37 62 9a eb 1a 2e d8 29 33 b3 96 ff 7e ce 66 a6 44 df 9c f8 2b 1b b5 78 54 e4 e9 5d e4 85 3b 1c 33 f3 5f aa cf 9d 9f a3 b4 a1 bf aa 2e 1a 66 0c 32 11 22 b9 84 18 42 d6 38 89 5a 56 fe 8f 99 eb 79 b4 25 9c e3 5d 87 be 6a 77 71 03 34 a0 1e 4d d9 3b a1 56 eb 29 8f 42 77 f3 9f 66 fc 22 15 f0 fc 14 b6 24 03 bd 25 d3 f9 df 78 29 1d 74 80 f9 df 01 70 d1 ff 92 cc 92 1f e2 11 27 d6 aa 64 cb 53 26 ac 13 95 93 4e c1 87 42 ba fd c5 b6 d6 e3 59 46 38 32 bd a4 c9 8b c3 ea 37 e8 53 56 18 09 56 cc a8 e3 18 c2 4f e8 d6 11 e0 0c fb 5e a4 c0 d5 4b 36 67 6c 02 f5 0d 93 08 82 ce b9 11 59 74 22 b7 b7 47 a9 d0 dc ef 6f 9e 7e 83 9f fa f6 be 67 36 6e f1 b8 56 49 9a 2c f0 94 a2 Data Ascii: Evhg){xT~iDQ]7b.)3~fD+xT];3_.f2"B8ZVy%]jwq4M;V)Bwf"$%x)tp'dS&NBYF827SVVO^K6glYt"Go~g6nVI,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.6	59301	142.250.184.246	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:36 UTC	1107	OUT	GET /vi/jxuUMURYxTk/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLBu-FJQRllUvGNmQ-LUjLbFqPwSFg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:37 UTC	646	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 2870 Date: Sat, 25 May 2024 23:00:37 GMT Expires: Sun, 26 May 2024 01:00:37 GMT Cache-Control: public, max-age=7200 ETag: "1514451831" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:37 UTC	744	IN	Data Raw: 52 49 46 46 2e 0b 00 00 57 45 42 50 56 50 38 20 22 0b 00 00 50 37 00 9d 01 2a f6 00 8a 00 3e 51 28 91 46 23 a2 a1 a1 22 b4 09 b0 70 0a 09 63 6e e1 6f cb f0 28 e6 9f 1f 77 f3 4f b6 7f 8a f1 d7 d8 bc 57 fb 10 fe 1f b0 5f 41 5f 9f 3d 80 3f 59 7f d6 fa 20 7f 8e f6 1d fa df f9 01 f0 03 f5 9b f6 cb dd 37 fc 47 fc 8f 61 df e0 bd 40 3f aa 7f b2 eb 31 f4 14 f2 dd fd d6 f8 57 fd bb fd 9b f8 0d fd 75 ff e9 ac 93 e5 cf e8 1d bd f8 07 d7 7f d9 6e 5b 5d 41 e2 7f ef df ed ff 29 3f 26 79 fb de 33 fc e7 fc 66 f3 1c d2 fa 81 7b 67 f6 df f6 df 94 bf 90 1e dc 5a 8a 5e ab fe b3 f2 5b 99 6a 80 1f 98 bf d8 fd d5 7c 9f ff 99 fe 6b f1 e7 dc 4f d2 9f f9 bd c2 ff 9a 7f 5e ff 69 f9 b7 fe 33 c1 9f a2 c7 ed 90 ce 10 23 4c 3d bb 97 a4 bb 65 9d 5e 63 0f 6e e5 96 6d 26 30 f6 ee 5e 8b 7b Data Ascii: RIFF.WEBPVP8 "P7*>Q(F#"pcno(wOW_A_=?Y 7Ga@?1Wun[]A)?&y3f{gZ^[j\|kO^i3#L=e^cnm&0^{
2024-05-25 23:00:37 UTC	1390	IN	Data Raw: ec c2 1d 02 04 27 a9 2d fb ba 4c 85 da e5 b0 3a 46 ff d9 51 aa d0 5e 6f fc d1 1b 0b 45 fe 12 4d b5 99 38 13 e1 04 1f e3 1e 3f 8b ab e8 8e 32 7a 5a e5 86 4f e7 88 55 90 33 a8 ce 2f 91 26 fd 3f 9e 90 a7 7b c8 c4 24 35 96 0b 99 96 23 51 b8 df 31 7d 01 27 fc 14 40 9e e3 f5 32 7c 25 c4 f7 25 77 1a 8a e4 ef 40 88 be 95 71 dd 9b 1f b1 d1 5c 0b 2f 64 c5 7f 84 4e 9b 90 83 72 85 b7 6c 55 ce c0 ef 02 f5 ad b5 0b 53 b1 26 4c 8a 29 6b 85 a7 38 7e 41 1b e1 62 78 12 3b 2f 75 d0 30 c6 29 6b 7f 85 21 f1 b8 b8 85 89 ac de db 57 d6 d8 0c af 0a bc 62 a9 5c 9a dc 00 88 88 20 3f 3a c0 c4 7d 08 49 c8 7f a8 5f 96 bf 79 a1 93 9b fa 76 a8 d7 6b f7 fe 0b 51 b8 84 d5 59 cb ff 96 6a 6c 8b e2 e9 d7 f5 68 66 b3 4e 89 4d 9e 40 f3 50 13 42 76 6f bf bf fb 8c 07 8a 4a 8e 92 f6 ac 1d 73 b1 Data Ascii: '-L:FQ^oEM8?2zZOU3/&?{$5#Q1}'@2\|%%w@q\/dNrlUS&L)k8~Abx;/u0)k!Wb\ ?:}I_yvkQYjlhfNM@PBvoJs
2024-05-25 23:00:37 UTC	736	IN	Data Raw: 08 f6 5c 63 b8 83 07 d1 f3 d3 9f 71 41 b2 1a be 2e 1f d8 5e 08 39 af 53 db 9b cb f2 15 5e bf 35 07 6f a1 a1 fc 32 86 4a 82 cb 6c c7 e3 63 fb ef d4 21 fd 0c de af 08 53 58 de a6 62 a3 23 fa b6 be 8a 3a b0 a2 cd 32 da b0 ce 5b 16 63 2e 11 ad be 88 4f a5 57 fc 01 2b 82 fe 19 0d ff 6c 1d 63 82 21 bb 23 50 79 66 df 62 6f b3 84 66 12 2c 46 12 57 86 42 de d0 eb f4 51 55 e2 0b 26 55 e2 66 6c 3d cf 20 39 11 72 44 25 a5 ff 09 f4 99 64 74 e6 7c 90 ba 51 10 9b 88 3f 16 7f b7 5e 71 ff 24 79 85 fc f8 19 43 2b e5 6d 08 1a 0c 11 3f 41 d5 c5 1d 49 72 79 5c 5e e2 d9 5e 60 23 5b 39 de f2 b1 77 05 85 c9 92 67 04 57 ae 2b 5d bb 4e 4a 27 76 e6 2e 4b 92 4d f9 85 e4 2c 45 bf b7 b9 00 70 04 a6 67 a3 a1 3b e7 9b f7 60 0d 44 33 cc d2 f8 4e 0e 9a 73 35 9d 2f 8d 0f 99 4a 57 e8 db bf Data Ascii: \cqA.^9S^5o2Jlc!SXb#:2[c.OW+lc!#Pyfbof,FWBQU&Ufl= 9rD%dt\|Q?^q$yC+m?AIry\^^`#[9wgW+]NJ'v.KM,Epg;`D3Ns5/JW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.6	59284	142.250.185.194	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:37 UTC	982	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:37 UTC	766	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Date: Sat, 25 May 2024 23:00:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.6	59290	209.85.165.138	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:37 UTC	1907	OUT	GET /videoplayback?expire=2084972247&ei=hKdJZeO7KUwF4FO0xP912cA&ip=17.28.87.40&id=o-AF3UPRDR6kwoBZYP7xFM0QJaAAP023kI9uHvuI6jZiJc9&itag=18&source=youtube&requiressl=yes&mh=X6&mm=176%2C38672%2C78489&mn=jZI31%2CxRsVL%2COpNcx&ms=jZI31%2CxRsVL%2COpNcx&mv=D&mvi=5&pl=45&ctier=L&initcwndbps=3789802&siu=5&spc=EHFu4S-pELXaUxqU3UD7dcpDAKe8Szp7Qg8UoxUSWd7i&vprv=5&svpuc=5&mime=video%2Fmp4&ns=iEZciFFzjfedNEp1g7fD6bHG&cnr=45&ratebypass=yes&dur=97197914&lmt=5648562622015301&mt=2084972247&fvip=3&c=WEB&txp=3789802&n=yPnmMBsShnIXoVDQ&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=OxnxRW0rN-WMwnFKj5bUfwDc8RJUrndMLWQlirfdvfZE9S4zFUq0IJTsbSZQEyaqE4ud3PgfpRgzM9SCBaH3fqHVzvBtrpi4ZDYuJdcvxfK5&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=OxnxRW0rN-WMwnFKj5bUfwDc8RJUrndMLWQlirfdvfZE9S4zFUq0IJTsbSZQEyaqE4ud3PgfpRgzM9SCBaH3fqHVzvBtrpi4ZDYuJdcvxfK5 HTTP/1.1 Host: rr5---sn-q4flrn7y.googlevideo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:37 UTC	785	IN	HTTP/1.1 403 Forbidden Last-Modified: Wed, 02 May 2007 10:26:10 GMT Content-Type: text/plain Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Date: Sat, 25 May 2024 23:00:37 GMT Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.6	59289	209.85.165.138	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:37 UTC	1899	OUT	GET /videoplayback?expire=2084972247&ei=hKdJZeO7KUwF4FO0xP912cA&ip=17.28.87.40&id=o-AF3UPRDR6kwoBZYP7xFM0QJaAAP023kI9uHvuI6jZiJc9&itag=18&source=youtube&requiressl=yes&mh=X6&mm=176%2C38672%2C78489&mn=jZI31%2CxRsVL%2COpNcx&ms=jZI31%2CxRsVL%2COpNcx&mv=D&mvi=5&pl=45&initcwndbps=3789802&siu=5&spc=EHFu4S-pELXaUxqU3UD7dcpDAKe8Szp7Qg8UoxUSWd7i&vprv=5&svpuc=5&mime=video%2Fmp4&ns=iEZciFFzjfedNEp1g7fD6bHG&cnr=45&ratebypass=yes&dur=97197914&lmt=5648562622015301&mt=2084972247&fvip=3&c=WEB&txp=3789802&n=yPnmMBsShnIXoVDQ&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=OxnxRW0rN-WMwnFKj5bUfwDc8RJUrndMLWQlirfdvfZE9S4zFUq0IJTsbSZQEyaqE4ud3PgfpRgzM9SCBaH3fqHVzvBtrpi4ZDYuJdcvxfK5&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=OxnxRW0rN-WMwnFKj5bUfwDc8RJUrndMLWQlirfdvfZE9S4zFUq0IJTsbSZQEyaqE4ud3PgfpRgzM9SCBaH3fqHVzvBtrpi4ZDYuJdcvxfK5 HTTP/1.1 Host: rr5---sn-q4flrn7y.googlevideo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:37 UTC	785	IN	HTTP/1.1 403 Forbidden Last-Modified: Wed, 02 May 2007 10:26:10 GMT Content-Type: text/plain Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Date: Sat, 25 May 2024 23:00:37 GMT Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.6	59307	142.250.186.174	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:37 UTC	999	OUT	GET / HTTP/1.1 Host: youtube.com Connection: keep-alive Pragma: no-cache Cache-Control: no-cache sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:37 UTC	1660	IN	HTTP/1.1 301 Moved Permanently Content-Type: application/binary X-Content-Type-Options: nosniff Expires: Sat, 25 May 2024 23:00:37 GMT Date: Sat, 25 May 2024 23:00:37 GMT Cache-Control: private, max-age=31536000 Location: https://www.youtube.com/ X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="youtube_main" Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Server: ESF Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.6	59305	142.250.186.129	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:37 UTC	1104	OUT	GET /dk73p6C27bkfmV5NMayA05oaT5XMgc0K8QHs6Flf4XuhKNqxjANXo78d712mysuU5fk51JTxKxU=s160-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:38 UTC	531	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sun, 26 May 2024 23:00:37 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="channels4_profile.jpg" X-Content-Type-Options: nosniff Date: Sat, 25 May 2024 23:00:37 GMT Server: fife Content-Length: 5761 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:38 UTC	859	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 08 0a 07 08 08 08 08 08 08 09 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 08 08 08 08 0a 0a 09 08 08 0b 0d 0a 08 0c 08 08 0a 08 01 03 04 04 06 05 06 09 06 06 0a 0f 0d 0a 0e 0d 0a 0d 0d 0d 0f 0d 0f 0d 0e 0d 10 0f 0d 0d 0e 0d 0d 0e 0e 0e 0d 0d 0f 0d 0a 0e 0d 0d 0d 0e 0d 0f 10 0d 0d 0f 10 0d 0d 0d 0e 0d 0f 0d 0e 0e 0d 0e 0e ff c0 00 11 08 00 a0 00 a0 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 08 09 06 07 02 04 05 03 01 ff c4 00 3e 10 00 02 02 01 03 02 04 04 03 03 08 0b 00 00 00 00 01 02 03 04 00 05 11 12 06 13 07 08 21 31 09 14 22 41 15 23 32 24 51 61 19 33 34 42 55 81 Data Ascii: JFIF>!1"A#2$Qa34BU
2024-05-25 23:00:38 UTC	1390	IN	Data Raw: a4 17 44 60 8e c8 0e ec a8 e5 5c 2b 32 ee 15 8a 38 04 83 c5 b6 d8 e9 37 68 b6 8d 26 da 8b 6b b8 d8 1e 60 bc 21 3a 56 af 62 8f 23 2d 72 b1 d9 a3 3b 71 3f 35 a7 d9 5e e5 49 c9 50 14 b1 8c f6 e4 2a aa bd e8 e5 00 00 06 71 a5 3e d2 36 97 32 36 1e aa ad 0f ab 3e 23 c3 9f 30 fa ee 9b c7 f0 dd 5a ed 54 51 c5 61 13 19 6a 81 e9 ed 52 c0 96 af db df b3 b8 f5 f5 f5 3b e6 54 22 f2 dd e5 ab 09 e1 29 cb 85 bc 8b 74 f2 59 e6 c2 3e a0 d3 58 cc 12 1d 4a 9f 14 bd 02 7a 23 86 fe 6e e4 0a 59 98 41 3e c5 4a b1 de 29 96 44 fa 97 b4 f2 40 94 5c 5d 99 45 5a 93 a5 2d 96 48 9c c1 c0 60 0c 01 80 30 06 00 c0 18 03 00 c6 7c 4a f1 1a a6 9b a7 d9 d4 6f 4a 22 ad 56 33 24 8d e8 59 8e e1 52 28 d7 71 ce 69 9c ac 71 a0 f5 67 65 1f 7c c1 94 ae ec 8a 2a f1 fb c7 3b 7a de ad 36 a7 70 04 2e 04 Data Ascii: D`\+287h&k`!:Vb#-r;q?5^IPq>626>#0ZTQajR;T")tY>XJz#nYA>J)D@\]EZ-H`0\|JoJ"V3$YR(qiqge\|;z6p.
2024-05-25 23:00:38 UTC	1390	IN	Data Raw: d8 d4 cf 65 9f 3b 3e 21 f8 67 63 63 2b 74 9b 9f b7 7e a5 14 3f fb 6b a9 19 ce 4d 64 ce 72 da 5b 99 b4 bc 0a 5e 96 fd a4 f4 df e0 7b fe 57 cd fe 11 f2 7c f6 fa fb 3f 31 f2 bf 50 5d fb bd b1 26 c3 7e e7 1f 5e 58 8e cf 03 43 d7 f1 8b c0 3d 23 59 81 20 d5 69 25 a5 88 b1 86 4e 4f 14 f0 17 e3 cf b3 62 16 49 a3 0f c1 39 a2 bf 07 e0 bc 95 b8 8d b7 36 8c 9c 72 76 21 ef 88 5f 08 9a 2f c9 b4 ad 5a cd 52 59 98 43 7a 18 ee 44 01 dc 88 d2 48 7e 56 58 d5 7d 00 69 05 96 e2 3d 79 1d c9 ea ab 4d 71 bf 9e 91 36 18 da 91 cf 79 0d bc 60 f2 49 d4 9a 50 2f 67 4f 7b 30 2f bd bd 3b 95 ca e0 6c 49 2e 11 16 c4 08 00 f5 92 c5 78 50 7a 0e 47 71 bc 88 e2 13 fe 4a de eb 5c 8b 1a 78 d8 4b 74 b7 32 56 7c 2e bc d4 b3 91 d3 57 a5 2e 02 49 2e 8f 2b b0 3b 2c 63 9c da 78 3f a9 82 a8 7b 15 c7 Data Ascii: e;>!gcc+t~?kMdr[^{W\|?1P]&~^XC=#Y i%NObI96rv!_/ZRYCzDH~VX}i=yMq6y`IP/gO{0/;lI.xPzGqJ\xKt2V\|.W.I.+;,cx?{
2024-05-25 23:00:38 UTC	1390	IN	Data Raw: 06 1d 78 7f 75 cf ae bf 05 5e 36 85 d7 68 b3 e2 76 fe 25 9e 04 fe 1d d4 46 f4 29 c6 ae b2 24 b4 bc 40 0a 97 50 a8 bd 1e c0 00 39 bb c7 6b 72 77 66 b1 26 df a0 ec c3 cb 38 f3 ea 30 15 2e 9c 1f 0c 88 8f 93 4b 51 80 30 0c d3 c1 4f 0e 5b 53 d6 f4 dd 31 54 b0 bb 72 18 65 e2 76 2b 5b 97 3b 72 03 b8 db b5 55 26 93 f7 fd 1e 80 9d 81 8f 5d da 0d 77 ee d7 2b 91 71 53 d9 a6 fc 77 6b 91 67 3f 14 2f 19 d6 8f 4f c5 a4 c0 78 4d ab b1 88 aa ee 3b 7a 75 5e db 58 f6 04 01 2b 34 15 b8 12 39 c5 24 fb 6f c1 b2 15 38 ed 49 22 93 0b 4f 6e a2 4f 2c d9 52 59 6a 7a 53 f1 9b 30 dd b7 b3 0d db 7b 2d 2f e1 d3 e4 b4 d3 8e 3d 7f 56 83 8d d9 57 7d 36 ac a3 ea a5 03 af f4 a9 50 8f a2 dc ea 48 44 3f 54 10 37 d5 c6 49 a4 48 6b 2a 54 db 7e 1c 3a 9e 7b 15 88 ed 5d 96 4b 57 27 b6 73 20 8c 01 Data Ascii: xu^6hv%F)$@P9krwf&80.KQ0O[S1Trev+[;rU&]w+qSwkg?/OxM;zu^X+49$o8I"OnO,RYjzS0{-/=VW}6PHD?T7IHk*T~:{]KW's
2024-05-25 23:00:38 UTC	732	IN	Data Raw: 63 4c 9f 4d be 85 a2 98 06 49 13 61 35 69 d3 73 15 88 18 83 c6 58 98 fd c1 57 52 f1 ba bc 72 48 ac f2 36 8c 9c 5d d6 65 1c f8 ef e0 8d dd 17 55 9b 4d ba 01 78 f6 78 67 50 44 56 ab 39 61 15 98 b7 dc 85 7e 2c ac 84 93 1c 8b 22 12 4a 6e 6c 69 54 db 5b f3 3d 26 1e b7 6b 1b f1 e2 6b fc ee 4a 24 17 93 7b f1 d2 b9 a9 75 1c e8 1e 3e 9e d3 65 b1 02 92 42 c9 aa 5f 3f 87 e9 90 30 01 8f 19 5a 69 d8 b7 12 10 45 cc ec 17 20 62 5d da 8a f3 fc 2f c9 55 8d 7b 4e 34 d6 79 f4 fc 98 0f 84 3e 14 ea 3a f6 b2 94 ab 93 2d 9b 72 49 62 d5 99 06 eb 14 6d 20 6b 57 6c 71 db e9 0f 26 e4 0d 8c 92 c8 91 8d 9a 45 ce d2 92 a5 14 96 7a bb 24 54 a8 b0 f4 d2 59 f0 ea 5d f7 81 de 09 51 d1 74 c8 74 da 09 c6 34 fa e5 95 80 ef 5a b0 c1 44 b6 6c 30 03 94 b2 71 50 07 e9 8e 35 8e 34 0a 91 a2 88 1e Data Ascii: cLMIa5isXWRrH6]eUMxxgPDV9a~,"JnliT[=&kkJ${u>eB_?0ZiE b]/U{N4y>:-rIbm kWlq&Ez$TY]Qtt4ZDl0qP54

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.6	59304	142.250.186.129	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:37 UTC	1133	OUT	GET /MMiaEh74vF-aNPK4AaYN7dI5UnvGz6UShkgEnPmZSb3m97mf81-I9OjIWNYeqy8i4nXUW4fbqac=w1138-fcrop64=1,00005a57ffffa5a8-k-c0xffffffff-no-nd-rj HTTP/1.1 Host: yt3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:38 UTC	531	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sun, 26 May 2024 23:00:38 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="channels4_banner.jpg" X-Content-Type-Options: nosniff Date: Sat, 25 May 2024 23:00:38 GMT Server: fife Content-Length: 28593 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:38 UTC	859	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 08 08 08 08 0a 09 09 08 08 0b 0d 0a 08 0d 08 08 09 08 01 03 04 04 06 05 06 0a 06 06 0a 0d 0e 0b 0e 10 10 10 0e 0e 0f 0f 10 10 10 10 0f 0f 0d 0d 0d 10 0d 0f 0f 0d 0f 0d 0e 0d 10 0e 10 0d 0d 0d 0d 10 10 0d 0d 0d 0d 0d 0f 0d 0e 0d 10 0d 0d 0d 0d 0d 0d ff c0 00 11 08 00 bc 04 72 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 01 00 02 03 00 03 01 01 00 00 00 00 00 00 00 00 00 07 08 05 06 09 01 03 04 02 0a ff c4 00 60 10 00 02 02 01 02 03 04 04 06 09 0d 0d 04 09 05 00 01 02 00 03 04 05 11 06 12 21 07 13 31 41 08 22 51 61 14 23 32 52 71 81 09 42 55 62 72 Data Ascii: JFIFr"`!1A"Qa#2RqBUbr
2024-05-25 23:00:38 UTC	1390	IN	Data Raw: dd 24 71 b1 ce 22 d7 75 ee 07 21 63 95 f8 e5 c0 2d e6 17 8a bb 0e 79 7b 18 d7 13 95 cd ee 07 21 63 c7 8e 4a 16 e0 fe cf ec ba cf 8e 47 ae a4 23 9b 99 4a b3 9f 24 5d c7 87 ce 61 e0 3a 0e a7 a4 cd 4d 21 40 55 01 55 40 0a 07 40 00 e8 00 1e c0 27 ee 25 31 9c 6e 7c 56 40 f9 72 68 f6 5a 34 1c cf 52 79 f2 c9 53 14 c5 a6 c4 5e 1d 26 40 68 d1 a0 e6 7a 93 fe 89 11 13 9e 5a 44 88 88 44 88 88 44 88 88 44 88 88 44 88 88 44 88 88 44 88 88 44 88 9e bb ef 0a a5 98 85 55 04 92 4e c0 01 d4 92 7d 82 54 02 4d 82 a8 17 c8 2f 64 d5 b8 b3 8f ea c6 dd 07 c6 5d f3 01 e8 bf e9 1b ed 7e 81 bb 1f 60 f1 9a 87 16 f6 a4 cf bd 78 db a2 78 1b 4f 47 6f c0 1f 68 3d e7 d6 fc 19 1f 93 fc bd 4f bc 9f 12 7d e6 4a d8 1e c5 b9 f6 9b 10 c8 70 8f 89 fd a3 c3 c0 67 cc 8d 14 8b 84 ec b3 9f 69 6b 72 Data Ascii: $q"u!c-y{!cJG#J$]a:M!@UU@@'%1n\|V@rhZ4RyS^&@hzZDDDDDDDDUN}TM/d]~`xxOGoh=O}Jpgikr
2024-05-25 23:00:38 UTC	1390	IN	Data Raw: 13 4a c4 01 b7 56 7a bd 7c db db fc f5 b9 4c e9 61 25 8b 1a 43 12 49 33 d1 5b 39 b1 f4 b4 ee 82 2a d8 9a fa 87 03 2c 81 d7 22 38 c7 75 ad dd b8 05 ce 71 1e d0 77 b2 f0 3d 9b 9f bb 19 77 00 7c 7c bf 1f 67 35 f0 e5 fa 67 f1 5b b1 73 ae e7 02 dd 48 43 4d 6b ec e8 95 d2 a8 a3 dc aa 04 f4 9f 4c 6e 2a fb bd a8 7e 71 3f e9 c8 70 d8 36 e6 df d5 24 80 de 5b 8d 89 1b f8 6e 01 04 8f 78 f6 cf c7 c2 57 e7 2f e5 12 63 18 2e 1f c2 9a 1f e1 b3 fc ab 37 72 2e 9e f5 7d 35 5f 4d 6e 24 d0 57 4a be cb d3 59 d3 b5 5d 3a 9c dc 77 cf a2 aa af 5b 00 15 e5 e2 f7 f8 8b 5e ed 8f 70 1b 9b 12 d6 e5 b6 bf 5b c6 5a df 44 cf 4c fc 4e 28 17 52 68 18 3a 86 3a f7 8f 88 6e 17 2d b4 6e 17 bf c7 b0 d7 53 3a ab 15 5b 10 a7 35 65 97 72 c1 95 8d 36 ec 7b 81 3f f4 93 80 73 70 aa 50 f9 fc 3f a8 5f Data Ascii: JVz\|La%CI3[9,"8uqw=w\|\|g5g[sHCMkLn~q?p6$[nxW/c.7r.}5_Mn$WJY]:w[^p[ZDLN(Rh::n-nS:[5er6{?spP?_
2024-05-25 23:00:38 UTC	1390	IN	Data Raw: 11 08 91 11 08 92 5c ec a3 87 4d 75 35 ee 36 6b b6 e4 f6 8a 87 50 7f 1c 9d ff 00 07 96 69 3c 03 c2 bf 09 bb d6 1f 13 5e cd 67 b1 8f da a0 fa 76 dc fb 14 7b c4 9c 40 91 3e da e3 21 ac fc df 11 cc d8 c9 d0 6a 1b e2 72 27 a5 b9 a8 e7 6a f1 50 d6 fa 94 67 33 62 fe 83 50 df 3d 4f 4b 73 5e 62 22 43 4a 2d 48 88 84 48 88 84 48 88 84 48 88 84 48 88 84 48 88 84 48 88 84 48 88 84 48 88 84 48 88 84 48 88 84 48 88 84 49 5f bd 2d 7b 30 d6 f5 dc 7a f4 8d 36 cc 7c 2c 1b f6 7d 4b 36 fb 1b 9d eb 56 dd 31 28 a2 a0 6c b0 33 28 7b b9 da 94 65 e5 4e 66 0d 60 16 06 40 fe 99 3c 09 ad e6 e9 0e 74 2c ec 8c 5c ba 39 ac 7c 7c 76 15 be 75 3c bb 3d 29 70 02 da af 51 eb d4 51 d4 3b 02 87 6e 75 74 de 60 72 18 eb a2 73 5f 1b 0e f6 4f 90 12 d6 9e 0e 20 72 39 8b f7 41 b1 39 0b a2 c0 fa 2f Data Ascii: \Mu56kPi<^gv{@>!jr'jPg3bP=OKs^b"CJ-HHHHHHHHHHHHI_-{0z6\|,}K6V1(l3({eNf`@<t,\9\|\|vu<=)pQQ;nut`rs_O r9A9/
2024-05-25 23:00:38 UTC	1390	IN	Data Raw: f9 35 83 e0 5b 6e a4 9f 25 dc 74 eb b8 e9 be 75 15 0c d5 b3 08 20 6d dc 7e 03 99 3c 00 fc 66 b3 29 29 25 ab 94 45 08 bb 8f e2 e7 90 59 fd 6f 5e ab 1d 39 ed 6e 51 e4 3c 59 8f b1 57 c4 9f e4 1e 64 48 87 8b 3b 41 b7 27 74 5d ea a7 e6 03 eb 38 ff 00 38 c3 c7 f0 47 4f 6f 34 d7 b5 1d 4a cb 9c d9 6b 17 73 e6 7c 87 b0 0f 05 1e e0 00 9f 34 9d 70 4d 94 a7 c3 ed 2c d6 7c bc fe 6b 7f 64 1f ac e7 c8 05 2e e1 3b 39 0d 15 a4 96 cf 93 9f 01 e0 3e d3 9f 2b 2c ef 04 68 9d fe 4d 68 46 e8 a7 bc 7f 67 2a 6c 76 3f 84 dc ab b7 be 4f 73 43 ec 93 44 e4 a5 ae 61 eb 5a db 2f fa 34 e8 3f 8c dc c7 e8 02 6f 92 35 db 0c 47 d6 ab cc 6d 3d d8 fb a3 c7 57 1f 7f 77 fa ab 84 da 7a df 59 ac 2c 07 ba ce e8 f1 f9 c7 df 97 92 44 44 e1 97 22 91 11 08 91 11 08 91 11 08 91 11 08 ab 3c fd e3 e3 b3 Data Ascii: 5[n%tu m~<f))%EYo^9nQ<YWdH;A't]88GOo4Jks\|4pM,\|kd.;9>+,hMhFg*lv?OsCDaZ/4?o5Gm=WwzY,DD"<
2024-05-25 23:00:38 UTC	1390	IN	Data Raw: 75 fc 5d 7f 40 f9 4d f8 cd b9 fa 39 66 bb 3d 23 b3 38 67 e6 fa 16 b5 c3 be fe f3 bc 4e 83 fa a2 c3 c6 fc d4 eb 80 61 fe a7 48 d0 e1 de 77 79 de 7a 0f 21 6f 3b a4 44 4e b1 74 69 3c a5 64 90 00 24 92 00 03 a9 24 f4 00 0f 69 33 c4 91 bb 2a e1 4e 63 f0 ab 07 45 24 52 0f 99 f0 6b 3e ae aa bb f9 ee 7c 81 9a 9c 57 12 8f 0e a6 75 44 9c 34 1c dc 74 1f 7f 21 73 c1 6b 71 1a e6 50 c0 e9 9f c3 41 cc f0 1f 7f 21 73 c1 6e 5c 15 c3 03 16 90 a7 63 63 fa d6 37 df 6d f2 47 de a8 e8 3e b3 e7 36 08 89 e6 2a aa 99 2a a5 74 f2 9b b9 c6 e4 fe 38 0d 07 20 a0 1a 89 df 51 23 a5 90 dd ce 37 3f 8f ab a2 44 44 c5 58 e9 11 10 89 11 10 89 11 10 89 11 10 89 11 10 89 11 10 89 11 3f 16 d8 00 24 f4 00 12 4f b0 01 b9 3f 92 00 be 41 54 0b e4 a3 5e d6 f8 8c 82 b8 c8 76 04 07 b7 6f 13 d7 d4 53 Data Ascii: u]@M9f=#8gNaHwyz!o;DNti<d$$i3NcE$Rk>\|WuD4t!skqPA!sn\cc7mG>6*t8 Q#7?DDX?$O?AT^voS
2024-05-25 23:00:38 UTC	1390	IN	Data Raw: 64 76 7a b4 80 48 f9 ce 00 8b 5c ee fd cc b7 66 e9 fc 7e 3f 1d 72 fd 82 76 15 85 c3 da 75 78 18 6b be c7 bc c8 bd 80 ef 72 b2 08 01 ee b0 81 ee 0a 89 e1 5a 05 51 e1 24 68 89 08 d4 54 49 53 2b a6 99 c5 cf 71 b9 27 52 4a f8 24 44 4c 74 49 ab f6 89 c4 1d c6 3b 6c 76 b2 dd eb 4d bc 46 e3 d6 6f c5 5d fa fc e2 b3 68 90 77 68 9a ff 00 7f 92 c0 1d eb ab e2 d3 d8 48 3e bb 7d 6d d3 e8 51 ef 9d 7e cb 61 7e bf 5c dd e1 dc 67 79 de 5a 0f 33 f0 05 74 db 3d 87 fa e5 5b 77 87 71 bd e7 79 68 3c cf c2 eb 57 02 79 88 9e 8e 53 92 44 4f 28 84 90 00 dc 92 00 03 c4 93 d0 01 ef 27 a4 22 cb 70 a7 0e b6 55 cb 58 e8 a3 d6 b1 be 6a 0f 1f c6 3e 03 df f4 19 3e 62 e3 2a 2a a2 00 aa 8a 15 40 f0 00 0d 80 fc 93 05 c0 fc 2e 31 69 00 81 de be cd 69 1e df 25 1e e4 07 6f 79 dc f9 cd 8a 79 db Data Ascii: dvzH\f~?rvuxkrZQ$hTIS+q'RJ$DLtI;lvMFo]hwhH>}mQ~a~\gyZ3t=[wqyh<WySDO('"pUXj>>b**@.1ii%oyy
2024-05-25 23:00:38 UTC	1390	IN	Data Raw: cc 8e 61 50 02 74 07 dc ae fc 48 bb b3 af 48 9d 3f 50 d1 17 5f 72 f8 18 04 5e ce d9 86 b5 7a 96 8b 5e a6 2f dd 3d aa 79 99 09 45 46 66 6d d4 6d b9 e5 90 26 bb f6 54 b8 7a ab 19 29 c6 d4 f2 90 78 5d 5d 34 d6 8d d4 8e 89 91 7d 56 8d f6 df d6 45 3b 11 d0 1d c0 ad 36 cf 62 55 52 49 14 10 3d ce 61 2d 7d 86 4d 70 c8 b4 9d 2f d2 ea a0 13 90 0a e6 44 a4 7f df 62 d0 fe e7 6a ff 00 c4 c3 fe d7 33 1c 19 f6 4e f4 6c ec cc 4c 2a f0 35 44 b3 33 2b 1f 12 b7 b1 71 02 2d 99 37 25 28 cf cb 94 cd c8 ac e0 b7 2a b1 d8 1d 81 f0 99 ef d8 fc 65 8d 2f 75 33 c0 02 e7 4d 07 9a b8 c6 e1 99 05 5c 48 95 3b b5 bf b2 37 a4 e8 fa 96 5e 99 91 81 a9 5b 76 1d 82 bb 2c a1 71 0d 4c 5a b4 b0 14 ef 32 6b 7d b9 5c 78 a0 eb bc f5 f6 59 f6 48 f4 9d 5b 51 c4 d3 68 c0 d4 ea bb 32 e1 4d 76 5c b8 82 Data Ascii: aPtHH?P_r^z^/=yEFfmm&Tz)x]]4}VE;6bURI=a-}Mp/Dbj3NlL5D3+q-7%(e/u3M\H;7^[v,qLZ2k}\xYH[Qh2Mv\
2024-05-25 23:00:38 UTC	1390	IN	Data Raw: 44 42 24 44 42 24 44 42 24 44 42 24 44 42 26 f1 11 28 89 11 12 a8 91 11 08 91 11 08 91 11 08 91 11 08 91 11 08 91 11 08 91 11 08 91 11 08 91 11 08 92 2b ed 4b 8b b9 8f c1 6b 3e aa 90 6e 23 ed 9b ca bf a1 7a 16 f7 ec 3c 88 9b 5f 1f 71 6f c1 aa d9 4f c7 58 08 41 f3 47 83 58 7f 07 cb da db 7b 0c 84 09 f6 f5 3e 64 f5 24 fb 49 f3 27 db 25 6d 8c c0 bb 47 7a fc e3 ba 3f 46 0f 12 3e 77 80 d0 7e b5 cf cd 52 2e cb 61 1b ee f5 c9 46 43 d8 1c cf d2 f2 e1 d7 c1 22 22 4c ea 53 48 88 84 5e fc 0a 39 ac ad 7e 73 a2 ff 00 19 80 ff 00 8c b2 00 48 0b 82 f1 79 f2 f1 d7 fc ea b1 fc 4d df fe 59 3f 48 5b 6f a5 bc f0 45 c9 a4 fe f1 03 f9 54 57 b6 52 5e 58 a3 e4 d2 7d e6 df ca 91 11 22 b5 1d a4 44 42 24 44 42 24 44 42 24 44 42 24 44 42 24 44 42 24 44 42 24 44 42 24 44 42 24 44 42 Data Ascii: DB$DB$DB$DB$DB&(+Kk>n#z<_qoOXAGX{>d$I'%mGz?F>w~R.aFC""LSH^9~sHyMY?H[oETWR^X}"DB$DB$DB$DB$DB$DB$DB$DB$DB$DB
2024-05-25 23:00:38 UTC	1390	IN	Data Raw: c9 a8 56 f8 3a 38 4b 11 f6 cb bf 7e 47 56 db e2 3c f9 49 da 73 5e 6c 1c 07 d9 a6 76 a5 68 a7 4e c1 c9 cb b0 b7 29 18 d4 59 6a a7 86 e6 c7 45 29 5a ae e0 96 b1 94 0d fd e2 4c dc 1f e8 8f 6a 64 63 8d 72 f6 d3 71 5b 20 2d ca 71 33 9a e6 a5 58 87 2a 4d 15 56 bd e9 5e 45 b1 6c b3 91 5f bd 2b ca bb 37 53 b3 78 14 98 65 08 a3 83 7e 6d cd e7 12 c8 c9 26 e4 ba db ad df 37 e0 05 ee 78 2a b1 cd 89 a4 12 2e b2 fe 90 bd 9c ea 39 98 9c 2a f8 7a 76 a1 96 8b c2 da 62 b5 98 b8 59 59 15 86 22 c3 ca 6c a6 a7 40 fb 6c 4a f3 6e 01 52 40 0c bb d7 9e 24 e0 dc cc 26 54 cc c4 ca c3 77 52 c8 99 58 f7 63 33 a8 3b 16 45 b9 10 b2 83 d0 b2 82 37 e9 3b e3 c0 9a d6 15 b8 d5 2e 9f 75 36 e3 52 89 4d 62 8b 15 d5 12 b5 08 a8 79 4e ea 54 2e dc ac 01 e9 e1 39 c5 f6 5b 0f fd ab a3 ff 00 07 5d Data Ascii: V:8K~GV<Is^lvhN)YjE)ZLjdcrq[ -q3XMV^El_+7Sxe~m&7x.9*zvbYY"l@lJnR@$&TwRXc3;E7;.u6RMbyNT.9[]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.6	59308	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:37 UTC	1140	OUT	GET /s/search/audio/success.mp3 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: /* X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://www.youtube.com/c/CodashopOfficial Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York Range: bytes=0-
2024-05-25 23:00:38 UTC	708	IN	HTTP/1.1 206 Partial Content Accept-Ranges: bytes Content-Range: bytes 0-6635/6636 Content-Type: audio/mpeg Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube-marketing" Report-To: {"group":"youtube-marketing","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube-marketing"}]} Content-Length: 6636 Date: Sat, 25 May 2024 23:00:38 GMT Expires: Sat, 25 May 2024 23:00:38 GMT Cache-Control: public, max-age=0 Last-Modified: Wed, 12 Jan 2022 21:08:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:38 UTC	682	IN	Data Raw: 00 00 00 20 66 74 79 70 4d 34 41 20 00 00 00 00 4d 34 41 20 6d 70 34 32 69 73 6f 6d 00 00 00 00 00 00 0c 80 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 d2 90 a0 90 d2 90 a0 90 00 00 ac 44 00 00 54 00 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 02 09 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 07 d2 90 a0 90 d2 90 a0 90 00 00 00 01 00 00 00 00 00 00 54 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 a5 6d 64 69 Data Ascii: ftypM4A M4A mp42isommoovlmvhdDT@trak\tkhdT@mdi
2024-05-25 23:00:38 UTC	1390	IN	Data Raw: 65 74 61 00 00 00 00 00 00 00 22 68 64 6c 72 00 00 00 00 00 00 00 00 6d 64 69 72 61 70 70 6c 00 00 00 00 00 00 00 00 00 00 00 00 02 6f 69 6c 73 74 00 00 00 1e a9 6e 61 6d 00 00 00 16 64 61 74 61 00 00 00 01 00 00 00 00 67 6f 74 5f 69 74 00 00 00 19 63 70 69 6c 00 00 00 11 64 61 74 61 00 00 00 15 00 00 00 00 00 00 00 00 19 70 67 61 70 00 00 00 11 64 61 74 61 00 00 00 15 00 00 00 00 00 00 00 00 1a 74 6d 70 6f 00 00 00 12 64 61 74 61 00 00 00 15 00 00 00 00 00 00 00 00 00 28 a9 74 6f 6f 00 00 00 20 64 61 74 61 00 00 00 01 00 00 00 00 69 54 75 6e 65 73 20 31 32 2e 33 2e 31 2e 32 33 00 00 00 bc 2d 2d 2d 2d 00 00 00 1c 6d 65 61 6e 00 00 00 00 63 6f 6d 2e 61 70 70 6c 65 2e 69 54 75 6e 65 73 00 00 00 14 6e 61 6d 65 00 00 00 00 69 54 75 6e 53 4d 50 42 00 00 00 84 Data Ascii: eta"hdlrmdirapploilstnamdatagot_itcpildatapgapdatatmpodata(too dataiTunes 12.3.1.23----meancom.apple.iTunesnameiTunSMPB
2024-05-25 23:00:38 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-05-25 23:00:38 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-05-25 23:00:38 UTC	1390	IN	Data Raw: 00 12 78 5c 0c a0 92 75 33 e4 80 f2 78 1d 21 23 c2 ce bc 25 43 f9 24 8f 21 e4 1b b7 4a 64 9f 64 aa b8 a2 7b dc 14 df 78 48 f8 96 fa c9 f5 0d ed 29 d6 bf 50 dd 04 ec a1 d0 7d 4f 53 a0 c5 f5 35 45 ca a9 63 23 74 88 92 3a 6f 47 93 f9 df f5 e3 57 72 39 3c b4 dc 80 6c 1d e4 dc 1b df 99 08 56 36 4f 09 32 af 85 2d 98 6f a0 f9 1f 32 eb d4 75 93 16 dc ee b1 71 b1 71 a6 ce 9a d3 2d 03 03 03 03 03 03 4a 4f 89 75 f2 1f 7d 7e ec 92 c8 f2 02 3e 52 f1 87 93 32 e7 a6 f9 20 45 8a 5a 32 d9 b8 80 c0 93 6a 25 d5 25 df ad 4a 16 85 36 c8 47 26 73 67 4d ce 92 92 3f 29 09 09 09 09 2a 12 12 12 13 76 ed 88 92 79 69 bf cd 21 5b 91 13 42 a4 52 c9 29 9d 3d 4d 24 5a d7 d2 a3 48 18 18 18 18 18 1b 80 00 fa d8 ae 04 76 15 05 83 42 41 84 51 f2 f5 5d b1 f3 b0 d6 9f 86 b8 d7 9b e0 16 f3 24 Data Ascii: x\u3x!#%C$!Jdd{xH)P}OS5Ec#t:oGWr9<lV6O2-o2uqq-JOu}~>R2 EZ2j%%J6G&sgM?)*vyi![BR)=M$ZHvBAQ]$
2024-05-25 23:00:38 UTC	394	IN	Data Raw: a7 52 94 2b 12 46 4c 04 8b 7c 9a 04 70 0c 1c 00 54 05 c0 3f a4 4a 51 31 d0 e1 69 37 78 f9 09 05 16 ef ad 80 f1 52 4d 52 e2 92 8a 16 7b ae 35 52 b1 8a 39 58 43 0f 73 19 9b 91 c1 9a b6 f9 c5 17 c8 0b 17 c8 5d c9 1d 85 ad c2 96 0e 00 fc 18 94 88 6b 11 06 c4 8e 0a 3a 0b c5 de d3 c3 a2 80 80 f0 36 e0 56 85 01 70 0d e4 e3 5b b3 d7 c9 51 55 56 22 fa f7 83 85 42 a1 64 b1 0d 64 f0 aa ad b1 e8 11 0b 2b 4c f9 d5 b3 52 54 e5 dc ca cd 4b 33 d2 07 e8 31 56 f7 f3 41 62 2b 99 d7 cd 06 12 56 02 c9 28 c9 a9 2d 19 49 d5 f0 81 12 14 9e cf 1a 87 00 fa 18 99 56 54 70 51 d4 84 16 c5 15 8b dd 80 38 81 35 73 3c 53 10 b9 45 83 12 ab a0 11 bd 50 c0 b1 2b 5e 2b 43 9f 58 14 d3 a5 a3 d7 84 de 48 92 76 41 3b e6 cb de 8b 3b b0 da 10 b9 21 60 5b 05 9e ae 2f ca 28 9e ee 6d b2 13 e0 f4 40 Data Ascii: R+FL\|pT?JQ1i7xRMR{5R9XCs]k:6Vp[QUV"Bdd+LRTK31VAb+V(-IVTpQ85s<SEP+^+CXHvA;;!`[/(m@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.6	59309	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:37 UTC	739	OUT	GET /sw.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://www.youtube.com/c/CodashopOfficial User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:38 UTC	1525	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 X-Content-Type-Options: nosniff Expires: Sat, 25 May 2024 23:00:38 GMT Date: Sat, 25 May 2024 23:00:38 GMT Cache-Control: private, max-age=0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin; report-to="youtube_main" Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-25 23:00:38 UTC	1525	IN	Data Raw: 32 32 34 62 0d 0a 2f 2a 2a 20 36 31 34 34 39 33 33 38 37 38 32 37 38 31 33 37 31 36 33 20 2a 2f 73 65 6c 66 2e 64 6f 63 75 6d 65 6e 74 20 3d 20 73 65 6c 66 3b 20 73 65 6c 66 2e 77 69 6e 64 6f 77 20 3d 20 73 65 6c 66 3b 76 61 72 20 79 74 63 66 67 3d 7b 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 79 74 26 26 79 74 2e 63 6f 6e 66 69 67 5f 7c 7c 79 74 63 66 67 2e 64 61 74 61 5f 7c 7c 28 79 74 63 66 67 2e 64 61 74 61 5f 3d 7b 7d 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 6b 2c 6f 29 7b 72 65 74 75 72 6e 20 6b 20 69 6e 20 79 74 63 66 67 2e 64 28 29 3f 79 74 63 66 67 2e 64 28 29 5b 6b 5d 3a 6f 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 3b 69 66 28 61 2e 6c 65 6e 67 74 Data Ascii: 224b/** 6144933878278137163 */self.document = self; self.window = self;var ytcfg={d:function(){return window.yt&&yt.config_\|\|ytcfg.data_\|\|(ytcfg.data_={})},get:function(k,o){return k in ytcfg.d()?ytcfg.d()[k]:o},set:function(){var a=arguments;if(a.lengt
2024-05-25 23:00:38 UTC	1525	IN	Data Raw: 6e 61 62 6c 65 5f 66 6c 6f 77 5f 6c 6f 67 67 69 6e 67 5f 70 34 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 66 75 6c 6c 79 5f 72 65 61 63 74 69 76 65 5f 62 61 64 67 65 5f 73 68 61 70 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 67 65 6c 5f 6c 6f 67 5f 63 6f 6d 6d 61 6e 64 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 67 68 6f 73 74 5f 76 69 65 77 5f 72 65 6e 64 65 72 69 6e 67 5f 6c 69 6d 69 74 65 64 5f 68 35 5f 63 6c 69 65 6e 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 68 61 6e 64 6c 65 73 5f 61 63 63 6f 75 6e 74 5f 6d 65 6e 75 5f 73 77 69 74 63 68 65 72 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 69 64 65 6e 74 69 74 79 5f 61 74 74 72 69 62 75 74 65 73 5f 66 6f 72 5f 6c 69 76 65 5f 63 68 61 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 69 Data Ascii: nable_flow_logging_p4e":true,"enable_fully_reactive_badge_shape":true,"enable_gel_log_commands":true,"enable_ghost_view_rendering_limited_h5_client":true,"enable_handles_account_menu_switcher":true,"enable_identity_attributes_for_live_chat":true,"enable_i
2024-05-25 23:00:38 UTC	1525	IN	Data Raw: 69 63 6b 5f 70 69 6e 67 73 22 3a 74 72 75 65 2c 22 68 35 5f 65 6e 61 62 6c 65 5f 67 65 6e 65 72 69 63 5f 65 72 72 6f 72 5f 6c 6f 67 67 69 6e 67 5f 65 76 65 6e 74 22 3a 74 72 75 65 2c 22 68 35 5f 69 6e 70 6c 61 79 65 72 5f 65 6e 61 62 6c 65 5f 61 64 63 70 6e 5f 6d 61 63 72 6f 5f 73 75 62 73 74 69 74 75 74 69 6f 6e 5f 66 6f 72 5f 63 6c 69 63 6b 5f 70 69 6e 67 73 22 3a 74 72 75 65 2c 22 68 35 5f 72 65 73 65 74 5f 63 61 63 68 65 5f 61 6e 64 5f 66 69 6c 74 65 72 5f 62 65 66 6f 72 65 5f 75 70 64 61 74 65 5f 6d 61 73 74 68 65 61 64 22 3a 74 72 75 65 2c 22 68 69 64 65 5f 65 6e 64 70 6f 69 6e 74 5f 6f 76 65 72 66 6c 6f 77 5f 6f 6e 5f 79 74 64 5f 64 69 73 70 6c 61 79 5f 61 64 5f 72 65 6e 64 65 72 65 72 22 3a 74 72 75 65 2c 22 68 74 6d 6c 35 5f 65 6e 61 62 6c 65 5f Data Ascii: ick_pings":true,"h5_enable_generic_error_logging_event":true,"h5_inplayer_enable_adcpn_macro_substitution_for_click_pings":true,"h5_reset_cache_and_filter_before_update_masthead":true,"hide_endpoint_overflow_on_ytd_display_ad_renderer":true,"html5_enable_
2024-05-25 23:00:38 UTC	1525	IN	Data Raw: 72 65 70 6c 61 63 65 5f 63 6c 69 65 6e 74 5f 75 72 6c 5f 70 61 72 73 69 6e 67 5f 77 69 74 68 5f 73 65 72 76 65 72 5f 73 69 67 6e 61 6c 22 3a 74 72 75 65 2c 22 72 65 70 6c 61 63 65 5f 63 6c 6f 73 75 72 65 5f 77 69 6e 64 6f 77 5f 77 69 74 68 5f 75 70 64 61 74 65 64 5f 79 74 77 69 6e 64 6f 77 5f 69 6e 5f 73 74 75 64 69 6f 22 3a 74 72 75 65 2c 22 73 63 68 65 64 75 6c 65 72 5f 75 73 65 5f 72 61 66 5f 62 79 5f 64 65 66 61 75 6c 74 22 3a 74 72 75 65 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 73 74 61 74 69 63 5f 72 6f 75 74 69 6e 67 5f 65 78 63 6c 75 64 65 5f 65 6d 62 65 64 22 3a 74 72 75 65 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 73 74 61 74 69 63 5f 72 6f 75 74 69 6e 67 5f 72 65 67 69 73 74 72 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 73 68 61 Data Ascii: replace_client_url_parsing_with_server_signal":true,"replace_closure_window_with_updated_ytwindow_in_studio":true,"scheduler_use_raf_by_default":true,"service_worker_static_routing_exclude_embed":true,"service_worker_static_routing_registration":true,"sha
2024-05-25 23:00:38 UTC	1525	IN	Data Raw: 75 65 2c 22 77 65 62 5f 6d 61 73 74 68 65 61 64 5f 64 69 73 61 70 70 65 61 72 69 6e 67 5f 63 68 61 6e 6e 65 6c 5f 69 63 6f 6e 5f 66 69 78 22 3a 74 72 75 65 2c 22 77 65 62 5f 6d 61 73 74 68 65 61 64 5f 76 69 73 69 74 65 64 5f 63 68 61 6e 6e 65 6c 5f 63 6f 6c 6f 72 5f 66 69 78 22 3a 74 72 75 65 2c 22 77 65 62 5f 6f 6e 65 5f 70 6c 61 74 66 6f 72 6d 5f 65 72 72 6f 72 5f 68 61 6e 64 6c 69 6e 67 22 3a 74 72 75 65 2c 22 77 65 62 5f 70 72 65 66 65 74 63 68 5f 70 72 65 6c 6f 61 64 5f 76 69 64 65 6f 22 3a 74 72 75 65 2c 22 77 65 62 5f 72 65 73 69 7a 61 62 6c 65 5f 61 64 76 65 72 74 69 73 65 72 5f 62 61 6e 6e 65 72 5f 6f 6e 5f 6d 61 73 74 68 65 61 64 5f 73 61 66 61 72 69 5f 66 69 78 22 3a 74 72 75 65 2c 22 77 65 62 5f 73 63 68 65 64 75 6c 65 72 5f 61 75 74 6f 5f 69 Data Ascii: ue,"web_masthead_disappearing_channel_icon_fix":true,"web_masthead_visited_channel_color_fix":true,"web_one_platform_error_handling":true,"web_prefetch_preload_video":true,"web_resizable_advertiser_banner_on_masthead_safari_fix":true,"web_scheduler_auto_i
2024-05-25 23:00:38 UTC	1162	IN	Data Raw: 2c 22 79 74 69 64 62 5f 72 65 6d 61 6b 65 5f 64 62 5f 72 65 74 72 69 65 73 22 3a 33 2c 22 79 74 69 64 62 5f 72 65 6f 70 65 6e 5f 64 62 5f 72 65 74 72 69 65 73 22 3a 33 2c 22 69 6c 5f 70 61 79 6c 6f 61 64 5f 73 63 72 61 70 69 6e 67 22 3a 22 22 2c 22 77 65 62 5f 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 5f 6f 76 65 72 72 69 64 65 22 3a 22 22 2c 22 6b 65 76 6c 61 72 5f 63 6f 6d 6d 61 6e 64 5f 68 61 6e 64 6c 65 72 5f 63 6f 6d 6d 61 6e 64 5f 62 61 6e 6c 69 73 74 22 3a 5b 5d 2c 22 77 65 62 5f 6f 70 5f 73 69 67 6e 61 6c 5f 74 79 70 65 5f 62 61 6e 6c 69 73 74 22 3a 5b 5d 7d 2c 22 49 4e 4e 45 52 54 55 42 45 5f 41 50 49 5f 4b 45 59 22 3a 22 41 49 7a 61 53 79 41 4f 5f 46 4a 32 53 6c 71 55 38 51 34 53 54 45 48 4c 47 43 69 6c 77 5f 59 39 5f 31 31 71 63 57 38 22 2c 22 Data Ascii: ,"ytidb_remake_db_retries":3,"ytidb_reopen_db_retries":3,"il_payload_scraping":"","web_client_version_override":"","kevlar_command_handler_command_banlist":[],"web_op_signal_type_banlist":[]},"INNERTUBE_API_KEY":"AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8","
2024-05-25 23:00:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.6	59311	209.85.165.138	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:38 UTC	1899	OUT	GET /videoplayback?expire=2084972247&ei=hKdJZeO7KUwF4FO0xP912cA&ip=17.28.87.40&id=o-AF3UPRDR6kwoBZYP7xFM0QJaAAP023kI9uHvuI6jZiJc9&itag=18&source=youtube&requiressl=yes&mh=X6&mm=176%2C38672%2C78489&mn=jZI31%2CxRsVL%2COpNcx&ms=jZI31%2CxRsVL%2COpNcx&mv=D&mvi=5&pl=45&initcwndbps=3789802&siu=5&spc=EHFu4S-pELXaUxqU3UD7dcpDAKe8Szp7Qg8UoxUSWd7i&vprv=5&svpuc=5&mime=video%2Fmp4&ns=iEZciFFzjfedNEp1g7fD6bHG&cnr=45&ratebypass=yes&dur=97197914&lmt=5648562622015301&mt=2084972247&fvip=3&c=WEB&txp=3789802&n=yPnmMBsShnIXoVDQ&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=OxnxRW0rN-WMwnFKj5bUfwDc8RJUrndMLWQlirfdvfZE9S4zFUq0IJTsbSZQEyaqE4ud3PgfpRgzM9SCBaH3fqHVzvBtrpi4ZDYuJdcvxfK5&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=OxnxRW0rN-WMwnFKj5bUfwDc8RJUrndMLWQlirfdvfZE9S4zFUq0IJTsbSZQEyaqE4ud3PgfpRgzM9SCBaH3fqHVzvBtrpi4ZDYuJdcvxfK5 HTTP/1.1 Host: rr5---sn-q4flrn7y.googlevideo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:38 UTC	785	IN	HTTP/1.1 403 Forbidden Last-Modified: Wed, 02 May 2007 10:26:10 GMT Content-Type: text/plain Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Date: Sat, 25 May 2024 23:00:38 GMT Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.6	59312	209.85.165.138	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:38 UTC	1907	OUT	GET /videoplayback?expire=2084972247&ei=hKdJZeO7KUwF4FO0xP912cA&ip=17.28.87.40&id=o-AF3UPRDR6kwoBZYP7xFM0QJaAAP023kI9uHvuI6jZiJc9&itag=18&source=youtube&requiressl=yes&mh=X6&mm=176%2C38672%2C78489&mn=jZI31%2CxRsVL%2COpNcx&ms=jZI31%2CxRsVL%2COpNcx&mv=D&mvi=5&pl=45&ctier=L&initcwndbps=3789802&siu=5&spc=EHFu4S-pELXaUxqU3UD7dcpDAKe8Szp7Qg8UoxUSWd7i&vprv=5&svpuc=5&mime=video%2Fmp4&ns=iEZciFFzjfedNEp1g7fD6bHG&cnr=45&ratebypass=yes&dur=97197914&lmt=5648562622015301&mt=2084972247&fvip=3&c=WEB&txp=3789802&n=yPnmMBsShnIXoVDQ&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=OxnxRW0rN-WMwnFKj5bUfwDc8RJUrndMLWQlirfdvfZE9S4zFUq0IJTsbSZQEyaqE4ud3PgfpRgzM9SCBaH3fqHVzvBtrpi4ZDYuJdcvxfK5&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=OxnxRW0rN-WMwnFKj5bUfwDc8RJUrndMLWQlirfdvfZE9S4zFUq0IJTsbSZQEyaqE4ud3PgfpRgzM9SCBaH3fqHVzvBtrpi4ZDYuJdcvxfK5 HTTP/1.1 Host: rr5---sn-q4flrn7y.googlevideo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:38 UTC	785	IN	HTTP/1.1 403 Forbidden Last-Modified: Wed, 02 May 2007 10:26:10 GMT Content-Type: text/plain Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Date: Sat, 25 May 2024 23:00:38 GMT Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.6	59313	142.250.185.194	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:38 UTC	991	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:39 UTC	808	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Content-Type: application/json; charset=UTF-8 Date: Sat, 25 May 2024 23:00:39 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-25 23:00:39 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 71 6c 2d 5a 75 51 63 4e 70 43 76 73 31 74 33 66 71 49 6f 6e 36 74 4a 57 34 31 38 6c 56 75 53 42 76 4f 52 36 36 5f 71 6b 66 45 76 63 35 7a 56 55 42 6e 61 61 73 73 45 6f 38 75 67 46 4e 4c 53 39 45 36 6d 75 4b 48 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKql-ZuQcNpCvs1t3fqIon6tJW418lVuSBvOR66_qkfEvc5zVUBnaassEo8ugFNLS9E6muKH","type":4}
2024-05-25 23:00:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.6	59314	209.85.165.138	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:39 UTC	1899	OUT	GET /videoplayback?expire=2084972247&ei=hKdJZeO7KUwF4FO0xP912cA&ip=17.28.87.40&id=o-AF3UPRDR6kwoBZYP7xFM0QJaAAP023kI9uHvuI6jZiJc9&itag=18&source=youtube&requiressl=yes&mh=X6&mm=176%2C38672%2C78489&mn=jZI31%2CxRsVL%2COpNcx&ms=jZI31%2CxRsVL%2COpNcx&mv=D&mvi=5&pl=45&initcwndbps=3789802&siu=5&spc=EHFu4S-pELXaUxqU3UD7dcpDAKe8Szp7Qg8UoxUSWd7i&vprv=5&svpuc=5&mime=video%2Fmp4&ns=iEZciFFzjfedNEp1g7fD6bHG&cnr=45&ratebypass=yes&dur=97197914&lmt=5648562622015301&mt=2084972247&fvip=3&c=WEB&txp=3789802&n=yPnmMBsShnIXoVDQ&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=OxnxRW0rN-WMwnFKj5bUfwDc8RJUrndMLWQlirfdvfZE9S4zFUq0IJTsbSZQEyaqE4ud3PgfpRgzM9SCBaH3fqHVzvBtrpi4ZDYuJdcvxfK5&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=OxnxRW0rN-WMwnFKj5bUfwDc8RJUrndMLWQlirfdvfZE9S4zFUq0IJTsbSZQEyaqE4ud3PgfpRgzM9SCBaH3fqHVzvBtrpi4ZDYuJdcvxfK5 HTTP/1.1 Host: rr5---sn-q4flrn7y.googlevideo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:39 UTC	785	IN	HTTP/1.1 403 Forbidden Last-Modified: Wed, 02 May 2007 10:26:10 GMT Content-Type: text/plain Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Date: Sat, 25 May 2024 23:00:39 GMT Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.6	59315	209.85.165.138	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:39 UTC	1907	OUT	GET /videoplayback?expire=2084972247&ei=hKdJZeO7KUwF4FO0xP912cA&ip=17.28.87.40&id=o-AF3UPRDR6kwoBZYP7xFM0QJaAAP023kI9uHvuI6jZiJc9&itag=18&source=youtube&requiressl=yes&mh=X6&mm=176%2C38672%2C78489&mn=jZI31%2CxRsVL%2COpNcx&ms=jZI31%2CxRsVL%2COpNcx&mv=D&mvi=5&pl=45&ctier=L&initcwndbps=3789802&siu=5&spc=EHFu4S-pELXaUxqU3UD7dcpDAKe8Szp7Qg8UoxUSWd7i&vprv=5&svpuc=5&mime=video%2Fmp4&ns=iEZciFFzjfedNEp1g7fD6bHG&cnr=45&ratebypass=yes&dur=97197914&lmt=5648562622015301&mt=2084972247&fvip=3&c=WEB&txp=3789802&n=yPnmMBsShnIXoVDQ&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=OxnxRW0rN-WMwnFKj5bUfwDc8RJUrndMLWQlirfdvfZE9S4zFUq0IJTsbSZQEyaqE4ud3PgfpRgzM9SCBaH3fqHVzvBtrpi4ZDYuJdcvxfK5&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=OxnxRW0rN-WMwnFKj5bUfwDc8RJUrndMLWQlirfdvfZE9S4zFUq0IJTsbSZQEyaqE4ud3PgfpRgzM9SCBaH3fqHVzvBtrpi4ZDYuJdcvxfK5 HTTP/1.1 Host: rr5---sn-q4flrn7y.googlevideo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:39 UTC	785	IN	HTTP/1.1 403 Forbidden Last-Modified: Wed, 02 May 2007 10:26:10 GMT Content-Type: text/plain Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Date: Sat, 25 May 2024 23:00:39 GMT Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.6	59317	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:39 UTC	732	OUT	GET /s/desktop/aef0ced3/jsbin/serviceworker-kevlar-appshell.vflset/serviceworker-kevlar-appshell.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive Cache-Control: max-age=0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:39 UTC	689	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 165120 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 24 May 2024 17:12:13 GMT Expires: Sat, 24 May 2025 17:12:13 GMT Cache-Control: public, max-age=31536000 Last-Modified: Fri, 24 May 2024 07:14:12 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 107306 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:39 UTC	701	IN	Data Raw: 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 61 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 62 61 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 Data Ascii: 'use strict';var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof w
2024-05-25 23:00:39 UTC	1390	IN	Data Raw: 6e 20 61 2e 6e 65 78 74 28 64 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 64 29 7b 72 65 74 75 72 6e 20 61 2e 74 68 72 6f 77 28 64 29 7d 0a 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 64 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 67 29 7b 67 2e 64 6f 6e 65 3f 64 28 67 2e 76 61 6c 75 65 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 67 2e 76 61 6c 75 65 29 2e 74 68 65 6e 28 62 2c 63 29 2e 74 68 65 6e 28 66 2c 65 29 7d 0a 66 28 61 2e 6e 65 78 74 28 29 29 7d 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 72 28 61 29 7b 72 65 74 75 72 6e 20 65 61 28 61 28 29 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 66 61 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b 3d 22 22 29 3b 76 61 72 20 63 3d 30 Data Ascii: n a.next(d)}function c(d){return a.throw(d)}return new Promise(function(d,e){function f(g){g.done?d(g.value):Promise.resolve(g.value).then(b,c).then(f,e)}f(a.next())})}function r(a){return ea(a())}function fa(a,b){a instanceof String&&(a+="");var c=0
2024-05-25 23:00:39 UTC	1390	IN	Data Raw: 29 72 65 74 75 72 6e 20 65 3d 21 30 2c 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 3b 22 22 3d 3d 3d 67 5b 30 5d 26 26 28 63 2e 6c 61 73 74 49 6e 64 65 78 2b 3d 31 29 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 67 2c 64 6f 6e 65 3a 21 31 7d 7d 7d 3b 0a 66 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 3b 0a 72 65 74 75 72 6e 20 66 7d 7d 29 3b 0a 64 61 28 22 50 72 6f 6d 69 73 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 61 6c 6c 79 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e Data Ascii: )return e=!0,{value:void 0,done:!0};""===g[0]&&(c.lastIndex+=1);return{value:g,done:!1}}};f[Symbol.iterator]=function(){return f};return f}});da("Promise.prototype.finally",function(a){return a?a:function(b){return this.then(function(c){return Promise.
2024-05-25 23:00:39 UTC	1390	IN	Data Raw: 6c 65 6e 67 74 68 26 26 28 64 3d 61 2e 73 68 69 66 74 28 29 29 3b 29 61 2e 6c 65 6e 67 74 68 7c 7c 76 6f 69 64 20 30 3d 3d 3d 62 3f 63 5b 64 5d 26 26 63 5b 64 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 64 5d 3f 63 3d 63 5b 64 5d 3a 63 3d 63 5b 64 5d 3d 7b 7d 3a 63 5b 64 5d 3d 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 6d 61 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 0a 63 2e 70 72 6f 74 6f 74 79 70 65 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 4d 61 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 63 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 61 2e 4d 62 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 29 7b 66 6f 72 28 76 61 72 20 67 3d 41 72 72 61 79 Data Ascii: length&&(d=a.shift());)a.length\|\|void 0===b?c[d]&&c[d]!==Object.prototype[d]?c=c[d]:c=c[d]={}:c[d]=b}function ma(a,b){function c(){}c.prototype=b.prototype;a.Ma=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.Mb=function(d,e,f){for(var g=Array
2024-05-25 23:00:39 UTC	1390	IN	Data Raw: 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 0a 66 75 6e 63 74 69 6f 6e 20 43 61 28 61 29 7b 69 66 28 21 61 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 3d 74 79 70 65 6f 66 20 61 29 72 65 74 75 72 6e 20 61 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 63 6c 6f 6e 65 29 72 65 74 75 72 6e 20 61 2e 63 6c 6f 6e 65 28 29 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 4d 61 70 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 4d 61 70 29 72 65 74 75 72 6e 20 6e 65 77 20 4d 61 70 28 61 29 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 53 65 74 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 65 74 29 72 65 74 75 72 6e 20 6e 65 77 20 53 65 74 28 61 29 3b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f Data Ascii: n!1;return!0}function Ca(a){if(!a\|\|"object"!==typeof a)return a;if("function"===typeof a.clone)return a.clone();if("undefined"!==typeof Map&&a instanceof Map)return new Map(a);if("undefined"!==typeof Set&&a instanceof Set)return new Set(a);if(a instanceo
2024-05-25 23:00:39 UTC	1390	IN	Data Raw: 75 67 46 6e 61 6d 65 7c 7c 62 7d 63 61 74 63 68 28 67 29 7b 65 3d 22 4e 6f 74 20 61 76 61 69 6c 61 62 6c 65 22 2c 63 3d 21 30 7d 62 3d 49 61 28 61 29 3b 69 66 28 21 28 21 63 26 26 61 2e 6c 69 6e 65 4e 75 6d 62 65 72 26 26 61 2e 66 69 6c 65 4e 61 6d 65 26 26 61 2e 73 74 61 63 6b 26 26 61 2e 6d 65 73 73 61 67 65 26 26 61 2e 6e 61 6d 65 29 29 7b 63 3d 61 2e 6d 65 73 73 61 67 65 3b 69 66 28 6e 75 6c 6c 3d 3d 0a 63 29 7b 69 66 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 75 6e 63 74 69 6f 6e 29 7b 69 66 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 63 3d 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 3b 65 6c 73 65 20 69 66 28 63 3d 61 2e 63 6f 6e 73 74 72 75 Data Ascii: ugFname\|\|b}catch(g){e="Not available",c=!0}b=Ia(a);if(!(!c&&a.lineNumber&&a.fileName&&a.stack&&a.message&&a.name)){c=a.message;if(null==c){if(a.constructor&&a.constructor instanceof Function){if(a.constructor.name)c=a.constructor.name;else if(c=a.constru
2024-05-25 23:00:39 UTC	1390	IN	Data Raw: 76 61 72 20 62 3d 5b 5d 2c 63 3b 66 6f 72 28 63 20 69 6e 20 61 29 4e 61 28 63 2c 61 5b 63 5d 2c 62 29 3b 72 65 74 75 72 6e 20 62 2e 6a 6f 69 6e 28 22 26 22 29 7d 0a 3b 66 75 6e 63 74 69 6f 6e 20 50 61 28 29 7b 74 68 69 73 2e 6c 3d 74 68 69 73 2e 6c 3b 74 68 69 73 2e 69 3d 74 68 69 73 2e 69 7d 0a 50 61 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 3d 21 31 3b 50 61 2e 70 72 6f 74 6f 74 79 70 65 2e 64 69 73 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6c 7c 7c 28 74 68 69 73 2e 6c 3d 21 30 2c 74 68 69 73 2e 6d 28 29 29 7d 3b 0a 50 61 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 4f 6e 44 69 73 70 6f 73 65 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 6c 3f 76 6f 69 64 20 30 21 3d 3d 62 3f 61 2e 63 61 6c 6c 28 62 29 Data Ascii: var b=[],c;for(c in a)Na(c,a[c],b);return b.join("&")};function Pa(){this.l=this.l;this.i=this.i}Pa.prototype.l=!1;Pa.prototype.dispose=function(){this.l\|\|(this.l=!0,this.m())};Pa.prototype.addOnDisposeCallback=function(a,b){this.l?void 0!==b?a.call(b)
2024-05-25 23:00:39 UTC	1390	IN	Data Raw: 3e 6e 65 77 20 65 62 2c 61 3d 3e 61 2e 72 65 73 65 74 28 29 29 3b 0a 63 6c 61 73 73 20 65 62 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 6e 65 78 74 3d 74 68 69 73 2e 73 63 6f 70 65 3d 74 68 69 73 2e 68 3d 6e 75 6c 6c 7d 73 65 74 28 61 2c 62 29 7b 74 68 69 73 2e 68 3d 61 3b 74 68 69 73 2e 73 63 6f 70 65 3d 62 3b 74 68 69 73 2e 6e 65 78 74 3d 6e 75 6c 6c 7d 72 65 73 65 74 28 29 7b 74 68 69 73 2e 6e 65 78 74 3d 74 68 69 73 2e 73 63 6f 70 65 3d 74 68 69 73 2e 68 3d 6e 75 6c 6c 7d 7d 3b 6c 65 74 20 66 62 2c 67 62 3d 21 31 2c 68 62 3d 6e 65 77 20 63 62 2c 6a 62 3d 28 61 2c 62 29 3d 3e 7b 66 62 7c 7c 69 62 28 29 3b 67 62 7c 7c 28 66 62 28 29 2c 67 62 3d 21 30 29 3b 68 62 2e 61 64 64 28 61 2c 62 29 7d 2c 69 62 3d 28 29 3d 3e 7b 63 6f 6e 73 74 20 Data Ascii: >new eb,a=>a.reset());class eb{constructor(){this.next=this.scope=this.h=null}set(a,b){this.h=a;this.scope=b;this.next=null}reset(){this.next=this.scope=this.h=null}};let fb,gb=!1,hb=new cb,jb=(a,b)=>{fb\|\|ib();gb\|\|(fb(),gb=!0);hb.add(a,b)},ib=()=>{const
2024-05-25 23:00:39 UTC	1390	IN	Data Raw: 21 28 65 26 26 31 3c 64 29 29 29 3b 67 3d 67 2e 6e 65 78 74 29 65 7c 7c 28 66 3d 67 29 3b 65 26 26 28 30 3d 3d 63 2e 68 26 26 31 3d 3d 64 3f 73 62 28 63 2c 62 29 3a 28 66 3f 28 64 3d 66 2c 64 2e 6e 65 78 74 3d 3d 63 2e 6c 26 26 28 63 2e 6c 3d 64 29 2c 64 2e 6e 65 78 74 3d 64 2e 6e 65 78 74 2e 6e 65 78 74 29 3a 74 62 28 63 29 2c 75 62 28 63 2c 65 2c 33 2c 62 29 29 29 7d 61 2e 6a 3d 6e 75 6c 6c 7d 65 6c 73 65 20 6c 62 28 61 2c 33 2c 62 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 76 62 28 61 2c 62 29 7b 61 2e 69 7c 7c 32 21 3d 61 2e 68 26 26 33 21 3d 61 2e 68 7c 7c 77 62 28 61 29 3b 61 2e 6c 3f 61 2e 6c 2e 6e 65 78 74 3d 62 3a 61 2e 69 3d 62 3b 61 2e 6c 3d 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 71 62 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 6f 62 28 6e 75 6c 6c Data Ascii: !(e&&1<d)));g=g.next)e\|\|(f=g);e&&(0==c.h&&1==d?sb(c,b):(f?(d=f,d.next==c.l&&(c.l=d),d.next=d.next.next):tb(c),ub(c,e,3,b)))}a.j=null}else lb(a,3,b)}function vb(a,b){a.i\|\|2!=a.h&&3!=a.h\|\|wb(a);a.l?a.l.next=b:a.i=b;a.l=b}function qb(a,b,c,d){var e=ob(null
2024-05-25 23:00:39 UTC	1390	IN	Data Raw: 73 29 3b 29 75 62 28 74 68 69 73 2c 61 2c 74 68 69 73 2e 68 2c 74 68 69 73 2e 76 29 3b 74 68 69 73 2e 73 3d 21 31 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 75 62 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 33 3d 3d 63 26 26 62 2e 69 26 26 21 62 2e 6c 29 66 6f 72 28 3b 61 26 26 61 2e 6d 3b 61 3d 61 2e 6a 29 61 2e 6d 3d 21 31 3b 69 66 28 62 2e 68 29 62 2e 68 2e 6a 3d 6e 75 6c 6c 2c 7a 62 28 62 2c 63 2c 64 29 3b 65 6c 73 65 20 74 72 79 7b 62 2e 6c 3f 62 2e 6a 2e 63 61 6c 6c 28 62 2e 63 6f 6e 74 65 78 74 29 3a 7a 62 28 62 2c 63 2c 64 29 7d 63 61 74 63 68 28 65 29 7b 41 62 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 65 29 7d 5a 61 28 6e 62 2c 62 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 7a 62 28 61 2c 62 2c 63 29 7b 32 3d 3d 62 3f 61 2e 6a 2e 63 61 6c 6c 28 61 2e 63 6f 6e 74 65 78 74 2c Data Ascii: s);)ub(this,a,this.h,this.v);this.s=!1};function ub(a,b,c,d){if(3==c&&b.i&&!b.l)for(;a&&a.m;a=a.j)a.m=!1;if(b.h)b.h.j=null,zb(b,c,d);else try{b.l?b.j.call(b.context):zb(b,c,d)}catch(e){Ab.call(null,e)}Za(nb,b)}function zb(a,b,c){2==b?a.j.call(a.context,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.6	59316	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:39 UTC	1115	OUT	GET /manifest.webmanifest HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:39 UTC	1501	IN	HTTP/1.1 200 OK Content-Type: application/manifest+json; charset=utf-8 X-Content-Type-Options: nosniff Expires: Sun, 26 May 2024 23:00:39 GMT Date: Sat, 25 May 2024 23:00:39 GMT Cache-Control: public, max-age=86400 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Cross-Origin-Opener-Policy: same-origin; report-to="youtube_main" Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:39 UTC	1501	IN	Data Raw: 36 33 32 0d 0a 7b 22 6e 61 6d 65 22 3a 22 59 6f 75 54 75 62 65 22 2c 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 22 59 6f 75 54 75 62 65 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 22 3a 22 23 46 46 46 46 46 46 22 2c 22 64 69 73 70 6c 61 79 22 3a 22 6d 69 6e 69 6d 61 6c 2d 75 69 22 2c 22 73 74 61 72 74 5f 75 72 6c 22 3a 22 2f 3f 66 65 61 74 75 72 65 5c 75 30 30 33 64 79 74 63 61 22 2c 22 73 63 6f 70 65 22 3a 22 2f 22 2c 22 69 63 6f 6e 73 22 3a 5b 7b 22 73 72 63 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 79 6f 75 74 75 62 65 2f 69 6d 67 2f 62 72 61 6e 64 69 6e 67 2f 66 61 76 69 63 6f 6e 2f 66 61 76 69 63 6f 6e 5f 31 34 34 78 31 34 34 2e 70 6e 67 22 2c 22 73 69 7a 65 73 22 3a 22 31 34 34 78 31 34 34 22 2c 22 74 Data Ascii: 632{"name":"YouTube","short_name":"YouTube","background_color":"#FFFFFF","display":"minimal-ui","start_url":"/?feature\u003dytca","scope":"/","icons":[{"src":"https://www.gstatic.com/youtube/img/branding/favicon/favicon_144x144.png","sizes":"144x144","t
2024-05-25 23:00:39 UTC	92	IN	Data Raw: 2f 65 78 70 6c 6f 72 65 5f 35 31 32 78 35 31 32 2e 70 6e 67 22 2c 22 73 69 7a 65 73 22 3a 22 35 31 32 78 35 31 32 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 2f 70 6e 67 22 2c 22 70 75 72 70 6f 73 65 22 3a 22 61 6e 79 20 6d 6f 6e 6f 63 68 72 6f 6d 65 22 7d 5d 7d 5d 7d 0d 0a Data Ascii: /explore_512x512.png","sizes":"512x512","type":"image/png","purpose":"any monochrome"}]}]}
2024-05-25 23:00:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.6	59318	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:39 UTC	1145	OUT	GET /s/player/bc657243/player_ias.vflset/en_US/base.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:39 UTC	689	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 2583437 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sat, 25 May 2024 12:56:38 GMT Expires: Sun, 25 May 2025 12:56:38 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 22 May 2024 04:17:26 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 36241 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:39 UTC	701	IN	Data Raw: 76 61 72 20 5f 79 74 5f 70 6c 61 79 65 72 3d 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 28 54 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 34 20 62 79 20 56 69 74 61 6c 79 20 50 75 7a 72 69 6e 0a 0a 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 Data Ascii: var _yt_player={};(function(g){var window=this;/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0// SPDX-License-Identifier: Apache-2.0// (The MIT License) Copyright (C) 2014 by Vitaly Puzrin Permission is her
2024-05-25 23:00:39 UTC	1390	IN	Data Raw: 69 63 65 20 61 6e 64 20 74 68 69 73 20 70 65 72 6d 69 73 73 69 6f 6e 20 6e 6f 74 69 63 65 20 73 68 61 6c 6c 20 62 65 20 69 6e 63 6c 75 64 65 64 20 69 6e 0a 20 61 6c 6c 20 63 6f 70 69 65 73 20 6f 72 20 73 75 62 73 74 61 6e 74 69 61 6c 20 70 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2e 0a 0a 20 54 48 45 20 53 4f 46 54 57 41 52 45 20 49 53 20 50 52 4f 56 49 44 45 44 20 22 41 53 20 49 53 22 2c 20 57 49 54 48 4f 55 54 20 57 41 52 52 41 4e 54 59 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 20 45 58 50 52 45 53 53 20 4f 52 0a 20 49 4d 50 4c 49 45 44 2c 20 49 4e 43 4c 55 44 49 4e 47 20 42 55 54 20 4e 4f 54 20 4c 49 4d 49 54 45 44 20 54 4f 20 54 48 45 20 57 41 52 52 41 4e 54 49 45 53 20 4f 46 20 4d 45 52 43 48 41 4e 54 41 42 49 4c 49 54 59 2c Data Ascii: ice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
2024-05-25 23:00:39 UTC	1390	IN	Data Raw: 63 6c 61 69 6d 20 74 68 61 74 20 79 6f 75 20 77 72 6f 74 65 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 73 6f 66 74 77 61 72 65 2e 20 49 66 20 79 6f 75 20 75 73 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 0a 20 20 20 20 20 20 69 6e 20 61 20 70 72 6f 64 75 63 74 2c 20 61 6e 20 61 63 6b 6e 6f 77 6c 65 64 67 6d 65 6e 74 20 69 6e 20 74 68 65 20 70 72 6f 64 75 63 74 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 77 6f 75 6c 64 20 62 65 0a 20 20 20 20 20 20 61 70 70 72 65 63 69 61 74 65 64 20 62 75 74 20 69 73 20 6e 6f 74 20 72 65 71 75 69 72 65 64 2e 0a 20 20 20 32 2e 20 41 6c 74 65 72 65 64 20 73 6f 75 72 63 65 20 76 65 72 73 69 6f 6e 73 20 6d 75 73 74 20 62 65 20 70 6c 61 69 6e 6c 79 20 6d 61 72 6b 65 64 20 61 73 20 73 75 63 68 2c 20 61 6e 64 20 6d 75 73 74 20 Data Ascii: claim that you wrote the original software. If you use this software in a product, an acknowledgment in the product documentation would be appreciated but is not required. 2. Altered source versions must be plainly marked as such, and must
2024-05-25 23:00:39 UTC	1390	IN	Data Raw: 54 20 57 41 52 52 41 4e 54 59 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 20 45 58 50 52 45 53 53 20 4f 52 0a 20 49 4d 50 4c 49 45 44 2c 20 49 4e 43 4c 55 44 49 4e 47 20 42 55 54 20 4e 4f 54 20 4c 49 4d 49 54 45 44 20 54 4f 20 54 48 45 20 57 41 52 52 41 4e 54 49 45 53 20 4f 46 20 4d 45 52 43 48 41 4e 54 41 42 49 4c 49 54 59 2c 0a 20 46 49 54 4e 45 53 53 20 46 4f 52 20 41 20 50 41 52 54 49 43 55 4c 41 52 20 50 55 52 50 4f 53 45 20 41 4e 44 20 4e 4f 4e 49 4e 46 52 49 4e 47 45 4d 45 4e 54 2e 20 49 4e 20 4e 4f 20 45 56 45 4e 54 20 53 48 41 4c 4c 20 54 48 45 0a 20 41 55 54 48 4f 52 53 20 4f 52 20 43 4f 50 59 52 49 47 48 54 20 48 4f 4c 44 45 52 53 20 42 45 20 4c 49 41 42 4c 45 20 46 4f 52 20 41 4e 59 20 43 4c 41 49 4d 2c 20 44 41 4d 41 47 45 53 20 4f 52 20 4f 54 48 Data Ascii: T WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTH
2024-05-25 23:00:39 UTC	1390	IN	Data Raw: 41 64 61 2c 52 68 2c 53 68 2c 54 68 2c 55 68 2c 56 68 2c 58 68 2c 42 64 61 2c 70 69 2c 43 64 61 2c 45 64 61 2c 71 69 2c 72 69 2c 74 69 2c 0a 75 69 2c 46 64 61 2c 47 64 61 2c 76 69 2c 48 64 61 2c 49 64 61 2c 78 69 2c 79 69 2c 4a 64 61 2c 4b 64 61 2c 4c 64 61 2c 4d 64 61 2c 7a 69 2c 41 69 2c 42 69 2c 43 69 2c 44 69 2c 45 69 2c 46 69 2c 50 64 61 2c 49 69 2c 5a 69 2c 51 64 61 2c 52 64 61 2c 48 69 2c 24 69 2c 4f 64 61 2c 47 69 2c 61 6a 2c 53 64 61 2c 54 64 61 2c 62 6a 2c 63 6a 2c 64 6a 2c 65 6a 2c 67 6a 2c 69 6a 2c 6b 6a 2c 50 2c 6c 6a 2c 57 64 61 2c 6e 6a 2c 6f 6a 2c 24 64 61 2c 5a 64 61 2c 58 64 61 2c 59 64 61 2c 61 65 61 2c 63 65 61 2c 62 65 61 2c 64 65 61 2c 47 6a 2c 46 6a 2c 66 65 61 2c 65 65 61 2c 48 6a 2c 4a 6a 2c 45 6a 2c 68 65 61 2c 4c 6a 2c 69 65 61 Data Ascii: Ada,Rh,Sh,Th,Uh,Vh,Xh,Bda,pi,Cda,Eda,qi,ri,ti,ui,Fda,Gda,vi,Hda,Ida,xi,yi,Jda,Kda,Lda,Mda,zi,Ai,Bi,Ci,Di,Ei,Fi,Pda,Ii,Zi,Qda,Rda,Hi,$i,Oda,Gi,aj,Sda,Tda,bj,cj,dj,ej,gj,ij,kj,P,lj,Wda,nj,oj,$da,Zda,Xda,Yda,aea,cea,bea,dea,Gj,Fj,fea,eea,Hj,Jj,Ej,hea,Lj,iea
2024-05-25 23:00:39 UTC	1390	IN	Data Raw: 56 72 2c 72 68 61 2c 70 68 61 2c 57 72 2c 58 72 2c 74 68 61 2c 59 72 2c 75 68 61 2c 5a 72 2c 77 68 61 2c 76 68 61 2c 78 68 61 2c 79 68 61 2c 63 73 2c 64 73 2c 7a 68 61 2c 41 68 61 2c 42 68 61 2c 65 73 2c 66 73 2c 43 68 61 2c 67 73 2c 44 68 61 2c 45 68 61 2c 47 68 61 2c 4b 68 61 2c 68 73 2c 4c 68 61 2c 4d 68 61 2c 4e 68 61 2c 4f 68 61 2c 50 68 61 2c 6b 73 2c 51 68 61 2c 52 68 61 2c 53 68 61 2c 72 73 2c 71 73 2c 70 73 2c 54 68 61 2c 55 68 61 2c 56 68 61 2c 74 73 2c 75 73 2c 76 73 2c 58 68 61 2c 0a 41 73 2c 42 73 2c 43 73 2c 59 68 61 2c 44 73 2c 24 68 61 2c 61 69 61 2c 62 69 61 2c 45 73 2c 47 73 2c 48 73 2c 4d 73 2c 4e 73 2c 51 73 2c 64 69 61 2c 66 69 61 2c 65 69 61 2c 67 69 61 2c 68 69 61 2c 57 73 2c 69 69 61 2c 6a 69 61 2c 58 73 2c 6b 69 61 2c 6c 69 61 2c Data Ascii: Vr,rha,pha,Wr,Xr,tha,Yr,uha,Zr,wha,vha,xha,yha,cs,ds,zha,Aha,Bha,es,fs,Cha,gs,Dha,Eha,Gha,Kha,hs,Lha,Mha,Nha,Oha,Pha,ks,Qha,Rha,Sha,rs,qs,ps,Tha,Uha,Vha,ts,us,vs,Xha,As,Bs,Cs,Yha,Ds,$ha,aia,bia,Es,Gs,Hs,Ms,Ns,Qs,dia,fia,eia,gia,hia,Ws,iia,jia,Xs,kia,lia,
2024-05-25 23:00:39 UTC	1390	IN	Data Raw: 2c 64 6d 61 2c 65 6d 61 2c 66 6d 61 2c 74 78 2c 67 6d 61 2c 75 78 2c 68 6d 61 2c 69 6d 61 2c 6a 6d 61 2c 6b 6d 61 2c 6c 6d 61 2c 6d 6d 61 2c 6e 6d 61 2c 6f 6d 61 2c 70 6d 61 2c 71 6d 61 2c 76 78 2c 72 6d 61 2c 73 6d 61 2c 77 78 2c 78 78 2c 79 78 2c 7a 78 2c 41 78 2c 74 6d 61 2c 42 78 2c 43 78 2c 75 6d 61 2c 44 78 2c 45 78 2c 76 6d 61 2c 46 78 2c 47 78 2c 48 78 2c 77 6d 61 2c 78 6d 61 2c 49 78 2c 79 6d 61 2c 7a 6d 61 2c 41 6d 61 2c 42 6d 61 2c 43 6d 61 2c 4a 78 2c 44 6d 61 2c 45 6d 61 2c 46 6d 61 2c 4b 78 2c 47 6d 61 2c 48 6d 61 2c 49 6d 61 2c 4c 78 2c 4a 6d 61 2c 4d 78 2c 4b 6d 61 2c 4e 78 2c 4f 78 2c 57 78 2c 58 78 2c 59 78 2c 5a 78 2c 4c 6d 61 2c 4d 6d 61 2c 24 78 2c 4e 6d 61 2c 61 79 2c 62 79 2c 63 79 2c 64 79 2c 65 79 2c 66 79 2c 67 79 2c 68 79 2c 4f Data Ascii: ,dma,ema,fma,tx,gma,ux,hma,ima,jma,kma,lma,mma,nma,oma,pma,qma,vx,rma,sma,wx,xx,yx,zx,Ax,tma,Bx,Cx,uma,Dx,Ex,vma,Fx,Gx,Hx,wma,xma,Ix,yma,zma,Ama,Bma,Cma,Jx,Dma,Ema,Fma,Kx,Gma,Hma,Ima,Lx,Jma,Mx,Kma,Nx,Ox,Wx,Xx,Yx,Zx,Lma,Mma,$x,Nma,ay,by,cy,dy,ey,fy,gy,hy,O
2024-05-25 23:00:39 UTC	1390	IN	Data Raw: 71 61 2c 75 42 2c 72 71 61 2c 73 71 61 2c 76 42 2c 77 42 2c 78 42 2c 79 42 2c 75 71 61 2c 44 42 2c 77 71 61 2c 76 71 61 2c 79 71 61 2c 46 42 2c 7a 71 61 2c 44 71 61 2c 42 71 61 2c 43 71 61 2c 45 71 61 2c 46 71 61 2c 48 71 61 2c 49 71 61 2c 47 71 61 2c 4c 71 61 2c 48 42 2c 4d 71 61 2c 4b 42 2c 4e 71 61 2c 4f 71 61 2c 4a 42 2c 4c 42 2c 51 71 61 2c 52 71 61 2c 56 71 61 2c 55 71 61 2c 57 71 61 2c 50 42 2c 51 42 2c 52 42 2c 53 42 2c 55 42 2c 59 71 61 2c 24 71 61 2c 61 72 61 2c 62 72 61 2c 24 42 2c 63 72 61 2c 6c 72 61 2c 6d 72 61 2c 70 72 61 2c 71 72 61 2c 72 72 61 2c 6f 72 61 2c 73 72 61 2c 75 72 61 2c 77 72 61 2c 67 43 2c 78 72 61 2c 6a 43 2c 68 43 2c 6d 43 2c 6e 43 2c 7a 72 61 2c 43 72 61 2c 73 43 2c 74 43 2c 75 43 2c 76 43 2c 47 72 61 2c 78 43 2c 49 72 61 Data Ascii: qa,uB,rqa,sqa,vB,wB,xB,yB,uqa,DB,wqa,vqa,yqa,FB,zqa,Dqa,Bqa,Cqa,Eqa,Fqa,Hqa,Iqa,Gqa,Lqa,HB,Mqa,KB,Nqa,Oqa,JB,LB,Qqa,Rqa,Vqa,Uqa,Wqa,PB,QB,RB,SB,UB,Yqa,$qa,ara,bra,$B,cra,lra,mra,pra,qra,rra,ora,sra,ura,wra,gC,xra,jC,hC,mC,nC,zra,Cra,sC,tC,uC,vC,Gra,xC,Ira
2024-05-25 23:00:39 UTC	1390	IN	Data Raw: 78 61 2c 42 78 61 2c 43 78 61 2c 46 78 61 2c 47 78 61 2c 73 46 2c 74 46 2c 0a 48 78 61 2c 75 46 2c 49 78 61 2c 77 46 2c 4b 78 61 2c 4a 78 61 2c 79 46 2c 7a 46 2c 41 46 2c 42 46 2c 4c 78 61 2c 43 46 2c 4d 78 61 2c 4e 78 61 2c 4f 78 61 2c 44 46 2c 50 78 61 2c 54 78 61 2c 51 78 61 2c 53 78 61 2c 52 78 61 2c 45 46 2c 46 46 2c 55 78 61 2c 56 78 61 2c 57 78 61 2c 58 78 61 2c 47 46 2c 5a 78 61 2c 62 79 61 2c 61 79 61 2c 48 46 2c 63 79 61 2c 49 46 2c 4a 46 2c 4b 46 2c 4d 46 2c 4e 46 2c 64 79 61 2c 65 79 61 2c 66 79 61 2c 4f 46 2c 67 79 61 2c 68 79 61 2c 6a 79 61 2c 6b 79 61 2c 69 79 61 2c 6c 79 61 2c 50 46 2c 51 46 2c 54 46 2c 56 46 2c 6e 79 61 2c 6d 79 61 2c 58 46 2c 6f 79 61 2c 70 79 61 2c 59 46 2c 5a 46 2c 24 46 2c 61 47 2c 64 47 2c 72 79 61 2c 65 47 2c 73 79 Data Ascii: xa,Bxa,Cxa,Fxa,Gxa,sF,tF,Hxa,uF,Ixa,wF,Kxa,Jxa,yF,zF,AF,BF,Lxa,CF,Mxa,Nxa,Oxa,DF,Pxa,Txa,Qxa,Sxa,Rxa,EF,FF,Uxa,Vxa,Wxa,Xxa,GF,Zxa,bya,aya,HF,cya,IF,JF,KF,MF,NF,dya,eya,fya,OF,gya,hya,jya,kya,iya,lya,PF,QF,TF,VF,nya,mya,XF,oya,pya,YF,ZF,$F,aG,dG,rya,eG,sy
2024-05-25 23:00:39 UTC	1390	IN	Data Raw: 2c 46 43 61 2c 47 43 61 2c 48 43 61 2c 49 43 61 2c 4a 43 61 2c 4b 43 61 2c 4c 43 61 2c 4d 43 61 2c 4e 43 61 2c 4f 43 61 2c 50 43 61 2c 51 43 61 2c 52 43 61 2c 44 4a 2c 45 4a 2c 53 43 61 2c 46 4a 2c 47 4a 2c 54 43 61 2c 55 43 61 2c 56 43 61 2c 57 43 61 2c 58 43 61 2c 59 43 61 2c 5a 43 61 2c 48 4a 2c 24 43 61 2c 61 44 61 2c 62 44 61 2c 63 44 61 2c 49 4a 2c 64 44 61 2c 65 44 61 2c 66 44 61 2c 67 44 61 2c 68 44 61 2c 4a 4a 2c 0a 69 44 61 2c 6a 44 61 2c 6b 44 61 2c 4b 4a 2c 6c 44 61 2c 4e 4a 2c 6e 44 61 2c 4f 4a 2c 50 4a 2c 6f 44 61 2c 70 44 61 2c 71 44 61 2c 72 44 61 2c 73 44 61 2c 74 44 61 2c 75 44 61 2c 53 4a 2c 54 4a 2c 77 44 61 2c 78 44 61 2c 79 44 61 2c 7a 44 61 2c 41 44 61 2c 76 44 61 2c 42 44 61 2c 43 44 61 2c 55 4a 2c 56 4a 2c 57 4a 2c 58 4a 2c 46 44 Data Ascii: ,FCa,GCa,HCa,ICa,JCa,KCa,LCa,MCa,NCa,OCa,PCa,QCa,RCa,DJ,EJ,SCa,FJ,GJ,TCa,UCa,VCa,WCa,XCa,YCa,ZCa,HJ,$Ca,aDa,bDa,cDa,IJ,dDa,eDa,fDa,gDa,hDa,JJ,iDa,jDa,kDa,KJ,lDa,NJ,nDa,OJ,PJ,oDa,pDa,qDa,rDa,sDa,tDa,uDa,SJ,TJ,wDa,xDa,yDa,zDa,ADa,vDa,BDa,CDa,UJ,VJ,WJ,XJ,FD

Session ID	Source IP	Source Port	Destination IP	Destination Port
296	192.168.2.6	59319	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:39 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 32 4c 36 4e 66 70 49 4e 61 45 36 55 4c 59 43 37 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 65 61 38 37 33 32 38 30 35 66 39 31 32 62 39 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 2L6NfpINaE6ULYC7.1Context: aea8732805f912b9
2024-05-25 23:00:39 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-05-25 23:00:39 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 32 4c 36 4e 66 70 49 4e 61 45 36 55 4c 59 43 37 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 65 61 38 37 33 32 38 30 35 66 39 31 32 62 39 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 43 6a 7a 4c 31 72 46 68 4e 54 50 31 42 39 33 2f 6d 37 2b 76 4a 48 74 4f 52 69 6a 53 79 61 4d 4c 5a 45 4e 56 35 44 53 36 2f 65 6e 7a 56 5a 59 61 73 4e 54 43 76 6c 58 45 31 5a 6f 6e 77 56 35 6d 6a 70 4a 63 54 66 30 73 63 47 46 59 44 4f 4d 36 75 35 45 51 47 64 7a 30 38 56 51 34 7a 5a 2f 48 6d 64 68 34 45 48 55 6a 4f 37 42 4a Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: 2L6NfpINaE6ULYC7.2Context: aea8732805f912b9<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAUCjzL1rFhNTP1B93/m7+vJHtORijSyaMLZENV5DS6/enzVZYasNTCvlXE1ZonwV5mjpJcTf0scGFYDOM6u5EQGdz08VQ4zZ/Hmdh4EHUjO7BJ
2024-05-25 23:00:39 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 32 4c 36 4e 66 70 49 4e 61 45 36 55 4c 59 43 37 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 65 61 38 37 33 32 38 30 35 66 39 31 32 62 39 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 2L6NfpINaE6ULYC7.3Context: aea8732805f912b9<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-05-25 23:00:39 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-05-25 23:00:39 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 50 45 33 51 50 33 33 4c 30 30 43 36 39 34 6e 69 44 77 4b 56 30 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: PE3QP33L00C694niDwKV0g.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.6	59327	142.250.186.150	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:39 UTC	531	OUT	GET /vi/gUlM_p1zHbI/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLBmin9DtU5PRqVl3aMTiMtQAbpbsg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:40 UTC	655	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 10352 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sat, 25 May 2024 23:00:37 GMT Expires: Sun, 26 May 2024 01:00:37 GMT Cache-Control: public, max-age=7200 ETag: "1623834729" Content-Type: image/webp Vary: Origin Age: 3 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:40 UTC	735	IN	Data Raw: 52 49 46 46 68 28 00 00 57 45 42 50 56 50 38 20 5c 28 00 00 b0 8a 00 9d 01 2a f6 00 8a 00 3e 51 1e 8c 44 a3 a1 a1 16 eb 1e 54 38 05 04 b3 00 63 97 20 3f 60 e7 c0 e4 be 7f fb af a4 0d a9 fd 7f f7 cf d9 5e ca bb 71 8d 9f 78 3f d3 fb a2 f9 93 fe fb d6 37 e9 5f 60 8f d7 cf d6 3f 5d 4f 5c 5f ba 3e a7 3f a0 7f 91 fd 90 f7 56 ff 93 fb 8b ef 43 fb 7f f9 af f9 7e e1 df d1 ff d2 7a d8 ff bb f6 51 fe f1 ff 47 d8 4f f6 1b d3 6f f7 3b e1 3f fb 2f fc 6f dc 3f 80 ff d9 3f ff 3e c0 1e 80 1f ff f5 83 f9 77 fb 2f c9 df 3b ff 1e fa 9f f2 9f 94 9f de fa 02 75 4f fd 6f 42 7f 99 fd ec fc bf f8 bf da ff ef df 01 7f c8 f1 9f e5 07 fa 3e a0 bf 93 ff 44 ff 2d fd b3 f6 ab f3 77 dd 87 fa ef 0f 3b 4d e8 23 ec 7f d4 bf d1 7f 7a fd d1 ff 27 e9 ad fe 2f a3 ff 61 bf d7 7d c7 7d 80 ff 34 Data Ascii: RIFFh(WEBPVP8 \(*>QDT8c ?`^qx?7_`?]O\_>?VC~zQGOo;?/o??>w/;uOoB>D-w;M#z'/a}}4
2024-05-25 23:00:40 UTC	1390	IN	Data Raw: 66 67 29 5a 97 ee 24 54 0a ae fe e9 d1 ed e2 51 21 bd 10 6e 4a 5d a3 aa 53 5e c6 2c 0a 4d 3d 64 38 c1 65 a7 41 12 4d fd 32 f1 9c 47 fe 67 76 62 a8 1d 7e a5 cd 09 c3 82 1c ff 5e b7 57 7e 0d af 6a 4c b0 40 fb 5a ed 86 38 5e 1a 67 4d ce 7a 5f 8b 09 fa e9 03 78 66 51 6c 3d f2 91 3b dc 3f 33 2c e4 d3 7d 99 93 ba b6 bd e9 60 3e 6b e3 f2 30 7d c5 ae b9 4a 09 cc fb 82 c9 43 cd 40 bb 2e c1 8e 33 62 62 b3 c2 f1 55 10 ed 01 9b cb 27 dc 29 00 e2 2c a6 1c ff 50 8e ec 13 d5 37 93 bc 51 26 0c 01 28 c8 81 bc 0d 20 39 f2 97 42 a9 37 04 3f 79 d3 a9 d2 43 d7 dc 6b 01 78 6d e3 c3 20 40 05 7d c2 84 cc 4f 03 5b 5d d8 0e 77 30 54 e4 1d 8c b9 58 97 9d 37 d7 7a b3 6c 1f 5f 35 ef de 90 a2 54 76 dd de e9 2d 80 25 65 c9 0b c9 b2 81 d2 ab ed e4 86 9f af 09 66 88 61 27 f4 ac 10 75 ad Data Ascii: fg)Z$TQ!nJ]S^,M=d8eAM2Ggvb~^W~jL@Z8^gMz_xfQl=;?3,}`>k0}JC@.3bbU'),P7Q&( 9B7?yCkxm @}O[]w0TX7zl_5Tv-%efa'u
2024-05-25 23:00:40 UTC	1390	IN	Data Raw: 5a 04 46 07 08 0c 08 c1 8b 13 22 e8 a8 5b 34 55 5d ff c4 ae bf ef 8d 30 94 d8 16 1d ee 6f 1c 9e e2 78 ac 02 ce cc d5 95 77 bb f3 ef a2 5a 35 d5 95 e7 85 4f 37 5a 03 01 fc a6 b7 b8 90 04 eb 38 45 60 4f a8 ec 2a ca 21 82 85 d2 cf b0 f1 7c 5d f0 65 b2 f0 2f fa 8a 07 0c c8 5c 7f d1 e9 dd a8 18 b2 71 88 5f d9 5d 69 7c 91 d5 2f ff 01 d3 18 08 f1 b9 1f 0c 4c 2d 3a 43 33 47 70 14 ea 3d d7 69 72 b7 a8 4d ad c1 aa 60 75 2d 2a e8 b2 0c ab 7c 6d 2c 84 f4 42 f7 6a 2c 3a b3 a0 5f 48 d1 c6 78 75 80 e6 27 27 26 f8 25 59 a6 e1 13 d7 f5 d7 d8 99 de 33 db ed dd 8e 1c 64 2b 2e a4 5a 83 59 05 c6 d0 32 c1 a6 b3 2e 31 a0 c8 31 a8 47 69 74 f8 6c 14 67 e0 de ea f9 cc 98 13 71 be ff 19 1a 95 2a 1d 20 ca 3b 8b 13 e9 1b 57 72 02 3e e4 d1 92 f2 12 ae 40 2c f7 26 1e 03 c2 b6 54 5c b7 Data Ascii: ZF"[4U]0oxwZ5O7Z8E`O!\|]e/\q_]i\|/L-:C3Gp=irM`u-\|m,Bj,:_Hxu''&%Y3d+.ZY2.11Gitlgq* ;Wr>@,&T\
2024-05-25 23:00:40 UTC	1390	IN	Data Raw: 86 37 e7 9c 79 ec 6d 72 84 10 89 2d 0c c5 b0 bb 31 47 7e bb 03 ab 33 ef 8f c7 9e c9 58 02 bd 43 1c 4b 02 b4 83 85 42 56 18 0e 06 7b e8 07 57 69 d9 c9 91 36 c0 b5 96 f7 66 8e 80 7d 1e b4 79 aa d2 12 59 83 f3 b6 00 3b ee 17 53 23 03 12 26 73 6b d9 03 68 b1 b1 79 ef 8b 7e 88 09 7c 21 08 cf f4 7e 76 22 86 47 b0 3b d4 1f 1e 3f 7d 37 0a ea 29 b7 44 c6 b9 22 53 7a bf 96 a3 63 2d ad e9 f0 80 4d 3d d5 31 9f 0c c7 ce b2 26 6d a6 cd 48 76 8b b0 7c 89 eb 9e 81 81 eb 52 39 ef f1 cf cf 22 35 80 0f 80 de a2 68 0f aa 5c 35 40 79 d8 4a ef 1b 88 b3 f3 90 99 af f3 6c bb a9 d2 96 11 f2 f9 b0 4c 73 37 8c c0 df fd ad c6 75 87 fc df 70 30 33 e6 b5 88 b7 00 55 f4 49 c2 55 6b 2e 03 be fe 0e bb 0d ec f2 28 48 45 31 8f ff c8 42 0d 9e 14 dd a1 6f 3f 74 b5 b2 0f 59 00 32 fa c5 9a 37 Data Ascii: 7ymr-1G~3XCKBV{Wi6f}yY;S#&skhy~\|!~v"G;?}7)D"Szc-M=1&mHv\|R9"5h\5@yJlLs7up03UIUk.(HE1Bo?tY27
2024-05-25 23:00:40 UTC	1390	IN	Data Raw: c4 80 a6 de d3 7e 29 6c bc a6 8a 41 0c 16 e8 25 9c 5f bf 29 cb b0 86 a5 22 cc b8 68 b5 17 6b 8d 1e b1 63 57 b3 a4 32 c0 00 d1 8a 3d 31 c6 7b c6 81 56 be a0 3d 02 ba 03 d3 f6 2a bd eb a2 7a a9 bf cb f1 29 e8 d6 6d 11 64 91 8c 20 fc 47 2f 9b 6f 27 cc 10 6b 9e cc d6 3b 0b 71 2d 47 a7 c9 ec ad 17 51 8b 7a 83 35 d3 3b 41 2d d7 c4 bf c3 e7 0f 5f f9 15 c0 1a cf 60 35 af be c5 6c f2 ac 6d 10 d4 27 9a 91 72 43 6a c4 d6 00 e3 af 4a b2 bb 43 cf 73 be 73 c9 b3 fb 65 a0 0a 6f a1 79 4a 7f f2 dd bf fa fc b0 df 54 32 68 8b 43 6c 4d b8 16 3d e8 3a 74 aa 63 7b 8e 07 c9 41 f3 e2 4e 39 72 bb cb 65 45 9b b0 a4 f4 c5 d0 53 44 b8 46 13 44 82 26 a9 e2 86 35 ce 54 26 30 75 5d 81 f8 29 ce 1a be 0a 8b cb 8e 1a 24 8d 44 68 61 2d 8e f9 4a ab b7 73 59 7d c9 fe 75 72 ac 7c 26 cd 44 31 Data Ascii: ~)lA%_)"hkcW2=1{V=*z)md G/o'k;q-GQz5;A-_`5lm'rCjJCsseoyJT2hClM=:tc{AN9reESDFD&5T&0u])$Dha-JsY}ur\|&D1
2024-05-25 23:00:40 UTC	1390	IN	Data Raw: 20 d7 f9 cf e2 32 e4 3e 45 24 4b 28 32 3a c8 3a 25 da af 24 ef c6 12 03 b9 31 4c 76 0f db bd f5 22 69 17 32 ca 05 65 96 f2 4b 0f b2 6b b9 82 59 6b 26 69 94 21 18 07 20 73 8a 24 62 9c c2 6c ee 02 f8 0c ff 0d 28 34 b9 1e e6 4f 4f b3 b3 93 29 fb 51 b1 b8 4c 86 64 77 17 3d ed b4 e4 87 15 10 9d 17 08 00 a2 20 01 ab 4a 28 92 4c 5b fa 0b 67 4e c8 f3 e7 59 6d eb cb 2b 2f 52 6c f5 26 1a 04 27 69 f1 62 06 fc a1 65 f1 af a0 a0 98 b5 aa 53 99 e9 ec 15 ef d1 42 db 5a 7f a2 e7 65 19 5d f2 e3 f0 2f b0 ee 99 50 0c 02 df cf e5 09 ea 8b f6 0d ac b7 ed 42 44 70 31 ec 53 07 3e 55 b0 5d 58 40 9f 38 25 3a 5d ff b7 86 56 63 4a 60 33 87 05 2e 13 86 e8 bc 8f c9 84 28 75 56 96 f0 7d 7c e4 4d 10 81 56 92 24 b8 e4 41 23 a1 51 ef 3e 1b c4 e9 14 4f 2e 47 e4 a9 89 e8 24 8f f6 61 9a d6 Data Ascii: 2>E$K(2::%$1Lv"i2eKkYk&i! s$bl(4OO)QLdw= J(L[gNYm+/Rl&'ibeSBZe]/PBDp1S>U]X@8%:]VcJ`3.(uV}\|MV$A#Q>O.G$a
2024-05-25 23:00:40 UTC	1390	IN	Data Raw: 2e 22 57 ae 4a cf ab 5c c8 1f a8 fa fb 5a f1 32 09 9a 1f fb cd e8 e9 f4 c4 ff d2 01 e8 1e 79 18 ac fe 20 c4 5a 21 d6 65 f7 73 3e cd 8e 21 df b4 ad bb 21 b3 d5 95 3e d8 f6 eb b7 a9 74 c3 d5 fa 1a 03 48 68 21 c4 16 24 fd 0f bf 89 19 8b 23 24 8c ef 51 ae bb 32 7a 12 6d 45 e8 8f a3 ee ee b4 65 ad dd f0 4c 63 64 4e 49 cf c2 f1 d3 4f 1c 86 93 6c 9d f4 6a a5 ab 6f 39 e9 15 31 88 cf fa df fe 99 66 4f 12 7f 37 a3 f2 53 d0 4c a2 96 87 f2 12 e4 e0 6c 86 f5 ce ed 6f 87 63 df c8 7a 85 3e 97 85 50 c9 10 57 1b 48 4f 82 67 c2 00 e4 a5 f2 1f 19 50 13 70 6b c9 ed 85 43 3c 60 23 34 cf 62 96 81 84 c6 51 c8 69 bb 69 d5 62 42 19 80 a0 7c 73 e4 27 d3 33 14 fc 20 b7 75 0b 38 5c 6e c6 4e 9c 85 aa 2e 0c c2 41 e8 65 f7 29 ec 86 43 30 13 99 29 27 93 d6 f2 bc 9d c9 a3 c8 a9 ed c4 1a Data Ascii: ."WJ\Z2y Z!es>!!>tHh!$#$Q2zmEeLcdNIOljo91fO7SLlocz>PWHOgPpkC<`#4bQiibB\|s'3 u8\nN.Ae)C0)'
2024-05-25 23:00:40 UTC	1277	IN	Data Raw: 2e a7 df e0 8b 52 50 0d 06 45 f2 76 0b 68 67 c2 d9 8a 9a 29 7b bb 9d a1 78 54 18 83 ed 7e 69 b9 05 44 c5 51 8d 0b 5d f5 db 93 03 37 62 9a eb 1a 2e d8 29 33 b3 96 ff 7e ce 66 a6 44 df 9c f8 2b 1b b5 78 54 e4 e9 5d e4 85 3b 1c 33 f3 5f aa cf 9d 9f a3 b4 a1 bf aa 2e 1a 66 0c 32 11 22 b9 84 18 42 d6 38 89 5a 56 fe 8f 99 eb 79 b4 25 9c e3 5d 87 be 6a 77 71 03 34 a0 1e 4d d9 3b a1 56 eb 29 8f 42 77 f3 9f 66 fc 22 15 f0 fc 14 b6 24 03 bd 25 d3 f9 df 78 29 1d 74 80 f9 df 01 70 d1 ff 92 cc 92 1f e2 11 27 d6 aa 64 cb 53 26 ac 13 95 93 4e c1 87 42 ba fd c5 b6 d6 e3 59 46 38 32 bd a4 c9 8b c3 ea 37 e8 53 56 18 09 56 cc a8 e3 18 c2 4f e8 d6 11 e0 0c fb 5e a4 c0 d5 4b 36 67 6c 02 f5 0d 93 08 82 ce b9 11 59 74 22 b7 b7 47 a9 d0 dc ef 6f 9e 7e 83 9f fa f6 be 67 36 6e f1 Data Ascii: .RPEvhg){xT~iDQ]7b.)3~fD+xT];3_.f2"B8ZVy%]jwq4M;V)Bwf"$%x)tp'dS&NBYF827SVVO^K6glYt"Go~g6n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.6	59324	142.250.186.150	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:39 UTC	531	OUT	GET /vi/FXzvFug0Rv4/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLB8iZOish3K05X5DCLbrJRzh2WrfQ HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:40 UTC	654	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 2364 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sat, 25 May 2024 23:00:37 GMT Expires: Sun, 26 May 2024 01:00:37 GMT Cache-Control: public, max-age=7200 ETag: "1544572974" Content-Type: image/webp Vary: Origin Age: 3 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:40 UTC	736	IN	Data Raw: 52 49 46 46 34 09 00 00 57 45 42 50 56 50 38 20 28 09 00 00 10 32 00 9d 01 2a f6 00 8a 00 3e 51 28 91 46 a3 a2 a1 a1 21 36 69 a8 70 0a 09 69 6e e1 74 99 90 70 82 e0 97 24 03 9e 87 d9 13 ca 03 55 cd 83 7f 69 fc 8e f3 bf f0 cf 8e fe b9 f8 dd e8 c5 54 de a3 bf 1e fa b3 f7 8f cb 9f 56 3f af 78 33 ed c7 f6 4f c7 4f c8 0f b0 2f c3 ff 90 ff 68 fc 90 f3 41 fc 97 b6 e8 00 7e 2d fc d3 fc 0f e6 b7 f7 df 41 cf da fd 06 fa a3 fd db f2 93 e8 03 f8 bf f2 3f ef 7f 98 1f d8 be 31 ff 01 e0 7d e0 df d9 bf 00 3e 80 3f 8b ff 34 fe ed fd cf f6 43 fb 47 ff ff b4 2f dd 7f d8 7f 77 fc a2 f6 77 f9 1f f6 2f f5 df e3 fe 00 ff 91 ff 3d ff 4d fd d3 fc 97 fe 1f ef df ff fe a7 fd 87 7e cc fb 29 7e c1 8a 28 51 65 4c d2 82 de 81 e3 34 a0 b7 a0 78 cd 28 2d e8 1e 33 4a 0b 79 79 05 6d fd 2f Data Ascii: RIFF4WEBPVP8 (2*>Q(F!6ipintp$UiTV?x3OO/hA~-A?1}>?4CG/ww/=M~)~(QeL4x(-3Jyym/
2024-05-25 23:00:40 UTC	1390	IN	Data Raw: f9 45 24 eb 9d ad 1b 81 37 c9 7d fc 1a cd da dc 22 76 71 f4 fd e0 4c bc 2f e9 31 b2 30 99 70 a8 54 67 d3 ff 33 48 09 47 10 b3 96 97 61 d4 c7 fc 42 8d 57 7e 81 d4 d1 90 de 54 a8 cc 88 06 df 32 c9 b1 32 48 ba 3a 1c d5 17 b8 a6 37 8b dd 04 36 ad ac 26 4e b7 32 4b d0 b2 10 3c c2 86 c1 5d 4e 86 2f 7f f1 76 ec 7a 79 d1 38 e5 8b 66 26 ff ca 25 08 b8 31 49 46 92 b2 9f 1a cf 69 c3 f4 7a af 8e db 43 fd b2 df bb 6f 57 ec eb 8f e6 6a 24 96 11 1b 49 3b 46 db 7c cd d7 68 2e a9 74 16 9a b8 26 c7 65 38 81 f0 26 86 b8 70 5f 30 9d e9 b2 0c 4b fa 92 23 bb 9c c8 a5 8b 63 96 82 c8 30 27 d5 e7 53 06 c6 54 e8 ff 83 f0 f2 1e fb 7c 45 ce c5 09 8a 91 ce 25 90 bd 72 2d 5c 52 43 4f 8a aa 49 20 a2 4e 04 9d 9b f3 b8 10 1f 82 61 ed 9a ac 5e f5 cc 20 c7 c3 6f 00 e6 02 6d 8d 7f 50 e4 14 Data Ascii: E$7}"vqL/10pTg3HGaBW~T22H:76&N2K<]N/vzy8f&%1IFizCoWj$I;F\|h.t&e8&p_0K#c0'ST\|E%r-\RCOI Na^ omP
2024-05-25 23:00:40 UTC	238	IN	Data Raw: 7e 90 93 a7 2f e1 01 05 3a 91 f1 63 37 bc 17 ec b6 94 60 78 4f 3a 84 1a ec 42 a8 5b 2e 37 c2 8b 1f 2a 67 34 8d 60 3a ce 56 3f 9e a3 61 61 af ee d8 f2 d6 1a fa 61 01 bf 81 63 3a 0a b8 8c 62 6d f3 a4 1b 9a 5d 22 77 4f dd 56 3d b6 49 ee c3 ab a1 c7 55 6c d9 44 3d 30 06 e5 72 4e f3 36 07 c1 65 fd 09 83 12 71 ae 7d 72 18 81 f8 6b c5 e1 4b 80 6c 4c ea 9f cd 14 23 9a 43 1a 1d 31 b7 55 75 60 13 cc d9 d5 c1 e7 77 72 1c 35 34 5f c5 c7 6b 21 f6 5b 7a d3 28 a7 0d 71 65 b0 ac a6 33 8f a0 f7 c1 f5 cf d0 61 8a cf ef 14 7e e2 2b 58 31 f3 3d 17 0c f3 67 98 73 73 1d 8e 3a 9e 6f 59 b4 3f 83 7f d4 98 42 0f f3 db aa 3c e8 1b ce 08 48 2d 5f fe a0 3b cd 0a a6 5b 5c ac 40 04 e7 87 e5 4b 73 21 0c 70 85 c7 b9 df ea 40 00 00 00 00 Data Ascii: ~/:c7`xO:B[.7*g4`:V?aaac:bm]"wOV=IUlD=0rN6eq}rkKlL#C1Uu`wr54_k![z(qe3a~+X1=gss:oY?B<H-_;[\@Ks!p@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.6	59326	142.250.186.150	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:39 UTC	531	OUT	GET /vi/PJmoRowiRGk/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLDUPUfm9CSZCVGvWLrJsa8oWCBGXw HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:40 UTC	654	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 2498 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sat, 25 May 2024 23:00:37 GMT Expires: Sun, 26 May 2024 01:00:37 GMT Cache-Control: public, max-age=7200 ETag: "1595473014" Content-Type: image/webp Vary: Origin Age: 3 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:40 UTC	736	IN	Data Raw: 52 49 46 46 ba 09 00 00 57 45 42 50 56 50 38 20 ae 09 00 00 b0 31 00 9d 01 2a f6 00 8a 00 3e 51 26 91 46 23 a2 21 a1 23 95 09 50 70 0a 09 63 6e c7 00 27 c4 5d 03 69 fd 03 b3 a6 81 f7 ef dd 3f 20 39 fd 79 93 c0 9f 32 d8 98 f9 b6 5d 7d 1e e8 03 fd 3f f9 4f 65 1f 94 3d 80 3f 4e 7a 58 f9 85 fd 49 fd b7 f7 b7 ff 3b ea 93 f2 03 dc 03 fb 17 f6 3e b1 6f 40 0f da ef 4d 5f 66 5f ee 7f f3 3f 6f 3d a5 b0 6b 74 6f 95 f3 d9 ac aa df a0 e1 e7 6b 0f f3 3c 08 60 03 f1 bf e6 7f f0 f8 c5 ef 3f fc d7 fd 97 aa 7d fb 1e 6b ea 5b fd 9f fd a7 f6 0f e8 9e e9 1a 0b fa 57 fe ff b8 37 f2 bf ea ff f2 fb 16 7e d2 7b 2e 7e b9 30 da 57 bd 09 4d 56 75 99 ed b7 d4 c0 2a 46 46 1b 81 9d c3 b8 75 c2 c7 8b e8 94 94 d8 06 b7 cf 80 f1 3b 3f b4 8a af c6 39 2a 00 42 87 fa e1 64 65 b0 b7 d7 0b 45 Data Ascii: RIFFWEBPVP8 1>Q&F#!#Ppcn']i? 9y2]}?Oe=?NzXI;>o@M_f_?o=ktok<`?}k[W7~{.~0WMVuFFu;?9*BdeE
2024-05-25 23:00:40 UTC	1390	IN	Data Raw: 32 cb cc c4 5e c0 94 f3 ee 44 bf 57 d4 fb 8f e3 bf 55 62 34 c0 a0 7e 69 f8 50 fc 14 b2 b6 a6 12 0d 32 82 22 c8 c3 34 fe 28 5f 4f 42 43 82 13 f4 86 4e 21 3a 60 1f 54 94 95 5d c4 72 f4 76 5b 3d ee 39 17 53 92 3a e5 57 f8 12 3e 1f 70 53 26 76 05 4f 32 d5 59 80 5c db e7 dc 46 fc d2 7d f4 b5 19 90 53 60 f7 b6 cc 8e b0 e3 c6 1c 86 af 8a e1 eb e7 d6 3f 87 2c 0e 9a dc 7a f3 fd 02 5d 2c 42 53 8b ce 39 fb fe 91 87 d3 62 bd c0 89 ba d1 94 b5 d2 98 bd dc bc 0c cf a1 16 37 41 b8 21 96 55 fa 02 4e c2 ec a2 be cd f2 c5 5d be 06 7b 49 3b 5c 8b 78 3c a0 f7 a5 39 17 a2 f2 3b df 3b 68 83 ac 3b ff 9d 9e 05 af 48 00 00 03 72 78 8a 4f 65 fa dd 75 78 3f f0 08 c2 5e 82 82 30 dd 52 8a 32 9d db ef 19 97 4c f2 9c 85 fd 58 09 b2 ee 4f e2 3e 5a d4 a7 78 e0 92 71 8e d8 a6 c3 4f 0b fd Data Ascii: 2^DWUb4~iP2"4(_OBCN!:`T]rv[=9S:W>pS&vO2Y\F}S`?,z],BS9b7A!UN]{I;\x<9;;h;HrxOeux?^0R2LXO>ZxqO
2024-05-25 23:00:40 UTC	372	IN	Data Raw: 29 20 1a e2 f2 5b 43 4a 5a 19 4e 15 64 01 75 d0 82 2d e2 cc 76 0f ec 67 92 28 6d 80 ba 9a ad 46 4e f0 e7 cb 9c fa 88 9a 60 fe b3 50 db 1d fe 8d 98 75 0b 25 ee e4 79 f6 25 ae 5e 3b 83 66 25 da 74 75 d3 ce 7c 03 c1 e0 84 9a e2 8f 4e 49 12 e0 3c 13 49 ef 93 3f 7f 4c 85 40 7c ea eb 69 66 27 20 30 35 85 e7 e3 cf 06 a3 c4 5e 36 fa 0c d8 c1 9e bd 9f 25 06 6c 20 7d 49 b1 86 ab 2c 2c 24 70 44 ee ca dd 94 8b 65 58 2b 70 7a 9d 16 9d da 6d 42 cb a0 a5 8b 41 d3 e2 ca 11 e2 32 e9 0a 9f 7d cb a0 02 d1 d1 e4 74 c1 14 f4 a1 e9 ce 56 98 0c 2d 17 ed df 72 1f 0f de 95 dd 4b 62 0c 70 7f 69 a8 a6 ce ea 8c ca 2d 4c 48 72 ec 38 f1 35 ee f4 fc c8 32 b5 7d c9 94 b5 3f 3a a3 62 dc 16 ea 48 df 33 ad 10 42 6e d1 71 31 ed d6 a7 1a 1b 6b 8d 23 f0 9c 40 24 1b db 92 9b 77 a5 a9 06 3e 00 Data Ascii: ) [CJZNdu-vg(mFN`Pu%y%^;f%tu\|NI<I?L@\|if' 05^6%l }I,,$pDeX+pzmBA2}tV-rKbpi-LHr852}?:bH3Bnq1k#@$w>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.6	59321	216.58.206.46	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:39 UTC	502	OUT	GET /youtubei/v1/att/get?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:40 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1607 Date: Sat, 25 May 2024 23:00:40 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:40 UTC	1150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-05-25 23:00:40 UTC	457	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e 20 69 64 3d 6c 6f 67 6f 20 61 72 69 61 2d 6c 61 62 65 6c 3d 47 6f 6f Data Ascii: ckground:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span id=logo aria-label=Goo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.6	59322	142.250.186.150	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:39 UTC	531	OUT	GET /vi/jxuUMURYxTk/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLBu-FJQRllUvGNmQ-LUjLbFqPwSFg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:40 UTC	654	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 2870 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sat, 25 May 2024 23:00:37 GMT Expires: Sun, 26 May 2024 01:00:37 GMT Cache-Control: public, max-age=7200 ETag: "1514451831" Content-Type: image/webp Vary: Origin Age: 3 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:40 UTC	736	IN	Data Raw: 52 49 46 46 2e 0b 00 00 57 45 42 50 56 50 38 20 22 0b 00 00 50 37 00 9d 01 2a f6 00 8a 00 3e 51 28 91 46 23 a2 a1 a1 22 b4 09 b0 70 0a 09 63 6e e1 6f cb f0 28 e6 9f 1f 77 f3 4f b6 7f 8a f1 d7 d8 bc 57 fb 10 fe 1f b0 5f 41 5f 9f 3d 80 3f 59 7f d6 fa 20 7f 8e f6 1d fa df f9 01 f0 03 f5 9b f6 cb dd 37 fc 47 fc 8f 61 df e0 bd 40 3f aa 7f b2 eb 31 f4 14 f2 dd fd d6 f8 57 fd bb fd 9b f8 0d fd 75 ff e9 ac 93 e5 cf e8 1d bd f8 07 d7 7f d9 6e 5b 5d 41 e2 7f ef df ed ff 29 3f 26 79 fb de 33 fc e7 fc 66 f3 1c d2 fa 81 7b 67 f6 df f6 df 94 bf 90 1e dc 5a 8a 5e ab fe b3 f2 5b 99 6a 80 1f 98 bf d8 fd d5 7c 9f ff 99 fe 6b f1 e7 dc 4f d2 9f f9 bd c2 ff 9a 7f 5e ff 69 f9 b7 fe 33 c1 9f a2 c7 ed 90 ce 10 23 4c 3d bb 97 a4 bb 65 9d 5e 63 0f 6e e5 96 6d 26 30 f6 ee 5e 8b 7b Data Ascii: RIFF.WEBPVP8 "P7*>Q(F#"pcno(wOW_A_=?Y 7Ga@?1Wun[]A)?&y3f{gZ^[j\|kO^i3#L=e^cnm&0^{
2024-05-25 23:00:40 UTC	1390	IN	Data Raw: 16 df b9 68 b6 37 96 fc ec c2 1d 02 04 27 a9 2d fb ba 4c 85 da e5 b0 3a 46 ff d9 51 aa d0 5e 6f fc d1 1b 0b 45 fe 12 4d b5 99 38 13 e1 04 1f e3 1e 3f 8b ab e8 8e 32 7a 5a e5 86 4f e7 88 55 90 33 a8 ce 2f 91 26 fd 3f 9e 90 a7 7b c8 c4 24 35 96 0b 99 96 23 51 b8 df 31 7d 01 27 fc 14 40 9e e3 f5 32 7c 25 c4 f7 25 77 1a 8a e4 ef 40 88 be 95 71 dd 9b 1f b1 d1 5c 0b 2f 64 c5 7f 84 4e 9b 90 83 72 85 b7 6c 55 ce c0 ef 02 f5 ad b5 0b 53 b1 26 4c 8a 29 6b 85 a7 38 7e 41 1b e1 62 78 12 3b 2f 75 d0 30 c6 29 6b 7f 85 21 f1 b8 b8 85 89 ac de db 57 d6 d8 0c af 0a bc 62 a9 5c 9a dc 00 88 88 20 3f 3a c0 c4 7d 08 49 c8 7f a8 5f 96 bf 79 a1 93 9b fa 76 a8 d7 6b f7 fe 0b 51 b8 84 d5 59 cb ff 96 6a 6c 8b e2 e9 d7 f5 68 66 b3 4e 89 4d 9e 40 f3 50 13 42 76 6f bf bf fb 8c 07 8a Data Ascii: h7'-L:FQ^oEM8?2zZOU3/&?{$5#Q1}'@2\|%%w@q\/dNrlUS&L)k8~Abx;/u0)k!Wb\ ?:}I_yvkQYjlhfNM@PBvo
2024-05-25 23:00:40 UTC	744	IN	Data Raw: db b2 9f 73 c6 84 de f6 08 f6 5c 63 b8 83 07 d1 f3 d3 9f 71 41 b2 1a be 2e 1f d8 5e 08 39 af 53 db 9b cb f2 15 5e bf 35 07 6f a1 a1 fc 32 86 4a 82 cb 6c c7 e3 63 fb ef d4 21 fd 0c de af 08 53 58 de a6 62 a3 23 fa b6 be 8a 3a b0 a2 cd 32 da b0 ce 5b 16 63 2e 11 ad be 88 4f a5 57 fc 01 2b 82 fe 19 0d ff 6c 1d 63 82 21 bb 23 50 79 66 df 62 6f b3 84 66 12 2c 46 12 57 86 42 de d0 eb f4 51 55 e2 0b 26 55 e2 66 6c 3d cf 20 39 11 72 44 25 a5 ff 09 f4 99 64 74 e6 7c 90 ba 51 10 9b 88 3f 16 7f b7 5e 71 ff 24 79 85 fc f8 19 43 2b e5 6d 08 1a 0c 11 3f 41 d5 c5 1d 49 72 79 5c 5e e2 d9 5e 60 23 5b 39 de f2 b1 77 05 85 c9 92 67 04 57 ae 2b 5d bb 4e 4a 27 76 e6 2e 4b 92 4d f9 85 e4 2c 45 bf b7 b9 00 70 04 a6 67 a3 a1 3b e7 9b f7 60 0d 44 33 cc d2 f8 4e 0e 9a 73 35 9d 2f Data Ascii: s\cqA.^9S^5o2Jlc!SXb#:2[c.OW+lc!#Pyfbof,FWBQU&Ufl= 9rD%dt\|Q?^q$yC+m?AIry\^^`#[9wgW+]NJ'v.KM,Epg;`D3Ns5/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.6	59320	216.58.206.46	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:39 UTC	500	OUT	GET /youtubei/v1/guide?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:40 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1605 Date: Sat, 25 May 2024 23:00:40 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:40 UTC	1150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-05-25 23:00:40 UTC	455	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e 20 69 64 3d 6c 6f 67 6f 20 61 72 69 61 2d 6c 61 62 65 6c 3d 47 6f 6f Data Ascii: ckground:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span id=logo aria-label=Goo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.6	59325	142.250.186.150	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:39 UTC	531	OUT	GET /vi/Ih70PEQTTDY/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLALHBCF72cYBrxdigsUR4DNW7Fdsg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:40 UTC	654	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 7198 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sat, 25 May 2024 23:00:37 GMT Expires: Sun, 26 May 2024 01:00:37 GMT Cache-Control: public, max-age=7200 ETag: "1634111834" Content-Type: image/webp Vary: Origin Age: 3 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:40 UTC	736	IN	Data Raw: 52 49 46 46 16 1c 00 00 57 45 42 50 56 50 38 20 0a 1c 00 00 b0 66 00 9d 01 2a f6 00 8a 00 3e 51 22 8d 44 23 a2 21 16 5c a5 9c 38 05 04 b6 21 e0 cf 7a 9e db 60 26 88 70 1e 08 7a 57 3f 2b fa 77 f1 5f 8c 7f 97 9f 30 3c 97 d8 67 8f 7b dd fb bf fe 1f f1 be e6 1e f1 e4 03 dd 17 94 ff b5 ff 72 fd db fe ab f3 53 fd df f6 ef ca 0f e4 5f 44 ff 3d 7f 92 f7 02 fd 26 fe bf fd 43 f6 93 fb b7 ff ff ae 1f f6 fd 62 ff 5d ff 9b ff 03 f4 03 e0 1f f1 6f e5 9f e0 ff b6 fe e9 7c e4 ff 8c ff 01 ed a7 fb cf f7 6f 60 0f e7 7f d5 3f eb fa e0 fb 09 7e e3 7b 00 7e d3 fa 50 ff d8 ff 05 fb ef f4 65 fb 09 ff 47 fc 97 ef ff d0 47 f3 3f ec 1f f0 ff 3e fe 40 3d 00 3f 7f fd 80 3f 7f fd d1 fa eb fd 13 f1 27 da 2f 85 df 69 fc 83 f4 37 af ec b5 bc 15 c0 3f f1 9e b7 3f a0 ff 5f e1 4f c8 ef ea Data Ascii: RIFFWEBPVP8 f*>Q"D#!\8!z`&pzW?+w_0<g{rS_D=&Cb]o\|o`?~{~PeGG?>@=??'/i7??_O
2024-05-25 23:00:40 UTC	1390	IN	Data Raw: b7 11 2a 7f 83 b3 28 10 5e b3 1a 62 2f e4 18 49 bd f8 d7 89 b4 d7 66 ae 23 30 20 33 25 14 49 09 f6 95 74 a8 76 db 85 b1 ee 62 d4 ee e6 3e 8a ac 73 57 95 67 3e 06 c5 ce aa 2b 2f 5d 99 0d b5 c3 a4 c6 e7 51 a1 72 5e 5d da cc b4 50 40 d0 84 09 cf 24 7d e7 51 d2 dd 72 0a b6 ee d2 e5 4f 3d b0 76 00 25 70 18 76 cd bd 3c 97 76 79 b5 c4 7a 57 57 c2 00 fe ee 59 25 31 06 f0 f0 99 5b 3f 75 e8 7a cb d6 f7 43 4f 65 20 26 9a 59 b5 e8 69 4e 9d 31 f0 bd e2 32 fe a2 bc dc ce 31 ea 9a dc 41 63 8a 5e 75 55 28 86 03 1f f0 c5 e1 48 50 85 bf 16 f1 41 b2 fb f1 30 ef 44 3b f7 ac 6e 75 4b 54 54 3b 6c a3 68 3a ee 98 6f e1 4e 6e 64 fc aa 4a 86 1c 76 ee 18 e6 f3 a6 f1 67 45 ed 6b e6 02 22 a8 8d ca b1 4d a0 db e5 e7 d6 4f 10 4a 5f 34 f9 5a a7 c8 1a c6 bc 00 12 95 4a f2 84 0c 41 2d f1 Data Ascii: *(^b/If#0 3%Itvb>sWg>+/]Qr^]P@$}QrO=v%pv<vyzWWY%1[?uzCOe &YiN121Ac^uU(HPA0D;nuKTT;lh:oNndJvgEk"MOJ_4ZJA-
2024-05-25 23:00:40 UTC	1390	IN	Data Raw: 1f 57 7e 17 f1 9b 49 03 66 0d 41 50 c1 3c 45 b1 d9 e0 bc 83 0e b3 b8 c5 e8 54 9a 67 67 f5 71 9c 06 69 17 3b 6c 06 c7 a2 dd a2 b0 61 96 3e 96 62 c6 c2 61 30 fb 11 78 40 2f dd 79 dc ce a4 99 a9 07 de 38 4b 1e 00 68 0e ab 78 a8 23 c9 56 dc 3d 86 46 08 93 58 35 55 48 7a b1 83 9c bc 42 f5 9b 9b be ab 74 c2 53 bd a7 81 6d d6 18 70 56 5f 4f 76 70 17 c2 a9 83 6a 03 fc e3 bf 50 50 07 4e 2a 64 c4 3e cc 83 31 14 b7 8c cd 95 f9 bf 21 6d 23 c3 7c f8 b1 85 95 81 f3 c4 82 e1 a1 a3 eb 51 73 02 b5 87 60 69 31 ef 50 21 ff 77 67 b4 07 0c cc 6e c5 7d a0 fc 3e 86 2a 65 2b b9 26 fc 07 43 2b d5 47 68 cf 47 8f f2 7e 5a 9f d6 e1 17 74 f1 81 57 2e 33 df 50 b0 7b 41 64 28 8d 98 ae 9a 93 bf c4 34 fd 37 73 fc 1b eb de 01 17 cf be 5c 68 a2 b7 29 80 de 00 68 c9 b5 3f e0 d0 43 43 41 82 Data Ascii: W~IfAP<ETggqi;la>ba0x@/y8Khx#V=FX5UHzBtSmpV_OvpjPPNd>1!m#\|Qs`i1P!wgn}>e+&C+GhG~ZtW.3P{Ad(47s\h)h?CCA
2024-05-25 23:00:40 UTC	1390	IN	Data Raw: 2c 63 3b ca 51 75 ed 3e d0 e0 d8 09 63 e6 f3 23 2d b0 d2 db 22 7f 56 6a b5 ec 74 8d 87 0d 2e 57 3d 4f f2 04 8a c3 7f 0c 3f 7f 50 38 e2 90 7e 52 0c 29 89 e6 35 a6 b5 c0 6b 18 35 56 e0 df 64 1f 4a 5f c6 7c 6f b0 47 ee cc 1d 58 43 c0 c3 f1 07 38 59 1c ad 89 09 ca 7f 95 b5 cf b4 ed 33 3d f0 03 ab fc 62 a5 d8 65 09 52 65 44 45 0e d1 01 25 0e 7a 29 cd f5 e2 41 12 bc 09 7c af 58 96 d8 7d 6b 5f f1 bd b3 0a 4f 71 ee 8e 02 92 dd 51 1c c5 30 9c ea e5 1c 24 a2 e5 bb 93 ef f5 37 6f b0 3b 5b 87 f3 d6 7b da d1 ab a5 23 6e d3 05 c1 3c d7 e7 e4 35 1f 98 18 9c 7d 8f 60 94 38 99 82 71 df 98 b6 80 e1 ba 3e c2 cb cc 08 fd b3 35 04 46 3e 2f 6d 95 d1 dc f3 a3 05 2f 9b 1c cc 28 66 d8 ea 41 f4 6e 96 24 6c 4d 45 ce 6f 1e 29 f4 a5 68 2c 97 d0 7c ea 73 c7 6d 1d 39 fe a7 5c b3 97 f0 Data Ascii: ,c;Qu>c#-"Vjt.W=O?P8~R)5k5VdJ_\|oGXC8Y3=beReDE%z)A\|X}k_OqQ0$7o;[{#n<5}`8q>5F>/m/(fAn$lMEo)h,\|sm9\
2024-05-25 23:00:40 UTC	1390	IN	Data Raw: f6 de 8f d6 7a 9c f0 4a 5a 14 59 83 0b a1 e2 bf 62 3c 36 79 40 0c 42 02 a8 eb 05 aa 75 ba 5a 37 69 89 f7 d1 8c 79 07 7c 60 7d 28 4f 8a 8a 0f ca 74 1d 42 9f 7e 5d 7a fe 9b ef da 12 5f de 0f d7 eb f4 d4 72 b2 ff d8 d4 95 5c 4c 7b 83 9b e4 d2 cb ad ec 2a 3a 04 7f 21 84 e0 c7 7b 18 cd 67 3a 36 f7 70 d0 c8 87 bb 1a 85 a9 05 06 65 83 53 13 31 40 bf 03 1e 01 30 14 94 20 30 e3 0e 54 92 24 2f 53 e0 85 c3 75 0e 05 b2 fd 2a 9b 49 dd c5 da c1 74 05 be df ff 1c 84 3c d7 c4 b7 f4 c6 e5 58 35 04 8c e9 1f 62 e2 f8 e0 b3 f6 ef f0 5c 66 65 4f 53 ab 3a e0 0d 8f cf 0f f8 db a8 0c f0 31 1c be af 55 f3 bb fb c5 51 ba 84 09 14 6b 21 d9 e1 e4 8b f7 08 67 8b 83 79 5b 86 e8 67 a4 19 51 14 fe d5 9d df e0 bd ef 66 e3 b5 8c 44 03 62 69 56 7d f3 78 a8 7c 47 e9 c6 cd b0 12 71 40 b3 1c Data Ascii: zJZYb<6y@BuZ7iy\|`}(OtB~]z_r\L{:!{g:6peS1@0 0T$/SuIt<X5b\feOS:1UQk!gy[gQfDbiV}x\|Gq@
2024-05-25 23:00:40 UTC	902	IN	Data Raw: 4c 23 57 95 ea bc d5 fc 3c 17 4f 86 bf c4 7f 24 44 95 18 11 55 4a 9b 8e 0b 27 ce c0 df d4 f2 1b a3 ce 46 e1 e6 15 5c 00 7a 93 25 ee c8 78 b4 b8 0f 01 d4 f9 75 78 a1 fb d4 36 72 d6 61 e6 86 3c e2 49 af 6d 30 d6 cf 6d d3 fc 0f 85 3a 82 bb 81 bc 3d b6 24 82 a3 32 6e 33 d8 07 72 4b 23 70 9e 3f 58 7f 67 50 8f 41 9d bd 7e 4d 48 3f a1 77 81 54 a2 0a 15 81 ad 07 c0 6a 21 9f 58 9a e0 07 2a b2 be d8 14 ee 82 0b 98 32 83 6e 6c 49 97 8d fe bd 63 cf db c1 f7 ee 79 45 20 64 7c b7 23 ee 08 9d fd c6 2a 8e af 97 d6 09 56 ba 11 3e f6 eb 6f f3 55 43 bb 80 b6 47 0a 95 e3 f8 db ff 0f 51 e7 d1 d1 a7 fc 1f 18 ac ca 30 64 ba 23 24 ba b7 dc d1 29 5f ad 47 ab 15 d1 14 1f 0e b6 3f 44 1a 99 98 47 04 9f 8d f8 b6 d1 53 d4 a1 cf d6 fb 90 64 04 7d 31 94 d4 5a 49 08 dd 74 df fb 46 ab e6 Data Ascii: L#W<O$DUJ'F\z%xux6ra<Im0m:=$2n3rK#p?XgPA~MH?wTj!X2nlIcyE d\|#V>oUCGQ0d#$)_G?DGSd}1ZItF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.6	59330	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:39 UTC	618	OUT	GET /sw.js_data HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:40 UTC	1661	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Sat, 25 May 2024 23:00:40 GMT Content-Disposition: attachment; filename="response.bin"; filename=UTF-8''response.bin X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Cross-Origin-Opener-Policy: same-origin; report-to="youtube_main" Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version= Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-25 23:00:40 UTC	1661	IN	Data Raw: 64 36 64 0d 0a 29 5d 7d 27 0a 0a 5b 5b 22 79 74 2e 73 77 2e 61 64 72 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 65 6e 22 2c 22 55 53 22 2c 22 55 53 22 2c 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 22 2c 22 22 2c 22 43 67 73 78 63 6c 51 79 4d 30 74 30 53 45 4a 45 55 53 69 59 32 38 6d 79 42 6a 49 4b 43 67 4a 56 55 78 49 45 47 67 41 67 51 51 25 33 44 25 33 44 22 2c 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 Data Ascii: d6d)]}'[["yt.sw.adr",null,[[["en","US","US","8.46.123.175",null,null,true,null,null,null,null,"","","CgsxclQyM0t0SEJEUSiY28myBjIKCgJVUxIEGgAgQQ%3D%3D","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 S
2024-05-25 23:00:40 UTC	1661	IN	Data Raw: 74 5f 73 6f 75 72 63 65 5c 75 30 30 33 64 74 63 70 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 43 4a 6a 62 79 62 49 47 45 4c 36 4b 73 41 55 51 67 4f 57 77 42 52 44 36 36 37 41 46 45 4d 6e 58 73 41 55 51 73 4f 36 77 42 52 43 65 35 4c 41 46 45 50 58 67 73 41 55 51 37 71 4b 76 42 52 44 56 69 4c 41 46 45 50 61 72 73 41 55 51 6f 2d 32 77 42 52 44 4a 39 36 38 46 45 4c 76 53 72 77 55 51 6a 74 71 77 42 52 44 77 73 72 41 46 45 4a 65 44 73 41 55 51 72 4e 69 77 42 52 Data Ascii: t_source\u003dtcp",null,null,0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,"CJjbybIGEL6KsAUQgOWwBRD667AFEMnXsAUQsO6wBRCe5LAFEPXgsAUQ7qKvBRDViLAFEParsAUQo-2wBRDJ968FELvSrwUQjtqwBRDwsrAFEJeDsAUQrNiwBR
2024-05-25 23:00:40 UTC	122	IN	Data Raw: 4f 52 6c 52 55 55 6c 6c 36 54 30 46 44 4d 33 42 6d 5a 32 31 36 5a 47 70 66 64 44 46 7a 5a 56 63 77 62 55 35 4a 4e 41 5c 75 30 30 33 64 5c 75 30 30 33 64 22 2c 22 43 67 73 78 63 6c 51 79 4d 30 74 30 53 45 4a 45 55 53 69 59 32 38 6d 79 42 6a 49 4b 43 67 4a 56 55 78 49 45 47 67 41 67 51 51 25 33 44 25 33 44 22 5d 2c 22 56 61 64 64 62 61 33 37 31 7c 7c 22 5d 5d 0d 0a Data Ascii: ORlRUUll6T0FDM3BmZ216ZGpfdDFzZVcwbU5JNA\u003d\u003d","CgsxclQyM0t0SEJEUSiY28myBjIKCgJVUxIEGgAgQQ%3D%3D"],"Vaddba371\|\|"]]
2024-05-25 23:00:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.6	59328	142.250.186.33	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:39 UTC	528	OUT	GET /dk73p6C27bkfmV5NMayA05oaT5XMgc0K8QHs6Flf4XuhKNqxjANXo78d712mysuU5fk51JTxKxU=s160-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:40 UTC	539	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="channels4_profile.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 5761 X-XSS-Protection: 0 Date: Sat, 25 May 2024 23:00:37 GMT Expires: Sun, 26 May 2024 23:00:37 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/jpeg Vary: Origin Age: 3 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:40 UTC	851	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 08 0a 07 08 08 08 08 08 08 09 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 08 08 08 08 0a 0a 09 08 08 0b 0d 0a 08 0c 08 08 0a 08 01 03 04 04 06 05 06 09 06 06 0a 0f 0d 0a 0e 0d 0a 0d 0d 0d 0f 0d 0f 0d 0e 0d 10 0f 0d 0d 0e 0d 0d 0e 0e 0e 0d 0d 0f 0d 0a 0e 0d 0d 0d 0e 0d 0f 10 0d 0d 0f 10 0d 0d 0d 0e 0d 0f 0d 0e 0e 0d 0e 0e ff c0 00 11 08 00 a0 00 a0 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 08 09 06 07 02 04 05 03 01 ff c4 00 3e 10 00 02 02 01 03 02 04 04 03 03 08 0b 00 00 00 00 01 02 03 04 00 05 11 12 06 13 07 08 21 31 09 14 22 41 15 23 32 24 51 61 19 33 34 42 55 81 Data Ascii: JFIF>!1"A#2$Qa34BU
2024-05-25 23:00:40 UTC	1390	IN	Data Raw: 07 38 25 50 ca ce ac e8 a4 17 44 60 8e c8 0e ec a8 e5 5c 2b 32 ee 15 8a 38 04 83 c5 b6 d8 e9 37 68 b6 8d 26 da 8b 6b b8 d8 1e 60 bc 21 3a 56 af 62 8f 23 2d 72 b1 d9 a3 3b 71 3f 35 a7 d9 5e e5 49 c9 50 14 b1 8c f6 e4 2a aa bd e8 e5 00 00 06 71 a5 3e d2 36 97 32 36 1e aa ad 0f ab 3e 23 c3 9f 30 fa ee 9b c7 f0 dd 5a ed 54 51 c5 61 13 19 6a 81 e9 ed 52 c0 96 af db df b3 b8 f5 f5 f5 3b e6 54 22 f2 dd e5 ab 09 e1 29 cb 85 bc 8b 74 f2 59 e6 c2 3e a0 d3 58 cc 12 1d 4a 9f 14 bd 02 7a 23 86 fe 6e e4 0a 59 98 41 3e c5 4a b1 de 29 96 44 fa 97 b4 f2 40 94 5c 5d 99 45 5a 93 a5 2d 96 48 9c c1 c0 60 0c 01 80 30 06 00 c0 18 03 00 c6 7c 4a f1 1a a6 9b a7 d9 d4 6f 4a 22 ad 56 33 24 8d e8 59 8e e1 52 28 d7 71 ce 69 9c ac 71 a0 f5 67 65 1f 7c c1 94 ae ec 8a 2a f1 fb c7 3b 7a Data Ascii: 8%PD`\+287h&k`!:Vb#-r;q?5^IPq>626>#0ZTQajR;T")tY>XJz#nYA>J)D@\]EZ-H`0\|JoJ"V3$YR(qiqge\|;z
2024-05-25 23:00:40 UTC	1390	IN	Data Raw: df f8 e6 76 5f 73 f4 33 d8 d4 cf 65 9f 3b 3e 21 f8 67 63 63 2b 74 9b 9f b7 7e a5 14 3f fb 6b a9 19 ce 4d 64 ce 72 da 5b 99 b4 bc 0a 5e 96 fd a4 f4 df e0 7b fe 57 cd fe 11 f2 7c f6 fa fb 3f 31 f2 bf 50 5d fb bd b1 26 c3 7e e7 1f 5e 58 8e cf 03 43 d7 f1 8b c0 3d 23 59 81 20 d5 69 25 a5 88 b1 86 4e 4f 14 f0 17 e3 cf b3 62 16 49 a3 0f c1 39 a2 bf 07 e0 bc 95 b8 8d b7 36 8c 9c 72 76 21 ef 88 5f 08 9a 2f c9 b4 ad 5a cd 52 59 98 43 7a 18 ee 44 01 dc 88 d2 48 7e 56 58 d5 7d 00 69 05 96 e2 3d 79 1d c9 ea ab 4d 71 bf 9e 91 36 18 da 91 cf 79 0d bc 60 f2 49 d4 9a 50 2f 67 4f 7b 30 2f bd bd 3b 95 ca e0 6c 49 2e 11 16 c4 08 00 f5 92 c5 78 50 7a 0e 47 71 bc 88 e2 13 fe 4a de eb 5c 8b 1a 78 d8 4b 74 b7 32 56 7c 2e bc d4 b3 91 d3 57 a5 2e 02 49 2e 8f 2b b0 3b 2c 63 9c da Data Ascii: v_s3e;>!gcc+t~?kMdr[^{W\|?1P]&~^XC=#Y i%NObI96rv!_/ZRYCzDH~VX}i=yMq6y`IP/gO{0/;lI.xPzGqJ\xKt2V\|.W.I.+;,c
2024-05-25 23:00:40 UTC	1390	IN	Data Raw: b6 5f ca 74 91 9b 8d 55 06 1d 78 7f 75 cf ae bf 05 5e 36 85 d7 68 b3 e2 76 fe 25 9e 04 fe 1d d4 46 f4 29 c6 ae b2 24 b4 bc 40 0a 97 50 a8 bd 1e c0 00 39 bb c7 6b 72 77 66 b1 26 df a0 ec c3 cb 38 f3 ea 30 15 2e 9c 1f 0c 88 8f 93 4b 51 80 30 0c d3 c1 4f 0e 5b 53 d6 f4 dd 31 54 b0 bb 72 18 65 e2 76 2b 5b 97 3b 72 03 b8 db b5 55 26 93 f7 fd 1e 80 9d 81 8f 5d da 0d 77 ee d7 2b 91 71 53 d9 a6 fc 77 6b 91 67 3f 14 2f 19 d6 8f 4f c5 a4 c0 78 4d ab b1 88 aa ee 3b 7a 75 5e db 58 f6 04 01 2b 34 15 b8 12 39 c5 24 fb 6f c1 b2 15 38 ed 49 22 93 0b 4f 6e a2 4f 2c d9 52 59 6a 7a 53 f1 9b 30 dd b7 b3 0d db 7b 2d 2f e1 d3 e4 b4 d3 8e 3d 7f 56 83 8d d9 57 7d 36 ac a3 ea a5 03 af f4 a9 50 8f a2 dc ea 48 44 3f 54 10 37 d5 c6 49 a4 48 6b 2a 54 db 7e 1c 3a 9e 7b 15 88 ed 5d 96 Data Ascii: _tUxu^6hv%F)$@P9krwf&80.KQ0O[S1Trev+[;rU&]w+qSwkg?/OxM;zu^X+49$o8I"OnO,RYjzS0{-/=VW}6PHD?T7IHk*T~:{]
2024-05-25 23:00:40 UTC	740	IN	Data Raw: 06 01 82 f8 d5 e0 d5 1d 63 4c 9f 4d be 85 a2 98 06 49 13 61 35 69 d3 73 15 88 18 83 c6 58 98 fd c1 57 52 f1 ba bc 72 48 ac f2 36 8c 9c 5d d6 65 1c f8 ef e0 8d dd 17 55 9b 4d ba 01 78 f6 78 67 50 44 56 ab 39 61 15 98 b7 dc 85 7e 2c ac 84 93 1c 8b 22 12 4a 6e 6c 69 54 db 5b f3 3d 26 1e b7 6b 1b f1 e2 6b fc ee 4a 24 17 93 7b f1 d2 b9 a9 75 1c e8 1e 3e 9e d3 65 b1 02 92 42 c9 aa 5f 3f 87 e9 90 30 01 8f 19 5a 69 d8 b7 12 10 45 cc ec 17 20 62 5d da 8a f3 fc 2f c9 55 8d 7b 4e 34 d6 79 f4 fc 98 0f 84 3e 14 ea 3a f6 b2 94 ab 93 2d 9b 72 49 62 d5 99 06 eb 14 6d 20 6b 57 6c 71 db e9 0f 26 e4 0d 8c 92 c8 91 8d 9a 45 ce d2 92 a5 14 96 7a bb 24 54 a8 b0 f4 d2 59 f0 ea 5d f7 81 de 09 51 d1 74 c8 74 da 09 c6 34 fa e5 95 80 ef 5a b0 c1 44 b6 6c 30 03 94 b2 71 50 07 e9 8e Data Ascii: cLMIa5isXWRrH6]eUMxxgPDV9a~,"JnliT[=&kkJ${u>eB_?0ZiE b]/U{N4y>:-rIbm kWlq&Ez$TY]Qtt4ZDl0qP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.6	59329	142.250.186.33	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:39 UTC	557	OUT	GET /MMiaEh74vF-aNPK4AaYN7dI5UnvGz6UShkgEnPmZSb3m97mf81-I9OjIWNYeqy8i4nXUW4fbqac=w1138-fcrop64=1,00005a57ffffa5a8-k-c0xffffffff-no-nd-rj HTTP/1.1 Host: yt3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:40 UTC	539	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="channels4_banner.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 28593 X-XSS-Protection: 0 Date: Sat, 25 May 2024 23:00:38 GMT Expires: Sun, 26 May 2024 23:00:38 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/jpeg Vary: Origin Age: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:40 UTC	851	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 08 08 08 08 0a 09 09 08 08 0b 0d 0a 08 0d 08 08 09 08 01 03 04 04 06 05 06 0a 06 06 0a 0d 0e 0b 0e 10 10 10 0e 0e 0f 0f 10 10 10 10 0f 0f 0d 0d 0d 10 0d 0f 0f 0d 0f 0d 0e 0d 10 0e 10 0d 0d 0d 0d 10 10 0d 0d 0d 0d 0d 0f 0d 0e 0d 10 0d 0d 0d 0d 0d 0d ff c0 00 11 08 00 bc 04 72 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 01 00 02 03 00 03 01 01 00 00 00 00 00 00 00 00 00 07 08 05 06 09 01 03 04 02 0a ff c4 00 60 10 00 02 02 01 02 03 04 04 06 09 0d 0d 04 09 05 00 01 02 00 03 04 05 11 06 12 21 07 13 31 41 08 22 51 61 14 23 32 52 71 81 09 42 55 62 72 Data Ascii: JFIFr"`!1A"Qa#2RqBUbr
2024-05-25 23:00:40 UTC	1390	IN	Data Raw: 36 44 e8 b0 6c 69 d8 53 dd 24 71 b1 ce 22 d7 75 ee 07 21 63 95 f8 e5 c0 2d e6 17 8a bb 0e 79 7b 18 d7 13 95 cd ee 07 21 63 c7 8e 4a 16 e0 fe cf ec ba cf 8e 47 ae a4 23 9b 99 4a b3 9f 24 5d c7 87 ce 61 e0 3a 0e a7 a4 cd 4d 21 40 55 01 55 40 0a 07 40 00 e8 00 1e c0 27 ee 25 31 9c 6e 7c 56 40 f9 72 68 f6 5a 34 1c cf 52 79 f2 c9 53 14 c5 a6 c4 5e 1d 26 40 68 d1 a0 e6 7a 93 fe 89 11 13 9e 5a 44 88 88 44 88 88 44 88 88 44 88 88 44 88 88 44 88 88 44 88 88 44 88 9e bb ef 0a a5 98 85 55 04 92 4e c0 01 d4 92 7d 82 54 02 4d 82 a8 17 c8 2f 64 d5 b8 b3 8f ea c6 dd 07 c6 5d f3 01 e8 bf e9 1b ed 7e 81 bb 1f 60 f1 9a 87 16 f6 a4 cf bd 78 db a2 78 1b 4f 47 6f c0 1f 68 3d e7 d6 fc 19 1f 93 fc bd 4f bc 9f 12 7d e6 4a d8 1e c5 b9 f6 9b 10 c8 70 8f 89 fd a3 c3 c0 67 cc 8d 14 Data Ascii: 6DliS$q"u!c-y{!cJG#J$]a:M!@UU@@'%1n\|V@rhZ4RyS^&@hzZDDDDDDDDUN}TM/d]~`xxOGoh=O}Jpg
2024-05-25 23:00:40 UTC	1390	IN	Data Raw: aa 34 bc 1e 55 d3 74 0a 13 4a c4 01 b7 56 7a bd 7c db db fc f5 b9 4c e9 61 25 8b 1a 43 12 49 33 d1 5b 39 b1 f4 b4 ee 82 2a d8 9a fa 87 03 2c 81 d7 22 38 c7 75 ad dd b8 05 ce 71 1e d0 77 b2 f0 3d 9b 9f bb 19 77 00 7c 7c bf 1f 67 35 f0 e5 fa 67 f1 5b b1 73 ae e7 02 dd 48 43 4d 6b ec e8 95 d2 a8 a3 dc aa 04 f4 9f 4c 6e 2a fb bd a8 7e 71 3f e9 c8 70 d8 36 e6 df d5 24 80 de 5b 8d 89 1b f8 6e 01 04 8f 78 f6 cf c7 c2 57 e7 2f e5 12 63 18 2e 1f c2 9a 1f e1 b3 fc ab 37 72 2e 9e f5 7d 35 5f 4d 6e 24 d0 57 4a be cb d3 59 d3 b5 5d 3a 9c dc 77 cf a2 aa af 5b 00 15 e5 e2 f7 f8 8b 5e ed 8f 70 1b 9b 12 d6 e5 b6 bf 5b c6 5a df 44 cf 4c fc 4e 28 17 52 68 18 3a 86 3a f7 8f 88 6e 17 2d b4 6e 17 bf c7 b0 d7 53 3a ab 15 5b 10 a7 35 65 97 72 c1 95 8d 36 ec 7b 81 3f f4 93 80 73 Data Ascii: 4UtJVz\|La%CI3[9,"8uqw=w\|\|g5g[sHCMkLn~q?p6$[nxW/c.7r.}5_Mn$WJY]:w[^p[ZDLN(Rh::n-nS:[5er6{?s
2024-05-25 23:00:40 UTC	1390	IN	Data Raw: 44 90 57 68 91 11 08 91 11 08 91 11 08 92 5c ec a3 87 4d 75 35 ee 36 6b b6 e4 f6 8a 87 50 7f 1c 9d ff 00 07 96 69 3c 03 c2 bf 09 bb d6 1f 13 5e cd 67 b1 8f da a0 fa 76 dc fb 14 7b c4 9c 40 91 3e da e3 21 ac fc df 11 cc d8 c9 d0 6a 1b e2 72 27 a5 b9 a8 e7 6a f1 50 d6 fa 94 67 33 62 fe 83 50 df 3d 4f 4b 73 5e 62 22 43 4a 2d 48 88 84 48 88 84 48 88 84 48 88 84 48 88 84 48 88 84 48 88 84 48 88 84 48 88 84 48 88 84 48 88 84 48 88 84 49 5f bd 2d 7b 30 d6 f5 dc 7a f4 8d 36 cc 7c 2c 1b f6 7d 4b 36 fb 1b 9d eb 56 dd 31 28 a2 a0 6c b0 33 28 7b b9 da 94 65 e5 4e 66 0d 60 16 06 40 fe 99 3c 09 ad e6 e9 0e 74 2c ec 8c 5c ba 39 ac 7c 7c 76 15 be 75 3c bb 3d 29 70 02 da af 51 eb d4 51 d4 3b 02 87 6e 75 74 de 60 72 18 eb a2 73 5f 1b 0e f6 4f 90 12 d6 9e 0e 20 72 39 8b f7 Data Ascii: DWh\Mu56kPi<^gv{@>!jr'jPg3bP=OKs^b"CJ-HHHHHHHHHHHHI_-{0z6\|,}K6V1(l3({eNf`@<t,\9\|\|vu<=)pQQ;nut`rs_O r9
2024-05-25 23:00:40 UTC	1390	IN	Data Raw: 18 bf 16 80 3d c4 6f b1 f9 35 83 e0 5b 6e a4 9f 25 dc 74 eb b8 e9 be 75 15 0c d5 b3 08 20 6d dc 7e 03 99 3c 00 fc 66 b3 29 29 25 ab 94 45 08 bb 8f e2 e7 90 59 fd 6f 5e ab 1d 39 ed 6e 51 e4 3c 59 8f b1 57 c4 9f e4 1e 64 48 87 8b 3b 41 b7 27 74 5d ea a7 e6 03 eb 38 ff 00 38 c3 c7 f0 47 4f 6f 34 d7 b5 1d 4a cb 9c d9 6b 17 73 e6 7c 87 b0 0f 05 1e e0 00 9f 34 9d 70 4d 94 a7 c3 ed 2c d6 7c bc fe 6b 7f 64 1f ac e7 c8 05 2e e1 3b 39 0d 15 a4 96 cf 93 9f 01 e0 3e d3 9f 2b 2c ef 04 68 9d fe 4d 68 46 e8 a7 bc 7f 67 2a 6c 76 3f 84 dc ab b7 be 4f 73 43 ec 93 44 e4 a5 ae 61 eb 5a db 2f fa 34 e8 3f 8c dc c7 e8 02 6f 92 35 db 0c 47 d6 ab cc 6d 3d d8 fb a3 c7 57 1f 7f 77 fa ab 84 da 7a df 59 ac 2c 07 ba ce e8 f1 f9 c7 df 97 92 44 44 e1 97 22 91 11 08 91 11 08 91 11 08 91 Data Ascii: =o5[n%tu m~<f))%EYo^9nQ<YWdH;A't]88GOo4Jks\|4pM,\|kd.;9>+,hMhFg*lv?OsCDaZ/4?o5Gm=WwzY,DD"
2024-05-25 23:00:40 UTC	1390	IN	Data Raw: ba ff 00 c2 32 5c 83 bd 75 fc 5d 7f 40 f9 4d f8 cd b9 fa 39 66 bb 3d 23 b3 38 67 e6 fa 16 b5 c3 be fe f3 bc 4e 83 fa a2 c3 c6 fc d4 eb 80 61 fe a7 48 d0 e1 de 77 79 de 7a 0f 21 6f 3b a4 44 4e b1 74 69 3c a5 64 90 00 24 92 00 03 a9 24 f4 00 0f 69 33 c4 91 bb 2a e1 4e 63 f0 ab 07 45 24 52 0f 99 f0 6b 3e ae aa bb f9 ee 7c 81 9a 9c 57 12 8f 0e a6 75 44 9c 34 1c dc 74 1f 7f 21 73 c1 6b 71 1a e6 50 c0 e9 9f c3 41 cc f0 1f 7f 21 73 c1 6e 5c 15 c3 03 16 90 a7 63 63 fa d6 37 df 6d f2 47 de a8 e8 3e b3 e7 36 08 89 e6 2a aa 99 2a a5 74 f2 9b b9 c6 e4 fe 38 0d 07 20 a0 1a 89 df 51 23 a5 90 dd ce 37 3f 8f ab a2 44 44 c5 58 e9 11 10 89 11 10 89 11 10 89 11 10 89 11 10 89 11 10 89 11 3f 16 d8 00 24 f4 00 12 4f b0 01 b9 3f 92 00 be 41 54 0b e4 a3 5e d6 f8 8c 82 b8 c8 76 Data Ascii: 2\u]@M9f=#8gNaHwyz!o;DNti<d$$i3NcE$Rk>\|WuD4t!skqPA!sn\cc7mG>6*t8 Q#7?DDX?$O?AT^v
2024-05-25 23:00:40 UTC	1390	IN	Data Raw: a5 a4 6e 9f 9a e2 d2 0b 64 76 7a b4 80 48 f9 ce 00 8b 5c ee fd cc b7 66 e9 fc 7e 3f 1d 72 fd 82 76 15 85 c3 da 75 78 18 6b be c7 bc c8 bd 80 ef 72 b2 08 01 ee b0 81 ee 0a 89 e1 5a 05 51 e1 24 68 89 08 d4 54 49 53 2b a6 99 c5 cf 71 b9 27 52 4a f8 24 44 4c 74 49 ab f6 89 c4 1d c6 3b 6c 76 b2 dd eb 4d bc 46 e3 d6 6f c5 5d fa fc e2 b3 68 90 77 68 9a ff 00 7f 92 c0 1d eb ab e2 d3 d8 48 3e bb 7d 6d d3 e8 51 ef 9d 7e cb 61 7e bf 5c dd e1 dc 67 79 de 5a 0f 33 f0 05 74 db 3d 87 fa e5 5b 77 87 71 bd e7 79 68 3c cf c2 eb 57 02 79 88 9e 8e 53 92 44 4f 28 84 90 00 dc 92 00 03 c4 93 d0 01 ef 27 a4 22 cb 70 a7 0e b6 55 cb 58 e8 a3 d6 b1 be 6a 0f 1f c6 3e 03 df f4 19 3e 62 e3 2a 2a a2 00 aa 8a 15 40 f0 00 0d 80 fc 93 05 c0 fc 2e 31 69 00 81 de be cd 69 1e df 25 1e e4 07 Data Ascii: ndvzH\f~?rvuxkrZQ$hTIS+q'RJ$DLtI;lvMFo]hwhH>}mQ~a~\gyZ3t=[wqyh<WySDO('"pUXj>>b**@.1ii%
2024-05-25 23:00:40 UTC	1390	IN	Data Raw: 3d a0 ee 92 2d 91 b0 36 cc 8e 61 50 02 74 07 dc ae fc 48 bb b3 af 48 9d 3f 50 d1 17 5f 72 f8 18 04 5e ce d9 86 b5 7a 96 8b 5e a6 2f dd 3d aa 79 99 09 45 46 66 6d d4 6d b9 e5 90 26 bb f6 54 b8 7a ab 19 29 c6 d4 f2 90 78 5d 5d 34 d6 8d d4 8e 89 91 7d 56 8d f6 df d6 45 3b 11 d0 1d c0 ad 36 cf 62 55 52 49 14 10 3d ce 61 2d 7d 86 4d 70 c8 b4 9d 2f d2 ea a0 13 90 0a e6 44 a4 7f df 62 d0 fe e7 6a ff 00 c4 c3 fe d7 33 1c 19 f6 4e f4 6c ec cc 4c 2a f0 35 44 b3 33 2b 1f 12 b7 b1 71 02 2d 99 37 25 28 cf cb 94 cd c8 ac e0 b7 2a b1 d8 1d 81 f0 99 ef d8 fc 65 8d 2f 75 33 c0 02 e7 4d 07 9a b8 c6 e1 99 05 5c 48 95 3b b5 bf b2 37 a4 e8 fa 96 5e 99 91 81 a9 5b 76 1d 82 bb 2c a1 71 0d 4c 5a b4 b0 14 ef 32 6b 7d b9 5c 78 a0 eb bc f5 f6 59 f6 48 f4 9d 5b 51 c4 d3 68 c0 d4 ea Data Ascii: =-6aPtHH?P_r^z^/=yEFfmm&Tz)x]]4}VE;6bURI=a-}Mp/Dbj3NlL5D3+q-7%(e/u3M\H;7^[v,qLZ2k}\xYH[Qh
2024-05-25 23:00:40 UTC	1390	IN	Data Raw: 88 89 cb 2a 24 44 42 24 44 42 24 44 42 24 44 42 24 44 42 24 44 42 26 f1 11 28 89 11 12 a8 91 11 08 91 11 08 91 11 08 91 11 08 91 11 08 91 11 08 91 11 08 91 11 08 91 11 08 92 2b ed 4b 8b b9 8f c1 6b 3e aa 90 6e 23 ed 9b ca bf a1 7a 16 f7 ec 3c 88 9b 5f 1f 71 6f c1 aa d9 4f c7 58 08 41 f3 47 83 58 7f 07 cb da db 7b 0c 84 09 f6 f5 3e 64 f5 24 fb 49 f3 27 db 25 6d 8c c0 bb 47 7a fc e3 ba 3f 46 0f 12 3e 77 80 d0 7e b5 cf cd 52 2e cb 61 1b ee f5 c9 46 43 d8 1c cf d2 f2 e1 d7 c1 22 22 4c ea 53 48 88 84 5e fc 0a 39 ac ad 7e 73 a2 ff 00 19 80 ff 00 8c b2 00 48 0b 82 f1 79 f2 f1 d7 fc ea b1 fc 4d df fe 59 3f 48 5b 6f a5 bc f0 45 c9 a4 fe f1 03 f9 54 57 b6 52 5e 58 a3 e4 d2 7d e6 df ca 91 11 22 b5 1d a4 44 42 24 44 42 24 44 42 24 44 42 24 44 42 24 44 42 24 44 42 24 Data Ascii: *$DB$DB$DB$DB$DB$DB&(+Kk>n#z<_qoOXAGX{>d$I'%mGz?F>w~R.aFC""LSH^9~sHyMY?H[oETWR^X}"DB$DB$DB$DB$DB$DB$DB$
2024-05-25 23:00:40 UTC	1390	IN	Data Raw: 6e 0f 67 67 c5 5f 5f b2 c9 a8 56 f8 3a 38 4b 11 f6 cb bf 7e 47 56 db e2 3c f9 49 da 73 5e 6c 1c 07 d9 a6 76 a5 68 a7 4e c1 c9 cb b0 b7 29 18 d4 59 6a a7 86 e6 c7 45 29 5a ae e0 96 b1 94 0d fd e2 4c dc 1f e8 8f 6a 64 63 8d 72 f6 d3 71 5b 20 2d ca 71 33 9a e6 a5 58 87 2a 4d 15 56 bd e9 5e 45 b1 6c b3 91 5f bd 2b ca bb 37 53 b3 78 14 98 65 08 a3 83 7e 6d cd e7 12 c8 c9 26 e4 ba db ad df 37 e0 05 ee 78 2a b1 cd 89 a4 12 2e b2 fe 90 bd 9c ea 39 98 9c 2a f8 7a 76 a1 96 8b c2 da 62 b5 98 b8 59 59 15 86 22 c3 ca 6c a6 a7 40 fb 6c 4a f3 6e 01 52 40 0c bb d7 9e 24 e0 dc cc 26 54 cc c4 ca c3 77 52 c8 99 58 f7 63 33 a8 3b 16 45 b9 10 b2 83 d0 b2 82 37 e9 3b e3 c0 9a d6 15 b8 d5 2e 9f 75 36 e3 52 89 4d 62 8b 15 d5 12 b5 08 a8 79 4e ea 54 2e dc ac 01 e9 e1 39 c5 f6 5b Data Ascii: ngg__V:8K~GV<Is^lvhN)YjE)ZLjdcrq[ -q3XMV^El_+7Sxe~m&7x.9*zvbYY"l@lJnR@$&TwRXc3;E7;.u6RMbyNT.9[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.6	59323	142.250.186.150	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:39 UTC	531	OUT	GET /vi/WlW4UAl3MyM/hqdefault.jpg?sqp=-oaymwEcCPYBEIoBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLAfP1nKtBDWEA5EpV7mBk3_zYjAOg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:40 UTC	654	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 5638 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sat, 25 May 2024 23:00:37 GMT Expires: Sun, 26 May 2024 01:00:37 GMT Cache-Control: public, max-age=7200 ETag: "1631501547" Content-Type: image/webp Vary: Origin Age: 3 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:40 UTC	736	IN	Data Raw: 52 49 46 46 fe 15 00 00 57 45 42 50 56 50 38 20 f2 15 00 00 10 5b 00 9d 01 2a f6 00 8a 00 3e 51 22 8e 45 23 a2 21 16 c8 cd 40 38 05 04 b2 37 6e ae b2 1c e8 e0 3b 8a 2b 69 c7 d7 be ec 7e 44 74 78 97 de bf bf 03 f9 bd fd e7 e6 7f f9 ff f5 1e cc 7f 36 7f d4 f7 08 fd 39 ff 49 fd df f1 83 b9 a7 f4 1f 40 5f cc 3f b5 7e cd fb b2 7f a3 ff 15 fd 73 dd 7f f8 4f ea bf e5 fd c0 3f 96 7f 6f f4 c5 f6 38 fe d3 ff 1b d8 27 f8 e7 f8 5f 4c ef d9 8f 84 7f db 9f da bf 6a 0f fd da c3 fe 6e fe dd db 3f f6 4f c8 8f dd 8f 32 df 4c fd 8f f2 1f f7 5b a2 1c 4d 7e 59 f6 4b ee 3f d6 ff 69 bf b7 7e de 7c cb fd f7 f2 8f d3 1f 4e be a0 5f 94 ff 2c fe d1 f9 5d c4 4b a2 fd 20 7c 02 fa c5 f2 4f f0 9f d9 7f 68 7f c3 7e ea fb 45 fe e9 f9 41 fc 8b e1 5f ad 3f e9 be d0 3e c0 3f 8b ff 41 ff 6d Data Ascii: RIFFWEBPVP8 [*>Q"E#!@87n;+i~Dtx69I@_?~sO?o8'_Ljn?O2L[M~YK?i~\|N_,]K \|Oh~EA_?>?Am
2024-05-25 23:00:40 UTC	1390	IN	Data Raw: bc 70 91 29 a8 d5 fd 86 61 eb f3 80 c3 92 ef d6 b1 ea de d4 00 00 fe fd 4b 38 f9 a1 ea c3 c5 8c 51 fd 06 f3 57 d0 e3 22 15 b2 85 9f cf f8 50 d0 fd d7 48 f2 53 01 88 92 19 41 b9 7b 7f 94 b6 e3 2b 34 04 07 2f 7b 61 87 b5 6f 6f 17 ab 4d 2f 0b 2f 7e 4c 9c 86 35 80 1e 7a 7e bc a0 ef 57 14 e5 75 1a 32 e3 46 5a 2c 78 21 2c ab cf ac 6f 8c 6d 43 2a 43 96 a1 23 c8 b5 bf 9b d3 21 14 21 e1 3c b1 52 d4 8e 6f 75 06 ac 0d 42 e5 71 cb 40 8d 2c aa 91 06 78 da a6 1c ad d9 b9 e5 c7 d2 51 11 18 cd 16 51 46 6e cf d0 c8 70 a5 d6 de d8 d5 21 98 9a 91 b3 4a 0f a2 46 c8 2f e0 13 64 a0 30 09 e6 34 04 c8 84 01 68 ca a4 81 33 68 14 36 72 3c e7 ed 4a 59 29 39 ed 87 e5 7c 27 6e 74 84 2b 06 02 0f 77 5c 90 d5 d6 b9 c6 2c 5f c6 16 a5 13 2d 2b be 5a 54 4c b8 c3 1c c8 87 f5 35 2e 72 eb 39 Data Ascii: p)aK8QW"PHSA{+4/{aooM//~L5z~Wu2FZ,x!,omC*C#!!<RouBq@,xQQFnp!JF/d04h3h6r<JY)9\|'nt+w\,_-+ZTL5.r9
2024-05-25 23:00:40 UTC	1390	IN	Data Raw: 88 ee a3 39 6b 91 27 8a 07 9d 51 4d 78 a5 90 84 d6 52 47 a8 40 62 f9 c7 a6 23 c4 6e 3b 62 ba 08 26 52 be 54 78 7d 4a 92 c1 a2 c6 be a1 92 8e 03 f1 a5 c1 75 ce 34 ab f5 ab b8 b4 7e 03 eb 32 4b 96 9c 1c 6d e0 a5 ac be b3 a1 e7 41 e3 5a 1e 52 7c 10 ee 3f e1 98 8c 4d d3 67 44 48 07 e8 81 d2 24 21 a1 84 6e b2 66 55 e4 a9 4e 94 fa 69 bd 11 6a 3e 8b 7a 39 f8 f5 f8 af ca fb f1 49 9b 71 aa c9 0a 53 11 75 ac 7b 64 2d e6 f8 aa 25 a4 4c b0 5f e7 59 ae cb b6 6f d2 e5 29 1c 0a de b8 ff f4 af 46 33 9c 22 fd 5a 65 2f 4d 0a e1 66 70 97 03 d0 99 e9 4b b1 c7 75 18 a3 64 6f 5e 82 5b e0 11 2c f3 c9 69 b1 16 77 e3 cc 44 fa 11 6e 70 d2 4c 69 c9 63 57 83 51 3d 0f e0 fd 1c b4 ef 9c 55 06 4d af b2 7a 70 2a d5 ac dd 2f 40 8d ae b0 2a ca 14 1c 65 62 2f 9a 94 0f 37 74 a1 1c 11 f9 70 Data Ascii: 9k'QMxRG@b#n;b&RTx}Ju4~2KmAZR\|?MgDH$!nfUNij>z9IqSu{d-%L_Yo)F3"Ze/MfpKudo^[,iwDnpLicWQ=UMzp/@eb/7tp
2024-05-25 23:00:40 UTC	1390	IN	Data Raw: 75 6c c7 20 8f a8 bf 9a a3 56 a1 9c e7 64 5a cb 90 b8 31 c8 08 8b cc 66 ea 8d 15 b9 40 1c ab 84 56 84 89 09 1f 88 7b e1 fe 20 e9 72 f7 18 80 69 2f 75 f5 b2 ab a1 ed 6d a7 69 d4 db ec 46 7d 52 de 3c e3 06 d2 c2 ee 82 ee eb 6e 25 e7 f7 83 ff 9f f7 eb 05 c6 9f 31 e1 eb ca 54 c3 69 b3 17 74 17 d0 88 0b 44 7d a9 f8 c0 ec 9f c0 1b aa d9 fb 0f 84 b3 1d e7 04 ac 50 a0 ad 7e 33 7a 9f fd 11 62 c8 10 5e 2e 6b 33 ad 28 22 4a 0f c9 5a c7 19 d8 5e 7e 76 5f 76 eb 9b e2 f1 c8 cf d0 d9 33 19 76 2a 2e 3d 59 d7 e1 b9 26 e4 fc 28 c0 42 30 67 18 66 d5 cd 68 aa e5 e0 86 85 50 cf 83 8e ac 93 77 f0 76 ce 8c e4 5d 89 db d9 c7 ed b5 72 a2 f2 75 24 45 81 b1 36 f4 83 f2 ef d5 17 27 c0 69 d0 aa 21 e0 e6 9f ff f5 d2 15 99 fd 9e 14 eb 80 ca c5 fb f6 b3 1f e6 9c 06 f0 b6 94 d8 ad 5b 7d Data Ascii: ul VdZ1f@V{ ri/umiF}R<n%1TitD}P~3zb^.k3("JZ^~v_v3v*.=Y&(B0gfhPwv]ru$E6'i![}
2024-05-25 23:00:40 UTC	732	IN	Data Raw: 44 88 b1 ca 2c ed 52 b2 e4 29 e1 31 cf b5 64 87 45 fd 8a b6 96 b4 ca 5c 77 0c bb 06 f5 bd 94 82 cb 77 54 20 ab dc 96 14 2d f3 ae a2 63 5f 98 49 f0 36 35 da f8 14 ca e8 7c ff 23 1e c2 4d 41 c8 1c c7 49 f0 6a 9d a4 5c 20 45 31 19 8e b5 0a a9 46 4a c6 95 b4 4c 06 4b b4 89 30 a2 ea 89 24 ca ca 3b 5d b5 89 73 35 e4 24 cd 9b b0 60 e6 76 67 b0 b0 ba c9 de e4 37 f6 b7 54 f2 f6 71 37 87 82 96 aa c8 56 8a 4c 22 33 f4 a7 3d 95 00 a7 46 d0 93 90 e5 62 5f c0 89 e7 f3 20 52 81 96 cd d9 09 8d b4 4f f8 dc 7b 05 3e 7d 6b 10 94 aa ba 5d da e4 3e eb 5e 7b 29 b4 5f a4 50 a8 af c2 d4 ac 67 73 32 0e b9 95 12 0f 17 c9 0f 70 19 d5 9b 44 4a 2e 97 5c 33 8c 33 3e 74 ca ab b1 41 ce 8f 44 82 18 44 00 00 5e fb 94 11 b7 47 3d 3b e9 d5 a5 89 58 c1 e1 03 00 63 bf 38 8b 2c 77 2c 5c 7b e3 Data Ascii: D,R)1dE\wwT -c_I65\|#MAIj\ E1FJLK0$;]s5$`vg7Tq7VL"3=Fb_ RO{>}k]>^{)_Pgs2pDJ.\33>tADD^G=;Xc8,w,\{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.6	59331	142.250.186.68	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:40 UTC	1204	OUT	GET /pagead/lvz?evtid=ACd6Ktyy4CpeOJYoGLZrUI6-04kWtC61_teFSd322Tpk8_1v8gvqIbjrDkUqOXhRFcBBl8wFGhXOthpgY02HXnlgdUCTEEas5A&req_ts=1716678027&pg=MainAppBootstrap%3AUnclassified&az=1&sigh=AB9vU41_uQp6RALZ9zm2viXQa8klyEvhzw HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:40 UTC	891	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: image/gif Date: Sat, 25 May 2024 23:00:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Set-Cookie: NID=514=XKB46mGyrGuK-wWMB8eTLKJddbphlvoTJNOqfV1KxQNtucI70ub0W5hjPdDyfJsSUhYT1Efa06urM0E-fe05wX221EpF9NmLJ-OmKnTCG8_IEml_LOfUQnSALhmkbZ9izgNDtPr6CvKWLFPa9EeofqDnUW6clekP2FimXhbko1w; expires=Sun, 24-Nov-2024 23:00:40 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:40 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.6	59337	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:40 UTC	1463	OUT	GET /pagead/viewthroughconversion/962985656/?backend=innertube&cname=1&cver=2_20240524_00_00&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240524_00_00%3Bptype%3Dcview%3Btype%3Dcview%3Butuid%3D17z6J2vL4GUL6a_A-lMtGQ&foc_id=17z6J2vL4GUL6a_A-lMtGQ&label=followon_cvisit&ptype=cview&utuid=17z6J2vL4GUL6a_A-lMtGQ HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:40 UTC	903	IN	HTTP/1.1 302 Found P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Sat, 25 May 2024 23:00:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/962985656/?backend=innertube&cname=1&cver=2_20240524_00_00&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240524_00_00%3Bptype%3Dcview%3Btype%3Dcview%3Butuid%3D17z6J2vL4GUL6a_A-lMtGQ&foc_id=17z6J2vL4GUL6a_A-lMtGQ&label=followon_cvisit&ptype=cview&utuid=17z6J2vL4GUL6a_A-lMtGQ&cv_attributed=0 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:40 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.6	59343	142.250.185.194	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:41 UTC	1327	OUT	GET /pagead/viewthroughconversion/962985656/?backend=innertube&cname=1&cver=2_20240524_00_00&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240524_00_00%3Bptype%3Dcview%3Btype%3Dcview%3Butuid%3D17z6J2vL4GUL6a_A-lMtGQ&foc_id=17z6J2vL4GUL6a_A-lMtGQ&label=followon_cvisit&ptype=cview&utuid=17z6J2vL4GUL6a_A-lMtGQ&cv_attributed=0 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:41 UTC	1097	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Sat, 25 May 2024 23:00:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/962985656/?backend=innertube&cname=1&cver=2_20240524_00_00&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240524_00_00%3Bptype%3Dcview%3Btype%3Dcview%3Butuid%3D17z6J2vL4GUL6a_A-lMtGQ&foc_id=17z6J2vL4GUL6a_A-lMtGQ&label=followon_cvisit&ptype=cview&utuid=17z6J2vL4GUL6a_A-lMtGQ&cv_attributed=0&is_vtc=0&random=2035814151 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Sat, 25-May-2024 23:15:41 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:41 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.6	59342	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:41 UTC	617	OUT	GET /app_shell HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:41 UTC	4357	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff x-resource-manifest: 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 [TRUNCATED] Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Sat, 25 May 2024 23:00:41 GMT Strict-Transport-Security: max-age=31536000 X-Frame-Options: SAMEORIGIN Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="youtube_main" Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-25 23:00:41 UTC	4357	IN	Data Raw: 32 35 34 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 52 6f 62 6f 74 6f 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 22 20 6c 61 6e 67 3d 22 65 6e 22 20 64 61 72 6b 65 72 2d 64 61 72 6b 2d 74 68 65 6d 65 20 64 61 72 6b 65 72 2d 64 61 72 6b 2d 74 68 65 6d 65 2d 64 65 70 72 65 63 61 74 65 20 73 79 73 74 65 6d 2d 69 63 6f 6e 73 20 74 79 70 6f 67 72 61 70 68 79 20 74 79 70 6f 67 72 61 70 68 79 2d 73 70 61 63 69 6e 67 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 69 64 3d 22 5f 67 64 22 20 6e 6f 6e 63 65 3d 22 72 46 54 66 38 57 30 31 6d 53 45 32 76 6c 33 55 46 74 58 73 75 77 22 3e 77 69 6e 64 6f 77 Data Ascii: 254a<!DOCTYPE html><html style="font-size: 10px;font-family: Roboto, Arial, sans-serif;" lang="en" darker-dark-theme darker-dark-theme-deprecate system-icons typography typography-spacing><head><script data-id="_gd" nonce="rFTf8W01mSE2vl3UFtXsuw">window
2024-05-25 23:00:41 UTC	4357	IN	Data Raw: 6c 79 6d 65 72 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 74 72 75 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 74 72 75 65 2c 77 72 69 74 61 62 6c 65 3a 74 72 75 65 7d 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 72 69 67 50 6f 6c 79 6d 65 72 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 6e 65 77 50 6f 6c 79 6d 65 72 3a 6f 72 69 67 50 6f 6c 79 6d 65 72 7d 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 74 72 75 65 2c 0a 65 6e 75 6d 65 72 61 62 6c 65 3a 74 72 75 65 7d 29 7d 29 28 29 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 72 46 54 66 38 57 30 31 6d 53 45 32 76 6c 33 55 46 74 58 73 75 77 22 3e 77 69 6e 64 6f 77 2e 50 6f 6c 79 6d 65 72 3d 77 Data Ascii: lymer,configurable:true,enumerable:true,writable:true})},get:function(){return typeof origPolymer==="function"?newPolymer:origPolymer},configurable:true,enumerable:true})})();}).call(this);</script><script nonce="rFTf8W01mSE2vl3UFtXsuw">window.Polymer=w
2024-05-25 23:00:41 UTC	840	IN	Data Raw: 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 73 2f 64 65 73 6b 74 6f 70 2f 61 65 66 30 63 65 64 33 2f 6a 73 62 69 6e 2f 77 65 62 2d 61 6e 69 6d 61 74 69 6f 6e 73 2d 6e 65 78 74 2d 6c 69 74 65 2e 6d 69 6e 2e 76 66 6c 73 65 74 2f 77 65 62 2d 61 6e 69 6d 61 74 69 6f 6e 73 2d 6e 65 78 74 2d 6c 69 74 65 2e 6d 69 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 72 46 54 66 38 57 30 31 6d 53 45 32 76 6c 33 55 46 74 58 73 75 77 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 73 2f 64 65 73 6b 74 6f 70 2f 61 65 66 30 63 65 64 33 2f 6a 73 62 69 6e 2f 63 75 73 74 6f 6d 2d 65 6c 65 6d 65 6e 74 73 2d 65 73 35 2d 61 64 Data Ascii: <script src="https://www.youtube.com/s/desktop/aef0ced3/jsbin/web-animations-next-lite.min.vflset/web-animations-next-lite.min.js" nonce="rFTf8W01mSE2vl3UFtXsuw"></script><script src="https://www.youtube.com/s/desktop/aef0ced3/jsbin/custom-elements-es5-ad
2024-05-25 23:00:41 UTC	1390	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 43 4c 49 45 4e 54 5f 43 41 4e 41 52 59 5f 53 54 41 54 45 22 3a 22 6e 6f 6e 65 22 2c 22 44 45 56 49 43 45 22 3a 22 63 62 72 5c 75 30 30 33 64 43 68 72 6f 6d 65 5c 75 30 30 32 36 63 62 72 76 65 72 5c 75 30 30 33 64 31 31 37 2e 30 2e 30 2e 30 5c 75 30 30 32 36 63 65 6e 67 5c 75 30 30 33 64 57 65 62 4b 69 74 5c 75 30 30 32 36 63 65 6e 67 76 65 72 5c 75 30 30 33 64 35 33 37 2e 33 36 5c 75 30 30 32 36 63 6f 73 5c 75 30 30 33 64 57 69 6e 64 6f 77 73 5c 75 30 30 32 36 63 6f 73 76 65 72 5c 75 30 30 33 64 31 30 2e 30 5c 75 30 30 32 36 63 70 6c 61 74 66 6f 72 6d 5c 75 30 30 33 64 44 45 53 4b 54 4f 50 22 2c 22 44 49 53 41 42 4c 45 5f 59 54 5f 49 4d 47 5f 44 45 4c 41 59 5f 4c 4f 41 44 49 4e 47 22 3a 66 61 6c 73 65 2c 22 45 4c 45 4d 45 4e 54 5f Data Ascii: 8000{"CLIENT_CANARY_STATE":"none","DEVICE":"cbr\u003dChrome\u0026cbrver\u003d117.0.0.0\u0026ceng\u003dWebKit\u0026cengver\u003d537.36\u0026cos\u003dWindows\u0026cosver\u003d10.0\u0026cplatform\u003dDESKTOP","DISABLE_YT_IMG_DELAY_LOADING":false,"ELEMENT_
2024-05-25 23:00:41 UTC	1390	IN	Data Raw: 65 2c 22 64 65 73 6b 74 6f 70 5f 61 6e 69 6d 61 74 65 5f 6d 69 6e 69 70 6c 61 79 65 72 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 63 6c 69 65 6e 74 5f 72 65 6c 65 61 73 65 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 64 65 6c 61 79 5f 70 6c 61 79 65 72 5f 72 65 73 69 7a 69 6e 67 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 65 6e 61 62 6c 65 5f 64 6d 70 61 6e 65 6c 5f 63 6c 69 63 6b 5f 64 72 61 67 5f 73 63 72 6f 6c 6c 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 65 6e 61 62 6c 65 5f 64 6d 70 61 6e 65 6c 5f 73 63 72 6f 6c 6c 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 65 6e 61 62 6c 65 5f 64 6d 70 61 6e 65 6c 5f 77 68 65 65 6c 5f 73 63 72 6f 6c 6c 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 6b 65 79 62 6f 61 72 64 5f 63 61 70 74 75 72 Data Ascii: e,"desktop_animate_miniplayer":true,"desktop_client_release":true,"desktop_delay_player_resizing":true,"desktop_enable_dmpanel_click_drag_scroll":true,"desktop_enable_dmpanel_scroll":true,"desktop_enable_dmpanel_wheel_scroll":true,"desktop_keyboard_captur
2024-05-25 23:00:41 UTC	1390	IN	Data Raw: 76 73 73 5f 70 69 6e 67 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 61 64 73 5f 77 65 62 5f 65 70 5f 62 75 65 6e 6f 73 5f 61 69 72 65 73 5f 61 6e 64 5f 70 61 64 64 69 6e 67 5f 66 69 78 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 61 73 79 6e 63 5f 61 62 5f 65 6e 66 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 62 75 65 6e 6f 73 5f 61 69 72 65 73 5f 74 79 70 6f 67 72 61 70 68 79 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 62 75 74 74 6f 6e 5f 62 65 68 61 76 69 6f 72 5f 72 65 75 73 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 68 61 6e 6e 65 6c 5f 70 61 67 65 5f 6d 6f 64 65 72 6e 5f 70 72 6f 66 69 6c 65 5f 73 65 63 74 69 6f 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 68 72 6f 6d 65 5f 72 65 6c 61 74 65 64 5f 77 65 62 73 69 74 65 73 5f 73 74 Data Ascii: vss_pings":true,"enable_ads_web_ep_buenos_aires_and_padding_fix":true,"enable_async_ab_enf":true,"enable_buenos_aires_typography":true,"enable_button_behavior_reuse":true,"enable_channel_page_modern_profile_section":true,"enable_chrome_related_websites_st
2024-05-25 23:00:41 UTC	1390	IN	Data Raw: 72 69 6e 67 5f 6c 69 6d 69 74 65 64 5f 68 35 5f 63 6c 69 65 6e 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 67 6f 6f 67 6c 65 5f 70 61 79 6d 65 6e 74 5f 62 69 6c 6c 69 6e 67 5f 63 6f 6d 6d 61 6e 64 5f 63 6c 69 65 6e 74 5f 73 75 70 70 6f 72 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 68 61 6e 64 6c 65 5f 73 65 61 72 63 68 5f 6f 6e 5f 63 68 61 6e 6e 65 6c 5f 73 77 69 74 63 68 65 72 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 68 61 6e 64 6c 65 73 5f 61 63 63 6f 75 6e 74 5f 6d 65 6e 75 5f 73 77 69 74 63 68 65 72 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 68 61 6e 64 6c 65 73 5f 69 6e 5f 6d 65 6e 74 69 6f 6e 5f 73 75 67 67 65 73 74 5f 70 6f 73 74 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 68 6c 70 5f 63 6c 69 65 6e 74 5f 69 63 6f 6e 5f 70 69 63 Data Ascii: ring_limited_h5_client":true,"enable_google_payment_billing_command_client_support":true,"enable_handle_search_on_channel_switcher":true,"enable_handles_account_menu_switcher":true,"enable_handles_in_mention_suggest_posts":true,"enable_hlp_client_icon_pic
2024-05-25 23:00:41 UTC	1390	IN	Data Raw: 5f 73 69 5f 66 61 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 6c 61 79 61 62 6c 65 5f 61 31 31 79 5f 6c 61 62 65 6c 5f 77 69 74 68 5f 62 61 64 67 65 5f 74 65 78 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 6c 61 79 61 62 6c 65 5f 63 6f 6e 74 61 69 6e 65 72 5f 73 61 76 65 5f 62 75 74 74 6f 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 6c 61 79 61 62 6c 65 5f 65 6e 74 69 74 79 5f 73 61 76 65 5f 6d 65 6e 75 5f 69 74 65 6d 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 6c 61 79 61 62 6c 65 73 5f 64 65 65 70 6c 69 6e 6b 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 6c 61 79 61 62 6c 65 73 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 6c 61 79 61 62 6c 65 73 5f 66 75 6c 6c 73 63 72 65 65 6e 5f 72 65 66 61 Data Ascii: _si_fa":true,"enable_playable_a11y_label_with_badge_text":true,"enable_playable_container_save_button":true,"enable_playable_entity_save_menu_item":true,"enable_playables_deeplink":true,"enable_playables_destination":true,"enable_playables_fullscreen_refa
2024-05-25 23:00:41 UTC	1390	IN	Data Raw: 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 65 63 74 69 6f 6e 5f 6c 69 73 74 5f 73 63 72 6f 6c 6c 5f 74 6f 5f 69 74 65 6d 5f 73 65 63 74 69 6f 6e 5f 77 65 62 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 65 65 64 6c 65 73 73 5f 73 68 6f 72 74 73 5f 75 72 6c 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 65 72 76 65 72 5f 73 74 69 74 63 68 65 64 5f 64 61 69 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 65 72 76 69 63 65 5f 61 6a 61 78 5f 63 73 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 65 72 76 6c 65 74 5f 65 72 72 6f 72 73 5f 73 74 72 65 61 6d 7a 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 65 72 76 6c 65 74 5f 73 74 72 65 61 6d 7a 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 66 76 5f 61 75 64 69 6f 5f 70 69 76 6f 74 5f 75 72 6c 22 3a 74 72 Data Ascii: rue,"enable_section_list_scroll_to_item_section_web":true,"enable_seedless_shorts_url":true,"enable_server_stitched_dai":true,"enable_service_ajax_csn":true,"enable_servlet_errors_streamz":true,"enable_servlet_streamz":true,"enable_sfv_audio_pivot_url":tr
2024-05-25 23:00:41 UTC	1390	IN	Data Raw: 65 72 5f 70 6c 61 79 65 72 5f 69 6e 5f 62 61 72 5f 66 65 61 74 75 72 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 77 65 62 5f 70 6f 73 74 65 72 5f 68 6f 76 65 72 5f 61 6e 69 6d 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 77 65 62 5f 73 68 6f 72 74 73 5f 61 75 64 69 6f 5f 70 69 76 6f 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 77 65 62 5f 73 68 6f 72 74 73 5f 6d 65 6e 74 69 6f 6e 5f 70 69 76 6f 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 77 65 62 5f 73 68 6f 72 74 73 5f 73 61 76 65 5f 61 75 64 69 6f 5f 70 69 76 6f 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 77 65 62 5f 74 69 65 72 65 64 5f 67 65 6c 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 77 69 6e 64 6f 77 5f 63 6f 6e 73 74 72 61 69 6e 65 64 5f 62 75 79 5f 66 6c 6f 77 5f Data Ascii: er_player_in_bar_feature":true,"enable_web_poster_hover_animation":true,"enable_web_shorts_audio_pivot":true,"enable_web_shorts_mention_pivot":true,"enable_web_shorts_save_audio_pivot":true,"enable_web_tiered_gel":true,"enable_window_constrained_buy_flow_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.6	59347	142.250.184.194	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:42 UTC	446	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:42 UTC	754	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=UTF-8 Date: Sat, 25 May 2024 23:00:42 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-25 23:00:42 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 70 41 4c 67 4c 67 51 56 73 33 67 52 53 47 34 38 52 46 6d 70 51 62 43 58 54 34 75 7a 66 67 7a 6b 4a 47 4e 71 6f 72 76 6b 6e 74 43 54 52 73 33 6a 69 4a 43 4b 42 30 48 36 35 70 38 32 63 76 4f 56 67 4a 46 58 5a 69 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKpALgLgQVs3gRSG48RFmpQbCXT4uzfgzkJGNqorvkntCTRs3jiJCKB0H65p82cvOVgJFXZi","type":4}
2024-05-25 23:00:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.6	59350	142.250.185.68	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:42 UTC	817	OUT	GET /pagead/lvz?evtid=ACd6Ktyy4CpeOJYoGLZrUI6-04kWtC61_teFSd322Tpk8_1v8gvqIbjrDkUqOXhRFcBBl8wFGhXOthpgY02HXnlgdUCTEEas5A&req_ts=1716678027&pg=MainAppBootstrap%3AUnclassified&az=1&sigh=AB9vU41_uQp6RALZ9zm2viXQa8klyEvhzw HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=XKB46mGyrGuK-wWMB8eTLKJddbphlvoTJNOqfV1KxQNtucI70ub0W5hjPdDyfJsSUhYT1Efa06urM0E-fe05wX221EpF9NmLJ-OmKnTCG8_IEml_LOfUQnSALhmkbZ9izgNDtPr6CvKWLFPa9EeofqDnUW6clekP2FimXhbko1w
2024-05-25 23:00:42 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: image/gif Date: Sat, 25 May 2024 23:00:42 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:42 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.6	59355	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:42 UTC	1393	OUT	POST /youtubei/v1/player?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 3321 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-wow64: ?0 sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-platform: "Windows" X-Youtube-Bootstrap-Logged-In: false sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json sec-ch-ua-full-version: "117.0.5938.134" X-Youtube-Client-Name: 1 X-Youtube-Client-Version: 2.20240524.00.00 X-Goog-Visitor-Id: CgsxclQyM0t0SEJEUSiK28myBjIKCgJVUxIEGgAgQQ%3D%3D Accept: / Origin: https://www.youtube.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:42 UTC	3321	OUT	Data Raw: 7b 22 76 69 64 65 6f 49 64 22 3a 22 57 6c 57 34 55 41 6c 33 4d 79 4d 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 72 65 6d 6f 74 65 48 6f 73 74 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 64 65 76 69 63 65 4d 61 6b 65 22 3a 22 22 2c 22 64 65 76 69 63 65 4d 6f 64 65 6c 22 3a 22 22 2c 22 76 69 73 69 74 6f 72 44 61 74 61 22 3a 22 43 67 73 78 63 6c 51 79 4d 30 74 30 53 45 4a 45 55 53 69 4b 32 38 6d 79 42 6a 49 4b 43 67 4a 56 55 78 49 45 47 67 41 67 51 51 25 33 44 25 33 44 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 Data Ascii: {"videoId":"WlW4UAl3MyM","context":{"client":{"hl":"en","gl":"US","remoteHost":"8.46.123.175","deviceMake":"","deviceModel":"","visitorData":"CgsxclQyM0t0SEJEUSiK28myBjIKCgJVUxIEGgAgQQ%3D%3D","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb
2024-05-25 23:00:43 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Sat, 25 May 2024 23:00:43 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-25 23:00:43 UTC	958	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 7b 22 73 65 72 76 69 63 65 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 5b 7b 22 73 65 72 76 69 63 65 22 3a 22 47 46 45 45 44 42 41 43 4b 22 2c 22 70 61 72 61 6d 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 69 73 5f 76 69 65 77 65 64 5f 6c 69 76 65 22 2c 22 76 61 6c 75 65 22 3a 22 46 61 6c 73 65 22 7d 2c 7b 22 6b 65 79 22 3a 22 69 70 63 63 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 69 73 5f 61 6c 63 5f 73 75 72 66 61 63 65 22 2c 22 76 61 6c 75 65 22 3a 22 66 61 6c 73 65 22 7d 2c 7b 22 6b 65 79 22 3a 22 77 68 5f 70 61 75 73 65 64 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 6c 6f 67 67 65 64 5f 69 6e 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 Data Ascii: 8000{"responseContext":{"serviceTrackingParams":[{"service":"GFEEDBACK","params":[{"key":"is_viewed_live","value":"False"},{"key":"ipcc","value":"0"},{"key":"is_alc_surface","value":"false"},{"key":"wh_paused","value":"0"},{"key":"logged_in","value":"0"
2024-05-25 23:00:43 UTC	1390	IN	Data Raw: 30 32 2c 35 31 30 39 34 32 30 37 2c 35 31 30 39 35 34 37 38 2c 35 31 30 39 38 32 39 37 2c 35 31 30 39 38 32 39 39 2c 35 31 31 30 31 34 35 34 2c 35 31 31 30 34 39 38 38 2c 35 31 31 30 36 39 39 35 2c 35 31 31 30 37 33 34 30 2c 35 31 31 31 31 37 33 38 2c 35 31 31 31 33 36 35 38 2c 35 31 31 31 33 36 36 33 2c 35 31 31 31 35 31 38 34 2c 35 31 31 31 36 30 36 37 2c 35 31 31 31 36 33 37 30 2c 35 31 31 31 38 39 33 32 2c 35 31 31 32 31 33 31 31 2c 35 31 31 32 34 31 30 34 2c 35 31 31 32 37 35 30 34 2c 35 31 31 32 39 32 31 30 2c 35 31 31 33 33 31 30 33 2c 35 31 31 33 39 33 37 39 2c 35 31 31 34 31 38 30 30 2c 35 31 31 34 32 38 38 36 2c 35 31 31 34 32 38 39 31 2c 35 31 31 34 35 32 31 39 2c 35 31 31 34 37 34 31 35 2c 35 31 31 34 37 35 35 36 2c 35 31 31 34 38 39 37 36 2c Data Ascii: 02,51094207,51095478,51098297,51098299,51101454,51104988,51106995,51107340,51111738,51113658,51113663,51115184,51116067,51116370,51118932,51121311,51124104,51127504,51129210,51133103,51139379,51141800,51142886,51142891,51145219,51147415,51147556,51148976,
2024-05-25 23:00:43 UTC	1390	IN	Data Raw: 22 30 22 7d 5d 7d 2c 7b 22 73 65 72 76 69 63 65 22 3a 22 45 43 41 54 43 48 45 52 22 2c 22 70 61 72 61 6d 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 63 6c 69 65 6e 74 2e 76 65 72 73 69 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 22 32 2e 32 30 32 34 30 35 32 34 22 7d 2c 7b 22 6b 65 79 22 3a 22 63 6c 69 65 6e 74 2e 6e 61 6d 65 22 2c 22 76 61 6c 75 65 22 3a 22 57 45 42 22 7d 5d 7d 5d 2c 22 6d 61 78 41 67 65 53 65 63 6f 6e 64 73 22 3a 30 2c 22 6d 61 69 6e 41 70 70 57 65 62 52 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 7b 22 6c 6f 67 67 65 64 4f 75 74 22 3a 74 72 75 65 2c 22 74 72 61 63 6b 69 6e 67 50 61 72 61 6d 22 3a 22 6b 78 5f 66 6d 50 78 68 6f 50 5a 52 33 6d 4a 79 66 31 46 67 49 7a 59 67 6f 44 5a 7a 63 36 42 67 73 5f 30 71 4d 5a 57 42 45 6f 4c 38 77 61 7a 52 67 6b Data Ascii: "0"}]},{"service":"ECATCHER","params":[{"key":"client.version","value":"2.20240524"},{"key":"client.name","value":"WEB"}]}],"maxAgeSeconds":0,"mainAppWebResponseContext":{"loggedOut":true,"trackingParam":"kx_fmPxhoPZR3mJyf1FgIzYgoDZzc6Bgs_0qMZWBEoL8wazRgk
2024-05-25 23:00:43 UTC	1390	IN	Data Raw: 6c 74 55 4b 51 64 5f 38 50 33 4a 77 77 6d 68 6e 34 34 74 74 42 72 7a 38 34 43 49 41 37 44 74 78 50 34 72 69 6a 72 71 2d 53 79 63 62 53 4e 79 51 57 41 48 71 2d 6e 6a 36 30 56 31 47 41 44 53 76 70 50 65 76 76 73 26 6c 73 70 61 72 61 6d 73 3d 6d 68 25 32 43 6d 6d 25 32 43 6d 6e 25 32 43 6d 73 25 32 43 6d 76 25 32 43 6d 76 69 25 32 43 70 6c 26 6c 73 69 67 3d 41 48 57 61 59 65 6f 77 52 51 49 68 41 50 76 7a 64 4c 55 34 75 77 4a 47 79 47 65 63 63 55 32 58 77 77 67 65 37 43 38 68 6a 30 65 63 41 46 36 59 71 46 70 5f 52 36 71 64 41 69 41 6a 33 56 70 55 56 39 33 68 6c 56 6c 31 47 79 52 42 41 61 49 63 35 35 32 30 6f 57 69 6f 6e 4a 41 33 6b 77 5f 6e 37 79 52 6f 6d 77 25 33 44 25 33 44 22 2c 22 6d 69 6d 65 54 79 70 65 22 3a 22 76 69 64 65 6f 2f 6d 70 34 3b 20 63 6f 64 Data Ascii: ltUKQd_8P3Jwwmhn44ttBrz84CIA7DtxP4rijrq-SycbSNyQWAHq-nj60V1GADSvpPevvs&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIhAPvzdLU4uwJGyGeccU2Xwwge7C8hj0ecAF6YqFp_R6qdAiAj3VpUV93hlVl1GyRBAaIc5520oWionJA3kw_n7yRomw%3D%3D","mimeType":"video/mp4; cod
2024-05-25 23:00:43 UTC	1390	IN	Data Raw: 43 42 54 35 58 39 35 54 52 6f 6e 39 6a 64 30 4d 43 49 44 61 43 5f 4f 7a 75 4d 77 35 79 4b 37 2d 6d 67 4e 36 37 61 69 79 2d 34 71 57 47 4e 6d 57 57 6b 52 42 30 6d 4c 46 71 48 51 41 4f 26 6c 73 70 61 72 61 6d 73 3d 6d 68 25 32 43 6d 6d 25 32 43 6d 6e 25 32 43 6d 73 25 32 43 6d 76 25 32 43 6d 76 69 25 32 43 70 6c 26 6c 73 69 67 3d 41 48 57 61 59 65 6f 77 52 51 49 68 41 50 76 7a 64 4c 55 34 75 77 4a 47 79 47 65 63 63 55 32 58 77 77 67 65 37 43 38 68 6a 30 65 63 41 46 36 59 71 46 70 5f 52 36 71 64 41 69 41 6a 33 56 70 55 56 39 33 68 6c 56 6c 31 47 79 52 42 41 61 49 63 35 35 32 30 6f 57 69 6f 6e 4a 41 33 6b 77 5f 6e 37 79 52 6f 6d 77 25 33 44 25 33 44 22 2c 22 6d 69 6d 65 54 79 70 65 22 3a 22 76 69 64 65 6f 2f 6d 70 34 3b 20 63 6f 64 65 63 73 3d 5c 22 61 76 63 Data Ascii: CBT5X95TRon9jd0MCIDaC_OzuMw5yK7-mgN67aiy-4qWGNmWWkRB0mLFqHQAO&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIhAPvzdLU4uwJGyGeccU2Xwwge7C8hj0ecAF6YqFp_R6qdAiAj3VpUV93hlVl1GyRBAaIc5520oWionJA3kw_n7yRomw%3D%3D","mimeType":"video/mp4; codecs=\"avc
2024-05-25 23:00:43 UTC	1390	IN	Data Raw: 73 6f 75 72 63 65 25 32 43 72 65 71 75 69 72 65 73 73 6c 25 32 43 78 70 63 25 32 43 62 75 69 25 32 43 73 70 63 25 32 43 76 70 72 76 25 32 43 73 76 70 75 63 25 32 43 6d 69 6d 65 25 32 43 6e 73 25 32 43 72 71 68 25 32 43 67 69 72 25 32 43 63 6c 65 6e 25 32 43 64 75 72 25 32 43 6c 6d 74 26 73 69 67 3d 41 4a 66 51 64 53 73 77 52 51 49 68 41 4a 72 45 4e 65 63 44 55 47 49 41 30 38 53 54 64 78 72 39 73 72 32 66 52 5f 53 48 6d 30 41 43 30 75 39 76 51 72 65 30 5a 5a 33 65 41 69 42 39 6a 68 44 64 35 42 42 4f 34 73 67 49 6a 75 47 62 64 57 31 5f 4b 52 72 66 4c 38 43 77 32 39 43 47 55 74 43 54 42 62 6d 5a 65 51 25 33 44 25 33 44 26 6c 73 70 61 72 61 6d 73 3d 6d 68 25 32 43 6d 6d 25 32 43 6d 6e 25 32 43 6d 73 25 32 43 6d 76 25 32 43 6d 76 69 25 32 43 70 6c 26 6c 73 69 Data Ascii: source%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2Cdur%2Clmt&sig=AJfQdSswRQIhAJrENecDUGIA08STdxr9sr2fR_SHm0AC0u9vQre0ZZ3eAiB9jhDd5BBO4sgIjuGbdW1_KRrfL8Cw29CGUtCTBbmZeQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsi
2024-05-25 23:00:43 UTC	1390	IN	Data Raw: 65 73 26 63 6c 65 6e 3d 31 32 30 34 37 34 37 33 26 64 75 72 3d 34 36 2e 38 34 30 26 6c 6d 74 3d 31 36 33 31 34 30 34 38 30 32 32 30 34 34 36 31 26 6d 74 3d 31 37 31 36 36 37 37 35 32 38 26 66 76 69 70 3d 35 26 6b 65 65 70 61 6c 69 76 65 3d 79 65 73 26 63 3d 57 45 42 26 73 65 66 63 3d 31 26 74 78 70 3d 35 35 33 35 34 33 34 26 6e 3d 37 5f 75 34 57 51 43 63 4b 6b 32 4d 38 79 4f 50 4b 26 73 70 61 72 61 6d 73 3d 65 78 70 69 72 65 25 32 43 65 69 25 32 43 69 70 25 32 43 69 64 25 32 43 61 69 74 61 67 73 25 32 43 73 6f 75 72 63 65 25 32 43 72 65 71 75 69 72 65 73 73 6c 25 32 43 78 70 63 25 32 43 62 75 69 25 32 43 73 70 63 25 32 43 76 70 72 76 25 32 43 73 76 70 75 63 25 32 43 6d 69 6d 65 25 32 43 6e 73 25 32 43 72 71 68 25 32 43 67 69 72 25 32 43 63 6c 65 6e 25 32 Data Ascii: es&clen=12047473&dur=46.840&lmt=1631404802204461&mt=1716677528&fvip=5&keepalive=yes&c=WEB&sefc=1&txp=5535434&n=7_u4WQCcKk2M8yOPK&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Crqh%2Cgir%2Cclen%2
2024-05-25 23:00:43 UTC	1390	IN	Data Raw: 72 65 71 75 69 72 65 73 73 6c 3d 79 65 73 26 78 70 63 3d 45 67 56 6f 32 61 44 53 4e 51 25 33 44 25 33 44 26 6d 68 3d 4c 57 26 6d 6d 3d 33 31 25 32 43 32 39 26 6d 6e 3d 73 6e 2d 70 35 71 73 37 6e 7a 72 25 32 43 73 6e 2d 70 35 71 6c 73 6e 79 36 26 6d 73 3d 61 75 25 32 43 72 64 75 26 6d 76 3d 75 26 6d 76 69 3d 32 26 70 6c 3d 32 35 26 62 75 69 3d 41 57 52 57 6a 32 53 31 30 44 6a 75 2d 35 39 64 53 65 4a 44 6d 6c 62 4d 4d 71 7a 44 78 51 51 41 6f 6f 6e 78 4c 37 73 69 5f 43 56 4e 68 72 77 52 4d 79 72 59 52 42 77 68 4c 48 6d 44 35 44 59 47 4b 4a 59 4b 75 2d 69 38 7a 4b 70 76 65 71 4a 74 26 73 70 63 3d 55 57 46 39 66 79 47 68 6a 4d 6d 49 36 59 43 77 4b 70 6c 78 49 51 30 63 66 34 4e 57 32 38 32 33 48 44 46 68 6e 70 65 69 6c 46 36 4a 65 37 49 38 71 63 77 6b 4b 55 65 Data Ascii: requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=LW&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsny6&ms=au%2Crdu&mv=u&mvi=2&pl=25&bui=AWRWj2S10Dju-59dSeJDmlbMMqzDxQQAoonxL7si_CVNhrwRMyrYRBwhLHmD5DYGKJYKu-i8zKpveqJt&spc=UWF9fyGhjMmI6YCwKplxIQ0cf4NW2823HDFhnpeilF6Je7I8qcwkKUe
2024-05-25 23:00:43 UTC	1390	IN	Data Raw: 69 6f 6e 4d 73 22 3a 22 34 36 38 34 30 22 7d 2c 7b 22 69 74 61 67 22 3a 31 33 36 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 72 72 32 2d 2d 2d 73 6e 2d 70 35 71 73 37 6e 7a 72 2e 67 6f 6f 67 6c 65 76 69 64 65 6f 2e 63 6f 6d 2f 76 69 64 65 6f 70 6c 61 79 62 61 63 6b 3f 65 78 70 69 72 65 3d 31 37 31 36 36 39 39 36 34 33 26 65 69 3d 6d 32 31 53 5a 74 48 66 42 4c 47 32 36 64 73 50 6c 75 65 73 6b 41 77 26 69 70 3d 38 2e 34 36 2e 31 32 33 2e 31 37 35 26 69 64 3d 6f 2d 41 41 42 79 75 36 62 69 43 67 6c 37 69 44 53 71 37 30 6d 49 51 34 35 6f 45 36 79 2d 2d 69 73 47 4a 6a 64 44 70 51 41 35 76 69 42 62 26 69 74 61 67 3d 31 33 36 26 61 69 74 61 67 73 3d 31 33 33 25 32 43 31 33 34 25 32 43 31 33 35 25 32 43 31 33 36 25 32 43 31 33 37 25 32 43 31 36 30 25 32 43 32 Data Ascii: ionMs":"46840"},{"itag":136,"url":"https://rr2---sn-p5qs7nzr.googlevideo.com/videoplayback?expire=1716699643&ei=m21SZtHfBLG26dsPlueskAw&ip=8.46.123.175&id=o-AAByu6biCgl7iDSq70mIQ45oE6y--isGJjdDpQA5viBb&itag=136&aitags=133%2C134%2C135%2C136%2C137%2C160%2C2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.6	59358	142.250.186.68	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:43 UTC	1521	OUT	GET /pagead/1p-user-list/962985656/?backend=innertube&cname=1&cver=2_20240524_00_00&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240524_00_00%3Bptype%3Dcview%3Btype%3Dcview%3Butuid%3D17z6J2vL4GUL6a_A-lMtGQ&foc_id=17z6J2vL4GUL6a_A-lMtGQ&label=followon_cvisit&ptype=cview&utuid=17z6J2vL4GUL6a_A-lMtGQ&cv_attributed=0&is_vtc=0&random=2035814151 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=XKB46mGyrGuK-wWMB8eTLKJddbphlvoTJNOqfV1KxQNtucI70ub0W5hjPdDyfJsSUhYT1Efa06urM0E-fe05wX221EpF9NmLJ-OmKnTCG8_IEml_LOfUQnSALhmkbZ9izgNDtPr6CvKWLFPa9EeofqDnUW6clekP2FimXhbko1w
2024-05-25 23:00:43 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Sat, 25 May 2024 23:00:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:43 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.6	59360	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:43 UTC	673	OUT	GET /s/desktop/aef0ced3/cssbin/www-main-desktop-home-page-skeleton.css HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:43 UTC	680	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 4264 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 24 May 2024 17:07:57 GMT Expires: Sat, 24 May 2025 17:07:57 GMT Cache-Control: public, max-age=31536000 Last-Modified: Fri, 24 May 2024 07:14:12 GMT Content-Type: text/css Vary: Accept-Encoding, Origin Age: 107566 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:43 UTC	710	IN	Data Raw: 23 68 6f 6d 65 2d 70 61 67 65 2d 73 6b 65 6c 65 74 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 30 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 6d 69 6e 2d 77 69 64 74 68 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 6f 70 61 63 69 74 79 3a 31 3b 6d 61 72 67 69 6e 3a 35 36 70 78 20 30 20 30 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f Data Ascii: #home-page-skeleton{position:relative;z-index:0;pointer-events:none;min-width:0;width:100%;opacity:1;margin:56px 0 0;display:-webkit-box;display:-webkit-flex;display:flex;-webkit-box-orient:horizontal;-webkit-box-direction:normal;-webkit-flex-direction:ro
2024-05-25 23:00:43 UTC	1390	IN	Data Raw: 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 23 67 75 69 64 65 2d 73 6b 65 6c 65 74 6f 6e 20 2e 67 75 69 64 65 2d 67 68 6f 73 74 2d 69 63 6f 6e 7b 68 65 69 67 68 74 3a 34 30 70 78 3b 77 69 64 74 68 3a 34 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 34 30 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 35 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 68 73 6c 28 30 2c 30 25 2c 31 30 30 25 29 7d 23 67 75 69 64 65 2d 73 6b 65 6c 65 74 6f 6e 20 2e 67 75 69 64 65 2d 67 68 6f 73 74 2d 74 65 78 74 7b 68 65 69 67 68 74 3a 33 36 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 68 73 Data Ascii: it-flex;display:flex}#guide-skeleton .guide-ghost-icon{height:40px;width:40px;min-width:40px;margin-right:15px;border-radius:50%;background-color:hsl(0,0%,100%)}#guide-skeleton .guide-ghost-text{height:36px;width:100%;border-radius:8px;background-color:hs
2024-05-25 23:00:43 UTC	1390	IN	Data Raw: 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 7b 23 68 6f 6d 65 2d 63 6f 6e 74 61 69 6e 65 72 2d 6d 65 64 69 61 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 38 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 38 70 78 7d 7d 23 68 6f 6d 65 2d 63 68 69 70 73 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 39 38 29 3b 68 65 69 67 68 74 3a 35 36 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 Data Ascii: fy-content:center;justify-content:center;-webkit-flex-wrap:wrap;flex-wrap:wrap}@media only screen and (max-width:600px){#home-container-media{padding:0;margin-left:-8px;margin-right:-8px}}#home-chips{background:rgba(255,255,255,.98);height:56px;border-top
2024-05-25 23:00:43 UTC	774	IN	Data Raw: 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 23 68 6f 6d 65 2d 70 61 67 65 2d 73 6b 65 6c 65 74 6f 6e 20 2e 72 69 63 68 2d 74 68 75 6d 62 6e 61 69 6c 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 23 68 6f 6d 65 2d 70 61 67 65 2d 73 6b 65 6c 65 74 6f 6e 20 2e 72 69 63 68 2d 74 68 75 6d 62 6e 61 69 6c 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b Data Ascii: orient:vertical;-webkit-box-direction:normal;-webkit-flex-direction:column;flex-direction:column}#home-page-skeleton .rich-thumbnail{border-radius:8px;position:relative;width:100%}#home-page-skeleton .rich-thumbnail:before{border-radius:8px;display:block;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.6	59359	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:43 UTC	1984	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 4469 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Encoding: gzip X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOP X-YouTube-Page-Label: youtube.desktop.web_20240524_00_RC00 sec-ch-ua-arch: "x86" X-Goog-Request-Time: 1716678041970 X-YouTube-Page-CL: 636796567 X-Goog-Event-Time: 1716678041948 X-YouTube-Utc-Offset: -240 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" X-YouTube-Time-Zone: America/New_York sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json sec-ch-ua-full-version: "117.0.5938.134" X-YouTube-Client-Name: 1 X-YouTube-Client-Version: 2.20240524.00.00 X-Goog-Visitor-Id: CgsxclQyM0t0SEJEUSiK28myBjIKCgJVUxIEGgAgQQ%3D%3D X-YouTube-Ad-Signals: dt=1716678033322&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1264&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=image Accept: / Origin: https://www.youtube.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:43 UTC	4469	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e5 9d 6d 73 aa 4a b6 c7 bf 4a ca aa a9 9a a9 da ee c3 f3 c3 99 ba 2f 50 89 e2 33 8a 26 66 6a 8a 42 40 c5 28 18 40 8d 39 75 be fb ed 46 93 1d d1 69 da 93 96 6b ee 9c b3 5f 24 2d c2 6f 75 2f ba ff 6b f5 82 fc 51 b0 03 3f 76 5f e3 c2 ef 7f 14 ec 85 e7 fa c9 4f b3 45 e1 f7 82 eb 17 7e 14 a6 f0 a7 41 1f fc b4 ff b4 6d 2d dd c2 ef f4 fb af 43 37 8c bc c0 07 c7 30 3f 19 8a e1 28 9e e1 7e 52 14 f8 07 bf 11 f8 13 6f aa f9 93 00 9e d3 5a ad 34 3f 8a ad c5 a2 62 c5 16 f8 46 59 0b c7 bb b1 56 55 bb eb d0 7c d5 f4 b8 58 dc 94 7a e5 86 d8 54 ee d5 b6 5f 0f b7 03 9d 2a 56 41 5b 65 1b 85 a0 ad 2e 3e 47 ca 40 37 37 e5 2d 68 73 bd ae d4 57 bb 9d 19 6c 9b db 3b d0 56 2e 7a f0 b8 46 33 80 6d 5c dc 5f 83 36 97 82 e7 eb ac 8d 70 3a d0 a7 62 11 1e Data Ascii: msJJ/P3&fjB@(@9uFik_$-ou/kQ?v_OE~Am-C70?(~RoZ4?bFYVU\|XzT_*VA[e.>G@77-hsWl;V.zF3m\_6p:b
2024-05-25 23:00:43 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Sat, 25 May 2024 23:00:43 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-25 23:00:43 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-05-25 23:00:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.6	59373	216.58.206.46	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:44 UTC	501	OUT	GET /youtubei/v1/player?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:44 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1606 Date: Sat, 25 May 2024 23:00:44 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:44 UTC	1150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-05-25 23:00:44 UTC	456	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e 20 69 64 3d 6c 6f 67 6f 20 61 72 69 61 2d 6c 61 62 65 6c 3d 47 6f 6f Data Ascii: ckground:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span id=logo aria-label=Goo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.6	59374	173.194.53.7	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:44 UTC	1838	OUT	POST /videoplayback?expire=1716699643&ei=m21SZtHfBLG26dsPlueskAw&ip=8.46.123.175&id=o-AAByu6biCgl7iDSq70mIQ45oE6y--isGJjdDpQA5viBb&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=LW&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsny6&ms=au%2Crdu&mv=u&mvi=2&pl=25&spc=UWF9fyGhjMmI6YCwKplxIQ0cf4NW2823HDFhnpeilF6Je7I8qcwkKUeht4Z7&svpuc=1&ns=rs6FwNCx7nX3DZRBf0lXHTIQ&sabr=1&rqh=1&mt=1716677528&fvip=5&keepalive=yes&c=WEB&smc=1&n=hYMFD6O-BAa23A&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgBUwT1FK1SAX452JmnBE4ilqOAQ-gxMypvUzy-M2keQcCIQD-hbOnXCYgpdY1SkUfmPfv2Q9EH-nU4EfzbhqdSHoHrQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIhAPvzdLU4uwJGyGeccU2Xwwge7C8hj0ecAF6YqFp_R6qdAiAj3VpUV93hlVl1GyRBAaIc5520oWionJA3kw_n7yRomw%3D%3D&cpn=O-o7NTyOH_Xb-gSb&cver=2.20240524.00.00&rn=1 HTTP/1.1 Host: rr2---sn-p5qs7nzr.googlevideo.com Connection: keep-alive Content-Length: 1772 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:44 UTC	1772	OUT	Data Raw: 0a a3 80 00 90 01 80 05 98 01 e8 02 a8 01 00 e0 01 00 90 02 00 a0 02 8d 0a b8 02 b7 48 f0 02 01 d0 03 00 d8 03 b8 08 2a fc 0a 0a a7 0a 0a c6 06 08 00 25 00 00 80 3f 2d 33 33 73 3f 35 3d 0a 97 3f 58 01 68 01 72 1a 0a 16 6d 66 73 32 5f 63 6d 66 73 5f 77 65 62 5f 76 33 5f 32 5f 30 30 33 18 00 78 8f 4e a8 01 00 90 02 01 b8 02 00 c8 02 01 da 02 b3 01 10 b0 ea 01 18 a8 46 20 a0 9c 01 28 a0 9c 01 30 98 75 70 88 27 80 01 f4 03 b8 01 01 e0 01 01 98 02 0c a0 02 01 c0 02 01 d0 02 02 e0 02 01 e8 02 02 80 03 02 88 03 88 27 98 03 01 a8 03 03 c0 03 01 c8 03 01 d0 03 01 f8 03 01 80 04 01 88 04 01 90 04 01 98 04 01 a0 04 01 a8 04 01 c8 04 01 d0 04 01 e0 04 00 e8 04 01 f8 04 07 80 05 7d 88 05 01 b0 05 01 b8 05 01 c0 05 01 c8 05 01 d0 05 01 d8 05 01 e0 05 d0 0f e8 05 01 f8 Data Ascii: H*%?-33s?5=?Xhrmfs2_cmfs_web_v3_2_003xNF (0up''}
2024-05-25 23:00:44 UTC	953	IN	HTTP/1.1 200 OK Date: Sat, 25 May 2024 23:00:44 GMT Expires: Sat, 25 May 2024 23:00:44 GMT Cache-Control: private, max-age=21299 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-25 23:00:44 UTC	3	IN	Data Raw: 34 0d 0a Data Ascii: 4
2024-05-25 23:00:44 UTC	4	IN	Data Raw: 3a 02 08 01 Data Ascii: :
2024-05-25 23:00:44 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-25 23:00:44 UTC	3	IN	Data Raw: 63 0d 0a Data Ascii: c
2024-05-25 23:00:44 UTC	12	IN	Data Raw: 2f 0a 0a 03 10 b0 09 12 03 10 f0 2e Data Ascii: /.
2024-05-25 23:00:44 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-25 23:00:44 UTC	3	IN	Data Raw: 61 0d 0a Data Ascii: a
2024-05-25 23:00:44 UTC	10	IN	Data Raw: 34 08 0a 06 43 41 45 6f 41 51 Data Ascii: 4CAEoAQ
2024-05-25 23:00:44 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-25 23:00:45 UTC	1838	OUT	POST /videoplayback?expire=1716699643&ei=m21SZtHfBLG26dsPlueskAw&ip=8.46.123.175&id=o-AAByu6biCgl7iDSq70mIQ45oE6y--isGJjdDpQA5viBb&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=LW&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsny6&ms=au%2Crdu&mv=u&mvi=2&pl=25&spc=UWF9fyGhjMmI6YCwKplxIQ0cf4NW2823HDFhnpeilF6Je7I8qcwkKUeht4Z7&svpuc=1&ns=rs6FwNCx7nX3DZRBf0lXHTIQ&sabr=1&rqh=1&mt=1716677528&fvip=5&keepalive=yes&c=WEB&smc=1&n=hYMFD6O-BAa23A&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgBUwT1FK1SAX452JmnBE4ilqOAQ-gxMypvUzy-M2keQcCIQD-hbOnXCYgpdY1SkUfmPfv2Q9EH-nU4EfzbhqdSHoHrQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIhAPvzdLU4uwJGyGeccU2Xwwge7C8hj0ecAF6YqFp_R6qdAiAj3VpUV93hlVl1GyRBAaIc5520oWionJA3kw_n7yRomw%3D%3D&cpn=O-o7NTyOH_Xb-gSb&cver=2.20240524.00.00&rn=2 HTTP/1.1 Host: rr2---sn-p5qs7nzr.googlevideo.com Connection: keep-alive Content-Length: 1952 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:45 UTC	953	IN	HTTP/1.1 200 OK Date: Sat, 25 May 2024 23:00:45 GMT Expires: Sat, 25 May 2024 23:00:45 GMT Cache-Control: private, max-age=21298 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-25 23:00:49 UTC	1838	OUT	POST /videoplayback?expire=1716699643&ei=m21SZtHfBLG26dsPlueskAw&ip=8.46.123.175&id=o-AAByu6biCgl7iDSq70mIQ45oE6y--isGJjdDpQA5viBb&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=LW&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsny6&ms=au%2Crdu&mv=u&mvi=2&pl=25&spc=UWF9fyGhjMmI6YCwKplxIQ0cf4NW2823HDFhnpeilF6Je7I8qcwkKUeht4Z7&svpuc=1&ns=rs6FwNCx7nX3DZRBf0lXHTIQ&sabr=1&rqh=1&mt=1716677528&fvip=5&keepalive=yes&c=WEB&smc=1&n=hYMFD6O-BAa23A&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgBUwT1FK1SAX452JmnBE4ilqOAQ-gxMypvUzy-M2keQcCIQD-hbOnXCYgpdY1SkUfmPfv2Q9EH-nU4EfzbhqdSHoHrQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIhAPvzdLU4uwJGyGeccU2Xwwge7C8hj0ecAF6YqFp_R6qdAiAj3VpUV93hlVl1GyRBAaIc5520oWionJA3kw_n7yRomw%3D%3D&cpn=O-o7NTyOH_Xb-gSb&cver=2.20240524.00.00&rn=3 HTTP/1.1 Host: rr2---sn-p5qs7nzr.googlevideo.com Connection: keep-alive Content-Length: 2013 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:50 UTC	953	IN	HTTP/1.1 200 OK Date: Sat, 25 May 2024 23:00:49 GMT Expires: Sat, 25 May 2024 23:00:49 GMT Cache-Control: private, max-age=21294 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-25 23:00:50 UTC	1838	OUT	POST /videoplayback?expire=1716699643&ei=m21SZtHfBLG26dsPlueskAw&ip=8.46.123.175&id=o-AAByu6biCgl7iDSq70mIQ45oE6y--isGJjdDpQA5viBb&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=LW&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsny6&ms=au%2Crdu&mv=u&mvi=2&pl=25&spc=UWF9fyGhjMmI6YCwKplxIQ0cf4NW2823HDFhnpeilF6Je7I8qcwkKUeht4Z7&svpuc=1&ns=rs6FwNCx7nX3DZRBf0lXHTIQ&sabr=1&rqh=1&mt=1716677528&fvip=5&keepalive=yes&c=WEB&smc=1&n=hYMFD6O-BAa23A&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgBUwT1FK1SAX452JmnBE4ilqOAQ-gxMypvUzy-M2keQcCIQD-hbOnXCYgpdY1SkUfmPfv2Q9EH-nU4EfzbhqdSHoHrQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIhAPvzdLU4uwJGyGeccU2Xwwge7C8hj0ecAF6YqFp_R6qdAiAj3VpUV93hlVl1GyRBAaIc5520oWionJA3kw_n7yRomw%3D%3D&cpn=O-o7NTyOH_Xb-gSb&cver=2.20240524.00.00&rn=4 HTTP/1.1 Host: rr2---sn-p5qs7nzr.googlevideo.com Connection: keep-alive Content-Length: 2012 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:50 UTC	953	IN	HTTP/1.1 200 OK Date: Sat, 25 May 2024 23:00:50 GMT Expires: Sat, 25 May 2024 23:00:50 GMT Cache-Control: private, max-age=21293 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-25 23:00:54 UTC	1838	OUT	POST /videoplayback?expire=1716699643&ei=m21SZtHfBLG26dsPlueskAw&ip=8.46.123.175&id=o-AAByu6biCgl7iDSq70mIQ45oE6y--isGJjdDpQA5viBb&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=LW&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsny6&ms=au%2Crdu&mv=u&mvi=2&pl=25&spc=UWF9fyGhjMmI6YCwKplxIQ0cf4NW2823HDFhnpeilF6Je7I8qcwkKUeht4Z7&svpuc=1&ns=rs6FwNCx7nX3DZRBf0lXHTIQ&sabr=1&rqh=1&mt=1716677528&fvip=5&keepalive=yes&c=WEB&smc=1&n=hYMFD6O-BAa23A&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgBUwT1FK1SAX452JmnBE4ilqOAQ-gxMypvUzy-M2keQcCIQD-hbOnXCYgpdY1SkUfmPfv2Q9EH-nU4EfzbhqdSHoHrQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIhAPvzdLU4uwJGyGeccU2Xwwge7C8hj0ecAF6YqFp_R6qdAiAj3VpUV93hlVl1GyRBAaIc5520oWionJA3kw_n7yRomw%3D%3D&cpn=O-o7NTyOH_Xb-gSb&cver=2.20240524.00.00&rn=5 HTTP/1.1 Host: rr2---sn-p5qs7nzr.googlevideo.com Connection: keep-alive Content-Length: 2012 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:54 UTC	953	IN	HTTP/1.1 200 OK Date: Sat, 25 May 2024 23:00:54 GMT Expires: Sat, 25 May 2024 23:00:54 GMT Cache-Control: private, max-age=21289 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-25 23:01:01 UTC	1838	OUT	POST /videoplayback?expire=1716699643&ei=m21SZtHfBLG26dsPlueskAw&ip=8.46.123.175&id=o-AAByu6biCgl7iDSq70mIQ45oE6y--isGJjdDpQA5viBb&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=LW&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsny6&ms=au%2Crdu&mv=u&mvi=2&pl=25&spc=UWF9fyGhjMmI6YCwKplxIQ0cf4NW2823HDFhnpeilF6Je7I8qcwkKUeht4Z7&svpuc=1&ns=rs6FwNCx7nX3DZRBf0lXHTIQ&sabr=1&rqh=1&mt=1716677528&fvip=5&keepalive=yes&c=WEB&smc=1&n=hYMFD6O-BAa23A&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgBUwT1FK1SAX452JmnBE4ilqOAQ-gxMypvUzy-M2keQcCIQD-hbOnXCYgpdY1SkUfmPfv2Q9EH-nU4EfzbhqdSHoHrQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIhAPvzdLU4uwJGyGeccU2Xwwge7C8hj0ecAF6YqFp_R6qdAiAj3VpUV93hlVl1GyRBAaIc5520oWionJA3kw_n7yRomw%3D%3D&cpn=O-o7NTyOH_Xb-gSb&cver=2.20240524.00.00&rn=6 HTTP/1.1 Host: rr2---sn-p5qs7nzr.googlevideo.com Connection: keep-alive Content-Length: 2015 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:01:01 UTC	953	IN	HTTP/1.1 200 OK Date: Sat, 25 May 2024 23:01:01 GMT Expires: Sat, 25 May 2024 23:01:01 GMT Cache-Control: private, max-age=21282 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.6	59371	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:44 UTC	1394	OUT	POST /youtubei/v1/att/get?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 2973 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-wow64: ?0 sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-platform: "Windows" X-Youtube-Bootstrap-Logged-In: false sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json sec-ch-ua-full-version: "117.0.5938.134" X-Youtube-Client-Name: 1 X-Youtube-Client-Version: 2.20240524.00.00 X-Goog-Visitor-Id: CgsxclQyM0t0SEJEUSiK28myBjIKCgJVUxIEGgAgQQ%3D%3D Accept: / Origin: https://www.youtube.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:44 UTC	2973	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 72 65 6d 6f 74 65 48 6f 73 74 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 64 65 76 69 63 65 4d 61 6b 65 22 3a 22 22 2c 22 64 65 76 69 63 65 4d 6f 64 65 6c 22 3a 22 22 2c 22 76 69 73 69 74 6f 72 44 61 74 61 22 3a 22 43 67 73 78 63 6c 51 79 4d 30 74 30 53 45 4a 45 55 53 69 4b 32 38 6d 79 42 6a 49 4b 43 67 4a 56 55 78 49 45 47 67 41 67 51 51 25 33 44 25 33 44 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 Data Ascii: {"context":{"client":{"hl":"en","gl":"US","remoteHost":"8.46.123.175","deviceMake":"","deviceModel":"","visitorData":"CgsxclQyM0t0SEJEUSiK28myBjIKCgJVUxIEGgAgQQ%3D%3D","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like
2024-05-25 23:00:44 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Sat, 25 May 2024 23:00:44 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-25 23:00:44 UTC	958	IN	Data Raw: 34 66 64 61 0d 0a 7b 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 7b 22 73 65 72 76 69 63 65 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 5b 7b 22 73 65 72 76 69 63 65 22 3a 22 43 53 49 22 2c 22 70 61 72 61 6d 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 63 22 2c 22 76 61 6c 75 65 22 3a 22 57 45 42 22 7d 2c 7b 22 6b 65 79 22 3a 22 63 76 65 72 22 2c 22 76 61 6c 75 65 22 3a 22 32 2e 32 30 32 34 30 35 32 34 2e 30 30 2e 30 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 79 74 5f 6c 69 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 47 65 74 41 74 74 65 73 74 61 74 69 6f 6e 43 68 61 6c 6c 65 6e 67 65 5f 72 69 64 22 2c 22 76 61 6c 75 65 22 3a 22 30 78 32 62 64 30 30 62 32 31 34 64 66 32 64 62 63 31 22 7d 5d 7d 2c 7b 22 73 65 72 76 69 63 65 22 3a 22 Data Ascii: 4fda{"responseContext":{"serviceTrackingParams":[{"service":"CSI","params":[{"key":"c","value":"WEB"},{"key":"cver","value":"2.20240524.00.00"},{"key":"yt_li","value":"0"},{"key":"GetAttestationChallenge_rid","value":"0x2bd00b214df2dbc1"}]},{"service":"
2024-05-25 23:00:44 UTC	1390	IN	Data Raw: 35 31 30 38 39 34 34 31 2c 35 31 30 39 31 33 33 31 2c 35 31 30 39 32 36 36 31 2c 35 31 30 39 34 31 37 31 2c 35 31 30 39 34 31 39 35 2c 35 31 30 39 34 32 30 32 2c 35 31 30 39 34 32 30 37 2c 35 31 30 39 35 34 37 38 2c 35 31 30 39 38 32 39 37 2c 35 31 30 39 38 32 39 39 2c 35 31 31 30 32 34 30 39 2c 35 31 31 30 34 39 38 38 2c 35 31 31 30 36 39 39 35 2c 35 31 31 30 37 33 34 30 2c 35 31 31 31 31 37 33 38 2c 35 31 31 31 33 36 35 38 2c 35 31 31 31 33 36 36 33 2c 35 31 31 31 35 31 38 34 2c 35 31 31 31 36 30 36 37 2c 35 31 31 31 36 33 37 30 2c 35 31 31 31 38 39 33 32 2c 35 31 31 32 31 33 31 31 2c 35 31 31 32 34 31 30 34 2c 35 31 31 32 37 35 30 34 2c 35 31 31 32 39 32 31 30 2c 35 31 31 33 33 31 30 33 2c 35 31 31 33 39 33 37 39 2c 35 31 31 34 31 38 30 30 2c 35 31 31 Data Ascii: 51089441,51091331,51092661,51094171,51094195,51094202,51094207,51095478,51098297,51098299,51102409,51104988,51106995,51107340,51111738,51113658,51113663,51115184,51116067,51116370,51118932,51121311,51124104,51127504,51129210,51133103,51139379,51141800,511
2024-05-25 23:00:44 UTC	1390	IN	Data Raw: 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 7b 22 6c 6f 67 67 65 64 4f 75 74 22 3a 74 72 75 65 7d 2c 22 77 65 62 52 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 45 78 74 65 6e 73 69 6f 6e 44 61 74 61 22 3a 7b 22 68 61 73 44 65 63 6f 72 61 74 65 64 22 3a 74 72 75 65 7d 7d 2c 22 63 68 61 6c 6c 65 6e 67 65 22 3a 22 61 3d 36 26 61 32 3d 31 26 62 3d 6d 6f 59 51 38 79 56 71 43 35 77 2d 51 58 41 63 59 48 69 43 59 33 4e 75 6b 48 6f 26 63 3d 31 37 31 36 36 37 38 30 34 34 26 64 3d 31 26 65 32 3d 57 6c 57 34 55 41 6c 33 4d 79 4d 25 37 45 4f 2d 6f 37 4e 54 79 4f 48 5f 58 62 2d 67 53 62 26 63 31 61 3d 31 26 63 36 61 3d 31 26 63 36 62 3d 31 26 68 68 3d 50 6f 45 30 4f 58 49 76 50 6d 41 69 6e 52 71 70 46 45 6a 4c 31 69 70 79 50 69 71 50 62 52 4e 76 79 6f 62 41 72 51 34 Data Ascii: esponseContext":{"loggedOut":true},"webResponseContextExtensionData":{"hasDecorated":true}},"challenge":"a=6&a2=1&b=moYQ8yVqC5w-QXAcYHiCY3NukHo&c=1716678044&d=1&e2=WlW4UAl3MyM%7EO-o7NTyOH_Xb-gSb&c1a=1&c6a=1&c6b=1&hh=PoE0OXIvPmAinRqpFEjL1ipyPiqPbRNvyobArQ4
2024-05-25 23:00:44 UTC	1390	IN	Data Raw: 58 2b 61 55 6a 49 46 72 65 7a 30 4e 67 52 37 4f 2f 70 73 38 43 69 6c 39 57 6b 4d 33 39 39 2b 46 57 36 76 6b 65 68 5a 4e 76 71 6c 47 72 62 77 52 53 61 34 43 71 4e 4d 56 71 49 34 74 7a 67 65 32 64 4e 66 71 4a 79 69 4a 71 72 7a 38 32 56 44 2f 75 55 68 65 7a 33 73 50 78 52 67 33 6b 70 36 36 57 75 34 41 5a 59 35 6b 62 7a 37 31 54 2b 64 35 4a 77 4c 67 4a 4b 70 33 74 69 75 32 70 46 48 39 6d 72 79 59 46 65 6e 6e 49 4e 73 41 4d 38 69 59 58 4f 5a 73 49 2f 53 2f 36 34 69 56 45 69 38 54 6e 37 65 7a 51 4e 74 5a 2b 58 43 75 65 64 46 61 57 4d 7a 6e 2b 53 64 49 30 2f 59 5a 71 43 65 48 32 44 4f 32 68 38 54 61 76 6f 4b 4d 55 32 69 35 6e 64 4a 32 47 6b 36 32 67 73 38 52 4b 54 72 4f 78 54 50 30 69 6e 56 5a 5a 54 6e 5a 72 4e 43 30 6f 52 44 70 75 4b 44 61 35 65 45 4b 75 45 4e Data Ascii: X+aUjIFrez0NgR7O/ps8Cil9WkM399+FW6vkehZNvqlGrbwRSa4CqNMVqI4tzge2dNfqJyiJqrz82VD/uUhez3sPxRg3kp66Wu4AZY5kbz71T+d5JwLgJKp3tiu2pFH9mryYFennINsAM8iYXOZsI/S/64iVEi8Tn7ezQNtZ+XCuedFaWMzn+SdI0/YZqCeH2DO2h8TavoKMU2i5ndJ2Gk62gs8RKTrOxTP0inVZZTnZrNC0oRDpuKDa5eEKuEN
2024-05-25 23:00:44 UTC	1390	IN	Data Raw: 34 4b 44 59 71 62 61 75 4d 46 51 57 6d 43 55 61 4f 74 58 6d 62 2b 33 79 53 35 30 6e 37 4b 61 42 55 2b 6a 52 68 62 77 41 70 55 75 54 46 2f 50 7a 59 5a 62 35 2b 4e 46 44 6a 37 34 6c 4a 77 69 6c 52 43 34 56 54 53 50 78 61 68 59 65 31 73 65 38 57 44 7a 64 34 46 52 79 79 46 34 5a 49 73 4a 55 50 6d 34 63 5a 44 49 77 78 43 74 78 44 4a 70 50 59 37 37 50 54 45 56 57 6e 74 5a 47 2f 78 36 4d 61 4e 47 65 50 55 74 71 66 77 6e 63 32 63 43 49 43 61 38 6e 35 75 48 53 77 36 42 2f 6c 6f 73 6f 2b 39 48 6b 67 79 57 6a 57 31 31 6e 4a 45 54 6b 73 6e 57 53 79 4d 6a 44 6f 41 63 66 4a 75 4e 43 74 4d 76 70 6f 53 4f 2f 63 7a 63 6b 55 2b 6c 6b 4a 6e 67 37 76 32 67 75 31 53 39 53 69 67 45 45 61 63 36 33 4e 38 30 42 54 6a 7a 33 4a 52 45 76 6e 42 36 4a 2b 31 2b 63 48 36 6d 32 62 72 71 Data Ascii: 4KDYqbauMFQWmCUaOtXmb+3yS50n7KaBU+jRhbwApUuTF/PzYZb5+NFDj74lJwilRC4VTSPxahYe1se8WDzd4FRyyF4ZIsJUPm4cZDIwxCtxDJpPY77PTEVWntZG/x6MaNGePUtqfwnc2cCICa8n5uHSw6B/loso+9HkgyWjW11nJETksnWSyMjDoAcfJuNCtMvpoSO/czckU+lkJng7v2gu1S9SigEEac63N80BTjz3JREvnB6J+1+cH6m2brq
2024-05-25 23:00:44 UTC	1390	IN	Data Raw: 56 65 49 49 52 4b 79 44 6a 39 6b 62 4d 4c 61 76 50 45 6e 74 42 43 69 67 41 69 6e 34 6b 36 42 68 59 48 41 78 34 63 65 43 64 56 44 31 64 2b 36 32 64 34 79 67 44 71 46 68 6b 36 63 70 56 73 52 44 74 4e 5a 31 44 58 66 61 71 77 2b 43 72 4b 34 53 55 63 76 65 64 69 70 43 6f 54 4c 38 6d 4f 56 72 43 5a 4b 58 74 47 52 37 52 53 2f 4e 6c 37 37 4f 4b 75 55 61 6c 63 41 43 59 63 6f 75 61 45 52 52 59 42 6b 4d 78 30 58 74 41 76 4d 7a 4e 50 2b 4b 4a 78 67 32 54 66 53 78 6d 50 35 78 6c 2f 36 7a 54 79 6f 70 63 4d 71 62 74 33 63 73 4f 6f 6b 35 6c 44 6a 51 77 34 37 78 37 46 37 56 67 68 6f 64 34 4d 43 6f 50 67 47 68 74 37 2b 43 61 4f 48 2b 6b 42 6d 66 7a 37 30 55 41 41 62 35 37 72 73 38 53 32 30 4f 63 71 77 6e 32 76 62 51 4d 53 77 65 4f 61 6d 41 70 53 77 59 38 38 35 35 4c 6b 5a Data Ascii: VeIIRKyDj9kbMLavPEntBCigAin4k6BhYHAx4ceCdVD1d+62d4ygDqFhk6cpVsRDtNZ1DXfaqw+CrK4SUcvedipCoTL8mOVrCZKXtGR7RS/Nl77OKuUalcACYcouaERRYBkMx0XtAvMzNP+KJxg2TfSxmP5xl/6zTyopcMqbt3csOok5lDjQw47x7F7Vghod4MCoPgGht7+CaOH+kBmfz70UAAb57rs8S20Ocqwn2vbQMSweOamApSwY8855LkZ
2024-05-25 23:00:44 UTC	1390	IN	Data Raw: 4b 56 46 6c 53 64 6c 78 36 32 34 6e 45 56 44 62 42 44 63 67 56 79 53 52 43 35 55 4f 38 68 34 42 46 69 77 45 55 79 57 73 68 36 67 35 36 65 4d 53 56 5a 48 30 51 43 4e 4b 51 62 70 30 4f 42 45 74 2f 37 53 6f 75 4f 4b 34 75 37 4d 78 7a 52 2b 46 4d 4c 5a 2f 59 48 77 78 74 57 51 64 6b 4f 78 66 4e 69 4e 2b 68 47 52 43 4d 59 49 4f 56 74 6b 2b 35 43 6e 2f 77 66 56 48 54 42 67 63 61 67 36 73 48 6b 68 41 43 2f 4d 52 74 75 2f 42 35 4b 5a 39 4d 74 35 4e 33 67 62 72 66 61 56 69 36 73 76 44 4e 49 4e 6e 35 73 72 6d 7a 6f 48 46 51 52 41 33 77 47 41 74 48 6f 67 6d 57 76 34 58 4d 64 72 31 62 56 77 4e 73 50 48 47 4f 63 45 7a 68 41 47 2f 46 46 72 67 33 54 4e 66 6d 4e 30 61 55 54 49 5a 4b 79 44 4b 62 33 46 41 30 30 33 41 67 6b 56 38 76 43 69 6b 61 38 68 35 6a 62 49 78 56 43 39 Data Ascii: KVFlSdlx624nEVDbBDcgVySRC5UO8h4BFiwEUyWsh6g56eMSVZH0QCNKQbp0OBEt/7SouOK4u7MxzR+FMLZ/YHwxtWQdkOxfNiN+hGRCMYIOVtk+5Cn/wfVHTBgcag6sHkhAC/MRtu/B5KZ9Mt5N3gbrfaVi6svDNINn5srmzoHFQRA3wGAtHogmWv4XMdr1bVwNsPHGOcEzhAG/FFrg3TNfmN0aUTIZKyDKb3FA003AgkV8vCika8h5jbIxVC9
2024-05-25 23:00:44 UTC	1390	IN	Data Raw: 4d 4c 73 7a 47 71 33 63 59 6a 41 44 4f 33 45 4d 37 4a 41 47 72 61 42 37 6a 76 65 77 72 6d 6f 31 76 33 6d 74 58 78 56 6f 44 31 31 68 36 38 62 59 46 44 79 43 43 2f 55 36 33 66 34 7a 76 50 50 47 75 76 58 79 41 33 64 68 73 38 4d 7a 48 57 38 71 4b 6e 66 6c 47 7a 2b 70 31 46 74 77 4d 64 4b 43 52 4d 61 63 71 35 46 48 4a 43 77 6c 44 43 68 42 37 77 2f 44 36 69 6a 6f 73 31 41 4b 72 5a 69 44 77 34 62 6c 63 6a 6d 72 44 33 6c 38 32 6c 6a 78 68 73 66 2f 75 39 78 41 73 6d 43 4d 72 50 74 35 78 4e 69 51 55 34 77 71 6d 64 4f 6a 79 2f 2b 58 55 2f 79 65 6d 42 6f 58 77 62 50 5a 72 59 47 41 31 2f 63 45 2b 73 44 41 2b 44 6f 72 4a 61 2f 72 70 6d 5a 42 44 54 53 74 4a 74 59 4a 6b 46 6d 4a 78 62 76 65 39 4a 30 70 48 4f 31 35 46 64 39 52 4f 4a 32 76 2f 44 69 55 48 43 72 4c 67 6a 6b Data Ascii: MLszGq3cYjADO3EM7JAGraB7jvewrmo1v3mtXxVoD11h68bYFDyCC/U63f4zvPPGuvXyA3dhs8MzHW8qKnflGz+p1FtwMdKCRMacq5FHJCwlDChB7w/D6ijos1AKrZiDw4blcjmrD3l82ljxhsf/u9xAsmCMrPt5xNiQU4wqmdOjy/+XU/yemBoXwbPZrYGA1/cE+sDA+DorJa/rpmZBDTStJtYJkFmJxbve9J0pHO15Fd9ROJ2v/DiUHCrLgjk
2024-05-25 23:00:44 UTC	1390	IN	Data Raw: 41 57 64 61 59 79 35 64 30 6d 71 76 7a 6d 70 78 4c 31 53 59 69 54 32 45 6b 56 2f 64 5a 43 77 66 30 78 6c 64 66 5a 64 70 54 70 33 57 79 33 58 44 78 76 78 72 55 33 64 74 36 57 45 69 57 6f 4b 59 78 34 51 59 52 71 6e 77 67 71 75 4d 45 6a 36 74 42 6a 55 6c 35 35 42 39 44 47 47 46 43 72 6e 62 59 30 77 76 41 41 4a 64 54 61 68 6d 4b 49 6f 52 56 47 2b 59 66 73 69 73 6f 77 62 38 30 2b 34 63 68 68 32 64 54 7a 55 53 47 52 6c 70 31 77 41 74 2b 7a 31 62 31 71 6e 63 77 48 35 2b 4c 63 38 4e 4a 57 67 71 77 33 69 2f 49 47 4d 51 79 43 44 6f 78 53 55 71 31 77 75 57 35 58 41 49 41 45 78 74 2f 4c 71 52 54 4a 77 6e 48 79 32 73 6a 35 63 52 79 4a 79 31 34 37 4f 4e 41 71 58 70 2b 72 44 47 33 64 36 2f 4a 78 52 6d 6d 79 37 63 71 66 4c 38 37 6d 35 70 76 47 58 50 46 4e 4d 43 62 66 37 Data Ascii: AWdaYy5d0mqvzmpxL1SYiT2EkV/dZCwf0xldfZdpTp3Wy3XDxvxrU3dt6WEiWoKYx4QYRqnwgquMEj6tBjUl55B9DGGFCrnbY0wvAAJdTahmKIoRVG+Yfsisowb80+4chh2dTzUSGRlp1wAt+z1b1qncwH5+Lc8NJWgqw3i/IGMQyCDoxSUq1wuW5XAIAExt/LqRTJwnHy2sj5cRyJy147ONAqXp+rDG3d6/JxRmmy7cqfL87m5pvGXPFNMCbf7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.6	59368	142.250.185.68	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:44 UTC	945	OUT	GET /pagead/1p-user-list/962985656/?backend=innertube&cname=1&cver=2_20240524_00_00&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240524_00_00%3Bptype%3Dcview%3Btype%3Dcview%3Butuid%3D17z6J2vL4GUL6a_A-lMtGQ&foc_id=17z6J2vL4GUL6a_A-lMtGQ&label=followon_cvisit&ptype=cview&utuid=17z6J2vL4GUL6a_A-lMtGQ&cv_attributed=0&is_vtc=0&random=2035814151 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=XKB46mGyrGuK-wWMB8eTLKJddbphlvoTJNOqfV1KxQNtucI70ub0W5hjPdDyfJsSUhYT1Efa06urM0E-fe05wX221EpF9NmLJ-OmKnTCG8_IEml_LOfUQnSALhmkbZ9izgNDtPr6CvKWLFPa9EeofqDnUW6clekP2FimXhbko1w
2024-05-25 23:00:44 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Sat, 25 May 2024 23:00:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.6	59369	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:44 UTC	1391	OUT	POST /youtubei/v1/next?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 3137 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-wow64: ?0 sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-platform: "Windows" X-Youtube-Bootstrap-Logged-In: false sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json sec-ch-ua-full-version: "117.0.5938.134" X-Youtube-Client-Name: 1 X-Youtube-Client-Version: 2.20240524.00.00 X-Goog-Visitor-Id: CgsxclQyM0t0SEJEUSiK28myBjIKCgJVUxIEGgAgQQ%3D%3D Accept: / Origin: https://www.youtube.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:44 UTC	3137	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 72 65 6d 6f 74 65 48 6f 73 74 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 64 65 76 69 63 65 4d 61 6b 65 22 3a 22 22 2c 22 64 65 76 69 63 65 4d 6f 64 65 6c 22 3a 22 22 2c 22 76 69 73 69 74 6f 72 44 61 74 61 22 3a 22 43 67 73 78 63 6c 51 79 4d 30 74 30 53 45 4a 45 55 53 69 4b 32 38 6d 79 42 6a 49 4b 43 67 4a 56 55 78 49 45 47 67 41 67 51 51 25 33 44 25 33 44 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 Data Ascii: {"context":{"client":{"hl":"en","gl":"US","remoteHost":"8.46.123.175","deviceMake":"","deviceModel":"","visitorData":"CgsxclQyM0t0SEJEUSiK28myBjIKCgJVUxIEGgAgQQ%3D%3D","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like
2024-05-25 23:00:45 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Sat, 25 May 2024 23:00:45 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-25 23:00:45 UTC	958	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 7b 22 73 65 72 76 69 63 65 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 5b 7b 22 73 65 72 76 69 63 65 22 3a 22 43 53 49 22 2c 22 70 61 72 61 6d 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 63 22 2c 22 76 61 6c 75 65 22 3a 22 57 45 42 22 7d 2c 7b 22 6b 65 79 22 3a 22 63 76 65 72 22 2c 22 76 61 6c 75 65 22 3a 22 32 2e 32 30 32 34 30 35 32 34 2e 30 30 2e 30 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 79 74 5f 6c 69 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 47 65 74 57 61 74 63 68 4e 65 78 74 5f 72 69 64 22 2c 22 76 61 6c 75 65 22 3a 22 30 78 66 35 30 66 65 66 30 32 39 63 62 34 64 66 37 35 22 7d 5d 7d 2c 7b 22 73 65 72 76 69 63 65 22 3a 22 47 46 45 45 44 42 41 43 4b 22 2c Data Ascii: 8000{"responseContext":{"serviceTrackingParams":[{"service":"CSI","params":[{"key":"c","value":"WEB"},{"key":"cver","value":"2.20240524.00.00"},{"key":"yt_li","value":"0"},{"key":"GetWatchNext_rid","value":"0xf50fef029cb4df75"}]},{"service":"GFEEDBACK",
2024-05-25 23:00:45 UTC	1390	IN	Data Raw: 30 39 31 33 33 31 2c 35 31 30 39 32 36 36 31 2c 35 31 30 39 34 31 37 31 2c 35 31 30 39 34 31 39 35 2c 35 31 30 39 34 32 30 32 2c 35 31 30 39 34 32 30 37 2c 35 31 30 39 35 34 37 38 2c 35 31 30 39 38 32 39 37 2c 35 31 30 39 38 32 39 39 2c 35 31 31 30 32 34 30 39 2c 35 31 31 30 34 39 38 38 2c 35 31 31 30 36 39 39 35 2c 35 31 31 30 37 33 34 30 2c 35 31 31 31 31 37 33 38 2c 35 31 31 31 33 36 35 38 2c 35 31 31 31 33 36 36 33 2c 35 31 31 31 35 31 38 34 2c 35 31 31 31 36 30 36 37 2c 35 31 31 31 36 33 37 30 2c 35 31 31 31 38 39 33 32 2c 35 31 31 32 31 33 31 31 2c 35 31 31 32 34 31 30 34 2c 35 31 31 32 37 35 30 34 2c 35 31 31 32 39 32 31 30 2c 35 31 31 33 33 31 30 33 2c 35 31 31 33 39 33 37 39 2c 35 31 31 34 31 38 30 30 2c 35 31 31 34 32 38 38 36 2c 35 31 31 34 32 Data Ascii: 091331,51092661,51094171,51094195,51094202,51094207,51095478,51098297,51098299,51102409,51104988,51106995,51107340,51111738,51113658,51113663,51115184,51116067,51116370,51118932,51121311,51124104,51127504,51129210,51133103,51139379,51141800,51142886,51142
2024-05-25 23:00:45 UTC	1390	IN	Data Raw: 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 7b 22 6c 6f 67 67 65 64 4f 75 74 22 3a 74 72 75 65 2c 22 74 72 61 63 6b 69 6e 67 50 61 72 61 6d 22 3a 22 6b 78 5f 66 6d 50 78 68 6f 50 5a 52 58 69 38 71 4d 70 57 68 4d 78 59 39 45 68 66 31 38 34 42 32 4d 6e 49 48 6f 6e 57 69 34 65 37 52 6f 67 48 52 67 6b 75 73 73 68 37 42 77 4f 63 43 45 35 39 54 44 74 73 6c 4c 4b 50 51 2d 53 53 22 7d 2c 22 77 65 62 52 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 45 78 74 65 6e 73 69 6f 6e 44 61 74 61 22 3a 7b 22 77 65 62 50 72 65 66 65 74 63 68 44 61 74 61 22 3a 7b 22 6e 61 76 69 67 61 74 69 6f 6e 45 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 63 6c 69 63 6b 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 22 43 41 41 51 67 32 63 69 45 77 6a 30 7a 61 53 49 39 4b 6d 47 41 78 57 30 58 48 6f Data Ascii: ponseContext":{"loggedOut":true,"trackingParam":"kx_fmPxhoPZRXi8qMpWhMxY9Ehf184B2MnIHonWi4e7RogHRgkussh7BwOcCE59TDtslLKPQ-SS"},"webResponseContextExtensionData":{"webPrefetchData":{"navigationEndpoints":[{"clickTrackingParams":"CAAQg2ciEwj0zaSI9KmGAxW0XHo
2024-05-25 23:00:45 UTC	1390	IN	Data Raw: 43 48 22 2c 22 72 6f 6f 74 56 65 22 3a 33 38 33 32 7d 7d 2c 22 77 61 74 63 68 45 6e 64 70 6f 69 6e 74 22 3a 7b 22 76 69 64 65 6f 49 64 22 3a 22 50 73 2d 30 66 30 4b 36 69 7a 4d 22 2c 22 70 61 72 61 6d 73 22 3a 22 45 41 45 59 41 64 6f 42 42 41 67 42 4b 67 41 25 33 44 22 2c 22 70 6c 61 79 65 72 50 61 72 61 6d 73 22 3a 22 51 41 46 49 41 51 25 33 44 25 33 44 22 2c 22 77 61 74 63 68 45 6e 64 70 6f 69 6e 74 53 75 70 70 6f 72 74 65 64 50 72 65 66 65 74 63 68 43 6f 6e 66 69 67 22 3a 7b 22 70 72 65 66 65 74 63 68 48 69 6e 74 43 6f 6e 66 69 67 22 3a 7b 22 70 72 65 66 65 74 63 68 50 72 69 6f 72 69 74 79 22 3a 30 2c 22 63 6f 75 6e 74 64 6f 77 6e 55 69 52 65 6c 61 74 69 76 65 53 65 63 6f 6e 64 73 50 72 65 66 65 74 63 68 43 6f 6e 64 69 74 69 6f 6e 22 3a 2d 33 7d 7d 7d Data Ascii: CH","rootVe":3832}},"watchEndpoint":{"videoId":"Ps-0f0K6izM","params":"EAEYAdoBBAgBKgA%3D","playerParams":"QAFIAQ%3D%3D","watchEndpointSupportedPrefetchConfig":{"prefetchHintConfig":{"prefetchPriority":0,"countdownUiRelativeSecondsPrefetchCondition":-3}}}
2024-05-25 23:00:45 UTC	1390	IN	Data Raw: 72 76 69 63 65 4c 6f 67 69 6e 3f 73 65 72 76 69 63 65 3d 79 6f 75 74 75 62 65 26 75 69 6c 65 6c 3d 33 26 70 61 73 73 69 76 65 3d 74 72 75 65 26 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 25 32 46 73 69 67 6e 69 6e 25 33 46 61 63 74 69 6f 6e 5f 68 61 6e 64 6c 65 5f 73 69 67 6e 69 6e 25 33 44 74 72 75 65 25 32 36 61 70 70 25 33 44 64 65 73 6b 74 6f 70 25 32 36 68 6c 25 33 44 65 6e 25 32 36 6e 65 78 74 25 33 44 68 74 74 70 73 25 32 35 33 41 25 32 35 32 46 25 32 35 32 46 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 25 32 35 32 46 63 25 32 35 32 46 43 6f 64 61 73 68 6f 70 4f 66 66 69 63 69 61 6c 26 68 6c 3d 65 6e 22 2c 22 77 65 62 50 61 67 65 54 79 70 65 22 3a 22 57 45 42 5f 50 41 47 45 5f Data Ascii: rviceLogin?service=youtube&uilel=3&passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3Dhttps%253A%252F%252Fwww.youtube.com%252Fc%252FCodashopOfficial&hl=en","webPageType":"WEB_PAGE_
2024-05-25 23:00:45 UTC	1390	IN	Data Raw: 3a 22 43 50 55 42 45 50 71 47 42 43 49 54 43 50 54 4e 70 49 6a 30 71 59 59 44 46 62 52 63 65 67 55 64 46 64 38 4a 61 67 3d 3d 22 2c 22 63 6f 6d 6d 61 6e 64 4d 65 74 61 64 61 74 61 22 3a 7b 22 77 65 62 43 6f 6d 6d 61 6e 64 4d 65 74 61 64 61 74 61 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 63 63 6f 75 6e 74 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 53 65 72 76 69 63 65 4c 6f 67 69 6e 3f 73 65 72 76 69 63 65 3d 79 6f 75 74 75 62 65 26 75 69 6c 65 6c 3d 33 26 70 61 73 73 69 76 65 3d 74 72 75 65 26 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 25 32 46 73 69 67 6e 69 6e 25 33 46 61 63 74 69 6f 6e 5f 68 61 6e 64 6c 65 5f 73 69 67 6e 69 6e 25 33 44 74 72 75 65 25 32 36 61 70 70 25 33 Data Ascii: :"CPUBEPqGBCITCPTNpIj0qYYDFbRcegUdFd8Jag==","commandMetadata":{"webCommandMetadata":{"url":"https://accounts.google.com/ServiceLogin?service=youtube&uilel=3&passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3
2024-05-25 23:00:45 UTC	1390	IN	Data Raw: 4b 56 42 49 68 4d 49 39 4d 32 6b 69 50 53 70 68 67 4d 56 74 46 78 36 42 52 30 56 33 77 6c 71 22 2c 22 63 6f 6d 6d 61 6e 64 4d 65 74 61 64 61 74 61 22 3a 7b 22 77 65 62 43 6f 6d 6d 61 6e 64 4d 65 74 61 64 61 74 61 22 3a 7b 22 73 65 6e 64 50 6f 73 74 22 3a 74 72 75 65 2c 22 61 70 69 55 72 6c 22 3a 22 2f 79 6f 75 74 75 62 65 69 2f 76 31 2f 6c 69 6b 65 2f 72 65 6d 6f 76 65 6c 69 6b 65 22 7d 7d 2c 22 6c 69 6b 65 45 6e 64 70 6f 69 6e 74 22 3a 7b 22 73 74 61 74 75 73 22 3a 22 49 4e 44 49 46 46 45 52 45 4e 54 22 2c 22 74 61 72 67 65 74 22 3a 7b 22 76 69 64 65 6f 49 64 22 3a 22 57 6c 57 34 55 41 6c 33 4d 79 4d 22 7d 2c 22 72 65 6d 6f 76 65 4c 69 6b 65 50 61 72 61 6d 73 22 3a 22 43 67 30 4b 43 31 64 73 56 7a 52 56 51 57 77 7a 54 58 6c 4e 47 41 41 71 44 41 69 63 32 Data Ascii: KVBIhMI9M2kiPSphgMVtFx6BR0V3wlq","commandMetadata":{"webCommandMetadata":{"sendPost":true,"apiUrl":"/youtubei/v1/like/removelike"}},"likeEndpoint":{"status":"INDIFFERENT","target":{"videoId":"WlW4UAl3MyM"},"removeLikeParams":"Cg0KC1dsVzRVQWwzTXlNGAAqDAic2
2024-05-25 23:00:45 UTC	1390	IN	Data Raw: 3a 7b 22 6d 6f 64 61 6c 22 3a 7b 22 6d 6f 64 61 6c 57 69 74 68 54 69 74 6c 65 41 6e 64 42 75 74 74 6f 6e 52 65 6e 64 65 72 65 72 22 3a 7b 22 74 69 74 6c 65 22 3a 7b 22 73 69 6d 70 6c 65 54 65 78 74 22 3a 22 44 6f 6e 27 74 20 6c 69 6b 65 20 74 68 69 73 20 76 69 64 65 6f 3f 22 7d 2c 22 63 6f 6e 74 65 6e 74 22 3a 7b 22 73 69 6d 70 6c 65 54 65 78 74 22 3a 22 53 69 67 6e 20 69 6e 20 74 6f 20 6d 61 6b 65 20 79 6f 75 72 20 6f 70 69 6e 69 6f 6e 20 63 6f 75 6e 74 2e 22 7d 2c 22 62 75 74 74 6f 6e 22 3a 7b 22 62 75 74 74 6f 6e 52 65 6e 64 65 72 65 72 22 3a 7b 22 73 74 79 6c 65 22 3a 22 53 54 59 4c 45 5f 42 4c 55 45 5f 54 45 58 54 22 2c 22 73 69 7a 65 22 3a 22 53 49 5a 45 5f 44 45 46 41 55 4c 54 22 2c 22 69 73 44 69 73 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 74 65 Data Ascii: :{"modal":{"modalWithTitleAndButtonRenderer":{"title":{"simpleText":"Don't like this video?"},"content":{"simpleText":"Sign in to make your opinion count."},"button":{"buttonRenderer":{"style":"STYLE_BLUE_TEXT","size":"SIZE_DEFAULT","isDisabled":false,"te
2024-05-25 23:00:45 UTC	1390	IN	Data Raw: 69 70 22 3a 22 49 20 64 69 73 6c 69 6b 65 20 74 68 69 73 22 7d 7d 2c 22 74 6f 67 67 6c 65 64 42 75 74 74 6f 6e 56 69 65 77 4d 6f 64 65 6c 22 3a 7b 22 62 75 74 74 6f 6e 56 69 65 77 4d 6f 64 65 6c 22 3a 7b 22 69 63 6f 6e 4e 61 6d 65 22 3a 22 44 49 53 4c 49 4b 45 22 2c 22 74 69 74 6c 65 22 3a 22 44 69 73 6c 69 6b 65 22 2c 22 6f 6e 54 61 70 22 3a 7b 22 73 65 72 69 61 6c 43 6f 6d 6d 61 6e 64 22 3a 7b 22 63 6f 6d 6d 61 6e 64 73 22 3a 5b 7b 22 6c 6f 67 47 65 73 74 75 72 65 43 6f 6d 6d 61 6e 64 22 3a 7b 22 67 65 73 74 75 72 65 54 79 70 65 22 3a 22 47 45 53 54 55 52 45 5f 45 56 45 4e 54 5f 54 59 50 45 5f 4c 4f 47 5f 47 45 4e 45 52 49 43 5f 43 4c 49 43 4b 22 2c 22 74 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 22 43 50 41 42 45 4b 69 50 43 53 49 54 43 50 54 4e 70 Data Ascii: ip":"I dislike this"}},"toggledButtonViewModel":{"buttonViewModel":{"iconName":"DISLIKE","title":"Dislike","onTap":{"serialCommand":{"commands":[{"logGestureCommand":{"gestureType":"GESTURE_EVENT_TYPE_LOG_GENERIC_CLICK","trackingParams":"CPABEKiPCSITCPTNp

Session ID	Source IP	Source Port	Destination IP	Destination Port
323	192.168.2.6	59375	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:44 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 79 67 6c 35 44 44 56 2f 4e 55 79 61 6d 78 44 5a 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 31 64 65 63 30 64 32 64 35 39 31 38 37 33 35 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: ygl5DDV/NUyamxDZ.1Context: a1dec0d2d5918735
2024-05-25 23:00:44 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-05-25 23:00:44 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 79 67 6c 35 44 44 56 2f 4e 55 79 61 6d 78 44 5a 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 31 64 65 63 30 64 32 64 35 39 31 38 37 33 35 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 43 6a 7a 4c 31 72 46 68 4e 54 50 31 42 39 33 2f 6d 37 2b 76 4a 48 74 4f 52 69 6a 53 79 61 4d 4c 5a 45 4e 56 35 44 53 36 2f 65 6e 7a 56 5a 59 61 73 4e 54 43 76 6c 58 45 31 5a 6f 6e 77 56 35 6d 6a 70 4a 63 54 66 30 73 63 47 46 59 44 4f 4d 36 75 35 45 51 47 64 7a 30 38 56 51 34 7a 5a 2f 48 6d 64 68 34 45 48 55 6a 4f 37 42 4a Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: ygl5DDV/NUyamxDZ.2Context: a1dec0d2d5918735<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAUCjzL1rFhNTP1B93/m7+vJHtORijSyaMLZENV5DS6/enzVZYasNTCvlXE1ZonwV5mjpJcTf0scGFYDOM6u5EQGdz08VQ4zZ/Hmdh4EHUjO7BJ
2024-05-25 23:00:44 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 79 67 6c 35 44 44 56 2f 4e 55 79 61 6d 78 44 5a 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 31 64 65 63 30 64 32 64 35 39 31 38 37 33 35 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: ygl5DDV/NUyamxDZ.3Context: a1dec0d2d5918735
2024-05-25 23:00:44 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-05-25 23:00:44 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 70 7a 67 4d 64 46 39 4f 34 30 79 4d 63 4e 6e 62 6f 46 37 67 53 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: pzgMdF9O40yMcNnboF7gSA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.6	59376	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:44 UTC	1394	OUT	POST /youtubei/v1/att/get?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 2878 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-wow64: ?0 sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-platform: "Windows" X-Youtube-Bootstrap-Logged-In: false sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json sec-ch-ua-full-version: "117.0.5938.134" X-Youtube-Client-Name: 1 X-Youtube-Client-Version: 2.20240524.00.00 X-Goog-Visitor-Id: CgsxclQyM0t0SEJEUSiK28myBjIKCgJVUxIEGgAgQQ%3D%3D Accept: / Origin: https://www.youtube.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:44 UTC	2878	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 72 65 6d 6f 74 65 48 6f 73 74 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 64 65 76 69 63 65 4d 61 6b 65 22 3a 22 22 2c 22 64 65 76 69 63 65 4d 6f 64 65 6c 22 3a 22 22 2c 22 76 69 73 69 74 6f 72 44 61 74 61 22 3a 22 43 67 73 78 63 6c 51 79 4d 30 74 30 53 45 4a 45 55 53 69 4b 32 38 6d 79 42 6a 49 4b 43 67 4a 56 55 78 49 45 47 67 41 67 51 51 25 33 44 25 33 44 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 Data Ascii: {"context":{"client":{"hl":"en","gl":"US","remoteHost":"8.46.123.175","deviceMake":"","deviceModel":"","visitorData":"CgsxclQyM0t0SEJEUSiK28myBjIKCgJVUxIEGgAgQQ%3D%3D","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like
2024-05-25 23:00:44 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Sat, 25 May 2024 23:00:44 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-25 23:00:44 UTC	958	IN	Data Raw: 34 66 66 35 0d 0a 7b 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 7b 22 73 65 72 76 69 63 65 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 5b 7b 22 73 65 72 76 69 63 65 22 3a 22 43 53 49 22 2c 22 70 61 72 61 6d 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 63 22 2c 22 76 61 6c 75 65 22 3a 22 57 45 42 22 7d 2c 7b 22 6b 65 79 22 3a 22 63 76 65 72 22 2c 22 76 61 6c 75 65 22 3a 22 32 2e 32 30 32 34 30 35 32 34 2e 30 30 2e 30 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 79 74 5f 6c 69 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 47 65 74 41 74 74 65 73 74 61 74 69 6f 6e 43 68 61 6c 6c 65 6e 67 65 5f 72 69 64 22 2c 22 76 61 6c 75 65 22 3a 22 30 78 31 39 37 38 64 38 62 31 61 64 33 33 62 35 39 35 22 7d 5d 7d 2c 7b 22 73 65 72 76 69 63 65 22 3a 22 Data Ascii: 4ff5{"responseContext":{"serviceTrackingParams":[{"service":"CSI","params":[{"key":"c","value":"WEB"},{"key":"cver","value":"2.20240524.00.00"},{"key":"yt_li","value":"0"},{"key":"GetAttestationChallenge_rid","value":"0x1978d8b1ad33b595"}]},{"service":"
2024-05-25 23:00:44 UTC	1390	IN	Data Raw: 35 31 30 38 39 34 34 31 2c 35 31 30 39 31 33 33 31 2c 35 31 30 39 32 36 36 31 2c 35 31 30 39 34 31 37 31 2c 35 31 30 39 34 31 39 35 2c 35 31 30 39 34 32 30 32 2c 35 31 30 39 34 32 30 37 2c 35 31 30 39 35 34 37 38 2c 35 31 30 39 38 32 39 37 2c 35 31 30 39 38 32 39 39 2c 35 31 31 30 32 34 30 39 2c 35 31 31 30 34 39 38 38 2c 35 31 31 30 36 39 39 35 2c 35 31 31 30 37 33 34 30 2c 35 31 31 31 31 37 33 38 2c 35 31 31 31 33 36 35 38 2c 35 31 31 31 33 36 36 33 2c 35 31 31 31 35 31 38 34 2c 35 31 31 31 36 30 36 37 2c 35 31 31 31 36 33 37 30 2c 35 31 31 31 38 39 33 32 2c 35 31 31 32 31 33 31 31 2c 35 31 31 32 34 31 30 34 2c 35 31 31 32 37 35 30 34 2c 35 31 31 32 39 32 31 30 2c 35 31 31 33 33 31 30 33 2c 35 31 31 33 39 33 37 39 2c 35 31 31 34 31 38 30 30 2c 35 31 31 Data Ascii: 51089441,51091331,51092661,51094171,51094195,51094202,51094207,51095478,51098297,51098299,51102409,51104988,51106995,51107340,51111738,51113658,51113663,51115184,51116067,51116370,51118932,51121311,51124104,51127504,51129210,51133103,51139379,51141800,511
2024-05-25 23:00:44 UTC	1390	IN	Data Raw: 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 7b 22 6c 6f 67 67 65 64 4f 75 74 22 3a 74 72 75 65 7d 2c 22 77 65 62 52 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 45 78 74 65 6e 73 69 6f 6e 44 61 74 61 22 3a 7b 22 68 61 73 44 65 63 6f 72 61 74 65 64 22 3a 74 72 75 65 7d 7d 2c 22 63 68 61 6c 6c 65 6e 67 65 22 3a 22 61 3d 36 26 61 32 3d 31 26 62 3d 6d 6f 59 51 38 79 56 71 43 35 77 2d 51 58 41 63 59 48 69 43 59 33 4e 75 6b 48 6f 26 63 3d 31 37 31 36 36 37 38 30 34 34 26 64 3d 31 26 65 32 3d 25 37 45 6e 46 44 66 4b 41 59 64 76 4e 55 4b 78 44 37 45 26 63 31 61 3d 31 26 63 36 61 3d 31 26 63 36 62 3d 31 26 68 68 3d 65 6e 56 67 6c 6e 55 72 57 37 46 4a 78 30 39 2d 69 41 49 65 4f 77 4d 4d 4f 77 50 6a 35 7a 55 6c 41 5f 78 66 4a 74 79 42 73 73 41 22 2c 22 62 6f 74 67 Data Ascii: esponseContext":{"loggedOut":true},"webResponseContextExtensionData":{"hasDecorated":true}},"challenge":"a=6&a2=1&b=moYQ8yVqC5w-QXAcYHiCY3NukHo&c=1716678044&d=1&e2=%7EnFDfKAYdvNUKxD7E&c1a=1&c6a=1&c6b=1&hh=enVglnUrW7FJx09-iAIeOwMMOwPj5zUlA_xfJtyBssA","botg
2024-05-25 23:00:44 UTC	1390	IN	Data Raw: 46 79 4e 48 41 71 30 46 6c 53 70 78 46 62 64 2b 79 41 33 41 47 53 51 4e 55 2b 2f 38 61 42 61 6c 67 44 6e 70 72 33 42 75 41 66 64 31 6c 4f 5a 54 73 6e 53 5a 77 43 58 6b 6e 52 66 6e 49 46 47 44 6d 53 42 71 73 57 43 34 2f 38 44 69 43 79 55 41 41 4d 51 2b 52 71 35 6d 2b 4e 56 6c 2b 36 73 52 65 6f 36 68 6e 45 52 32 35 73 6b 37 64 50 55 35 51 65 78 4f 63 55 6b 79 55 38 61 42 6b 6b 77 30 62 49 66 4f 47 2b 49 42 4e 4e 76 66 58 7a 32 4e 58 2b 65 6a 33 79 37 42 44 6d 70 4b 6a 4f 2b 78 56 71 62 71 76 69 61 66 76 64 53 43 5a 44 38 58 67 6d 71 48 54 6f 6c 30 49 35 75 72 65 6e 6a 48 79 33 47 53 33 38 42 68 77 35 41 47 2b 74 2f 53 34 72 7a 6c 4b 76 63 53 74 2b 38 42 57 57 30 79 68 54 30 71 6a 7a 67 6f 69 51 39 32 52 62 65 54 4a 45 6b 64 75 33 59 33 45 58 75 30 77 48 76 Data Ascii: FyNHAq0FlSpxFbd+yA3AGSQNU+/8aBalgDnpr3BuAfd1lOZTsnSZwCXknRfnIFGDmSBqsWC4/8DiCyUAAMQ+Rq5m+NVl+6sReo6hnER25sk7dPU5QexOcUkyU8aBkkw0bIfOG+IBNNvfXz2NX+ej3y7BDmpKjO+xVqbqviafvdSCZD8XgmqHTol0I5urenjHy3GS38Bhw5AG+t/S4rzlKvcSt+8BWW0yhT0qjzgoiQ92RbeTJEkdu3Y3EXu0wHv
2024-05-25 23:00:44 UTC	1390	IN	Data Raw: 72 2f 66 6e 48 7a 70 37 4d 62 6d 5a 6c 32 34 49 54 78 34 66 30 6a 50 44 76 4a 36 4e 75 4f 36 65 6b 72 6a 5a 47 4e 31 37 2f 37 31 31 6f 6d 6f 54 6f 46 63 73 4c 50 62 55 44 2f 54 79 66 30 66 73 56 52 4d 37 6e 33 46 33 51 6f 4d 57 42 46 41 4a 34 65 7a 63 52 39 69 77 31 74 51 64 6a 63 4d 50 75 49 48 73 5a 71 32 6c 4f 77 4f 47 39 33 69 75 53 77 50 78 2f 52 74 66 34 36 71 4d 4e 30 6e 71 53 4a 5a 53 79 48 39 48 48 61 31 54 67 41 79 34 54 31 74 38 48 30 69 73 61 41 4e 4c 2b 75 4d 55 50 2b 74 63 4a 7a 67 31 4b 38 52 59 72 64 69 54 57 5a 53 55 44 54 4c 6f 58 78 4e 73 59 47 41 4e 37 4c 61 34 43 48 45 75 4e 70 68 33 50 4e 77 68 49 4f 52 39 46 35 52 34 70 5a 65 73 6e 7a 37 59 45 35 38 48 75 52 4c 53 32 32 53 59 2f 69 47 47 74 74 46 70 65 45 6c 42 52 57 43 75 32 53 62 Data Ascii: r/fnHzp7MbmZl24ITx4f0jPDvJ6NuO6ekrjZGN17/711omoToFcsLPbUD/Tyf0fsVRM7n3F3QoMWBFAJ4ezcR9iw1tQdjcMPuIHsZq2lOwOG93iuSwPx/Rtf46qMN0nqSJZSyH9HHa1TgAy4T1t8H0isaANL+uMUP+tcJzg1K8RYrdiTWZSUDTLoXxNsYGAN7La4CHEuNph3PNwhIOR9F5R4pZesnz7YE58HuRLS22SY/iGGttFpeElBRWCu2Sb
2024-05-25 23:00:44 UTC	1390	IN	Data Raw: 44 46 2f 56 45 6b 32 31 6b 36 41 52 74 6c 33 62 37 47 66 45 46 42 59 30 4c 58 2f 49 30 6f 76 36 78 6b 34 43 54 6a 51 4b 41 46 32 32 69 35 75 38 72 61 36 37 76 31 32 64 4e 4e 65 6b 30 4e 4c 34 55 73 4b 32 54 6d 43 45 79 33 46 6c 79 4b 62 4e 36 6e 6e 6d 6f 33 64 6e 34 37 2b 42 4f 74 49 43 5a 45 73 51 69 6e 7a 43 4f 36 59 4a 6a 33 63 42 42 70 4a 43 72 73 6f 4a 57 34 41 4b 35 71 67 4c 52 38 71 72 31 75 65 46 6a 4b 37 69 79 6d 6b 6a 4d 78 32 72 6d 79 70 37 2f 38 55 6b 4a 4b 68 57 75 50 2f 6c 55 64 7a 7a 33 4c 47 38 67 45 75 2f 76 78 71 79 63 6e 47 6c 4e 6d 2b 37 44 47 54 54 4b 50 45 68 45 2f 4c 4f 79 46 53 4b 66 63 62 4a 45 4e 62 6b 6d 54 48 35 47 59 35 6f 71 57 31 37 43 62 6c 41 71 74 6c 71 6e 63 76 43 6e 42 50 6e 78 6e 56 79 79 39 34 48 31 71 47 55 42 65 48 Data Ascii: DF/VEk21k6ARtl3b7GfEFBY0LX/I0ov6xk4CTjQKAF22i5u8ra67v12dNNek0NL4UsK2TmCEy3FlyKbN6nnmo3dn47+BOtICZEsQinzCO6YJj3cBBpJCrsoJW4AK5qgLR8qr1ueFjK7iymkjMx2rmyp7/8UkJKhWuP/lUdzz3LG8gEu/vxqycnGlNm+7DGTTKPEhE/LOyFSKfcbJENbkmTH5GY5oqW17CblAqtlqncvCnBPnxnVyy94H1qGUBeH
2024-05-25 23:00:44 UTC	1390	IN	Data Raw: 75 36 46 41 6f 43 61 6a 52 5a 6b 44 64 4e 73 58 4b 4f 2b 67 6e 4e 79 65 38 4f 59 5a 39 61 50 2b 41 43 44 4b 57 47 6d 6a 76 6e 4c 70 73 4a 51 6b 61 39 58 42 44 78 35 5a 6c 4f 79 31 54 62 4d 4c 34 34 65 2f 4e 4a 79 2b 6c 78 47 4e 33 76 68 6e 79 37 76 68 4c 39 6c 64 58 4b 4d 5a 68 37 4f 53 67 64 42 45 5a 45 76 48 58 77 7a 74 56 53 5a 69 7a 54 6e 75 57 4e 31 56 67 4f 69 6f 6b 7a 6b 76 41 2f 2b 48 45 71 58 67 70 6e 2b 75 70 64 31 35 31 70 4e 75 74 71 34 4f 73 41 53 33 31 33 30 38 6f 71 4c 30 39 4d 50 58 2f 71 61 59 52 31 36 6c 48 4d 47 54 77 49 30 67 39 37 74 50 72 6b 53 48 73 6e 32 79 75 6d 47 56 31 48 76 58 2b 54 56 44 75 4d 61 30 33 6f 77 48 77 37 67 6f 76 43 32 4b 79 48 30 77 64 74 44 56 2b 32 31 72 7a 69 43 65 74 35 53 46 42 71 61 5a 54 41 6f 79 4a 39 54 Data Ascii: u6FAoCajRZkDdNsXKO+gnNye8OYZ9aP+ACDKWGmjvnLpsJQka9XBDx5ZlOy1TbML44e/NJy+lxGN3vhny7vhL9ldXKMZh7OSgdBEZEvHXwztVSZizTnuWN1VgOiokzkvA/+HEqXgpn+upd151pNutq4OsAS31308oqL09MPX/qaYR16lHMGTwI0g97tPrkSHsn2yumGV1HvX+TVDuMa03owHw7govC2KyH0wdtDV+21rziCet5SFBqaZTAoyJ9T
2024-05-25 23:00:44 UTC	1390	IN	Data Raw: 65 61 34 62 66 66 38 73 35 39 7a 6f 5a 62 42 36 6e 33 75 67 39 59 44 6d 49 2f 47 38 32 4e 57 51 71 70 70 57 56 6a 6a 70 6d 4f 78 56 32 41 65 45 52 52 70 30 74 79 78 64 5a 6d 75 6b 6c 52 6b 6f 61 74 77 6e 74 5a 71 7a 54 63 6d 61 76 48 30 57 4f 33 43 48 35 67 45 6e 32 70 64 70 73 41 46 67 57 51 72 44 75 34 43 52 56 56 69 42 48 37 5a 5a 6e 53 44 50 44 77 72 69 4a 4a 68 2b 6b 4d 6d 4e 72 58 71 36 38 6c 6e 42 41 4b 4c 4b 63 65 48 2f 6b 45 45 4d 4f 6c 67 4f 33 78 58 61 77 4e 31 46 66 38 72 75 46 63 77 7a 77 57 4a 71 2b 68 62 51 4d 4b 65 42 65 5a 36 73 4e 68 4e 4f 6b 46 38 44 64 54 6f 36 7a 42 69 42 33 6e 41 48 4c 5a 44 68 2b 31 6c 33 59 73 55 50 2b 65 71 78 4c 6e 6a 30 6e 67 6c 41 70 57 72 56 54 62 59 42 7a 76 41 4e 33 41 33 75 36 43 35 4b 37 4c 66 52 49 4e 5a Data Ascii: ea4bff8s59zoZbB6n3ug9YDmI/G82NWQqppWVjjpmOxV2AeERRp0tyxdZmuklRkoatwntZqzTcmavH0WO3CH5gEn2pdpsAFgWQrDu4CRVViBH7ZZnSDPDwriJJh+kMmNrXq68lnBAKLKceH/kEEMOlgO3xXawN1Ff8ruFcwzwWJq+hbQMKeBeZ6sNhNOkF8DdTo6zBiB3nAHLZDh+1l3YsUP+eqxLnj0nglApWrVTbYBzvAN3A3u6C5K7LfRINZ
2024-05-25 23:00:44 UTC	1390	IN	Data Raw: 38 49 35 32 79 4d 4b 4d 69 48 79 4b 61 53 7a 59 59 34 77 65 72 78 66 62 45 4e 64 61 36 56 73 6e 56 6e 2f 50 4d 59 78 49 65 71 36 42 58 6e 64 37 34 6a 35 39 61 4a 63 69 76 66 45 52 7a 6d 35 4e 31 35 76 47 66 56 6a 4c 48 61 4c 71 32 33 53 59 46 58 76 50 57 59 78 50 69 62 56 6f 4a 61 31 2f 2f 75 58 64 2b 34 61 4b 32 37 7a 54 74 59 59 34 68 37 57 43 50 66 74 6b 44 33 70 42 45 69 6f 36 64 55 43 59 58 32 62 67 72 6a 50 72 59 69 58 63 57 49 41 71 56 63 58 7a 35 73 54 32 6c 35 72 70 38 77 4c 68 64 77 75 6b 65 70 61 4f 4b 4c 74 72 66 79 61 47 56 42 67 59 7a 71 4e 58 53 4a 6f 62 56 70 63 58 6a 41 33 34 6f 66 50 6b 39 2f 67 6c 54 55 4b 66 33 61 30 56 61 6f 59 2f 72 66 38 68 4d 66 68 6f 50 52 64 65 69 32 7a 42 62 69 6b 68 52 42 30 54 7a 65 67 37 49 72 4a 65 44 4d 79 Data Ascii: 8I52yMKMiHyKaSzYY4werxfbENda6VsnVn/PMYxIeq6BXnd74j59aJcivfERzm5N15vGfVjLHaLq23SYFXvPWYxPibVoJa1//uXd+4aK27zTtYY4h7WCPftkD3pBEio6dUCYX2bgrjPrYiXcWIAqVcXz5sT2l5rp8wLhdwukepaOKLtrfyaGVBgYzqNXSJobVpcXjA34ofPk9/glTUKf3a0VaoY/rf8hMfhoPRdei2zBbikhRB0Tzeg7IrJeDMy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.6	59377	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:46 UTC	2974	OUT	POST /api/stats/qoe?fmt=396&afmt=251&cpn=O-o7NTyOH_Xb-gSb&el=profilepage&ns=yt&fexp=v1%2C23952866%2C30430%2C2736%2C18612%2C76094%2C54572%2C73455%2C230596%2C85201%2C19107%2C6789%2C9958%2C6271%2C133212%2C14625955%2C11684381%2C7111%2C21854%2C9932%2C4557%2C9954%2C1192%2C7913%2C18583%2C4147%2C2819%2C2%2C6689%2C2007%2C9072%2C5244%2C23908%2C2196%2C5115%2C3472%2C383%2C1026%2C19%2C2%2C1082%2C21%2C641%2C2099%2C1447%2C2744%2C101%2C2658%2C1033%2C2%2C3703%2C8%2C832%2C671%2C1317%2C1222%2C1477%2C492%2C1008%2C4076%2C39%2C9%2C46%2C830%2C1538%2C713%2C2326%2C259%2C2%2C8%2C761%2C596%2C508%2C244&cl=635991227&seq=1&docid=WlW4UAl3MyM&ei=m21SZtHfBLG26dsPlueskAw&event=streamingstats&plid=AAYZT0D0iRDyMquL&referrer=https%3A%2F%2Fwww.youtube.com%2Fc%2FCodashopOfficial&qclc=ChBPLW83TlR5T0hfWGItZ1NiEAE&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240524.00.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&vps=0.000:N,0.009:B,2.689:B,2.689:B&cat=streaming,sabr&cmt=0.009:0.000,2.689:0.000&afs=2.571:251;CggKA2RyYxIBMQ::i:CAEoAQ&vf [TRUNCATED] Host: www.youtube.com Connection: keep-alive Content-Length: 226 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOP X-YouTube-Page-Label: youtube.desktop.web_20240524_00_RC00 sec-ch-ua-arch: "x86" X-YouTube-Page-CL: 636796567 sec-ch-ua-platform-version: "10.0.0" X-YouTube-Utc-Offset: -240 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" X-YouTube-Time-Zone: America/New_York sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded sec-ch-ua-full-version: "117.0.5938.134" X-YouTube-Client-Name: 1 X-YouTube-Client-Version: 2.20240524.00.00 X-Goog-Visitor-Id: CgsxclQyM0t0SEJEUSiK28myBjIKCgJVUxIEGgAgQQ%3D%3D X-YouTube-Ad-Signals: dt=1716678041110&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1264&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=image Accept: / Origin: https://www.youtube.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:46 UTC	226	OUT	Data Raw: 73 65 73 73 69 6f 6e 5f 74 6f 6b 65 6e 3d 51 55 46 46 4c 55 68 71 62 6a 42 5a 65 46 4e 47 62 6b 6f 7a 57 6c 68 4f 4d 55 4e 72 59 6c 64 66 5a 6e 4a 6a 55 6b 4d 35 4e 33 6b 78 55 58 78 42 51 33 4a 74 63 30 74 74 61 56 46 78 62 6d 52 44 5a 30 31 55 5a 55 35 50 57 6e 6c 58 63 7a 41 77 56 31 46 66 52 32 56 50 4d 47 35 57 62 57 59 7a 4d 30 5a 59 64 46 68 6d 64 56 64 75 54 55 34 33 51 6e 52 4d 61 6e 64 70 64 58 64 69 51 6e 5a 73 51 7a 56 66 61 56 52 69 55 46 6c 66 58 7a 59 77 64 6d 70 49 55 6e 45 32 52 33 6c 78 61 57 74 7a 63 44 42 58 4d 45 31 5a 62 55 77 35 57 56 52 46 59 56 59 30 54 6a 64 30 63 56 52 4e 58 33 5a 6f 4e 32 4a 57 52 57 39 55 4f 55 52 5a 64 77 25 33 44 25 33 44 Data Ascii: session_token=QUFFLUhqbjBZeFNGbkozWlhOMUNrYldfZnJjUkM5N3kxUXxBQ3Jtc0ttaVFxbmRDZ01UZU5PWnlXczAwV1FfR2VPMG5WbWYzM0ZYdFhmdVduTU43QnRMandpdXdiQnZsQzVfaVRiUFlfXzYwdmpIUnE2R3lxaWtzcDBXME1ZbUw5WVRFYVY0Tjd0cVRNX3ZoN2JWRW9UOURZdw%3D%3D
2024-05-25 23:00:46 UTC	504	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Sat, 25 May 2024 23:00:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.6	59380	142.250.185.142	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:46 UTC	542	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://www.youtube.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:46 UTC	516	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Sat, 25 May 2024 23:00:46 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.6	59381	142.250.185.142	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:46 UTC	542	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://www.youtube.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:46 UTC	516	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Sat, 25 May 2024 23:00:46 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.6	59382	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:46 UTC	670	OUT	GET /s/desktop/aef0ced3/jsbin/www-searchbox.vflset/www-searchbox.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:46 UTC	689	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 281842 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 24 May 2024 16:01:39 GMT Expires: Sat, 24 May 2025 16:01:39 GMT Cache-Control: public, max-age=31536000 Last-Modified: Fri, 24 May 2024 07:14:12 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 111547 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:46 UTC	701	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 6e 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 62 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: (function(){'use strict';var n;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype
2024-05-25 23:00:46 UTC	1390	IN	Data Raw: 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 62 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 76 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 65 2b 2b 2c 66 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 66 2c 67 29 7b 74 68 69 73 2e 67 3d 66 3b 62 61 28 74 68 69 73 2c 22 Data Ascii: d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}v("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.g=f;ba(this,"
2024-05-25 23:00:46 UTC	1390	IN	Data Raw: 63 74 2e 61 73 73 69 67 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 31 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 69 66 28 64 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 64 29 6a 61 28 64 2c 65 29 26 26 28 61 5b 65 5d 3d 64 5b 65 5d 29 7d 72 65 74 75 72 6e 20 61 7d 3b 0a 76 28 22 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 6b 61 7d 29 3b 0a 76 61 72 20 6c 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 Data Ascii: ct.assign:function(a,b){for(var c=1;c<arguments.length;c++){var d=arguments[c];if(d)for(var e in d)ja(d,e)&&(a[e]=d[e])}return a};v("Object.assign",function(a){return a\|\|ka});var la="function"==typeof Object.create?Object.create:function(a){function b()
2024-05-25 23:00:46 UTC	1390	IN	Data Raw: 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 72 75 6e 6e 69 6e 67 22 29 3b 61 2e 75 3d 21 30 7d 0a 73 61 2e 70 72 6f 74 6f 74 79 70 65 2e 41 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 3d 61 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 29 7b 61 2e 69 3d 7b 50 64 3a 62 2c 6a 65 3a 21 30 7d 3b 61 2e 67 3d 61 2e 6f 7c 7c 61 2e 73 7d 0a 73 61 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 69 3d 7b 72 65 74 75 72 6e 3a 61 7d 3b 74 68 69 73 2e 67 3d 74 68 69 73 2e 73 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 41 28 61 2c 62 2c 63 29 7b 61 2e 67 3d 63 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 7d 7d 0a 73 61 2e 70 72 6f 74 6f 74 79 70 65 2e 4f 3d 66 Data Ascii: Error("Generator is already running");a.u=!0}sa.prototype.A=function(a){this.l=a};function ua(a,b){a.i={Pd:b,je:!0};a.g=a.o\|\|a.s}sa.prototype.return=function(a){this.i={return:a};this.g=this.s};function A(a,b,c){a.g=c;return{value:b}}sa.prototype.O=f
2024-05-25 23:00:46 UTC	1390	IN	Data Raw: 61 28 61 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 0a 74 68 69 73 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 7a 61 28 61 2c 62 29 7d 3b 0a 74 68 69 73 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 44 61 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 64 29 7b 72 65 74 75 72 6e 20 61 2e 6e 65 78 74 28 64 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 64 29 7b 72 65 74 75 72 6e 20 61 2e 74 68 72 6f 77 28 64 29 7d 0a 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 64 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 67 29 7b 67 2e 64 6f 6e 65 3f 64 28 67 2e 76 61 6c 75 65 29 3a 50 72 6f 6d 69 Data Ascii: a(a));return b};this.return=function(b){return za(a,b)};this[Symbol.iterator]=function(){return this}}function Da(a){function b(d){return a.next(d)}function c(d){return a.throw(d)}return new Promise(function(d,e){function f(g){g.done?d(g.value):Promi
2024-05-25 23:00:46 UTC	1390	IN	Data Raw: 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 67 28 74 68 69 73 2e 48 29 2c 72 65 6a 65 63 74 3a 67 28 74 68 69 73 2e 6f 29 7d 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 48 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 67 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 6f 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 50 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 72 65 73 6f 6c 76 65 20 74 6f 20 69 74 73 65 6c 66 22 29 29 3b 65 6c 73 65 20 69 66 28 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 69 73 2e 4a 28 67 29 3b 65 6c 73 65 7b 61 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 67 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 68 3d 6e 75 6c 6c 21 3d 67 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a Data Ascii: !1;return{resolve:g(this.H),reject:g(this.o)}};b.prototype.H=function(g){if(g===this)this.o(new TypeError("A Promise cannot resolve to itself"));else if(g instanceof b)this.J(g);else{a:switch(typeof g){case "object":var h=null!=g;break a;case "function":
2024-05-25 23:00:46 UTC	1390	IN	Data Raw: 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4b 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6d 28 29 3b 74 72 79 7b 67 2e 63 61 6c 6c 28 68 2c 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 72 2c 71 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 6c 28 72 28 74 29 29 7d 63 61 74 63 68 28 75 29 7b 6d 28 75 29 7d 7d 3a 71 7d 0a 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 71 29 7b 6c 3d 72 3b 6d 3d 71 7d Data Ascii: b.prototype.K=function(g,h){var k=this.m();try{g.call(h,k.resolve,k.reject)}catch(l){k.reject(l)}};b.prototype.then=function(g,h){function k(r,q){return"function"==typeof r?function(t){try{l(r(t))}catch(u){m(u)}}:q}var l,m,p=new b(function(r,q){l=r;m=q}
2024-05-25 23:00:46 UTC	1390	IN	Data Raw: 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 0a 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 6e 65 77 20 61 28 5b 5b 6b 2c 32 5d 2c 5b 6c 2c 33 5d 5d 29 3b 69 66 28 32 21 3d 6d 2e 67 65 74 28 6b 29 7c 7c 33 21 3d 6d 2e 67 65 74 28 6c 29 29 72 65 74 75 72 6e 21 31 3b 6d 2e 64 65 6c 65 74 65 28 6b 29 3b 6d 2e 73 65 74 28 6c 2c 34 29 3b 72 65 74 75 72 6e 21 6d 2e 68 61 73 28 Data Ascii: {if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Object.seal({}),l=Object.seal({}),m=new a([[k,2],[l,3]]);if(2!=m.get(k)\|\|3!=m.get(l))return!1;m.delete(k);m.set(l,4);return!m.has(
2024-05-25 23:00:46 UTC	1390	IN	Data Raw: 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 77 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 0a 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6b 3d 6e 65 77 20 61 28 77 28 5b 5b 68 2c 22 73 22 5d 5d 29 29 3b 69 66 28 22 73 22 21 3d 6b 2e 67 65 74 28 68 29 7c Data Ascii: size=0;if(h){h=w(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|"function"!=typeof a\|\|!a.prototype.entries\|\|"function"!=typeof Object.seal)return!1;try{var h=Object.seal({x:4}),k=new a(w([[h,"s"]]));if("s"!=k.get(h)\|
2024-05-25 23:00:46 UTC	1390	IN	Data Raw: 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 Data Ascii: (this,function(h){return h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.6	59383	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:46 UTC	661	OUT	GET /s/player/bc657243/player_ias.vflset/en_US/captions.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:46 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 73155 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 23 May 2024 08:13:50 GMT Expires: Fri, 23 May 2025 08:13:50 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 22 May 2024 04:17:26 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 226016 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:46 UTC	702	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 6d 34 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 69 73 41 63 74 69 76 65 28 29 7c 7c 61 2e 73 74 61 72 74 28 29 7d 2c 76 71 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 3f 61 2e 63 61 70 74 69 6f 6e 73 49 6e 69 74 69 61 6c 53 74 61 74 65 3a 22 43 41 50 54 49 4f 4e 53 5f 49 4e 49 54 49 41 4c 5f 53 54 41 54 45 5f 55 4e 4b 4e 4f 57 4e 22 7d 2c 77 71 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 6e 65 77 20 67 2e 67 53 3b 0a 63 2e 6c 61 6e 67 75 61 67 65 43 6f 64 65 3d 61 2e 6c 61 6e 67 75 61 67 65 43 6f 64 65 3b 63 2e 6c 61 6e 67 75 61 67 65 4e 61 6d 65 3d 61 2e 6c 61 6e 67 Data Ascii: (function(g){var window=this;'use strict';var m4=function(a){a.isActive()\|\|a.start()},vqb=function(a,b){return b?a.captionsInitialState:"CAPTIONS_INITIAL_STATE_UNKNOWN"},wqb=function(a,b){var c=new g.gS;c.languageCode=a.languageCode;c.languageName=a.lang
2024-05-25 23:00:46 UTC	1390	IN	Data Raw: 6e 73 22 2c 63 29 29 7d 29 7d 2c 79 71 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 78 71 62 28 61 2c 62 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 26 26 63 28 64 2e 74 72 61 63 6b 44 61 74 61 2c 6e 65 77 20 67 2e 67 53 28 64 2e 6d 65 74 61 64 61 74 61 29 29 7d 29 7d 2c 42 71 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 7a 71 62 2e 74 65 73 74 28 61 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 27 22 2b 61 2b 22 27 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 68 65 78 20 63 6f 6c 6f 72 22 29 3b 0a 34 3d 3d 61 2e 6c 65 6e 67 74 68 26 26 28 61 3d 61 2e 72 65 70 6c 61 63 65 28 41 71 62 2c 22 23 24 31 24 31 24 32 24 32 24 33 24 33 22 29 29 3b 61 3d 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 61 3d 70 61 72 73 65 49 6e Data Ascii: ns",c))})},yqb=function(a,b,c){xqb(a,b).then(function(d){d&&c(d.trackData,new g.gS(d.metadata))})},Bqb=function(a){if(!zqb.test(a))throw Error("'"+a+"' is not a valid hex color");4==a.length&&(a=a.replace(Aqb,"#$1$1$2$2$3$3"));a=a.toLowerCase();a=parseIn
2024-05-25 23:00:46 UTC	1390	IN	Data Raw: 69 6f 6e 28 68 29 7b 61 3a 7b 68 3d 68 2e 78 68 72 3b 61 2e 4d 61 28 29 3b 69 66 28 61 2e 42 29 7b 76 61 72 20 6c 3d 21 28 61 2e 47 3f 68 2e 72 65 73 70 6f 6e 73 65 3a 68 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 29 7c 7c 34 30 30 3c 3d 68 2e 73 74 61 74 75 73 2c 6d 3d 67 2e 70 53 61 28 68 29 3b 69 66 28 6d 29 7b 68 3d 67 2e 49 52 61 28 61 2e 42 2c 61 2e 70 6f 6c 69 63 79 2c 7b 7d 29 3b 61 2e 42 2e 57 6b 28 68 2c 6d 29 3b 47 71 62 28 61 2c 61 2e 42 29 3b 62 72 65 61 6b 20 61 7d 6c 3f 61 2e 70 6c 61 79 65 72 2e 6d 61 28 22 63 61 70 66 61 69 6c 22 2c 7b 73 74 61 74 75 73 3a 68 2e 73 74 61 74 75 73 7d 29 3a 28 61 2e 70 6c 61 79 65 72 2e 41 69 28 29 2e 4c 68 28 22 66 63 62 5f 72 22 29 2c 6d 3d 61 2e 42 2e 69 62 5b 30 5d 2e 50 61 2c 6e 75 6c 6c 21 3d 61 2e 5a 26 Data Ascii: ion(h){a:{h=h.xhr;a.Ma();if(a.B){var l=!(a.G?h.response:h.responseText)\|\|400<=h.status,m=g.pSa(h);if(m){h=g.IRa(a.B,a.policy,{});a.B.Wk(h,m);Gqb(a,a.B);break a}l?a.player.ma("capfail",{status:h.status}):(a.player.Ai().Lh("fcb_r"),m=a.B.ib[0].Pa,null!=a.Z&
2024-05-25 23:00:46 UTC	1390	IN	Data Raw: 7c 7c 6e 75 6c 6c 29 29 7b 76 61 72 20 68 3d 66 2e 69 6e 66 6f 2e 63 61 70 74 69 6f 6e 54 72 61 63 6b 3b 68 26 26 68 2e 6c 61 6e 67 75 61 67 65 43 6f 64 65 3d 3d 3d 62 26 26 64 2e 70 75 73 68 28 66 29 7d 7d 72 65 74 75 72 6e 20 64 2e 6c 65 6e 67 74 68 3f 64 5b 30 5d 3a 6e 75 6c 6c 7d 2c 4c 71 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 76 6f 69 64 20 30 3b 0a 61 3d 76 6f 69 64 20 30 3d 3d 3d 61 3f 7b 7d 3a 61 3b 76 61 72 20 62 3d 22 73 75 67 67 65 73 74 5f 63 6f 72 72 65 63 74 69 6f 6e 22 69 6e 20 67 2e 49 6f 62 3f 67 2e 49 6f 62 2e 73 75 67 67 65 73 74 5f 63 6f 72 72 65 63 74 69 6f 6e 3a 22 45 64 69 74 20 63 61 70 74 69 6f 6e 22 3b 62 3d 62 7c 7c 22 22 3b 76 61 72 20 63 3d 7b 7d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 61 29 7b 63 3d 7b 66 46 3a Data Ascii: \|\|null)){var h=f.info.captionTrack;h&&h.languageCode===b&&d.push(f)}}return d.length?d[0]:null},Lqb=function(){var a=void 0;a=void 0===a?{}:a;var b="suggest_correction"in g.Iob?g.Iob.suggest_correction:"Edit caption";b=b\|\|"";var c={},d;for(d in a){c={fF:
2024-05-25 23:00:46 UTC	1390	IN	Data Raw: 61 6c 6c 28 74 68 69 73 2c 7b 49 3a 22 64 69 76 22 2c 53 3a 22 63 61 70 74 69 6f 6e 2d 77 69 6e 64 6f 77 22 2c 58 3a 7b 69 64 3a 22 63 61 70 74 69 6f 6e 2d 77 69 6e 64 6f 77 2d 22 2b 61 2e 69 64 2c 64 69 72 3a 74 3f 22 72 74 6c 22 3a 22 6c 74 72 22 2c 74 61 62 69 6e 64 65 78 3a 22 30 22 2c 6c 61 6e 67 3a 71 2e 6c 61 6e 67 7d 2c 56 3a 76 7d 29 3b 76 61 72 20 46 3d 0a 74 68 69 73 3b 74 68 69 73 2e 4b 3d 5b 5d 3b 74 68 69 73 2e 47 61 3d 21 31 3b 74 68 69 73 2e 42 3d 61 3b 74 68 69 73 2e 4e 61 3d 74 68 69 73 2e 4c 61 3d 6e 75 6c 6c 3b 74 68 69 73 2e 70 6c 61 79 65 72 57 69 64 74 68 3d 66 3b 74 68 69 73 2e 70 6c 61 79 65 72 48 65 69 67 68 74 3d 68 3b 74 68 69 73 2e 4e 3d 6e 75 6c 6c 3b 74 68 69 73 2e 6d 61 78 57 69 64 74 68 3d 2e 39 36 2a 66 3b 74 68 69 73 2e Data Ascii: all(this,{I:"div",S:"caption-window",X:{id:"caption-window-"+a.id,dir:t?"rtl":"ltr",tabindex:"0",lang:q.lang},V:v});var F=this;this.K=[];this.Ga=!1;this.B=a;this.Na=this.La=null;this.playerWidth=f;this.playerHeight=h;this.N=null;this.maxWidth=.96*f;this.
2024-05-25 23:00:46 UTC	1390	IN	Data Raw: 65 6c 65 6d 65 6e 74 2c 22 79 74 70 2d 63 61 70 74 69 6f 6e 2d 77 69 6e 64 6f 77 2d 62 6f 74 74 6f 6d 22 29 7d 7d 2c 50 71 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 22 76 65 72 74 69 63 61 6c 2d 72 6c 22 3b 0a 31 3d 3d 3d 61 2e 6a 2e 71 54 26 26 28 63 3d 22 76 65 72 74 69 63 61 6c 2d 6c 72 22 29 3b 67 2e 4b 73 26 26 28 63 3d 22 76 65 72 74 69 63 61 6c 2d 6c 72 22 3d 3d 3d 63 3f 22 74 62 2d 6c 72 22 3a 22 74 62 2d 72 6c 22 29 3b 67 2e 49 73 28 62 2c 22 2d 6f 2d 77 72 69 74 69 6e 67 2d 6d 6f 64 65 22 2c 63 29 3b 67 2e 49 73 28 62 2c 22 2d 77 65 62 6b 69 74 2d 77 72 69 74 69 6e 67 2d 6d 6f 64 65 22 2c 63 29 3b 67 2e 49 73 28 62 2c 22 77 72 69 74 69 6e 67 2d 6d 6f 64 65 22 2c 63 29 3b 67 2e 49 73 28 62 2c 22 74 65 78 74 2d 6f 72 69 65 Data Ascii: element,"ytp-caption-window-bottom")}},Pqb=function(a,b){var c="vertical-rl";1===a.j.qT&&(c="vertical-lr");g.Ks&&(c="vertical-lr"===c?"tb-lr":"tb-rl");g.Is(b,"-o-writing-mode",c);g.Is(b,"-webkit-writing-mode",c);g.Is(b,"writing-mode",c);g.Is(b,"text-orie
2024-05-25 23:00:46 UTC	1390	IN	Data Raw: 3d 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 50 69 78 65 6c 52 61 74 69 6f 3f 2e 35 3a 31 3b 66 6f 72 28 66 3d 6d 3b 66 3c 3d 70 3b 66 2b 3d 6e 29 64 2e 70 75 73 68 28 66 2b 22 70 78 20 22 2b 66 2b 22 70 78 20 22 2b 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 64 2e 70 75 73 68 28 6d 2b 22 70 78 20 22 2b 6d 2b 22 70 78 20 22 2b 68 29 3b 64 2e 70 75 73 68 28 22 2d 22 2b 6d 2b 22 70 78 20 2d 22 2b 6d 2b 22 70 78 20 22 2b 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 3a 66 6f 72 28 70 3d 30 3b 35 3e 70 3b 70 2b 2b 29 64 2e 70 75 73 68 28 22 30 20 30 20 22 2b 0a 6e 2b 22 70 78 20 22 2b 65 29 7d 63 5b 22 74 65 78 74 2d 73 68 61 64 6f 77 22 5d 3d 64 2e 6a 6f 69 6e 28 22 2c 20 22 29 7d 65 3d 22 22 3b 73 77 69 74 63 68 28 62 2e 66 6f 6e 74 46 61 6d 69 6c 79 29 7b Data Ascii: =window.devicePixelRatio?.5:1;for(f=m;f<=p;f+=n)d.push(f+"px "+f+"px "+e);break;case 2:d.push(m+"px "+m+"px "+h);d.push("-"+m+"px -"+m+"px "+e);break;case 3:for(p=0;5>p;p++)d.push("0 0 "+n+"px "+e)}c["text-shadow"]=d.join(", ")}e="";switch(b.fontFamily){
2024-05-25 23:00:46 UTC	1390	IN	Data Raw: 6d 73 2e 47 69 3f 63 2e 74 72 61 6e 73 66 6f 72 6d 3d 65 3f 22 72 6f 74 61 74 65 28 39 30 64 65 67 29 22 3a 22 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 22 3a 65 26 26 28 63 2e 74 72 61 6e 73 66 6f 72 6d 3d 22 72 6f 74 61 74 65 28 2d 39 30 64 65 67 29 22 29 29 3b 69 66 28 31 3d 3d 3d 62 2e 48 6f 7c 7c 32 3d 3d 3d 62 2e 48 6f 7c 7c 33 3d 3d 3d 62 2e 48 6f 7c 7c 34 3d 3d 3d 62 2e 48 6f 7c 7c 35 3d 3d 3d 62 2e 48 6f 29 69 66 28 67 2e 56 52 29 63 5b 22 66 6f 6e 74 2d 77 65 69 67 68 74 22 5d 3d 22 62 6f 6c 64 22 3b 65 6c 73 65 20 73 77 69 74 63 68 28 63 5b 22 74 65 78 74 2d 65 6d 70 68 61 73 69 73 2d 73 74 79 6c 65 22 5d 3d 22 66 69 6c 6c 65 64 20 63 69 72 63 6c 65 22 2c 63 5b 22 74 65 78 74 2d 65 6d 70 68 61 73 69 73 2d 63 6f 6c 6f 72 22 5d 3d 22 63 75 72 72 Data Ascii: ms.Gi?c.transform=e?"rotate(90deg)":"rotate(180deg)":e&&(c.transform="rotate(-90deg)"));if(1===b.Ho\|\|2===b.Ho\|\|3===b.Ho\|\|4===b.Ho\|\|5===b.Ho)if(g.VR)c["font-weight"]="bold";else switch(c["text-emphasis-style"]="filled circle",c["text-emphasis-color"]="curr
2024-05-25 23:00:46 UTC	1390	IN	Data Raw: 6c 5d 3b 6d 26 26 21 63 3f 28 52 71 62 28 61 29 2c 65 3d 53 71 62 28 61 2c 64 29 29 3a 6d 26 26 63 26 26 28 63 3d 21 31 29 3b 6e 26 26 28 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 66 3f 67 2e 7a 66 28 6e 29 3a 6e 29 2c 66 7c 7c 22 52 55 42 59 22 21 3d 3d 6e 2e 74 61 67 4e 61 6d 65 7c 7c 34 21 3d 3d 6e 2e 63 68 69 6c 64 45 6c 65 6d 65 6e 74 43 6f 75 6e 74 7c 7c 67 2e 56 52 7c 7c 21 67 2e 4c 73 28 6e 2e 63 68 69 6c 64 72 65 6e 5b 32 5d 2c 22 74 65 78 74 2d 65 6d 70 68 61 73 69 73 22 29 7c 7c 28 6d 3d 61 2e 43 3f 22 70 61 64 64 69 6e 67 2d 72 69 67 68 74 22 3a 22 70 61 64 64 69 6e 67 2d 74 6f 70 22 2c 67 2e 4c 73 28 6e 2e 63 68 69 6c 64 72 65 6e 5b 32 5d 2c 22 74 65 78 74 2d 65 6d 70 68 61 73 69 73 2d 70 6f 73 69 74 69 6f 6e 22 29 26 26 28 6d 3d 0a 61 2e 43 Data Ascii: l];m&&!c?(Rqb(a),e=Sqb(a,d)):m&&c&&(c=!1);n&&(e.appendChild(f?g.zf(n):n),f\|\|"RUBY"!==n.tagName\|\|4!==n.childElementCount\|\|g.VR\|\|!g.Ls(n.children[2],"text-emphasis")\|\|(m=a.C?"padding-right":"padding-top",g.Ls(n.children[2],"text-emphasis-position")&&(m=a.C
2024-05-25 23:00:46 UTC	1390	IN	Data Raw: 72 34 3b 66 6f 72 28 61 3d 74 68 69 73 2e 43 3d 30 3b 31 35 3e 3d 61 3b 61 2b 2b 29 7b 74 68 69 73 2e 42 5b 61 5d 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 33 32 3e 3d 62 3b 62 2b 2b 29 74 68 69 73 2e 42 5b 61 5d 5b 62 5d 3d 6e 65 77 20 61 72 62 7d 7d 2c 75 34 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 33 3d 3d 3d 61 2e 73 74 79 6c 65 2e 74 79 70 65 29 7b 66 6f 72 28 76 61 72 20 63 3d 30 2c 64 3d 30 2c 65 3d 61 2e 44 2e 74 69 6d 65 2b 30 2c 66 3d 22 22 2c 68 3d 22 22 2c 6c 3d 65 2c 6d 3d 31 3b 31 35 3e 3d 6d 3b 2b 2b 6d 29 7b 66 6f 72 28 76 61 72 20 6e 3d 21 31 2c 70 3d 64 3f 64 3a 31 3b 33 32 3e 3d 70 3b 2b 2b 70 29 7b 76 61 72 20 71 3d 61 2e 42 5b 6d 5d 5b 70 5d 3b 0a 69 66 28 30 21 3d 3d 71 2e 6a 29 7b 30 3d 3d 3d 63 26 26 28 63 3d 6d Data Ascii: r4;for(a=this.C=0;15>=a;a++){this.B[a]=[];for(var b=0;32>=b;b++)this.B[a][b]=new arb}},u4=function(a,b){if(3===a.style.type){for(var c=0,d=0,e=a.D.time+0,f="",h="",l=e,m=1;15>=m;++m){for(var n=!1,p=d?d:1;32>=p;++p){var q=a.B[m][p];if(0!==q.j){0===c&&(c=m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.6	59393	173.194.53.7	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:46 UTC	1270	OUT	GET /videoplayback?expire=1716699643&ei=m21SZtHfBLG26dsPlueskAw&ip=8.46.123.175&id=o-AAByu6biCgl7iDSq70mIQ45oE6y--isGJjdDpQA5viBb&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=LW&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsny6&ms=au%2Crdu&mv=u&mvi=2&pl=25&spc=UWF9fyGhjMmI6YCwKplxIQ0cf4NW2823HDFhnpeilF6Je7I8qcwkKUeht4Z7&svpuc=1&ns=rs6FwNCx7nX3DZRBf0lXHTIQ&sabr=1&rqh=1&mt=1716677528&fvip=5&keepalive=yes&c=WEB&smc=1&n=hYMFD6O-BAa23A&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgBUwT1FK1SAX452JmnBE4ilqOAQ-gxMypvUzy-M2keQcCIQD-hbOnXCYgpdY1SkUfmPfv2Q9EH-nU4EfzbhqdSHoHrQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIhAPvzdLU4uwJGyGeccU2Xwwge7C8hj0ecAF6YqFp_R6qdAiAj3VpUV93hlVl1GyRBAaIc5520oWionJA3kw_n7yRomw%3D%3D&cpn=O-o7NTyOH_Xb-gSb&cver=2.20240524.00.00&rn=1 HTTP/1.1 Host: rr2---sn-p5qs7nzr.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:46 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 02 May 2007 10:26:10 GMT Date: Sat, 25 May 2024 23:00:46 GMT Expires: Sat, 25 May 2024 23:00:46 GMT Cache-Control: private, max-age=21297 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-25 23:00:46 UTC	4	IN	Data Raw: 31 62 0d 0a Data Ascii: 1b
2024-05-25 23:00:46 UTC	27	IN	Data Raw: 2c 19 0a 15 73 61 62 72 2e 6d 61 6c 66 6f 72 6d 65 64 5f 63 6f 6e 66 69 67 10 00 Data Ascii: ,sabr.malformed_config
2024-05-25 23:00:46 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-25 23:00:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
2024-05-25 23:00:50 UTC	1270	OUT	GET /videoplayback?expire=1716699643&ei=m21SZtHfBLG26dsPlueskAw&ip=8.46.123.175&id=o-AAByu6biCgl7iDSq70mIQ45oE6y--isGJjdDpQA5viBb&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=LW&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsny6&ms=au%2Crdu&mv=u&mvi=2&pl=25&spc=UWF9fyGhjMmI6YCwKplxIQ0cf4NW2823HDFhnpeilF6Je7I8qcwkKUeht4Z7&svpuc=1&ns=rs6FwNCx7nX3DZRBf0lXHTIQ&sabr=1&rqh=1&mt=1716677528&fvip=5&keepalive=yes&c=WEB&smc=1&n=hYMFD6O-BAa23A&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgBUwT1FK1SAX452JmnBE4ilqOAQ-gxMypvUzy-M2keQcCIQD-hbOnXCYgpdY1SkUfmPfv2Q9EH-nU4EfzbhqdSHoHrQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIhAPvzdLU4uwJGyGeccU2Xwwge7C8hj0ecAF6YqFp_R6qdAiAj3VpUV93hlVl1GyRBAaIc5520oWionJA3kw_n7yRomw%3D%3D&cpn=O-o7NTyOH_Xb-gSb&cver=2.20240524.00.00&rn=3 HTTP/1.1 Host: rr2---sn-p5qs7nzr.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:50 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 02 May 2007 10:26:10 GMT Date: Sat, 25 May 2024 23:00:50 GMT Expires: Sat, 25 May 2024 23:00:50 GMT Cache-Control: private, max-age=21293 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-25 23:00:50 UTC	4	IN	Data Raw: 31 62 0d 0a Data Ascii: 1b
2024-05-25 23:00:50 UTC	27	IN	Data Raw: 2c 19 0a 15 73 61 62 72 2e 6d 61 6c 66 6f 72 6d 65 64 5f 63 6f 6e 66 69 67 10 00 Data Ascii: ,sabr.malformed_config
2024-05-25 23:00:50 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-25 23:00:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
2024-05-25 23:00:50 UTC	1270	OUT	GET /videoplayback?expire=1716699643&ei=m21SZtHfBLG26dsPlueskAw&ip=8.46.123.175&id=o-AAByu6biCgl7iDSq70mIQ45oE6y--isGJjdDpQA5viBb&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=LW&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsny6&ms=au%2Crdu&mv=u&mvi=2&pl=25&spc=UWF9fyGhjMmI6YCwKplxIQ0cf4NW2823HDFhnpeilF6Je7I8qcwkKUeht4Z7&svpuc=1&ns=rs6FwNCx7nX3DZRBf0lXHTIQ&sabr=1&rqh=1&mt=1716677528&fvip=5&keepalive=yes&c=WEB&smc=1&n=hYMFD6O-BAa23A&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgBUwT1FK1SAX452JmnBE4ilqOAQ-gxMypvUzy-M2keQcCIQD-hbOnXCYgpdY1SkUfmPfv2Q9EH-nU4EfzbhqdSHoHrQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIhAPvzdLU4uwJGyGeccU2Xwwge7C8hj0ecAF6YqFp_R6qdAiAj3VpUV93hlVl1GyRBAaIc5520oWionJA3kw_n7yRomw%3D%3D&cpn=O-o7NTyOH_Xb-gSb&cver=2.20240524.00.00&rn=4 HTTP/1.1 Host: rr2---sn-p5qs7nzr.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:50 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 02 May 2007 10:26:10 GMT Date: Sat, 25 May 2024 23:00:50 GMT Expires: Sat, 25 May 2024 23:00:50 GMT Cache-Control: private, max-age=21293 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-25 23:00:50 UTC	4	IN	Data Raw: 31 62 0d 0a Data Ascii: 1b
2024-05-25 23:00:50 UTC	27	IN	Data Raw: 2c 19 0a 15 73 61 62 72 2e 6d 61 6c 66 6f 72 6d 65 64 5f 63 6f 6e 66 69 67 10 00 Data Ascii: ,sabr.malformed_config
2024-05-25 23:00:54 UTC	1270	OUT	GET /videoplayback?expire=1716699643&ei=m21SZtHfBLG26dsPlueskAw&ip=8.46.123.175&id=o-AAByu6biCgl7iDSq70mIQ45oE6y--isGJjdDpQA5viBb&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=LW&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsny6&ms=au%2Crdu&mv=u&mvi=2&pl=25&spc=UWF9fyGhjMmI6YCwKplxIQ0cf4NW2823HDFhnpeilF6Je7I8qcwkKUeht4Z7&svpuc=1&ns=rs6FwNCx7nX3DZRBf0lXHTIQ&sabr=1&rqh=1&mt=1716677528&fvip=5&keepalive=yes&c=WEB&smc=1&n=hYMFD6O-BAa23A&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgBUwT1FK1SAX452JmnBE4ilqOAQ-gxMypvUzy-M2keQcCIQD-hbOnXCYgpdY1SkUfmPfv2Q9EH-nU4EfzbhqdSHoHrQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIhAPvzdLU4uwJGyGeccU2Xwwge7C8hj0ecAF6YqFp_R6qdAiAj3VpUV93hlVl1GyRBAaIc5520oWionJA3kw_n7yRomw%3D%3D&cpn=O-o7NTyOH_Xb-gSb&cver=2.20240524.00.00&rn=5 HTTP/1.1 Host: rr2---sn-p5qs7nzr.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:54 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 02 May 2007 10:26:10 GMT Date: Sat, 25 May 2024 23:00:54 GMT Expires: Sat, 25 May 2024 23:00:54 GMT Cache-Control: private, max-age=21289 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-25 23:01:01 UTC	1270	OUT	GET /videoplayback?expire=1716699643&ei=m21SZtHfBLG26dsPlueskAw&ip=8.46.123.175&id=o-AAByu6biCgl7iDSq70mIQ45oE6y--isGJjdDpQA5viBb&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=LW&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsny6&ms=au%2Crdu&mv=u&mvi=2&pl=25&spc=UWF9fyGhjMmI6YCwKplxIQ0cf4NW2823HDFhnpeilF6Je7I8qcwkKUeht4Z7&svpuc=1&ns=rs6FwNCx7nX3DZRBf0lXHTIQ&sabr=1&rqh=1&mt=1716677528&fvip=5&keepalive=yes&c=WEB&smc=1&n=hYMFD6O-BAa23A&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgBUwT1FK1SAX452JmnBE4ilqOAQ-gxMypvUzy-M2keQcCIQD-hbOnXCYgpdY1SkUfmPfv2Q9EH-nU4EfzbhqdSHoHrQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIhAPvzdLU4uwJGyGeccU2Xwwge7C8hj0ecAF6YqFp_R6qdAiAj3VpUV93hlVl1GyRBAaIc5520oWionJA3kw_n7yRomw%3D%3D&cpn=O-o7NTyOH_Xb-gSb&cver=2.20240524.00.00&rn=6 HTTP/1.1 Host: rr2---sn-p5qs7nzr.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:01:01 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 02 May 2007 10:26:10 GMT Date: Sat, 25 May 2024 23:01:01 GMT Expires: Sat, 25 May 2024 23:01:01 GMT Cache-Control: private, max-age=21282 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.6	59390	173.194.53.7	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:46 UTC	1270	OUT	GET /videoplayback?expire=1716699643&ei=m21SZtHfBLG26dsPlueskAw&ip=8.46.123.175&id=o-AAByu6biCgl7iDSq70mIQ45oE6y--isGJjdDpQA5viBb&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=LW&mm=31%2C29&mn=sn-p5qs7nzr%2Csn-p5qlsny6&ms=au%2Crdu&mv=u&mvi=2&pl=25&spc=UWF9fyGhjMmI6YCwKplxIQ0cf4NW2823HDFhnpeilF6Je7I8qcwkKUeht4Z7&svpuc=1&ns=rs6FwNCx7nX3DZRBf0lXHTIQ&sabr=1&rqh=1&mt=1716677528&fvip=5&keepalive=yes&c=WEB&smc=1&n=hYMFD6O-BAa23A&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgBUwT1FK1SAX452JmnBE4ilqOAQ-gxMypvUzy-M2keQcCIQD-hbOnXCYgpdY1SkUfmPfv2Q9EH-nU4EfzbhqdSHoHrQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHWaYeowRQIhAPvzdLU4uwJGyGeccU2Xwwge7C8hj0ecAF6YqFp_R6qdAiAj3VpUV93hlVl1GyRBAaIc5520oWionJA3kw_n7yRomw%3D%3D&cpn=O-o7NTyOH_Xb-gSb&cver=2.20240524.00.00&rn=2 HTTP/1.1 Host: rr2---sn-p5qs7nzr.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:46 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 02 May 2007 10:26:10 GMT Date: Sat, 25 May 2024 23:00:46 GMT Expires: Sat, 25 May 2024 23:00:46 GMT Cache-Control: private, max-age=21297 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-05-25 23:00:46 UTC	4	IN	Data Raw: 31 62 0d 0a Data Ascii: 1b
2024-05-25 23:00:46 UTC	27	IN	Data Raw: 2c 19 0a 15 73 61 62 72 2e 6d 61 6c 66 6f 72 6d 65 64 5f 63 6f 6e 66 69 67 10 00 Data Ascii: ,sabr.malformed_config
2024-05-25 23:00:46 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-25 23:00:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.6	59384	142.250.184.246	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:46 UTC	1107	OUT	GET /vi/WlW4UAl3MyM/hqdefault.jpg?sqp=-oaymwEcCNACELwBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLB2P6U67krPl_BOH9xUJPAYE3UStA HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:46 UTC	646	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 7514 Date: Sat, 25 May 2024 23:00:46 GMT Expires: Sun, 26 May 2024 01:00:46 GMT Cache-Control: public, max-age=7200 ETag: "1631501547" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:46 UTC	744	IN	Data Raw: 52 49 46 46 52 1d 00 00 57 45 42 50 56 50 38 20 46 1d 00 00 f0 78 00 9d 01 2a 50 01 bc 00 3e 51 24 90 45 23 a2 21 93 58 55 b8 38 05 04 b1 37 7e 3e 4c 0a ee d1 64 fe 83 b3 fe 4d f4 8f e1 7f 25 fd aa 6b ff d8 fe f5 fe 55 73 22 98 0e b0 bf 13 fd b3 f7 27 fc 97 ff ff ff ff 7c 3f d4 7f 90 f6 93 fe 1b f6 c3 dc 13 f4 ab fc ff f6 df f2 9f b4 5d d0 7f aa 7e c0 7b 02 fe 2f fd 0f fe 1f f8 af de 7f 98 1f f4 df f3 bf b0 fb a6 fd 4f ff 47 ee 01 fc f7 fc 07 fd cf 69 cf 54 7f db 4f 60 5f e5 3f dc bf ed fa e6 7e d6 7c 2f 7f 56 ff 6b fb 6d ee 85 fe 0b ff 47 67 c7 48 bf 5b bf b3 fe 42 78 77 fd ab fb 17 ec df f6 4f 23 3f 61 fd a7 f2 37 f7 8b a5 b7 55 f9 9b fc 9f ed 0f da 7f b8 7e e1 fe 5f 7c bd fe 8f c3 ff 4f bf 8f 3f 01 7f 8e 7f 2b fe f9 f9 55 f9 97 c9 43 ad 79 84 7a c5 f3 Data Ascii: RIFFRWEBPVP8 Fx*P>Q$E#!XU87~>LdM%kUs"'\|?]~{/OGiTO`_?~\|/VkmGgH[BxwO#?a7U~_\|O?+UCyz
2024-05-25 23:00:46 UTC	1390	IN	Data Raw: c2 5f d7 98 59 92 13 23 8c c4 1a 96 c7 73 15 f7 dd b1 6f 22 51 5b 68 50 51 4c 77 2b ec 0f fd 97 1d 0f 7e 7b 91 22 c1 7a 51 81 54 25 77 b1 d7 af e7 eb 49 1e c7 7d d4 c3 39 b7 e3 24 52 ee 08 9d 81 e3 61 f2 97 09 2e f3 70 71 44 2e 1d ed d9 e2 07 46 f2 64 8d 8d 0e a3 b4 c8 a1 ad f3 7b 41 82 2c ac eb 0d 86 9e 04 ba 8c 03 06 b7 ca 19 c2 78 75 65 6b ce 5d a1 af 8c 92 b7 1f 89 30 ba af db 14 9d e9 77 be d9 52 80 66 4a 2c 1e 13 60 78 4d b8 8f da 22 be 26 82 21 b0 87 70 58 d2 fa 29 df 8b 1f 9b 2d bc f5 8a fc ee 3e f0 31 d9 e6 fc 58 fc da 26 05 fc da 1e 44 47 9c 61 69 f2 41 7f b1 5e 4b 22 9c ff 6d 4f 90 19 f5 83 52 ec 85 01 97 a7 1e 61 0c a9 9b f8 62 4b f8 0c c9 cf 1f 48 f7 13 c9 fd be 23 5d 63 79 40 0d 22 93 c7 8d 04 19 8e 78 2a e9 e4 2e ea 87 09 92 3c a8 00 fe ff Data Ascii: _Y#so"Q[hPQLw+~{"zQT%wI}9$Ra.pqD.Fd{A,xuek]0wRfJ,`xM"&!pX)->1X&DGaiA^K"mORabKH#]cy@"x*.<
2024-05-25 23:00:46 UTC	1390	IN	Data Raw: e4 e1 c1 a2 0d 12 88 cb 01 2a 86 58 96 2a 43 08 92 60 75 70 73 c9 5d 5e 5f ee 5b ec f2 e1 39 90 64 2b 73 db c9 4f b6 c6 bf 84 b5 4c 0b fe bf 1d af 2a 82 ca 4b 33 3d fa 1e 08 b0 24 98 b7 14 3b 8e fd 5c b5 c6 ff 22 eb 25 02 36 7a 98 6a bc a3 13 40 32 4a 76 a7 dc e6 01 a3 fb de fb 39 2c 4f 3a e4 85 62 b5 b4 c5 36 14 fa f0 ab 74 0e a2 21 e4 ce ea d0 94 2f bb 5d 7d 8c 16 eb e2 79 ef e5 94 1a f5 6e 5d 89 3f b1 00 a0 c4 75 4f 91 b3 c7 b3 a5 a2 12 c9 6d 20 e1 d0 44 c7 23 ed 86 c9 4b b8 fb cf db e4 10 b7 11 e6 45 6d 25 aa f3 57 a6 f6 25 01 cc d8 cb 91 ad 11 12 c5 77 b1 85 83 e6 cb 0c 52 29 6d d0 46 01 15 5d 1f fb 48 8a cf 19 30 35 4a 2c 2c 9a 25 96 96 03 b6 cb 6a 7f f6 07 1e cd a2 e0 19 9a 95 82 21 0f 06 7d 7f 8e f7 da 4d ee 1e f0 9a ed 83 da e2 8a 11 a4 ac f8 4f Data Ascii: XC`ups]^_[9d+sOL*K3=$;\"%6zj@2Jv9,O:b6t!/]}yn]?uOm D#KEm%W%wR)mF]H05J,,%j!}MO
2024-05-25 23:00:46 UTC	1390	IN	Data Raw: 59 ad fa 37 e2 12 3b f8 46 7c 03 96 8e 6c 95 7a 1f a3 ac be cd 22 96 24 b4 2d 4f a9 3c 61 67 7e 9b ac 27 1a ea 55 04 1f ca 0d 57 ed 47 48 6c be d6 2f 3e 64 b7 7f 8f 03 7b 04 33 f6 4d c4 0f ec 70 04 1b f8 42 8a 96 a5 58 d0 e8 57 6a ac 10 a0 01 45 bd 31 fe dd 4c e3 4a 30 95 83 07 9a e1 0e 7c ee 16 d9 82 39 48 b1 05 33 cc 85 39 b3 60 ec 17 7e 3a bc 97 d9 97 e8 b3 f5 f1 9b 7e 42 bf fb c6 b1 11 24 ec d3 6b 06 ad f4 6f a0 bc 69 58 af 43 d8 9a 8f a9 5b 1e 7a ee e6 3d 4d 87 a9 f0 e1 91 d8 9c d8 d3 fd ad 07 c0 3a a9 2e 47 a6 e8 c3 bf cf 57 1e c7 b3 4d 10 d0 52 46 46 f7 a0 ed d7 fb 43 ad ef d3 c8 da 82 95 c1 34 f0 a7 0f 80 e0 53 6e df 26 02 e4 7f d7 b6 87 7c 23 6a e2 c2 24 51 0d 47 28 eb 05 04 6d 4d a4 ca e4 ab a3 55 9d 43 25 6d 77 dd 81 00 fc 54 8a 18 2d 59 ee a4 Data Ascii: Y7;F\|lz"$-O<ag~'UWGHl/>d{3MpBXWjE1LJ0\|9H39`~:~B$koiXC[z=M:.GWMRFFC4Sn&\|#j$QG(mMUC%mwT-Y
2024-05-25 23:00:46 UTC	1390	IN	Data Raw: b0 7d f8 ba 26 41 30 50 cc 03 d7 29 0b 76 03 f9 55 64 44 8c cc 4b 05 a9 54 18 19 17 fa 14 66 6e 6a 27 cc e9 13 dd 32 20 4a 92 f8 91 a7 51 c9 69 bf 35 92 68 05 02 5a e5 29 f0 19 1c 02 67 be 15 59 fd fd a8 cd c5 1d e0 9d fd fc c8 ea fe 2a 59 11 9a 8d 24 1f ea 4d cc b1 ce 48 c3 36 49 3b 5f 26 39 c5 fc 82 a9 92 ca c1 52 34 5e a7 c3 c2 cf ce 5c 8d 5a 1a c9 24 44 2a 45 3a 86 cb 7f 77 ca e4 40 96 93 df 30 c3 33 2d eb 51 92 b9 07 99 52 f7 40 47 5e bd 1c 6c b1 43 38 3f 74 9c 08 af 8c 16 02 85 80 ed 34 0e 3a b5 98 06 fa e5 ce a7 e8 c2 d3 00 f1 33 43 f0 bd e6 dc 9a 4e bb 97 64 2e 13 41 76 ee f6 50 61 57 4b de 47 ed 84 5b 53 f5 77 c7 f8 5a 16 c3 ea 29 77 b0 e0 2c bf fc 93 66 b4 1e 30 1f a3 29 39 cb 9f 2a bf 2e 25 00 35 47 34 3c 52 7b c9 d3 43 cf 37 21 7d e3 a2 98 d9 Data Ascii: }&A0P)vUdDKTfnj'2 JQi5hZ)gYY$MH6I;_&9R4^\Z$DE:w@03-QR@G^lC8?t4:3CNd.AvPaWKG[SwZ)w,f0)9*.%5G4<R{C7!}
2024-05-25 23:00:46 UTC	1210	IN	Data Raw: 6f 87 0c 50 73 56 cb ae 32 ee 83 c8 27 c3 91 fe f0 26 07 ca 1e 1e a1 ea f3 40 d8 ea 4b 7a 2f 7c f5 69 92 b6 b2 f5 58 6a eb 88 09 73 77 2d a4 c5 1f 28 5f c9 74 7e c6 67 fe 81 3b 72 6d dc 85 ce 29 8e 84 0b be 4f f4 1b c1 1c 0a fd 33 81 2e 29 aa 95 86 c8 d3 dd 8c 6b c5 d3 32 4c 62 0d 36 ce e7 39 04 76 ea 60 19 01 15 2d f2 cc 85 df 42 6f cf 91 03 27 b2 60 57 a5 cc 62 da 4a d7 d0 78 00 66 02 35 63 df cd 85 d5 84 7d fd c9 d9 6c 3a 7d 91 db 93 26 2a 54 4b b6 12 e6 b9 6e 08 b9 05 f8 0d d4 fe 30 ab 4e 17 bf de fe 6d 1b 8c 9e 0a cb 91 e8 c8 1c 29 65 7e ad 95 fe 71 05 2a 38 d8 cf 5b 54 d0 a9 80 10 42 7e 91 4b 87 79 05 d9 ee 01 ce 00 f6 ae f7 f9 7a 8f 66 c4 c7 3d 4e c3 ff 86 ef 7a 05 e5 e2 77 fa 67 72 e2 01 0d 56 81 35 4a 87 af 9b 8b 34 bc 5b 0e 88 ac ed 36 f1 81 89 Data Ascii: oPsV2'&@Kz/\|iXjsw-(_t~g;rm)O3.)k2Lb69v`-Bo'`WbJxf5c}l:}&TKn0Nm)e~q8[TB~Kyzf=NzwgrV5J4[6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.6	59386	216.58.206.46	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:46 UTC	539	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:46 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Sat, 25 May 2024 23:00:46 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:46 UTC	1150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-05-25 23:00:46 UTC	459	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e 20 69 64 3d 6c 6f 67 6f 20 61 72 69 61 2d 6c 61 62 65 6c 3d 47 6f 6f Data Ascii: ckground:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span id=logo aria-label=Goo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.6	59387	216.58.206.46	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:46 UTC	502	OUT	GET /youtubei/v1/att/get?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:46 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1607 Date: Sat, 25 May 2024 23:00:46 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:46 UTC	1150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-05-25 23:00:46 UTC	457	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e 20 69 64 3d 6c 6f 67 6f 20 61 72 69 61 2d 6c 61 62 65 6c 3d 47 6f 6f Data Ascii: ckground:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span id=logo aria-label=Goo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.6	59391	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:46 UTC	3049	OUT	GET /api/stats/playback?ns=yt&el=profilepage&cpn=O-o7NTyOH_Xb-gSb&ver=2&cmt=0.02&fmt=396&fs=0&rt=3.66&euri=https%3A%2F%2Fwww.youtube.com%2Fc%2FCodashopOfficial&lact=11638&cl=635991227&mos=0&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240524.00.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&autoplay=1&delay=9&hl=en_US&cr=US&len=46.861&fexp=v1%2C23952866%2C30430%2C2736%2C18612%2C76094%2C54572%2C73455%2C230596%2C85201%2C19107%2C6789%2C9958%2C6271%2C133212%2C14625955%2C11684381%2C7111%2C21854%2C9932%2C4557%2C9954%2C1192%2C7913%2C18583%2C4147%2C2819%2C2%2C6689%2C2007%2C9072%2C5244%2C23908%2C2196%2C5115%2C3472%2C383%2C1026%2C19%2C2%2C1082%2C21%2C641%2C2099%2C1447%2C2744%2C101%2C2658%2C1033%2C2%2C3703%2C8%2C832%2C671%2C1317%2C1222%2C1477%2C492%2C1008%2C4076%2C39%2C9%2C46%2C830%2C1538%2C713%2C2326%2C259%2C2%2C8%2C761%2C596%2C508%2C244&rtn=6&afmt=251&muted=0&docid=WlW4UAl3MyM&ei=m21SZtHfBLG26dsPlueskAw&plid=AAYZT0D0iRDyMquL&referrer=https%3A%2F%2Fwww.youtube.com%2Fc%2FCodashopOfficial&of=wbAU [TRUNCATED] Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOP X-YouTube-Page-Label: youtube.desktop.web_20240524_00_RC00 sec-ch-ua-arch: "x86" X-Goog-Request-Time: 1716678045299 X-YouTube-Page-CL: 636796567 X-Goog-Event-Time: 1716678045299 X-YouTube-Utc-Offset: -240 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" X-YouTube-Time-Zone: America/New_York sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-full-version: "117.0.5938.134" X-YouTube-Client-Name: 1 X-YouTube-Client-Version: 2.20240524.00.00 X-Goog-Visitor-Id: CgsxclQyM0t0SEJEUSiK28myBjIKCgJVUxIEGgAgQQ%3D%3D X-YouTube-Ad-Signals: dt=1716678033322&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1264&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=image Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:46 UTC	410	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Sat, 25 May 2024 23:00:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.6	59389	216.58.206.46	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:46 UTC	499	OUT	GET /youtubei/v1/next?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:46 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1604 Date: Sat, 25 May 2024 23:00:46 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:46 UTC	1150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-05-25 23:00:46 UTC	454	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e 20 69 64 3d 6c 6f 67 6f 20 61 72 69 61 2d 6c 61 62 65 6c 3d 47 6f 6f Data Ascii: ckground:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span id=logo aria-label=Goo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.6	59392	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:46 UTC	1940	OUT	GET /ptracking?html5=1&video_id=WlW4UAl3MyM&cpn=O-o7NTyOH_Xb-gSb&ei=m21SZtHfBLG26dsPlueskAw&ptk=youtube_none&pltype=contentugc&m=AzE_ovgoe015OKaVEKaPk8s_w_4KfRhDyvP0XC_CPddOByXQ7KOlaes58Yqgt_qtjG2Gwqte6gis7fhUSL8VLQoP HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOP X-YouTube-Page-Label: youtube.desktop.web_20240524_00_RC00 sec-ch-ua-arch: "x86" X-YouTube-Page-CL: 636796567 sec-ch-ua-platform-version: "10.0.0" X-YouTube-Utc-Offset: -240 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" X-YouTube-Time-Zone: America/New_York sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-full-version: "117.0.5938.134" X-YouTube-Client-Name: 1 X-YouTube-Client-Version: 2.20240524.00.00 X-Goog-Visitor-Id: CgsxclQyM0t0SEJEUSiK28myBjIKCgJVUxIEGgAgQQ%3D%3D X-YouTube-Ad-Signals: dt=1716678041110&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1264&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=image Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:46 UTC	410	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Sat, 25 May 2024 23:00:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.6	59396	142.250.185.142	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:47 UTC	1294	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 569 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=XKB46mGyrGuK-wWMB8eTLKJddbphlvoTJNOqfV1KxQNtucI70ub0W5hjPdDyfJsSUhYT1Efa06urM0E-fe05wX221EpF9NmLJ-OmKnTCG8_IEml_LOfUQnSALhmkbZ9izgNDtPr6CvKWLFPa9EeofqDnUW6clekP2FimXhbko1w
2024-05-25 23:00:47 UTC	569	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 31 36 36 37 38 30 34 34 37 38 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5b 5c 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 62 67 2f 66 69 6c 5c 22 2c 6e 75 6c 6c 2c 5b 5c 22 72 6b 5c 22 2c 5c 22 6b 65 5c 22 5d 2c 5b 5b 5b 5b 5c 22 64 7a 53 39 30 65 5c 22 5d 2c 5b 5c 22 5f 5c 22 5d 5d 2c 5b 6e 75 6c 6c 2c 35 38 5d 5d 5d 5d 2c 5b 5c 22 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"21",null,null,[1,0,0,0,0]]],1828,[["1716678044785",null,null,null,null,null,null,"[[[\"/client_streamz/bg/fil\",null,[\"rk\",\"ke\"],[[[[\"dzS90e\"],[\"_\"]],[null,58]]]],[\"
2024-05-25 23:00:47 UTC	921	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=514=IYroABEbf6js7ctpYztTms3FnJMhWwzbkNr9ATAcd-MkA0BLgO7BajDEv3vREJmm9VOegT8ON7HV5aDWll82agU88oCxlngovjKD23J6pqHbe_qc9szYRi1urxIVsVfX7APNQ2FmpMPTyORan3ieq8saZoIYM-lUp0xh9Ydxvyc; expires=Sun, 24-Nov-2024 23:00:47 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Sat, 25 May 2024 23:00:47 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Sat, 25 May 2024 23:00:47 GMT Connection: close Transfer-Encoding: chunked
2024-05-25 23:00:47 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-25 23:00:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.6	59397	142.250.185.142	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:47 UTC	1294	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 542 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=XKB46mGyrGuK-wWMB8eTLKJddbphlvoTJNOqfV1KxQNtucI70ub0W5hjPdDyfJsSUhYT1Efa06urM0E-fe05wX221EpF9NmLJ-OmKnTCG8_IEml_LOfUQnSALhmkbZ9izgNDtPr6CvKWLFPa9EeofqDnUW6clekP2FimXhbko1w
2024-05-25 23:00:47 UTC	542	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 34 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 31 36 36 37 38 30 34 34 37 39 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"21",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.134"],[1,0,0,0,0]]],1828,[["1716678044799",null,null,null
2024-05-25 23:00:47 UTC	921	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=514=VY7jTweO0i0BqZZap8-yanquJIOKNKbo1d3HBpUJHqRE_Z11FCWeFY_Mk8OO1cwT9htSPSISuOC5ieuLG7sFUO9hivPzNhZln-LO9ylJGerYBYWu3axFCBLlTnq6EplgiTmCStEQRnxurGbYic6ZGJv1GUeXv2954KWDAKN2DfU; expires=Sun, 24-Nov-2024 23:00:47 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Sat, 25 May 2024 23:00:47 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Sat, 25 May 2024 23:00:47 GMT Connection: close Transfer-Encoding: chunked
2024-05-25 23:00:47 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-25 23:00:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.6	59398	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:47 UTC	662	OUT	GET /s/player/bc657243/player_ias.vflset/en_US/endscreen.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:47 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 34279 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 23 May 2024 06:17:15 GMT Expires: Fri, 23 May 2025 06:17:15 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 22 May 2024 04:17:26 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 233012 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:47 UTC	702	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 50 75 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 6a 62 28 22 6f 6e 41 75 74 6f 6e 61 76 43 6f 75 6e 64 6f 77 6e 53 74 61 72 74 65 64 22 2c 62 29 7d 2c 6a 36 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 67 2e 4a 76 28 61 2e 65 6c 65 6d 65 6e 74 2c 22 79 74 70 2d 73 75 67 67 65 73 74 69 6f 6e 2d 73 65 74 22 2c 21 21 62 2e 76 69 64 65 6f 49 64 29 3b 0a 76 61 72 20 64 3d 62 2e 70 6c 61 79 6c 69 73 74 49 64 3b 63 3d 62 2e 64 68 28 63 3f 63 3a 22 6d 71 64 65 66 61 75 6c 74 2e 6a 70 67 22 29 3b 76 61 72 20 65 3d 6e 75 6c 6c 2c 66 3d 6e 75 6c 6c 3b 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 67 2e 71 53 26 26 28 62 Data Ascii: (function(g){var window=this;'use strict';var Pub=function(a,b){a.jb("onAutonavCoundownStarted",b)},j6=function(a,b,c){g.Jv(a.element,"ytp-suggestion-set",!!b.videoId);var d=b.playlistId;c=b.dh(c?c:"mqdefault.jpg");var e=null,f=null;b instanceof g.qS&&(b
2024-05-25 23:00:47 UTC	1390	IN	Data Raw: 74 63 68 20 24 54 49 54 4c 45 22 2c 7b 54 49 54 4c 45 3a 62 2e 74 69 74 6c 65 7d 29 2c 64 75 72 61 74 69 6f 6e 3a 65 2c 74 69 6d 65 73 74 61 6d 70 3a 66 2c 75 72 6c 3a 62 2e 56 6b 28 29 2c 69 73 5f 6c 69 76 65 3a 6c 2c 69 73 5f 75 70 63 6f 6d 69 6e 67 3a 6d 2c 69 73 5f 6c 69 73 74 3a 68 2c 69 73 5f 6d 69 78 3a 64 2c 62 61 63 6b 67 72 6f 75 6e 64 3a 63 3f 22 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 22 2b 63 2b 22 29 22 3a 22 22 2c 76 69 65 77 73 5f 61 6e 64 5f 70 75 62 6c 69 73 68 5f 74 69 6d 65 3a 74 2e 6a 6f 69 6e 28 22 20 5c 75 32 30 32 32 20 22 29 2c 61 75 74 6f 70 6c 61 79 41 6c 74 65 72 6e 61 74 69 76 65 48 65 61 64 65 72 3a 62 2e 50 73 7d 3b 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 67 2e 70 53 26 26 28 63 2e 70 6c 61 79 6c 69 Data Ascii: tch $TITLE",{TITLE:b.title}),duration:e,timestamp:f,url:b.Vk(),is_live:l,is_upcoming:m,is_list:h,is_mix:d,background:c?"background-image: url("+c+")":"",views_and_publish_time:t.join(" \u2022 "),autoplayAlternativeHeader:b.Ps};b instanceof g.pS&&(c.playli
2024-05-25 23:00:47 UTC	1390	IN	Data Raw: 6b 29 3b 74 68 69 73 2e 6c 69 73 74 65 6e 28 22 6b 65 79 70 72 65 73 73 22 2c 74 68 69 73 2e 6f 6e 4b 65 79 50 72 65 73 73 29 7d 2c 6c 36 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 76 6f 69 64 20 30 3d 3d 3d 62 3f 21 31 3a 62 3b 0a 67 2e 57 2e 63 61 6c 6c 28 74 68 69 73 2c 7b 49 3a 22 64 69 76 22 2c 53 3a 22 79 74 70 2d 61 75 74 6f 6e 61 76 2d 65 6e 64 73 63 72 65 65 6e 2d 63 6f 75 6e 74 64 6f 77 6e 2d 6f 76 65 72 6c 61 79 22 7d 29 3b 76 61 72 20 63 3d 74 68 69 73 3b 74 68 69 73 2e 4b 3d 62 3b 74 68 69 73 2e 63 61 6e 63 65 6c 43 6f 6d 6d 61 6e 64 3d 74 68 69 73 2e 47 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 43 3d 30 3b 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 3d 6e 65 77 20 67 2e 57 28 7b 49 3a 22 64 69 76 22 2c 53 3a 22 79 74 70 2d 61 75 74 6f 6e Data Ascii: k);this.listen("keypress",this.onKeyPress)},l6=function(a,b){b=void 0===b?!1:b;g.W.call(this,{I:"div",S:"ytp-autonav-endscreen-countdown-overlay"});var c=this;this.K=b;this.cancelCommand=this.G=void 0;this.C=0;this.container=new g.W({I:"div",S:"ytp-auton
2024-05-25 23:00:47 UTC	1390	IN	Data Raw: 65 22 2c 78 61 3a 22 7b 7b 74 69 74 6c 65 7d 7d 22 7d 2c 7b 49 3a 22 64 69 76 22 2c 53 3a 22 79 74 70 2d 61 75 74 6f 6e 61 76 2d 65 6e 64 73 63 72 65 65 6e 2d 75 70 6e 65 78 74 2d 61 75 74 68 6f 72 22 2c 78 61 3a 22 7b 7b 61 75 74 68 6f 72 7d 7d 22 7d 2c 7b 49 3a 22 64 69 76 22 2c 53 3a 22 79 74 70 2d 61 75 74 6f 6e 61 76 2d 76 69 65 77 2d 61 6e 64 2d 64 61 74 65 22 2c 78 61 3a 22 7b 7b 76 69 65 77 73 5f 61 6e 64 5f 70 75 62 6c 69 73 68 5f 74 69 6d 65 7d 7d 22 7d 2c 7b 49 3a 22 64 69 76 22 2c 53 3a 22 79 74 70 2d 61 75 74 6f 6e 61 76 2d 61 75 74 68 6f 72 2d 61 6e 64 2d 76 69 65 77 22 2c 78 61 3a 22 7b 7b 61 75 74 68 6f 72 5f 61 6e 64 5f 76 69 65 77 73 7d 7d 22 7d 5d 7d 5d 7d 5d 7d 29 3b 0a 67 2e 4e 28 74 68 69 73 2c 74 68 69 73 2e 6a 29 3b 74 68 69 73 2e Data Ascii: e",xa:"{{title}}"},{I:"div",S:"ytp-autonav-endscreen-upnext-author",xa:"{{author}}"},{I:"div",S:"ytp-autonav-view-and-date",xa:"{{views_and_publish_time}}"},{I:"div",S:"ytp-autonav-author-and-view",xa:"{{author_and_views}}"}]}]}]});g.N(this,this.j);this.
2024-05-25 23:00:47 UTC	1390	IN	Data Raw: 22 2c 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 22 50 6c 61 79 20 6e 65 78 74 20 76 69 64 65 6f 22 7d 2c 78 61 3a 22 50 6c 61 79 20 4e 6f 77 22 7d 29 3b 67 2e 4e 28 74 68 69 73 2c 74 68 69 73 2e 70 6c 61 79 42 75 74 74 6f 6e 29 3b 74 68 69 73 2e 70 6c 61 79 42 75 74 74 6f 6e 2e 4a 61 28 74 68 69 73 2e 42 2e 65 6c 65 6d 65 6e 74 29 3b 74 68 69 73 2e 70 6c 61 79 42 75 74 74 6f 6e 2e 6c 69 73 74 65 6e 28 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 74 55 2c 74 68 69 73 29 3b 74 68 69 73 2e 4a 2e 4c 28 22 77 65 62 5f 70 6c 61 79 65 72 5f 61 75 74 6f 6e 61 76 5f 6e 65 78 74 5f 62 75 74 74 6f 6e 5f 72 65 6e 64 65 72 65 72 22 29 3f 28 74 68 69 73 2e 4a 2e 63 72 65 61 74 65 53 65 72 76 65 72 56 65 28 74 68 69 73 2e 70 6c 61 79 42 75 74 74 6f 6e 2e 65 6c 65 6d 65 6e 74 2c Data Ascii: ","aria-label":"Play next video"},xa:"Play Now"});g.N(this,this.playButton);this.playButton.Ja(this.B.element);this.playButton.listen("click",this.tU,this);this.J.L("web_player_autonav_next_button_renderer")?(this.J.createServerVe(this.playButton.element,
2024-05-25 23:00:47 UTC	1390	IN	Data Raw: 72 61 6e 73 69 74 69 6f 6e 73 22 2c 55 75 62 28 61 29 29 7d 7d 2c 52 75 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 54 75 62 28 61 29 2c 63 3d 4d 61 74 68 2c 64 3d 63 2e 6d 69 6e 3b 0a 76 61 72 20 65 3d 61 2e 43 3f 44 61 74 65 2e 6e 6f 77 28 29 2d 61 2e 43 3a 30 3b 63 3d 64 2e 63 61 6c 6c 28 63 2c 65 2c 62 29 3b 53 75 62 28 61 2c 4d 61 74 68 2e 63 65 69 6c 28 28 62 2d 63 29 2f 31 45 33 29 29 3b 35 30 30 3e 3d 62 2d 63 26 26 61 2e 59 6b 28 29 3f 61 2e 73 65 6c 65 63 74 28 21 30 29 3a 61 2e 59 6b 28 29 26 26 61 2e 44 2e 73 74 61 72 74 28 29 7d 2c 54 75 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 4a 2e 69 73 46 75 6c 6c 73 63 72 65 65 6e 28 29 29 7b 76 61 72 20 62 3b 0a 61 3d 6e 75 6c 6c 3d 3d 28 62 3d 61 2e 4a 2e 67 65 74 56 69 Data Ascii: ransitions",Uub(a))}},Rub=function(a){var b=Tub(a),c=Math,d=c.min;var e=a.C?Date.now()-a.C:0;c=d.call(c,e,b);Sub(a,Math.ceil((b-c)/1E3));500>=b-c&&a.Yk()?a.select(!0):a.Yk()&&a.D.start()},Tub=function(a){if(a.J.isFullscreen()){var b;a=null==(b=a.J.getVi
2024-05-25 23:00:47 UTC	1390	IN	Data Raw: 72 69 61 2d 6c 61 62 65 6c 22 3a 22 7b 7b 61 72 69 61 5f 6c 61 62 65 6c 7d 7d 22 7d 2c 56 3a 5b 7b 49 3a 22 64 69 76 22 2c 53 3a 22 79 74 70 2d 63 75 65 64 2d 74 68 75 6d 62 6e 61 69 6c 2d 6f 76 65 72 6c 61 79 2d 69 6d 61 67 65 22 2c 58 3a 7b 73 74 79 6c 65 3a 22 7b 7b 62 61 63 6b 67 72 6f 75 6e 64 7d 7d 22 7d 7d 2c 7b 49 3a 22 73 70 61 6e 22 2c 53 3a 22 79 74 70 2d 75 70 6e 65 78 74 2d 74 6f 70 22 2c 56 3a 5b 7b 49 3a 22 73 70 61 6e 22 2c 53 3a 22 79 74 70 2d 75 70 6e 65 78 74 2d 68 65 61 64 65 72 22 2c 78 61 3a 22 55 70 20 4e 65 78 74 22 7d 2c 7b 49 3a 22 73 70 61 6e 22 2c 53 3a 22 79 74 70 2d 75 70 6e 65 78 74 2d 74 69 74 6c 65 22 2c 78 61 3a 22 7b 7b 74 69 74 6c 65 7d 7d 22 7d 2c 7b 49 3a 22 73 70 61 6e 22 2c 53 3a 22 79 74 70 2d 75 70 6e 65 78 74 2d Data Ascii: ria-label":"{{aria_label}}"},V:[{I:"div",S:"ytp-cued-thumbnail-overlay-image",X:{style:"{{background}}"}},{I:"span",S:"ytp-upnext-top",V:[{I:"span",S:"ytp-upnext-header",xa:"Up Next"},{I:"span",S:"ytp-upnext-title",xa:"{{title}}"},{I:"span",S:"ytp-upnext-
2024-05-25 23:00:47 UTC	1390	IN	Data Raw: 69 73 74 65 6e 28 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 79 34 2c 74 68 69 73 29 3b 74 68 69 73 2e 63 61 6e 63 65 6c 42 75 74 74 6f 6e 2e 4a 61 28 62 29 3b 74 68 69 73 2e 63 61 6e 63 65 6c 42 75 74 74 6f 6e 26 26 74 68 69 73 2e 61 70 69 2e 63 72 65 61 74 65 43 6c 69 65 6e 74 56 65 28 74 68 69 73 2e 63 61 6e 63 65 6c 42 75 74 74 6f 6e 2e 65 6c 65 6d 65 6e 74 2c 0a 74 68 69 73 2c 31 31 35 31 32 39 29 3b 67 2e 4e 28 74 68 69 73 2c 74 68 69 73 2e 44 29 3b 74 68 69 73 2e 61 70 69 2e 63 72 65 61 74 65 43 6c 69 65 6e 74 56 65 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2c 74 68 69 73 2c 31 38 37 38 38 29 3b 62 3d 74 68 69 73 2e 46 61 28 22 79 74 70 2d 75 70 6e 65 78 74 2d 61 75 74 6f 70 6c 61 79 2d 69 63 6f 6e 22 29 3b 74 68 69 73 2e 54 28 62 2c 22 63 6c 69 63 6b 22 Data Ascii: isten("click",this.y4,this);this.cancelButton.Ja(b);this.cancelButton&&this.api.createClientVe(this.cancelButton.element,this,115129);g.N(this,this.D);this.api.createClientVe(this.element,this,18788);b=this.Fa("ytp-upnext-autoplay-icon");this.T(b,"click"
2024-05-25 23:00:47 UTC	1390	IN	Data Raw: 29 2e 50 66 3f 74 68 69 73 2e 6a 3d 74 68 69 73 2e 42 3a 28 74 68 69 73 2e 6a 3d 6e 65 77 20 6f 36 28 61 29 2c 67 2e 56 54 28 74 68 69 73 2e 70 6c 61 79 65 72 2c 74 68 69 73 2e 6a 2e 65 6c 65 6d 65 6e 74 2c 34 29 2c 67 2e 4e 28 74 68 69 73 2c 74 68 69 73 2e 6a 29 29 3b 74 68 69 73 2e 6f 76 65 72 6c 61 79 3d 6e 65 77 20 67 2e 57 28 7b 49 3a 22 64 69 76 22 2c 0a 53 3a 22 79 74 70 2d 61 75 74 6f 6e 61 76 2d 6f 76 65 72 6c 61 79 2d 63 61 6e 63 65 6c 6c 65 64 2d 73 74 61 74 65 22 7d 29 3b 67 2e 4e 28 74 68 69 73 2c 74 68 69 73 2e 6f 76 65 72 6c 61 79 29 3b 74 68 69 73 2e 6f 76 65 72 6c 61 79 2e 4a 61 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 3b 74 68 69 73 2e 44 3d 6e 65 77 20 67 2e 62 4b 28 74 68 69 73 29 3b 67 2e 4e 28 74 68 69 73 2c 74 68 69 73 2e 44 29 3b Data Ascii: ).Pf?this.j=this.B:(this.j=new o6(a),g.VT(this.player,this.j.element,4),g.N(this,this.j));this.overlay=new g.W({I:"div",S:"ytp-autonav-overlay-cancelled-state"});g.N(this,this.overlay);this.overlay.Ja(this.element);this.D=new g.bK(this);g.N(this,this.D);
2024-05-25 23:00:47 UTC	1390	IN	Data Raw: 2d 63 6f 6e 74 61 69 6e 65 72 22 7d 5d 7d 5d 7d 29 3b 67 2e 4e 28 74 68 69 73 2c 74 68 69 73 2e 6a 29 3b 74 68 69 73 2e 6a 2e 4a 61 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 3b 76 61 72 20 62 3d 61 2e 67 65 74 56 69 64 65 6f 44 61 74 61 28 29 3b 74 68 69 73 2e 73 75 62 73 63 72 69 62 65 42 75 74 74 6f 6e 3d 6e 65 77 20 67 2e 63 57 28 22 53 75 62 73 63 72 69 62 65 22 2c 6e 75 6c 6c 2c 22 55 6e 73 75 62 73 63 72 69 62 65 22 2c 6e 75 6c 6c 2c 21 30 2c 21 31 2c 62 2e 44 6c 2c 62 2e 73 75 62 73 63 72 69 62 65 64 2c 22 74 72 61 69 6c 65 72 2d 65 6e 64 73 63 72 65 65 6e 22 2c 6e 75 6c 6c 2c 61 2c 21 31 29 3b 67 2e 4e 28 74 68 69 73 2c 74 68 69 73 2e 73 75 62 73 63 72 69 62 65 42 75 74 74 6f 6e 29 3b 74 68 69 73 2e 73 75 62 73 63 72 69 62 65 42 75 74 74 6f 6e 2e Data Ascii: -container"}]}]});g.N(this,this.j);this.j.Ja(this.element);var b=a.getVideoData();this.subscribeButton=new g.cW("Subscribe",null,"Unsubscribe",null,!0,!1,b.Dl,b.subscribed,"trailer-endscreen",null,a,!1);g.N(this,this.subscribeButton);this.subscribeButton.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.6	59401	216.58.206.46	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:47 UTC	502	OUT	GET /youtubei/v1/att/get?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:47 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1607 Date: Sat, 25 May 2024 23:00:47 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:47 UTC	1150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-05-25 23:00:47 UTC	457	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e 20 69 64 3d 6c 6f 67 6f 20 61 72 69 61 2d 6c 61 62 65 6c 3d 47 6f 6f Data Ascii: ckground:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span id=logo aria-label=Goo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.6	59402	142.250.186.150	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:47 UTC	531	OUT	GET /vi/WlW4UAl3MyM/hqdefault.jpg?sqp=-oaymwEcCNACELwBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLB2P6U67krPl_BOH9xUJPAYE3UStA HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:47 UTC	654	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 7514 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sat, 25 May 2024 23:00:46 GMT Expires: Sun, 26 May 2024 01:00:46 GMT Cache-Control: public, max-age=7200 ETag: "1631501547" Content-Type: image/webp Vary: Origin Age: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:47 UTC	736	IN	Data Raw: 52 49 46 46 52 1d 00 00 57 45 42 50 56 50 38 20 46 1d 00 00 f0 78 00 9d 01 2a 50 01 bc 00 3e 51 24 90 45 23 a2 21 93 58 55 b8 38 05 04 b1 37 7e 3e 4c 0a ee d1 64 fe 83 b3 fe 4d f4 8f e1 7f 25 fd aa 6b ff d8 fe f5 fe 55 73 22 98 0e b0 bf 13 fd b3 f7 27 fc 97 ff ff ff ff 7c 3f d4 7f 90 f6 93 fe 1b f6 c3 dc 13 f4 ab fc ff f6 df f2 9f b4 5d d0 7f aa 7e c0 7b 02 fe 2f fd 0f fe 1f f8 af de 7f 98 1f f4 df f3 bf b0 fb a6 fd 4f ff 47 ee 01 fc f7 fc 07 fd cf 69 cf 54 7f db 4f 60 5f e5 3f dc bf ed fa e6 7e d6 7c 2f 7f 56 ff 6b fb 6d ee 85 fe 0b ff 47 67 c7 48 bf 5b bf b3 fe 42 78 77 fd ab fb 17 ec df f6 4f 23 3f 61 fd a7 f2 37 f7 8b a5 b7 55 f9 9b fc 9f ed 0f da 7f b8 7e e1 fe 5f 7c bd fe 8f c3 ff 4f bf 8f 3f 01 7f 8e 7f 2b fe f9 f9 55 f9 97 c9 43 ad 79 84 7a c5 f3 Data Ascii: RIFFRWEBPVP8 Fx*P>Q$E#!XU87~>LdM%kUs"'\|?]~{/OGiTO`_?~\|/VkmGgH[BxwO#?a7U~_\|O?+UCyz
2024-05-25 23:00:47 UTC	1390	IN	Data Raw: 48 71 42 0d 3f 35 f3 11 c2 5f d7 98 59 92 13 23 8c c4 1a 96 c7 73 15 f7 dd b1 6f 22 51 5b 68 50 51 4c 77 2b ec 0f fd 97 1d 0f 7e 7b 91 22 c1 7a 51 81 54 25 77 b1 d7 af e7 eb 49 1e c7 7d d4 c3 39 b7 e3 24 52 ee 08 9d 81 e3 61 f2 97 09 2e f3 70 71 44 2e 1d ed d9 e2 07 46 f2 64 8d 8d 0e a3 b4 c8 a1 ad f3 7b 41 82 2c ac eb 0d 86 9e 04 ba 8c 03 06 b7 ca 19 c2 78 75 65 6b ce 5d a1 af 8c 92 b7 1f 89 30 ba af db 14 9d e9 77 be d9 52 80 66 4a 2c 1e 13 60 78 4d b8 8f da 22 be 26 82 21 b0 87 70 58 d2 fa 29 df 8b 1f 9b 2d bc f5 8a fc ee 3e f0 31 d9 e6 fc 58 fc da 26 05 fc da 1e 44 47 9c 61 69 f2 41 7f b1 5e 4b 22 9c ff 6d 4f 90 19 f5 83 52 ec 85 01 97 a7 1e 61 0c a9 9b f8 62 4b f8 0c c9 cf 1f 48 f7 13 c9 fd be 23 5d 63 79 40 0d 22 93 c7 8d 04 19 8e 78 2a e9 e4 2e ea Data Ascii: HqB?5_Y#so"Q[hPQLw+~{"zQT%wI}9$Ra.pqD.Fd{A,xuek]0wRfJ,`xM"&!pX)->1X&DGaiA^K"mORabKH#]cy@"x*.
2024-05-25 23:00:47 UTC	1390	IN	Data Raw: 73 f0 f0 42 fb a6 d5 1a e4 e1 c1 a2 0d 12 88 cb 01 2a 86 58 96 2a 43 08 92 60 75 70 73 c9 5d 5e 5f ee 5b ec f2 e1 39 90 64 2b 73 db c9 4f b6 c6 bf 84 b5 4c 0b fe bf 1d af 2a 82 ca 4b 33 3d fa 1e 08 b0 24 98 b7 14 3b 8e fd 5c b5 c6 ff 22 eb 25 02 36 7a 98 6a bc a3 13 40 32 4a 76 a7 dc e6 01 a3 fb de fb 39 2c 4f 3a e4 85 62 b5 b4 c5 36 14 fa f0 ab 74 0e a2 21 e4 ce ea d0 94 2f bb 5d 7d 8c 16 eb e2 79 ef e5 94 1a f5 6e 5d 89 3f b1 00 a0 c4 75 4f 91 b3 c7 b3 a5 a2 12 c9 6d 20 e1 d0 44 c7 23 ed 86 c9 4b b8 fb cf db e4 10 b7 11 e6 45 6d 25 aa f3 57 a6 f6 25 01 cc d8 cb 91 ad 11 12 c5 77 b1 85 83 e6 cb 0c 52 29 6d d0 46 01 15 5d 1f fb 48 8a cf 19 30 35 4a 2c 2c 9a 25 96 96 03 b6 cb 6a 7f f6 07 1e cd a2 e0 19 9a 95 82 21 0f 06 7d 7f 8e f7 da 4d ee 1e f0 9a ed 83 Data Ascii: sBXC`ups]^_[9d+sOL*K3=$;\"%6zj@2Jv9,O:b6t!/]}yn]?uOm D#KEm%W%wR)mF]H05J,,%j!}M
2024-05-25 23:00:47 UTC	1390	IN	Data Raw: 41 e5 38 25 a8 c9 a2 58 59 ad fa 37 e2 12 3b f8 46 7c 03 96 8e 6c 95 7a 1f a3 ac be cd 22 96 24 b4 2d 4f a9 3c 61 67 7e 9b ac 27 1a ea 55 04 1f ca 0d 57 ed 47 48 6c be d6 2f 3e 64 b7 7f 8f 03 7b 04 33 f6 4d c4 0f ec 70 04 1b f8 42 8a 96 a5 58 d0 e8 57 6a ac 10 a0 01 45 bd 31 fe dd 4c e3 4a 30 95 83 07 9a e1 0e 7c ee 16 d9 82 39 48 b1 05 33 cc 85 39 b3 60 ec 17 7e 3a bc 97 d9 97 e8 b3 f5 f1 9b 7e 42 bf fb c6 b1 11 24 ec d3 6b 06 ad f4 6f a0 bc 69 58 af 43 d8 9a 8f a9 5b 1e 7a ee e6 3d 4d 87 a9 f0 e1 91 d8 9c d8 d3 fd ad 07 c0 3a a9 2e 47 a6 e8 c3 bf cf 57 1e c7 b3 4d 10 d0 52 46 46 f7 a0 ed d7 fb 43 ad ef d3 c8 da 82 95 c1 34 f0 a7 0f 80 e0 53 6e df 26 02 e4 7f d7 b6 87 7c 23 6a e2 c2 24 51 0d 47 28 eb 05 04 6d 4d a4 ca e4 ab a3 55 9d 43 25 6d 77 dd 81 00 Data Ascii: A8%XY7;F\|lz"$-O<ag~'UWGHl/>d{3MpBXWjE1LJ0\|9H39`~:~B$koiXC[z=M:.GWMRFFC4Sn&\|#j$QG(mMUC%mw
2024-05-25 23:00:47 UTC	1390	IN	Data Raw: 4b 95 7d e5 f4 1c 63 38 b0 7d f8 ba 26 41 30 50 cc 03 d7 29 0b 76 03 f9 55 64 44 8c cc 4b 05 a9 54 18 19 17 fa 14 66 6e 6a 27 cc e9 13 dd 32 20 4a 92 f8 91 a7 51 c9 69 bf 35 92 68 05 02 5a e5 29 f0 19 1c 02 67 be 15 59 fd fd a8 cd c5 1d e0 9d fd fc c8 ea fe 2a 59 11 9a 8d 24 1f ea 4d cc b1 ce 48 c3 36 49 3b 5f 26 39 c5 fc 82 a9 92 ca c1 52 34 5e a7 c3 c2 cf ce 5c 8d 5a 1a c9 24 44 2a 45 3a 86 cb 7f 77 ca e4 40 96 93 df 30 c3 33 2d eb 51 92 b9 07 99 52 f7 40 47 5e bd 1c 6c b1 43 38 3f 74 9c 08 af 8c 16 02 85 80 ed 34 0e 3a b5 98 06 fa e5 ce a7 e8 c2 d3 00 f1 33 43 f0 bd e6 dc 9a 4e bb 97 64 2e 13 41 76 ee f6 50 61 57 4b de 47 ed 84 5b 53 f5 77 c7 f8 5a 16 c3 ea 29 77 b0 e0 2c bf fc 93 66 b4 1e 30 1f a3 29 39 cb 9f 2a bf 2e 25 00 35 47 34 3c 52 7b c9 d3 43 Data Ascii: K}c8}&A0P)vUdDKTfnj'2 JQi5hZ)gYY$MH6I;_&9R4^\Z$DE:w@03-QR@G^lC8?t4:3CNd.AvPaWKG[SwZ)w,f0)9*.%5G4<R{C
2024-05-25 23:00:47 UTC	1218	IN	Data Raw: 7f 88 9e ef 4f 34 ad 6a 6f 87 0c 50 73 56 cb ae 32 ee 83 c8 27 c3 91 fe f0 26 07 ca 1e 1e a1 ea f3 40 d8 ea 4b 7a 2f 7c f5 69 92 b6 b2 f5 58 6a eb 88 09 73 77 2d a4 c5 1f 28 5f c9 74 7e c6 67 fe 81 3b 72 6d dc 85 ce 29 8e 84 0b be 4f f4 1b c1 1c 0a fd 33 81 2e 29 aa 95 86 c8 d3 dd 8c 6b c5 d3 32 4c 62 0d 36 ce e7 39 04 76 ea 60 19 01 15 2d f2 cc 85 df 42 6f cf 91 03 27 b2 60 57 a5 cc 62 da 4a d7 d0 78 00 66 02 35 63 df cd 85 d5 84 7d fd c9 d9 6c 3a 7d 91 db 93 26 2a 54 4b b6 12 e6 b9 6e 08 b9 05 f8 0d d4 fe 30 ab 4e 17 bf de fe 6d 1b 8c 9e 0a cb 91 e8 c8 1c 29 65 7e ad 95 fe 71 05 2a 38 d8 cf 5b 54 d0 a9 80 10 42 7e 91 4b 87 79 05 d9 ee 01 ce 00 f6 ae f7 f9 7a 8f 66 c4 c7 3d 4e c3 ff 86 ef 7a 05 e5 e2 77 fa 67 72 e2 01 0d 56 81 35 4a 87 af 9b 8b 34 bc 5b Data Ascii: O4joPsV2'&@Kz/\|iXjsw-(_t~g;rm)O3.)k2Lb69v`-Bo'`WbJxf5c}l:}&TKn0Nm)e~q8[TB~Kyzf=NzwgrV5J4[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.6	59400	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:47 UTC	1394	OUT	POST /youtubei/v1/att/get?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 2973 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-wow64: ?0 sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-platform: "Windows" X-Youtube-Bootstrap-Logged-In: false sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json sec-ch-ua-full-version: "117.0.5938.134" X-Youtube-Client-Name: 1 X-Youtube-Client-Version: 2.20240524.00.00 X-Goog-Visitor-Id: CgsxclQyM0t0SEJEUSiK28myBjIKCgJVUxIEGgAgQQ%3D%3D Accept: / Origin: https://www.youtube.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:47 UTC	2973	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 72 65 6d 6f 74 65 48 6f 73 74 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 64 65 76 69 63 65 4d 61 6b 65 22 3a 22 22 2c 22 64 65 76 69 63 65 4d 6f 64 65 6c 22 3a 22 22 2c 22 76 69 73 69 74 6f 72 44 61 74 61 22 3a 22 43 67 73 78 63 6c 51 79 4d 30 74 30 53 45 4a 45 55 53 69 4b 32 38 6d 79 42 6a 49 4b 43 67 4a 56 55 78 49 45 47 67 41 67 51 51 25 33 44 25 33 44 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 Data Ascii: {"context":{"client":{"hl":"en","gl":"US","remoteHost":"8.46.123.175","deviceMake":"","deviceModel":"","visitorData":"CgsxclQyM0t0SEJEUSiK28myBjIKCgJVUxIEGgAgQQ%3D%3D","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like
2024-05-25 23:00:48 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Sat, 25 May 2024 23:00:47 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-25 23:00:48 UTC	958	IN	Data Raw: 34 66 65 37 0d 0a 7b 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 7b 22 73 65 72 76 69 63 65 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 5b 7b 22 73 65 72 76 69 63 65 22 3a 22 43 53 49 22 2c 22 70 61 72 61 6d 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 63 22 2c 22 76 61 6c 75 65 22 3a 22 57 45 42 22 7d 2c 7b 22 6b 65 79 22 3a 22 63 76 65 72 22 2c 22 76 61 6c 75 65 22 3a 22 32 2e 32 30 32 34 30 35 32 34 2e 30 30 2e 30 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 79 74 5f 6c 69 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 47 65 74 41 74 74 65 73 74 61 74 69 6f 6e 43 68 61 6c 6c 65 6e 67 65 5f 72 69 64 22 2c 22 76 61 6c 75 65 22 3a 22 30 78 37 61 63 32 35 30 62 36 34 61 63 32 61 61 35 31 22 7d 5d 7d 2c 7b 22 73 65 72 76 69 63 65 22 3a 22 Data Ascii: 4fe7{"responseContext":{"serviceTrackingParams":[{"service":"CSI","params":[{"key":"c","value":"WEB"},{"key":"cver","value":"2.20240524.00.00"},{"key":"yt_li","value":"0"},{"key":"GetAttestationChallenge_rid","value":"0x7ac250b64ac2aa51"}]},{"service":"
2024-05-25 23:00:48 UTC	1390	IN	Data Raw: 35 31 30 38 39 34 34 31 2c 35 31 30 39 31 33 33 31 2c 35 31 30 39 32 36 36 31 2c 35 31 30 39 34 31 37 31 2c 35 31 30 39 34 31 39 35 2c 35 31 30 39 34 32 30 32 2c 35 31 30 39 34 32 30 37 2c 35 31 30 39 35 34 37 38 2c 35 31 30 39 38 32 39 37 2c 35 31 30 39 38 32 39 39 2c 35 31 31 30 32 34 30 39 2c 35 31 31 30 34 39 38 38 2c 35 31 31 30 36 39 39 35 2c 35 31 31 30 37 33 34 30 2c 35 31 31 31 31 37 33 38 2c 35 31 31 31 33 36 35 38 2c 35 31 31 31 33 36 36 33 2c 35 31 31 31 35 31 38 34 2c 35 31 31 31 36 30 36 37 2c 35 31 31 31 36 33 37 30 2c 35 31 31 31 38 39 33 32 2c 35 31 31 32 31 33 31 31 2c 35 31 31 32 34 31 30 34 2c 35 31 31 32 37 35 30 34 2c 35 31 31 32 39 32 31 30 2c 35 31 31 33 33 31 30 33 2c 35 31 31 33 39 33 37 39 2c 35 31 31 34 31 38 30 30 2c 35 31 31 Data Ascii: 51089441,51091331,51092661,51094171,51094195,51094202,51094207,51095478,51098297,51098299,51102409,51104988,51106995,51107340,51111738,51113658,51113663,51115184,51116067,51116370,51118932,51121311,51124104,51127504,51129210,51133103,51139379,51141800,511
2024-05-25 23:00:48 UTC	1390	IN	Data Raw: 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 7b 22 6c 6f 67 67 65 64 4f 75 74 22 3a 74 72 75 65 7d 2c 22 77 65 62 52 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 45 78 74 65 6e 73 69 6f 6e 44 61 74 61 22 3a 7b 22 68 61 73 44 65 63 6f 72 61 74 65 64 22 3a 74 72 75 65 7d 7d 2c 22 63 68 61 6c 6c 65 6e 67 65 22 3a 22 61 3d 36 26 61 32 3d 31 26 62 3d 34 58 5a 5a 39 57 73 6e 55 6f 32 64 56 59 41 4e 49 37 64 4b 42 35 68 52 77 4a 30 26 63 3d 31 37 31 36 36 37 38 30 34 37 26 64 3d 31 26 65 32 3d 57 6c 57 34 55 41 6c 33 4d 79 4d 25 37 45 4f 2d 6f 37 4e 54 79 4f 48 5f 58 62 2d 67 53 62 26 63 31 61 3d 31 26 63 36 61 3d 31 26 63 36 62 3d 31 26 68 68 3d 4e 54 37 73 57 39 77 32 4c 32 5a 38 66 6a 55 34 64 39 70 71 68 49 4a 34 4a 43 41 34 5f 79 68 4a 46 4c 6e 53 73 47 78 Data Ascii: esponseContext":{"loggedOut":true},"webResponseContextExtensionData":{"hasDecorated":true}},"challenge":"a=6&a2=1&b=4XZZ9WsnUo2dVYANI7dKB5hRwJ0&c=1716678047&d=1&e2=WlW4UAl3MyM%7EO-o7NTyOH_Xb-gSb&c1a=1&c6a=1&c6b=1&hh=NT7sW9w2L2Z8fjU4d9pqhIJ4JCA4_yhJFLnSsGx
2024-05-25 23:00:48 UTC	1390	IN	Data Raw: 64 48 32 39 30 36 4a 6d 4a 72 51 73 37 7a 42 72 59 61 43 4e 77 65 37 70 6b 66 70 51 38 6a 78 66 65 6e 44 61 52 6e 6f 62 6d 70 35 2b 6f 5a 69 5a 30 58 67 46 32 4f 32 4c 63 6c 4f 72 5a 38 65 36 6f 57 68 36 41 48 45 59 74 57 7a 44 41 55 48 52 42 61 72 55 7a 37 44 61 6b 6b 2f 74 63 39 31 43 34 31 74 7a 59 55 66 38 77 2b 6c 32 2b 32 4c 6d 37 41 62 62 48 4c 67 64 6f 30 74 6c 59 77 6e 34 34 63 30 33 59 6a 67 52 45 6f 36 56 4a 6a 37 49 4c 2f 58 6a 48 44 54 52 42 77 67 5a 2b 32 42 64 7a 66 6a 75 2b 54 6b 43 38 53 47 33 4f 6c 48 6b 36 30 77 62 46 74 6c 59 70 33 34 32 61 64 58 77 43 38 76 70 72 42 41 31 53 36 68 67 2f 6f 4f 4b 70 6c 4a 34 63 31 4f 6d 6f 6d 56 4d 56 61 55 4d 68 50 64 59 48 47 71 6d 64 35 37 34 2f 71 42 6d 4d 31 78 6a 6e 65 2b 67 39 58 77 50 71 68 6c Data Ascii: dH2906JmJrQs7zBrYaCNwe7pkfpQ8jxfenDaRnobmp5+oZiZ0XgF2O2LclOrZ8e6oWh6AHEYtWzDAUHRBarUz7Dakk/tc91C41tzYUf8w+l2+2Lm7AbbHLgdo0tlYwn44c03YjgREo6VJj7IL/XjHDTRBwgZ+2Bdzfju+TkC8SG3OlHk60wbFtlYp342adXwC8vprBA1S6hg/oOKplJ4c1OmomVMVaUMhPdYHGqmd574/qBmM1xjne+g9XwPqhl
2024-05-25 23:00:48 UTC	1390	IN	Data Raw: 52 78 61 66 63 53 71 68 33 4d 2f 5a 47 65 6d 68 43 43 77 49 34 56 49 38 41 41 61 48 64 6e 7a 64 55 76 49 76 4b 32 55 52 6d 56 64 4d 7a 50 67 74 44 53 5a 49 2b 68 62 49 37 43 41 31 34 57 48 4d 76 56 72 33 49 54 4a 77 38 78 74 52 4b 76 79 51 46 52 47 4a 68 58 45 51 39 4e 6c 51 74 6d 43 66 7a 68 76 36 69 56 6f 6c 6f 52 47 47 34 70 77 4d 2b 78 53 74 66 53 63 48 74 55 57 46 39 56 55 78 68 64 5a 53 59 37 57 4a 64 6b 74 44 46 53 6b 5a 4f 61 30 64 6b 51 4d 6b 72 61 78 5a 42 57 64 7a 39 61 45 46 75 4f 63 54 36 4a 35 75 6e 49 64 47 4f 6a 43 50 55 78 4c 4f 33 51 5a 75 76 64 68 49 43 59 36 41 45 72 4a 4e 67 63 65 63 45 4a 45 6a 32 31 75 54 55 67 33 78 44 31 67 4a 78 62 67 36 56 64 34 4a 70 76 77 46 4e 46 4b 31 36 4a 45 77 36 36 4e 6f 2f 47 56 6d 2f 30 73 4c 49 77 43 Data Ascii: RxafcSqh3M/ZGemhCCwI4VI8AAaHdnzdUvIvK2URmVdMzPgtDSZI+hbI7CA14WHMvVr3ITJw8xtRKvyQFRGJhXEQ9NlQtmCfzhv6iVoloRGG4pwM+xStfScHtUWF9VUxhdZSY7WJdktDFSkZOa0dkQMkraxZBWdz9aEFuOcT6J5unIdGOjCPUxLO3QZuvdhICY6AErJNgcecEJEj21uTUg3xD1gJxbg6Vd4JpvwFNFK16JEw66No/GVm/0sLIwC
2024-05-25 23:00:48 UTC	1390	IN	Data Raw: 36 67 57 33 53 50 64 66 58 44 55 48 67 35 72 37 61 67 2b 36 70 51 43 41 35 6d 36 76 71 54 6b 70 31 72 6e 42 58 42 76 4c 4c 53 38 71 4f 2b 7a 5a 48 6f 75 79 6b 32 51 30 61 34 4e 66 76 50 72 70 41 59 6b 50 7a 62 39 37 39 38 65 43 7a 31 36 5a 56 4f 6a 70 33 65 4a 79 64 4b 4e 78 59 4f 50 49 46 57 4f 47 75 72 50 36 36 4f 59 32 53 53 4f 52 4f 34 65 52 6d 53 39 64 32 6b 70 43 61 48 59 6d 6e 72 50 6c 62 4c 2f 35 6c 36 65 74 32 64 55 55 61 66 33 73 45 6e 35 52 75 63 64 38 65 44 46 78 4d 74 48 53 67 78 54 71 58 4c 7a 77 52 6b 47 42 42 6a 63 6a 70 59 32 32 50 79 2b 30 73 52 73 4e 76 2b 53 56 30 56 73 6b 53 30 43 43 64 52 49 48 72 62 75 73 4d 75 49 65 39 55 52 45 57 50 42 50 70 72 2b 50 31 38 6e 43 4f 42 67 77 49 76 52 35 44 51 6f 41 47 58 68 6d 4d 49 6b 52 58 43 79 Data Ascii: 6gW3SPdfXDUHg5r7ag+6pQCA5m6vqTkp1rnBXBvLLS8qO+zZHouyk2Q0a4NfvPrpAYkPzb9798eCz16ZVOjp3eJydKNxYOPIFWOGurP66OY2SSORO4eRmS9d2kpCaHYmnrPlbL/5l6et2dUUaf3sEn5Rucd8eDFxMtHSgxTqXLzwRkGBBjcjpY22Py+0sRsNv+SV0VskS0CCdRIHrbusMuIe9UREWPBPpr+P18nCOBgwIvR5DQoAGXhmMIkRXCy
2024-05-25 23:00:48 UTC	1390	IN	Data Raw: 51 65 75 44 34 36 49 6f 55 65 58 68 67 66 5a 49 50 4f 51 32 50 4b 32 47 33 50 31 31 32 49 76 51 59 6c 62 41 30 47 77 54 4a 6e 52 72 38 67 36 33 49 62 62 4b 4c 78 70 6d 48 53 34 37 7a 67 2b 62 51 31 4a 46 58 51 4e 51 45 2f 74 66 58 6b 7a 59 76 51 6f 5a 48 58 49 31 4e 76 63 56 63 6a 39 33 47 44 6d 4c 76 2b 4b 78 6d 53 59 41 59 77 4e 36 74 32 41 73 39 35 6c 4c 74 58 2b 30 74 41 57 73 76 2b 30 72 4f 52 61 37 67 52 45 30 4a 2f 4c 6e 38 74 5a 53 38 34 59 4d 78 32 37 6e 64 44 78 7a 34 73 71 2b 64 4c 2f 55 4e 51 65 78 73 67 39 50 6e 77 59 73 52 73 34 54 76 52 46 4e 31 61 6b 55 76 52 56 74 4e 48 58 75 4f 4d 6f 39 78 63 30 6c 61 32 32 76 54 38 30 52 4a 6d 52 2f 5a 48 48 53 61 34 46 4f 43 61 43 59 79 4f 52 65 46 54 4a 56 59 45 65 5a 4e 6b 49 6b 7a 77 38 41 44 50 44 Data Ascii: QeuD46IoUeXhgfZIPOQ2PK2G3P112IvQYlbA0GwTJnRr8g63IbbKLxpmHS47zg+bQ1JFXQNQE/tfXkzYvQoZHXI1NvcVcj93GDmLv+KxmSYAYwN6t2As95lLtX+0tAWsv+0rORa7gRE0J/Ln8tZS84YMx27ndDxz4sq+dL/UNQexsg9PnwYsRs4TvRFN1akUvRVtNHXuOMo9xc0la22vT80RJmR/ZHHSa4FOCaCYyOReFTJVYEeZNkIkzw8ADPD
2024-05-25 23:00:48 UTC	1390	IN	Data Raw: 57 45 42 58 2b 6c 38 5a 50 41 46 55 6b 73 2b 5a 30 2b 6c 51 72 49 72 51 4b 68 6e 50 4b 77 4b 45 74 54 4a 32 49 4a 43 37 78 45 71 72 70 43 72 7a 68 36 74 61 72 6b 47 70 65 41 58 4b 78 64 4e 57 34 36 64 2f 73 64 41 46 4e 6d 78 2f 69 4f 53 53 6c 50 5a 53 63 4f 39 68 78 61 67 52 66 57 41 7a 64 44 6c 58 61 46 52 59 6c 6e 31 7a 67 38 75 43 62 54 59 6a 2b 2b 66 32 34 54 72 73 68 71 47 67 46 4c 75 7a 32 44 63 63 6d 50 37 2b 36 76 2b 70 51 75 57 52 53 54 78 42 42 4d 56 53 45 48 6b 71 33 69 57 41 34 64 4d 52 4b 6c 64 62 47 55 66 58 61 5a 68 45 46 38 6a 4e 6f 66 53 69 64 30 78 69 31 75 4a 38 4a 72 30 44 65 34 51 39 78 32 44 58 4c 77 7a 35 75 55 4b 4b 56 67 56 34 70 6b 77 76 6b 4f 74 32 53 68 5a 6a 6f 69 4c 42 6c 6c 68 33 2b 6b 61 6b 4a 30 50 38 6d 35 6f 56 4f 46 39 Data Ascii: WEBX+l8ZPAFUks+Z0+lQrIrQKhnPKwKEtTJ2IJC7xEqrpCrzh6tarkGpeAXKxdNW46d/sdAFNmx/iOSSlPZScO9hxagRfWAzdDlXaFRYln1zg8uCbTYj++f24TrshqGgFLuz2DccmP7+6v+pQuWRSTxBBMVSEHkq3iWA4dMRKldbGUfXaZhEF8jNofSid0xi1uJ8Jr0De4Q9x2DXLwz5uUKKVgV4pkwvkOt2ShZjoiLBllh3+kakJ0P8m5oVOF9
2024-05-25 23:00:48 UTC	1390	IN	Data Raw: 66 75 71 4c 47 70 6e 4c 64 38 47 62 72 65 6e 43 61 4e 76 6c 6d 6c 2f 30 5a 78 50 54 62 68 34 38 70 36 6c 65 65 62 6e 7a 39 4e 58 6c 33 6c 54 6d 6c 47 62 53 36 38 78 66 71 68 75 34 6b 61 2b 36 49 62 71 75 2f 58 34 5a 34 6e 57 66 78 32 45 30 52 39 63 41 61 6e 47 2f 31 46 4b 43 62 7a 45 74 6a 72 7a 58 5a 6b 52 58 34 5a 75 2f 53 54 76 64 75 65 52 53 70 35 57 43 4b 42 56 32 51 2b 6f 4a 67 34 58 4d 45 50 37 59 44 35 31 78 33 6e 54 62 4c 4a 73 6e 32 45 63 46 31 4b 41 67 30 68 4c 54 38 5a 64 46 69 55 50 7a 77 70 4b 43 76 55 79 61 51 6e 77 54 30 46 47 63 50 53 7a 34 57 54 41 58 52 77 35 31 2f 73 47 62 69 6d 31 6d 4e 4a 78 62 56 4a 66 6b 2f 4c 44 51 43 51 48 6e 35 35 72 67 73 6b 47 48 44 39 44 65 38 55 39 66 42 44 30 6e 6c 2b 41 70 64 4b 70 36 45 38 6d 74 6f 45 46 Data Ascii: fuqLGpnLd8GbrenCaNvlml/0ZxPTbh48p6leebnz9NXl3lTmlGbS68xfqhu4ka+6Ibqu/X4Z4nWfx2E0R9cAanG/1FKCbzEtjrzXZkRX4Zu/STvdueRSp5WCKBV2Q+oJg4XMEP7YD51x3nTbLJsn2EcF1KAg0hLT8ZdFiUPzwpKCvUyaQnwT0FGcPSz4WTAXRw51/sGbim1mNJxbVJfk/LDQCQHn55rgskGHD9De8U9fBD0nl+ApdKp6E8mtoEF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.6	59403	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:47 UTC	660	OUT	GET /s/player/bc657243/player_ias.vflset/en_US/offline.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:47 UTC	689	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 159929 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 23 May 2024 06:17:13 GMT Expires: Fri, 23 May 2025 06:17:13 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 22 May 2024 04:17:26 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 233014 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:47 UTC	701	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 62 77 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6e 65 77 20 67 2e 62 50 28 22 75 6e 64 22 2c 6e 65 77 20 67 2e 48 51 28 22 44 65 66 61 75 6c 74 22 2c 22 75 6e 64 22 2c 21 30 29 29 3b 62 2e 63 61 70 74 69 6f 6e 54 72 61 63 6b 73 3d 61 2e 63 61 70 74 69 6f 6e 54 72 61 63 6b 73 3b 72 65 74 75 72 6e 20 62 7d 2c 63 77 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 67 2e 66 67 28 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 61 2e 6c 65 6e 67 74 68 2c 65 3d 5b 5d 3b 0a 69 66 28 64 29 66 6f 72 28 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 70 29 7b 64 2d 2d 3b Data Ascii: (function(g){var window=this;'use strict';var bwb=function(a){var b=new g.bP("und",new g.HQ("Default","und",!0));b.captionTracks=a.captionTracks;return b},cwb=function(a){return new g.fg(function(b,c){var d=a.length,e=[];if(d)for(var f=function(n,p){d--;
2024-05-25 23:00:47 UTC	1390	IN	Data Raw: 6d 65 6e 74 73 29 7d 2c 6b 77 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4d 36 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 6c 77 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4d 36 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 6d 77 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4d 36 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 6e 77 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4d 36 2e 61 70 70 6c 79 28 74 68 69 73 2c 0a 61 72 67 75 6d 65 6e 74 73 29 7d 2c 6f 77 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4d 36 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 70 77 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4d 36 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c Data Ascii: ments)},kwb=function(){M6.apply(this,arguments)},lwb=function(){M6.apply(this,arguments)},mwb=function(){M6.apply(this,arguments)},nwb=function(){M6.apply(this,arguments)},owb=function(){M6.apply(this,arguments)},pwb=function(){M6.apply(this,arguments)},
2024-05-25 23:00:47 UTC	1390	IN	Data Raw: 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 53 77 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4d 36 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 54 77 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4d 36 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 55 77 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4d 36 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 56 77 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4d 36 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 57 77 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4d 36 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 58 77 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4d 36 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 Data Ascii: is,arguments)},Swb=function(){M6.apply(this,arguments)},Twb=function(){M6.apply(this,arguments)},Uwb=function(){M6.apply(this,arguments)},Vwb=function(){M6.apply(this,arguments)},Wwb=function(){M6.apply(this,arguments)},Xwb=function(){M6.apply(this,argume
2024-05-25 23:00:47 UTC	1390	IN	Data Raw: 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 7a 78 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4d 36 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 41 78 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4d 36 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 42 78 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4d 36 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 43 78 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4d 36 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 44 78 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 67 2e 52 43 28 28 30 2c 67 2e 58 6e 62 29 28 29 2c 61 29 7d 2c 4e 36 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 74 6f 6b 65 6e Data Ascii: pply(this,arguments)},zxb=function(){M6.apply(this,arguments)},Axb=function(){M6.apply(this,arguments)},Bxb=function(){M6.apply(this,arguments)},Cxb=function(){M6.apply(this,arguments)},Dxb=function(a){return g.RC((0,g.Xnb)(),a)},N6=function(a){this.token
2024-05-25 23:00:47 UTC	1390	IN	Data Raw: 69 6f 6e 28 29 7b 7d 2c 4d 78 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 61 2e 43 28 62 2c 63 29 7d 63 61 74 63 68 28 64 29 7b 4b 78 62 28 64 2c 49 78 62 29 7d 7d 2c 4e 78 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 28 6e 65 77 20 54 65 78 74 45 6e 63 6f 64 65 72 29 2e 65 6e 63 6f 64 65 28 61 29 2e 73 75 62 61 72 72 61 79 28 30 2c 31 36 29 3b 0a 76 61 72 20 62 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 31 36 29 3b 62 2e 73 65 74 28 61 29 3b 72 65 74 75 72 6e 20 62 7d 2c 51 36 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6a 3d 61 7d 2c 50 78 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 4f 78 62 5b 61 5d 3b 0a 69 66 28 62 29 72 65 74 75 72 6e 20 62 3b 67 2e 49 45 28 6e 65 77 20 67 Data Ascii: ion(){},Mxb=function(a,b,c){try{return a.C(b,c)}catch(d){Kxb(d,Ixb)}},Nxb=function(a){a=(new TextEncoder).encode(a).subarray(0,16);var b=new Uint8Array(16);b.set(a);return b},Q6=function(a){this.j=a},Pxb=function(a){var b=Oxb[a];if(b)return b;g.IE(new g
2024-05-25 23:00:47 UTC	1390	IN	Data Raw: 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 3d 3d 63 3f 30 3a 63 2e 54 76 29 7b 76 61 72 20 64 3d 6e 65 77 20 53 65 74 3b 0a 72 65 74 75 72 6e 20 56 78 62 28 61 2c 62 2c 64 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 66 3d 5b 5d 2c 68 3d 67 2e 75 28 64 29 2c 6c 3d 68 2e 6e 65 78 74 28 29 3b 21 6c 2e 64 6f 6e 65 3b 6c 3d 68 2e 6e 65 78 74 28 29 29 66 2e 70 75 73 68 28 56 36 28 61 2c 6c 2e 76 61 6c 75 65 29 29 3b 72 65 74 75 72 6e 20 67 2e 42 43 2e 61 6c 6c 28 66 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 7d 29 7d 76 61 72 20 65 3d 67 2e 6f 4f 28 62 29 2e 65 6e 74 69 74 79 54 79 70 65 3b 0a 72 65 74 75 72 6e 20 67 2e 42 43 2e 61 6c 6c 28 5b 61 2e 6a 2e 6f 62 6a 65 63 74 53 74 6f 72 65 28 22 45 6e 74 Data Ascii: on(a,b,c){if(null==c?0:c.Tv){var d=new Set;return Vxb(a,b,d).then(function(){for(var f=[],h=g.u(d),l=h.next();!l.done;l=h.next())f.push(V6(a,l.value));return g.BC.all(f).then(function(){})})}var e=g.oO(b).entityType;return g.BC.all([a.j.objectStore("Ent
2024-05-25 23:00:47 UTC	1390	IN	Data Raw: 28 29 7b 72 65 74 75 72 6e 20 5a 78 62 28 61 2c 62 2c 63 29 7d 29 7d 2c 56 78 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 63 2e 68 61 73 28 62 29 29 72 65 74 75 72 6e 20 67 2e 42 43 2e 72 65 73 6f 6c 76 65 28 76 6f 69 64 20 30 29 3b 0a 63 2e 61 64 64 28 62 29 3b 72 65 74 75 72 6e 20 24 78 62 28 61 2c 62 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 61 2e 6a 2e 6f 62 6a 65 63 74 53 74 6f 72 65 28 22 45 6e 74 69 74 79 41 73 73 6f 63 69 61 74 69 6f 6e 53 74 6f 72 65 22 29 2e 69 6e 64 65 78 28 22 62 79 50 61 72 65 6e 74 45 6e 74 69 74 79 4b 65 79 22 29 2e 64 65 6c 65 74 65 28 49 44 42 4b 65 79 52 61 6e 67 65 2e 6f 6e 6c 79 28 62 29 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 Data Ascii: (){return Zxb(a,b,c)})},Vxb=function(a,b,c){if(c.has(b))return g.BC.resolve(void 0);c.add(b);return $xb(a,b).then(function(d){return a.j.objectStore("EntityAssociationStore").index("byParentEntityKey").delete(IDBKeyRange.only(b)).then(function(){return d
2024-05-25 23:00:47 UTC	1390	IN	Data Raw: 3d 61 3b 74 68 69 73 2e 6a 3d 62 3b 74 68 69 73 2e 6f 62 73 65 72 76 65 72 73 3d 5b 5d 3b 61 3d 6e 65 77 20 67 2e 54 61 2e 42 72 6f 61 64 63 61 73 74 43 68 61 6e 6e 65 6c 28 22 50 45 52 53 49 53 54 45 4e 54 5f 45 4e 54 49 54 59 5f 53 54 4f 52 45 5f 53 59 4e 43 3a 22 2b 67 2e 65 43 28 29 29 3b 61 2e 6f 6e 6d 65 73 73 61 67 65 3d 74 68 69 73 2e 42 2e 62 69 6e 64 28 74 68 69 73 29 3b 74 68 69 73 2e 63 68 61 6e 6e 65 6c 3d 61 7d 2c 59 36 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 2c 66 2c 68 3b 0a 72 65 74 75 72 6e 20 67 2e 47 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 69 66 28 31 3d 3d 6c 2e 6a 29 72 65 74 75 72 6e 20 67 2e 7a 28 6c 2c 47 78 62 28 61 2e 74 6f 6b 65 6e 29 2c 32 29 3b 69 66 28 33 21 3d 6c 2e 6a 29 72 65 74 75 72 6e 20 Data Ascii: =a;this.j=b;this.observers=[];a=new g.Ta.BroadcastChannel("PERSISTENT_ENTITY_STORE_SYNC:"+g.eC());a.onmessage=this.B.bind(this);this.channel=a},Y6=function(a,b,c){var d,e,f,h;return g.G(function(l){if(1==l.j)return g.z(l,Gxb(a.token),2);if(3!=l.j)return
2024-05-25 23:00:47 UTC	1390	IN	Data Raw: 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 67 2e 54 61 2e 42 72 6f 61 64 63 61 73 74 43 68 61 6e 6e 65 6c 29 72 65 74 75 72 6e 20 64 2e 72 65 74 75 72 6e 28 29 3b 62 3d 6e 65 77 20 61 79 62 3b 72 65 74 75 72 6e 20 64 2e 72 65 74 75 72 6e 28 6e 65 77 20 58 36 28 61 2c 62 29 29 7d 63 3d 67 2e 44 61 28 64 29 3b 63 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 26 26 67 2e 48 45 28 63 29 3b 72 65 74 75 72 6e 20 64 2e 72 65 74 75 72 6e 28 29 7d 29 7d 2c 62 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 68 79 62 7c 7c 28 68 79 62 3d 67 79 62 28 29 29 3b 0a 72 65 74 75 72 6e 20 68 79 62 7d 2c 69 79 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 0a 61 3d 6e 75 6c 6c 3d 3d 28 62 3d 61 2e 6f 70 74 69 6f 6e 73 29 3f 76 6f 69 64 20 Data Ascii: \|\|"undefined"===typeof g.Ta.BroadcastChannel)return d.return();b=new ayb;return d.return(new X6(a,b))}c=g.Da(d);c instanceof Error&&g.HE(c);return d.return()})},b7=function(){hyb\|\|(hyb=gyb());return hyb},iyb=function(a){var b;a=null==(b=a.options)?void
2024-05-25 23:00:47 UTC	1390	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 61 7d 2c 6d 79 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 67 2e 73 53 28 29 3b 0a 62 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 62 29 3b 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 61 29 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 61 5b 63 5d 3f 28 34 21 3d 3d 62 5b 63 5d 26 26 28 62 5b 63 5d 3d 61 5b 63 5d 29 2c 64 65 6c 65 74 65 20 61 5b 63 5d 29 3a 32 21 3d 3d 62 5b 63 5d 26 26 28 62 5b 63 5d 3d 34 29 3b 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 62 2c 61 29 3b 67 2e 65 56 61 28 62 29 3b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 3b 72 65 74 75 72 6e 20 62 7d 2c 6e 79 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3b 0a 72 65 74 75 Data Ascii: ){return void 0!==a},myb=function(a){var b=g.sS();b=Object.assign({},b);a=Object.assign({},a);for(var c in b)a[c]?(4!==b[c]&&(b[c]=a[c]),delete a[c]):2!==b[c]&&(b[c]=4);Object.assign(b,a);g.eVa(b);JSON.stringify(b);return b},nyb=function(a){var b,c;retu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.6	59404	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:47 UTC	1400	OUT	POST /youtubei/v1/browse?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 2989 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-wow64: ?0 sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-platform: "Windows" X-Youtube-Bootstrap-Logged-In: false sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json sec-ch-ua-full-version: "117.0.5938.134" X-Youtube-Client-Name: 1 X-Youtube-Client-Version: 2.20240524.00.00 X-Goog-Visitor-Id: CgsxclQyM0t0SEJEUSiK28myBjIKCgJVUxIEGgAgQQ%3D%3D Accept: / Origin: https://www.youtube.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:47 UTC	2989	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 72 65 6d 6f 74 65 48 6f 73 74 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 64 65 76 69 63 65 4d 61 6b 65 22 3a 22 22 2c 22 64 65 76 69 63 65 4d 6f 64 65 6c 22 3a 22 22 2c 22 76 69 73 69 74 6f 72 44 61 74 61 22 3a 22 43 67 73 78 63 6c 51 79 4d 30 74 30 53 45 4a 45 55 53 69 4b 32 38 6d 79 42 6a 49 4b 43 67 4a 56 55 78 49 45 47 67 41 67 51 51 25 33 44 25 33 44 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 Data Ascii: {"context":{"client":{"hl":"en","gl":"US","remoteHost":"8.46.123.175","deviceMake":"","deviceModel":"","visitorData":"CgsxclQyM0t0SEJEUSiK28myBjIKCgJVUxIEGgAgQQ%3D%3D","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like
2024-05-25 23:00:48 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Sat, 25 May 2024 23:00:48 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-25 23:00:48 UTC	958	IN	Data Raw: 35 62 39 36 0d 0a 7b 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 7b 22 73 65 72 76 69 63 65 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 5b 7b 22 73 65 72 76 69 63 65 22 3a 22 47 46 45 45 44 42 41 43 4b 22 2c 22 70 61 72 61 6d 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 72 6f 75 74 65 22 2c 22 76 61 6c 75 65 22 3a 22 63 68 61 6e 6e 65 6c 2e 66 65 61 74 75 72 65 64 22 7d 2c 7b 22 6b 65 79 22 3a 22 69 73 5f 63 61 73 75 61 6c 22 2c 22 76 61 6c 75 65 22 3a 22 66 61 6c 73 65 22 7d 2c 7b 22 6b 65 79 22 3a 22 69 73 5f 6f 77 6e 65 72 22 2c 22 76 61 6c 75 65 22 3a 22 66 61 6c 73 65 22 7d 2c 7b 22 6b 65 79 22 3a 22 69 73 5f 61 6c 63 5f 73 75 72 66 61 63 65 22 2c 22 76 61 6c 75 65 22 3a 22 66 61 6c 73 65 22 7d 2c 7b 22 6b 65 79 22 3a 22 62 72 6f 77 73 65 5f 69 Data Ascii: 5b96{"responseContext":{"serviceTrackingParams":[{"service":"GFEEDBACK","params":[{"key":"route","value":"channel.featured"},{"key":"is_casual","value":"false"},{"key":"is_owner","value":"false"},{"key":"is_alc_surface","value":"false"},{"key":"browse_i
2024-05-25 23:00:48 UTC	1390	IN	Data Raw: 36 2c 35 31 30 30 36 34 33 30 2c 35 31 30 30 39 37 38 31 2c 35 31 30 31 30 32 33 35 2c 35 31 30 31 36 38 35 36 2c 35 31 30 31 37 33 34 36 2c 35 31 30 32 30 35 37 30 2c 35 31 30 32 30 38 34 36 2c 35 31 30 32 35 34 31 35 2c 35 31 30 33 30 31 30 31 2c 35 31 30 33 33 37 36 35 2c 35 31 30 33 37 33 34 36 2c 35 31 30 33 37 33 35 33 2c 35 31 30 33 39 32 30 30 2c 35 31 30 34 30 38 33 36 2c 35 31 30 34 38 34 38 39 2c 35 31 30 34 39 31 33 32 2c 35 31 30 35 30 33 36 31 2c 35 31 30 35 33 36 38 39 2c 35 31 30 35 34 37 36 35 2c 35 31 30 35 37 38 34 38 2c 35 31 30 35 37 38 35 37 2c 35 31 30 36 30 33 35 33 2c 35 31 30 36 33 36 34 33 2c 35 31 30 36 34 38 33 35 2c 35 31 30 37 32 37 34 38 2c 35 31 30 37 36 31 37 31 2c 35 31 30 37 39 32 33 39 2c 35 31 30 38 39 31 37 35 2c 35 Data Ascii: 6,51006430,51009781,51010235,51016856,51017346,51020570,51020846,51025415,51030101,51033765,51037346,51037353,51039200,51040836,51048489,51049132,51050361,51053689,51054765,51057848,51057857,51060353,51063643,51064835,51072748,51076171,51079239,51089175,5
2024-05-25 23:00:48 UTC	1390	IN	Data Raw: 31 39 30 35 39 37 2c 35 31 31 39 30 36 35 32 2c 35 31 31 39 31 31 39 33 2c 35 31 31 39 31 37 30 31 2c 35 31 31 39 31 39 34 35 2c 35 31 31 39 32 37 38 36 2c 35 31 31 39 36 36 36 33 2c 35 31 32 30 30 35 34 36 22 7d 5d 7d 2c 7b 22 73 65 72 76 69 63 65 22 3a 22 47 4f 4f 47 4c 45 5f 48 45 4c 50 22 2c 22 70 61 72 61 6d 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 62 72 6f 77 73 65 5f 69 64 22 2c 22 76 61 6c 75 65 22 3a 22 55 43 31 37 7a 36 4a 32 76 4c 34 47 55 4c 36 61 5f 41 2d 6c 4d 74 47 51 22 7d 2c 7b 22 6b 65 79 22 3a 22 62 72 6f 77 73 65 5f 69 64 5f 70 72 65 66 69 78 22 2c 22 76 61 6c 75 65 22 3a 22 22 7d 5d 7d 2c 7b 22 73 65 72 76 69 63 65 22 3a 22 43 53 49 22 2c 22 70 61 72 61 6d 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 63 22 2c 22 76 61 6c 75 65 22 3a 22 57 45 42 22 Data Ascii: 190597,51190652,51191193,51191701,51191945,51192786,51196663,51200546"}]},{"service":"GOOGLE_HELP","params":[{"key":"browse_id","value":"UC17z6J2vL4GUL6a_A-lMtGQ"},{"key":"browse_id_prefix","value":""}]},{"service":"CSI","params":[{"key":"c","value":"WEB"
2024-05-25 23:00:48 UTC	1390	IN	Data Raw: 63 6c 75 64 69 6e 67 20 6f 75 72 20 63 6f 6d 6d 75 6e 69 74 79 20 74 6f 75 72 6e 61 6d 65 6e 74 20 2d 20 43 6f 64 61 73 68 6f 70 20 47 6c 6f 62 61 6c 20 53 65 72 69 65 73 2e 20 43 61 74 63 68 20 70 6c 61 79 65 72 20 69 6e 74 65 72 76 69 65 77 73 2c 20 70 72 6f 64 75 63 74 20 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 20 61 6e 64 20 6f 74 68 65 72 20 6e 65 77 73 20 77 69 74 68 20 77 68 61 74 e2 80 99 73 20 61 62 75 7a 7a 20 69 6e 20 64 69 67 69 74 61 6c 20 65 6e 74 65 72 74 61 69 6e 6d 65 6e 74 20 61 63 72 6f 73 73 20 74 68 65 20 77 6f 72 6c 64 2c 20 73 70 72 65 61 64 20 61 63 72 6f 73 73 20 69 6e 20 79 6f 75 72 20 63 6f 6d 6d 75 6e 69 74 79 e2 80 99 73 20 6c 61 6e 67 75 61 67 65 2e 20 53 75 62 73 63 72 69 62 65 20 6e 6f 77 20 66 6f 72 20 65 78 63 6c 75 73 69 Data Ascii: cluding our community tournament - Codashop Global Series. Catch player interviews, product announcements and other news with whats abuzz in digital entertainment across the world, spread across in your communitys language. Subscribe now for exclusi
2024-05-25 23:00:48 UTC	1390	IN	Data Raw: 54 79 70 65 22 3a 22 53 48 41 52 45 5f 50 41 4e 45 4c 5f 54 59 50 45 5f 55 4e 49 46 49 45 44 5f 53 48 41 52 45 5f 50 41 4e 45 4c 22 7d 7d 7d 2c 22 76 69 64 65 6f 43 6f 75 6e 74 54 65 78 74 22 3a 22 32 35 39 20 76 69 64 65 6f 73 22 2c 22 6c 69 6e 6b 73 22 3a 5b 7b 22 63 68 61 6e 6e 65 6c 45 78 74 65 72 6e 61 6c 4c 69 6e 6b 56 69 65 77 4d 6f 64 65 6c 22 3a 7b 22 74 69 74 6c 65 22 3a 7b 22 63 6f 6e 74 65 6e 74 22 3a 22 77 77 77 2e 63 6f 64 61 73 68 6f 70 2e 63 6f 6d 2f 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 22 7d 2c 22 6c 69 6e 6b 22 3a 7b 22 63 6f 6e 74 65 6e 74 22 3a 22 63 6f 64 61 73 68 6f 70 2e 63 6f 6d 2f 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 22 2c 22 63 6f 6d 6d 61 6e 64 52 75 6e 73 22 3a 5b 7b 22 73 74 61 72 74 49 6e 64 65 78 22 3a 30 2c 22 6c 65 6e Data Ascii: Type":"SHARE_PANEL_TYPE_UNIFIED_SHARE_PANEL"}}},"videoCountText":"259 videos","links":[{"channelExternalLinkViewModel":{"title":{"content":"www.codashop.com/international"},"link":{"content":"codashop.com/international","commandRuns":[{"startIndex":0,"len
2024-05-25 23:00:48 UTC	1390	IN	Data Raw: 48 41 22 2c 22 77 69 64 74 68 22 3a 31 36 2c 22 68 65 69 67 68 74 22 3a 31 36 7d 2c 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 6e 63 72 79 70 74 65 64 2d 74 62 6e 31 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 2d 74 62 6e 3f 71 3d 74 62 6e 3a 41 4e 64 39 47 63 54 64 76 70 66 68 4a 39 31 74 31 50 70 6b 56 55 4e 55 5a 64 6a 58 47 44 61 74 62 30 37 6e 5f 63 38 48 51 77 77 4b 43 34 78 78 36 50 62 4e 4c 50 59 51 6a 2d 43 42 67 5f 49 37 6f 69 4c 66 43 74 39 31 56 4a 56 2d 52 69 4f 76 73 72 55 64 48 53 38 7a 39 78 51 42 39 6e 74 41 6c 75 66 75 4b 72 74 6b 6d 30 37 57 50 70 79 79 74 41 66 55 75 59 39 48 22 2c 22 77 69 64 74 68 22 3a 32 34 2c 22 68 65 69 67 68 74 22 3a 32 34 7d 2c 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 6e 63 72 Data Ascii: HA","width":16,"height":16},{"url":"https://encrypted-tbn1.gstatic.com/favicon-tbn?q=tbn:ANd9GcTdvpfhJ91t1PpkVUNUZdjXGDatb07n_c8HQwwKC4xx6PbNLPYQj-CBg_I7oiLfCt91VJV-RiOvsrUdHS8z9xQB9ntAlufuKrtkm07WPpyytAfUuY9H","width":24,"height":24},{"url":"https://encr
2024-05-25 23:00:48 UTC	1390	IN	Data Raw: 78 5f 7a 53 55 50 51 46 48 6d 68 6d 62 67 5f 76 41 35 75 6d 72 31 6e 42 44 49 73 70 30 54 68 78 6f 6e 7a 77 66 46 61 38 6b 56 43 42 50 50 6a 2d 78 33 6b 47 32 50 39 35 37 4d 6d 66 2d 5f 77 22 2c 22 77 69 64 74 68 22 3a 31 32 38 2c 22 68 65 69 67 68 74 22 3a 31 32 38 7d 2c 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 6e 63 72 79 70 74 65 64 2d 74 62 6e 31 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 2d 74 62 6e 3f 71 3d 74 62 6e 3a 41 4e 64 39 47 63 52 73 41 52 73 6e 76 49 52 69 45 50 6b 35 51 50 35 57 64 4d 77 63 59 2d 46 6b 6a 41 4a 56 5f 6c 42 31 63 59 61 55 33 36 58 4e 7a 66 4d 58 4b 4b 6d 48 6b 37 35 56 5a 31 51 2d 4e 73 4c 44 42 45 5a 53 61 59 65 49 74 43 4f 54 42 32 4c 77 70 57 45 69 5a 39 75 33 44 48 68 7a 7a 73 43 63 56 4c 48 Data Ascii: x_zSUPQFHmhmbg_vA5umr1nBDIsp0ThxonzwfFa8kVCBPPj-x3kG2P957Mmf-_w","width":128,"height":128},{"url":"https://encrypted-tbn1.gstatic.com/favicon-tbn?q=tbn:ANd9GcRsARsnvIRiEPk5QP5WdMwcY-FkjAJV_lB1cYaU36XNzfMXKKmHk75VZ1Q-NsLDBEZSaYeItCOTB2LwpWEiZ9u3DHhzzsCcVLH
2024-05-25 23:00:48 UTC	1390	IN	Data Raw: 6a 42 72 59 56 63 34 52 46 68 34 64 6e 68 53 5a 57 4e 61 53 32 68 75 5a 58 4e 55 4e 44 52 52 4e 57 70 58 5a 57 5a 30 4c 58 52 6c 4e 55 52 35 4d 48 70 78 64 45 39 6b 55 6b 39 34 52 6d 56 55 4f 43 30 79 52 48 41 33 61 6d 4e 79 4e 6b 4a 61 4d 33 64 4b 55 31 56 55 55 43 31 55 4e 57 4a 50 52 46 5a 54 55 54 5a 6f 4f 47 39 44 55 6a 64 74 62 46 64 46 53 47 35 6c 62 77 26 71 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 25 32 46 43 6f 64 61 73 68 6f 70 2e 49 4e 22 2c 22 74 61 72 67 65 74 22 3a 22 54 41 52 47 45 54 5f 4e 45 57 5f 57 49 4e 44 4f 57 22 2c 22 6e 6f 66 6f 6c 6c 6f 77 22 3a 74 72 75 65 7d 7d 7d 7d 5d 7d 2c 22 66 61 76 69 63 6f 6e 22 3a 7b 22 73 6f 75 72 63 65 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 Data Ascii: jBrYVc4RFh4dnhSZWNaS2huZXNUNDRRNWpXZWZ0LXRlNUR5MHpxdE9kUk94RmVUOC0yRHA3amNyNkJaM3dKU1VUUC1UNWJPRFZTUTZoOG9DUjdtbFdFSG5lbw&q=https%3A%2F%2Fwww.facebook.com%2FCodashop.IN","target":"TARGET_NEW_WINDOW","nofollow":true}}}}]},"favicon":{"sources":[{"url":"http
2024-05-25 23:00:48 UTC	1390	IN	Data Raw: 68 48 32 46 45 32 41 63 62 35 65 61 6b 54 62 79 69 6e 73 69 41 45 65 50 36 4c 69 5a 38 50 55 7a 42 57 45 58 37 78 67 46 64 2d 7a 4b 63 79 33 33 42 66 5a 39 35 6d 36 65 55 5a 59 51 59 31 38 31 2d 43 65 51 45 22 2c 22 77 69 64 74 68 22 3a 36 34 2c 22 68 65 69 67 68 74 22 3a 36 34 7d 2c 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 6e 63 72 79 70 74 65 64 2d 74 62 6e 33 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 2d 74 62 6e 3f 71 3d 74 62 6e 3a 41 4e 64 39 47 63 54 59 50 5a 48 50 71 6c 55 64 78 74 6e 54 44 49 70 4f 2d 4b 51 79 57 33 6a 6e 72 75 31 59 75 68 79 35 36 37 67 5a 6b 71 77 6d 53 6b 7a 48 79 76 47 70 48 50 54 35 65 54 69 68 59 2d 44 4a 32 73 42 74 46 44 4a 43 43 69 48 49 52 75 77 52 55 34 57 67 71 41 6a 4c 75 53 51 79 42 34 38 Data Ascii: hH2FE2Acb5eakTbyinsiAEeP6LiZ8PUzBWEX7xgFd-zKcy33BfZ95m6eUZYQY181-CeQE","width":64,"height":64},{"url":"https://encrypted-tbn3.gstatic.com/favicon-tbn?q=tbn:ANd9GcTYPZHPqlUdxtnTDIpO-KQyW3jnru1Yuhy567gZkqwmSkzHyvGpHPT5eTihY-DJ2sBtFDJCCiHIRuwRU4WgqAjLuSQyB48

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.6	59407	142.250.185.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:48 UTC	644	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=IYroABEbf6js7ctpYztTms3FnJMhWwzbkNr9ATAcd-MkA0BLgO7BajDEv3vREJmm9VOegT8ON7HV5aDWll82agU88oCxlngovjKD23J6pqHbe_qc9szYRi1urxIVsVfX7APNQ2FmpMPTyORan3ieq8saZoIYM-lUp0xh9Ydxvyc
2024-05-25 23:00:48 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Sat, 25 May 2024 23:00:48 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:48 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-25 23:00:48 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.6	59408	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:48 UTC	663	OUT	GET /s/player/bc657243/player_ias.vflset/en_US/miniplayer.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:48 UTC	687	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 6072 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 23 May 2024 19:32:34 GMT Expires: Fri, 23 May 2025 19:32:34 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 22 May 2024 04:17:26 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 185294 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:48 UTC	703	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 5a 76 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 67 2e 57 2e 63 61 6c 6c 28 74 68 69 73 2c 7b 49 3a 22 62 75 74 74 6f 6e 22 2c 4b 61 3a 5b 22 79 74 70 2d 6d 69 6e 69 70 6c 61 79 65 72 2d 65 78 70 61 6e 64 2d 77 61 74 63 68 2d 70 61 67 65 2d 62 75 74 74 6f 6e 22 2c 22 79 74 70 2d 62 75 74 74 6f 6e 22 2c 22 79 74 70 2d 6d 69 6e 69 70 6c 61 79 65 72 2d 62 75 74 74 6f 6e 2d 74 6f 70 2d 6c 65 66 74 22 5d 2c 58 3a 7b 74 69 74 6c 65 3a 22 7b 7b 74 69 74 6c 65 7d 7d 22 2c 22 64 61 74 61 2d 74 6f 6f 6c 74 69 70 2d 74 61 72 67 65 74 2d 69 64 22 3a 22 79 74 70 2d 6d 69 6e 69 70 6c 61 79 65 72 2d 65 78 70 61 6e 64 2d 77 61 74 Data Ascii: (function(g){var window=this;'use strict';var Zvb=function(a,b){g.W.call(this,{I:"button",Ka:["ytp-miniplayer-expand-watch-page-button","ytp-button","ytp-miniplayer-button-top-left"],X:{title:"{{title}}","data-tooltip-target-id":"ytp-miniplayer-expand-wat
2024-05-25 23:00:48 UTC	1390	IN	Data Raw: 2c 32 31 20 35 2c 32 31 20 4c 31 39 2c 32 31 20 43 32 30 2e 31 2c 32 31 20 32 31 2c 32 30 2e 31 20 32 31 2c 31 39 20 4c 32 31 2c 31 32 20 4c 31 39 2c 31 32 20 4c 31 39 2c 31 39 20 5a 20 4d 31 34 2c 33 20 4c 31 34 2c 35 20 4c 31 37 2e 35 39 2c 35 20 4c 37 2e 37 36 2c 31 34 2e 38 33 20 4c 39 2e 31 37 2c 31 36 2e 32 34 20 4c 31 39 2c 36 2e 34 31 20 4c 31 39 2c 31 30 20 4c 32 31 2c 31 30 20 4c 32 31 2c 33 20 4c 31 34 2c 33 20 5a 22 2c 66 69 6c 6c 3a 22 23 66 66 66 22 2c 22 66 69 6c 6c 2d 72 75 6c 65 22 3a 22 6e 6f 6e 7a 65 72 6f 22 7d 7d 5d 7d 5d 7d 5d 7d 5d 7d 29 3b 74 68 69 73 2e 4a 3d 61 3b 74 68 69 73 2e 6c 69 73 74 65 6e 28 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 6f 6e 43 6c 69 63 6b 2c 74 68 69 73 29 3b 74 68 69 73 2e 75 70 64 61 74 65 56 61 6c 75 65 28 Data Ascii: ,21 5,21 L19,21 C20.1,21 21,20.1 21,19 L21,12 L19,12 L19,19 Z M14,3 L14,5 L17.59,5 L7.76,14.83 L9.17,16.24 L19,6.41 L19,10 L21,10 L21,3 L14,3 Z",fill:"#fff","fill-rule":"nonzero"}}]}]}]}]});this.J=a;this.listen("click",this.onClick,this);this.updateValue(
2024-05-25 23:00:48 UTC	1390	IN	Data Raw: 42 2e 65 6c 65 6d 65 6e 74 29 3b 74 68 69 73 2e 54 28 61 2e 65 6c 65 6d 65 6e 74 2c 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 78 55 29 3b 61 3d 6e 65 77 20 5a 76 62 28 74 68 69 73 2e 70 6c 61 79 65 72 2c 74 68 69 73 29 3b 67 2e 4e 28 74 68 69 73 2c 61 29 3b 61 2e 4a 61 28 74 68 69 73 2e 42 2e 65 6c 65 6d 65 6e 74 29 3b 74 68 69 73 2e 43 3d 6e 65 77 20 67 2e 57 28 7b 49 3a 22 64 69 76 22 2c 53 3a 22 79 74 70 2d 6d 69 6e 69 70 6c 61 79 65 72 2d 63 6f 6e 74 72 6f 6c 73 22 7d 29 3b 67 2e 4e 28 74 68 69 73 2c 74 68 69 73 2e 43 29 3b 74 68 69 73 2e 43 2e 4a 61 28 74 68 69 73 2e 42 2e 65 6c 65 6d 65 6e 74 29 3b 74 68 69 73 2e 54 28 74 68 69 73 2e 43 2e 65 6c 65 6d 65 6e 74 2c 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 49 5f 29 3b 76 61 72 20 62 3d 6e 65 77 20 67 2e 57 Data Ascii: B.element);this.T(a.element,"click",this.xU);a=new Zvb(this.player,this);g.N(this,a);a.Ja(this.B.element);this.C=new g.W({I:"div",S:"ytp-miniplayer-controls"});g.N(this,this.C);this.C.Ja(this.B.element);this.T(this.C.element,"click",this.I_);var b=new g.W
2024-05-25 23:00:48 UTC	1390	IN	Data Raw: 65 6e 74 2c 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 78 62 61 29 3b 74 68 69 73 2e 54 28 74 68 69 73 2e 70 6c 61 79 65 72 2c 22 70 72 65 73 65 6e 74 69 6e 67 70 6c 61 79 65 72 73 74 61 74 65 63 68 61 6e 67 65 22 2c 74 68 69 73 2e 4b 34 29 3b 74 68 69 73 2e 54 28 74 68 69 73 2e 70 6c 61 79 65 72 2c 22 61 70 70 72 65 73 69 7a 65 22 2c 74 68 69 73 2e 64 63 29 3b 0a 74 68 69 73 2e 54 28 74 68 69 73 2e 70 6c 61 79 65 72 2c 22 66 75 6c 6c 73 63 72 65 65 6e 74 6f 67 67 6c 65 64 22 2c 74 68 69 73 2e 64 63 29 3b 74 68 69 73 2e 64 63 28 29 3b 74 68 69 73 2e 47 3d 21 30 7d 30 21 3d 3d 74 68 69 73 2e 70 6c 61 79 65 72 2e 67 65 74 50 6c 61 79 65 72 53 74 61 74 65 28 29 26 26 67 2e 57 2e 70 72 6f 74 6f 74 79 70 65 2e 73 68 6f 77 2e 63 61 6c 6c 28 74 68 69 73 29 3b 74 68 Data Ascii: ent,"click",this.xba);this.T(this.player,"presentingplayerstatechange",this.K4);this.T(this.player,"appresize",this.dc);this.T(this.player,"fullscreentoggled",this.dc);this.dc();this.G=!0}0!==this.player.getPlayerState()&&g.W.prototype.show.call(this);th
2024-05-25 23:00:48 UTC	1199	IN	Data Raw: 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 6f 6f 6c 74 69 70 7d 3b 0a 67 2e 6b 2e 46 78 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 66 3d 30 2c 68 3d 64 3d 30 2c 6c 3d 67 2e 55 73 28 61 29 3b 69 66 28 62 29 7b 63 3d 67 2e 45 76 28 62 2c 22 79 74 70 2d 70 72 65 76 2d 62 75 74 74 6f 6e 22 29 7c 7c 67 2e 45 76 28 62 2c 22 79 74 70 2d 6e 65 78 74 2d 62 75 74 74 6f 6e 22 29 3b 76 61 72 20 6d 3d 67 2e 45 76 28 62 2c 22 79 74 70 2d 70 6c 61 79 2d 62 75 74 74 6f 6e 22 29 2c 6e 3d 67 2e 45 76 28 62 2c 22 79 74 70 2d 6d 69 6e 69 70 6c 61 79 65 72 2d 65 78 70 61 6e 64 2d 77 61 74 63 68 2d 70 61 67 65 2d 62 75 74 74 6f 6e 22 29 3b 63 3f 66 3d 68 3d 31 32 3a 6d 3f 28 62 3d 67 2e 53 73 28 62 2c 74 68 69 73 2e 65 6c 65 6d Data Ascii: tion(){return this.tooltip};g.k.Fx=function(a,b,c,d,e){var f=0,h=d=0,l=g.Us(a);if(b){c=g.Ev(b,"ytp-prev-button")\|\|g.Ev(b,"ytp-next-button");var m=g.Ev(b,"ytp-play-button"),n=g.Ev(b,"ytp-miniplayer-expand-watch-page-button");c?f=h=12:m?(b=g.Ss(b,this.elem

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.6	59411	216.58.206.46	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:48 UTC	502	OUT	GET /youtubei/v1/att/get?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:49 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1607 Date: Sat, 25 May 2024 23:00:49 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:49 UTC	1150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-05-25 23:00:49 UTC	457	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e 20 69 64 3d 6c 6f 67 6f 20 61 72 69 61 2d 6c 61 62 65 6c 3d 47 6f 6f Data Ascii: ckground:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span id=logo aria-label=Goo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.6	59412	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:48 UTC	2593	OUT	GET /api/stats/watchtime?ns=yt&el=profilepage&cpn=O-o7NTyOH_Xb-gSb&ver=2&cmt=2.161&fmt=396&fs=0&rt=6.006&euri=https%3A%2F%2Fwww.youtube.com%2Fc%2FCodashopOfficial&lact=1072&cl=635991227&state=playing&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240524.00.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&autoplay=1&delay=9&hl=en_US&cr=US&len=46.861&rtn=16&afmt=251&idpj=-8&ldpj=-2&rti=6&st=0&et=2.161&muted=0&docid=WlW4UAl3MyM&ei=m21SZtHfBLG26dsPlueskAw&plid=AAYZT0D0iRDyMquL&referrer=https%3A%2F%2Fwww.youtube.com%2Fc%2FCodashopOfficial&of=wbAUJoLFDaeeOSJrHXH1sg&vm=CAEQABgEOjJBSHFpSlRJeHRTTUhYSzdEdG1fakFHRHRxaWtUYWlNWVI3V19xQksxOXdjTGJLTFJqUWJfQVBta0tESll1cDM1aXUzRkVicnN4TjNkMzRFYkVqYjNlQlFqcjNES3VGTk1maDRZU3htOVZEVGFXVmg4dEg1SV9NeFlyU01nM1NKMHo3SzJHanZFa1NvemdKQjFOUmdoAg HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOP X-YouTube-Page-Label: youtube.desktop.web_20240524_00_RC00 sec-ch-ua-arch: "x86" X-Goog-Request-Time: 1716678047647 X-YouTube-Page-CL: 636796567 X-Goog-Event-Time: 1716678047647 X-YouTube-Utc-Offset: -240 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" X-YouTube-Time-Zone: America/New_York sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-full-version: "117.0.5938.134" X-YouTube-Client-Name: 1 X-YouTube-Client-Version: 2.20240524.00.00 X-Goog-Visitor-Id: CgsxclQyM0t0SEJEUSiK28myBjIKCgJVUxIEGgAgQQ%3D%3D X-YouTube-Ad-Signals: dt=1716678033322&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1264&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=image Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:49 UTC	410	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Sat, 25 May 2024 23:00:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.6	59413	216.58.206.46	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:48 UTC	501	OUT	GET /youtubei/v1/browse?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:49 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1606 Date: Sat, 25 May 2024 23:00:49 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:49 UTC	1150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-05-25 23:00:49 UTC	456	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e 20 69 64 3d 6c 6f 67 6f 20 61 72 69 61 2d 6c 61 62 65 6c 3d 47 6f 6f Data Ascii: ckground:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span id=logo aria-label=Goo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.6	59414	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:49 UTC	659	OUT	GET /s/player/bc657243/player_ias.vflset/en_US/remote.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:49 UTC	687	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 120743 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sat, 25 May 2024 20:46:02 GMT Expires: Sun, 25 May 2025 20:46:02 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 22 May 2024 04:17:26 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 8087 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:49 UTC	703	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 62 38 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 2e 6a 71 28 61 2c 22 7a 78 22 2c 4d 61 74 68 2e 66 6c 6f 6f 72 28 32 31 34 37 34 38 33 36 34 38 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 2b 4d 61 74 68 2e 61 62 73 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 32 31 34 37 34 38 33 36 34 38 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 5e 67 2e 6b 62 28 29 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 29 3b 72 65 74 75 72 6e 20 61 7d 2c 63 38 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 63 29 7c 7c 28 63 3d 5b 53 74 72 69 6e 67 28 63 29 5d 29 3b 0a Data Ascii: (function(g){var window=this;'use strict';var b8=function(a){g.jq(a,"zx",Math.floor(2147483648Math.random()).toString(36)+Math.abs(Math.floor(2147483648Math.random())^g.kb()).toString(36));return a},c8=function(a,b,c){Array.isArray(c)\|\|(c=[String(c)]);
2024-05-25 23:00:49 UTC	1390	IN	Data Raw: 65 3d 67 2e 62 77 2e 70 72 6f 74 6f 74 79 70 65 2e 42 2e 63 61 6c 6c 28 74 68 69 73 2c 64 2c 21 30 29 7d 63 61 74 63 68 28 66 29 7b 69 66 28 22 53 74 6f 72 61 67 65 3a 20 49 6e 76 61 6c 69 64 20 76 61 6c 75 65 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 22 3d 3d 66 29 72 65 74 75 72 6e 3b 74 68 72 6f 77 20 66 3b 7d 76 6f 69 64 20 30 3d 3d 3d 65 3f 63 2e 70 75 73 68 28 64 29 3a 67 2e 6a 6c 61 28 65 29 26 26 63 2e 70 75 73 68 28 64 29 7d 2c 61 29 3b 0a 72 65 74 75 72 6e 20 63 7d 2c 64 43 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 63 43 62 28 61 2c 62 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 67 2e 62 77 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 2e 63 61 6c 6c 28 74 68 69 73 2c 63 29 7d 2c 61 29 7d 2c 65 43 62 3d 66 Data Ascii: e=g.bw.prototype.B.call(this,d,!0)}catch(f){if("Storage: Invalid value was encountered"==f)return;throw f;}void 0===e?c.push(d):g.jla(e)&&c.push(d)},a);return c},dCb=function(a,b){cCb(a,b).forEach(function(c){g.bw.prototype.remove.call(this,c)},a)},eCb=f
2024-05-25 23:00:49 UTC	1390	IN	Data Raw: 2c 64 3d 30 3b 64 3c 63 3b 64 2b 2b 29 62 2e 70 75 73 68 28 61 5b 64 5d 29 3b 72 65 74 75 72 6e 20 62 7d 72 65 74 75 72 6e 20 67 2e 62 64 28 61 29 7d 2c 6b 43 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 45 6e 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 2e 45 6e 29 72 65 74 75 72 6e 20 61 2e 45 6e 28 29 3b 0a 69 66 28 21 61 2e 70 6d 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 2e 70 6d 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 4d 61 70 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 4d 61 70 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 61 2e 6b 65 79 73 28 29 29 3b 69 66 28 21 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 53 65 74 26 26 Data Ascii: ,d=0;d<c;d++)b.push(a[d]);return b}return g.bd(a)},kCb=function(a){if(a.En&&"function"==typeof a.En)return a.En();if(!a.pm\|\|"function"!=typeof a.pm){if("undefined"!==typeof Map&&a instanceof Map)return Array.from(a.keys());if(!("undefined"!==typeof Set&&
2024-05-25 23:00:49 UTC	1390	IN	Data Raw: 29 7b 74 68 69 73 2e 6a 3d 65 38 28 29 3b 0a 74 68 69 73 2e 6a 2e 4f 6a 28 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 79 6f 75 74 75 62 65 2f 6c 69 76 69 6e 67 5f 72 6f 6f 6d 2f 6d 64 78 2f 63 68 61 6e 6e 65 6c 2f 65 72 72 6f 72 22 2c 7b 6f 65 3a 33 2c 6d 65 3a 22 63 68 61 6e 6e 65 6c 5f 74 79 70 65 22 7d 29 7d 2c 75 43 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 6a 2e 4b 6b 28 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 79 6f 75 74 75 62 65 2f 6c 69 76 69 6e 67 5f 72 6f 6f 6d 2f 6d 64 78 2f 63 68 61 6e 6e 65 6c 2f 65 72 72 6f 72 22 2c 62 29 7d 2c 76 43 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6a 3d 65 38 28 29 3b 0a 74 68 69 73 2e 6a 2e 4f 6a 28 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 79 6f 75 74 75 62 65 Data Ascii: ){this.j=e8();this.j.Oj("/client_streamz/youtube/living_room/mdx/channel/error",{oe:3,me:"channel_type"})},uCb=function(a,b){a.j.Kk("/client_streamz/youtube/living_room/mdx/channel/error",b)},vCb=function(){this.j=e8();this.j.Oj("/client_streamz/youtube
2024-05-25 23:00:49 UTC	1390	IN	Data Raw: 65 6c 3d 74 68 69 73 2e 62 72 61 6e 64 3d 22 22 3b 74 68 69 73 2e 79 65 61 72 3d 30 3b 74 68 69 73 2e 63 68 69 70 73 65 74 3d 74 68 69 73 2e 6f 73 56 65 72 73 69 6f 6e 3d 74 68 69 73 2e 6f 73 3d 22 22 3b 74 68 69 73 2e 6d 64 78 44 69 61 6c 53 65 72 76 65 72 54 79 70 65 3d 22 4d 44 58 5f 44 49 41 4c 5f 53 45 52 56 45 52 5f 54 59 50 45 5f 55 4e 4b 4e 4f 57 4e 22 3b 61 26 26 28 74 68 69 73 2e 69 64 3d 61 2e 69 64 7c 7c 61 2e 6e 61 6d 65 2c 74 68 69 73 2e 6e 61 6d 65 3d 61 2e 6e 61 6d 65 2c 74 68 69 73 2e 63 6c 69 65 6e 74 4e 61 6d 65 3d 61 2e 63 6c 69 65 6e 74 4e 61 6d 65 3f 61 2e 63 6c 69 65 6e 74 4e 61 6d 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3a 22 55 4e 4b 4e 4f 57 4e 5f 49 4e 54 45 52 46 41 43 45 22 2c 0a 74 68 69 73 2e 61 70 70 3d 61 2e 61 70 70 Data Ascii: el=this.brand="";this.year=0;this.chipset=this.osVersion=this.os="";this.mdxDialServerType="MDX_DIAL_SERVER_TYPE_UNKNOWN";a&&(this.id=a.id\|\|a.name,this.name=a.name,this.clientName=a.clientName?a.clientName.toUpperCase():"UNKNOWN_INTERFACE",this.app=a.app
2024-05-25 23:00:49 UTC	1390	IN	Data Raw: 7b 61 2e 65 78 70 65 72 69 6d 65 6e 74 73 2e 63 6c 65 61 72 28 29 3b 0a 62 2e 73 70 6c 69 74 28 22 2c 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 61 2e 65 78 70 65 72 69 6d 65 6e 74 73 2e 61 64 64 28 63 29 7d 29 7d 2c 69 38 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 7c 7c 7b 7d 3b 0a 74 68 69 73 2e 6e 61 6d 65 3d 61 2e 6e 61 6d 65 7c 7c 22 22 3b 74 68 69 73 2e 69 64 3d 61 2e 69 64 7c 7c 61 2e 73 63 72 65 65 6e 49 64 7c 7c 22 22 3b 74 68 69 73 2e 74 6f 6b 65 6e 3d 61 2e 74 6f 6b 65 6e 7c 7c 61 2e 6c 6f 75 6e 67 65 54 6f 6b 65 6e 7c 7c 22 22 3b 74 68 69 73 2e 75 75 69 64 3d 61 2e 75 75 69 64 7c 7c 61 2e 64 69 61 6c 49 64 7c 7c 22 22 3b 74 68 69 73 2e 69 64 54 79 70 65 3d 61 2e 73 63 72 65 65 6e 49 64 54 79 70 65 7c 7c 22 6e 6f Data Ascii: {a.experiments.clear();b.split(",").forEach(function(c){a.experiments.add(c)})},i8=function(a){a=a\|\|{};this.name=a.name\|\|"";this.id=a.id\|\|a.screenId\|\|"";this.token=a.token\|\|a.loungeToken\|\|"";this.uuid=a.uuid\|\|a.dialId\|\|"";this.idType=a.screenIdType\|\|"no
2024-05-25 23:00:49 UTC	1390	IN	Data Raw: 6e 20 67 2e 24 72 28 61 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 29 7b 72 65 74 75 72 6e 20 30 3d 3d 65 3f 64 3a 64 2e 73 75 62 73 74 72 69 6e 67 28 63 2e 6c 65 6e 67 74 68 29 7d 29 7d 2c 4e 43 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 2e 57 42 28 22 79 74 2d 72 65 6d 6f 74 65 2d 63 6f 6e 6e 65 63 74 65 64 2d 64 65 76 69 63 65 73 22 2c 61 2c 38 36 34 30 30 29 7d 2c 6e 38 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 4f 43 62 29 72 65 74 75 72 6e 20 4f 43 62 3b 0a 76 61 72 20 61 3d 67 2e 58 42 28 22 79 74 2d 72 65 6d 6f 74 65 2d 64 65 76 69 63 65 2d 69 64 22 29 3b 61 7c 7c 28 61 3d 49 43 62 28 29 2c 67 2e 57 42 28 22 79 74 2d 72 65 6d 6f 74 65 2d 64 65 76 69 63 65 2d 69 64 22 2c 61 2c 33 31 35 33 36 45 33 29 29 3b 66 6f 72 28 76 61 72 20 62 3d 6d 38 28 29 Data Ascii: n g.$r(a,function(d,e){return 0==e?d:d.substring(c.length)})},NCb=function(a){g.WB("yt-remote-connected-devices",a,86400)},n8=function(){if(OCb)return OCb;var a=g.XB("yt-remote-device-id");a\|\|(a=ICb(),g.WB("yt-remote-device-id",a,31536E3));for(var b=m8()
2024-05-25 23:00:49 UTC	1390	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 43 68 72 6f 6d 65 5c 2f 28 5b 30 2d 39 5d 2b 29 2f 29 3b 0a 72 65 74 75 72 6e 20 61 3f 70 61 72 73 65 49 6e 74 28 61 5b 31 5d 2c 31 30 29 3a 30 7d 2c 59 43 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 26 26 28 2d 31 21 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 73 72 63 2e 69 6e 64 65 78 4f 66 28 22 3f 22 2b 61 29 7c 7c 2d 31 21 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 73 72 63 2e 69 6e 64 65 78 4f 66 28 22 26 22 2b 61 29 29 7d 2c 5a 43 62 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ction(){var a=window.navigator.userAgent.match(/Chrome\/([0-9]+)/);return a?parseInt(a[1],10):0},YCb=function(a){return!!document.currentScript&&(-1!=document.currentScript.src.indexOf("?"+a)\|\|-1!=document.currentScript.src.indexOf("&"+a))},ZCb=function(
2024-05-25 23:00:49 UTC	1390	IN	Data Raw: 69 73 2e 4e 34 2c 74 68 69 73 29 3b 74 68 69 73 2e 6a 3d 21 31 3b 74 68 69 73 2e 42 3d 30 3b 74 68 69 73 2e 43 3d 74 68 69 73 2e 66 64 3d 6e 75 6c 6c 3b 74 68 69 73 2e 44 3d 5b 5d 7d 2c 75 38 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 67 2e 49 2e 63 61 6c 6c 28 74 68 69 73 29 3b 0a 74 68 69 73 2e 44 3d 6e 75 6c 6c 21 3d 63 3f 61 2e 62 69 6e 64 28 63 29 3a 61 3b 74 68 69 73 2e 55 69 3d 62 3b 74 68 69 73 2e 43 3d 6e 75 6c 6c 3b 74 68 69 73 2e 6a 3d 21 31 3b 74 68 69 73 2e 42 3d 30 3b 74 68 69 73 2e 66 64 3d 6e 75 6c 6c 7d 2c 69 44 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 66 64 3d 67 2e 41 67 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 66 64 3d 6e 75 6c 6c 3b 0a 61 2e 6a 26 26 21 61 2e 42 26 26 28 61 2e 6a 3d 21 31 2c 69 44 62 28 61 29 29 7d 2c Data Ascii: is.N4,this);this.j=!1;this.B=0;this.C=this.fd=null;this.D=[]},u8=function(a,b,c){g.I.call(this);this.D=null!=c?a.bind(c):a;this.Ui=b;this.C=null;this.j=!1;this.B=0;this.fd=null},iDb=function(a){a.fd=g.Ag(function(){a.fd=null;a.j&&!a.B&&(a.j=!1,iDb(a))},
2024-05-25 23:00:49 UTC	1390	IN	Data Raw: 61 2e 5a 2e 63 6c 6f 6e 65 28 29 3b 63 38 28 61 2e 62 62 2c 22 74 22 2c 61 2e 4f 62 29 3b 61 2e 4e 3d 30 3b 76 61 72 20 63 3d 61 2e 43 2e 53 61 3b 61 2e 42 3d 6e 65 77 20 71 44 62 3b 61 2e 6a 3d 74 44 62 28 61 2e 43 2c 63 3f 62 3a 6e 75 6c 6c 2c 21 61 2e 59 29 3b 30 3c 61 2e 5a 61 26 26 28 61 2e 57 61 3d 6e 65 77 20 75 38 28 28 30 2c 67 2e 67 62 29 28 61 2e 7a 55 2c 61 2c 61 2e 6a 29 2c 61 2e 5a 61 29 29 3b 61 2e 7a 62 2e 6c 69 73 74 65 6e 28 61 2e 6a 2c 22 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 61 2e 50 34 29 3b 62 3d 61 2e 4e 61 3f 67 2e 6a 64 28 61 2e 4e 61 29 3a 7b 7d 3b 61 2e 59 3f 28 61 2e 45 61 7c 7c 28 61 2e 45 61 3d 22 50 4f 53 54 22 29 2c 62 5b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 5d 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f Data Ascii: a.Z.clone();c8(a.bb,"t",a.Ob);a.N=0;var c=a.C.Sa;a.B=new qDb;a.j=tDb(a.C,c?b:null,!a.Y);0<a.Za&&(a.Wa=new u8((0,g.gb)(a.zU,a,a.j),a.Za));a.zb.listen(a.j,"readystatechange",a.P4);b=a.Na?g.jd(a.Na):{};a.Y?(a.Ea\|\|(a.Ea="POST"),b["Content-Type"]="application/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.6	59419	142.250.185.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:49 UTC	644	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=VY7jTweO0i0BqZZap8-yanquJIOKNKbo1d3HBpUJHqRE_Z11FCWeFY_Mk8OO1cwT9htSPSISuOC5ieuLG7sFUO9hivPzNhZln-LO9ylJGerYBYWu3axFCBLlTnq6EplgiTmCStEQRnxurGbYic6ZGJv1GUeXv2954KWDAKN2DfU
2024-05-25 23:00:49 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Sat, 25 May 2024 23:00:49 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:49 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-25 23:00:49 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.6	59420	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:49 UTC	642	OUT	GET /s/desktop/aef0ced3/img/favicon.ico HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:49 UTC	676	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 1150 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 24 May 2024 14:22:03 GMT Expires: Sat, 24 May 2025 14:22:03 GMT Cache-Control: public, max-age=31536000 Last-Modified: Fri, 24 May 2024 07:14:12 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 117526 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:49 UTC	714	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 12 0b 00 00 12 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 00 00 ff 10 00 00 ff 40 00 00 ff 40 00 00 ff 70 00 00 ff 80 00 00 ff 80 00 00 ff 80 00 00 ff 80 00 00 ff 80 00 00 ff 40 00 00 ff 40 00 00 ff 10 ff ff ff 00 ff ff ff 00 ff Data Ascii: h( @@p@@
2024-05-25 23:00:49 UTC	436	IN	Data Raw: 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff 60 00 00 ff 30 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff 30 ff ff ff 00 00 00 ff 60 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff 60 ff ff ff 00 ff ff ff 00 ff ff ff 00 00 00 ff 10 00 00 ff 40 00 00 ff 40 00 00 ff 80 00 00 ff 80 00 00 ff 80 00 00 ff 80 00 00 ff 80 00 00 ff 80 00 00 ff 40 00 00 ff 40 00 00 ff 10 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff Data Ascii: `00``@@@@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.6	59434	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:50 UTC	618	OUT	GET /sw.js_data HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:51 UTC	1661	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Sat, 25 May 2024 23:00:51 GMT Content-Disposition: attachment; filename="response.bin"; filename=UTF-8''response.bin X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version= Cross-Origin-Opener-Policy: same-origin; report-to="youtube_main" Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-25 23:00:51 UTC	1661	IN	Data Raw: 64 36 63 0d 0a 29 5d 7d 27 0a 0a 5b 5b 22 79 74 2e 73 77 2e 61 64 72 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 65 6e 22 2c 22 55 53 22 2c 22 55 53 22 2c 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 22 2c 22 22 2c 22 43 67 73 78 63 6c 51 79 4d 30 74 30 53 45 4a 45 55 53 69 6a 32 38 6d 79 42 6a 49 4b 43 67 4a 56 55 78 49 45 47 67 41 67 51 51 25 33 44 25 33 44 22 2c 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 Data Ascii: d6c)]}'[["yt.sw.adr",null,[[["en","US","US","8.46.123.175",null,null,true,null,null,null,null,"","","CgsxclQyM0t0SEJEUSij28myBjIKCgJVUxIEGgAgQQ%3D%3D","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 S
2024-05-25 23:00:51 UTC	1661	IN	Data Raw: 33 64 30 2c 73 72 74 74 5c 75 30 30 33 64 38 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 43 4b 50 62 79 62 49 47 45 4c 76 53 72 77 55 51 2d 76 43 77 42 52 44 50 71 4c 41 46 45 4f 72 44 72 77 55 51 6d 76 43 76 42 52 43 4c 38 72 41 46 45 4e 53 68 72 77 55 51 69 4f 4f 76 42 52 44 72 6b 36 34 46 45 4f 5f 4e 73 41 55 51 72 4e 69 77 42 52 43 71 32 4c 41 46 45 4d 7a 66 72 67 55 51 2d 39 71 77 42 52 43 65 30 4c 41 46 45 50 5f 66 73 41 55 51 37 71 4b 76 42 52 43 Data Ascii: 3d0,srtt\u003d86",null,null,0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,"CKPbybIGELvSrwUQ-vCwBRDPqLAFEOrDrwUQmvCvBRCL8rAFENShrwUQiOOvBRDrk64FEO_NsAUQrNiwBRCq2LAFEMzfrgUQ-9qwBRCe0LAFEP_fsAUQ7qKvBRC
2024-05-25 23:00:51 UTC	121	IN	Data Raw: 62 69 31 53 65 6b 6f 33 52 6c 56 31 55 54 49 31 54 45 4a 52 4e 56 6c 6a 55 46 68 58 53 46 6c 72 65 58 70 4e 4d 41 5c 75 30 30 33 64 5c 75 30 30 33 64 22 2c 22 43 67 73 78 63 6c 51 79 4d 30 74 30 53 45 4a 45 55 53 69 6a 32 38 6d 79 42 6a 49 4b 43 67 4a 56 55 78 49 45 47 67 41 67 51 51 25 33 44 25 33 44 22 5d 2c 22 56 61 64 64 62 61 33 37 31 7c 7c 22 5d 5d 0d 0a Data Ascii: bi1Seko3RlV1UTI1TEJRNVljUFhXSFlreXpNMA\u003d\u003d","CgsxclQyM0t0SEJEUSij28myBjIKCgJVUxIEGgAgQQ%3D%3D"],"Vaddba371\|\|"]]
2024-05-25 23:00:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.6	59435	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:50 UTC	1158	OUT	POST /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19868.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7373075910951068210&__req=d&__rev=1013770602&__s=%3A%3Afjuzaa&__spin_b=trunk&__spin_r=1013770602&__spin_t=1716678010&__user=0&dpr=1&jazoest=2936&lsd=AVrj9UP_w8I&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 922 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryh0ZeMnTugxf9A2Va sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/Codashop.IDofficial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:50 UTC	922	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 68 30 5a 65 4d 6e 54 75 67 78 66 39 41 32 56 61 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 73 22 0d 0a 0d 0a 31 37 31 36 36 37 38 30 34 39 35 37 39 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 68 30 5a 65 4d 6e 54 75 67 78 66 39 41 32 56 61 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 71 22 0d 0a 0d 0a 5b 7b 22 61 70 70 5f 69 64 22 3a 22 32 32 32 30 33 39 31 37 38 38 32 30 30 38 39 32 22 2c 22 70 6f 73 74 73 22 3a 5b 5b 22 66 61 6c 63 6f 3a 62 64 5f 70 64 63 5f 73 69 67 6e 61 6c 73 22 2c 7b 22 65 22 Data Ascii: ------WebKitFormBoundaryh0ZeMnTugxf9A2VaContent-Disposition: form-data; name="ts"1716678049579------WebKitFormBoundaryh0ZeMnTugxf9A2VaContent-Disposition: form-data; name="q"[{"app_id":"2220391788200892","posts":[["falco:bd_pdc_signals",{"e"
2024-05-25 23:00:51 UTC	2004	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-25 23:00:51 UTC	2001	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-
2024-05-25 23:00:51 UTC	70	IN	Data Raw: 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a Data Ascii: Alt-Svc: h3=":443"; ma=86400Connection: closeContent-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.6	59452	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:51 UTC	607	OUT	GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19868.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7373075910951068210&__req=d&__rev=1013770602&__s=%3A%3Afjuzaa&__spin_b=trunk&__spin_r=1013770602&__spin_t=1716678010&__user=0&dpr=1&jazoest=2936&lsd=AVrj9UP_w8I&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:52 UTC	2004	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-25 23:00:52 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.6	59453	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:51 UTC	951	OUT	POST /youtubei/v1/notification_registration/set_registration?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 530 X-Youtube-Client-Name: 1 X-Youtube-Bootstrap-Logged-In: false X-Youtube-Client-Version: 2.20240524.00.00 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Visitor-Id: CgsxclQyM0t0SEJEUSij28myBjIKCgJVUxIEGgAgQQ%3D%3D Content-Type: application/json Accept: / Origin: https://www.youtube.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.youtube.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:51 UTC	530	OUT	Data Raw: 7b 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 52 65 67 69 73 74 72 61 74 69 6f 6e 22 3a 7b 22 63 68 72 6f 6d 65 52 65 67 69 73 74 72 61 74 69 6f 6e 22 3a 7b 22 64 65 76 69 63 65 49 64 22 3a 22 6f 4f 31 63 31 70 46 67 39 5a 68 67 37 62 59 59 6a 35 71 6a 59 47 73 62 6b 66 70 78 6b 4f 52 52 75 45 7a 4e 35 4a 6f 73 55 4d 71 7a 77 61 30 39 66 65 6b 35 45 41 37 36 53 50 43 47 54 62 4d 75 34 47 56 71 6a 54 76 64 35 76 57 46 79 77 6e 71 74 34 48 54 30 37 4c 78 6f 54 50 38 48 6b 5a 74 36 6f 52 79 59 62 42 4b 42 56 36 74 4c 36 78 69 45 31 72 4e 72 67 72 6e 6c 68 78 70 6b 64 71 44 45 56 66 53 4d 30 39 68 43 77 55 32 33 43 4b 36 55 4b 4a 38 69 75 5a 51 72 4b 4a 72 70 43 6e 6d 65 46 54 48 66 4d 58 78 43 7a 52 47 32 4c 66 6d 45 5a 61 72 4d 4e 4a 57 4c 58 52 47 4c 58 39 57 Data Ascii: {"notificationRegistration":{"chromeRegistration":{"deviceId":"oO1c1pFg9Zhg7bYYj5qjYGsbkfpxkORRuEzN5JosUMqzwa09fek5EA76SPCGTbMu4GVqjTvd5vWFywnqt4HT07LxoTP8HkZt6oRyYbBKBV6tL6xiE1rNrgrnlhxpkdqDEVfSM09hCwU23CK6UKJ8iuZQrKJrpCnmeFTHfMXxCzRG2LfmEZarMNJWLXRGLX9W
2024-05-25 23:00:52 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Sat, 25 May 2024 23:00:52 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-25 23:00:52 UTC	958	IN	Data Raw: 39 36 62 0d 0a 7b 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 7b 22 73 65 72 76 69 63 65 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 5b 7b 22 73 65 72 76 69 63 65 22 3a 22 43 53 49 22 2c 22 70 61 72 61 6d 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 63 22 2c 22 76 61 6c 75 65 22 3a 22 57 45 42 22 7d 2c 7b 22 6b 65 79 22 3a 22 63 76 65 72 22 2c 22 76 61 6c 75 65 22 3a 22 32 2e 32 30 32 34 30 35 32 34 2e 30 30 2e 30 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 79 74 5f 6c 69 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 53 65 74 4e 6f 74 69 66 69 63 61 74 69 6f 6e 52 65 67 69 73 74 72 61 74 69 6f 6e 5f 72 69 64 22 2c 22 76 61 6c 75 65 22 3a 22 30 78 31 33 32 61 30 65 33 32 32 63 62 36 31 66 36 37 22 7d 5d 7d 2c 7b 22 73 65 72 76 69 63 65 Data Ascii: 96b{"responseContext":{"serviceTrackingParams":[{"service":"CSI","params":[{"key":"c","value":"WEB"},{"key":"cver","value":"2.20240524.00.00"},{"key":"yt_li","value":"0"},{"key":"SetNotificationRegistration_rid","value":"0x132a0e322cb61f67"}]},{"service
2024-05-25 23:00:52 UTC	1390	IN	Data Raw: 37 35 2c 35 31 30 38 39 34 34 31 2c 35 31 30 39 31 33 33 31 2c 35 31 30 39 32 36 36 31 2c 35 31 30 39 34 31 37 31 2c 35 31 30 39 34 31 39 35 2c 35 31 30 39 34 32 30 32 2c 35 31 30 39 34 32 30 37 2c 35 31 30 39 35 34 37 38 2c 35 31 30 39 38 32 39 37 2c 35 31 30 39 38 32 39 39 2c 35 31 31 30 32 34 30 39 2c 35 31 31 30 36 39 39 35 2c 35 31 31 30 37 33 34 30 2c 35 31 31 31 31 37 33 38 2c 35 31 31 31 33 36 35 38 2c 35 31 31 31 33 36 36 33 2c 35 31 31 31 35 31 38 34 2c 35 31 31 31 36 30 36 37 2c 35 31 31 31 36 33 37 30 2c 35 31 31 31 38 39 33 32 2c 35 31 31 32 31 33 31 31 2c 35 31 31 32 34 31 30 34 2c 35 31 31 32 37 35 30 34 2c 35 31 31 32 39 32 31 30 2c 35 31 31 33 33 31 30 33 2c 35 31 31 33 39 33 37 39 2c 35 31 31 34 31 38 30 30 2c 35 31 31 34 32 38 38 36 2c Data Ascii: 75,51089441,51091331,51092661,51094171,51094195,51094202,51094207,51095478,51098297,51098299,51102409,51106995,51107340,51111738,51113658,51113663,51115184,51116067,51116370,51118932,51121311,51124104,51127504,51129210,51133103,51139379,51141800,51142886,
2024-05-25 23:00:52 UTC	70	IN	Data Raw: 4f 75 74 22 3a 74 72 75 65 7d 2c 22 77 65 62 52 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 45 78 74 65 6e 73 69 6f 6e 44 61 74 61 22 3a 7b 22 68 61 73 44 65 63 6f 72 61 74 65 64 22 3a 74 72 75 65 7d 7d 7d 0d 0a Data Ascii: Out":true},"webResponseContextExtensionData":{"hasDecorated":true}}}
2024-05-25 23:00:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.6	59470	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:52 UTC	2920	OUT	POST /api/stats/qoe?fmt=396&afmt=251&cpn=O-o7NTyOH_Xb-gSb&el=profilepage&ns=yt&fexp=v1%2C23952866%2C30430%2C2736%2C18612%2C76094%2C54572%2C73455%2C230596%2C85201%2C19107%2C6789%2C9958%2C6271%2C133212%2C14625955%2C11684381%2C7111%2C21854%2C9932%2C4557%2C9954%2C1192%2C7913%2C18583%2C4147%2C2819%2C2%2C6689%2C2007%2C9072%2C5244%2C23908%2C2196%2C5115%2C3472%2C383%2C1026%2C19%2C2%2C1082%2C21%2C641%2C2099%2C1447%2C2744%2C101%2C2658%2C1033%2C2%2C3703%2C8%2C832%2C671%2C1317%2C1222%2C1477%2C492%2C1008%2C4076%2C39%2C9%2C46%2C830%2C1538%2C713%2C2326%2C259%2C2%2C8%2C761%2C596%2C508%2C244&cl=635991227&seq=2&docid=WlW4UAl3MyM&ei=m21SZtHfBLG26dsPlueskAw&event=streamingstats&plid=AAYZT0D0iRDyMquL&referrer=https%3A%2F%2Fwww.youtube.com%2Fc%2FCodashopOfficial&qclc=ChBPLW83TlR5T0hfWGItZ1NiEAI&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240524.00.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&user_intent=0&bh=3.657:20.001,10.034:23.688&cmt=3.657:0.020,4.424:0.579,10.034:6.190&vps=3.657:PL,10.034:PL&ctmp=itr:t.5069; [TRUNCATED] Host: www.youtube.com Connection: keep-alive Content-Length: 226 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOP X-YouTube-Page-Label: youtube.desktop.web_20240524_00_RC00 sec-ch-ua-arch: "x86" X-YouTube-Page-CL: 636796567 sec-ch-ua-platform-version: "10.0.0" X-YouTube-Utc-Offset: -240 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" X-YouTube-Time-Zone: America/New_York sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded sec-ch-ua-full-version: "117.0.5938.134" X-YouTube-Client-Name: 1 X-YouTube-Client-Version: 2.20240524.00.00 X-Goog-Visitor-Id: CgsxclQyM0t0SEJEUSiK28myBjIKCgJVUxIEGgAgQQ%3D%3D X-YouTube-Ad-Signals: dt=1716678041110&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1264&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=image Accept: / Origin: https://www.youtube.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:52 UTC	226	OUT	Data Raw: 73 65 73 73 69 6f 6e 5f 74 6f 6b 65 6e 3d 51 55 46 46 4c 55 68 71 62 6a 42 5a 65 46 4e 47 62 6b 6f 7a 57 6c 68 4f 4d 55 4e 72 59 6c 64 66 5a 6e 4a 6a 55 6b 4d 35 4e 33 6b 78 55 58 78 42 51 33 4a 74 63 30 74 74 61 56 46 78 62 6d 52 44 5a 30 31 55 5a 55 35 50 57 6e 6c 58 63 7a 41 77 56 31 46 66 52 32 56 50 4d 47 35 57 62 57 59 7a 4d 30 5a 59 64 46 68 6d 64 56 64 75 54 55 34 33 51 6e 52 4d 61 6e 64 70 64 58 64 69 51 6e 5a 73 51 7a 56 66 61 56 52 69 55 46 6c 66 58 7a 59 77 64 6d 70 49 55 6e 45 32 52 33 6c 78 61 57 74 7a 63 44 42 58 4d 45 31 5a 62 55 77 35 57 56 52 46 59 56 59 30 54 6a 64 30 63 56 52 4e 58 33 5a 6f 4e 32 4a 57 52 57 39 55 4f 55 52 5a 64 77 25 33 44 25 33 44 Data Ascii: session_token=QUFFLUhqbjBZeFNGbkozWlhOMUNrYldfZnJjUkM5N3kxUXxBQ3Jtc0ttaVFxbmRDZ01UZU5PWnlXczAwV1FfR2VPMG5WbWYzM0ZYdFhmdVduTU43QnRMandpdXdiQnZsQzVfaVRiUFlfXzYwdmpIUnE2R3lxaWtzcDBXME1ZbUw5WVRFYVY0Tjd0cVRNX3ZoN2JWRW9UOURZdw%3D%3D
2024-05-25 23:00:53 UTC	504	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Sat, 25 May 2024 23:00:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.6	59484	142.250.186.68	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:53 UTC	1172	OUT	GET /js/th/9Z66e_kIUHiT36NNaH3ECtVnZbQwRKz1JAady_W2534.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=VY7jTweO0i0BqZZap8-yanquJIOKNKbo1d3HBpUJHqRE_Z11FCWeFY_Mk8OO1cwT9htSPSISuOC5ieuLG7sFUO9hivPzNhZln-LO9ylJGerYBYWu3axFCBLlTnq6EplgiTmCStEQRnxurGbYic6ZGJv1GUeXv2954KWDAKN2DfU
2024-05-25 23:00:53 UTC	810	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 52174 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sat, 25 May 2024 20:16:18 GMT Expires: Sun, 25 May 2025 20:16:18 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 14 May 2024 11:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 9875 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:53 UTC	580	IN	Data Raw: 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 65 79 4a 32 5a 58 4a 7a 61 57 39 75 49 6a 6f 67 4d 79 77 69 63 32 39 31 63 6d 4e 6c 63 79 49 36 57 79 49 69 58 53 77 69 63 32 39 31 63 6d 4e 6c 63 30 4e 76 62 6e 52 6c 62 6e 51 69 4f 6c 73 69 49 43 4a 64 4c 43 4a 75 59 57 31 6c 63 79 49 36 57 79 4a 6a 62 47 39 7a 64 58 4a 6c 52 48 6c 75 59 57 31 70 59 30 4a 31 64 48 52 76 62 69 4a 64 4c 43 4a 74 59 58 42 77 61 57 35 6e 63 79 49 36 49 6b 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 69 66 51 3d 3d 0a 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: //# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==(function(
2024-05-25 23:00:53 UTC	1390	IN	Data Raw: 50 6f 6c 69 63 79 3f 5a 3a 35 33 3a 34 37 3d 3d 4f 3f 28 47 3d 37 34 2c 4f 3d 31 34 29 3a 4f 3d 3d 64 26 26 28 50 2e 63 6f 6e 73 6f 6c 65 5b 65 5d 28 46 2e 6d 65 73 73 61 67 65 29 2c 4f 3d 32 36 29 7d 7d 63 61 74 63 68 28 4a 29 7b 69 66 28 37 34 3d 3d 47 29 74 68 72 6f 77 20 4a 3b 33 38 3d 3d 47 26 26 28 46 3d 4a 2c 4f 3d 34 37 29 7d 7d 2c 50 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 4c 3d 66 75 6e 63 74 69 6f 6e 28 55 29 7b 72 65 74 75 72 6e 20 58 2e 63 61 6c 6c 28 74 68 69 73 2c 55 29 7d 3b 28 30 2c 65 76 61 6c 29 28 66 75 6e 63 74 69 6f 6e 28 55 2c 5a 29 7b 72 65 74 75 72 6e 28 5a 3d 61 28 38 30 2c 37 36 2c 34 36 2c 33 2c 22 65 72 72 6f 72 22 2c 22 61 64 22 2c 6e 75 6c 6c 29 29 26 26 31 3d 3d 3d 55 2e 65 76 61 6c 28 5a 2e 63 72 65 61 74 65 53 63 72 69 70 74 Data Ascii: Policy?Z:53:47==O?(G=74,O=14):O==d&&(P.console[e](F.message),O=26)}}catch(J){if(74==G)throw J;38==G&&(F=J,O=47)}},P=this\|\|self,L=function(U){return X.call(this,U)};(0,eval)(function(U,Z){return(Z=a(80,76,46,3,"error","ad",null))&&1===U.eval(Z.createScript
2024-05-25 23:00:53 UTC	1390	IN	Data Raw: 65 6c 73 65 20 69 66 28 34 33 3d 3d 47 29 47 3d 28 5a 2b 34 26 34 36 29 3e 3d 5a 26 26 28 5a 2b 39 26 33 36 29 3c 5a 3f 33 39 3a 36 31 3b 65 6c 73 65 20 69 66 28 33 33 3d 3d 47 29 47 3d 28 5a 2b 34 26 32 31 29 3e 3d 5a 26 26 28 5a 2b 35 5e 32 34 29 3c 5a 3f 38 31 3a 36 34 3b 65 6c 73 65 20 69 66 28 31 32 3d 3d 47 29 7b 61 3a 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 4b 29 64 3d 22 73 74 72 69 6e 67 22 21 3d 3d 74 79 70 65 6f 66 20 51 7c 7c 51 2e 6c 65 6e 67 74 68 21 3d 4f 3f 2d 31 3a 4b 2e 69 6e 64 65 78 4f 66 28 51 2c 55 29 3b 65 6c 73 65 7b 66 6f 72 28 46 3d 55 3b 46 3c 4b 2e 6c 65 6e 67 74 68 3b 46 2b 2b 29 69 66 28 46 20 69 6e 20 4b 26 26 4b 5b 46 5d 3d 3d 3d 51 29 7b 64 3d 46 3b 62 72 65 61 6b 20 61 7d 64 3d 2d 31 7d 47 3d 34 33 Data Ascii: else if(43==G)G=(Z+4&46)>=Z&&(Z+9&36)<Z?39:61;else if(33==G)G=(Z+4&21)>=Z&&(Z+5^24)<Z?81:64;else if(12==G){a:if("string"===typeof K)d="string"!==typeof Q\|\|Q.length!=O?-1:K.indexOf(Q,U);else{for(F=U;F<K.length;F++)if(F in K&&K[F]===Q){d=F;break a}d=-1}G=43
2024-05-25 23:00:53 UTC	1390	IN	Data Raw: 2c 32 36 2c 55 2c 2d 38 32 2c 32 31 2c 2d 38 34 5d 2c 58 3d 64 73 2c 47 3d 28 46 7c 37 29 2d 7e 28 46 26 37 29 2b 7e 28 46 7c 37 29 2c 64 3d 50 43 5b 51 2e 42 5d 28 51 2e 4e 50 29 2c 64 5b 51 2e 42 5d 3d 66 75 6e 63 74 69 6f 6e 28 4a 29 7b 47 3d 28 47 2b 3d 36 2b 37 2a 28 50 3d 4a 2c 46 29 2c 2d 7e 28 47 26 37 29 29 2b 28 47 26 2d 38 29 2b 28 7e 47 7c 37 29 7d 2c 64 2e 63 6f 6e 63 61 74 3d 66 75 6e 63 74 69 6f 6e 28 4a 2c 65 2c 6e 2c 68 2c 45 2c 66 29 7b 72 65 74 75 72 6e 28 68 3d 28 50 3d 28 4a 3d 28 6e 3d 4b 25 31 36 2b 31 2c 2d 6e 2a 50 2b 28 58 28 29 7c 30 29 2a 6e 2b 47 2b 33 2a 4b 2a 4b 2a 6e 2d 20 2d 33 36 30 30 2a 4b 2a 50 2d 4f 2a 50 29 2b 36 30 2a 50 2a 50 2b 55 5b 45 3d 47 2b 35 39 2c 28 45 7c 30 29 2b 37 2d 28 45 7c 37 29 5d 2a 4b 2a 6e 2d 31 Data Ascii: ,26,U,-82,21,-84],X=ds,G=(F\|7)-~(F&7)+~(F\|7),d=PC[Q.B](Q.NP),d[Q.B]=function(J){G=(G+=6+7(P=J,F),-~(G&7))+(G&-8)+(~G\|7)},d.concat=function(J,e,n,h,E,f){return(h=(P=(J=(n=K%16+1,-nP+(X()\|0)n+G+3KKn- -3600KP-OP)+60PP+U[E=G+59,(E\|0)+7-(E\|7)]K*n-1
2024-05-25 23:00:53 UTC	1390	IN	Data Raw: 26 26 28 4f 2e 56 3f 50 3d 44 31 28 4f 2e 47 2c 4f 29 3a 28 51 3d 66 5f 28 32 2c 38 2c 74 72 75 65 2c 4f 29 2c 51 26 31 32 38 26 26 28 51 5e 3d 31 32 38 2c 55 3d 66 5f 28 32 2c 32 2c 74 72 75 65 2c 4f 29 2c 51 3d 28 5a 3d 51 3c 3c 32 2c 2d 7e 28 5a 26 55 29 2b 2d 33 2d 7e 55 2d 28 7e 5a 7c 55 29 29 29 2c 50 3d 51 29 29 2c 50 7d 2c 78 73 3d 66 75 6e 63 74 69 6f 6e 28 41 2c 4f 2c 5a 2c 55 2c 51 2c 4b 2c 46 2c 58 2c 47 2c 64 29 7b 66 6f 72 28 64 3d 34 30 3b 30 21 3d 64 3b 29 7b 69 66 28 32 3d 3d 64 29 72 65 74 75 72 6e 20 47 3b 32 30 3d 3d 64 3f 28 47 3d 58 2c 64 3d 31 34 29 3a 38 38 3d 3d 64 3f 28 69 43 2e 63 61 6c 6c 28 74 68 69 73 29 2c 5a 7c 7c 42 43 7c 7c 28 42 43 3d 6e 65 77 20 6b 73 29 2c 74 68 69 73 2e 52 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 52 4e Data Ascii: &&(O.V?P=D1(O.G,O):(Q=f_(2,8,true,O),Q&128&&(Q^=128,U=f_(2,2,true,O),Q=(Z=Q<<2,-~(Z&U)+-3-~U-(~Z\|U))),P=Q)),P},xs=function(A,O,Z,U,Q,K,F,X,G,d){for(d=40;0!=d;){if(2==d)return G;20==d?(G=X,d=14):88==d?(iC.call(this),Z\|\|BC\|\|(BC=new ks),this.R=void 0,this.RN
2024-05-25 23:00:53 UTC	1390	IN	Data Raw: 31 37 3e 28 4f 5e 33 39 29 26 26 36 3c 3d 28 4f 5e 31 39 29 3f 38 38 3a 39 36 3a 33 30 3d 3d 58 3f 28 74 68 69 73 2e 62 75 74 74 6f 6e 3d 5a 2e 62 75 74 74 6f 6e 2c 74 68 69 73 2e 6b 65 79 43 6f 64 65 3d 5a 2e 6b 65 79 43 6f 64 65 7c 7c 30 2c 74 68 69 73 2e 6b 65 79 3d 5a 2e 6b 65 79 7c 7c 41 2c 74 68 69 73 2e 63 68 61 72 43 6f 64 65 3d 5a 2e 63 68 61 72 43 6f 64 65 7c 7c 28 22 6b 65 79 70 72 65 73 73 22 3d 3d 46 3f 5a 2e 6b 65 79 43 6f 64 65 3a 30 29 2c 74 68 69 73 2e 63 74 72 6c 4b 65 79 3d 5a 2e 63 74 72 6c 4b 65 79 2c 74 68 69 73 2e 61 6c 74 4b 65 79 3d 5a 2e 61 6c 74 4b 65 79 2c 74 68 69 73 2e 73 68 69 66 74 4b 65 79 3d 5a 2e 73 68 69 66 74 4b 65 79 2c 74 68 69 73 2e 6d 65 74 61 4b 65 79 3d 5a 2e 6d 65 74 61 4b 65 79 2c 74 68 69 73 2e 70 6f 69 6e 74 Data Ascii: 17>(O^39)&&6<=(O^19)?88:96:30==X?(this.button=Z.button,this.keyCode=Z.keyCode\|\|0,this.key=Z.key\|\|A,this.charCode=Z.charCode\|\|("keypress"==F?Z.keyCode:0),this.ctrlKey=Z.ctrlKey,this.altKey=Z.altKey,this.shiftKey=Z.shiftKey,this.metaKey=Z.metaKey,this.point
2024-05-25 23:00:53 UTC	1390	IN	Data Raw: 72 65 74 75 72 6e 20 4c 3b 39 38 3d 3d 50 3f 50 3d 28 55 26 31 31 30 29 3d 3d 55 3f 31 32 3a 32 30 3a 38 30 3d 3d 50 3f 50 3d 28 55 26 33 30 29 3d 3d 55 3f 34 33 3a 31 31 3a 37 30 3d 3d 50 3f 50 3d 64 3c 58 2e 6c 65 6e 67 74 68 3f 34 31 3a 38 30 3a 36 35 3d 3d 50 3f 28 57 43 28 47 2c 31 39 2c 30 2c 5a 2c 58 2c 51 2c 46 2c 4b 29 2c 50 3d 38 30 29 3a 39 35 3d 3d 50 3f 28 4b 3d 57 28 36 34 2c 4b 29 2c 46 26 26 46 5b 53 32 5d 3f 46 2e 46 2e 61 64 64 28 53 74 72 69 6e 67 28 58 29 2c 4b 2c 66 61 6c 73 65 2c 7a 28 39 37 2c 4f 2c 47 29 3f 21 21 47 2e 63 61 70 74 75 72 65 3a 21 21 47 2c 51 29 3a 74 28 6e 75 6c 6c 2c 33 33 2c 66 61 6c 73 65 2c 46 2c 4b 2c 51 2c 66 61 6c 73 65 2c 47 2c 58 29 2c 50 3d 38 30 29 3a 39 3d 3d 50 3f 28 64 3d 30 2c 50 3d 31 36 29 3a 31 32 Data Ascii: return L;98==P?P=(U&110)==U?12:20:80==P?P=(U&30)==U?43:11:70==P?P=d<X.length?41:80:65==P?(WC(G,19,0,Z,X,Q,F,K),P=80):95==P?(K=W(64,K),F&&F[S2]?F.F.add(String(X),K,false,z(97,O,G)?!!G.capture:!!G,Q):t(null,33,false,F,K,Q,false,G,X),P=80):9==P?(d=0,P=16):12
2024-05-25 23:00:53 UTC	1390	IN	Data Raw: 73 2e 51 39 2b 3d 55 2f 74 68 69 73 2e 6e 2c 74 68 69 73 2e 44 73 2b 3d 55 2a 28 5a 2d 74 68 69 73 2e 51 39 29 2c 58 3d 31 29 3a 38 33 3d 3d 58 3f 28 47 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 68 69 73 2e 6f 4e 2b 28 74 68 69 73 2e 55 28 29 2d 74 68 69 73 2e 55 4c 29 29 2c 58 3d 36 29 3a 34 33 3d 3d 58 3f 28 4b 2b 3d 38 31 39 32 2c 58 3d 35 30 29 3a 31 3d 3d 58 3f 58 3d 28 4f 26 39 30 29 3d 3d 4f 3f 38 33 3a 36 3a 35 30 3d 3d 58 3f 58 3d 4b 3c 5a 2e 6c 65 6e 67 74 68 3f 36 33 3a 34 38 3a 34 30 3d 3d 58 3f 28 46 3d 22 22 2c 4b 3d 30 2c 58 3d 31 37 29 3a 36 36 3d 3d 58 3f 28 51 3d 77 69 6e 64 6f 77 2e 62 74 6f 61 2c 58 3d 39 32 29 3a 37 38 3d 3d 58 3f 28 55 2e 4b 3d 28 28 55 2e 4b 3f 55 2e 4b 2b 22 7e 22 3a 22 45 3a 22 29 2b 51 2e 6d 65 73 73 61 67 65 2b 22 Data Ascii: s.Q9+=U/this.n,this.Ds+=U*(Z-this.Q9),X=1):83==X?(G=Math.floor(this.oN+(this.U()-this.UL)),X=6):43==X?(K+=8192,X=50):1==X?X=(O&90)==O?83:6:50==X?X=K<Z.length?63:48:40==X?(F="",K=0,X=17):66==X?(Q=window.btoa,X=92):78==X?(U.K=((U.K?U.K+"~":"E:")+Q.message+"
2024-05-25 23:00:53 UTC	1390	IN	Data Raw: 29 3e 3d 41 26 26 28 41 2d 39 5e 32 31 29 3c 41 3f 36 36 3a 35 30 3b 65 6c 73 65 20 69 66 28 36 36 3d 3d 4a 29 4a 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 4b 29 3f 35 35 3a 34 33 3b 65 6c 73 65 20 69 66 28 31 34 3d 3d 4a 29 4a 3d 41 3c 3c 32 26 31 34 3f 33 32 3a 35 31 3b 65 6c 73 65 20 69 66 28 33 32 3d 3d 4a 29 4a 3d 32 3d 3d 28 41 3c 3c 31 26 31 39 29 3f 39 32 3a 32 30 3b 65 6c 73 65 20 69 66 28 31 33 3d 3d 4a 29 4a 3d 35 37 3b 65 6c 73 65 20 69 66 28 33 33 3d 3d 4a 29 55 2b 2b 2c 4a 3d 35 37 3b 65 6c 73 65 20 69 66 28 34 36 3d 3d 4a 29 64 3d 77 73 28 22 22 2c 33 38 2c 46 29 2c 4a 3d 34 37 3b 65 6c 73 65 20 69 66 28 34 33 3d 3d 4a 29 47 3d 7a 28 39 38 2c 4f 2c 58 29 3f 21 21 58 2e 63 61 70 74 75 72 65 3a 21 21 58 2c 51 3d 57 28 38 2c 51 29 2c 4a 3d Data Ascii: )>=A&&(A-9^21)<A?66:50;else if(66==J)J=Array.isArray(K)?55:43;else if(14==J)J=A<<2&14?32:51;else if(32==J)J=2==(A<<1&19)?92:20;else if(13==J)J=57;else if(33==J)U++,J=57;else if(46==J)d=ws("",38,F),J=47;else if(43==J)G=z(98,O,X)?!!X.capture:!!X,Q=W(8,Q),J=
2024-05-25 23:00:53 UTC	1390	IN	Data Raw: 65 6c 73 65 20 69 66 28 33 3d 3d 65 29 65 3d 33 3d 3d 28 41 7c 32 29 3e 3e 33 3f 38 35 3a 31 34 3b 65 6c 73 65 20 69 66 28 31 33 3d 3d 65 29 65 3d 35 30 3e 74 68 69 73 2e 73 2e 6c 65 6e 67 74 68 3f 33 33 3a 32 38 3b 65 6c 73 65 20 69 66 28 35 39 3d 3d 65 29 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 4f 3f 4a 3d 4f 3a 28 4f 5b 6d 71 5d 7c 7c 28 4f 5b 6d 71 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 4f 2e 68 61 6e 64 6c 65 45 76 65 6e 74 28 6e 29 7d 29 2c 4a 3d 4f 5b 6d 71 5d 29 2c 65 3d 31 39 3b 65 6c 73 65 20 69 66 28 32 31 3d 3d 65 29 65 3d 28 41 7c 38 30 29 3d 3d 41 3f 34 33 3a 31 37 3b 65 6c 73 65 20 69 66 28 39 30 3d 3d 65 29 7b 69 66 28 28 5a 2e 77 67 2b 3d 28 28 4c 3d 28 47 3d 28 50 3d 28 58 3d 30 3c 28 51 7c 7c Data Ascii: else if(3==e)e=3==(A\|2)>>3?85:14;else if(13==e)e=50>this.s.length?33:28;else if(59==e)"function"===typeof O?J=O:(O[mq]\|\|(O[mq]=function(n){return O.handleEvent(n)}),J=O[mq]),e=19;else if(21==e)e=(A\|80)==A?43:17;else if(90==e){if((Z.wg+=((L=(G=(P=(X=0<(Q\|\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.6	59492	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:53 UTC	1159	OUT	POST /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19868.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7373075910951068210&__req=e&__rev=1013770602&__s=%3A%3Afjuzaa&__spin_b=trunk&__spin_r=1013770602&__spin_t=1716678010&__user=0&dpr=1&jazoest=2936&lsd=AVrj9UP_w8I&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 1096 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryBpDKxAoN1btYaFgO sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/Codashop.IDofficial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:53 UTC	1096	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 42 70 44 4b 78 41 6f 4e 31 62 74 59 61 46 67 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 73 22 0d 0a 0d 0a 31 37 31 36 36 37 38 30 35 32 36 36 35 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 42 70 44 4b 78 41 6f 4e 31 62 74 59 61 46 67 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 6f 73 74 5f 30 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 62 6c 6f 62 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 78 9c e5 54 db Data Ascii: ------WebKitFormBoundaryBpDKxAoN1btYaFgOContent-Disposition: form-data; name="ts"1716678052665------WebKitFormBoundaryBpDKxAoN1btYaFgOContent-Disposition: form-data; name="post_0"; filename="blob"Content-Type: application/octet-streamxT
2024-05-25 23:00:54 UTC	2004	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-25 23:00:54 UTC	2001	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-
2024-05-25 23:00:54 UTC	70	IN	Data Raw: 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a Data Ascii: Alt-Svc: h3=":443"; ma=86400Connection: closeContent-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.6	59513	157.240.253.35	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:54 UTC	607	OUT	GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19868.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7373075910951068210&__req=e&__rev=1013770602&__s=%3A%3Afjuzaa&__spin_b=trunk&__spin_r=1013770602&__spin_t=1716678010&__user=0&dpr=1&jazoest=2936&lsd=AVrj9UP_w8I&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:00:55 UTC	2004	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-in [TRUNCATED]
2024-05-25 23:00:55 UTC	1854	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2d 70 6f 6c 69 63 79 3a 20 66 6f 72 63 65 2d 6c 6f 61 64 2d 61 74 2d 74 6f 70 0d 0a 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d Data Ascii: document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.6	59528	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:55 UTC	3143	OUT	POST /api/stats/atr?ns=yt&el=profilepage&cpn=O-o7NTyOH_Xb-gSb&ver=2&cmt=8.853&fmt=396&fs=0&rt=12.698&euri=https%3A%2F%2Fwww.youtube.com%2Fc%2FCodashopOfficial&lact=16&cl=635991227&mos=0&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240524.00.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&autoplay=1&delay=9&hl=en_US&cr=US&len=46.861&fexp=v1%2C23952866%2C30430%2C2736%2C18612%2C76094%2C54572%2C73455%2C230596%2C85201%2C19107%2C6789%2C9958%2C6271%2C133212%2C14625955%2C11684381%2C7111%2C21854%2C9932%2C4557%2C9954%2C1192%2C7913%2C18583%2C4147%2C2819%2C2%2C6689%2C2007%2C9072%2C5244%2C23908%2C2196%2C5115%2C3472%2C383%2C1026%2C19%2C2%2C1082%2C21%2C641%2C2099%2C1447%2C2744%2C101%2C2658%2C1033%2C2%2C3703%2C8%2C832%2C671%2C1317%2C1222%2C1477%2C492%2C1008%2C4076%2C39%2C9%2C46%2C830%2C1538%2C713%2C2326%2C259%2C2%2C8%2C761%2C596%2C508%2C244&afmt=251&muted=0&docid=WlW4UAl3MyM&ei=m21SZtHfBLG26dsPlueskAw&plid=AAYZT0D0iRDyMquL&referrer=https%3A%2F%2Fwww.youtube.com%2Fc%2FCodashopOfficial&of=wbAUJoLFDaeeOS [TRUNCATED] Host: www.youtube.com Connection: keep-alive Content-Length: 2171 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOP X-YouTube-Page-Label: youtube.desktop.web_20240524_00_RC00 sec-ch-ua-arch: "x86" X-Goog-Request-Time: 1716678054336 X-YouTube-Page-CL: 636796567 X-Goog-Event-Time: 1716678054336 X-YouTube-Utc-Offset: -240 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" X-YouTube-Time-Zone: America/New_York sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded sec-ch-ua-full-version: "117.0.5938.134" X-YouTube-Client-Name: 1 X-YouTube-Client-Version: 2.20240524.00.00 X-Goog-Visitor-Id: CgsxclQyM0t0SEJEUSiK28myBjIKCgJVUxIEGgAgQQ%3D%3D X-YouTube-Ad-Signals: dt=1716678033322&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1264&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=image Accept: / Origin: https://www.youtube.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:55 UTC	2171	OUT	Data Raw: 61 74 72 3d 61 25 33 44 36 25 32 36 61 32 25 33 44 31 25 32 36 62 25 33 44 62 75 4d 68 74 69 50 47 38 44 68 4c 55 35 6e 54 74 4f 45 41 6f 58 57 6b 39 32 41 25 32 36 63 25 33 44 31 37 31 36 36 37 38 30 34 33 25 32 36 64 25 33 44 31 25 32 36 65 25 33 44 57 6c 57 34 55 41 6c 33 4d 79 4d 25 32 36 63 31 61 25 33 44 31 25 32 36 63 36 61 25 33 44 31 25 32 36 63 36 62 25 33 44 31 25 32 36 68 68 25 33 44 72 50 7a 4e 43 61 52 6b 4b 4b 75 70 57 6e 34 30 69 52 61 50 37 74 56 6b 45 7a 2d 4a 36 49 7a 51 64 6d 65 42 67 7a 63 76 44 4b 45 25 32 36 72 31 61 25 33 44 25 32 34 73 43 38 35 4c 33 64 52 41 41 59 4b 41 34 75 2d 4b 67 50 65 74 56 6f 63 50 43 35 42 61 6e 53 6e 41 44 51 42 45 41 72 5a 31 46 74 6c 5a 73 4d 42 51 35 64 5a 44 4a 43 63 70 65 73 71 39 4d 72 53 73 61 6e Data Ascii: atr=a%3D6%26a2%3D1%26b%3DbuMhtiPG8DhLU5nTtOEAoXWk92A%26c%3D1716678043%26d%3D1%26e%3DWlW4UAl3MyM%26c1a%3D1%26c6a%3D1%26c6b%3D1%26hh%3DrPzNCaRkKKupWn40iRaP7tVkEz-J6IzQdmeBgzcvDKE%26r1a%3D%24sC85L3dRAAYKA4u-KgPetVocPC5BanSnADQBEArZ1FtlZsMBQ5dZDJCcpesq9MrSsan
2024-05-25 23:00:55 UTC	504	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Sat, 25 May 2024 23:00:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.6	59529	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:55 UTC	2014	OUT	GET /pagead/1p-user-list/962985656/?backend=innertube&cname=1&cver=2_20240524&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240524%3Bptype%3Df_view%3Btype%3Dview%3Butuid%3D17z6J2vL4GUL6a_A-lMtGQ%3Butvid%3DWlW4UAl3MyM&excl_rlsa=1&ptype=f_view&random=384058337&utuid=17z6J2vL4GUL6a_A-lMtGQ HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOP X-YouTube-Page-Label: youtube.desktop.web_20240524_00_RC00 sec-ch-ua-arch: "x86" X-YouTube-Page-CL: 636796567 sec-ch-ua-platform-version: "10.0.0" X-YouTube-Utc-Offset: -240 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" X-YouTube-Time-Zone: America/New_York sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-full-version: "117.0.5938.134" X-YouTube-Client-Name: 1 X-YouTube-Client-Version: 2.20240524.00.00 X-Goog-Visitor-Id: CgsxclQyM0t0SEJEUSiK28myBjIKCgJVUxIEGgAgQQ%3D%3D X-YouTube-Ad-Signals: dt=1716678041110&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1264&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=image Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:56 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Sat, 25 May 2024 23:00:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:56 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.6	59542	216.58.206.46	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:56 UTC	751	OUT	GET /pagead/1p-user-list/962985656/?backend=innertube&cname=1&cver=2_20240524&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240524%3Bptype%3Df_view%3Btype%3Dview%3Butuid%3D17z6J2vL4GUL6a_A-lMtGQ%3Butvid%3DWlW4UAl3MyM&excl_rlsa=1&ptype=f_view&random=384058337&utuid=17z6J2vL4GUL6a_A-lMtGQ HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:57 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Sat, 25 May 2024 23:00:57 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:57 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.6	59564	142.250.185.198	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:58 UTC	1000	OUT	GET /instream/ad_status.js HTTP/1.1 Host: static.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-05-25 23:00:58 UTC	744	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 29 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sat, 25 May 2024 22:53:12 GMT Expires: Sat, 25 May 2024 23:08:12 GMT Cache-Control: public, max-age=900 Age: 466 Last-Modified: Thu, 12 Dec 2013 23:40:16 GMT Content-Type: text/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:00:58 UTC	29	IN	Data Raw: 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 5f 61 64 5f 73 74 61 74 75 73 20 3d 20 31 3b 0a Data Ascii: window.google_ad_status = 1;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.6	59569	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:00:58 UTC	2631	OUT	GET /api/stats/watchtime?ns=yt&el=profilepage&cpn=O-o7NTyOH_Xb-gSb&ver=2&cmt=12.162&fmt=396&fs=0&rt=16.007&euri=https%3A%2F%2Fwww.youtube.com%2Fc%2FCodashopOfficial&lact=26&cl=635991227&state=playing&volume=100%2C100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240524.00.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&autoplay=1&delay=9&hl=en_US&cr=US&len=46.861&rtn=26&afmt=251&idpj=-8&ldpj=-2&dtm=1&rti=16&st=2.161%2C7.228&et=7.228%2C12.162&muted=0%2C0&docid=WlW4UAl3MyM&ei=m21SZtHfBLG26dsPlueskAw&plid=AAYZT0D0iRDyMquL&referrer=https%3A%2F%2Fwww.youtube.com%2Fc%2FCodashopOfficial&of=wbAUJoLFDaeeOSJrHXH1sg&vm=CAEQABgEOjJBSHFpSlRJeHRTTUhYSzdEdG1fakFHRHRxaWtUYWlNWVI3V19xQksxOXdjTGJLTFJqUWJfQVBta0tESll1cDM1aXUzRkVicnN4TjNkMzRFYkVqYjNlQlFqcjNES3VGTk1maDRZU3htOVZEVGFXVmg4dEg1SV9NeFlyU01nM1NKMHo3SzJHanZFa1NvemdKQjFOUmdoAg HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOP X-YouTube-Page-Label: youtube.desktop.web_20240524_00_RC00 sec-ch-ua-arch: "x86" X-Goog-Request-Time: 1716678057645 X-YouTube-Page-CL: 636796567 X-Goog-Event-Time: 1716678057645 X-YouTube-Utc-Offset: -240 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" X-YouTube-Time-Zone: America/New_York sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-full-version: "117.0.5938.134" X-YouTube-Client-Name: 1 X-YouTube-Client-Version: 2.20240524.00.00 X-Goog-Visitor-Id: CgsxclQyM0t0SEJEUSiK28myBjIKCgJVUxIEGgAgQQ%3D%3D X-YouTube-Ad-Signals: dt=1716678033322&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1264&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=image Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:00:59 UTC	410	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Sat, 25 May 2024 23:00:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.6	59590	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:01:00 UTC	1159	OUT	GET /s/player/bc657243/player_ias.vflset/en_US/annotations_module.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:01:00 UTC	686	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 70508 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sat, 25 May 2024 22:08:47 GMT Expires: Sun, 25 May 2025 22:08:47 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 22 May 2024 04:17:26 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 3133 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:01:00 UTC	704	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 45 33 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 70 75 62 6c 69 73 68 28 22 63 61 72 64 73 74 61 74 65 63 68 61 6e 67 65 22 2c 61 2e 4f 6b 28 29 26 26 61 2e 6b 70 28 29 3f 31 3a 30 29 7d 2c 46 33 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 67 2e 63 62 28 62 29 2c 64 3d 63 3f 62 3a 61 72 67 75 6d 65 6e 74 73 3b 0a 66 6f 72 28 63 3d 63 3f 30 3a 31 3b 63 3c 64 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 72 65 74 75 72 6e 3b 61 3d 61 5b 64 5b 63 5d 5d 7d 72 65 74 75 72 6e 20 61 7d 2c 4a 6f 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 67 2e 52 73 28 61 29 3b 0a Data Ascii: (function(g){var window=this;'use strict';var E3=function(a){a.publish("cardstatechange",a.Ok()&&a.kp()?1:0)},F3=function(a,b){var c=g.cb(b),d=c?b:arguments;for(c=c?0:1;c<d.length;c++){if(null==a)return;a=a[d[c]]}return a},Job=function(a){var b=g.Rs(a);
2024-05-25 23:01:00 UTC	1390	IN	Data Raw: 72 61 79 28 61 29 7c 7c 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 53 74 61 72 74 20 61 6e 64 20 65 6e 64 20 70 61 72 61 6d 65 74 65 72 73 20 6d 75 73 74 20 62 65 20 61 72 72 61 79 73 22 29 3b 69 66 28 61 2e 6c 65 6e 67 74 68 21 3d 62 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 53 74 61 72 74 20 61 6e 64 20 65 6e 64 20 70 6f 69 6e 74 73 20 6d 75 73 74 20 62 65 20 74 68 65 20 73 61 6d 65 20 6c 65 6e 67 74 68 22 29 3b 74 68 69 73 2e 42 3d 61 3b 74 68 69 73 2e 4e 3d 62 3b 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 3d 63 3b 74 68 69 73 2e 47 3d 64 3b 74 68 69 73 2e 63 6f 6f 72 64 73 3d 5b 5d 3b 74 68 69 73 2e 70 72 6f 67 72 65 73 73 3d 74 68 69 73 2e 4b 3d 30 3b 74 68 69 73 2e 44 3d 6e 75 6c 6c Data Ascii: ray(a)\|\|!Array.isArray(b))throw Error("Start and end parameters must be arrays");if(a.length!=b.length)throw Error("Start and end points must be the same length");this.B=a;this.N=b;this.duration=c;this.G=d;this.coords=[];this.progress=this.K=0;this.D=null
2024-05-25 23:01:00 UTC	1390	IN	Data Raw: 62 73 63 72 69 62 65 42 75 74 74 6f 6e 52 65 6e 64 65 72 65 72 3b 69 66 28 21 69 61 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 73 61 3d 66 28 69 61 2e 75 6e 73 75 62 73 63 72 69 62 65 64 42 75 74 74 6f 6e 54 65 78 74 29 2c 61 61 3d 66 28 69 61 2e 73 75 62 73 63 72 69 62 65 64 42 75 74 74 6f 6e 54 65 78 74 29 3b 69 66 28 69 61 2e 73 75 62 73 63 72 69 62 65 64 29 7b 76 61 72 20 55 3d 66 28 69 61 2e 73 75 62 73 63 72 69 62 65 72 43 6f 75 6e 74 57 69 74 68 55 6e 73 75 62 73 63 72 69 62 65 54 65 78 74 29 3b 76 61 72 20 49 61 3d 66 28 69 61 2e 73 75 62 73 63 72 69 62 65 72 43 6f 75 6e 74 54 65 78 74 29 7d 65 6c 73 65 20 55 3d 66 28 69 61 2e 73 75 62 73 63 72 69 62 65 72 43 6f 75 6e 74 54 65 78 74 29 2c 49 61 3d 66 28 69 61 2e 73 75 62 73 63 72 69 62 65 Data Ascii: bscribeButtonRenderer;if(!ia)return null;var sa=f(ia.unsubscribedButtonText),aa=f(ia.subscribedButtonText);if(ia.subscribed){var U=f(ia.subscriberCountWithUnsubscribeText);var Ia=f(ia.subscriberCountText)}else U=f(ia.subscriberCountText),Ia=f(ia.subscribe
2024-05-25 23:01:00 UTC	1390	IN	Data Raw: 29 3b 65 6c 73 65 20 69 66 28 22 50 4c 41 59 4c 49 53 54 22 3d 3d 3d 68 29 67 2e 56 28 6c 2c 67 2e 78 46 29 3f 6d 3d 67 2e 56 28 6c 2c 67 2e 78 46 29 2e 75 72 6c 3a 28 4d 3d 67 2e 56 28 6c 2c 67 2e 51 53 29 2c 6d 3d 65 28 4d 29 29 2c 6e 3d 21 31 2c 71 3d 61 2c 74 3d 66 28 62 2e 70 6c 61 79 6c 69 73 74 4c 65 6e 67 74 68 29 3b 65 6c 73 65 20 69 66 28 22 43 48 41 4e 4e 45 4c 22 3d 3d 3d 0a 68 29 7b 69 66 28 77 3d 46 33 28 6c 2c 22 62 72 6f 77 73 65 45 6e 64 70 6f 69 6e 74 22 2c 22 62 72 6f 77 73 65 49 64 22 29 29 76 3d 77 2c 6d 3d 22 2f 63 68 61 6e 6e 65 6c 2f 22 2b 76 3b 6e 3d 21 31 3b 71 3d 22 6e 65 77 22 3b 28 77 3d 21 21 62 2e 69 73 53 75 62 73 63 72 69 62 65 29 3f 41 3d 64 28 62 29 3a 44 3d 66 28 62 2e 73 75 62 73 63 72 69 62 65 72 73 54 65 78 74 29 7d Data Ascii: );else if("PLAYLIST"===h)g.V(l,g.xF)?m=g.V(l,g.xF).url:(M=g.V(l,g.QS),m=e(M)),n=!1,q=a,t=f(b.playlistLength);else if("CHANNEL"===h){if(w=F3(l,"browseEndpoint","browseId"))v=w,m="/channel/"+v;n=!1;q="new";(w=!!b.isSubscribe)?A=d(b):D=f(b.subscribersText)}
2024-05-25 23:01:00 UTC	1390	IN	Data Raw: 7b 76 61 72 20 63 3d 7b 73 74 61 72 74 4d 73 3a 4d 61 74 68 2e 66 6c 6f 6f 72 28 4e 75 6d 62 65 72 28 61 2e 73 74 61 72 74 4d 73 29 29 2c 0a 69 6d 70 72 65 73 73 69 6f 6e 55 72 6c 73 3a 4d 33 28 61 2e 69 6d 70 72 65 73 73 69 6f 6e 55 72 6c 73 7c 7c 5b 5d 2c 4c 33 29 2c 65 6c 65 6d 65 6e 74 73 3a 4d 33 28 61 2e 65 6c 65 6d 65 6e 74 73 7c 7c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 29 7b 72 65 74 75 72 6e 20 55 6f 62 28 62 2c 64 2c 65 29 7d 29 7d 3b 0a 61 2e 74 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 26 26 28 63 2e 76 69 73 75 61 6c 45 6c 65 6d 65 6e 74 3d 67 2e 43 45 28 61 2e 74 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 29 29 3b 72 65 74 75 72 6e 20 63 7d 2c 57 6f 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 2e 74 56 2e 63 61 6c 6c 28 74 68 69 73 2c 61 29 Data Ascii: {var c={startMs:Math.floor(Number(a.startMs)),impressionUrls:M3(a.impressionUrls\|\|[],L3),elements:M3(a.elements\|\|[],function(d,e){return Uob(b,d,e)})};a.trackingParams&&(c.visualElement=g.CE(a.trackingParams));return c},Wob=function(a){g.tV.call(this,a)
2024-05-25 23:01:00 UTC	1390	IN	Data Raw: 2d 69 63 6f 6e 20 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 42 67 41 41 41 41 59 42 41 4d 41 41 41 41 53 57 53 44 4c 41 41 41 41 42 47 64 42 54 55 45 41 41 4c 47 50 43 2f 78 68 42 51 41 41 41 43 42 6a 53 46 4a 4e 41 41 42 36 4a 67 41 41 67 49 51 41 41 50 6f 41 41 41 43 41 36 41 41 41 64 54 41 41 41 4f 70 67 41 41 41 36 6d 41 41 41 46 33 43 63 75 6c 45 38 41 41 41 41 4a 31 42 4d 56 45 56 4d 61 58 47 7a 73 37 4f 7a 73 37 4f 7a 73 37 4f 7a 73 37 4f 7a 73 37 4f 7a 73 37 4f 7a 73 37 4f 7a 73 37 4f 7a 73 37 4f 7a 73 37 4f 7a 73 37 50 2f 2f 2f 39 52 66 7a 49 4b 41 41 41 41 43 33 52 53 54 6c 4d 41 76 44 65 79 4c 76 78 Data Ascii: -icon {background:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABgAAAAYBAMAAAASWSDLAAAABGdBTUEAALGPC/xhBQAAACBjSFJNAAB6JgAAgIQAAPoAAACA6AAAdTAAAOpgAAA6mAAAF3CculE8AAAAJ1BMVEVMaXGzs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7P///9RfzIKAAAAC3RSTlMAvDeyLvx
2024-05-25 23:01:00 UTC	1390	IN	Data Raw: 66 66 66 66 66 66 66 66 66 66 2c 7b 69 64 3a 22 79 74 70 2d 63 65 2d 69 6e 2d 65 6e 64 73 63 72 65 65 6e 22 2c 6e 61 6d 65 73 70 61 63 65 3a 22 63 72 65 61 74 6f 72 65 6e 64 73 63 72 65 65 6e 22 7d 29 3b 63 2e 70 75 73 68 28 64 29 3b 61 2e 70 6c 61 79 65 72 2e 55 28 29 2e 42 7c 7c 28 61 2e 42 3d 6e 65 77 20 67 2e 57 28 7b 49 3a 22 64 69 76 22 2c 53 3a 22 79 74 70 2d 63 65 2d 73 68 61 64 6f 77 22 7d 29 2c 67 2e 56 54 28 61 2e 70 6c 61 79 65 72 2c 61 2e 42 2e 65 6c 65 6d 65 6e 74 2c 34 29 2c 61 2e 44 3d 6e 65 77 20 67 2e 4c 46 28 61 2e 42 2c 32 30 30 29 29 3b 66 6f 72 28 64 3d 30 3b 64 3c 62 2e 65 6c 65 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 7b 65 3d 62 2e 65 6c 65 6d 65 6e 74 73 5b 64 5d 3b 76 61 72 20 66 3d 24 6f 62 28 61 2c 65 29 3b 69 66 28 Data Ascii: ffffffffff,{id:"ytp-ce-in-endscreen",namespace:"creatorendscreen"});c.push(d);a.player.U().B\|\|(a.B=new g.W({I:"div",S:"ytp-ce-shadow"}),g.VT(a.player,a.B.element,4),a.D=new g.LF(a.B,200));for(d=0;d<b.elements.length;++d){e=b.elements[d];var f=$ob(a,e);if(
2024-05-25 23:01:00 UTC	1390	IN	Data Raw: 63 6f 76 65 72 69 6e 67 2d 69 6d 61 67 65 22 2c 58 3a 50 33 28 62 29 7d 2c 7b 49 3a 22 64 69 76 22 2c 53 3a 22 79 74 70 2d 63 65 2d 63 6f 76 65 72 69 6e 67 2d 73 68 61 64 6f 77 2d 74 6f 70 22 7d 2c 7b 49 3a 22 61 22 2c 53 3a 22 79 74 70 2d 63 65 2d 63 6f 76 65 72 69 6e 67 2d 6f 76 65 72 6c 61 79 22 2c 58 3a 7b 68 72 65 66 3a 51 33 28 61 2c 62 2e 74 61 72 67 65 74 55 72 6c 29 2c 74 61 62 69 6e 64 65 78 3a 22 2d 31 22 7d 2c 56 3a 5b 7b 49 3a 22 64 69 76 22 2c 4b 61 3a 5b 22 79 74 70 2d 63 65 2d 70 6c 61 79 6c 69 73 74 2d 74 69 74 6c 65 22 2c 22 79 74 70 2d 77 65 62 6b 69 74 2d 65 6c 6c 69 70 73 69 73 22 5d 2c 58 3a 7b 64 69 72 3a 67 2e 4f 76 28 62 2e 74 69 74 6c 65 7c 7c 22 22 29 7d 2c 78 61 3a 62 2e 74 69 74 6c 65 7d 2c 7b 49 3a 22 64 69 76 22 2c 53 3a 22 Data Ascii: covering-image",X:P3(b)},{I:"div",S:"ytp-ce-covering-shadow-top"},{I:"a",S:"ytp-ce-covering-overlay",X:{href:Q3(a,b.targetUrl),tabindex:"-1"},V:[{I:"div",Ka:["ytp-ce-playlist-title","ytp-webkit-ellipsis"],X:{dir:g.Ov(b.title\|\|"")},xa:b.title},{I:"div",S:"
2024-05-25 23:01:00 UTC	1390	IN	Data Raw: 64 69 6e 67 2d 69 6d 61 67 65 22 2c 58 3a 50 33 28 62 29 7d 5d 7d 3b 63 3d 6e 65 77 20 67 2e 57 28 63 29 3b 76 61 72 20 64 3d 67 2e 6f 66 28 64 6f 63 75 6d 65 6e 74 2c 22 64 69 76 22 2c 22 79 74 70 2d 63 65 2d 63 68 61 6e 6e 65 6c 2d 73 75 62 73 63 72 69 62 65 22 2c 63 2e 65 6c 65 6d 65 6e 74 29 5b 30 5d 3b 69 66 28 62 2e 73 75 62 73 63 72 69 62 65 42 75 74 74 6f 6e 26 26 62 2e 63 68 61 6e 6e 65 6c 49 64 29 7b 67 2e 46 76 28 64 2c 22 79 74 70 2d 63 65 2d 73 75 62 73 63 72 69 62 65 2d 62 75 74 74 6f 6e 22 29 3b 69 66 28 61 2e 70 6c 61 79 65 72 2e 55 28 29 2e 42 29 7b 76 61 72 20 65 3d 6e 75 6c 6c 3b 76 61 72 20 66 3d 62 2e 73 65 73 73 69 6f 6e 44 61 74 61 2e 69 74 63 74 7d 65 6c 73 65 20 65 3d 22 65 6e 64 73 63 72 65 65 6e 22 2c 66 3d 6e 75 6c 6c 3b 65 3d Data Ascii: ding-image",X:P3(b)}]};c=new g.W(c);var d=g.of(document,"div","ytp-ce-channel-subscribe",c.element)[0];if(b.subscribeButton&&b.channelId){g.Fv(d,"ytp-ce-subscribe-button");if(a.player.U().B){var e=null;var f=b.sessionData.itct}else e="endscreen",f=null;e=
2024-05-25 23:01:00 UTC	1390	IN	Data Raw: 52 45 41 54 4f 52 5f 4d 45 52 43 48 41 4e 44 49 53 45 22 3a 63 3d 22 22 2c 62 2e 70 72 6f 64 75 63 74 50 72 69 63 65 26 26 28 63 3d 7b 49 3a 22 64 69 76 22 2c 53 3a 22 79 74 70 2d 63 65 2d 6d 65 72 63 68 61 6e 64 69 73 65 2d 70 72 69 63 65 2d 63 6f 6e 74 61 69 6e 65 72 22 2c 0a 56 3a 5b 7b 49 3a 22 64 69 76 22 2c 53 3a 22 79 74 70 2d 63 65 2d 6d 65 72 63 68 61 6e 64 69 73 65 2d 70 72 69 63 65 22 2c 78 61 3a 62 2e 70 72 6f 64 75 63 74 50 72 69 63 65 7d 5d 7d 2c 62 2e 61 64 64 69 74 69 6f 6e 61 6c 46 65 65 73 54 65 78 74 26 26 63 2e 56 2e 70 75 73 68 28 7b 49 3a 22 64 69 76 22 2c 53 3a 22 79 74 70 2d 63 65 2d 6d 65 72 63 68 61 6e 64 69 73 65 2d 61 64 64 69 74 69 6f 6e 61 6c 2d 66 65 65 73 22 2c 78 61 3a 62 2e 61 64 64 69 74 69 6f 6e 61 6c 46 65 65 73 54 65 Data Ascii: REATOR_MERCHANDISE":c="",b.productPrice&&(c={I:"div",S:"ytp-ce-merchandise-price-container",V:[{I:"div",S:"ytp-ce-merchandise-price",xa:b.productPrice}]},b.additionalFeesText&&c.V.push({I:"div",S:"ytp-ce-merchandise-additional-fees",xa:b.additionalFeesTe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.6	59594	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:01:00 UTC	1175	OUT	GET /generate_204?VhK7pQ HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:01:00 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Sat, 25 May 2024 23:01:00 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.6	59606	142.250.186.68	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:01:01 UTC	1475	OUT	GET /pagead/1p-user-list/962985656/?backend=innertube&cname=1&cver=2_20240524&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240524%3Bptype%3Df_view%3Btype%3Dview%3Butuid%3D17z6J2vL4GUL6a_A-lMtGQ%3Butvid%3DWlW4UAl3MyM&excl_rlsa=1&is_vtc=0&ptype=f_view&random=213147044&utuid=17z6J2vL4GUL6a_A-lMtGQ HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=VY7jTweO0i0BqZZap8-yanquJIOKNKbo1d3HBpUJHqRE_Z11FCWeFY_Mk8OO1cwT9htSPSISuOC5ieuLG7sFUO9hivPzNhZln-LO9ylJGerYBYWu3axFCBLlTnq6EplgiTmCStEQRnxurGbYic6ZGJv1GUeXv2954KWDAKN2DfU
2024-05-25 23:01:01 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Sat, 25 May 2024 23:01:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:01:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.6	59612	172.217.16.129	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:01:02 UTC	1092	OUT	GET /dk73p6C27bkfmV5NMayA05oaT5XMgc0K8QHs6Flf4XuhKNqxjANXo78d712mysuU5fk51JTxKxU=s176-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:01:02 UTC	531	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sun, 26 May 2024 23:01:02 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="channels4_profile.jpg" X-Content-Type-Options: nosniff Date: Sat, 25 May 2024 23:01:02 GMT Server: fife Content-Length: 6685 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:01:02 UTC	859	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 08 08 08 08 08 09 08 0a 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 08 08 08 08 08 0a 08 08 08 08 09 0a 09 08 08 0b 0d 0a 08 0e 08 08 0a 08 01 03 04 04 06 05 06 0a 06 06 0a 0d 0e 0a 0e 10 0d 0e 10 0d 0e 0d 0d 0f 0d 0d 0d 10 0d 0d 0d 0d 0e 0e 0f 0d 0d 0f 0d 0d 0d 0d 0d 0d 0a 0a 0d 0d 0e 0d 0d 10 0d 0d 0b 0d 0d 0d 0d 0d 0d 0f 0d 0a 0d ff c0 00 11 08 00 b0 00 b0 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 03 00 03 01 00 00 00 00 00 00 00 00 00 00 08 09 05 06 07 02 03 04 01 ff c4 00 45 10 00 02 02 01 02 04 04 03 04 06 05 0a 07 00 00 00 01 02 03 04 00 05 11 06 12 13 21 07 08 14 22 09 31 41 15 23 32 61 33 42 51 71 92 d1 16 24 Data Ascii: JFIFE!"1A#2a3BQq$
2024-05-25 23:01:02 UTC	1390	IN	Data Raw: 93 cf 42 4d 78 73 f1 6f d4 e2 e5 4d 4f 4c ad 75 37 00 cd 4d e4 a5 30 5e db 93 1b fa 98 65 6f 99 01 7d 32 fd 3b 7c c7 c2 d9 dc 99 2c ea b7 15 dd 60 5f f2 a4 d9 f2 e5 e7 1b 46 e2 7e a4 74 de 58 2e 42 9d 59 28 db 44 8e c0 8b 9b 90 cb 19 8e 49 62 9a 30 c5 43 18 a4 66 4e 78 f9 d6 3e a2 73 40 a8 a9 82 a4 8c e8 90 9d 0d 64 e4 3b 96 70 88 60 0c 01 80 30 06 00 c0 18 03 00 60 0c 03 42 f1 c3 c6 7a 7a 06 9b 63 53 b8 c7 a7 08 0b 1c 4b b7 56 cd 87 dc 43 5a 10 7e 6f 23 0e e4 fb 51 03 c8 c4 2c 6e 43 c8 fa 6b 55 cb 24 cc a2 bf 16 fc 55 b9 ad ea 16 75 2b b2 73 cf 61 f7 e5 07 ee e0 88 13 d2 ad 08 fd 58 a0 43 c8 a3 6d db dc ec 59 e4 91 9b 4a 14 3b 89 c7 53 d3 40 82 90 9b 2d 75 36 2e 2b f0 5b d0 e8 1a 66 ad 62 47 8e d6 af 72 7f 43 4c a8 01 b4 ba d1 91 2d d9 39 94 38 69 6c bc Data Ascii: BMxsoMOLu7M0^eo}2;\|,`_F~tX.BY(DIb0CfNx>s@d;p`0`BzzcSKVCZ~o#Q,nCkU$Uu+saXCmYJ;S@-u6.+[fbGrCL-98il
2024-05-25 23:01:02 UTC	1390	IN	Data Raw: 75 d5 bd 52 33 ac f1 76 4f bd a1 4d 56 21 64 77 8d d4 a4 91 b1 49 23 70 52 48 dd 49 0c 8e 8c 03 23 29 04 15 60 08 20 82 06 d9 a6 d7 b5 d9 29 e8 db 11 af fa 54 f0 cf b2 42 73 7c 37 3c dd fd 9b 61 38 7e f4 9f d4 2e 4c 7d 0c ce c0 2d 2b 92 9d fa 2d cc 40 58 2e 48 7b 6d fa 3b 4e 18 82 2c 4a f1 e7 c6 87 75 6f 26 5f 9f 9e a6 2d b2 cf 2f ec 6e 5a 96 b4 46 57 32 46 00 c0 18 03 00 60 0c 02 3e 79 e1 f3 18 38 73 43 9a 78 a4 09 a8 5c de 9e 9d f2 dd 26 75 3c f6 b6 65 65 22 a4 7b ca 03 a9 46 97 a3 19 db ab 8a 99 24 36 5e 72 26 49 bd 4a b3 f0 af c9 9f 13 6b 8c 25 83 4e 96 38 a4 62 cd 7b 51 2d 52 16 2c 39 cc bc d3 83 62 c0 72 77 ea 57 86 c7 33 13 b9 fc 44 5c db 35 a9 26 25 56 33 36 d6 d5 0a 1a 5d 66 32 af 99 93 bb cb 7f c3 0e a6 95 6a b6 a3 a9 5d fb 42 d5 69 16 78 6b 43 Data Ascii: uR3vOMV!dwI#pRHI#)` )TBs\|7<a8~.L}-+-@X.H{m;N,Juo&_-/nZFW2F`>y8sCx\&u<ee"{F$6^r&IJk%N8b{Q-R,9brwW3D\5&%V36]f2j]BixkC
2024-05-25 23:01:02 UTC	1390	IN	Data Raw: 0f d8 41 fd e3 e6 36 20 67 01 49 9e 70 bc a9 58 e1 7d 40 a0 e6 9b 4b b4 ee da 75 a3 b9 f6 8f 71 a9 60 fd 2c 57 07 62 7e 53 c6 16 55 d8 99 63 86 f4 18 b3 f0 ae 7d 7e 6b 79 e8 2c b6 94 7a 5d 5c fa d5 6a 70 3c b6 68 12 83 c8 17 99 cf e8 fe ae 21 b3 2f 26 95 a9 14 86 d9 76 da 3a d3 0e d5 ef 1d fd aa 23 62 62 9d b7 51 d0 90 bb 13 e9 e3 19 4a 3b 3f da 7a d5 72 32 ed b0 6f 25 f4 cd 33 f2 aa c0 93 3f 16 3f 03 7a b5 6a 71 0c 29 ef a8 52 8d f2 36 ef 5a 69 0f a4 99 8e fd fa 36 9c c1 b0 04 9f 56 a4 f6 8f b4 50 9d 75 de 78 76 ae 25 3b 1c 5b 8f 92 e4 bd 74 2b 1b 34 8f 40 30 06 00 c0 18 05 a3 7c 24 3c 32 30 e9 da 96 ae ea 43 5e b2 95 20 27 6d 8d 7a 4a 59 e4 4d bb fd e5 99 e4 89 b7 3f 3a a3 60 36 dc e5 c5 74 de be d5 eb 87 a1 e7 6d 8f bd 12 5b b0 ae 87 06 f8 a3 78 d4 6f Data Ascii: A6 gIpX}@Kuq`,Wb~SUc}~ky,z]\jp<h!/&v:#bbQJ;?zr2o%3??zjq)R6Zi6VPuxv%;[t+4@0\|$<20C^ 'mzJYM?:`6tm[xo
2024-05-25 23:01:02 UTC	1390	IN	Data Raw: b1 bb 47 24 72 2b 24 91 c8 8c 55 e3 91 18 06 47 46 05 59 18 06 56 04 10 08 39 a8 d7 23 92 68 7a 56 b9 1c 97 93 22 64 79 08 f1 5e 0b 51 5e e0 bd 4d bf c9 da dc 53 2d 29 19 89 35 af 3a 8f bb 8f 98 32 a7 58 a8 b1 09 f6 85 b9 08 d8 3b da 3b 51 8c cb ab 79 32 5e bf 3d 7c cc 7b 64 1b 8e da 37 d6 b8 d2 91 2f 8d f8 36 c6 9d 72 d5 0b 4b c9 66 9c f2 d6 99 76 60 a5 e2 62 bc e9 cc 14 98 e4 00 49 1b 90 39 e2 74 61 d9 86 5b 86 fb ed 9d 56 a6 a4 18 89 11 a8 e4 aa cc c2 e4 a4 c3 00 b1 1f 85 47 0b 41 52 ae bf c4 76 99 63 82 b2 7a 21 33 7c e1 86 bc 4b 7f 50 62 df 45 28 d4 8e df 53 19 fc b3 36 3b a6 ff 00 2f df 6f 63 06 dc fb cf bb ba bb 7b 10 73 c5 ef 12 65 d6 35 4b fa a4 db 89 2f 59 79 82 9d b7 8a 2e c9 5e 0e dd 8f 42 ba 45 00 3f 51 1e e7 72 49 37 21 32 eb 78 e6 6a d9 e1 Data Ascii: G$r+$UGFYV9#hzV"dy^Q^MS-)5:2X;;Qy2^=\|{d7/6rKfv`bI9ta[VGARvcz!3\|KPbE(S6;/oc{se5K/Yy.^BE?QrI7!2xj
2024-05-25 23:01:02 UTC	266	IN	Data Raw: b9 f4 ad 05 a6 3a 43 4f 0f d5 d2 b4 a4 2e eb 80 78 0a a6 97 4e bd 0a 50 2d 7a 95 63 11 c3 12 7d 06 e5 99 99 8f ba 49 24 72 d2 49 2b 92 f2 48 ee ec 49 62 4d 03 cf aa cf 15 36 0c e9 c1 80 30 06 00 c0 18 03 00 60 0c 01 80 30 06 00 c0 18 03 00 60 0c 01 80 30 0c 2f 17 70 4d 3d 42 13 5a ed 48 2e d7 62 18 c3 6a 18 e7 88 b2 f7 56 e4 95 59 43 29 f9 30 1b 8f a1 19 c5 49 81 c2 1c 13 4f 4f 84 56 a5 52 0a 55 d4 96 10 d5 86 38 22 0c dd d9 b9 22 55 52 cc 7e 6c 46 e7 ea 4e 11 25 90 33 59 d0 30 06 00 c0 18 03 00 60 0c 01 80 30 06 00 c0 18 03 00 60 0c 01 80 30 06 00 c0 18 03 00 60 0c 01 80 30 06 00 c0 18 03 00 60 0c 01 80 30 06 00 c0 18 03 00 60 0c 01 80 30 06 00 c0 18 03 00 60 0c 01 80 30 06 00 c0 18 03 00 60 0c 01 80 30 06 00 c0 18 03 00 60 0c 01 80 30 06 00 c0 18 03 00 Data Ascii: :CO.xNP-zc}I$rI+HIbM60`0`0/pM=BZH.bjVYC)0IOOVRU8""UR~lFN%3Y0`0`0`0`0`0`0`0`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.6	59619	142.250.185.68	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:01:02 UTC	899	OUT	GET /pagead/1p-user-list/962985656/?backend=innertube&cname=1&cver=2_20240524&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240524%3Bptype%3Df_view%3Btype%3Dview%3Butuid%3D17z6J2vL4GUL6a_A-lMtGQ%3Butvid%3DWlW4UAl3MyM&excl_rlsa=1&is_vtc=0&ptype=f_view&random=213147044&utuid=17z6J2vL4GUL6a_A-lMtGQ HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=VY7jTweO0i0BqZZap8-yanquJIOKNKbo1d3HBpUJHqRE_Z11FCWeFY_Mk8OO1cwT9htSPSISuOC5ieuLG7sFUO9hivPzNhZln-LO9ylJGerYBYWu3axFCBLlTnq6EplgiTmCStEQRnxurGbYic6ZGJv1GUeXv2954KWDAKN2DfU
2024-05-25 23:01:02 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Sat, 25 May 2024 23:01:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:01:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.6	59621	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:01:02 UTC	3073	OUT	POST /api/stats/qoe?fmt=396&afmt=251&cpn=O-o7NTyOH_Xb-gSb&el=profilepage&ns=yt&fexp=v1%2C23952866%2C30430%2C2736%2C18612%2C76094%2C54572%2C73455%2C230596%2C85201%2C19107%2C6789%2C9958%2C6271%2C133212%2C14625955%2C11684381%2C7111%2C21854%2C9932%2C4557%2C9954%2C1192%2C7913%2C18583%2C4147%2C2819%2C2%2C6689%2C2007%2C9072%2C5244%2C23908%2C2196%2C5115%2C3472%2C383%2C1026%2C19%2C2%2C1082%2C21%2C641%2C2099%2C1447%2C2744%2C101%2C2658%2C1033%2C2%2C3703%2C8%2C832%2C671%2C1317%2C1222%2C1477%2C492%2C1008%2C4076%2C39%2C9%2C46%2C830%2C1538%2C713%2C2326%2C259%2C2%2C8%2C761%2C596%2C508%2C244&cl=635991227&seq=3&docid=WlW4UAl3MyM&ei=m21SZtHfBLG26dsPlueskAw&event=streamingstats&plid=AAYZT0D0iRDyMquL&referrer=https%3A%2F%2Fwww.youtube.com%2Fc%2FCodashopOfficial&qclc=ChBPLW83TlR5T0hfWGItZ1NiEAM&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240524.00.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&bwe=11.137:176770,11.138:176770,11.151:176770,11.152:176770,20.006:298598&bat=11.137:1:1,11.138:1:1,11.151:1:1,11.152:1:1,20 [TRUNCATED] Host: www.youtube.com Connection: keep-alive Content-Length: 226 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOP X-YouTube-Page-Label: youtube.desktop.web_20240524_00_RC00 sec-ch-ua-arch: "x86" X-YouTube-Page-CL: 636796567 sec-ch-ua-platform-version: "10.0.0" X-YouTube-Utc-Offset: -240 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" X-YouTube-Time-Zone: America/New_York sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded sec-ch-ua-full-version: "117.0.5938.134" X-YouTube-Client-Name: 1 X-YouTube-Client-Version: 2.20240524.00.00 X-Goog-Visitor-Id: CgsxclQyM0t0SEJEUSiK28myBjIKCgJVUxIEGgAgQQ%3D%3D X-YouTube-Ad-Signals: dt=1716678041110&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1264&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=image Accept: / Origin: https://www.youtube.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:01:02 UTC	226	OUT	Data Raw: 73 65 73 73 69 6f 6e 5f 74 6f 6b 65 6e 3d 51 55 46 46 4c 55 68 71 62 6a 42 5a 65 46 4e 47 62 6b 6f 7a 57 6c 68 4f 4d 55 4e 72 59 6c 64 66 5a 6e 4a 6a 55 6b 4d 35 4e 33 6b 78 55 58 78 42 51 33 4a 74 63 30 74 74 61 56 46 78 62 6d 52 44 5a 30 31 55 5a 55 35 50 57 6e 6c 58 63 7a 41 77 56 31 46 66 52 32 56 50 4d 47 35 57 62 57 59 7a 4d 30 5a 59 64 46 68 6d 64 56 64 75 54 55 34 33 51 6e 52 4d 61 6e 64 70 64 58 64 69 51 6e 5a 73 51 7a 56 66 61 56 52 69 55 46 6c 66 58 7a 59 77 64 6d 70 49 55 6e 45 32 52 33 6c 78 61 57 74 7a 63 44 42 58 4d 45 31 5a 62 55 77 35 57 56 52 46 59 56 59 30 54 6a 64 30 63 56 52 4e 58 33 5a 6f 4e 32 4a 57 52 57 39 55 4f 55 52 5a 64 77 25 33 44 25 33 44 Data Ascii: session_token=QUFFLUhqbjBZeFNGbkozWlhOMUNrYldfZnJjUkM5N3kxUXxBQ3Jtc0ttaVFxbmRDZ01UZU5PWnlXczAwV1FfR2VPMG5WbWYzM0ZYdFhmdVduTU43QnRMandpdXdiQnZsQzVfaVRiUFlfXzYwdmpIUnE2R3lxaWtzcDBXME1ZbUw5WVRFYVY0Tjd0cVRNX3ZoN2JWRW9UOURZdw%3D%3D
2024-05-25 23:01:03 UTC	504	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Sat, 25 May 2024 23:01:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.6	59624	216.58.212.161	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:01:03 UTC	516	OUT	GET /dk73p6C27bkfmV5NMayA05oaT5XMgc0K8QHs6Flf4XuhKNqxjANXo78d712mysuU5fk51JTxKxU=s176-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-25 23:01:03 UTC	539	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="channels4_profile.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 6685 X-XSS-Protection: 0 Date: Sat, 25 May 2024 23:01:02 GMT Expires: Sun, 26 May 2024 23:01:02 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/jpeg Vary: Origin Age: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:01:03 UTC	851	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 08 08 08 08 08 09 08 0a 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 08 08 08 08 08 0a 08 08 08 08 09 0a 09 08 08 0b 0d 0a 08 0e 08 08 0a 08 01 03 04 04 06 05 06 0a 06 06 0a 0d 0e 0a 0e 10 0d 0e 10 0d 0e 0d 0d 0f 0d 0d 0d 10 0d 0d 0d 0d 0e 0e 0f 0d 0d 0f 0d 0d 0d 0d 0d 0d 0a 0a 0d 0d 0e 0d 0d 10 0d 0d 0b 0d 0d 0d 0d 0d 0d 0f 0d 0a 0d ff c0 00 11 08 00 b0 00 b0 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 03 00 03 01 00 00 00 00 00 00 00 00 00 00 08 09 05 06 07 02 03 04 01 ff c4 00 45 10 00 02 02 01 02 04 04 03 04 06 05 0a 07 00 00 00 01 02 03 04 00 05 11 06 12 13 21 07 08 14 22 09 31 41 15 23 32 61 33 42 51 71 92 d1 16 24 Data Ascii: JFIFE!"1A#2a3BQq$
2024-05-25 23:01:03 UTC	1390	IN	Data Raw: 53 48 30 23 24 db cb b6 93 cf 42 4d 78 73 f1 6f d4 e2 e5 4d 4f 4c ad 75 37 00 cd 4d e4 a5 30 5e db 93 1b fa 98 65 6f 99 01 7d 32 fd 3b 7c c7 c2 d9 dc 99 2c ea b7 15 dd 60 5f f2 a4 d9 f2 e5 e7 1b 46 e2 7e a4 74 de 58 2e 42 9d 59 28 db 44 8e c0 8b 9b 90 cb 19 8e 49 62 9a 30 c5 43 18 a4 66 4e 78 f9 d6 3e a2 73 40 a8 a9 82 a4 8c e8 90 9d 0d 64 e4 3b 96 70 88 60 0c 01 80 30 06 00 c0 18 03 00 60 0c 03 42 f1 c3 c6 7a 7a 06 9b 63 53 b8 c7 a7 08 0b 1c 4b b7 56 cd 87 dc 43 5a 10 7e 6f 23 0e e4 fb 51 03 c8 c4 2c 6e 43 c8 fa 6b 55 cb 24 cc a2 bf 16 fc 55 b9 ad ea 16 75 2b b2 73 cf 61 f7 e5 07 ee e0 88 13 d2 ad 08 fd 58 a0 43 c8 a3 6d db dc ec 59 e4 91 9b 4a 14 3b 89 c7 53 d3 40 82 90 9b 2d 75 36 2e 2b f0 5b d0 e8 1a 66 ad 62 47 8e d6 af 72 7f 43 4c a8 01 b4 ba d1 91 Data Ascii: SH0#$BMxsoMOLu7M0^eo}2;\|,`_F~tX.BY(DIb0CfNx>s@d;p`0`BzzcSKVCZ~o#Q,nCkU$Uu+saXCmYJ;S@-u6.+[fbGrCL
2024-05-25 23:01:03 UTC	1390	IN	Data Raw: da 58 55 01 1d 56 ca ec 75 d5 bd 52 33 ac f1 76 4f bd a1 4d 56 21 64 77 8d d4 a4 91 b1 49 23 70 52 48 dd 49 0c 8e 8c 03 23 29 04 15 60 08 20 82 06 d9 a6 d7 b5 d9 29 e8 db 11 af fa 54 f0 cf b2 42 73 7c 37 3c dd fd 9b 61 38 7e f4 9f d4 2e 4c 7d 0c ce c0 2d 2b 92 9d fa 2d cc 40 58 2e 48 7b 6d fa 3b 4e 18 82 2c 4a f1 e7 c6 87 75 6f 26 5f 9f 9e a6 2d b2 cf 2f ec 6e 5a 96 b4 46 57 32 46 00 c0 18 03 00 60 0c 02 3e 79 e1 f3 18 38 73 43 9a 78 a4 09 a8 5c de 9e 9d f2 dd 26 75 3c f6 b6 65 65 22 a4 7b ca 03 a9 46 97 a3 19 db ab 8a 99 24 36 5e 72 26 49 bd 4a b3 f0 af c9 9f 13 6b 8c 25 83 4e 96 38 a4 62 cd 7b 51 2d 52 16 2c 39 cc bc d3 83 62 c0 72 77 ea 57 86 c7 33 13 b9 fc 44 5c db 35 a9 26 25 56 33 36 d6 d5 0a 1a 5d 66 32 af 99 93 bb cb 7f c3 0e a6 95 6a b6 a3 a9 5d Data Ascii: XUVuR3vOMV!dwI#pRHI#)` )TBs\|7<a8~.L}-+-@X.H{m;N,Juo&_-/nZFW2F`>y8sCx\&u<ee"{F$6^r&IJk%N8b{Q-R,9brwW3D\5&%V36]f2j]
2024-05-25 23:01:03 UTC	1390	IN	Data Raw: 32 0e 64 92 29 14 ab a3 0f d8 41 fd e3 e6 36 20 67 01 49 9e 70 bc a9 58 e1 7d 40 a0 e6 9b 4b b4 ee da 75 a3 b9 f6 8f 71 a9 60 fd 2c 57 07 62 7e 53 c6 16 55 d8 99 63 86 f4 18 b3 f0 ae 7d 7e 6b 79 e8 2c b6 94 7a 5d 5c fa d5 6a 70 3c b6 68 12 83 c8 17 99 cf e8 fe ae 21 b3 2f 26 95 a9 14 86 d9 76 da 3a d3 0e d5 ef 1d fd aa 23 62 62 9d b7 51 d0 90 bb 13 e9 e3 19 4a 3b 3f da 7a d5 72 32 ed b0 6f 25 f4 cd 33 f2 aa c0 93 3f 16 3f 03 7a b5 6a 71 0c 29 ef a8 52 8d f2 36 ef 5a 69 0f a4 99 8e fd fa 36 9c c1 b0 04 9f 56 a4 f6 8f b4 50 9d 75 de 78 76 ae 25 3b 1c 5b 8f 92 e4 bd 74 2b 1b 34 8f 40 30 06 00 c0 18 05 a3 7c 24 3c 32 30 e9 da 96 ae ea 43 5e b2 95 20 27 6d 8d 7a 4a 59 e4 4d bb fd e5 99 e4 89 b7 3f 3a a3 60 36 dc e5 c5 74 de be d5 eb 87 a1 e7 6d 8f bd 12 5b b0 Data Ascii: 2d)A6 gIpX}@Kuq`,Wb~SUc}~ky,z]\jp<h!/&v:#bbQJ;?zr2o%3??zjq)R6Zi6VPuxv%;[t+4@0\|$<20C^ 'mzJYM?:`6tm[
2024-05-25 23:01:03 UTC	1390	IN	Data Raw: 17 69 3c 4e f1 48 8d 14 b1 bb 47 24 72 2b 24 91 c8 8c 55 e3 91 18 06 47 46 05 59 18 06 56 04 10 08 39 a8 d7 23 92 68 7a 56 b9 1c 97 93 22 64 79 08 f1 5e 0b 51 5e e0 bd 4d bf c9 da dc 53 2d 29 19 89 35 af 3a 8f bb 8f 98 32 a7 58 a8 b1 09 f6 85 b9 08 d8 3b da 3b 51 8c cb ab 79 32 5e bf 3d 7c cc 7b 64 1b 8e da 37 d6 b8 d2 91 2f 8d f8 36 c6 9d 72 d5 0b 4b c9 66 9c f2 d6 99 76 60 a5 e2 62 bc e9 cc 14 98 e4 00 49 1b 90 39 e2 74 61 d9 86 5b 86 fb ed 9d 56 a6 a4 18 89 11 a8 e4 aa cc c2 e4 a4 c3 00 b1 1f 85 47 0b 41 52 ae bf c4 76 99 63 82 b2 7a 21 33 7c e1 86 bc 4b 7f 50 62 df 45 28 d4 8e df 53 19 fc b3 36 3b a6 ff 00 2f df 6f 63 06 dc fb cf bb ba bb 7b 10 73 c5 ef 12 65 d6 35 4b fa a4 db 89 2f 59 79 82 9d b7 8a 2e c9 5e 0e dd 8f 42 ba 45 00 3f 51 1e e7 72 49 37 Data Ascii: i<NHG$r+$UGFYV9#hzV"dy^Q^MS-)5:2X;;Qy2^=\|{d7/6rKfv`bI9ta[VGARvcz!3\|KPbE(S6;/oc{se5K/Yy.^BE?QrI7
2024-05-25 23:01:03 UTC	274	IN	Data Raw: 84 32 c2 e3 11 a2 5d c1 b9 f4 ad 05 a6 3a 43 4f 0f d5 d2 b4 a4 2e eb 80 78 0a a6 97 4e bd 0a 50 2d 7a 95 63 11 c3 12 7d 06 e5 99 99 8f ba 49 24 72 d2 49 2b 92 f2 48 ee ec 49 62 4d 03 cf aa cf 15 36 0c e9 c1 80 30 06 00 c0 18 03 00 60 0c 01 80 30 06 00 c0 18 03 00 60 0c 01 80 30 0c 2f 17 70 4d 3d 42 13 5a ed 48 2e d7 62 18 c3 6a 18 e7 88 b2 f7 56 e4 95 59 43 29 f9 30 1b 8f a1 19 c5 49 81 c2 1c 13 4f 4f 84 56 a5 52 0a 55 d4 96 10 d5 86 38 22 0c dd d9 b9 22 55 52 cc 7e 6c 46 e7 ea 4e 11 25 90 33 59 d0 30 06 00 c0 18 03 00 60 0c 01 80 30 06 00 c0 18 03 00 60 0c 01 80 30 06 00 c0 18 03 00 60 0c 01 80 30 06 00 c0 18 03 00 60 0c 01 80 30 06 00 c0 18 03 00 60 0c 01 80 30 06 00 c0 18 03 00 60 0c 01 80 30 06 00 c0 18 03 00 60 0c 01 80 30 06 00 c0 18 03 00 60 0c 01 Data Ascii: 2]:CO.xNP-zc}I$rI+HIbM60`0`0/pM=BZH.bjVYC)0IOOVRU8""UR~lFN%3Y0`0`0`0`0`0`0`0`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.6	59626	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:01:03 UTC	1198	OUT	GET /s/desktop/aef0ced3/img/favicon_144x144.png HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:01:03 UTC	650	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 2783 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 24 May 2024 14:08:48 GMT Expires: Sat, 24 May 2025 14:08:48 GMT Cache-Control: public, max-age=31536000 Last-Modified: Fri, 24 May 2024 07:14:12 GMT Content-Type: image/png Age: 118335 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:01:03 UTC	740	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 90 00 00 00 90 08 06 00 00 00 e7 46 e2 b8 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 84 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 05 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 4a 01 1b 00 05 00 00 00 01 00 00 00 52 01 28 00 03 00 00 00 01 00 02 00 00 87 69 00 04 00 00 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 90 a0 03 00 04 00 00 00 01 00 00 00 90 00 00 00 00 cc 05 67 8b 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 Data Ascii: PNGIHDRFgAMAa cHRMz&u0`:pQ<eXIfMM*JR(iZHHgpHYs
2024-05-25 23:01:03 UTC	1390	IN	Data Raw: 88 80 08 88 80 08 88 80 08 88 80 08 88 80 08 88 80 08 88 80 08 88 80 08 88 80 08 88 80 08 88 80 08 88 80 08 88 80 08 88 80 08 ac 99 c0 d6 9a af b7 92 cb 9d 27 c9 00 0d 33 56 85 a6 ba 2a fb cb 96 a5 35 0d 4c 01 7b 5a 53 b7 b1 c5 6b 17 10 06 db e5 b4 98 da e0 5e 43 fe 7a 5e be 9d a7 56 c7 43 3f 5f 75 9c 9f b2 71 09 05 c5 68 21 b5 4c 9e da f1 57 1c 9b 9d 95 59 9a b5 81 81 b4 63 98 ae 2f f4 2a a0 dc 13 38 dc fe 1e 22 53 8a 61 80 c8 63 06 97 bd ea 65 95 04 52 34 9e 89 0a 29 f3 a7 88 67 88 9f 10 e9 05 4f 90 f6 16 d0 de f2 21 17 0c c5 71 0f f1 2e a2 43 54 b8 fa 04 28 a2 14 f1 08 f1 3d 44 c0 fc 52 61 29 01 e5 c2 f9 03 57 7c 8a 38 58 ea ca 3a e9 2a 11 18 e3 66 5e 43 0c 6f 16 bd a9 85 04 24 e1 2c 8a 77 e3 ec 27 b8 e3 67 10 c5 db ae 77 de 59 40 10 cf 1e 1a fd 17 d1 Data Ascii: '3V5L{ZSk^Cz^VC?_uqh!LWYc/8"SaceR4)gO!q.CT(=DRa)W\|8X:*f^Co$,w'gwY@
2024-05-25 23:01:03 UTC	653	IN	Data Raw: c1 8f 77 ff 1d a4 78 d8 aa 3d 85 31 9f f2 45 41 04 3a 10 38 31 1b 5f 40 a7 56 a8 54 04 5a 08 cc 67 2b 5f 40 69 cb 49 aa 16 01 23 f0 c9 32 12 90 91 50 da 95 00 17 d0 a9 19 fb 02 9a cf 6b 56 a9 54 04 6a 08 cc 3d 10 16 d3 df 02 a4 85 9d b6 64 f0 ad 44 39 11 b8 40 60 fe 08 cf 1a df 03 f1 38 e5 8b 82 08 34 10 98 da 23 3c 6d ca 02 9a bb a6 86 06 54 15 37 81 c2 52 a7 2c a0 71 dc 6c d4 fb 0e 04 de fb 36 12 90 4f 43 f9 36 02 5c ff d4 0b 08 73 5b 0a 83 31 a2 82 08 54 11 48 a1 91 b1 5f 51 f6 40 ac 7b eb 1b 28 2f 02 1e 81 b1 97 cf b2 10 54 31 c0 47 f1 31 1e bf 92 9d 5c 2f d6 e8 28 72 02 9c be 76 f3 59 6a 8e e2 82 07 82 c1 14 b5 87 73 0b 65 44 60 f6 59 b1 83 b2 78 08 e6 82 07 32 5a 90 1b fe f4 21 b9 6d c7 4a a3 26 f0 19 42 f9 a5 8a c0 05 0f e4 19 e1 ab 0a c9 c4 3b 56 Data Ascii: wx=1EA:81_@VTZg+_@iI#2PkVTj=dD9@`84#<mT7R,ql6OC6\s[1TH_Q@{(/T1G1\/(rvYjseD`Yx2Z!mJ&B;V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.6	59627	142.250.184.206	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:01:03 UTC	1196	OUT	GET /s/desktop/aef0ced3/img/favicon_32x32.png HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/c/CodashopOfficial Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=Ni32HAp5Ta0; VISITOR_INFO1_LIVE=1rT23KtHBDQ; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D; PREF=f7=4000&tz=America.New_York
2024-05-25 23:01:03 UTC	650	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 1555 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 24 May 2024 14:08:51 GMT Expires: Sat, 24 May 2025 14:08:51 GMT Cache-Control: public, max-age=31536000 Last-Modified: Fri, 24 May 2024 07:14:12 GMT Content-Type: image/png Age: 118332 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:01:03 UTC	740	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 Data Ascii: PNGIHDR szztEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01
2024-05-25 23:01:03 UTC	815	IN	Data Raw: 31 31 45 37 39 34 36 42 41 42 31 41 46 46 39 39 36 32 37 46 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 33 33 42 33 34 36 39 30 38 46 34 43 31 31 45 37 39 34 36 42 41 42 31 41 46 46 39 39 36 32 37 46 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e f2 d2 36 eb 00 00 02 81 49 44 41 54 78 da ec 97 4d 4f 13 71 10 c6 7f dd be 81 58 0d 42 3d 80 2f 48 1a d2 44 2e 86 0b 46 a3 09 89 5e 38 41 c2 c9 1b 9f 81 04 f8 0e 7c 02 c2 c1 03 5e 88 07 af 46 8c 89 c6 a8 21 d0 08 48 c0 06 1b 21 a2 49 95 60 51 a1 2d ed 38 bb dd e2 c6 0b ec b6 b6 07 99 64 d2 cd ee ce cc 93 ff ce 3c f3 d4 27 22 Data Ascii: 11E7946BAB1AFF99627F" stRef:documentID="xmp.did:33B346908F4C11E7946BAB1AFF99627F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>6IDATxMOqXB=/HD.F^8A\|^F!H!I`Q-8d<'"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.6	59630	216.58.206.46	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:01:04 UTC	507	OUT	GET /s/desktop/aef0ced3/img/favicon_144x144.png HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; PREF=f7=4000&tz=America.New_York
2024-05-25 23:01:04 UTC	650	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 2783 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 24 May 2024 14:09:38 GMT Expires: Sat, 24 May 2025 14:09:38 GMT Cache-Control: public, max-age=31536000 Last-Modified: Fri, 24 May 2024 07:14:12 GMT Content-Type: image/png Age: 118286 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:01:04 UTC	740	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 90 00 00 00 90 08 06 00 00 00 e7 46 e2 b8 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 84 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 05 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 4a 01 1b 00 05 00 00 00 01 00 00 00 52 01 28 00 03 00 00 00 01 00 02 00 00 87 69 00 04 00 00 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 90 a0 03 00 04 00 00 00 01 00 00 00 90 00 00 00 00 cc 05 67 8b 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 Data Ascii: PNGIHDRFgAMAa cHRMz&u0`:pQ<eXIfMM*JR(iZHHgpHYs
2024-05-25 23:01:04 UTC	1390	IN	Data Raw: 88 80 08 88 80 08 88 80 08 88 80 08 88 80 08 88 80 08 88 80 08 88 80 08 88 80 08 88 80 08 88 80 08 88 80 08 88 80 08 88 80 08 ac 99 c0 d6 9a af b7 92 cb 9d 27 c9 00 0d 33 56 85 a6 ba 2a fb cb 96 a5 35 0d 4c 01 7b 5a 53 b7 b1 c5 6b 17 10 06 db e5 b4 98 da e0 5e 43 fe 7a 5e be 9d a7 56 c7 43 3f 5f 75 9c 9f b2 71 09 05 c5 68 21 b5 4c 9e da f1 57 1c 9b 9d 95 59 9a b5 81 81 b4 63 98 ae 2f f4 2a a0 dc 13 38 dc fe 1e 22 53 8a 61 80 c8 63 06 97 bd ea 65 95 04 52 34 9e 89 0a 29 f3 a7 88 67 88 9f 10 e9 05 4f 90 f6 16 d0 de f2 21 17 0c c5 71 0f f1 2e a2 43 54 b8 fa 04 28 a2 14 f1 08 f1 3d 44 c0 fc 52 61 29 01 e5 c2 f9 03 57 7c 8a 38 58 ea ca 3a e9 2a 11 18 e3 66 5e 43 0c 6f 16 bd a9 85 04 24 e1 2c 8a 77 e3 ec 27 b8 e3 67 10 c5 db ae 77 de 59 40 10 cf 1e 1a fd 17 d1 Data Ascii: '3V5L{ZSk^Cz^VC?_uqh!LWYc/8"SaceR4)gO!q.CT(=DRa)W\|8X:*f^Co$,w'gwY@
2024-05-25 23:01:04 UTC	653	IN	Data Raw: c1 8f 77 ff 1d a4 78 d8 aa 3d 85 31 9f f2 45 41 04 3a 10 38 31 1b 5f 40 a7 56 a8 54 04 5a 08 cc 67 2b 5f 40 69 cb 49 aa 16 01 23 f0 c9 32 12 90 91 50 da 95 00 17 d0 a9 19 fb 02 9a cf 6b 56 a9 54 04 6a 08 cc 3d 10 16 d3 df 02 a4 85 9d b6 64 f0 ad 44 39 11 b8 40 60 fe 08 cf 1a df 03 f1 38 e5 8b 82 08 34 10 98 da 23 3c 6d ca 02 9a bb a6 86 06 54 15 37 81 c2 52 a7 2c a0 71 dc 6c d4 fb 0e 04 de fb 36 12 90 4f 43 f9 36 02 5c ff d4 0b 08 73 5b 0a 83 31 a2 82 08 54 11 48 a1 91 b1 5f 51 f6 40 ac 7b eb 1b 28 2f 02 1e 81 b1 97 cf b2 10 54 31 c0 47 f1 31 1e bf 92 9d 5c 2f d6 e8 28 72 02 9c be 76 f3 59 6a 8e e2 82 07 82 c1 14 b5 87 73 0b 65 44 60 f6 59 b1 83 b2 78 08 e6 82 07 32 5a 90 1b fe f4 21 b9 6d c7 4a a3 26 f0 19 42 f9 a5 8a c0 05 0f e4 19 e1 ab 0a c9 c4 3b 56 Data Ascii: wx=1EA:81_@VTZg+_@iI#2PkVTj=dD9@`84#<mT7R,ql6OC6\s[1TH_Q@{(/T1G1\/(rvYjseD`Yx2Z!mJ&B;V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.6	59629	216.58.206.46	443	3384	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-25 23:01:04 UTC	505	OUT	GET /s/desktop/aef0ced3/img/favicon_32x32.png HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlaHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; PREF=f7=4000&tz=America.New_York
2024-05-25 23:01:05 UTC	650	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 1555 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 24 May 2024 14:09:08 GMT Expires: Sat, 24 May 2025 14:09:08 GMT Cache-Control: public, max-age=31536000 Last-Modified: Fri, 24 May 2024 07:14:12 GMT Content-Type: image/png Age: 118316 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-25 23:01:05 UTC	740	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 Data Ascii: PNGIHDR szztEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01
2024-05-25 23:01:05 UTC	815	IN	Data Raw: 31 31 45 37 39 34 36 42 41 42 31 41 46 46 39 39 36 32 37 46 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 33 33 42 33 34 36 39 30 38 46 34 43 31 31 45 37 39 34 36 42 41 42 31 41 46 46 39 39 36 32 37 46 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e f2 d2 36 eb 00 00 02 81 49 44 41 54 78 da ec 97 4d 4f 13 71 10 c6 7f dd be 81 58 0d 42 3d 80 2f 48 1a d2 44 2e 86 0b 46 a3 09 89 5e 38 41 c2 c9 1b 9f 81 04 f8 0e 7c 02 c2 c1 03 5e 88 07 af 46 8c 89 c6 a8 21 d0 08 48 c0 06 1b 21 a2 49 95 60 51 a1 2d ed 38 bb dd e2 c6 0b ec b6 b6 07 99 64 d2 cd ee ce cc 93 ff ce 3c f3 d4 27 22 Data Ascii: 11E7946BAB1AFF99627F" stRef:documentID="xmp.did:33B346908F4C11E7946BAB1AFF99627F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>6IDATxMOqXB=/HD.F^8A\|^F!H!I`Q-8d<'"

Target ID:	0
Start time:	18:59:24
Start date:	25/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:59:27
Start date:	25/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=2056,i,777843259378740637,6708716307555218473,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:59:28
Start date:	25/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://newsklikdisini5bekbg0.3bsz4.xyz/"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	19:00:37
Start date:	25/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6668 --field-trial-handle=2056,i,777843259378740637,6708716307555218473,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	19:00:53
Start date:	25/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7092 --field-trial-handle=2056,i,777843259378740637,6708716307555218473,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://newsklikdisini5bekbg0.3bsz4.xyz/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 319

Chrome Cache Entry: 320

Chrome Cache Entry: 321

Chrome Cache Entry: 322

Chrome Cache Entry: 323

Chrome Cache Entry: 324

Chrome Cache Entry: 326

Chrome Cache Entry: 327

Chrome Cache Entry: 328

Chrome Cache Entry: 329

Chrome Cache Entry: 330

Chrome Cache Entry: 331

Chrome Cache Entry: 332

Chrome Cache Entry: 333

Chrome Cache Entry: 334

Chrome Cache Entry: 335

Chrome Cache Entry: 336

Chrome Cache Entry: 337

Chrome Cache Entry: 338

Chrome Cache Entry: 339

Chrome Cache Entry: 340

Chrome Cache Entry: 341

Chrome Cache Entry: 342

Chrome Cache Entry: 343

Chrome Cache Entry: 344

Chrome Cache Entry: 345

Chrome Cache Entry: 346

Windows Analysis Report
https://newsklikdisini5bekbg0.3bsz4.xyz/